, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) 14:45:17 executing program 1: perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000c, 0x40010, r0, 0x0) syz_io_uring_setup(0x3efc, &(0x7f0000000180)={0x0, 0x7aad, 0x10, 0x2, 0x2aa, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)=0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) write$binfmt_elf64(r3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"/2104], 0x82a) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x1, 0x1}, 0x9) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14:45:17 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 45) 14:45:17 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 56) 14:45:17 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 49) 14:45:17 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 47) 14:45:17 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) [ 930.969993] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 930.980733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.987165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.987710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.990717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.992043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.993356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.993907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.994725] FAULT_INJECTION: forcing a failure. [ 930.994725] name failslab, interval 1, probability 0, space 0, times 0 [ 930.997028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.998476] FAULT_INJECTION: forcing a failure. [ 930.998476] name failslab, interval 1, probability 0, space 0, times 0 [ 931.002495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.006111] CPU: 0 UID: 0 PID: 7849 Comm: syz-executor.2 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 931.006146] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 931.006160] Call Trace: [ 931.006168] [ 931.006178] dump_stack_lvl+0xfa/0x120 [ 931.006221] should_fail_ex+0x4d7/0x5e0 [ 931.006247] ? kobject_get_path+0xc8/0x200 [ 931.006288] ? kobject_get_path+0xc8/0x200 [ 931.006326] should_failslab+0xc2/0x120 [ 931.006356] __kmalloc_noprof+0xc4/0x710 [ 931.006395] ? __create_object+0x59/0x80 [ 931.006433] kobject_get_path+0xc8/0x200 [ 931.006472] ? kasan_save_track+0x14/0x30 [ 931.006506] kobject_uevent_env+0x260/0xfd0 [ 931.006538] ? kasan_quarantine_put+0x84/0x1e0 [ 931.006573] __kobject_del+0x27c/0x320 [ 931.006599] kobject_put+0x202/0x260 [ 931.006626] bus_remove_driver+0x15a/0x1e0 [ 931.006662] driver_unregister+0x77/0xb0 [ 931.006686] usb_gadget_register_driver_owner+0x20a/0x300 [ 931.006717] raw_ioctl+0x190d/0x2160 [ 931.006749] ? lock_release+0xc8/0x270 [ 931.006789] ? __pfx_raw_ioctl+0x10/0x10 [ 931.006824] ? selinux_file_ioctl+0xb9/0x280 [ 931.006851] ? __pfx_raw_ioctl+0x10/0x10 [ 931.006888] __x64_sys_ioctl+0x18f/0x210 [ 931.006938] do_syscall_64+0xbf/0x420 [ 931.006976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.007002] RIP: 0033:0x7f14c411b8d7 [ 931.007023] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 931.007046] RSP: 002b:00007f14c168f0b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 931.007070] RAX: ffffffffffffffda RBX: 00007f14c1690130 RCX: 00007f14c411b8d7 [ 931.007087] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 931.007102] RBP: 0000000000000005 R08: 000000000000ffff R09: 000000000000000b [ 931.007117] R10: 00007f14c168f180 R11: 0000000000000246 R12: 0000000000000000 [ 931.007132] R13: 0000000000000000 R14: 0000000020000d40 R15: 0000000000000000 [ 931.007170] [ 931.008479] CPU: 1 UID: 0 PID: 7850 Comm: syz-executor.6 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 931.008513] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 931.008528] Call Trace: [ 931.008536] [ 931.008545] dump_stack_lvl+0xfa/0x120 [ 931.008587] should_fail_ex+0x4d7/0x5e0 [ 931.008621] should_failslab+0xc2/0x120 [ 931.008664] __kmalloc_node_track_caller_noprof+0xc6/0x760 [ 931.008702] ? kasprintf+0xbe/0x100 [ 931.008737] kvasprintf+0xbd/0x160 [ 931.008762] ? __pfx_kvasprintf+0x10/0x10 [ 931.008805] kasprintf+0xbe/0x100 [ 931.008830] ? __pfx_kasprintf+0x10/0x10 [ 931.008853] ? lock_release+0xc8/0x270 [ 931.008890] ? up_write+0x265/0x4e0 [ 931.008940] module_remove_driver+0x138/0x260 [ 931.008977] bus_remove_driver+0x133/0x1e0 [ 931.009010] driver_unregister+0x77/0xb0 [ 931.009034] usb_gadget_register_driver_owner+0x20a/0x300 [ 931.009064] raw_ioctl+0x190d/0x2160 [ 931.009097] ? lock_release+0xc8/0x270 [ 931.009133] ? __pfx_raw_ioctl+0x10/0x10 [ 931.009165] ? selinux_file_ioctl+0xb9/0x280 [ 931.009191] ? __pfx_raw_ioctl+0x10/0x10 [ 931.009226] __x64_sys_ioctl+0x18f/0x210 [ 931.009266] do_syscall_64+0xbf/0x420 [ 931.009300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.009323] RIP: 0033:0x7fad25d348d7 [ 931.009343] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 931.009365] RSP: 002b:00007fad232a80b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 931.009387] RAX: ffffffffffffffda RBX: 00007fad232a9130 RCX: 00007fad25d348d7 [ 931.009402] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 931.009415] RBP: 0000000000000005 R08: 000000000000ffff R09: 000000000000000b [ 931.009428] R10: 00007fad232a8180 R11: 0000000000000246 R12: 0000000000000000 [ 931.009441] R13: 0000000000000000 R14: 0000000020000d40 R15: 0000000000000000 [ 931.009476] [ 931.011258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.027206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.035909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.128578] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:45:17 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) [ 931.262843] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:45:17 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) [ 931.352106] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:45:18 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) [ 931.467742] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:45:18 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) 14:45:18 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 50) 14:45:18 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 48) 14:45:18 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 46) 14:45:18 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 57) 14:45:18 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 53) 14:45:18 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 931.697633] FAULT_INJECTION: forcing a failure. [ 931.697633] name failslab, interval 1, probability 0, space 0, times 0 [ 931.700747] CPU: 0 UID: 0 PID: 7867 Comm: syz-executor.5 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 931.700780] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 931.700794] Call Trace: [ 931.700802] [ 931.700811] dump_stack_lvl+0xfa/0x120 [ 931.700854] should_fail_ex+0x4d7/0x5e0 [ 931.700889] ? skb_clone+0x191/0x400 [ 931.700920] should_failslab+0xc2/0x120 [ 931.700951] kmem_cache_alloc_noprof+0x69/0x630 [ 931.700985] skb_clone+0x191/0x400 [ 931.701013] netlink_broadcast_filtered+0xab1/0xe90 [ 931.701072] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 931.701127] netlink_broadcast+0x39/0x50 [ 931.701169] kobject_uevent_env+0xa88/0xfd0 [ 931.701200] ? driver_create_file+0x54/0x70 [ 931.701227] ? bus_add_driver+0x1d0/0x5c0 [ 931.701264] driver_register+0x2e3/0x4a0 [ 931.701289] usb_gadget_register_driver_owner+0x134/0x300 [ 931.701320] raw_ioctl+0x190d/0x2160 [ 931.701354] ? lock_release+0xc8/0x270 [ 931.701395] ? __pfx_raw_ioctl+0x10/0x10 [ 931.701430] ? selinux_file_ioctl+0xb9/0x280 [ 931.701458] ? __pfx_raw_ioctl+0x10/0x10 [ 931.701495] __x64_sys_ioctl+0x18f/0x210 [ 931.701538] do_syscall_64+0xbf/0x420 [ 931.701575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.701601] RIP: 0033:0x7f39799698d7 [ 931.701620] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 931.701643] RSP: 002b:00007f3976edd0b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 931.701666] RAX: ffffffffffffffda RBX: 00007f3976ede130 RCX: 00007f39799698d7 [ 931.701682] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 931.701697] RBP: 0000000000000005 R08: 000000000000ffff R09: 000000000000000b [ 931.701710] R10: 00007f3976edd180 R11: 0000000000000246 R12: 0000000000000000 [ 931.701725] R13: 0000000000000000 R14: 0000000020000d40 R15: 0000000000000000 [ 931.701762] [ 931.760776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.766326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.767087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.768311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.771797] sysfs: cannot create duplicate filename '/module/raw_gadget/drivers/gadget:raw-gadget.6' [ 931.771975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.776574] CPU: 1 UID: 0 PID: 7875 Comm: syz-executor.2 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 931.776608] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 931.776623] Call Trace: [ 931.776631] [ 931.776639] dump_stack_lvl+0xfa/0x120 [ 931.776698] sysfs_warn_dup+0x80/0xa0 [ 931.776734] sysfs_do_create_link_sd+0x124/0x140 [ 931.776772] sysfs_create_link+0x63/0xc0 [ 931.776807] module_add_driver+0x1d7/0x420 [ 931.776844] bus_add_driver+0x293/0x5c0 [ 931.776881] driver_register+0x162/0x4a0 [ 931.776907] usb_gadget_register_driver_owner+0x134/0x300 [ 931.776944] raw_ioctl+0x190d/0x2160 [ 931.776983] ? lock_release+0xc8/0x270 [ 931.777022] ? __pfx_raw_ioctl+0x10/0x10 [ 931.777055] ? selinux_file_ioctl+0xb9/0x280 [ 931.777082] ? __pfx_raw_ioctl+0x10/0x10 [ 931.777116] __x64_sys_ioctl+0x18f/0x210 [ 931.777157] do_syscall_64+0xbf/0x420 [ 931.777193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.777217] RIP: 0033:0x7f14c411b8d7 [ 931.777236] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 931.777258] RSP: 002b:00007f14c168f0b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 931.777281] RAX: ffffffffffffffda RBX: 00007f14c1690130 RCX: 00007f14c411b8d7 [ 931.777296] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 931.777310] RBP: 0000000000000005 R08: 000000000000ffff R09: 000000000000000b [ 931.777323] R10: 00007f14c168f180 R11: 0000000000000246 R12: 0000000000000000 [ 931.777337] R13: 0000000000000000 R14: 0000000020000d40 R15: 0000000000000000 [ 931.777372] [ 931.779709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.786789] bus_add_driver: failed to create module links for raw-gadget.6 [ 931.792680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.810200] UDC core: USB Raw Gadget: driver registration failed: -17 [ 931.811847] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 931.812873] misc raw-gadget: fail, usb_gadget_register_driver returned -17 [ 931.845098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.845271] FAULT_INJECTION: forcing a failure. [ 931.845271] name failslab, interval 1, probability 0, space 0, times 0 [ 931.847377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.855535] CPU: 1 UID: 0 PID: 7877 Comm: syz-executor.6 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 931.855570] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 931.855585] Call Trace: [ 931.855593] [ 931.855603] dump_stack_lvl+0xfa/0x120 [ 931.855650] should_fail_ex+0x4d7/0x5e0 [ 931.855685] ? kobject_uevent_env+0x23a/0xfd0 [ 931.855711] should_failslab+0xc2/0x120 [ 931.855741] __kmalloc_cache_noprof+0x6a/0x630 [ 931.855787] kobject_uevent_env+0x23a/0xfd0 [ 931.855814] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 931.855853] ? kasan_quarantine_put+0x84/0x1e0 [ 931.855892] __kobject_del+0x27c/0x320 [ 931.855930] kobject_put+0x202/0x260 [ 931.855957] bus_remove_driver+0x15a/0x1e0 [ 931.855994] driver_unregister+0x77/0xb0 [ 931.856019] usb_gadget_register_driver_owner+0x20a/0x300 [ 931.856051] raw_ioctl+0x190d/0x2160 [ 931.856092] ? lock_release+0xc8/0x270 [ 931.856131] ? __pfx_raw_ioctl+0x10/0x10 [ 931.856166] ? selinux_file_ioctl+0xb9/0x280 [ 931.856194] ? __pfx_raw_ioctl+0x10/0x10 [ 931.856231] __x64_sys_ioctl+0x18f/0x210 [ 931.856274] do_syscall_64+0xbf/0x420 [ 931.856313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.856339] RIP: 0033:0x7fad25d348d7 [ 931.856360] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 931.856383] RSP: 002b:00007fad232a80b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 931.856407] RAX: ffffffffffffffda RBX: 00007fad232a9130 RCX: 00007fad25d348d7 [ 931.856423] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 931.856438] RBP: 0000000000000005 R08: 000000000000ffff R09: 000000000000000b [ 931.856452] R10: 00007fad232a8180 R11: 0000000000000246 R12: 0000000000000000 [ 931.856467] R13: 0000000000000000 R14: 0000000020000d40 R15: 0000000000000000 [ 931.856503] 14:45:18 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) [ 931.947242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.990797] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:45:18 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) 14:45:18 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) [ 932.136376] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 932.209591] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:45:18 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) [ 932.321206] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:45:18 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 51) [ 932.482458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 932.486709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:45:32 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 47) 14:45:32 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:45:32 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 52) 14:45:32 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 54) 14:45:32 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 49) 14:45:32 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) 14:45:32 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) 14:45:32 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x480240, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4, 0x2, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x8, 0x400}, 0x4000, 0x1ff, 0x1, 0x0, 0x1f, 0x200, 0x9, 0x0, 0x40, 0x0, 0x9}, 0x0, 0xf, r0, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1) r2 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xff, 0x5, 0x2, 0xc1, 0x0, 0x3, 0x80000, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, @perf_config_ext={0xfa, 0xf2dd}, 0x40200, 0x2, 0x6, 0x7, 0x3f, 0x7, 0x4, 0x0, 0x5, 0x0, 0x1}, 0x0, 0x0, r1, 0x3) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f00000002c0)) close_range(r2, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5c7a, &(0x7f0000000180)={0x0, 0x8f8d, 0x0, 0x3, 0x204, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) epoll_create(0x9) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x6c, 0x0, 0xfd, 0x50, 0x0, 0x4314397a, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x4}, 0x8041, 0x7fff, 0x8c53, 0x2, 0x3ff, 0x2, 0x3, 0x0, 0x800, 0x0, 0x1}, 0x0, 0x6, r1, 0xc) [ 945.840460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.847975] FAULT_INJECTION: forcing a failure. [ 945.847975] name failslab, interval 1, probability 0, space 0, times 0 [ 945.850573] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 945.852046] CPU: 0 UID: 0 PID: 7896 Comm: syz-executor.6 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 945.852064] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 945.852072] Call Trace: [ 945.852077] [ 945.852082] dump_stack_lvl+0xfa/0x120 [ 945.852108] should_fail_ex+0x4d7/0x5e0 [ 945.852124] ? kobject_get_path+0xc8/0x200 [ 945.852146] ? kobject_get_path+0xc8/0x200 [ 945.852166] should_failslab+0xc2/0x120 [ 945.852184] __kmalloc_noprof+0xc4/0x710 [ 945.852205] ? __create_object+0x59/0x80 [ 945.852227] kobject_get_path+0xc8/0x200 [ 945.852247] ? kasan_save_track+0x14/0x30 [ 945.852269] kobject_uevent_env+0x260/0xfd0 [ 945.852286] ? kasan_quarantine_put+0x84/0x1e0 [ 945.852305] __kobject_del+0x27c/0x320 [ 945.852319] kobject_put+0x202/0x260 [ 945.852333] bus_remove_driver+0x15a/0x1e0 [ 945.852353] driver_unregister+0x77/0xb0 [ 945.852366] usb_gadget_register_driver_owner+0x20a/0x300 [ 945.852383] raw_ioctl+0x190d/0x2160 [ 945.852402] ? lock_release+0xc8/0x270 [ 945.852423] ? __pfx_raw_ioctl+0x10/0x10 [ 945.852442] ? selinux_file_ioctl+0xb9/0x280 [ 945.852458] ? __pfx_raw_ioctl+0x10/0x10 [ 945.852477] __x64_sys_ioctl+0x18f/0x210 [ 945.852501] do_syscall_64+0xbf/0x420 [ 945.852522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.852536] RIP: 0033:0x7fad25d348d7 [ 945.852547] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 945.852559] RSP: 002b:00007fad232a80b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 945.852572] RAX: ffffffffffffffda RBX: 00007fad232a9130 RCX: 00007fad25d348d7 [ 945.852581] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 945.852588] RBP: 0000000000000005 R08: 000000000000ffff R09: 000000000000000b [ 945.852596] R10: 00007fad232a8180 R11: 0000000000000246 R12: 0000000000000000 [ 945.852604] R13: 0000000000000000 R14: 0000000020000d40 R15: 0000000000000000 [ 945.852623] [ 945.852700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.871659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.894125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.895274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.896090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.897266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.910556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.916710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.923681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.925140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.927132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.946810] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:45:32 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) [ 946.078864] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:45:44 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r2 = syz_io_uring_setup(0x68fe, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x147, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 14:45:44 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 53) 14:45:44 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) 14:45:44 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 48) 14:45:44 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) 14:45:44 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 50) 14:45:44 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 55) 14:45:44 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 958.398845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 958.400792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.402658] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 958.407363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 958.414865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.416006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 958.417828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.437205] FAULT_INJECTION: forcing a failure. [ 958.437205] name failslab, interval 1, probability 0, space 0, times 0 [ 958.446844] CPU: 1 UID: 0 PID: 7930 Comm: syz-executor.5 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 958.446879] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 958.446893] Call Trace: [ 958.446902] [ 958.446919] dump_stack_lvl+0xfa/0x120 [ 958.446969] should_fail_ex+0x4d7/0x5e0 [ 958.447003] ? skb_clone+0x191/0x400 [ 958.447025] should_failslab+0xc2/0x120 [ 958.447055] kmem_cache_alloc_noprof+0x69/0x630 [ 958.447089] skb_clone+0x191/0x400 [ 958.447118] netlink_broadcast_filtered+0xab1/0xe90 [ 958.447179] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 958.447234] netlink_broadcast+0x39/0x50 [ 958.447276] kobject_uevent_env+0xa88/0xfd0 [ 958.447309] ? driver_create_file+0x54/0x70 [ 958.447336] ? bus_add_driver+0x1d0/0x5c0 [ 958.447374] driver_register+0x2e3/0x4a0 [ 958.447400] usb_gadget_register_driver_owner+0x134/0x300 [ 958.447432] raw_ioctl+0x190d/0x2160 [ 958.447465] ? lock_release+0xc8/0x270 [ 958.447506] ? __pfx_raw_ioctl+0x10/0x10 [ 958.447542] ? selinux_file_ioctl+0xb9/0x280 [ 958.447570] ? __pfx_raw_ioctl+0x10/0x10 [ 958.447608] __x64_sys_ioctl+0x18f/0x210 [ 958.447651] do_syscall_64+0xbf/0x420 [ 958.447689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.447714] RIP: 0033:0x7f39799698d7 [ 958.447734] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 958.447757] RSP: 002b:00007f3976edd0b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 958.447781] RAX: ffffffffffffffda RBX: 00007f3976ede130 RCX: 00007f39799698d7 [ 958.447798] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 958.447812] RBP: 0000000000000005 R08: 000000000000ffff R09: 000000000000000b [ 958.447826] R10: 00007f3976edd180 R11: 0000000000000246 R12: 0000000000000000 [ 958.447840] R13: 0000000000000000 R14: 0000000020000d40 R15: 0000000000000000 [ 958.447878] [ 958.485618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 958.491771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.493073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 958.495040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 958.501619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.506819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.535458] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:45:45 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) [ 958.708320] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:45:45 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) [ 958.809026] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:45:45 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) [ 958.925821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 958.937151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:45:45 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 56) 14:45:45 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) 14:45:45 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:45:45 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 54) 14:45:45 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) [ 959.045341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.051005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.068708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.079301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.088297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.092756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:45:45 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 49) 14:45:45 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 51) [ 959.134647] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:45:45 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs2/custom0\x00', 0x0, 0x0) close_range(0xffffffffffffffff, r1, 0x2) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getflags(r2, 0xb) r3 = getpid() perf_event_open(&(0x7f0000000640)={0x4, 0x80, 0x4, 0x3, 0xb3, 0x7f, 0x0, 0x9e, 0x80000, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x10000, 0x4, @perf_config_ext={0x80000001, 0x6}, 0x4, 0x1, 0x400, 0x6, 0x80000000, 0x82, 0x1ff, 0x0, 0x9, 0x0, 0xd}, r3, 0x10, r2, 0x1) perf_event_open(&(0x7f00000016c0)={0x1, 0x80, 0x1, 0x8, 0x1, 0x2, 0x0, 0x1, 0x2400, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x11, 0x0, @perf_bp={&(0x7f0000001680), 0x8}, 0xc480, 0xfffffffffffffff8, 0x7d, 0x9, 0x4541, 0x7, 0x6c9, 0x0, 0x1}, r3, 0xe, 0xffffffffffffffff, 0x9) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000100)=""/1, 0x1}, {&(0x7f0000000180)=""/165, 0xa5}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000000240)=""/177, 0xb1}, {&(0x7f0000001400)=""/242, 0xf2}, {&(0x7f0000000300)=""/17, 0x11}, {&(0x7f0000000340)=""/39, 0x27}, {&(0x7f0000001500)=""/218, 0xda}], 0x8) close_range(r0, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000001740), 0x181200, 0x0) [ 959.209851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.220192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.222345] FAULT_INJECTION: forcing a failure. [ 959.222345] name failslab, interval 1, probability 0, space 0, times 0 [ 959.228028] CPU: 0 UID: 0 PID: 7958 Comm: syz-executor.5 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 959.228057] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 959.228068] Call Trace: [ 959.228075] [ 959.228083] dump_stack_lvl+0xfa/0x120 [ 959.228119] should_fail_ex+0x4d7/0x5e0 [ 959.228146] ? skb_clone+0x191/0x400 [ 959.228165] should_failslab+0xc2/0x120 [ 959.228190] kmem_cache_alloc_noprof+0x69/0x630 [ 959.228218] skb_clone+0x191/0x400 [ 959.228240] netlink_broadcast_filtered+0xab1/0xe90 [ 959.228290] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 959.228334] netlink_broadcast+0x39/0x50 [ 959.228368] kobject_uevent_env+0xa88/0xfd0 [ 959.228394] ? driver_create_file+0x54/0x70 [ 959.228416] ? bus_add_driver+0x1d0/0x5c0 [ 959.228449] driver_register+0x2e3/0x4a0 [ 959.228469] usb_gadget_register_driver_owner+0x134/0x300 [ 959.228494] raw_ioctl+0x190d/0x2160 [ 959.228522] ? lock_release+0xc8/0x270 [ 959.228554] ? __pfx_raw_ioctl+0x10/0x10 [ 959.228582] ? selinux_file_ioctl+0xb9/0x280 [ 959.228605] ? __pfx_raw_ioctl+0x10/0x10 [ 959.228635] __x64_sys_ioctl+0x18f/0x210 [ 959.228670] do_syscall_64+0xbf/0x420 [ 959.228700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.228722] RIP: 0033:0x7f39799698d7 [ 959.228739] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 959.228758] RSP: 002b:00007f3976edd0b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 959.228778] RAX: ffffffffffffffda RBX: 00007f3976ede130 RCX: 00007f39799698d7 [ 959.228792] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 959.228804] RBP: 0000000000000005 R08: 000000000000ffff R09: 000000000000000b [ 959.228816] R10: 00007f3976edd180 R11: 0000000000000246 R12: 0000000000000000 [ 959.228828] R13: 0000000000000000 R14: 0000000020000d40 R15: 0000000000000000 [ 959.228870] 14:45:45 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) [ 959.273751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.294658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.315344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.317418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:45:45 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) 14:45:46 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) [ 959.424856] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:45:46 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) 14:45:46 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) [ 959.587750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 14:45:46 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 57) [ 959.595799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:45:46 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) [ 959.665814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.668433] FAULT_INJECTION: forcing a failure. [ 959.668433] name failslab, interval 1, probability 0, space 0, times 0 [ 959.670843] CPU: 0 UID: 0 PID: 7971 Comm: syz-executor.6 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 959.670863] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 959.670872] Call Trace: [ 959.670877] [ 959.670883] dump_stack_lvl+0xfa/0x120 [ 959.670917] should_fail_ex+0x4d7/0x5e0 [ 959.670936] ? kobject_get_path+0xc8/0x200 [ 959.670959] ? kobject_get_path+0xc8/0x200 [ 959.670979] should_failslab+0xc2/0x120 [ 959.670998] __kmalloc_noprof+0xc4/0x710 [ 959.671021] ? __create_object+0x59/0x80 [ 959.671044] kobject_get_path+0xc8/0x200 [ 959.671065] ? kasan_save_track+0x14/0x30 [ 959.671086] kobject_uevent_env+0x260/0xfd0 [ 959.671104] ? kasan_quarantine_put+0x84/0x1e0 [ 959.671124] __kobject_del+0x27c/0x320 [ 959.671139] kobject_put+0x202/0x260 [ 959.671154] bus_remove_driver+0x15a/0x1e0 [ 959.671176] driver_unregister+0x77/0xb0 [ 959.671190] usb_gadget_register_driver_owner+0x20a/0x300 [ 959.671208] raw_ioctl+0x190d/0x2160 [ 959.671232] ? lock_release+0xc8/0x270 [ 959.671255] ? __pfx_raw_ioctl+0x10/0x10 [ 959.671275] ? selinux_file_ioctl+0xb9/0x280 [ 959.671292] ? __pfx_raw_ioctl+0x10/0x10 [ 959.671312] __x64_sys_ioctl+0x18f/0x210 [ 959.671337] do_syscall_64+0xbf/0x420 [ 959.671359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.671374] RIP: 0033:0x7fad25d348d7 [ 959.671385] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 959.671398] RSP: 002b:00007fad232a80b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 959.671412] RAX: ffffffffffffffda RBX: 00007fad232a9130 RCX: 00007fad25d348d7 [ 959.671421] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 959.671430] RBP: 0000000000000005 R08: 000000000000ffff R09: 000000000000000b [ 959.671438] R10: 00007fad232a8180 R11: 0000000000000246 R12: 0000000000000000 [ 959.671447] R13: 0000000000000000 R14: 0000000020000d40 R15: 0000000000000000 [ 959.671468] [ 959.694461] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 959.702242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.833224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.835886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:45:57 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:45:57 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 55) 14:45:57 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 58) 14:45:57 executing program 1: ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000240)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10008801) mmap$perf(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x2000008, 0x4000010, r1, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xd2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x10, 0x7, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x4, 0x1, 0x1, {0x22, 0x66a}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7f, 0x8, 0x2e}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x7, 0x3f, 0x2, 0x20, 0xe}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}}) 14:45:57 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) 14:45:57 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 50) 14:45:57 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 52) 14:45:57 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) [ 971.272905] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 971.276622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 971.280076] FAULT_INJECTION: forcing a failure. [ 971.280076] name failslab, interval 1, probability 0, space 0, times 0 [ 971.284859] CPU: 0 UID: 0 PID: 7984 Comm: syz-executor.5 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 971.284877] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 971.284885] Call Trace: [ 971.284890] [ 971.284895] dump_stack_lvl+0xfa/0x120 [ 971.284927] should_fail_ex+0x4d7/0x5e0 [ 971.284954] should_failslab+0xc2/0x120 [ 971.284972] __kmalloc_node_track_caller_noprof+0xc6/0x760 [ 971.284994] ? kasprintf+0xbe/0x100 [ 971.285013] kvasprintf+0xbd/0x160 [ 971.285027] ? __pfx_kvasprintf+0x10/0x10 [ 971.285050] kasprintf+0xbe/0x100 [ 971.285064] ? __pfx_kasprintf+0x10/0x10 [ 971.285077] ? lock_release+0xc8/0x270 [ 971.285098] ? up_write+0x265/0x4e0 [ 971.285123] module_remove_driver+0x138/0x260 [ 971.285143] bus_remove_driver+0x133/0x1e0 [ 971.285162] driver_unregister+0x77/0xb0 [ 971.285175] usb_gadget_register_driver_owner+0x20a/0x300 [ 971.285192] raw_ioctl+0x190d/0x2160 [ 971.285214] ? lock_release+0xc8/0x270 [ 971.285234] ? __pfx_raw_ioctl+0x10/0x10 [ 971.285252] ? selinux_file_ioctl+0xb9/0x280 [ 971.285266] ? __pfx_raw_ioctl+0x10/0x10 [ 971.285285] __x64_sys_ioctl+0x18f/0x210 [ 971.285307] do_syscall_64+0xbf/0x420 [ 971.285326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.285340] RIP: 0033:0x7f39799698d7 [ 971.285351] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 971.285363] RSP: 002b:00007f3976edd0b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 971.285375] RAX: ffffffffffffffda RBX: 00007f3976ede130 RCX: 00007f39799698d7 [ 971.285384] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 971.285391] RBP: 0000000000000005 R08: 000000000000ffff R09: 000000000000000b [ 971.285399] R10: 00007f3976edd180 R11: 0000000000000246 R12: 0000000000000000 [ 971.285406] R13: 0000000000000000 R14: 0000000020000d40 R15: 0000000000000000 [ 971.285425] [ 971.300114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 971.300837] FAULT_INJECTION: forcing a failure. [ 971.300837] name failslab, interval 1, probability 0, space 0, times 0 [ 971.304637] CPU: 0 UID: 0 PID: 7986 Comm: syz-executor.7 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 971.304655] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 971.304662] Call Trace: [ 971.304666] [ 971.304671] dump_stack_lvl+0xfa/0x120 [ 971.304689] should_fail_ex+0x4d7/0x5e0 [ 971.304705] ? kobject_uevent_env+0x23a/0xfd0 [ 971.304718] should_failslab+0xc2/0x120 [ 971.304733] __kmalloc_cache_noprof+0x6a/0x630 [ 971.304755] kobject_uevent_env+0x23a/0xfd0 [ 971.304769] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 971.304787] ? kasan_quarantine_put+0x84/0x1e0 [ 971.304805] __kobject_del+0x27c/0x320 [ 971.304819] kobject_put+0x202/0x260 [ 971.304833] bus_remove_driver+0x15a/0x1e0 [ 971.304851] driver_unregister+0x77/0xb0 [ 971.304864] usb_gadget_register_driver_owner+0x20a/0x300 [ 971.304879] raw_ioctl+0x190d/0x2160 [ 971.304896] ? lock_release+0xc8/0x270 [ 971.304920] ? __pfx_raw_ioctl+0x10/0x10 [ 971.304944] ? selinux_file_ioctl+0xb9/0x280 [ 971.304958] ? __pfx_raw_ioctl+0x10/0x10 [ 971.304976] __x64_sys_ioctl+0x18f/0x210 [ 971.304997] do_syscall_64+0xbf/0x420 [ 971.305016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.305028] RIP: 0033:0x7f274ba4b8d7 [ 971.305038] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 971.305050] RSP: 002b:00007f2748fbf0b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 971.305061] RAX: ffffffffffffffda RBX: 00007f2748fc0130 RCX: 00007f274ba4b8d7 [ 971.305070] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 971.305077] RBP: 0000000000000005 R08: 000000000000ffff R09: 000000000000000b [ 971.305085] R10: 00007f2748fbf180 R11: 0000000000000246 R12: 0000000000000000 [ 971.305092] R13: 0000000000000000 R14: 0000000020000d40 R15: 0000000000000000 [ 971.305112] [ 971.324846] FAULT_INJECTION: forcing a failure. [ 971.324846] name failslab, interval 1, probability 0, space 0, times 0 [ 971.333242] CPU: 1 UID: 0 PID: 7990 Comm: syz-executor.0 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 971.333277] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 971.333291] Call Trace: [ 971.333299] [ 971.333310] dump_stack_lvl+0xfa/0x120 [ 971.333353] should_fail_ex+0x4d7/0x5e0 [ 971.333386] ? skb_clone+0x191/0x400 [ 971.333409] should_failslab+0xc2/0x120 [ 971.333438] kmem_cache_alloc_noprof+0x69/0x630 [ 971.333471] skb_clone+0x191/0x400 [ 971.333498] netlink_broadcast_filtered+0xab1/0xe90 [ 971.333556] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 971.333608] netlink_broadcast+0x39/0x50 [ 971.333648] kobject_uevent_env+0xa88/0xfd0 [ 971.333678] ? driver_create_file+0x54/0x70 [ 971.333704] ? bus_add_driver+0x1d0/0x5c0 [ 971.333739] driver_register+0x2e3/0x4a0 [ 971.333765] usb_gadget_register_driver_owner+0x134/0x300 [ 971.333795] raw_ioctl+0x190d/0x2160 [ 971.333827] ? lock_release+0xc8/0x270 [ 971.333866] ? __pfx_raw_ioctl+0x10/0x10 [ 971.333899] ? selinux_file_ioctl+0xb9/0x280 [ 971.333935] ? __pfx_raw_ioctl+0x10/0x10 [ 971.333970] __x64_sys_ioctl+0x18f/0x210 [ 971.334012] do_syscall_64+0xbf/0x420 [ 971.334047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.334071] RIP: 0033:0x7f56d25188d7 [ 971.334091] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 971.334113] RSP: 002b:00007f56cfa8c0b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 971.334135] RAX: ffffffffffffffda RBX: 00007f56cfa8d130 RCX: 00007f56d25188d7 [ 971.334151] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 971.334165] RBP: 0000000000000005 R08: 000000000000ffff R09: 000000000000000b [ 971.334179] R10: 00007f56cfa8c180 R11: 0000000000000246 R12: 0000000000000000 [ 971.334193] R13: 0000000000000000 R14: 0000000020000d40 R15: 0000000000000000 [ 971.334230] [ 971.346049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 971.364451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 971.365986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 971.372756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 971.373013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 971.376196] FAULT_INJECTION: forcing a failure. [ 971.376196] name failslab, interval 1, probability 0, space 0, times 0 [ 971.376991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 971.377145] CPU: 0 UID: 0 PID: 7988 Comm: syz-executor.6 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 971.377163] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 971.377173] Call Trace: [ 971.377177] [ 971.377183] dump_stack_lvl+0xfa/0x120 [ 971.377206] should_fail_ex+0x4d7/0x5e0 [ 971.377225] ? skb_clone+0x191/0x400 [ 971.377240] should_failslab+0xc2/0x120 [ 971.377258] kmem_cache_alloc_noprof+0x69/0x630 [ 971.377276] skb_clone+0x191/0x400 [ 971.377291] netlink_broadcast_filtered+0xab1/0xe90 [ 971.377327] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 971.377357] netlink_broadcast+0x39/0x50 [ 971.377380] kobject_uevent_env+0xa88/0xfd0 [ 971.377398] ? kasan_quarantine_put+0x84/0x1e0 [ 971.377418] __kobject_del+0x27c/0x320 [ 971.377432] kobject_put+0x202/0x260 [ 971.377447] bus_remove_driver+0x15a/0x1e0 [ 971.377466] driver_unregister+0x77/0xb0 [ 971.377479] usb_gadget_register_driver_owner+0x20a/0x300 [ 971.377495] raw_ioctl+0x190d/0x2160 [ 971.377515] ? lock_release+0xc8/0x270 [ 971.377536] ? __pfx_raw_ioctl+0x10/0x10 [ 971.377556] ? selinux_file_ioctl+0xb9/0x280 [ 971.377571] ? __pfx_raw_ioctl+0x10/0x10 [ 971.377591] __x64_sys_ioctl+0x18f/0x210 [ 971.377615] do_syscall_64+0xbf/0x420 [ 971.377635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.377649] RIP: 0033:0x7fad25d348d7 [ 971.377660] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 971.377673] RSP: 002b:00007fad232a80b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 971.377685] RAX: ffffffffffffffda RBX: 00007fad232a9130 RCX: 00007fad25d348d7 [ 971.377694] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 971.377702] RBP: 0000000000000005 R08: 000000000000ffff R09: 000000000000000b [ 971.377710] R10: 00007fad232a8180 R11: 0000000000000246 R12: 0000000000000000 [ 971.377719] R13: 0000000000000000 R14: 0000000020000d40 R15: 0000000000000000 [ 971.377739] [ 971.377897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 971.378845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 971.441507] sysfs: cannot create duplicate filename '/module/raw_gadget/drivers/gadget:raw-gadget.3' [ 971.448908] CPU: 1 UID: 0 PID: 7991 Comm: syz-executor.1 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 971.448958] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 971.448972] Call Trace: [ 971.448981] [ 971.448990] dump_stack_lvl+0xfa/0x120 [ 971.449034] sysfs_warn_dup+0x80/0xa0 [ 971.449070] sysfs_do_create_link_sd+0x124/0x140 [ 971.449107] sysfs_create_link+0x63/0xc0 [ 971.449143] module_add_driver+0x1d7/0x420 [ 971.449180] bus_add_driver+0x293/0x5c0 [ 971.449217] driver_register+0x162/0x4a0 [ 971.449242] usb_gadget_register_driver_owner+0x134/0x300 [ 971.449271] raw_ioctl+0x190d/0x2160 [ 971.449303] ? lock_release+0xc8/0x270 [ 971.449341] ? __pfx_raw_ioctl+0x10/0x10 [ 971.449374] ? selinux_file_ioctl+0xb9/0x280 [ 971.449401] ? __pfx_raw_ioctl+0x10/0x10 [ 971.449436] __x64_sys_ioctl+0x18f/0x210 [ 971.449476] do_syscall_64+0xbf/0x420 [ 971.449511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.449535] RIP: 0033:0x7fc3fedc98d7 [ 971.449555] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 971.449576] RSP: 002b:00007fc3fc33d0b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 971.449599] RAX: ffffffffffffffda RBX: 00007fc3fc33e130 RCX: 00007fc3fedc98d7 [ 971.449615] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 971.449628] RBP: 0000000000000004 R08: 000000000000ffff R09: 000000000000000b [ 971.449642] R10: 00007fc3fc33d180 R11: 0000000000000246 R12: 0000000000000000 [ 971.449656] R13: 0000000020000200 R14: 0000000020000100 R15: 0000000000000868 [ 971.449691] [ 971.487294] bus_add_driver: failed to create module links for raw-gadget.3 [ 971.493166] UDC core: USB Raw Gadget: driver registration failed: -17 [ 971.494156] misc raw-gadget: fail, usb_gadget_register_driver returned -17 14:46:09 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x5, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:46:09 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 14:46:09 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 53) 14:46:09 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 56) 14:46:09 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 51) 14:46:09 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 59) 14:46:09 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0880, 0x21) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2f2, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002800)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@gid={'gid', 0x3d, r3}}]}) mount$9p_xen(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0xc488, &(0x7f0000000240)={'trans=xen,', {[{@version_9p2000}, {@dfltgid={'dfltgid', 0x3d, r3}}, {@mmap}, {@fscache}, {@privport}, {@aname={'aname', 0x3d, '-{}+%.'}}], [{@subj_role}, {@smackfsdef={'smackfsdef', 0x3d, '\xf4&.'}}, {@appraise_type}, {@appraise_type}, {@smackfsdef={'smackfsdef', 0x3d, '*\xd0\\{!}@^^q'}}, {@audit}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@dont_hash}]}}) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) write(r1, &(0x7f0000000400)="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", 0x1000) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getflags(r4, 0xb) r5 = getpid() perf_event_open(&(0x7f0000000640)={0x4, 0x80, 0x4, 0x3, 0xb3, 0x7f, 0x0, 0x9e, 0x80000, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x10000, 0x4, @perf_config_ext={0x80000001, 0x6}, 0x4, 0x1, 0x400, 0x6, 0x80000000, 0x82, 0x1ff, 0x0, 0x9, 0x0, 0xd}, r5, 0x10, r4, 0x1) perf_event_open(&(0x7f0000001400)={0x3, 0x80, 0xff, 0x4, 0x6, 0x1, 0x0, 0x80000000, 0x48400, 0xe, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000340), 0x6}, 0x8800, 0x19, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x20, 0x0, 0xffff}, r5, 0xd, 0xffffffffffffffff, 0x3) close_range(r1, 0xffffffffffffffff, 0x0) 14:46:09 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) [ 982.817523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 982.827815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 982.828433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 982.829474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 982.843640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 982.844850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 982.859824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 982.860875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:46:09 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) [ 982.876358] tmpfs: Invalid gid '0x00000000ffffffff' [ 982.878764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 982.887101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 982.887254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 982.891366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:46:09 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) 14:46:09 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)}, 0x0) 14:46:09 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) 14:46:09 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)}, 0x0) 14:46:09 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) 14:46:20 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x6, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:46:20 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)}, 0x0) 14:46:20 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) 14:46:20 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 60) 14:46:20 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 54) 14:46:20 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 52) 14:46:20 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 57) [ 993.906792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.909310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:46:20 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x7, 0x1, 0x2, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x0, 0x1, 0x9f}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x53, 0x6, 0x1, 0x40, 0x7}, 0x84, &(0x7f00000001c0)={0x5, 0xf, 0x84, 0x3, [@wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x8, 0x1, 0xff97, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x0, 0x4, 0x9}, @generic={0x6d, 0x10, 0x1, "4755ea30ea10e13e4a0320cc56fe2819daef934c29bc8142d2b0fb8aed9fc379c560b15bd6e9c41e01f52ee93bf5928234182505dea3aea7dbe421c8703a09ad7ad42035556011eaf71c1781ba14abe6ccda79ed1431587f18f30cf3bc96bcc455dbc2040b4cadc87fa8"}]}, 0x8, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x411}}, {0xf1, &(0x7f0000000400)=@string={0xf1, 0x3, "d015c9087cc7f4ababecb4ca96a97a97e9ea578389916958567345a419e343c285dd6af3486d9f6bb39b09f6c0278c9851fbcba347f8e5f30081bc64a1c8cdad2d4fa186dbd01657ed084b703fc5225ce63ccc72df58072cdb34cd2832c3222cf031f0a76e8c3ad1c04cf28dc1a48dd6b78650a7aa30e248aaa1f35484e2eec244cdbaabdb976c996663e4c55d2c3d359d7419bf457afb0336cb556fb57db8a7043aa0a1fe8b7e1ce5e15c88c0d071ec539cb70ca82d5e9d25720b8dec781a17252618df021daa523ea9e68ebeb27c23508516207317d5f020396f2cf5846658b58b3038947e8246ba6f81f18c2c97"}}, {0x11, &(0x7f0000000300)=@string={0x11, 0x3, "e18d0f1b050aa9c2989756b653ef70"}}, {0xae, &(0x7f0000000500)=@string={0xae, 0x3, "bbf504b9f8cf2d35d28673a3bbe8ae94bbb0888242fe7ab7cd9cc69c99bb5d94bf3d809fec39cfc0a8b745575d0fe57cb8872e916142675846ef232f9d7169008fdf21399a9e7fa1eac928034dd5667133c49a819e9cb513ee75da52488401b4efed338600450aabe65755e119574b905dbc984745761279b19ce92f3490e11d986e1d5f5942bf7a1793ff6962d98b9530ef3caf52b3484c381c35b904196562a2e3fe84d17042597870dc9f"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x41c}}]}) close_range(r0, 0xffffffffffffffff, 0x0) 14:46:20 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{0x0, 0x28}], 0x1}, 0x0) [ 993.951095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.958154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.963757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.964741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.977684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.979969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.982446] FAULT_INJECTION: forcing a failure. [ 993.982446] name failslab, interval 1, probability 0, space 0, times 0 [ 993.984220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.985643] FAULT_INJECTION: forcing a failure. [ 993.985643] name failslab, interval 1, probability 0, space 0, times 0 14:46:20 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) [ 993.995608] CPU: 1 UID: 0 PID: 8045 Comm: syz-executor.0 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 993.995650] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 993.995664] Call Trace: [ 993.995673] [ 993.995683] dump_stack_lvl+0xfa/0x120 [ 993.995726] should_fail_ex+0x4d7/0x5e0 [ 993.995761] should_failslab+0xc2/0x120 [ 993.995791] __kmalloc_node_track_caller_noprof+0xc6/0x760 [ 993.995831] ? kasprintf+0xbe/0x100 [ 993.995868] kvasprintf+0xbd/0x160 [ 993.995896] ? __pfx_kvasprintf+0x10/0x10 [ 993.995942] kasprintf+0xbe/0x100 [ 993.995969] ? __pfx_kasprintf+0x10/0x10 [ 993.995995] ? lock_release+0xc8/0x270 [ 993.996034] ? up_write+0x265/0x4e0 [ 993.996082] module_remove_driver+0x138/0x260 [ 993.996120] bus_remove_driver+0x133/0x1e0 [ 993.996156] driver_unregister+0x77/0xb0 [ 993.996181] usb_gadget_register_driver_owner+0x20a/0x300 [ 993.996213] raw_ioctl+0x190d/0x2160 [ 993.996247] ? lock_release+0xc8/0x270 [ 993.996286] ? __pfx_raw_ioctl+0x10/0x10 [ 993.996321] ? selinux_file_ioctl+0xb9/0x280 [ 993.996350] ? __pfx_raw_ioctl+0x10/0x10 [ 993.996388] __x64_sys_ioctl+0x18f/0x210 [ 993.996430] do_syscall_64+0xbf/0x420 [ 993.996468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.996494] RIP: 0033:0x7f56d25188d7 [ 993.996514] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 993.996538] RSP: 002b:00007f56cfa8c0b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 993.996563] RAX: ffffffffffffffda RBX: 00007f56cfa8d130 RCX: 00007f56d25188d7 [ 993.996579] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 993.996594] RBP: 0000000000000005 R08: 000000000000ffff R09: 000000000000000b [ 993.996609] R10: 00007f56cfa8c180 R11: 0000000000000246 R12: 0000000000000000 [ 993.996624] R13: 0000000000000000 R14: 0000000020000d40 R15: 0000000000000000 [ 993.996663] 14:46:20 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{0x0, 0x28}], 0x1}, 0x0) [ 994.026056] CPU: 1 UID: 0 PID: 8046 Comm: syz-executor.7 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 994.026091] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 994.026105] Call Trace: [ 994.026113] [ 994.026123] dump_stack_lvl+0xfa/0x120 [ 994.026163] should_fail_ex+0x4d7/0x5e0 [ 994.026195] ? kobject_uevent_env+0x23a/0xfd0 [ 994.026221] should_failslab+0xc2/0x120 [ 994.026250] __kmalloc_cache_noprof+0x6a/0x630 [ 994.026295] kobject_uevent_env+0x23a/0xfd0 [ 994.026321] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 994.026358] ? kasan_quarantine_put+0x84/0x1e0 [ 994.026394] __kobject_del+0x27c/0x320 [ 994.026421] kobject_put+0x202/0x260 [ 994.026449] bus_remove_driver+0x15a/0x1e0 [ 994.026485] driver_unregister+0x77/0xb0 [ 994.026511] usb_gadget_register_driver_owner+0x20a/0x300 [ 994.026541] raw_ioctl+0x190d/0x2160 [ 994.026575] ? lock_release+0xc8/0x270 [ 994.026614] ? __pfx_raw_ioctl+0x10/0x10 [ 994.026649] ? selinux_file_ioctl+0xb9/0x280 [ 994.026676] ? __pfx_raw_ioctl+0x10/0x10 [ 994.026714] __x64_sys_ioctl+0x18f/0x210 [ 994.026756] do_syscall_64+0xbf/0x420 [ 994.026792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.026817] RIP: 0033:0x7f274ba4b8d7 [ 994.026838] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 994.026860] RSP: 002b:00007f2748fbf0b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 994.026884] RAX: ffffffffffffffda RBX: 00007f2748fc0130 RCX: 00007f274ba4b8d7 [ 994.026901] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 994.026923] RBP: 0000000000000005 R08: 000000000000ffff R09: 000000000000000b [ 994.026938] R10: 00007f2748fbf180 R11: 0000000000000246 R12: 0000000000000000 [ 994.026953] R13: 0000000000000000 R14: 0000000020000d40 R15: 0000000000000000 [ 994.026991] [ 994.054535] FAULT_INJECTION: forcing a failure. [ 994.054535] name failslab, interval 1, probability 0, space 0, times 0 [ 994.056848] CPU: 1 UID: 0 PID: 8047 Comm: syz-executor.5 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 994.056879] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 994.056893] Call Trace: [ 994.056901] [ 994.056917] dump_stack_lvl+0xfa/0x120 [ 994.056954] should_fail_ex+0x4d7/0x5e0 [ 994.056986] should_failslab+0xc2/0x120 [ 994.057016] __kmalloc_node_track_caller_noprof+0xc6/0x760 [ 994.057056] ? kasprintf+0xbe/0x100 [ 994.057093] kvasprintf+0xbd/0x160 [ 994.057132] ? __pfx_kvasprintf+0x10/0x10 [ 994.057179] kasprintf+0xbe/0x100 [ 994.057206] ? __pfx_kasprintf+0x10/0x10 [ 994.057231] ? lock_release+0xc8/0x270 [ 994.057270] ? up_write+0x265/0x4e0 [ 994.057318] module_remove_driver+0x138/0x260 [ 994.057356] bus_remove_driver+0x133/0x1e0 [ 994.057391] driver_unregister+0x77/0xb0 [ 994.057415] usb_gadget_register_driver_owner+0x20a/0x300 [ 994.057445] raw_ioctl+0x190d/0x2160 [ 994.057479] ? lock_release+0xc8/0x270 [ 994.057517] ? __pfx_raw_ioctl+0x10/0x10 [ 994.057553] ? selinux_file_ioctl+0xb9/0x280 [ 994.057580] ? __pfx_raw_ioctl+0x10/0x10 [ 994.057617] __x64_sys_ioctl+0x18f/0x210 [ 994.057659] do_syscall_64+0xbf/0x420 [ 994.057696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.057721] RIP: 0033:0x7f39799698d7 [ 994.057741] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 994.057764] RSP: 002b:00007f3976edd0b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 994.057787] RAX: ffffffffffffffda RBX: 00007f3976ede130 RCX: 00007f39799698d7 [ 994.057803] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 994.057818] RBP: 0000000000000005 R08: 000000000000ffff R09: 000000000000000b [ 994.057832] R10: 00007f3976edd180 R11: 0000000000000246 R12: 0000000000000000 [ 994.057847] R13: 0000000000000000 R14: 0000000020000d40 R15: 0000000000000000 [ 994.057886] [ 994.076719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.079762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.100095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:46:20 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 14:46:20 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{0x0, 0x28}], 0x1}, 0x0) 14:46:20 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[], 0x28}], 0x1}, 0x0) 14:46:20 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 14:46:20 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[], 0x28}], 0x1}, 0x0) 14:46:32 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 55) 14:46:32 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 14:46:32 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:46:32 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[], 0x28}], 0x1}, 0x0) 14:46:32 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 61) 14:46:32 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14:46:32 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 53) 14:46:32 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 58) [ 1006.018855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1006.019881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:46:32 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)}, 0x0) [ 1006.049797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1006.051219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1006.055493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1006.060843] sysfs: cannot create duplicate filename '/module/raw_gadget/drivers/gadget:raw-gadget.5' [ 1006.064005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1006.064335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1006.065893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1006.067064] CPU: 1 UID: 0 PID: 8086 Comm: syz-executor.7 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1006.067096] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1006.067110] Call Trace: [ 1006.067119] [ 1006.067129] dump_stack_lvl+0xfa/0x120 [ 1006.067173] sysfs_warn_dup+0x80/0xa0 [ 1006.067212] sysfs_do_create_link_sd+0x124/0x140 [ 1006.067253] sysfs_create_link+0x63/0xc0 [ 1006.067291] module_add_driver+0x1d7/0x420 [ 1006.067330] bus_add_driver+0x293/0x5c0 [ 1006.067369] driver_register+0x162/0x4a0 [ 1006.067396] usb_gadget_register_driver_owner+0x134/0x300 [ 1006.067428] raw_ioctl+0x190d/0x2160 [ 1006.067466] ? lock_release+0xc8/0x270 [ 1006.067508] ? __pfx_raw_ioctl+0x10/0x10 [ 1006.067543] ? selinux_file_ioctl+0xb9/0x280 [ 1006.067572] ? __pfx_raw_ioctl+0x10/0x10 [ 1006.067609] __x64_sys_ioctl+0x18f/0x210 [ 1006.067652] do_syscall_64+0xbf/0x420 [ 1006.067690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.067717] RIP: 0033:0x7f274ba4b8d7 [ 1006.067739] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1006.067763] RSP: 002b:00007f2748fbf0b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1006.067787] RAX: ffffffffffffffda RBX: 00007f2748fc0130 RCX: 00007f274ba4b8d7 [ 1006.067803] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 1006.067818] RBP: 0000000000000005 R08: 000000000000ffff R09: 000000000000000b [ 1006.067832] R10: 00007f2748fbf180 R11: 0000000000000246 R12: 0000000000000000 [ 1006.067847] R13: 0000000000000000 R14: 0000000020000d40 R15: 0000000000000000 [ 1006.067885] [ 1006.102111] FAULT_INJECTION: forcing a failure. [ 1006.102111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1006.104125] CPU: 1 UID: 0 PID: 8087 Comm: syz-executor.6 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1006.104156] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1006.104170] Call Trace: [ 1006.104178] [ 1006.104188] dump_stack_lvl+0xfa/0x120 [ 1006.104226] should_fail_ex+0x4d7/0x5e0 [ 1006.104261] _copy_from_user+0x30/0xd0 [ 1006.104291] kstrtouint_from_user+0xbd/0x180 [ 1006.104326] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1006.104363] ? __lock_acquire+0x451/0x2250 [ 1006.104402] ? fdget_pos+0x2a8/0x380 [ 1006.104440] proc_fail_nth_write+0x7b/0x220 [ 1006.104476] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1006.104514] ? lock_is_held_type+0x9e/0x120 [ 1006.104553] vfs_write+0x2b7/0x1150 [ 1006.104576] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1006.104613] ? __pfx___mutex_lock+0x10/0x10 [ 1006.104645] ? __fget_files+0x34/0x3b0 [ 1006.104672] ? __pfx_vfs_write+0x10/0x10 [ 1006.104700] ? lock_release+0xc8/0x270 [ 1006.104739] ? __fget_files+0x20d/0x3b0 [ 1006.104782] ksys_write+0x121/0x240 [ 1006.104807] ? __pfx_ksys_write+0x10/0x10 [ 1006.104847] do_syscall_64+0xbf/0x420 [ 1006.104886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.104918] RIP: 0033:0x7fad25ce75ff [ 1006.104938] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 1006.104961] RSP: 002b:00007fad232aa170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1006.104985] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fad25ce75ff [ 1006.105001] RDX: 0000000000000001 RSI: 00007fad232aa1e0 RDI: 0000000000000004 [ 1006.105016] RBP: 00007fad232aa1d0 R08: 0000000000000000 R09: 000000000000000b [ 1006.105031] R10: 00007fad232a8180 R11: 0000000000000293 R12: 0000000000000002 [ 1006.105046] R13: 00007ffda17f5b3f R14: 00007fad232aa300 R15: 0000000000022000 [ 1006.105086] [ 1006.123043] bus_add_driver: failed to create module links for raw-gadget.5 14:46:32 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)}, 0x0) 14:46:32 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)}, 0x0) 14:46:32 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x28}], 0x1}, 0x0) [ 1006.140037] UDC core: USB Raw Gadget: driver registration failed: -17 [ 1006.140595] misc raw-gadget: fail, usb_gadget_register_driver returned -17 14:46:32 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{0x0, 0x28}], 0x1}, 0x0) 14:46:32 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:46:32 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{0x0, 0x28}], 0x1}, 0x0) 14:46:32 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x28}], 0x1}, 0x0) [ 1006.306584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1006.314343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:46:43 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x8, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:46:43 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{0x0, 0x28}], 0x1}, 0x0) 14:46:43 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:46:43 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:46:43 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 56) 14:46:43 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 54) 14:46:43 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1f, 0x9}, 0x0, 0x0, 0x81, 0x2, 0x8050, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x406, r1) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000000100)={0x3, 0x3}) 14:46:43 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x28}], 0x1}, 0x0) [ 1017.181356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.189272] FAULT_INJECTION: forcing a failure. [ 1017.189272] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.190207] CPU: 0 UID: 0 PID: 8114 Comm: syz-executor.0 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1017.190223] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1017.190231] Call Trace: [ 1017.190235] [ 1017.190241] dump_stack_lvl+0xfa/0x120 [ 1017.190265] should_fail_ex+0x4d7/0x5e0 [ 1017.190283] ? kobject_uevent_env+0x23a/0xfd0 [ 1017.190297] should_failslab+0xc2/0x120 [ 1017.190313] __kmalloc_cache_noprof+0x6a/0x630 [ 1017.190337] kobject_uevent_env+0x23a/0xfd0 [ 1017.190350] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1017.190370] ? kasan_quarantine_put+0x84/0x1e0 [ 1017.190389] __kobject_del+0x27c/0x320 [ 1017.190402] kobject_put+0x202/0x260 [ 1017.190417] bus_remove_driver+0x15a/0x1e0 [ 1017.190436] driver_unregister+0x77/0xb0 [ 1017.190449] usb_gadget_register_driver_owner+0x20a/0x300 [ 1017.190466] raw_ioctl+0x190d/0x2160 [ 1017.190483] ? lock_release+0xc8/0x270 [ 1017.190503] ? __pfx_raw_ioctl+0x10/0x10 [ 1017.190521] ? selinux_file_ioctl+0xb9/0x280 [ 1017.190537] ? __pfx_raw_ioctl+0x10/0x10 [ 1017.190555] __x64_sys_ioctl+0x18f/0x210 [ 1017.190579] do_syscall_64+0xbf/0x420 [ 1017.190598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.190612] RIP: 0033:0x7f56d25188d7 [ 1017.190623] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1017.190635] RSP: 002b:00007f56cfa8c0b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1017.190647] RAX: ffffffffffffffda RBX: 00007f56cfa8d130 RCX: 00007f56d25188d7 [ 1017.190656] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 1017.190663] RBP: 0000000000000005 R08: 000000000000ffff R09: 000000000000000b [ 1017.190671] R10: 00007f56cfa8c180 R11: 0000000000000246 R12: 0000000000000000 [ 1017.190678] R13: 0000000000000000 R14: 0000000020000d40 R15: 0000000000000000 [ 1017.190697] [ 1017.190752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1017.205852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.207444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1017.211618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.229178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.231517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1017.242919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1017.245658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.256758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:46:43 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[], 0x28}], 0x1}, 0x0) 14:46:43 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="280000002000010000"], 0x28}], 0x1}, 0x0) 14:46:44 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[], 0x28}], 0x1}, 0x0) 14:46:44 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="280000002000010000"], 0x28}], 0x1}, 0x0) 14:46:44 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="280000002000010000"], 0x28}], 0x1}, 0x0) 14:46:44 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[], 0x28}], 0x1}, 0x0) 14:46:44 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000200001000000000000"], 0x28}], 0x1}, 0x0) 14:46:44 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x28}], 0x1}, 0x0) [ 1017.768238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.775190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:46:54 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x28}], 0x1}, 0x0) 14:46:54 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000200001000000000000"], 0x28}], 0x1}, 0x0) 14:46:54 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:46:54 executing program 1: sendto(0xffffffffffffffff, &(0x7f0000000080)="6694230b1865a6cd9eb0ff4f640edf659a6207c72bf9781df110bc0b0f2db2742e7b24476220cf3e1fdbc51fe5044f53baeae1710fae9906618271d8ce8ae8eccb5c0fc8ec83b1ac8fe227e5c7d17ef92a1e20a5867638bc85ac8202765b1c829c4e933b6d7be716fc8f25dbc46873aaf2d25f9a7e8eccca07f40df672a84af4ecbb6cf37de684c067f2849ef3addbfd1af96caeb407030d60ff38d5564b6ed93b5ff2241b9d501b72ab49d08c90b9bfa2e683056de318491322862b", 0xbc, 0xc884, &(0x7f0000000140)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x0, 0x2}}, 0x80) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f00000001c0)='team_slave_0\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:46:54 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 55) 14:46:54 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x18, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:46:54 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:46:54 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 57) [ 1028.330982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.332108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:46:54 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x28}], 0x1}, 0x0) [ 1028.341402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.342463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.368877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.374813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.378048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.379109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:46:55 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="280000002000010000"], 0x28}], 0x1}, 0x0) 14:46:55 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000200001000000000000"], 0x28}], 0x1}, 0x0) [ 1028.435752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.436817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:46:55 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="280000002000010000"], 0x28}], 0x1}, 0x0) 14:46:55 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="280000002000010000"], 0x28}], 0x1}, 0x0) 14:46:55 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000200001000000000000"], 0x28}], 0x1}, 0x0) 14:46:55 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="280000002000010000000000000000"], 0x28}], 0x1}, 0x0) [ 1028.835765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.840618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.849886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.857326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.952816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.958235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:47:05 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3e, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:47:05 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="280000002000010000000000000000"], 0x28}], 0x1}, 0x0) 14:47:05 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080)={0x0, 0x0, 0x8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x4000) 14:47:05 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 58) 14:47:05 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:47:05 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:47:05 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 56) 14:47:05 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000200001000000000000"], 0x28}], 0x1}, 0x0) [ 1039.227436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.230437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1039.231132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.232172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1039.242783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.254011] FAULT_INJECTION: forcing a failure. [ 1039.254011] name failslab, interval 1, probability 0, space 0, times 0 [ 1039.254942] CPU: 0 UID: 0 PID: 8197 Comm: syz-executor.0 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1039.254959] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1039.254968] Call Trace: [ 1039.254973] [ 1039.254978] dump_stack_lvl+0xfa/0x120 [ 1039.255008] should_fail_ex+0x4d7/0x5e0 [ 1039.255024] ? kobject_get_path+0xc8/0x200 [ 1039.255046] ? kobject_get_path+0xc8/0x200 [ 1039.255065] should_failslab+0xc2/0x120 [ 1039.255083] __kmalloc_noprof+0xc4/0x710 [ 1039.255104] ? __create_object+0x59/0x80 [ 1039.255125] kobject_get_path+0xc8/0x200 [ 1039.255144] ? kasan_save_track+0x14/0x30 [ 1039.255163] kobject_uevent_env+0x260/0xfd0 [ 1039.255180] ? kasan_quarantine_put+0x84/0x1e0 [ 1039.255198] __kobject_del+0x27c/0x320 [ 1039.255212] kobject_put+0x202/0x260 [ 1039.255226] bus_remove_driver+0x15a/0x1e0 [ 1039.255247] driver_unregister+0x77/0xb0 [ 1039.255260] usb_gadget_register_driver_owner+0x20a/0x300 [ 1039.255277] raw_ioctl+0x190d/0x2160 [ 1039.255298] ? lock_release+0xc8/0x270 [ 1039.255321] ? __pfx_raw_ioctl+0x10/0x10 [ 1039.255339] ? selinux_file_ioctl+0xb9/0x280 [ 1039.255354] ? __pfx_raw_ioctl+0x10/0x10 [ 1039.255373] __x64_sys_ioctl+0x18f/0x210 [ 1039.255396] do_syscall_64+0xbf/0x420 [ 1039.255416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.255429] RIP: 0033:0x7f56d25188d7 [ 1039.255440] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1039.255452] RSP: 002b:00007f56cfa8c0b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1039.255465] RAX: ffffffffffffffda RBX: 00007f56cfa8d130 RCX: 00007f56d25188d7 [ 1039.255473] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 1039.255481] RBP: 0000000000000005 R08: 000000000000ffff R09: 000000000000000b [ 1039.255489] R10: 00007f56cfa8c180 R11: 0000000000000246 R12: 0000000000000000 [ 1039.255496] R13: 0000000000000000 R14: 0000000020000d40 R15: 0000000000000000 [ 1039.255515] [ 1039.255600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1039.277074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.278540] FAULT_INJECTION: forcing a failure. [ 1039.278540] name failslab, interval 1, probability 0, space 0, times 0 [ 1039.295803] CPU: 0 UID: 0 PID: 8195 Comm: syz-executor.5 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1039.295822] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1039.295829] Call Trace: [ 1039.295834] [ 1039.295839] dump_stack_lvl+0xfa/0x120 [ 1039.295859] should_fail_ex+0x4d7/0x5e0 [ 1039.295872] ? kobject_get_path+0xc8/0x200 [ 1039.295893] ? kobject_get_path+0xc8/0x200 [ 1039.295916] should_failslab+0xc2/0x120 [ 1039.295931] __kmalloc_noprof+0xc4/0x710 [ 1039.295951] ? __create_object+0x59/0x80 [ 1039.295970] kobject_get_path+0xc8/0x200 [ 1039.295991] ? kasan_save_track+0x14/0x30 [ 1039.296008] kobject_uevent_env+0x260/0xfd0 [ 1039.296025] ? kasan_quarantine_put+0x84/0x1e0 [ 1039.296043] __kobject_del+0x27c/0x320 [ 1039.296057] kobject_put+0x202/0x260 [ 1039.296071] bus_remove_driver+0x15a/0x1e0 [ 1039.296089] driver_unregister+0x77/0xb0 [ 1039.296102] usb_gadget_register_driver_owner+0x20a/0x300 [ 1039.296117] raw_ioctl+0x190d/0x2160 [ 1039.296135] ? lock_release+0xc8/0x270 [ 1039.296155] ? __pfx_raw_ioctl+0x10/0x10 [ 1039.296173] ? selinux_file_ioctl+0xb9/0x280 [ 1039.296187] ? __pfx_raw_ioctl+0x10/0x10 [ 1039.296206] __x64_sys_ioctl+0x18f/0x210 [ 1039.296227] do_syscall_64+0xbf/0x420 [ 1039.296246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.296259] RIP: 0033:0x7f39799698d7 [ 1039.296269] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1039.296281] RSP: 002b:00007f3976edd0b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1039.296293] RAX: ffffffffffffffda RBX: 00007f3976ede130 RCX: 00007f39799698d7 [ 1039.296301] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 1039.296309] RBP: 0000000000000005 R08: 000000000000ffff R09: 000000000000000b [ 1039.296317] R10: 00007f3976edd180 R11: 0000000000000246 R12: 0000000000000000 [ 1039.296324] R13: 0000000000000000 R14: 0000000020000d40 R15: 0000000000000000 [ 1039.296344] [ 1039.311758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:47:05 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="280000002000010000000000000000"], 0x28}], 0x1}, 0x0) 14:47:05 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000200001000000000000"], 0x28}], 0x1}, 0x0) 14:47:06 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="280000002000010000000000000000"], 0x28}], 0x1}, 0x0) 14:47:06 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000200001000000000000000000"], 0x28}], 0x1}, 0x0) 14:47:06 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="280000002000010000000000000000"], 0x28}], 0x1}, 0x0) 14:47:06 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="280000002000010000000000000000"], 0x28}], 0x1}, 0x0) 14:47:06 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000200001000000000000000000"], 0x28}], 0x1}, 0x0) 14:47:06 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000200001000000000000000000"], 0x28}], 0x1}, 0x0) [ 1039.737152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.738818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1039.740290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.747142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:47:16 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000200001000000000000000000"], 0x28}], 0x1}, 0x0) 14:47:16 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x5, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:47:16 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000200001000000000000000000"], 0x28}], 0x1}, 0x0) 14:47:16 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x300, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:47:16 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 59) 14:47:16 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:47:16 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 57) 14:47:16 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x301000, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000400)=[{&(0x7f0000000200)="ac4d670cdbd38ef18172aaae59ce4518b83cc0b86d88cac94d70a2a0e0f45eae643261b596a1b506cf26816e370a75ce55ab5506d64ba25f9757ea2f859ad2c39ea5e265e72391eac2fa16554a6168966f6e4f371dadfec9a1ff537125461e652ded", 0x62, 0x8f2b}, {&(0x7f0000000280)="42d4ebe6ac265e53dda0ebb6df588dc9d771de49d2a0feba0f4df7f7075b79660642e1b960a65a27a230858e316f8b6bbc326f9378ad7f22935df71b4b4ac5d44a5c3231d89beebf072a59e56e826b30bc6d7abb6dcdff919e149f1966f635cf092435920ec476c8881a2fdb37347c703396f901c1d19f041ae3a1c5", 0x7c, 0xac}, {&(0x7f0000000300)="a35941beafcbeef21311558dce5c2171836f48043907c354d1315c62fd4f0e77351486913e5a9c6e86de7f365a17cfe72f528433ee985c1e219a9a426d91e1c7625f8507a832a7a745ce5a104eca04417ba471c25028b31b60f5cc52633e5541c98b72ffbdc6ff636713fb9337ee8670", 0x70, 0x7}], 0x120000, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d61785f62617463685f74696d653d3078303030303030303030303030303030362c61707072616973652c0089d5cc22f4611c0bda7b50f967b4d24b10608270c27cc733e0ab102cf0e5c6ef7d5cf55ecdbcd85ece236333d37c26144bdbbbf9e721c0c9a2fe944a111c622524f340eaa5"]) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000480)={0x4}) mknodat(r1, &(0x7f0000000380)='./file0\x00', 0x2, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) dup(r3) perf_event_open(&(0x7f0000000580)={0x3, 0x80, 0x37, 0x9, 0x3, 0x5, 0x0, 0xb98, 0x10830, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000540), 0x1}, 0x2000, 0x6, 0x4, 0x0, 0x7, 0x5, 0xfff, 0x0, 0xffff, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x8) [ 1050.342802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.348594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1050.373457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.380364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1050.392742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.393750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1050.399391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.419674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1050.420940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.422981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:47:17 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000200001000000000000000000"], 0x28}], 0x1}, 0x0) 14:47:17 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{0x0, 0x28}], 0x1}, 0x0) 14:47:17 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) 14:47:17 executing program 3: ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000240)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10008801) mmap$perf(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x2000008, 0x4000010, r1, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xd2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x10, 0x7, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x4, 0x1, 0x1, {0x22, 0x66a}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7f, 0x8, 0x2e}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x7, 0x3f, 0x2, 0x20, 0xe}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}}) [ 1050.592615] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1050.598061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.602236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1050.613179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.624066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:47:17 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) [ 1050.723809] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:47:17 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) [ 1050.830751] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1050.856939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.858214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:47:17 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x5, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:47:17 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x500, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1050.933894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.934907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1050.943540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.945597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:47:17 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 58) [ 1050.989502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1051.000011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:47:17 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x6, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:47:17 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 60) 14:47:17 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) 14:47:17 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x9, 0x8, 0x20, 0x0, 0x3, 0x804, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000200), 0xc}, 0x40030, 0x1, 0x7fff, 0x9, 0x81, 0x5, 0x401, 0x0, 0x400}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x14, 0xd8, 0xfd, 0x4, 0x0, 0x400, 0x20000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x8}, 0x2000, 0x800, 0x1ff, 0x9, 0x9, 0x22af, 0x4, 0x0, 0x6, 0x0, 0xfffffffffffffff8}, r1, 0x1, r0, 0x8) r2 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) [ 1051.031812] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1051.055629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1051.059387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1051.095441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1051.099335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:47:17 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) [ 1051.158861] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:47:17 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) [ 1051.207631] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:47:17 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) [ 1051.267865] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:47:17 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) 14:47:17 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) [ 1051.368473] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1051.451532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1051.452612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1051.454154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1051.455376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1051.470970] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:47:29 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 59) 14:47:29 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:47:29 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x1, &(0x7f00000002c0)=[{&(0x7f00000001c0)="407225223dc09ffef0b7b26cc5b6a96fc516aab137dc7c549764f19c6a3c2ab5d8b0e4550ee175100dab9e3899fb26ed3776920d8490c02a4c84eb07f77292061de79ba993106daac9d3fc8d0a1008035d562b5307bef9a0dd26d36aeadcd2eb623546ab11c40e07e65075a4060cbe44e0cd17919953d6ccfffd87ca064f606c7b3b4e8916afd744aae63ab0c012eaff9f6ef18e3706b459fa4a0926a85607ab1210a35f7b4060872981d4d86ae5be2cc5a927db4684acad74c4014401734ccf1f33ff527a2f2388d9618afdf8f4e20baf4093", 0xd3, 0xc355}], 0x8405, &(0x7f0000000400)={[{@jqfmt_vfsold}, {@usrjquota}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@usrjquota}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@init_itable_val={'init_itable', 0x3d, 0x1f}}, {@errors_continue}], [{@fsname={'fsname', 0x3d, '\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@subj_type={'subj_type', 0x3d, '\x00'}}, {@hash}]}) pread64(r1, &(0x7f0000000300)=""/34, 