live-kbench/live-kbench huggingface dataset:
Kernel bug: WARNING in ntfs_put_super
Subsystem: ntfs3
Status: fixed

Crash report:
------------[ cut here ]------------
WARNING: mm/slub.c:6760 at free_large_kmalloc+0x15c/0x1f0 mm/slub.c:6760, CPU#1: syz-executor/5932
Modules linked in:
CPU: 1 UID: 0 PID: 5932 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
RIP: 0010:free_large_kmalloc+0x15c/0x1f0 mm/slub.c:6760
Code: 44 89 f6 e8 06 d1 fc ff 65 48 8b 05 8e d0 58 10 48 3b 44 24 08 75 57 48 83 c4 10 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 90 <0f> 0b 90 65 48 8b 05 69 d0 58 10 48 3b 44 24 08 75 32 48 89 df 48
RSP: 0018:ffffc90003b7fc48 EFLAGS: 00010206
RAX: 00000000ff000000 RBX: ffffea0000389040 RCX: ffffea0000389048
RDX: 0000000000000000 RSI: ffffffff8e241d40 RDI: ffffea0000389040
RBP: 1ffff1100f31c943 R08: ffffffff8f7da977 R09: 1ffffffff1efb52e
R10: dffffc0000000000 R11: fffffbfff1efb52f R12: 1ffff1100f31c936
R13: dffffc0000000000 R14: ffff8880798e49b0 R15: ffff88802f0976c8
FS:  000055557bdf2500(0000) GS:ffff888125fc2000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffca4f6ffd8 CR3: 0000000079d34000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 ntfs_put_super+0x15b/0x1b0 fs/ntfs3/super.c:709
 generic_shutdown_super+0x135/0x2c0 fs/super.c:643
 kill_block_super+0x44/0x90 fs/super.c:1723
 ntfs3_kill_sb+0x44/0x1b0 fs/ntfs3/super.c:1848
 deactivate_locked_super+0xbc/0x130 fs/super.c:474
 cleanup_mnt+0x425/0x4c0 fs/namespace.c:1317
 task_work_run+0x1d4/0x260 kernel/task_work.c:233
 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
 __exit_to_user_mode_loop kernel/entry/common.c:44 [inline]
 exit_to_user_mode_loop+0xff/0x4f0 kernel/entry/common.c:75
 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline]
 syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:256 [inline]
 syscall_exit_to_user_mode_work include/linux/entry-common.h:159 [inline]
 syscall_exit_to_user_mode include/linux/entry-common.h:194 [inline]
 do_syscall_64+0x2e9/0xfa0 arch/x86/entry/syscall_64.c:100
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f2de39909f7
Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
RSP: 002b:00007ffca4f70788 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
RAX: 0000000000000000 RBX: 00007f2de3a11d7d RCX: 00007f2de39909f7
RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffca4f70840
RBP: 00007ffca4f70840 R08: 0000000000000000 R09: 0000000000000000
R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffca4f718d0
R13: 00007f2de3a11d7d R14: 000000000001ab36 R15: 00007ffca4f71910
 </TASK>
Kernel bug: WARNING in ifs_free
Subsystem: iomap
Status: open

