live-kbench/live-kbench huggingface dataset:
Kernel bug: WARNING in rgblk_free (2)
Subsystem: gfs2
Status: open

Crash report:
gfs2: fsid=syz:syz.0: first mount done, others may mount
gfs2: fsid=syz:syz.0: found 1 quota changes
------------[ cut here ]------------
WARNING: fs/gfs2/rgrp.c:2267 at rgblk_free+0x136/0x750 fs/gfs2/rgrp.c:2267, CPU#0: syz.0.17/5483
Modules linked in:
CPU: 0 UID: 0 PID: 5483 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
RIP: 0010:rgblk_free+0x136/0x750 fs/gfs2/rgrp.c:2267
Code: c0 0f 85 fe 05 00 00 45 8b 36 44 89 f7 44 89 e6 e8 cf 42 b9 fd 45 39 e6 76 2e e8 05 41 b9 fd e9 89 00 00 00 e8 fb 40 b9 fd 90 <0f> 0b 65 48 8b 05 b0 f9 78 0e 48 3b 84 24 80 00 00 00 0f 85 a0 05
RSP: 0018:ffffc90002797a80 EFLAGS: 00010293
RAX: ffffffff8407c5a6 RBX: ffff88801fce7000 RCX: ffff888000634980
RDX: 0000000000000000 RSI: 0000000000000927 RDI: 0000000025540013
RBP: ffff88801fce7000 R08: ffffffff8f824677 R09: 1ffffffff1f048ce
R10: dffffc0000000000 R11: fffffbfff1f048cf R12: 0000000000000927
R13: 0000000000000001 R14: 0000000025540013 R15: dffffc0000000000
FS:  000055556242d500(0000) GS:ffff88808d414000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000011b5f000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 gfs2_unlink_di+0x296/0x420 fs/gfs2/rgrp.c:2566
 gfs2_unlink_inode+0x11d/0x180 fs/gfs2/inode.c:1226
 gfs2_unlink+0x448/0x550 fs/gfs2/inode.c:1298
 vfs_rmdir+0x512/0x660 fs/namei.c:5236
 do_rmdir+0x27f/0x4a0 fs/namei.c:5291
 __do_sys_rmdir fs/namei.c:5315 [inline]
 __se_sys_rmdir fs/namei.c:5313 [inline]
 __x64_sys_rmdir+0x47/0x50 fs/namei.c:5313
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xec/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fbfb358f7c9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc4142d868 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
RAX: ffffffffffffffda RBX: 00007fbfb37e5fa0 RCX: 00007fbfb358f7c9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100
RBP: 00007fbfb3613f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fbfb37e5fa0 R14: 00007fbfb37e5fa0 R15: 0000000000000001
 </TASK>
Kernel bug: WARNING in ieee80211_tx_h_rate_ctrl
Subsystem: wireless
Status: open

