corrupted report

Status: upstream: reported on 2023/03/12 22:30
Reported-by: syzbot+9987a800782441ea44a0@syzkaller.appspotmail.com
First crash: 1252d, last: 6h26m
▶ ▼ Similar bugs (23)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-5-10 corrupted report (2) -1 6 1077d 1155d 0/2 auto-obsoleted due to no activity on 2023/12/02 13:09
android-54 corrupted report (2) -1 105976 446d 567d 0/2 auto-obsoleted due to no activity on 2025/07/15 11:08
linux-4.19 corrupted report gfs2 sysv ext4 hfsplus -1 6619 1258d 2683d 0/1 upstream: reported on 2019/04/11 04:14
android-414 corrupted report -1 5888 2449d 2684d 0/1 auto-closed as invalid on 2020/02/29 14:20
android-5-15 corrupted report -1 4 1126d 1208d 0/2 auto-obsoleted due to no activity on 2023/10/14 13:19
android-6-12 corrupted report -1 191 275d 419d 0/1 auto-obsoleted due to no activity on 2026/01/03 01:56
linux-6.6 corrupted report -1 11990 now 425d 0/2 upstream: reported on 2025/06/16 23:08
upstream corrupted report -1 29 3186d 3188d 0/29 closed as invalid on 2017/11/24 12:19
android-54 corrupted report -1 860856 747d 2378d 0/2 auto-obsoleted due to no activity on 2024/10/07 14:17
linux-4.4 corrupted report -1 12 2529d 2657d 0/1 auto-closed as invalid on 2020/01/10 12:28
android-6-12 corrupted report (2) -1 1524 23h22m 206d 0/1 premoderation: reported on 2026/01/21 07:36
linux-4.14 corrupted report cramfs -1 6026 1258d 2682d 0/1 upstream: reported on 2019/04/12 21:21
android-6-1 corrupted report -1 624 10h46m 1117d 0/2 premoderation: reported on 2023/07/25 23:06
android-5-15 corrupted report (3) -1 71 639d 865d 0/2 auto-obsoleted due to no activity on 2025/01/03 14:55
android-5-10 corrupted report -1 289 1556d 1705d 0/2 auto-closed as invalid on 2022/07/11 05:59
android-49 corrupted report -1 567 3186d 3188d 0/3 closed as invalid on 2017/11/24 12:19
android-5-15 corrupted report (4) -1 389 23h38m 581d 0/2 premoderation: reported on 2025/01/11 16:11
android-5-15 corrupted report (2) -1 1 987d 987d 0/2 auto-obsoleted due to no activity on 2024/03/01 04:17
upstream corrupted report (2) prio:low hfs -1 1151666 now 3048d 0/29 moderation: reported on 2018/04/11 09:52
android-49 corrupted report (2) -1 19181 2446d 2680d 0/3 auto-closed as invalid on 2020/03/03 12:39
android-5-10 corrupted report (3) -1 134 1d16h 859d 0/2 premoderation: reported on 2024/04/08 19:56
linux-6.1 corrupted report -1 191052 8h19m 1257d 0/3 upstream: reported on 2023/03/07 17:14
android-44 corrupted report -1 7075 2447d 2680d 0/2 auto-closed as invalid on 2020/03/02 23:26

Sample crash report:
rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 	1-...!: (5842 ticks this GP) idle=d13/1/0x4000000000000000 softirq=21444/21444 fqs=2 
	(t=10503 jiffies g=33809 q=40)
rcu: rcu_preempt kthread starved for 7367 jiffies! g33809 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R
  running task     stack:27456 pid:   15 ppid:     2 flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5049 [inline]
 __schedule+0x11c3/0x4350 kernel/sched/core.c:6395
 schedule+0x11b/0x1e0 kernel/sched/core.c:6478
 schedule_timeout+0x184/0x2d0 kernel/time/timer.c:2117
 rcu_gp_fqs_loop+0x2be/0x11f0 kernel/rcu/tree.c:1972
 rcu_gp_kthread+0x9a/0x370 kernel/rcu/tree.c:2145
 kthread+0x42e/0x520 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 1 to CPUs 0:
 <TASK>
NMI backtrace for cpu 0
CPU: 0 PID: 6076 Comm: syz.3.463 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x0/0x80 kernel/kcov.c:301
Code: 28 4d 39 ca 77 22 89 ff 89 f6 4a c7 44 02 08 05 00 00 00 4a 89 7c 02 10 4a 89 74 02 18 4a 89 44 02 20 48 ff c1 48 89 0a c3 90 <48> 8b 04 24 65 48 8b 0d 24 6f 89 7e 65 8b 15 25 6f 89 7e 81 e2 00
RSP: 0018:ffffc90000006fb8 EFLAGS: 00000097
RAX: ffffffff840bcd42 RBX: 0000000000000033 RCX: ffff88802c600000
RDX: 0000000000000100 RSI: 0000000000000001 RDI: 0000000000000018
RBP: ffffc900000070e0 R08: ffffc90000007057 R09: ffffc90000007040
R10: dffffc0000000000 R11: fffff52000000e0b R12: ffffc900000073c4
R13: dffffc0000000000 R14: ffffc900000073c4 R15: 0000000000000001
FS:  0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000557547d7ca38 CR3: 000000007e7f0000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 number+0xb26/0xef0 lib/vsprintf.c:560
 vsnprintf+0x12d3/0x1c20 lib/vsprintf.c:2877
 sprintf+0xe4/0x140 lib/vsprintf.c:3013
 print_time kernel/printk/printk.c:1274 [inline]
 info_print_prefix+0x168/0x360 kernel/printk/printk.c:1300
 record_print_text kernel/printk/printk.c:1349 [inline]
 console_unlock+0x650/0x10f0 kernel/printk/printk.c:2725
 vprintk_emit+0xc0/0x150 kernel/printk/printk.c:2274
 _printk+0xda/0x130 kernel/printk/printk.c:2299
 __show_trace_log_lvl+0x498/0x550 arch/x86/kernel/dumpstack.c:236
 dump_stack_lvl+0x188/0x250 lib/dump_stack.c:106
 fail_dump lib/fault-inject.c:52 [inline]
 should_fail+0x383/0x4b0 lib/fault-inject.c:146
 should_failslab+0x5/0x20 mm/slab_common.c:1350
 slab_pre_alloc_hook+0x51/0xc0 mm/slab.h:494
 slab_alloc_node mm/slub.c:3139 [inline]
 kmem_cache_alloc_node+0x47/0x2c0 mm/slub.c:3261
 __alloc_skb+0xf4/0x750 net/core/skbuff.c:415
 alloc_skb include/linux/skbuff.h:1162 [inline]
 new_skb drivers/block/aoe/aoecmd.c:67 [inline]
 aoecmd_cfg_pkts drivers/block/aoe/aoecmd.c:431 [inline]
 aoecmd_cfg+0x282/0x910 drivers/block/aoe/aoecmd.c:1371
 call_timer_fn+0x17b/0x540 kernel/time/timer.c:1648
 expire_timers kernel/time/timer.c:1699 [inline]
 __run_timers+0x56c/0x810 kernel/time/timer.c:1970
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1983
 handle_softirqs+0x336/0x830 kernel/softirq.c:576
 __do_softirq kernel/softirq.c:610 [inline]
 invoke_softirq kernel/softirq.c:450 [inline]
 __irq_exit_rcu+0x13b/0x230 kernel/softirq.c:659
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:671
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1108 [inline]
 sysvec_apic_timer_interrupt+0xa0/0xc0 arch/x86/kernel/apic/apic.c:1108
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:676
RIP: 0010:console_unlock+0xc90/0x10f0 kernel/printk/printk.c:2749
Code: 75 11 e8 13 df 18 00 4d 85 e4 75 16 e8 09 df 18 00 eb 15 e8 02 df 18 00 e8 dd f6 5f 08 4d 85 e4 74 ea e8 f3 de 18 00 fb 31 ff <89> de e8 49 e2 18 00 85 db 0f 94 c0 22 44 24 1f 3c 01 75 1f e8 d7
RSP: 0018:ffffc9000320f3e0 EFLAGS: 00000246
RAX: ffffffff81601dbd RBX: 0000000000000001 RCX: ffff88802c600000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc9000320f650 R08: ffffffff901ee137 R09: 1ffffffff203dc26
R10: dffffc0000000000 R11: fffffbfff203dc27 R12: 0000000000000200
R13: 0000000000000090 R14: 0000000000000000 R15: dffffc0000000000
 vprintk_emit+0xc0/0x150 kernel/printk/printk.c:2274
 _printk+0xda/0x130 kernel/printk/printk.c:2299
 fail_dump lib/fault-inject.c:45 [inline]
 should_fail+0x364/0x4b0 lib/fault-inject.c:146
 should_failslab+0x5/0x20 mm/slab_common.c:1350
 slab_pre_alloc_hook+0x51/0xc0 mm/slab.h:494
 slab_alloc_node mm/slub.c:3139 [inline]
 slab_alloc mm/slub.c:3233 [inline]
 kmem_cache_alloc_trace+0x47/0x290 mm/slub.c:3250
 kmalloc include/linux/slab.h:607 [inline]
 kzalloc include/linux/slab.h:738 [inline]
 kobject_uevent_env+0x275/0x890 lib/kobject_uevent.c:539
 usb_gadget_unregister_driver+0x15d/0x4c0 drivers/usb/gadget/udc/core.c:1654
 raw_release+0xd6/0x260 drivers/usb/gadget/legacy/raw_gadget.c:416
 __fput+0x212/0x8c0 fs/file_table.c:311
 task_work_run+0x125/0x1a0 kernel/task_work.c:188
 exit_task_work include/linux/task_work.h:33 [inline]
 do_exit+0x635/0x2110 kernel/exit.c:890
 do_group_exit+0x12c/0x2f0 kernel/exit.c:1004
 get_signal+0x7eb/0x12e0 kernel/signal.c:2909
 arch_do_signal_or_restart+0xe6/0x12a0 arch/x86/kernel/signal.c:867
 handle_signal_work kernel/entry/common.c:154 [inline]
 exit_to_user_mode_loop+0x9e/0x130 kernel/entry/common.c:178
 exit_to_user_mode_prepare+0xee/0x180 kernel/entry/common.c:214
 __syscall_exit_to_user_mode_work kernel/entry/common.c:296 [inline]
 syscall_exit_to_user_mode+0x16/0x40 kernel/entry/common.c:307
 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7fe641875ed7
Code: Unable to access opcode bytes at RIP 0x7fe641875ead.
