|
UBSAN: shift-out-of-bounds in null_process_zoned_cmd
prio:low
block
|
-1 |
C |
|
|
27 |
16d |
42d
|
26/29 |
never |
95491fb05105
null_blk: fix UBSAN shift-out-of-bounds when zone_size is 0 or overflows
|
|
KMSAN: kernel-infoleak in filemap_read
prio:high
block
|
18 |
syz, C |
|
|
9090 |
94d |
978d
|
26/29 |
never |
2fa56613b25d
ntfs3: fix info-leak in ntfs_rename()
|
|
memory leak in io_submit_sqes (6)
prio:high
io-uring
block
|
3 |
syz, C |
|
|
2 |
40d |
38d
|
26/29 |
never |
360941242f09
io_uring/uring_cmd: don't skip completion for a synchronous multishot cmd
|
|
WARNING in blk_validate_limits
prio:low
f2fs
block
|
-1 |
syz, C |
|
|
45 |
4h16m |
40d
|
22/29 |
never |
e52349a5ea6a
loop, zloop: fix dma_alignment for large or unreported limits
|
|
general protection fault in bio_alloc_bioset
block
|
2 |
syz |
error |
|
5 |
179d |
181d
|
29/29 |
120d |
67807fbaf127
block: fix bio_alloc_bioset slowpath GFP handling
|
|
WARNING in wbt_init_enable_default
block
|
-1 |
syz, C |
error |
|
491 |
156d |
267d
|
29/29 |
120d |
e9b004ff8306
blk-wbt: remove WARN_ON_ONCE from wbt_init_enable_default()
|
|
possible deadlock in blkdev_read_iter
block
|
4 |
syz, C |
|
|
11 |
228d |
237d
|
29/29 |
134d |
b5cbacd7f86f
procfs: avoid fetching build ID while holding VMA lock
|
|
kernel BUG in bio_chain
gfs2
block
|
-1 |
syz, C |
error |
|
5696 |
241d |
285d
|
29/29 |
134d |
4a94f052e098
gfs2: Initialize bio->bi_opf early
|
|
general protection fault in bio_seg_gap
block
|
2 |
syz, C |
done |
|
231 |
310d |
308d
|
29/29 |
226d |
fd9ecd005252
block: fix merging data-less bios
|
|
WARNING in __blk_add_trace
trace
block
|
-1 |
syz, C |
done |
|
94 |
324d |
328d
|
29/29 |
254d |
4a0940bdcac2
blktrace: use debug print to report dropped events
|
|
memory leak in __blkdev_issue_zero_pages
block
udf
|
3 |
syz |
|
|
1 |
291d |
287d
|
29/29 |
254d |
f7e3f852a42d
block: fix memory leak in __blkdev_issue_zero_pages
|
|
general protection fault in blk_mq_free_tags_callback
block
|
2 |
syz, C |
|
|
3 |
360d |
360d
|
29/29 |
323d |
670bfe683850
blk-mq: fix null-ptr-deref in blk_mq_free_tags() from error path
|
|
KASAN: slab-use-after-free Read in disk_add_events
fuse
block
|
19 |
syz, C |
|
|
4 |
416d |
415d
|
29/29 |
378d |
1df1fc845d22
md: fix create on open mddev lifetime regression
|
|
possible deadlock in blk_mq_freeze_queue_nomemsave
block
|
4 |
syz, C |
done |
|
7798 |
460d |
536d
|
29/29 |
407d |
4bb08cf974c5
loop: move lo_set_size() out of queue freeze
|
|
possible deadlock in loop_set_status
block
|
4 |
syz, C |
done |
|
20143 |
455d |
664d
|
29/29 |
407d |
4bb08cf974c5
loop: move lo_set_size() out of queue freeze
|
|
BUG: unable to handle kernel NULL pointer dereference in lo_rw_aio
block
|
10 |
syz, C |
|
|
10 |
503d |
512d
|
29/29 |
437d |
f5c84eff634b
loop: Add sanity check for read/write_iter
|
|
possible deadlock in pcpu_alloc_noprof
block
|
4 |
syz, C |
|
|
257 |
465d |
718d
|
28/29 |
464d |
677bdb7346b6
bcachefs: Fix deadlock
|
|
possible deadlock in elv_iosched_store
block
|
4 |
syz, C |
|
|
56 |
479d |
539d
|
28/29 |
464d |
01b91bf14f6d
block: don't grab elevator lock during queue initialization
|
|
INFO: rcu detected stall in aoecmd_cfg (2)
usb
