live-kbench/live-kbench huggingface dataset:
Kernel bug: WARNING in __mmdrop (2)
Subsystem: kernel
Status: fixed

Crash report:
------------[ cut here ]------------
mm == current->mm
WARNING: kernel/fork.c:721 at __mmdrop+0x5de/0x750 kernel/fork.c:721, CPU#0: syz.0.21/6011
Modules linked in:
CPU: 0 UID: 0 PID: 6011 Comm: syz.0.21 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
RIP: 0010:__mmdrop+0x5de/0x750 kernel/fork.c:721
Code: 00 90 0f 0b e8 e3 b8 41 00 90 0f 0b 90 e9 e9 fa ff ff e8 d5 b8 41 00 48 89 df e8 fd 05 aa 00 e9 c0 fb ff ff e8 c3 b8 41 00 90 <0f> 0b 90 e9 85 fa ff ff e8 b5 b8 41 00 90 0f 0b 90 e9 5f fb ff ff
RSP: 0018:ffffc900031d78f0 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff88802c1e6200 RCX: ffffffff81d45fb6
RDX: ffff88802d5b8000 RSI: ffffffff81c4b43d RDI: ffff88802d5b8570
RBP: ffffc900031d7988 R08: 0000000000000001 R09: ffffed100583cc40
R10: ffff88802c1e6203 R11: 0000000000000000 R12: ffff88802d5b8000
R13: ffff88801e6bdac0 R14: ffff88802e53dac0 R15: ffff8880b843beb0
FS:  00007f26579c36c0(0000) GS:ffff8881245a5000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2f963fff CR3: 000000002520c000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 mmdrop include/linux/sched/mm.h:55 [inline]
 mmdrop_sched include/linux/sched/mm.h:83 [inline]
 mmdrop_lazy_tlb_sched include/linux/sched/mm.h:110 [inline]
 finish_task_switch.isra.0+0x779/0xb80 kernel/sched/core.c:5177
 context_switch kernel/sched/core.c:5298 [inline]
 __schedule+0x102b/0x6000 kernel/sched/core.c:6907
 preempt_schedule_common+0x42/0xc0 kernel/sched/core.c:7091
 preempt_schedule_thunk+0x16/0x30 arch/x86/entry/thunk.S:12
 class_preempt_destructor include/linux/preempt.h:468 [inline]
 try_to_wake_up+0x644/0x1a80 kernel/sched/core.c:4094
 wake_up_process kernel/sched/core.c:4374 [inline]
 wake_up_q+0xa1/0x130 kernel/sched/core.c:1100
 futex_wake+0x460/0x530 kernel/futex/waitwake.c:198
 do_futex+0x32b/0x350 kernel/futex/syscalls.c:135
 __do_sys_futex kernel/futex/syscalls.c:207 [inline]
 __se_sys_futex kernel/futex/syscalls.c:188 [inline]
 __x64_sys_futex+0x34f/0x4d0 kernel/futex/syscalls.c:188
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f2656b9bf79
Code: Unable to access opcode bytes at 0x7f2656b9bf4f.
RSP: 002b:00007f26579c30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: ffffffffffffffda RBX: 00007f2656e15fa8 RCX: 00007f2656b9bf79
RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2656e15fac
RBP: 00007f2656e15fa0 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
R13: 00007f2656e16038 R14: 00007ffdb8798d50 R15: 00007ffdb8798e38
 </TASK>
Kernel bug: kernel BUG in bio_chain
Subsystem: gfs2, block
Status: fixed