0x22, 0x5) 14:47:29 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 61) 14:47:29 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) 14:47:29 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) 14:47:29 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x6, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:47:29 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x600, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1062.740574] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1062.746958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.750052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.757386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.758495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.778765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.789702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.790456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.795535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.802995] FAULT_INJECTION: forcing a failure. [ 1062.802995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1062.804270] CPU: 0 UID: 0 PID: 8300 Comm: syz-executor.5 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1062.804287] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1062.804296] Call Trace: [ 1062.804300] [ 1062.804305] dump_stack_lvl+0xfa/0x120 [ 1062.804333] should_fail_ex+0x4d7/0x5e0 [ 1062.804353] _copy_from_user+0x30/0xd0 [ 1062.804370] kstrtouint_from_user+0xbd/0x180 [ 1062.804389] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1062.804407] ? __lock_acquire+0x451/0x2250 [ 1062.804429] ? fdget_pos+0x2a8/0x380 [ 1062.804450] proc_fail_nth_write+0x7b/0x220 [ 1062.804470] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1062.804489] ? lock_is_held_type+0x9e/0x120 [ 1062.804510] vfs_write+0x2b7/0x1150 [ 1062.804522] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1062.804541] ? __pfx___mutex_lock+0x10/0x10 [ 1062.804559] ? __fget_files+0x34/0x3b0 [ 1062.804572] ? __pfx_vfs_write+0x10/0x10 [ 1062.804587] ? lock_release+0xc8/0x270 [ 1062.804606] ? __fget_files+0x20d/0x3b0 [ 1062.804627] ksys_write+0x121/0x240 [ 1062.804640] ? __pfx_ksys_write+0x10/0x10 [ 1062.804660] do_syscall_64+0xbf/0x420 [ 1062.804680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.804694] RIP: 0033:0x7f397991c5ff [ 1062.804705] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 1062.804717] RSP: 002b:00007f3976edf170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1062.804730] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f397991c5ff [ 1062.804738] RDX: 0000000000000001 RSI: 00007f3976edf1e0 RDI: 0000000000000004 [ 1062.804746] RBP: 00007f3976edf1d0 R08: 0000000000000000 R09: 000000000000000b [ 1062.804754] R10: 00007f3976edd180 R11: 0000000000000293 R12: 0000000000000002 [ 1062.804761] R13: 00007ffe045f5eff R14: 00007f3976edf300 R15: 0000000000022000 [ 1062.804782] 14:47:29 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1062.874039] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1062.938297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.948671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:47:41 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:47:41 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 60) 14:47:41 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x700, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:47:41 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) 14:47:41 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:47:41 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x11f9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 14:47:41 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x8, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:47:41 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1075.345259] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1075.349715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.353273] sysfs: cannot create duplicate filename '/module/raw_gadget/drivers/gadget:raw-gadget.6' [ 1075.357000] CPU: 1 UID: 0 PID: 8327 Comm: syz-executor.2 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1075.357031] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1075.357046] Call Trace: [ 1075.357054] [ 1075.357063] dump_stack_lvl+0xfa/0x120 [ 1075.357108] sysfs_warn_dup+0x80/0xa0 [ 1075.357146] sysfs_do_create_link_sd+0x124/0x140 [ 1075.357184] sysfs_create_link+0x63/0xc0 [ 1075.357219] module_add_driver+0x1d7/0x420 [ 1075.357257] bus_add_driver+0x293/0x5c0 [ 1075.357293] driver_register+0x162/0x4a0 [ 1075.357320] usb_gadget_register_driver_owner+0x134/0x300 [ 1075.357350] raw_ioctl+0x190d/0x2160 [ 1075.357387] ? lock_release+0xc8/0x270 [ 1075.357432] ? __pfx_raw_ioctl+0x10/0x10 [ 1075.357465] ? selinux_file_ioctl+0xb9/0x280 [ 1075.357493] ? __pfx_raw_ioctl+0x10/0x10 [ 1075.357527] __x64_sys_ioctl+0x18f/0x210 [ 1075.357568] do_syscall_64+0xbf/0x420 [ 1075.357603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.357629] RIP: 0033:0x7f14c411b8d7 [ 1075.357647] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1075.357670] RSP: 002b:00007f14c168f0b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1075.357693] RAX: ffffffffffffffda RBX: 00007f14c1690130 RCX: 00007f14c411b8d7 [ 1075.357709] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 1075.357723] RBP: 0000000000000004 R08: 000000000000ffff R09: 000000000000000b [ 1075.357737] R10: 00007f14c168f180 R11: 0000000000000246 R12: 0000000000000000 [ 1075.357765] R13: 0000000000000000 R14: 0000000020000d40 R15: 0000000000000000 [ 1075.357801] [ 1075.380812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.382251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.386786] bus_add_driver: failed to create module links for raw-gadget.6 [ 1075.388856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.389128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.390707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.403863] UDC core: USB Raw Gadget: driver registration failed: -17 [ 1075.408996] misc raw-gadget: fail, usb_gadget_register_driver returned -17 14:47:42 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) [ 1075.615408] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:47:42 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000700)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) [ 1075.822195] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:47:42 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x18, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1075.905046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.913447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.922683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 14:47:42 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x8, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1075.934536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:47:42 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) 14:47:42 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f00000000c0)) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x0) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 14:47:42 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:47:42 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 61) 14:47:42 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xdce, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1076.106658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.109488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.133882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.135242] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1076.148683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:47:42 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000700)) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r1, 0x0, r1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) [ 1076.255544] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1076.631615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.640198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:47:54 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:47:54 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 62) 14:47:54 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x18, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:47:54 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) 14:47:54 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3e, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:47:54 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000180)=@ethernet={0x306, @broadcast}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000200)="34f328ce2b517d838de22d31cc7a4fdb3f4ab9dd172a59b60fe988bc3cbc0cfbd85699239fbddabe97e84342c2260d13cdd170f10fba81618ba336711402de24c24d2fc2c5f3d02777a2d89002b3d53e260215e6514a803660cce90711cce135e9ce81a99ac12554b2e5d8ed6d0dae685a70e1fad1fea3513e8ea04d5112522dd105ad3333747f25128020246265a59989ac3474b5d347eeee84fba68f4958ad3926c7944e5db9e2209836c1cf3ae887cbe3d9872f79d0221f12663e148699929794133f814ff1c6a594b9ea2df4d88a9476204ef313c4ba8239af74531e6ef1a65cae7f04e7b1ed514fa9d5e4", 0xed}, {&(0x7f0000000100)="aff0b904304fcadc872cc1", 0xb}, {&(0x7f0000000300)="fe86a5f7d42db0c8314b7ff03ec5a2c0636bfff80130b47cc7218a99a172129a92e075932086dc15b224bc5e4af437770b9612872dddcd86f88a7faad343e131179c4ad386caec5ac4a709e2aae18325a63e9f03aeb6ec47c8a8925c600455abdab185abafc35b164bc438d319b82644cc33af18f2", 0x75}, {&(0x7f0000000400)="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", 0x1000}], 0x4, &(0x7f0000001400)=[{0x108, 0x117, 0x37, "f9fb2d82cf35c31f48f435e11a990475e70fe870eaf37bb43e70940578d13824bfc2dc7a7e7ee2f35fc0704c3df0d7e5b88b76d7898ed294cf3df7af027a33047b259c025013a7c70ab710d1b5e10e5877eb3b4481903c570cd18060e4e4521d36f540501d2aefe0ef6fdcfde05fdd9c731e4b700f28c159b3ffc72dbac591f8ed409cb3216b972d84c976b20622959f5069bdff822b139eb8fbbac843cc4c35b3a32ab4c858fe2e49ede73e60cffc5c6b463c1d5dac52bfbbd25c31962c2cc4db105c6611574008843a434e6edbb767766b4fd40c498a27f768754f97a86668cccbdf4b80a37bbd9fd7c113e368ce59c0ba6d"}], 0x108}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14:47:54 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x1800, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:47:54 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000700)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) [ 1087.660208] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1087.668657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1087.670402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1087.695467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1087.705553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1087.708535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1087.712608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1087.802549] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:47:54 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) [ 1087.956668] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:47:54 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000700)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) [ 1088.058340] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:47:54 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000700)) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) recvmmsg$unix(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/70, 0x46}], 0x1, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x130}}], 0x1, 0x30001, &(0x7f00000005c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) [ 1088.174663] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:47:54 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x300, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:47:54 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3e, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:47:54 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x1f99, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1088.230641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.247749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:47:54 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x5, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:47:54 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 63) [ 1088.278413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.295362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.326215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.331327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:47:54 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x2b997d6463ff25f0, 0x0) flock(r1, 0xb) r2 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xfffffffffffffffa) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) r5 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) close_range(r1, r0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x2) r6 = dup(r5) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r6, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r7, 0x0, &(0x7f0000000000), 0x0, 0x4) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x2, 0xac, 0x8, 0xc1}, {0x800, 0x0, 0x6, 0x80000}, {0x0, 0x7, 0x7, 0x7}]}) r9 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x5, 0x0, r10) syz_io_uring_submit(r7, 0x0, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r10}}, 0x52) syz_io_uring_submit(r3, r4, &(0x7f0000000500)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index=0x3, 0x6, &(0x7f0000000380)=[{&(0x7f0000000180)=""/150, 0x96}, {&(0x7f0000000240)=""/19, 0x13}, {&(0x7f0000000280)=""/207, 0xcf}, {&(0x7f0000000400)=""/226, 0xe2}], 0x4, 0x5, 0x1, {0x0, r10}}, 0x9) close_range(r2, 0xffffffffffffffff, 0x0) [ 1088.367249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.369458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.389567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.390892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.872734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.875620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.909854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.911764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:48:06 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x300, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:48:06 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000700)) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) 14:48:06 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x6, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:48:06 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x1f9a, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:48:06 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x500, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:48:06 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) (fail_nth: 64) 14:48:06 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000700)) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) recvmmsg$unix(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/70, 0x46}], 0x1, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x130}}], 0x1, 0x30001, &(0x7f00000005c0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) 14:48:06 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_complete(0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x3, @local, 0xaa1c}, 0x1c) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x3, 0x0, 0x7, 0x7, 0x0, 0xffffffff7fffffff, 0x1040, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20ff, 0x2, @perf_bp={&(0x7f0000000180), 0x1}, 0x10022, 0x1, 0x4, 0x4, 0x4, 0x4, 0x2, 0x0, 0x8001}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x2) [ 1099.516783] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1099.540477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.543408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1099.581948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.587769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.589018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1099.594068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.595256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1099.596284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1099.677998] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:48:06 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000700)) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) recvmmsg$unix(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/70, 0x46}], 0x1, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x130}}], 0x1, 0x30001, &(0x7f00000005c0)) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getflags(r2, 0xb) r3 = getpid() perf_event_open(&(0x7f0000000640)={0x4, 0x80, 0x4, 0x3, 0xb3, 0x7f, 0x0, 0x9e, 0x80000, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x10000, 0x4, @perf_config_ext={0x80000001, 0x6}, 0x4, 0x1, 0x400, 0x6, 0x80000000, 0x82, 0x1ff, 0x0, 0x9, 0x0, 0xd}, r3, 0x10, r2, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) 14:48:06 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000700)) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) recvmmsg$unix(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/70, 0x46}], 0x1, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x130}}], 0x1, 0x30001, &(0x7f00000005c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) [ 1099.795933] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1099.848085] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:48:06 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000700)) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) recvmmsg$unix(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/70, 0x46}], 0x1, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x130}}], 0x1, 0x30001, &(0x7f00000005c0)) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getflags(r2, 0xb) r3 = getpid() perf_event_open(&(0x7f0000000640)={0x4, 0x80, 0x4, 0x3, 0xb3, 0x7f, 0x0, 0x9e, 0x80000, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x10000, 0x4, @perf_config_ext={0x80000001, 0x6}, 0x4, 0x1, 0x400, 0x6, 0x80000000, 0x82, 0x1ff, 0x0, 0x9, 0x0, 0xd}, r3, 0x10, r2, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) [ 1099.967591] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1100.048999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1100.050413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:48:17 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:48:17 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x500, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:48:17 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x2000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:48:17 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x600, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:48:17 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:48:17 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000400)={0x5, {{0xa, 0x4e22, 0x3f, @mcast1, 0x7fffffff}}, 0x1, 0x6, [{{0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}, {{0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}, {{0xa, 0x4e21, 0x5, @loopback, 0x503a}}, {{0xa, 0x1, 0x7f, @remote, 0x2}}, {{0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}, {{0xa, 0x4e23, 0x4, @remote, 0x400}}]}, 0x390) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x400100, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x88001) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10008801) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000001c0)={'wg0\x00'}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000200)={0x7, 0x0, &(0x7f00000001c0)}, 0x0) 14:48:17 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000700)) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) recvmmsg$unix(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/70, 0x46}], 0x1, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x130}}], 0x1, 0x30001, &(0x7f00000005c0)) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getflags(r2, 0xb) r3 = getpid() perf_event_open(&(0x7f0000000640)={0x4, 0x80, 0x4, 0x3, 0xb3, 0x7f, 0x0, 0x9e, 0x80000, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x10000, 0x4, @perf_config_ext={0x80000001, 0x6}, 0x4, 0x1, 0x400, 0x6, 0x80000000, 0x82, 0x1ff, 0x0, 0x9, 0x0, 0xd}, r3, 0x10, r2, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) 14:48:17 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000700)) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) recvmmsg$unix(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/70, 0x46}], 0x1, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x130}}], 0x1, 0x30001, &(0x7f00000005c0)) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getflags(r2, 0xb) getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) [ 1111.013417] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1111.027938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1111.030341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1111.041452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1111.044387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1111.052522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1111.062083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1111.067151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1111.071236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1111.087436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1111.092409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1111.122135] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:48:17 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 1) [ 1111.201545] FAULT_INJECTION: forcing a failure. [ 1111.201545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1111.206459] CPU: 0 UID: 0 PID: 8456 Comm: syz-executor.4 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1111.206479] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1111.206489] Call Trace: [ 1111.206494] [ 1111.206499] dump_stack_lvl+0xfa/0x120 [ 1111.206528] should_fail_ex+0x4d7/0x5e0 [ 1111.206549] _copy_from_user+0x30/0xd0 [ 1111.206566] copy_msghdr_from_user+0x88/0x150 [ 1111.206582] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1111.206599] ? __pfx_perf_tp_event+0x10/0x10 [ 1111.206619] ? lock_acquire+0x15e/0x2d0 [ 1111.206641] ___sys_sendmsg+0xdc/0x1b0 [ 1111.206655] ? __pfx____sys_sendmsg+0x10/0x10 [ 1111.206667] ? perf_trace_lock+0xbb/0x4f0 [ 1111.206691] ? __pfx_perf_trace_lock+0x10/0x10 [ 1111.206708] ? proc_fail_nth_write+0x97/0x220 [ 1111.206732] ? lock_acquire+0x15e/0x2d0 [ 1111.206748] ? __fget_files+0x34/0x3b0 [ 1111.206766] ? find_held_lock+0x2b/0x80 [ 1111.206779] ? __fget_files+0x203/0x3b0 [ 1111.206793] ? lock_release+0xc8/0x270 [ 1111.206813] ? __fget_files+0x20d/0x3b0 [ 1111.206836] __sys_sendmsg+0x150/0x200 [ 1111.206848] ? __pfx___sys_sendmsg+0x10/0x10 [ 1111.206860] ? perf_trace_preemptirq_template+0x259/0x430 [ 1111.206883] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1111.206908] ? __pfx_ksys_write+0x10/0x10 [ 1111.206922] ? irqentry_exit+0xee/0x650 [ 1111.206944] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1111.206961] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1111.206984] do_syscall_64+0xbf/0x420 [ 1111.207006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1111.207021] RIP: 0033:0x7f3b21b1bb19 [ 1111.207032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1111.207045] RSP: 002b:00007f3b1f091188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1111.207059] RAX: ffffffffffffffda RBX: 00007f3b21c2ef60 RCX: 00007f3b21b1bb19 [ 1111.207068] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1111.207077] RBP: 00007f3b1f0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1111.207086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1111.207094] R13: 00007ffe815263cf R14: 00007f3b1f091300 R15: 0000000000022000 [ 1111.207114] 14:48:17 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x483, 0x3261, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0xc0, 0x5, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x3, 0x1, 0x0, 0x2, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0xf3f}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x5, 0x8, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x3f, 0x7, 0x1}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0xf8, 0x3f, 0x8, 0x8, 0x9}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x380a}}]}) 14:48:17 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 2) [ 1111.311854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1111.316649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:48:17 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 3) [ 1111.323720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1111.330124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1111.410809] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:48:18 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 1) [ 1111.509050] FAULT_INJECTION: forcing a failure. [ 1111.509050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1111.510894] CPU: 1 UID: 0 PID: 8466 Comm: syz-executor.3 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1111.510932] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1111.510948] Call Trace: [ 1111.510960] [ 1111.510975] dump_stack_lvl+0xfa/0x120 [ 1111.511033] should_fail_ex+0x4d7/0x5e0 [ 1111.511075] _copy_from_user+0x30/0xd0 [ 1111.511114] copy_msghdr_from_user+0x88/0x150 [ 1111.511153] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1111.511197] ? __pfx_perf_trace_lock+0x10/0x10 [ 1111.511256] ? lock_acquire+0x15e/0x2d0 [ 1111.511312] ___sys_sendmsg+0xdc/0x1b0 [ 1111.511350] ? __pfx____sys_sendmsg+0x10/0x10 [ 1111.511381] ? perf_trace_lock+0xbb/0x4f0 [ 1111.511438] ? __pfx_perf_trace_lock+0x10/0x10 [ 1111.511487] ? proc_fail_nth_write+0x97/0x220 [ 1111.511541] ? lock_acquire+0x15e/0x2d0 [ 1111.511587] ? __fget_files+0x34/0x3b0 [ 1111.511627] ? find_held_lock+0x2b/0x80 [ 1111.511666] ? __fget_files+0x203/0x3b0 [ 1111.511721] ? lock_release+0xc8/0x270 [ 1111.511802] ? __fget_files+0x20d/0x3b0 [ 1111.511858] __sys_sendmsg+0x150/0x200 [ 1111.511892] ? __pfx___sys_sendmsg+0x10/0x10 [ 1111.511937] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1111.511990] ? ksys_write+0x1a3/0x240 [ 1111.512025] ? __pfx_ksys_write+0x10/0x10 [ 1111.512058] ? irqentry_exit+0xee/0x650 [ 1111.512121] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1111.512166] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1111.512229] do_syscall_64+0xbf/0x420 [ 1111.512280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1111.512318] RIP: 0033:0x7fbd3c214b19 [ 1111.512345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1111.512383] RSP: 002b:00007fbd3978a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1111.512413] RAX: ffffffffffffffda RBX: 00007fbd3c327f60 RCX: 00007fbd3c214b19 [ 1111.512439] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1111.512462] RBP: 00007fbd3978a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1111.512486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1111.512507] R13: 00007fffae4888ff R14: 00007fbd3978a300 R15: 0000000000022000 [ 1111.512558] 14:48:18 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x700, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:48:18 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 2) 14:48:18 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3e00, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:48:18 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x600, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:48:18 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x8, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:48:18 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1111.668416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1111.669179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1111.673677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1111.674721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1111.695215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1111.699394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1111.703742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1111.706844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1112.180726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1112.183306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1112.203069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1112.204397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1112.213342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1112.216323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:48:30 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000001640), 0x84200, 0x0) perf_event_open(&(0x7f00000015c0)={0x4, 0x80, 0x7, 0x81, 0x6c, 0x5, 0x0, 0x7, 0x93c44, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x93, 0x2, @perf_bp={&(0x7f0000001580), 0x6}, 0x8600, 0x0, 0xffffffff, 0x7, 0x39491e9b, 0x7, 0x7ff, 0x0, 0x8d, 0x0, 0x4}, 0x0, 0x0, r1, 0xa) r2 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x2010, r2, 0x0) r3 = io_uring_setup(0x378f, &(0x7f0000000180)={0x0, 0xce93, 0x0, 0x0, 0x11a, 0x0, r2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/169, 0xa9}, {&(0x7f00000002c0)=""/103, 0x67}, {&(0x7f0000000100)=""/40, 0x28}, {&(0x7f0000000400)=""/158, 0x9e}], 0x4) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'bond_slave_0\x00', 0x0}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000001540)=0x0) perf_event_open(&(0x7f00000014c0)={0x2, 0x80, 0x8, 0x0, 0x0, 0x2b, 0x0, 0x7, 0x40808, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x4, @perf_config_ext={0x1, 0x7}, 0x2081, 0xffff, 0x3f, 0x9, 0x8, 0x9, 0x2, 0x0, 0x5, 0x0, 0x55}, r6, 0x9, r0, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000002880)={{{@in=@broadcast, @in=@loopback}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f00000016c0)=0xe8) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000001700)={'sit0\x00', &(0x7f00000017c0)={'syztnl0\x00', r5, 0x2f, 0x0, 0x80, 0x3, 0x4c, @dev={0xfe, 0x80, '\x00', 0x10}, @rand_addr=' \x01\x00', 0x20, 0x20, 0x0, 0x4}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001740)={&(0x7f00000039c0)={0x107c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1064, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x104d, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x411}]}, @ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x107c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000014) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f00000004c0)={{r4}, "3ed1d07b90c1ecafc154983536d9037cf11397556c265e2dd9b3a7936a465951b9584e10804d8db9346c06b4f91cd81ce41dbe07c0322ae4a836a0110a55b1fec63abcb099e0c32f246a78da188fbe18a3a32825719339240a7dc8619d37872f123e1083658f013e2af26414bc82379ccc8b36bdd403f37bdd5732535cc4076ae6e227f10030f95f68a0e75c2b9ef7ec1bb5d7aa0f674487907b204e5903f366de11ae21234e2a2cf33f431b24f33748879f4cea31a6718f2f7dc13f1b98bdf49716bc8d574572aefd857ccc09b360d4ffe1d6cc9ce4bc92e78bcabb815f37a06f204d4c3c30a325f906ca7ff8a71da9447907730de1cad531648effa4ae3f2151a1e509a4e216ceeb24fa70f776b5aab867fa300dc1e91f05a2af1f82edcd8e594a4fe19f7d0ba2ebbda10cc6842e13ec685a0616b4bd1eabf21527122acc93151afd57fea33c90e7c78750eaab5c7141357bdf8b85e636f9bce64167f126334be1583f17659ce6e9f5c98881cc0ce3847ac8b1382a8deb3935dd1ca4aa78b313b7d74bc7db9f3d25b6fba53b17fcd1d7293fe84178ffd08d74b27a485d1cf19494ec96fc8e550e25423f7ebd78f96643d1096a848fb15fecaf389b7a45a869ab924501a3656abcc48556591b0af756a61e810ad48694cd7a1108c60f7e6ddb8b30ef03b3528125ab7150ca0926b22845a1b4fc7dcb8578e2380647f89073594b35feb1f1dee010c298db481895bdb80373f42ce7822c4f793b50290f2bebd554279727f750664756c9c0ffe3ba200a226ff9f2406a1906e6e78e6f2747b8157276e9015e0b41c0af183ee31c2e8f755662564e8ab4b4d22b2310d8386b3e9a4212b00ca07834a78a92f21d1b6b6d1847e237c46575927699908834ceda1ec53cd28b49ffc5e4c15840e9d6397dc75dd0d1bf987ef2bf4773c6c806faed15c30b93dad9c804a8243b064fcb090775bf95bdb95e2a36b2608beda3dcb544a70ba453556ffa86cedc5251c4f51db1e174f4e14f190496e04814f7d8b31d2275de38ce10823acde6fc6d616e3464076a889063daff6bf8d912a0cbbfaacefd8d903af4c3d74ba7f879b826532b3a2fd8faf997203057626e0f8e84d8f7e0d58955cebf014c7259312ad4f5075adc6f00eab72af4340bb3e24ed22084425e1b5b8f2b6fbc3522e38f130db066861645f0fd8e7ae9f6e328e173243e17e3925b50e1173b6bfa30a0829ff72593074eee16f7013d42becd8997394a3ab2740be8f9c76297c4d74171187e343b9d4eb8fdee0a2e96d9a1fdbde490b46e67fb000511dd77ce28bd3bba83a60efa17b2b2565e56f88772655faf3ba2e02148b7bd2f3ac0a1edfcd0c3c71c9b55557524a9c1272c856d058d99887108112f6e689f9664f52ccc2d17f4a4d306ff109c14ca1af34c0778b651fb3a9d747120dcb69180f9ff1c7dfad78dc107ff55e04a7c23c763d062435f4867fc07e529f0c2cd70e298848d3e99c395c21f3295e5ddf301d82c307350cad5d20626ab3cddbb17d8494a8b1aa62da8868dd98ebf23eb8e691144a031e06c3901a85c724b14f85e178a9f3b338d2cdbd5c339a40b00863078501453540c68527d5df0fbda484fa33339c46a1f9965390f34d0ed020b39952f2bf31c375b8904425b78fe65c2aac59671136080179837ac3f7d93a8f251842a907b673fce1cb371f08daec91fd24f1ef0f1a169a99413dd9357c634d23e63222b4782a3d8b26246563eb62cdd8a44ffc78763fe10b604537d4aca48fb05a7e667f335c6eb64ab09b4eb47ccc7169701dfddffe0e2527f56a35fd87ac1ece6bd07408ebcd6db240d3f2192ecf8bc00c1cbd20824b8b259ce35d85936ede6df7f52578d65dc589e5a750a33296d98fb1577b764fe83d204a2b903940daa11201e42d1dbeff5a599a160a079597fceb98bf7a27e95f5b7b7e1fa2115989f3f328def8598d353bd833e43d3c828e4f7670502a5e3135658dbacae87c5f1e2a22b1233247b9414ce71edf182a30e864e98b18abb1e8bf491abe8d26f85afcb49c10a876fa2db6a0d7b608db2a2d2bfd6e4e07b7193a3abc84c54f48f84d45d27213e34e8f3dfab67629c75cca200e747494c1cf3aa1967b0f4d45ed472f1ca2c4342edd2b6fad8b2b4c1370efe38b0f705adf7446b03efa99f668c5bfa41e37ac8ed6036d6875247b12f91463ffac378a915f8c7e27bb9a79fec2adb77e8621d66c1e9f7587529454be1403dea89a5568676e447835993f34c422e7c0943c582631509c3bfddb5d4cd3f402d75b5e961a3a01742ed58e9cc335aa85ff559a4fcf180eec704c1f43d1eb4e9df4a065b6db015267312d76d1752455d7568ad06d7f93f32321833dd2b2be1d35ac3a2adf97a745dbf3f22c2bc54fec67f41c7f914b8a9f52bedfef82d92534544ba9aa72a604ca9c2a22f0745e23f9a32bea258ef4e34f4cec6a00bfe46aa44f06acc23015a5b029f078d45e577966d62ceae397c77753f382a05a36cf24f4c5d39359c8fc2b4554e52cd92105ff33ecab6f08a352295295e84391fa31b8ff33b2519143399b9df029f7f1b66254486577a1239279ad55d7b6bbb2d1ceef52ae0085472a71c2e494cf6692c2d98c92b0a86e58e4c3ced69190e6fbe3efd012e7549d15a5d8342f308a3a12f352a709e18a836a1cf1faae1a5ffc4340dda737c3b4ced16a4bdbc53f7ebbc734d0c548d431638ec3aec026cb3d9ee2f0b72c850909fd64601ed70f797319c05e2cde4e568686eb4cd17bd4638ae34c85c5eb59f40d9c195b2a0af4b73c1e2b6b00f8c755add5adad9b750d14296f6ed8b842612635aa29abff551dad7e11cf9e6abf43109e14c6f4e138e807e341b5bb6d26818117155fcd22d02315ec31f974e55c4bed20c057e5e994923f82abddb0e70eda5e09c76c66e159d07bd0130026cf7101f770f83403672cea1d3e14be77d039a112857625a8273b6c80895d36b21f04dca9dd1d281b5e90a000047ce1be1eecfd7294237dd94fa3432d51dfe185ea58a5c28b72c4b234ae479c990f6e8e064bcb7de136caf4be51772c320b86bd4fa044ff324af0a7d66a6b3ab6c1402bf2f4c9277ccbb8f72b1d14aef0c6ce27c4da04559d46558a917f634b674e670d3210d125a1d51d0576e2fff34919801fbb70614949a7dbd87338f765034b520d564f86cc06138c78aeeddc3e319030e40d1e19c7b10607994ff2783f20bbf4824c87f4ff5ac8f45e9c3714ebfa0f6d7b0b598e85ad86a6ab57b232e1e5dbc4c29a29b08796cb32fdfaa430cc6283203be4e0b1f6483f56615a3096bce5d0d2f48163b008a4433849b92746da96027305e1370fddfd691ded1f8b2eff30d38405d713caa04d26e61436a3f5853cddade7ad42d9a8e1acc6cff292392b60e3da134ed98c58142cb60e5dc2ae61948ab5d0e25eb1332f04c9349204393dd7e4ed559c925e55748965727abb0f3a91599429a885b57195d5a07cb601aea585ecaabe07d7b168e2b2ec2dcec0affd857a41c9b44c026bb90bf21ef024fd5fef8c6a6db6e34426181b1217a438686620da8032d2af13c82f84d73b48d5b919dd2480e800921723b5156626605f6beb58e11a11609aee7b764605c5da709aafdf36853366554d9c11c6e1d0a64c796ef01136c5cb618f6e6d3478de72f7b86a3bc15bd87e4606e79061db55b667de14deb56f4da3d4845e2d6b382982a12f3a1c4bcdd02c72c826e35d3630cd32a10b312a58795212f0fb70a50ccfb8d8e378310a8e84f677a0e3704e13b819c31e094e610aa98440d10d5048302d2b37efec865302860a836136b944bcf0600e94c28b1e96fc5a794c2b72ac94c4031acb03a78317a316a60859a503aee020092ef08577728506ad9a4ceba77510dc066d38fcf40848058fb9e39273f0a07077412f6b7649aa0e0bd2766108c2e8820f732f3770f673379bc69083d87c02485d84a9d0ab5c45c214e7b46a1aa00795d3aac339bffe4c3241b08040934b8cb8da63d3b95f4640a3c79e8733fd9f55099db17cba422e9d05422d8571f9ad27cc5f35e9fa6ca568f6880dc7fda80b2b483ea70ed0d337abd598d3ef1711c9d450978d193989c6c929baf875ad99f88df2f01486d6f5fce2a312aa97b6b3930763f9a5460b51367365a87df912d6af7de8b08003da21559c0d444975408891e944720275eef958e3cd0a516eafd721cc7b8f0dd5a60f146e002519894258b0db7808aff7d1456ab4f5e05eea067bd3a18259349fe45f8ab16e9305be7991b5c2e38a77f1c3a2c4eaa6c6b2d8f86bb892b4b9a5290448cbe64c6c61570fd67b3da3814a1488cb9aaf08ed1d6c7634553213f7031a968b59542d837dca6756487ec845d1204d7b89b28834ad798c42b24ba1a62a536023bd0d23e7fda6a24615339d7203e2474a84f14c290a4d1a5924f5fd7569030e8b54b5fb1dbbc2dd53de7b7ab429ffffeaf4a846b4144a252ce7a454fb375c5fcebd2d1e77571a3c9f7aaeda6c6f14a81dbbb844227117cc2f82060f1c53d1175729a4b97c800e5afe2c65e5c6d56eb9496f0970919276e088a2148a63ac2eb1bcc98556852144bbe617ff0f1c9a3f0ffe88668101108a2e5f1879b45b80d1026fda513ca6d3cf382a23fd64a06272f0fef90ef24f906606a9cee0fac366fe54c638cf6e080d7c1da55c18a1597c30379b45265f8887d3f3a4aa8e586e84e197907eb1450146b2601524754b42f7888209106001c7d06971dc671475258ece2445c39f3242284ffd8ce332b2f2c585d9a9cdcb19066e5ebf752e974310a13b533dcdbc9d02b99e15966b7d43722f49ae6ad126cad2c215ed8d6b744f158763bffe3726ea073464dd70b9907ec8def0bba60f60f4bcfe8b07cbf4844c8bd92966c6bac10a71a7e30179475e6535064e4dccc0203cc7347db6662974a48cc5a631f0f534a24470b988ba6d02bc178ce5a88875f3404f0adeeeb4740aff23a37124fcd12b792b98d73dc1568c6359a18c2238d34009aa9ff695d7981cbdf4a44ca4568b06534bc4e0eea8930352fd4955f7ada9f5d9cf76ad534f71d7a7af2f124f4c09455b6911ca3cb480129708566636f24564a193fb4d3e43c6a6ce7fd2dbe80cca8f03077649fb27af5aaefd274270e9206a55f51b10aba62fa7fc681bd9dea5800a277a6d7e253aa2c2188d252a06fddcc6a9aa6f2fc26ac87f74568cb5c507befeaa48ad397c25fc23ba1045c4df39a0bf6b8770c0a79fbc6b46991c3f1468b33348e263a0d11d0f91f6406e2063ebb7f6ea14beb23c366f44c3ce4814d99272bb3de88a11d184d19428de8cb58126993be8b68ea5e6705eb1fde373eca465a5946a9759377e59534e675e385b8ee0b5254dfa336506cfd755a8b73ac8e35bed9ccc89b8eaf4c24d7dd383535d8603600b97e5b2b57990bd2d770f1bfb02c133008b0b1422936b3e80f431de2f00c7b28a466bf33029552e447e27d968c60153820b7563236752413b5730f2d3dae11bbccea37d8cf3ba189a1e05fb7c18b9b89e72537128c607bec0f168a8537513cbef92af5e5112dfb90b309d7ebcba75af21d7e06cdf44e6d003b26bef1ecee577b0b68aa21f15e34a714948ee6a1aa2c8e30183d76e4d9ac27f5e1c2ef5d8e223cc39b7411315ffb442a2a78bc16e21a84509a3a2d44897a3b2c6f307f67faab93d9e000e679f3d0920b9b0323ca3b85d73332d2b6c169010dd7acce42f92a3c6aa416912610362dd9fda4077af1249a1bf96f5dd34ee5"}) close_range(r2, 0xffffffffffffffff, 0x0) 14:48:30 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 3) 14:48:30 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:48:30 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x700, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:48:30 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3f00, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:48:30 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x1800, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:48:30 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x18, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:48:30 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 4) [ 1124.252461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1124.261351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1124.262596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1124.263591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1124.265847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1124.270393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1124.291837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1124.294879] FAULT_INJECTION: forcing a failure. [ 1124.294879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1124.295872] CPU: 0 UID: 0 PID: 8497 Comm: syz-executor.4 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1124.295889] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1124.295897] Call Trace: [ 1124.295905] [ 1124.295911] dump_stack_lvl+0xfa/0x120 [ 1124.295938] should_fail_ex+0x4d7/0x5e0 [ 1124.295958] _copy_from_iter+0x27b/0x1610 [ 1124.295972] ? lock_acquire+0x15e/0x2d0 [ 1124.295991] ? find_held_lock+0x2b/0x80 [ 1124.296003] ? __virt_addr_valid+0x2e8/0x5d0 [ 1124.296021] ? __pfx__copy_from_iter+0x10/0x10 [ 1124.296036] ? __virt_addr_valid+0x100/0x5d0 [ 1124.296051] ? __check_object_size+0x5b3/0x980 [ 1124.296077] netlink_sendmsg+0x800/0xd80 [ 1124.296096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1124.296119] ____sys_sendmsg+0xa38/0xbf0 [ 1124.296138] ? copy_msghdr_from_user+0xfb/0x150 [ 1124.296152] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1124.296171] ? __pfx_perf_tp_event+0x10/0x10 [ 1124.296188] ? lock_acquire+0x15e/0x2d0 [ 1124.296207] ___sys_sendmsg+0x10f/0x1b0 [ 1124.296221] ? __pfx____sys_sendmsg+0x10/0x10 [ 1124.296232] ? perf_trace_lock+0xbb/0x4f0 [ 1124.296253] ? __pfx_perf_trace_lock+0x10/0x10 [ 1124.296269] ? proc_fail_nth_write+0x97/0x220 [ 1124.296290] ? lock_acquire+0x15e/0x2d0 [ 1124.296306] ? __fget_files+0x34/0x3b0 [ 1124.296322] ? find_held_lock+0x2b/0x80 [ 1124.296334] ? __fget_files+0x203/0x3b0 [ 1124.296347] ? lock_release+0xc8/0x270 [ 1124.296366] ? __fget_files+0x20d/0x3b0 [ 1124.296388] __sys_sendmsg+0x150/0x200 [ 1124.296400] ? __pfx___sys_sendmsg+0x10/0x10 [ 1124.296411] ? perf_trace_preemptirq_template+0x259/0x430 [ 1124.296437] ? __pfx_ksys_write+0x10/0x10 [ 1124.296451] ? irqentry_exit+0xee/0x650 [ 1124.296466] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1124.296482] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1124.296504] do_syscall_64+0xbf/0x420 [ 1124.296524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.296538] RIP: 0033:0x7f3b21b1bb19 [ 1124.296548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1124.296560] RSP: 002b:00007f3b1f091188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1124.296573] RAX: ffffffffffffffda RBX: 00007f3b21c2ef60 RCX: 00007f3b21b1bb19 [ 1124.296581] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1124.296589] RBP: 00007f3b1f0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1124.296596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1124.296604] R13: 00007ffe815263cf R14: 00007f3b1f091300 R15: 0000000000022000 [ 1124.296623] [ 1124.299289] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1124.337504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1124.367617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1124.369795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:48:31 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 5) [ 1124.453444] FAULT_INJECTION: forcing a failure. [ 1124.453444] name failslab, interval 1, probability 0, space 0, times 0 [ 1124.454432] CPU: 0 UID: 0 PID: 8507 Comm: syz-executor.4 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1124.454453] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1124.454462] Call Trace: [ 1124.454468] [ 1124.454474] dump_stack_lvl+0xfa/0x120 [ 1124.454503] should_fail_ex+0x4d7/0x5e0 [ 1124.454520] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 1124.454542] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 1124.454560] should_failslab+0xc2/0x120 [ 1124.454578] __kmalloc_noprof+0xc4/0x710 [ 1124.454600] ? avc_has_perm_noaudit+0x141/0x390 [ 1124.454625] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 1124.454647] genl_family_rcv_msg_doit+0xab/0x2f0 [ 1124.454664] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1124.454684] ? cap_capable+0xdb/0x380 [ 1124.454701] ? security_capable+0x2f/0x90 [ 1124.454725] ? ns_capable+0xe2/0x120 [ 1124.454751] genl_rcv_msg+0x532/0x7e0 [ 1124.454770] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1124.454787] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1124.454804] ? __lock_acquire+0x451/0x2250 [ 1124.454831] netlink_rcv_skb+0x147/0x430 [ 1124.454845] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1124.454862] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1124.454889] ? netlink_deliver_tap+0x1af/0xcb0 [ 1124.454918] genl_rcv+0x28/0x40 [ 1124.454931] netlink_unicast+0x5a7/0x870 [ 1124.454948] ? __pfx_netlink_unicast+0x10/0x10 [ 1124.454962] ? __virt_addr_valid+0x100/0x5d0 [ 1124.454987] netlink_sendmsg+0x8a3/0xd80 [ 1124.455005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1124.455028] ____sys_sendmsg+0xa38/0xbf0 [ 1124.455050] ? copy_msghdr_from_user+0xfb/0x150 [ 1124.455064] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1124.455085] ? __pfx_perf_tp_event+0x10/0x10 [ 1124.455103] ? lock_acquire+0x15e/0x2d0 [ 1124.455123] ___sys_sendmsg+0x10f/0x1b0 [ 1124.455138] ? __pfx____sys_sendmsg+0x10/0x10 [ 1124.455149] ? perf_trace_lock+0xbb/0x4f0 [ 1124.455172] ? __pfx_perf_trace_lock+0x10/0x10 [ 1124.455190] ? proc_fail_nth_write+0x97/0x220 [ 1124.455213] ? lock_acquire+0x15e/0x2d0 [ 1124.455230] ? __fget_files+0x34/0x3b0 [ 1124.455246] ? find_held_lock+0x2b/0x80 [ 1124.455259] ? __fget_files+0x203/0x3b0 [ 1124.455273] ? lock_release+0xc8/0x270 [ 1124.455294] ? __fget_files+0x20d/0x3b0 [ 1124.455317] __sys_sendmsg+0x150/0x200 [ 1124.455329] ? __pfx___sys_sendmsg+0x10/0x10 [ 1124.455341] ? perf_trace_preemptirq_template+0x259/0x430 [ 1124.455369] ? __pfx_ksys_write+0x10/0x10 [ 1124.455383] ? irqentry_exit+0xee/0x650 [ 1124.455400] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1124.455417] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1124.455440] do_syscall_64+0xbf/0x420 [ 1124.455461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.455476] RIP: 0033:0x7f3b21b1bb19 [ 1124.455487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1124.455500] RSP: 002b:00007f3b1f091188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1124.455513] RAX: ffffffffffffffda RBX: 00007f3b21c2ef60 RCX: 00007f3b21b1bb19 [ 1124.455523] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1124.455531] RBP: 00007f3b1f0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1124.455539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1124.455547] R13: 00007ffe815263cf R14: 00007f3b1f091300 R15: 0000000000022000 [ 1124.455568] 14:48:31 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 4) 14:48:31 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 6) [ 1124.593252] FAULT_INJECTION: forcing a failure. [ 1124.593252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1124.595281] CPU: 1 UID: 0 PID: 8513 Comm: syz-executor.4 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1124.595318] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1124.595339] Call Trace: [ 1124.595348] [ 1124.595358] dump_stack_lvl+0xfa/0x120 [ 1124.595402] should_fail_ex+0x4d7/0x5e0 [ 1124.595441] _copy_from_iter+0x27b/0x1610 [ 1124.595470] ? lock_acquire+0x15e/0x2d0 [ 1124.595515] ? find_held_lock+0x2b/0x80 [ 1124.595542] ? __virt_addr_valid+0x2e8/0x5d0 [ 1124.595578] ? __pfx__copy_from_iter+0x10/0x10 [ 1124.595619] ? __virt_addr_valid+0x100/0x5d0 [ 1124.595653] ? __check_object_size+0x5b3/0x980 [ 1124.595712] netlink_sendmsg+0x800/0xd80 [ 1124.595754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1124.595806] ____sys_sendmsg+0xa38/0xbf0 [ 1124.595844] ? copy_msghdr_from_user+0xfb/0x150 [ 1124.595872] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1124.595933] ? lock_acquire+0x15e/0x2d0 [ 1124.595984] ___sys_sendmsg+0x10f/0x1b0 [ 1124.596019] ? __pfx____sys_sendmsg+0x10/0x10 [ 1124.596047] ? perf_trace_lock+0xbb/0x4f0 [ 1124.596096] ? __pfx_perf_trace_lock+0x10/0x10 [ 1124.596135] ? proc_fail_nth_write+0x97/0x220 [ 1124.596185] ? lock_acquire+0x15e/0x2d0 [ 1124.596219] ? __fget_files+0x34/0x3b0 [ 1124.596250] ? find_held_lock+0x2b/0x80 [ 1124.596280] ? __fget_files+0x203/0x3b0 [ 1124.596306] ? lock_release+0xc8/0x270 [ 1124.596349] ? __fget_files+0x20d/0x3b0 [ 1124.596399] __sys_sendmsg+0x150/0x200 [ 1124.596428] ? __pfx___sys_sendmsg+0x10/0x10 [ 1124.596470] ? __pfx_ksys_write+0x10/0x10 [ 1124.596497] ? irqentry_exit+0xee/0x650 [ 1124.596533] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1124.596570] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1124.596621] do_syscall_64+0xbf/0x420 [ 1124.596668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.596701] RIP: 0033:0x7f3b21b1bb19 [ 1124.596723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1124.596752] RSP: 002b:00007f3b1f091188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1124.596777] RAX: ffffffffffffffda RBX: 00007f3b21c2ef60 RCX: 00007f3b21b1bb19 [ 1124.596793] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1124.596807] RBP: 00007f3b1f0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1124.596822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1124.596836] R13: 00007ffe815263cf R14: 00007f3b1f091300 R15: 0000000000022000 [ 1124.596881] 14:48:31 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 5) 14:48:31 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 7) [ 1124.709334] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1124.798257] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1124.799036] FAULT_INJECTION: forcing a failure. [ 1124.799036] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1124.800048] CPU: 0 UID: 0 PID: 8517 Comm: syz-executor.4 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1124.800067] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1124.800080] Call Trace: [ 1124.800086] [ 1124.800092] dump_stack_lvl+0xfa/0x120 [ 1124.800130] should_fail_ex+0x4d7/0x5e0 [ 1124.800162] should_fail_alloc_page+0xe0/0x110 [ 1124.800189] prepare_alloc_pages+0x1eb/0x550 [ 1124.800221] ? desc_read+0x281/0x340 [ 1124.800259] __alloc_frozen_pages_noprof+0x186/0x25b0 [ 1124.800301] ? desc_read_finalized_seq+0x129/0x1c0 [ 1124.800335] ? __pfx_perf_tp_event+0x10/0x10 [ 1124.800360] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1124.800410] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1124.800446] ? policy_nodemask+0xeb/0x4e0 [ 1124.800494] alloc_pages_mpol+0xed/0x340 [ 1124.800539] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1124.800583] ? __irq_work_queue_local+0x1a0/0x460 [ 1124.800636] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 1124.800662] ___kmalloc_large_node+0x128/0x170 [ 1124.800697] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 1124.800726] ? wiphy_new_nm+0x700/0x20d0 [ 1124.800755] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 1124.800778] __kmalloc_large_node_noprof+0x16/0xc0 [ 1124.800814] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 1124.800839] __kmalloc_noprof+0x577/0x710 [ 1124.800867] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1124.800908] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 1124.800931] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 1124.800956] wiphy_new_nm+0x700/0x20d0 [ 1124.800988] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 1124.801016] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 1124.801045] ieee80211_alloc_hw_nm+0x1b68/0x21a0 [ 1124.801067] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1124.801095] ? __local_bh_enable_ip+0xa1/0x110 [ 1124.801114] mac80211_hwsim_new_radio+0x1dc/0x52a0 [ 1124.801141] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1124.801157] ? ___ratelimit+0x149/0x940 [ 1124.801182] ? do_trace_netlink_extack+0x12a/0x150 [ 1124.801202] ? __nla_validate_parse+0x2e6/0x2880 [ 1124.801218] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1124.801240] hwsim_new_radio_nl+0xb61/0x1300 [ 1124.801254] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1124.801269] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1124.801286] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1124.801307] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1124.801323] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1124.801344] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1124.801361] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1124.801384] ? security_capable+0x2f/0x90 [ 1124.801406] ? ns_capable+0xe2/0x120 [ 1124.801430] genl_rcv_msg+0x532/0x7e0 [ 1124.801447] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1124.801463] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1124.801477] ? __lock_acquire+0x451/0x2250 [ 1124.801500] netlink_rcv_skb+0x147/0x430 [ 1124.801513] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1124.801529] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1124.801553] ? netlink_deliver_tap+0x1af/0xcb0 [ 1124.801578] genl_rcv+0x28/0x40 [ 1124.801590] netlink_unicast+0x5a7/0x870 14:48:31 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x4000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1124.801606] ? __pfx_netlink_unicast+0x10/0x10 [ 1124.801620] ? __virt_addr_valid+0x100/0x5d0 [ 1124.801643] netlink_sendmsg+0x8a3/0xd80 [ 1124.801660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1124.801683] ____sys_sendmsg+0xa38/0xbf0 [ 1124.801704] ? copy_msghdr_from_user+0xfb/0x150 [ 1124.801718] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1124.801737] ? __pfx_perf_tp_event+0x10/0x10 [ 1124.801752] ? lock_acquire+0x15e/0x2d0 [ 1124.801772] ___sys_sendmsg+0x10f/0x1b0 [ 1124.801785] ? __pfx____sys_sendmsg+0x10/0x10 [ 1124.801797] ? perf_trace_lock+0xbb/0x4f0 [ 1124.801818] ? __pfx_perf_trace_lock+0x10/0x10 [ 1124.801835] ? proc_fail_nth_write+0x97/0x220 [ 1124.801857] ? lock_acquire+0x15e/0x2d0 [ 1124.801872] ? __fget_files+0x34/0x3b0 [ 1124.801888] ? find_held_lock+0x2b/0x80 [ 1124.801901] ? __fget_files+0x203/0x3b0 [ 1124.801914] ? lock_release+0xc8/0x270 [ 1124.801933] ? __fget_files+0x20d/0x3b0 [ 1124.801955] __sys_sendmsg+0x150/0x200 [ 1124.801967] ? __pfx___sys_sendmsg+0x10/0x10 [ 1124.801979] ? perf_trace_preemptirq_template+0x259/0x430 [ 1124.802003] ? __pfx_ksys_write+0x10/0x10 [ 1124.802017] ? irqentry_exit+0xee/0x650 [ 1124.802033] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1124.802048] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1124.802071] do_syscall_64+0xbf/0x420 [ 1124.802090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.802104] RIP: 0033:0x7f3b21b1bb19 [ 1124.802115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1124.802128] RSP: 002b:00007f3b1f091188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1124.802140] RAX: ffffffffffffffda RBX: 00007f3b21c2ef60 RCX: 00007f3b21b1bb19 [ 1124.802149] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1124.802157] RBP: 00007f3b1f0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1124.802165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1124.802185] R13: 00007ffe815263cf R14: 00007f3b1f091300 R15: 0000000000022000 [ 1124.802206] 14:48:31 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1124.866488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1124.869357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1124.875443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1124.882582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:48:31 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3e, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1125.373269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1125.374706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:48:42 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 6) 14:48:42 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x2000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:48:42 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x300, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:48:42 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x5, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:48:42 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 8) 14:48:42 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000003080)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/19, 0x13}, {&(0x7f00000004c0)=""/106, 0x6a}, {&(0x7f0000000540)=""/6, 0x6}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/187, 0xbb}], 0x7, &(0x7f0000000700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}, {{&(0x7f0000000840)=@abs, 0x6e, &(0x7f0000001bc0)=[{&(0x7f00000008c0)=""/255, 0xff}, {&(0x7f00000009c0)=""/222, 0xde}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/254, 0xfe}], 0x4, &(0x7f0000001c00)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f0000001d40), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000001dc0)=""/127, 0x7f}, {&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/216, 0xd8}], 0x3, &(0x7f0000002f80)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x3, 0x900764e784feda94, &(0x7f00000030c0)={r1, r2+10000000}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)=[r4]}, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth0_to_bond\x00'}) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10008801) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x4, 0x3, 0x8b, 0x0, 0x2, 0xe2109, 0x98faf20e35c502d2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000100), 0x2}, 0x221, 0x3, 0x5, 0x72050edb8c545872, 0x8, 0x1, 0x5, 0x0, 0x4, 0x0, 0x1}, 0x0, 0xd, r5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14:48:42 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x1800, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:48:42 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x47bb, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1135.922339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1135.925088] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1135.927582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1135.944210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1135.953495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1135.955209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1135.956783] FAULT_INJECTION: forcing a failure. [ 1135.956783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1135.958579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1135.961063] CPU: 1 UID: 0 PID: 8543 Comm: syz-executor.3 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1135.961086] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1135.961096] Call Trace: [ 1135.961101] [ 1135.961108] dump_stack_lvl+0xfa/0x120 [ 1135.961139] should_fail_ex+0x4d7/0x5e0 [ 1135.961162] _copy_from_iter+0x27b/0x1610 [ 1135.961178] ? lock_acquire+0x15e/0x2d0 [ 1135.961206] ? find_held_lock+0x2b/0x80 [ 1135.961221] ? __virt_addr_valid+0x2e8/0x5d0 [ 1135.961241] ? __pfx__copy_from_iter+0x10/0x10 [ 1135.961261] ? __virt_addr_valid+0x100/0x5d0 [ 1135.961279] ? __check_object_size+0x5b3/0x980 [ 1135.961312] netlink_sendmsg+0x800/0xd80 [ 1135.961336] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1135.961364] ____sys_sendmsg+0xa38/0xbf0 [ 1135.961388] ? copy_msghdr_from_user+0xfb/0x150 [ 1135.961405] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1135.961435] ? lock_acquire+0x15e/0x2d0 [ 1135.961461] ___sys_sendmsg+0x10f/0x1b0 [ 1135.961478] ? __pfx____sys_sendmsg+0x10/0x10 [ 1135.961493] ? perf_trace_lock+0xbb/0x4f0 [ 1135.961519] ? __pfx_perf_trace_lock+0x10/0x10 [ 1135.961540] ? proc_fail_nth_write+0x97/0x220 [ 1135.961566] ? lock_acquire+0x15e/0x2d0 [ 1135.961586] ? __fget_files+0x34/0x3b0 [ 1135.961604] ? find_held_lock+0x2b/0x80 [ 1135.961621] ? __fget_files+0x203/0x3b0 [ 1135.961638] ? lock_release+0xc8/0x270 [ 1135.961664] ? __fget_files+0x20d/0x3b0 [ 1135.961691] __sys_sendmsg+0x150/0x200 [ 1135.961708] ? __pfx___sys_sendmsg+0x10/0x10 [ 1135.961738] ? __pfx_ksys_write+0x10/0x10 [ 1135.961756] ? irqentry_exit+0xee/0x650 [ 1135.961776] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1135.961799] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1135.961828] do_syscall_64+0xbf/0x420 [ 1135.961854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.961871] RIP: 0033:0x7fbd3c214b19 [ 1135.961886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1135.961903] RSP: 002b:00007fbd3978a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1135.961919] RAX: ffffffffffffffda RBX: 00007fbd3c327f60 RCX: 00007fbd3c214b19 [ 1135.961930] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1135.961939] RBP: 00007fbd3978a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1135.961948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1135.961958] R13: 00007fffae4888ff R14: 00007fbd3978a300 R15: 0000000000022000 [ 1135.961982] [ 1135.985613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1135.986832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1135.988687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1135.990640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:48:42 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 7) [ 1136.033563] FAULT_INJECTION: forcing a failure. [ 1136.033563] name failslab, interval 1, probability 0, space 0, times 0 [ 1136.034626] CPU: 1 UID: 0 PID: 8547 Comm: syz-executor.3 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1136.034645] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1136.034654] Call Trace: [ 1136.034660] [ 1136.034666] dump_stack_lvl+0xfa/0x120 [ 1136.034693] should_fail_ex+0x4d7/0x5e0 [ 1136.034710] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 1136.034732] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 1136.034750] should_failslab+0xc2/0x120 [ 1136.034768] __kmalloc_noprof+0xc4/0x710 [ 1136.034791] ? avc_has_perm_noaudit+0x141/0x390 [ 1136.034814] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 1136.034839] genl_family_rcv_msg_doit+0xab/0x2f0 [ 1136.034857] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1136.034878] ? cap_capable+0xdb/0x380 [ 1136.034896] ? security_capable+0x2f/0x90 [ 1136.034924] ? ns_capable+0xe2/0x120 [ 1136.034950] genl_rcv_msg+0x532/0x7e0 [ 1136.034970] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1136.034988] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1136.035006] ? __lock_acquire+0x451/0x2250 [ 1136.035033] netlink_rcv_skb+0x147/0x430 [ 1136.035049] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1136.035067] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1136.035094] ? netlink_deliver_tap+0x1af/0xcb0 [ 1136.035121] genl_rcv+0x28/0x40 [ 1136.035135] netlink_unicast+0x5a7/0x870 [ 1136.035154] ? __pfx_netlink_unicast+0x10/0x10 [ 1136.035169] ? __virt_addr_valid+0x100/0x5d0 [ 1136.035194] netlink_sendmsg+0x8a3/0xd80 [ 1136.035214] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1136.035239] ____sys_sendmsg+0xa38/0xbf0 [ 1136.035259] ? copy_msghdr_from_user+0xfb/0x150 [ 1136.035274] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1136.035300] ? lock_acquire+0x15e/0x2d0 [ 1136.035322] ___sys_sendmsg+0x10f/0x1b0 [ 1136.035337] ? __pfx____sys_sendmsg+0x10/0x10 [ 1136.035349] ? perf_trace_lock+0xbb/0x4f0 [ 1136.035372] ? __pfx_perf_trace_lock+0x10/0x10 [ 1136.035391] ? proc_fail_nth_write+0x97/0x220 [ 1136.035415] ? lock_acquire+0x15e/0x2d0 [ 1136.035432] ? __fget_files+0x34/0x3b0 [ 1136.035448] ? find_held_lock+0x2b/0x80 [ 1136.035462] ? __fget_files+0x203/0x3b0 [ 1136.035477] ? lock_release+0xc8/0x270 [ 1136.035499] ? __fget_files+0x20d/0x3b0 [ 1136.035523] __sys_sendmsg+0x150/0x200 [ 1136.035537] ? __pfx___sys_sendmsg+0x10/0x10 [ 1136.035559] ? __pfx_ksys_write+0x10/0x10 [ 1136.035573] ? irqentry_exit+0xee/0x650 [ 1136.035590] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1136.035609] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1136.035634] do_syscall_64+0xbf/0x420 [ 1136.035656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1136.035671] RIP: 0033:0x7fbd3c214b19 [ 1136.035683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1136.035696] RSP: 002b:00007fbd3978a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1136.035710] RAX: ffffffffffffffda RBX: 00007fbd3c327f60 RCX: 00007fbd3c214b19 [ 1136.035720] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1136.035728] RBP: 00007fbd3978a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1136.035737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1136.035745] R13: 00007fffae4888ff R14: 00007fbd3978a300 R15: 0000000000022000 [ 1136.035768] 14:48:42 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 9) 14:48:42 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 8) [ 1136.125937] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1136.126710] FAULT_INJECTION: forcing a failure. [ 1136.126710] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1136.129964] CPU: 1 UID: 0 PID: 8551 Comm: syz-executor.4 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1136.130003] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1136.130019] Call Trace: [ 1136.130027] [ 1136.130038] dump_stack_lvl+0xfa/0x120 [ 1136.130080] should_fail_ex+0x4d7/0x5e0 [ 1136.130114] should_fail_alloc_page+0xe0/0x110 [ 1136.130150] prepare_alloc_pages+0x1eb/0x550 [ 1136.130182] ? desc_read+0x281/0x340 [ 1136.130229] __alloc_frozen_pages_noprof+0x186/0x25b0 [ 1136.130277] ? desc_read_finalized_seq+0x129/0x1c0 [ 1136.130316] ? __asan_memcpy+0x3d/0x60 [ 1136.130343] ? desc_read+0x281/0x340 [ 1136.130385] ? panic_on_this_cpu+0x32/0x40 [ 1136.130420] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1136.130470] ? find_held_lock+0x2b/0x80 [ 1136.130500] ? up+0x100/0x180 [ 1136.130545] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1136.130598] ? policy_nodemask+0xeb/0x4e0 [ 1136.130644] alloc_pages_mpol+0xed/0x340 [ 1136.130686] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1136.130724] ? __irq_work_queue_local+0x1a0/0x460 [ 1136.130767] ? perf_trace_lock_acquire+0xc8/0x580 [ 1136.130806] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 1136.130838] ___kmalloc_large_node+0x128/0x170 [ 1136.130873] ? __lock_acquire+0x451/0x2250 [ 1136.130910] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 1136.130939] ? wiphy_new_nm+0x700/0x20d0 [ 1136.130971] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 1136.131002] __kmalloc_large_node_noprof+0x16/0xc0 [ 1136.131045] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 1136.131075] __kmalloc_noprof+0x577/0x710 [ 1136.131122] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1136.131164] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 1136.131194] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 1136.131223] wiphy_new_nm+0x700/0x20d0 [ 1136.131249] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 1136.131273] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 1136.131301] ieee80211_alloc_hw_nm+0x1b68/0x21a0 [ 1136.131329] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1136.131365] ? __local_bh_enable_ip+0xa1/0x110 [ 1136.131400] mac80211_hwsim_new_radio+0x1dc/0x52a0 [ 1136.131445] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1136.131479] ? ___ratelimit+0x149/0x940 [ 1136.131518] ? do_trace_netlink_extack+0x12a/0x150 [ 1136.131549] ? __nla_validate_parse+0x2e6/0x2880 [ 1136.131582] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1136.131623] hwsim_new_radio_nl+0xb61/0x1300 [ 1136.131652] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1136.131687] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1136.131720] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1136.131754] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1136.131786] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1136.131817] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1136.131841] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1136.131886] ? security_capable+0x2f/0x90 [ 1136.131932] ? ns_capable+0xe2/0x120 [ 1136.131976] genl_rcv_msg+0x532/0x7e0 [ 1136.132014] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1136.132049] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1136.132086] ? __lock_acquire+0x451/0x2250 [ 1136.132131] netlink_rcv_skb+0x147/0x430 [ 1136.132152] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1136.132186] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1136.132237] ? netlink_deliver_tap+0x1af/0xcb0 [ 1136.132289] genl_rcv+0x28/0x40 [ 1136.132318] netlink_unicast+0x5a7/0x870 [ 1136.132352] ? __pfx_netlink_unicast+0x10/0x10 [ 1136.132383] ? __virt_addr_valid+0x100/0x5d0 [ 1136.132427] netlink_sendmsg+0x8a3/0xd80 [ 1136.132467] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1136.132511] ____sys_sendmsg+0xa38/0xbf0 [ 1136.132553] ? copy_msghdr_from_user+0xfb/0x150 [ 1136.132581] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1136.132628] ? lock_acquire+0x15e/0x2d0 [ 1136.132673] ___sys_sendmsg+0x10f/0x1b0 [ 1136.132701] ? __pfx____sys_sendmsg+0x10/0x10 [ 1136.132723] ? perf_trace_lock+0xbb/0x4f0 [ 1136.132768] ? __pfx_perf_trace_lock+0x10/0x10 [ 1136.132813] ? proc_fail_nth_write+0x97/0x220 [ 1136.132864] ? lock_acquire+0x15e/0x2d0 [ 1136.132907] ? __fget_files+0x34/0x3b0 [ 1136.132941] ? find_held_lock+0x2b/0x80 [ 1136.132970] ? __fget_files+0x203/0x3b0 [ 1136.133000] ? lock_release+0xc8/0x270 [ 1136.133042] ? __fget_files+0x20d/0x3b0 [ 1136.133082] __sys_sendmsg+0x150/0x200 [ 1136.133109] ? __pfx___sys_sendmsg+0x10/0x10 [ 1136.133143] ? __pfx_ksys_write+0x10/0x10 [ 1136.133171] ? irqentry_exit+0xee/0x650 [ 1136.133206] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1136.133243] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1136.133291] do_syscall_64+0xbf/0x420 [ 1136.133337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1136.133368] RIP: 0033:0x7f3b21b1bb19 [ 1136.133392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1136.133421] RSP: 002b:00007f3b1f091188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1136.133450] RAX: ffffffffffffffda RBX: 00007f3b21c2ef60 RCX: 00007f3b21b1bb19 [ 1136.133471] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1136.133491] RBP: 00007f3b1f0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1136.133508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1136.133527] R13: 00007ffe815263cf R14: 00007f3b1f091300 R15: 0000000000022000 [ 1136.133567] [ 1136.190189] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:48:42 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 10) [ 1136.271222] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:48:42 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 9) [ 1136.349240] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1136.352239] FAULT_INJECTION: forcing a failure. [ 1136.352239] name failslab, interval 1, probability 0, space 0, times 0 [ 1136.360250] CPU: 1 UID: 0 PID: 8558 Comm: syz-executor.3 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1136.360276] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1136.360285] Call Trace: [ 1136.360291] [ 1136.360297] dump_stack_lvl+0xfa/0x120 [ 1136.360333] should_fail_ex+0x4d7/0x5e0 [ 1136.360357] should_failslab+0xc2/0x120 [ 1136.360375] __kmalloc_node_track_caller_noprof+0xc6/0x760 [ 1136.360399] ? kvasprintf_const+0x64/0x1a0 [ 1136.360421] kvasprintf+0xbd/0x160 [ 1136.360436] ? __pfx_kvasprintf+0x10/0x10 [ 1136.360451] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1136.360481] kvasprintf_const+0x64/0x1a0 [ 1136.360499] kobject_set_name_vargs+0x5a/0x150 [ 1136.360515] dev_set_name+0xbe/0x100 [ 1136.360533] ? __pfx_dev_set_name+0x10/0x10 [ 1136.360552] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 1136.360568] ? wiphy_new_nm+0x700/0x20d0 [ 1136.360584] ? __kmalloc_large_node_noprof+0xae/0xc0 [ 1136.360604] ? __kmalloc_noprof+0x44b/0x710 [ 1136.360631] wiphy_new_nm+0x810/0x20d0 [ 1136.360647] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 1136.360662] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 1136.360678] ieee80211_alloc_hw_nm+0x1b68/0x21a0 [ 1136.360693] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1136.360713] ? __local_bh_enable_ip+0xa1/0x110 [ 1136.360731] mac80211_hwsim_new_radio+0x1dc/0x52a0 [ 1136.360753] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1136.360770] ? ___ratelimit+0x149/0x940 [ 1136.360792] ? do_trace_netlink_extack+0x12a/0x150 [ 1136.360813] ? __nla_validate_parse+0x2e6/0x2880 [ 1136.360831] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1136.360854] hwsim_new_radio_nl+0xb61/0x1300 [ 1136.360868] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1136.360886] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1136.360908] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1136.360932] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1136.360950] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1136.360972] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1136.360990] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1136.361016] ? security_capable+0x2f/0x90 [ 1136.361040] ? ns_capable+0xe2/0x120 [ 1136.361065] genl_rcv_msg+0x532/0x7e0 [ 1136.361085] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1136.361102] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1136.361118] ? __lock_acquire+0x451/0x2250 [ 1136.361142] netlink_rcv_skb+0x147/0x430 [ 1136.361158] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1136.361175] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1136.361200] ? netlink_deliver_tap+0x1af/0xcb0 [ 1136.361226] genl_rcv+0x28/0x40 [ 1136.361240] netlink_unicast+0x5a7/0x870 [ 1136.361258] ? __pfx_netlink_unicast+0x10/0x10 [ 1136.361272] ? __virt_addr_valid+0x100/0x5d0 [ 1136.361296] netlink_sendmsg+0x8a3/0xd80 [ 1136.361314] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1136.361338] ____sys_sendmsg+0xa38/0xbf0 [ 1136.361358] ? copy_msghdr_from_user+0xfb/0x150 [ 1136.361373] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1136.361393] ? __pfx_perf_tp_event+0x10/0x10 [ 1136.361411] ? lock_acquire+0x15e/0x2d0 [ 1136.361432] ___sys_sendmsg+0x10f/0x1b0 [ 1136.361447] ? __pfx____sys_sendmsg+0x10/0x10 [ 1136.361458] ? perf_trace_lock+0xbb/0x4f0 [ 1136.361481] ? __pfx_perf_trace_lock+0x10/0x10 [ 1136.361499] ? proc_fail_nth_write+0x97/0x220 [ 1136.361523] ? lock_acquire+0x15e/0x2d0 [ 1136.361540] ? __fget_files+0x34/0x3b0 [ 1136.361556] ? find_held_lock+0x2b/0x80 [ 1136.361569] ? __fget_files+0x203/0x3b0 [ 1136.361584] ? lock_release+0xc8/0x270 [ 1136.361605] ? __fget_files+0x20d/0x3b0 [ 1136.361629] __sys_sendmsg+0x150/0x200 [ 1136.361642] ? __pfx___sys_sendmsg+0x10/0x10 [ 1136.361654] ? perf_trace_preemptirq_template+0x259/0x430 [ 1136.361680] ? __pfx_ksys_write+0x10/0x10 [ 1136.361694] ? irqentry_exit+0xee/0x650 [ 1136.361711] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1136.361728] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1136.361753] do_syscall_64+0xbf/0x420 [ 1136.361774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1136.361789] RIP: 0033:0x7fbd3c214b19 [ 1136.361801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1136.361815] RSP: 002b:00007fbd3978a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1136.361830] RAX: ffffffffffffffda RBX: 00007fbd3c327f60 RCX: 00007fbd3c214b19 [ 1136.361840] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1136.361848] RBP: 00007fbd3978a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1136.361857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1136.361865] R13: 00007fffae4888ff R14: 00007fbd3978a300 R15: 0000000000022000 [ 1136.361887] [ 1136.505987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1136.507273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:48:52 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x48bb, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:48:52 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 11) 14:48:52 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000200), 0xffffffffffffff7f, 0x300) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0xcb, 0x9, 0x81, 0xff, 0x0, 0x39c, 0xb460, 0xc, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100)}, 0x42210, 0x57605168, 0x200, 0x6, 0x3, 0x2, 0x7, 0x0, 0x2, 0x0, 0x1}, 0x0, 0x7, r0, 0x2) r2 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) 14:48:52 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x500, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:48:52 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x21ce, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:48:52 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x2000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:48:52 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x6, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:48:52 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 10) [ 1145.858458] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1145.860343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1145.861112] FAULT_INJECTION: forcing a failure. [ 1145.861112] name failslab, interval 1, probability 0, space 0, times 0 [ 1145.862582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1145.863303] CPU: 0 UID: 0 PID: 8571 Comm: syz-executor.4 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1145.863321] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1145.863330] Call Trace: [ 1145.863335] [ 1145.863340] dump_stack_lvl+0xfa/0x120 [ 1145.863370] should_fail_ex+0x4d7/0x5e0 [ 1145.863387] ? rfkill_alloc+0xaa/0x2d0 [ 1145.863405] ? rfkill_alloc+0xaa/0x2d0 [ 1145.863420] should_failslab+0xc2/0x120 [ 1145.863438] __kmalloc_noprof+0xc4/0x710 [ 1145.863460] ? lockdep_init_map_type+0x4b/0x220 [ 1145.863485] rfkill_alloc+0xaa/0x2d0 [ 1145.863504] wiphy_new_nm+0x12f4/0x20d0 [ 1145.863522] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 1145.863539] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 1145.863554] ieee80211_alloc_hw_nm+0x1b68/0x21a0 [ 1145.863567] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1145.863585] ? __local_bh_enable_ip+0xa1/0x110 [ 1145.863604] mac80211_hwsim_new_radio+0x1dc/0x52a0 [ 1145.863626] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1145.863643] ? ___ratelimit+0x149/0x940 [ 1145.863664] ? do_trace_netlink_extack+0x12a/0x150 [ 1145.863684] ? __nla_validate_parse+0x2e6/0x2880 [ 1145.863702] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1145.863725] hwsim_new_radio_nl+0xb61/0x1300 [ 1145.863739] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1145.863756] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1145.863773] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1145.863796] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1145.863815] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1145.863837] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1145.863854] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1145.863879] ? security_capable+0x2f/0x90 [ 1145.863907] ? ns_capable+0xe2/0x120 [ 1145.863931] genl_rcv_msg+0x532/0x7e0 [ 1145.863950] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1145.863967] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1145.863982] ? __lock_acquire+0x451/0x2250 [ 1145.864007] netlink_rcv_skb+0x147/0x430 [ 1145.864021] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1145.864038] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1145.864062] ? netlink_deliver_tap+0x1af/0xcb0 [ 1145.864088] genl_rcv+0x28/0x40 [ 1145.864102] netlink_unicast+0x5a7/0x870 [ 1145.864119] ? __pfx_netlink_unicast+0x10/0x10 [ 1145.864133] ? __virt_addr_valid+0x100/0x5d0 [ 1145.864157] netlink_sendmsg+0x8a3/0xd80 [ 1145.864175] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1145.864199] ____sys_sendmsg+0xa38/0xbf0 [ 1145.864218] ? copy_msghdr_from_user+0xfb/0x150 [ 1145.864233] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1145.864253] ? __pfx_perf_tp_event+0x10/0x10 [ 1145.864271] ? lock_acquire+0x15e/0x2d0 [ 1145.864292] ___sys_sendmsg+0x10f/0x1b0 [ 1145.864306] ? __pfx____sys_sendmsg+0x10/0x10 [ 1145.864317] ? perf_trace_lock+0xbb/0x4f0 [ 1145.864341] ? __pfx_perf_trace_lock+0x10/0x10 [ 1145.864358] ? proc_fail_nth_write+0x97/0x220 [ 1145.864381] ? lock_acquire+0x15e/0x2d0 [ 1145.864398] ? __fget_files+0x34/0x3b0 [ 1145.864415] ? find_held_lock+0x2b/0x80 [ 1145.864428] ? __fget_files+0x203/0x3b0 [ 1145.864442] ? lock_release+0xc8/0x270 [ 1145.864463] ? __fget_files+0x20d/0x3b0 [ 1145.864485] __sys_sendmsg+0x150/0x200 [ 1145.864498] ? __pfx___sys_sendmsg+0x10/0x10 [ 1145.864511] ? perf_trace_preemptirq_template+0x259/0x430 [ 1145.864538] ? __pfx_ksys_write+0x10/0x10 [ 1145.864552] ? irqentry_exit+0xee/0x650 [ 1145.864569] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1145.864586] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1145.864610] do_syscall_64+0xbf/0x420 [ 1145.864631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.864646] RIP: 0033:0x7f3b21b1bb19 [ 1145.864657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1145.864671] RSP: 002b:00007f3b1f091188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1145.864684] RAX: ffffffffffffffda RBX: 00007f3b21c2ef60 RCX: 00007f3b21b1bb19 [ 1145.864693] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1145.864702] RBP: 00007f3b1f0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1145.864710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1145.864718] R13: 00007ffe815263cf R14: 00007f3b1f091300 R15: 0000000000022000 [ 1145.864740] [ 1145.891532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1145.902227] FAULT_INJECTION: forcing a failure. [ 1145.902227] name failslab, interval 1, probability 0, space 0, times 0 [ 1145.904087] CPU: 1 UID: 0 PID: 8565 Comm: syz-executor.3 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1145.904118] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1145.904132] Call Trace: [ 1145.904141] [ 1145.904150] dump_stack_lvl+0xfa/0x120 [ 1145.904188] should_fail_ex+0x4d7/0x5e0 [ 1145.904214] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 1145.904249] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 1145.904281] should_failslab+0xc2/0x120 [ 1145.904310] __kmalloc_noprof+0xc4/0x710 [ 1145.904348] ? avc_has_perm_noaudit+0x141/0x390 [ 1145.904390] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 1145.904432] genl_family_rcv_msg_doit+0xab/0x2f0 [ 1145.904463] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1145.904502] ? cap_capable+0xdb/0x380 [ 1145.904532] ? security_capable+0x2f/0x90 [ 1145.904573] ? ns_capable+0xe2/0x120 [ 1145.904616] genl_rcv_msg+0x532/0x7e0 [ 1145.904652] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1145.904682] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1145.904712] ? __lock_acquire+0x451/0x2250 [ 1145.904758] netlink_rcv_skb+0x147/0x430 [ 1145.904785] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1145.904817] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1145.904863] ? netlink_deliver_tap+0x1af/0xcb0 [ 1145.904917] genl_rcv+0x28/0x40 [ 1145.904942] netlink_unicast+0x5a7/0x870 [ 1145.904975] ? __pfx_netlink_unicast+0x10/0x10 [ 1145.905002] ? __virt_addr_valid+0x100/0x5d0 [ 1145.905045] netlink_sendmsg+0x8a3/0xd80 [ 1145.905080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1145.905125] ____sys_sendmsg+0xa38/0xbf0 [ 1145.905159] ? copy_msghdr_from_user+0xfb/0x150 [ 1145.905184] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1145.905230] ? lock_acquire+0x15e/0x2d0 [ 1145.905273] ___sys_sendmsg+0x10f/0x1b0 [ 1145.905299] ? __pfx____sys_sendmsg+0x10/0x10 [ 1145.905322] ? perf_trace_lock+0xbb/0x4f0 [ 1145.905365] ? __pfx_perf_trace_lock+0x10/0x10 [ 1145.905397] ? proc_fail_nth_write+0x97/0x220 [ 1145.905438] ? lock_acquire+0x15e/0x2d0 [ 1145.905469] ? __fget_files+0x34/0x3b0 [ 1145.905496] ? find_held_lock+0x2b/0x80 [ 1145.905520] ? __fget_files+0x203/0x3b0 [ 1145.905548] ? lock_release+0xc8/0x270 [ 1145.905586] ? __fget_files+0x20d/0x3b0 [ 1145.905629] __sys_sendmsg+0x150/0x200 [ 1145.905654] ? __pfx___sys_sendmsg+0x10/0x10 [ 1145.905693] ? __pfx_ksys_write+0x10/0x10 [ 1145.905716] ? irqentry_exit+0xee/0x650 [ 1145.905747] ? trace_hardirqs_on_prepare+0xe3/0x110 14:48:52 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 12) [ 1145.905779] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1145.905824] do_syscall_64+0xbf/0x420 [ 1145.905861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.905886] RIP: 0033:0x7fbd3c214b19 [ 1145.905906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1145.905929] RSP: 002b:00007fbd3978a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1145.905953] RAX: ffffffffffffffda RBX: 00007fbd3c327f60 RCX: 00007fbd3c214b19 [ 1145.905970] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1145.905985] RBP: 00007fbd3978a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1145.906000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1145.906015] R13: 00007fffae4888ff R14: 00007fbd3978a300 R15: 0000000000022000 [ 1145.906055] [ 1145.970379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1145.982126] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1145.986228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1145.993146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:48:52 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 11) [ 1146.099976] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1146.101869] FAULT_INJECTION: forcing a failure. [ 1146.101869] name failslab, interval 1, probability 0, space 0, times 0 [ 1146.104308] CPU: 1 UID: 0 PID: 8581 Comm: syz-executor.3 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1146.104345] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1146.104360] Call Trace: [ 1146.104369] [ 1146.104380] dump_stack_lvl+0xfa/0x120 [ 1146.104429] should_fail_ex+0x4d7/0x5e0 [ 1146.104467] should_failslab+0xc2/0x120 [ 1146.104501] __kmalloc_node_track_caller_noprof+0xc6/0x760 [ 1146.104546] ? kvasprintf_const+0x64/0x1a0 [ 1146.104576] ? __lock_acquire+0x451/0x2250 [ 1146.104621] kvasprintf+0xbd/0x160 [ 1146.104651] ? __pfx_kvasprintf+0x10/0x10 [ 1146.104678] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1146.104737] kvasprintf_const+0x64/0x1a0 [ 1146.104771] kobject_set_name_vargs+0x5a/0x150 [ 1146.104802] dev_set_name+0xbe/0x100 [ 1146.104835] ? __pfx_dev_set_name+0x10/0x10 [ 1146.104870] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 1146.104910] ? wiphy_new_nm+0x700/0x20d0 [ 1146.104939] ? __kmalloc_large_node_noprof+0xae/0xc0 [ 1146.104979] ? __kmalloc_noprof+0x44b/0x710 [ 1146.105029] wiphy_new_nm+0x810/0x20d0 [ 1146.105060] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 1146.105090] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 1146.105119] ieee80211_alloc_hw_nm+0x1b68/0x21a0 [ 1146.105147] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1146.105181] ? __local_bh_enable_ip+0xa1/0x110 [ 1146.105216] mac80211_hwsim_new_radio+0x1dc/0x52a0 [ 1146.105257] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1146.105289] ? ___ratelimit+0x149/0x940 [ 1146.105330] ? do_trace_netlink_extack+0x12a/0x150 [ 1146.105369] ? __nla_validate_parse+0x2e6/0x2880 [ 1146.105404] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1146.105450] hwsim_new_radio_nl+0xb61/0x1300 [ 1146.105477] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1146.105511] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1146.105545] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1146.105591] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1146.105625] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1146.105669] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1146.105703] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1146.105753] ? security_capable+0x2f/0x90 [ 1146.105799] ? ns_capable+0xe2/0x120 [ 1146.105846] genl_rcv_msg+0x532/0x7e0 [ 1146.105884] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1146.105917] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1146.105947] ? __lock_acquire+0x451/0x2250 [ 1146.105996] netlink_rcv_skb+0x147/0x430 [ 1146.106024] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1146.106058] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1146.106107] ? netlink_deliver_tap+0x1af/0xcb0 [ 1146.106158] genl_rcv+0x28/0x40 [ 1146.106185] netlink_unicast+0x5a7/0x870 [ 1146.106219] ? __pfx_netlink_unicast+0x10/0x10 [ 1146.106247] ? __virt_addr_valid+0x100/0x5d0 [ 1146.106294] netlink_sendmsg+0x8a3/0xd80 [ 1146.106330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1146.106392] ____sys_sendmsg+0xa38/0xbf0 [ 1146.106432] ? copy_msghdr_from_user+0xfb/0x150 [ 1146.106459] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1146.106508] ? lock_acquire+0x15e/0x2d0 [ 1146.106548] ___sys_sendmsg+0x10f/0x1b0 [ 1146.106576] ? __pfx____sys_sendmsg+0x10/0x10 [ 1146.106600] ? perf_trace_lock+0xbb/0x4f0 [ 1146.106644] ? __pfx_perf_trace_lock+0x10/0x10 [ 1146.106679] ? proc_fail_nth_write+0x97/0x220 [ 1146.106723] ? lock_acquire+0x15e/0x2d0 [ 1146.106756] ? __fget_files+0x34/0x3b0 [ 1146.106787] ? find_held_lock+0x2b/0x80 [ 1146.106813] ? __fget_files+0x203/0x3b0 [ 1146.106842] ? lock_release+0xc8/0x270 [ 1146.106883] ? __fget_files+0x20d/0x3b0 [ 1146.106928] __sys_sendmsg+0x150/0x200 [ 1146.106954] ? __pfx___sys_sendmsg+0x10/0x10 [ 1146.106995] ? __pfx_ksys_write+0x10/0x10 [ 1146.107021] ? irqentry_exit+0xee/0x650 [ 1146.107053] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1146.107087] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1146.107134] do_syscall_64+0xbf/0x420 [ 1146.107176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.107203] RIP: 0033:0x7fbd3c214b19 [ 1146.107225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1146.107250] RSP: 002b:00007fbd3978a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1146.107276] RAX: ffffffffffffffda RBX: 00007fbd3c327f60 RCX: 00007fbd3c214b19 [ 1146.107294] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1146.107310] RBP: 00007fbd3978a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1146.107327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1146.107343] R13: 00007fffae4888ff R14: 00007fbd3978a300 R15: 0000000000022000 [ 1146.107385] 14:48:52 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 13) 14:48:52 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 12) [ 1146.252714] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1146.363298] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1146.364190] FAULT_INJECTION: forcing a failure. [ 1146.364190] name failslab, interval 1, probability 0, space 0, times 0 [ 1146.365182] CPU: 0 UID: 0 PID: 8588 Comm: syz-executor.4 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1146.365200] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1146.365209] Call Trace: [ 1146.365214] [ 1146.365219] dump_stack_lvl+0xfa/0x120 [ 1146.365249] should_fail_ex+0x4d7/0x5e0 [ 1146.365269] should_failslab+0xc2/0x120 [ 1146.365289] __kvmalloc_node_noprof+0x118/0x890 [ 1146.365306] ? bucket_table_alloc.isra.0+0x8e/0x480 [ 1146.365336] bucket_table_alloc.isra.0+0x8e/0x480 [ 1146.365361] rhashtable_init_noprof+0x345/0x760 [ 1146.365385] rhltable_init_noprof+0x20/0x60 [ 1146.365407] sta_info_init+0x26/0x160 [ 1146.365431] ieee80211_alloc_hw_nm+0x85d/0x21a0 [ 1146.365446] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1146.365470] mac80211_hwsim_new_radio+0x1dc/0x52a0 [ 1146.365492] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1146.365509] ? ___ratelimit+0x149/0x940 [ 1146.365530] ? do_trace_netlink_extack+0x12a/0x150 [ 1146.365551] ? __nla_validate_parse+0x2e6/0x2880 [ 1146.365569] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1146.365592] hwsim_new_radio_nl+0xb61/0x1300 [ 1146.365605] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1146.365622] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1146.365639] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1146.365662] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1146.365680] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1146.365702] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1146.365719] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1146.365744] ? security_capable+0x2f/0x90 [ 1146.365768] ? ns_capable+0xe2/0x120 [ 1146.365793] genl_rcv_msg+0x532/0x7e0 [ 1146.365812] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1146.365828] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1146.365844] ? __lock_acquire+0x451/0x2250 [ 1146.365869] netlink_rcv_skb+0x147/0x430 [ 1146.365883] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1146.365904] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1146.365929] ? netlink_deliver_tap+0x1af/0xcb0 [ 1146.365955] genl_rcv+0x28/0x40 [ 1146.365968] netlink_unicast+0x5a7/0x870 [ 1146.365985] ? __pfx_netlink_unicast+0x10/0x10 [ 1146.365999] ? __virt_addr_valid+0x100/0x5d0 [ 1146.366024] netlink_sendmsg+0x8a3/0xd80 [ 1146.366043] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1146.366066] ____sys_sendmsg+0xa38/0xbf0 [ 1146.366086] ? copy_msghdr_from_user+0xfb/0x150 [ 1146.366100] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1146.366121] ? __pfx_perf_tp_event+0x10/0x10 [ 1146.366140] ? lock_acquire+0x15e/0x2d0 [ 1146.366160] ___sys_sendmsg+0x10f/0x1b0 [ 1146.366174] ? __pfx____sys_sendmsg+0x10/0x10 [ 1146.366186] ? perf_trace_lock+0xbb/0x4f0 [ 1146.366209] ? __pfx_perf_trace_lock+0x10/0x10 [ 1146.366227] ? proc_fail_nth_write+0x97/0x220 [ 1146.366250] ? lock_acquire+0x15e/0x2d0 [ 1146.366266] ? __fget_files+0x34/0x3b0 [ 1146.366283] ? find_held_lock+0x2b/0x80 [ 1146.366296] ? __fget_files+0x203/0x3b0 [ 1146.366311] ? lock_release+0xc8/0x270 [ 1146.366332] ? __fget_files+0x20d/0x3b0 [ 1146.366365] __sys_sendmsg+0x150/0x200 [ 1146.366379] ? __pfx___sys_sendmsg+0x10/0x10 [ 1146.366391] ? perf_trace_preemptirq_template+0x259/0x430 [ 1146.366418] ? __pfx_ksys_write+0x10/0x10 [ 1146.366432] ? irqentry_exit+0xee/0x650 [ 1146.366448] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1146.366466] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1146.366489] do_syscall_64+0xbf/0x420 [ 1146.366511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.366525] RIP: 0033:0x7f3b21b1bb19 [ 1146.366536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1146.366550] RSP: 002b:00007f3b1f091188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1146.366563] RAX: ffffffffffffffda RBX: 00007f3b21c2ef60 RCX: 00007f3b21b1bb19 [ 1146.366572] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1146.366581] RBP: 00007f3b1f0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1146.366589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1146.366596] R13: 00007ffe815263cf R14: 00007f3b1f091300 R15: 0000000000022000 [ 1146.366618] 14:48:53 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 13) 14:48:53 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x800, 0x20000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 1146.500675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1146.508399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1146.530030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1146.531459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:48:53 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x21f7, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:48:53 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x49bb, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:48:53 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:48:53 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x21cf, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:48:53 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x600, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1146.670588] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1146.672094] FAULT_INJECTION: forcing a failure. [ 1146.672094] name failslab, interval 1, probability 0, space 0, times 0 [ 1146.683126] CPU: 1 UID: 0 PID: 8593 Comm: syz-executor.3 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1146.683160] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1146.683175] Call Trace: [ 1146.683183] [ 1146.683192] dump_stack_lvl+0xfa/0x120 [ 1146.683234] should_fail_ex+0x4d7/0x5e0 [ 1146.683260] ? rfkill_alloc+0xaa/0x2d0 [ 1146.683290] ? rfkill_alloc+0xaa/0x2d0 [ 1146.683316] should_failslab+0xc2/0x120 [ 1146.683345] __kmalloc_noprof+0xc4/0x710 [ 1146.683382] ? lockdep_init_map_type+0x4b/0x220 [ 1146.683421] rfkill_alloc+0xaa/0x2d0 [ 1146.683460] wiphy_new_nm+0x12f4/0x20d0 [ 1146.683491] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 1146.683519] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 1146.683544] ieee80211_alloc_hw_nm+0x1b68/0x21a0 [ 1146.683568] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1146.683598] ? __local_bh_enable_ip+0xa1/0x110 [ 1146.683629] mac80211_hwsim_new_radio+0x1dc/0x52a0 [ 1146.683665] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1146.683693] ? ___ratelimit+0x149/0x940 [ 1146.683728] ? do_trace_netlink_extack+0x12a/0x150 [ 1146.683762] ? __nla_validate_parse+0x2e6/0x2880 [ 1146.683794] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1146.683837] hwsim_new_radio_nl+0xb61/0x1300 [ 1146.683861] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1146.683890] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1146.683927] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1146.683967] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1146.683997] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1146.684035] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1146.684065] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1146.684109] ? security_capable+0x2f/0x90 [ 1146.684149] ? ns_capable+0xe2/0x120 [ 1146.684191] genl_rcv_msg+0x532/0x7e0 [ 1146.684224] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1146.684252] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1146.684279] ? __lock_acquire+0x451/0x2250 [ 1146.684321] netlink_rcv_skb+0x147/0x430 [ 1146.684347] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1146.684376] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1146.684419] ? netlink_deliver_tap+0x1af/0xcb0 [ 1146.684464] genl_rcv+0x28/0x40 [ 1146.684487] netlink_unicast+0x5a7/0x870 [ 1146.684517] ? __pfx_netlink_unicast+0x10/0x10 [ 1146.684542] ? __virt_addr_valid+0x100/0x5d0 [ 1146.684582] netlink_sendmsg+0x8a3/0xd80 [ 1146.684614] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1146.684656] ____sys_sendmsg+0xa38/0xbf0 [ 1146.684689] ? copy_msghdr_from_user+0xfb/0x150 [ 1146.684713] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1146.684756] ? lock_acquire+0x15e/0x2d0 [ 1146.684791] ___sys_sendmsg+0x10f/0x1b0 [ 1146.684816] ? __pfx____sys_sendmsg+0x10/0x10 [ 1146.684836] ? perf_trace_lock+0xbb/0x4f0 [ 1146.684876] ? __pfx_perf_trace_lock+0x10/0x10 [ 1146.684905] ? proc_fail_nth_write+0x97/0x220 [ 1146.684944] ? lock_acquire+0x15e/0x2d0 [ 1146.684973] ? __fget_files+0x34/0x3b0 [ 1146.685000] ? find_held_lock+0x2b/0x80 [ 1146.685023] ? __fget_files+0x203/0x3b0 [ 1146.685048] ? lock_release+0xc8/0x270 [ 1146.685084] ? __fget_files+0x20d/0x3b0 [ 1146.685123] __sys_sendmsg+0x150/0x200 [ 1146.685146] ? __pfx___sys_sendmsg+0x10/0x10 [ 1146.685183] ? __pfx_ksys_write+0x10/0x10 [ 1146.685206] ? irqentry_exit+0xee/0x650 [ 1146.685234] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1146.685266] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1146.685307] do_syscall_64+0xbf/0x420 [ 1146.685343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.685367] RIP: 0033:0x7fbd3c214b19 [ 1146.685387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1146.685409] RSP: 002b:00007fbd3978a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1146.685432] RAX: ffffffffffffffda RBX: 00007fbd3c327f60 RCX: 00007fbd3c214b19 [ 1146.685448] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1146.685462] RBP: 00007fbd3978a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1146.685476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1146.685489] R13: 00007fffae4888ff R14: 00007fbd3978a300 R15: 0000000000022000 [ 1146.685527] 14:48:53 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 14) [ 1146.784860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1146.786865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:48:53 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 14) [ 1146.835358] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1146.932425] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:48:53 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 15) [ 1147.042737] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1147.044325] FAULT_INJECTION: forcing a failure. [ 1147.044325] name failslab, interval 1, probability 0, space 0, times 0 [ 1147.046122] CPU: 1 UID: 0 PID: 8609 Comm: syz-executor.4 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1147.046153] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1147.046167] Call Trace: [ 1147.046176] [ 1147.046185] dump_stack_lvl+0xfa/0x120 [ 1147.046228] should_fail_ex+0x4d7/0x5e0 [ 1147.046261] should_failslab+0xc2/0x120 [ 1147.046290] __kvmalloc_node_noprof+0x118/0x890 [ 1147.046317] ? bucket_table_alloc.isra.0+0x8e/0x480 [ 1147.046380] bucket_table_alloc.isra.0+0x8e/0x480 [ 1147.046422] rhashtable_init_noprof+0x345/0x760 [ 1147.046463] rhltable_init_noprof+0x20/0x60 [ 1147.046500] sta_info_init+0x26/0x160 [ 1147.046539] ieee80211_alloc_hw_nm+0x85d/0x21a0 [ 1147.046564] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1147.046604] mac80211_hwsim_new_radio+0x1dc/0x52a0 [ 1147.046641] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1147.046669] ? ___ratelimit+0x149/0x940 [ 1147.046704] ? do_trace_netlink_extack+0x12a/0x150 [ 1147.046738] ? __nla_validate_parse+0x2e6/0x2880 [ 1147.046768] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1147.046808] hwsim_new_radio_nl+0xb61/0x1300 [ 1147.046832] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1147.046861] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1147.046891] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1147.046939] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1147.046971] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1147.047008] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1147.047039] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1147.047082] ? security_capable+0x2f/0x90 [ 1147.047123] ? ns_capable+0xe2/0x120 [ 1147.047165] genl_rcv_msg+0x532/0x7e0 [ 1147.047199] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1147.047228] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1147.047255] ? __lock_acquire+0x451/0x2250 [ 1147.047297] netlink_rcv_skb+0x147/0x430 [ 1147.047322] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1147.047352] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1147.047395] ? netlink_deliver_tap+0x1af/0xcb0 [ 1147.047440] genl_rcv+0x28/0x40 [ 1147.047463] netlink_unicast+0x5a7/0x870 [ 1147.047494] ? __pfx_netlink_unicast+0x10/0x10 [ 1147.047519] ? __virt_addr_valid+0x100/0x5d0 [ 1147.047561] netlink_sendmsg+0x8a3/0xd80 [ 1147.047593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1147.047636] ____sys_sendmsg+0xa38/0xbf0 [ 1147.047670] ? copy_msghdr_from_user+0xfb/0x150 [ 1147.047694] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1147.047738] ? lock_acquire+0x15e/0x2d0 [ 1147.047773] ___sys_sendmsg+0x10f/0x1b0 [ 1147.047798] ? __pfx____sys_sendmsg+0x10/0x10 [ 1147.047818] ? perf_trace_lock+0xbb/0x4f0 [ 1147.047858] ? __pfx_perf_trace_lock+0x10/0x10 [ 1147.047887] ? proc_fail_nth_write+0x97/0x220 [ 1147.047926] ? lock_acquire+0x15e/0x2d0 [ 1147.047955] ? __fget_files+0x34/0x3b0 [ 1147.047983] ? find_held_lock+0x2b/0x80 [ 1147.048005] ? __fget_files+0x203/0x3b0 [ 1147.048031] ? lock_release+0xc8/0x270 [ 1147.048067] ? __fget_files+0x20d/0x3b0 [ 1147.048106] __sys_sendmsg+0x150/0x200 [ 1147.048129] ? __pfx___sys_sendmsg+0x10/0x10 [ 1147.048165] ? __pfx_ksys_write+0x10/0x10 [ 1147.048187] ? irqentry_exit+0xee/0x650 [ 1147.048215] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1147.048247] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1147.048288] do_syscall_64+0xbf/0x420 [ 1147.048324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.048348] RIP: 0033:0x7f3b21b1bb19 [ 1147.048367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1147.048389] RSP: 002b:00007f3b1f091188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1147.048412] RAX: ffffffffffffffda RBX: 00007f3b21c2ef60 RCX: 00007f3b21b1bb19 [ 1147.048427] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1147.048441] RBP: 00007f3b1f0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1147.048455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1147.048469] R13: 00007ffe815263cf R14: 00007f3b1f091300 R15: 0000000000022000 [ 1147.048507] 14:48:53 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 15) 14:48:53 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080)={0x0, 0xfffffffd, 0x4, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14:48:53 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x8, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:48:53 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x4abb, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1147.235636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1147.238660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1147.318750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1147.322450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1147.328355] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1147.338398] FAULT_INJECTION: forcing a failure. [ 1147.338398] name failslab, interval 1, probability 0, space 0, times 0 [ 1147.342756] CPU: 0 UID: 0 PID: 8612 Comm: syz-executor.3 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1147.342780] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1147.342791] Call Trace: [ 1147.342797] [ 1147.342805] dump_stack_lvl+0xfa/0x120 [ 1147.342838] should_fail_ex+0x4d7/0x5e0 [ 1147.342863] should_failslab+0xc2/0x120 [ 1147.342886] __kvmalloc_node_noprof+0x118/0x890 [ 1147.342911] ? bucket_table_alloc.isra.0+0x8e/0x480 [ 1147.342946] bucket_table_alloc.isra.0+0x8e/0x480 [ 1147.342978] rhashtable_init_noprof+0x345/0x760 [ 1147.343008] rhltable_init_noprof+0x20/0x60 [ 1147.343038] sta_info_init+0x60/0x160 [ 1147.343068] ieee80211_alloc_hw_nm+0x85d/0x21a0 [ 1147.343086] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1147.343116] mac80211_hwsim_new_radio+0x1dc/0x52a0 [ 1147.343144] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1147.343165] ? ___ratelimit+0x149/0x940 [ 1147.343192] ? do_trace_netlink_extack+0x12a/0x150 [ 1147.343217] ? __nla_validate_parse+0x2e6/0x2880 [ 1147.343240] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1147.343271] hwsim_new_radio_nl+0xb61/0x1300 [ 1147.343288] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1147.343310] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1147.343333] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1147.343363] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1147.343385] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1147.343414] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1147.343437] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1147.343470] ? security_capable+0x2f/0x90 [ 1147.343500] ? ns_capable+0xe2/0x120 [ 1147.343531] genl_rcv_msg+0x532/0x7e0 [ 1147.343556] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1147.343578] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1147.343598] ? __lock_acquire+0x451/0x2250 [ 1147.343630] netlink_rcv_skb+0x147/0x430 [ 1147.343649] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1147.343671] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1147.343703] ? netlink_deliver_tap+0x1af/0xcb0 [ 1147.343737] genl_rcv+0x28/0x40 [ 1147.343754] netlink_unicast+0x5a7/0x870 [ 1147.343777] ? __pfx_netlink_unicast+0x10/0x10 [ 1147.343796] ? __virt_addr_valid+0x100/0x5d0 [ 1147.343827] netlink_sendmsg+0x8a3/0xd80 [ 1147.343851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1147.343882] ____sys_sendmsg+0xa38/0xbf0 [ 1147.343906] ? copy_msghdr_from_user+0xfb/0x150 [ 1147.343925] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1147.343951] ? __pfx_perf_tp_event+0x10/0x10 [ 1147.343974] ? lock_acquire+0x15e/0x2d0 [ 1147.344000] ___sys_sendmsg+0x10f/0x1b0 [ 1147.344019] ? __pfx____sys_sendmsg+0x10/0x10 [ 1147.344034] ? perf_trace_lock+0xbb/0x4f0 [ 1147.344068] ? __pfx_perf_trace_lock+0x10/0x10 [ 1147.344090] ? proc_fail_nth_write+0x97/0x220 [ 1147.344119] ? lock_acquire+0x15e/0x2d0 [ 1147.344140] ? __fget_files+0x34/0x3b0 [ 1147.344160] ? find_held_lock+0x2b/0x80 [ 1147.344177] ? __fget_files+0x203/0x3b0 [ 1147.344196] ? lock_release+0xc8/0x270 [ 1147.344222] ? __fget_files+0x20d/0x3b0 [ 1147.344252] __sys_sendmsg+0x150/0x200 [ 1147.344269] ? __pfx___sys_sendmsg+0x10/0x10 [ 1147.344285] ? perf_trace_preemptirq_template+0x259/0x430 [ 1147.344320] ? __pfx_ksys_write+0x10/0x10 [ 1147.344337] ? irqentry_exit+0xee/0x650 [ 1147.344358] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1147.344380] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1147.344411] do_syscall_64+0xbf/0x420 [ 1147.344437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.344456] RIP: 0033:0x7fbd3c214b19 [ 1147.344471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1147.344488] RSP: 002b:00007fbd3978a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1147.344506] RAX: ffffffffffffffda RBX: 00007fbd3c327f60 RCX: 00007fbd3c214b19 [ 1147.344518] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1147.344529] RBP: 00007fbd3978a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1147.344539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1147.344549] R13: 00007fffae4888ff R14: 00007fbd3978a300 R15: 0000000000022000 [ 1147.344577] [ 1147.749488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1147.751759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:49:07 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 16) 14:49:07 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x4bbb, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1160.759587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1160.769994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1160.770720] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:49:07 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x18, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:49:07 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x700, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:49:07 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x21fa, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:49:07 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 16) 14:49:07 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:49:07 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3e00, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1160.826696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1160.833386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1160.853274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1160.855386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1160.858985] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:49:07 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 17) [ 1160.980379] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1160.985040] FAULT_INJECTION: forcing a failure. [ 1160.985040] name failslab, interval 1, probability 0, space 0, times 0 [ 1160.989055] CPU: 1 UID: 0 PID: 8646 Comm: syz-executor.3 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1160.989087] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1160.989101] Call Trace: [ 1160.989110] [ 1160.989119] dump_stack_lvl+0xfa/0x120 [ 1160.989162] should_fail_ex+0x4d7/0x5e0 [ 1160.989196] should_failslab+0xc2/0x120 [ 1160.989227] __kvmalloc_node_noprof+0x118/0x890 [ 1160.989255] ? bucket_table_alloc.isra.0+0x8e/0x480 [ 1160.989304] bucket_table_alloc.isra.0+0x8e/0x480 [ 1160.989346] rhashtable_init_noprof+0x345/0x760 [ 1160.989387] rhltable_init_noprof+0x20/0x60 [ 1160.989428] sta_info_init+0x60/0x160 [ 1160.989464] ieee80211_alloc_hw_nm+0x85d/0x21a0 [ 1160.989488] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1160.989529] mac80211_hwsim_new_radio+0x1dc/0x52a0 [ 1160.989568] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1160.989601] ? ___ratelimit+0x149/0x940 [ 1160.989642] ? do_trace_netlink_extack+0x12a/0x150 [ 1160.989676] ? __nla_validate_parse+0x2e6/0x2880 [ 1160.989708] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1160.989749] hwsim_new_radio_nl+0xb61/0x1300 [ 1160.989775] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1160.989808] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1160.989838] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1160.989880] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1160.989910] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1160.989949] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1160.989980] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1160.990027] ? security_capable+0x2f/0x90 [ 1160.990071] ? ns_capable+0xe2/0x120 [ 1160.990116] genl_rcv_msg+0x532/0x7e0 [ 1160.990150] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1160.990182] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1160.990213] ? __lock_acquire+0x451/0x2250 [ 1160.990258] netlink_rcv_skb+0x147/0x430 [ 1160.990284] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1160.990314] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1160.990359] ? netlink_deliver_tap+0x1af/0xcb0 [ 1160.990410] genl_rcv+0x28/0x40 [ 1160.990436] netlink_unicast+0x5a7/0x870 [ 1160.990470] ? __pfx_netlink_unicast+0x10/0x10 [ 1160.990516] ? __virt_addr_valid+0x100/0x5d0 [ 1160.990562] netlink_sendmsg+0x8a3/0xd80 [ 1160.990598] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1160.990640] ____sys_sendmsg+0xa38/0xbf0 [ 1160.990673] ? copy_msghdr_from_user+0xfb/0x150 [ 1160.990698] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1160.990742] ? lock_acquire+0x15e/0x2d0 [ 1160.990780] ___sys_sendmsg+0x10f/0x1b0 [ 1160.990807] ? __pfx____sys_sendmsg+0x10/0x10 [ 1160.990828] ? perf_trace_lock+0xbb/0x4f0 [ 1160.990867] ? __pfx_perf_trace_lock+0x10/0x10 [ 1160.990897] ? proc_fail_nth_write+0x97/0x220 [ 1160.990936] ? lock_acquire+0x15e/0x2d0 [ 1160.990966] ? __fget_files+0x34/0x3b0 [ 1160.990996] ? find_held_lock+0x2b/0x80 [ 1160.991021] ? __fget_files+0x203/0x3b0 [ 1160.991046] ? lock_release+0xc8/0x270 [ 1160.991084] ? __fget_files+0x20d/0x3b0 [ 1160.991129] __sys_sendmsg+0x150/0x200 [ 1160.991153] ? __pfx___sys_sendmsg+0x10/0x10 [ 1160.991191] ? __pfx_ksys_write+0x10/0x10 [ 1160.991215] ? irqentry_exit+0xee/0x650 [ 1160.991243] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1160.991275] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1160.991322] do_syscall_64+0xbf/0x420 [ 1160.991360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.991385] RIP: 0033:0x7fbd3c214b19 [ 1160.991405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1160.991431] RSP: 002b:00007fbd3978a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1160.991457] RAX: ffffffffffffffda RBX: 00007fbd3c327f60 RCX: 00007fbd3c214b19 [ 1160.991476] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1160.991492] RBP: 00007fbd3978a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1160.991507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1160.991522] R13: 00007fffae4888ff R14: 00007fbd3978a300 R15: 0000000000022000 [ 1160.991561] 14:49:07 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 17) [ 1161.184878] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1161.186570] FAULT_INJECTION: forcing a failure. [ 1161.186570] name failslab, interval 1, probability 0, space 0, times 0 [ 1161.188241] CPU: 1 UID: 0 PID: 8648 Comm: syz-executor.4 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1161.188274] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1161.188288] Call Trace: [ 1161.188297] [ 1161.188307] dump_stack_lvl+0xfa/0x120 [ 1161.188352] should_fail_ex+0x4d7/0x5e0 [ 1161.188389] should_failslab+0xc2/0x120 [ 1161.188420] __kvmalloc_node_noprof+0x118/0x890 [ 1161.188449] ? bucket_table_alloc.isra.0+0x8e/0x480 [ 1161.188506] bucket_table_alloc.isra.0+0x8e/0x480 [ 1161.188551] rhashtable_init_noprof+0x345/0x760 [ 1161.188596] rhltable_init_noprof+0x20/0x60 [ 1161.188638] sta_info_init+0x60/0x160 [ 1161.188676] ieee80211_alloc_hw_nm+0x85d/0x21a0 [ 1161.188702] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1161.188744] mac80211_hwsim_new_radio+0x1dc/0x52a0 [ 1161.188786] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1161.188823] ? ___ratelimit+0x149/0x940 [ 1161.188866] ? do_trace_netlink_extack+0x12a/0x150 [ 1161.188913] ? __nla_validate_parse+0x2e6/0x2880 [ 1161.188947] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1161.188992] hwsim_new_radio_nl+0xb61/0x1300 [ 1161.189019] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1161.189056] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1161.189089] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1161.189135] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1161.189176] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1161.189219] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1161.189253] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1161.189302] ? security_capable+0x2f/0x90 [ 1161.189347] ? ns_capable+0xe2/0x120 [ 1161.189392] genl_rcv_msg+0x532/0x7e0 [ 1161.189429] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1161.189463] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1161.189496] ? __lock_acquire+0x451/0x2250 [ 1161.189544] netlink_rcv_skb+0x147/0x430 [ 1161.189571] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1161.189604] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1161.189653] ? netlink_deliver_tap+0x1af/0xcb0 [ 1161.189710] genl_rcv+0x28/0x40 [ 1161.189737] netlink_unicast+0x5a7/0x870 [ 1161.189775] ? __pfx_netlink_unicast+0x10/0x10 [ 1161.189805] ? __virt_addr_valid+0x100/0x5d0 [ 1161.189850] netlink_sendmsg+0x8a3/0xd80 [ 1161.189886] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1161.189931] ____sys_sendmsg+0xa38/0xbf0 [ 1161.189968] ? copy_msghdr_from_user+0xfb/0x150 [ 1161.189995] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1161.190044] ? lock_acquire+0x15e/0x2d0 [ 1161.190087] ___sys_sendmsg+0x10f/0x1b0 [ 1161.190116] ? __pfx____sys_sendmsg+0x10/0x10 [ 1161.190141] ? perf_trace_lock+0xbb/0x4f0 [ 1161.190184] ? __pfx_perf_trace_lock+0x10/0x10 [ 1161.190221] ? proc_fail_nth_write+0x97/0x220 [ 1161.190263] ? lock_acquire+0x15e/0x2d0 [ 1161.190297] ? __fget_files+0x34/0x3b0 [ 1161.190327] ? find_held_lock+0x2b/0x80 [ 1161.190355] ? __fget_files+0x203/0x3b0 [ 1161.190383] ? lock_release+0xc8/0x270 [ 1161.190423] ? __fget_files+0x20d/0x3b0 [ 1161.190468] __sys_sendmsg+0x150/0x200 [ 1161.190510] ? __pfx___sys_sendmsg+0x10/0x10 [ 1161.190552] ? __pfx_ksys_write+0x10/0x10 [ 1161.190577] ? irqentry_exit+0xee/0x650 [ 1161.190609] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1161.190643] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1161.190692] do_syscall_64+0xbf/0x420 [ 1161.190734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.190763] RIP: 0033:0x7f3b21b1bb19 [ 1161.190784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1161.190813] RSP: 002b:00007f3b1f091188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1161.190838] RAX: ffffffffffffffda RBX: 00007f3b21c2ef60 RCX: 00007f3b21b1bb19 [ 1161.190859] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1161.190881] RBP: 00007f3b1f0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1161.190901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1161.190915] R13: 00007ffe815263cf R14: 00007f3b1f091300 R15: 0000000000022000 [ 1161.190956] 14:49:07 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 18) 14:49:07 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x4cbb, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:49:07 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x1800, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1161.323610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1161.324709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1161.341715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1161.343844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1161.364742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1161.366648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1161.367840] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:49:08 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 18) 14:49:08 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080)={0x0, 0x2b7d, 0x4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) pidfd_getfd(r0, r1, 0x0) r3 = dup2(r1, r0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[r1, r2, r0, r3, r0, r4], 0x6) close_range(r1, 0xffffffffffffffff, 0x0) 14:49:08 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3e, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1161.465236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1161.472830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1161.534958] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1161.987084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1161.988422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:49:19 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 19) 14:49:19 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3f00, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:49:19 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x2000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:49:19 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3e00, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:49:19 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 19) 14:49:19 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x991f, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:49:19 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xd0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:49:19 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 1172.793807] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1172.794819] FAULT_INJECTION: forcing a failure. [ 1172.794819] name failslab, interval 1, probability 0, space 0, times 0 [ 1172.797084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1172.798744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1172.802630] CPU: 0 UID: 0 PID: 8678 Comm: syz-executor.4 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1172.802654] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1172.802665] Call Trace: [ 1172.802671] [ 1172.802677] dump_stack_lvl+0xfa/0x120 [ 1172.802703] should_fail_ex+0x4d7/0x5e0 [ 1172.802724] should_failslab+0xc2/0x120 [ 1172.802741] __kmalloc_node_track_caller_noprof+0xc6/0x760 [ 1172.802764] ? kasprintf+0xbe/0x100 [ 1172.802785] kvasprintf+0xbd/0x160 [ 1172.802800] ? __pfx_kvasprintf+0x10/0x10 [ 1172.802817] ? get_random_u32+0x39d/0x660 [ 1172.802844] kasprintf+0xbe/0x100 [ 1172.802858] ? __pfx_kasprintf+0x10/0x10 [ 1172.802876] ? bucket_table_alloc.isra.0+0x1ea/0x480 [ 1172.802903] ? lockdep_init_map_type+0x4b/0x220 [ 1172.802925] ? lockdep_init_map_type+0x4b/0x220 [ 1172.802947] ieee80211_alloc_led_names+0x11b/0x420 [ 1172.802972] ieee80211_alloc_hw_nm+0x190a/0x21a0 [ 1172.802992] mac80211_hwsim_new_radio+0x1dc/0x52a0 [ 1172.803015] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1172.803034] ? ___ratelimit+0x149/0x940 [ 1172.803055] ? do_trace_netlink_extack+0x12a/0x150 [ 1172.803076] ? __nla_validate_parse+0x2e6/0x2880 [ 1172.803093] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1172.803116] hwsim_new_radio_nl+0xb61/0x1300 [ 1172.803129] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1172.803147] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1172.803164] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1172.803187] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1172.803204] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1172.803226] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1172.803243] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1172.803268] ? security_capable+0x2f/0x90 [ 1172.803291] ? ns_capable+0xe2/0x120 [ 1172.803316] genl_rcv_msg+0x532/0x7e0 [ 1172.803335] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1172.803351] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1172.803366] ? __lock_acquire+0x451/0x2250 [ 1172.803390] netlink_rcv_skb+0x147/0x430 [ 1172.803405] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1172.803422] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1172.803446] ? netlink_deliver_tap+0x1af/0xcb0 [ 1172.803472] genl_rcv+0x28/0x40 [ 1172.803485] netlink_unicast+0x5a7/0x870 [ 1172.803503] ? __pfx_netlink_unicast+0x10/0x10 [ 1172.803517] ? __virt_addr_valid+0x100/0x5d0 [ 1172.803540] netlink_sendmsg+0x8a3/0xd80 [ 1172.803558] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1172.803582] ____sys_sendmsg+0xa38/0xbf0 [ 1172.803601] ? copy_msghdr_from_user+0xfb/0x150 [ 1172.803615] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1172.803636] ? __pfx_perf_tp_event+0x10/0x10 [ 1172.803653] ? lock_acquire+0x15e/0x2d0 [ 1172.803673] ___sys_sendmsg+0x10f/0x1b0 [ 1172.803687] ? __pfx____sys_sendmsg+0x10/0x10 [ 1172.803699] ? perf_trace_lock+0xbb/0x4f0 [ 1172.803722] ? __pfx_perf_trace_lock+0x10/0x10 [ 1172.803739] ? proc_fail_nth_write+0x97/0x220 [ 1172.803761] ? lock_acquire+0x15e/0x2d0 [ 1172.803778] ? __fget_files+0x34/0x3b0 [ 1172.803793] ? find_held_lock+0x2b/0x80 [ 1172.803806] ? __fget_files+0x203/0x3b0 [ 1172.803821] ? lock_release+0xc8/0x270 [ 1172.803841] ? __fget_files+0x20d/0x3b0 [ 1172.803864] __sys_sendmsg+0x150/0x200 [ 1172.803877] ? __pfx___sys_sendmsg+0x10/0x10 [ 1172.803888] ? perf_trace_preemptirq_template+0x259/0x430 [ 1172.803916] ? __pfx_ksys_write+0x10/0x10 [ 1172.803929] ? irqentry_exit+0xee/0x650 [ 1172.803946] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1172.803963] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1172.803987] do_syscall_64+0xbf/0x420 [ 1172.804007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.804021] RIP: 0033:0x7f3b21b1bb19 [ 1172.804033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1172.804046] RSP: 002b:00007f3b1f091188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1172.804059] RAX: ffffffffffffffda RBX: 00007f3b21c2ef60 RCX: 00007f3b21b1bb19 [ 1172.804067] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1172.804076] RBP: 00007f3b1f0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1172.804084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1172.804091] R13: 00007ffe815263cf R14: 00007f3b1f091300 R15: 0000000000022000 [ 1172.804112] [ 1172.807847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1172.840963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1172.851839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1172.867221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1172.867870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1172.869383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1172.934032] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1172.936161] FAULT_INJECTION: forcing a failure. [ 1172.936161] name failslab, interval 1, probability 0, space 0, times 0 [ 1172.937869] CPU: 1 UID: 0 PID: 8682 Comm: syz-executor.3 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1172.937905] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1172.937919] Call Trace: [ 1172.937928] [ 1172.937937] dump_stack_lvl+0xfa/0x120 [ 1172.937979] should_fail_ex+0x4d7/0x5e0 [ 1172.938012] should_failslab+0xc2/0x120 [ 1172.938041] __kmalloc_node_track_caller_noprof+0xc6/0x760 [ 1172.938079] ? kasprintf+0xbe/0x100 [ 1172.938104] ? lock_acquire+0x15e/0x2d0 [ 1172.938142] kvasprintf+0xbd/0x160 [ 1172.938167] ? __pfx_kvasprintf+0x10/0x10 [ 1172.938198] ? get_random_u32+0x39d/0x660 [ 1172.938242] kasprintf+0xbe/0x100 [ 1172.938268] ? __pfx_kasprintf+0x10/0x10 [ 1172.938302] ? bucket_table_alloc.isra.0+0x1ea/0x480 [ 1172.938339] ? lockdep_init_map_type+0x4b/0x220 [ 1172.938373] ? lockdep_init_map_type+0x4b/0x220 [ 1172.938410] ieee80211_alloc_led_names+0x86/0x420 [ 1172.938454] ieee80211_alloc_hw_nm+0x190a/0x21a0 [ 1172.938487] mac80211_hwsim_new_radio+0x1dc/0x52a0 [ 1172.938523] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1172.938550] ? ___ratelimit+0x149/0x940 [ 1172.938585] ? do_trace_netlink_extack+0x12a/0x150 [ 1172.938631] ? __nla_validate_parse+0x2e6/0x2880 [ 1172.938661] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1172.938701] hwsim_new_radio_nl+0xb61/0x1300 [ 1172.938725] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1172.938754] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1172.938784] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1172.938824] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1172.938854] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1172.938892] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1172.938922] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1172.938966] ? security_capable+0x2f/0x90 [ 1172.939005] ? ns_capable+0xe2/0x120 [ 1172.939046] genl_rcv_msg+0x532/0x7e0 [ 1172.939078] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1172.939107] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1172.939133] ? __lock_acquire+0x451/0x2250 [ 1172.939176] netlink_rcv_skb+0x147/0x430 [ 1172.939200] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1172.939230] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1172.939273] ? netlink_deliver_tap+0x1af/0xcb0 [ 1172.939317] genl_rcv+0x28/0x40 [ 1172.939340] netlink_unicast+0x5a7/0x870 [ 1172.939370] ? __pfx_netlink_unicast+0x10/0x10 [ 1172.939395] ? __virt_addr_valid+0x100/0x5d0 [ 1172.939436] netlink_sendmsg+0x8a3/0xd80 [ 1172.939467] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1172.939509] ____sys_sendmsg+0xa38/0xbf0 [ 1172.939542] ? copy_msghdr_from_user+0xfb/0x150 [ 1172.939566] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1172.939608] ? lock_acquire+0x15e/0x2d0 [ 1172.939643] ___sys_sendmsg+0x10f/0x1b0 [ 1172.939668] ? __pfx____sys_sendmsg+0x10/0x10 [ 1172.939688] ? perf_trace_lock+0xbb/0x4f0 [ 1172.939726] ? __pfx_perf_trace_lock+0x10/0x10 [ 1172.939755] ? proc_fail_nth_write+0x97/0x220 [ 1172.939794] ? lock_acquire+0x15e/0x2d0 [ 1172.939822] ? __fget_files+0x34/0x3b0 [ 1172.939848] ? find_held_lock+0x2b/0x80 [ 1172.939870] ? __fget_files+0x203/0x3b0 [ 1172.939895] ? lock_release+0xc8/0x270 [ 1172.939930] ? __fget_files+0x20d/0x3b0 [ 1172.939970] __sys_sendmsg+0x150/0x200 [ 1172.939992] ? __pfx___sys_sendmsg+0x10/0x10 [ 1172.940029] ? __pfx_ksys_write+0x10/0x10 [ 1172.940051] ? irqentry_exit+0xee/0x650 [ 1172.940079] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1172.940109] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1172.940150] do_syscall_64+0xbf/0x420 [ 1172.940185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.940209] RIP: 0033:0x7fbd3c214b19 [ 1172.940228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1172.940250] RSP: 002b:00007fbd3978a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1172.940272] RAX: ffffffffffffffda RBX: 00007fbd3c327f60 RCX: 00007fbd3c214b19 [ 1172.940288] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1172.940301] RBP: 00007fbd3978a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1172.940315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1172.940328] R13: 00007fffae4888ff R14: 00007fbd3978a300 R15: 0000000000022000 [ 1172.940365] 14:49:33 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 20) 14:49:33 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x4000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:49:33 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x1d0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:49:33 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 20) 14:49:33 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) close_range(r0, r1, 0x0) 14:49:33 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3f00, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:49:33 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x9a1f, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:49:33 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x22c6, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1186.498619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1186.527509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1186.541061] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1186.561492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1186.562825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1186.573094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1186.574413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1186.623036] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:49:33 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 21) [ 1186.790825] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:49:33 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 21) [ 1186.917390] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1186.918510] FAULT_INJECTION: forcing a failure. [ 1186.918510] name failslab, interval 1, probability 0, space 0, times 0 [ 1186.920014] CPU: 1 UID: 0 PID: 8717 Comm: syz-executor.3 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1186.920053] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1186.920069] Call Trace: [ 1186.920078] [ 1186.920088] dump_stack_lvl+0xfa/0x120 [ 1186.920133] should_fail_ex+0x4d7/0x5e0 [ 1186.920169] should_failslab+0xc2/0x120 [ 1186.920201] __kmalloc_node_track_caller_noprof+0xc6/0x760 [ 1186.920243] ? kasprintf+0xbe/0x100 [ 1186.920281] kvasprintf+0xbd/0x160 [ 1186.920308] ? __pfx_kvasprintf+0x10/0x10 [ 1186.920341] ? get_random_u32+0x39d/0x660 [ 1186.920389] kasprintf+0xbe/0x100 [ 1186.920417] ? __pfx_kasprintf+0x10/0x10 [ 1186.920450] ? bucket_table_alloc.isra.0+0x1ea/0x480 [ 1186.920490] ? lockdep_init_map_type+0x4b/0x220 [ 1186.920529] ? lockdep_init_map_type+0x4b/0x220 [ 1186.920570] ieee80211_alloc_led_names+0x1b0/0x420 [ 1186.920617] ieee80211_alloc_hw_nm+0x190a/0x21a0 [ 1186.920653] mac80211_hwsim_new_radio+0x1dc/0x52a0 [ 1186.920691] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1186.920720] ? ___ratelimit+0x149/0x940 [ 1186.920758] ? do_trace_netlink_extack+0x12a/0x150 [ 1186.920795] ? __nla_validate_parse+0x2e6/0x2880 [ 1186.920828] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1186.920871] hwsim_new_radio_nl+0xb61/0x1300 [ 1186.920896] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1186.920937] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1186.920969] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1186.921012] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1186.921045] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1186.921087] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1186.921121] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1186.921170] ? security_capable+0x2f/0x90 [ 1186.921214] ? ns_capable+0xe2/0x120 [ 1186.921260] genl_rcv_msg+0x532/0x7e0 [ 1186.921296] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1186.921329] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1186.921359] ? __lock_acquire+0x451/0x2250 [ 1186.921406] netlink_rcv_skb+0x147/0x430 [ 1186.921434] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1186.921466] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1186.921513] ? netlink_deliver_tap+0x1af/0xcb0 [ 1186.921563] genl_rcv+0x28/0x40 [ 1186.921589] netlink_unicast+0x5a7/0x870 [ 1186.921621] ? __pfx_netlink_unicast+0x10/0x10 [ 1186.921648] ? __virt_addr_valid+0x100/0x5d0 [ 1186.921692] netlink_sendmsg+0x8a3/0xd80 [ 1186.921726] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1186.921770] ____sys_sendmsg+0xa38/0xbf0 [ 1186.921805] ? copy_msghdr_from_user+0xfb/0x150 [ 1186.921830] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1186.921868] ? __pfx_perf_tp_event+0x10/0x10 [ 1186.921900] ? lock_acquire+0x15e/0x2d0 [ 1186.921937] ___sys_sendmsg+0x10f/0x1b0 [ 1186.921963] ? __pfx____sys_sendmsg+0x10/0x10 [ 1186.921985] ? perf_trace_lock+0xbb/0x4f0 [ 1186.922025] ? __pfx_perf_trace_lock+0x10/0x10 [ 1186.922057] ? proc_fail_nth_write+0x97/0x220 [ 1186.922097] ? lock_acquire+0x15e/0x2d0 [ 1186.922129] ? __fget_files+0x34/0x3b0 [ 1186.922156] ? find_held_lock+0x2b/0x80 [ 1186.922180] ? __fget_files+0x203/0x3b0 [ 1186.922207] ? lock_release+0xc8/0x270 [ 1186.922245] ? __fget_files+0x20d/0x3b0 [ 1186.922287] __sys_sendmsg+0x150/0x200 [ 1186.922311] ? __pfx___sys_sendmsg+0x10/0x10 [ 1186.922333] ? perf_trace_preemptirq_template+0x259/0x430 [ 1186.922382] ? __pfx_ksys_write+0x10/0x10 [ 1186.922407] ? irqentry_exit+0xee/0x650 [ 1186.922437] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1186.922468] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1186.922512] do_syscall_64+0xbf/0x420 [ 1186.922551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.922576] RIP: 0033:0x7fbd3c214b19 [ 1186.922597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1186.922621] RSP: 002b:00007fbd3978a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1186.922647] RAX: ffffffffffffffda RBX: 00007fbd3c327f60 RCX: 00007fbd3c214b19 [ 1186.922664] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1186.922679] RBP: 00007fbd3978a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1186.922695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1186.922709] R13: 00007fffae4888ff R14: 00007fbd3978a300 R15: 0000000000022000 [ 1186.922763] 14:49:33 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 22) 14:49:33 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x300, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1187.071634] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:49:33 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xbb47, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1187.119750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1187.124634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:49:33 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x4000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:49:33 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 22) 14:49:33 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) syz_io_uring_setup(0x46ad, 0xfffffffffffffffd, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14:49:33 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x22c7, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1187.175797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1187.178222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:49:33 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x84c1, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1187.234988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1187.236876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1187.257717] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:49:33 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 23) 14:49:33 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 23) [ 1187.346412] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1187.348293] FAULT_INJECTION: forcing a failure. [ 1187.348293] name failslab, interval 1, probability 0, space 0, times 0 [ 1187.350092] CPU: 1 UID: 0 PID: 8736 Comm: syz-executor.4 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1187.350125] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1187.350140] Call Trace: [ 1187.350149] [ 1187.350159] dump_stack_lvl+0xfa/0x120 [ 1187.350202] should_fail_ex+0x4d7/0x5e0 [ 1187.350237] should_failslab+0xc2/0x120 [ 1187.350268] __kmalloc_node_track_caller_noprof+0xc6/0x760 [ 1187.350309] ? kasprintf+0xbe/0x100 [ 1187.350346] kvasprintf+0xbd/0x160 [ 1187.350374] ? __pfx_kvasprintf+0x10/0x10 [ 1187.350407] ? get_random_u32+0x39d/0x660 [ 1187.350456] kasprintf+0xbe/0x100 [ 1187.350485] ? __pfx_kasprintf+0x10/0x10 [ 1187.350517] ? bucket_table_alloc.isra.0+0x1ea/0x480 [ 1187.350558] ? lockdep_init_map_type+0x4b/0x220 [ 1187.350595] ? lockdep_init_map_type+0x4b/0x220 [ 1187.350636] ieee80211_alloc_led_names+0x1b0/0x420 [ 1187.350682] ieee80211_alloc_hw_nm+0x190a/0x21a0 [ 1187.350717] mac80211_hwsim_new_radio+0x1dc/0x52a0 [ 1187.350769] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1187.350798] ? ___ratelimit+0x149/0x940 [ 1187.350835] ? do_trace_netlink_extack+0x12a/0x150 [ 1187.350871] ? __nla_validate_parse+0x2e6/0x2880 [ 1187.350910] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1187.350952] hwsim_new_radio_nl+0xb61/0x1300 [ 1187.350977] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1187.351009] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1187.351041] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1187.351083] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1187.351115] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1187.351155] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1187.351187] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1187.351233] ? security_capable+0x2f/0x90 [ 1187.351275] ? ns_capable+0xe2/0x120 [ 1187.351319] genl_rcv_msg+0x532/0x7e0 [ 1187.351354] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1187.351384] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1187.351413] ? __lock_acquire+0x451/0x2250 [ 1187.351458] netlink_rcv_skb+0x147/0x430 [ 1187.351484] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1187.351515] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1187.351560] ? netlink_deliver_tap+0x1af/0xcb0 [ 1187.351609] genl_rcv+0x28/0x40 [ 1187.351633] netlink_unicast+0x5a7/0x870 [ 1187.351665] ? __pfx_netlink_unicast+0x10/0x10 [ 1187.351692] ? __virt_addr_valid+0x100/0x5d0 [ 1187.351734] netlink_sendmsg+0x8a3/0xd80 [ 1187.351768] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1187.351812] ____sys_sendmsg+0xa38/0xbf0 [ 1187.351847] ? copy_msghdr_from_user+0xfb/0x150 [ 1187.351872] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1187.351918] ? lock_acquire+0x15e/0x2d0 [ 1187.351955] ___sys_sendmsg+0x10f/0x1b0 [ 1187.351981] ? __pfx____sys_sendmsg+0x10/0x10 [ 1187.352003] ? perf_trace_lock+0xbb/0x4f0 [ 1187.352043] ? __pfx_perf_trace_lock+0x10/0x10 [ 1187.352076] ? proc_fail_nth_write+0x97/0x220 [ 1187.352116] ? lock_acquire+0x15e/0x2d0 [ 1187.352148] ? __fget_files+0x34/0x3b0 [ 1187.352175] ? find_held_lock+0x2b/0x80 [ 1187.352199] ? __fget_files+0x203/0x3b0 [ 1187.352226] ? lock_release+0xc8/0x270 [ 1187.352264] ? __fget_files+0x20d/0x3b0 [ 1187.352306] __sys_sendmsg+0x150/0x200 [ 1187.352330] ? __pfx___sys_sendmsg+0x10/0x10 [ 1187.352369] ? __pfx_ksys_write+0x10/0x10 [ 1187.352392] ? irqentry_exit+0xee/0x650 [ 1187.352423] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1187.352458] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1187.352504] do_syscall_64+0xbf/0x420 [ 1187.352542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.352568] RIP: 0033:0x7f3b21b1bb19 [ 1187.352588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1187.352611] RSP: 002b:00007f3b1f091188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1187.352634] RAX: ffffffffffffffda RBX: 00007f3b21c2ef60 RCX: 00007f3b21b1bb19 [ 1187.352651] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1187.352666] RBP: 00007f3b1f0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1187.352680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1187.352695] R13: 00007ffe815263cf R14: 00007f3b1f091300 R15: 0000000000022000 [ 1187.352734] [ 1187.498704] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1187.500359] FAULT_INJECTION: forcing a failure. [ 1187.500359] name failslab, interval 1, probability 0, space 0, times 0 [ 1187.502213] CPU: 1 UID: 0 PID: 8738 Comm: syz-executor.3 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1187.502245] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1187.502259] Call Trace: [ 1187.502268] [ 1187.502278] dump_stack_lvl+0xfa/0x120 [ 1187.502317] should_fail_ex+0x4d7/0x5e0 [ 1187.502350] should_failslab+0xc2/0x120 [ 1187.502380] __kmalloc_node_track_caller_noprof+0xc6/0x760 [ 1187.502421] ? kasprintf+0xbe/0x100 [ 1187.502457] kvasprintf+0xbd/0x160 [ 1187.502484] ? __pfx_kvasprintf+0x10/0x10 [ 1187.502517] ? get_random_u32+0x39d/0x660 [ 1187.502563] kasprintf+0xbe/0x100 [ 1187.502590] ? __pfx_kasprintf+0x10/0x10 [ 1187.502622] ? bucket_table_alloc.isra.0+0x1ea/0x480 [ 1187.502662] ? lockdep_init_map_type+0x4b/0x220 [ 1187.502699] ? lockdep_init_map_type+0x4b/0x220 [ 1187.502750] ieee80211_alloc_led_names+0x1b0/0x420 [ 1187.502796] ieee80211_alloc_hw_nm+0x190a/0x21a0 [ 1187.502830] mac80211_hwsim_new_radio+0x1dc/0x52a0 [ 1187.502867] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1187.502896] ? ___ratelimit+0x149/0x940 [ 1187.502939] ? do_trace_netlink_extack+0x12a/0x150 [ 1187.502975] ? __nla_validate_parse+0x2e6/0x2880 [ 1187.503007] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1187.503049] hwsim_new_radio_nl+0xb61/0x1300 [ 1187.503074] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1187.503106] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1187.503139] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1187.503182] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1187.503215] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1187.503256] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1187.503290] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1187.503337] ? security_capable+0x2f/0x90 [ 1187.503380] ? ns_capable+0xe2/0x120 [ 1187.503424] genl_rcv_msg+0x532/0x7e0 [ 1187.503459] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1187.503490] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1187.503518] ? __lock_acquire+0x451/0x2250 [ 1187.503563] netlink_rcv_skb+0x147/0x430 [ 1187.503590] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1187.503621] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1187.503666] ? netlink_deliver_tap+0x1af/0xcb0 [ 1187.503714] genl_rcv+0x28/0x40 [ 1187.503738] netlink_unicast+0x5a7/0x870 [ 1187.503771] ? __pfx_netlink_unicast+0x10/0x10 [ 1187.503797] ? __virt_addr_valid+0x100/0x5d0 [ 1187.503839] netlink_sendmsg+0x8a3/0xd80 [ 1187.503872] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1187.503916] ____sys_sendmsg+0xa38/0xbf0 [ 1187.503950] ? copy_msghdr_from_user+0xfb/0x150 [ 1187.503975] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1187.504020] ? lock_acquire+0x15e/0x2d0 [ 1187.504058] ___sys_sendmsg+0x10f/0x1b0 [ 1187.504083] ? __pfx____sys_sendmsg+0x10/0x10 [ 1187.504105] ? perf_trace_lock+0xbb/0x4f0 [ 1187.504146] ? __pfx_perf_trace_lock+0x10/0x10 [ 1187.504178] ? proc_fail_nth_write+0x97/0x220 [ 1187.504218] ? lock_acquire+0x15e/0x2d0 [ 1187.504248] ? __fget_files+0x34/0x3b0 [ 1187.504275] ? find_held_lock+0x2b/0x80 [ 1187.504299] ? __fget_files+0x203/0x3b0 [ 1187.504325] ? lock_release+0xc8/0x270 [ 1187.504363] ? __fget_files+0x20d/0x3b0 [ 1187.504404] __sys_sendmsg+0x150/0x200 [ 1187.504428] ? __pfx___sys_sendmsg+0x10/0x10 [ 1187.504466] ? __pfx_ksys_write+0x10/0x10 [ 1187.504490] ? irqentry_exit+0xee/0x650 [ 1187.504520] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1187.504552] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1187.504596] do_syscall_64+0xbf/0x420 [ 1187.504634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.504658] RIP: 0033:0x7fbd3c214b19 [ 1187.504678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1187.504701] RSP: 002b:00007fbd3978a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1187.504724] RAX: ffffffffffffffda RBX: 00007fbd3c327f60 RCX: 00007fbd3c214b19 [ 1187.504741] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1187.504755] RBP: 00007fbd3978a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1187.504770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1187.504784] R13: 00007fffae4888ff R14: 00007fbd3978a300 R15: 0000000000022000 [ 1187.504823] 14:49:34 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 24) 14:49:34 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x500, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1187.685689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1187.689679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:49:34 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) r2 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x0, 0x0, 0x80, 0x5, 0x0, 0x5, 0x80404, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x8492, 0x0, 0xfffff000, 0x8, 0x10001, 0x7, 0x7ff, 0x0, 0x80, 0x0, 0x6}, 0x0, 0xf, r0, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x1, 0x0, 0x81, 0x81, 0x0, 0x1, 0x40108, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x8, 0xffffffffffffff80}, 0x18f0, 0x0, 0x4, 0x8, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x3, r2, 0x8) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x480240, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4, 0x2, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x8, 0x400}, 0x4000, 0x1ff, 0x1, 0x0, 0x1f, 0x200, 0x9, 0x0, 0x40, 0x0, 0x9}, 0x0, 0xf, r3, 0x8) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x7) [ 1187.722266] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1187.724051] FAULT_INJECTION: forcing a failure. [ 1187.724051] name failslab, interval 1, probability 0, space 0, times 0 [ 1187.725671] CPU: 1 UID: 0 PID: 8743 Comm: syz-executor.4 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1187.725702] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1187.725715] Call Trace: [ 1187.725724] [ 1187.725733] dump_stack_lvl+0xfa/0x120 [ 1187.725772] should_fail_ex+0x4d7/0x5e0 [ 1187.725804] should_failslab+0xc2/0x120 [ 1187.725832] __kmalloc_node_track_caller_noprof+0xc6/0x760 [ 1187.725871] ? kasprintf+0xbe/0x100 [ 1187.725914] kvasprintf+0xbd/0x160 [ 1187.725941] ? __pfx_kvasprintf+0x10/0x10 [ 1187.725972] ? get_random_u32+0x39d/0x660 [ 1187.726018] kasprintf+0xbe/0x100 [ 1187.726044] ? __pfx_kasprintf+0x10/0x10 [ 1187.726074] ? bucket_table_alloc.isra.0+0x1ea/0x480 [ 1187.726112] ? lockdep_init_map_type+0x4b/0x220 [ 1187.726152] ? lockdep_init_map_type+0x4b/0x220 [ 1187.726192] ieee80211_alloc_led_names+0x1b0/0x420 [ 1187.726234] ieee80211_alloc_hw_nm+0x190a/0x21a0 [ 1187.726267] mac80211_hwsim_new_radio+0x1dc/0x52a0 [ 1187.726302] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1187.726330] ? ___ratelimit+0x149/0x940 [ 1187.726365] ? do_trace_netlink_extack+0x12a/0x150 [ 1187.726398] ? __nla_validate_parse+0x2e6/0x2880 [ 1187.726428] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1187.726466] hwsim_new_radio_nl+0xb61/0x1300 [ 1187.726489] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1187.726517] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1187.726545] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1187.726584] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1187.726614] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1187.726650] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1187.726679] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1187.726720] ? security_capable+0x2f/0x90 [ 1187.726775] ? ns_capable+0xe2/0x120 [ 1187.726815] genl_rcv_msg+0x532/0x7e0 [ 1187.726847] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1187.726876] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1187.726904] ? __lock_acquire+0x451/0x2250 [ 1187.726946] netlink_rcv_skb+0x147/0x430 [ 1187.726970] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1187.726999] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1187.727039] ? netlink_deliver_tap+0x1af/0xcb0 [ 1187.727082] genl_rcv+0x28/0x40 [ 1187.727104] netlink_unicast+0x5a7/0x870 [ 1187.727134] ? __pfx_netlink_unicast+0x10/0x10 [ 1187.727158] ? __virt_addr_valid+0x100/0x5d0 [ 1187.727199] netlink_sendmsg+0x8a3/0xd80 [ 1187.727231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1187.727272] ____sys_sendmsg+0xa38/0xbf0 [ 1187.727305] ? copy_msghdr_from_user+0xfb/0x150 [ 1187.727329] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1187.727372] ? lock_acquire+0x15e/0x2d0 [ 1187.727407] ___sys_sendmsg+0x10f/0x1b0 [ 1187.727433] ? __pfx____sys_sendmsg+0x10/0x10 [ 1187.727453] ? perf_trace_lock+0xbb/0x4f0 [ 1187.727491] ? __pfx_perf_trace_lock+0x10/0x10 [ 1187.727521] ? proc_fail_nth_write+0x97/0x220 [ 1187.727558] ? lock_acquire+0x15e/0x2d0 [ 1187.727586] ? __fget_files+0x34/0x3b0 [ 1187.727611] ? find_held_lock+0x2b/0x80 [ 1187.727633] ? __fget_files+0x203/0x3b0 [ 1187.727658] ? lock_release+0xc8/0x270 [ 1187.727692] ? __fget_files+0x20d/0x3b0 [ 1187.727730] __sys_sendmsg+0x150/0x200 [ 1187.727752] ? __pfx___sys_sendmsg+0x10/0x10 [ 1187.727786] ? __pfx_ksys_write+0x10/0x10 [ 1187.727808] ? irqentry_exit+0xee/0x650 [ 1187.727835] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1187.727865] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1187.727905] do_syscall_64+0xbf/0x420 [ 1187.727940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.727964] RIP: 0033:0x7f3b21b1bb19 [ 1187.727983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1187.728007] RSP: 002b:00007f3b1f091188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1187.728029] RAX: ffffffffffffffda RBX: 00007f3b21c2ef60 RCX: 00007f3b21b1bb19 [ 1187.728044] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1187.728057] RBP: 00007f3b1f0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1187.728071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1187.728084] R13: 00007ffe815263cf R14: 00007f3b1f091300 R15: 0000000000022000 [ 1187.728119] [ 1187.784266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1187.785324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:49:48 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x96c1, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:49:48 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x85c1, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:49:48 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3e00, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:49:48 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 24) 14:49:48 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 25) 14:49:48 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x600, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:49:48 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a80)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r3, 0x1, 0x0, 0x0, {0x24}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x400, 0x70bd2a, 0x25dfdbfe}, 0x14}}, 0x4000000) r6 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4715ade1605eeadb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8290, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r7 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x8, 0x7f, 0x9e, 0x3, 0x0, 0x6e77, 0x4000, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x1, @perf_bp={&(0x7f0000000100), 0x4}, 0x48800, 0x6, 0x1000, 0x9, 0x1, 0x7f, 0xffe1, 0x0, 0xa8d, 0x0, 0x9}, 0xffffffffffffffff, 0x2, r6, 0x0) 14:49:48 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xbb48, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1201.576380] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1201.578513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1201.580205] FAULT_INJECTION: forcing a failure. [ 1201.580205] name failslab, interval 1, probability 0, space 0, times 0 [ 1201.582944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1201.583541] CPU: 0 UID: 0 PID: 8759 Comm: syz-executor.3 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1201.583559] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1201.583568] Call Trace: [ 1201.583573] [ 1201.583579] dump_stack_lvl+0xfa/0x120 [ 1201.583609] should_fail_ex+0x4d7/0x5e0 [ 1201.583630] should_failslab+0xc2/0x120 [ 1201.583648] __kmalloc_node_track_caller_noprof+0xc6/0x760 [ 1201.583673] ? kasprintf+0xbe/0x100 [ 1201.583694] kvasprintf+0xbd/0x160 [ 1201.583709] ? __pfx_kvasprintf+0x10/0x10 [ 1201.583727] ? get_random_u32+0x39d/0x660 [ 1201.583755] kasprintf+0xbe/0x100 [ 1201.583770] ? __pfx_kasprintf+0x10/0x10 [ 1201.583787] ? bucket_table_alloc.isra.0+0x1ea/0x480 [ 1201.583813] ? lockdep_init_map_type+0x4b/0x220 [ 1201.583836] ? lockdep_init_map_type+0x4b/0x220 [ 1201.583858] ieee80211_alloc_led_names+0x243/0x420 [ 1201.583887] ieee80211_alloc_hw_nm+0x190a/0x21a0 [ 1201.583908] mac80211_hwsim_new_radio+0x1dc/0x52a0 [ 1201.583930] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1201.583947] ? ___ratelimit+0x149/0x940 [ 1201.583970] ? do_trace_netlink_extack+0x12a/0x150 [ 1201.583991] ? __nla_validate_parse+0x2e6/0x2880 [ 1201.584009] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1201.584032] hwsim_new_radio_nl+0xb61/0x1300 [ 1201.584046] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1201.584063] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1201.584080] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1201.584103] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1201.584122] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1201.584144] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1201.584161] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1201.584186] ? security_capable+0x2f/0x90 [ 1201.584210] ? ns_capable+0xe2/0x120 [ 1201.584236] genl_rcv_msg+0x532/0x7e0 [ 1201.584256] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1201.584275] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1201.584292] ? __lock_acquire+0x451/0x2250 [ 1201.584317] netlink_rcv_skb+0x147/0x430 [ 1201.584331] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1201.584348] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1201.584372] ? netlink_deliver_tap+0x1af/0xcb0 [ 1201.584398] genl_rcv+0x28/0x40 [ 1201.584411] netlink_unicast+0x5a7/0x870 [ 1201.584429] ? __pfx_netlink_unicast+0x10/0x10 [ 1201.584443] ? __virt_addr_valid+0x100/0x5d0 [ 1201.584468] netlink_sendmsg+0x8a3/0xd80 [ 1201.584486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1201.584510] ____sys_sendmsg+0xa38/0xbf0 [ 1201.584530] ? copy_msghdr_from_user+0xfb/0x150 [ 1201.584545] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1201.584565] ? __pfx_perf_tp_event+0x10/0x10 [ 1201.584584] ? lock_acquire+0x15e/0x2d0 [ 1201.584604] ___sys_sendmsg+0x10f/0x1b0 [ 1201.584618] ? __pfx____sys_sendmsg+0x10/0x10 [ 1201.584629] ? perf_trace_lock+0xbb/0x4f0 [ 1201.584653] ? __pfx_perf_trace_lock+0x10/0x10 [ 1201.584670] ? proc_fail_nth_write+0x97/0x220 [ 1201.584694] ? lock_acquire+0x15e/0x2d0 [ 1201.584710] ? __fget_files+0x34/0x3b0 [ 1201.584727] ? find_held_lock+0x2b/0x80 [ 1201.584741] ? __fget_files+0x203/0x3b0 [ 1201.584755] ? lock_release+0xc8/0x270 [ 1201.584776] ? __fget_files+0x20d/0x3b0 [ 1201.584799] __sys_sendmsg+0x150/0x200 [ 1201.584812] ? __pfx___sys_sendmsg+0x10/0x10 [ 1201.584824] ? perf_trace_preemptirq_template+0x259/0x430 [ 1201.584851] ? __pfx_ksys_write+0x10/0x10 [ 1201.584866] ? irqentry_exit+0xee/0x650 [ 1201.584883] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1201.584900] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1201.584924] do_syscall_64+0xbf/0x420 [ 1201.584946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.584961] RIP: 0033:0x7fbd3c214b19 [ 1201.584972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1201.584985] RSP: 002b:00007fbd3978a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1201.584999] RAX: ffffffffffffffda RBX: 00007fbd3c327f60 RCX: 00007fbd3c214b19 [ 1201.585008] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1201.585016] RBP: 00007fbd3978a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1201.585024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1201.585033] R13: 00007fffae4888ff R14: 00007fbd3978a300 R15: 0000000000022000 [ 1201.585053] [ 1201.617887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1201.626466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1201.709630] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1201.711577] FAULT_INJECTION: forcing a failure. [ 1201.711577] name failslab, interval 1, probability 0, space 0, times 0 [ 1201.713697] CPU: 1 UID: 0 PID: 8765 Comm: syz-executor.4 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1201.713730] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1201.713744] Call Trace: [ 1201.713753] [ 1201.713763] dump_stack_lvl+0xfa/0x120 [ 1201.713806] should_fail_ex+0x4d7/0x5e0 [ 1201.713841] should_failslab+0xc2/0x120 [ 1201.713871] __kmalloc_node_track_caller_noprof+0xc6/0x760 [ 1201.713920] ? kasprintf+0xbe/0x100 [ 1201.713958] kvasprintf+0xbd/0x160 [ 1201.713985] ? __pfx_kvasprintf+0x10/0x10 [ 1201.714019] ? get_random_u32+0x39d/0x660 [ 1201.714065] kasprintf+0xbe/0x100 [ 1201.714093] ? __pfx_kasprintf+0x10/0x10 [ 1201.714125] ? bucket_table_alloc.isra.0+0x1ea/0x480 [ 1201.714169] ? lockdep_init_map_type+0x4b/0x220 [ 1201.714206] ? lockdep_init_map_type+0x4b/0x220 [ 1201.714247] ieee80211_alloc_led_names+0x243/0x420 [ 1201.714292] ieee80211_alloc_hw_nm+0x190a/0x21a0 [ 1201.714328] mac80211_hwsim_new_radio+0x1dc/0x52a0 [ 1201.714366] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1201.714395] ? ___ratelimit+0x149/0x940 [ 1201.714433] ? do_trace_netlink_extack+0x12a/0x150 [ 1201.714468] ? __nla_validate_parse+0x2e6/0x2880 [ 1201.714500] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1201.714547] hwsim_new_radio_nl+0xb61/0x1300 [ 1201.714571] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1201.714603] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1201.714635] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1201.714679] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1201.714710] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1201.714750] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1201.714782] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1201.714830] ? security_capable+0x2f/0x90 [ 1201.714886] ? ns_capable+0xe2/0x120 [ 1201.714930] genl_rcv_msg+0x532/0x7e0 [ 1201.714965] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1201.714996] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1201.715025] ? __lock_acquire+0x451/0x2250 [ 1201.715070] netlink_rcv_skb+0x147/0x430 [ 1201.715097] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1201.715128] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1201.715174] ? netlink_deliver_tap+0x1af/0xcb0 [ 1201.715222] genl_rcv+0x28/0x40 [ 1201.715247] netlink_unicast+0x5a7/0x870 [ 1201.715280] ? __pfx_netlink_unicast+0x10/0x10 [ 1201.715306] ? __virt_addr_valid+0x100/0x5d0 [ 1201.715350] netlink_sendmsg+0x8a3/0xd80 [ 1201.715385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1201.715430] ____sys_sendmsg+0xa38/0xbf0 [ 1201.715464] ? copy_msghdr_from_user+0xfb/0x150 [ 1201.715490] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1201.715539] ? lock_acquire+0x15e/0x2d0 [ 1201.715577] ___sys_sendmsg+0x10f/0x1b0 [ 1201.715603] ? __pfx____sys_sendmsg+0x10/0x10 [ 1201.715625] ? perf_trace_lock+0xbb/0x4f0 [ 1201.715666] ? __pfx_perf_trace_lock+0x10/0x10 [ 1201.715697] ? proc_fail_nth_write+0x97/0x220 [ 1201.715738] ? lock_acquire+0x15e/0x2d0 [ 1201.715768] ? __fget_files+0x34/0x3b0 [ 1201.715796] ? find_held_lock+0x2b/0x80 [ 1201.715820] ? __fget_files+0x203/0x3b0 [ 1201.715846] ? lock_release+0xc8/0x270 [ 1201.715885] ? __fget_files+0x20d/0x3b0 [ 1201.715927] __sys_sendmsg+0x150/0x200 [ 1201.715952] ? __pfx___sys_sendmsg+0x10/0x10 [ 1201.715991] ? __pfx_ksys_write+0x10/0x10 [ 1201.716015] ? irqentry_exit+0xee/0x650 [ 1201.716044] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1201.716076] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1201.716121] do_syscall_64+0xbf/0x420 [ 1201.716158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.716184] RIP: 0033:0x7f3b21b1bb19 [ 1201.716204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1201.716227] RSP: 002b:00007f3b1f091188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1201.716251] RAX: ffffffffffffffda RBX: 00007f3b21c2ef60 RCX: 00007f3b21b1bb19 [ 1201.716268] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1201.716283] RBP: 00007f3b1f0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1201.716298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1201.716312] R13: 00007ffe815263cf R14: 00007f3b1f091300 R15: 0000000000022000 [ 1201.716353] 14:49:48 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 25) [ 1201.803867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1201.805466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1201.924549] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1201.926471] FAULT_INJECTION: forcing a failure. [ 1201.926471] name failslab, interval 1, probability 0, space 0, times 0 [ 1201.929084] CPU: 1 UID: 0 PID: 8773 Comm: syz-executor.3 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1201.929119] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1201.929134] Call Trace: [ 1201.929143] [ 1201.929154] dump_stack_lvl+0xfa/0x120 [ 1201.929200] should_fail_ex+0x4d7/0x5e0 [ 1201.929236] should_failslab+0xc2/0x120 [ 1201.929270] __kmalloc_node_track_caller_noprof+0xc6/0x760 [ 1201.929323] ? kasprintf+0xbe/0x100 [ 1201.929363] kvasprintf+0xbd/0x160 [ 1201.929392] ? __pfx_kvasprintf+0x10/0x10 [ 1201.929428] ? get_random_u32+0x39d/0x660 [ 1201.929478] kasprintf+0xbe/0x100 [ 1201.929507] ? __pfx_kasprintf+0x10/0x10 [ 1201.929542] ? bucket_table_alloc.isra.0+0x1ea/0x480 [ 1201.929584] ? lockdep_init_map_type+0x4b/0x220 [ 1201.929625] ? lockdep_init_map_type+0x4b/0x220 [ 1201.929669] ieee80211_alloc_led_names+0x243/0x420 [ 1201.929718] ieee80211_alloc_hw_nm+0x190a/0x21a0 [ 1201.929756] mac80211_hwsim_new_radio+0x1dc/0x52a0 [ 1201.929796] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1201.929827] ? ___ratelimit+0x149/0x940 [ 1201.929867] ? do_trace_netlink_extack+0x12a/0x150 [ 1201.929905] ? __nla_validate_parse+0x2e6/0x2880 [ 1201.929940] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1201.929985] hwsim_new_radio_nl+0xb61/0x1300 [ 1201.930012] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1201.930047] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1201.930080] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1201.930126] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1201.930160] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1201.930203] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1201.930237] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1201.930287] ? security_capable+0x2f/0x90 [ 1201.930332] ? ns_capable+0xe2/0x120 [ 1201.930380] genl_rcv_msg+0x532/0x7e0 [ 1201.930417] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1201.930450] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1201.930480] ? __lock_acquire+0x451/0x2250 [ 1201.930528] netlink_rcv_skb+0x147/0x430 [ 1201.930557] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1201.930591] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1201.930639] ? netlink_deliver_tap+0x1af/0xcb0 [ 1201.930690] genl_rcv+0x28/0x40 [ 1201.930717] netlink_unicast+0x5a7/0x870 [ 1201.930751] ? __pfx_netlink_unicast+0x10/0x10 [ 1201.930779] ? __virt_addr_valid+0x100/0x5d0 [ 1201.930825] netlink_sendmsg+0x8a3/0xd80 [ 1201.930874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1201.930926] ____sys_sendmsg+0xa38/0xbf0 [ 1201.930963] ? copy_msghdr_from_user+0xfb/0x150 [ 1201.930990] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1201.931035] ? __pfx_perf_trace_lock+0x10/0x10 [ 1201.931071] ? kvm_sched_clock_read+0x16/0x30 [ 1201.931112] ___sys_sendmsg+0x10f/0x1b0 [ 1201.931140] ? __pfx____sys_sendmsg+0x10/0x10 [ 1201.931163] ? perf_trace_lock+0xbb/0x4f0 [ 1201.931206] ? __pfx_perf_trace_lock+0x10/0x10 [ 1201.931250] ? lock_acquire+0x15e/0x2d0 [ 1201.931284] ? __fget_files+0x34/0x3b0 [ 1201.931314] ? find_held_lock+0x2b/0x80 [ 1201.931340] ? __fget_files+0x203/0x3b0 [ 1201.931369] ? lock_release+0xc8/0x270 [ 1201.931410] ? __fget_files+0x20d/0x3b0 [ 1201.931455] __sys_sendmsg+0x150/0x200 [ 1201.931481] ? __pfx___sys_sendmsg+0x10/0x10 [ 1201.931506] ? __pfx___schedule+0x10/0x10 [ 1201.931566] do_syscall_64+0xbf/0x420 [ 1201.931606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.931634] RIP: 0033:0x7fbd3c214b19 [ 1201.931655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1201.931680] RSP: 002b:00007fbd3978a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1201.931706] RAX: ffffffffffffffda RBX: 00007fbd3c327f60 RCX: 00007fbd3c214b19 [ 1201.931724] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1201.931740] RBP: 00007fbd3978a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1201.931756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1201.931772] R13: 00007fffae4888ff R14: 00007fbd3978a300 R15: 0000000000022000 [ 1201.931813] [ 1202.120246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1202.121470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1202.204099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1202.206846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:49:58 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x97c1, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:49:58 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 26) 14:49:58 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xbb49, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:49:58 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 26) 14:49:58 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x700, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:49:58 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3f00, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:49:58 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x86c1, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:49:58 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10008801) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000002b80)=[{&(0x7f00000018c0)}, {&(0x7f0000001900)=""/129, 0x81}, {&(0x7f00000019c0)=""/42, 0x2a}, {&(0x7f0000001a00)=""/104, 0x68}, {&(0x7f0000001a80)=""/233, 0xe9}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x6) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) syz_usb_connect(0x2, 0xa61, &(0x7f0000000c80)={{0x12, 0x1, 0x110, 0xfe, 0xe2, 0xd7, 0x8, 0x7ca, 0xb568, 0x9872, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa4f, 0x4, 0x2, 0x4, 0xc0, 0x3f, [{{0x9, 0x4, 0x0, 0x81, 0x5, 0xba, 0x59, 0x67, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0x4, 0x80}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x200, 0x6, 0x3, 0x8, 0x3, 0x45}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x303, 0x6, 0x1, 0x7}, @extension_unit={0x7, 0x24, 0x8, 0x4, 0x6, 0x1f}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x201, 0x5, 0x81, 0x4, 0x0, 0x81}]}], [{{0x9, 0x5, 0x1, 0x10, 0x3ff, 0xff, 0x20}}, {{0x9, 0x5, 0xb, 0x4, 0x40, 0x2, 0x80, 0x20, [@generic={0x7a, 0x4, "860dfc2106cca481952acc5cfd19122e430fac09115e55ed1784a8531fd6c80c55129dd48760ef6c9477a911d1ef998c0633c38af297003a49de736af64aaa2de4ce4ec84e004d93111d2b1397444d51c076f878509046410552328571c50fbefc1ae21ab55cd675451b8de118ec1e08ec65cbcbb62f4154"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x2, 0x60, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xfd, 0x200}]}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x3, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3e, 0x3}]}}, {{0x9, 0x5, 0x0, 0xf, 0x400, 0x3, 0x2, 0x8}}]}}, {{0x9, 0x4, 0x36, 0x2, 0x6, 0x18, 0x20, 0xc8, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x3, 0x3}, [@mixer_unit={0xb, 0x24, 0x4, 0x6, 0x0, "22dee04723af"}, @mixer_unit={0xa, 0x24, 0x4, 0x2, 0x43, "d30b18b388"}, @processing_unit={0xc, 0x24, 0x7, 0x3, 0x6, 0x8, "c75a997a49"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x205, 0x6, 0x75, 0x3, 0x1, 0x2}, @feature_unit={0xf, 0x24, 0x6, 0x4, 0x3, 0x4, [0x2, 0x9, 0x8, 0x6], 0x12}]}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "cb"}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x20, 0x7, 0x1c}, {0x6, 0x24, 0x1a, 0x6715, 0x8}, [@network_terminal={0x7, 0x24, 0xa, 0x1, 0x4, 0x5, 0x9}, @acm={0x4, 0x24, 0x2, 0xd}, @obex={0x5, 0x24, 0x15, 0x200}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0xff, 0x8, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0xb2, 0x7, 0x2}]}], [{{0x9, 0x5, 0xb, 0x1, 0x400, 0x1, 0x9, 0x6e, [@generic={0xb0, 0x23, "02f12f3440e3306dee654c85d2a58a314217b8ed715a7aef610e12480983f59ea92753dca8b2b30b8b5b6302121650f22b7ddc9f9e2b3e12dea124fc5d9391a8ea74430cf61d17ecd31de2ca09bd924f9b95a69010f90bc7ebca7ea5f75f334e61e58e45d84ac6221a60b087fdbf8d539cdd3380a93bc911adcb1787a8a8bf8a59ee480c0f594ae5c79e21c6d2985f5c9fcd43842129afaf15772b79a10a6b7364aed75a50c5051401d5b57108f5"}, @generic={0xe5, 0xb, "032c61389e7c1cc23dad58d98a7ce87b1d39e1705748e8bd680e814892b2f8f068a843d6cd4dbc336b8569091f9f03ffb99608b34551c9c9e5436667df1cfc947c2d793d82fd78bedc8c691db7319bd64481c91ae7eb48c6263f6867265ce855ab10e31f1820333dbc4c97c919c70d2f94793ce27908f1842d2cdcc1f8eb18887edaf3f6fd85e1f25e73a257f1da3944b69ca046507057fc74c12d4a484f25aaa64eabf72ca00fb4f2ade6833a5c886b314d7d36bbee6d52f9ae972c2feb0bcc527933fe9dffcb9ad76d5bb51b6e5228a3c123d839118c4a5f7043734d65eab24ff45e"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x2, 0x9d, 0x80, [@generic={0xe3, 0x4, "d71f2c71129c4062d1f42933bab65f2aafb9a3723a033917d021072421cd0bbddcfb18290973195633e8cadae2f49feb677cde5648ec37c3c5d90cc61806352428c470dfd99022961c79a588043a3c62a8262c69ee596dfa0e1893b6e70c5d60955942e93e7745a2852313eb800d1c1c67e60bc17d8f8e70c23f67c22a0255adfdb86d5c2721d1ed1a0c6dca40cec33de42aa98f3662e8f2da726f8448b176b25c7f8933551794b3f77dff4699e534c49f71abb7035a925b907ec47162f1a3d5eb09d89dbfd7ded49601af161b8c03ea3855b99a913b816248d496a41df24ae487"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x20, 0x81}]}}, {{0x9, 0x5, 0x6, 0x2, 0x200, 0x78, 0x8, 0x8, [@generic={0x38, 0xd, "0c79589cd2f2440f4d73bbc8fdbd20cbd73896f3a0847e6dd900601c41d8b9889081ac89d44556594dc2c2cda45b5ded0c7836e2021a"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xf, 0x1c03}]}}, {{0x9, 0x5, 0x6, 0x4, 0x200, 0x9f, 0x40, 0x84}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x9, 0xfc}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x7, 0x8, 0x2, [@generic={0xbb, 0x0, "4b7c9774d4986f499f8ecd64cdd621611c9acbd4d21ce2a2758f2e5bdc128ffd502edbc8b3b82c9318df1f952cd6a4ee284f491a3ee1761ae46a7285763dfa5a1a541c19d3883675963e14836d04ab9a791fc3a631ef6aa4fd3b0ec9470caaf10bfc4723458ae4e6316288829bd8a57b4cb27e67356dc231052bb84eb8ef5df33926d4acbcbe09b8c99ee0b3439ea13a328e9d041ade77417a6ad3e92517b81e182468c34f5dcb501e25db42cf909749abbf3f0a00597b221e"}]}}]}}, {{0x9, 0x4, 0xa2, 0x1, 0x1, 0xc, 0x7c, 0xf1, 0x3, [@uac_as={[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x100, 0x401, 0x20, "f98e93faea"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x9, 0x2, 0xff, 0xe1, "56240880d7de"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2, 0x0, 0x1f, "3cca1c3b324982ee"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6c, 0x7fff, 0x2, '=u'}]}], [{{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x20, 0x4, 0x3}}]}}, {{0x9, 0x4, 0x21, 0x41, 0xe, 0xff, 0x4, 0x31, 0x80, [], [{{0x9, 0x5, 0x2, 0x4, 0x400, 0x4, 0x3, 0x3e}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x2, 0x8f, 0x7, [@generic={0x75, 0x40, "69779778a1f3f9ffa08b04b4cabd4d49152ffbbf9a8e0ef3179544b4a170c0b88fe4bf5094fdc6f48b49e37dd98e78dc9386561f4f207d673afaf91c0416c906dd142003911cbe9b98cfaedbf78a4ff48d10417853b6255b38c24540ebcdf3a210031ca46dbc6d0208b6b1c9e4d03d0a9d1dfe"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0x7f, 0x3, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x53, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x80, 0x1ff}]}}, {{0x9, 0x5, 0x8, 0x2, 0x10, 0x87, 0x6, 0x3}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x1, 0x5, 0x4, [@generic={0xc3, 0x6, "0f27a413db07e7decce66324ff2a58dabca328b18770e9dcb77ea346d891f748875343abf2472ce9d92f0b3f415f5e32099592ad9000fc4aa57d1b719c8d163dc9ad9c6075c61c1f205d0c3fdcc54b394fe669e6f65fcbfe45b2017861522aa1e95b49ffea55e861386847dda4e09b4933c6de5ed10588d4880b9fefd2711f8720e3a8ffdfb830c65868f8979af0e50fa587d822eb0d688248ad5d7ac549fa61fbf79f706a1a68a7d5c19fa12e8e65ffba1c09f728ad8c240c065eadf3b3e272e0"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x81, 0x7f, 0xfd, [@generic={0x7d, 0x2, "5cceabf147bb2beb4a308e9e681f975ae928358492fa02a74a77e023280d194e1a7d529b04aade672db2ef824c2d4acba7ac6846e3e20792f19b647d8d43a4af575297da3d7cf96df09a9a198a76cc6aba8cfe335133d0f6cf73f81685eff231dd6690add906ca01653b623bf1caec5e95c014560bdf68ca00030d"}]}}, {{0x9, 0x5, 0x6c9703b2ece365c8, 0x0, 0x40, 0x4, 0x1, 0x3f}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0xdf, 0x0, 0xc7}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x5a, 0xfd}}, {{0x9, 0x5, 0x8, 0x1, 0x10, 0x37, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xfffb}]}}, {{0x9, 0x5, 0xb, 0x4, 0x8, 0x2, 0x38, 0x2, [@generic={0x8c, 0xa, "6d5ec32160b2b8ffa7595eaaa325df1b93176f6063a1c2e3e5a2f1db1359be064490d4ce48f11e8acd129470c757667147f3dac24e00eccc15c79db6ed984758f0064dbf3899c735d23628d54c5fd8a1757a78a74a67620ff9237b108de07516f9b2cb2a7c24385636384386a42bbebb23e50212093c1a9a85873e1e3286050e49bbb7ee6801746f9bc7"}, @generic={0xb5, 0x7, "a100263e192593410a35e828972375f912f89164b403597ba3efa76f17ce2c7bfa9493d676340bde28799596c7d59869ce6e755c6fd382452d74f4c1e92b191d1a338ec162445dbd23ec88432a6c2921b2c6ee331d285f7c23ea6682c5abe76758f9775ce57f3d45966f1d5a686a249dac98b14176bb19d5ef83e82ad65e0af982d027be60acb38acc3e329f993d4c1ed6ff95ea3b77ba5916180603f894463f35f60e1046d5e8e755177191101e12b24fa86d"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x0, 0x7, 0x8, [@generic={0x12, 0x2, "dfea21b9025fd33d55a9e37a9693f377"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x9, 0x47, 0x1, [@generic={0xf1, 0x10, "0fd38fd30ce770936c237ba7fddb2213f48707936854cb062aa2bd6bd2b19856a3ada2c4a4a499d8c1465f5036337ddc8375c63ddc17c88c11c9f9af2335f2076002550a3c14c74d92ff3d2a1a3d4f75a736482ef84b159906cc7fe338089dead75aaac22ae0e3219f5a03d30e433f6ba4b67ca54399aafe477f2e676abf118b29bba411852258d38cff38bfbbc5ddf86bf8093361c80492095d0d0f0e729b4523d5a2f07dfacab898c1cd33ac7be96ec5b26c5027adbcd41b962425c5958c1bfd2a24f997bcca51aedf3d6487bf1670333693a169b14dd62ef139f136509200f539968b5696b08f5e31aa647100a4"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x8, 0x7f, 0xff, [@generic={0x37, 0xa, "f8453ea6ccafaa1fd3bb9646f8f79910d082ee508d69c0f0f1d8bfe2115b9c0ac5191434a0e1140e05a50339cb2476ec7cf53d5bcd"}]}}]}}]}}]}}, &(0x7f0000001880)={0xa, &(0x7f0000001700)={0xa, 0x6, 0x300, 0x2, 0xf8, 0x4f, 0x40, 0x6a}, 0x62, &(0x7f0000001740)={0x5, 0xf, 0x62, 0x1, [@generic={0x5d, 0x10, 0x3, "45a24ab850afe99e428170c460c3f18190474841d89fcd2b6977dcbfe2d06d5431f4b5e48d8844b65e82d9f4684883930e88596f5ee7d556c45fd2d83ad42abae3d33385abc4f8436880535db0682ca1b2b08636bd8308ab8347"}]}, 0x2, [{0x4f, &(0x7f00000017c0)=@string={0x4f, 0x3, "ca9d3ea89070ffeff17268944c719c686a0a760aa060091d547b8522746e308efddb01d1729499a54452af9bd86c5391ce00609b6ff78e94418cbef519354c43f44b1982430442793c02549a96"}}, {0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x2c01}}]}) syz_usb_connect(0x3, 0x7ba, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x76, 0x9, 0x7c, 0x87, 0x17cc, 0x41c, 0xbce8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a8, 0x2, 0xff, 0x29, 0x0, 0x1, [{{0x9, 0x4, 0x75, 0xf7, 0x10, 0x50, 0x82, 0xb2, 0x9, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "1dd0abdf78"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x3f, 0x7, 0xfff}, [@country_functional={0xa, 0x24, 0x7, 0xbc, 0x9cc0, [0x1, 0x7f]}]}, @hid_hid={0x9, 0x21, 0x9, 0x1f, 0x1, {0x22, 0x8ed}}], [{{0x9, 0x5, 0x0, 0x0, 0x40, 0x7f, 0x8, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x8}, @generic={0xf8, 0xd, "3404df193e94ed9e4348591d506b1206af1b53193b611932412e5b4f0f387f75eed85092fed8a307c851333924305800af120233473bf14c46a3fb36753a334c4045ead3697d4209ec37ceaab08a59effb87a3aa8727ace1d8afe08f353cab8cbeb7c3e5ff0ad1a2f35a9317a8a38220525f4a0bf249e37eee0deae92cced1cf9116f2043257973fdf1e666ed54fd755fdfb43d053cda2727bbf129e3dfd65a35b81f9b398aaff1894771c411479f766e384a27be0708076319a20bbba82664108ebe7d2c7fc823b19bf38c25003c6c05944bf7cb9fa5065cc0e99d4b7a3aa9c05774f82efc66d8b66c3a08f95acccbc5fde8dd93e1c"}]}}, {{0x9, 0x5, 0xf, 0x11, 0x40, 0x5, 0x2, 0x30, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x619f}, @generic={0xf7, 0x5, "1262aad76f316bd7a3108750ba6c4c08659720b5cbc54ad24e4a4231a5a807ad65c478a1fbe45a742d04c455b19b348c68c65d19de8a656e6206f857e4189dcbf563373161b01517c68804bee50fab1680bb16046d51f5f31a4aeaf99fcec17b87232e83fa6562356e109bce46ea0776cd857c46488993bea58da3ab7ac66f83322d28c3e0e124681cd76c638443be9f676d2b1fe391052337c3a22af2ef81afef610a987ed7225d9cb3ce9d48fb60b522c35b023e8a44747ed3111f838097175a1f07fd0c2c3cd7942200fa44b818f8b33711e3aeb5d63a02dec20ba9c38c506b14c8a5c0e68367dde64cf2796da156e8115d13fb"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x400, 0x7a, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x18, 0x8001}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x1, 0x81, 0x30, [@generic={0xc9, 0x9, "8043ca0eab1cdd56c70a1506fff4f5a07b41f7ccd24eaf50b1c3cfbb42b128483478e23ec2a17d1e1f71089c98a8d49fb0ef70229a87b159af00fef855f7d4289a746fac42a2aa2c75b645811cded5d677056615a6b10220ecedc7aef300d1d5f547b2e632c017a1c99cbbc2e6c32dc054ef5388511ea053d2dc864906f8140e9e90a53c1403f1da48b6fdd13cf27452f3fd2f28d7b75c60070fbe65ab38350556a353d7583c0d31ec95de1a72d9e2580ecdf08e75449428c61158b63742d877e4ba00fb7ba45c"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x400}]}}, {{0x9, 0x5, 0x0, 0x1, 0x10, 0x0, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x6}]}}, {{0x9, 0x5, 0x5, 0x2, 0x3ff, 0x19, 0xfe, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0xb5, 0x3}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0xe7, 0x2, 0x9}}, {{0x9, 0x5, 0x4, 0x1, 0x3ff, 0x2, 0x1f, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1f}]}}, {{0x9, 0x5, 0x8, 0x8, 0x3ff, 0x8, 0x5, 0x2, [@generic={0xec, 0x1, "9627211859674cc212a73d3dcd95d2b824419cd3b9f130f548981da5b74d602b20ec740e0d5bee48ce0e65e3731a6c9ae5b544b4949c0f84127378c62dbc9b8a7eea9ed66ed016f699bd7e2c70ce079c4d98dd1389df5e2c64895d27444c737b0d588dd1a05a9b7a5bdba4f082ec3b59cdb9013b7c0e2dd375c81479c6629476f72d278640637f14980e25c7e5add6f34e33e6707830b8b25a18f59fd58a995cf5c4ec97a964de7e03db54d8b496cdd59eeee4dd4d0c93d7536aa407445390de7baede7199448035fd92baa8c8b24c31182fd15393b8de4d13d7b3733c9f6ab8c9cfd89b4d5957562fe2"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x200, 0x8, 0x5, 0x3d, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x8}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x99, 0x9, 0x20}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x2, 0x5, 0x0, [@generic={0x5f, 0x22, "b6627625aaf025f11a21bbcbf40b7efb36099c5b406c9ccdd165c920acd31213e7c8f9d1f659c935a598ca10bc9d861f9613721e736a0a0fa831223397d2defb8df19aaf7c57f41a6ee694372e142ddd7261fbbd1b718ceb2905ff9ed2"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x2}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x20, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x400}]}}, {{0x9, 0x5, 0x5, 0x3, 0x200, 0x2, 0xff, 0x80}}, {{0x9, 0x5, 0xe, 0x4, 0x8, 0x7, 0x34, 0x37, [@generic={0x57, 0xb, "ad95d08201aeb357f862a5c59aea4cf7ff3382e1296b37423fbd2767c4f06aa29cecffb75a9d6347f281e79546c0dcbf1bbd7f91eacdf23c364b342f4aeb8df9ab0c51b0138c2824b3836ac87c2de0aada2c5412ee"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x7}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x20, 0x80, 0x2}}]}}, {{0x9, 0x4, 0x61, 0x9, 0xb, 0xb7, 0x67, 0x37, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x3e7, 0x40}, [@feature_unit={0x11, 0x24, 0x6, 0x5, 0x1, 0x5, [0x8, 0x1, 0x4, 0xa, 0x8], 0x9}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x1ff, 0x1, 0x3, 0xcc}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0x6}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x204, 0x6, 0x8, 0x0, 0x6, 0x30}, @mixer_unit={0xb, 0x24, 0x4, 0x5, 0x81, "2636cc9b050f"}, @mixer_unit={0x9, 0x24, 0x4, 0x4, 0x3, "11b91bab"}]}], [{{0x9, 0x5, 0xa, 0x8, 0x8, 0x20, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xff, 0x300}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x20, 0x8, 0xd}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0xe0, 0x4, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x57, 0xda3}]}}, {{0x9, 0x5, 0x8, 0x4, 0x10, 0x2, 0x7f, 0x80}}, {{0x9, 0x5, 0x5, 0x8, 0x40, 0x81, 0xcb, 0x4, [@generic={0x99, 0x24, "d1707195088c4b9df0bc5c40b8c006dc9553a468ef4abc2182abda891996b4a74401499280c4b07e528165677f5aa49964f37f00310c80b489c9cc1575036b9cf0c0a5951c6ba6dc1c848b1a480f5415707e213e7b11d224f0820c344dd20370624a0794023a1c93df3d3ac108f452a211cc8eb41bb15c7a0f2cc5f43f662bc9889742c4111bfc1768920886024876ffabc40dd3d3bf55"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x3}]}}, {{0x9, 0x5, 0xd, 0xc, 0x40, 0x2, 0x5, 0x95}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x5, 0x5, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1f, 0x8}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x1f, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1f, 0x7}]}}, {{0x9, 0x5, 0xf, 0x8, 0x20, 0x0, 0x4}}, {{0x9, 0x5, 0x0, 0x8, 0x10, 0x72, 0x81, 0x3, [@generic={0x27, 0x6, "09743b9643dcce2e4dfae8a3f254ce29f1ac22ed9fffb82498714bd0fd36915284d0bcae37"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x1c7}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0xb3, 0xd1, 0xc1, [@generic={0x8b, 0x4, "c3e818d9e99f1c7cceeb52af4e1930ccdf0f40b369da3bfe1514bf9330c5bd673575a00e5843feb79f62f2217f8237931e62923b05690d501fddf1ce7c9da238e1eaabd7b8c3d7f0814793ce19e423bec143799c1f3595fb749c3f920fe736e64d332b2979ebce48a57bff9be5f88c6c707515d38671803169c32e697461cbb8572ce3049c9a95bbe7"}]}}]}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x311, 0xff, 0x76, 0x93, 0x10}, 0x19, &(0x7f0000000180)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0x5, 0xff00, 0xee, [0xffc0c0, 0x3f30]}]}, 0x5, [{0xe7, &(0x7f00000001c0)=@string={0xe7, 0x3, "5d56f09edc32161b2793f825820e6eed76b6d63b401db7d054b5fe2cc38380bc0c7078b4c337488dccfe3a7e097bc98806ce5071e62644c10e80a0509b1bbd3e03ae12d6291e85610edb9f99e98a0e9b1a3545c9f1c5471c57b8f8c397eaafffc2b218c69252296fe4e7a288c7c702b990567d63028ff90ec3c92c2f115b703cc7dd9c21bd4b4d46b617aad58f27560ace8e4696e6f120bcbc4bfee01ae645f61496666f3398819f75b6361e6f5e0f82cc45777688f7ea198eeafcf9aeaf0c8c8f7d9a5cfbade968d7f586ed9cee9e097aef7caf156c8a7fe7f1a99a33604064501fd2d407"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x3401}}, {0x58, &(0x7f0000000300)=@string={0x58, 0x3, "257a324b29638297b78075ad919c465c24dcd8203141980558384ab99c447483dfa7efc9bbcc84474ca7307bdf7906ec19f1957eb7569e99ab619707f907248e2a817738d0e5f9cfbf097f175a1ad72912459bf1f9f0"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x1404}}]}) close_range(r0, 0xffffffffffffffff, 0x0) [ 1212.108964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1212.113055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1212.126241] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1212.135267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1212.136336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1212.138933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1212.143183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1212.145890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1212.152505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1212.152870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1212.157275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1212.267349] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:49:58 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 27) [ 1212.434555] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1212.436524] FAULT_INJECTION: forcing a failure. [ 1212.436524] name failslab, interval 1, probability 0, space 0, times 0 [ 1212.438183] CPU: 0 UID: 0 PID: 8799 Comm: syz-executor.3 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1212.438214] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1212.438228] Call Trace: [ 1212.438237] [ 1212.438247] dump_stack_lvl+0xfa/0x120 [ 1212.438291] should_fail_ex+0x4d7/0x5e0 [ 1212.438326] should_failslab+0xc2/0x120 [ 1212.438357] __kmalloc_node_track_caller_noprof+0xc6/0x760 [ 1212.438398] ? kvasprintf_const+0x64/0x1a0 [ 1212.438425] ? perf_trace_preemptirq_template+0x259/0x430 [ 1212.438469] kvasprintf+0xbd/0x160 [ 1212.438497] ? __pfx_kvasprintf+0x10/0x10 [ 1212.438526] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1212.438565] ? lockdep_init_map_type+0x4b/0x220 [ 1212.438611] kvasprintf_const+0x64/0x1a0 [ 1212.438642] kobject_set_name_vargs+0x5a/0x150 [ 1212.438671] device_create_groups_vargs+0x1c0/0x280 [ 1212.438704] device_create+0xdf/0x120 [ 1212.438730] ? __pfx_device_create+0x10/0x10 [ 1212.438757] ? timer_init_key+0x12e/0x280 [ 1212.438795] ? ieee80211_roc_setup+0x136/0x270 [ 1212.438830] ? ieee80211_alloc_hw_nm+0x228/0x21a0 [ 1212.438864] mac80211_hwsim_new_radio+0x37a/0x52a0 [ 1212.438908] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1212.438958] ? do_trace_netlink_extack+0x12a/0x150 [ 1212.438995] ? __nla_validate_parse+0x2e6/0x2880 [ 1212.439027] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1212.439069] hwsim_new_radio_nl+0xb61/0x1300 [ 1212.439094] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1212.439126] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1212.439158] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1212.439200] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1212.439232] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1212.439272] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1212.439305] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1212.439351] ? security_capable+0x2f/0x90 [ 1212.439393] ? ns_capable+0xe2/0x120 [ 1212.439437] genl_rcv_msg+0x532/0x7e0 [ 1212.439471] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1212.439502] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1212.439530] ? __lock_acquire+0x451/0x2250 [ 1212.439575] netlink_rcv_skb+0x147/0x430 [ 1212.439601] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1212.439633] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1212.439678] ? netlink_deliver_tap+0x1af/0xcb0 [ 1212.439725] genl_rcv+0x28/0x40 [ 1212.439749] netlink_unicast+0x5a7/0x870 [ 1212.439781] ? __pfx_netlink_unicast+0x10/0x10 [ 1212.439808] ? __virt_addr_valid+0x100/0x5d0 [ 1212.439850] netlink_sendmsg+0x8a3/0xd80 [ 1212.439884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1212.439928] ____sys_sendmsg+0xa38/0xbf0 [ 1212.439962] ? copy_msghdr_from_user+0xfb/0x150 [ 1212.439988] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1212.440025] ? __pfx_perf_tp_event+0x10/0x10 [ 1212.440056] ? lock_acquire+0x15e/0x2d0 [ 1212.440094] ___sys_sendmsg+0x10f/0x1b0 [ 1212.440120] ? __pfx____sys_sendmsg+0x10/0x10 [ 1212.440141] ? perf_trace_lock+0xbb/0x4f0 [ 1212.440182] ? __pfx_perf_trace_lock+0x10/0x10 [ 1212.440213] ? proc_fail_nth_write+0x97/0x220 [ 1212.440255] ? lock_acquire+0x15e/0x2d0 [ 1212.440285] ? __fget_files+0x34/0x3b0 [ 1212.440314] ? find_held_lock+0x2b/0x80 [ 1212.440338] ? __fget_files+0x203/0x3b0 [ 1212.440364] ? lock_release+0xc8/0x270 [ 1212.440402] ? __fget_files+0x20d/0x3b0 [ 1212.440444] __sys_sendmsg+0x150/0x200 [ 1212.440468] ? __pfx___sys_sendmsg+0x10/0x10 [ 1212.440491] ? perf_trace_preemptirq_template+0x259/0x430 [ 1212.440538] ? __pfx_ksys_write+0x10/0x10 [ 1212.440562] ? irqentry_exit+0xee/0x650 [ 1212.440592] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1212.440623] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1212.440667] do_syscall_64+0xbf/0x420 [ 1212.440705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.440731] RIP: 0033:0x7fbd3c214b19 [ 1212.440751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1212.440775] RSP: 002b:00007fbd3978a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1212.440799] RAX: ffffffffffffffda RBX: 00007fbd3c327f60 RCX: 00007fbd3c214b19 [ 1212.440816] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1212.440831] RBP: 00007fbd3978a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1212.440845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1212.440860] R13: 00007fffae4888ff R14: 00007fbd3978a300 R15: 0000000000022000 [ 1212.440899] 14:49:59 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 28) 14:49:59 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 27) [ 1212.620326] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1212.621839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1212.624250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:49:59 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xbb4a, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:49:59 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x87c1, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:49:59 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x4000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:49:59 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x1800, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:49:59 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x98c1, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:49:59 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x44, 0x2, 0xff, 0x9, 0x0, 0x1, 0x1010, 0xf, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4, @perf_bp={&(0x7f0000000100), 0x1}, 0x1, 0xfe00000000000000, 0x8, 0x6, 0x9, 0xffffff00, 0x3ff, 0x0, 0x401, 0x0, 0x7}, 0x0, 0xd, r0, 0x1) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200), 0x6e, &(0x7f0000000980)=[{&(0x7f0000000280)=""/201, 0xc9}, {&(0x7f0000000400)=""/116, 0x74}, {&(0x7f0000000480)=""/210, 0xd2}, {&(0x7f0000000580)=""/118, 0x76}, {&(0x7f0000000600)=""/216, 0xd8}, {&(0x7f0000000700)=""/192, 0xc0}, {&(0x7f00000007c0)=""/168, 0xa8}, {&(0x7f0000000880)=""/217, 0xd9}], 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="18ff0f00000000000000000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x68}, 0x40) ptrace(0x10, r2) [ 1212.834254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1212.846825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1212.848415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1212.858020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1212.880476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1212.885952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1212.905508] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1212.908217] FAULT_INJECTION: forcing a failure. [ 1212.908217] name failslab, interval 1, probability 0, space 0, times 0 [ 1212.910121] CPU: 0 UID: 0 PID: 8805 Comm: syz-executor.4 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1212.910152] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1212.910165] Call Trace: [ 1212.910174] [ 1212.910183] dump_stack_lvl+0xfa/0x120 [ 1212.910225] should_fail_ex+0x4d7/0x5e0 [ 1212.910259] should_failslab+0xc2/0x120 [ 1212.910288] __kmalloc_node_track_caller_noprof+0xc6/0x760 [ 1212.910326] ? kvasprintf_const+0x64/0x1a0 [ 1212.910352] ? perf_trace_preemptirq_template+0x259/0x430 [ 1212.910393] kvasprintf+0xbd/0x160 [ 1212.910418] ? __pfx_kvasprintf+0x10/0x10 [ 1212.910447] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1212.910483] ? lockdep_init_map_type+0x4b/0x220 [ 1212.910526] kvasprintf_const+0x64/0x1a0 [ 1212.910555] kobject_set_name_vargs+0x5a/0x150 [ 1212.910582] device_create_groups_vargs+0x1c0/0x280 [ 1212.910613] device_create+0xdf/0x120 [ 1212.910638] ? __pfx_device_create+0x10/0x10 [ 1212.910663] ? timer_init_key+0x12e/0x280 [ 1212.910699] ? ieee80211_roc_setup+0x136/0x270 [ 1212.910732] ? ieee80211_alloc_hw_nm+0x228/0x21a0 [ 1212.910765] mac80211_hwsim_new_radio+0x37a/0x52a0 [ 1212.910801] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1212.910838] ? do_trace_netlink_extack+0x12a/0x150 [ 1212.910872] ? __nla_validate_parse+0x2e6/0x2880 [ 1212.910911] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1212.910952] hwsim_new_radio_nl+0xb61/0x1300 [ 1212.911005] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1212.911035] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1212.911064] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1212.911104] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1212.911133] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1212.911171] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1212.911201] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1212.911245] ? security_capable+0x2f/0x90 [ 1212.911284] ? ns_capable+0xe2/0x120 [ 1212.911325] genl_rcv_msg+0x532/0x7e0 [ 1212.911358] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1212.911387] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1212.911413] ? __lock_acquire+0x451/0x2250 [ 1212.911456] netlink_rcv_skb+0x147/0x430 [ 1212.911480] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1212.911510] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1212.911553] ? netlink_deliver_tap+0x1af/0xcb0 [ 1212.911598] genl_rcv+0x28/0x40 [ 1212.911621] netlink_unicast+0x5a7/0x870 [ 1212.911651] ? __pfx_netlink_unicast+0x10/0x10 [ 1212.911676] ? __virt_addr_valid+0x100/0x5d0 [ 1212.911716] netlink_sendmsg+0x8a3/0xd80 [ 1212.911748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1212.911790] ____sys_sendmsg+0xa38/0xbf0 [ 1212.911822] ? copy_msghdr_from_user+0xfb/0x150 [ 1212.911846] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1212.911881] ? __pfx_perf_tp_event+0x10/0x10 [ 1212.911911] ? lock_acquire+0x15e/0x2d0 [ 1212.911946] ___sys_sendmsg+0x10f/0x1b0 [ 1212.911970] ? __pfx____sys_sendmsg+0x10/0x10 [ 1212.911991] ? perf_trace_lock+0xbb/0x4f0 [ 1212.912028] ? __pfx_perf_trace_lock+0x10/0x10 [ 1212.912058] ? proc_fail_nth_write+0x97/0x220 [ 1212.912096] ? lock_acquire+0x15e/0x2d0 [ 1212.912124] ? __fget_files+0x34/0x3b0 [ 1212.912150] ? find_held_lock+0x2b/0x80 [ 1212.912172] ? __fget_files+0x203/0x3b0 [ 1212.912197] ? lock_release+0xc8/0x270 [ 1212.912233] ? __fget_files+0x20d/0x3b0 [ 1212.912272] __sys_sendmsg+0x150/0x200 [ 1212.912295] ? __pfx___sys_sendmsg+0x10/0x10 [ 1212.912315] ? perf_trace_preemptirq_template+0x259/0x430 [ 1212.912360] ? __pfx_ksys_write+0x10/0x10 [ 1212.912382] ? irqentry_exit+0xee/0x650 [ 1212.912410] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1212.912439] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1212.912480] do_syscall_64+0xbf/0x420 [ 1212.912516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.912541] RIP: 0033:0x7f3b21b1bb19 [ 1212.912560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1212.912582] RSP: 002b:00007f3b1f091188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1212.912604] RAX: ffffffffffffffda RBX: 00007f3b21c2ef60 RCX: 00007f3b21b1bb19 [ 1212.912620] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1212.912634] RBP: 00007f3b1f0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1212.912648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1212.912661] R13: 00007ffe815263cf R14: 00007f3b1f091300 R15: 0000000000022000 [ 1212.912699] 14:49:59 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 29) 14:49:59 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 28) [ 1213.060210] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1213.062562] FAULT_INJECTION: forcing a failure. [ 1213.062562] name failslab, interval 1, probability 0, space 0, times 0 [ 1213.064356] CPU: 0 UID: 0 PID: 8820 Comm: syz-executor.3 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1213.064389] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1213.064404] Call Trace: [ 1213.064413] [ 1213.064424] dump_stack_lvl+0xfa/0x120 [ 1213.064472] should_fail_ex+0x4d7/0x5e0 [ 1213.064507] ? device_add+0xc29/0x1830 [ 1213.064549] should_failslab+0xc2/0x120 [ 1213.064579] __kmalloc_cache_noprof+0x6a/0x630 [ 1213.064627] device_add+0xc29/0x1830 [ 1213.064668] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1213.064711] ? __pfx_device_add+0x10/0x10 [ 1213.064748] ? kfree+0x1ec/0x570 [ 1213.064798] device_create_groups_vargs+0x207/0x280 [ 1213.064834] device_create+0xdf/0x120 [ 1213.064863] ? __pfx_device_create+0x10/0x10 [ 1213.064907] ? timer_init_key+0x12e/0x280 [ 1213.064947] ? ieee80211_roc_setup+0x136/0x270 [ 1213.064985] ? ieee80211_alloc_hw_nm+0x228/0x21a0 [ 1213.065022] mac80211_hwsim_new_radio+0x37a/0x52a0 [ 1213.065065] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1213.065106] ? do_trace_netlink_extack+0x12a/0x150 [ 1213.065143] ? __nla_validate_parse+0x2e6/0x2880 [ 1213.065178] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1213.065225] hwsim_new_radio_nl+0xb61/0x1300 [ 1213.065250] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1213.065283] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1213.065316] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1213.065359] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1213.065391] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1213.065432] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1213.065466] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1213.065515] ? security_capable+0x2f/0x90 [ 1213.065563] ? ns_capable+0xe2/0x120 [ 1213.065605] genl_rcv_msg+0x532/0x7e0 [ 1213.065642] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1213.065674] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1213.065704] ? __lock_acquire+0x451/0x2250 [ 1213.065754] netlink_rcv_skb+0x147/0x430 [ 1213.065781] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1213.065813] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1213.065865] ? netlink_deliver_tap+0x1af/0xcb0 [ 1213.065913] genl_rcv+0x28/0x40 [ 1213.065936] netlink_unicast+0x5a7/0x870 [ 1213.065968] ? __pfx_netlink_unicast+0x10/0x10 [ 1213.065994] ? __virt_addr_valid+0x100/0x5d0 [ 1213.066038] netlink_sendmsg+0x8a3/0xd80 [ 1213.066075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1213.066121] ____sys_sendmsg+0xa38/0xbf0 [ 1213.066158] ? copy_msghdr_from_user+0xfb/0x150 [ 1213.066182] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1213.066221] ? __pfx_perf_tp_event+0x10/0x10 [ 1213.066256] ? lock_acquire+0x15e/0x2d0 [ 1213.066291] ___sys_sendmsg+0x10f/0x1b0 [ 1213.066317] ? __pfx____sys_sendmsg+0x10/0x10 [ 1213.066339] ? perf_trace_lock+0xbb/0x4f0 [ 1213.066383] ? __pfx_perf_trace_lock+0x10/0x10 [ 1213.066414] ? proc_fail_nth_write+0x97/0x220 [ 1213.066457] ? lock_acquire+0x15e/0x2d0 [ 1213.066489] ? __fget_files+0x34/0x3b0 [ 1213.066519] ? find_held_lock+0x2b/0x80 [ 1213.066544] ? __fget_files+0x203/0x3b0 [ 1213.066570] ? lock_release+0xc8/0x270 [ 1213.066606] ? __fget_files+0x20d/0x3b0 [ 1213.066652] __sys_sendmsg+0x150/0x200 [ 1213.066679] ? __pfx___sys_sendmsg+0x10/0x10 [ 1213.066700] ? perf_trace_preemptirq_template+0x259/0x430 [ 1213.066747] ? __pfx_ksys_write+0x10/0x10 [ 1213.066773] ? irqentry_exit+0xee/0x650 [ 1213.066803] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1213.066835] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1213.066882] do_syscall_64+0xbf/0x420 [ 1213.066925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.066951] RIP: 0033:0x7fbd3c214b19 [ 1213.066985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1213.067012] RSP: 002b:00007fbd3978a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1213.067038] RAX: ffffffffffffffda RBX: 00007fbd3c327f60 RCX: 00007fbd3c214b19 [ 1213.067054] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1213.067069] RBP: 00007fbd3978a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1213.067084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1213.067098] R13: 00007fffae4888ff R14: 00007fbd3978a300 R15: 0000000000022000 [ 1213.067137] [ 1213.148560] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:49:59 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 30) [ 1213.252076] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:49:59 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 29) [ 1213.361874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1213.365645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:50:00 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xbb4b, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:50:00 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x7dc7, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1213.440142] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1213.447494] FAULT_INJECTION: forcing a failure. [ 1213.447494] name failslab, interval 1, probability 0, space 0, times 0 [ 1213.459061] CPU: 1 UID: 0 PID: 8826 Comm: syz-executor.4 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1213.459096] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1213.459111] Call Trace: [ 1213.459119] [ 1213.459129] dump_stack_lvl+0xfa/0x120 [ 1213.459172] should_fail_ex+0x4d7/0x5e0 [ 1213.459207] should_failslab+0xc2/0x120 [ 1213.459237] __kmalloc_node_track_caller_noprof+0xc6/0x760 [ 1213.459278] ? kvasprintf_const+0x64/0x1a0 [ 1213.459307] ? __pfx_perf_trace_lock+0x10/0x10 [ 1213.459348] kvasprintf+0xbd/0x160 [ 1213.459375] ? __pfx_kvasprintf+0x10/0x10 [ 1213.459405] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1213.459443] ? lockdep_init_map_type+0x4b/0x220 [ 1213.459487] kvasprintf_const+0x64/0x1a0 [ 1213.459517] kobject_set_name_vargs+0x5a/0x150 [ 1213.459545] device_create_groups_vargs+0x1c0/0x280 [ 1213.459577] device_create+0xdf/0x120 [ 1213.459603] ? __pfx_device_create+0x10/0x10 [ 1213.459629] ? timer_init_key+0x12e/0x280 [ 1213.459665] ? ieee80211_roc_setup+0x136/0x270 [ 1213.459699] ? ieee80211_alloc_hw_nm+0x228/0x21a0 [ 1213.459733] mac80211_hwsim_new_radio+0x37a/0x52a0 [ 1213.459770] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1213.459808] ? do_trace_netlink_extack+0x12a/0x150 [ 1213.459843] ? __nla_validate_parse+0x2e6/0x2880 [ 1213.459875] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1213.459925] hwsim_new_radio_nl+0xb61/0x1300 [ 1213.459949] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1213.459981] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1213.460011] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1213.460053] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1213.460084] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1213.460124] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1213.460155] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1213.460200] ? security_capable+0x2f/0x90 [ 1213.460242] ? ns_capable+0xe2/0x120 [ 1213.460285] genl_rcv_msg+0x532/0x7e0 [ 1213.460319] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1213.460349] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1213.460377] ? __lock_acquire+0x451/0x2250 [ 1213.460421] netlink_rcv_skb+0x147/0x430 [ 1213.460447] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1213.460478] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1213.460522] ? netlink_deliver_tap+0x1af/0xcb0 [ 1213.460569] genl_rcv+0x28/0x40 [ 1213.460593] netlink_unicast+0x5a7/0x870 [ 1213.460624] ? __pfx_netlink_unicast+0x10/0x10 [ 1213.460652] ? __virt_addr_valid+0x100/0x5d0 [ 1213.460697] netlink_sendmsg+0x8a3/0xd80 [ 1213.460730] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1213.460773] ____sys_sendmsg+0xa38/0xbf0 [ 1213.460807] ? copy_msghdr_from_user+0xfb/0x150 [ 1213.460832] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1213.460878] ? lock_acquire+0x15e/0x2d0 [ 1213.460915] ___sys_sendmsg+0x10f/0x1b0 [ 1213.460941] ? __pfx____sys_sendmsg+0x10/0x10 [ 1213.460962] ? perf_trace_lock+0xbb/0x4f0 [ 1213.461001] ? __pfx_perf_trace_lock+0x10/0x10 [ 1213.461033] ? proc_fail_nth_write+0x97/0x220 [ 1213.461073] ? lock_acquire+0x15e/0x2d0 [ 1213.461104] ? __fget_files+0x34/0x3b0 [ 1213.461132] ? find_held_lock+0x2b/0x80 [ 1213.461155] ? __fget_files+0x203/0x3b0 [ 1213.461181] ? lock_release+0xc8/0x270 [ 1213.461218] ? __fget_files+0x20d/0x3b0 [ 1213.461259] __sys_sendmsg+0x150/0x200 [ 1213.461283] ? __pfx___sys_sendmsg+0x10/0x10 [ 1213.461321] ? __pfx_ksys_write+0x10/0x10 [ 1213.461345] ? irqentry_exit+0xee/0x650 [ 1213.461374] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1213.461406] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1213.461450] do_syscall_64+0xbf/0x420 [ 1213.461487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.461511] RIP: 0033:0x7f3b21b1bb19 [ 1213.461531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1213.461553] RSP: 002b:00007f3b1f091188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1213.461577] RAX: ffffffffffffffda RBX: 00007f3b21c2ef60 RCX: 00007f3b21b1bb19 [ 1213.461593] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1213.461608] RBP: 00007f3b1f0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1213.461622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1213.461637] R13: 00007ffe815263cf R14: 00007f3b1f091300 R15: 0000000000022000 [ 1213.461675] 14:50:00 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x99c1, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:50:00 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x2000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1213.630847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1213.632628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:50:13 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 31) 14:50:13 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x88c1, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:50:13 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x233b, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:50:13 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x9ac1, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:50:13 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 30) 14:50:13 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xbb4c, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:50:13 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x7ec7, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:50:13 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0xd6f, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0xa8, 0x1d, 0x2b, 0x40, 0xac8, 0x301b, 0xe7e7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd5d, 0x3, 0x0, 0x40, 0x40, 0x7f, [{{0x9, 0x4, 0xa6, 0x0, 0x0, 0x82, 0xc7, 0x16, 0x7f, [@generic={0xe8, 0x31, "0dabd42c36d92602805eefde2b95ffaecb6d5434908033a211ae025ac1ffcc774c5b7a5bbb96c49a4bc9362eef3f5460bb755a6a8d1ee9338f7c5a2a956e842278971c855ff6c91f1a9babe9db57056d2b9737f948f8c0e8bf7802da5044f7b10f3e1f7522064b5cce17eb4fb19d95da30a548d549d6b34ebdcaeed31e0bfd672b3c96c20d9b68a3037dd115e0898a5df9f2e8f2b3868743e456fcb583b059edf5444cd34b0a9a83ea2e5fc070c78f1bf8b49b619d2187b6c4d47e04bcef43a3a769689e0901badfb10b9060c59a9c6155fa91ee6cfac8b1364ff70a3e3efcc5a9565ff49c56"}, @uac_as={[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x7, 0x3ef, 0x7, '~'}]}]}}, {{0x9, 0x4, 0x96, 0x2, 0x4, 0xf9, 0x8d, 0x26, 0xf4, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "651d148f"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xd97, 0x2, 0x8e}}, @hid_hid={0x9, 0x21, 0xfff, 0x2, 0x1, {0x22, 0x79}}], [{{0x9, 0x5, 0xd, 0x10, 0x400, 0x4, 0x8, 0x3, [@generic={0xf5, 0x4, "05e18d3f78ed1964d5f3a25e33cd9fc98694ad94ab7c51b832e453cd61cdd8a9ddbffa2342fabeb72f465065464868dd0abef5d9167bf0bbba63fce25f98d4c6ea22fd80587249e81375d921f2398bb749fc36d2f09f551a5a33a7ffef533c51c104660a68a3aef5c8db19926c34c26250e1d7d5358f394f0f8efdf4d51971637ca3714ffe0ec3baca6754a56d72309cf5bdcb3c2a2c77d26f9fc29ffba7c868ac48374dc19b427b1efe8d9e93fd8ffff2a91e9ec65a807381321196187241aceedb0fb0e0abc38f0bf832331d4f05e4c1638c549f31848f302105d980d8116fd4a8c4fd0ee133ddd1a70c7331296669f70c47"}, @generic={0xf1, 0x2, "3b42d68ef860befc053cde9153455fc5e51f57b06a7538849fee7b48db64a16aeeb9ae285a5f4b2ef95de1ab41f886440e43bb3765c8c6f289a09d245326b468c9fd62cec7d3d3dd0f74c165cc12c0d0287a97911dbeaa0abcf95a4c992c0b26e96011aeaebd955904eadcee07b7ef0ed8a537288528745224d45776cc01c54344cf03f7d0fdb885da5307a419d99aecf7e7bd0b24ea04e655a5fac3476a245549e9ba457ba79041b66b89ede799ffbbbb549608668a33fefb223f9ffe6a61a23507fc9b9801ad88d0aa57ba450d1e936690aa60ada6b68d4500d7b602ce07bddb897d43a23bc615bfaf59293e5874"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x40, 0x59, 0x4, 0x8}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x3, 0x0, 0x4}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x5, 0xdc, 0x6, [@generic={0x3b, 0x5, "534b6a2bbfe966c157b1ccc19c72c5e22d72d4a4558c96fe4cea83a912bf218cce6a5ab6ffda35426b2904813c9520eb0bbd6fa57ee1054422"}, @generic={0xf0, 0xc, "2b898d37e1018ef2929b5643c25e7cd67d4c8fbc83f546e7853ec7eee3d7bc4445488275728e77dd633255c0a4471b40ffaa0f90e8c96af13e679ed03567da83f40f6aca5eec7ad883be5fe3a6cad40b13697f020ddd5117068b54c492806a23ad2b4eb9193960060340eb262b99de1b14d406beed837f291c658366d97d4ce2b89129044b7d950721ffa9098fe3e9c3172534b853e27e97be3ddf359a8ab4e0be1323371aa4bfbcd9754a9ab60fd57339e7ad5c35c6a2f2921489591447b33e633e00fb71e9bcf4f7cd3ef1decfc8228f8e40b9b74924bd5ceeaa53efb824a813912c55bf02cf83ecd8fef1ed23"}]}}]}}, {{0x9, 0x4, 0x1a, 0x0, 0xd, 0x75, 0x40, 0x40, 0xfc, [@hid_hid={0x9, 0x21, 0x3c, 0xab, 0x1, {0x22, 0x547}}, @uac_as={[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x12, 0x8a12, 0x6, "7e9913870fe2e3"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x6e, 0x1, 0x7, 0x6, "15"}]}], [{{0x9, 0x5, 0xe, 0x10, 0x3ff, 0xdd, 0xfe, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x5}, @generic={0xb5, 0x23, "d7686b0f2477b77e253ea5226544deef18c08dc59d4c2a1ed7cb56644f9d027d2aa8d09466fa990bddbf159538699272bc489067d9566bd57c88ce74d80f84afd32f6c8593279547dab672e8a76961b16ad88a8be8596cf54380e99fa89050d5e40735355c3f5781f1cef92a0f9d431a7b45c710b1f087a49b01ffdca55c832bcb08eafad989ce86198abd5c38af7db405b0081d8e906821db0af120debc89a6e647e8d5c1c00c8639c4a2cf80f2039121a34c"}]}}, {{0x9, 0x5, 0x8, 0x10, 0xbbf, 0x1f, 0x4, 0x81, [@generic={0xf5, 0x2, "fbf4642a4f379a0a1988627956e20d91b7a9806ddf6677339a69efc742ea08ef0c5823ad9f2dd4122e6e202a059743e6f854d88e68f6e6c30fda8a3fc8d2fe838becb21725addc37affd2f24a815e6a9aade71b8119f973283a716a38c3f9e0a02aaa13a5c6f1567aef90db72a9883daed5a081351b2ac5d1c4c65f44c1a4394ddd5097d608df4ec8a7983925367fb18bf8917dad716bed10494b5c47e012e9f7ce2b470ad6019e69cb6ec7bcfbc13796420c17c7b609aa2e4d2a3ecede1f205ab7a074b845fee19fbd0f0a6de193527019f1ee67e6975e3179287a59a16224df80c73865c7a62d33f7e7bf90b9b7046c3006e"}, @generic={0xb7, 0x22, "0ce281f4c59c066d0991e00f83788c04172ca58293b0faa83996513ef8c5295e82c654d9f1b291eb1fbf83e510472279d1aa709062213088477e817be256f6ca57541e3c261d0e65174b7e09a5d9ac11b75d8f9611e526495717d884a23aac7d94e5aa0f0d34d1d653f07e4b1d498ea5bb63f9d6849f386c6bdc19dddf40bcbea6500100efe911d2c09276f15180819044e364dad05a7b22349c38594b51d91685107d10cbad2684b1e6b4d6d4673dfe47373a4abf"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0x7, 0xff, 0x9, [@generic={0x64, 0x3, "7340c7dfd8b9a460407cc3206b5c5edf76676f386f0d2730cac0165bea5da9fdfa2bf77c61b0e4daff24d6a35a409d893d6ef1899118c8b5afc0e732fde32b96d52a6ceb01a457498ebe13ed6a6972bab5c0cf15e0c7461c6113e7f72663696a79a9"}, @generic={0x6c, 0x10, "e85535978997239453e50486baa8324befdd5fea5a6899ed9db3af74965d9a1005e491054a50998fb2e29d2b9d25d376f23cc7b6b43fb6ba67b2e5873956e7a66ce9e2ddc2e50b99b02c0c4d61e7c43d94e8f943c2a03ab6783a002c0ac15817e1e865bd0c9347e2786f"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x40, 0x4, 0x3, [@generic={0x86, 0x21, "2cef09ae7dd9da070b990970b43359f080881ee1ed97529a11350134b469523c36b4a878dcdff47438b68c26413c04c2ecaecceeb6d8cc121aaa5b45dd18179c60aabb3850077a0219059d09946d64bbb5a290b3eddd77ea761a351986e6d195fe28a7f43aef0a8858391e35b32d724eebb6773635f033d6f0c6f30c6710f4e57641f28f"}, @generic={0xf4, 0x23, "0f750bb8c68bb340b47a665764fa79fd202c3c79ae8a409299958cae83e7eacdaaa8c7891feb2850e4ee58a2d4ff3a9f78f908010a005836cf0b136609648d1493820218b83be379ba0608a9d9ebb8bf1e13ac3dc21fe8adf3ce8c0664aa20661baab5c714e369aa045c8c8072ce149c9a30e8213944845e5ae485d5136daf6d3bd254a00e7cf10a9d66eaacc79e0ffac234b5ea3463edf9b1471375cead6d5b80054369c24731b844890678261e6b63faa879020a23e916adbd2e043360d4432e388ddc0d8a4da7b84e00c359dc5bb4161ff9a0c053fb4b307e714c5db6e214f23f8b31d57bebc75f974de9fec0a856a5c1"}]}}, {{0x9, 0x5, 0xf, 0x15, 0x40, 0x1, 0x81, 0xd5, [@generic={0x58, 0x23, "fd0207476443b600ae71eee3ea33d320774758c31c7e930b16e1763e5829e8ad6b6694ab8a9eb77219193cab4a032ac0d9a4617042c7886c6f93aa0ad7d224cd3ff818dc9ff45d03044648da9a8ad6a572bb10cc362c"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x10, 0x20, 0xf8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x1ff}, @generic={0x71, 0x21, "5d3e5973eea8e40e779b52bc76255a8c92f82e641765bf9ac2bc65db10a0b9cc1639ca8192560c5c634c10e7700f7928df34e8e2831883815feb967e447bc2e57ef3c7a7540c86a08be7e993a9844051e59a84abeda5b4dc2c629c8885b35579a0d2689e6471cfc4e1e8f51a5ee3f3"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x0, 0x3f, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x800}]}}, {{0x9, 0x5, 0x8, 0x1, 0x400, 0x80, 0x3f, 0xe1, [@generic={0xa9, 0x24, "c3dbba94ca5de5cb71ccaebf8a23743f61167f79559eb0ce6ec1b05e7ca1eb7747c5cbe00c8a0276a03e365da72b01962cfa38a3eb75b851dd16418819919a24910843b5006e1ab322133683a5985f9e11f05313e9ed782c492ff7372fb0ae36be20d6316b3f1daa6c5e0e459d5a44dc15d9e52ff6f8e730efbb6b9cc2ad3e0917373750adcc32a40beee1920dab8e643afc4741daf2d815b07090d41562c0e0c7488bb79e27cb"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x8}]}}, {{0x9, 0x5, 0xd, 0x6e9249d735a2de6a, 0x3f7, 0x0, 0x4, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0xc1, 0x1, 0x9}, @generic={0x82, 0x5, "99e35202ed8e7a635e7ce28f36c87c9e280f82e60d00284f86e1dbca9b27ebefa2089e70417cccc9fe0cadc907b103d3bbfa3a31bbc815adaee01a88d0f42c25fa377afec6cca547e9e89559ede4a13f4f7f328bba54ce254a25a9806b6a15fa479824b85af6269cc1b559fd84149e9022ea3855839cb59757cd1f352204d69b"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xf5, 0x80}]}}, {{0x9, 0x5, 0x3, 0x4, 0x200, 0x0, 0x1, 0x7, [@generic={0x17, 0x4, "4a33c609a837f9fd538cfbbf6c91c99ddfc4260a62"}, @generic={0xbd, 0x9, "923975491b05a2f4fd2037178aee5898ed562349c7573fd52353131bd5574ec9009d9e5eea338144dd6c07e8898da8a459d660461b39795d06d8578ca06fb68ce65739baef00b5cc455cab97161397a81f7d62230355cff887296b223de7fb84252256e15cbf127930425c6cc6daf813012885aaca8b5a8e24ca3cee92ae995539c6bd2867a48b27ab951445febc77e151f017054912b07c4a4d1fc7d6cbc84d7a502305edf7f0c3355c2b54f08d06751bca686b3c5d61761de7de"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x8, 0xa6, 0xed, 0x49, [@generic={0xb3, 0x22, "1c94e6b91d2fc4f64427cd87895f7761a97732e7dd39d9cf4d0496eb4492fa99783ce67acc5bd5edbc6876103c5614fbb150903d9fd9109d5f0ae66aa9c801abe2a9f9c6508303f8982f593df0e6d72907ceb5f92519965abaaa5017c08beb2578609b39c819e436072be02f269511d454d252b8bad3d60ff593f626dfe8f9004b12d7b5068751baa91ec3c61f4d0e4683655e82bbad0f266bd288c11bb32b5965c5c58b49ece0ea9c73c921262df3e223"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x2, 0xc8, 0x4}}]}}]}}]}}, &(0x7f0000001440)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x2, 0x9, 0x2, 0x8, 0x8}, 0x20, &(0x7f0000000180)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x4, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "f09f21de96bd198ddefa7594dd7aa98a"}]}, 0x9, [{0x2f, &(0x7f00000001c0)=@string={0x2f, 0x3, "ebf5cfd63ec0006cd31c9e31087efe922d654313632f0f1d4d06e42801be9ba895c70ba4ba110b300bf01076ed"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x500a}}, {0x8d, &(0x7f0000000280)=@string={0x8d, 0x3, "8eece572699bde2ddaf7c750d8f1ea61fd4e2be37c0231c1578be7fb091aa32712f8e8c363bdabf87905a93cefc29598b41377e2987bf94692de22cb64a179805953ffaf795fe8e2e3d96c63e6990f516fc68f714e305895ac23c2cb65a2c1592d0d809a6b0fc7c2dd5eff4deb7a9849a20ebae92c7fd93384e7b4ba8137a83024d99554260ce5ca267697"}}, {0xd9, &(0x7f0000001180)=@string={0xd9, 0x3, "154dde013374e8f67235366715f31ccc7f0fcc534950f2fb5550719260f31ca481f5eac0071482c2593e67bc09bc7f3014b70bb3027a807990b28928dca6528cf0e07451b2fe28bd9084ccec719774fababdfc3142b55639e1ec9e46318392ecbc95932e19886dda8322f85427ccf2bb27ec655b74dbf7e2ec32fd8f615b8169dc05fd21c97d978f7e6a346629e98e4a6be3b8d5ac7dae146a5151387f0d133c576b35d9aa3be7b2c72fffce56861c4f43042b376d83a171a72e18eae549d780ac398226448b343db535912637bda904e565ec6f594831"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xc04}}, {0x102, &(0x7f0000001280)=@string={0x102, 0x3, "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"}}, {0x7d, &(0x7f00000013c0)=@string={0x7d, 0x3, "892f8f80e2e3f7de6f6261b4365d9271d051d178d17c90945517930c6851969f6b1d1b15d79f21e27b98a29d741c6afcd1e2d6a9e71ec570899a32da6cde8f5b78618282d610c78a663b498dc49400724b9d81bee509562c5d4204522563c9a392f79eaa75991fd6569a07833e66553024e38161e4f12e54157566"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x455}}]}) [ 1227.345615] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1227.382553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1227.387692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1227.395536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1227.398617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1227.415849] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1227.417153] FAULT_INJECTION: forcing a failure. [ 1227.417153] name failslab, interval 1, probability 0, space 0, times 0 [ 1227.418196] CPU: 0 UID: 0 PID: 8854 Comm: syz-executor.3 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1227.418218] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1227.418226] Call Trace: [ 1227.418231] [ 1227.418237] dump_stack_lvl+0xfa/0x120 [ 1227.418267] should_fail_ex+0x4d7/0x5e0 [ 1227.418288] should_failslab+0xc2/0x120 [ 1227.418306] __kmalloc_node_track_caller_noprof+0xc6/0x760 [ 1227.418330] ? kstrdup_const+0x57/0x80 [ 1227.418357] kstrdup+0x3e/0xc0 [ 1227.418377] kstrdup_const+0x57/0x80 [ 1227.418396] __kernfs_new_node+0x9c/0x940 [ 1227.418419] ? __lock_acquire+0x451/0x2250 [ 1227.418441] ? __pfx___kernfs_new_node+0x10/0x10 [ 1227.418465] ? lock_acquire+0x15e/0x2d0 [ 1227.418481] ? kernfs_root+0x23/0x2a0 [ 1227.418501] ? find_held_lock+0x2b/0x80 [ 1227.418514] ? kernfs_root+0xee/0x2a0 [ 1227.418534] ? lock_release+0xc8/0x270 [ 1227.418550] ? lock_is_held_type+0x9e/0x120 [ 1227.418572] kernfs_new_node+0x13c/0x1e0 [ 1227.418590] kernfs_create_dir_ns+0x4d/0x1a0 [ 1227.418607] sysfs_create_dir_ns+0x12a/0x2a0 [ 1227.418627] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1227.418646] ? find_held_lock+0x2b/0x80 [ 1227.418660] ? lock_release+0xc8/0x270 [ 1227.418679] ? class_dir_child_ns_type+0xd/0x60 [ 1227.418697] kobject_add_internal+0x24c/0x9a0 [ 1227.418715] kobject_add+0x157/0x240 [ 1227.418729] ? __pfx_kobject_add+0x10/0x10 [ 1227.418744] ? lock_release+0xc8/0x270 [ 1227.418762] ? kobject_put+0xaa/0x260 [ 1227.418782] device_add+0x32d/0x1830 [ 1227.418806] ? __pfx_device_add+0x10/0x10 [ 1227.418827] ? kfree+0x1ec/0x570 [ 1227.418854] device_create_groups_vargs+0x207/0x280 [ 1227.418871] device_create+0xdf/0x120 [ 1227.418885] ? __pfx_device_create+0x10/0x10 [ 1227.418904] ? timer_init_key+0x12e/0x280 [ 1227.418926] ? ieee80211_roc_setup+0x136/0x270 [ 1227.418948] ? ieee80211_alloc_hw_nm+0x228/0x21a0 [ 1227.418968] mac80211_hwsim_new_radio+0x37a/0x52a0 [ 1227.418990] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1227.419012] ? do_trace_netlink_extack+0x12a/0x150 [ 1227.419032] ? __nla_validate_parse+0x2e6/0x2880 [ 1227.419051] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1227.419073] hwsim_new_radio_nl+0xb61/0x1300 [ 1227.419096] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1227.419115] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1227.419132] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1227.419155] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1227.419174] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1227.419196] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1227.419213] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1227.419238] ? security_capable+0x2f/0x90 [ 1227.419262] ? ns_capable+0xe2/0x120 [ 1227.419288] genl_rcv_msg+0x532/0x7e0 [ 1227.419307] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1227.419324] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1227.419340] ? __lock_acquire+0x451/0x2250 [ 1227.419364] netlink_rcv_skb+0x147/0x430 [ 1227.419378] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1227.419395] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1227.419419] ? netlink_deliver_tap+0x1af/0xcb0 [ 1227.419445] genl_rcv+0x28/0x40 [ 1227.419459] netlink_unicast+0x5a7/0x870 [ 1227.419476] ? __pfx_netlink_unicast+0x10/0x10 [ 1227.419490] ? __virt_addr_valid+0x100/0x5d0 [ 1227.419515] netlink_sendmsg+0x8a3/0xd80 [ 1227.419533] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1227.419557] ____sys_sendmsg+0xa38/0xbf0 [ 1227.419578] ? copy_msghdr_from_user+0xfb/0x150 [ 1227.419593] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1227.419613] ? __pfx_perf_tp_event+0x10/0x10 [ 1227.419631] ? lock_acquire+0x15e/0x2d0 [ 1227.419651] ___sys_sendmsg+0x10f/0x1b0 [ 1227.419665] ? __pfx____sys_sendmsg+0x10/0x10 [ 1227.419677] ? perf_trace_lock+0xbb/0x4f0 [ 1227.419700] ? __pfx_perf_trace_lock+0x10/0x10 [ 1227.419718] ? proc_fail_nth_write+0x97/0x220 [ 1227.419741] ? lock_acquire+0x15e/0x2d0 [ 1227.419757] ? __fget_files+0x34/0x3b0 [ 1227.419775] ? find_held_lock+0x2b/0x80 [ 1227.419787] ? __fget_files+0x203/0x3b0 [ 1227.419802] ? lock_release+0xc8/0x270 [ 1227.419823] ? __fget_files+0x20d/0x3b0 [ 1227.419845] __sys_sendmsg+0x150/0x200 [ 1227.419858] ? __pfx___sys_sendmsg+0x10/0x10 [ 1227.419870] ? perf_trace_preemptirq_template+0x259/0x430 [ 1227.419897] ? __pfx_ksys_write+0x10/0x10 [ 1227.419911] ? irqentry_exit+0xee/0x650 [ 1227.419927] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1227.419945] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1227.419971] do_syscall_64+0xbf/0x420 [ 1227.419995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.420010] RIP: 0033:0x7fbd3c214b19 [ 1227.420022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1227.420035] RSP: 002b:00007fbd3978a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1227.420049] RAX: ffffffffffffffda RBX: 00007fbd3c327f60 RCX: 00007fbd3c214b19 [ 1227.420058] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1227.420066] RBP: 00007fbd3978a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1227.420074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1227.420082] R13: 00007fffae4888ff R14: 00007fbd3978a300 R15: 0000000000022000 [ 1227.420103] [ 1227.477730] kobject: kobject_add_internal failed for hwsim167 (error: -12 parent: mac80211_hwsim) 14:50:14 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 31) 14:50:14 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 32) [ 1227.549070] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1227.610495] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1227.612633] FAULT_INJECTION: forcing a failure. [ 1227.612633] name failslab, interval 1, probability 0, space 0, times 0 [ 1227.614959] CPU: 1 UID: 0 PID: 8862 Comm: syz-executor.4 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1227.614992] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1227.615006] Call Trace: [ 1227.615015] [ 1227.615025] dump_stack_lvl+0xfa/0x120 [ 1227.615069] should_fail_ex+0x4d7/0x5e0 [ 1227.615115] should_failslab+0xc2/0x120 [ 1227.615146] __kmalloc_node_track_caller_noprof+0xc6/0x760 [ 1227.615186] ? kvasprintf_const+0x64/0x1a0 [ 1227.615215] ? __pfx_perf_trace_lock+0x10/0x10 [ 1227.615257] kvasprintf+0xbd/0x160 [ 1227.615284] ? __pfx_kvasprintf+0x10/0x10 [ 1227.615314] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1227.615353] ? lockdep_init_map_type+0x4b/0x220 [ 1227.615397] kvasprintf_const+0x64/0x1a0 [ 1227.615428] kobject_set_name_vargs+0x5a/0x150 [ 1227.615456] device_create_groups_vargs+0x1c0/0x280 [ 1227.615490] device_create+0xdf/0x120 [ 1227.615516] ? __pfx_device_create+0x10/0x10 [ 1227.615543] ? timer_init_key+0x12e/0x280 [ 1227.615581] ? ieee80211_roc_setup+0x136/0x270 [ 1227.615616] ? ieee80211_alloc_hw_nm+0x228/0x21a0 [ 1227.615651] mac80211_hwsim_new_radio+0x37a/0x52a0 [ 1227.615689] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1227.615728] ? do_trace_netlink_extack+0x12a/0x150 [ 1227.615771] ? __nla_validate_parse+0x2e6/0x2880 [ 1227.615803] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1227.615847] hwsim_new_radio_nl+0xb61/0x1300 [ 1227.615872] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1227.615903] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1227.615935] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1227.615978] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1227.616009] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1227.616050] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1227.616082] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1227.616129] ? security_capable+0x2f/0x90 [ 1227.616171] ? ns_capable+0xe2/0x120 [ 1227.616214] genl_rcv_msg+0x532/0x7e0 [ 1227.616249] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1227.616280] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1227.616309] ? __lock_acquire+0x451/0x2250 [ 1227.616356] netlink_rcv_skb+0x147/0x430 [ 1227.616384] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1227.616416] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1227.616462] ? netlink_deliver_tap+0x1af/0xcb0 [ 1227.616510] genl_rcv+0x28/0x40 [ 1227.616535] netlink_unicast+0x5a7/0x870 [ 1227.616568] ? __pfx_netlink_unicast+0x10/0x10 [ 1227.616594] ? __virt_addr_valid+0x100/0x5d0 [ 1227.616638] netlink_sendmsg+0x8a3/0xd80 [ 1227.616672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1227.616717] ____sys_sendmsg+0xa38/0xbf0 [ 1227.616753] ? copy_msghdr_from_user+0xfb/0x150 [ 1227.616778] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1227.616824] ? lock_acquire+0x15e/0x2d0 [ 1227.616862] ___sys_sendmsg+0x10f/0x1b0 [ 1227.616889] ? __pfx____sys_sendmsg+0x10/0x10 [ 1227.616911] ? perf_trace_lock+0xbb/0x4f0 [ 1227.616951] ? __pfx_perf_trace_lock+0x10/0x10 [ 1227.616983] ? proc_fail_nth_write+0x97/0x220 [ 1227.617024] ? lock_acquire+0x15e/0x2d0 [ 1227.617055] ? __fget_files+0x34/0x3b0 [ 1227.617082] ? find_held_lock+0x2b/0x80 [ 1227.617106] ? __fget_files+0x203/0x3b0 [ 1227.617133] ? lock_release+0xc8/0x270 [ 1227.617172] ? __fget_files+0x20d/0x3b0 [ 1227.617215] __sys_sendmsg+0x150/0x200 [ 1227.617239] ? __pfx___sys_sendmsg+0x10/0x10 [ 1227.617278] ? __pfx_ksys_write+0x10/0x10 [ 1227.617303] ? irqentry_exit+0xee/0x650 [ 1227.617333] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1227.617365] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1227.617412] do_syscall_64+0xbf/0x420 [ 1227.617450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.617475] RIP: 0033:0x7f3b21b1bb19 [ 1227.617496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1227.617519] RSP: 002b:00007f3b1f091188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1227.617543] RAX: ffffffffffffffda RBX: 00007f3b21c2ef60 RCX: 00007f3b21b1bb19 [ 1227.617559] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1227.617574] RBP: 00007f3b1f0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1227.617589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1227.617603] R13: 00007ffe815263cf R14: 00007f3b1f091300 R15: 0000000000022000 [ 1227.617644] 14:50:14 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 33) [ 1227.710936] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1227.712091] FAULT_INJECTION: forcing a failure. [ 1227.712091] name failslab, interval 1, probability 0, space 0, times 0 [ 1227.712955] CPU: 0 UID: 0 PID: 8864 Comm: syz-executor.3 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1227.712973] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1227.712981] Call Trace: [ 1227.712986] [ 1227.712992] dump_stack_lvl+0xfa/0x120 [ 1227.713021] should_fail_ex+0x4d7/0x5e0 [ 1227.713041] ? __kernfs_new_node+0xd3/0x940 [ 1227.713064] should_failslab+0xc2/0x120 [ 1227.713082] kmem_cache_alloc_noprof+0x69/0x630 [ 1227.713101] __kernfs_new_node+0xd3/0x940 [ 1227.713120] ? __lock_acquire+0x451/0x2250 [ 1227.713142] ? __pfx___kernfs_new_node+0x10/0x10 [ 1227.713167] ? lock_acquire+0x15e/0x2d0 [ 1227.713185] ? kernfs_root+0x23/0x2a0 [ 1227.713206] ? find_held_lock+0x2b/0x80 [ 1227.713220] ? kernfs_root+0xee/0x2a0 [ 1227.713240] ? lock_release+0xc8/0x270 [ 1227.713257] ? lock_is_held_type+0x9e/0x120 [ 1227.713281] kernfs_new_node+0x13c/0x1e0 [ 1227.713301] kernfs_create_dir_ns+0x4d/0x1a0 [ 1227.713318] sysfs_create_dir_ns+0x12a/0x2a0 [ 1227.713345] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1227.713363] ? find_held_lock+0x2b/0x80 [ 1227.713378] ? lock_release+0xc8/0x270 [ 1227.713397] ? class_dir_child_ns_type+0xd/0x60 [ 1227.713416] kobject_add_internal+0x24c/0x9a0 [ 1227.713436] kobject_add+0x157/0x240 [ 1227.713451] ? __pfx_kobject_add+0x10/0x10 [ 1227.713467] ? lock_release+0xc8/0x270 [ 1227.713484] ? kobject_put+0xaa/0x260 [ 1227.713505] device_add+0x32d/0x1830 [ 1227.713531] ? __pfx_device_add+0x10/0x10 [ 1227.713553] ? kfree+0x1ec/0x570 [ 1227.713580] device_create_groups_vargs+0x207/0x280 [ 1227.713598] device_create+0xdf/0x120 [ 1227.713614] ? __pfx_device_create+0x10/0x10 [ 1227.713630] ? timer_init_key+0x12e/0x280 [ 1227.713652] ? ieee80211_roc_setup+0x136/0x270 [ 1227.713673] ? ieee80211_alloc_hw_nm+0x228/0x21a0 [ 1227.713695] mac80211_hwsim_new_radio+0x37a/0x52a0 [ 1227.713717] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1227.713739] ? do_trace_netlink_extack+0x12a/0x150 [ 1227.713761] ? __nla_validate_parse+0x2e6/0x2880 [ 1227.713780] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1227.713804] hwsim_new_radio_nl+0xb61/0x1300 [ 1227.713817] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1227.713836] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1227.713855] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1227.713878] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1227.713897] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1227.713919] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1227.713937] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1227.713962] ? security_capable+0x2f/0x90 [ 1227.713988] ? ns_capable+0xe2/0x120 [ 1227.714013] genl_rcv_msg+0x532/0x7e0 [ 1227.714032] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1227.714051] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1227.714068] ? __lock_acquire+0x451/0x2250 [ 1227.714093] netlink_rcv_skb+0x147/0x430 [ 1227.714107] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1227.714125] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1227.714151] ? netlink_deliver_tap+0x1af/0xcb0 [ 1227.714178] genl_rcv+0x28/0x40 [ 1227.714191] netlink_unicast+0x5a7/0x870 [ 1227.714209] ? __pfx_netlink_unicast+0x10/0x10 [ 1227.714223] ? __virt_addr_valid+0x100/0x5d0 [ 1227.714247] netlink_sendmsg+0x8a3/0xd80 [ 1227.714265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1227.714289] ____sys_sendmsg+0xa38/0xbf0 [ 1227.714310] ? copy_msghdr_from_user+0xfb/0x150 [ 1227.714325] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1227.714345] ? __pfx_perf_tp_event+0x10/0x10 [ 1227.714364] ? lock_acquire+0x15e/0x2d0 [ 1227.714385] ___sys_sendmsg+0x10f/0x1b0 [ 1227.714398] ? __pfx____sys_sendmsg+0x10/0x10 [ 1227.714410] ? perf_trace_lock+0xbb/0x4f0 [ 1227.714433] ? __pfx_perf_trace_lock+0x10/0x10 [ 1227.714451] ? proc_fail_nth_write+0x97/0x220 [ 1227.714473] ? lock_acquire+0x15e/0x2d0 [ 1227.714490] ? __fget_files+0x34/0x3b0 [ 1227.714506] ? find_held_lock+0x2b/0x80 [ 1227.714519] ? __fget_files+0x203/0x3b0 [ 1227.714533] ? lock_release+0xc8/0x270 [ 1227.714554] ? __fget_files+0x20d/0x3b0 [ 1227.714576] __sys_sendmsg+0x150/0x200 [ 1227.714590] ? __pfx___sys_sendmsg+0x10/0x10 [ 1227.714602] ? perf_trace_preemptirq_template+0x259/0x430 [ 1227.714630] ? __pfx_ksys_write+0x10/0x10 [ 1227.714644] ? irqentry_exit+0xee/0x650 [ 1227.714660] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1227.714677] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1227.714701] do_syscall_64+0xbf/0x420 [ 1227.714722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.714737] RIP: 0033:0x7fbd3c214b19 [ 1227.714748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1227.714761] RSP: 002b:00007fbd3978a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1227.714775] RAX: ffffffffffffffda RBX: 00007fbd3c327f60 RCX: 00007fbd3c214b19 [ 1227.714784] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1227.714792] RBP: 00007fbd3978a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1227.714801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1227.714809] R13: 00007fffae4888ff R14: 00007fbd3978a300 R15: 0000000000022000 [ 1227.714830] [ 1227.754741] kobject: kobject_add_internal failed for hwsim170 (error: -12 parent: mac80211_hwsim) 14:50:14 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 32) 14:50:14 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 34) [ 1227.798480] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1227.859390] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:50:25 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x9bc1, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:50:25 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x7fc7, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:50:25 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 35) 14:50:25 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10008801) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x1, 0x7, 0x7f, 0x1, 0x0, 0x5, 0x10082, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb4, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x2, 0x100, 0x4, 0x2, 0x41a2, 0x0, 0x101, 0x0, 0x3, 0x0, 0x2}, 0xffffffffffffffff, 0x10, r0, 0x8) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug', 0x8000, 0x102) syz_io_uring_setup(0x2684, &(0x7f0000000240)={0x0, 0x2aa5, 0x2, 0x0, 0x2b5, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000400), &(0x7f0000000440)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 14:50:25 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x233d, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:50:25 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xce0d, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:50:25 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 33) 14:50:25 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x89c1, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1238.549555] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1238.550684] FAULT_INJECTION: forcing a failure. [ 1238.550684] name failslab, interval 1, probability 0, space 0, times 0 [ 1238.553220] CPU: 0 UID: 0 PID: 8880 Comm: syz-executor.4 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1238.553239] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1238.553248] Call Trace: [ 1238.553252] [ 1238.553258] dump_stack_lvl+0xfa/0x120 [ 1238.553285] should_fail_ex+0x4d7/0x5e0 [ 1238.553304] ? __kernfs_new_node+0xd3/0x940 [ 1238.553324] should_failslab+0xc2/0x120 [ 1238.553341] kmem_cache_alloc_noprof+0x69/0x630 [ 1238.553359] __kernfs_new_node+0xd3/0x940 [ 1238.553377] ? __lock_acquire+0x451/0x2250 [ 1238.553397] ? __pfx___kernfs_new_node+0x10/0x10 [ 1238.553420] ? lock_acquire+0x15e/0x2d0 [ 1238.553435] ? kernfs_root+0x23/0x2a0 [ 1238.553454] ? find_held_lock+0x2b/0x80 [ 1238.553466] ? kernfs_root+0xee/0x2a0 [ 1238.553484] ? lock_release+0xc8/0x270 [ 1238.553498] ? lock_is_held_type+0x9e/0x120 [ 1238.553520] kernfs_new_node+0x13c/0x1e0 [ 1238.553537] kernfs_create_dir_ns+0x4d/0x1a0 [ 1238.553553] sysfs_create_dir_ns+0x12a/0x2a0 [ 1238.553572] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1238.553589] ? find_held_lock+0x2b/0x80 [ 1238.553603] ? lock_release+0xc8/0x270 [ 1238.553620] ? class_dir_child_ns_type+0xd/0x60 [ 1238.553637] kobject_add_internal+0x24c/0x9a0 [ 1238.553655] kobject_add+0x157/0x240 [ 1238.553668] ? __pfx_kobject_add+0x10/0x10 [ 1238.553682] ? lock_release+0xc8/0x270 [ 1238.553699] ? kobject_put+0xaa/0x260 [ 1238.553719] device_add+0x32d/0x1830 [ 1238.553746] ? __pfx_device_add+0x10/0x10 [ 1238.553765] ? kfree+0x1ec/0x570 [ 1238.553791] device_create_groups_vargs+0x207/0x280 [ 1238.553807] device_create+0xdf/0x120 [ 1238.553820] ? __pfx_device_create+0x10/0x10 [ 1238.553834] ? timer_init_key+0x12e/0x280 [ 1238.553854] ? ieee80211_roc_setup+0x136/0x270 [ 1238.553874] ? ieee80211_alloc_hw_nm+0x228/0x21a0 [ 1238.553893] mac80211_hwsim_new_radio+0x37a/0x52a0 [ 1238.553914] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1238.553935] ? do_trace_netlink_extack+0x12a/0x150 [ 1238.553955] ? __nla_validate_parse+0x2e6/0x2880 [ 1238.553973] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1238.553994] hwsim_new_radio_nl+0xb61/0x1300 [ 1238.554007] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1238.554023] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1238.554039] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1238.554061] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1238.554078] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1238.554098] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1238.554115] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1238.554139] ? security_capable+0x2f/0x90 [ 1238.554162] ? ns_capable+0xe2/0x120 [ 1238.554186] genl_rcv_msg+0x532/0x7e0 [ 1238.554203] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1238.554219] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1238.554233] ? __lock_acquire+0x451/0x2250 [ 1238.554257] netlink_rcv_skb+0x147/0x430 [ 1238.554270] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1238.554286] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1238.554309] ? netlink_deliver_tap+0x1af/0xcb0 [ 1238.554333] genl_rcv+0x28/0x40 [ 1238.554345] netlink_unicast+0x5a7/0x870 [ 1238.554362] ? __pfx_netlink_unicast+0x10/0x10 [ 1238.554375] ? __virt_addr_valid+0x100/0x5d0 [ 1238.554399] netlink_sendmsg+0x8a3/0xd80 [ 1238.554417] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1238.554439] ____sys_sendmsg+0xa38/0xbf0 [ 1238.554458] ? copy_msghdr_from_user+0xfb/0x150 [ 1238.554472] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1238.554491] ? __pfx_perf_tp_event+0x10/0x10 [ 1238.554508] ? lock_acquire+0x15e/0x2d0 [ 1238.554527] ___sys_sendmsg+0x10f/0x1b0 [ 1238.554540] ? __pfx____sys_sendmsg+0x10/0x10 [ 1238.554551] ? perf_trace_lock+0xbb/0x4f0 [ 1238.554573] ? __pfx_perf_trace_lock+0x10/0x10 [ 1238.554589] ? proc_fail_nth_write+0x97/0x220 [ 1238.554610] ? lock_acquire+0x15e/0x2d0 [ 1238.554625] ? __fget_files+0x34/0x3b0 [ 1238.554641] ? find_held_lock+0x2b/0x80 [ 1238.554653] ? __fget_files+0x203/0x3b0 [ 1238.554667] ? lock_release+0xc8/0x270 [ 1238.554686] ? __fget_files+0x20d/0x3b0 [ 1238.554707] __sys_sendmsg+0x150/0x200 [ 1238.554720] ? __pfx___sys_sendmsg+0x10/0x10 [ 1238.554731] ? perf_trace_preemptirq_template+0x259/0x430 [ 1238.554757] ? __pfx_ksys_write+0x10/0x10 [ 1238.554770] ? irqentry_exit+0xee/0x650 [ 1238.554785] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1238.554800] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1238.554823] do_syscall_64+0xbf/0x420 [ 1238.554843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.554857] RIP: 0033:0x7f3b21b1bb19 [ 1238.554867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1238.554880] RSP: 002b:00007f3b1f091188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1238.554892] RAX: ffffffffffffffda RBX: 00007f3b21c2ef60 RCX: 00007f3b21b1bb19 [ 1238.554901] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1238.554908] RBP: 00007f3b1f0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1238.554916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1238.554923] R13: 00007ffe815263cf R14: 00007f3b1f091300 R15: 0000000000022000 [ 1238.554943] [ 1238.591213] kobject: kobject_add_internal failed for hwsim173 (error: -12 parent: mac80211_hwsim) [ 1238.598673] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1238.599768] FAULT_INJECTION: forcing a failure. [ 1238.599768] name failslab, interval 1, probability 0, space 0, times 0 [ 1238.600701] CPU: 0 UID: 0 PID: 8885 Comm: syz-executor.3 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1238.600718] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1238.600726] Call Trace: [ 1238.600730] [ 1238.600735] dump_stack_lvl+0xfa/0x120 [ 1238.600756] should_fail_ex+0x4d7/0x5e0 [ 1238.600773] ? __kernfs_new_node+0xd3/0x940 [ 1238.600791] should_failslab+0xc2/0x120 [ 1238.600807] kmem_cache_alloc_noprof+0x69/0x630 [ 1238.600825] __kernfs_new_node+0xd3/0x940 [ 1238.600844] ? __lock_acquire+0x451/0x2250 [ 1238.600864] ? __pfx___kernfs_new_node+0x10/0x10 [ 1238.600888] ? lock_acquire+0x15e/0x2d0 [ 1238.600909] ? kernfs_root+0x23/0x2a0 [ 1238.600929] ? find_held_lock+0x2b/0x80 [ 1238.600942] ? kernfs_root+0xee/0x2a0 [ 1238.600961] ? lock_release+0xc8/0x270 [ 1238.600977] ? lock_is_held_type+0x9e/0x120 [ 1238.600998] kernfs_new_node+0x13c/0x1e0 [ 1238.601016] __kernfs_create_file+0x55/0x360 [ 1238.601037] sysfs_add_file_mode_ns+0x21c/0x430 [ 1238.601059] ? __pfx_dev_attr_store+0x10/0x10 [ 1238.601075] sysfs_create_file_ns+0x12e/0x1d0 [ 1238.601094] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 1238.601112] ? down_read+0x1b1/0x450 [ 1238.601132] ? __pfx___up_read+0x10/0x10 [ 1238.601152] ? lock_release+0xc8/0x270 [ 1238.601173] device_create_file+0xee/0x1d0 [ 1238.601191] device_add+0x366/0x1830 [ 1238.601214] ? __pfx_device_add+0x10/0x10 [ 1238.601235] ? kfree+0x1ec/0x570 [ 1238.601261] device_create_groups_vargs+0x207/0x280 [ 1238.601278] device_create+0xdf/0x120 [ 1238.601292] ? __pfx_device_create+0x10/0x10 [ 1238.601306] ? timer_init_key+0x12e/0x280 [ 1238.601326] ? ieee80211_roc_setup+0x136/0x270 [ 1238.601345] ? ieee80211_alloc_hw_nm+0x228/0x21a0 [ 1238.601363] mac80211_hwsim_new_radio+0x37a/0x52a0 [ 1238.601383] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1238.601403] ? do_trace_netlink_extack+0x12a/0x150 [ 1238.601422] ? __nla_validate_parse+0x2e6/0x2880 [ 1238.601439] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1238.601462] hwsim_new_radio_nl+0xb61/0x1300 [ 1238.601476] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1238.601493] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1238.601510] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1238.601533] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1238.601550] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1238.601572] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1238.601589] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1238.601614] ? security_capable+0x2f/0x90 [ 1238.601636] ? ns_capable+0xe2/0x120 [ 1238.601659] genl_rcv_msg+0x532/0x7e0 [ 1238.601678] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1238.601694] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1238.601710] ? __lock_acquire+0x451/0x2250 [ 1238.601734] netlink_rcv_skb+0x147/0x430 [ 1238.601749] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1238.601766] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1238.601791] ? netlink_deliver_tap+0x1af/0xcb0 [ 1238.601817] genl_rcv+0x28/0x40 [ 1238.601830] netlink_unicast+0x5a7/0x870 [ 1238.601848] ? __pfx_netlink_unicast+0x10/0x10 [ 1238.601862] ? __virt_addr_valid+0x100/0x5d0 [ 1238.601885] netlink_sendmsg+0x8a3/0xd80 [ 1238.601903] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1238.601927] ____sys_sendmsg+0xa38/0xbf0 [ 1238.601945] ? copy_msghdr_from_user+0xfb/0x150 [ 1238.601958] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1238.601978] ? __pfx_perf_tp_event+0x10/0x10 [ 1238.601995] ? lock_acquire+0x15e/0x2d0 [ 1238.602015] ___sys_sendmsg+0x10f/0x1b0 [ 1238.602029] ? __pfx____sys_sendmsg+0x10/0x10 [ 1238.602041] ? perf_trace_lock+0xbb/0x4f0 [ 1238.602063] ? __pfx_perf_trace_lock+0x10/0x10 [ 1238.602080] ? proc_fail_nth_write+0x97/0x220 [ 1238.602101] ? lock_acquire+0x15e/0x2d0 [ 1238.602118] ? __fget_files+0x34/0x3b0 [ 1238.602133] ? find_held_lock+0x2b/0x80 [ 1238.602145] ? __fget_files+0x203/0x3b0 [ 1238.602160] ? lock_release+0xc8/0x270 [ 1238.602181] ? __fget_files+0x20d/0x3b0 [ 1238.602203] __sys_sendmsg+0x150/0x200 [ 1238.602216] ? __pfx___sys_sendmsg+0x10/0x10 [ 1238.602228] ? perf_trace_preemptirq_template+0x259/0x430 [ 1238.602253] ? __pfx_ksys_write+0x10/0x10 [ 1238.602266] ? irqentry_exit+0xee/0x650 [ 1238.602281] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1238.602298] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1238.602322] do_syscall_64+0xbf/0x420 [ 1238.602342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.602355] RIP: 0033:0x7fbd3c214b19 [ 1238.602366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1238.602378] RSP: 002b:00007fbd3978a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1238.602391] RAX: ffffffffffffffda RBX: 00007fbd3c327f60 RCX: 00007fbd3c214b19 [ 1238.602400] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1238.602408] RBP: 00007fbd3978a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1238.602416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1238.602424] R13: 00007fffae4888ff R14: 00007fbd3978a300 R15: 0000000000022000 [ 1238.602445] [ 1238.655271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1238.662853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:50:38 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) 14:50:38 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xc196, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:50:38 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 34) 14:50:38 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xe084, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:50:38 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 36) 14:50:38 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3b23, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:50:38 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xc184, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:50:38 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x80c7, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1252.027721] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1252.058270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1252.066454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1252.142875] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:50:38 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 35) 14:50:38 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 37) [ 1252.286445] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1252.376292] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1252.379764] FAULT_INJECTION: forcing a failure. [ 1252.379764] name failslab, interval 1, probability 0, space 0, times 0 [ 1252.381648] CPU: 1 UID: 0 PID: 8918 Comm: syz-executor.3 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1252.381680] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1252.381695] Call Trace: [ 1252.381704] [ 1252.381714] dump_stack_lvl+0xfa/0x120 [ 1252.381757] should_fail_ex+0x4d7/0x5e0 [ 1252.381791] ? __kernfs_new_node+0xd3/0x940 [ 1252.381827] should_failslab+0xc2/0x120 [ 1252.381857] kmem_cache_alloc_noprof+0x69/0x630 [ 1252.381892] __kernfs_new_node+0xd3/0x940 [ 1252.381934] ? __lock_acquire+0x451/0x2250 [ 1252.381974] ? __pfx___kernfs_new_node+0x10/0x10 [ 1252.382018] ? lock_acquire+0x15e/0x2d0 [ 1252.382049] ? kernfs_root+0x23/0x2a0 [ 1252.382085] ? find_held_lock+0x2b/0x80 [ 1252.382109] ? kernfs_root+0xee/0x2a0 [ 1252.382145] ? lock_release+0xc8/0x270 [ 1252.382174] ? lock_is_held_type+0x9e/0x120 [ 1252.382214] kernfs_new_node+0x13c/0x1e0 [ 1252.382248] __kernfs_create_file+0x55/0x360 [ 1252.382286] sysfs_add_file_mode_ns+0x21c/0x430 [ 1252.382326] ? __pfx_dev_attr_store+0x10/0x10 [ 1252.382358] sysfs_create_file_ns+0x12e/0x1d0 [ 1252.382394] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 1252.382427] ? down_read+0x1b1/0x450 [ 1252.382462] ? __pfx___up_read+0x10/0x10 [ 1252.382501] ? lock_release+0xc8/0x270 [ 1252.382540] device_create_file+0xee/0x1d0 [ 1252.382573] device_add+0x366/0x1830 [ 1252.382616] ? __pfx_device_add+0x10/0x10 [ 1252.382654] ? kfree+0x1ec/0x570 [ 1252.382704] device_create_groups_vargs+0x207/0x280 [ 1252.382736] device_create+0xdf/0x120 [ 1252.382762] ? __pfx_device_create+0x10/0x10 [ 1252.382789] ? timer_init_key+0x12e/0x280 [ 1252.382827] ? ieee80211_roc_setup+0x136/0x270 [ 1252.382862] ? ieee80211_alloc_hw_nm+0x228/0x21a0 [ 1252.382898] mac80211_hwsim_new_radio+0x37a/0x52a0 [ 1252.382936] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1252.382975] ? do_trace_netlink_extack+0x12a/0x150 [ 1252.383011] ? __nla_validate_parse+0x2e6/0x2880 [ 1252.383044] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1252.383087] hwsim_new_radio_nl+0xb61/0x1300 [ 1252.383112] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1252.383144] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1252.383175] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1252.383218] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1252.383250] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1252.383291] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1252.383336] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1252.383384] ? security_capable+0x2f/0x90 [ 1252.383426] ? ns_capable+0xe2/0x120 [ 1252.383470] genl_rcv_msg+0x532/0x7e0 [ 1252.383505] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1252.383536] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1252.383564] ? __lock_acquire+0x451/0x2250 [ 1252.383609] netlink_rcv_skb+0x147/0x430 [ 1252.383636] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1252.383668] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1252.383714] ? netlink_deliver_tap+0x1af/0xcb0 [ 1252.383761] genl_rcv+0x28/0x40 [ 1252.383786] netlink_unicast+0x5a7/0x870 [ 1252.383818] ? __pfx_netlink_unicast+0x10/0x10 [ 1252.383844] ? __virt_addr_valid+0x100/0x5d0 [ 1252.383888] netlink_sendmsg+0x8a3/0xd80 [ 1252.383922] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1252.383967] ____sys_sendmsg+0xa38/0xbf0 [ 1252.384002] ? copy_msghdr_from_user+0xfb/0x150 [ 1252.384028] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1252.384076] ? lock_acquire+0x15e/0x2d0 [ 1252.384114] ___sys_sendmsg+0x10f/0x1b0 [ 1252.384141] ? __pfx____sys_sendmsg+0x10/0x10 [ 1252.384163] ? perf_trace_lock+0xbb/0x4f0 [ 1252.384203] ? __pfx_perf_trace_lock+0x10/0x10 [ 1252.384235] ? proc_fail_nth_write+0x97/0x220 [ 1252.384275] ? lock_acquire+0x15e/0x2d0 [ 1252.384306] ? __fget_files+0x34/0x3b0 [ 1252.384334] ? find_held_lock+0x2b/0x80 [ 1252.384358] ? __fget_files+0x203/0x3b0 [ 1252.384385] ? lock_release+0xc8/0x270 [ 1252.384423] ? __fget_files+0x20d/0x3b0 [ 1252.384466] __sys_sendmsg+0x150/0x200 [ 1252.384490] ? __pfx___sys_sendmsg+0x10/0x10 [ 1252.384530] ? __pfx_ksys_write+0x10/0x10 [ 1252.384554] ? irqentry_exit+0xee/0x650 [ 1252.384583] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1252.384615] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1252.384659] do_syscall_64+0xbf/0x420 [ 1252.384697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.384722] RIP: 0033:0x7fbd3c214b19 [ 1252.384743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1252.384766] RSP: 002b:00007fbd3978a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1252.384789] RAX: ffffffffffffffda RBX: 00007fbd3c327f60 RCX: 00007fbd3c214b19 [ 1252.384806] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1252.384821] RBP: 00007fbd3978a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1252.384835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1252.384849] R13: 00007fffae4888ff R14: 00007fbd3978a300 R15: 0000000000022000 [ 1252.384890] 14:50:39 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 36) [ 1252.477045] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:50:39 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 38) 14:50:39 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x81c7, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:50:39 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xc185, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:50:39 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3d23, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:50:39 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x10040, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:50:39 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xc197, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:50:39 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10008801) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1252.751304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1252.768385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1252.793979] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:50:39 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 37) [ 1252.892309] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1252.893595] FAULT_INJECTION: forcing a failure. [ 1252.893595] name failslab, interval 1, probability 0, space 0, times 0 [ 1252.896049] CPU: 0 UID: 0 PID: 8938 Comm: syz-executor.4 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1252.896068] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1252.896076] Call Trace: [ 1252.896081] [ 1252.896087] dump_stack_lvl+0xfa/0x120 [ 1252.896116] should_fail_ex+0x4d7/0x5e0 [ 1252.896136] ? __kernfs_new_node+0xd3/0x940 [ 1252.896155] should_failslab+0xc2/0x120 [ 1252.896172] kmem_cache_alloc_noprof+0x69/0x630 [ 1252.896191] __kernfs_new_node+0xd3/0x940 [ 1252.896208] ? __lock_acquire+0x451/0x2250 [ 1252.896229] ? __pfx___kernfs_new_node+0x10/0x10 [ 1252.896251] ? lock_acquire+0x15e/0x2d0 [ 1252.896267] ? kernfs_root+0x23/0x2a0 [ 1252.896285] ? find_held_lock+0x2b/0x80 [ 1252.896298] ? kernfs_root+0xee/0x2a0 [ 1252.896316] ? lock_release+0xc8/0x270 [ 1252.896330] ? lock_is_held_type+0x9e/0x120 [ 1252.896351] kernfs_new_node+0x13c/0x1e0 [ 1252.896368] __kernfs_create_file+0x55/0x360 [ 1252.896387] sysfs_add_file_mode_ns+0x21c/0x430 [ 1252.896407] ? __pfx_dev_attr_store+0x10/0x10 [ 1252.896424] sysfs_create_file_ns+0x12e/0x1d0 [ 1252.896443] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 1252.896460] ? down_read+0x1b1/0x450 [ 1252.896478] ? __pfx___up_read+0x10/0x10 [ 1252.896499] ? lock_release+0xc8/0x270 [ 1252.896519] device_create_file+0xee/0x1d0 [ 1252.896536] device_add+0x366/0x1830 [ 1252.896558] ? __pfx_device_add+0x10/0x10 [ 1252.896577] ? kfree+0x1ec/0x570 [ 1252.896604] device_create_groups_vargs+0x207/0x280 [ 1252.896620] device_create+0xdf/0x120 [ 1252.896633] ? __pfx_device_create+0x10/0x10 [ 1252.896647] ? timer_init_key+0x12e/0x280 [ 1252.896668] ? ieee80211_roc_setup+0x136/0x270 [ 1252.896689] ? ieee80211_alloc_hw_nm+0x228/0x21a0 [ 1252.896709] mac80211_hwsim_new_radio+0x37a/0x52a0 [ 1252.896729] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1252.896750] ? do_trace_netlink_extack+0x12a/0x150 [ 1252.896769] ? __nla_validate_parse+0x2e6/0x2880 [ 1252.896786] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1252.896808] hwsim_new_radio_nl+0xb61/0x1300 [ 1252.896821] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1252.896837] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1252.896853] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1252.896875] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1252.896897] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1252.896918] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1252.896937] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1252.896961] ? security_capable+0x2f/0x90 [ 1252.896984] ? ns_capable+0xe2/0x120 [ 1252.897007] genl_rcv_msg+0x532/0x7e0 [ 1252.897026] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1252.897042] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1252.897056] ? __lock_acquire+0x451/0x2250 [ 1252.897079] netlink_rcv_skb+0x147/0x430 [ 1252.897092] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1252.897108] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1252.897131] ? netlink_deliver_tap+0x1af/0xcb0 [ 1252.897156] genl_rcv+0x28/0x40 [ 1252.897168] netlink_unicast+0x5a7/0x870 [ 1252.897184] ? __pfx_netlink_unicast+0x10/0x10 [ 1252.897198] ? __virt_addr_valid+0x100/0x5d0 [ 1252.897222] netlink_sendmsg+0x8a3/0xd80 [ 1252.897239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1252.897261] ____sys_sendmsg+0xa38/0xbf0 [ 1252.897282] ? copy_msghdr_from_user+0xfb/0x150 [ 1252.897295] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1252.897315] ? __pfx_perf_tp_event+0x10/0x10 [ 1252.897332] ? lock_acquire+0x15e/0x2d0 [ 1252.897351] ___sys_sendmsg+0x10f/0x1b0 [ 1252.897365] ? __pfx____sys_sendmsg+0x10/0x10 [ 1252.897376] ? perf_trace_lock+0xbb/0x4f0 [ 1252.897396] ? __pfx_perf_trace_lock+0x10/0x10 [ 1252.897413] ? proc_fail_nth_write+0x97/0x220 [ 1252.897435] ? lock_acquire+0x15e/0x2d0 [ 1252.897450] ? __fget_files+0x34/0x3b0 [ 1252.897467] ? find_held_lock+0x2b/0x80 [ 1252.897479] ? __fget_files+0x203/0x3b0 [ 1252.897493] ? lock_release+0xc8/0x270 [ 1252.897512] ? __fget_files+0x20d/0x3b0 [ 1252.897534] __sys_sendmsg+0x150/0x200 [ 1252.897546] ? __pfx___sys_sendmsg+0x10/0x10 [ 1252.897558] ? perf_trace_preemptirq_template+0x259/0x430 [ 1252.897584] ? __pfx_ksys_write+0x10/0x10 [ 1252.897598] ? irqentry_exit+0xee/0x650 [ 1252.897613] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1252.897629] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1252.897651] do_syscall_64+0xbf/0x420 [ 1252.897672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.897686] RIP: 0033:0x7f3b21b1bb19 [ 1252.897698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1252.897711] RSP: 002b:00007f3b1f091188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1252.897724] RAX: ffffffffffffffda RBX: 00007f3b21c2ef60 RCX: 00007f3b21b1bb19 [ 1252.897733] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1252.897740] RBP: 00007f3b1f0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1252.897748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1252.897755] R13: 00007ffe815263cf R14: 00007f3b1f091300 R15: 0000000000022000 [ 1252.897776] 14:50:39 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 39) 14:50:39 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 38) [ 1252.987513] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1253.120693] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:50:39 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 39) 14:50:39 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x80000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1253.276739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1253.280359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1253.287165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1253.290171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1253.347285] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1253.350865] FAULT_INJECTION: forcing a failure. [ 1253.350865] name failslab, interval 1, probability 0, space 0, times 0 [ 1253.354960] CPU: 1 UID: 0 PID: 8944 Comm: syz-executor.4 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1253.354993] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1253.355007] Call Trace: [ 1253.355016] [ 1253.355025] dump_stack_lvl+0xfa/0x120 [ 1253.355067] should_fail_ex+0x4d7/0x5e0 [ 1253.355100] should_failslab+0xc2/0x120 [ 1253.355129] __kmalloc_node_track_caller_noprof+0xc6/0x760 [ 1253.355168] ? kstrdup_const+0x57/0x80 [ 1253.355202] ? perf_trace_lock_acquire+0xc8/0x580 [ 1253.355244] kstrdup+0x3e/0xc0 [ 1253.355278] kstrdup_const+0x57/0x80 [ 1253.355313] __kernfs_new_node+0x9c/0x940 [ 1253.355360] ? __lock_acquire+0x451/0x2250 [ 1253.355395] ? __pfx___kernfs_new_node+0x10/0x10 [ 1253.355437] ? lock_acquire+0x15e/0x2d0 [ 1253.355465] ? kernfs_root+0x23/0x2a0 [ 1253.355499] ? find_held_lock+0x2b/0x80 [ 1253.355522] ? kernfs_root+0xee/0x2a0 [ 1253.355555] ? lock_release+0xc8/0x270 [ 1253.355583] ? lock_is_held_type+0x9e/0x120 [ 1253.355620] kernfs_new_node+0x13c/0x1e0 [ 1253.355651] kernfs_create_link+0xcf/0x240 [ 1253.355685] sysfs_do_create_link_sd+0x90/0x140 [ 1253.355723] sysfs_create_link+0x63/0xc0 [ 1253.355760] device_add+0x5d7/0x1830 [ 1253.355802] ? __pfx_device_add+0x10/0x10 [ 1253.355839] ? kfree+0x1ec/0x570 [ 1253.355888] device_create_groups_vargs+0x207/0x280 [ 1253.355924] device_create+0xdf/0x120 [ 1253.355949] ? __pfx_device_create+0x10/0x10 [ 1253.355974] ? timer_init_key+0x12e/0x280 [ 1253.356010] ? ieee80211_roc_setup+0x136/0x270 [ 1253.356043] ? ieee80211_alloc_hw_nm+0x228/0x21a0 [ 1253.356076] mac80211_hwsim_new_radio+0x37a/0x52a0 [ 1253.356111] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1253.356149] ? do_trace_netlink_extack+0x12a/0x150 [ 1253.356182] ? __nla_validate_parse+0x2e6/0x2880 [ 1253.356213] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1253.356253] hwsim_new_radio_nl+0xb61/0x1300 [ 1253.356276] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1253.356307] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1253.356336] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1253.356376] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1253.356406] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1253.356448] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1253.356478] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1253.356522] ? security_capable+0x2f/0x90 [ 1253.356562] ? ns_capable+0xe2/0x120 [ 1253.356603] genl_rcv_msg+0x532/0x7e0 [ 1253.356636] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1253.356665] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1253.356691] ? __lock_acquire+0x451/0x2250 [ 1253.356733] netlink_rcv_skb+0x147/0x430 [ 1253.356758] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1253.356788] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1253.356831] ? netlink_deliver_tap+0x1af/0xcb0 [ 1253.356876] genl_rcv+0x28/0x40 [ 1253.356899] netlink_unicast+0x5a7/0x870 [ 1253.356929] ? __pfx_netlink_unicast+0x10/0x10 [ 1253.356954] ? __virt_addr_valid+0x100/0x5d0 [ 1253.356994] netlink_sendmsg+0x8a3/0xd80 [ 1253.357026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1253.357067] ____sys_sendmsg+0xa38/0xbf0 [ 1253.357100] ? copy_msghdr_from_user+0xfb/0x150 [ 1253.357124] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1253.357160] ? __pfx_perf_tp_event+0x10/0x10 [ 1253.357190] ? lock_acquire+0x15e/0x2d0 [ 1253.357225] ___sys_sendmsg+0x10f/0x1b0 [ 1253.357250] ? __pfx____sys_sendmsg+0x10/0x10 [ 1253.357270] ? perf_trace_lock+0xbb/0x4f0 [ 1253.357308] ? __pfx_perf_trace_lock+0x10/0x10 [ 1253.357338] ? proc_fail_nth_write+0x97/0x220 [ 1253.357376] ? lock_acquire+0x15e/0x2d0 [ 1253.357405] ? __fget_files+0x34/0x3b0 [ 1253.357432] ? find_held_lock+0x2b/0x80 [ 1253.357454] ? __fget_files+0x203/0x3b0 [ 1253.357479] ? lock_release+0xc8/0x270 [ 1253.357515] ? __fget_files+0x20d/0x3b0 [ 1253.357555] __sys_sendmsg+0x150/0x200 [ 1253.357578] ? __pfx___sys_sendmsg+0x10/0x10 [ 1253.357598] ? perf_trace_preemptirq_template+0x259/0x430 [ 1253.357644] ? __pfx_ksys_write+0x10/0x10 [ 1253.357666] ? irqentry_exit+0xee/0x650 [ 1253.357693] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1253.357723] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1253.357764] do_syscall_64+0xbf/0x420 [ 1253.357800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.357824] RIP: 0033:0x7f3b21b1bb19 [ 1253.357843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1253.357865] RSP: 002b:00007f3b1f091188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1253.357888] RAX: ffffffffffffffda RBX: 00007f3b21c2ef60 RCX: 00007f3b21b1bb19 [ 1253.357903] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1253.357917] RBP: 00007f3b1f0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1253.357931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1253.357944] R13: 00007ffe815263cf R14: 00007f3b1f091300 R15: 0000000000022000 [ 1253.357981] 14:50:52 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x82c7, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:50:52 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x1fffff, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:50:52 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3e00, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:50:52 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 40) 14:50:52 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xc198, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:50:52 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x3, 0x20, 0x1f, 0x9, 0x0, 0x6, 0x800, 0x5, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x37b, 0x2, @perf_config_ext={0x2, 0x1}, 0x1010, 0x7, 0x1000, 0x7, 0x1, 0x4, 0x25e, 0x0, 0x9a19}, r1, 0x4, 0xffffffffffffffff, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 14:50:52 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 40) 14:50:52 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xc186, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1266.275100] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1266.310203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1266.317679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1266.319404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1266.324632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1266.375623] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:50:53 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 41) [ 1266.528796] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:50:53 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 41) [ 1266.662204] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:50:53 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 42) [ 1266.737256] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1266.741970] FAULT_INJECTION: forcing a failure. [ 1266.741970] name failslab, interval 1, probability 0, space 0, times 0 [ 1266.745597] CPU: 1 UID: 0 PID: 8979 Comm: syz-executor.3 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1266.745634] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1266.745649] Call Trace: [ 1266.745658] [ 1266.745669] dump_stack_lvl+0xfa/0x120 [ 1266.745715] should_fail_ex+0x4d7/0x5e0 [ 1266.745752] should_failslab+0xc2/0x120 [ 1266.745785] __kmalloc_node_track_caller_noprof+0xc6/0x760 [ 1266.745830] ? kstrdup_const+0x57/0x80 [ 1266.745869] ? perf_trace_lock_acquire+0xc8/0x580 [ 1266.745925] kstrdup+0x3e/0xc0 [ 1266.745965] kstrdup_const+0x57/0x80 [ 1266.746004] __kernfs_new_node+0x9c/0x940 [ 1266.746043] ? __lock_acquire+0x451/0x2250 [ 1266.746085] ? __pfx___kernfs_new_node+0x10/0x10 [ 1266.746133] ? lock_acquire+0x15e/0x2d0 [ 1266.746166] ? kernfs_root+0x23/0x2a0 [ 1266.746206] ? find_held_lock+0x2b/0x80 [ 1266.746231] ? kernfs_root+0xee/0x2a0 [ 1266.746270] ? lock_release+0xc8/0x270 [ 1266.746301] ? lock_is_held_type+0x9e/0x120 [ 1266.746344] kernfs_new_node+0x13c/0x1e0 [ 1266.746379] kernfs_create_link+0xcf/0x240 [ 1266.746418] sysfs_do_create_link_sd+0x90/0x140 [ 1266.746462] sysfs_create_link+0x63/0xc0 [ 1266.746502] device_add+0x5d7/0x1830 [ 1266.746551] ? __pfx_device_add+0x10/0x10 [ 1266.746593] ? kfree+0x1ec/0x570 [ 1266.746645] device_create_groups_vargs+0x207/0x280 [ 1266.746678] device_create+0xdf/0x120 [ 1266.746707] ? __pfx_device_create+0x10/0x10 [ 1266.746735] ? timer_init_key+0x12e/0x280 [ 1266.746775] ? ieee80211_roc_setup+0x136/0x270 [ 1266.746813] ? ieee80211_alloc_hw_nm+0x228/0x21a0 [ 1266.746849] mac80211_hwsim_new_radio+0x37a/0x52a0 [ 1266.746890] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1266.746932] ? do_trace_netlink_extack+0x12a/0x150 [ 1266.746971] ? __nla_validate_parse+0x2e6/0x2880 [ 1266.747006] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1266.747051] hwsim_new_radio_nl+0xb61/0x1300 [ 1266.747078] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1266.747115] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1266.747149] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1266.747195] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1266.747229] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1266.747272] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1266.747307] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1266.747356] ? security_capable+0x2f/0x90 [ 1266.747401] ? ns_capable+0xe2/0x120 [ 1266.747449] genl_rcv_msg+0x532/0x7e0 [ 1266.747512] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1266.747552] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1266.747591] ? __lock_acquire+0x451/0x2250 [ 1266.747648] netlink_rcv_skb+0x147/0x430 [ 1266.747676] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1266.747711] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1266.747759] ? netlink_deliver_tap+0x1af/0xcb0 [ 1266.747809] genl_rcv+0x28/0x40 [ 1266.747835] netlink_unicast+0x5a7/0x870 [ 1266.747870] ? __pfx_netlink_unicast+0x10/0x10 [ 1266.747898] ? __virt_addr_valid+0x100/0x5d0 [ 1266.747944] netlink_sendmsg+0x8a3/0xd80 [ 1266.747980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1266.748027] ____sys_sendmsg+0xa38/0xbf0 [ 1266.748064] ? copy_msghdr_from_user+0xfb/0x150 [ 1266.748091] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1266.748140] ? lock_acquire+0x15e/0x2d0 [ 1266.748180] ___sys_sendmsg+0x10f/0x1b0 [ 1266.748208] ? __pfx____sys_sendmsg+0x10/0x10 [ 1266.748232] ? perf_trace_lock+0xbb/0x4f0 [ 1266.748275] ? __pfx_perf_trace_lock+0x10/0x10 [ 1266.748309] ? proc_fail_nth_write+0x97/0x220 [ 1266.748352] ? lock_acquire+0x15e/0x2d0 [ 1266.748386] ? __fget_files+0x34/0x3b0 [ 1266.748415] ? find_held_lock+0x2b/0x80 [ 1266.748441] ? __fget_files+0x203/0x3b0 [ 1266.748469] ? lock_release+0xc8/0x270 [ 1266.748510] ? __fget_files+0x20d/0x3b0 [ 1266.748555] __sys_sendmsg+0x150/0x200 [ 1266.748581] ? __pfx___sys_sendmsg+0x10/0x10 [ 1266.748622] ? __pfx_ksys_write+0x10/0x10 [ 1266.748648] ? irqentry_exit+0xee/0x650 [ 1266.748679] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1266.748714] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1266.748761] do_syscall_64+0xbf/0x420 [ 1266.748801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1266.748828] RIP: 0033:0x7fbd3c214b19 [ 1266.748850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1266.748875] RSP: 002b:00007fbd3978a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1266.748901] RAX: ffffffffffffffda RBX: 00007fbd3c327f60 RCX: 00007fbd3c214b19 [ 1266.748918] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1266.748933] RBP: 00007fbd3978a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1266.748949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1266.748965] R13: 00007fffae4888ff R14: 00007fbd3978a300 R15: 0000000000022000 [ 1266.749006] 14:50:53 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 42) [ 1266.850568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1266.861629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1266.872353] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:50:53 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xc622, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:50:53 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xc199, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:50:53 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) r2 = fcntl$getown(r0, 0x9) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x52a}}, './file0\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x2, 0x9, 0x8, 0x11, 0x0, 0x0, 0x800, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0x7f, 0x8bd}, 0x800, 0xfffffffffffffff8, 0x9, 0x2, 0x40000000, 0x8, 0xc9e1, 0x0, 0x3, 0x0, 0x2}, r2, 0x8, r3, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) [ 1267.057409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1267.062427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:51:08 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xc187, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:51:08 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 14:51:08 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xc19a, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:51:08 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x200000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:51:08 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3f00, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:51:08 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 43) 14:51:08 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xc722, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:51:08 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 43) [ 1281.798054] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1281.800297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1281.803511] FAULT_INJECTION: forcing a failure. [ 1281.803511] name failslab, interval 1, probability 0, space 0, times 0 [ 1281.805422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1281.806728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1281.807366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1281.807798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1281.808367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1281.809409] CPU: 0 UID: 0 PID: 9006 Comm: syz-executor.3 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1281.809429] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1281.809438] Call Trace: [ 1281.809443] [ 1281.809449] dump_stack_lvl+0xfa/0x120 [ 1281.809482] should_fail_ex+0x4d7/0x5e0 [ 1281.809501] ? __kernfs_new_node+0xd3/0x940 [ 1281.809522] should_failslab+0xc2/0x120 [ 1281.809539] kmem_cache_alloc_noprof+0x69/0x630 [ 1281.809558] __kernfs_new_node+0xd3/0x940 [ 1281.809576] ? __lock_acquire+0x451/0x2250 [ 1281.809597] ? __pfx___kernfs_new_node+0x10/0x10 [ 1281.809624] ? lock_acquire+0x15e/0x2d0 [ 1281.809639] ? kernfs_root+0x23/0x2a0 [ 1281.809658] ? find_held_lock+0x2b/0x80 [ 1281.809671] ? kernfs_root+0xee/0x2a0 [ 1281.809690] ? lock_release+0xc8/0x270 [ 1281.809705] ? lock_is_held_type+0x9e/0x120 [ 1281.809726] kernfs_new_node+0x13c/0x1e0 [ 1281.809744] kernfs_create_link+0xcf/0x240 [ 1281.809762] sysfs_do_create_link_sd+0x90/0x140 [ 1281.809783] sysfs_create_link+0x63/0xc0 [ 1281.809803] device_add+0x5d7/0x1830 [ 1281.809829] ? __pfx_device_add+0x10/0x10 [ 1281.809848] ? kfree+0x1ec/0x570 [ 1281.809874] device_create_groups_vargs+0x207/0x280 [ 1281.809891] device_create+0xdf/0x120 [ 1281.809905] ? __pfx_device_create+0x10/0x10 [ 1281.809918] ? timer_init_key+0x12e/0x280 [ 1281.809939] ? ieee80211_roc_setup+0x136/0x270 [ 1281.809959] ? ieee80211_alloc_hw_nm+0x228/0x21a0 [ 1281.809978] mac80211_hwsim_new_radio+0x37a/0x52a0 [ 1281.809999] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1281.810021] ? do_trace_netlink_extack+0x12a/0x150 [ 1281.810039] ? __nla_validate_parse+0x2e6/0x2880 [ 1281.810056] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1281.810078] hwsim_new_radio_nl+0xb61/0x1300 [ 1281.810092] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1281.810109] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1281.810125] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1281.810148] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1281.810165] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1281.810186] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1281.810203] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1281.810227] ? security_capable+0x2f/0x90 [ 1281.810251] ? ns_capable+0xe2/0x120 [ 1281.810275] genl_rcv_msg+0x532/0x7e0 [ 1281.810294] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1281.810310] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1281.810324] ? __lock_acquire+0x451/0x2250 [ 1281.810347] netlink_rcv_skb+0x147/0x430 [ 1281.810361] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1281.810377] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1281.810401] ? netlink_deliver_tap+0x1af/0xcb0 [ 1281.810426] genl_rcv+0x28/0x40 [ 1281.810438] netlink_unicast+0x5a7/0x870 [ 1281.810456] ? __pfx_netlink_unicast+0x10/0x10 [ 1281.810469] ? __virt_addr_valid+0x100/0x5d0 [ 1281.810492] netlink_sendmsg+0x8a3/0xd80 [ 1281.810510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1281.810532] ____sys_sendmsg+0xa38/0xbf0 [ 1281.810552] ? copy_msghdr_from_user+0xfb/0x150 [ 1281.810566] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1281.810590] ? lock_acquire+0x15e/0x2d0 [ 1281.810608] ___sys_sendmsg+0x10f/0x1b0 [ 1281.810622] ? __pfx____sys_sendmsg+0x10/0x10 [ 1281.810633] ? perf_trace_lock+0xbb/0x4f0 [ 1281.810655] ? __pfx_perf_trace_lock+0x10/0x10 [ 1281.810672] ? proc_fail_nth_write+0x97/0x220 [ 1281.810693] ? lock_acquire+0x15e/0x2d0 [ 1281.810708] ? __fget_files+0x34/0x3b0 [ 1281.810723] ? find_held_lock+0x2b/0x80 [ 1281.810735] ? __fget_files+0x203/0x3b0 [ 1281.810749] ? lock_release+0xc8/0x270 [ 1281.810769] ? __fget_files+0x20d/0x3b0 [ 1281.810791] __sys_sendmsg+0x150/0x200 [ 1281.810803] ? __pfx___sys_sendmsg+0x10/0x10 [ 1281.810823] ? __pfx_ksys_write+0x10/0x10 [ 1281.810836] ? irqentry_exit+0xee/0x650 [ 1281.810852] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1281.810870] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1281.810894] do_syscall_64+0xbf/0x420 [ 1281.810914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.810928] RIP: 0033:0x7fbd3c214b19 [ 1281.810940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1281.810952] RSP: 002b:00007fbd3978a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1281.810965] RAX: ffffffffffffffda RBX: 00007fbd3c327f60 RCX: 00007fbd3c214b19 [ 1281.810973] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1281.810981] RBP: 00007fbd3978a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1281.810988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1281.810996] R13: 00007fffae4888ff R14: 00007fbd3978a300 R15: 0000000000022000 [ 1281.811017] [ 1281.853935] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1281.855816] FAULT_INJECTION: forcing a failure. [ 1281.855816] name failslab, interval 1, probability 0, space 0, times 0 [ 1281.856741] CPU: 0 UID: 0 PID: 9005 Comm: syz-executor.4 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1281.856760] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1281.856767] Call Trace: [ 1281.856772] [ 1281.856777] dump_stack_lvl+0xfa/0x120 [ 1281.856795] should_fail_ex+0x4d7/0x5e0 [ 1281.856811] ? __kernfs_new_node+0xd3/0x940 [ 1281.856829] should_failslab+0xc2/0x120 [ 1281.856844] kmem_cache_alloc_noprof+0x69/0x630 [ 1281.856861] __kernfs_new_node+0xd3/0x940 [ 1281.856879] ? __lock_acquire+0x451/0x2250 [ 1281.856903] ? __pfx___kernfs_new_node+0x10/0x10 [ 1281.856920] ? perf_trace_lock_acquire+0xc8/0x580 [ 1281.856941] ? lock_acquire+0x15e/0x2d0 [ 1281.856957] ? kernfs_root+0x23/0x2a0 [ 1281.856976] ? find_held_lock+0x2b/0x80 [ 1281.856988] ? kernfs_root+0xee/0x2a0 [ 1281.857007] ? lock_release+0xc8/0x270 [ 1281.857022] ? lock_is_held_type+0x9e/0x120 [ 1281.857042] kernfs_new_node+0x13c/0x1e0 [ 1281.857059] kernfs_create_dir_ns+0x4d/0x1a0 [ 1281.857075] internal_create_group+0x440/0xeb0 [ 1281.857103] ? __pfx_internal_create_group+0x10/0x10 [ 1281.857122] ? is_acpi_device_node+0x72/0x90 [ 1281.857142] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1281.857161] ? kernfs_put+0x35/0x60 [ 1281.857178] ? bus_to_subsys+0x10e/0x150 [ 1281.857196] dpm_sysfs_add+0x86/0x2a0 [ 1281.857213] device_add+0x96f/0x1830 [ 1281.857235] ? __pfx_device_add+0x10/0x10 [ 1281.857254] ? kfree+0x1ec/0x570 [ 1281.857279] device_create_groups_vargs+0x207/0x280 [ 1281.857295] device_create+0xdf/0x120 [ 1281.857309] ? __pfx_device_create+0x10/0x10 [ 1281.857322] ? timer_init_key+0x12e/0x280 [ 1281.857340] ? ieee80211_roc_setup+0x136/0x270 [ 1281.857357] ? ieee80211_alloc_hw_nm+0x228/0x21a0 [ 1281.857374] mac80211_hwsim_new_radio+0x37a/0x52a0 [ 1281.857393] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1281.857412] ? do_trace_netlink_extack+0x12a/0x150 [ 1281.857430] ? __nla_validate_parse+0x2e6/0x2880 [ 1281.857446] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1281.857468] hwsim_new_radio_nl+0xb61/0x1300 [ 1281.857481] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1281.857497] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1281.857513] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1281.857535] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1281.857551] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1281.857571] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1281.857588] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1281.857612] ? security_capable+0x2f/0x90 [ 1281.857632] ? ns_capable+0xe2/0x120 [ 1281.857654] genl_rcv_msg+0x532/0x7e0 [ 1281.857672] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1281.857688] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1281.857702] ? __lock_acquire+0x451/0x2250 [ 1281.857727] netlink_rcv_skb+0x147/0x430 [ 1281.857740] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1281.857757] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1281.857780] ? netlink_deliver_tap+0x1af/0xcb0 [ 1281.857804] genl_rcv+0x28/0x40 [ 1281.857817] netlink_unicast+0x5a7/0x870 [ 1281.857833] ? __pfx_netlink_unicast+0x10/0x10 [ 1281.857847] ? __virt_addr_valid+0x100/0x5d0 [ 1281.857868] netlink_sendmsg+0x8a3/0xd80 [ 1281.857885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1281.857908] ____sys_sendmsg+0xa38/0xbf0 [ 1281.857925] ? copy_msghdr_from_user+0xfb/0x150 [ 1281.857937] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1281.857956] ? __pfx_perf_tp_event+0x10/0x10 [ 1281.857974] ? lock_acquire+0x15e/0x2d0 [ 1281.857993] ___sys_sendmsg+0x10f/0x1b0 [ 1281.858006] ? __pfx____sys_sendmsg+0x10/0x10 [ 1281.858017] ? perf_trace_lock+0xbb/0x4f0 [ 1281.858037] ? __pfx_perf_trace_lock+0x10/0x10 [ 1281.858053] ? proc_fail_nth_write+0x97/0x220 [ 1281.858074] ? lock_acquire+0x15e/0x2d0 [ 1281.858090] ? __fget_files+0x34/0x3b0 [ 1281.858103] ? find_held_lock+0x2b/0x80 [ 1281.858116] ? __fget_files+0x203/0x3b0 [ 1281.858129] ? lock_release+0xc8/0x270 [ 1281.858148] ? __fget_files+0x20d/0x3b0 [ 1281.858170] __sys_sendmsg+0x150/0x200 [ 1281.858182] ? __pfx___sys_sendmsg+0x10/0x10 [ 1281.858193] ? perf_trace_preemptirq_template+0x259/0x430 [ 1281.858217] ? __pfx_ksys_write+0x10/0x10 [ 1281.858229] ? irqentry_exit+0xee/0x650 [ 1281.858243] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1281.858259] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1281.858282] do_syscall_64+0xbf/0x420 [ 1281.858301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.858313] RIP: 0033:0x7f3b21b1bb19 [ 1281.858324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1281.858335] RSP: 002b:00007f3b1f091188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1281.858347] RAX: ffffffffffffffda RBX: 00007f3b21c2ef60 RCX: 00007f3b21b1bb19 [ 1281.858355] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1281.858363] RBP: 00007f3b1f0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1281.858370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1281.858378] R13: 00007ffe815263cf R14: 00007f3b1f091300 R15: 0000000000022000 [ 1281.858398] 14:51:08 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 44) 14:51:08 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 44) [ 1281.940251] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1282.005396] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:51:08 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 45) [ 1282.100086] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1282.103867] FAULT_INJECTION: forcing a failure. [ 1282.103867] name failslab, interval 1, probability 0, space 0, times 0 [ 1282.108113] CPU: 0 UID: 0 PID: 9017 Comm: syz-executor.4 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1282.108131] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1282.108139] Call Trace: [ 1282.108145] [ 1282.108150] dump_stack_lvl+0xfa/0x120 [ 1282.108179] should_fail_ex+0x4d7/0x5e0 [ 1282.108199] ? __kernfs_new_node+0xd3/0x940 [ 1282.108218] should_failslab+0xc2/0x120 [ 1282.108235] kmem_cache_alloc_noprof+0x69/0x630 [ 1282.108253] __kernfs_new_node+0xd3/0x940 [ 1282.108270] ? __lock_acquire+0x451/0x2250 [ 1282.108291] ? __pfx___kernfs_new_node+0x10/0x10 [ 1282.108314] ? lock_acquire+0x15e/0x2d0 [ 1282.108329] ? kernfs_root+0x23/0x2a0 [ 1282.108347] ? find_held_lock+0x2b/0x80 [ 1282.108360] ? kernfs_root+0xee/0x2a0 [ 1282.108378] ? lock_release+0xc8/0x270 [ 1282.108392] ? lock_is_held_type+0x9e/0x120 [ 1282.108413] kernfs_new_node+0x13c/0x1e0 [ 1282.108430] __kernfs_create_file+0x55/0x360 [ 1282.108449] sysfs_add_file_mode_ns+0x21c/0x430 [ 1282.108469] ? __pfx_dev_attr_store+0x10/0x10 [ 1282.108487] sysfs_merge_group+0x199/0x310 [ 1282.108507] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1282.108526] ? is_acpi_device_node+0x72/0x90 [ 1282.108546] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1282.108565] ? kernfs_put+0x35/0x60 [ 1282.108582] ? bus_to_subsys+0x10e/0x150 [ 1282.108601] dpm_sysfs_add+0x24d/0x2a0 [ 1282.108618] device_add+0x96f/0x1830 [ 1282.108641] ? __pfx_device_add+0x10/0x10 [ 1282.108660] ? kfree+0x1ec/0x570 [ 1282.108687] device_create_groups_vargs+0x207/0x280 [ 1282.108702] device_create+0xdf/0x120 [ 1282.108716] ? __pfx_device_create+0x10/0x10 [ 1282.108730] ? timer_init_key+0x12e/0x280 [ 1282.108750] ? ieee80211_roc_setup+0x136/0x270 [ 1282.108771] ? ieee80211_alloc_hw_nm+0x228/0x21a0 [ 1282.108790] mac80211_hwsim_new_radio+0x37a/0x52a0 [ 1282.108812] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1282.108833] ? do_trace_netlink_extack+0x12a/0x150 [ 1282.108852] ? __nla_validate_parse+0x2e6/0x2880 [ 1282.108869] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1282.108895] hwsim_new_radio_nl+0xb61/0x1300 [ 1282.108908] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1282.108924] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1282.108940] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1282.108962] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1282.108979] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1282.109000] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1282.109016] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1282.109040] ? security_capable+0x2f/0x90 [ 1282.109062] ? ns_capable+0xe2/0x120 [ 1282.109086] genl_rcv_msg+0x532/0x7e0 [ 1282.109104] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1282.109120] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1282.109134] ? __lock_acquire+0x451/0x2250 [ 1282.109157] netlink_rcv_skb+0x147/0x430 [ 1282.109171] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1282.109187] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1282.109210] ? netlink_deliver_tap+0x1af/0xcb0 [ 1282.109234] genl_rcv+0x28/0x40 [ 1282.109246] netlink_unicast+0x5a7/0x870 [ 1282.109263] ? __pfx_netlink_unicast+0x10/0x10 [ 1282.109276] ? __virt_addr_valid+0x100/0x5d0 [ 1282.109300] netlink_sendmsg+0x8a3/0xd80 [ 1282.109317] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1282.109339] ____sys_sendmsg+0xa38/0xbf0 [ 1282.109357] ? copy_msghdr_from_user+0xfb/0x150 [ 1282.109371] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1282.109390] ? __pfx_perf_tp_event+0x10/0x10 [ 1282.109407] ? lock_acquire+0x15e/0x2d0 [ 1282.109425] ___sys_sendmsg+0x10f/0x1b0 [ 1282.109439] ? __pfx____sys_sendmsg+0x10/0x10 [ 1282.109449] ? perf_trace_lock+0xbb/0x4f0 [ 1282.109471] ? __pfx_perf_trace_lock+0x10/0x10 [ 1282.109487] ? proc_fail_nth_write+0x97/0x220 [ 1282.109508] ? lock_acquire+0x15e/0x2d0 [ 1282.109524] ? __fget_files+0x34/0x3b0 [ 1282.109539] ? find_held_lock+0x2b/0x80 [ 1282.109551] ? __fget_files+0x203/0x3b0 [ 1282.109564] ? lock_release+0xc8/0x270 [ 1282.109583] ? __fget_files+0x20d/0x3b0 [ 1282.109605] __sys_sendmsg+0x150/0x200 [ 1282.109616] ? __pfx___sys_sendmsg+0x10/0x10 [ 1282.109627] ? perf_trace_preemptirq_template+0x259/0x430 [ 1282.109653] ? __pfx_ksys_write+0x10/0x10 [ 1282.109666] ? irqentry_exit+0xee/0x650 [ 1282.109681] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1282.109696] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1282.109718] do_syscall_64+0xbf/0x420 [ 1282.109738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1282.109751] RIP: 0033:0x7f3b21b1bb19 [ 1282.109762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1282.109775] RSP: 002b:00007f3b1f091188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1282.109788] RAX: ffffffffffffffda RBX: 00007f3b21c2ef60 RCX: 00007f3b21b1bb19 [ 1282.109796] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1282.109804] RBP: 00007f3b1f0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1282.109811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1282.109818] R13: 00007ffe815263cf R14: 00007f3b1f091300 R15: 0000000000022000 [ 1282.109839] [ 1282.349258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1282.351597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1294.234496] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:51:20 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 45) 14:51:20 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xc19b, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:51:20 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 46) 14:51:20 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xc77d, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:51:20 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x4000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:51:20 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xe0ffff, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:51:20 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x480240, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4, 0x2, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x8, 0x400}, 0x4000, 0x1ff, 0x1, 0x0, 0x1f, 0x200, 0x9, 0x0, 0x40, 0x0, 0x9}, 0x0, 0xf, r2, 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x6, 0xee, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0x1, 0xde, 0x88, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7f, 0x20}, [@selector_unit={0x8, 0x24, 0x5, 0x3, 0x20, "188b60"}, @selector_unit={0x5, 0x24, 0x5, 0x4, 0x4}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x301, 0x6, 0x6, 0x5}, @mixer_unit={0x7, 0x24, 0x4, 0x3, 0xfc, "eda1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0x81, 0x1}, @as_header={0x7, 0x24, 0x1, 0x3, 0x9, 0x4}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x3, 0x3e8, 0x30, "faca3e64a84bc0df"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x3, 0x900, 0x6, "a401122fe5"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x5, 0x1, 0x9, {0x7, 0x25, 0x1, 0x0, 0x3, 0x52f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x8, 0x4}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x1, 0x50, 0x40, "17fc7022824535df"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x0, 0x4, 0x2, 0x9, '(w'}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x1, 0x4, 0xff, 0xe4, "040c0bb94c49214cd0"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x4, 0x7, 0xf8, {0x7, 0x25, 0x1, 0x82, 0x20, 0x3}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x0, 0x5, 0x1, 0xff, 0xff}, 0x19, &(0x7f0000000280)=ANY=[@ANYBLOB="050f1900011410048156c1b900097568d989ba42c2643cfe97"], 0x5, [{0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e03fddea3a3016c648e3449550f64ce000000800000004daf4475bcacef2c611ef1c5758f9988ffff04bfe8aca1b245b6e10e13f805e7d5574f83f8bdb35d29708bf677f63413b80073f7e6c863b8f8efae1bb10bf1f0379a2a3d7e5f7cc39418bbbdbb13000000000000000000"]}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1801}}, {0xbb, &(0x7f0000000400)=@string={0xbb, 0x3, "53c15249d942faed93c4187004cf6a7d523dc7e5f7772e957bdac1b77cbfe235b19772d065e27878f78a5edbe644e18d393d24991edbdb00e1b145363f6488ad7f1aa4e2ad493d82bd6eb174a3c5197a34e3afad09aa53614a6a8302f291d1b89aa84c6052cd4766f0363e25581c2b0eebfb5cac83745d988e0fbd3c72d784d0cda50117a0e5bf42e85972a448d4aae65a7b8219d6492505e17c032eb767abdb05073715925fd2f237096676d13226509711d81c4a12cf6d93"}}, {0x46, &(0x7f00000004c0)=@string={0x46, 0x3, "6cc8fcc657f167948482ca3e6967346d8061a7079063595b9fe1093d388df551cce269242ff88a25195b913696fa3e8e88fe015181659a69ad282548460ee68618432f15"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2001}}]}) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f00000005c0)=0x54cf) 14:51:20 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xc188, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1294.308275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1294.310508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1294.337119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1294.345235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1294.367288] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1294.370587] FAULT_INJECTION: forcing a failure. [ 1294.370587] name failslab, interval 1, probability 0, space 0, times 0 [ 1294.372491] CPU: 1 UID: 0 PID: 9029 Comm: syz-executor.3 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1294.372522] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1294.372535] Call Trace: [ 1294.372544] [ 1294.372553] dump_stack_lvl+0xfa/0x120 [ 1294.372596] should_fail_ex+0x4d7/0x5e0 [ 1294.372628] ? __kernfs_new_node+0xd3/0x940 [ 1294.372663] should_failslab+0xc2/0x120 [ 1294.372693] kmem_cache_alloc_noprof+0x69/0x630 [ 1294.372726] __kernfs_new_node+0xd3/0x940 [ 1294.372759] ? __lock_acquire+0x451/0x2250 [ 1294.372796] ? __pfx___kernfs_new_node+0x10/0x10 [ 1294.372829] ? perf_trace_lock_acquire+0xc8/0x580 [ 1294.372869] ? lock_acquire+0x15e/0x2d0 [ 1294.372906] ? kernfs_root+0x23/0x2a0 [ 1294.372940] ? find_held_lock+0x2b/0x80 [ 1294.372963] ? kernfs_root+0xee/0x2a0 [ 1294.372997] ? lock_release+0xc8/0x270 [ 1294.373025] ? lock_is_held_type+0x9e/0x120 [ 1294.373064] kernfs_new_node+0x13c/0x1e0 [ 1294.373095] kernfs_create_dir_ns+0x4d/0x1a0 [ 1294.373125] internal_create_group+0x440/0xeb0 [ 1294.373177] ? __pfx_internal_create_group+0x10/0x10 [ 1294.373214] ? is_acpi_device_node+0x72/0x90 [ 1294.373248] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1294.373282] ? kernfs_put+0x35/0x60 [ 1294.373315] ? bus_to_subsys+0x10e/0x150 [ 1294.373350] dpm_sysfs_add+0x86/0x2a0 [ 1294.373378] device_add+0x96f/0x1830 [ 1294.373419] ? __pfx_device_add+0x10/0x10 [ 1294.373456] ? kfree+0x1ec/0x570 [ 1294.373503] device_create_groups_vargs+0x207/0x280 [ 1294.373532] device_create+0xdf/0x120 [ 1294.373558] ? __pfx_device_create+0x10/0x10 [ 1294.373583] ? timer_init_key+0x12e/0x280 [ 1294.373619] ? ieee80211_roc_setup+0x136/0x270 [ 1294.373652] ? ieee80211_alloc_hw_nm+0x228/0x21a0 [ 1294.373686] mac80211_hwsim_new_radio+0x37a/0x52a0 [ 1294.373722] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1294.373760] ? do_trace_netlink_extack+0x12a/0x150 [ 1294.373794] ? __nla_validate_parse+0x2e6/0x2880 [ 1294.373825] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1294.373867] hwsim_new_radio_nl+0xb61/0x1300 [ 1294.373890] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1294.373926] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1294.373957] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1294.373998] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1294.374028] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1294.374066] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1294.374097] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1294.374142] ? security_capable+0x2f/0x90 [ 1294.374182] ? ns_capable+0xe2/0x120 [ 1294.374223] genl_rcv_msg+0x532/0x7e0 [ 1294.374257] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1294.374286] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1294.374313] ? __lock_acquire+0x451/0x2250 [ 1294.374356] netlink_rcv_skb+0x147/0x430 [ 1294.374381] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1294.374411] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1294.374455] ? netlink_deliver_tap+0x1af/0xcb0 [ 1294.374500] genl_rcv+0x28/0x40 [ 1294.374524] netlink_unicast+0x5a7/0x870 [ 1294.374555] ? __pfx_netlink_unicast+0x10/0x10 [ 1294.374580] ? __virt_addr_valid+0x100/0x5d0 [ 1294.374622] netlink_sendmsg+0x8a3/0xd80 [ 1294.374654] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1294.374697] ____sys_sendmsg+0xa38/0xbf0 [ 1294.374731] ? copy_msghdr_from_user+0xfb/0x150 [ 1294.374755] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1294.374799] ? lock_acquire+0x15e/0x2d0 [ 1294.374835] ___sys_sendmsg+0x10f/0x1b0 [ 1294.374860] ? __pfx____sys_sendmsg+0x10/0x10 [ 1294.374881] ? perf_trace_lock+0xbb/0x4f0 [ 1294.374919] ? __pfx_perf_trace_lock+0x10/0x10 [ 1294.374949] ? proc_fail_nth_write+0x97/0x220 [ 1294.374988] ? lock_acquire+0x15e/0x2d0 [ 1294.375017] ? __fget_files+0x34/0x3b0 [ 1294.375044] ? find_held_lock+0x2b/0x80 [ 1294.375067] ? __fget_files+0x203/0x3b0 [ 1294.375092] ? lock_release+0xc8/0x270 [ 1294.375128] ? __fget_files+0x20d/0x3b0 [ 1294.375169] __sys_sendmsg+0x150/0x200 [ 1294.375192] ? __pfx___sys_sendmsg+0x10/0x10 [ 1294.375230] ? __pfx_ksys_write+0x10/0x10 [ 1294.375253] ? irqentry_exit+0xee/0x650 [ 1294.375281] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1294.375312] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1294.375354] do_syscall_64+0xbf/0x420 [ 1294.375390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.375414] RIP: 0033:0x7fbd3c214b19 [ 1294.375433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1294.375455] RSP: 002b:00007fbd3978a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1294.375478] RAX: ffffffffffffffda RBX: 00007fbd3c327f60 RCX: 00007fbd3c214b19 [ 1294.375494] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1294.375509] RBP: 00007fbd3978a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1294.375523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1294.375537] R13: 00007fffae4888ff R14: 00007fbd3978a300 R15: 0000000000022000 [ 1294.375575] 14:51:21 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 47) [ 1294.477443] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1294.488566] FAULT_INJECTION: forcing a failure. [ 1294.488566] name failslab, interval 1, probability 0, space 0, times 0 14:51:21 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 46) [ 1294.494023] CPU: 1 UID: 0 PID: 9042 Comm: syz-executor.4 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1294.494062] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1294.494079] Call Trace: [ 1294.494089] [ 1294.494100] dump_stack_lvl+0xfa/0x120 [ 1294.494150] should_fail_ex+0x4d7/0x5e0 [ 1294.494189] ? __kernfs_new_node+0xd3/0x940 [ 1294.494231] should_failslab+0xc2/0x120 [ 1294.494266] kmem_cache_alloc_noprof+0x69/0x630 [ 1294.494304] __kernfs_new_node+0xd3/0x940 [ 1294.494344] ? __lock_acquire+0x451/0x2250 [ 1294.494388] ? __pfx___kernfs_new_node+0x10/0x10 [ 1294.494438] ? lock_acquire+0x15e/0x2d0 [ 1294.494473] ? kernfs_root+0x23/0x2a0 [ 1294.494515] ? find_held_lock+0x2b/0x80 [ 1294.494542] ? kernfs_root+0xee/0x2a0 [ 1294.494585] ? lock_release+0xc8/0x270 [ 1294.494618] ? lock_is_held_type+0x9e/0x120 [ 1294.494663] kernfs_new_node+0x13c/0x1e0 [ 1294.494700] __kernfs_create_file+0x55/0x360 [ 1294.494742] sysfs_add_file_mode_ns+0x21c/0x430 [ 1294.494787] ? __pfx_dev_attr_store+0x10/0x10 [ 1294.494820] sysfs_merge_group+0x199/0x310 [ 1294.494867] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1294.494919] ? is_acpi_device_node+0x72/0x90 [ 1294.494960] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1294.495000] ? kernfs_put+0x35/0x60 [ 1294.495040] ? bus_to_subsys+0x10e/0x150 [ 1294.495081] dpm_sysfs_add+0x24d/0x2a0 [ 1294.495113] device_add+0x96f/0x1830 [ 1294.495163] ? __pfx_device_add+0x10/0x10 [ 1294.495206] ? kfree+0x1ec/0x570 [ 1294.495262] device_create_groups_vargs+0x207/0x280 [ 1294.495297] device_create+0xdf/0x120 [ 1294.495326] ? __pfx_device_create+0x10/0x10 [ 1294.495357] ? timer_init_key+0x12e/0x280 [ 1294.495399] ? ieee80211_roc_setup+0x136/0x270 [ 1294.495442] ? ieee80211_alloc_hw_nm+0x228/0x21a0 [ 1294.495482] mac80211_hwsim_new_radio+0x37a/0x52a0 [ 1294.495525] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1294.495571] ? do_trace_netlink_extack+0x12a/0x150 [ 1294.495613] ? __nla_validate_parse+0x2e6/0x2880 [ 1294.495649] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1294.495700] hwsim_new_radio_nl+0xb61/0x1300 [ 1294.495741] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1294.495777] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1294.495813] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1294.495861] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1294.495896] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1294.495943] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1294.495979] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1294.496032] ? security_capable+0x2f/0x90 [ 1294.496079] ? ns_capable+0xe2/0x120 [ 1294.496131] genl_rcv_msg+0x532/0x7e0 [ 1294.496169] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1294.496205] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1294.496237] ? __lock_acquire+0x451/0x2250 [ 1294.496289] netlink_rcv_skb+0x147/0x430 [ 1294.496319] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1294.496354] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1294.496405] ? netlink_deliver_tap+0x1af/0xcb0 [ 1294.496460] genl_rcv+0x28/0x40 [ 1294.496488] netlink_unicast+0x5a7/0x870 [ 1294.496524] ? __pfx_netlink_unicast+0x10/0x10 [ 1294.496554] ? __virt_addr_valid+0x100/0x5d0 [ 1294.496603] netlink_sendmsg+0x8a3/0xd80 [ 1294.496641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1294.496692] ____sys_sendmsg+0xa38/0xbf0 [ 1294.496731] ? copy_msghdr_from_user+0xfb/0x150 [ 1294.496760] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1294.496811] ? lock_acquire+0x15e/0x2d0 [ 1294.496853] ___sys_sendmsg+0x10f/0x1b0 [ 1294.496883] ? __pfx____sys_sendmsg+0x10/0x10 [ 1294.496908] ? perf_trace_lock+0xbb/0x4f0 [ 1294.496955] ? __pfx_perf_trace_lock+0x10/0x10 [ 1294.496991] ? proc_fail_nth_write+0x97/0x220 [ 1294.497039] ? lock_acquire+0x15e/0x2d0 [ 1294.497074] ? __fget_files+0x34/0x3b0 [ 1294.497108] ? find_held_lock+0x2b/0x80 [ 1294.497136] ? __fget_files+0x203/0x3b0 [ 1294.497166] ? lock_release+0xc8/0x270 [ 1294.497209] ? __fget_files+0x20d/0x3b0 [ 1294.497256] __sys_sendmsg+0x150/0x200 [ 1294.497284] ? __pfx___sys_sendmsg+0x10/0x10 [ 1294.497327] ? __pfx_ksys_write+0x10/0x10 [ 1294.497354] ? irqentry_exit+0xee/0x650 [ 1294.497387] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1294.497425] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1294.497475] do_syscall_64+0xbf/0x420 [ 1294.497518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.497547] RIP: 0033:0x7f3b21b1bb19 [ 1294.497570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1294.497597] RSP: 002b:00007f3b1f091188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1294.497625] RAX: ffffffffffffffda RBX: 00007f3b21c2ef60 RCX: 00007f3b21b1bb19 [ 1294.497644] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1294.497661] RBP: 00007f3b1f0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1294.497679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1294.497697] R13: 00007ffe815263cf R14: 00007f3b1f091300 R15: 0000000000022000 [ 1294.497741] [ 1294.592792] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:51:21 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 48) [ 1294.675280] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:51:21 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 47) 14:51:21 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x1000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1294.824697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1294.825756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1294.922378] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1294.923806] FAULT_INJECTION: forcing a failure. [ 1294.923806] name failslab, interval 1, probability 0, space 0, times 0 [ 1294.924776] CPU: 0 UID: 0 PID: 9048 Comm: syz-executor.3 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1294.924795] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1294.924804] Call Trace: [ 1294.924809] [ 1294.924814] dump_stack_lvl+0xfa/0x120 [ 1294.924844] should_fail_ex+0x4d7/0x5e0 [ 1294.924865] ? __kernfs_new_node+0xd3/0x940 [ 1294.924887] should_failslab+0xc2/0x120 [ 1294.924910] kmem_cache_alloc_noprof+0x69/0x630 [ 1294.924930] __kernfs_new_node+0xd3/0x940 [ 1294.924949] ? __lock_acquire+0x451/0x2250 [ 1294.924971] ? __pfx___kernfs_new_node+0x10/0x10 [ 1294.924995] ? lock_acquire+0x15e/0x2d0 [ 1294.925012] ? kernfs_root+0x23/0x2a0 [ 1294.925032] ? find_held_lock+0x2b/0x80 [ 1294.925045] ? kernfs_root+0xee/0x2a0 [ 1294.925065] ? lock_release+0xc8/0x270 [ 1294.925081] ? lock_is_held_type+0x9e/0x120 [ 1294.925104] kernfs_new_node+0x13c/0x1e0 [ 1294.925121] __kernfs_create_file+0x55/0x360 [ 1294.925142] sysfs_add_file_mode_ns+0x21c/0x430 [ 1294.925164] ? __pfx_dev_attr_store+0x10/0x10 [ 1294.925182] sysfs_merge_group+0x199/0x310 [ 1294.925206] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1294.925227] ? is_acpi_device_node+0x72/0x90 [ 1294.925248] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1294.925269] ? kernfs_put+0x35/0x60 [ 1294.925288] ? bus_to_subsys+0x10e/0x150 [ 1294.925308] dpm_sysfs_add+0x24d/0x2a0 [ 1294.925326] device_add+0x96f/0x1830 [ 1294.925350] ? __pfx_device_add+0x10/0x10 [ 1294.925370] ? kfree+0x1ec/0x570 [ 1294.925398] device_create_groups_vargs+0x207/0x280 [ 1294.925415] device_create+0xdf/0x120 [ 1294.925429] ? __pfx_device_create+0x10/0x10 [ 1294.925443] ? timer_init_key+0x12e/0x280 [ 1294.925466] ? ieee80211_roc_setup+0x136/0x270 [ 1294.925486] ? ieee80211_alloc_hw_nm+0x228/0x21a0 [ 1294.925506] mac80211_hwsim_new_radio+0x37a/0x52a0 [ 1294.925527] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1294.925549] ? do_trace_netlink_extack+0x12a/0x150 [ 1294.925570] ? __nla_validate_parse+0x2e6/0x2880 [ 1294.925588] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1294.925611] hwsim_new_radio_nl+0xb61/0x1300 [ 1294.925625] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1294.925642] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1294.925659] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1294.925682] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1294.925700] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1294.925722] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1294.925741] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1294.925766] ? security_capable+0x2f/0x90 [ 1294.925790] ? ns_capable+0xe2/0x120 [ 1294.925815] genl_rcv_msg+0x532/0x7e0 [ 1294.925834] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1294.925851] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1294.925866] ? __lock_acquire+0x451/0x2250 [ 1294.925891] netlink_rcv_skb+0x147/0x430 [ 1294.925905] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1294.925922] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1294.925947] ? netlink_deliver_tap+0x1af/0xcb0 [ 1294.925972] genl_rcv+0x28/0x40 [ 1294.925986] netlink_unicast+0x5a7/0x870 [ 1294.926003] ? __pfx_netlink_unicast+0x10/0x10 [ 1294.926018] ? __virt_addr_valid+0x100/0x5d0 [ 1294.926044] netlink_sendmsg+0x8a3/0xd80 [ 1294.926062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1294.926086] ____sys_sendmsg+0xa38/0xbf0 [ 1294.926107] ? copy_msghdr_from_user+0xfb/0x150 [ 1294.926122] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1294.926143] ? __pfx_perf_tp_event+0x10/0x10 [ 1294.926161] ? lock_acquire+0x15e/0x2d0 [ 1294.926181] ___sys_sendmsg+0x10f/0x1b0 [ 1294.926195] ? __pfx____sys_sendmsg+0x10/0x10 [ 1294.926207] ? perf_trace_lock+0xbb/0x4f0 [ 1294.926230] ? __pfx_perf_trace_lock+0x10/0x10 [ 1294.926248] ? proc_fail_nth_write+0x97/0x220 [ 1294.926270] ? lock_acquire+0x15e/0x2d0 [ 1294.926287] ? __fget_files+0x34/0x3b0 [ 1294.926303] ? find_held_lock+0x2b/0x80 [ 1294.926316] ? __fget_files+0x203/0x3b0 [ 1294.926331] ? lock_release+0xc8/0x270 [ 1294.926351] ? __fget_files+0x20d/0x3b0 [ 1294.926374] __sys_sendmsg+0x150/0x200 [ 1294.926388] ? __pfx___sys_sendmsg+0x10/0x10 [ 1294.926400] ? perf_trace_preemptirq_template+0x259/0x430 [ 1294.926427] ? __pfx_ksys_write+0x10/0x10 [ 1294.926442] ? irqentry_exit+0xee/0x650 [ 1294.926458] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1294.926475] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1294.926499] do_syscall_64+0xbf/0x420 [ 1294.926520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.926535] RIP: 0033:0x7fbd3c214b19 [ 1294.926546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1294.926559] RSP: 002b:00007fbd3978a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1294.926572] RAX: ffffffffffffffda RBX: 00007fbd3c327f60 RCX: 00007fbd3c214b19 [ 1294.926582] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1294.926590] RBP: 00007fbd3978a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1294.926598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1294.926606] R13: 00007fffae4888ff R14: 00007fbd3978a300 R15: 0000000000022000 [ 1294.926627] 14:51:21 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xcffc, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:51:21 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xe084, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:51:21 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xc189, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:51:21 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xc77e, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:51:21 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 48) 14:51:21 executing program 1: perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x42) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080)={0x0, 0x52a0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x68000, 0x111) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="ac0000000002000000000000400000390c80000a806400028006000340000000002c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa2c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0800014000000000080001400000000008000140000000000800053a00000428080005400000000200"/172], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 14:51:21 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 49) [ 1295.089455] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1295.136180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1295.139653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1295.189063] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:51:21 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 49) 14:51:21 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 50) [ 1295.309984] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1295.376603] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1295.379475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1295.380510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1295.385466] FAULT_INJECTION: forcing a failure. [ 1295.385466] name failslab, interval 1, probability 0, space 0, times 0 [ 1295.386375] CPU: 0 UID: 0 PID: 9071 Comm: syz-executor.4 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1295.386393] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1295.386402] Call Trace: [ 1295.386408] [ 1295.386414] dump_stack_lvl+0xfa/0x120 [ 1295.386446] should_fail_ex+0x4d7/0x5e0 [ 1295.386467] ? __kernfs_new_node+0xd3/0x940 [ 1295.386495] should_failslab+0xc2/0x120 [ 1295.386513] kmem_cache_alloc_noprof+0x69/0x630 [ 1295.386532] __kernfs_new_node+0xd3/0x940 [ 1295.386551] ? __lock_acquire+0x451/0x2250 [ 1295.386573] ? __pfx___kernfs_new_node+0x10/0x10 [ 1295.386597] ? lock_acquire+0x15e/0x2d0 [ 1295.386614] ? kernfs_root+0x23/0x2a0 [ 1295.386634] ? find_held_lock+0x2b/0x80 [ 1295.386647] ? kernfs_root+0xee/0x2a0 [ 1295.386667] ? lock_release+0xc8/0x270 [ 1295.386683] ? lock_is_held_type+0x9e/0x120 [ 1295.386705] kernfs_new_node+0x13c/0x1e0 [ 1295.386724] __kernfs_create_file+0x55/0x360 [ 1295.386744] sysfs_add_file_mode_ns+0x21c/0x430 [ 1295.386766] ? __pfx_dev_attr_store+0x10/0x10 [ 1295.386784] sysfs_merge_group+0x199/0x310 [ 1295.386807] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1295.386827] ? is_acpi_device_node+0x72/0x90 [ 1295.386848] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1295.386868] ? kernfs_put+0x35/0x60 [ 1295.386887] ? bus_to_subsys+0x10e/0x150 [ 1295.386911] dpm_sysfs_add+0x24d/0x2a0 [ 1295.386929] device_add+0x96f/0x1830 [ 1295.386953] ? __pfx_device_add+0x10/0x10 [ 1295.386974] ? kfree+0x1ec/0x570 [ 1295.387002] device_create_groups_vargs+0x207/0x280 [ 1295.387019] device_create+0xdf/0x120 [ 1295.387033] ? __pfx_device_create+0x10/0x10 [ 1295.387048] ? timer_init_key+0x12e/0x280 [ 1295.387070] ? ieee80211_roc_setup+0x136/0x270 [ 1295.387092] ? ieee80211_alloc_hw_nm+0x228/0x21a0 [ 1295.387112] mac80211_hwsim_new_radio+0x37a/0x52a0 [ 1295.387134] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1295.387157] ? do_trace_netlink_extack+0x12a/0x150 [ 1295.387178] ? __nla_validate_parse+0x2e6/0x2880 [ 1295.387196] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1295.387219] hwsim_new_radio_nl+0xb61/0x1300 [ 1295.387232] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1295.387249] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1295.387266] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1295.387289] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1295.387307] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1295.387329] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1295.387346] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1295.387371] ? security_capable+0x2f/0x90 [ 1295.387396] ? ns_capable+0xe2/0x120 [ 1295.387421] genl_rcv_msg+0x532/0x7e0 [ 1295.387441] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1295.387455] ? irqentry_exit+0x17b/0x650 [ 1295.387471] ? trace_hardirqs_off_finish+0xe3/0x110 [ 1295.387493] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1295.387517] netlink_rcv_skb+0x147/0x430 [ 1295.387531] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1295.387549] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1295.387573] ? netlink_deliver_tap+0x1af/0xcb0 [ 1295.387599] genl_rcv+0x28/0x40 [ 1295.387612] netlink_unicast+0x5a7/0x870 [ 1295.387630] ? __pfx_netlink_unicast+0x10/0x10 [ 1295.387644] ? __virt_addr_valid+0x100/0x5d0 [ 1295.387669] netlink_sendmsg+0x8a3/0xd80 [ 1295.387687] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1295.387711] ____sys_sendmsg+0xa38/0xbf0 [ 1295.387743] ? copy_msghdr_from_user+0xfb/0x150 [ 1295.387758] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1295.387778] ? __pfx_perf_tp_event+0x10/0x10 [ 1295.387796] ? lock_acquire+0x15e/0x2d0 [ 1295.387816] ___sys_sendmsg+0x10f/0x1b0 [ 1295.387830] ? __pfx____sys_sendmsg+0x10/0x10 [ 1295.387842] ? perf_trace_lock+0xbb/0x4f0 [ 1295.387866] ? __pfx_perf_trace_lock+0x10/0x10 [ 1295.387883] ? proc_fail_nth_write+0x97/0x220 [ 1295.387908] ? lock_acquire+0x15e/0x2d0 [ 1295.387925] ? __fget_files+0x34/0x3b0 [ 1295.387941] ? find_held_lock+0x2b/0x80 [ 1295.387953] ? __fget_files+0x203/0x3b0 [ 1295.387968] ? lock_release+0xc8/0x270 [ 1295.387989] ? __fget_files+0x20d/0x3b0 [ 1295.388011] __sys_sendmsg+0x150/0x200 [ 1295.388025] ? __pfx___sys_sendmsg+0x10/0x10 [ 1295.388037] ? perf_trace_preemptirq_template+0x259/0x430 [ 1295.388062] ? __pfx_ksys_write+0x10/0x10 [ 1295.388077] ? irqentry_exit+0xee/0x650 [ 1295.388093] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1295.388110] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1295.388134] do_syscall_64+0xbf/0x420 [ 1295.388156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.388170] RIP: 0033:0x7f3b21b1bb19 [ 1295.388181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1295.388195] RSP: 002b:00007f3b1f091188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1295.388208] RAX: ffffffffffffffda RBX: 00007f3b21c2ef60 RCX: 00007f3b21b1bb19 [ 1295.388217] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1295.388226] RBP: 00007f3b1f0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1295.388234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1295.388242] R13: 00007ffe815263cf R14: 00007f3b1f091300 R15: 0000000000022000 [ 1295.388263] 14:51:22 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x2000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:51:22 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 51) [ 1295.502741] FAULT_INJECTION: forcing a failure. 