live-kbench/live-kbench huggingface dataset:
Kernel bug: WARNING in __kvm_gpc_refresh (3)
Subsystem: kvm
Status: open

Crash report:
------------[ cut here ]------------
WARNING: CPU: 0 PID: 5497 at arch/x86/kvm/../../../virt/kvm/pfncache.c:267 __kvm_gpc_refresh+0x1187/0x1310 virt/kvm/pfncache.c:267
Modules linked in:
CPU: 0 UID: 0 PID: 5497 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
RIP: 0010:__kvm_gpc_refresh+0x1187/0x1310 virt/kvm/pfncache.c:267
Code: c6 05 ec 32 27 0e 01 48 c7 c7 1c bb 6f 8d be 35 04 00 00 48 c7 c2 40 ea 61 8b e8 f4 d0 5d 00 e9 fe f1 ff ff e8 ca 67 80 00 90 <0f> 0b 90 bb ea ff ff ff e9 7e fe ff ff e8 b7 67 80 00 90 0f 0b 90
RSP: 0018:ffffc9000cb8f360 EFLAGS: 00010293
RAX: ffffffff813fac46 RBX: ffff888000000000 RCX: ffff8880002e2480
RDX: 0000000000000000 RSI: ffff888000000000 RDI: ffff888000000000
RBP: ffffc9000cb8f4e8 R08: ffffffff8f7cf477 R09: 1ffffffff1ef9e8e
R10: dffffc0000000000 R11: fffffbfff1ef9e8f R12: ffff8880368793e0
R13: dffffc0000000000 R14: ffff888000000000 R15: ffffffffffffff01
FS:  000055557b0a0500(0000) GS:ffff88808d733000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f447fb56e9c CR3: 00000000591c3000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 kvm_gpc_refresh+0xe1/0x140 virt/kvm/pfncache.c:382
 kvm_xen_set_evtchn+0x164/0x230 arch/x86/kvm/xen.c:1943
 kvm_xen_inject_timer_irqs+0xfd/0x200 arch/x86/kvm/xen.c:118
 vcpu_run+0xc2c/0x7040 arch/x86/kvm/x86.c:11625
 kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 arch/x86/kvm/x86.c:11951
 kvm_vcpu_ioctl+0x95c/0xe90 virt/kvm/kvm_main.c:4476
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0xfa0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7feb6218efc9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffe67f6e7c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007feb623e5fa0 RCX: 00007feb6218efc9
RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
RBP: 00007feb62211f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007feb623e5fa0 R14: 00007feb623e5fa0 R15: 0000000000000003
 </TASK>
Kernel bug: WARNING in __cfg80211_bss_update (2)
Subsystem: wireless
Status: open