RSP: 002b:00007ffe18ae2d38 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
RAX: fffffffffffffff4 RBX: 00007fe63faad6c0 RCX: 00007fe641875ed7
RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fe63fa8e000
RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffe18ae2e90
R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
 </TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:676
RIP: 0010:console_unlock+0xc90/0x10f0 kernel/printk/printk.c:2749
Code: 75 11 e8 13 df 18 00 4d 85 e4 75 16 e8 09 df 18 00 eb 15 e8 02 df 18 00 e8 dd f6 5f 08 4d 85 e4 74 ea e8 f3 de 18 00 fb 31 ff <89> de e8 49 e2 18 00 85 db 0f 94 c0 22 44 24 1f 3c 01 75 1f e8 d7
RSP: 0018:ffffc9000320f3e0 EFLAGS: 00000246
RAX: ffffffff81601dbd RBX: 0000000000000001 RCX: ffff88802c600000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc9000320f650 R08: ffffffff901ee137 R09: 1ffffffff203dc26
R10: dffffc0000000000 R11: fffffbfff203dc27 R12: 0000000000000200
R13: 0000000000000090 R14: 0000000000000000 R15: dffffc0000000000
 vprintk_emit+0xc0/0x150 kernel/printk/printk.c:2274
 _printk+0xda/0x130 kernel/printk/printk.c:2299
 fail_dump lib/fault-inject.c:45 [inline]
 should_fail+0x364/0x4b0 lib/fault-inject.c:146
 should_failslab+0x5/0x20 mm/slab_common.c:1350
 slab_pre_alloc_hook+0x51/0xc0 mm/slab.h:494
 slab_alloc_node mm/slub.c:3139 [inline]
 slab_alloc mm/slub.c:3233 [inline]
 kmem_cache_alloc_trace+0x47/0x290 mm/slub.c:3250
 kmalloc include/linux/slab.h:607 [inline]
 kzalloc include/linux/slab.h:738 [inline]
 kobject_uevent_env+0x275/0x890 lib/kobject_uevent.c:539
 usb_gadget_unregister_driver+0x15d/0x4c0 drivers/usb/gadget/udc/core.c:1654
 raw_release+0xd6/0x260 drivers/usb/gadget/legacy/raw_gadget.c:416
 __fput+0x212/0x8c0 fs/file_table.c:311
 task_work_run+0x125/0x1a0 kernel/task_work.c:188
 exit_task_work include/linux/task_work.h:33 [inline]
 do_exit+0x635/0x2110 kernel/exit.c:890
 do_group_exit+0x12c/0x2f0 kernel/exit.c:1004
 get_signal+0x7eb/0x12e0 kernel/signal.c:2909
 arch_do_signal_or_restart+0xe6/0x12a0 arch/x86/kernel/signal.c:867
 handle_signal_work kernel/entry/common.c:154 [inline]
 exit_to_user_mode_loop+0x9e/0x130 kernel/entry/common.c:178
 exit_to_user_mode_prepare+0xee/0x180 kernel/entry/common.c:214
 __syscall_exit_to_user_mode_work kernel/entry/common.c:296 [inline]
 syscall_exit_to_user_mode+0x16/0x40 kernel/entry/common.c:307
 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7fe641875ed7
Code: Unable to access opcode bytes at RIP 0x7fe641875ead.
RSP: 002b:00007ffe18ae2d38 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
RAX: fffffffffffffff4 RBX: 00007fe63faad6c0 RCX: 00007fe641875ed7
RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fe63fa8e000
RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffe18ae2e90
R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
 </TASK>
NMI backtrace for cpu 1
aoe: skb alloc failure
CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <IRQ>
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 100, space 0, times -1
 dump_stack_lvl+0x188/0x250 lib/dump_stack.c:106
 nmi_cpu_backtrace+0x3a2/0x3d0 lib/nmi_backtrace.c:111
 nmi_trigger_cpumask_backtrace+0x163/0x280 lib/nmi_backtrace.c:62
 trigger_single_cpu_backtrace include/linux/nmi.h:166 [inline]
 rcu_dump_cpu_stacks+0x22d/0x380 kernel/rcu/tree_stall.h:349
 print_cpu_stall+0x31f/0x5f0 kernel/rcu/tree_stall.h:633
 check_cpu_stall kernel/rcu/tree_stall.h:727 [inline]
 rcu_pending kernel/rcu/tree.c:3936 [inline]
 rcu_sched_clock_irq+0x6ec/0x1120 kernel/rcu/tree.c:2619
 update_process_times+0x193/0x200 kernel/time/timer.c:2021
 tick_sched_handle kernel/time/tick-sched.c:254 [inline]
 tick_sched_timer+0x37d/0x560 kernel/time/tick-sched.c:1473
 __run_hrtimer kernel/time/hrtimer.c:1685 [inline]
 __hrtimer_run_queues+0x4b0/0xb60 kernel/time/hrtimer.c:1749
 hrtimer_interrupt+0x397/0x8b0 kernel/time/hrtimer.c:1811
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1097 [inline]
 __sysvec_apic_timer_interrupt+0x137/0x4a0 arch/x86/kernel/apic/apic.c:1114
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1108 [inline]
 sysvec_apic_timer_interrupt+0x9b/0xc0 arch/x86/kernel/apic/apic.c:1108
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:676
RIP: 0010:check_kcov_mode kernel/kcov.c:172 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0x1b/0x60 kernel/kcov.c:206
Code: 89 de 5b e9 47 5a 44 00 00 00 cc cc 00 00 cc 48 8b 04 24 65 48 8b 0d 04 73 89 7e 65 8b 15 05 73 89 7e 81 e2 00 01 ff 00 74 11 <81> fa 00 01 00 00 75 35 83 b9 34 16 00 00 00 74 2c 8b 91 10 16 00
RSP: 0018:ffffc90000da7650 EFLAGS: 00000206
RAX: ffffffff816062c8 RBX: 0000000000000200 RCX: ffff888016e98000
RDX: 0000000000000100 RSI: 0000000000000004 RDI: ffffffff8c1fb700
RBP: ffffc90000da7758 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffffbfff183f6e0 R12: dffffc0000000004
R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff920001b4ed0
 __printk_wait_on_cpu_lock+0x28/0x30 kernel/printk/printk.c:3690
 dump_stack_lvl+0x161/0x250 lib/dump_stack.c:105
 fail_dump lib/fault-inject.c:52 [inline]
 should_fail+0x383/0x4b0 lib/fault-inject.c:146
 should_failslab+0x5/0x20 mm/slab_common.c:1350
 slab_pre_alloc_hook+0x51/0xc0 mm/slab.h:494
 slab_alloc_node mm/slub.c:3139 [inline]
 kmem_cache_alloc_node+0x47/0x2c0 mm/slub.c:3261
 __alloc_skb+0xf4/0x750 net/core/skbuff.c:415
 alloc_skb include/linux/skbuff.h:1162 [inline]
 ndisc_alloc_skb+0xa6/0x420 net/ipv6/ndisc.c:422
 ndisc_send_rs+0x271/0x700 net/ipv6/ndisc.c:691
 addrconf_rs_timer+0x367/0x640 net/ipv6/addrconf.c:3966
 call_timer_fn+0x17b/0x540 kernel/time/timer.c:1648
 expire_timers kernel/time/timer.c:1699 [inline]
 __run_timers+0x56c/0x810 kernel/time/timer.c:1970
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1983
 handle_softirqs+0x336/0x830 kernel/softirq.c:576
 run_ksoftirqd+0xa4/0x100 kernel/softirq.c:943
 smpboot_thread_fn+0x520/0x990 kernel/smpboot.c:164
 kthread+0x42e/0x520 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>
CPU: 0 PID: 6076 Comm: syz.3.463 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <IRQ>
 dump_stack_lvl+0x188/0x250 lib/dump_stack.c:106
 fail_dump lib/fault-inject.c:52 [inline]
 should_fail+0x383/0x4b0 lib/fault-inject.c:146
 should_failslab+0x5/0x20 mm/slab_common.c:1350
 slab_pre_alloc_hook+0x51/0xc0 mm/slab.h:494
 slab_alloc_node mm/slub.c:3139 [inline]
 kmem_cache_alloc_node+0x47/0x2c0 mm/slub.c:3261
 __alloc_skb+0xf4/0x750 net/core/skbuff.c:415
 alloc_skb include/linux/skbuff.h:1162 [inline]
 new_skb drivers/block/aoe/aoecmd.c:67 [inline]
 aoecmd_cfg_pkts drivers/block/aoe/aoecmd.c:431 [inline]
 aoecmd_cfg+0x282/0x910 drivers/block/aoe/aoecmd.c:1371
 call_timer_fn+0x17b/0x540 kernel/time/timer.c:1648
 expire_timers kernel/time/timer.c:1699 [inline]
 __run_timers+0x56c/0x810 kernel/time/timer.c:1970
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1983
 handle_softirqs+0x336/0x830 kernel/softirq.c:576
 __do_softirq kernel/softirq.c:610 [inline]
 invoke_softirq kernel/softirq.c:450 [inline]
 __irq_exit_rcu+0x13b/0x230 kernel/softirq.c:659
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:671
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1108 [inline]
 sysvec_apic_timer_interrupt+0xa0/0xc0 arch/x86/kernel/apic/apic.c:1108
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:676
RIP: 0010:console_unlock+0xc90/0x10f0 kernel/printk/printk.c:2749
Code: 75 11 e8 13 df 18 00 4d 85 e4 75 16 e8 09 df 18 00 eb 15 e8 02 df 18 00 e8 dd f6 5f 08 4d 85 e4 74 ea e8 f3 de 18 00 fb 31 ff <89> de e8 49 e2 18 00 85 db 0f 94 c0 22 44 24 1f 3c 01 75 1f e8 d7
RSP: 0018:ffffc9000320f3e0 EFLAGS: 00000246
RAX: ffffffff81601dbd RBX: 0000000000000001 RCX: ffff88802c600000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc9000320f650 R08: ffffffff901ee137 R09: 1ffffffff203dc26
R10: dffffc0000000000 R11: fffffbfff203dc27 R12: 0000000000000200
R13: 0000000000000090 R14: 0000000000000000 R15: dffffc0000000000
 vprintk_emit+0xc0/0x150 kernel/printk/printk.c:2274
 _printk+0xda/0x130 kernel/printk/printk.c:2299
 fail_dump lib/fault-inject.c:45 [inline]
 should_fail+0x364/0x4b0 lib/fault-inject.c:146
 should_failslab+0x5/0x20 mm/slab_common.c:1350
 slab_pre_alloc_hook+0x51/0xc0 mm/slab.h:494
 slab_alloc_node mm/slub.c:3139 [inline]
 slab_alloc mm/slub.c:3233 [inline]
 kmem_cache_alloc_trace+0x47/0x290 mm/slub.c:3250
 kmalloc include/linux/slab.h:607 [inline]
 kzalloc include/linux/slab.h:738 [inline]
 kobject_uevent_env+0x275/0x890 lib/kobject_uevent.c:539
 usb_gadget_unregister_driver+0x15d/0x4c0 drivers/usb/gadget/udc/core.c:1654
 raw_release+0xd6/0x260 drivers/usb/gadget/legacy/raw_gadget.c:416
 __fput+0x212/0x8c0 fs/file_table.c:311
 task_work_run+0x125/0x1a0 kernel/task_work.c:188
 exit_task_work include/linux/task_work.h:33 [inline]
 do_exit+0x635/0x2110 kernel/exit.c:890
 do_group_exit+0x12c/0x2f0 kernel/exit.c:1004
 get_signal+0x7eb/0x12e0 kernel/signal.c:2909
 arch_do_signal_or_restart+0xe6/0x12a0 arch/x86/kernel/signal.c:867
 handle_signal_work kernel/entry/common.c:154 [inline]
 exit_to_user_mode_loop+0x9e/0x130 kernel/entry/common.c:178
 exit_to_user_mode_prepare+0xee/0x180 kernel/entry/common.c:214
 __syscall_exit_to_user_mode_work kernel/entry/common.c:296 [inline]
 syscall_exit_to_user_mode+0x16/0x40 kernel/entry/common.c:307
 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7fe641875ed7
Code: Unable to access opcode bytes at RIP 0x7fe641875ead.