Crash report:
------------[ cut here ]------------
ifs_is_fully_uptodate(folio, ifs) != folio_test_uptodate(folio)
WARNING: fs/iomap/buffered-io.c:256 at ifs_free+0x35e/0x420 fs/iomap/buffered-io.c:255, CPU#1: syz-executor/5922
Modules linked in:
CPU: 1 UID: 0 PID: 5922 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
RIP: 0010:ifs_free+0x35e/0x420 fs/iomap/buffered-io.c:255
Code: 41 5f 5d e9 34 59 c3 ff e8 df 2a 69 ff 90 0f 0b 90 e9 cd fe ff ff e8 d1 2a 69 ff 90 0f 0b 90 e9 0a ff ff ff e8 c3 2a 69 ff 90 <0f> 0b 90 eb c3 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 00 fe ff ff
RSP: 0018:ffffc9000405f688 EFLAGS: 00010293
RAX: ffffffff825b294d RBX: 0000000000000008 RCX: ffff88802ca03c80
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 00000000825ba301 R08: 0000000000000000 R09: 0000000000000000
R10: dffffc0000000000 R11: fffff94000251149 R12: ffff8880437fe984
R13: ffff8880437fe900 R14: ffffea0001288a40 R15: 1ffffd4000251149
FS:  000055558e368500(0000) GS:ffff888126442000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055558e383a28 CR3: 00000000356cc000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 folio_invalidate mm/truncate.c:140 [inline]
 truncate_cleanup_folio+0xcb/0x190 mm/truncate.c:160
 truncate_inode_pages_range+0x2d1/0xe30 mm/truncate.c:404
 ntfs_evict_inode+0x19/0x40 fs/ntfs3/inode.c:1861
 evict+0x61e/0xb10 fs/inode.c:846
 dispose_list fs/inode.c:888 [inline]
 evict_inodes+0x75a/0x7f0 fs/inode.c:942
 generic_shutdown_super+0xaa/0x2d0 fs/super.c:632
 kill_block_super+0x44/0x90 fs/super.c:1725
 ntfs3_kill_sb+0x44/0x1c0 fs/ntfs3/super.c:1889
 deactivate_locked_super+0xbc/0x130 fs/super.c:476
 cleanup_mnt+0x437/0x4d0 fs/namespace.c:1312
 task_work_run+0x1d9/0x270 kernel/task_work.c:233
 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
 __exit_to_user_mode_loop kernel/entry/common.c:67 [inline]
 exit_to_user_mode_loop+0xed/0x480 kernel/entry/common.c:98
 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline]
 syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:256 [inline]
 syscall_exit_to_user_mode include/linux/entry-common.h:325 [inline]
 do_syscall_64+0x32d/0xf80 arch/x86/entry/syscall_64.c:100
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fd31563d897
Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
RSP: 002b:00007ffff5600d28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
RAX: 0000000000000000 RBX: 00007fd3156d1ef0 RCX: 00007fd31563d897
RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffff5600de0
RBP: 00007ffff5600de0 R08: 00007ffff5601de0 R09: 00000000ffffffff
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffff5601e70
R13: 00007fd3156d1ef0 R14: 000000000001b99e R15: 00007ffff5601eb0
 </TASK>
Kernel bug: WARNING in wnd_add_free_ext (4)
Subsystem: ntfs3
Status: open

Crash report:
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
R13: 00007fca63c16128 R14: 00007fca63c16090 R15: 00007ffedc73d3d8
 </TASK>
------------[ cut here ]------------
1
WARNING: fs/ntfs3/bitmap.c:217 at rb_insert_start fs/ntfs3/bitmap.c:217 [inline], CPU#0: syz.0.18/5481
WARNING: fs/ntfs3/bitmap.c:217 at wnd_add_free_ext+0xb92/0xe60 fs/ntfs3/bitmap.c:352, CPU#0: syz.0.18/5481
Modules linked in:
CPU: 0 UID: 0 PID: 5481 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
RIP: 0010:rb_insert_start fs/ntfs3/bitmap.c:217 [inline]
RIP: 0010:wnd_add_free_ext+0xb92/0xe60 fs/ntfs3/bitmap.c:352
Code: 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ff e8 44 8a 14 ff 4d 89 2f 4c 89 ef 48 89 de e8 b6 5e 7a 08 eb 0d e8 3f af aa fe 90 <0f> 0b 90 4c 8b 24 24 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 30
RSP: 0018:ffffc90003f677c8 EFLAGS: 00010293
RAX: ffffffff8319d7b1 RBX: ffff88804437a2e0 RCX: ffff888000be8000
RDX: 0000000000000000 RSI: 0000000000000019 RDI: 0000000000000019
RBP: 0000000000000019 R08: ffff888047706c2b R09: 1ffff11008ee0d85
R10: dffffc0000000000 R11: ffffed1008ee0d86 R12: dffffc0000000000
R13: ffff88804a4c96c0 R14: ffff88804a5346c0 R15: 0000000000000019
FS:  00007fca648f46c0(0000) GS:ffff88808ccea000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fca648f3ff8 CR3: 0000000052ad1000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 wnd_set_free+0x4bf/0x5c0 fs/ntfs3/bitmap.c:743
 mark_as_free_ex+0x1c8/0x390 fs/ntfs3/fsntfs.c:2489
 run_unpack+0x7aa/0xc90 fs/ntfs3/run.c:1037
 run_unpack_ex+0xd2/0xb90 fs/ntfs3/run.c:1078
 ni_delete_all+0x363/0x8a0 fs/ntfs3/frecord.c:1562
 ni_clear+0x315/0x530 fs/ntfs3/frecord.c:108
 evict+0x61e/0xb10 fs/inode.c:837
 do_unlinkat+0x354/0x590 fs/namei.c:5452
 __do_sys_unlink fs/namei.c:5483 [inline]
 __se_sys_unlink fs/namei.c:5481 [inline]
 __x64_sys_unlink+0x47/0x50 fs/namei.c:5481
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xe2/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fca6399aeb9
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fca648f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000057
RAX: ffffffffffffffda RBX: 00007fca63c16090 RCX: 00007fca6399aeb9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180
RBP: 00007fca648f4090 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
R13: 00007fca63c16128 R14: 00007fca63c16090 R15: 00007ffedc73d3d8
 </TASK>
Kernel bug: memory leak in dvb_register_device
Subsystem: media, usb
Status: open