Crash report:
WARNING: CPU: 0 PID: 16 at net/wireless/scan.c:1744 cfg80211_combine_bsses net/wireless/scan.c:1744 [inline]
WARNING: CPU: 0 PID: 16 at net/wireless/scan.c:1744 __cfg80211_bss_update+0x1a1f/0x2030 net/wireless/scan.c:1985
Modules linked in:
CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
RIP: 0010:cfg80211_combine_bsses net/wireless/scan.c:1744 [inline]
RIP: 0010:__cfg80211_bss_update+0x1a1f/0x2030 net/wireless/scan.c:1985
Code: fc fa ff ff e8 d2 6f 88 f6 90 0f 0b 90 49 bd 00 00 00 00 00 fc ff df e9 7b fb ff ff 4c 89 b4 24 98 00 00 00 48 89 6c 24 60 90 <0f> 0b 90 48 8b 7c 24 10 e8 94 87 b1 f9 84 c0 0f 84 9e 00 00 00 e8
RSP: 0018:ffffc90000156d58 EFLAGS: 00010206
RAX: ffff888021e97c10 RBX: ffff888028a63c10 RCX: ffff888021e97810
RDX: ffff88801cacda00 RSI: 0000000000000000 RDI: 0000000000000006
RBP: ffff888021e97890 R08: ffffffff8b170183 R09: 0003000000000000
R10: 0245006400000000 R11: 0000505050505050 R12: ffff888021e97800
R13: 1ffff110043d2f02 R14: 0000000000000000 R15: ffff888028a63c00
FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020001207 CR3: 000000000e736000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 cfg80211_inform_single_bss_data+0xd82/0x2070 net/wireless/scan.c:2330
 cfg80211_inform_bss_data+0x3ce/0x5e80 net/wireless/scan.c:3189
 cfg80211_inform_bss_frame_data+0x3bb/0x720 net/wireless/scan.c:3284
 ieee80211_bss_info_update+0x8a7/0xbc0 net/mac80211/scan.c:226
 ieee80211_scan_rx+0x526/0x9c0 net/mac80211/scan.c:340
 __ieee80211_rx_handle_packet net/mac80211/rx.c:5232 [inline]
 ieee80211_rx_list+0x2c44/0x3810 net/mac80211/rx.c:5469
 ieee80211_rx_napi+0x18a/0x3c0 net/mac80211/rx.c:5492
 ieee80211_rx include/net/mac80211.h:5166 [inline]
 ieee80211_handle_queued_frames+0xe7/0x1e0 net/mac80211/main.c:441
 tasklet_action_common+0x426/0x620 kernel/softirq.c:811
 handle_softirqs+0x2d4/0x9b0 kernel/softirq.c:561
 run_ksoftirqd+0xca/0x130 kernel/softirq.c:950
 smpboot_thread_fn+0x544/0xa30 kernel/smpboot.c:164
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Kernel bug: WARNING: ODEBUG bug in ieee80211_led_exit (2)
Subsystem: wireless
Status: open

Crash report:
------------[ cut here ]------------
ODEBUG: free active (active state 0) object: ffff888127e12130 object type: timer_list hint: tpt_trig_timer+0x0/0x300 net/mac80211/led.c:145
WARNING: CPU: 0 PID: 5923 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 lib/debugobjects.c:612
Modules linked in:
CPU: 0 UID: 0 PID: 5923 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(voluntary) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
Workqueue: usb_hub_wq hub_event
RIP: 0010:debug_print_object+0x1a2/0x2b0 lib/debugobjects.c:612
Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 20 86 89 87 4c 89 e6 48 c7 c7 a0 7a 89 87 e8 4f 14 b2 fe 90 <0f> 0b 90 90 58 83 05 86 ff 11 08 01 48 83 c4 18 5b 5d 41 5c 41 5d
RSP: 0018:ffffc9000236f468 EFLAGS: 00010286
RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff8140f2b8
RDX: ffff88811139d700 RSI: ffffffff8140f2c5 RDI: 0000000000000001
RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff87898140
R13: ffffffff876b44e0 R14: ffffffff8722e410 R15: ffffc9000236f568
FS:  0000000000000000(0000) GS:ffff888268ea3000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005578d067c300 CR3: 00000001172da000 CR4: 00000000003506f0
Call Trace:
 <TASK>
 __debug_check_no_obj_freed lib/debugobjects.c:1099 [inline]
 debug_check_no_obj_freed+0x4b7/0x600 lib/debugobjects.c:1129
 slab_free_hook mm/slub.c:2454 [inline]
 slab_free mm/slub.c:6611 [inline]
 kfree+0x436/0x670 mm/slub.c:6818
 ieee80211_led_exit+0x162/0x1c0 net/mac80211/led.c:210
 ieee80211_unregister_hw+0x27e/0x3a0 net/mac80211/main.c:1706
 rt2x00lib_remove_hw drivers/net/wireless/ralink/rt2x00/rt2x00dev.c:1085 [inline]
 rt2x00lib_remove_dev+0x55b/0x670 drivers/net/wireless/ralink/rt2x00/rt2x00dev.c:1550
 rt2x00usb_disconnect+0x71/0x240 drivers/net/wireless/ralink/rt2x00/rt2x00usb.c:872
 usb_unbind_interface+0x1dd/0x9e0 drivers/usb/core/driver.c:458
 device_remove drivers/base/dd.c:571 [inline]
 device_remove+0x125/0x170 drivers/base/dd.c:563
 __device_release_driver drivers/base/dd.c:1274 [inline]
 device_release_driver_internal+0x44b/0x620 drivers/base/dd.c:1297
 bus_remove_device+0x22f/0x420 drivers/base/bus.c:579
 device_del+0x396/0x9f0 drivers/base/core.c:3878
 usb_disable_device+0x355/0x7d0 drivers/usb/core/message.c:1418
 usb_disconnect+0x2e1/0x9c0 drivers/usb/core/hub.c:2339
 hub_port_connect drivers/usb/core/hub.c:5401 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5701 [inline]
 port_event drivers/usb/core/hub.c:5865 [inline]
 hub_event+0x1aa2/0x5060 drivers/usb/core/hub.c:5947
 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3263
 process_scheduled_works kernel/workqueue.c:3346 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3427
 kthread+0x3c5/0x780 kernel/kthread.c:463
 ret_from_fork+0x56d/0x700 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Kernel bug: WARNING in btrfs_create_pending_block_groups (2)
Subsystem: btrfs
Status: open