RSP: 002b:00007ffe18ae2d38 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
RAX: fffffffffffffff4 RBX: 00007fe63faad6c0 RCX: 00007fe641875ed7
RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fe63fa8e000
RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffe18ae2e90
R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
 </TASK>
CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0
aoe: skb alloc failure
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <TASK>
 dump_stack_lvl+0x188/0x250 lib/dump_stack.c:106
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 100, space 0, times -1
 fail_dump lib/fault-inject.c:52 [inline]
 should_fail+0x383/0x4b0 lib/fault-inject.c:146
 should_failslab+0x5/0x20 mm/slab_common.c:1350
 slab_pre_alloc_hook+0x51/0xc0 mm/slab.h:494
 slab_alloc_node mm/slub.c:3139 [inline]
 kmem_cache_alloc_node+0x47/0x2c0 mm/slub.c:3261
 __alloc_skb+0xf4/0x750 net/core/skbuff.c:415
 alloc_skb include/linux/skbuff.h:1162 [inline]
 ndisc_alloc_skb+0xa6/0x420 net/ipv6/ndisc.c:422
 ndisc_send_rs+0x271/0x700 net/ipv6/ndisc.c:691
 addrconf_rs_timer+0x367/0x640 net/ipv6/addrconf.c:3966
 call_timer_fn+0x17b/0x540 kernel/time/timer.c:1648
 expire_timers kernel/time/timer.c:1699 [inline]
 __run_timers+0x56c/0x810 kernel/time/timer.c:1970
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1983
 handle_softirqs+0x336/0x830 kernel/softirq.c:576
 run_ksoftirqd+0xa4/0x100 kernel/softirq.c:943
 smpboot_thread_fn+0x520/0x990 kernel/smpboot.c:164
 kthread+0x42e/0x520 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>
CPU: 0 PID: 6076 Comm: syz.3.463 Not tainted syzkaller #0
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 100, space 0, times -1
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <IRQ>
 dump_stack_lvl+0x188/0x250 lib/dump_stack.c:106
 fail_dump lib/fault-inject.c:52 [inline]
 should_fail+0x383/0x4b0 lib/fault-inject.c:146
 should_failslab+0x5/0x20 mm/slab_common.c:1350
 slab_pre_alloc_hook+0x51/0xc0 mm/slab.h:494
 slab_alloc_node mm/slub.c:3139 [inline]
 kmem_cache_alloc_node+0x47/0x2c0 mm/slub.c:3261
 __alloc_skb+0xf4/0x750 net/core/skbuff.c:415
 alloc_skb include/linux/skbuff.h:1162 [inline]
 new_skb drivers/block/aoe/aoecmd.c:67 [inline]
 aoecmd_cfg_pkts drivers/block/aoe/aoecmd.c:431 [inline]
 aoecmd_cfg+0x282/0x910 drivers/block/aoe/aoecmd.c:1371
 call_timer_fn+0x17b/0x540 kernel/time/timer.c:1648
 expire_timers kernel/time/timer.c:1699 [inline]
 __run_timers+0x56c/0x810 kernel/time/timer.c:1970
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1983
 handle_softirqs+0x336/0x830 kernel/softirq.c:576
 __do_softirq kernel/softirq.c:610 [inline]
 invoke_softirq kernel/softirq.c:450 [inline]
 __irq_exit_rcu+0x13b/0x230 kernel/softirq.c:659
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:671
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1108 [inline]
 sysvec_apic_timer_interrupt+0xa0/0xc0 arch/x86/kernel/apic/apic.c:1108
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:676
RIP: 0010:console_unlock+0xc90/0x10f0 kernel/printk/printk.c:2749
Code: 75 11 e8 13 df 18 00 4d 85 e4 75 16 e8 09 df 18 00 eb 15 e8 02 df 18 00 e8 dd f6 5f 08 4d 85 e4 74 ea e8 f3 de 18 00 fb 31 ff <89> de e8 49 e2 18 00 85 db 0f 94 c0 22 44 24 1f 3c 01 75 1f e8 d7
RSP: 0018:ffffc9000320f3e0 EFLAGS: 00000246
RAX: ffffffff81601dbd RBX: 0000000000000001 RCX: ffff88802c600000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc9000320f650 R08: ffffffff901ee137 R09: 1ffffffff203dc26
R10: dffffc0000000000 R11: fffffbfff203dc27 R12: 0000000000000200
R13: 0000000000000090 R14: 0000000000000000 R15: dffffc0000000000
 vprintk_emit+0xc0/0x150 kernel/printk/printk.c:2274
 _printk+0xda/0x130 kernel/printk/printk.c:2299
 fail_dump lib/fault-inject.c:45 [inline]
 should_fail+0x364/0x4b0 lib/fault-inject.c:146
 should_failslab+0x5/0x20 mm/slab_common.c:1350
 slab_pre_alloc_hook+0x51/0xc0 mm/slab.h:494
 slab_alloc_node mm/slub.c:3139 [inline]
 slab_alloc mm/slub.c:3233 [inline]
 kmem_cache_alloc_trace+0x47/0x290 mm/slub.c:3250
 kmalloc include/linux/slab.h:607 [inline]
 kzalloc include/linux/slab.h:738 [inline]
 kobject_uevent_env+0x275/0x890 lib/kobject_uevent.c:539
 usb_gadget_unregister_driver+0x15d/0x4c0 drivers/usb/gadget/udc/core.c:1654
 raw_release+0xd6/0x260 drivers/usb/gadget/legacy/raw_gadget.c:416
 __fput+0x212/0x8c0 fs/file_table.c:311
 task_work_run+0x125/0x1a0 kernel/task_work.c:188
 exit_task_work include/linux/task_work.h:33 [inline]
 do_exit+0x635/0x2110 kernel/exit.c:890
 do_group_exit+0x12c/0x2f0 kernel/exit.c:1004
 get_signal+0x7eb/0x12e0 kernel/signal.c:2909
 arch_do_signal_or_restart+0xe6/0x12a0 arch/x86/kernel/signal.c:867
 handle_signal_work kernel/entry/common.c:154 [inline]
 exit_to_user_mode_loop+0x9e/0x130 kernel/entry/common.c:178
 exit_to_user_mode_prepare+0xee/0x180 kernel/entry/common.c:214
 __syscall_exit_to_user_mode_work kernel/entry/common.c:296 [inline]
 syscall_exit_to_user_mode+0x16/0x40 kernel/entry/common.c:307
 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7fe641875ed7
Code: Unable to access opcode bytes at RIP 0x7fe641875ead.