Crash report:
------------[ cut here ]------------
wlan1: Dropped data frame as no usable bitrate found while scanning and associated. Target station: 08:02:11:00:00:00 on 5 GHz band
WARNING: net/mac80211/tx.c:758 at ieee80211_tx_h_rate_ctrl+0xd82/0x1760 net/mac80211/tx.c:751, CPU#1: kworker/u8:8/3000
Modules linked in:
CPU: 1 UID: 0 PID: 3000 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
Workqueue: events_unbound cfg80211_wiphy_work
RIP: 0010:ieee80211_tx_h_rate_ctrl+0xded/0x1760 net/mac80211/tx.c:751
Code: 1c 08 00 00 48 8b 44 24 38 8b 30 45 31 ed 83 e6 07 41 0f 95 c5 31 ff e8 01 3c b2 f6 43 8d 4c 6d 02 48 89 df 4c 89 f6 4c 89 fa <67> 48 0f b9 3a 41 bd 01 00 00 00 e9 73 01 00 00 e8 9e 37 b2 f6 e9
RSP: 0018:ffffc9000b7173c0 EFLAGS: 00010293
RAX: ffffffff8b123f8f RBX: ffffffff900054b0 RCX: 0000000000000005
RDX: ffff88805e97c384 RSI: ffff8880783817c8 RDI: ffffffff900054b0
RBP: ffffc9000b717528 R08: ffff88807cad29c7 R09: 1ffff1100f95a538
R10: dffffc0000000000 R11: ffffed100f95a539 R12: dffffc0000000000
R13: 0000000000000001 R14: ffff8880783817c8 R15: ffff88805e97c384
FS:  0000000000000000(0000) GS:ffff8881257f5000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fdf034708c0 CR3: 0000000079e3a000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 invoke_tx_handlers_late+0xba/0x18a0 net/mac80211/tx.c:1849
 ieee80211_tx+0x2d7/0x4b0 net/mac80211/tx.c:1971
 __ieee80211_tx_skb_tid_band+0x50f/0x680 net/mac80211/tx.c:6288
 ieee80211_tx_skb_tid_band net/mac80211/ieee80211_i.h:2405 [inline]
 ieee80211_send_scan_probe_req net/mac80211/scan.c:685 [inline]
 ieee80211_scan_state_send_probe+0x594/0xa00 net/mac80211/scan.c:713
 ieee80211_scan_work+0x65f/0x1c50 net/mac80211/scan.c:1174
 cfg80211_wiphy_work+0x2ab/0x450 net/wireless/core.c:438
 process_one_work kernel/workqueue.c:3257 [inline]
 process_scheduled_works+0xaec/0x17a0 kernel/workqueue.c:3340
 worker_thread+0xda6/0x1360 kernel/workqueue.c:3421
 kthread+0x726/0x8b0 kernel/kthread.c:463
 ret_from_fork+0x51b/0xa40 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
 </TASK>
----------------
Code disassembly (best guess):
   0:	1c 08                	sbb    $0x8,%al
   2:	00 00                	add    %al,(%rax)
   4:	48 8b 44 24 38       	mov    0x38(%rsp),%rax
   9:	8b 30                	mov    (%rax),%esi
   b:	45 31 ed             	xor    %r13d,%r13d
   e:	83 e6 07             	and    $0x7,%esi
  11:	41 0f 95 c5          	setne  %r13b
  15:	31 ff                	xor    %edi,%edi
  17:	e8 01 3c b2 f6       	call   0xf6b23c1d
  1c:	43 8d 4c 6d 02       	lea    0x2(%r13,%r13,2),%ecx
  21:	48 89 df             	mov    %rbx,%rdi
  24:	4c 89 f6             	mov    %r14,%rsi
  27:	4c 89 fa             	mov    %r15,%rdx
* 2a:	67 48 0f b9 3a       	ud1    (%edx),%rdi <-- trapping instruction
  2f:	41 bd 01 00 00 00    	mov    $0x1,%r13d
  35:	e9 73 01 00 00       	jmp    0x1ad
  3a:	e8 9e 37 b2 f6       	call   0xf6b237dd
  3f:	e9                   	.byte 0xe9
Kernel bug: KMSAN: uninit-value in mptcp_established_options
Subsystem: mptcp
Status: open