Crash report:
BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
BTRFS info (device loop0): enabling ssd optimizations
BTRFS info (device loop0): turning on async discard
BTRFS info (device loop0): enabling free space tree
BTRFS info (device loop0): balance: start -s
------------[ cut here ]------------
BTRFS: Transaction aborted (error -28)
WARNING: CPU: 0 PID: 6053 at fs/btrfs/block-group.c:2796 btrfs_create_pending_block_groups+0x1150/0x1780 fs/btrfs/block-group.c:2796
Modules linked in:
CPU: 0 UID: 0 PID: 6053 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
RIP: 0010:btrfs_create_pending_block_groups+0x1150/0x1780 fs/btrfs/block-group.c:2796
Code: 00 e8 84 de bc fd 84 c0 74 29 e8 4b a0 d6 fd e9 fd 01 00 00 e8 41 a0 d6 fd 90 48 c7 c7 40 5c 30 8b 44 89 f6 e8 e1 e7 9a fd 90 <0f> 0b 90 90 e9 e5 fd ff ff e8 82 1b d8 06 41 89 c7 31 ff 89 c6 e8
RSP: 0018:ffffc90003be7700 EFLAGS: 00010246
RAX: 760f1be550ea2600 RBX: ffff888031844001 RCX: ffff88801c710000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc90003be7970 R08: 0000000000000000 R09: 0000000000000000
R10: dffffc0000000000 R11: ffffed101710487b R12: 0000000000000000
R13: dffffc0000000000 R14: 00000000ffffffe4 R15: ffff88803428c800
FS:  00005555911aa500(0000) GS:ffff888126dfc000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffc75b3df50 CR3: 0000000030d12000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 __btrfs_end_transaction+0x140/0x640 fs/btrfs/transaction.c:1071
 btrfs_inc_block_group_ro+0x641/0x6f0 fs/btrfs/block-group.c:3092
 btrfs_relocate_block_group+0x29d/0xba0 fs/btrfs/relocation.c:3936
 btrfs_relocate_chunk+0x12f/0x5d0 fs/btrfs/volumes.c:3451
 __btrfs_balance+0x186f/0x23f0 fs/btrfs/volumes.c:4227
 btrfs_balance+0xac2/0x11b0 fs/btrfs/volumes.c:4604
 btrfs_ioctl_balance+0x3d6/0x610 fs/btrfs/ioctl.c:3577
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl+0xff/0x170 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0xfa0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f534cfbefc9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffcc44f3b98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f534d215fa0 RCX: 00007f534cfbefc9
RDX: 0000200000000440 RSI: 00000000c4009420 RDI: 0000000000000003
RBP: 00007f534d041f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f534d215fa0 R14: 00007f534d215fa0 R15: 0000000000000003
 </TASK>
Kernel bug: WARNING in rate_control_rate_init (3)
Subsystem: wireless
Status: open