RSP: 002b:00007ffe18ae2d38 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
RAX: fffffffffffffff4 RBX: 00007fe63faad6c0 RCX: 00007fe641875ed7
RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fe63fa8e000
RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffe18ae2e90
R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
 </TASK>
CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0
aoe: skb alloc failure
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <TASK>
 dump_stack_lvl+0x188/0x250 lib/dump_stack.c:106
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 100, space 0, times -1
 fail_dump lib/fault-inject.c:52 [inline]
 should_fail+0x383/0x4b0 lib/fault-inject.c:146
 should_failslab+0x5/0x20 mm/slab_common.c:1350
 slab_pre_alloc_hook+0x51/0xc0 mm/slab.h:494
 slab_alloc_node mm/slub.c:3139 [inline]
 kmem_cache_alloc_node+0x47/0x2c0 mm/slub.c:3261
 __alloc_skb+0xf4/0x750 net/core/skbuff.c:415
 alloc_skb include/linux/skbuff.h:1162 [inline]
 ndisc_alloc_skb+0xa6/0x420 net/ipv6/ndisc.c:422
 ndisc_send_rs+0x271/0x700 net/ipv6/ndisc.c:691
 addrconf_rs_timer+0x367/0x640 net/ipv6/addrconf.c:3966
 call_timer_fn+0x17b/0x540 kernel/time/timer.c:1648
 expire_timers kernel/time/timer.c:1699 [inline]
 __run_timers+0x56c/0x810 kernel/time/timer.c:1970
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1983
 handle_softirqs+0x336/0x830 kernel/softirq.c:576
 run_ksoftirqd+0xa4/0x100 kernel/softirq.c:943
 smpboot_thread_fn+0x520/0x990 kernel/smpboot.c:164
 kthread+0x42e/0x520 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>
CPU: 0 PID: 6076 Comm: syz.3.463 Not tainted syzkaller #0
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 100, space 0, times -1
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <IRQ>
 dump_stack_lvl+0x188/0x250 lib/dump_stack.c:106
 fail_dump lib/fault-inject.c:52 [inline]
 should_fail+0x383/0x4b0 lib/fault-inject.c:146
 should_failslab+0x5/0x20 mm/slab_common.c:1350
 slab_pre_alloc_hook+0x51/0xc0 mm/slab.h:494
 slab_alloc_node mm/slub.c:3139 [inline]
 kmem_cache_alloc_node+0x47/0x2c0 mm/slub.c:3261
 __alloc_skb+0xf4/0x750 net/core/skbuff.c:415
 alloc_skb include/linux/skbuff.h:1162 [inline]
 new_skb drivers/block/aoe/aoecmd.c:67 [inline]
 aoecmd_cfg_pkts drivers/block/aoe/aoecmd.c:431 [inline]
 aoecmd_cfg+0x282/0x910 drivers/block/aoe/aoecmd.c:1371
 call_timer_fn+0x17b/0x540 kernel/time/timer.c:1648
 expire_timers kernel/time/timer.c:1699 [inline]
 __run_timers+0x56c/0x810 kernel/time/timer.c:1970
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1983
 handle_softirqs+0x336/0x830 kernel/softirq.c:576
 __do_softirq kernel/softirq.c:610 [inline]
 invoke_softirq kernel/softirq.c:450 [inline]
 __irq_exit_rcu+0x13b/0x230 kernel/softirq.c:659
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:671
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1108 [inline]
 sysvec_apic_timer_interrupt+0xa0/0xc0 arch/x86/kernel/apic/apic.c:1108
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:676
RIP: 0010:console_unlock+0xc90/0x10f0 kernel/printk/printk.c:2749
Code: 75 11 e8 13 df 18 00 4d 85 e4 75 16 e8 09 df 18 00 eb 15 e8 02 df 18 00 e8 dd f6 5f 08 4d 85 e4 74 ea e8 f3 de 18 00 fb 31 ff <89> de e8 49 e2 18 00 85 db 0f 94 c0 22 44 24 1f 3c 01 75 1f e8 d7
RSP: 0018:ffffc9000320f3e0 EFLAGS: 00000246
RAX: ffffffff81601dbd RBX: 0000000000000001 RCX: ffff88802c600000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc9000320f650 R08: ffffffff901ee137 R09: 1ffffffff203dc26
R10: dffffc0000000000 R11: fffffbfff203dc27 R12: 0000000000000200
R13: 0000000000000090 R14: 0000000000000000 R15: dffffc0000000000
 vprintk_emit+0xc0/0x150 kernel/printk/printk.c:2274
 _printk+0xda/0x130 kernel/printk/printk.c:2299
 fail_dump lib/fault-inject.c:45 [inline]
 should_fail+0x364/0x4b0 lib/fault-inject.c:146
 should_failslab+0x5/0x20 mm/slab_common.c:1350
 slab_pre_alloc_hook+0x51/0xc0 mm/slab.h:494
 slab_alloc_node mm/slub.c:3139 [inline]
 slab_alloc mm/slub.c:3233 [inline]
 kmem_cache_alloc_trace+0x47/0x290 mm/slub.c:3250
 kmalloc include/linux/slab.h:607 [inline]
 kzalloc include/linux/slab.h:738 [inline]
 kobject_uevent_env+0x275/0x890 lib/kobject_uevent.c:539
 usb_gadget_unregister_driver+0x15d/0x4c0 drivers/usb/gadget/udc/core.c:1654
 raw_release+0xd6/0x260 drivers/usb/gadget/legacy/raw_gadget.c:416
 __fput+0x212/0x8c0 fs/file_table.c:311
 task_work_run+0x125/0x1a0 kernel/task_work.c:188
 exit_task_work include/linux/task_work.h:33 [inline]
 do_exit+0x635/0x2110 kernel/exit.c:890
 do_group_exit+0x12c/0x2f0 kernel/exit.c:1004
 get_signal+0x7eb/0x12e0 kernel/signal.c:2909
 arch_do_signal_or_restart+0xe6/0x12a0 arch/x86/kernel/signal.c:867
 handle_signal_work kernel/entry/common.c:154 [inline]
 exit_to_user_mode_loop+0x9e/0x130 kernel/entry/common.c:178
 exit_to_user_mode_prepare+0xee/0x180 kernel/entry/common.c:214
 __syscall_exit_to_user_mode_work kernel/entry/common.c:296 [inline]
 syscall_exit_to_user_mode+0x16/0x40 kernel/entry/common.c:307
 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7fe641875ed7
Code: Unable to access opcode bytes at RIP 0x7fe641875ead.
RSP: 002b:00007ffe18ae2d38 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
RAX: fffffffffffffff4 RBX: 00007fe63faad6c0 RCX: 00007fe641875ed7
RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fe63fa8e000
RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffe18ae2e90
R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
 </TASK>
CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0
aoe: skb alloc failure
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <TASK>
 dump_stack_lvl+0x188/0x250 lib/dump_stack.c:106
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 100, space 0, times -1
 fail_dump lib/fault-inject.c:52 [inline]
 should_fail+0x383/0x4b0 lib/fault-inject.c:146
 should_failslab+0x5/0x20 mm/slab_common.c:1350
 slab_pre_alloc_hook+0x51/0xc0 mm/slab.h:494
 slab_alloc_node mm/slub.c:3139 [inline]
 kmem_cache_alloc_node+0x47/0x2c0 mm/slub.c:3261
 __alloc_skb+0xf4/0x750 net/core/skbuff.c:415
 alloc_skb include/linux/skbuff.h:1162 [inline]
 ndisc_alloc_skb+0xa6/0x420 net/ipv6/ndisc.c:422
 ndisc_send_rs+0x271/0x700 net/ipv6/ndisc.c:691
 addrconf_rs_timer+0x367/0x640 net/ipv6/addrconf.c:3966
 call_timer_fn+0x17b/0x540 kernel/time/timer.c:1648
 expire_timers kernel/time/timer.c:1699 [inline]
 __run_timers+0x56c/0x810 kernel/time/timer.c:1970
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1983
 handle_softirqs+0x336/0x830 kernel/softirq.c:576
 run_ksoftirqd+0xa4/0x100 kernel/softirq.c:943
 smpboot_thread_fn+0x520/0x990 kernel/smpboot.c:164
 kthread+0x42e/0x520 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>
CPU: 0 PID: 6076 Comm: syz.3.463 Not tainted syzkaller #0
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 100, space 0, times -1
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <IRQ>
 dump_stack_lvl+0x188/0x250 lib/dump_stack.c:106
 fail_dump lib/fault-inject.c:52 [inline]
 should_fail+0x383/0x4b0 lib/fault-inject.c:146
 should_failslab+0x5/0x20 mm/slab_common.c:1350
 slab_pre_alloc_hook+0x51/0xc0 mm/slab.h:494
 slab_alloc_node mm/slub.c:3139 [inline]
 kmem_cache_alloc_node+0x47/0x2c0 mm/slub.c:3261
 __alloc_skb+0xf4/0x750 net/core/skbuff.c:415
 alloc_skb include/linux/skbuff.h:1162 [inline]
 new_skb drivers/block/aoe/aoecmd.c:67 [inline]
 aoecmd_cfg_pkts drivers/block/aoe/aoecmd.c:431 [inline]
 aoecmd_cfg+0x282/0x910 drivers/block/aoe/aoecmd.c:1371
 call_timer_fn+0x17b/0x540 kernel/time/timer.c:1648
 expire_timers kernel/time/timer.c:1699 [inline]
 __run_timers+0x56c/0x810 kernel/time/timer.c:1970
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1983
 handle_softirqs+0x336/0x830 kernel/softirq.c:576
 __do_softirq kernel/softirq.c:610 [inline]
 invoke_softirq kernel/softirq.c:450 [inline]
 __irq_exit_rcu+0x13b/0x230 kernel/softirq.c:659
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:671
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1108 [inline]
 sysvec_apic_timer_interrupt+0xa0/0xc0 arch/x86/kernel/apic/apic.c:1108
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:676
RIP: 0010:console_unlock+0xc90/0x10f0 kernel/printk/printk.c:2749
Code: 75 11 e8 13 df 18 00 4d 85 e4 75 16 e8 09 df 18 00 eb 15 e8 02 df 18 00 e8 dd f6 5f 08 4d 85 e4 74 ea e8 f3 de 18 00 fb 31 ff <89> de e8 49 e2 18 00 85 db 0f 94 c0 22 44 24 1f 3c 01 75 1f e8 d7
RSP: 0018:ffffc9000320f3e0 EFLAGS: 00000246
RAX: ffffffff81601dbd RBX: 0000000000000001 RCX: ffff88802c600000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc9000320f650 R08: ffffffff901ee137 R09: 1ffffffff203dc26
R10: dffffc0000000000 R11: fffffbfff203dc27 R12: 0000000000000200
R13: 0000000000000090 R14: 0000000000000000 R15: dffffc0000000000
 vprintk_emit+0xc0/0x150 kernel/printk/printk.c:2274
 _printk+0xda/0x130 kernel/printk/printk.c:2299
 fail_dump lib/fault-inject.c:45 [inline]
 should_fail+0x364/0x4b0 lib/fault-inject.c:146
 should_failslab+0x5/0x20 mm/slab_common.c:1350
 slab_pre_alloc_hook+0x51/0xc0 mm/slab.h:494
 slab_alloc_node mm/slub.c:3139 [inline]
 slab_alloc mm/slub.c:3233 [inline]
 kmem_cache_alloc_trace+0x47/0x290 mm/slub.c:3250
 kmalloc include/linux/slab.h:607 [inline]
 kzalloc include/linux/slab.h:738 [inline]
 kobject_uevent_env+0x275/0x890 lib/kobject_uevent.c:539
 usb_gadget_unregister_driver+0x15d/0x4c0 drivers/usb/gadget/udc/core.c:1654
 raw_release+0xd6/0x260 drivers/usb/gadget/legacy/raw_gadget.c:416
 __fput+0x212/0x8c0 fs/file_table.c:311
 task_work_run+0x125/0x1a0 kernel/task_work.c:188
 exit_task_work include/linux/task_work.h:33 [inline]
 do_exit+0x635/0x2110 kernel/exit.c:890
 do_group_exit+0x12c/0x2f0 kernel/exit.c:1004
 get_signal+0x7eb/0x12e0 kernel/signal.c:2909
 arch_do_signal_or_restart+0xe6/0x12a0 arch/x86/kernel/signal.c:867
 handle_signal_work kernel/entry/common.c:154 [inline]
 exit_to_user_mode_loop+0x9e/0x130 kernel/entry/common.c:178
 exit_to_user_mode_prepare+0xee/0x180 kernel/entry/common.c:214
 __syscall_exit_to_user_mode_work kernel/entry/common.c:296 [inline]
 syscall_exit_to_user_mode+0x16/0x40 kernel/entry/common.c:307
 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7fe641875ed7
Code: Unable to access opcode bytes at RIP 0x7fe641875ead.