Crash report:
gfs2: fsid=syz:syz.0: jid=0, already locked for use
gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
------------[ cut here ]------------
kernel BUG at block/bio.c:346!
Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
CPU: 0 UID: 0 PID: 786 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Workqueue: gfs2_recovery gfs2_recover_func
RIP: 0010:bio_chain+0xee/0x100 block/bio.c:346
Code: 43 1c 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 89 f9 80 e1 07 fe c1 38 c1 7c cf e8 da 43 bd fd eb c8 e8 93 99 55 fd 90 <0f> 0b e8 8b 99 55 fd 90 0f 0b 0f 1f 84 00 00 00 00 00 90 90 90 90
RSP: 0018:ffffc90001e3f540 EFLAGS: 00010293
RAX: ffffffff846b6dcd RBX: ffff88803358f500 RCX: ffff888000a824c0
RDX: 0000000000000000 RSI: ffff88803358f500 RDI: ffff88803132e640
RBP: 0000000000002004 R08: ffffffff84780ac0 R09: ffffffff8df41aa0
R10: dffffc0000000000 R11: ffffed10066b1eaf R12: dffffc0000000000
R13: 1ffff11006265cd0 R14: ffff88803132e640 R15: ffff88803132e680
FS:  0000000000000000(0000) GS:ffff88808d414000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fbf40f909c0 CR3: 00000000113cd000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 gfs2_chain_bio fs/gfs2/lops.c:487 [inline]
 gfs2_find_jhead+0x627/0xe40 fs/gfs2/lops.c:549
 gfs2_recover_func+0x5f5/0x1c90 fs/gfs2/recovery.c:459
 process_one_work kernel/workqueue.c:3257 [inline]
 process_scheduled_works+0xad1/0x1770 kernel/workqueue.c:3340
 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3421
 kthread+0x711/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x510/0xa50 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:bio_chain+0xee/0x100 block/bio.c:346
Code: 43 1c 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 89 f9 80 e1 07 fe c1 38 c1 7c cf e8 da 43 bd fd eb c8 e8 93 99 55 fd 90 <0f> 0b e8 8b 99 55 fd 90 0f 0b 0f 1f 84 00 00 00 00 00 90 90 90 90
RSP: 0018:ffffc90001e3f540 EFLAGS: 00010293
RAX: ffffffff846b6dcd RBX: ffff88803358f500 RCX: ffff888000a824c0
RDX: 0000000000000000 RSI: ffff88803358f500 RDI: ffff88803132e640
RBP: 0000000000002004 R08: ffffffff84780ac0 R09: ffffffff8df41aa0
R10: dffffc0000000000 R11: ffffed10066b1eaf R12: dffffc0000000000
R13: 1ffff11006265cd0 R14: ffff88803132e640 R15: ffff88803132e680
FS:  0000000000000000(0000) GS:ffff88808d414000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fbf40f909c0 CR3: 00000000559bb000 CR4: 0000000000352ef0
Kernel bug: WARNING in ieee80211_ocb_rx_no_sta (2)
Subsystem: wireless
Status: fixed

Crash report:
------------[ cut here ]------------
WARNING: CPU: 0 PID: 15 at net/mac80211/ocb.c:63 ieee80211_ocb_rx_no_sta+0x511/0x5d0 net/mac80211/ocb.c:63
Modules linked in:
CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
RIP: 0010:ieee80211_ocb_rx_no_sta+0x511/0x5d0 net/mac80211/ocb.c:63
Code: 48 0a 00 00 48 c7 c7 40 88 8a 8c 48 89 de 4c 89 fa 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d e9 85 25 4c f6 e8 00 a7 e4 f6 90 <0f> 0b 90 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b9 00 00 00
RSP: 0018:ffffc9000041f470 EFLAGS: 00010246
RAX: ffffffff8adb6c60 RBX: ffff8880596e0d80 RCX: ffff88801ab1c900
RDX: 0000000000000100 RSI: 0000000000000001 RDI: 0000000000000000
RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff8adb6809
R10: 000000000000000c R11: 0000000000000100 R12: ffffffff8adb6809
R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88804464b40a
FS:  0000000000000000(0000) GS:ffff88808d730000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000561f9cf3b950 CR3: 000000004130f000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 ieee80211_accept_frame net/mac80211/rx.c:4432 [inline]
 ieee80211_prepare_and_rx_handle+0x2555/0x6770 net/mac80211/rx.c:4994
 __ieee80211_rx_handle_packet net/mac80211/rx.c:5304 [inline]
 ieee80211_rx_list+0x2294/0x2c10 net/mac80211/rx.c:5451
 ieee80211_rx_napi+0x1a8/0x3d0 net/mac80211/rx.c:5474
 ieee80211_rx include/net/mac80211.h:5214 [inline]
 ieee80211_handle_queued_frames+0xe8/0x1f0 net/mac80211/main.c:453
 tasklet_action_common+0x36c/0x580 kernel/softirq.c:925
 handle_softirqs+0x286/0x870 kernel/softirq.c:622
 run_ksoftirqd+0x9b/0x100 kernel/softirq.c:1063
 smpboot_thread_fn+0x542/0xa60 kernel/smpboot.c:160
 kthread+0x711/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Kernel bug: KMSAN: uninit-value in ib_nl_handle_ip_res_resp
Subsystem: rdma
Status: fixed

