syzbot

Applied filters: Label=subsystems:afs (drop)
Extra filters: [With Repro]

Title	Rank 🛈	Repro	Cause bisect	Fix bisect	Count	Last	Reported	Patched	Closed	Patch
KCSAN: data-race in rxrpc_peer_keepalive_worker / rxrpc_send_data_packet afs net	6				1	187d	145d	29/29	26d	5d5fe8bcd331 rxrpc: Fix data-race warning and potential load/store tearing
general protection fault in afs_request_key afs	2				14	186d	191d	29/29	145d	d27c71257825 afs: Fix delayed allocation of a cell's anonymous key 19eef1d98eed afs: Fix uninit var in afs_alloc_anon_key()
KASAN: slab-out-of-bounds Read in afs_proc_addr_prefs_write afs	17	C			659	311d	531d	29/29	270d	9aa64182952d afs: Fix check for NULL terminator
BUG: unable to handle kernel paging request in afs_put_vlserverlist afs	8	C			3	326d	415d	29/29	270d	8b3c655fa240 afs: Set vllist to NULL if addr parsing fails
BUG: sleeping function called from invalid context in __do_fault afs	5				1	432d	428d	28/29	356d	a64e4d48a0b7 afs: Fix afs_dynroot_readdir() to not use the RCU read lock
BUG: sleeping function called from invalid context in ovl_cache_entry_new ntfs3 afs	5	C	done		52	399d	431d	28/29	356d	a64e4d48a0b7 afs: Fix afs_dynroot_readdir() to not use the RCU read lock
general protection fault in afs_atcell_get_link afs	2	C			25	438d	440d	28/29	356d	0307d16f3610 afs: Fix afs_atcell_get_link() to check if ws_cell is unset first
KASAN: slab-use-after-free Read in afs_dynroot_readdir afs	19	C			2	414d	428d	28/29	356d	a64e4d48a0b7 afs: Fix afs_dynroot_readdir() to not use the RCU read lock
BUG: sleeping function called from invalid context in __alloc_frozen_pages_noprof afs	5	C	done		61	413d	431d	28/29	356d	a64e4d48a0b7 afs: Fix afs_dynroot_readdir() to not use the RCU read lock
WARNING: lock held when returning to user space in afs_proc_addr_prefs_write afs	4	C			5	515d	523d	28/29	391d	17a4fde81d3a afs: Fix merge preference rule failure condition
WARNING in rxrpc_send_data afs net	-1	C	done		275	532d	538d	28/29	391d	ae4f89989479 rxrpc: Fix ability to add more data to a call once MSG_MORE deasserted
WARNING in __proc_create (3) afs	-1	C			2	519d	515d	28/29	391d	8fd56ad6e7c9 afs: Fix the maximum cell name length
KASAN: slab-use-after-free Read in afs_dynroot_test_super afs	19	C	done		4	1007d	1003d	23/29	963d	dc3216b14160 super: ensure valid info
general protection fault in skb_queue_tail (3) afs	19	C	inconclusive	done	9	1095d	1328d	23/29	977d	061b0cb9327b wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes
KCSAN: data-race in rxrpc_send_data / rxrpc_set_call_completion net afs	6				2	1155d	1134d	22/29	1089d	2b5fdc0f5caa rxrpc: Fix potential data race in rxrpc_wait_to_be_connected()
kernel BUG in rxrpc_put_call afs net	-1	C	done		9	1227d	1239d	22/29	1089d	01644a1f98ff rxrpc: Fix wrong error return in rxrpc_connect_call()
kernel BUG in rxrpc_put_peer net afs	-1	C			80	1230d	1273d	22/29	1089d	9d35d880e0e4 rxrpc: Move client call connection to the I/O thread 03fc55adf876 rxrpc: Only disconnect calls in the I/O thread
KASAN: use-after-free Read in rxrpc_lookup_local afs net	22	C			3997	1244d	1273d	22/29	1193d	8fbcc83334a7 rxrpc: Fix I/O thread startup getting skipped eaa02390adb0 rxrpc: Fix NULL deref in rxrpc_unuse_local()
WARNING: bad unlock balance in rxrpc_do_sendmsg afs net	4	C	inconclusive		14	1398d	1603d	22/29	1193d	b0f571ecd794 rxrpc: Fix locking in rxrpc's sendmsg
KASAN: use-after-free Read in rxrpc_get_skb afs net	19				1	1957d	1953d	19/29	1910d	7b5eab57cac4 rxrpc: Fix clearance of Tx/Rx ring when releasing a call
memory leak in rxrpc_lookup_local net afs	3	C			1415	1949d	2414d	19/29	1910d	b8323f7288ab rxrpc: Fix memory leak in rxrpc_lookup_local
KASAN: use-after-free Read in rxrpc_send_data_packet net afs	19				1	1952d	1946d	19/29	1910d	7b5eab57cac4 rxrpc: Fix clearance of Tx/Rx ring when releasing a call
INFO: rcu detected stall in __se_sys_mount afs	1	C	done	done	2	2032d	2156d	15/29	2001d	1d0e850a49a5 afs: Fix cell removal
KASAN: use-after-free Read in __proc_create afs	19				1	2074d	2072d	15/29	2023d	1d0e850a49a5 afs: Fix cell removal
KASAN: use-after-free Write in afs_manage_cell afs	22	C	done	done	20	2055d	2124d	15/29	2023d	1d0e850a49a5 afs: Fix cell removal