Crash report:
=====================================================
BUG: KMSAN: uninit-value in mptcp_write_data_fin net/mptcp/options.c:542 [inline]
BUG: KMSAN: uninit-value in mptcp_established_options_dss net/mptcp/options.c:590 [inline]
BUG: KMSAN: uninit-value in mptcp_established_options+0x112f/0x3530 net/mptcp/options.c:874
 mptcp_write_data_fin net/mptcp/options.c:542 [inline]
 mptcp_established_options_dss net/mptcp/options.c:590 [inline]
 mptcp_established_options+0x112f/0x3530 net/mptcp/options.c:874
 tcp_established_options+0x312/0xcc0 net/ipv4/tcp_output.c:1192
 __tcp_transmit_skb+0x5dc/0x5fe0 net/ipv4/tcp_output.c:1575
 __tcp_send_ack+0x967/0xad0 net/ipv4/tcp_output.c:4499
 tcp_send_ack+0x3d/0x60 net/ipv4/tcp_output.c:4505
 mptcp_subflow_shutdown+0x164/0x690 net/mptcp/protocol.c:3137
 mptcp_check_send_data_fin+0x31b/0x3d0 net/mptcp/protocol.c:3218
 __mptcp_wr_shutdown net/mptcp/protocol.c:3234 [inline]
 __mptcp_close+0x860/0x1360 net/mptcp/protocol.c:3313
 mptcp_close+0x42/0x260 net/mptcp/protocol.c:3367
 inet_release+0x1ee/0x2a0 net/ipv4/af_inet.c:442
 __sock_release net/socket.c:722 [inline]
 sock_close+0xd6/0x2f0 net/socket.c:1514
 __fput+0x60e/0x1010 fs/file_table.c:510
 ____fput+0x25/0x30 fs/file_table.c:538
 task_work_run+0x208/0x2b0 kernel/task_work.c:233
 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
 __exit_to_user_mode_loop kernel/entry/common.c:67 [inline]
 exit_to_user_mode_loop+0x306/0x1b60 kernel/entry/common.c:98
 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline]
 syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:238 [inline]
 syscall_exit_to_user_mode include/linux/entry-common.h:318 [inline]
 do_syscall_64+0x236/0xf80 arch/x86/entry/syscall_64.c:100
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Local variable opts created at:
 __tcp_transmit_skb+0x4d/0x5fe0 net/ipv4/tcp_output.c:1536
 __tcp_send_ack+0x967/0xad0 net/ipv4/tcp_output.c:4499

CPU: 1 UID: 0 PID: 5871 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
=====================================================
Kernel bug: WARNING in __secure_computing
Subsystem: kernel
Status: open

Crash report:
------------[ cut here ]------------
1
WARNING: kernel/seccomp.c:1407 at __secure_computing+0x2ae/0x2e0 kernel/seccomp.c:1407, CPU#2: syz.0.17/6089
Modules linked in:
CPU: 2 UID: 0 PID: 6089 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
RIP: 0010:__secure_computing+0x2ae/0x2e0 kernel/seccomp.c:1407
Code: 00 e8 96 52 fe ff e8 31 27 ff ff e8 fc 68 6b 00 bf 09 00 00 00 e8 82 f0 be ff e8 3d 79 6b 00 e9 06 fe ff ff e8 13 27 ff ff 90 <0f> 0b 90 e8 da 68 6b 00 bf 09 00 00 00 e8 60 f0 be ff e8 fb 26 ff
RSP: 0018:ffffc9000386fed0 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffffc9000386ff48 RCX: ffffffff82097151
RDX: ffff88802a048000 RSI: ffffffff8209730d RDI: ffff88802a048000
RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000003
R10: 0000000000000003 R11: 0000000000000000 R12: 00000000000001b4
R13: 00000000000001b4 R14: ffff88802a048000 R15: 0000000000000001
FS:  00005555604ee500(0000) GS:ffff8880d654a000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f59cd871fc0 CR3: 0000000058ffd000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 syscall_trace_enter include/linux/entry-common.h:112 [inline]
 syscall_enter_from_user_mode_work include/linux/entry-common.h:156 [inline]
 syscall_enter_from_user_mode include/linux/entry-common.h:187 [inline]
 do_syscall_64+0x568/0xf80 arch/x86/entry/syscall_64.c:90
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f59cd99c629
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc95a0ecd8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
RAX: ffffffffffffffda RBX: 00007ffc95a0edc0 RCX: 00007f59cd99c629
RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
RBP: 0000000000012559 R08: 0000000000000001 R09: 0000000000000000
R10: 0000001b2df20000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f59cdc15fac R14: 00007f59cdc15fa8 R15: 00007f59cdc15fa0
 </TASK>
Kernel bug: KMSAN: uninit-value in dvb_demux_read
Subsystem: media
Status: open