Crash report:
netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'.
=====================================================
BUG: KMSAN: uninit-value in hex_byte_pack include/linux/hex.h:13 [inline]
BUG: KMSAN: uninit-value in ip6_string+0xef4/0x13a0 lib/vsprintf.c:1490
 hex_byte_pack include/linux/hex.h:13 [inline]
 ip6_string+0xef4/0x13a0 lib/vsprintf.c:1490
 ip6_addr_string+0x18a/0x3e0 lib/vsprintf.c:1509
 ip_addr_string+0x245/0xee0 lib/vsprintf.c:1633
 pointer+0xc09/0x1bd0 lib/vsprintf.c:2542
 vsnprintf+0xf8a/0x1bd0 lib/vsprintf.c:2930
 vprintk_store+0x3ae/0x1530 kernel/printk/printk.c:2252
 vprintk_emit+0x21a/0xb60 kernel/printk/printk.c:2399
 vprintk_default+0x3f/0x50 kernel/printk/printk.c:2438
 vprintk+0x36/0x50 kernel/printk/printk_safe.c:82
 _printk+0x17e/0x1b0 kernel/printk/printk.c:2448
 ib_nl_process_good_ip_rsep drivers/infiniband/core/addr.c:128 [inline]
 ib_nl_handle_ip_res_resp+0x963/0x9d0 drivers/infiniband/core/addr.c:141
 rdma_nl_rcv_msg drivers/infiniband/core/netlink.c:-1 [inline]
 rdma_nl_rcv_skb drivers/infiniband/core/netlink.c:239 [inline]
 rdma_nl_rcv+0xefa/0x11c0 drivers/infiniband/core/netlink.c:259
 netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline]
 netlink_unicast+0xf04/0x12b0 net/netlink/af_netlink.c:1346
 netlink_sendmsg+0x10b3/0x1250 net/netlink/af_netlink.c:1896
 sock_sendmsg_nosec net/socket.c:727 [inline]
 __sock_sendmsg+0x333/0x3d0 net/socket.c:742
 ____sys_sendmsg+0x7e0/0xd80 net/socket.c:2630
 ___sys_sendmsg+0x271/0x3b0 net/socket.c:2684
 __sys_sendmsg net/socket.c:2716 [inline]
 __do_sys_sendmsg net/socket.c:2721 [inline]
 __se_sys_sendmsg net/socket.c:2719 [inline]
 __x64_sys_sendmsg+0x211/0x3e0 net/socket.c:2719
 x64_sys_call+0x1dfd/0x3e30 arch/x86/include/generated/asm/syscalls_64.h:47
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd9/0xfa0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Local variable gid.i created at:
 ib_nl_process_good_ip_rsep drivers/infiniband/core/addr.c:102 [inline]
 ib_nl_handle_ip_res_resp+0x254/0x9d0 drivers/infiniband/core/addr.c:141
 rdma_nl_rcv_msg drivers/infiniband/core/netlink.c:-1 [inline]
 rdma_nl_rcv_skb drivers/infiniband/core/netlink.c:239 [inline]
 rdma_nl_rcv+0xefa/0x11c0 drivers/infiniband/core/netlink.c:259

CPU: 0 UID: 0 PID: 6093 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(none) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
=====================================================
Kernel bug: WARNING in indx_insert_into_buffer (3)
Subsystem: ntfs3
Status: fixed