block
|
1 |
syz, C |
done |
|
7 |
750d |
862d
|
28/29 |
696d |
9313d139aa25
usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
|
|
WARNING in blk_rq_map_user_iov
block
|
-1 |
syz, C |
done |
|
3546 |
964d |
1106d
|
25/29 |
902d |
13f3956eb568
block: Fix WARNING in _copy_from_iter
|
|
WARNING in copy_page_from_iter
block
|
-1 |
syz, C |
done |
|
1987 |
972d |
1283d
|
25/29 |
902d |
13f3956eb568
block: Fix WARNING in _copy_from_iter
|
|
general protection fault in bio_first_folio
block
|
2 |
syz, C |
done |
|
683 |
973d |
1007d
|
25/29 |
961d |
7bed6f3d08b7
block: Fix iterating over an empty bio with bio_for_each_folio_all
|
|
BUG: unable to handle kernel NULL pointer dereference in __bio_release_pages
block
|
10 |
syz, C |
|
|
6 |
978d |
976d
|
25/29 |
961d |
7bed6f3d08b7
block: Fix iterating over an empty bio with bio_for_each_folio_all
|
|
WARNING in blk_mq_start_request
block
|
-1 |
syz, C |
done |
|
29 |
1029d |
1046d
|
25/29 |
971d |
53f2bca26092
block/null_blk: Fix double blk_mq_start_request() warning
|
|
kernel BUG in __block_write_begin_int
block
|
-1 |
syz, C |
done |
|
14 |
1091d |
1110d
|
25/29 |
1002d |
4aa8cdd5e523
iomap: handle error conditions more gracefully in iomap_to_bh
|
|
INFO: task hung in clean_bdev_aliases
block
|
1 |
syz, C |
done |
|
201 |
1083d |
1109d
|
25/29 |
1002d |
381c043233e6
iomap: add a workaround for racy i_size updates on block devices
|
|
KASAN: slab-out-of-bounds Read in bio_split_rw
block
|
17 |
syz, C |
done |
|
1 |
1176d |
1172d
|
23/29 |
1072d |
0b7ec177b589
crypto: algif_hash - Fix race between MORE and non-MORE sends
|
|
WARNING in blkdev_put (3)
block
|
-1 |
syz, C |
done |
|
377 |
1185d |
1189d
|
23/29 |
1085d |
c576c4bf9ecf
reiserfs: fix blkdev_put() warning from release_journal_dev()
|
|
WARNING in blkdev_get_by_dev
block
|
-1 |
syz, C |
done |
|
45 |
1184d |
1189d
|
23/29 |
1085d |
985958b8584c
block: fix wrong mode for blkdev_get_by_dev() from disk_scan_partitions()
|
|
KASAN: user-memory-access Write in zram_slot_lock
block
|
21 |
syz, C |
done |
|
3 |
1215d |
1215d
|
22/29 |
1174d |
3eb96946f0be
block: make bio_check_eod work for zero sized devices
|
|
WARNING in blkdev_put (2)
block
|
-1 |
syz, C |
unreliable |
|
250 |
1273d |
1302d
|
22/29 |
1198d |
428913bce1e6
block: fix wrong mode for blkdev_put() from disk_scan_partitions()
|
|
WARNING in _copy_from_iter
block
tipc
|
-1 |
syz, C |
error |
|
32057 |
1285d |
1379d
|
22/29 |
1198d |
11a4d6f67cf5
tipc: fix kernel warning when sending SYN message
|
|
KASAN: use-after-free Read in delete_partition (2)
block
|
19 |
syz, C |
done |
|
1 |
1998d |
1997d
|
22/29 |
1254d |
b5cfbd35ecca
block: check disk exist before trying to add partition
|
|
general protection fault in blk_mq_update_nr_hw_queues
block
|
2 |
syz, C |
error |
|
16 |
1399d |
1411d
|
22/29 |
1302d |
90b0296ece4b
block: fix crash in 'blk_mq_elv_switch_none'
|
|
KASAN: use-after-free Read in bio_poll
block
|
19 |
syz, C |
done |
|
6 |
1592d |
1592d
|
22/29 |
1302d |
9650b453a3d4
block: ignore RWF_HIPRI hint for sync dio
|
|
memory leak in blk_iolatency_init (2)
block
cgroups
|
3 |
syz, C |
|
|
131 |
1443d |
1650d
|
22/29 |
1302d |
daaca3522a8e