Crash report:
=====================================================
BUG: KMSAN: uninit-value in dvb_dmxdev_read_sec drivers/media/dvb-core/dmxdev.c:975 [inline]
BUG: KMSAN: uninit-value in dvb_demux_read+0x580/0xa40 drivers/media/dvb-core/dmxdev.c:1020
 dvb_dmxdev_read_sec drivers/media/dvb-core/dmxdev.c:975 [inline]
 dvb_demux_read+0x580/0xa40 drivers/media/dvb-core/dmxdev.c:1020
 do_loop_readv_writev fs/read_write.c:847 [inline]
 vfs_readv+0x931/0xf30 fs/read_write.c:1020
 do_preadv fs/read_write.c:1132 [inline]
 __do_sys_preadv fs/read_write.c:1179 [inline]
 __se_sys_preadv fs/read_write.c:1174 [inline]
 __x64_sys_preadv+0x2a3/0x510 fs/read_write.c:1174
 x64_sys_call+0x3033/0x3e70 arch/x86/include/generated/asm/syscalls_64.h:296
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xc9/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Uninit was created at:
 __alloc_frozen_pages_noprof+0x6df/0xf50 mm/page_alloc.c:5263
 alloc_pages_mpol+0x328/0x860 mm/mempolicy.c:2486
 alloc_frozen_pages_noprof mm/mempolicy.c:2557 [inline]
 alloc_pages_noprof+0x101/0x280 mm/mempolicy.c:2577
 vm_area_alloc_pages mm/vmalloc.c:3649 [inline]
 __vmalloc_area_node mm/vmalloc.c:3863 [inline]
 __vmalloc_node_range_noprof+0xa97/0x2d80 mm/vmalloc.c:4051
 __vmalloc_node_noprof mm/vmalloc.c:4111 [inline]
 __vmalloc_noprof+0x128/0x1f0 mm/vmalloc.c:4127
 __vmalloc_array_noprof mm/util.c:633 [inline]
 vmalloc_array_noprof+0x48/0x80 mm/util.c:644
 dvb_dmxdev_init+0xd8/0x680 drivers/media/dvb-core/dmxdev.c:1417
 vidtv_bridge_dmxdev_init drivers/media/test-drivers/vidtv/vidtv_bridge.c:343 [inline]
 vidtv_bridge_dvb_init drivers/media/test-drivers/vidtv/vidtv_bridge.c:445 [inline]
 vidtv_bridge_probe+0x1bfd/0x2690 drivers/media/test-drivers/vidtv/vidtv_bridge.c:508
 platform_probe+0x213/0x370 drivers/base/platform.c:1446
 call_driver_probe drivers/base/dd.c:-1 [inline]
 really_probe+0x4d5/0xe40 drivers/base/dd.c:661
 __driver_probe_device+0x25e/0x370 drivers/base/dd.c:803
 driver_probe_device+0x70/0x8f0 drivers/base/dd.c:833
 __driver_attach+0x53e/0xaa0 drivers/base/dd.c:1227
 bus_for_each_dev+0x33b/0x580 drivers/base/bus.c:383
 driver_attach+0x51/0x70 drivers/base/dd.c:1245
 bus_add_driver+0x54f/0xdb0 drivers/base/bus.c:715
 driver_register+0x42e/0x6a0 drivers/base/driver.c:249
 __platform_driver_register+0x65/0x80 drivers/base/platform.c:908
 vidtv_bridge_init+0x73/0x100 drivers/media/test-drivers/vidtv/vidtv_bridge.c:598
 do_one_initcall+0x22b/0xad0 init/main.c:1378
 do_initcall_level+0x157/0x2e0 init/main.c:1440
 do_initcalls+0x176/0x310 init/main.c:1456
 do_basic_setup+0x1d/0x30 init/main.c:1475
 kernel_init_freeable+0x213/0x430 init/main.c:1688
 kernel_init+0x2f/0x5e0 init/main.c:1578
 ret_from_fork+0x207/0x6f0 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246

CPU: 1 UID: 0 PID: 6063 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(voluntary) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
=====================================================
Kernel bug: WARNING in drm_wait_one_vblank (3)
Subsystem: dri
Status: open