Crash report:
loop0: detected capacity change from 0 to 4096
------------[ cut here ]------------
memcpy: detected field-spanning write (size 3656) of single field "hdr1" at fs/ntfs3/index.c:1927 (size 16)
WARNING: CPU: 0 PID: 6065 at fs/ntfs3/index.c:1927 indx_insert_into_buffer.isra.0+0x1041/0x12a0 fs/ntfs3/index.c:1927
Modules linked in:
CPU: 0 UID: 0 PID: 6065 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
RIP: 0010:indx_insert_into_buffer.isra.0+0x1041/0x12a0 fs/ntfs3/index.c:1927
Code: b5 ed a3 fe c6 05 52 41 31 0d 01 90 48 8b 74 24 68 b9 10 00 00 00 48 c7 c2 20 53 a7 8b 48 c7 c7 80 53 a7 8b e8 a0 74 62 fe 90 <0f> 0b 90 90 e9 df fd ff ff e8 71 6d 0b ff e9 4d f4 ff ff e8 67 6d
RSP: 0018:ffffc900039af748 EFLAGS: 00010282
RAX: 0000000000000000 RBX: 00000000ffffffe4 RCX: ffffffff81799b88
RDX: ffff88802ed50000 RSI: ffffffff81799b95 RDI: 0000000000000001
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: ffff888146f46800
R13: ffff888069637800 R14: 0000000000000e48 R15: ffff88807ae74018
FS:  0000555563ff7500(0000) GS:ffff888124e6a000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fdbd7fd4286 CR3: 0000000069517000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 indx_insert_entry+0x1a0/0x460 fs/ntfs3/index.c:1996
 ni_add_name+0x4dd/0x820 fs/ntfs3/frecord.c:2995
 ni_rename+0x98/0x170 fs/ntfs3/frecord.c:3026
 ntfs_rename+0xab9/0xf00 fs/ntfs3/namei.c:332
 vfs_rename+0xfa3/0x2290 fs/namei.c:5216
 do_renameat2+0x7d8/0xc20 fs/namei.c:5364
 __do_sys_rename fs/namei.c:5411 [inline]
 __se_sys_rename fs/namei.c:5409 [inline]
 __x64_sys_rename+0x7d/0xa0 fs/namei.c:5409
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x4e0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f780118eec9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffcbf706748 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
RAX: ffffffffffffffda RBX: 00007f78013e5fa0 RCX: 00007f780118eec9
RDX: 0000000000000000 RSI: 0000200000000f40 RDI: 00002000000003c0
RBP: 00007f7801211f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f78013e5fa0 R14: 00007f78013e5fa0 R15: 0000000000000002
 </TASK>
Kernel bug: KMSAN: uninit-value in ntfs_iomap_begin
Subsystem: ntfs3
Status: fixed

Crash report:
loop0: detected capacity change from 0 to 4096
ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
=====================================================
BUG: KMSAN: uninit-value in ntfs_iomap_begin+0x8c0/0x1460 fs/ntfs3/inode.c:825
 ntfs_iomap_begin+0x8c0/0x1460 fs/ntfs3/inode.c:825
 iomap_iter+0x9b7/0x1540 fs/iomap/iter.c:110
 iomap_read_folio+0x262/0x750 fs/iomap/buffered-io.c:587
 ntfs_read_folio+0x74a/0x770 fs/ntfs3/inode.c:697
 filemap_read_folio mm/filemap.c:2496 [inline]
 do_read_cache_folio+0x993/0x1470 mm/filemap.c:4096
 do_read_cache_page mm/filemap.c:4162 [inline]
 read_cache_page+0x63/0x1e0 mm/filemap.c:4171
 read_mapping_page include/linux/pagemap.h:1022 [inline]
 inode_read_data+0xb3/0x6b0 fs/ntfs3/inode.c:1116
 ntfs_fill_super+0x6a24/0x7e50 fs/ntfs3/super.c:1549
 get_tree_bdev_flags+0x6e6/0x920 fs/super.c:1694
 get_tree_bdev+0x38/0x50 fs/super.c:1717
 ntfs_fs_get_tree+0x35/0x40 fs/ntfs3/super.c:1788
 vfs_get_tree+0xb3/0x5d0 fs/super.c:1754
 fc_mount fs/namespace.c:1193 [inline]
 do_new_mount_fc fs/namespace.c:3760 [inline]
 do_new_mount+0x885/0x1dd0 fs/namespace.c:3836
 path_mount+0x7a2/0x20b0 fs/namespace.c:4146
 do_mount fs/namespace.c:4159 [inline]
 __do_sys_mount fs/namespace.c:4348 [inline]
 __se_sys_mount+0x704/0x7f0 fs/namespace.c:4325
 __x64_sys_mount+0xe4/0x150 fs/namespace.c:4325
 x64_sys_call+0x39f0/0x3ea0 arch/x86/include/generated/asm/syscalls_64.h:166
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x134/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Local variable lcn created at:
 ntfs_iomap_begin+0x15d/0x1460 fs/ntfs3/inode.c:786
 iomap_iter+0x9b7/0x1540 fs/iomap/iter.c:110

CPU: 1 UID: 0 PID: 6051 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
=====================================================
Kernel bug: memory leak in skb_clone (3)
Subsystem: bluetooth, batman
Status: fixed