Crash report:
BUG: memory leak
unreferenced object 0xffff88812b704d80 (size 192):
  comm "kworker/0:10", pid 6154, jiffies 4294943581
  hex dump (first 32 bytes):
    00 01 00 00 00 00 ad de 22 01 00 00 00 00 ad de  ........".......
    01 00 00 00 00 00 00 00 00 ec 21 04 81 88 ff ff  ..........!.....
  backtrace (crc 5efd1503):
    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
    slab_post_alloc_hook mm/slub.c:4464 [inline]
    slab_alloc_node mm/slub.c:4788 [inline]
    __kmalloc_cache_noprof+0x377/0x480 mm/slub.c:5292
    kmalloc_noprof include/linux/slab.h:962 [inline]
    kzalloc_noprof include/linux/slab.h:1204 [inline]
    dvb_register_device+0x116/0xaa0 drivers/media/dvb-core/dvbdev.c:475
    dvb_dmxdev_init+0x116/0x1d0 drivers/media/dvb-core/dmxdev.c:1425
    dvb_usbv2_adapter_dvb_init drivers/media/usb/dvb-usb-v2/dvb_usb_core.c:484 [inline]
    dvb_usbv2_adapter_init drivers/media/usb/dvb-usb-v2/dvb_usb_core.c:801 [inline]
    dvb_usbv2_init drivers/media/usb/dvb-usb-v2/dvb_usb_core.c:866 [inline]
    dvb_usbv2_probe.cold+0xc63/0xfa9 drivers/media/usb/dvb-usb-v2/dvb_usb_core.c:981
    usb_probe_interface+0x246/0x540 drivers/usb/core/driver.c:396
    call_driver_probe drivers/base/dd.c:583 [inline]
    really_probe+0x12f/0x3a0 drivers/base/dd.c:661
    __driver_probe_device+0xc7/0x160 drivers/base/dd.c:803
    driver_probe_device+0x2a/0x120 drivers/base/dd.c:833
    __device_attach_driver+0x10f/0x170 drivers/base/dd.c:961
    bus_for_each_drv+0xd2/0x130 drivers/base/bus.c:500
    __device_attach+0xf9/0x290 drivers/base/dd.c:1033
    device_initial_probe+0x6f/0x80 drivers/base/dd.c:1088
    bus_probe_device+0x3e/0xb0 drivers/base/bus.c:574
    device_add+0x97c/0xc80 drivers/base/core.c:3689
    usb_set_configuration+0x8f5/0xb80 drivers/usb/core/message.c:2210
    usb_generic_driver_probe+0x73/0xb0 drivers/usb/core/generic.c:250

connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF
Kernel bug: INFO: task hung in f2fs_fallocate (6)
Subsystem: f2fs
Status: open