Crash report:
------------[ cut here ]------------
faux_driver vkms: [drm] vblank wait timed out on crtc 0
WARNING: drivers/gpu/drm/drm_vblank.c:1318 at drm_wait_one_vblank+0x39a/0x5c0 drivers/gpu/drm/drm_vblank.c:1318, CPU#0: kworker/0:0/9
Modules linked in:
CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
Workqueue: events drm_fb_helper_damage_work
RIP: 0010:drm_wait_one_vblank+0x587/0x5c0 drivers/gpu/drm/drm_vblank.c:1318
Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 ba c8 f6 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 d5 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f
RSP: 0018:ffffc900000e7860 EFLAGS: 00010246
RAX: 1ffff110281e8400 RBX: ffffffff8ee5ae70 RCX: 0000000000000000
RDX: ffffffff8b569b80 RSI: ffffffff8b584ca0 RDI: ffffffff8ee5ae70
RBP: ffffc900000e7948 R08: 0000000000000000 R09: 0000000000000000
R10: dffffc0000000000 R11: fffffbfff1db66af R12: ffffffff8b584ca0
R13: ffff888140f42000 R14: 1ffff9200001cf10 R15: ffffffff8b569b80
FS:  0000000000000000(0000) GS:ffff888126cef000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055557a9da5c8 CR3: 0000000043562000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 drm_client_modeset_wait_for_vblank+0xc5/0xf0 drivers/gpu/drm/drm_client_modeset.c:1330
 drm_fb_helper_fb_dirty drivers/gpu/drm/drm_fb_helper.c:334 [inline]
 drm_fb_helper_damage_work+0xc9/0x650 drivers/gpu/drm/drm_fb_helper.c:369
 process_one_work kernel/workqueue.c:3257 [inline]
 process_scheduled_works+0xad1/0x1770 kernel/workqueue.c:3340
 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3421
 kthread+0x711/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x510/0xa50 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
 </TASK>
----------------
Code disassembly (best guess), 1 bytes skipped:
   0:	48 b9 00 00 00 00 00 	movabs $0xdffffc0000000000,%rcx
   7:	fc ff df
   a:	80 3c 08 00          	cmpb   $0x0,(%rax,%rcx,1)
   e:	74 08                	je     0x18
  10:	4c 89 ef             	mov    %r13,%rdi
  13:	e8 ba c8 f6 fc       	call   0xfcf6c8d2
  18:	4d 8b 7d 00          	mov    0x0(%r13),%r15
  1c:	48 89 df             	mov    %rbx,%rdi
  1f:	4c 89 e6             	mov    %r12,%rsi
  22:	4c 89 fa             	mov    %r15,%rdx
  25:	8b 4c 24 04          	mov    0x4(%rsp),%ecx
* 29:	67 48 0f b9 3a       	ud1    (%edx),%rdi <-- trapping instruction
  2e:	e9 d5 fc ff ff       	jmp    0xfffffd08
  33:	44 89 f9             	mov    %r15d,%ecx
  36:	80 e1 07             	and    $0x7,%cl
  39:	80 c1 03             	add    $0x3,%cl
  3c:	38 c1                	cmp    %al,%cl
  3e:	0f                   	.byte 0xf
Kernel bug: UBSAN: array-index-out-of-bounds in dbFindLeaf (2)
Subsystem: jfs
Status: open