RSP: 002b:00007ffe18ae2d38 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
RAX: fffffffffffffff4 RBX: 00007fe63faad6c0 RCX: 00007fe641875ed7
RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fe63fa8e000
RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffe18ae2e90
R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
 </TASK>
CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0
aoe: skb alloc failure
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 100, space 0, times -1
Call Trace:
 <TASK>
 dump_stack_lvl+0x188/0x250 lib/dump_stack.c:106
 fail_dump lib/fault-inject.c:52 [inline]
 should_fail+0x383/0x4b0 lib/fault-inject.c:146
 should_failslab+0x5/0x20 mm/slab_common.c:1350
 slab_pre_alloc_hook+0x51/0xc0 mm/slab.h:494
 slab_alloc_node mm/slub.c:3139 [inline]
 kmem_cache_alloc_node+0x47/0x2c0 mm/slub.c:3261
 __alloc_skb+0xf4/0x750 net/core/skbuff.c:415
 alloc_skb include/linux/skbuff.h:1162 [inline]
 ndisc_alloc_skb+0xa6/0x420 net/ipv6/ndisc.c:422
 ndisc_send_rs+0x271/0x700 net/ipv6/ndisc.c:691
 addrconf_rs_timer+0x367/0x640 net/ipv6/addrconf.c:3966
 call_timer_fn+0x17b/0x540 kernel/time/timer.c:1648
 expire_timers kernel/time/timer.c:1699 [inline]
 __run_timers+0x56c/0x810 kernel/time/timer.c:1970
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1983
 handle_softirqs+0x336/0x830 kernel/softirq.c:576
 run_ksoftirqd+0xa4/0x100 kernel/softirq.c:943
 smpboot_thread_fn+0x520/0x990 kernel/smpboot.c:164
 kthread+0x42e/0x520 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>
CPU: 0 PID: 6076 Comm: syz.3.463 Not tainted syzkaller #0
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 100, space 0, times -1
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <IRQ>
 dump_stack_lvl+0x188/0x250 lib/dump_stack.c:106
 fail_dump lib/fault-inject.c:52 [inline]
 should_fail+0x383/0x4b0 lib/fault-inject.c:146
 should_failslab+0x5/0x20 mm/slab_common.c:1350
 slab_pre_alloc_hook+0x51/0xc0 mm/slab.h:494
 slab_alloc_node mm/slub.c:3139 [inline]
 kmem_cache_alloc_node+0x47/0x2c0 mm/slub.c:3261
 __alloc_skb+0xf4/0x750 net/core/skbuff.c:415
 alloc_skb include/linux/skbuff.h:1162 [inline]
 new_skb drivers/block/aoe/aoecmd.c:67 [inline]
 aoecmd_cfg_pkts drivers/block/aoe/aoecmd.c:431 [inline]
 aoecmd_cfg+0x282/0x910 drivers/block/aoe/aoecmd.c:1371
 call_timer_fn+0x17b/0x540 kernel/time/timer.c:1648
 expire_timers kernel/time/timer.c:1699 [inline]
 __run_timers+0x56c/0x810 kernel/time/timer.c:1970
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1983
 handle_softirqs+0x336/0x830 kernel/softirq.c:576
 __do_softirq kernel/softirq.c:610 [inline]
 invoke_softirq kernel/softirq.c:450 [inline]
 __irq_exit_rcu+0x13b/0x230 kernel/softirq.c:659
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:671
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1108 [inline]
 sysvec_apic_timer_interrupt+0xa0/0xc0 arch/x86/kernel/apic/apic.c:1108
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:676
RIP: 0010:console_unlock+0xc90/0x10f0 kernel/printk/printk.c:2749
Code: 75 11 e8 13 df 18 00 4d 85 e4 75 16 e8 09 df 18 00 eb 15 e8 02 df 18 00 e8 dd f6 5f 08 4d 85 e4 74 ea e8 f3 de 18 00 fb 31 ff <89> de e8 49 e2 18 00 85 db 0f 94 c0 22 44 24 1f 3c 01 75 1f e8 d7
RSP: 0018:ffffc9000320f3e0 EFLAGS: 00000246
RAX: ffffffff81601dbd RBX: 0000000000000001 RCX: ffff88802c600000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc9000320f650 R08: ffffffff901ee137 R09: 1ffffffff203dc26
R10: dffffc0000000000 R11: fffffbfff203dc27 R12: 0000000000000200
R13: 0000000000000090 R14: 0000000000000000 R15: dffffc0000000000
 vprintk_emit+0xc0/0x150 kernel/printk/printk.c:2274
 _printk+0xda/0x130 kernel/printk/printk.c:2299
 fail_dump lib/fault-inject.c:45 [inline]
 should_fail+0x364/0x4b0 lib/fault-inject.c:146
 should_failslab+0x5/0x20 mm/slab_common.c:1350
 slab_pre_alloc_hook+0x51/0xc0 mm/slab.h:494
 slab_alloc_node mm/slub.c:3139 [inline]
 slab_alloc mm/slub.c:3233 [inline]
 kmem_cache_alloc_trace+0x47/0x290 mm/slub.c:3250
 kmalloc include/linux/slab.h:607 [inline]
 kzalloc include/linux/slab.h:738 [inline]
 kobject_uevent_env+0x275/0x890 lib/kobject_uevent.c:539
 usb_gadget_unregister_driver+0x15d/0x4c0 drivers/usb/gadget/udc/core.c:1654
 raw_release+0xd6/0x260 drivers/usb/gadget/legacy/raw_gadget.c:416
 __fput+0x212/0x8c0 fs/file_table.c:311
 task_work_run+0x125/0x1a0 kernel/task_work.c:188
 exit_task_work include/linux/task_work.h:33 [inline]
 do_exit+0x635/0x2110 kernel/exit.c:890
 do_group_exit+0x12c/0x2f0 kernel/exit.c:1004
 get_signal+0x7eb/0x12e0 kernel/signal.c:2909
 arch_do_signal_or_restart+0xe6/0x12a0 arch/x86/kernel/signal.c:867
 handle_signal_work kernel/entry/common.c:154 [inline]
 exit_to_user_mode_loop+0x9e/0x130 kernel/entry/common.c:178
 exit_to_user_mode_prepare+0xee/0x180 kernel/entry/common.c:214
 __syscall_exit_to_user_mode_work kernel/entry/common.c:296 [inline]
 syscall_exit_to_user_mode+0x16/0x40 kernel/entry/common.c:307
 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7fe641875ed7
Code: Unable to access opcode bytes at RIP 0x7fe641875ead.
RSP: 002b:00007ffe18ae2d38 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
RAX: fffffffffffffff4 RBX: 00007fe63faad6c0 RCX: 00007fe641875ed7
RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fe63fa8e000
RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffe18ae2e90
R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
 </TASK>
CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0
aoe: skb alloc failure
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <TASK>
 dump_stack_lvl+0x188/0x250 lib/dump_stack.c:106
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 100, space 0, times -1
 fail_dump lib/fault-inject.c:52 [inline]
 should_fail+0x383/0x4b0 lib/fault-inject.c:146
 should_failslab+0x5/0x20 mm/slab_common.c:1350
 slab_pre_alloc_hook+0x51/0xc0 mm/slab.h:494
 slab_alloc_node mm/slub.c:3139 [inline]
 slab_alloc mm/slub.c:3233 [inline]
 __kmalloc+0x6b/0x340 mm/slub.c:4408
 kmalloc include/linux/slab.h:612 [inline]
 switchdev_deferred_enqueue+0x2a/0x210 net/switchdev/switchdev.c:87
 switchdev_port_obj_del_defer net/switchdev/switchdev.c:286 [inline]
 switchdev_port_obj_del+0x11e/0x2c0 net/switchdev/switchdev.c:303
 br_mdb_notify+0x6c0/0x1320 net/bridge/br_mdb.c:795
 br_multicast_del_pg+0x4ba/0xc80 net/bridge/br_multicast.c:691
 br_multicast_port_group_expired+0x604/0x740 net/bridge/br_multicast.c:753
 call_timer_fn+0x17b/0x540 kernel/time/timer.c:1648
 expire_timers kernel/time/timer.c:1699 [inline]
 __run_timers+0x56c/0x810 kernel/time/timer.c:1970
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1983
 handle_softirqs+0x336/0x830 kernel/softirq.c:576
 run_ksoftirqd+0xa4/0x100 kernel/softirq.c:943
 smpboot_thread_fn+0x520/0x990 kernel/smpboot.c:164
 kthread+0x42e/0x520 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>
CPU: 0 PID: 6076 Comm: syz.3.463 Not tainted syzkaller #0
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 100, space 0, times -1
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <IRQ>
 dump_stack_lvl+0x188/0x250 lib/dump_stack.c:106
 fail_dump lib/fault-inject.c:52 [inline]
 should_fail+0x383/0x4b0 lib/fault-inject.c:146
 should_failslab+0x5/0x20 mm/slab_common.c:1350
 slab_pre_alloc_hook+0x51/0xc0 mm/slab.h:494
 slab_alloc_node mm/slub.c:3139 [inline]
 kmem_cache_alloc_node+0x47/0x2c0 mm/slub.c:3261
 __alloc_skb+0xf4/0x750 net/core/skbuff.c:415
 alloc_skb include/linux/skbuff.h:1162 [inline]
 new_skb drivers/block/aoe/aoecmd.c:67 [inline]
 aoecmd_cfg_pkts drivers/block/aoe/aoecmd.c:431 [inline]
 aoecmd_cfg+0x282/0x910 drivers/block/aoe/aoecmd.c:1371
 call_timer_fn+0x17b/0x540 kernel/time/timer.c:1648
 expire_timers kernel/time/timer.c:1699 [inline]
 __run_timers+0x56c/0x810 kernel/time/timer.c:1970
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1983
 handle_softirqs+0x336/0x830 kernel/softirq.c:576
 __do_softirq kernel/softirq.c:610 [inline]
 invoke_softirq kernel/softirq.c:450 [inline]
 __irq_exit_rcu+0x13b/0x230 kernel/softirq.c:659
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:671
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1108 [inline]
 sysvec_apic_timer_interrupt+0xa0/0xc0 arch/x86/kernel/apic/apic.c:1108
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:676
RIP: 0010:console_unlock+0xc90/0x10f0 kernel/printk/printk.c:2749
Code: 75 11 e8 13 df 18 00 4d 85 e4 75 16 e8 09 df 18 00 eb 15 e8 02 df 18 00 e8 dd f6 5f 08 4d 85 e4 74 ea e8 f3 de 18 00 fb 31 ff <89> de e8 49 e2 18 00 85 db 0f 94 c0 22 44 24 1f 3c 01 75 1f e8 d7
RSP: 0018:ffffc9000320f3e0 EFLAGS: 00000246
RAX: ffffffff81601dbd RBX: 0000000000000001 RCX: ffff88802c600000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc9000320f650 R08: ffffffff901ee137 R09: 1ffffffff203dc26
R10: dffffc0000000000 R11: fffffbfff203dc27 R12: 0000000000000200
R13: 0000000000000090 R14: 0000000000000000 R15: dffffc0000000000
 vprintk_emit+0xc0/0x150 kernel/printk/printk.c:2274
 _printk+0xda/0x130 kernel/printk/printk.c:2299
 fail_dump lib/fault-inject.c:45 [inline]
 should_fail+0x364/0x4b0 lib/fault-inject.c:146
 should_failslab+0x5/0x20 mm/slab_common.c:1350
 slab_pre_alloc_hook+0x51/0xc0 mm/slab.h:494
 slab_alloc_node mm/slub.c:3139 [inline]
 slab_alloc mm/slub.c:3233 [inline]
 kmem_cache_alloc_trace+0x47/0x290 mm/slub.c:3250
 kmalloc include/linux/slab.h:607 [inline]
 kzalloc include/linux/slab.h:738 [inline]
 kobject_uevent_env+0x275/0x890 lib/kobject_uevent.c:539
 usb_gadget_unregister_driver+0x15d/0x4c0 drivers/usb/gadget/udc/core.c:1654
 raw_release+0xd6/0x260 drivers/usb/gadget/legacy/raw_gadget.c:416
 __fput+0x212/0x8c0 fs/file_table.c:311
 task_work_run+0x125/0x1a0 kernel/task_work.c:188
 exit_task_work include/linux/task_work.h:33 [inline]
 do_exit+0x635/0x2110 kernel/exit.c:890
 do_group_exit+0x12c/0x2f0 kernel/exit.c:1004
 get_signal+0x7eb/0x12e0 kernel/signal.c:2909
 arch_do_signal_or_restart+0xe6/0x12a0 arch/x86/kernel/signal.c:867
 handle_signal_work kernel/entry/common.c:154 [inline]
 exit_to_user_mode_loop+0x9e/0x130 kernel/entry/common.c:178
 exit_to_user_mode_prepare+0xee/0x180 kernel/entry/common.c:214
 __syscall_exit_to_user_mode_work kernel/entry/common.c:296 [inline]
 syscall_exit_to_user_mode+0x16/0x40 kernel/entry/common.c:307
 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7fe641875ed7
Code: Unable to access opcode bytes at RIP 0x7fe641875ead.