14:51:22 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 50) [ 1295.502741] name failslab, interval 1, probability 0, space 0, times 0 [ 1295.509217] CPU: 0 UID: 0 PID: 9073 Comm: syz-executor.4 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1295.509235] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1295.509243] Call Trace: [ 1295.509248] [ 1295.509253] dump_stack_lvl+0xfa/0x120 [ 1295.509278] should_fail_ex+0x4d7/0x5e0 [ 1295.509296] ? __kernfs_new_node+0xd3/0x940 [ 1295.509316] should_failslab+0xc2/0x120 [ 1295.509333] kmem_cache_alloc_noprof+0x69/0x630 [ 1295.509351] __kernfs_new_node+0xd3/0x940 [ 1295.509368] ? __lock_acquire+0x451/0x2250 [ 1295.509389] ? __pfx___kernfs_new_node+0x10/0x10 [ 1295.509411] ? lock_acquire+0x15e/0x2d0 [ 1295.509426] ? kernfs_root+0x23/0x2a0 [ 1295.509445] ? find_held_lock+0x2b/0x80 [ 1295.509457] ? kernfs_root+0xee/0x2a0 [ 1295.509475] ? lock_release+0xc8/0x270 [ 1295.509489] ? lock_is_held_type+0x9e/0x120 [ 1295.509510] kernfs_new_node+0x13c/0x1e0 [ 1295.509527] __kernfs_create_file+0x55/0x360 [ 1295.509546] sysfs_add_file_mode_ns+0x21c/0x430 [ 1295.509566] ? __pfx_dev_attr_store+0x10/0x10 [ 1295.509584] sysfs_merge_group+0x199/0x310 [ 1295.509605] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1295.509624] ? is_acpi_device_node+0x72/0x90 [ 1295.509643] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1295.509661] ? kernfs_put+0x35/0x60 [ 1295.509679] ? bus_to_subsys+0x10e/0x150 [ 1295.509697] dpm_sysfs_add+0x24d/0x2a0 [ 1295.509713] device_add+0x96f/0x1830 [ 1295.509736] ? __pfx_device_add+0x10/0x10 [ 1295.509755] ? kfree+0x1ec/0x570 [ 1295.509781] device_create_groups_vargs+0x207/0x280 [ 1295.509797] device_create+0xdf/0x120 [ 1295.509811] ? __pfx_device_create+0x10/0x10 [ 1295.509825] ? timer_init_key+0x12e/0x280 [ 1295.509845] ? ieee80211_roc_setup+0x136/0x270 [ 1295.509863] ? ieee80211_alloc_hw_nm+0x228/0x21a0 [ 1295.509881] mac80211_hwsim_new_radio+0x37a/0x52a0 [ 1295.509904] ? __lock_acquire+0x1600/0x2250 [ 1295.509928] ? do_trace_netlink_extack+0x12a/0x150 [ 1295.509947] ? __nla_validate_parse+0x2e6/0x2880 [ 1295.509964] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1295.509986] hwsim_new_radio_nl+0xb61/0x1300 [ 1295.509998] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1295.510014] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1295.510031] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1295.510053] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1295.510070] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1295.510091] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1295.510108] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1295.510131] ? security_capable+0x2f/0x90 [ 1295.510153] ? ns_capable+0xe2/0x120 [ 1295.510176] genl_rcv_msg+0x532/0x7e0 [ 1295.510194] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1295.510210] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1295.510224] ? __lock_acquire+0x451/0x2250 [ 1295.510247] netlink_rcv_skb+0x147/0x430 [ 1295.510261] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1295.510277] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1295.510300] ? netlink_deliver_tap+0x1af/0xcb0 [ 1295.510324] genl_rcv+0x28/0x40 [ 1295.510337] netlink_unicast+0x5a7/0x870 [ 1295.510353] ? __pfx_netlink_unicast+0x10/0x10 [ 1295.510367] ? __virt_addr_valid+0x100/0x5d0 [ 1295.510390] netlink_sendmsg+0x8a3/0xd80 [ 1295.510408] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1295.510431] ____sys_sendmsg+0xa38/0xbf0 [ 1295.510449] ? copy_msghdr_from_user+0xfb/0x150 [ 1295.510462] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1295.510482] ? __pfx_perf_tp_event+0x10/0x10 [ 1295.510500] ? lock_acquire+0x15e/0x2d0 [ 1295.510519] ___sys_sendmsg+0x10f/0x1b0 [ 1295.510532] ? __pfx____sys_sendmsg+0x10/0x10 [ 1295.510543] ? perf_trace_lock+0xbb/0x4f0 [ 1295.510566] ? __pfx_perf_trace_lock+0x10/0x10 [ 1295.510582] ? proc_fail_nth_write+0x97/0x220 [ 1295.510603] ? lock_acquire+0x15e/0x2d0 [ 1295.510619] ? __fget_files+0x34/0x3b0 [ 1295.510634] ? find_held_lock+0x2b/0x80 [ 1295.510646] ? __fget_files+0x203/0x3b0 [ 1295.510660] ? lock_release+0xc8/0x270 [ 1295.510679] ? __fget_files+0x20d/0x3b0 [ 1295.510701] __sys_sendmsg+0x150/0x200 [ 1295.510713] ? __pfx___sys_sendmsg+0x10/0x10 [ 1295.510724] ? perf_trace_preemptirq_template+0x259/0x430 [ 1295.510750] ? __pfx_ksys_write+0x10/0x10 [ 1295.510762] ? irqentry_exit+0xee/0x650 [ 1295.510777] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1295.510792] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1295.510815] do_syscall_64+0xbf/0x420 [ 1295.510835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.510848] RIP: 0033:0x7f3b21b1bb19 [ 1295.510858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1295.510871] RSP: 002b:00007f3b1f091188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1295.510884] RAX: ffffffffffffffda RBX: 00007f3b21c2ef60 RCX: 00007f3b21b1bb19 [ 1295.510892] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1295.510900] RBP: 00007f3b1f0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1295.510907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1295.510915] R13: 00007ffe815263cf R14: 00007f3b1f091300 R15: 0000000000022000 [ 1295.510935] [ 1295.585474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1295.588213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:51:22 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xce21, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1295.636331] FAULT_INJECTION: forcing a failure. [ 1295.636331] name failslab, interval 1, probability 0, space 0, times 0 14:51:22 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 52) 14:51:22 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xf721, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1295.667038] CPU: 1 UID: 0 PID: 9078 Comm: syz-executor.3 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1295.667086] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1295.667101] Call Trace: [ 1295.667117] [ 1295.667127] dump_stack_lvl+0xfa/0x120 [ 1295.667173] should_fail_ex+0x4d7/0x5e0 [ 1295.667208] ? __kernfs_new_node+0xd3/0x940 [ 1295.667245] should_failslab+0xc2/0x120 [ 1295.667276] kmem_cache_alloc_noprof+0x69/0x630 [ 1295.667311] __kernfs_new_node+0xd3/0x940 [ 1295.667346] ? __lock_acquire+0x451/0x2250 [ 1295.667386] ? __pfx___kernfs_new_node+0x10/0x10 [ 1295.667430] ? lock_acquire+0x15e/0x2d0 [ 1295.667461] ? kernfs_root+0x23/0x2a0 [ 1295.667498] ? find_held_lock+0x2b/0x80 [ 1295.667522] ? kernfs_root+0xee/0x2a0 [ 1295.667558] ? lock_release+0xc8/0x270 [ 1295.667587] ? lock_is_held_type+0x9e/0x120 [ 1295.667630] kernfs_new_node+0x13c/0x1e0 [ 1295.667665] __kernfs_create_file+0x55/0x360 [ 1295.667703] sysfs_add_file_mode_ns+0x21c/0x430 [ 1295.667763] ? __pfx_dev_attr_store+0x10/0x10 [ 1295.667795] sysfs_merge_group+0x199/0x310 [ 1295.667836] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1295.667874] ? is_acpi_device_node+0x72/0x90 [ 1295.667911] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1295.667946] ? kernfs_put+0x35/0x60 [ 1295.667981] ? bus_to_subsys+0x10e/0x150 [ 1295.668017] dpm_sysfs_add+0x24d/0x2a0 [ 1295.668046] device_add+0x96f/0x1830 [ 1295.668090] ? __pfx_device_add+0x10/0x10 [ 1295.668129] ? kfree+0x1ec/0x570 [ 1295.668179] device_create_groups_vargs+0x207/0x280 [ 1295.668211] device_create+0xdf/0x120 [ 1295.668238] ? __pfx_device_create+0x10/0x10 [ 1295.668265] ? timer_init_key+0x12e/0x280 [ 1295.668303] ? ieee80211_roc_setup+0x136/0x270 [ 1295.668338] ? ieee80211_alloc_hw_nm+0x228/0x21a0 [ 1295.668373] mac80211_hwsim_new_radio+0x37a/0x52a0 [ 1295.668406] ? __lock_acquire+0x1700/0x2250 [ 1295.668454] ? do_trace_netlink_extack+0x12a/0x150 [ 1295.668489] ? __nla_validate_parse+0x2e6/0x2880 [ 1295.668522] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1295.668566] hwsim_new_radio_nl+0xb61/0x1300 [ 1295.668592] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1295.668623] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1295.668656] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1295.668700] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1295.668732] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1295.668773] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1295.668806] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1295.668853] ? security_capable+0x2f/0x90 [ 1295.668895] ? ns_capable+0xe2/0x120 [ 1295.668939] genl_rcv_msg+0x532/0x7e0 [ 1295.668975] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1295.669005] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1295.669034] ? __lock_acquire+0x451/0x2250 [ 1295.669080] netlink_rcv_skb+0x147/0x430 [ 1295.669107] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1295.669139] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1295.669185] ? netlink_deliver_tap+0x1af/0xcb0 [ 1295.669234] genl_rcv+0x28/0x40 [ 1295.669258] netlink_unicast+0x5a7/0x870 [ 1295.669292] ? __pfx_netlink_unicast+0x10/0x10 [ 1295.669318] ? __virt_addr_valid+0x100/0x5d0 [ 1295.669362] netlink_sendmsg+0x8a3/0xd80 [ 1295.669396] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1295.669441] ____sys_sendmsg+0xa38/0xbf0 [ 1295.669477] ? copy_msghdr_from_user+0xfb/0x150 [ 1295.669502] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1295.669549] ? lock_acquire+0x15e/0x2d0 [ 1295.669587] ___sys_sendmsg+0x10f/0x1b0 [ 1295.669614] ? __pfx____sys_sendmsg+0x10/0x10 [ 1295.669638] ? perf_trace_lock+0xbb/0x4f0 [ 1295.669679] ? __pfx_perf_trace_lock+0x10/0x10 [ 1295.669711] ? proc_fail_nth_write+0x97/0x220 [ 1295.669751] ? lock_acquire+0x15e/0x2d0 [ 1295.669782] ? __fget_files+0x34/0x3b0 [ 1295.669810] ? find_held_lock+0x2b/0x80 [ 1295.669834] ? __fget_files+0x203/0x3b0 [ 1295.669861] ? lock_release+0xc8/0x270 [ 1295.669899] ? __fget_files+0x20d/0x3b0 [ 1295.669943] __sys_sendmsg+0x150/0x200 [ 1295.669967] ? __pfx___sys_sendmsg+0x10/0x10 [ 1295.670007] ? __pfx_ksys_write+0x10/0x10 [ 1295.670031] ? irqentry_exit+0xee/0x650 [ 1295.670061] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1295.670093] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1295.670138] do_syscall_64+0xbf/0x420 [ 1295.670176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.670201] RIP: 0033:0x7fbd3c214b19 [ 1295.670223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1295.670247] RSP: 002b:00007fbd3978a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1295.670273] RAX: ffffffffffffffda RBX: 00007fbd3c327f60 RCX: 00007fbd3c214b19 [ 1295.670289] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1295.670304] RBP: 00007fbd3978a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1295.670319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1295.670334] R13: 00007fffae4888ff R14: 00007fbd3978a300 R15: 0000000000022000 [ 1295.670374] 14:51:35 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xcffd, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:51:35 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xfa21, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:51:35 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xcf21, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:51:35 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x5}, 0xe) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000280)={0x8, 'batadv_slave_0\x00', {'lo\x00'}, 0x3f}) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r3 = dup(r2) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x0, &(0x7f0000000000), 0x0, 0x4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x2, 0xac, 0x8, 0xc1}, {0x800, 0x0, 0x6, 0x80000}, {0x0, 0x7, 0x7, 0x7}]}) r6 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x5, 0x0, r7) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x52) syz_io_uring_setup(0x3ba9, &(0x7f0000000180)={0x0, 0x36cf, 0x20, 0x3, 0x15a, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)=0x0) syz_io_uring_submit(r4, r8, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x4, @fixed, 0x0, 0x2}, 0xe) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14:51:35 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 51) 14:51:35 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 53) 14:51:35 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:51:35 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xc77f, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1308.492521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1308.496763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1308.518028] __nla_validate_parse: 3 callbacks suppressed [ 1308.518055] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1308.524785] FAULT_INJECTION: forcing a failure. [ 1308.524785] name failslab, interval 1, probability 0, space 0, times 0 [ 1308.528448] CPU: 0 UID: 0 PID: 9102 Comm: syz-executor.4 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1308.528468] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1308.528477] Call Trace: [ 1308.528482] [ 1308.528488] dump_stack_lvl+0xfa/0x120 [ 1308.528516] should_fail_ex+0x4d7/0x5e0 [ 1308.528536] ? __kernfs_new_node+0xd3/0x940 [ 1308.528556] should_failslab+0xc2/0x120 [ 1308.528573] kmem_cache_alloc_noprof+0x69/0x630 [ 1308.528592] __kernfs_new_node+0xd3/0x940 [ 1308.528609] ? __lock_acquire+0x451/0x2250 [ 1308.528631] ? __pfx___kernfs_new_node+0x10/0x10 [ 1308.528653] ? lock_acquire+0x15e/0x2d0 [ 1308.528670] ? kernfs_root+0x23/0x2a0 [ 1308.528690] ? find_held_lock+0x2b/0x80 [ 1308.528703] ? kernfs_root+0xee/0x2a0 [ 1308.528722] ? lock_release+0xc8/0x270 [ 1308.528737] ? lock_is_held_type+0x9e/0x120 [ 1308.528759] kernfs_new_node+0x13c/0x1e0 [ 1308.528777] __kernfs_create_file+0x55/0x360 [ 1308.528796] sysfs_add_file_mode_ns+0x21c/0x430 [ 1308.528823] ? __pfx_dev_attr_store+0x10/0x10 [ 1308.528840] sysfs_merge_group+0x199/0x310 [ 1308.528864] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1308.528888] ? is_acpi_device_node+0x72/0x90 [ 1308.528908] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1308.528927] ? kernfs_put+0x35/0x60 [ 1308.528945] ? bus_to_subsys+0x10e/0x150 [ 1308.528964] dpm_sysfs_add+0x24d/0x2a0 [ 1308.528980] device_add+0x96f/0x1830 [ 1308.529003] ? __pfx_device_add+0x10/0x10 [ 1308.529023] ? kfree+0x1ec/0x570 [ 1308.529049] device_create_groups_vargs+0x207/0x280 [ 1308.529065] device_create+0xdf/0x120 [ 1308.529079] ? __pfx_device_create+0x10/0x10 [ 1308.529093] ? timer_init_key+0x12e/0x280 [ 1308.529114] ? ieee80211_roc_setup+0x136/0x270 [ 1308.529134] ? ieee80211_alloc_hw_nm+0x228/0x21a0 [ 1308.529154] mac80211_hwsim_new_radio+0x37a/0x52a0 [ 1308.529174] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1308.529196] ? do_trace_netlink_extack+0x12a/0x150 [ 1308.529216] ? __nla_validate_parse+0x2e6/0x2880 [ 1308.529233] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1308.529255] hwsim_new_radio_nl+0xb61/0x1300 [ 1308.529268] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1308.529285] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1308.529302] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1308.529325] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1308.529342] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1308.529363] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1308.529380] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1308.529404] ? security_capable+0x2f/0x90 [ 1308.529428] ? ns_capable+0xe2/0x120 [ 1308.529452] genl_rcv_msg+0x532/0x7e0 [ 1308.529471] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1308.529487] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1308.529502] ? __lock_acquire+0x451/0x2250 [ 1308.529524] netlink_rcv_skb+0x147/0x430 [ 1308.529538] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1308.529554] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1308.529578] ? netlink_deliver_tap+0x1af/0xcb0 [ 1308.529604] genl_rcv+0x28/0x40 [ 1308.529617] netlink_unicast+0x5a7/0x870 [ 1308.529634] ? __pfx_netlink_unicast+0x10/0x10 [ 1308.529648] ? __virt_addr_valid+0x100/0x5d0 [ 1308.529672] netlink_sendmsg+0x8a3/0xd80 [ 1308.529690] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1308.529713] ____sys_sendmsg+0xa38/0xbf0 [ 1308.529732] ? copy_msghdr_from_user+0xfb/0x150 [ 1308.529747] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1308.529771] ? lock_acquire+0x15e/0x2d0 [ 1308.529790] ___sys_sendmsg+0x10f/0x1b0 [ 1308.529804] ? __pfx____sys_sendmsg+0x10/0x10 [ 1308.529815] ? perf_trace_lock+0xbb/0x4f0 [ 1308.529837] ? __pfx_perf_trace_lock+0x10/0x10 [ 1308.529854] ? proc_fail_nth_write+0x97/0x220 [ 1308.529876] ? lock_acquire+0x15e/0x2d0 [ 1308.529892] ? __fget_files+0x34/0x3b0 [ 1308.529907] ? find_held_lock+0x2b/0x80 [ 1308.529920] ? __fget_files+0x203/0x3b0 [ 1308.529934] ? lock_release+0xc8/0x270 [ 1308.529955] ? __fget_files+0x20d/0x3b0 [ 1308.529977] __sys_sendmsg+0x150/0x200 [ 1308.529989] ? __pfx___sys_sendmsg+0x10/0x10 [ 1308.530009] ? __pfx_ksys_write+0x10/0x10 [ 1308.530023] ? irqentry_exit+0xee/0x650 [ 1308.530038] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1308.530057] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1308.530080] do_syscall_64+0xbf/0x420 [ 1308.530100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1308.530114] RIP: 0033:0x7f3b21b1bb19 [ 1308.530126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1308.530140] RSP: 002b:00007f3b1f091188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1308.530153] RAX: ffffffffffffffda RBX: 00007f3b21c2ef60 RCX: 00007f3b21b1bb19 [ 1308.530162] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1308.530170] RBP: 00007f3b1f0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1308.530178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1308.530186] R13: 00007ffe815263cf R14: 00007f3b1f091300 R15: 0000000000022000 [ 1308.530206] [ 1308.571945] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1308.573421] FAULT_INJECTION: forcing a failure. [ 1308.573421] name failslab, interval 1, probability 0, space 0, times 0 [ 1308.574863] CPU: 0 UID: 0 PID: 9103 Comm: syz-executor.3 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1308.574879] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1308.574887] Call Trace: [ 1308.574894] [ 1308.574899] dump_stack_lvl+0xfa/0x120 [ 1308.574918] should_fail_ex+0x4d7/0x5e0 [ 1308.574935] ? __kernfs_new_node+0xd3/0x940 [ 1308.574955] should_failslab+0xc2/0x120 [ 1308.574972] kmem_cache_alloc_noprof+0x69/0x630 [ 1308.574990] __kernfs_new_node+0xd3/0x940 [ 1308.575008] ? __lock_acquire+0x451/0x2250 [ 1308.575027] ? __pfx___kernfs_new_node+0x10/0x10 [ 1308.575050] ? lock_acquire+0x15e/0x2d0 [ 1308.575066] ? kernfs_root+0x23/0x2a0 [ 1308.575084] ? find_held_lock+0x2b/0x80 [ 1308.575096] ? kernfs_root+0xee/0x2a0 [ 1308.575115] ? lock_release+0xc8/0x270 [ 1308.575129] ? lock_is_held_type+0x9e/0x120 [ 1308.575149] kernfs_new_node+0x13c/0x1e0 [ 1308.575166] __kernfs_create_file+0x55/0x360 [ 1308.575184] sysfs_add_file_mode_ns+0x21c/0x430 [ 1308.575205] ? __pfx_dev_attr_store+0x10/0x10 [ 1308.575220] sysfs_merge_group+0x199/0x310 [ 1308.575240] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1308.575259] ? is_acpi_device_node+0x72/0x90 [ 1308.575277] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1308.575293] ? kernfs_put+0x35/0x60 [ 1308.575311] ? bus_to_subsys+0x10e/0x150 [ 1308.575329] dpm_sysfs_add+0x24d/0x2a0 [ 1308.575343] device_add+0x96f/0x1830 [ 1308.575365] ? __pfx_device_add+0x10/0x10 [ 1308.575384] ? kfree+0x1ec/0x570 [ 1308.575409] device_create_groups_vargs+0x207/0x280 [ 1308.575425] device_create+0xdf/0x120 [ 1308.575438] ? __pfx_device_create+0x10/0x10 [ 1308.575452] ? timer_init_key+0x12e/0x280 [ 1308.575470] ? ieee80211_roc_setup+0x136/0x270 [ 1308.575487] ? ieee80211_alloc_hw_nm+0x228/0x21a0 [ 1308.575505] mac80211_hwsim_new_radio+0x37a/0x52a0 [ 1308.575523] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1308.575542] ? do_trace_netlink_extack+0x12a/0x150 [ 1308.575559] ? __nla_validate_parse+0x2e6/0x2880 [ 1308.575575] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1308.575597] hwsim_new_radio_nl+0xb61/0x1300 [ 1308.575610] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1308.575626] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1308.575642] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1308.575664] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1308.575680] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1308.575700] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1308.575717] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1308.575740] ? security_capable+0x2f/0x90 [ 1308.575761] ? ns_capable+0xe2/0x120 [ 1308.575782] genl_rcv_msg+0x532/0x7e0 [ 1308.575800] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1308.575816] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1308.575830] ? __lock_acquire+0x451/0x2250 [ 1308.575853] netlink_rcv_skb+0x147/0x430 [ 1308.575877] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1308.575894] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1308.575916] ? netlink_deliver_tap+0x1af/0xcb0 [ 1308.575941] genl_rcv+0x28/0x40 [ 1308.575953] netlink_unicast+0x5a7/0x870 [ 1308.575970] ? __pfx_netlink_unicast+0x10/0x10 [ 1308.575983] ? __virt_addr_valid+0x100/0x5d0 [ 1308.576004] netlink_sendmsg+0x8a3/0xd80 [ 1308.576021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1308.576044] ____sys_sendmsg+0xa38/0xbf0 [ 1308.576061] ? copy_msghdr_from_user+0xfb/0x150 [ 1308.576073] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1308.576092] ? __pfx_perf_tp_event+0x10/0x10 [ 1308.576109] ? lock_acquire+0x15e/0x2d0 [ 1308.576128] ___sys_sendmsg+0x10f/0x1b0 [ 1308.576142] ? __pfx____sys_sendmsg+0x10/0x10 [ 1308.576153] ? perf_trace_lock+0xbb/0x4f0 [ 1308.576173] ? __pfx_perf_trace_lock+0x10/0x10 [ 1308.576189] ? proc_fail_nth_write+0x97/0x220 [ 1308.576209] ? lock_acquire+0x15e/0x2d0 [ 1308.576224] ? __fget_files+0x34/0x3b0 14:51:35 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 54) [ 1308.576238] ? find_held_lock+0x2b/0x80 [ 1308.576251] ? __fget_files+0x203/0x3b0 [ 1308.576264] ? lock_release+0xc8/0x270 [ 1308.576283] ? __fget_files+0x20d/0x3b0 [ 1308.576304] __sys_sendmsg+0x150/0x200 [ 1308.576317] ? __pfx___sys_sendmsg+0x10/0x10 [ 1308.576328] ? perf_trace_preemptirq_template+0x259/0x430 [ 1308.576352] ? __pfx_ksys_write+0x10/0x10 [ 1308.576364] ? irqentry_exit+0xee/0x650 [ 1308.576378] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1308.576394] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1308.576416] do_syscall_64+0xbf/0x420 [ 1308.576435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1308.576447] RIP: 0033:0x7fbd3c214b19 [ 1308.576458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1308.576469] RSP: 002b:00007fbd3978a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1308.576481] RAX: ffffffffffffffda RBX: 00007fbd3c327f60 RCX: 00007fbd3c214b19 [ 1308.576490] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1308.576497] RBP: 00007fbd3978a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1308.576505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1308.576512] R13: 00007fffae4888ff R14: 00007fbd3978a300 R15: 0000000000022000 [ 1308.576533] [ 1308.591701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1308.648794] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1308.653315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1309.003077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1309.007697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:51:48 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xc780, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:51:48 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 52) 14:51:48 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x1ff, 0x0, 0x1, 0x4, 0x7, 0x20}, 0x20) 14:51:48 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x10040, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:51:48 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xcffe, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:51:48 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xe084, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:51:48 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 55) 14:51:48 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x4000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1321.984811] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1321.994798] FAULT_INJECTION: forcing a failure. [ 1321.994798] name failslab, interval 1, probability 0, space 0, times 0 [ 1321.996144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1321.997842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.000120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1322.000467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1322.001268] CPU: 1 UID: 0 PID: 9127 Comm: syz-executor.4 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1322.001300] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1322.001314] Call Trace: [ 1322.001324] [ 1322.001333] dump_stack_lvl+0xfa/0x120 [ 1322.001377] should_fail_ex+0x4d7/0x5e0 [ 1322.001411] ? __kernfs_new_node+0xd3/0x940 [ 1322.001448] should_failslab+0xc2/0x120 [ 1322.001479] kmem_cache_alloc_noprof+0x69/0x630 [ 1322.001513] __kernfs_new_node+0xd3/0x940 [ 1322.001548] ? __lock_acquire+0x451/0x2250 [ 1322.001586] ? __pfx___kernfs_new_node+0x10/0x10 [ 1322.001630] ? lock_acquire+0x15e/0x2d0 [ 1322.001661] ? kernfs_root+0x23/0x2a0 [ 1322.001698] ? find_held_lock+0x2b/0x80 [ 1322.001722] ? kernfs_root+0xee/0x2a0 [ 1322.001758] ? lock_release+0xc8/0x270 [ 1322.001787] ? lock_is_held_type+0x9e/0x120 [ 1322.001827] kernfs_new_node+0x13c/0x1e0 [ 1322.001859] __kernfs_create_file+0x55/0x360 [ 1322.001904] sysfs_add_file_mode_ns+0x21c/0x430 [ 1322.001944] ? __pfx_dev_attr_store+0x10/0x10 [ 1322.001974] sysfs_merge_group+0x199/0x310 [ 1322.002015] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1322.002053] ? is_acpi_device_node+0x72/0x90 [ 1322.002090] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1322.002125] ? kernfs_put+0x35/0x60 [ 1322.002160] ? bus_to_subsys+0x10e/0x150 [ 1322.002196] dpm_sysfs_add+0x24d/0x2a0 [ 1322.002224] device_add+0x96f/0x1830 [ 1322.002268] ? __pfx_device_add+0x10/0x10 [ 1322.002307] ? kfree+0x1ec/0x570 [ 1322.002355] device_create_groups_vargs+0x207/0x280 [ 1322.002386] device_create+0xdf/0x120 [ 1322.002413] ? __pfx_device_create+0x10/0x10 [ 1322.002439] ? timer_init_key+0x12e/0x280 [ 1322.002476] ? ieee80211_roc_setup+0x136/0x270 [ 1322.002511] ? ieee80211_alloc_hw_nm+0x228/0x21a0 [ 1322.002546] mac80211_hwsim_new_radio+0x37a/0x52a0 [ 1322.002583] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1322.002621] ? do_trace_netlink_extack+0x12a/0x150 [ 1322.002657] ? __nla_validate_parse+0x2e6/0x2880 [ 1322.002690] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1322.002732] hwsim_new_radio_nl+0xb61/0x1300 [ 1322.002757] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1322.002789] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1322.002820] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1322.002862] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1322.002894] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1322.002935] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1322.002967] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1322.003013] ? security_capable+0x2f/0x90 [ 1322.003055] ? ns_capable+0xe2/0x120 [ 1322.003099] genl_rcv_msg+0x532/0x7e0 [ 1322.003134] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1322.003164] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1322.003193] ? __lock_acquire+0x451/0x2250 [ 1322.003238] netlink_rcv_skb+0x147/0x430 [ 1322.003264] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1322.003296] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1322.003341] ? netlink_deliver_tap+0x1af/0xcb0 [ 1322.003388] genl_rcv+0x28/0x40 [ 1322.003413] netlink_unicast+0x5a7/0x870 [ 1322.003445] ? __pfx_netlink_unicast+0x10/0x10 [ 1322.003472] ? __virt_addr_valid+0x100/0x5d0 [ 1322.003514] netlink_sendmsg+0x8a3/0xd80 [ 1322.003548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1322.003592] ____sys_sendmsg+0xa38/0xbf0 [ 1322.003627] ? copy_msghdr_from_user+0xfb/0x150 [ 1322.003652] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1322.003698] ? lock_acquire+0x15e/0x2d0 [ 1322.003735] ___sys_sendmsg+0x10f/0x1b0 [ 1322.003761] ? __pfx____sys_sendmsg+0x10/0x10 [ 1322.003783] ? perf_trace_lock+0xbb/0x4f0 [ 1322.003823] ? __pfx_perf_trace_lock+0x10/0x10 [ 1322.003855] ? proc_fail_nth_write+0x97/0x220 [ 1322.003896] ? lock_acquire+0x15e/0x2d0 [ 1322.003927] ? __fget_files+0x34/0x3b0 [ 1322.003954] ? find_held_lock+0x2b/0x80 [ 1322.003978] ? __fget_files+0x203/0x3b0 [ 1322.004017] ? lock_release+0xc8/0x270 [ 1322.004055] ? __fget_files+0x20d/0x3b0 [ 1322.004097] __sys_sendmsg+0x150/0x200 [ 1322.004121] ? __pfx___sys_sendmsg+0x10/0x10 [ 1322.004159] ? __pfx_ksys_write+0x10/0x10 [ 1322.004183] ? irqentry_exit+0xee/0x650 [ 1322.004212] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1322.004245] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1322.004289] do_syscall_64+0xbf/0x420 [ 1322.004326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1322.004352] RIP: 0033:0x7f3b21b1bb19 [ 1322.004372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1322.004395] RSP: 002b:00007f3b1f091188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1322.004419] RAX: ffffffffffffffda RBX: 00007f3b21c2ef60 RCX: 00007f3b21b1bb19 [ 1322.004435] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1322.004450] RBP: 00007f3b1f0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1322.004465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1322.004479] R13: 00007ffe815263cf R14: 00007f3b1f091300 R15: 0000000000022000 [ 1322.004518] [ 1322.073674] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:51:48 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 56) [ 1322.258073] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:51:48 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 53) [ 1322.457027] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1322.460378] FAULT_INJECTION: forcing a failure. [ 1322.460378] name failslab, interval 1, probability 0, space 0, times 0 [ 1322.462051] CPU: 0 UID: 0 PID: 9139 Comm: syz-executor.3 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1322.462083] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1322.462098] Call Trace: [ 1322.462106] [ 1322.462116] dump_stack_lvl+0xfa/0x120 [ 1322.462158] should_fail_ex+0x4d7/0x5e0 [ 1322.462191] ? __kernfs_new_node+0xd3/0x940 [ 1322.462225] should_failslab+0xc2/0x120 [ 1322.462254] kmem_cache_alloc_noprof+0x69/0x630 [ 1322.462286] __kernfs_new_node+0xd3/0x940 [ 1322.462318] ? __lock_acquire+0x451/0x2250 [ 1322.462356] ? __pfx___kernfs_new_node+0x10/0x10 [ 1322.462397] ? lock_acquire+0x15e/0x2d0 [ 1322.462426] ? kernfs_root+0x23/0x2a0 [ 1322.462460] ? find_held_lock+0x2b/0x80 [ 1322.462482] ? kernfs_root+0xee/0x2a0 [ 1322.462516] ? lock_release+0xc8/0x270 [ 1322.462543] ? lock_is_held_type+0x9e/0x120 [ 1322.462581] kernfs_new_node+0x13c/0x1e0 [ 1322.462612] __kernfs_create_file+0x55/0x360 [ 1322.462646] sysfs_add_file_mode_ns+0x21c/0x430 [ 1322.462684] ? __pfx_dev_attr_store+0x10/0x10 [ 1322.462713] sysfs_merge_group+0x199/0x310 [ 1322.462751] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1322.462786] ? is_acpi_device_node+0x72/0x90 [ 1322.462820] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1322.462853] ? kernfs_put+0x35/0x60 [ 1322.462885] ? bus_to_subsys+0x10e/0x150 [ 1322.462927] dpm_sysfs_add+0x24d/0x2a0 [ 1322.462955] device_add+0x96f/0x1830 [ 1322.462996] ? __pfx_device_add+0x10/0x10 [ 1322.463031] ? kfree+0x1ec/0x570 [ 1322.463079] device_create_groups_vargs+0x207/0x280 [ 1322.463108] device_create+0xdf/0x120 [ 1322.463133] ? __pfx_device_create+0x10/0x10 [ 1322.463158] ? timer_init_key+0x12e/0x280 [ 1322.463194] ? ieee80211_roc_setup+0x136/0x270 [ 1322.463226] ? ieee80211_alloc_hw_nm+0x228/0x21a0 [ 1322.463260] mac80211_hwsim_new_radio+0x37a/0x52a0 [ 1322.463295] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1322.463332] ? do_trace_netlink_extack+0x12a/0x150 [ 1322.463366] ? __nla_validate_parse+0x2e6/0x2880 [ 1322.463396] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1322.463437] hwsim_new_radio_nl+0xb61/0x1300 [ 1322.463460] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1322.463489] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1322.463518] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1322.463558] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1322.463588] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1322.463626] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1322.463656] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1322.463700] ? security_capable+0x2f/0x90 [ 1322.463739] ? ns_capable+0xe2/0x120 [ 1322.463780] genl_rcv_msg+0x532/0x7e0 [ 1322.463812] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1322.463841] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1322.463867] ? __lock_acquire+0x451/0x2250 [ 1322.463910] netlink_rcv_skb+0x147/0x430 [ 1322.463934] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1322.463964] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1322.464018] ? netlink_deliver_tap+0x1af/0xcb0 [ 1322.464063] genl_rcv+0x28/0x40 [ 1322.464086] netlink_unicast+0x5a7/0x870 [ 1322.464116] ? __pfx_netlink_unicast+0x10/0x10 [ 1322.464141] ? __virt_addr_valid+0x100/0x5d0 [ 1322.464181] netlink_sendmsg+0x8a3/0xd80 [ 1322.464213] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1322.464255] ____sys_sendmsg+0xa38/0xbf0 [ 1322.464287] ? copy_msghdr_from_user+0xfb/0x150 [ 1322.464311] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1322.464347] ? __pfx_perf_tp_event+0x10/0x10 [ 1322.464376] ? lock_acquire+0x15e/0x2d0 [ 1322.464411] ___sys_sendmsg+0x10f/0x1b0 [ 1322.464435] ? __pfx____sys_sendmsg+0x10/0x10 [ 1322.464456] ? perf_trace_lock+0xbb/0x4f0 [ 1322.464493] ? __pfx_perf_trace_lock+0x10/0x10 [ 1322.464523] ? proc_fail_nth_write+0x97/0x220 [ 1322.464560] ? lock_acquire+0x15e/0x2d0 [ 1322.464588] ? __fget_files+0x34/0x3b0 [ 1322.464615] ? find_held_lock+0x2b/0x80 [ 1322.464637] ? __fget_files+0x203/0x3b0 [ 1322.464662] ? lock_release+0xc8/0x270 [ 1322.464698] ? __fget_files+0x20d/0x3b0 [ 1322.464738] __sys_sendmsg+0x150/0x200 [ 1322.464760] ? __pfx___sys_sendmsg+0x10/0x10 [ 1322.464781] ? perf_trace_preemptirq_template+0x259/0x430 [ 1322.464827] ? __pfx_ksys_write+0x10/0x10 [ 1322.464849] ? irqentry_exit+0xee/0x650 [ 1322.464876] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1322.464905] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1322.464946] do_syscall_64+0xbf/0x420 [ 1322.464982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1322.465006] RIP: 0033:0x7fbd3c214b19 [ 1322.465025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1322.465047] RSP: 002b:00007fbd3978a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1322.465070] RAX: ffffffffffffffda RBX: 00007fbd3c327f60 RCX: 00007fbd3c214b19 [ 1322.465085] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1322.465099] RBP: 00007fbd3978a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1322.465113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1322.465127] R13: 00007fffae4888ff R14: 00007fbd3978a300 R15: 0000000000022000 [ 1322.465164] [ 1322.509760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.578523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.245410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.246513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:51:59 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 57) 14:51:59 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xcfff, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:51:59 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 54) 14:51:59 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x5000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:51:59 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xc781, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:51:59 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000180), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14:51:59 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x80000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:51:59 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x10040, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1333.276369] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1333.280849] FAULT_INJECTION: forcing a failure. [ 1333.280849] name failslab, interval 1, probability 0, space 0, times 0 [ 1333.286352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.287857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.293414] CPU: 0 UID: 0 PID: 9153 Comm: syz-executor.4 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1333.293434] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1333.293442] Call Trace: [ 1333.293447] [ 1333.293452] dump_stack_lvl+0xfa/0x120 [ 1333.293481] should_fail_ex+0x4d7/0x5e0 [ 1333.293501] ? kobject_uevent_env+0x23a/0xfd0 [ 1333.293516] should_failslab+0xc2/0x120 [ 1333.293533] __kmalloc_cache_noprof+0x6a/0x630 [ 1333.293559] kobject_uevent_env+0x23a/0xfd0 [ 1333.293574] ? __pfx_dev_uevent_name+0x10/0x10 [ 1333.293596] ? bus_to_subsys+0x10e/0x150 [ 1333.293617] device_add+0xf96/0x1830 [ 1333.293641] ? __pfx_device_add+0x10/0x10 [ 1333.293662] ? kfree+0x1ec/0x570 [ 1333.293688] device_create_groups_vargs+0x207/0x280 [ 1333.293705] device_create+0xdf/0x120 [ 1333.293719] ? __pfx_device_create+0x10/0x10 [ 1333.293733] ? timer_init_key+0x12e/0x280 [ 1333.293754] ? ieee80211_roc_setup+0x136/0x270 [ 1333.293775] ? ieee80211_alloc_hw_nm+0x228/0x21a0 [ 1333.293794] mac80211_hwsim_new_radio+0x37a/0x52a0 [ 1333.293815] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1333.293837] ? do_trace_netlink_extack+0x12a/0x150 [ 1333.293857] ? __nla_validate_parse+0x2e6/0x2880 [ 1333.293875] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1333.293902] hwsim_new_radio_nl+0xb61/0x1300 [ 1333.293915] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1333.293934] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1333.293951] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1333.293974] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1333.293992] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1333.294014] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1333.294031] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1333.294056] ? security_capable+0x2f/0x90 [ 1333.294080] ? ns_capable+0xe2/0x120 [ 1333.294104] genl_rcv_msg+0x532/0x7e0 [ 1333.294123] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1333.294140] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1333.294155] ? __lock_acquire+0x451/0x2250 [ 1333.294179] netlink_rcv_skb+0x147/0x430 [ 1333.294194] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1333.294211] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1333.294235] ? netlink_deliver_tap+0x1af/0xcb0 [ 1333.294261] genl_rcv+0x28/0x40 [ 1333.294274] netlink_unicast+0x5a7/0x870 [ 1333.294292] ? __pfx_netlink_unicast+0x10/0x10 [ 1333.294306] ? __virt_addr_valid+0x100/0x5d0 [ 1333.294330] netlink_sendmsg+0x8a3/0xd80 [ 1333.294348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1333.294372] ____sys_sendmsg+0xa38/0xbf0 [ 1333.294391] ? copy_msghdr_from_user+0xfb/0x150 [ 1333.294406] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1333.294426] ? __pfx_perf_tp_event+0x10/0x10 [ 1333.294445] ? lock_acquire+0x15e/0x2d0 [ 1333.294465] ___sys_sendmsg+0x10f/0x1b0 [ 1333.294479] ? __pfx____sys_sendmsg+0x10/0x10 [ 1333.294490] ? perf_trace_lock+0xbb/0x4f0 [ 1333.294514] ? __pfx_perf_trace_lock+0x10/0x10 [ 1333.294532] ? proc_fail_nth_write+0x97/0x220 [ 1333.294555] ? lock_acquire+0x15e/0x2d0 [ 1333.294572] ? __fget_files+0x34/0x3b0 [ 1333.294587] ? find_held_lock+0x2b/0x80 [ 1333.294600] ? __fget_files+0x203/0x3b0 [ 1333.294615] ? lock_release+0xc8/0x270 [ 1333.294636] ? __fget_files+0x20d/0x3b0 [ 1333.294658] __sys_sendmsg+0x150/0x200 [ 1333.294671] ? __pfx___sys_sendmsg+0x10/0x10 [ 1333.294683] ? perf_trace_preemptirq_template+0x259/0x430 [ 1333.294710] ? __pfx_ksys_write+0x10/0x10 [ 1333.294724] ? irqentry_exit+0xee/0x650 [ 1333.294741] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1333.294758] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1333.294782] do_syscall_64+0xbf/0x420 [ 1333.294803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1333.294817] RIP: 0033:0x7f3b21b1bb19 [ 1333.294828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1333.294841] RSP: 002b:00007f3b1f091188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1333.294854] RAX: ffffffffffffffda RBX: 00007f3b21c2ef60 RCX: 00007f3b21b1bb19 [ 1333.294863] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1333.294871] RBP: 00007f3b1f0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1333.294879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1333.294887] R13: 00007ffe815263cf R14: 00007f3b1f091300 R15: 0000000000022000 [ 1333.294908] [ 1333.307162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.327066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.437517] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:52:00 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 58) [ 1333.543095] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:52:00 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 55) [ 1333.646717] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1333.659215] FAULT_INJECTION: forcing a failure. [ 1333.659215] name failslab, interval 1, probability 0, space 0, times 0 [ 1333.660135] CPU: 0 UID: 0 PID: 9166 Comm: syz-executor.3 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1333.660153] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1333.660161] Call Trace: [ 1333.660166] [ 1333.660172] dump_stack_lvl+0xfa/0x120 [ 1333.660199] should_fail_ex+0x4d7/0x5e0 [ 1333.660218] ? __kernfs_new_node+0xd3/0x940 [ 1333.660239] should_failslab+0xc2/0x120 [ 1333.660257] kmem_cache_alloc_noprof+0x69/0x630 [ 1333.660276] __kernfs_new_node+0xd3/0x940 [ 1333.660295] ? __lock_acquire+0x451/0x2250 [ 1333.660318] ? __pfx___kernfs_new_node+0x10/0x10 [ 1333.660342] ? lock_acquire+0x15e/0x2d0 [ 1333.660359] ? kernfs_root+0x23/0x2a0 [ 1333.660379] ? find_held_lock+0x2b/0x80 [ 1333.660392] ? kernfs_root+0xee/0x2a0 [ 1333.660412] ? lock_release+0xc8/0x270 [ 1333.660428] ? lock_is_held_type+0x9e/0x120 [ 1333.660450] kernfs_new_node+0x13c/0x1e0 [ 1333.660468] __kernfs_create_file+0x55/0x360 [ 1333.660488] sysfs_add_file_mode_ns+0x21c/0x430 [ 1333.660510] ? __pfx_dev_attr_store+0x10/0x10 [ 1333.660527] sysfs_merge_group+0x199/0x310 [ 1333.660549] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1333.660570] ? is_acpi_device_node+0x72/0x90 [ 1333.660590] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1333.660610] ? kernfs_put+0x35/0x60 [ 1333.660629] ? bus_to_subsys+0x10e/0x150 [ 1333.660649] dpm_sysfs_add+0x24d/0x2a0 [ 1333.660665] device_add+0x96f/0x1830 [ 1333.660689] ? __pfx_device_add+0x10/0x10 [ 1333.660710] ? kfree+0x1ec/0x570 [ 1333.660737] device_create_groups_vargs+0x207/0x280 [ 1333.660754] device_create+0xdf/0x120 [ 1333.660768] ? __pfx_device_create+0x10/0x10 [ 1333.660782] ? timer_init_key+0x12e/0x280 [ 1333.660803] ? ieee80211_roc_setup+0x136/0x270 [ 1333.660823] ? ieee80211_alloc_hw_nm+0x228/0x21a0 [ 1333.660842] mac80211_hwsim_new_radio+0x37a/0x52a0 [ 1333.660863] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1333.660885] ? do_trace_netlink_extack+0x12a/0x150 [ 1333.660909] ? __nla_validate_parse+0x2e6/0x2880 [ 1333.660927] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1333.660950] hwsim_new_radio_nl+0xb61/0x1300 [ 1333.660964] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1333.660981] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1333.660998] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1333.661021] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1333.661038] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1333.661060] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1333.661077] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1333.661102] ? security_capable+0x2f/0x90 [ 1333.661126] ? ns_capable+0xe2/0x120 [ 1333.661151] genl_rcv_msg+0x532/0x7e0 [ 1333.661170] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1333.661187] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1333.661202] ? __lock_acquire+0x451/0x2250 [ 1333.661229] netlink_rcv_skb+0x147/0x430 [ 1333.661245] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1333.661264] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1333.661288] ? netlink_deliver_tap+0x1af/0xcb0 [ 1333.661314] genl_rcv+0x28/0x40 [ 1333.661327] netlink_unicast+0x5a7/0x870 [ 1333.661345] ? __pfx_netlink_unicast+0x10/0x10 [ 1333.661359] ? __virt_addr_valid+0x100/0x5d0 [ 1333.661383] netlink_sendmsg+0x8a3/0xd80 [ 1333.661401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1333.661424] ____sys_sendmsg+0xa38/0xbf0 [ 1333.661444] ? copy_msghdr_from_user+0xfb/0x150 [ 1333.661458] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1333.661479] ? __pfx_perf_tp_event+0x10/0x10 [ 1333.661496] ? lock_acquire+0x15e/0x2d0 [ 1333.661517] ___sys_sendmsg+0x10f/0x1b0 [ 1333.661531] ? __pfx____sys_sendmsg+0x10/0x10 [ 1333.661542] ? perf_trace_lock+0xbb/0x4f0 [ 1333.661566] ? __pfx_perf_trace_lock+0x10/0x10 [ 1333.661583] ? proc_fail_nth_write+0x97/0x220 [ 1333.661605] ? lock_acquire+0x15e/0x2d0 [ 1333.661621] ? __fget_files+0x34/0x3b0 [ 1333.661637] ? find_held_lock+0x2b/0x80 [ 1333.661650] ? __fget_files+0x203/0x3b0 [ 1333.661665] ? lock_release+0xc8/0x270 [ 1333.661685] ? __fget_files+0x20d/0x3b0 [ 1333.661708] __sys_sendmsg+0x150/0x200 [ 1333.661721] ? __pfx___sys_sendmsg+0x10/0x10 [ 1333.661733] ? perf_trace_preemptirq_template+0x259/0x430 [ 1333.661760] ? __pfx_ksys_write+0x10/0x10 [ 1333.661774] ? irqentry_exit+0xee/0x650 [ 1333.661790] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1333.661807] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1333.661830] do_syscall_64+0xbf/0x420 [ 1333.661851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1333.661865] RIP: 0033:0x7fbd3c214b19 [ 1333.661877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1333.661889] RSP: 002b:00007fbd3978a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1333.661903] RAX: ffffffffffffffda RBX: 00007fbd3c327f60 RCX: 00007fbd3c214b19 [ 1333.661912] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1333.661920] RBP: 00007fbd3978a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1333.661928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1333.661936] R13: 00007fffae4888ff R14: 00007fbd3978a300 R15: 0000000000022000 [ 1333.661957] 14:52:00 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 59) [ 1333.735216] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:52:00 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x80000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:52:00 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 56) 14:52:00 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000180)={0x0, 0x80, 0x9, 0x7, 0x9, 0x8, 0x0, 0x5, 0x10920, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x400, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x7bb, 0x1, 0x5, 0x2, 0x4, 0x401, 0x0, 0x7f, 0x0, 0x2}) [ 1333.814196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.818634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:52:00 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xd000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:52:00 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x1fffff, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1333.870602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.878771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.878934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.887386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:52:00 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xc782, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:52:00 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x6000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1333.930654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.931678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.939315] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1333.964858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.972244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.980477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 14:52:00 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 60) [ 1333.987664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1334.119461] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1334.130652] FAULT_INJECTION: forcing a failure. [ 1334.130652] name failslab, interval 1, probability 0, space 0, times 0 [ 1334.137014] CPU: 1 UID: 0 PID: 9185 Comm: syz-executor.4 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1334.137049] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1334.137064] Call Trace: [ 1334.137073] [ 1334.137083] dump_stack_lvl+0xfa/0x120 [ 1334.137128] should_fail_ex+0x4d7/0x5e0 [ 1334.137162] ? kobject_get_path+0xc8/0x200 [ 1334.137204] ? kobject_get_path+0xc8/0x200 [ 1334.137243] should_failslab+0xc2/0x120 [ 1334.137274] __kmalloc_noprof+0xc4/0x710 [ 1334.137316] ? __create_object+0x59/0x80 [ 1334.137357] kobject_get_path+0xc8/0x200 [ 1334.137398] ? kasan_save_track+0x14/0x30 [ 1334.137434] kobject_uevent_env+0x260/0xfd0 [ 1334.137471] ? bus_to_subsys+0x10e/0x150 [ 1334.137510] device_add+0xf96/0x1830 [ 1334.137555] ? __pfx_device_add+0x10/0x10 [ 1334.137595] ? kfree+0x1ec/0x570 [ 1334.137644] device_create_groups_vargs+0x207/0x280 [ 1334.137676] device_create+0xdf/0x120 [ 1334.137702] ? __pfx_device_create+0x10/0x10 [ 1334.137729] ? timer_init_key+0x12e/0x280 [ 1334.137767] ? ieee80211_roc_setup+0x136/0x270 [ 1334.137802] ? ieee80211_alloc_hw_nm+0x228/0x21a0 [ 1334.137837] mac80211_hwsim_new_radio+0x37a/0x52a0 [ 1334.137876] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1334.137925] ? do_trace_netlink_extack+0x12a/0x150 [ 1334.137963] ? __nla_validate_parse+0x2e6/0x2880 [ 1334.137996] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1334.138038] hwsim_new_radio_nl+0xb61/0x1300 [ 1334.138064] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1334.138098] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1334.138130] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1334.138172] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1334.138204] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1334.138245] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1334.138280] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1334.138328] ? security_capable+0x2f/0x90 [ 1334.138373] ? ns_capable+0xe2/0x120 [ 1334.138417] genl_rcv_msg+0x532/0x7e0 [ 1334.138452] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1334.138483] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1334.138512] ? __lock_acquire+0x451/0x2250 [ 1334.138558] netlink_rcv_skb+0x147/0x430 [ 1334.138585] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1334.138617] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1334.138664] ? netlink_deliver_tap+0x1af/0xcb0 [ 1334.138714] genl_rcv+0x28/0x40 [ 1334.138740] netlink_unicast+0x5a7/0x870 [ 1334.138773] ? __pfx_netlink_unicast+0x10/0x10 [ 1334.138799] ? __virt_addr_valid+0x100/0x5d0 [ 1334.138842] netlink_sendmsg+0x8a3/0xd80 [ 1334.138876] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1334.138924] ____sys_sendmsg+0xa38/0xbf0 [ 1334.138960] ? copy_msghdr_from_user+0xfb/0x150 [ 1334.138986] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1334.139034] ? lock_acquire+0x15e/0x2d0 [ 1334.139073] ___sys_sendmsg+0x10f/0x1b0 [ 1334.139101] ? __pfx____sys_sendmsg+0x10/0x10 [ 1334.139124] ? perf_trace_lock+0xbb/0x4f0 [ 1334.139165] ? __pfx_perf_trace_lock+0x10/0x10 [ 1334.139197] ? proc_fail_nth_write+0x97/0x220 [ 1334.139239] ? lock_acquire+0x15e/0x2d0 [ 1334.139270] ? __fget_files+0x34/0x3b0 [ 1334.139298] ? find_held_lock+0x2b/0x80 [ 1334.139324] ? __fget_files+0x203/0x3b0 [ 1334.139351] ? lock_release+0xc8/0x270 [ 1334.139390] ? __fget_files+0x20d/0x3b0 [ 1334.139439] __sys_sendmsg+0x150/0x200 [ 1334.139464] ? __pfx___sys_sendmsg+0x10/0x10 [ 1334.139503] ? __pfx_ksys_write+0x10/0x10 [ 1334.139527] ? irqentry_exit+0xee/0x650 [ 1334.139560] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1334.139597] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1334.139643] do_syscall_64+0xbf/0x420 [ 1334.139682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.139710] RIP: 0033:0x7f3b21b1bb19 [ 1334.139732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1334.139756] RSP: 002b:00007f3b1f091188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1334.139784] RAX: ffffffffffffffda RBX: 00007f3b21c2ef60 RCX: 00007f3b21b1bb19 [ 1334.139801] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1334.139816] RBP: 00007f3b1f0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1334.139831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1334.139847] R13: 00007ffe815263cf R14: 00007f3b1f091300 R15: 0000000000022000 [ 1334.139887] 14:52:00 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 57) [ 1334.348707] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:52:01 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 61) [ 1334.522837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1334.527622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1334.542526] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:52:13 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 62) 14:52:13 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 58) 14:52:13 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xd001, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:52:13 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xe084, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:52:13 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x200000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:52:13 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x7000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:52:13 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x1fffff, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:52:13 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_secret(0x80000) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0xf7, 0x2, 0x6c, 0x40, 0x0, 0xc1, 0x4000, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x4, 0x6}, 0x100, 0x20, 0x93, 0x1, 0xffffffff7fffffff, 0x7, 0x100, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r1, 0x2) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000280)) r2 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getflags(r3, 0xb) r4 = getpid() r5 = perf_event_open(&(0x7f0000000640)={0x4, 0x80, 0x4, 0x3, 0xb3, 0x7f, 0x0, 0x9e, 0x80000, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x10000, 0x4, @perf_config_ext={0x80000001, 0x6}, 0x4, 0x1, 0x400, 0x6, 0x80000000, 0x82, 0x1ff, 0x0, 0x9, 0x0, 0xd}, r4, 0x10, r3, 0x1) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xc3, 0x0, 0x21, 0x1, 0x0, 0x3, 0x40294, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xb}, 0x751, 0x1, 0x7cb, 0x2, 0xdf1e, 0x3, 0x4, 0x0, 0x683, 0x0, 0x8}, r4, 0xc, r0, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getflags(r6, 0xb) r7 = getpid() perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x1, 0x9, 0xea, 0x0, 0x1, 0x84180, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x1, 0x54}, 0x10051, 0x9, 0xffff8001, 0x2, 0x4, 0x5, 0x0, 0x0, 0x7, 0x0, 0x6}, 0xffffffffffffffff, 0x9, r5, 0x2) perf_event_open(&(0x7f0000000640)={0x4, 0x80, 0x4, 0x3, 0xb3, 0x7f, 0x0, 0x9e, 0x80000, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x10000, 0x4, @perf_config_ext={0x80000001, 0x6}, 0x4, 0x1, 0x400, 0x6, 0x80000000, 0x82, 0x1ff, 0x0, 0x9, 0x0, 0xd}, r7, 0x10, r6, 0x1) getpgid(r7) [ 1346.949476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1346.951724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1346.977489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1346.981178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1346.982105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1346.984987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1346.998134] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1347.023829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1347.027744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1347.062004] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1347.073935] FAULT_INJECTION: forcing a failure. [ 1347.073935] name failslab, interval 1, probability 0, space 0, times 0 [ 1347.076821] CPU: 1 UID: 0 PID: 9211 Comm: syz-executor.4 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1347.076854] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1347.076868] Call Trace: [ 1347.076876] [ 1347.076886] dump_stack_lvl+0xfa/0x120 [ 1347.076935] should_fail_ex+0x4d7/0x5e0 [ 1347.076960] ? kobject_get_path+0xc8/0x200 [ 1347.076999] ? kobject_get_path+0xc8/0x200 [ 1347.077034] should_failslab+0xc2/0x120 [ 1347.077063] __kmalloc_noprof+0xc4/0x710 [ 1347.077100] ? __create_object+0x59/0x80 [ 1347.077137] kobject_get_path+0xc8/0x200 [ 1347.077173] ? kasan_save_track+0x14/0x30 [ 1347.077207] kobject_uevent_env+0x260/0xfd0 [ 1347.077238] ? bus_to_subsys+0x10e/0x150 [ 1347.077274] device_add+0xf96/0x1830 [ 1347.077316] ? __pfx_device_add+0x10/0x10 [ 1347.077351] ? kfree+0x1ec/0x570 [ 1347.077397] device_create_groups_vargs+0x207/0x280 [ 1347.077427] device_create+0xdf/0x120 [ 1347.077452] ? __pfx_device_create+0x10/0x10 [ 1347.077477] ? timer_init_key+0x12e/0x280 [ 1347.077513] ? ieee80211_roc_setup+0x136/0x270 [ 1347.077546] ? ieee80211_alloc_hw_nm+0x228/0x21a0 [ 1347.077579] mac80211_hwsim_new_radio+0x37a/0x52a0 [ 1347.077615] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1347.077652] ? do_trace_netlink_extack+0x12a/0x150 [ 1347.077686] ? __nla_validate_parse+0x2e6/0x2880 [ 1347.077716] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1347.077757] hwsim_new_radio_nl+0xb61/0x1300 [ 1347.077780] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1347.077812] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1347.077841] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1347.077882] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1347.077911] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1347.077949] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1347.077979] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1347.078022] ? security_capable+0x2f/0x90 [ 1347.078062] ? ns_capable+0xe2/0x120 [ 1347.078103] genl_rcv_msg+0x532/0x7e0 [ 1347.078136] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1347.078164] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1347.078191] ? __lock_acquire+0x451/0x2250 [ 1347.078233] netlink_rcv_skb+0x147/0x430 [ 1347.078258] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1347.078288] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1347.078330] ? netlink_deliver_tap+0x1af/0xcb0 [ 1347.078375] genl_rcv+0x28/0x40 [ 1347.078398] netlink_unicast+0x5a7/0x870 [ 1347.078428] ? __pfx_netlink_unicast+0x10/0x10 [ 1347.078453] ? __virt_addr_valid+0x100/0x5d0 [ 1347.078494] netlink_sendmsg+0x8a3/0xd80 [ 1347.078525] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1347.078567] ____sys_sendmsg+0xa38/0xbf0 [ 1347.078600] ? copy_msghdr_from_user+0xfb/0x150 [ 1347.078624] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1347.078667] ? lock_acquire+0x15e/0x2d0 [ 1347.078702] ___sys_sendmsg+0x10f/0x1b0 [ 1347.078726] ? __pfx____sys_sendmsg+0x10/0x10 [ 1347.078746] ? perf_trace_lock+0xbb/0x4f0 [ 1347.078785] ? __pfx_perf_trace_lock+0x10/0x10 [ 1347.078815] ? proc_fail_nth_write+0x97/0x220 [ 1347.078853] ? lock_acquire+0x15e/0x2d0 [ 1347.078882] ? __fget_files+0x34/0x3b0 [ 1347.078908] ? find_held_lock+0x2b/0x80 [ 1347.078930] ? __fget_files+0x203/0x3b0 [ 1347.078955] ? lock_release+0xc8/0x270 [ 1347.078990] ? __fget_files+0x20d/0x3b0 [ 1347.079030] __sys_sendmsg+0x150/0x200 [ 1347.079053] ? __pfx___sys_sendmsg+0x10/0x10 [ 1347.079089] ? __pfx_ksys_write+0x10/0x10 [ 1347.079112] ? irqentry_exit+0xee/0x650 [ 1347.079140] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1347.079170] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1347.079211] do_syscall_64+0xbf/0x420 [ 1347.079247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1347.079271] RIP: 0033:0x7f3b21b1bb19 [ 1347.079290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1347.079311] RSP: 002b:00007f3b1f091188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1347.079334] RAX: ffffffffffffffda RBX: 00007f3b21c2ef60 RCX: 00007f3b21b1bb19 [ 1347.079350] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1347.079364] RBP: 00007f3b1f0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1347.079377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1347.079391] R13: 00007ffe815263cf R14: 00007f3b1f091300 R15: 0000000000022000 [ 1347.079429] 14:52:13 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 59) [ 1347.302847] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1347.310784] FAULT_INJECTION: forcing a failure. [ 1347.310784] name failslab, interval 1, probability 0, space 0, times 0 [ 1347.312494] CPU: 0 UID: 0 PID: 9218 Comm: syz-executor.3 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1347.312512] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1347.312521] Call Trace: [ 1347.312526] [ 1347.312531] dump_stack_lvl+0xfa/0x120 [ 1347.312559] should_fail_ex+0x4d7/0x5e0 [ 1347.312577] ? __alloc_skb+0x14c/0x6e0 [ 1347.312597] should_failslab+0xc2/0x120 [ 1347.312614] kmem_cache_alloc_node_noprof+0x6c/0x690 [ 1347.312629] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1347.312651] __alloc_skb+0x14c/0x6e0 [ 1347.312669] ? __alloc_skb+0x5aa/0x6e0 [ 1347.312688] ? __pfx___alloc_skb+0x10/0x10 [ 1347.312709] ? netlink_has_listeners+0x20d/0x430 [ 1347.312730] ? lock_release+0xc8/0x270 [ 1347.312749] alloc_uevent_skb+0x7b/0x210 [ 1347.312766] kobject_uevent_env+0xad2/0xfd0 [ 1347.312783] ? bus_to_subsys+0x10e/0x150 [ 1347.312804] device_add+0xf96/0x1830 [ 1347.312827] ? __pfx_device_add+0x10/0x10 [ 1347.312846] ? kfree+0x1ec/0x570 [ 1347.312872] device_create_groups_vargs+0x207/0x280 [ 1347.312893] device_create+0xdf/0x120 [ 1347.312907] ? __pfx_device_create+0x10/0x10 [ 1347.312921] ? timer_init_key+0x12e/0x280 [ 1347.312941] ? ieee80211_roc_setup+0x136/0x270 [ 1347.312962] ? ieee80211_alloc_hw_nm+0x228/0x21a0 [ 1347.312981] mac80211_hwsim_new_radio+0x37a/0x52a0 [ 1347.313001] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1347.313022] ? do_trace_netlink_extack+0x12a/0x150 [ 1347.313039] ? __nla_validate_parse+0x2e6/0x2880 [ 1347.313056] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1347.313078] hwsim_new_radio_nl+0xb61/0x1300 [ 1347.313091] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1347.313107] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1347.313123] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1347.313145] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1347.313160] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1347.313181] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1347.313197] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1347.313221] ? security_capable+0x2f/0x90 [ 1347.313243] ? ns_capable+0xe2/0x120 [ 1347.313267] genl_rcv_msg+0x532/0x7e0 [ 1347.313285] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1347.313300] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1347.313315] ? __lock_acquire+0x451/0x2250 [ 1347.313338] netlink_rcv_skb+0x147/0x430 [ 1347.313351] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1347.313367] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1347.313390] ? netlink_deliver_tap+0x1af/0xcb0 [ 1347.313414] genl_rcv+0x28/0x40 [ 1347.313427] netlink_unicast+0x5a7/0x870 [ 1347.313443] ? __pfx_netlink_unicast+0x10/0x10 [ 1347.313457] ? __virt_addr_valid+0x100/0x5d0 [ 1347.313480] netlink_sendmsg+0x8a3/0xd80 [ 1347.313497] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1347.313520] ____sys_sendmsg+0xa38/0xbf0 [ 1347.313538] ? copy_msghdr_from_user+0xfb/0x150 [ 1347.313551] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1347.313571] ? __pfx_perf_tp_event+0x10/0x10 [ 1347.313587] ? lock_acquire+0x15e/0x2d0 [ 1347.313606] ___sys_sendmsg+0x10f/0x1b0 [ 1347.313620] ? __pfx____sys_sendmsg+0x10/0x10 [ 1347.313631] ? perf_trace_lock+0xbb/0x4f0 [ 1347.313651] ? __pfx_perf_trace_lock+0x10/0x10 [ 1347.313667] ? proc_fail_nth_write+0x97/0x220 [ 1347.313689] ? lock_acquire+0x15e/0x2d0 [ 1347.313704] ? __fget_files+0x34/0x3b0 [ 1347.313719] ? find_held_lock+0x2b/0x80 [ 1347.313731] ? __fget_files+0x203/0x3b0 [ 1347.313745] ? lock_release+0xc8/0x270 [ 1347.313764] ? __fget_files+0x20d/0x3b0 [ 1347.313786] __sys_sendmsg+0x150/0x200 [ 1347.313798] ? __pfx___sys_sendmsg+0x10/0x10 [ 1347.313809] ? perf_trace_preemptirq_template+0x259/0x430 [ 1347.313835] ? __pfx_ksys_write+0x10/0x10 [ 1347.313847] ? irqentry_exit+0xee/0x650 [ 1347.313863] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1347.313879] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1347.313901] do_syscall_64+0xbf/0x420 [ 1347.313920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1347.313934] RIP: 0033:0x7fbd3c214b19 [ 1347.313945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1347.313957] RSP: 002b:00007fbd3978a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1347.313970] RAX: ffffffffffffffda RBX: 00007fbd3c327f60 RCX: 00007fbd3c214b19 [ 1347.313979] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1347.313986] RBP: 00007fbd3978a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1347.313994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1347.314001] R13: 00007fffae4888ff R14: 00007fbd3978a300 R15: 0000000000022000 [ 1347.314021] 14:52:13 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 63) [ 1347.468350] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:52:14 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xe084, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:52:14 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x200000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:52:14 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x10040, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:52:14 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x1000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1347.562081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1347.565670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:52:14 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 60) 14:52:14 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x18000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1347.668633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 14:52:14 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080)={0x0, 0x4000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) sendfile(r2, r1, &(0x7f0000000180)=0x7, 0x10001) [ 1347.701230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1347.707768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1347.709710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1347.721035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1347.725833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1347.744410] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1348.072249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1348.073372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1348.221535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1348.223796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:52:35 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 64) 14:52:35 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xfccf, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:52:35 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x80000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:52:35 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x1000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:52:35 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x2000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:52:35 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x20000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:52:35 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 61) 14:52:35 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000440)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x2, 0x1, 0x69, 0x10, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, 'OZ |'}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x3f, 0x80, 0xe3}, {0x6, 0x24, 0x1a, 0x5, 0x3}, [@acm={0x4, 0x24, 0x2, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xc4}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x1f, 0x80, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x8, 0x40, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0x0, 0x12}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x8, 0x80, 0x40}}}}}}}]}}, &(0x7f0000000a40)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x1, 0x1, 0x1f, 0x8, 0x7f}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0xa, [{0xd4, &(0x7f0000000500)=@string={0xd4, 0x3, "a44c434e32939e83c7d6b98eea8fa2ff45c933a85727ed0b440c28f6b27ccc56b04c1a1ffc9fe3a0a14fee5fec1f1669467a3bf6bf4143373325421d3602401ba183f966054f573c10ed798661643413b172694c5ba293cba8389a0b8d00eb5a0ddcb4b8fb64b183d41e369ae9112b9fd37ec9c7909c054eeddbb710abd24f2c1930b81231085ccd87b2dda9b9110020390775b6107de4f5ec41faaf59838f8146ae290fbc271d20cf262978d57bbfceefdec98ae406b8b5e3d05af7bbe41c01cb49a091a6a919880c37c030c0373c7bff17"}}, {0xcb, &(0x7f0000000b00)=@string={0xcb, 0x3, "dac3085d5214a8e4dc449dff7f5c52646782281f155906f21202be3708f94af36efaa2ef6131d50ba1756c12ec34152b5472364df0cf593db8e5c1d82fd6df5c8569dfcfea7cba345ee57bf07475fd1f1c5198e56ec69f1327726514f972d393d5626134ce96a90f621113b93aea28726f80a1925adf8c903842b7120726e9e12cd1e45aca8c8670007326688ba00cbed7250cf29ee1362648bc634583e764d32855794e6d8a9d6bda0cf5c1edccd226fa1a570d3523fb2d6fa84f9d974a5b1aa3e212ac3f45d6d912"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1c09}}, {0xc, &(0x7f0000000700)=@string={0xc, 0x3, "0e750805441acca9d1d6"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x42d}}, {0xf5, &(0x7f0000000780)=@string={0xa5fe7d8a5a011506, 0x3, "effee009626778cb9a895edc3d3f21db494a94b60f680dd9666b2ecd14c57d105e651dfa7a066f06a762b8b1da06d898a2351f76ec210a0bb14f55f15f50b3b6d9eff746d1c59cb3eecabdfc672c4c8b4f0847f6aa5b87f5f5c336ed4a9394c544330ad970b914c6cb6ed1a5c6949956038ed3a1f723611fbb6803cfe12114e546c6d9d85b028ae5a1c1414a38543698bb1747477dd89b1ac94bb1b130da0d35858506459ac56ca8028a7245592e85b5c9a6cec0b38d1803e34e02a51bad8cd694d7824222ca05747743d93b8ca006b25548ec812f10095a1f5d7543376316cff3a2b6a3e7a1982b915c980ea379ea8a84b406"}}, {0x2, &(0x7f0000000880)=@string={0x2}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x62}}, {0xcc, &(0x7f0000000900)=@string={0xcc, 0x3, "bcd3b8c570a568b565a6519a0aae8c6b3a0c015cc6be6c36958c4415e8de14e5b717d31c2d775efb5c48a111123469881f46cc44dc9e0a41d931dac72b6d1e1ea394a27adb4c897b808449c279e1842d18d4f099ee9fc3e4932db6f3f624870e93dde1e2efc7e994d8ce28c1e54eab70ddf4020e30f45c8ae448db7d5cd6d43317a37ecfd2234f7084889122731f43f6ab04cd047c5da92d0d51163b800a6e93f2f75db5dd25f74ad687d275ef008e8d6b31b91b44bed2a9699bc8bcc9442ed4ff3ba9d0f416b5a067d6"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x446}}]}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) clone3(&(0x7f0000000340)={0x8080000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x37}, &(0x7f0000000200)=""/188, 0xbc, &(0x7f00000002c0)=""/39, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x7}, 0x58) fcntl$lock(r0, 0x5, &(0x7f0000000400)={0x0, 0x0, 0x5, 0x3, r1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1368.896220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1368.898510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1368.932871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1368.942779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1368.951760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1368.953867] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1368.958522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1368.962331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1368.965154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1368.965743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1368.968654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1368.981661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1368.986605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1369.107055] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:52:35 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 62) [ 1369.313546] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:52:36 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 65) 14:52:36 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x1fffff, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1369.460804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1369.466229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1369.475612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1369.483180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:52:36 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1369.548847] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1369.554876] FAULT_INJECTION: forcing a failure. [ 1369.554876] name failslab, interval 1, probability 0, space 0, times 0 [ 1369.557655] CPU: 1 UID: 0 PID: 9266 Comm: syz-executor.4 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1369.557687] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1369.557701] Call Trace: [ 1369.557709] [ 1369.557719] dump_stack_lvl+0xfa/0x120 [ 1369.557762] should_fail_ex+0x4d7/0x5e0 [ 1369.557795] ? skb_clone+0x191/0x400 [ 1369.557817] should_failslab+0xc2/0x120 [ 1369.557847] kmem_cache_alloc_noprof+0x69/0x630 [ 1369.557880] skb_clone+0x191/0x400 [ 1369.557913] netlink_broadcast_filtered+0xab1/0xe90 [ 1369.557972] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 1369.558024] netlink_broadcast+0x39/0x50 [ 1369.558065] kobject_uevent_env+0xa88/0xfd0 [ 1369.558097] ? bus_to_subsys+0x10e/0x150 [ 1369.558133] device_add+0xf96/0x1830 [ 1369.558174] ? __pfx_device_add+0x10/0x10 [ 1369.558210] ? kfree+0x1ec/0x570 [ 1369.558257] device_create_groups_vargs+0x207/0x280 [ 1369.558287] device_create+0xdf/0x120 [ 1369.558312] ? __pfx_device_create+0x10/0x10 [ 1369.558337] ? timer_init_key+0x12e/0x280 [ 1369.558374] ? ieee80211_roc_setup+0x136/0x270 [ 1369.558408] ? ieee80211_alloc_hw_nm+0x228/0x21a0 [ 1369.558442] mac80211_hwsim_new_radio+0x37a/0x52a0 [ 1369.558478] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1369.558516] ? do_trace_netlink_extack+0x12a/0x150 [ 1369.558548] ? __nla_validate_parse+0x2e6/0x2880 [ 1369.558579] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1369.558620] hwsim_new_radio_nl+0xb61/0x1300 [ 1369.558643] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1369.558675] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1369.558705] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1369.558745] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1369.558775] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1369.558813] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1369.558843] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1369.558887] ? security_capable+0x2f/0x90 [ 1369.558928] ? ns_capable+0xe2/0x120 [ 1369.558970] genl_rcv_msg+0x532/0x7e0 [ 1369.559003] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1369.559032] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1369.559058] ? __lock_acquire+0x451/0x2250 [ 1369.559101] netlink_rcv_skb+0x147/0x430 [ 1369.559126] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1369.559156] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1369.559200] ? netlink_deliver_tap+0x1af/0xcb0 [ 1369.559244] genl_rcv+0x28/0x40 [ 1369.559268] netlink_unicast+0x5a7/0x870 [ 1369.559298] ? __pfx_netlink_unicast+0x10/0x10 [ 1369.559323] ? __virt_addr_valid+0x100/0x5d0 [ 1369.559365] netlink_sendmsg+0x8a3/0xd80 [ 1369.559398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1369.559440] ____sys_sendmsg+0xa38/0xbf0 [ 1369.559472] ? copy_msghdr_from_user+0xfb/0x150 [ 1369.559496] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1369.559539] ? lock_acquire+0x15e/0x2d0 [ 1369.559574] ___sys_sendmsg+0x10f/0x1b0 [ 1369.559599] ? __pfx____sys_sendmsg+0x10/0x10 [ 1369.559620] ? perf_trace_lock+0xbb/0x4f0 [ 1369.559659] ? __pfx_perf_trace_lock+0x10/0x10 [ 1369.559689] ? proc_fail_nth_write+0x97/0x220 [ 1369.559727] ? lock_acquire+0x15e/0x2d0 [ 1369.559756] ? __fget_files+0x34/0x3b0 [ 1369.559783] ? find_held_lock+0x2b/0x80 [ 1369.559806] ? __fget_files+0x203/0x3b0 [ 1369.559831] ? lock_release+0xc8/0x270 [ 1369.559866] ? __fget_files+0x20d/0x3b0 [ 1369.559907] __sys_sendmsg+0x150/0x200 [ 1369.559930] ? __pfx___sys_sendmsg+0x10/0x10 [ 1369.559967] ? __pfx_ksys_write+0x10/0x10 [ 1369.559990] ? irqentry_exit+0xee/0x650 [ 1369.560018] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1369.560056] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1369.560098] do_syscall_64+0xbf/0x420 [ 1369.560133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1369.560157] RIP: 0033:0x7f3b21b1bb19 [ 1369.560176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1369.560199] RSP: 002b:00007f3b1f091188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1369.560222] RAX: ffffffffffffffda RBX: 00007f3b21c2ef60 RCX: 00007f3b21b1bb19 [ 1369.560238] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1369.560252] RBP: 00007f3b1f0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1369.560267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1369.560281] R13: 00007ffe815263cf R14: 00007f3b1f091300 R15: 0000000000022000 [ 1369.560319] 14:52:36 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3e000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:52:36 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x2000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1369.689846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1369.697964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1369.700877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1369.704724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1369.707862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1369.713537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1369.715748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1369.718544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1369.718676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1369.721297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1370.216187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1370.218874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1370.232518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1370.243594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:52:49 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 63) 14:52:49 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3f000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:52:49 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:52:49 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 66) 14:52:49 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xfdcf, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:52:49 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x7, 0x3, &(0x7f0000000300)=[{&(0x7f00000001c0)="b0731287edb2b1d3", 0x8, 0x4}, {&(0x7f0000000200)="cc62d0bdb387bd06dbfc148aaa99a621d91019a739835abeb7263071cdecdf5ce20e2bb344af871b39aea3ebef9d1b7762258b675c30bf8255730ea174acdc43c55415", 0x43, 0x7}, {&(0x7f0000000280)="776269a6a957ad9d4aff5c8307bca2976df9fadb5df536ef3b3a87da9bec264313121379fa51fe683b339eccddad898b0c069ac4a098bf025f4f458e899f6ccf46b44cc4aed7e59f23d1870386149f33d725013725973abe164559783b8399e5", 0x60, 0xfed5}], 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00'/10, @ANYRESDEC=0xee00, @ANYRESOCT]) sendfile(r0, r1, &(0x7f0000000400)=0x5, 0x101) 14:52:49 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x200000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:52:49 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x4000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1383.392833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1383.397408] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1383.403660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1383.404355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1383.407683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1383.409744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1383.410881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1383.419829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1383.426694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1383.427856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1383.429582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1383.566939] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:52:50 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 64) [ 1383.752083] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1383.755549] FAULT_INJECTION: forcing a failure. [ 1383.755549] name failslab, interval 1, probability 0, space 0, times 0 [ 1383.758351] CPU: 0 UID: 0 PID: 9299 Comm: syz-executor.3 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1383.758396] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1383.758422] Call Trace: [ 1383.758433] [ 1383.758444] dump_stack_lvl+0xfa/0x120 [ 1383.758500] should_fail_ex+0x4d7/0x5e0 [ 1383.758538] ? skb_clone+0x191/0x400 [ 1383.758566] should_failslab+0xc2/0x120 [ 1383.758605] kmem_cache_alloc_noprof+0x69/0x630 [ 1383.758649] skb_clone+0x191/0x400 [ 1383.758678] netlink_broadcast_filtered+0xab1/0xe90 [ 1383.758748] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 1383.758831] netlink_broadcast+0x39/0x50 [ 1383.758901] kobject_uevent_env+0xa88/0xfd0 [ 1383.758948] ? bus_to_subsys+0x10e/0x150 [ 1383.759002] device_add+0xf96/0x1830 [ 1383.759063] ? __pfx_device_add+0x10/0x10 [ 1383.759113] ? kfree+0x1ec/0x570 [ 1383.759181] device_create_groups_vargs+0x207/0x280 [ 1383.759223] device_create+0xdf/0x120 [ 1383.759254] ? __pfx_device_create+0x10/0x10 [ 1383.759292] ? timer_init_key+0x12e/0x280 [ 1383.759340] ? ieee80211_roc_setup+0x136/0x270 [ 1383.759385] ? ieee80211_alloc_hw_nm+0x228/0x21a0 [ 1383.759432] mac80211_hwsim_new_radio+0x37a/0x52a0 [ 1383.759477] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1383.759531] ? do_trace_netlink_extack+0x12a/0x150 [ 1383.759582] ? __nla_validate_parse+0x2e6/0x2880 [ 1383.759632] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1383.759685] hwsim_new_radio_nl+0xb61/0x1300 [ 1383.759721] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1383.759771] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1383.759811] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1383.759864] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1383.759905] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1383.759957] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1383.759995] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1383.760056] ? security_capable+0x2f/0x90 [ 1383.760111] ? ns_capable+0xe2/0x120 [ 1383.760168] genl_rcv_msg+0x532/0x7e0 [ 1383.760205] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1383.760243] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1383.760280] ? __lock_acquire+0x451/0x2250 [ 1383.760336] netlink_rcv_skb+0x147/0x430 [ 1383.760367] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1383.760412] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1383.760467] ? netlink_deliver_tap+0x1af/0xcb0 [ 1383.760529] genl_rcv+0x28/0x40 [ 1383.760561] netlink_unicast+0x5a7/0x870 [ 1383.760607] ? __pfx_netlink_unicast+0x10/0x10 [ 1383.760638] ? __virt_addr_valid+0x100/0x5d0 [ 1383.760691] netlink_sendmsg+0x8a3/0xd80 [ 1383.760739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1383.760789] ____sys_sendmsg+0xa38/0xbf0 [ 1383.760829] ? copy_msghdr_from_user+0xfb/0x150 [ 1383.760862] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1383.760909] ? __pfx_perf_tp_event+0x10/0x10 [ 1383.760953] ? lock_acquire+0x15e/0x2d0 [ 1383.760998] ___sys_sendmsg+0x10f/0x1b0 [ 1383.761025] ? __pfx____sys_sendmsg+0x10/0x10 [ 1383.761051] ? perf_trace_lock+0xbb/0x4f0 [ 1383.761108] ? __pfx_perf_trace_lock+0x10/0x10 [ 1383.761150] ? proc_fail_nth_write+0x97/0x220 [ 1383.761198] ? lock_acquire+0x15e/0x2d0 [ 1383.761241] ? __fget_files+0x34/0x3b0 [ 1383.761273] ? find_held_lock+0x2b/0x80 [ 1383.761304] ? __fget_files+0x203/0x3b0 [ 1383.761342] ? lock_release+0xc8/0x270 [ 1383.761396] ? __fget_files+0x20d/0x3b0 [ 1383.761444] __sys_sendmsg+0x150/0x200 [ 1383.761472] ? __pfx___sys_sendmsg+0x10/0x10 [ 1383.761500] ? perf_trace_preemptirq_template+0x259/0x430 [ 1383.761564] ? __pfx_ksys_write+0x10/0x10 [ 1383.761593] ? irqentry_exit+0xee/0x650 [ 1383.761629] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1383.761678] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1383.761748] do_syscall_64+0xbf/0x420 [ 1383.761810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.761846] RIP: 0033:0x7fbd3c214b19 [ 1383.761872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1383.761910] RSP: 002b:00007fbd3978a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1383.761941] RAX: ffffffffffffffda RBX: 00007fbd3c327f60 RCX: 00007fbd3c214b19 [ 1383.761966] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1383.761987] RBP: 00007fbd3978a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1383.762007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1383.762025] R13: 00007fffae4888ff R14: 00007fbd3978a300 R15: 0000000000022000 [ 1383.762077] 14:52:50 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xfecf, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:52:50 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 67) [ 1383.932107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1383.935281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1383.936383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1383.949476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1383.949784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1383.955110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:52:50 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x40000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:52:50 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x5000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:52:50 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080)={0x0, 0x40}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getflags(r1, 0xb) r2 = getpid() perf_event_open(&(0x7f0000000640)={0x4, 0x80, 0x4, 0x3, 0xb3, 0x7f, 0x0, 0x9e, 0x80000, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x10000, 0x4, @perf_config_ext={0x80000001, 0x6}, 0x4, 0x1, 0x400, 0x6, 0x80000000, 0x82, 0x1ff, 0x0, 0x9, 0x0, 0xd}, r2, 0x10, r1, 0x1) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x1f, 0xfa, 0xa7, 0x0, 0x0, 0xd52, 0x800a2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x469, 0x4, @perf_bp={&(0x7f0000000100), 0xf}, 0x84, 0x4000000000, 0xcf, 0x9, 0x81, 0x8, 0x7, 0x0, 0x1, 0x0, 0x600000}, r2, 0x3, 0xffffffffffffffff, 0xa) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x400803, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000240)}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/188, 0xbc}, {&(0x7f0000000400)=""/228, 0xe4}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/252, 0xfc}, {&(0x7f00000026c0)=""/253, 0xfd}, {&(0x7f0000000340)=""/48, 0x30}, {&(0x7f0000000380)=""/10, 0xa}], 0x9) 14:52:50 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x1000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1384.107336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1384.115019] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1384.118254] FAULT_INJECTION: forcing a failure. [ 1384.118254] name failslab, interval 1, probability 0, space 0, times 0 [ 1384.124951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1384.129042] CPU: 0 UID: 0 PID: 9303 Comm: syz-executor.4 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1384.129076] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1384.129090] Call Trace: [ 1384.129098] [ 1384.129108] dump_stack_lvl+0xfa/0x120 [ 1384.129151] should_fail_ex+0x4d7/0x5e0 [ 1384.129184] ? __kernfs_new_node+0xd3/0x940 [ 1384.129220] should_failslab+0xc2/0x120 [ 1384.129251] kmem_cache_alloc_noprof+0x69/0x630 [ 1384.129284] __kernfs_new_node+0xd3/0x940 [ 1384.129318] ? __lock_acquire+0x451/0x2250 [ 1384.129357] ? __pfx___kernfs_new_node+0x10/0x10 [ 1384.129400] ? lock_acquire+0x15e/0x2d0 14:52:50 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x4000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1384.129430] ? kernfs_root+0x23/0x2a0 [ 1384.129465] ? find_held_lock+0x2b/0x80 [ 1384.129488] ? kernfs_root+0xee/0x2a0 [ 1384.129523] ? lock_release+0xc8/0x270 [ 1384.129551] ? lock_is_held_type+0x9e/0x120 [ 1384.129590] kernfs_new_node+0x13c/0x1e0 [ 1384.129621] kernfs_create_link+0xcf/0x240 [ 1384.129655] sysfs_do_create_link_sd+0x90/0x140 [ 1384.129695] sysfs_create_link+0x63/0xc0 [ 1384.129732] driver_sysfs_add+0x93/0x2d0 [ 1384.129771] device_bind_driver+0x17/0x70 [ 1384.129806] mac80211_hwsim_new_radio+0x3f8/0x52a0 [ 1384.129842] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1384.129880] ? do_trace_netlink_extack+0x12a/0x150 [ 1384.129923] ? __nla_validate_parse+0x2e6/0x2880 [ 1384.129954] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1384.129995] hwsim_new_radio_nl+0xb61/0x1300 [ 1384.130018] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1384.130049] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1384.130079] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1384.130120] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1384.130150] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1384.130189] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1384.130220] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1384.130264] ? security_capable+0x2f/0x90 [ 1384.130304] ? ns_capable+0xe2/0x120 [ 1384.130347] genl_rcv_msg+0x532/0x7e0 [ 1384.130381] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1384.130411] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1384.130438] ? __lock_acquire+0x451/0x2250 [ 1384.130482] netlink_rcv_skb+0x147/0x430 [ 1384.130507] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1384.130537] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1384.130580] ? netlink_deliver_tap+0x1af/0xcb0 [ 1384.130625] genl_rcv+0x28/0x40 [ 1384.130650] netlink_unicast+0x5a7/0x870 [ 1384.130681] ? __pfx_netlink_unicast+0x10/0x10 [ 1384.130706] ? __virt_addr_valid+0x100/0x5d0 [ 1384.130747] netlink_sendmsg+0x8a3/0xd80 [ 1384.130781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1384.130826] ____sys_sendmsg+0xa38/0xbf0 [ 1384.130860] ? copy_msghdr_from_user+0xfb/0x150 [ 1384.130885] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1384.130921] ? __pfx_perf_tp_event+0x10/0x10 [ 1384.130953] ? lock_acquire+0x15e/0x2d0 [ 1384.130989] ___sys_sendmsg+0x10f/0x1b0 [ 1384.131013] ? __pfx____sys_sendmsg+0x10/0x10 [ 1384.131034] ? perf_trace_lock+0xbb/0x4f0 [ 1384.131074] ? __pfx_perf_trace_lock+0x10/0x10 [ 1384.131105] ? proc_fail_nth_write+0x97/0x220 [ 1384.131146] ? lock_acquire+0x15e/0x2d0 [ 1384.131176] ? __fget_files+0x34/0x3b0 [ 1384.131204] ? find_held_lock+0x2b/0x80 [ 1384.131227] ? __fget_files+0x203/0x3b0 [ 1384.131253] ? lock_release+0xc8/0x270 [ 1384.131291] ? __fget_files+0x20d/0x3b0 [ 1384.131332] __sys_sendmsg+0x150/0x200 [ 1384.131357] ? __pfx___sys_sendmsg+0x10/0x10 [ 1384.131382] ? perf_trace_preemptirq_template+0x259/0x430 [ 1384.131432] ? __pfx_ksys_write+0x10/0x10 [ 1384.131455] ? irqentry_exit+0xee/0x650 [ 1384.131488] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1384.131519] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1384.131562] do_syscall_64+0xbf/0x420 [ 1384.131598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.131623] RIP: 0033:0x7f3b21b1bb19 [ 1384.131642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1384.131666] RSP: 002b:00007f3b1f091188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1384.131691] RAX: ffffffffffffffda RBX: 00007f3b21c2ef60 RCX: 00007f3b21b1bb19 [ 1384.131708] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1384.131722] RBP: 00007f3b1f0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1384.131737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1384.131751] R13: 00007ffe815263cf R14: 00007f3b1f091300 R15: 0000000000022000 [ 1384.131788] [ 1384.164841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 14:52:50 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 65) [ 1384.252731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1384.253638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1384.255010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1384.255558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1384.256767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1384.257068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1384.259532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1384.299985] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:53:02 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 68) 14:53:02 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xffcf, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:53:02 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 66) 14:53:02 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x40000100, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:53:02 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x6000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:53:02 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x2000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:53:02 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x5000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:53:02 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x53, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) syz_io_uring_setup(0x1828, &(0x7f0000000180)={0x0, 0x1404, 0x2, 0x3, 0x10b}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)=0x0) r3 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r4 = dup(r3) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r4, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x0, &(0x7f0000000000), 0x0, 0x4) syz_usb_connect$cdc_ecm(0x2, 0x59, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0x1, 0x90, 0xc2, [{{0x9, 0x4, 0x0, 0xe9, 0x2, 0x2, 0x6, 0x0, 0x1, {{0x8, 0x24, 0x6, 0x0, 0x0, "ec4f31"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x3, 0x9, 0x7}}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0x0, 0xe3}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x2, 0x26, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x71, 0x6d}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x250, 0x0, 0x0, 0x8, 0x10}, 0x20, &(0x7f0000000380)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x0, 0xa, 0x7fff}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "9662febcfe8628141e7519fbab0472bc"}]}, 0x6, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x813}}, {0x1f, &(0x7f0000000500)=@string={0x1f, 0x3, "1b48d3b55e85c86ce04b1357b32c8cc5d90631f7c6d1a543b5af47b28e"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x439}}, {0xce, &(0x7f0000000600)=@string={0xce, 0x3, "fe7f0355a91ca5e9dbf66f9f06e7ed55ec799f608010d7afc639ba8928ffbcbfc3f39aa4fdbea5b092394c390b39e543b78265b6e906d4f01d6d4901b57d95a4d6210fbdc1fe1bc5cecf2d5964376bb1525526d61fee95cb7d50e6be6c5b5e2e317ba9c46264d2f79de192f93f75924c5dd2e79dbfd6f45439b1f9cc2e9782b18d58eee5a3c960912471a020ac5c6ad2b10138e27cf421bfd6088cf7e079879b5f329b235e3ef650574423a0bd9e2e9a5fee227179d660aa9806a21adf341422765d40e2f90e0f378c775dd1"}}]}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x2, 0xac, 0x8, 0xc1}, {0x800, 0x40, 0x6, 0x80000}, {0xff, 0x7, 0x7, 0x3f}]}) r7 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x5, 0x0, r8) syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}, 0x52) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 1395.877787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1395.883594] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1395.887535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1395.889555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1395.894551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1395.898369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1395.899694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1395.902092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1395.905667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1395.912812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1395.920484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1395.920841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1395.922810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1395.992050] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:53:02 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 69) [ 1396.183578] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1396.186067] FAULT_INJECTION: forcing a failure. [ 1396.186067] name failslab, interval 1, probability 0, space 0, times 0 [ 1396.187095] CPU: 0 UID: 0 PID: 9344 Comm: syz-executor.4 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1396.187117] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1396.187127] Call Trace: [ 1396.187132] [ 1396.187138] dump_stack_lvl+0xfa/0x120 [ 1396.187167] should_fail_ex+0x4d7/0x5e0 [ 1396.187187] ? __kernfs_new_node+0xd3/0x940 [ 1396.187209] should_failslab+0xc2/0x120 [ 1396.187226] kmem_cache_alloc_noprof+0x69/0x630 [ 1396.187246] __kernfs_new_node+0xd3/0x940 [ 1396.187265] ? __lock_acquire+0x451/0x2250 [ 1396.187287] ? __pfx___kernfs_new_node+0x10/0x10 [ 1396.187311] ? lock_acquire+0x15e/0x2d0 [ 1396.187329] ? kernfs_root+0x23/0x2a0 [ 1396.187349] ? find_held_lock+0x2b/0x80 [ 1396.187362] ? kernfs_root+0xee/0x2a0 [ 1396.187382] ? lock_release+0xc8/0x270 [ 1396.187398] ? lock_is_held_type+0x9e/0x120 [ 1396.187420] kernfs_new_node+0x13c/0x1e0 [ 1396.187438] kernfs_create_link+0xcf/0x240 [ 1396.187459] sysfs_do_create_link_sd+0x90/0x140 [ 1396.187482] sysfs_create_link+0x63/0xc0 [ 1396.187502] driver_sysfs_add+0x93/0x2d0 [ 1396.187525] device_bind_driver+0x17/0x70 [ 1396.187545] mac80211_hwsim_new_radio+0x3f8/0x52a0 [ 1396.187566] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1396.187588] ? do_trace_netlink_extack+0x12a/0x150 [ 1396.187608] ? __nla_validate_parse+0x2e6/0x2880 [ 1396.187626] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1396.187649] hwsim_new_radio_nl+0xb61/0x1300 [ 1396.187663] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1396.187680] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1396.187697] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1396.187720] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1396.187737] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1396.187759] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1396.187777] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1396.187802] ? security_capable+0x2f/0x90 [ 1396.187826] ? ns_capable+0xe2/0x120 [ 1396.187851] genl_rcv_msg+0x532/0x7e0 [ 1396.187869] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1396.187890] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1396.187906] ? __lock_acquire+0x451/0x2250 [ 1396.187930] netlink_rcv_skb+0x147/0x430 [ 1396.187944] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1396.187962] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1396.187986] ? netlink_deliver_tap+0x1af/0xcb0 [ 1396.188012] genl_rcv+0x28/0x40 [ 1396.188025] netlink_unicast+0x5a7/0x870 [ 1396.188042] ? __pfx_netlink_unicast+0x10/0x10 [ 1396.188057] ? __virt_addr_valid+0x100/0x5d0 [ 1396.188081] netlink_sendmsg+0x8a3/0xd80 [ 1396.188099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1396.188123] ____sys_sendmsg+0xa38/0xbf0 [ 1396.188142] ? copy_msghdr_from_user+0xfb/0x150 [ 1396.188157] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1396.188178] ? __pfx_perf_tp_event+0x10/0x10 [ 1396.188195] ? lock_acquire+0x15e/0x2d0 [ 1396.188216] ___sys_sendmsg+0x10f/0x1b0 [ 1396.188230] ? __pfx____sys_sendmsg+0x10/0x10 [ 1396.188242] ? perf_trace_lock+0xbb/0x4f0 [ 1396.188265] ? __pfx_perf_trace_lock+0x10/0x10 [ 1396.188282] ? proc_fail_nth_write+0x97/0x220 [ 1396.188304] ? lock_acquire+0x15e/0x2d0 [ 1396.188321] ? __fget_files+0x34/0x3b0 [ 1396.188337] ? find_held_lock+0x2b/0x80 [ 1396.188350] ? __fget_files+0x203/0x3b0 [ 1396.188365] ? lock_release+0xc8/0x270 [ 1396.188385] ? __fget_files+0x20d/0x3b0 [ 1396.188408] __sys_sendmsg+0x150/0x200 [ 1396.188421] ? __pfx___sys_sendmsg+0x10/0x10 [ 1396.188433] ? perf_trace_preemptirq_template+0x259/0x430 [ 1396.188461] ? __pfx_ksys_write+0x10/0x10 [ 1396.188474] ? irqentry_exit+0xee/0x650 [ 1396.188490] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1396.188507] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1396.188531] do_syscall_64+0xbf/0x420 [ 1396.188552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1396.188566] RIP: 0033:0x7f3b21b1bb19 [ 1396.188577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1396.188589] RSP: 002b:00007f3b1f091188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1396.188603] RAX: ffffffffffffffda RBX: 00007f3b21c2ef60 RCX: 00007f3b21b1bb19 [ 1396.188612] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1396.188620] RBP: 00007f3b1f0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1396.188628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1396.188635] R13: 00007ffe815263cf R14: 00007f3b1f091300 R15: 0000000000022000 [ 1396.188656] 14:53:02 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 67) [ 1396.306430] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1396.315201] FAULT_INJECTION: forcing a failure. [ 1396.315201] name failslab, interval 1, probability 0, space 0, times 0 14:53:02 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 70) [ 1396.339162] CPU: 0 UID: 0 PID: 9349 Comm: syz-executor.3 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1396.339186] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1396.339197] Call Trace: [ 1396.339203] [ 1396.339210] dump_stack_lvl+0xfa/0x120 [ 1396.339240] should_fail_ex+0x4d7/0x5e0 [ 1396.339262] should_failslab+0xc2/0x120 [ 1396.339280] __kmalloc_node_track_caller_noprof+0xc6/0x760 [ 1396.339307] ? kstrdup_const+0x57/0x80 [ 1396.339333] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1396.339355] kstrdup+0x3e/0xc0 [ 1396.339377] kstrdup_const+0x57/0x80 [ 1396.339401] __kernfs_new_node+0x9c/0x940 [ 1396.339429] ? __lock_acquire+0x451/0x2250 [ 1396.339451] ? __pfx___kernfs_new_node+0x10/0x10 [ 1396.339476] ? lock_acquire+0x15e/0x2d0 [ 1396.339493] ? kernfs_root+0x23/0x2a0 [ 1396.339512] ? find_held_lock+0x2b/0x80 [ 1396.339525] ? kernfs_root+0xee/0x2a0 [ 1396.339545] ? lock_release+0xc8/0x270 [ 1396.339562] ? lock_is_held_type+0x9e/0x120 [ 1396.339583] kernfs_new_node+0x13c/0x1e0 [ 1396.339600] kernfs_create_link+0xcf/0x240 [ 1396.339620] sysfs_do_create_link_sd+0x90/0x140 [ 1396.339643] sysfs_create_link+0x63/0xc0 [ 1396.339664] driver_sysfs_add+0x93/0x2d0 [ 1396.339687] device_bind_driver+0x17/0x70 [ 1396.339708] mac80211_hwsim_new_radio+0x3f8/0x52a0 [ 1396.339731] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1396.339754] ? do_trace_netlink_extack+0x12a/0x150 [ 1396.339774] ? __nla_validate_parse+0x2e6/0x2880 [ 1396.339792] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1396.339814] hwsim_new_radio_nl+0xb61/0x1300 [ 1396.339832] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1396.339851] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1396.339867] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1396.339889] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1396.339910] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1396.339932] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1396.339949] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1396.339975] ? security_capable+0x2f/0x90 [ 1396.339998] ? ns_capable+0xe2/0x120 [ 1396.340023] genl_rcv_msg+0x532/0x7e0 [ 1396.340044] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1396.340061] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1396.340077] ? __lock_acquire+0x451/0x2250 [ 1396.340105] netlink_rcv_skb+0x147/0x430 [ 1396.340119] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1396.340136] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1396.340160] ? netlink_deliver_tap+0x1af/0xcb0 [ 1396.340187] genl_rcv+0x28/0x40 [ 1396.340202] netlink_unicast+0x5a7/0x870 [ 1396.340223] ? __pfx_netlink_unicast+0x10/0x10 [ 1396.340240] ? __virt_addr_valid+0x100/0x5d0 [ 1396.340263] netlink_sendmsg+0x8a3/0xd80 [ 1396.340281] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1396.340304] ____sys_sendmsg+0xa38/0xbf0 [ 1396.340324] ? copy_msghdr_from_user+0xfb/0x150 [ 1396.340338] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1396.340361] ? lock_acquire+0x15e/0x2d0 [ 1396.340381] ___sys_sendmsg+0x10f/0x1b0 [ 1396.340394] ? __pfx____sys_sendmsg+0x10/0x10 [ 1396.340405] ? perf_trace_lock+0xbb/0x4f0 [ 1396.340429] ? __pfx_perf_trace_lock+0x10/0x10 [ 1396.340450] ? proc_fail_nth_write+0x97/0x220 [ 1396.340474] ? lock_acquire+0x15e/0x2d0 [ 1396.340494] ? __fget_files+0x34/0x3b0 [ 1396.340512] ? find_held_lock+0x2b/0x80 [ 1396.340525] ? __fget_files+0x203/0x3b0 [ 1396.340544] ? lock_release+0xc8/0x270 [ 1396.340564] ? __fget_files+0x20d/0x3b0 [ 1396.340586] __sys_sendmsg+0x150/0x200 [ 1396.340599] ? __pfx___sys_sendmsg+0x10/0x10 [ 1396.340621] ? __pfx_ksys_write+0x10/0x10 [ 1396.340638] ? irqentry_exit+0xee/0x650 [ 1396.340658] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1396.340683] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1396.340708] do_syscall_64+0xbf/0x420 [ 1396.340741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1396.340759] RIP: 0033:0x7fbd3c214b19 [ 1396.340774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1396.340789] RSP: 002b:00007fbd3978a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1396.340809] RAX: ffffffffffffffda RBX: 00007fbd3c327f60 RCX: 00007fbd3c214b19 [ 1396.340819] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1396.340829] RBP: 00007fbd3978a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1396.340841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1396.340849] R13: 00007fffae4888ff R14: 00007fbd3978a300 R15: 0000000000022000 [ 1396.340872] [ 1396.379070] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1396.384757] FAULT_INJECTION: forcing a failure. [ 1396.384757] name failslab, interval 1, probability 0, space 0, times 0 [ 1396.386741] CPU: 1 UID: 0 PID: 9351 Comm: syz-executor.4 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1396.386775] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1396.386791] Call Trace: [ 1396.386801] [ 1396.386812] dump_stack_lvl+0xfa/0x120 [ 1396.386862] should_fail_ex+0x4d7/0x5e0 [ 1396.386908] should_failslab+0xc2/0x120 [ 1396.386944] __kmalloc_node_track_caller_noprof+0xc6/0x760 [ 1396.386994] ? kstrdup_const+0x57/0x80 [ 1396.387037] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1396.387081] kstrdup+0x3e/0xc0 [ 1396.387124] kstrdup_const+0x57/0x80 [ 1396.387169] __kernfs_new_node+0x9c/0x940 [ 1396.387217] ? __lock_acquire+0x451/0x2250 [ 1396.387261] ? __pfx___kernfs_new_node+0x10/0x10 [ 1396.387312] ? lock_acquire+0x15e/0x2d0 [ 1396.387348] ? kernfs_root+0x23/0x2a0 [ 1396.387389] ? find_held_lock+0x2b/0x80 [ 1396.387418] ? kernfs_root+0xee/0x2a0 [ 1396.387479] ? lock_release+0xc8/0x270 [ 1396.387532] ? lock_is_held_type+0x9e/0x120 [ 1396.387589] kernfs_new_node+0x13c/0x1e0 [ 1396.387639] kernfs_create_link+0xcf/0x240 [ 1396.387687] sysfs_do_create_link_sd+0x90/0x140 [ 1396.387733] sysfs_create_link+0x63/0xc0 [ 1396.387774] driver_sysfs_add+0x93/0x2d0 [ 1396.387817] device_bind_driver+0x17/0x70 [ 1396.387861] mac80211_hwsim_new_radio+0x3f8/0x52a0 [ 1396.387903] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1396.387949] ? do_trace_netlink_extack+0x12a/0x150 [ 1396.387989] ? __nla_validate_parse+0x2e6/0x2880 [ 1396.388025] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1396.388074] hwsim_new_radio_nl+0xb61/0x1300 [ 1396.388106] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1396.388148] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1396.388185] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1396.388237] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1396.388279] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1396.388327] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1396.388362] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1396.388416] ? security_capable+0x2f/0x90 [ 1396.388462] ? ns_capable+0xe2/0x120 [ 1396.388511] genl_rcv_msg+0x532/0x7e0 [ 1396.388551] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1396.388585] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1396.388621] ? __lock_acquire+0x451/0x2250 [ 1396.388673] netlink_rcv_skb+0x147/0x430 [ 1396.388701] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1396.388753] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1396.388804] ? netlink_deliver_tap+0x1af/0xcb0 [ 1396.388862] genl_rcv+0x28/0x40 [ 1396.388888] netlink_unicast+0x5a7/0x870 [ 1396.388924] ? __pfx_netlink_unicast+0x10/0x10 [ 1396.388955] ? __virt_addr_valid+0x100/0x5d0 [ 1396.389006] netlink_sendmsg+0x8a3/0xd80 [ 1396.389051] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1396.389099] ____sys_sendmsg+0xa38/0xbf0 [ 1396.389136] ? copy_msghdr_from_user+0xfb/0x150 [ 1396.389164] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1396.389213] ? lock_acquire+0x15e/0x2d0 [ 1396.389254] ___sys_sendmsg+0x10f/0x1b0 [ 1396.389283] ? __pfx____sys_sendmsg+0x10/0x10 [ 1396.389309] ? perf_trace_lock+0xbb/0x4f0 [ 1396.389354] ? __pfx_perf_trace_lock+0x10/0x10 [ 1396.389389] ? proc_fail_nth_write+0x97/0x220 [ 1396.389436] ? lock_acquire+0x15e/0x2d0 [ 1396.389473] ? __fget_files+0x34/0x3b0 [ 1396.389505] ? find_held_lock+0x2b/0x80 [ 1396.389534] ? __fget_files+0x203/0x3b0 [ 1396.389569] ? lock_release+0xc8/0x270 [ 1396.389612] ? __fget_files+0x20d/0x3b0 [ 1396.389657] __sys_sendmsg+0x150/0x200 [ 1396.389685] ? __pfx___sys_sendmsg+0x10/0x10 [ 1396.389730] ? __pfx_ksys_write+0x10/0x10 [ 1396.389761] ? irqentry_exit+0xee/0x650 [ 1396.389798] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1396.389837] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1396.389888] do_syscall_64+0xbf/0x420 [ 1396.389931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1396.389960] RIP: 0033:0x7f3b21b1bb19 [ 1396.389983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1396.390010] RSP: 002b:00007f3b1f091188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1396.390039] RAX: ffffffffffffffda RBX: 00007f3b21c2ef60 RCX: 00007f3b21b1bb19 [ 1396.390057] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1396.390074] RBP: 00007f3b1f0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1396.390092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1396.390110] R13: 00007ffe815263cf R14: 00007f3b1f091300 R15: 0000000000022000 [ 1396.390155] [ 1396.423383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 14:53:03 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x10040, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1396.495124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:53:16 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 68) 14:53:16 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x47bb0000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:53:16 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x6000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:53:16 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x7000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:53:16 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:53:16 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 71) 14:53:16 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x80000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:53:16 executing program 1: r0 = dup(0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x30, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40000080) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x59}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffffd}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000810}, 0x5000) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffd, 0x80000001}, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x538c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) [ 1410.190416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1410.195627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1410.197576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1410.200950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1410.203681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1410.206031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1410.230560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1410.236655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1410.242981] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1410.260742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1410.275101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1410.342512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1410.354727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1410.426833] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1410.432058] FAULT_INJECTION: forcing a failure. [ 1410.432058] name failslab, interval 1, probability 0, space 0, times 0 [ 1410.439277] CPU: 1 UID: 0 PID: 9369 Comm: syz-executor.4 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1410.439313] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1410.439327] Call Trace: [ 1410.439336] [ 1410.439347] dump_stack_lvl+0xfa/0x120 [ 1410.439390] should_fail_ex+0x4d7/0x5e0 [ 1410.439424] ? __kernfs_new_node+0xd3/0x940 [ 1410.439461] should_failslab+0xc2/0x120 [ 1410.439491] kmem_cache_alloc_noprof+0x69/0x630 [ 1410.439526] __kernfs_new_node+0xd3/0x940 [ 1410.439561] ? __lock_acquire+0x451/0x2250 [ 1410.439610] ? __pfx___kernfs_new_node+0x10/0x10 [ 1410.439666] ? lock_acquire+0x15e/0x2d0 [ 1410.439698] ? kernfs_root+0x23/0x2a0 [ 1410.439734] ? find_held_lock+0x2b/0x80 [ 1410.439758] ? kernfs_root+0xee/0x2a0 [ 1410.439794] ? lock_release+0xc8/0x270 [ 1410.439823] ? lock_is_held_type+0x9e/0x120 [ 1410.439863] kernfs_new_node+0x13c/0x1e0 [ 1410.439904] kernfs_create_link+0xcf/0x240 [ 1410.439943] sysfs_do_create_link_sd+0x90/0x140 [ 1410.439984] sysfs_create_link+0x63/0xc0 [ 1410.440022] driver_sysfs_add+0x119/0x2d0 [ 1410.440062] device_bind_driver+0x17/0x70 [ 1410.440099] mac80211_hwsim_new_radio+0x3f8/0x52a0 [ 1410.440137] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1410.440176] ? do_trace_netlink_extack+0x12a/0x150 [ 1410.440211] ? __nla_validate_parse+0x2e6/0x2880 [ 1410.440244] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1410.440286] hwsim_new_radio_nl+0xb61/0x1300 [ 1410.440311] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1410.440344] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1410.440375] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1410.440417] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1410.440451] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1410.440491] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1410.440523] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1410.440570] ? security_capable+0x2f/0x90 [ 1410.440628] ? ns_capable+0xe2/0x120 [ 1410.440674] genl_rcv_msg+0x532/0x7e0 [ 1410.440709] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1410.440740] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1410.440769] ? __lock_acquire+0x451/0x2250 [ 1410.440814] netlink_rcv_skb+0x147/0x430 [ 1410.440840] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1410.440888] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1410.440933] ? netlink_deliver_tap+0x1af/0xcb0 [ 1410.440985] genl_rcv+0x28/0x40 [ 1410.441009] netlink_unicast+0x5a7/0x870 [ 1410.441042] ? __pfx_netlink_unicast+0x10/0x10 [ 1410.441068] ? __virt_addr_valid+0x100/0x5d0 [ 1410.441111] netlink_sendmsg+0x8a3/0xd80 [ 1410.441144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1410.441188] ____sys_sendmsg+0xa38/0xbf0 [ 1410.441222] ? copy_msghdr_from_user+0xfb/0x150 [ 1410.441248] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1410.441293] ? lock_acquire+0x15e/0x2d0 [ 1410.441331] ___sys_sendmsg+0x10f/0x1b0 [ 1410.441357] ? __pfx____sys_sendmsg+0x10/0x10 [ 1410.441379] ? perf_trace_lock+0xbb/0x4f0 [ 1410.441421] ? __pfx_perf_trace_lock+0x10/0x10 [ 1410.441453] ? proc_fail_nth_write+0x97/0x220 [ 1410.441493] ? lock_acquire+0x15e/0x2d0 [ 1410.441524] ? __fget_files+0x34/0x3b0 [ 1410.441552] ? find_held_lock+0x2b/0x80 [ 1410.441576] ? __fget_files+0x203/0x3b0 [ 1410.441614] ? lock_release+0xc8/0x270 [ 1410.441672] ? __fget_files+0x20d/0x3b0 [ 1410.441718] __sys_sendmsg+0x150/0x200 [ 1410.441742] ? __pfx___sys_sendmsg+0x10/0x10 [ 1410.441780] ? __pfx_ksys_write+0x10/0x10 [ 1410.441804] ? irqentry_exit+0xee/0x650 [ 1410.441833] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1410.441866] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1410.441910] do_syscall_64+0xbf/0x420 [ 1410.441950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.441975] RIP: 0033:0x7f3b21b1bb19 [ 1410.441995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1410.442019] RSP: 002b:00007f3b1f091188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1410.442043] RAX: ffffffffffffffda RBX: 00007f3b21c2ef60 RCX: 00007f3b21b1bb19 [ 1410.442059] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1410.442074] RBP: 00007f3b1f0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1410.442088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1410.442103] R13: 00007ffe815263cf R14: 00007f3b1f091300 R15: 0000000000022000 [ 1410.442141] 14:53:17 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 69) [ 1410.581999] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1410.587746] FAULT_INJECTION: forcing a failure. [ 1410.587746] name failslab, interval 1, probability 0, space 0, times 0 [ 1410.596401] CPU: 1 UID: 0 PID: 9378 Comm: syz-executor.3 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1410.596434] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1410.596448] Call Trace: [ 1410.596457] [ 1410.596466] dump_stack_lvl+0xfa/0x120 [ 1410.596510] should_fail_ex+0x4d7/0x5e0 [ 1410.596543] ? __kernfs_new_node+0xd3/0x940 [ 1410.596578] should_failslab+0xc2/0x120 [ 1410.596607] kmem_cache_alloc_noprof+0x69/0x630 [ 1410.596640] __kernfs_new_node+0xd3/0x940 [ 1410.596672] ? __lock_acquire+0x451/0x2250 [ 1410.596708] ? __pfx___kernfs_new_node+0x10/0x10 [ 1410.596750] ? lock_acquire+0x15e/0x2d0 [ 1410.596778] ? kernfs_root+0x23/0x2a0 [ 1410.596812] ? find_held_lock+0x2b/0x80 [ 1410.596835] ? kernfs_root+0xee/0x2a0 [ 1410.596881] ? lock_release+0xc8/0x270 [ 1410.596914] ? lock_is_held_type+0x9e/0x120 [ 1410.596952] kernfs_new_node+0x13c/0x1e0 [ 1410.596983] kernfs_create_link+0xcf/0x240 [ 1410.597016] sysfs_do_create_link_sd+0x90/0x140 [ 1410.597054] sysfs_create_link+0x63/0xc0 [ 1410.597090] driver_sysfs_add+0x93/0x2d0 [ 1410.597128] device_bind_driver+0x17/0x70 [ 1410.597163] mac80211_hwsim_new_radio+0x3f8/0x52a0 [ 1410.597199] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1410.597237] ? do_trace_netlink_extack+0x12a/0x150 [ 1410.597271] ? __nla_validate_parse+0x2e6/0x2880 [ 1410.597302] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1410.597342] hwsim_new_radio_nl+0xb61/0x1300 [ 1410.597366] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1410.597395] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1410.597425] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1410.597465] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1410.597496] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1410.597534] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1410.597564] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1410.597591] ? irqentry_exit+0x17b/0x650 [ 1410.597632] ? security_capable+0x2f/0x90 [ 1410.597672] ? ns_capable+0xe2/0x120 [ 1410.597714] genl_rcv_msg+0x532/0x7e0 [ 1410.597747] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1410.597776] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1410.597803] ? __lock_acquire+0x451/0x2250 [ 1410.597846] netlink_rcv_skb+0x147/0x430 [ 1410.597870] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1410.597900] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1410.597948] ? netlink_deliver_tap+0x1af/0xcb0 [ 1410.597992] genl_rcv+0x28/0x40 [ 1410.598015] netlink_unicast+0x5a7/0x870 [ 1410.598046] ? __pfx_netlink_unicast+0x10/0x10 [ 1410.598071] ? __virt_addr_valid+0x100/0x5d0 [ 1410.598113] netlink_sendmsg+0x8a3/0xd80 [ 1410.598145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1410.598187] ____sys_sendmsg+0xa38/0xbf0 [ 1410.598219] ? copy_msghdr_from_user+0xfb/0x150 [ 1410.598243] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1410.598286] ? lock_acquire+0x15e/0x2d0 [ 1410.598321] ___sys_sendmsg+0x10f/0x1b0 [ 1410.598346] ? __pfx____sys_sendmsg+0x10/0x10 [ 1410.598366] ? perf_trace_lock+0xbb/0x4f0 [ 1410.598405] ? __pfx_perf_trace_lock+0x10/0x10 [ 1410.598435] ? proc_fail_nth_write+0x97/0x220 [ 1410.598473] ? lock_acquire+0x15e/0x2d0 [ 1410.598501] ? __fget_files+0x34/0x3b0 [ 1410.598527] ? find_held_lock+0x2b/0x80 [ 1410.598550] ? __fget_files+0x203/0x3b0 [ 1410.598574] ? lock_release+0xc8/0x270 [ 1410.598610] ? __fget_files+0x20d/0x3b0 [ 1410.598649] __sys_sendmsg+0x150/0x200 [ 1410.598672] ? __pfx___sys_sendmsg+0x10/0x10 [ 1410.598708] ? __pfx_ksys_write+0x10/0x10 [ 1410.598731] ? irqentry_exit+0xee/0x650 [ 1410.598758] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1410.598789] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1410.598830] do_syscall_64+0xbf/0x420 [ 1410.598865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.598890] RIP: 0033:0x7fbd3c214b19 [ 1410.598909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1410.598930] RSP: 002b:00007fbd3978a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1410.598953] RAX: ffffffffffffffda RBX: 00007fbd3c327f60 RCX: 00007fbd3c214b19 [ 1410.598968] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1410.598982] RBP: 00007fbd3978a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1410.598996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1410.599009] R13: 00007fffae4888ff R14: 00007fbd3978a300 R15: 0000000000022000 [ 1410.599046] 14:53:17 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 72) 14:53:17 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 70) [ 1410.735136] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:53:17 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x1fffff, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:53:17 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x4000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:53:17 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x7000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:53:17 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x48bb0000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:53:17 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x18000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1410.928860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1410.934285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1410.936995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1410.937976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1410.958593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1410.972049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1410.976700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1410.977228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1411.025278] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:53:17 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 73) [ 1411.254874] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:53:17 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 71) 14:53:17 executing program 1: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000280)={0x20, 0xd, 0x28, {0x28, 0x11, "e923ff9333537822a001414363f9031b813ba2bf9bebd2cb9f706ad302bd67ffd81cddbe44a6"}}, &(0x7f00000002c0)={0x0, 0x3, 0xd3, @string={0xd3, 0x3, "846295b9a8821f91a45aa56e54f81efea7d81943db4664a09572b1f6174651ea6feb015ee205fa123809e67b81f99019afbfba0460190ddf1064738460fa3fd267051403974ac40f4d68b17ce061330601ef7dd60c21c9ce6cbc266516a97509c7d65a3f5635c3091255105d444e24ac3ad7d416b31f9ae66c28000679556896145ecb42db8a4f59968563c010a814d34149833ba0adac477614dc963d44d3139462597125b8dc06b1016917f6f527a755010c0d419e90f53ba05eda560f355ea3a34dcd54fb9c92444f22e1bca3c17cba"}}, &(0x7f0000000400)={0x0, 0xf, 0xda, {0x5, 0xf, 0xda, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x7, 0x6, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x1, 0x80, 0x2}, @generic={0xc1, 0x10, 0xb, "9a7f6701a8eb6d7e62f9041003f83d89f39646d9e1f853737bced48b727bb5756ae1988980be99fa5e0ed004a1ec47b70146f0bb8560d37361e038ee13320d562469a710f9b670817d6248cb461488abfa61b23c988f3d0aa7e258d299e85d2938b3eaccbcbca1ab63231a633c745b60e3410526f5a3d2077029cf6de071967d77fbbd8ac1a455d50b6ddc5eddd190bcd8f2b732e63beef115d8a2a7af581fcb2cc97d239c2e685872255b20b767c27b2f3c1470725e77275cf38399b64c"}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x1, 0x1f, 0x4, "cf0d9b95", "652a5cf7"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x80, 0x31, 0x7f, 0xc6, 0x5eb, 0x3ff}}}, &(0x7f00000009c0)={0x84, &(0x7f00000005c0)={0x20, 0x9, 0x22, "089a60abea4164e0f621666c30fce08c87c7f3f1758cb4bf196f6dfd1ac5227d34e5"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f00000006c0)={0x20, 0x0, 0x8, {0x20, 0x20, [0x8800]}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0xe1}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000780)={0x40, 0xb, 0x2, "e8a1"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0xba5}, &(0x7f0000000800)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000840)={0x40, 0x17, 0x6, @local}, &(0x7f0000000880)={0x40, 0x19, 0x2, '=\x00'}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0x666c}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0x6}}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/wireless\x00') syz_io_uring_setup(0x4b34, &(0x7f0000000180)={0x0, 0xc8c1, 0x10, 0x3, 0x30f, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 1411.388603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1411.393279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1411.448936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1411.451175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:53:18 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x200000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1411.467401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1411.470897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1411.483549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1411.485223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1411.485728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1411.489466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:53:18 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x5000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1411.599662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1411.604008] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1411.608785] FAULT_INJECTION: forcing a failure. [ 1411.608785] name failslab, interval 1, probability 0, space 0, times 0 [ 1411.609163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1411.613020] CPU: 1 UID: 0 PID: 9401 Comm: syz-executor.3 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1411.613060] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1411.613076] Call Trace: [ 1411.613086] [ 1411.613097] dump_stack_lvl+0xfa/0x120 [ 1411.613145] should_fail_ex+0x4d7/0x5e0 [ 1411.613183] ? __kernfs_new_node+0xd3/0x940 [ 1411.613224] should_failslab+0xc2/0x120 [ 1411.613260] kmem_cache_alloc_noprof+0x69/0x630 [ 1411.613299] __kernfs_new_node+0xd3/0x940 [ 1411.613337] ? __lock_acquire+0x451/0x2250 [ 1411.613381] ? __pfx___kernfs_new_node+0x10/0x10 [ 1411.613431] ? lock_acquire+0x15e/0x2d0 [ 1411.613465] ? kernfs_root+0x23/0x2a0 [ 1411.613506] ? find_held_lock+0x2b/0x80 [ 1411.613533] ? kernfs_root+0xee/0x2a0 [ 1411.613573] ? lock_release+0xc8/0x270 [ 1411.613618] ? lock_is_held_type+0x9e/0x120 [ 1411.613678] kernfs_new_node+0x13c/0x1e0 [ 1411.613715] kernfs_create_link+0xcf/0x240 [ 1411.613755] sysfs_do_create_link_sd+0x90/0x140 [ 1411.613801] sysfs_create_link+0x63/0xc0 [ 1411.613844] driver_sysfs_add+0x93/0x2d0 [ 1411.613899] device_bind_driver+0x17/0x70 [ 1411.613941] mac80211_hwsim_new_radio+0x3f8/0x52a0 [ 1411.613983] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1411.614027] ? do_trace_netlink_extack+0x12a/0x150 [ 1411.614068] ? __nla_validate_parse+0x2e6/0x2880 [ 1411.614104] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1411.614152] hwsim_new_radio_nl+0xb61/0x1300 [ 1411.614180] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1411.614216] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1411.614251] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1411.614299] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1411.614335] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1411.614380] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1411.614416] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1411.614468] ? security_capable+0x2f/0x90 [ 1411.614515] ? ns_capable+0xe2/0x120 [ 1411.614564] genl_rcv_msg+0x532/0x7e0 [ 1411.614617] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1411.614659] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1411.614691] ? __lock_acquire+0x451/0x2250 [ 1411.614742] netlink_rcv_skb+0x147/0x430 [ 1411.614771] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1411.614807] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1411.614857] ? netlink_deliver_tap+0x1af/0xcb0 [ 1411.614909] genl_rcv+0x28/0x40 [ 1411.614937] netlink_unicast+0x5a7/0x870 [ 1411.614973] ? __pfx_netlink_unicast+0x10/0x10 [ 1411.615002] ? __virt_addr_valid+0x100/0x5d0 [ 1411.615050] netlink_sendmsg+0x8a3/0xd80 [ 1411.615087] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1411.615137] ____sys_sendmsg+0xa38/0xbf0 [ 1411.615178] ? copy_msghdr_from_user+0xfb/0x150 [ 1411.615207] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1411.615258] ? lock_acquire+0x15e/0x2d0 [ 1411.615299] ___sys_sendmsg+0x10f/0x1b0 [ 1411.615329] ? __pfx____sys_sendmsg+0x10/0x10 [ 1411.615353] ? perf_trace_lock+0xbb/0x4f0 [ 1411.615398] ? __pfx_perf_trace_lock+0x10/0x10 [ 1411.615435] ? proc_fail_nth_write+0x97/0x220 [ 1411.615480] ? lock_acquire+0x15e/0x2d0 [ 1411.615514] ? __fget_files+0x34/0x3b0 [ 1411.615546] ? find_held_lock+0x2b/0x80 [ 1411.615572] ? __fget_files+0x203/0x3b0 [ 1411.615613] ? lock_release+0xc8/0x270 [ 1411.615678] ? __fget_files+0x20d/0x3b0 [ 1411.615729] __sys_sendmsg+0x150/0x200 [ 1411.615756] ? __pfx___sys_sendmsg+0x10/0x10 [ 1411.615799] ? __pfx_ksys_write+0x10/0x10 [ 1411.615825] ? irqentry_exit+0xee/0x650 [ 1411.615858] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1411.615895] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1411.615944] do_syscall_64+0xbf/0x420 [ 1411.615986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1411.616014] RIP: 0033:0x7fbd3c214b19 [ 1411.616036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1411.616062] RSP: 002b:00007fbd3978a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1411.616089] RAX: ffffffffffffffda RBX: 00007fbd3c327f60 RCX: 00007fbd3c214b19 [ 1411.616108] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1411.616125] RBP: 00007fbd3978a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1411.616141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1411.616158] R13: 00007fffae4888ff R14: 00007fbd3978a300 R15: 0000000000022000 [ 1411.616201] [ 1411.670715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1411.742274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:53:32 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x49bb0000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1426.051421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.055469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.056174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 14:53:32 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x6000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:53:32 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xd00000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:53:32 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 74) 14:53:32 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 72) 14:53:32 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) dup2(r0, r1) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14:53:32 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x20000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:53:32 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x18000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1426.057189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.062936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.066443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.078869] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1426.094849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.106735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.110885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.124058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.125491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.131972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.187027] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:53:32 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 73) [ 1426.282977] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:53:32 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 75) [ 1426.384851] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1426.391651] FAULT_INJECTION: forcing a failure. [ 1426.391651] name failslab, interval 1, probability 0, space 0, times 0 [ 1426.394983] CPU: 1 UID: 0 PID: 9440 Comm: syz-executor.4 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1426.395025] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1426.395041] Call Trace: [ 1426.395052] [ 1426.395063] dump_stack_lvl+0xfa/0x120 [ 1426.395109] should_fail_ex+0x4d7/0x5e0 [ 1426.395138] ? kobject_get_path+0xc8/0x200 [ 1426.395183] ? kobject_get_path+0xc8/0x200 [ 1426.395223] should_failslab+0xc2/0x120 [ 1426.395257] __kmalloc_noprof+0xc4/0x710 [ 1426.395299] ? __create_object+0x59/0x80 [ 1426.395347] kobject_get_path+0xc8/0x200 [ 1426.395396] ? kasan_save_track+0x14/0x30 [ 1426.395440] kobject_uevent_env+0x260/0xfd0 [ 1426.395476] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1426.395512] ? queue_work_on+0x7e/0xe0 [ 1426.395547] ? bus_to_subsys+0x10e/0x150 [ 1426.395588] driver_bound+0x134/0x1a0 [ 1426.395631] device_bind_driver+0x3d/0x70 [ 1426.395671] mac80211_hwsim_new_radio+0x3f8/0x52a0 [ 1426.395712] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1426.395757] ? do_trace_netlink_extack+0x12a/0x150 [ 1426.395796] ? __nla_validate_parse+0x2e6/0x2880 [ 1426.395833] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1426.395881] hwsim_new_radio_nl+0xb61/0x1300 [ 1426.395914] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1426.395949] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1426.395984] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1426.396031] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1426.396068] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1426.396109] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1426.396142] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1426.396190] ? security_capable+0x2f/0x90 [ 1426.396235] ? ns_capable+0xe2/0x120 [ 1426.396280] genl_rcv_msg+0x532/0x7e0 [ 1426.396319] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1426.396352] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1426.396382] ? __lock_acquire+0x451/0x2250 [ 1426.396427] netlink_rcv_skb+0x147/0x430 [ 1426.396454] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1426.396486] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1426.396535] ? netlink_deliver_tap+0x1af/0xcb0 [ 1426.396585] genl_rcv+0x28/0x40 [ 1426.396611] netlink_unicast+0x5a7/0x870 [ 1426.396644] ? __pfx_netlink_unicast+0x10/0x10 [ 1426.396671] ? __virt_addr_valid+0x100/0x5d0 [ 1426.396715] netlink_sendmsg+0x8a3/0xd80 [ 1426.396750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1426.396796] ____sys_sendmsg+0xa38/0xbf0 [ 1426.396831] ? copy_msghdr_from_user+0xfb/0x150 [ 1426.396857] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1426.396906] ? lock_acquire+0x15e/0x2d0 [ 1426.396945] ___sys_sendmsg+0x10f/0x1b0 [ 1426.396972] ? __pfx____sys_sendmsg+0x10/0x10 [ 1426.396995] ? perf_trace_lock+0xbb/0x4f0 [ 1426.397053] ? __pfx_perf_trace_lock+0x10/0x10 [ 1426.397088] ? proc_fail_nth_write+0x97/0x220 [ 1426.397129] ? lock_acquire+0x15e/0x2d0 [ 1426.397162] ? __fget_files+0x34/0x3b0 [ 1426.397195] ? find_held_lock+0x2b/0x80 [ 1426.397224] ? __fget_files+0x203/0x3b0 [ 1426.397251] ? lock_release+0xc8/0x270 [ 1426.397293] ? __fget_files+0x20d/0x3b0 [ 1426.397338] __sys_sendmsg+0x150/0x200 [ 1426.397366] ? __pfx___sys_sendmsg+0x10/0x10 [ 1426.397411] ? __pfx_ksys_write+0x10/0x10 [ 1426.397440] ? irqentry_exit+0xee/0x650 [ 1426.397473] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1426.397510] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1426.397560] do_syscall_64+0xbf/0x420 [ 1426.397601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1426.397630] RIP: 0033:0x7f3b21b1bb19 [ 1426.397652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1426.397679] RSP: 002b:00007f3b1f091188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1426.397706] RAX: ffffffffffffffda RBX: 00007f3b21c2ef60 RCX: 00007f3b21b1bb19 [ 1426.397723] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1426.397743] RBP: 00007f3b1f0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1426.397764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1426.397785] R13: 00007ffe815263cf R14: 00007f3b1f091300 R15: 0000000000022000 [ 1426.397836] [ 1426.570916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.574133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.669203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.674737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.675664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.675834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.677390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.679844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:53:45 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 14:53:45 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x20000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:53:45 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x4abb0000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:53:45 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3e000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:53:45 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 76) 14:53:45 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x1000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:53:45 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x7000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:53:45 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 74) [ 1438.654769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1438.656620] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1438.659370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1438.664873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1438.669044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1438.701200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1438.719557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1438.721747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1438.725403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1438.727484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1438.730852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1438.736797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1438.740081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1438.793188] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:53:45 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 75) [ 1438.904599] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:53:45 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 77) 14:53:45 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 76) [ 1439.026647] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1439.039287] FAULT_INJECTION: forcing a failure. [ 1439.039287] name failslab, interval 1, probability 0, space 0, times 0 [ 1439.042357] CPU: 1 UID: 0 PID: 9469 Comm: syz-executor.4 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1439.042403] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1439.042425] Call Trace: [ 1439.042434] [ 1439.042448] dump_stack_lvl+0xfa/0x120 [ 1439.042503] should_fail_ex+0x4d7/0x5e0 [ 1439.042547] ? __alloc_skb+0x14c/0x6e0 [ 1439.042591] should_failslab+0xc2/0x120 [ 1439.042630] kmem_cache_alloc_node_noprof+0x6c/0x690 [ 1439.042663] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1439.042711] __alloc_skb+0x14c/0x6e0 [ 1439.042758] ? __alloc_skb+0x5aa/0x6e0 [ 1439.042810] ? __pfx___alloc_skb+0x10/0x10 [ 1439.042878] ? netlink_has_listeners+0x20d/0x430 [ 1439.042931] ? lock_release+0xc8/0x270 [ 1439.042980] alloc_uevent_skb+0x7b/0x210 [ 1439.043019] kobject_uevent_env+0xad2/0xfd0 [ 1439.043056] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1439.043099] ? queue_work_on+0x7e/0xe0 [ 1439.043137] ? bus_to_subsys+0x10e/0x150 [ 1439.043185] driver_bound+0x134/0x1a0 [ 1439.043231] device_bind_driver+0x3d/0x70 [ 1439.043282] mac80211_hwsim_new_radio+0x3f8/0x52a0 [ 1439.043329] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1439.043375] ? do_trace_netlink_extack+0x12a/0x150 [ 1439.043419] ? __nla_validate_parse+0x2e6/0x2880 [ 1439.043461] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1439.043513] hwsim_new_radio_nl+0xb61/0x1300 [ 1439.043547] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1439.043587] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1439.043626] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1439.043677] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1439.043717] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1439.043768] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1439.043810] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1439.043866] ? security_capable+0x2f/0x90 [ 1439.043923] ? ns_capable+0xe2/0x120 [ 1439.043979] genl_rcv_msg+0x532/0x7e0 [ 1439.044020] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1439.044058] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1439.044093] ? __lock_acquire+0x451/0x2250 [ 1439.044146] netlink_rcv_skb+0x147/0x430 [ 1439.044180] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1439.044221] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1439.044278] ? netlink_deliver_tap+0x1af/0xcb0 [ 1439.044340] genl_rcv+0x28/0x40 [ 1439.044372] netlink_unicast+0x5a7/0x870 [ 1439.044409] ? __pfx_netlink_unicast+0x10/0x10 [ 1439.044438] ? __virt_addr_valid+0x100/0x5d0 [ 1439.044493] netlink_sendmsg+0x8a3/0xd80 [ 1439.044540] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1439.044592] ____sys_sendmsg+0xa38/0xbf0 [ 1439.044635] ? copy_msghdr_from_user+0xfb/0x150 [ 1439.044666] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1439.044726] ? lock_acquire+0x15e/0x2d0 [ 1439.044776] ___sys_sendmsg+0x10f/0x1b0 [ 1439.044808] ? __pfx____sys_sendmsg+0x10/0x10 [ 1439.044834] ? perf_trace_lock+0xbb/0x4f0 [ 1439.044884] ? __pfx_perf_trace_lock+0x10/0x10 [ 1439.044930] ? proc_fail_nth_write+0x97/0x220 [ 1439.044984] ? lock_acquire+0x15e/0x2d0 [ 1439.045023] ? __fget_files+0x34/0x3b0 [ 1439.045061] ? find_held_lock+0x2b/0x80 [ 1439.045093] ? __fget_files+0x203/0x3b0 [ 1439.045130] ? lock_release+0xc8/0x270 [ 1439.045199] ? __fget_files+0x20d/0x3b0 [ 1439.045258] __sys_sendmsg+0x150/0x200 [ 1439.045290] ? __pfx___sys_sendmsg+0x10/0x10 [ 1439.045338] ? __pfx_ksys_write+0x10/0x10 [ 1439.045370] ? irqentry_exit+0xee/0x650 [ 1439.045408] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1439.045448] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1439.045503] do_syscall_64+0xbf/0x420 [ 1439.045553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.045591] RIP: 0033:0x7f3b21b1bb19 [ 1439.045617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1439.045657] RSP: 002b:00007f3b1f091188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1439.045692] RAX: ffffffffffffffda RBX: 00007f3b21c2ef60 RCX: 00007f3b21b1bb19 [ 1439.045715] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1439.045733] RBP: 00007f3b1f0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1439.045756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1439.045778] R13: 00007ffe815263cf R14: 00007f3b1f091300 R15: 0000000000022000 [ 1439.045828] [ 1439.234415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1439.236516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:53:45 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x18000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1439.242633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1439.254641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:53:45 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/bluetooth', 0x28000, 0xa4) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0xff, 0xf8, 0x9, 0x1, 0x0, 0x9, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x401, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x9000, 0x7fffffff, 0x9, 0x8, 0xfffffffffffffffc, 0x6, 0x101, 0x0, 0x1, 0x0, 0x7}, 0x0, 0x6, r1, 0x9) close_range(r0, 0xffffffffffffffff, 0x0) 14:53:45 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x4bbb0000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1439.303949] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:53:45 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x1d00000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1439.316620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1439.319317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:53:45 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3e000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:53:45 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3f000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1439.380459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1439.387310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1439.393923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1439.402344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:53:46 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 78) [ 1439.408270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1439.420658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1439.423001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1439.441902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1439.461369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1439.468509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1439.485351] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1439.491396] FAULT_INJECTION: forcing a failure. [ 1439.491396] name failslab, interval 1, probability 0, space 0, times 0 [ 1439.493859] CPU: 0 UID: 0 PID: 9486 Comm: syz-executor.4 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1439.493878] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1439.493890] Call Trace: [ 1439.493896] [ 1439.493901] dump_stack_lvl+0xfa/0x120 [ 1439.493930] should_fail_ex+0x4d7/0x5e0 [ 1439.493946] ? kobject_get_path+0xc8/0x200 [ 1439.493968] ? kobject_get_path+0xc8/0x200 [ 1439.493987] should_failslab+0xc2/0x120 [ 1439.494005] __kmalloc_noprof+0xc4/0x710 [ 1439.494026] ? __create_object+0x59/0x80 [ 1439.494048] kobject_get_path+0xc8/0x200 [ 1439.494068] ? kasan_save_track+0x14/0x30 [ 1439.494087] kobject_uevent_env+0x260/0xfd0 [ 1439.494103] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1439.494123] ? queue_work_on+0x7e/0xe0 [ 1439.494140] ? bus_to_subsys+0x10e/0x150 [ 1439.494161] driver_bound+0x134/0x1a0 [ 1439.494181] device_bind_driver+0x3d/0x70 [ 1439.494200] mac80211_hwsim_new_radio+0x3f8/0x52a0 [ 1439.494221] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1439.494242] ? do_trace_netlink_extack+0x12a/0x150 [ 1439.494262] ? __nla_validate_parse+0x2e6/0x2880 [ 1439.494279] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1439.494301] hwsim_new_radio_nl+0xb61/0x1300 [ 1439.494314] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1439.494330] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1439.494346] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1439.494368] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1439.494386] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1439.494407] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1439.494423] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1439.494447] ? security_capable+0x2f/0x90 [ 1439.494470] ? ns_capable+0xe2/0x120 [ 1439.494493] genl_rcv_msg+0x532/0x7e0 [ 1439.494511] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1439.494527] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1439.494541] ? __lock_acquire+0x451/0x2250 [ 1439.494564] netlink_rcv_skb+0x147/0x430 [ 1439.494578] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1439.494594] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1439.494618] ? netlink_deliver_tap+0x1af/0xcb0 [ 1439.494642] genl_rcv+0x28/0x40 [ 1439.494655] netlink_unicast+0x5a7/0x870 [ 1439.494671] ? __pfx_netlink_unicast+0x10/0x10 [ 1439.494685] ? __virt_addr_valid+0x100/0x5d0 [ 1439.494709] netlink_sendmsg+0x8a3/0xd80 [ 1439.494726] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1439.494749] ____sys_sendmsg+0xa38/0xbf0 [ 1439.494770] ? copy_msghdr_from_user+0xfb/0x150 [ 1439.494784] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1439.494804] ? __pfx_perf_tp_event+0x10/0x10 [ 1439.494821] ? lock_acquire+0x15e/0x2d0 [ 1439.494841] ___sys_sendmsg+0x10f/0x1b0 [ 1439.494854] ? __pfx____sys_sendmsg+0x10/0x10 [ 1439.494865] ? perf_trace_lock+0xbb/0x4f0 [ 1439.494888] ? __pfx_perf_trace_lock+0x10/0x10 [ 1439.494904] ? proc_fail_nth_write+0x97/0x220 [ 1439.494926] ? lock_acquire+0x15e/0x2d0 [ 1439.494941] ? __fget_files+0x34/0x3b0 [ 1439.494957] ? find_held_lock+0x2b/0x80 [ 1439.494970] ? __fget_files+0x203/0x3b0 [ 1439.494984] ? lock_release+0xc8/0x270 [ 1439.495003] ? __fget_files+0x20d/0x3b0 [ 1439.495025] __sys_sendmsg+0x150/0x200 [ 1439.495037] ? __pfx___sys_sendmsg+0x10/0x10 [ 1439.495049] ? perf_trace_preemptirq_template+0x259/0x430 [ 1439.495075] ? __pfx_ksys_write+0x10/0x10 [ 1439.495089] ? irqentry_exit+0xee/0x650 [ 1439.495105] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1439.495121] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1439.495143] do_syscall_64+0xbf/0x420 [ 1439.495163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.495177] RIP: 0033:0x7f3b21b1bb19 [ 1439.495188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1439.495201] RSP: 002b:00007f3b1f091188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1439.495213] RAX: ffffffffffffffda RBX: 00007f3b21c2ef60 RCX: 00007f3b21b1bb19 [ 1439.495222] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1439.495230] RBP: 00007f3b1f0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1439.495238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1439.495246] R13: 00007ffe815263cf R14: 00007f3b1f091300 R15: 0000000000022000 [ 1439.495266] 14:53:46 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 77) [ 1439.624812] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:53:46 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 79) [ 1439.875264] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:53:46 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x20000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1439.965983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1439.968441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1439.983423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1439.994734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:53:58 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 78) 14:53:58 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x2000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:53:58 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3e000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:53:58 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 80) 14:53:58 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x40000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:53:58 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x4cbb0000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:53:58 executing program 1: perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xe9, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538f, &(0x7f0000000180)={0x0, 0xe605}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14:53:58 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3f000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1452.138494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.143373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.145640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.146592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.153227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.160689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.161155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.162786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.166478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.172970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.182802] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1452.186000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.187276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.339288] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:53:59 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 79) [ 1452.458986] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:53:59 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 81) [ 1452.612217] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:53:59 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 80) [ 1452.654029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.661004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.664855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.665814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:53:59 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x84e00000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:53:59 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x40000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1452.708487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.709560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.746741] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:53:59 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x40000100, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:53:59 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3f000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1452.807876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.811228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.827989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.835205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.839282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.846232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1453.214382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1453.215534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1453.325645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1453.329278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1453.339226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1453.340672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:54:10 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 82) 14:54:10 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x97ffffff, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:54:10 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x40000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:54:10 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 81) 14:54:10 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x40000100, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:54:10 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x480240, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4, 0x2, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x8, 0x400}, 0x4000, 0x1ff, 0x1, 0x0, 0x1f, 0x200, 0x9, 0x0, 0x40, 0x0, 0x9}, 0x0, 0xf, r2, 0x8) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[r0], 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 14:54:10 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x84e00000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:54:10 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1463.958579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1463.969440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1463.971121] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1463.981041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1463.988443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1463.992612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1464.001269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.002670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.012794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1464.014713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1464.015736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1464.153809] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1464.157683] FAULT_INJECTION: forcing a failure. [ 1464.157683] name failslab, interval 1, probability 0, space 0, times 0 [ 1464.161225] CPU: 0 UID: 0 PID: 9546 Comm: syz-executor.3 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1464.161259] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1464.161274] Call Trace: [ 1464.161282] [ 1464.161292] dump_stack_lvl+0xfa/0x120 [ 1464.161336] should_fail_ex+0x4d7/0x5e0 [ 1464.161371] ? __alloc_skb+0x14c/0x6e0 [ 1464.161422] should_failslab+0xc2/0x120 [ 1464.161454] kmem_cache_alloc_node_noprof+0x6c/0x690 [ 1464.161482] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1464.161525] __alloc_skb+0x14c/0x6e0 [ 1464.161561] ? __alloc_skb+0x5aa/0x6e0 [ 1464.161599] ? __pfx___alloc_skb+0x10/0x10 [ 1464.161639] ? netlink_has_listeners+0x20d/0x430 [ 1464.161680] ? lock_release+0xc8/0x270 [ 1464.161717] alloc_uevent_skb+0x7b/0x210 [ 1464.161749] kobject_uevent_env+0xad2/0xfd0 [ 1464.161780] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1464.161813] ? queue_work_on+0x7e/0xe0 [ 1464.161845] ? bus_to_subsys+0x10e/0x150 [ 1464.161883] driver_bound+0x134/0x1a0 [ 1464.161929] device_bind_driver+0x3d/0x70 [ 1464.161966] mac80211_hwsim_new_radio+0x3f8/0x52a0 [ 1464.162004] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1464.162044] ? do_trace_netlink_extack+0x12a/0x150 [ 1464.162079] ? __nla_validate_parse+0x2e6/0x2880 [ 1464.162112] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1464.162155] hwsim_new_radio_nl+0xb61/0x1300 [ 1464.162180] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1464.162212] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1464.162243] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1464.162286] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1464.162317] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1464.162358] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1464.162390] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1464.162437] ? security_capable+0x2f/0x90 [ 1464.162479] ? ns_capable+0xe2/0x120 [ 1464.162523] genl_rcv_msg+0x532/0x7e0 [ 1464.162558] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1464.162589] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1464.162617] ? __lock_acquire+0x451/0x2250 [ 1464.162663] netlink_rcv_skb+0x147/0x430 [ 1464.162689] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1464.162721] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1464.162767] ? netlink_deliver_tap+0x1af/0xcb0 [ 1464.162814] genl_rcv+0x28/0x40 [ 1464.162839] netlink_unicast+0x5a7/0x870 [ 1464.162872] ? __pfx_netlink_unicast+0x10/0x10 [ 1464.162898] ? __virt_addr_valid+0x100/0x5d0 [ 1464.162942] netlink_sendmsg+0x8a3/0xd80 [ 1464.162976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1464.163020] ____sys_sendmsg+0xa38/0xbf0 [ 1464.163055] ? copy_msghdr_from_user+0xfb/0x150 [ 1464.163080] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1464.163118] ? __pfx_perf_tp_event+0x10/0x10 [ 1464.163150] ? lock_acquire+0x15e/0x2d0 [ 1464.163188] ___sys_sendmsg+0x10f/0x1b0 [ 1464.163214] ? __pfx____sys_sendmsg+0x10/0x10 [ 1464.163238] ? perf_trace_lock+0xbb/0x4f0 [ 1464.163281] ? __pfx_perf_trace_lock+0x10/0x10 [ 1464.163313] ? proc_fail_nth_write+0x97/0x220 [ 1464.163355] ? lock_acquire+0x15e/0x2d0 [ 1464.163386] ? __fget_files+0x34/0x3b0 [ 1464.163414] ? find_held_lock+0x2b/0x80 [ 1464.163438] ? __fget_files+0x203/0x3b0 [ 1464.163465] ? lock_release+0xc8/0x270 [ 1464.163503] ? __fget_files+0x20d/0x3b0 [ 1464.163545] __sys_sendmsg+0x150/0x200 [ 1464.163569] ? __pfx___sys_sendmsg+0x10/0x10 [ 1464.163591] ? perf_trace_preemptirq_template+0x259/0x430 [ 1464.163640] ? __pfx_ksys_write+0x10/0x10 [ 1464.163665] ? irqentry_exit+0xee/0x650 [ 1464.163695] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1464.163727] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1464.163771] do_syscall_64+0xbf/0x420 [ 1464.163809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.163835] RIP: 0033:0x7fbd3c214b19 [ 1464.163855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1464.163879] RSP: 002b:00007fbd3978a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1464.163903] RAX: ffffffffffffffda RBX: 00007fbd3c327f60 RCX: 00007fbd3c214b19 [ 1464.163920] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1464.163934] RBP: 00007fbd3978a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1464.163949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1464.163964] R13: 00007fffae4888ff R14: 00007fbd3978a300 R15: 0000000000022000 [ 1464.164003] 14:54:10 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 83) [ 1464.462015] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:54:11 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 82) [ 1464.528273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.539237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.542274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1464.546959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.555368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1464.559176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:54:11 