Crash report:
------------[ cut here ]------------
UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dmap.c:2976:16
index 1365 is out of range for type 's8[1365]' (aka 'signed char[1365]')
CPU: 1 UID: 0 PID: 6059 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
 ubsan_epilogue+0xa/0x40 lib/ubsan.c:233
 __ubsan_handle_out_of_bounds+0xe9/0xf0 lib/ubsan.c:455
 dbFindLeaf+0x308/0x520 fs/jfs/jfs_dmap.c:2976
 dbFindCtl+0x267/0x520 fs/jfs/jfs_dmap.c:1717
 dbAllocAny fs/jfs/jfs_dmap.c:1527 [inline]
 dbAlloc+0x5fa/0xba0 fs/jfs/jfs_dmap.c:878
 diNewIAG fs/jfs/jfs_imap.c:2510 [inline]
 diAllocExt fs/jfs/jfs_imap.c:1905 [inline]
 diAllocAG+0xd45/0x1df0 fs/jfs/jfs_imap.c:1669
 diAlloc+0x1d4/0x1670 fs/jfs/jfs_imap.c:1590
 ialloc+0x8c/0x8f0 fs/jfs/jfs_inode.c:56
 jfs_mkdir+0x193/0xa70 fs/jfs/namei.c:225
 vfs_mkdir+0x52d/0x5d0 fs/namei.c:5130
 do_mkdirat+0x27a/0x4b0 fs/namei.c:5164
 __do_sys_mkdirat fs/namei.c:5186 [inline]
 __se_sys_mkdirat fs/namei.c:5184 [inline]
 __x64_sys_mkdirat+0x87/0xa0 fs/namei.c:5184
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xec/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7efe6c5ade97
Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007efe6bbf4e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
RAX: ffffffffffffffda RBX: 00007efe6bbf4ef0 RCX: 00007efe6c5ade97
RDX: 00000000000001ff RSI: 00002000000002c0 RDI: 00000000ffffff9c
RBP: 0000200000000200 R08: 00002000000000c0 R09: 0000000000000000
R10: 0000200000000200 R11: 0000000000000246 R12: 00002000000002c0
R13: 00007efe6bbf4eb0 R14: 0000000000000000 R15: 0000000000000000
 </TASK>
---[ end trace ]---
Kernel bug: WARNING in lowpan_xmit (2)
Subsystem: wpan
Status: open

Crash report:
ieee802154 phy0 wpan0: encryption failed: -22
ieee802154 phy1 wpan1: encryption failed: -22
------------[ cut here ]------------
WARNING: ./include/linux/skbuff.h:3227 at skb_network_header_len include/linux/skbuff.h:3227 [inline], CPU#1: aoe_tx0/1301
WARNING: ./include/linux/skbuff.h:3227 at lowpan_header net/ieee802154/6lowpan/tx.c:236 [inline], CPU#1: aoe_tx0/1301
WARNING: ./include/linux/skbuff.h:3227 at lowpan_xmit+0xea9/0x1210 net/ieee802154/6lowpan/tx.c:282, CPU#1: aoe_tx0/1301
Modules linked in:
CPU: 1 UID: 0 PID: 1301 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
RIP: 0010:skb_network_header_len include/linux/skbuff.h:3227 [inline]
RIP: 0010:lowpan_header net/ieee802154/6lowpan/tx.c:236 [inline]
RIP: 0010:lowpan_xmit+0xea9/0x1210 net/ieee802154/6lowpan/tx.c:282
Code: ff ff 4c 89 ff 48 01 81 38 02 00 00 e8 30 d8 0f fe e9 e6 fb ff ff e8 46 a3 8f f6 90 0f 0b 90 e9 a3 f5 ff ff e8 38 a3 8f f6 90 <0f> 0b 90 e9 86 f6 ff ff e8 2a a3 8f f6 0f b7 8d e0 fe ff ff 44 8b
RSP: 0018:ffffc9000476f860 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffffc9000476f8e0 RCX: ffffffff8b2ebe6c
RDX: ffff888028a3bd00 RSI: ffffffff8b2ec7e8 RDI: 0000000000000003
RBP: ffffc9000476f9f0 R08: 0000000000000003 R09: 000000000000ffff
R10: 000000000000ffff R11: 0000000000000000 R12: ffff88801d79a476
R13: 000000000000ffff R14: ffff888028234d90 R15: ffff88801d79a3c0
FS:  0000000000000000(0000) GS:ffff8881249fa000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000c007868000 CR3: 0000000071880000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 __netdev_start_xmit include/linux/netdevice.h:5273 [inline]
 netdev_start_xmit include/linux/netdevice.h:5282 [inline]
 xmit_one net/core/dev.c:3853 [inline]
 dev_hard_start_xmit+0x97/0x6e0 net/core/dev.c:3869
 __dev_queue_xmit+0x6d7/0x46b0 net/core/dev.c:4819
 dev_queue_xmit include/linux/netdevice.h:3381 [inline]
 tx+0xcc/0x190 drivers/block/aoe/aoenet.c:62
 kthread+0x1e4/0x3e0 drivers/block/aoe/aoecmd.c:1241
 kthread+0x3c5/0x780 kernel/kthread.c:463
 ret_from_fork+0x983/0xb10 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
 </TASK>
Kernel bug: KMSAN: uninit-value in irqentry_exit_to_kernel_mode_preempt
Subsystem: kernel
Status: open