RSP: 002b:00007ffe18ae2d38 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
RAX: fffffffffffffff4 RBX: 00007fe63faad6c0 RCX: 00007fe641875ed7
RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fe63fa8e000
RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffe18ae2e90
R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
 </TASK>
CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0
aoe: skb alloc failure
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <TASK>
 dump_stack_lvl+0x188/0x250 lib/dump_stack.c:106
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 100, space 0, times -1
 fail_dump lib/fault-inject.c:52 [inline]
 should_fail+0x383/0x4b0 lib/fault-inject.c:146
 should_failslab+0x5/0x20 mm/slab_common.c:1350
 slab_pre_alloc_hook+0x51/0xc0 mm/slab.h:494
 slab_alloc_node mm/slub.c:3139 [inline]
 kmem_cache_alloc_node+0x47/0x2c0 mm/slub.c:3261
 __alloc_skb+0xf4/0x750 net/core/skbuff.c:415
 alloc_skb include/linux/skbuff.h:1162 [inline]
 nlmsg_new include/net/netlink.h:964 [inline]
 br_mdb_notify+0xac3/0x1320 net/bridge/br_mdb.c:802
 br_multicast_del_pg+0x4ba/0xc80 net/bridge/br_multicast.c:691
 br_multicast_port_group_expired+0x604/0x740 net/bridge/br_multicast.c:753
 call_timer_fn+0x17b/0x540 kernel/time/timer.c:1648
 expire_timers kernel/time/timer.c:1699 [inline]
 __run_timers+0x56c/0x810 kernel/time/timer.c:1970
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1983
 handle_softirqs+0x336/0x830 kernel/softirq.c:576
 run_ksoftirqd+0xa4/0x100 kernel/softirq.c:943
 smpboot_thread_fn+0x520/0x990 kernel/smpboot.c:164
 kthread+0x42e/0x520 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>
CPU: 0 PID: 6076 Comm: syz.3.463 Not tainted syzkaller #0
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 100, space 0, times -1
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <IRQ>
 dump_stack_lvl+0x188/0x250 lib/dump_stack.c:106
 fail_dump lib/fault-inject.c:52 [inline]
 should_fail+0x383/0x4b0 lib/fault-inject.c:146
 should_failslab+0x5/0x20 mm/slab_common.c:1350
 slab_pre_alloc_hook+0x51/0xc0 mm/slab.h:494
 slab_alloc_node mm/slub.c:3139 [inline]
 kmem_cache_alloc_node+0x47/0x2c0 mm/slub.c:3261
 __alloc_skb+0xf4/0x750 net/core/skbuff.c:415
 alloc_skb include/linux/skbuff.h:1162 [inline]
 new_skb drivers/block/aoe/aoecmd.c:67 [inline]
 aoecmd_cfg_pkts drivers/block/aoe/aoecmd.c:431 [inline]
 aoecmd_cfg+0x282/0x910 drivers/block/aoe/aoecmd.c:1371
 call_timer_fn+0x17b/0x540 kernel/time/timer.c:1648
 expire_timers kernel/time/timer.c:1699 [inline]
 __run_timers+0x56c/0x810 kernel/time/timer.c:1970
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1983
 handle_softirqs+0x336/0x830 kernel/softirq.c:576
 __do_softirq kernel/softirq.c:610 [inline]
 invoke_softirq kernel/softirq.c:450 [inline]
 __irq_exit_rcu+0x13b/0x230 kernel/softirq.c:659
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:671
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1108 [inline]
 sysvec_apic_timer_interrupt+0xa0/0xc0 arch/x86/kernel/apic/apic.c:1108
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:676
RIP: 0010:console_unlock+0xc90/0x10f0 kernel/printk/printk.c:2749
Code: 75 11 e8 13 df 18 00 4d 85 e4 75 16 e8 09 df 18 00 eb 15 e8 02 df 18 00 e8 dd f6 5f 08 4d 85 e4 74 ea e8 f3 de 18 00 fb 31 ff <89> de e8 49 e2 18 00 85 db 0f 94 c0 22 44 24 1f 3c 01 75 1f e8 d7
RSP: 0018:ffffc9000320f3e0 EFLAGS: 00000246
RAX: ffffffff81601dbd RBX: 0000000000000001 RCX: ffff88802c600000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc9000320f650 R08: ffffffff901ee137 R09: 1ffffffff203dc26
R10: dffffc0000000000 R11: fffffbfff203dc27 R12: 0000000000000200
R13: 0000000000000090 R14: 0000000000000000 R15: dffffc0000000000
 vprintk_emit+0xc0/0x150 kernel/printk/printk.c:2274
 _printk+0xda/0x130 kernel/printk/printk.c:2299
 fail_dump lib/fault-inject.c:45 [inline]
 should_fail+0x364/0x4b0 lib/fault-inject.c:146
 should_failslab+0x5/0x20 mm/slab_common.c:1350
 slab_pre_alloc_hook+0x51/0xc0 mm/slab.h:494
 slab_alloc_node mm/slub.c:3139 [inline]
 slab_alloc mm/slub.c:3233 [inline]
 kmem_cache_alloc_trace+0x47/0x290 mm/slub.c:3250
 kmalloc include/linux/slab.h:607 [inline]
 kzalloc include/linux/slab.h:738 [inline]
 kobject_uevent_env+0x275/0x890 lib/kobject_uevent.c:539
 usb_gadget_unregister_driver+0x15d/0x4c0 drivers/usb/gadget/udc/core.c:1654
 raw_release+0xd6/0x260 drivers/usb/gadget/legacy/raw_gadget.c:416
 __fput+0x212/0x8c0 fs/file_table.c:311
 task_work_run+0x125/0x1a0 kernel/task_work.c:188
 exit_task_work include/linux/task_work.h:33 [inline]
 do_exit+0x635/0x2110 kernel/exit.c:890
 do_group_exit+0x12c/0x2f0 kernel/exit.c:1004
 get_signal+0x7eb/0x12e0 kernel/signal.c:2909
 arch_do_signal_or_restart+0xe6/0x12a0 arch/x86/kernel/signal.c:867
 handle_signal_work kernel/entry/common.c:154 [inline]
 exit_to_user_mode_loop+0x9e/0x130 kernel/entry/common.c:178
 exit_to_user_mode_prepare+0xee/0x180 kernel/entry/common.c:214
 __syscall_exit_to_user_mode_work kernel/entry/common.c:296 [inline]
 syscall_exit_to_user_mode+0x16/0x40 kernel/entry/common.c:307
 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7fe641875ed7
Code: Unable to access opcode bytes at RIP 0x7fe641875ead.