Crash report:
INFO: task syz.1.18:6046 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.18        state:D stack:28832 pid:6046  tgid:6042  ppid:6019   task_flags:0x400040 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5295 [inline]
 __schedule+0x1585/0x5340 kernel/sched/core.c:6907
 __schedule_loop kernel/sched/core.c:6989 [inline]
 schedule+0x164/0x360 kernel/sched/core.c:7004
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7061
 rwsem_down_write_slowpath+0x899/0x1040 kernel/locking/rwsem.c:1185
 __down_write_common kernel/locking/rwsem.c:1317 [inline]
 __down_write kernel/locking/rwsem.c:1326 [inline]
 down_write+0x1bc/0x200 kernel/locking/rwsem.c:1591
 inode_lock include/linux/fs.h:1028 [inline]
 f2fs_fallocate+0x24e/0x9b0 fs/f2fs/file.c:2013
 vfs_fallocate+0x669/0x7e0 fs/open.c:340
 ksys_fallocate fs/open.c:364 [inline]
 __do_sys_fallocate fs/open.c:369 [inline]
 __se_sys_fallocate fs/open.c:367 [inline]
 __x64_sys_fallocate+0xc0/0x110 fs/open.c:367
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x14d/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa61c59c629
RSP: 002b:00007fa61d448028 EFLAGS: 00000246
 ORIG_RAX: 000000000000011d
RAX: ffffffffffffffda RBX: 00007fa61c816090 RCX: 00007fa61c59c629
RDX: 0000000000004000 RSI: 0000000000000008 RDI: 0000000000000004
RBP: 00007fa61c632b39 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fa61c816128 R14: 00007fa61c816090 R15: 00007ffcfdb9b178
 </TASK>

Showing all locks held in the system:
Kernel bug: KMSAN: uninit-value in hfsplus_bnode_find
Subsystem: hfs
Status: open

Crash report:
loop0: detected capacity change from 0 to 1024
hfsplus: requested invalid offset: NODE: id 0, type 0x1, height 0, node_size 1, offset 4294967295
=====================================================
BUG: KMSAN: uninit-value in hfsplus_bnode_find+0x141c/0x1600 fs/hfsplus/bnode.c:584
 hfsplus_bnode_find+0x141c/0x1600 fs/hfsplus/bnode.c:584
 hfsplus_btree_open+0x169a/0x1e40 fs/hfsplus/btree.c:382
 hfsplus_fill_super+0x111f/0x2770 fs/hfsplus/super.c:553
 get_tree_bdev_flags+0x6e6/0x920 fs/super.c:1694
 get_tree_bdev+0x38/0x50 fs/super.c:1717
 hfsplus_get_tree+0x35/0x40 fs/hfsplus/super.c:709
 vfs_get_tree+0xb3/0x5d0 fs/super.c:1754
 fc_mount fs/namespace.c:1193 [inline]
 do_new_mount_fc fs/namespace.c:3763 [inline]
 do_new_mount+0x885/0x1dd0 fs/namespace.c:3839
 path_mount+0x7a2/0x20b0 fs/namespace.c:4159
 do_mount fs/namespace.c:4172 [inline]
 __do_sys_mount fs/namespace.c:4361 [inline]
 __se_sys_mount+0x704/0x7f0 fs/namespace.c:4338
 __x64_sys_mount+0xe4/0x150 fs/namespace.c:4338
 x64_sys_call+0x39f0/0x3ea0 arch/x86/include/generated/asm/syscalls_64.h:166
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x134/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Local variable data.i created at:
 hfsplus_bnode_read_u16 fs/hfsplus/bnode.c:58 [inline]
 hfsplus_bnode_find+0xd6f/0x1600 fs/hfsplus/bnode.c:583
 hfsplus_btree_open+0x169a/0x1e40 fs/hfsplus/btree.c:382

CPU: 0 UID: 0 PID: 6044 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
=====================================================
Kernel bug: INFO: task hung in rescuer_thread (3)
Subsystem: kernel
Status: open

Crash report:
INFO: task kworker/R-wg-cr:5992 blocked for more than 149 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/R-wg-cr state:D stack:25984 pid:5992  tgid:5992  ppid:2      task_flags:0x4208060 flags:0x00080000
Workqueue:  0x0 (wg-crypt-wg1)
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5260 [inline]
 __schedule+0x14ea/0x5050 kernel/sched/core.c:6867
 __schedule_loop kernel/sched/core.c:6949 [inline]
 schedule+0x164/0x360 kernel/sched/core.c:6964
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7021
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0x7fe/0x1300 kernel/locking/mutex.c:776
 worker_detach_from_pool kernel/workqueue.c:2730 [inline]
 rescuer_thread+0x593/0x1390 kernel/workqueue.c:3560
 kthread+0x726/0x8b0 kernel/kthread.c:463
 ret_from_fork+0x51b/0xa40 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
 </TASK>