block: release rq qos structures for queue without disk
|
|
general protection fault in submit_bio_checks
block
btrfs
|
2 |
syz, C |
done |
|
1258 |
1668d |
1691d
|
22/29 |
1302d |
78e3437450be
block: call bio_associate_blkg from bio_reset
|
|
possible deadlock in blkdev_put (3)
block
exfat
|
4 |
syz, C |
|
|
870 |
1578d |
1650d
|
22/29 |
1302d |
d292dc80686a
loop: don't destroy lo->workqueue in __loop_clr_fd
|
|
WARNING in blk_mq_release
block
|
-1 |
syz, C |
error |
|
11 |
1482d |
1501d
|
22/29 |
1302d |
aa0c680c3aa9
block: Do not call blk_put_queue() if gendisk allocation fails
|
|
KASAN: use-after-free Read in blk_mq_sched_free_rqs
block
|
19 |
syz, C |
error |
|
8 |
1550d |
1599d
|
22/29 |
1302d |
50e34d78815e
block: disable the elevator int del_gendisk
|
|
memory leak in blk_mq_init_tags
block
usb
|
3 |
syz, C |
|
|
2 |
1629d |
1635d
|
22/29 |
1302d |
03252259e18e
scsi: sd: Clean up gendisk if device_add_disk() failed
|
|
general protection fault in __loop_clr_fd
block
|
2 |
syz, C |
done |
|
5702 |
2358d |
2386d
|
20/29 |
1583d |
87579e9b7d8d
loop: use worker per cgroup instead of kworker
|
|
memory leak in blk_iolatency_init
block
cgroups
|
3 |
syz, C |
|
|
833 |
1655d |
1830d
|
20/29 |
1654d |
6f5ddde41069
blkcg: fix memory leak in blk_iolatency_init
|
|
KASAN: use-after-free Read in srcu_invoke_callbacks
block
|
19 |
syz |
error |
|
4 |
1699d |
1711d
|
20/29 |
1654d |
850fd2abbe02
block: cleanup q->srcu
|
|
general protection fault in set_task_ioprio
block
|
2 |
syz, C |
done |
|
19 |
1731d |
1732d
|
20/29 |
1654d |
a957b61254a7
block: fix error in handling dead task for ioprio setting
|
|
KASAN: use-after-free Read in disk_release_events
block
fuse
exfat
|
19 |
syz |
inconclusive |
|
1 |
1743d |
1739d
|
20/29 |
1654d |
99d8690aae4b
block: fix error unwinding in device_add_disk
|
|
KASAN: use-after-free Read in blk_mq_sched_tags_teardown
block
usb
|
19 |
syz, C |
done |
|
6 |
1791d |
1789d
|
20/29 |
1654d |
8bdf7b3fe1f4
blk-mq-sched: Don't reference queue tagset in blk_mq_sched_tags_teardown()
|
|
BUG: unable to handle kernel paging request in __blk_mq_alloc_requests
io-uring
block
|
19 |
syz, C |
unreliable |
|
107 |
1773d |
1782d
|
20/29 |
1654d |
a22c00be90de
block: assign correct tag before doing prefetch of request
|
|
possible deadlock in blkdev_put (2)
exfat
block
|
4 |
syz, C |
done |
|
502 |
1654d |
1756d
|
20/29 |
1654d |
322c4293ecc5
loop: make autoclear operation asynchronous
|
|
KASAN: use-after-free Read in bdev_free_inode
block
|
19 |
syz |
error |
|
7 |
1805d |
1825d
|
20/29 |
1654d |
06cc978d3ff2
block: genhd: fix double kfree() in __alloc_disk_node()
|
|
WARNING in blk_rq_append_bio
block
usb
|
-1 |
syz, C |
done |
|
6 |
1984d |
1950d
|
20/29 |
1773d |
cbb749cf377a
block: remove an incorrect check from blk_rq_append_bio
|
|
possible deadlock in __loop_clr_fd (2)
block
ext4
|
4 |
syz, C |
unreliable |
|
6977 |
1773d |
1898d
|
20/29 |
1773d |
1c500ad70638
loop: reduce the loop_ctl_mutex scope
|
|
KASAN: use-after-free Read in disk_part_iter_next (2)
block
|
19 |
syz, C |
done |
|
327 |
1996d |
2014d
|
20/29 |
1773d |
e82fc7855749
block: don't create too many partitions
|
|
INFO: task hung in del_gendisk
block
|
1 |
syz, C |