Crash report:
------------[ cut here ]------------
WARNING: CPU: 1 PID: 5998 at net/mac80211/rate.c:53 rate_control_rate_init+0x5c0/0x720 net/mac80211/rate.c:53
Modules linked in:
CPU: 1 UID: 0 PID: 5998 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
RIP: 0010:rate_control_rate_init+0x5c0/0x720 net/mac80211/rate.c:53
Code: 48 8d 35 00 00 00 00 e8 5e 1a c2 f6 e8 19 45 cc f6 e9 25 fe ff ff e8 6f 40 e6 f6 90 0f 0b 90 e9 17 fe ff ff e8 61 40 e6 f6 90 <0f> 0b 90 eb b1 e8 56 40 e6 f6 e8 71 10 cb f6 31 ff 89 c3 89 c6 e8
RSP: 0018:ffffc90003197208 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff888066f60000 RCX: ffffffff8ad6a6a9
RDX: ffff888031a54900 RSI: ffffffff8ad6a86f RDI: 0000000000000005
RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000001 R12: ffff888028c20720
R13: ffff88807c880e80 R14: ffff88807c8cc000 R15: 0000000000000000
FS:  0000555585cb8500(0000) GS:ffff888124b08000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000001080 CR3: 0000000069098000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 rate_control_rate_init_all_links+0x76/0x1e0 net/mac80211/rate.c:86
 sta_apply_auth_flags.constprop.0+0x4bb/0x510 net/mac80211/cfg.c:1945
 sta_apply_parameters+0xca8/0x1930 net/mac80211/cfg.c:2323
 ieee80211_add_station+0x3fa/0x6c0 net/mac80211/cfg.c:2389
 rdev_add_station net/wireless/rdev-ops.h:201 [inline]
 nl80211_new_station+0x1502/0x1c90 net/wireless/nl80211.c:8776
 genl_family_rcv_msg_doit+0x209/0x2f0 net/netlink/genetlink.c:1115
 genl_family_rcv_msg net/netlink/genetlink.c:1195 [inline]
 genl_rcv_msg+0x55c/0x800 net/netlink/genetlink.c:1210
 netlink_rcv_skb+0x158/0x420 net/netlink/af_netlink.c:2552
 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1219
 netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline]
 netlink_unicast+0x5aa/0x870 net/netlink/af_netlink.c:1346
 netlink_sendmsg+0x8c8/0xdd0 net/netlink/af_netlink.c:1896
 sock_sendmsg_nosec net/socket.c:727 [inline]
 __sock_sendmsg net/socket.c:742 [inline]
 ____sys_sendmsg+0xa98/0xc70 net/socket.c:2630
 ___sys_sendmsg+0x134/0x1d0 net/socket.c:2684
 __sys_sendmsg+0x16d/0x220 net/socket.c:2716
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0xfa0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f19a4b8f6c9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fffa532acb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007f19a4de5fa0 RCX: 00007f19a4b8f6c9
RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000004
RBP: 00007f19a4c11f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f19a4de5fa0 R14: 00007f19a4de5fa0 R15: 0000000000000003
 </TASK>
Kernel bug: WARNING: suspicious RCU usage in proc_sys_compare
Subsystem: fs
Status: open

Crash report:
=============================
WARNING: suspicious RCU usage
6.16.0-rc4-next-20250704-syzkaller #0 Not tainted
-----------------------------
fs/proc/proc_sysctl.c:934 suspicious rcu_dereference_check() usage!