RSP: 002b:00007ffe18ae2d38 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
RAX: fffffffffffffff4 RBX: 00007fe63faad6c0 RCX: 00007fe641875ed7
RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fe63fa8e000
RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffe18ae2e90
R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
 </TASK>
CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0
aoe: skb alloc failure
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <TASK>
 dump_stack_lvl+0x188/0x250 lib/dump_stack.c:106
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 100, space 0, times -1
 fail_dump lib/fault-inject.c:52 [inline]
 should_fail+0x383/0x4b0 lib/fault-inject.c:146
 should_failslab+0x5/0x20 mm/slab_common.c:1350
 slab_pre_alloc_hook+0x51/0xc0 mm/slab.h:494
 slab_alloc_node mm/slub.c:3139 [inline]
 slab_alloc mm/slub.c:3233 [inline]
 __kmalloc+0x6b/0x340 mm/slub.c:4408
 kmalloc include/linux/slab.h:612 [inline]
 switchdev_deferred_enqueue+0x2a/0x210 net/switchdev/switchdev.c:87
 switchdev_port_obj_del_defer net/switchdev/switchdev.c:286 [inline]
 switchdev_port_obj_del+0x11e/0x2c0 net/switchdev/switchdev.c:303
 br_mdb_notify+0x6c0/0x1320 net/bridge/br_mdb.c:795
 br_multicast_del_pg+0x4ba/0xc80 net/bridge/br_multicast.c:691
 br_multicast_port_group_expired+0x604/0x740 net/bridge/br_multicast.c:753
 call_timer_fn+0x17b/0x540 kernel/time/timer.c:1648
 expire_timers kernel/time/timer.c:1699 [inline]
 __run_timers+0x56c/0x810 kernel/time/timer.c:1970
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1983
 handle_softirqs+0x336/0x830 kernel/softirq.c:576
 run_ksoftirqd+0xa4/0x100 kernel/softirq.c:943
 smpboot_thread_fn+0x520/0x990 kernel/smpboot.c:164
 kthread+0x42e/0x520 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>
CPU: 0 PID: 6076 Comm: syz.3.463 Not tainted syzkaller #0
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 100, space 0, times -1
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <IRQ>
 dump_stack_lvl+0x188/0x250 lib/dump_stack.c:106
 fail_dump lib/fault-inject.c:52 [inline]
 should_fail+0x383/0x4b0 lib/fault-inject.c:146
 should_failslab+0x5/0x20 mm/slab_common.c:1350
 slab_pre_alloc_hook+0x51/0xc0 mm/slab.h:494
 slab_alloc_node mm/slub.c:3139 [inline]
 kmem_cache_alloc_node+0x47/0x2c0 mm/slub.c:3261
 __alloc_skb+0xf4/0x750 net/core/skbuff.c:415
 alloc_skb include/linux/skbuff.h:1162 [inline]
 new_skb drivers/block/aoe/aoecmd.c:67 [inline]
 aoecmd_cfg_pkts drivers/block/aoe/aoecmd.c:431 [inline]
 aoecmd_cfg+0x282/0x910 drivers/block/aoe/aoecmd.c:1371
 call_timer_fn+0x17b/0x540 kernel/time/timer.c:1648
 expire_timers kernel/time/timer.c:1699 [inline]
 __run_timers+0x56c/0x810 kernel/time/timer.c:1970
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1983
 handle_softirqs+0x336/0x830 kernel/softirq.c:576
 __do_softirq kernel/softirq.c:610 [inline]
 invoke_softirq kernel/softirq.c:450 [inline]
 __irq_exit_rcu+0x13b/0x230 kernel/softirq.c:659
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:671
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1108 [inline]
 sysvec_apic_timer_interrupt+0xa0/0xc0 arch/x86/kernel/apic/apic.c:1108
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:676
RIP: 0010:console_unlock+0xc90/0x10f0 kernel/printk/printk.c:2749
Code: 75 11 e8 13 df 18 00 4d 85 e4 75 16 e8 09 df 18 00 eb 15 e8 02 df 18 00 e8 dd f6 5f 08 4d 85 e4 74 ea e8 f3 de 18 00 fb 31 ff <89> de e8 49 e2 18 00 85 db 0f 94 c0 22 44 24 1f 3c 01 75 1f e8 d7
RSP: 0018:ffffc9000320f3e0 EFLAGS: 00000246
RAX: ffffffff81601dbd RBX: 0000000000000001 RCX: ffff88802c600000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc9000320f650 R08: ffffffff901ee137 R09: 1ffffffff203dc26
R10: dffffc0000000000 R11: fffffbfff203dc27 R12: 0000000000000200
R13: 0000000000000090 R14: 0000000000000000 R15: dffffc0000000000
 vprintk_emit+0xc0/0x150 kernel/printk/printk.c:2274
 _printk+0xda/0x130 kernel/printk/printk.c:2299
 fail_dump lib/fault-inject.c:45 [inline]
 should_fail+0x364/0x4b0 lib/fault-inject.c:146
 should_failslab+0x5/0x20 mm/slab_common.c:1350
 slab_pre_alloc_hook+0x51/0xc0 mm/slab.h:494
 slab_alloc_node mm/slub.c:3139 [inline]
 slab_alloc mm/slub.c:3233 [inline]
 kmem_cache_alloc_trace+0x47/0x290 mm/slub.c:3250
 kmalloc include/linux/slab.h:607 [inline]
 kzalloc include/linux/slab.h:738 [inline]
 kobject_uevent_env+0x275/0x890 lib/kobject_uevent.c:539
 usb_gadget_unregister_driver+0x15d/0x4c0 drivers/usb/gadget/udc/core.c:1654
 raw_release+0xd6/0x260 drivers/usb/gadget/legacy/raw_gadget.c:416
 __fput+0x212/0x8c0 fs/file_table.c:311
 task_work_run+0x125/0x1a0 kernel/task_work.c:188
 exit_task_work include/linux/task_work.h:33 [inline]
 do_exit+0x635/0x2110 kernel/exit.c:890
 do_group_exit+0x12c/0x2f0 kernel/exit.c:1004
 get_signal+0x7eb/0x12e0 kernel/signal.c:2909
 arch_do_signal_or_restart+0xe6/0x12a0 arch/x86/kernel/signal.c:867
 handle_signal_work kernel/entry/common.c:154 [inline]
 exit_to_user_mode_loop+0x9e/0x130 kernel/entry/common.c:178
 exit_to_user_mode_prepare+0xee/0x180 kernel/entry/common.c:214
 __syscall_exit_to_user_mode_work kernel/entry/common.c:296 [inline]
 syscall_exit_to_user_mode+0x16/0x40 kernel/entry/common.c:307
 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7fe641875ed7
Code: Unable to access opcode bytes at RIP 0x7fe641875ead.
RSP: 002b:00007ffe18ae2d38 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
RAX: fffffffffffffff4 RBX: 00007fe63faad6c0 RCX: 00007fe641875ed7
RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fe63fa8e000
RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffe18ae2e90
R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
 </TASK>
CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0
aoe: skb alloc failure
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <TASK>
 dump_stack_lvl+0x188/0x250 lib/dump_stack.c:106
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 100, space 0, times -1
 fail_dump lib/fault-inject.c:52 [inline]
 should_fail+0x383/0x4b0 lib/fault-inject.c:146
 should_failslab+0x5/0x20 mm/slab_common.c:1350
 slab_pre_alloc_hook+0x51/0xc0 mm/slab.h:494
 slab_alloc_node mm/slub.c:3139 [inline]
 kmem_cache_alloc_node+0x47/0x2c0 mm/slub.c:3261
 __alloc_skb+0xf4/0x750 net/core/skbuff.c:415
 alloc_skb include/linux/skbuff.h:1162 [inline]
 nlmsg_new include/net/netlink.h:964 [inline]
 br_mdb_notify+0xac3/0x1320 net/bridge/br_mdb.c:802
 br_multicast_del_pg+0x4ba/0xc80 net/bridge/br_multicast.c:691
 br_multicast_port_group_expired+0x604/0x740 net/bridge/br_multicast.c:753
 call_timer_fn+0x17b/0x540 kernel/time/timer.c:1648
 expire_timers kernel/time/timer.c:1699 [inline]
 __run_timers+0x56c/0x810 kernel/time/timer.c:1970
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1983
 handle_softirqs+0x336/0x830 kernel/softirq.c:576
 run_ksoftirqd+0xa4/0x100 kernel/softirq.c:943
 smpboot_thread_fn+0x520/0x990 kernel/smpboot.c:164
 kthread+0x42e/0x520 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>
CPU: 0 PID: 6076 Comm: syz.3.463 Not tainted syzkaller #0
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 100, space 0, times -1
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <IRQ>
 dump_stack_lvl+0x188/0x250 lib/dump_stack.c:106
 fail_dump lib/fault-inject.c:52 [inline]
 should_fail+0x383/0x4b0 lib/fault-inject.c:146
 should_failslab+0x5/0x20 mm/slab_common.c:1350
 slab_pre_alloc_hook+0x51/0xc0 mm/slab.h:494
 slab_alloc_node mm/slub.c:3139 [inline]
 kmem_cache_alloc_node+0x47/0x2c0 mm/slub.c:3261
 __alloc_skb+0xf4/0x750 net/core/skbuff.c:415
 alloc_skb include/linux/skbuff.h:1162 [inline]
 new_skb drivers/block/aoe/aoecmd.c:67 [inline]
 aoecmd_cfg_pkts drivers/block/aoe/aoecmd.c:431 [inline]
 aoecmd_cfg+0x282/0x910 drivers/block/aoe/aoecmd.c:1371
 call_timer_fn+0x17b/0x540 kernel/time/timer.c:1648
 expire_timers kernel/time/timer.c:1699 [inline]
 __run_timers+0x56c/0x810 kernel/time/timer.c:1970
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1983
 handle_softirqs+0x336/0x830 kernel/softirq.c:576
 __do_softirq kernel/softirq.c:610 [inline]
 invoke_softirq kernel/softirq.c:450 [inline]
 __irq_exit_rcu+0x13b/0x230 kernel/softirq.c:659
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:671
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1108 [inline]
 sysvec_apic_timer_interrupt+0xa0/0xc0 arch/x86/kernel/apic/apic.c:1108
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:676
RIP: 0010:console_unlock+0xc90/0x10f0 kernel/printk/printk.c:2749
Code: 75 11 e8 13 df 18 00 4d 85 e4 75 16 e8 09 df 18 00 eb 15 e8 02 df 18 00 e8 dd f6 5f 08 4d 85 e4 74 ea e8 f3 de 18 00 fb 31 ff <89> de e8 49 e2 18 00 85 db 0f 94 c0 22 44 24 1f 3c 01 75 1f e8 d7
RSP: 0018:ffffc9000320f3e0 EFLAGS: 00000246
RAX: ffffffff81601dbd RBX: 0000000000000001 RCX: ffff88802c600000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc9000320f650 R08: ffffffff901ee137 R09: 1ffffffff203dc26
R10: dffffc0000000000 R11: fffffbfff203dc27 R12: 0000000000000200
R13: 0000000000000090 R14: 0000000000000000 R15: dffffc0000000000
 vprintk_emit+0xc0/0x150 kernel/printk/printk.c:2274
 _printk+0xda/0x130 kernel/printk/printk.c:2299
 fail_dump lib/fault-inject.c:45 [inline]
 should_fail+0x364/0x4b0 lib/fault-inject.c:146
 should_failslab+0x5/0x20 mm/slab_common.c:1350
 slab_pre_alloc_hook+0x51/0xc0 mm/slab.h:494
 slab_alloc_node mm/slub.c:3139 [inline]
 slab_alloc mm/slub.c:3233 [inline]
 kmem_cache_alloc_trace+0x47/0x290 mm/slub.c:3250
 kmalloc include/linux/slab.h:607 [inline]
 kzalloc include/linux/slab.h:738 [inline]
 kobject_uevent_env+0x275/0x890 lib/kobject_uevent.c:539
 usb_gadget_unregister_driver+0x15d/0x4c0 drivers/usb/gadget/udc/core.c:1654
 raw_release+0xd6/0x260 drivers/usb/gadget/legacy/raw_gadget.c:416
 __fput+0x212/0x8c0 fs/file_table.c:311
 task_work_run+0x125/0x1a0 kernel/task_work.c:188
 exit_task_work include/linux/task_work.h:33 [inline]
 do_exit+0x635/0x2110 kernel/exit.c:890
 do_group_exit+0x12c/0x2f0 kernel/exit.c:1004
 get_signal+0x7eb/0x12e0 kernel/signal.c:2909
 arch_do_signal_or_restart+0xe6/0x12a0 arch/x86/kernel/signal.c:867
 handle_signal_work kernel/entry/common.c:154 [inline]
 exit_to_user_mode_loop+0x9e/0x130 kernel/entry/common.c:178
 exit_to_user_mode_prepare+0xee/0x180 kernel/entry/common.c:214
 __syscall_exit_to_user_mode_work kernel/entry/common.c:296 [inline]
 syscall_exit_to_user_mode+0x16/0x40 kernel/entry/common.c:307
 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7fe641875ed7
Code: Unable to access opcode bytes at RIP 0x7fe641875ead.