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x991f0000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:54:11 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x40000100, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:54:11 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x4000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:54:11 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x96c10000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1464.674784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.676708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:54:11 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x84c10000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1464.719012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.723960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1464.725669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.732362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1464.753015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.755192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1464.755573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.760556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:54:11 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r3}) [ 1464.813014] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. sendmmsg$inet6(r0, &(0x7f0000004c80)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x1be60, @private2, 0x2}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000200)="c4d9cea1e37f36a67e351716291f88c601e7808ca4dd4381a6b428da17bbdd03a5c05069a6a5385d6828e7365745a74b4fd677c0f4d3f9ac799c287f999fba0e09c37365d6cbca45fd1b31a4cb47924fe1391f6c4d6136407506626b2859c2500aae702db354eb633f7a55bad9d5d9d00c5ac07a04d88970f6c0520d29cd7e74c5864eac3cd8f3cec98ec57dc99914dc0650b05138328fbb47e7e0f3c1ee43ef3fc54cebfe21d308684fb2d48e82a8b14bff028819033b7c9b8c46d25f35", 0xbe}, {&(0x7f00000002c0)="9198b4fb51758ac39291d4a01daefc2610f6a6058a7f0b9a0f0bdb71e0b768c2f1add3ecbe9f109b16b081b6cca09be60532fdd3d1d32b5da73e0110087a1df78fe9370295f2700636", 0x49}], 0x2}}, {{&(0x7f0000000340)={0xa, 0x4e22, 0x10000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000400)="b0adeb6187243ee240eb88b9e357884801a1c0c27c140e2a1cb733eb2c9f2a6b4d258c218cc67e4b0febe9e4f4457df719983bfe5436500a2b7f1d426f93dd35f1bc28e232cf9922bfa8e6fe10098f5a6d7b14d70a624ad1eb64f67f90a2afccb23b134e9e147506676fb0ddba0f9d1a833f5659ea", 0x75}], 0x1, &(0x7f0000000480)=[@dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}, @dstopts_2292={{0x118, 0x29, 0x4, {0x11, 0x20, '\x00', [@calipso={0x7, 0x40, {0x3, 0xe, 0x9, 0x7, [0x5, 0x7f, 0x1, 0xffffffff, 0x400, 0x200, 0x8]}}, @calipso={0x7, 0x50, {0x0, 0x12, 0x20, 0x950, [0x4, 0x297, 0xfffffffffffffffe, 0x3, 0x80, 0x3, 0x6, 0x800, 0x7]}}, @pad1, @hao={0xc9, 0x10, @mcast2}, @pad1, @generic={0x9, 0x52, "34079cdf2f299d2a4af5bba11f889d825b14f9a8f116f9309c92dc36c4e40b6075230a0383b5efb62be93027f42e040cfc24c94403ff0e14ce43f80019c7a23279d1b1e0a8f85a2a71e0dbb10d9288d807f7"}]}}}, @rthdr={{0x78, 0x29, 0x39, {0x6, 0xc, 0x2, 0xfa, 0x0, [@remote, @remote, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, @remote]}}}, @rthdrdstopts={{0x160, 0x29, 0x37, {0x84, 0x28, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @pad1, @generic={0x5, 0x77, "e6e095c312dbc555e2029bb6a80045d0e9ea04ef34203d8154664fdb9632cf12d148526f114112262dc776c84110edc9fc639b0962efe183c2e719d5f22b866849ec270f4ac59dbb2d960eb2b50b4be6d6e197e729fc97616d9c6ac0b39f3cadbfd98375aad9c4039efebd0e4711fd9d1a2700594400c0"}, @calipso={0x7, 0x8, {0x1, 0x0, 0x5, 0x4}}, @enc_lim={0x4, 0x1, 0x7}, @generic={0x1f, 0xa1, "e6f32701aab9896b20fce7a053e529406b917f4c8bbab1688233a488269f6112d55273019aa37de8b75f2ecb85acd5a5a727b905a0218ec71394b6c7bb48e213a27274de9eb27c6a066fe9da0878ae7e72b915429baae362973b3fa2b4eda6ec67959a26fabb8537bab3f9f65525f094acaa3c2f2199c69912eefdb8d1368ec693d31c6a20c35d1673c00a4a16bb4de0847fd6d00a3390799d79aaa7d57940f92f"}]}}}, @hopopts={{0x128, 0x29, 0x36, {0x62, 0x21, '\x00', [@enc_lim, @jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0xe6}, @generic={0x7f, 0xff, "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"}]}}}, @hopopts={{0x18, 0x29, 0x36, {0x2}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @multicast1}, r3}}}], 0x488}}, {{&(0x7f0000000940)={0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000000980)="01283d4f44d3e76bb48e1d7506d5c9f3d1443372ed70ed3c4a67564e9b8798ae06c2317eff3f030bf07815bf5add4c7680eedc511673f0a96cf9e550a505a29dd0dd52e5893e57defefbd46449867554744e5d4f7de3e1853d44c38ecd0c34c8ff0329a147f699eb97c7781cccca0d20ab", 0x71}, {&(0x7f0000000a00)="4e85c3338fe654d56d5a044216e3462605d9b54a01fee0d34cd7e6e669f2e0a617cd661a31263bbf9912348cdc987926fe994c4266d97f0a6991acf08c85c5cf691eda192f625a5852fcf4eba631be94b64ba4c47eabbac0aba42bc6d55c4eaf064c22b5851e9ba0c72df04b23f26517ab74ea31abfc283622c2fa93488c4fb178f493275a492c7be506dee42da4a71167407b05f38b9b77a9740cff3e7661522a0dc250ec9a2598b7e3abe978d1d2cdb8ae12cbab7da76b955152193438d526412313ff85f5d220f2617a146162d04171", 0xd1}, {&(0x7f0000000b00)="4f3a2b12ad31544e2b3f47f0ee93ea93e6e4100e49f69a879e5561e88baa4e34f758f63db47c1ad25944c3eb7fa7728c92db4a9ed50be2bde0ff231099c713197863083b0887941f57d3dc4b0b27e88819ad1340a78129a6e7ec8cf87972296ff19f06c95bde3fae8f09c841b45aedf31654d12852390575536e14196c96353c33498fc71f9664e2f7ecf70e204f669958db3d406fbb6818fab3c4973261f1fdcf54f5832aae3d21863ef6bea82608c0ec6660616d437d968137e69853d18a4c552cb86a7849296564697da9825f551e4e83e4e2b0b24552c2487e454abf65ed86da5ad78869bc3092113e62fbb93ca097758ac2cc36d794912adca3dce790403772ddafc6d0274fb650bce8815a751c7188d0b489eaa25577698f8cc3d6ff9e21045a16e413e96bcbd2c84e5978e6999c4da791c44d2b20958ac2c22b82b36204a79aa57c218263abbc5139848a7080125db4ae40aa2465fcaab965896306e684ed125cc61dd59ef4443b0adc5bf866b4b42ed4d58fa73fb1b9ab10374e4685ba8f719ef36059b1b87f40639e2fc9c422871ffc2123d87bc63d13fde7d699689839ae8a1856a1d10adb5adb65997c23240b148f955e3a1aba0064f457f5696e996b70c9f21933091b46064fb62eeabaaeb0840a676d34d09623fd33f42723d3ca08439086dc791aaf10f884926c74ea0c227b210579b5df23f728e9d6e6ebe89cbfacad85c7ca1f20e0db54976f0eeb8a63eec2b6a5b455f35d612428fc5f69a80dff792896eae1ccd8bcb9998626ec39479d11fa90fc623d9e9f81fd6c44921643b83ce2176760586ab104e53f823858d6c78d06f636e3c57cfec2f2bf9bbfba3d7061df95f950a5449aa8f973f7edcb95fc5c5260a474f3552dc7b42a8fefbeaaf1e251f062008374a42ab7aadad860052e47a9d61d3ab0db90da2ab24942272bc32783b642304fa2881e25d05fb215ab79560b42fc89bd96d4d34e8e096dc32bd4706ed50cc9238341194f45e97fc36b94c303f88f8778306072e6ec6b1e033e77a3a0cb502cbd8e311d825ac17caf0748b34beef474ce74a82be6846a443f02a5a5d0429a3b1d1ab5d10fdea6d84efd2119f0025d4b5706792f2522bb641742ce660be00a18be7006e4847e1badec8defb02c6ee9ac294b1e0678ff74adc6931e267ab6c08e747b009b3a390cdc07a1068573baabf88a340e8deb767fb9ab35868e5d2e45ed3382647f1c68dc0c478af1fa4b81ea70ba34d05e7ef91218f225abe06f3ccc7046bca487409bc42b3d663cb6307d10f88b4637d0ad6a0cdf80fbaaaa692c39c9f7011414649a325ba0dbd903d2a81c3eda080812822bb6e3a028074073e0e0f0cef8a1b02e46f4be22f100aaff1514be82ce93786896caa30e340988235da94707b894fea2b0b08da5233a99c67947166ad08b19f41cc259b65d916009ecbffe4f28500dc562a88f4f54913a030a5d543b820f0dc7784d4044bfc71333240c79925d56305d10dc6a149b4c35d440b0a13bbba3fb0ba851e5b62f1d768da58898bd22cfb173ece980cf41b5239f2f95e4869c65d7812622a99bb34e8c4c3ddaccd96589a5fcf9610a1c99f73d331284384b95a78d7c7cd1841947031a903663b74976ed6ae4a4e54c5f8f36a6706c9e0a0ee63da1f3842dda6ff5a21ece97dd68633c4a1d0f2fa364b64888b1a0a00fff45f5c407d4ff5aec99103db998cbf9c18375b00186791882789c855aa11854d345fcc055dbbe35b36814d4519a6215983327f94a22426e2ba93c7cb35e41975a239892beb1ecf2d7b9684bbe4f09a997b9f3efb0e953cfd8042fb39ca205757d9524fc9e9bced06bba24c4ff1010d480d77c9b5e52b0f811abd882cb0bc2ac84aaf2d03c1cc82ee0a88b3fed01256d6d2f6dd92656cd2501edfee268648119570d654db635de31298275e68566396bb3fe3c6e75b527fe70a7bdcd3f8ea98931d25294afc8b75d784ceb00031d3d2b42a952792c0c972abd1109f72f887ae28d02687d65695852ace07eb5b15c31fb12860f8177db0060357b767b16d97990679d71c935938fe94e9a3dd6e6e0e68d4382aa75e16fb00ba1778b0b893a833cb4f553d32ffa98920aa7247df4966d889b8fe98300f09fe97219a4ca04ceab5aa0de6af7a6b52f22ef2654e6e5e0970a8e5c38acf759e34792b3926c1d676c47849fc10571dba0376f010c70277d82f5437536d52ae4908cf25cbacec41424cf574f6af504f41d540646b561a528b509b33d3ef173eccc56d403e2240666493bd73eba86cd421926db5e7f5feb542480697f5d731218de6d807e13afea90c38ea7350d4935ee0368422f6fd000639b221b8f2983f2bfa42172149920d444cedf66fe4c4d85d55d7de0ec2f7f85d41113a0afd219f15253d922ed95a155e1f21581afebe6039efda9fce9ca02c754b44669cd2617c52ff49906e7927a09f8641fd9d82938f25d403525e97aa59cbf9e3b852ae2bdb8d3dfe4f19adecaed6135779781cc8b76851e7a5968bcc3999cac13bedc298707d65994d837af068785ef965084203f81f6b3d0e1a3f04b05e9612dcbf950c28bebf422af0c8666113fd2563b40368cb0e81a43f506300b69272abd027f49b518466348fd43c269bfe7bf0f2c4bcffca25fdfa40f3d4ea1740f10e0f5ca2d6b6f2111f22b0b121c01f1caa1168d7bfb0ee1e84927a54313c0fb65446624d16b9ce5e614141bb23adcc20f1fcd0d6065a0bbee85c9fd538622f9b13c0ed4d772a452fa5e6adfcf97e406ee692006fd884fcf837d5b97d41b088e4da513be1e619c2b9c6e51bab6099171dde519bc62d5df7d8d6de5f1e795984723a6c82b5256448987fd472fe1aa2e16a22b3eeda8482611268bc5705090271f5c47fea603446676e653f6cfe4d39d132c14b12fa65f1b96bfa72e150d95e66e133219fafa01ae310255476cae7a86892515221ecd7fbd247dffc9d4897bfd7ec86de525c3367d50d28d5d9ad135da1482ca9b6d77ef6a4869526f522aa74957f14e6b64f8c75686a77158a2aa6c09e0579480b6cf9f470f5881f3377b3a9984e70e174d62a6df9f6edba5e2730728e5cabc93d019d560ba39ed5bc97c586292ccc35c0bffd3526c11c388ac2259ed6b35897ac95aa5b5bd79d6bde93ebaec098757e87d790fa12d3d04fb6f47bfaccb1df4db2108534f9f93de9ec08ab76d2c94f87542405595849fff817f11bcda66268aa51579d82ca20668ea76af667f402942da1007999b7aea48795a12a5711934def7e98d07e26320e33cc0d1ab27515996e1d8466c8e0f30c58fc190168e4b8dec0b4233ec5fef67283ec2114a3924c4aa4005dc85539c096f99a89e76dd32f65fefb2b03abb9bcb2bf5195e6ad1862840a7c4f47ec6c3dd41891e58b22d39ee41d28ca479bd0957881449eeaf556a0e228ed0795a8a3b31078d7a9e8c796cda224e4dd9138ff9e263e1d6eedd2e52a2cc3cdc86321cc40337311d333b3f22a1f90e2c08a13331112101d74e9768fe4b2a53a734cac6c7afa4e1d00540acb6ab9de4647987f18a7664a93e8307ba110f8318ac8da43936b4a7fa50fb677a7d4b6106d5a8e010840968fdd40633b58ca2355e7c881d2b27017147b90d946c6da94a48d79956681ef746df4e761a34bebe489c154a29327ed2729df3ca631d0437725344ad26e91c7d16b67757285eb2f155175e997775e7ecae571f6d4061db500398e84e03977a28cedfe938c695397af506f3f717b0a2eec1fbdaecfb7dfe9bda6f4e231015856b0c5797b43e20406c073ccc8e53abc05e9ef4c3c375397a8031405b50367f073bfbdc16f69c0b41dac0481284566462873ffeb30bc8f2b01d3d39b3ccf17a851672895bc57d9330700d5e07f35e28dba36ac3ab435878bf92cbe122477cda1e49a2dc5c0a9fc493c5c2ea470b58275f651c461d46abec84cea3543282ed5f73230f7176a85ef94740a86c05a9fa4d214792151f2ef39feb151dfeb9223ddaa5fdbf5a8674f99df4c492c7c1e73a84a523f2b6260d23e651b39a69a4699ac9c65d703228ab388fb1fdadb5939943ab881cfe95c833318f853c976a9037c5197c4fd7240685ec808a1e2a139f81e97d81c2a228f18ea9dfca1872de93fad97bd1852b82cd85144dd7957cb2b6bab21f454afacde7ae4389ad2c784a6fb9ed4212e89c61060dfc9afe25c0371de1a4d38876d4a37b8dd3cf02a1c973f94c40f12f8e7d595c1edd4f1bf0c5022e3193b558c6a091e20df2b6817243990280b1677f63b8b3b25b99c286e2219c5a7dd1b80c26d61d7be9840b9fb51310c35a9b5209c347f234fb74fd8e510a80da649eb162ab542da5b2e7819b404fd574a7dd2c5e43496a64b796f1ea1668c53384e805894ade8f60c620b04891a9f74149d9c4fb0acc31392ec834f5d4cb46f649a2d07d6d57c02e8f25b6db1203825d73a9c7b5f119d29bfce9be31ba9b13f3ae63ec1bed9690329af25a2ad56702adf6ea0874c8a2f09f0bc2689e12b58729bc2c584d43221f4d30a2188449e8c060dda4ce9d5b017224100cf57b0343d6e3e72fd42fc040bcce476ed8ea01bda88520781efb5655bddb41230d49f7a8bd6a10fde2e0f0895746579cdceaf56013263e461820641e3846212e322288ae0f28552b71c61e587b7627941343b8237cec91fdd8f30702ed1318f5c5e560fe25951abefdd949c1fbfefdee251bcc8bbd4dcbdf23c8d534b0f2224517f1a89f56c8d2d0b8cfc906f4aebc2f5684b6f78b0caf5e064e2c273b9aff8bb3750b7cf0029970392a1851ea77e41a4d039929fdc8e4a916f38ddfce688d896cf6837f092c57c1ca0f470739008f9bd4d34eb95535308808eada481d042c38e61fbc9d29eae77b902b677ec9fec2f1141b387c59f1c386f2b6bd764aca85c0541531fe7b59a3882dea9bf0c9a5569f9231136ed40ea901ab2406e54641bbc8f9f714155c2a6e9efae19d7f474c8520ee25bbd63bb7448cce670c7257dc5aa5737167a816ced95e8b631b3106e689abdc5f9ad21ec815983d5a637f5f8973c1923803ef405e9164854fc7ab7d7be6e7f867aed3f771d50ced8c56a31e19dc4d0916e0cfbaefe08037ea696716bee5d9c68a3442a2d77a3a4f1c887cb94f477fb638a5525109dd686b2c2549a2251e0b2a69891c404b9eec7afc720b86e5ece2a99f0e19036267960cc148bb84804f0e24ad4658f4b00984200d58b26bf0978186ea3c14edd91e351252c96aa9e325dc8178c8b3de73c3ac769bf898b7f7c6f7e7e9e77e73a3939404600e7da5d9ef3b9b6719b45cef036b3d1e046e8cc68f14d14ccd26618271961c99ba9718e13415f2ce5e17c253147612c2838e1e530feebe01da43fff8e49cd912892bbf877f7229bd592708f472a7fbe6648d5516f37f26dfa371b605f7eac7fe9a1f4ea6f84cab94f6ac7461d6af60dba58587be9ff431ef0f6c3d086eb7ecde16ade975b5b838ff76f3f5f935f8a19b09a2ae38ec18fc4e38446af802eb006e7504f3e0e45bc26e5c223fe206b65b722f135dbb1ae4f08a67afb15a099bc6c4be6d0983d312fd762acb66cf418a5fe1f6f9aea7c567ffcd4d9d21c780c254e9144d602820ee053ce2c8209c3825843f790404a96fd8528cf4b9b678e4fcd78fece2109c1214fa8112e447574caa879140dce632635c321fe622e1b4b0cd7b85263e6f1b6163e72006225c920b7980f6e2d89c441a1b35ae6c8701aacea5a17a404c8ce144240af77d3434c37ed7539788d3f5", 0x1000}], 0x3, &(0x7f0000001b40)}}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001b80)="7c9f9297d72e33abb686b03a4e787f6006a30ecde4e161096ef243c0a952d7e2ffd191fd5aecd20ddf8d1aedc64a2382943d1ff8506d8a431a282a9fa78dc1ce57c15bbdcd0f8837e3c8779621570d8090404563edd48d66a27794c65d9c80d0478c06221eac8e44a2124b9f5e5e208666f7281c67dc86e6d1dd28dd45e4bb46507975c8490db793808bf23410ef759b01d0dfdc65ce9da8a7d627ab8e34d1fe04a352a9881c2a22b49a41db", 0xac}, {&(0x7f0000001c40)="54645ef9", 0x4}, {&(0x7f0000001c80)="c8fd7ebcb3089a1546aeed586bd04dc55d3640880a7978dbd3ea38d0dbd437912e069ce74e2334f3fc7bc71ecc49618bbbc1219b93fd624afac55645409a13f84453d82c0df176f0d8c857823862152dade581e33ba21018c58417babe970563f4c2c087d27e60affbf0f6223dc965fcc295", 0x72}, {&(0x7f0000001d00)="a1d76ca6eb591193148c793fe2fb9d8ef430c643071e6e4fa82310f50ab644e584c7b081347653a8c04b22267cb60aa81a08d85c056b573fdf833b7a86b24e0b8a73d2fd5780a767aba8a56a2e38d3025a0b9c668f3e53d53eca50523b9e09dc9fd13bdef13ff1147e6af745a4ac7cda2a797be87887023e54e058ae81036a4583cecd16d8b5601681bce6d74506a425a98a598f0df02a22b7b6a4f69b0f7c32ddd401e588394c3a61c9fb6d229d405557179aa254ad8cb9f02198b94ff5a22331", 0xc1}, {&(0x7f0000001e00)="34a04c5d464e65342b9a732788b618c2dec22dd42c7c23945667d3ad1fd6bd482572df14783ffb601141b40322c4f1cc7552933fe4d5747e5626a7a8d8a1bd41066a77191fa10141ddb0540f2d29d9167491fb8cd461185a840606950c296589c2de7205d87c19553ddf3fa0a259495cfed309ea7fef7ecedc026744f692883862a9792523c0e445e979f60eb5dc4ab4", 0x90}, {&(0x7f0000001ec0)="a5c2987ab249bb52c0c8a52e1efbcd5d4c", 0x11}], 0x6, &(0x7f0000001f80)=[@dstopts={{0x1040, 0x29, 0x37, {0x5e, 0x204, '\x00', [@ra={0x5, 0x2, 0xeca}, @ra={0x5, 0x2, 0x43d}, @hao={0xc9, 0x10, @mcast2}, @generic={0x1, 0x1000, "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"}, @pad1, @ra={0x5, 0x2, 0x6}]}}}, @dstopts={{0x168, 0x29, 0x37, {0x2b, 0x2a, '\x00', [@calipso={0x7, 0x38, {0x0, 0xc, 0xf7, 0x4, [0x0, 0xc8f, 0xc47b, 0x101, 0x1, 0x1]}}, @calipso={0x7, 0x38, {0x3, 0xc, 0x5b, 0x4, [0x100000000, 0x80, 0xfb2c, 0x8, 0x6, 0x8]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0xa3, 0xdbf, [0x3]}}, @generic={0xef, 0x8d, "0f3f60d1dc1cfc1a99078737837669555ead0d9a567b636ac4c51ff101bb854303d4dc2b1434dd5fbffa8fa5017b9cab71ef8fc71473b549d5ceded4525dc35e3612c9d3a58c66bb1c46b6ccd0918f8a33f38a4221f73186309a39dca583f6aca8c1675591c173bb385a4a44d229687510a0c56c449aadd8830d6022e34332637f2a7467d6f0ded4da43f75f64"}, @calipso={0x7, 0x20, {0x2, 0x6, 0xc4, 0x5, [0x5, 0x8001, 0xfffffffffffffffb]}}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @remote}]}}}, @hopopts_2292={{0x78, 0x29, 0x36, {0x1, 0xb, '\x00', [@calipso={0x7, 0x30, {0x2, 0xa, 0x81, 0x9, [0x981b, 0x2, 0x5c3ff19, 0x7f, 0xfff]}}, @calipso={0x7, 0x28, {0x3, 0x8, 0x3, 0x4, [0x2, 0x5, 0x7f, 0xb81]}}, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00'}}}], 0x1248}}, {{&(0x7f0000003200)={0xa, 0x4e23, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000003340)=[{&(0x7f0000003240)="2cec6683b7309defff6bcd68643618e4702300bcc720f41bfbd6eddf6ee5f82962cb664ed2e2ed562f1fd43a9e1484d490f85f00091fd73c1516e4c6bb225d66e3d5093289052bfb10056f463a713f20519a766f7a86ee241215e9351be4de9e80ef4a6203c3dd69f457c7d41d2ab647337384f573f774c9aec53c221fa7", 0x7e}, {&(0x7f00000032c0)="1820e8e8d566232a5ab40b2c41ae50e643ae4349f53935587ad873eb886c86717f61f9fcb2154e03358197328336ff32aafbd4ec29467076bbedbce5f2ad447879ef0fc80d3220b8fe9cd425622e1942", 0x50}], 0x2, &(0x7f0000003380)=[@hopopts_2292={{0x30, 0x29, 0x36, {0x87, 0x2, '\x00', [@hao={0xc9, 0x10, @private2}]}}}], 0x30}}, {{&(0x7f00000033c0)={0xa, 0x4e20, 0x2, @private0, 0x7}, 0x1c, &(0x7f0000003580)=[{&(0x7f0000003400)="ae46ef25239a4e2390ab8bad1cbbf2dc3cd86c18f5d410061ac42823d1f4dcd8c33b8e23820e7056d83a56d67065bdca354db11b4e11d6f6245888a86d247335e67f9736a4bbe64158cdce55739d1ea53f4e01caeedac1a4fecf76331a6e1bfbe0410a6bc8e2bac6ab6f11910a316b59344a0d042e336d5713d65e089bc815b7e6b3ac24f80a0f4b881d47c41684658395adea308b7d984f5fa52e7a5aaa853428ca13794fd93dc0cc71276022770bcd2cb376615edf3742e98410cac07264e6232b14", 0xc3}, {&(0x7f0000003500)="efbda71e68179948ef2576bcf0b70b966ff1595f35a237a474624f4723d2531716846e3057d1c735df20b4c5f54ed53e49f33b56692a6a06c69df57053c3d086071bdbb0cb42acf93061c4b8899567e21758fe77e185a5a957d12c30fba15c3f664561b5f6cd3892a96a0463a85b3c5c3b9adad3dcc87d6d2be3b91229d5", 0x7e}], 0x2, &(0x7f00000035c0)=[@dstopts={{0x88, 0x29, 0x37, {0x8, 0xd, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x2, 0x2, 0xfe, 0x2, [0x10001]}}, @enc_lim={0x4, 0x1, 0x8}, @ra={0x5, 0x2, 0x2}, @ra={0x5, 0x2, 0x4233}, @pad1, @calipso={0x7, 0x38, {0x2, 0xc, 0x66, 0x3, [0xff, 0x5, 0xc71, 0x7, 0x3, 0xfffffffffffffffb]}}, @pad1, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @hopopts={{0x40, 0x29, 0x36, {0x32, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0x3fd}, @enc_lim={0x4, 0x1, 0x3f}, @jumbo={0xc2, 0x4, 0x81}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x2e}}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x32, 0x10, 0x0, 0x4, 0x0, [@rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}]}}}], 0x160}}, {{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f0000003740)="4532bbc23e93e47088323c077a8718b90b421d109a0e1b829abc321b6671ae2b355626a7a3e1a05ffb", 0x29}, {&(0x7f0000003780)="f67535f623d429e29ca60952236edaaceaca33", 0x13}, {&(0x7f00000037c0)="3008b9fcc5d04c72510d452055841677aed39126b0474440a85e5abbe506118e10aff9777f1ebfefc9fe29d915ab4243b623399cf8a7c73eaf5ff6da6591d47bdbd0b8b427596d7eeeff1eff774374baebee4db9af5bacca6176b7d906b311370cc5054c2db8a50a1c4ba091b0fcfc4816deaf1ab89ad501968a1037573a534c646ecc100711d2e41b3f26b33b9085059d06c67276cb72c904672256ce24a123d6b01533aefeef77e887cf101855c34e3e8e5e45ac64270a06af5a523a0549868a26161bf835b88da04a14183237c38d22e1", 0xd2}, {&(0x7f00000038c0)="9c7c1ea12d61dabcbaf0afb67f5fe232eed6b1d3b78996c97ff26b35475c69d7ee3539153d4e4dde5f612a9bc6d70cfacd23aa76f6889a96751f0a0291cc71855b372f89aa0cbc02db2abfce8000c12252a384a7eebf0fb2b23fa3377ab35c20da5b1c2b63d9fcb6dd28af6e99dd4cc5ceb93db93b1dee5349d9198590a663ddff5c573263caf5f933ff6b0f3a327b081cf30309593499199fe6e86c48b6018a0e114e5bbc0a75638ef5554c65253b93e5733ed31766f89faea2ef1e99feefd8ca1a90aa4de814b4585dcd1308b5572f656b44810df6a24c97156b48e1d36210d761736c09263a022f0047c90e39f4ed798d590767a88c0bbd54006ce68003f5d241ac2c373edf87b36f45bee76dd3e1cf0894e152cd0b20350b6c9d1f1be482d0999cb572a87e37a0b1b39dc87d5f3203bea3abe36889d5f284a11d8baa3cf4097eb01670bfa8c3dca8dbcc4125b1e10d8d7337043125750d1d48cf688f1c44bc0ed69f0e606e3be709654bdb5b54bc1ba6a53022d90ef3d9b252910b40e69fe93d93e9a3065061641b0a213f8d6b332a71ad647784207a0faaae3fa060e2c34c5d9b6263151a9f2a2df69766c0352049fdda4c85951f20a5d1ab7986011ee25b24229ec9f1cb8974297dc0d74e254946480990c84c6058281249bc60c265b3dc30cdbb38e7fd555dce22314d2e001ab5e27ebe0c9bd736fe7817257928f18ec37b23e4179f00c65f0ab86e38f68814c7b65cec52ea7a6f0cb80d4c845ae39f54980cfb04a89b30c259e21cb353c9e2714781248483c1d3faeef041fb0d2ac4590dc5530635a28e1f780ec733a7a371ad971ffb2a89f1df866acbbc063ca94d5e2c2fa098deeee066bdd4c82e4ac10a1a6ee18d29a429ed2e533fada7443343f255bce37f6fb76d54044d1868183ab3c293b489723d9cc6806f1e9ceeb012c76b5afb57713486fca5cf792f4062823466d004892173c8ccdfce65704bc3e00f7b66293e26814bfd4954404456d2c6ec9b98dd5dbcb84515638daf0e663a2b25a59d7b6d5bbe469358942183efdbca81a6e03926efd2019c3c453b6be84eb80e2c033e3ac981fe662b54c57c4bb4bbd601024e3b4b0f3fae694e28526d28cf522f5860aad4679ed3cddacb1501dc89490a991a1af2a6f533462ea1c3ef1564a043e5b38b4bbe85f0d342b8fe7aeffba451b3152dfb924060e21fe5f548369d75b259c356390a10a54fcc28b22ada1d7955f20e816ea4fe24ecd25af4e313cc91a4b7235436a7dbca9fe1f0072a0776360195009f4b0945aaf2f521d9c3a50c443273aa24491a01796f5b3c60c29f922054de91008996a99319ed9ee1be5ca73f433c7013e990afb0d6441a40cca07ffcb620974c17347425b09be54b853c72af2a2f8181640d19aa316eaeee9cd26e56975302f2f17c39563e07d3c2e4d19e16de42429d3c09722bca32dda12c1e6e020c0650c3cfe8a2a337d6cd4c7d699616fb24a0172d1799b3d7e70effa09371159a38e929f734bfc7e517972bd7668f6679d7545201effc53026960eff2ef301982c1a4bf2623f58469eb6832266c7ebe1f75972cccfb599f6a9b8e1eebd04b652c0f451641b47a1d5d5c18ac0c0e79721161ee122a0ad5c17dceef0d47adf63ed925dca8d7f77ad6b88f23eb1555cbd044c7e807d5ed97642300bc55816616badc526ed5ae3bfa87e33a18429c6cedf04c837f2ade77760f51eeb5cd2c8067c1ae25ca99b7137ddd0315f1c284ffe37251720316bbcfa2c929feb44e64c0f03543deb8f4bf01d39a19500a9d9faf99d9b093ab74277778de25b7361325670605e7e3cc641104d651fa30a328650c2dea69354576441be6ebf7781b231e445532aed9825ccf722cfc4087f6753accb817b315a545e73dc8175b079b8607a2e83546b3fe4425028c39983dd4483eaafe5c1dc1fc6d41248920d82e67b3e6e24380c06db1e23c0caac2ee93edfb46bb227bbe8db91a7ddf8748f729721a889658830b2b7be0b9203d1bef1f91de23ac4d39238cb027675ce74e19718e9edb11f91d8359f4e499164e7a8408f6048c1edcc914a0a8a8e0bee049540bed421cbae543e35a05eecfdd9b63e2abe299e0f9110b79d179004093dd1dbff31d1cc9fb36e50752114e20017a94bf4bd778f3700423a8ee03020ec07a43f656b1cd3c31cfeeb84293340ad00b91ccc498f570cca64a4258f6b6f4c0b4ad9614706fc9e509e40a00825dabb9409686ddc3a06091f48061305ae669e91d5e6aef759248a8224f6bb60897c12194061f2eca8057a6b8c77788513b4e972e576c76df0066adad0a636e84cb56e3c7c0f7a57ae51c7df83ea46185def9d5bf81aafd928e8eb8d1bdb3a7b6b04f3ca66c5f8e544a8117fcd25b607e7dd0b6733f844f0e84ce54c5d0fbc84cd74a5ce1513981a3b40a5acf18931b85c1e0f3b6b8161226e2d5d88308d95ab6e95c5adc3ea56cb8fa51952cf6a4d16d30f8a49e1831d1b92a46d637ea30557a51f8bb6a96ace2df337295cc7aacf059e73cb7669d957ba158de0a2be17517c3b13e08485d7e0e994d392a221c71376c71ab81e05c808291c575d78e546f0cf1aec9729db7c388d7f56fac575a560e173e2d4d836a953b2c286150c6385e1a2419e73d8337af758c1541e282d3e2162a2f0f39ffb9bd5642f0e75eaca0ab43ec623f25e928870f9f440d94971640a9e5c9e63ccfbf3812c8992a72b0a71726bd545126d20009a073cd5a47cf85d359ec9eee17540274fb145cec694d43855aa4a3805cef0c7d59984c2eccb1e391f7358efcd37cb97fa1358a964dda908644fec2cd8ab6a44b040e6d9df7534195927433c9e3a3d36718874191a919382220b1265035bf8e37c3b0dcd694105b77e17ce1aee00a83083a80ba446bb250d4a0d4f3fd8a32eaa68b802d77bbd43f811ec0a4701f529c696b51b5071e6d057777253b4e46e4c308621b72be86e20726e90d3241a78f5dabe1a5a0f1a6925fac685c373fa7e242b66cb31f9966746e26621d33da62817a8d6043c94610d03a15764b35001acbcb7d554bb2bd8ea8eef8a2f9e122f4d27f3df87f682a1678a116c206908227d3569dfcb3282a1ef311d8710d273e6e853df07f32bb767d973a3bdcf1aebf821d74313f7b6c02a531c5cbd695f23baeb45b825c59fefadcd7155216c38b71c494735ef98752088f8b7ff10b23f8988d0c60a1de929d256fb507e94b43c37070500262bb6208598e7b7598a09e82dcc37543de46477f319c650c24c4b9c73d8f314405abef8a151484456c5961b5e6b34348fccd6d5505fac3ad9937071cfe4c5df8092166a34b341512d6e4a71edfed5f1694c18c6249f671135da13b05eeac3e3c3f8a141735be213f4f064f99efa54577bd57c5922ac447e986ea135b3c22c0ff8826ad7cf3682d427282e7f6b7e1774b4e0f1bc08a4be318fbea50c353c0ab950714edef158171ceb02d0033de06916891c9241479f056512bfd8bf565c1a534b37d94739ef8517a51650c00e7bf3cdaca732f63cbae45dc08b839d51824d73b6b21a1679391f217be37dfaac84083cc862693b1c4b837a3a5af60741f6a8d160014abede4f5f48960d6ea31dbc572c5fe77184e71a6d101cf3c441edfcbcff29c7693764ce280f6045952b59aba48b0e53b3686d8efa40a8a6a1c2f409c578f4c0b3b0b4d583c59400d6bd100a120c4109062f74c646c3733880bf7539f7b97d9459e63f65a52e9f5da82e9e5f8304677c0455982e80ef5e024f94c242190eb033e843c4dfe03c807468e837a8ebf296adadcb59b616da4ba97bd363d9ba480ad6982d9476d530a02091c926be21e5677adb5df96a7e01e370c6440dbc04847d545e9bd7aed5f7db448306557e63c3395f646da846e3267f09c9b0d1ab28ab9301526ecf2749d3e7e02995bc9eaa41434ea8acb7d0b3308dac5c862d19c9621c93a4fbdd0b7c90f15b3d79ee2a4a77e9533d0226b7c302f655284a9b4f839a3047ae41af3a26b9cd7652f7fcd9327514ff6748d5223f7d20cc7e5c3792f2ea6aa6c8d3e15646e9516ad63b4bc4dfdf96edfa8607a035f25a583d1db4150a482807299bc85c8da05d8d10ae7bbc9e359de21c4d0ff5b6776adaea1c078163c36f2664a5a6d072e7a4f41d9e000686a8cb970948a3711ab9cff0f638cd0d786c94ad17d27eab173448961b59d239db239423acbccd0b880b0ab3d0e0a3ea91f5de18bc4eb9db7e6302486a653e62038069e9ad71381c1d6e667c7a46c8817e6c55942733a43b2b1a4e9d79352ee92fed8c94bd5b038d58c9928cfc6ed1c7580ac2922da9f4defdae336daf8a668620528eaee4ec8ae2609f50da0a83c6088d95bfb29a76e1abcf6819571526c68f0d3031734deafc9397f7455103a47a4a4cf9273f05d071f443bb509ec72ae04fcfcb5cd3e1e52f64d0714447621821e4a63fe0e1acc8d566e8cc0fc8fb5aca1b416a3fa98c10a6256c9a9411cf0e9b38abb80cf719710b27f526bd0ff633c7bc1c7217128ec234a1211b8e56b70197d58f7b798f47ce2e2736aeba96be1632ef09b965aadc8ca8c57e9a6cc9459093c9e358b7ee09dc22622a1768a2e27f4036ff0961d26e547d4abacc7541dd3ca75760c3b4423d72511848ade2cf54b1efa4840509f36f80f9bb0566b3ca70ed1ed9312ac424c251d1d8be08fa2456131d03acbf759df0170472e0d11f09b1bd467b0aadb6dd4acc9b60da4bd3e3d05ff239cbc6e5142042cdd4d23e61e307e6d1ef3aa04193d20d0236777fe77ef6c043248b9037dfdbcdb13524d157ad24e434b9b1ec5ef1dfbee09bf5d1cc81b140426c6c8f832df3c3809869ef112803869a5db581a1ddeb3b5adcef3a00f719cbd7ddadc0b7644ffe934aa515f33b6c3dc6ba967728efe660287b9a72866481f2d667a5166964054f6e542990f6f7b4623b4d3721b09f36a4e92665cc177d77c14d31ff813ac43b09d1e8d994e242beea00b3fa5e2fd6880524e0226fc082dfed432e003c5acd9ad0e36bc218aee90821bf681118b221d5ee3c00ff4e0ccf244316fa0cd54e70e18f5d59e3c8bcdb150a0dbef98ac831dca9f282e5e319896ef01f49fb7487645e72d8b8df30b85e2aa8d17096116b1c47d47de8ef20dbeb2836dff1dcc744fefee59a6b000a0cd3ddc8979b3f5e225589c0acaed3583f07378b7a551c309b43de5aa1513b46abc7058748d0021c321d94d56f4ff07346364eca15a78df6f4efc8e7cee2d4249b149b940614c6d50fcd44c1e2e6f5f5b4ba565c7d9675e35b0ac505c508eceec9e88ca3e77ca79608063ceab657103959f2427e8d7ca766db4cafecca55b109ede68c12f9f8e9fc8854454631c70f9694e88686a61d361160aea8ccb6460bb0b6779477b2c2a979bb928bb9081a1a8cbf5cff3b10b92176c39eae7ea3aa9b5c17426fc81d0a42b4c3584d13f177715c6baf4a6530fcb85b6d368659e4bd5f5b24f6c60647701dafc6c4d6af8b2156b2001d001a5d6575a004caad318f735f92eb4cc83710112c90ec0740c0ce48640a2e62f6facc445aa4fc127c9e338d7ff251e0b48e068502c31dd60079bb8b9d1f3a8c2707c11496e730526052ba318e62665e2d20b94047cf8ad6fccb2e4662bba381e4eeb891a50ea4eb8b05f717b85da2d9ae8b063f72d4e52ac9a5a1cadab9608b28cf1053fc2ab3fbd9bd73103631516d78eccc32fe5944c6780ac9b99fb1f107b253e097c9a160c852e880d6ecf2c201164d313c945f01471ec13840c8821", 0x1000}, {&(0x7f00000048c0)="aef57e902edc0e1ea0d31bb017463cf2a8847eae2160a3387951976b2d99f03acfa1c8b7d88fe621efccb0c639f2a994b192b4ad821e54bbb3a171d1fde04d4093457ac686d51a5ba0b5d4a05ab083ecf726e7e37c1eaa8d9427ec15c621f9fdf211ce67b01dd96ae2ab21120e5436cf4a9c5cf22d6d8cc6f112960997bc0d0c3c7f1f99a276c48e9229acc456d55350878572601f38826de3b99625a4d8e84fd1296178cce79b", 0xa7}], 0x5, &(0x7f0000004a00)=[@rthdrdstopts={{0x78, 0x29, 0x37, {0x87, 0xb, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @calipso={0x7, 0x48, {0x2, 0x10, 0x1, 0x4, [0x98, 0x200, 0x0, 0x10001, 0x9, 0xd8a, 0x5d, 0x8001]}}]}}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x2b, 0x10, 0x2, 0xe9, 0x0, [@empty, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @remote, @loopback, @empty, @empty]}}}, @dstopts_2292={{0xe8, 0x29, 0x4, {0x2f, 0x19, '\x00', [@generic={0x3, 0x95, "5a20d95e41903d1ce44a3e5fc51a14c15b13f685f4cbb86caa1f20135c7d397728c86cbddc1580af90abdd415d9f9529a434f8893e541d660595c83eddae8aec1e7ace973c1a9d35ee18815ac0e8cc02fa8adf152212c596d22b11c6074958031d72833e5a1b05f0e0bd41a894ccc527d6f826dfe073acca0b9b6518b3c4da715c5950e4f2703941f3a7adf9a487ed2766c26b0c49"}, @hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0x8}, @pad1, @hao={0xc9, 0x10, @private0}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x40}}, @dontfrag={{0x14, 0x29, 0x3e, 0xff}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x21, 0x8, 0x0, 0x9, 0x0, [@private0, @mcast2, @remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}]}}}], 0x280}}], 0x7, 0x20000080) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000080)) r4 = syz_io_uring_setup(0x538c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x122}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 14:54:11 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 84) [ 1464.915647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.921469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1464.990238] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:54:11 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 83) [ 1465.184547] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1465.199266] FAULT_INJECTION: forcing a failure. [ 1465.199266] name failslab, interval 1, probability 0, space 0, times 0 [ 1465.200380] CPU: 0 UID: 0 PID: 9578 Comm: syz-executor.3 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1465.200403] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1465.200414] Call Trace: [ 1465.200423] [ 1465.200431] dump_stack_lvl+0xfa/0x120 [ 1465.200467] should_fail_ex+0x4d7/0x5e0 [ 1465.200496] ? __alloc_skb+0x14c/0x6e0 [ 1465.200530] should_failslab+0xc2/0x120 [ 1465.200560] kmem_cache_alloc_node_noprof+0x6c/0x690 [ 1465.200585] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1465.200615] __alloc_skb+0x14c/0x6e0 [ 1465.200646] ? __alloc_skb+0x5aa/0x6e0 [ 1465.200687] ? __pfx___alloc_skb+0x10/0x10 [ 1465.200734] ? netlink_has_listeners+0x20d/0x430 [ 1465.200775] ? lock_release+0xc8/0x270 [ 1465.200802] alloc_uevent_skb+0x7b/0x210 [ 1465.200832] kobject_uevent_env+0xad2/0xfd0 [ 1465.200859] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1465.200888] ? queue_work_on+0x7e/0xe0 [ 1465.200917] ? bus_to_subsys+0x10e/0x150 [ 1465.200950] driver_bound+0x134/0x1a0 [ 1465.200978] device_bind_driver+0x3d/0x70 [ 1465.201011] mac80211_hwsim_new_radio+0x3f8/0x52a0 [ 1465.201042] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1465.201073] ? do_trace_netlink_extack+0x12a/0x150 [ 1465.201104] ? __nla_validate_parse+0x2e6/0x2880 [ 1465.201135] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1465.201166] hwsim_new_radio_nl+0xb61/0x1300 [ 1465.201188] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1465.201208] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1465.201228] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1465.201256] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1465.201279] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1465.201315] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1465.201341] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1465.201380] ? security_capable+0x2f/0x90 [ 1465.201411] ? ns_capable+0xe2/0x120 [ 1465.201456] genl_rcv_msg+0x532/0x7e0 [ 1465.201476] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1465.201496] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1465.201524] ? __lock_acquire+0x451/0x2250 [ 1465.201556] netlink_rcv_skb+0x147/0x430 [ 1465.201574] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1465.201602] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1465.201635] ? netlink_deliver_tap+0x1af/0xcb0 [ 1465.201669] genl_rcv+0x28/0x40 [ 1465.201686] netlink_unicast+0x5a7/0x870 [ 1465.201704] ? __pfx_netlink_unicast+0x10/0x10 [ 1465.201722] ? __virt_addr_valid+0x100/0x5d0 [ 1465.201758] netlink_sendmsg+0x8a3/0xd80 [ 1465.201785] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1465.201814] ____sys_sendmsg+0xa38/0xbf0 [ 1465.201841] ? copy_msghdr_from_user+0xfb/0x150 [ 1465.201862] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1465.201898] ? lock_release+0xc8/0x270 [ 1465.201920] ? perf_trace_lock_acquire+0xc8/0x580 [ 1465.201946] ___sys_sendmsg+0x10f/0x1b0 [ 1465.201963] ? __pfx____sys_sendmsg+0x10/0x10 [ 1465.201982] ? perf_trace_lock+0xbb/0x4f0 [ 1465.202013] ? __pfx_perf_trace_lock+0x10/0x10 [ 1465.202050] ? lock_acquire+0x15e/0x2d0 [ 1465.202082] ? __fget_files+0x34/0x3b0 [ 1465.202106] ? find_held_lock+0x2b/0x80 [ 1465.202126] ? __fget_files+0x203/0x3b0 [ 1465.202151] ? lock_release+0xc8/0x270 [ 1465.202187] ? __fget_files+0x20d/0x3b0 [ 1465.202223] __sys_sendmsg+0x150/0x200 [ 1465.202244] ? __pfx___sys_sendmsg+0x10/0x10 [ 1465.202288] do_syscall_64+0xbf/0x420 [ 1465.202328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1465.202357] RIP: 0033:0x7fbd3c214b19 [ 1465.202373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1465.202401] RSP: 002b:00007fbd3978a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1465.202419] RAX: ffffffffffffffda RBX: 00007fbd3c327f60 RCX: 00007fbd3c214b19 [ 1465.202431] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1465.202447] RBP: 00007fbd3978a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1465.202466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1465.202485] R13: 00007fffae4888ff R14: 00007fbd3978a300 R15: 0000000000022000 [ 1465.202524] [ 1465.244099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1465.245123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1465.265989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1465.267234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1465.267498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1465.273802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:54:22 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x5000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:54:22 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) pwrite64(r0, &(0x7f0000000700)="5aa0339d8464d08d9daf0547fba9e693118878589af5aa3c0b300f6979a465ae109302284ea2b5eb3c9c60677ad3fabab32560ecb9b862485a47cf490bbc77859d02fcd4c4f7cec419d8775a641d3ca05db0f5a1cbf8f6eea81c30ebe5280a29d3e06a1b147e4cead0903ec9fac0ee713cc698baac86c8c7d7dbb2ddcc0637ea16d02c6cfa2c6956cadcc4e8209bd3666937f4a3dbf79a28bb", 0x99, 0x8e) r1 = accept$inet6(0xffffffffffffffff, &(0x7f00000007c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000800)=0x1c) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000840)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) syz_usb_connect$cdc_ecm(0x4, 0x61, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x1, 0x7, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x9, 0x24, 0x6, 0x0, 0x0, "2c9c7ed2"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x1, 0x5, 0x6}, [@dmm={0x7, 0x24, 0x14, 0x29bc, 0xe48b}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x1f, 0x1, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xf6, 0x38, 0x1}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x0, 0x3, 0x3, 0x8, 0x6}, 0x1b, &(0x7f0000000200)={0x5, 0xf, 0x1b, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0xc1, 0xf8, 0x6, 0x5, 0xb8}, @wireless={0xb, 0x10, 0x1, 0x2, 0xc, 0xff, 0x9, 0x7, 0x40}]}, 0x9, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1401}}, {0x67, &(0x7f00000002c0)=@string={0x67, 0x3, "7eea0f814124a1228e43f665a765c5764bc4c0ff656a99bec08145f79660f626c227f1873d4f2dc9609d9b49514356a942b153f7e6c0b462994c13317d534895f4a0a29b014c5e278b328ece963daa4d35bb35898e31115f7c11dc3971992800d17c516eb0"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x843}}, {0x95, &(0x7f0000000400)=@string={0x95, 0x3, "b967044e3de5a739e9d97c2a2c3012b7d8b5d5aed7c780dbc40d0d7776c3e8dab5e7a59d101161f47dc1af6011cf9287f3bc700ca1de431e714ade27dd862513a9d494df49032bdf9fcf768f1aca9434c925f6f3de8b9d935eefb1d40c6a5387f5732e25c12966bc158ce05d06516c7fc3e0674139b5638e692929649a6717845ee5b4daafa14225e52f7ea075b0e9827449a2"}}, {0x94, &(0x7f00000004c0)=@string={0x94, 0x3, "3ddddfaf7a80e30e6d0180f63b9bd45a0f62b905e181aee0299c5e02549a8a47e72eca1e34d9b843706a7c8edfe018449b63b81e3df424cadbba5a3bc65744b6c44d7dfb26426d9d885be265b04dfbf540a56b9bdd9e35a7d2929b282c9bbd9f04145eb14a21b6459ab1357037828ebe16a16316d37e89ac48348ef26bd334bce36d305a0f5f500c914e4d81cb6c8a250ddd"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x436}}, {0x77, &(0x7f00000005c0)=@string={0x77, 0x3, "0d1642e59d0d31d3261881053dcf3e2cafa19fb0c8a17feb2fb5a0f97c43e249684fcf6db17a4ce2e9d5470fec1ca852a78a15ceaa54aeb59ec737102000012b9aa1378bb85c065bc17f0119d75b66a5e57ae360f5a197d6e8357abbe4ded3131f07d0a7cc9c4f91228ce612a5bc21198c8152a842"}}]}) close_range(r0, 0xffffffffffffffff, 0x0) 14:54:22 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x9a1f0000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:54:22 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 84) 14:54:22 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x84e00000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:54:22 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x7dc70000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:54:22 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x97c10000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:54:22 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 85) [ 1475.793070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1475.801030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1475.802313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1475.804419] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1475.808053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1475.808366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1475.809473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1475.811265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1475.812221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1475.813227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1475.816640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1475.821665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1475.824298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1475.910489] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1475.913063] FAULT_INJECTION: forcing a failure. [ 1475.913063] name failslab, interval 1, probability 0, space 0, times 0 [ 1475.914193] CPU: 1 UID: 0 PID: 9597 Comm: syz-executor.4 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1475.914212] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1475.914221] Call Trace: [ 1475.914226] [ 1475.914232] dump_stack_lvl+0xfa/0x120 [ 1475.914260] should_fail_ex+0x4d7/0x5e0 [ 1475.914276] ? __alloc_workqueue+0xbe7/0x1820 [ 1475.914293] ? __alloc_workqueue+0xbe7/0x1820 [ 1475.914307] should_failslab+0xc2/0x120 [ 1475.914324] __kmalloc_noprof+0xc4/0x710 [ 1475.914350] __alloc_workqueue+0xbe7/0x1820 [ 1475.914365] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1475.914385] ? do_raw_spin_lock+0x123/0x260 [ 1475.914410] alloc_workqueue_noprof+0xc7/0x200 [ 1475.914425] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 1475.914444] ? kasan_save_track+0x14/0x30 [ 1475.914461] ? __kasan_kmalloc+0x7f/0x90 [ 1475.914484] ieee80211_register_hw+0x1eb8/0x3e10 [ 1475.914511] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1475.914530] ? net_generic+0x25/0x2a0 [ 1475.914552] ? find_held_lock+0x2b/0x80 [ 1475.914566] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1475.914588] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1475.914607] ? __hrtimer_setup+0x1a4/0x2b0 [ 1475.914632] mac80211_hwsim_new_radio+0x29e8/0x52a0 [ 1475.914663] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1475.914686] hwsim_new_radio_nl+0xb61/0x1300 [ 1475.914699] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1475.914718] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1475.914736] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1475.914759] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1475.914778] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1475.914800] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1475.914817] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1475.914842] ? security_capable+0x2f/0x90 [ 1475.914865] ? ns_capable+0xe2/0x120 [ 1475.914905] genl_rcv_msg+0x532/0x7e0 [ 1475.914926] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1475.914942] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1475.914957] ? __lock_acquire+0x451/0x2250 [ 1475.914982] netlink_rcv_skb+0x147/0x430 [ 1475.914996] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1475.915013] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1475.915037] ? netlink_deliver_tap+0x1af/0xcb0 [ 1475.915064] genl_rcv+0x28/0x40 [ 1475.915077] netlink_unicast+0x5a7/0x870 [ 1475.915094] ? __pfx_netlink_unicast+0x10/0x10 [ 1475.915108] ? __virt_addr_valid+0x100/0x5d0 [ 1475.915132] netlink_sendmsg+0x8a3/0xd80 [ 1475.915150] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1475.915174] ____sys_sendmsg+0xa38/0xbf0 [ 1475.915193] ? copy_msghdr_from_user+0xfb/0x150 [ 1475.915207] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1475.915232] ? lock_acquire+0x15e/0x2d0 [ 1475.915252] ___sys_sendmsg+0x10f/0x1b0 [ 1475.915266] ? __pfx____sys_sendmsg+0x10/0x10 [ 1475.915279] ? perf_trace_lock+0xbb/0x4f0 [ 1475.915301] ? __pfx_perf_trace_lock+0x10/0x10 [ 1475.915318] ? proc_fail_nth_write+0x97/0x220 [ 1475.915341] ? lock_acquire+0x15e/0x2d0 [ 1475.915358] ? __fget_files+0x34/0x3b0 [ 1475.915374] ? find_held_lock+0x2b/0x80 [ 1475.915387] ? __fget_files+0x203/0x3b0 [ 1475.915401] ? lock_release+0xc8/0x270 [ 1475.915422] ? __fget_files+0x20d/0x3b0 [ 1475.915445] __sys_sendmsg+0x150/0x200 [ 1475.915458] ? __pfx___sys_sendmsg+0x10/0x10 [ 1475.915479] ? __pfx_ksys_write+0x10/0x10 [ 1475.915492] ? irqentry_exit+0xee/0x650 [ 1475.915509] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1475.915526] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1475.915550] do_syscall_64+0xbf/0x420 [ 1475.915571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1475.915585] RIP: 0033:0x7f3b21b1bb19 [ 1475.915596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1475.915610] RSP: 002b:00007f3b1f091188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1475.915623] RAX: ffffffffffffffda RBX: 00007f3b21c2ef60 RCX: 00007f3b21b1bb19 [ 1475.915632] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1475.915640] RBP: 00007f3b1f0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1475.915648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1475.915656] R13: 00007ffe815263cf R14: 00007f3b1f091300 R15: 0000000000022000 [ 1475.915677] 14:54:22 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 85) 14:54:22 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 86) [ 1476.009596] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1476.013272] FAULT_INJECTION: forcing a failure. [ 1476.013272] name failslab, interval 1, probability 0, space 0, times 0 [ 1476.014269] CPU: 0 UID: 0 PID: 9608 Comm: syz-executor.3 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1476.014287] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1476.014295] Call Trace: [ 1476.014300] [ 1476.014305] dump_stack_lvl+0xfa/0x120 [ 1476.014331] should_fail_ex+0x4d7/0x5e0 [ 1476.014351] should_failslab+0xc2/0x120 [ 1476.014369] __kmalloc_cache_node_noprof+0x74/0x660 [ 1476.014384] ? __alloc_workqueue+0x5f0/0x1820 [ 1476.014404] __alloc_workqueue+0x5f0/0x1820 [ 1476.014426] alloc_workqueue_noprof+0xc7/0x200 [ 1476.014441] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 1476.014460] ? kasan_save_track+0x14/0x30 [ 1476.014476] ? __kasan_kmalloc+0x7f/0x90 [ 1476.014499] ieee80211_register_hw+0x1eb8/0x3e10 [ 1476.014526] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1476.014545] ? net_generic+0x25/0x2a0 [ 1476.014567] ? find_held_lock+0x2b/0x80 [ 1476.014582] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1476.014606] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1476.014625] ? __hrtimer_setup+0x1a4/0x2b0 [ 1476.014650] mac80211_hwsim_new_radio+0x29e8/0x52a0 [ 1476.014681] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1476.014704] hwsim_new_radio_nl+0xb61/0x1300 [ 1476.014717] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1476.014735] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1476.014753] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1476.014776] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1476.014794] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1476.014816] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1476.014834] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1476.014859] ? security_capable+0x2f/0x90 [ 1476.014888] ? ns_capable+0xe2/0x120 [ 1476.014911] genl_rcv_msg+0x532/0x7e0 [ 1476.014930] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1476.014947] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1476.014963] ? __lock_acquire+0x451/0x2250 [ 1476.014988] netlink_rcv_skb+0x147/0x430 [ 1476.015003] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1476.015021] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1476.015046] ? netlink_deliver_tap+0x1af/0xcb0 [ 1476.015073] genl_rcv+0x28/0x40 [ 1476.015089] netlink_unicast+0x5a7/0x870 [ 1476.015107] ? __pfx_netlink_unicast+0x10/0x10 [ 1476.015123] ? __virt_addr_valid+0x100/0x5d0 [ 1476.015148] netlink_sendmsg+0x8a3/0xd80 [ 1476.015168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1476.015192] ____sys_sendmsg+0xa38/0xbf0 [ 1476.015215] ? copy_msghdr_from_user+0xfb/0x150 [ 1476.015230] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1476.015251] ? __pfx_perf_tp_event+0x10/0x10 [ 1476.015269] ? lock_acquire+0x15e/0x2d0 [ 1476.015291] ___sys_sendmsg+0x10f/0x1b0 [ 1476.015306] ? __pfx____sys_sendmsg+0x10/0x10 [ 1476.015320] ? perf_trace_lock+0xbb/0x4f0 [ 1476.015343] ? __pfx_perf_trace_lock+0x10/0x10 [ 1476.015361] ? proc_fail_nth_write+0x97/0x220 [ 1476.015386] ? lock_acquire+0x15e/0x2d0 [ 1476.015403] ? __fget_files+0x34/0x3b0 [ 1476.015421] ? find_held_lock+0x2b/0x80 [ 1476.015434] ? __fget_files+0x203/0x3b0 [ 1476.015449] ? lock_release+0xc8/0x270 [ 1476.015471] ? __fget_files+0x20d/0x3b0 [ 1476.015494] __sys_sendmsg+0x150/0x200 [ 1476.015510] ? __pfx___sys_sendmsg+0x10/0x10 [ 1476.015523] ? perf_trace_preemptirq_template+0x259/0x430 [ 1476.015550] ? __pfx_ksys_write+0x10/0x10 [ 1476.015566] ? irqentry_exit+0xee/0x650 [ 1476.015583] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1476.015601] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1476.015626] do_syscall_64+0xbf/0x420 [ 1476.015648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1476.015663] RIP: 0033:0x7fbd3c214b19 [ 1476.015675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1476.015688] RSP: 002b:00007fbd3978a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1476.015704] RAX: ffffffffffffffda RBX: 00007fbd3c327f60 RCX: 00007fbd3c214b19 [ 1476.015714] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1476.015723] RBP: 00007fbd3978a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1476.015732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1476.015740] R13: 00007fffae4888ff R14: 00007fbd3978a300 R15: 0000000000022000 [ 1476.015762] [ 1476.047262] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1476.050001] FAULT_INJECTION: forcing a failure. [ 1476.050001] name failslab, interval 1, probability 0, space 0, times 0 [ 1476.051069] CPU: 1 UID: 0 PID: 9609 Comm: syz-executor.4 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1476.051088] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1476.051097] Call Trace: [ 1476.051103] [ 1476.051109] dump_stack_lvl+0xfa/0x120 [ 1476.051139] should_fail_ex+0x4d7/0x5e0 [ 1476.051161] ? skb_clone+0x191/0x400 [ 1476.051176] should_failslab+0xc2/0x120 [ 1476.051195] kmem_cache_alloc_noprof+0x69/0x630 [ 1476.051216] skb_clone+0x191/0x400 [ 1476.051233] netlink_broadcast_filtered+0xab1/0xe90 [ 1476.051270] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 1476.051302] netlink_broadcast+0x39/0x50 [ 1476.051327] kobject_uevent_env+0xa88/0xfd0 [ 1476.051345] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1476.051366] ? queue_work_on+0x7e/0xe0 [ 1476.051386] ? bus_to_subsys+0x10e/0x150 [ 1476.051408] driver_bound+0x134/0x1a0 [ 1476.051431] device_bind_driver+0x3d/0x70 [ 1476.051452] mac80211_hwsim_new_radio+0x3f8/0x52a0 [ 1476.051476] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1476.051499] ? do_trace_netlink_extack+0x12a/0x150 [ 1476.051519] ? __nla_validate_parse+0x2e6/0x2880 [ 1476.051538] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1476.051563] hwsim_new_radio_nl+0xb61/0x1300 [ 1476.051578] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1476.051596] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1476.051614] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1476.051639] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1476.051657] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1476.051680] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1476.051699] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1476.051726] ? security_capable+0x2f/0x90 [ 1476.051751] ? ns_capable+0xe2/0x120 [ 1476.051777] genl_rcv_msg+0x532/0x7e0 [ 1476.051797] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1476.051814] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1476.051830] ? __lock_acquire+0x451/0x2250 [ 1476.051856] netlink_rcv_skb+0x147/0x430 [ 1476.051872] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1476.051900] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1476.051927] ? netlink_deliver_tap+0x1af/0xcb0 [ 1476.051954] genl_rcv+0x28/0x40 [ 1476.051968] netlink_unicast+0x5a7/0x870 [ 1476.051987] ? __pfx_netlink_unicast+0x10/0x10 [ 1476.052002] ? __virt_addr_valid+0x100/0x5d0 [ 1476.052028] netlink_sendmsg+0x8a3/0xd80 [ 1476.052048] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1476.052074] ____sys_sendmsg+0xa38/0xbf0 [ 1476.052095] ? copy_msghdr_from_user+0xfb/0x150 [ 1476.052109] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1476.052136] ? lock_acquire+0x15e/0x2d0 [ 1476.052157] ___sys_sendmsg+0x10f/0x1b0 [ 1476.052172] ? __pfx____sys_sendmsg+0x10/0x10 [ 1476.052184] ? perf_trace_lock+0xbb/0x4f0 [ 1476.052208] ? __pfx_perf_trace_lock+0x10/0x10 [ 1476.052226] ? proc_fail_nth_write+0x97/0x220 [ 1476.052251] ? lock_acquire+0x15e/0x2d0 [ 1476.052268] ? __fget_files+0x34/0x3b0 [ 1476.052285] ? find_held_lock+0x2b/0x80 [ 1476.052298] ? __fget_files+0x203/0x3b0 [ 1476.052314] ? lock_release+0xc8/0x270 [ 1476.052335] ? __fget_files+0x20d/0x3b0 [ 1476.052360] __sys_sendmsg+0x150/0x200 [ 1476.052373] ? __pfx___sys_sendmsg+0x10/0x10 [ 1476.052396] ? __pfx_ksys_write+0x10/0x10 [ 1476.052410] ? irqentry_exit+0xee/0x650 [ 1476.052428] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1476.052447] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1476.052472] do_syscall_64+0xbf/0x420 [ 1476.052495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1476.052509] RIP: 0033:0x7f3b21b1bb19 [ 1476.052522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1476.052535] RSP: 002b:00007f3b1f091188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1476.052549] RAX: ffffffffffffffda RBX: 00007f3b21c2ef60 RCX: 00007f3b21b1bb19 [ 1476.052558] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1476.052566] RBP: 00007f3b1f0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1476.052574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1476.052582] R13: 00007ffe815263cf R14: 00007f3b1f091300 R15: 0000000000022000 [ 1476.052605] [ 1476.349317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1476.353283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1476.355922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1476.357589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:54:33 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 86) 14:54:33 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 87) 14:54:33 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x7ec70000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:54:33 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x97ffffff, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:54:33 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x85c10000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:54:33 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x6000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:54:33 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xba535ec5, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:54:33 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000100)) [ 1486.694241] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1486.697318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1486.700011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1486.701051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1486.703257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1486.720556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1486.727990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1486.733311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1486.736114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1486.766095] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:54:33 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 87) [ 1486.970300] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1486.980142] FAULT_INJECTION: forcing a failure. [ 1486.980142] name failslab, interval 1, probability 0, space 0, times 0 [ 1486.984454] CPU: 0 UID: 0 PID: 9630 Comm: syz-executor.3 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1486.984473] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1486.984482] Call Trace: [ 1486.984487] [ 1486.984492] dump_stack_lvl+0xfa/0x120 [ 1486.984523] should_fail_ex+0x4d7/0x5e0 [ 1486.984543] should_failslab+0xc2/0x120 [ 1486.984562] __kmalloc_cache_node_noprof+0x74/0x660 [ 1486.984577] ? __alloc_workqueue+0xde5/0x1820 [ 1486.984598] __alloc_workqueue+0xde5/0x1820 [ 1486.984619] alloc_workqueue_noprof+0xc7/0x200 [ 1486.984633] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 1486.984651] ? kasan_save_track+0x14/0x30 [ 1486.984667] ? __kasan_kmalloc+0x7f/0x90 [ 1486.984689] ieee80211_register_hw+0x1eb8/0x3e10 [ 1486.984716] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1486.984734] ? net_generic+0x25/0x2a0 [ 1486.984756] ? find_held_lock+0x2b/0x80 [ 1486.984771] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1486.984796] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1486.984814] ? __hrtimer_setup+0x1a4/0x2b0 [ 1486.984838] mac80211_hwsim_new_radio+0x29e8/0x52a0 [ 1486.984869] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1486.984895] hwsim_new_radio_nl+0xb61/0x1300 [ 1486.984908] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1486.984925] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1486.984942] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1486.984964] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1486.984982] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1486.985003] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1486.985019] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1486.985044] ? security_capable+0x2f/0x90 [ 1486.985066] ? ns_capable+0xe2/0x120 [ 1486.985090] genl_rcv_msg+0x532/0x7e0 [ 1486.985108] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1486.985124] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1486.985138] ? __lock_acquire+0x451/0x2250 [ 1486.985161] netlink_rcv_skb+0x147/0x430 [ 1486.985174] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1486.985190] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1486.985214] ? netlink_deliver_tap+0x1af/0xcb0 [ 1486.985239] genl_rcv+0x28/0x40 [ 1486.985251] netlink_unicast+0x5a7/0x870 [ 1486.985268] ? __pfx_netlink_unicast+0x10/0x10 [ 1486.985281] ? __virt_addr_valid+0x100/0x5d0 [ 1486.985306] netlink_sendmsg+0x8a3/0xd80 [ 1486.985323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1486.985346] ____sys_sendmsg+0xa38/0xbf0 [ 1486.985367] ? copy_msghdr_from_user+0xfb/0x150 [ 1486.985382] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1486.985401] ? __pfx_perf_tp_event+0x10/0x10 [ 1486.985419] ? lock_acquire+0x15e/0x2d0 [ 1486.985438] ___sys_sendmsg+0x10f/0x1b0 [ 1486.985451] ? __pfx____sys_sendmsg+0x10/0x10 [ 1486.985462] ? perf_trace_lock+0xbb/0x4f0 [ 1486.985484] ? __pfx_perf_trace_lock+0x10/0x10 [ 1486.985501] ? proc_fail_nth_write+0x97/0x220 [ 1486.985527] ? lock_acquire+0x15e/0x2d0 [ 1486.985543] ? __fget_files+0x34/0x3b0 [ 1486.985559] ? find_held_lock+0x2b/0x80 [ 1486.985571] ? __fget_files+0x203/0x3b0 [ 1486.985585] ? lock_release+0xc8/0x270 [ 1486.985604] ? __fget_files+0x20d/0x3b0 [ 1486.985626] __sys_sendmsg+0x150/0x200 [ 1486.985638] ? __pfx___sys_sendmsg+0x10/0x10 [ 1486.985660] ? perf_trace_preemptirq_template+0x259/0x430 [ 1486.985686] ? __pfx_ksys_write+0x10/0x10 [ 1486.985701] ? irqentry_exit+0xee/0x650 [ 1486.985717] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1486.985732] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1486.985755] do_syscall_64+0xbf/0x420 [ 1486.985775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1486.985789] RIP: 0033:0x7fbd3c214b19 [ 1486.985800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1486.985813] RSP: 002b:00007fbd3978a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1486.985826] RAX: ffffffffffffffda RBX: 00007fbd3c327f60 RCX: 00007fbd3c214b19 [ 1486.985835] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1486.985843] RBP: 00007fbd3978a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1486.985851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1486.985859] R13: 00007fffae4888ff R14: 00007fbd3978a300 R15: 0000000000022000 [ 1486.985880] 14:54:33 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 88) 14:54:33 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 88) [ 1487.077740] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1487.081325] FAULT_INJECTION: forcing a failure. [ 1487.081325] name failslab, interval 1, probability 0, space 0, times 0 [ 1487.082531] CPU: 0 UID: 0 PID: 9637 Comm: syz-executor.3 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1487.082550] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1487.082559] Call Trace: [ 1487.082564] [ 1487.082570] dump_stack_lvl+0xfa/0x120 [ 1487.082594] should_fail_ex+0x4d7/0x5e0 [ 1487.082609] ? apply_wqattrs_prepare+0x107/0xb60 [ 1487.082635] ? apply_wqattrs_prepare+0x107/0xb60 [ 1487.082655] should_failslab+0xc2/0x120 [ 1487.082673] __kmalloc_noprof+0xc4/0x710 [ 1487.082696] ? lock_is_held_type+0x9e/0x120 [ 1487.082716] apply_wqattrs_prepare+0x107/0xb60 [ 1487.082745] apply_workqueue_attrs_locked+0x64/0xf0 [ 1487.082765] __alloc_workqueue+0xf9d/0x1820 [ 1487.082786] alloc_workqueue_noprof+0xc7/0x200 [ 1487.082800] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 1487.082818] ? kasan_save_track+0x14/0x30 [ 1487.082833] ? __kasan_kmalloc+0x7f/0x90 [ 1487.082855] ieee80211_register_hw+0x1eb8/0x3e10 [ 1487.082881] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1487.082904] ? net_generic+0x25/0x2a0 [ 1487.082924] ? find_held_lock+0x2b/0x80 [ 1487.082938] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1487.082961] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1487.082978] ? __hrtimer_setup+0x1a4/0x2b0 [ 1487.083002] mac80211_hwsim_new_radio+0x29e8/0x52a0 [ 1487.083031] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1487.083053] hwsim_new_radio_nl+0xb61/0x1300 [ 1487.083067] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1487.083084] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1487.083101] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1487.083123] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1487.083141] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1487.083162] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1487.083178] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1487.083202] ? security_capable+0x2f/0x90 [ 1487.083224] ? ns_capable+0xe2/0x120 [ 1487.083249] genl_rcv_msg+0x532/0x7e0 [ 1487.083267] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1487.083283] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1487.083297] ? __lock_acquire+0x451/0x2250 [ 1487.083321] netlink_rcv_skb+0x147/0x430 [ 1487.083334] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1487.083350] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1487.083373] ? netlink_deliver_tap+0x1af/0xcb0 [ 1487.083398] genl_rcv+0x28/0x40 [ 1487.083410] netlink_unicast+0x5a7/0x870 [ 1487.083428] ? __pfx_netlink_unicast+0x10/0x10 [ 1487.083443] ? __virt_addr_valid+0x100/0x5d0 [ 1487.083468] netlink_sendmsg+0x8a3/0xd80 [ 1487.083486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1487.083509] ____sys_sendmsg+0xa38/0xbf0 [ 1487.083527] ? copy_msghdr_from_user+0xfb/0x150 [ 1487.083541] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1487.083561] ? __pfx_perf_tp_event+0x10/0x10 [ 1487.083578] ? lock_acquire+0x15e/0x2d0 [ 1487.083596] ___sys_sendmsg+0x10f/0x1b0 [ 1487.083610] ? __pfx____sys_sendmsg+0x10/0x10 [ 1487.083621] ? perf_trace_lock+0xbb/0x4f0 [ 1487.083643] ? __pfx_perf_trace_lock+0x10/0x10 [ 1487.083659] ? proc_fail_nth_write+0x97/0x220 [ 1487.083681] ? lock_acquire+0x15e/0x2d0 [ 1487.083696] ? __fget_files+0x34/0x3b0 [ 1487.083712] ? find_held_lock+0x2b/0x80 [ 1487.083725] ? __fget_files+0x203/0x3b0 [ 1487.083738] ? lock_release+0xc8/0x270 [ 1487.083757] ? __fget_files+0x20d/0x3b0 [ 1487.083778] __sys_sendmsg+0x150/0x200 [ 1487.083791] ? __pfx___sys_sendmsg+0x10/0x10 [ 1487.083802] ? perf_trace_preemptirq_template+0x259/0x430 [ 1487.083827] ? __pfx_ksys_write+0x10/0x10 [ 1487.083839] ? irqentry_exit+0xee/0x650 [ 1487.083854] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1487.083870] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1487.083892] do_syscall_64+0xbf/0x420 [ 1487.083911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.083925] RIP: 0033:0x7fbd3c214b19 [ 1487.083935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1487.083947] RSP: 002b:00007fbd3978a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1487.083959] RAX: ffffffffffffffda RBX: 00007fbd3c327f60 RCX: 00007fbd3c214b19 [ 1487.083968] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1487.083975] RBP: 00007fbd3978a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1487.083983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1487.083990] R13: 00007fffae4888ff R14: 00007fbd3978a300 R15: 0000000000022000 [ 1487.084011] [ 1487.124103] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:54:33 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 89) 14:54:33 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x7fc70000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:54:33 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x86c10000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:54:33 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x98c10000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:54:33 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0xc55e53ba, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) [ 1487.315339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1487.318825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1487.320263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1487.321253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:54:33 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x7000000, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) 14:54:33 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) r2 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) [ 1487.404523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1487.407990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1487.409098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1487.412271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1487.417619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1487.419088] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1487.426863] FAULT_INJECTION: forcing a failure. [ 1487.426863] name failslab, interval 1, probability 0, space 0, times 0 [ 1487.431015] CPU: 1 UID: 0 PID: 9640 Comm: syz-executor.3 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1487.431053] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1487.431067] Call Trace: [ 1487.431075] [ 1487.431085] dump_stack_lvl+0xfa/0x120 [ 1487.431127] should_fail_ex+0x4d7/0x5e0 [ 1487.431160] should_failslab+0xc2/0x120 [ 1487.431189] __kmalloc_cache_node_noprof+0x74/0x660 [ 1487.431214] ? __alloc_workqueue+0xde5/0x1820 [ 1487.431248] __alloc_workqueue+0xde5/0x1820 [ 1487.431286] alloc_workqueue_noprof+0xc7/0x200 [ 1487.431312] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 1487.431345] ? kasan_save_track+0x14/0x30 [ 1487.431373] ? __kasan_kmalloc+0x7f/0x90 [ 1487.431413] ieee80211_register_hw+0x1eb8/0x3e10 [ 1487.431460] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1487.431493] ? net_generic+0x25/0x2a0 [ 1487.431528] ? find_held_lock+0x2b/0x80 [ 1487.431553] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1487.431592] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1487.431623] ? __hrtimer_setup+0x1a4/0x2b0 [ 1487.431666] mac80211_hwsim_new_radio+0x29e8/0x52a0 [ 1487.431720] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1487.431761] hwsim_new_radio_nl+0xb61/0x1300 [ 1487.431784] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1487.431814] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1487.431845] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1487.431885] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1487.431916] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1487.431954] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1487.431984] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1487.432027] ? security_capable+0x2f/0x90 [ 1487.432067] ? ns_capable+0xe2/0x120 [ 1487.432107] genl_rcv_msg+0x532/0x7e0 [ 1487.432140] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1487.432168] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1487.432195] ? __lock_acquire+0x451/0x2250 [ 1487.432238] netlink_rcv_skb+0x147/0x430 [ 1487.432262] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1487.432292] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1487.432335] ? netlink_deliver_tap+0x1af/0xcb0 [ 1487.432380] genl_rcv+0x28/0x40 [ 1487.432403] netlink_unicast+0x5a7/0x870 [ 1487.432434] ? __pfx_netlink_unicast+0x10/0x10 [ 1487.432458] ? __virt_addr_valid+0x100/0x5d0 [ 1487.432499] netlink_sendmsg+0x8a3/0xd80 [ 1487.432531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1487.432573] ____sys_sendmsg+0xa38/0xbf0 [ 1487.432605] ? copy_msghdr_from_user+0xfb/0x150 [ 1487.432629] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1487.432665] ? __pfx_perf_tp_event+0x10/0x10 [ 1487.432695] ? lock_acquire+0x15e/0x2d0 [ 1487.432730] ___sys_sendmsg+0x10f/0x1b0 [ 1487.432754] ? __pfx____sys_sendmsg+0x10/0x10 [ 1487.432775] ? perf_trace_lock+0xbb/0x4f0 [ 1487.432813] ? __pfx_perf_trace_lock+0x10/0x10 [ 1487.432842] ? proc_fail_nth_write+0x97/0x220 [ 1487.432880] ? lock_acquire+0x15e/0x2d0 [ 1487.432909] ? __fget_files+0x34/0x3b0 [ 1487.432936] ? find_held_lock+0x2b/0x80 [ 1487.432958] ? __fget_files+0x203/0x3b0 [ 1487.432982] ? lock_release+0xc8/0x270 [ 1487.433018] ? __fget_files+0x20d/0x3b0 [ 1487.433057] __sys_sendmsg+0x150/0x200 [ 1487.433080] ? __pfx___sys_sendmsg+0x10/0x10 [ 1487.433100] ? perf_trace_preemptirq_template+0x259/0x430 [ 1487.433146] ? __pfx_ksys_write+0x10/0x10 [ 1487.433169] ? irqentry_exit+0xee/0x650 [ 1487.433197] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1487.433225] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1487.433267] do_syscall_64+0xbf/0x420 [ 1487.433302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.433326] RIP: 0033:0x7fbd3c214b19 [ 1487.433345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1487.433367] RSP: 002b:00007fbd3978a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1487.433390] RAX: ffffffffffffffda RBX: 00007fbd3c327f60 RCX: 00007fbd3c214b19 [ 1487.433405] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1487.433419] RBP: 00007fbd3978a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1487.433433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1487.433446] R13: 00007fffae4888ff R14: 00007fbd3978a300 R15: 0000000000022000 [ 1487.433484] [ 1487.502092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:54:34 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 89) 14:54:34 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 90) [ 1487.590837] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1487.599139] FAULT_INJECTION: forcing a failure. [ 1487.599139] name failslab, interval 1, probability 0, space 0, times 0 [ 1487.605165] CPU: 0 UID: 0 PID: 9656 Comm: syz-executor.4 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1487.605184] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1487.605192] Call Trace: [ 1487.605198] [ 1487.605203] dump_stack_lvl+0xfa/0x120 [ 1487.605234] should_fail_ex+0x4d7/0x5e0 [ 1487.605256] should_failslab+0xc2/0x120 [ 1487.605276] __kmalloc_cache_node_noprof+0x74/0x660 [ 1487.605301] ? __alloc_workqueue+0xde5/0x1820 [ 1487.605322] __alloc_workqueue+0xde5/0x1820 [ 1487.605343] alloc_workqueue_noprof+0xc7/0x200 [ 1487.605358] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 1487.605377] ? kasan_save_track+0x14/0x30 [ 1487.605395] ? __kasan_kmalloc+0x7f/0x90 [ 1487.605418] ieee80211_register_hw+0x1eb8/0x3e10 [ 1487.605448] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1487.605466] ? net_generic+0x25/0x2a0 [ 1487.605488] ? find_held_lock+0x2b/0x80 [ 1487.605504] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1487.605530] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1487.605548] ? __hrtimer_setup+0x1a4/0x2b0 [ 1487.605574] mac80211_hwsim_new_radio+0x29e8/0x52a0 [ 1487.605605] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1487.605628] hwsim_new_radio_nl+0xb61/0x1300 [ 1487.605643] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1487.605669] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1487.605687] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1487.605709] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1487.605729] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1487.605750] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1487.605768] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1487.605793] ? security_capable+0x2f/0x90 [ 1487.605817] ? ns_capable+0xe2/0x120 [ 1487.605842] genl_rcv_msg+0x532/0x7e0 [ 1487.605861] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1487.605876] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1487.605891] ? __lock_acquire+0x451/0x2250 [ 1487.605914] netlink_rcv_skb+0x147/0x430 [ 1487.605928] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1487.605945] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1487.605968] ? netlink_deliver_tap+0x1af/0xcb0 [ 1487.605995] genl_rcv+0x28/0x40 [ 1487.606008] netlink_unicast+0x5a7/0x870 [ 1487.606025] ? __pfx_netlink_unicast+0x10/0x10 [ 1487.606038] ? __virt_addr_valid+0x100/0x5d0 [ 1487.606063] netlink_sendmsg+0x8a3/0xd80 [ 1487.606081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1487.606105] ____sys_sendmsg+0xa38/0xbf0 [ 1487.606126] ? copy_msghdr_from_user+0xfb/0x150 [ 1487.606141] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1487.606163] ? __pfx_perf_tp_event+0x10/0x10 [ 1487.606181] ? lock_acquire+0x15e/0x2d0 [ 1487.606201] ___sys_sendmsg+0x10f/0x1b0 [ 1487.606214] ? __pfx____sys_sendmsg+0x10/0x10 [ 1487.606226] ? perf_trace_lock+0xbb/0x4f0 [ 1487.606249] ? __pfx_perf_trace_lock+0x10/0x10 [ 1487.606266] ? proc_fail_nth_write+0x97/0x220 [ 1487.606288] ? lock_acquire+0x15e/0x2d0 [ 1487.606304] ? __fget_files+0x34/0x3b0 [ 1487.606321] ? find_held_lock+0x2b/0x80 [ 1487.606333] ? __fget_files+0x203/0x3b0 [ 1487.606347] ? lock_release+0xc8/0x270 [ 1487.606366] ? __fget_files+0x20d/0x3b0 [ 1487.606388] __sys_sendmsg+0x150/0x200 [ 1487.606402] ? __pfx___sys_sendmsg+0x10/0x10 [ 1487.606415] ? perf_trace_preemptirq_template+0x259/0x430 [ 1487.606445] ? __pfx_ksys_write+0x10/0x10 [ 1487.606460] ? irqentry_exit+0xee/0x650 [ 1487.606476] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1487.606491] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1487.606517] do_syscall_64+0xbf/0x420 [ 1487.606540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.606559] RIP: 0033:0x7f3b21b1bb19 [ 1487.606570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1487.606582] RSP: 002b:00007f3b1f091188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1487.606595] RAX: ffffffffffffffda RBX: 00007f3b21c2ef60 RCX: 00007f3b21b1bb19 [ 1487.606604] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1487.606613] RBP: 00007f3b1f0911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1487.606621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1487.606629] R13: 00007ffe815263cf R14: 00007f3b1f091300 R15: 0000000000022000 [ 1487.606650] [ 1487.650504] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:54:34 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 90) [ 1487.795074] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:54:34 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0) (fail_nth: 91) [ 1487.839153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1487.843117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1487.845626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1487.852439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1487.919031] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1487.933782] FAULT_INJECTION: forcing a failure. [ 1487.933782] name failslab, interval 1, probability 0, space 0, times 0 [ 1487.944040] CPU: 1 UID: 0 PID: 9663 Comm: syz-executor.3 Not tainted 6.19.0-rc6-next-20260123 #1 PREEMPT(lazy) [ 1487.944073] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1487.944087] Call Trace: [ 1487.944096] [ 1487.944105] dump_stack_lvl+0xfa/0x120 [ 1487.944148] should_fail_ex+0x4d7/0x5e0 [ 1487.944181] should_failslab+0xc2/0x120 [ 1487.944211] __kmalloc_cache_node_noprof+0x74/0x660 [ 1487.944236] ? __alloc_workqueue+0xde5/0x1820 [ 1487.944270] __alloc_workqueue+0xde5/0x1820 [ 1487.944308] alloc_workqueue_noprof+0xc7/0x200 [ 1487.944334] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 1487.944367] ? kasan_save_track+0x14/0x30 [ 1487.944395] ? __kasan_kmalloc+0x7f/0x90 [ 1487.944435] ieee80211_register_hw+0x1eb8/0x3e10 [ 1487.944481] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1487.944515] ? net_generic+0x25/0x2a0 [ 1487.944551] ? find_held_lock+0x2b/0x80 [ 1487.944575] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1487.944613] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1487.944645] ? __hrtimer_setup+0x1a4/0x2b0 [ 1487.944687] mac80211_hwsim_new_radio+0x29e8/0x52a0 [ 1487.944741] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1487.944782] hwsim_new_radio_nl+0xb61/0x1300 [ 1487.944805] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1487.944835] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1487.944866] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1487.944915] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1487.944945] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1487.944983] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1487.945013] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1487.945057] ? security_capable+0x2f/0x90 [ 1487.945097] ? ns_capable+0xe2/0x120 [ 1487.945142] genl_rcv_msg+0x532/0x7e0 [ 1487.945175] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1487.945203] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1487.945230] ? __lock_acquire+0x451/0x2250 [ 1487.945272] netlink_rcv_skb+0x147/0x430 [ 1487.945297] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1487.945327] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1487.945370] ? netlink_deliver_tap+0x1af/0xcb0 [ 1487.945415] genl_rcv+0x28/0x40 [ 1487.945437] netlink_unicast+0x5a7/0x870 [ 1487.945468] ? __pfx_netlink_unicast+0x10/0x10 [ 1487.945493] ? __virt_addr_valid+0x100/0x5d0 [ 1487.945533] netlink_sendmsg+0x8a3/0xd80 [ 1487.945565] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1487.945607] ____sys_sendmsg+0xa38/0xbf0 [ 1487.945639] ? copy_msghdr_from_user+0xfb/0x150 [ 1487.945678] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1487.945721] ? lock_acquire+0x15e/0x2d0 [ 1487.945756] ___sys_sendmsg+0x10f/0x1b0 [ 1487.945781] ? __pfx____sys_sendmsg+0x10/0x10 [ 1487.945801] ? perf_trace_lock+0xbb/0x4f0 [ 1487.945839] ? __pfx_perf_trace_lock+0x10/0x10 [ 1487.945869] ? proc_fail_nth_write+0x97/0x220 [ 1487.945908] ? lock_acquire+0x15e/0x2d0 [ 1487.945936] ? __fget_files+0x34/0x3b0 [ 1487.945962] ? find_held_lock+0x2b/0x80 [ 1487.945985] ? __fget_files+0x203/0x3b0 [ 1487.946010] ? lock_release+0xc8/0x270 [ 1487.946046] ? __fget_files+0x20d/0x3b0 [ 1487.946090] __sys_sendmsg+0x150/0x200 [ 1487.946112] ? __pfx___sys_sendmsg+0x10/0x10 [ 1487.946149] ? __pfx_ksys_write+0x10/0x10 [ 1487.946172] ? irqentry_exit+0xee/0x650 [ 1487.946199] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1487.946229] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1487.946270] do_syscall_64+0xbf/0x420 [ 1487.946305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.946329] RIP: 0033:0x7fbd3c214b19 [ 1487.946348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1487.946370] RSP: 002b:00007fbd3978a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1487.946392] RAX: ffffffffffffffda RBX: 00007fbd3c327f60 RCX: 00007fbd3c214b19 [ 1487.946408] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 1487.946421] RBP: 00007fbd3978a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1487.946435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1487.946449] R13: 00007fffae4888ff R14: 00007fbd3978a300 R15: 0000000000022000 [ 1487.946486] [ 1488.019982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1488.025770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1499.573795] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object (percpu) 0x607f1a935770 (size 8): comm "syz-executor.3", pid 9637, jiffies 4296153879 hex dump (first 8 bytes on cpu 0): 00 00 00 00 00 00 00 00 ........ backtrace (crc 0): pcpu_alloc_noprof+0x8a5/0x1170 __alloc_workqueue+0x7d6/0x1820 alloc_workqueue_noprof+0xc7/0x200 ieee80211_register_hw+0x1eb8/0x3e10 mac80211_hwsim_new_radio+0x29e8/0x52a0 hwsim_new_radio_nl+0xb61/0x1300 genl_family_rcv_msg_doit+0x1fe/0x2f0 genl_rcv_msg+0x532/0x7e0 netlink_rcv_skb+0x147/0x430 genl_rcv+0x28/0x40 netlink_unicast+0x5a7/0x870 netlink_sendmsg+0x8a3/0xd80 ____sys_sendmsg+0xa38/0xbf0 ___sys_sendmsg+0x10f/0x1b0 __sys_sendmsg+0x150/0x200 do_syscall_64+0xbf/0x420 BUG: leak checking failed VM DIAGNOSIS: 14:54:53 Registers: info registers vcpu 0 RAX=00000000003d103d RBX=0000000000000000 RCX=ffffffff84ce79b7 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814d57b0 RBP=dffffc0000000000 RSP=ffffffff85c07e00 R8 =0000000000000001 R9 =ffffed100d9c63ea R10=ffff88806ce31f53 R11=0000000000000001 R12=ffffffff86672850 R13=1ffffffff0b80fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84ce63be RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5339000 00000000 00000000 LDT=0000 ffffc90000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffe24a5bfb8 CR3=000000001d264000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=656a626f206465636e6572656665726e XMM02=657a6973282030373735333961316637 XMM03=6970202c22332e726f7475636578652d XMM04=20200a2e2e2e2e2e2e2e2e2020202020 XMM05=20202020203030203030203030203030 XMM06=0a3a293020757063206e6f2073657479 XMM07=78656820200a39373833353136393234 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000d6dae1 RBX=0000000000000001 RCX=ffffffff84ce79b7 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814d57b0 RBP=dffffc0000000000 RSP=ffff888009b07e58 R8 =0000000000000001 R9 =ffffed100d9e63ea R10=ffff88806cf31f53 R11=0000000000000001 R12=ffffffff86672850 R13=1ffff11001360fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84ce63be RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5439000 00000000 00000000 LDT=0000 fffffe0100000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7865eed038 CR3=000000000a55a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004166cdeb00000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000