Crash report:
2025/12/03 00:25:54 executed programs: 5
BUG: memory leak
unreferenced object 0xffff88811a1e1100 (size 240):
  comm "kworker/u9:0", pid 51, jiffies 4294944590
  hex dump (first 32 bytes):
    90 50 50 42 81 88 ff ff 90 50 50 42 81 88 ff ff  .PPB.....PPB....
    00 00 00 00 00 00 00 00 00 50 50 42 81 88 ff ff  .........PPB....
  backtrace (crc eed28d2d):
    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
    slab_post_alloc_hook mm/slub.c:4983 [inline]
    slab_alloc_node mm/slub.c:5288 [inline]
    kmem_cache_alloc_noprof+0x397/0x5a0 mm/slub.c:5295
    skb_clone+0xae/0x2b0 net/core/skbuff.c:2050
    __skb_tstamp_tx+0x3a0/0x4c0 net/core/skbuff.c:5636
    hci_conn_tx_queue+0x11c/0x1d0 net/bluetooth/hci_conn.c:3026
    hci_send_conn_frame net/bluetooth/hci_core.c:3086 [inline]
    hci_sched_acl_pkt net/bluetooth/hci_core.c:3701 [inline]
    hci_sched_acl net/bluetooth/hci_core.c:3726 [inline]
    hci_tx_work+0x437/0x570 net/bluetooth/hci_core.c:3820
    process_one_work+0x26b/0x620 kernel/workqueue.c:3263
    process_scheduled_works kernel/workqueue.c:3346 [inline]
    worker_thread+0x2c4/0x4f0 kernel/workqueue.c:3427
    kthread+0x15b/0x310 kernel/kthread.c:463
    ret_from_fork+0x2af/0x2e0 arch/x86/kernel/process.c:158
    ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF
Kernel bug: WARNING in io_wq_put_and_exit
Subsystem: io-uring
Status: fixed

Crash report:
RAX: ffffffffffffffda RBX: 00007f8d42c15fa0 RCX: 00007f8d4299c819
RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000084
RBP: 00007f8d42a32c91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f8d42c15fac R14: 00007f8d42c15fa0 R15: 00007f8d42c15fa0
 </TASK>
------------[ cut here ]------------
!test_bit(IO_WQ_BIT_EXIT, &wq->state)
WARNING: io_uring/io-wq.c:1396 at io_wq_put_and_exit+0x8a7/0x9d0 io_uring/io-wq.c:1396, CPU#0: syz.0.19/5987
Modules linked in:
CPU: 0 UID: 0 PID: 5987 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
RIP: 0010:io_wq_put_and_exit+0x8a7/0x9d0 io_uring/io-wq.c:1396
Code: ff e8 7d bf 17 fd 44 0f b6 74 24 78 31 ff 44 89 f6 e8 bd b9 17 fd 45 84 f6 0f 85 1a fd ff ff e9 67 fd ff ff e8 5a bf 17 fd 90 <0f> 0b 90 e9 00 f8 ff ff e8 8c 5e 83 fd e9 72 f8 ff ff 48 8b 3c 24
RSP: 0018:ffffc900036d7b50 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff88807a8fa000 RCX: ffffffff84f04326
RDX: ffff88801e390000 RSI: ffffffff84f04b26 RDI: ffff88801e390000
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920006daf8c
R13: 0000000000000000 R14: ffff88801e390970 R15: ffff888032be0c18
FS:  00005555898aa500(0000) GS:ffff888124332000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00002000000000c0 CR3: 0000000077c62000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 __io_uring_add_tctx_node+0x3e8/0x4c0 io_uring/tctx.c:174
 io_uring_create io_uring/io_uring.c:3063 [inline]
 io_uring_setup.cold+0x1993/0x1c7e io_uring/io_uring.c:3108
 __do_sys_io_uring_setup io_uring/io_uring.c:3142 [inline]
 __se_sys_io_uring_setup io_uring/io_uring.c:3133 [inline]
 __x64_sys_io_uring_setup+0xc2/0x170 io_uring/io_uring.c:3133
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x10b/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f8d4299c819
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffe9e8909a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
RAX: ffffffffffffffda RBX: 00007f8d42c15fa0 RCX: 00007f8d4299c819
RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000084
RBP: 00007f8d42a32c91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f8d42c15fac R14: 00007f8d42c15fa0 R15: 00007f8d42c15fa0
 </TASK>
Kernel bug: WARNING in jfs_rename
Subsystem: jfs
Status: fixed