Crash report:
=====================================================
BUG: KMSAN: uninit-value in irqentry_exit_to_kernel_mode_preempt+0xb0/0xc0 include/linux/irq-entry-common.h:472
 irqentry_exit_to_kernel_mode_preempt+0xb0/0xc0 include/linux/irq-entry-common.h:472
 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:547 [inline]
 irqentry_exit+0x7b/0x760 kernel/entry/common.c:164
 sysvec_apic_timer_interrupt+0x52/0x90 arch/x86/kernel/apic/apic.c:1061
 asm_sysvec_apic_timer_interrupt+0x1f/0x30 arch/x86/include/asm/idtentry.h:697
 encrypted_key_alloc+0x8c9/0xa70 security/keys/encrypted-keys/encrypted.c:641
 encrypted_instantiate+0x45e/0x3220 security/keys/encrypted-keys/encrypted.c:812
 __key_instantiate_and_link+0xfe/0x5d0 security/keys/key.c:446
 __key_create_or_update+0x12c4/0x1500 security/keys/key.c:941
 key_create_or_update+0x5f/0x80 security/keys/key.c:1021
 __do_sys_add_key security/keys/keyctl.c:134 [inline]
 __se_sys_add_key+0x656/0x870 security/keys/keyctl.c:74
 __x64_sys_add_key+0xe4/0x150 security/keys/keyctl.c:74
 x64_sys_call+0xd3f/0x3ea0 arch/x86/include/generated/asm/syscalls_64.h:249
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x134/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Local variable dlen created at:
 encrypted_key_alloc+0x4f/0xa70 security/keys/encrypted-keys/encrypted.c:586
 encrypted_instantiate+0x45e/0x3220 security/keys/encrypted-keys/encrypted.c:812

CPU: 1 UID: 0 PID: 6291 Comm: syz.0.346 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
=====================================================
Kernel bug: WARNING in ieee80211_mgd_probe_ap_send (3)
Subsystem: wireless
Status: open

Crash report:
------------[ cut here ]------------
!sta
WARNING: net/mac80211/mlme.c:4504 at ieee80211_mgd_probe_ap_send+0x497/0x560 net/mac80211/mlme.c:4504, CPU#0: kworker/u4:0/12
Modules linked in:
CPU: 0 UID: 0 PID: 12 Comm: kworker/u4:0 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
Workqueue: events_unbound cfg80211_wiphy_work
RIP: 0010:ieee80211_mgd_probe_ap_send+0x497/0x560 net/mac80211/mlme.c:4504
Code: 4c 89 fe 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d e9 8d 31 78 f6 e8 98 49 8c f6 90 0f 0b 90 e9 3a fc ff ff e8 8a 49 8c f6 90 <0f> 0b 90 e9 d3 fc ff ff e8 7c 49 8c f6 90 0f 0b 90 e9 3c ff ff ff
RSP: 0018:ffffc9000025fa60 EFLAGS: 00010293
RAX: ffffffff8b395196 RBX: ffff888041854dc0 RCX: ffff88801c6dc900
RDX: 0000000000000000 RSI: ffffffff8e1663e6 RDI: ffff88801c6dc900
RBP: 0000000000000001 R08: ffff88801c6dc900 R09: 000000000000000c
R10: 000000000000000c R11: 0000000000000000 R12: ffff888041856ae2
R13: dffffc0000000000 R14: 0000000000000002 R15: ffff888041855d40
FS:  0000000000000000(0000) GS:ffff88808ca5b000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000c004686000 CR3: 000000003b57b000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 cfg80211_wiphy_work+0x2ab/0x4a0 net/wireless/core.c:440
 process_one_work kernel/workqueue.c:3275 [inline]
 process_scheduled_works+0xb02/0x1830 kernel/workqueue.c:3358
 worker_thread+0xa50/0xfc0 kernel/workqueue.c:3439
 kthread+0x388/0x470 kernel/kthread.c:467
 ret_from_fork+0x51e/0xb90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>