done |
|
5 |
1862d |
1894d
|
20/29 |
1773d |
68c9417b193d
nbd: do del_gendisk() asynchronously for NBD_DESTROY_ON_DISCONNECT
|
|
KASAN: use-after-free Read in blk_mq_exit_sched
usb
block
|
19 |
syz, C |
done |
|
9 |
1912d |
1927d
|
20/29 |
1773d |
f0c1c4d2864e
blk-mq: fix use-after-free in blk_mq_exit_sched
|
|
WARNING in nbd_dev_add
block
|
-1 |
syz, C |
inconclusive |
|
131 |
1774d |
2034d
|
20/29 |
1773d |
b1a811633f73
block: nbd: add sanity check for first_minor
|
|
general protection fault in blk_mq_run_hw_queues
block
|
11 |
syz, C |
unreliable |
|
305 |
1854d |
1901d
|
20/29 |
1773d |
16ad3db3b24c
nbd: fix order of cleaning up the queue and freeing the tagset
|
|
general protection fault in do_blk_trace_setup
block
trace
|
2 |
syz, C |
done |
|
25 |
1849d |
1850d
|
20/29 |
1773d |
1d1cf156dc17
sg: pass the device name to blk_trace_setup
|
|
general protection fault in wb_timer_fn
block
exfat
|
2 |
syz, C |
done |
|
60 |
1851d |
1861d
|
20/29 |
1773d |
d152c682f03c
block: add an explicit ->disk backpointer to the request_queue
|
|
KASAN: use-after-free Read in disk_part_iter_next
block
|
19 |
syz, C |
unreliable |
|
243 |
2018d |
2106d
|
19/29 |
2018d |
aebf5db91705
block: fix use-after-free in disk_part_iter_next
|
|
KASAN: use-after-free Read in delete_partition
block
|
19 |
syz, C |
done |
done |
3 |
2208d |
2204d
|
15/29 |
2132d |
08fc1ab6d748
block: fix locking in bdev_del_partition
|
|
KASAN: use-after-free Read in bdev_del_partition
block
|
19 |
syz, C |
done |
|
1 |
2208d |
2208d
|
15/29 |
2184d |
08fc1ab6d748
block: fix locking in bdev_del_partition
|
|
INFO: task hung in blkdev_issue_flush (2)
block
|
1 |
syz, C |
done |
error |
3 |
2476d |
2634d
|
15/29 |
2270d |
2b5c8f0063e4
nbd: replace kill_bdev() with __invalidate_device() again
|
|
memory leak in bio_clone_fast
block
|
3 |
syz, C |
|
|
1 |
2593d |
2592d
|
15/29 |
2270d |
7b6620d7db56
block: remove REQ_NOWAIT_INLINE
|
|
WARNING: refcount bug in blk_mq_free_request (2)
block
|
13 |
syz, C |
done |
error |
5 |
2600d |
2600d
|
15/29 |
2270d |
de6346ecbc8f
nbd: protect cmd->status with cmd->lock
|
|
KASAN: null-ptr-deref Write in blk_mq_map_swqueue
block
|
12 |
syz, C |
done |
|
3 |
2366d |
2366d
|
15/29 |
2275d |
d0930bb8f46b
blk-mq: Fix a recently introduced regression in blk_mq_realloc_hw_ctxs()
|
|
WARNING in __blk_mq_delay_run_hw_queue
block
|
-1 |
syz, C |
done |
error |
6 |
2435d |
2540d
|
15/29 |
2322d |
6e66b4939241
blk-mq: Keep set->nr_hw_queues and set->map[].nr_queues in sync
|
|
BUG: workqueue lockup (4)
block
|
-1 |
syz, C |
|
|
47 |
2496d |
2903d
|
15/29 |
2471d |
7e7c005b4b1f
rtc: disable uie before setting time and enable after
|
|
WARNING in blk_mq_sched_free_requests
block
|
-1 |
syz, C |
done |
|
4 |
2654d |
2656d
|
12/29 |
2626d |
c326f846ebc2
blk-mq: remove WARN_ON(!q->elevator) from blk_mq_sched_free_requests
|
|
KASAN: use-after-free Read in blk_mq_free_rqs
block
|
19 |
syz, C |
error |
|
3481 |
2656d |
2660d
|
12/29 |
2633d |
c3e2219216c9
block: free sched's request pool in blk_cleanup_queue
|
|
WARNING in __flush_work
block
|
-1 |
syz, C |
|
|
402 |
2782d |
2788d
|
11/29 |
2753d |
2e3c18d0ada1
block: pass no-op callback to INIT_WORK().