other info that might help us debug this:


rcu_scheduler_active = 2, debug_locks = 1
3 locks held by syz-executor/5902:
 #0: ffff888034758428 (sb_writers#3){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 fs/namespace.c:557
 #1: ffff8880311e56d0 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:884 [inline]
 #1: ffff8880311e56d0 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: open_last_lookups fs/namei.c:3806 [inline]
 #1: ffff8880311e56d0 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: path_openat+0x8cb/0x3830 fs/namei.c:4043
 #2: ffff88807a77a3c0 (&lockref->lock){+.+.}-{3:3}, at: spin_lock include/linux/spinlock.h:351 [inline]
 #2: ffff88807a77a3c0 (&lockref->lock){+.+.}-{3:3}, at: d_wait_lookup fs/dcache.c:2537 [inline]
 #2: ffff88807a77a3c0 (&lockref->lock){+.+.}-{3:3}, at: d_alloc_parallel+0xbe4/0x15e0 fs/dcache.c:2624

stack backtrace:
CPU: 0 UID: 0 PID: 5902 Comm: syz-executor Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Call Trace:
 <TASK>
 dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120
 lockdep_rcu_suspicious+0x140/0x1d0 kernel/locking/lockdep.c:6871
 proc_sys_compare+0x27d/0x2c0 fs/proc/proc_sysctl.c:934
 d_same_name fs/dcache.c:2179 [inline]
 d_alloc_parallel+0x1060/0x15e0 fs/dcache.c:2637
 lookup_open fs/namei.c:3630 [inline]
 open_last_lookups fs/namei.c:3807 [inline]
 path_openat+0xa3b/0x3830 fs/namei.c:4043
 do_filp_open+0x1fa/0x410 fs/namei.c:4073
 do_sys_openat2+0x121/0x1c0 fs/open.c:1434
 do_sys_open fs/open.c:1449 [inline]
 __do_sys_openat fs/open.c:1465 [inline]
 __se_sys_openat fs/open.c:1460 [inline]
 __x64_sys_openat+0x138/0x170 fs/open.c:1460
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fd0c898d211
Code: 75 57 89 f0 25 00 00 41 00 3d 00 00 41 00 74 49 80 3d 3a 93 1f 00 00 74 6d 89 da 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 93 00 00 00 48 8b 54 24 28 64 48 2b 14 25
RSP: 002b:00007ffc757bab00 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000000000080001 RCX: 00007fd0c898d211
RDX: 0000000000080001 RSI: 00007fd0c8a2afc0 RDI: 00000000ffffff9c
RBP: 00007fd0c8a2afc0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
R13: 00007ffc757baba0 R14: 0000000000000009 R15: 0000000000000000
 </TASK>
Kernel bug: WARNING in hci_conn_timeout (2)
Subsystem: bluetooth
Status: open

Crash report:
------------[ cut here ]------------
WARNING: CPU: 1 PID: 5132 at net/bluetooth/hci_conn.c:567 hci_conn_timeout+0x11a/0x210 net/bluetooth/hci_conn.c:567
Modules linked in:

CPU: 1 UID: 0 PID: 5132 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
Workqueue: hci2 hci_conn_timeout
RIP: 0010:hci_conn_timeout+0x11a/0x210 net/bluetooth/hci_conn.c:567
Code: 00 e8 7a e6 63 f7 4c 89 f1 4c 89 e2 48 c7 c6 40 58 d7 8c 48 c7 c7 b0 a3 7d 90 e8 81 1d 7e fa e9 4d ff ff ff e8 57 e6 63 f7 90 <0f> 0b 90 e8 4e e6 63 f7 48 8d bb f5 f6 ff ff 48 b8 00 00 00 00 00
RSP: 0018:ffffc900101dfc20 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff888075628948 RCX: ffffffff8a59269f
RDX: ffff888036000000 RSI: ffffffff8a592749 RDI: 0000000000000005
RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000
R10: 00000000ffffffff R11: 0000000000000001 R12: ffff888075628000
R13: 0000000000000000 R14: ffffffff90823454 R15: ffffc900101dfd00
FS:  0000000000000000(0000) GS:ffff888124b08000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000c00710a000 CR3: 0000000071074000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3263
 process_scheduled_works kernel/workqueue.c:3346 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3427
 kthread+0x3c5/0x780 kernel/kthread.c:463
 ret_from_fork+0x675/0x7d0 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Kernel bug: WARNING in udf_fiiter_add_entry
Subsystem: udf
Status: open