WARNING in rxrpc_recvmsg afs net	-1	C	error	done	5	2158d	2159d	15/29	2023d	65550098c1c4 rxrpc: Fix race between recvmsg and sendmsg on immediate call failure
INFO: rcu detected stall in sys_mount (5) afs	1	C	done	done	10	2070d	2091d	15/29	2023d	1d0e850a49a5 afs: Fix cell removal
KASAN: use-after-free Read in afs_deactivate_cell (2) afs	19	C	done		11	2061d	2079d	15/29	2023d	1d0e850a49a5 afs: Fix cell removal
INFO: rcu detected stall in sys_newlstat afs	1	C	error	done	1	2078d	2076d	15/29	2023d	1d0e850a49a5 afs: Fix cell removal
kernel BUG at net/rxrpc/conn_object.c:LINE! net afs	-1	C	done		855	2026d	2090d	15/29	2023d	546a42410bf7 rxrpc: Fix conn bundle leak in net-namespace exit
KASAN: use-after-free Read in afs_manage_cell afs	19				5	2065d	2079d	15/29	2023d	1d0e850a49a5 afs: Fix cell removal
general protection fault in strncasecmp afs	2	C	done		1	2078d	2076d	15/29	2023d	92e3cc91d8f5 afs: Fix rapid cell addition/removal by not using RCU on cells tree
KASAN: use-after-free Write in afs_deactivate_cell afs	22				4	2057d	2076d	15/29	2023d	1d0e850a49a5 afs: Fix cell removal
WARNING: proc registration bug in afs_manage_cell afs	-1	C	done		1	2076d	2072d	15/29	2023d	1d0e850a49a5 afs: Fix cell removal
KASAN: use-after-free Write in rxrpc_put_bundle afs net	22	C	done		229	2061d	2084d	15/29	2023d	f3af4ad1e08a rxrpc: Fix bundle counting for exclusive connections
INFO: rcu detected stall in security_file_open (3) afs	1	C	done	done	2	2071d	2070d	15/29	2023d	1d0e850a49a5 afs: Fix cell removal
general protection fault in afs_dynroot_depopulate afs	2				1	2112d	2110d	15/29	2084d	5e0b17b026eb afs: Fix NULL deref in afs_dynroot_depopulate()
kernel BUG at net/rxrpc/recvmsg.c:LINE! afs net	-1	C	error		10	2130d	2159d	15/29	2084d	65550098c1c4 rxrpc: Fix race between recvmsg and sendmsg on immediate call failure
net-next test error: KASAN: use-after-free Write in afs_wake_up_async_call afs	-1				60	2167d	2175d	15/29	2145d	0041cd5a5044 rxrpc: Fix notification call on completion of discarded calls
linux-next test error: KASAN: use-after-free Write in afs_wake_up_async_call afs	-1				111	2171d	2179d	15/29	2145d	0041cd5a5044 rxrpc: Fix notification call on completion of discarded calls
WARNING in __proc_create (2) afs	-1	C	done		4	2322d	2323d	15/29	2295d	a45ea48e2bcd afs: Fix characters allowed into cell names
inconsistent lock state in rxrpc_put_client_connection_id afs net	4	C	done		473	2304d	2310d	15/29	2295d	963485d436cc rxrpc: Fix call RCU cleanup using non-bh-safe locks
KMSAN: use-after-free in rxrpc_put_peer afs net	18				1	2419d	2419d	13/29	2378d	91fcfbe8852e rxrpc: Fix call crypto state cleanup
KASAN: use-after-free Read in rxrpc_release_call afs net	19	syz	done		13	2419d	2474d	13/29	2401d	91fcfbe8852e rxrpc: Fix call crypto state cleanup
KASAN: use-after-free Read in rxrpc_send_keepalive afs net	19	C	error		694	2416d	2488d	13/29	2401d	c48fc11b69e9 rxrpc: Fix call ref leak
KASAN: use-after-free Read in rxrpc_put_peer afs net	19	C	error		38	2417d	2469d	13/29	2401d	55f6c98e3674 rxrpc: Fix trace-after-put looking at the put peer record 9ebeddef58c4 rxrpc: rxrpc_peer needs to hold a ref on the rxrpc_local record
general protection fault in rxrpc_error_report net afs	2	C	done		6	2417d	2429d	13/29	2401d	f0308fb07080 rxrpc: Fix possible NULL pointer access in ICMP handling
KASAN: use-after-free Read in rxrpc_queue_local afs net	19	C	done		1	2485d	2485d	12/29	2460d	06d9532fa6b3 rxrpc: Fix read-after-free in rxrpc_queue_local()
kernel BUG at net/rxrpc/local_object.c:LINE! net afs	-1	C	done		11167	2464d	2531d	12/29	2460d	730c5fd42c1e rxrpc: Fix local endpoint refcounting
BUG: corrupted list in rxrpc_local_processor net afs	8	C	done		1679	2480d	2488d	12/29	2460d	b00df840fb40 rxrpc: Fix local endpoint replacement
general protection fault in rxrpc_connect_call afs net	2	C	done		15	2541d	2686d	12/29	2492d	e835ada07091 rxrpc: Fix send on a connected, but unbound socket
WARNING: bad unlock balance in rxrpc_recvmsg afs net	4	C			9	2670d	2674d	11/29	2644d	6dce3c20ac42 rxrpc: bad unlock balance in rxrpc_recvmsg