Showing all locks held in the system:
1 lock held by kworker/R-rcu_g/4:
 #0: ffffffff8e3f8c88 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_detach_from_pool kernel/workqueue.c:2730 [inline]
 #0: ffffffff8e3f8c88 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x593/0x1390 kernel/workqueue.c:3560
Kernel bug: INFO: task hung in blk_trace_startstop
Subsystem: block, trace
Status: open

Crash report:
INFO: task syz.2.19:6128 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.2.19        state:D stack:27960 pid:6128  tgid:6125  ppid:5955   task_flags:0x400040 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5298 [inline]
 __schedule+0x15dd/0x52d0 kernel/sched/core.c:6911
 __schedule_loop kernel/sched/core.c:6993 [inline]
 schedule+0x164/0x360 kernel/sched/core.c:7008
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7065
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0x7fe/0x1300 kernel/locking/mutex.c:776
 blk_debugfs_lock_nomemsave block/blk.h:740 [inline]
 blk_trace_startstop+0x8f/0x610 kernel/trace/blktrace.c:903
 blk_trace_ioctl+0x314/0x920 kernel/trace/blktrace.c:949
 blkdev_common_ioctl+0x13a7/0x3250 block/ioctl.c:724
 blkdev_ioctl+0x528/0x740 block/ioctl.c:798
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x14d/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f7f6ab9c819
RSP: 002b:00007f7f6baad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f7f6ae16090 RCX: 00007f7f6ab9c819
RDX: 0000000000000000 RSI: 0000000000001274 RDI: 0000000000000003
RBP: 00007f7f6ac32c91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
Kernel bug: KMSAN: uninit-value in handle_bug
Subsystem: bpf
Status: open

Crash report:
------------[ cut here ]------------
=====================================================
BUG: KMSAN: uninit-value in vsnprintf+0x15be/0x1b00 lib/vsprintf.c:2912
 vsnprintf+0x15be/0x1b00 lib/vsprintf.c:2912
 vprintk_store+0x350/0x1550 kernel/printk/printk.c:2307
 vprintk_emit+0x2c8/0xba0 kernel/printk/printk.c:2455
 vprintk_default+0x3f/0x50 kernel/printk/printk.c:2494
 vprintk+0x36/0x50 kernel/printk/printk_safe.c:82
 __warn_printf lib/bug.c:190 [inline]
 __report_bug+0xa10/0xe00 lib/bug.c:244
 report_bug_entry+0x17c/0x220 lib/bug.c:269
 handle_bug+0xe5/0x230 arch/x86/kernel/traps.c:430
 exc_invalid_op+0x1f/0x50 arch/x86/kernel/traps.c:489
 asm_exc_invalid_op+0x1f/0x30 arch/x86/include/asm/idtentry.h:616
 reg_bounds_sanity_check+0x571/0x14e0 kernel/bpf/verifier.c:2817
 reg_set_min_max+0x34b/0x450 kernel/bpf/verifier.c:17159
 check_cond_jmp_op+0x3bf5/0x5370 kernel/bpf/verifier.c:17609
 do_check_insn kernel/bpf/verifier.c:21168 [inline]
 do_check+0xc7e8/0x1add0 kernel/bpf/verifier.c:21308
 do_check_common+0x2705/0x4270 kernel/bpf/verifier.c:24650
 do_check_main kernel/bpf/verifier.c:24733 [inline]
 bpf_check+0x1f159/0x27e90 kernel/bpf/verifier.c:26056
 bpf_prog_load+0x2b41/0x3140 kernel/bpf/syscall.c:3089
 __sys_bpf+0x8e0/0xee0 kernel/bpf/syscall.c:6228
 __do_sys_bpf kernel/bpf/syscall.c:6341 [inline]
 __se_sys_bpf kernel/bpf/syscall.c:6339 [inline]
 __x64_sys_bpf+0xa4/0xf0 kernel/bpf/syscall.c:6339
 x64_sys_call+0x13d0/0x3ea0 arch/x86/include/generated/asm/syscalls_64.h:322
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x134/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Uninit was stored to memory at:
 vsnprintf+0x15b7/0x1b00 lib/vsprintf.c:-1
 vprintk_store+0x350/0x1550 kernel/printk/printk.c:2307
 vprintk_emit+0x2c8/0xba0 kernel/printk/printk.c:2455
 vprintk_default+0x3f/0x50 kernel/printk/printk.c:2494
 vprintk+0x36/0x50 kernel/printk/printk_safe.c:82
 __warn_printf lib/bug.c:190 [inline]
 __report_bug+0xa10/0xe00 lib/bug.c:244
 report_bug_entry+0x17c/0x220 lib/bug.c:269
 handle_bug+0xe5/0x230 arch/x86/kernel/traps.c:430
 exc_invalid_op+0x1f/0x50 arch/x86/kernel/traps.c:489
 asm_exc_invalid_op+0x1f/0x30 arch/x86/include/asm/idtentry.h:616