Crash report:
UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1408) has entry at pos 40 with incorrect tag 0
------------[ cut here ]------------
WARNING: CPU: 0 PID: 6559 at fs/udf/namei.c:214 udf_expand_dir_adinicb fs/udf/namei.c:214 [inline]
WARNING: CPU: 0 PID: 6559 at fs/udf/namei.c:214 udf_fiiter_add_entry+0x183e/0x1e10 fs/udf/namei.c:262
Modules linked in:
CPU: 0 UID: 0 PID: 6559 Comm: syz.3.223 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
RIP: 0010:udf_expand_dir_adinicb fs/udf/namei.c:214 [inline]
RIP: 0010:udf_fiiter_add_entry+0x183e/0x1e10 fs/udf/namei.c:262
Code: 44 89 f1 41 d3 ef 41 01 df 44 89 7c 24 20 48 8b 5c 24 10 e9 f0 fb ff ff e8 ff bc 8b fe 89 d8 e9 a8 fe ff ff e8 f3 bc 8b fe 90 <0f> 0b 90 e9 1e f9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c 93 e8 ff ff
RSP: 0018:ffffc9000547f320 EFLAGS: 00010293
RAX: ffffffff83315b7d RBX: 00000000ffffff8b RCX: ffff8880203a8000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc9000547f730 R08: 0000000000000000 R09: 0000000000000000
R10: dffffc0000000000 R11: ffffed100b6ffa57 R12: dffffc0000000000
R13: 1ffff92000a8fe88 R14: ffff88805bf0c690 R15: 0000000000000200
FS:  00007fb5ede466c0(0000) GS:ffff888127020000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fad0dc15e00 CR3: 000000003a0d2000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 udf_rename+0x69b/0xcd0 fs/udf/namei.c:843
 vfs_rename+0xb34/0xe80 fs/namei.c:5216
 do_renameat2+0x6a2/0xa50 fs/namei.c:5364
 __do_sys_rename fs/namei.c:5411 [inline]
 __se_sys_rename fs/namei.c:5409 [inline]
 __x64_sys_rename+0x82/0x90 fs/namei.c:5409
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fb5ee7deec9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fb5ede46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
RAX: ffffffffffffffda RBX: 00007fb5eea35fa0 RCX: 00007fb5ee7deec9
RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000040
RBP: 00007fb5ee861f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fb5eea36038 R14: 00007fb5eea35fa0 R15: 00007ffe15d30818
 </TASK>
Kernel bug: KMSAN: uninit-value in __i2c_smbus_xfer
Subsystem: i2c
Status: open

Crash report:
=====================================================
BUG: KMSAN: uninit-value in i2c_smbus_xfer_emulated drivers/i2c/i2c-core-smbus.c:481 [inline]
BUG: KMSAN: uninit-value in __i2c_smbus_xfer+0x23e7/0x2f60 drivers/i2c/i2c-core-smbus.c:607
 i2c_smbus_xfer_emulated drivers/i2c/i2c-core-smbus.c:481 [inline]
 __i2c_smbus_xfer+0x23e7/0x2f60 drivers/i2c/i2c-core-smbus.c:607
 i2c_smbus_xfer+0x31d/0x4d0 drivers/i2c/i2c-core-smbus.c:545
 i2cdev_ioctl_smbus+0x4a1/0x660 drivers/i2c/i2c-dev.c:389
 i2cdev_ioctl+0xa14/0xf40 drivers/i2c/i2c-dev.c:478
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:906 [inline]
 __se_sys_ioctl+0x239/0x400 fs/ioctl.c:892
 __x64_sys_ioctl+0x97/0xe0 fs/ioctl.c:892
 x64_sys_call+0x1ebe/0x3db0 arch/x86/include/generated/asm/syscalls_64.h:17
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd9/0x1b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Local variable page created at:
 get_futex_key+0x6f/0x11d0 kernel/futex/core.c:227
 futex_wake+0xfe/0x890 kernel/futex/waitwake.c:166

CPU: 1 UID: 0 PID: 5795 Comm: syz-executor470 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
=====================================================