Crash report:
loop0: detected capacity change from 0 to 32768
------------[ cut here ]------------
WARNING: CPU: 0 PID: 5817 at fs/inode.c:417 drop_nlink+0xc5/0x110 fs/inode.c:417
Modules linked in:
CPU: 0 UID: 0 PID: 5817 Comm: syz-executor227 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
RIP: 0010:drop_nlink+0xc5/0x110 fs/inode.c:417
Code: 70 07 00 00 be 08 00 00 00 e8 b7 84 e8 ff f0 48 ff 83 70 07 00 00 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc e8 0c b3 88 ff 90 <0f> 0b 90 eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5b ff ff ff
RSP: 0018:ffffc90003fa78b0 EFLAGS: 00010293
RAX: ffffffff82371c54 RBX: ffff888078bd8d68 RCX: ffff888079695a00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffffea0001d573b7 R09: 1ffffd40003aae76
R10: dffffc0000000000 R11: fffff940003aae77 R12: 1ffff1100f17b1b6
R13: 1ffff920007f4f28 R14: ffff888078bd8db0 R15: dffffc0000000000
FS:  000055556b6af380(0000) GS:ffff8881260fd000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000066c7e0 CR3: 0000000075764000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 jfs_rename+0xbb3/0x1610 fs/jfs/namei.c:1247
 vfs_rename+0xb99/0xec0 fs/namei.c:5121
 do_renameat2+0x878/0xc50 fs/namei.c:5270
 __do_sys_rename fs/namei.c:5317 [inline]
 __se_sys_rename fs/namei.c:5315 [inline]
 __x64_sys_rename+0x82/0x90 fs/namei.c:5315
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xf6/0x210 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fe20dc55639
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc472e5298 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
RAX: ffffffffffffffda RBX: 00007ffc472e5478 RCX: 00007fe20dc55639
RDX: 0000000000000000 RSI: 0000200000000780 RDI: 00002000000003c0
RBP: 00007fe20dcce610 R08: 0000000000006221 R09: 0000000000000000
R10: 00007ffc472e5160 R11: 0000000000000246 R12: 0000000000000001
R13: 00007ffc472e5468 R14: 0000000000000001 R15: 0000000000000001
 </TASK>
Kernel bug: WARNING in attr_data_get_block_locked
Subsystem: ntfs3
Status: fixed

Crash report:
------------[ cut here ]------------
1
WARNING: fs/ntfs3/attrib.c:1222 at attr_data_get_block_locked+0x174a/0x22a0 fs/ntfs3/attrib.c:1222, CPU#0: syz.0.17/5462
Modules linked in:
CPU: 0 UID: 0 PID: 5462 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
RIP: 0010:attr_data_get_block_locked+0x174a/0x22a0 fs/ntfs3/attrib.c:1222
Code: 89 ee 49 89 d6 e8 d6 19 a6 fe 4d 89 f2 44 89 ac 24 bc 00 00 00 45 29 ea 73 1e e8 01 18 a6 fe e9 47 f9 ff ff e8 f7 17 a6 fe 90 <0f> 0b 90 41 bf ea ff ff ff e9 d6 fa ff ff 48 b8 00 00 00 00 00 fc
RSP: 0018:ffffc900049079c0 EFLAGS: 00010293
RAX: ffffffff831f83a9 RBX: 00000000ffffffff RCX: ffff888000ea0000
RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 00000000ffffffff
RBP: ffffc90004907be8 R08: 0000000000000000 R09: 1ffff11002487041
R10: dffffc0000000000 R11: ffffed1002487042 R12: 0000000000000002
R13: dffffc0000000000 R14: 0000000000002000 R15: 0000000000000007
FS:  000055558ba85500(0000) GS:ffff88808ca5b000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fd19d7909c0 CR3: 0000000012819000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 attr_data_get_block+0x250/0x310 fs/ntfs3/attrib.c:982
 ntfs_fallocate+0xfac/0x1220 fs/ntfs3/file.c:677
 vfs_fallocate+0x669/0x7e0 fs/open.c:340
 ksys_fallocate fs/open.c:364 [inline]
 __do_sys_fallocate fs/open.c:369 [inline]
 __se_sys_fallocate fs/open.c:367 [inline]
 __x64_sys_fallocate+0xc0/0x110 fs/open.c:367
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x14d/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f1e3d39c629
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fffbfb65448 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
RAX: ffffffffffffffda RBX: 00007f1e3d615fa0 RCX: 00007f1e3d39c629
RDX: 0000000000007351 RSI: 0000000000000000 RDI: 0000000000000006
RBP: 00007f1e3d432b39 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f1e3d615fac R14: 00007f1e3d615fa0 R15: 00007f1e3d615fa0
 </TASK>