|
|
general protection fault in relay_open_buf
trace
block
|
2 |
syz, C |
|
|
287 |
2786d |
2787d
|
11/29 |
2753d |
2c1cf00eeacb
relay: check return of create_buf_file() properly
|
|
general protection fault in debugfs_create_files
block
|
2 |
syz, C |
|
|
111 |
2786d |
2787d
|
11/29 |
2753d |
36991ca68db9
blk-mq: protect debugfs_create_files() from failures
|
|
general protection fault in lo_ioctl (2)
block
|
2 |
syz |
|
|
2 |
3061d |
3061d
|
11/29 |
2802d |
310ca162d779
block/loop: Use global lock for ioctl() operation.
|
|
possible deadlock in blkdev_reread_part
block
|
4 |
syz, C |
|
|
5736 |
2821d |
3242d
|
11/29 |
2802d |
0da03cab87e6
loop: Fix deadlock when calling blkdev_reread_part()
85b0a54a82e4
loop: Move loop_reread_partitions() out of loop_ctl_mutex
|
|
WARNING: locking bug in loop_control_ioctl
block
|
4 |
syz, C |
|
|
4018 |
2842d |
2869d
|
11/29 |
2802d |
628bd8594709
loop: Fix double mutex_unlock(&loop_ctl_mutex) in loop_control_ioctl()
|
|
BUG: unable to handle kernel NULL pointer dereference in blk_mq_map_swqueue
block
|
10 |
syz, C |
|
|
8 |
2893d |
2913d
|
11/29 |
2866d |
e01ad46d53b5
blk-mq: fallback to previous nr_hw_queues when updating fails
|
|
INFO: task hung in blk_queue_enter
block
|
1 |
syz, C |
|
|
1595 |
2992d |
3065d
|
8/29 |
2992d |
cd4a4ae4683d
block: don't use blocking queue entered for recursive bio submits
|
|
INFO: rcu detected stall in blkdev_ioctl
block
|
1 |
syz, C |
|
|
249 |
3023d |
3198d
|
8/29 |
2992d |
d2ac838e4cd7
loop: add recursion validation to LOOP_CHANGE_FD
|
|
INFO: task hung in blk_freeze_queue
block
|
1 |
syz, C |
|
|
188 |
2994d |
3145d
|
8/29 |
2992d |
d2ac838e4cd7
loop: add recursion validation to LOOP_CHANGE_FD
|
|
WARNING: lock held when returning to user space!
block
|
4 |
syz, C |
|
|
40 |
3072d |
3087d
|
5/29 |
3054d |
bdac616db9bb
loop: fix LOOP_GET_STATUS lock imbalance
|
|
KASAN: use-after-free Read in disk_unblock_events
block
|
19 |
syz, C |
|
|
65 |
3138d |
3244d
|
5/29 |
3084d |
897366537fb6
genhd: Fix use after free in __blkdev_get()
|
|
WARNING in tracepoint_probe_unregister
block
trace
|
-1 |
syz, C |
|
|
115 |
3112d |
3239d
|
4/29 |
3112d |
a6da0024ffc1
blktrace: fix unlocked registration of tracepoints
|
|
WARNING in tracepoint_probe_register_prio
trace
block
|
-1 |
syz, C |
|
|
830 |
3112d |
3248d
|
4/29 |
3112d |
a6da0024ffc1
blktrace: fix unlocked registration of tracepoints
|
|
WARNING: kmalloc bug in relay_open_buf
trace
block
|
-1 |
syz, C |
|
|
10 |
3130d |
3145d
|
4/29 |
3125d |
88913bd8ea2a
kernel/relay.c: limit kmalloc size to KMALLOC_MAX_SIZE
|
|
KASAN: double-free or invalid-free in relay_open
trace
block
|
24 |
syz, C |
|
|
106 |
3146d |
3244d
|
4/29 |
3139d |
a1be1f3931bf
kernel/relay.c: revert "kernel/relay.c: fix potential memory leak"
|
|
WARNING in kmalloc_slab (2)
block
trace
|
-1 |
syz, C |
|
|
2478 |
3233d |
3251d
|
3/29 |
3233d |
864e2a1f8aac
ipv6: flowlabel: do not leave opt->tot_len with garbage
|