Local variable pflags created at:
 try_charge_memcg+0x63/0x1c20 mm/memcontrol.c:2367
 obj_cgroup_charge_pages+0x69/0x330 mm/memcontrol.c:2857

CPU: 1 UID: 0 PID: 5997 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
=====================================================
Kernel bug: KMSAN: uninit-value in txLock
Subsystem: jfs
Status: open

Crash report:
=====================================================
BUG: KMSAN: uninit-value in txLock+0x13a2/0x2900 fs/jfs/jfs_txnmgr.c:659
 txLock+0x13a2/0x2900 fs/jfs/jfs_txnmgr.c:659
 xtTruncate+0x1002/0x5050 fs/jfs/jfs_xtree.c:2337
 jfs_truncate_nolock+0x223/0x670 fs/jfs/inode.c:396
 jfs_truncate fs/jfs/inode.c:420 [inline]
 jfs_write_failed+0x207/0x3c0 fs/jfs/inode.c:295
 jfs_write_end+0xcc/0x110 fs/jfs/inode.c:322
 generic_perform_write+0x999/0x1050 mm/filemap.c:4335
 __generic_file_write_iter+0x213/0x460 mm/filemap.c:4431
 generic_file_write_iter+0x131/0x980 mm/filemap.c:4457
 new_sync_write fs/read_write.c:593 [inline]
 vfs_write+0xbe2/0x15d0 fs/read_write.c:686
 ksys_pwrite64 fs/read_write.c:793 [inline]
 __do_sys_pwrite64 fs/read_write.c:801 [inline]
 __se_sys_pwrite64 fs/read_write.c:798 [inline]
 __x64_sys_pwrite64+0x2ab/0x3b0 fs/read_write.c:798
 x64_sys_call+0xbaf/0x3e70 arch/x86/include/generated/asm/syscalls_64.h:19
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd3/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Uninit was created at:
 __alloc_frozen_pages_noprof+0x421/0xab0 mm/page_alloc.c:5263
 alloc_pages_mpol+0x328/0x860 mm/mempolicy.c:2486
 alloc_frozen_pages_noprof mm/mempolicy.c:2557 [inline]
 alloc_pages_noprof+0x102/0x280 mm/mempolicy.c:2577
 vm_area_alloc_pages mm/vmalloc.c:3649 [inline]
 __vmalloc_area_node mm/vmalloc.c:3863 [inline]
 __vmalloc_node_range_noprof+0xa94/0x2d90 mm/vmalloc.c:4051
 __vmalloc_node_noprof mm/vmalloc.c:4111 [inline]
 vmalloc_noprof+0xce/0x140 mm/vmalloc.c:4146
 txInit+0xb5c/0xfa0 fs/jfs/jfs_txnmgr.c:297
 init_jfs_fs+0x1b2/0xcb0 fs/jfs/super.c:977
 do_one_initcall+0x22b/0xad0 init/main.c:1378
 do_initcall_level+0x157/0x2e0 init/main.c:1440
 do_initcalls+0x176/0x310 init/main.c:1456
 do_basic_setup+0x1d/0x30 init/main.c:1475
 kernel_init_freeable+0x214/0x430 init/main.c:1688
 kernel_init+0x2f/0x5e0 init/main.c:1578
 ret_from_fork+0x208/0x710 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246

CPU: 1 UID: 0 PID: 6025 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(none) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
=====================================================