RSP: 002b:00007ffe18ae2d38 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
RAX: fffffffffffffff4 RBX: 00007fe63faad6c0 RCX: 00007fe641875ed7
RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fe63fa8e000
RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffe18ae2e90
R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
 </TASK>
CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0
aoe: skb alloc failure
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 100, space 0, times -1
Call Trace:
 <TASK>
 dump_stack_lvl+0x188/0x250 lib/dump_stack.c:106
 fail_dump lib/fault-inject.c:52 [inline]
 should_fail+0x383/0x4b0 lib/fault-inject.c:146
 should_failslab+0x5/0x20 mm/slab_common.c:1350
 slab_pre_alloc_hook+0x51/0xc0 mm/slab.h:494
 slab_alloc_node mm/slub.c:3139 [inline]
 slab_alloc mm/slub.c:3233 [inline]
 __kmalloc+0x6b/0x340 mm/slub.c:4408
 kmalloc include/linux/slab.h:612 [inline]
 switchdev_deferred_enqueue+0x2a/0x210 net/switchdev/switchdev.c:87
 switchdev_port_obj_del_defer net/switchdev/switchdev.c:286 [inline]
 switchdev_port_obj_del+0x11e/0x2c0 net/switchdev/switchdev.c:303
 br_mdb_switchdev_host_port net/bridge/br_mdb.c:747 [inline]
 br_mdb_switchdev_host net/bridge/br_mdb.c:759 [inline]
 br_mdb_notify+0x442/0x1320 net/bridge/br_mdb.c:799
 br_multicast_host_leave net/bridge/br_multicast.c:1345 [inline]
 br_multicast_group_expired+0x280/0x520 net/bridge/br_multicast.c:633
 call_timer_fn+0x17b/0x540 kernel/time/timer.c:1648
 expire_timers kernel/time/timer.c:1699 [inline]
 __run_timers+0x56c/0x810 kernel/time/timer.c:1970
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1983
 handle_softirqs+0x336/0x830 kernel/softirq.c:576
 run_ksoftirqd+0xa4/0x100 kernel/softirq.c:943
 smpboot_thread_fn+0x520/0x990 kernel/smpboot.c:164
 kthread+0x42e/0x520 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>
CPU: 0 PID: 6076 Comm: syz.3.463 Not tainted syzkaller #0
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 100, space 0, times -1
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <IRQ>
 dump_stack_lvl+0x188/0x250 lib/dump_stack.c:106
 fail_dump lib/fault-inject.c:52 [inline]
 should_fail+0x383/0x4b0 lib/fault-inject.c:146
 should_failslab+0x5/0x20 mm/slab_common.c:1350
 slab_pre_alloc_hook+0x51/0xc0 mm/slab.h:494
 slab_alloc_node mm/slub.c:3139 [inline]
 kmem_cache_alloc_node+0x47/0x2c0 mm/slub.c:3261
 __alloc_skb+0xf4/0x750 net/core/skbuff.c:415
 alloc_skb include/linux/skbuff.h:1162 [inline]
 new_skb drivers/block/aoe/aoecmd.c:67 [inline]
 aoecmd_cfg_pkts drivers/block/aoe/aoecmd.c:431 [inline]
 aoecmd_cfg+0x282/0x910 drivers/block/aoe/aoecmd.c:1371
 call_timer_fn+0x17b/0x540 kernel/time/timer.c:1648
 expire_timers kernel/time/timer.c:1699 [inline]
 __run_timers+0x56c/0x810 kernel/time/timer.c:1970
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1983
 handle_softirqs+0x336/0x830 kernel/softirq.c:576
 __do_softirq kernel/softirq.c:610 [inline]
 invoke_softirq kernel/softirq.c:450 [inline]
 __irq_exit_rcu+0x13b/0x230 kernel/softirq.c:659
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:671
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1108 [inline]
 sysvec_apic_timer_interrupt+0xa0/0xc0 arch/x86/kernel/apic/apic.c:1108
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:676
RIP: 0010:console_unlock+0xc90/0x10f0 kernel/printk/printk.c:2749
Code: 75 11 e8 13 df 18 00 4d 85 e4 75 16 e8 09 df 18 00 eb 15 e8 02 df 18 00 e8 dd f6 5f 08 4d 85 e4 74 ea e8 f3 de 18 00 fb 31 ff <89> de e8 49 e2 18 00 85 db 0f 94 c0 22 44 24 1f 3c 01 75 1f e8 d7
RSP: 0018:ffffc9000320f3e0 EFLAGS: 00000246
RAX: ffffffff81601dbd RBX: 0000000000000001 RCX: ffff88802c600000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc9000320f650 R08: ffffffff901ee137 R09: 1ffffffff203dc26
R10: dffffc0000000000 R11: fffffbfff203dc27 R12: 0000000000000200
R13: 0000000000000090 R14: 0000000000000000 R15: dffffc0000000000
 vprintk_emit+0xc0/0x150 kernel/printk/printk.c:2274
 _printk+0xda/0x130 kernel/printk/printk.c:2299
 fail_dump lib/fault-inject.c:45 [inline]
 should_fail+0x364/0x4b0 lib/fault-inject.c:146
 should_failslab+0x5/0x20 mm/slab_common.c:1350
 slab_pre_alloc_hook+0x51/0xc0 mm/slab.h:494
 slab_alloc_node mm/slub.c:3139 [inline]
 slab_alloc mm/slub.c:3233 [inline]
 kmem_cache_alloc_trace+0x47/0x290 mm/slub.c:3250
 kmalloc include/linux/slab.h:607 [inline]
 kzalloc include/linux/slab.h:738 [inline]
 kobject_uevent_env+0x275/0x890 lib/kobject_uevent.c:539
 usb_gadget_unregister_driver+0x15d/0x4c0 drivers/usb/gadget/udc/core.c:1654
 raw_release+0xd6/0x260 drivers/usb/gadget/legacy/raw_gadget.c:416
 __fput+0x212/0x8c0 fs/file_table.c:311
 task_work_run+0x125/0x1a0 kernel/task_work.c:188
 exit_task_work include/linux/task_work.h:33 [inline]
 do_exit+0x635/0x2110 kernel/exit.c:890

Crashes (10594):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/08/15 19:50 linux-5.15.y aabd761612db 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan corrupted report
2026/08/15 15:51 linux-5.15.y aabd761612db 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf corrupted report
2026/08/15 13:10 linux-5.15.y aabd761612db 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf corrupted report
2026/08/15 11:37 linux-5.15.y aabd761612db 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf corrupted report
2026/08/15 10:30 linux-5.15.y aabd761612db 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf corrupted report
2026/08/15 07:15 linux-5.15.y aabd761612db 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf corrupted report
2026/08/15 04:52 linux-5.15.y aabd761612db 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf corrupted report
2026/08/15 01:12 linux-5.15.y aabd761612db 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan corrupted report
2026/08/14 22:22 linux-5.15.y aabd761612db 6f9b3e89 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf corrupted report
2026/08/14 19:51 linux-5.15.y aabd761612db 6f9b3e89 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan corrupted report
2026/08/14 19:14 linux-5.15.y aabd761612db 6f9b3e89 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan corrupted report
2026/08/14 18:00 linux-5.15.y aabd761612db 6f9b3e89 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan corrupted report
2026/08/14 15:56 linux-5.15.y aabd761612db 6f9b3e89 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf corrupted report
2026/08/14 14:37 linux-5.15.y aabd761612db 6f9b3e89 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf corrupted report
2026/08/14 08:33 linux-5.15.y aabd761612db b13552fe .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan corrupted report
2026/08/14 04:08 linux-5.15.y aabd761612db b13552fe .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf corrupted report
2026/08/13 23:17 linux-5.15.y aabd761612db b13552fe .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf corrupted report
2026/08/13 17:07 linux-5.15.y aabd761612db 359b2492 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf corrupted report
2026/08/13 12:02 linux-5.15.y aabd761612db 359b2492 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan corrupted report
2026/08/13 11:01 linux-5.15.y aabd761612db 359b2492 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf corrupted report
2026/08/13 08:00 linux-5.15.y aabd761612db 359b2492 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf corrupted report
2026/08/13 04:14 linux-5.15.y aabd761612db 359b2492 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf corrupted report
2026/08/12 23:14 linux-5.15.y aabd761612db 359b2492 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan corrupted report
2026/08/12 23:11 linux-5.15.y aabd761612db 359b2492 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan corrupted report
2026/08/12 12:07 linux-5.15.y aabd761612db f8d35649 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf corrupted report
2026/08/12 11:01 linux-5.15.y aabd761612db f8d35649 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf corrupted report
2026/08/12 09:29 linux-5.15.y aabd761612db f8d35649 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan corrupted report
2026/08/12 00:11 linux-5.15.y aabd761612db 71790083 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf corrupted report
2026/08/11 23:06 linux-5.15.y aabd761612db 71790083 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan corrupted report
2026/08/11 21:28 linux-5.15.y aabd761612db 71790083 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf corrupted report
2026/08/11 19:39 linux-5.15.y aabd761612db 71790083 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf corrupted report
2026/08/11 16:49 linux-5.15.y aabd761612db 71790083 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf corrupted report
2026/08/11 14:01 linux-5.15.y aabd761612db 71790083 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf corrupted report
2026/08/11 11:46 linux-5.15.y aabd761612db 508909ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf corrupted report
2026/08/11 10:42 linux-5.15.y aabd761612db 508909ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf corrupted report
2026/08/11 09:06 linux-5.15.y aabd761612db 508909ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf corrupted report
2026/08/11 04:10 linux-5.15.y aabd761612db 508909ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan corrupted report
2026/08/11 01:04 linux-5.15.y aabd761612db 508909ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf corrupted report
2026/08/10 22:37 linux-5.15.y aabd761612db 508909ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan corrupted report
2026/08/10 12:49 linux-5.15.y aabd761612db 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf corrupted report
2026/08/10 10:43 linux-5.15.y aabd761612db 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf corrupted report
2026/08/10 09:39 linux-5.15.y aabd761612db 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan corrupted report
2026/08/10 08:33 linux-5.15.y aabd761612db 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf corrupted report
2026/08/10 05:58 linux-5.15.y aabd761612db 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf corrupted report
2026/08/10 04:55 linux-5.15.y aabd761612db 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf corrupted report
2026/08/10 02:37 linux-5.15.y aabd761612db 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf corrupted report
2025/08/28 18:10 linux-5.15.y c79648372d02 e12e5ba4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 corrupted report
2023/03/12 22:30 linux-5.15.y bbf9f29bac04 5205ef30 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf corrupted report
* Struck through repros no longer work on HEAD.