syzbot

 sign-in | mailing list | source | docs
🐞 Open [1279]
≡ Subsystems
🐞 Fixed [5719]
🐞 Invalid [13946]
⬇ Missing Backports [97]
Kernel Health Bugs/Month Bug Lifetimes Fuzzing Crashes
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

Applied filters: Label=subsystems:block (drop)
Title Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
INFO: rcu detected stall in aoecmd_cfg (2) usb block C done 7 45d 157d 26/28 never 9313d139aa25 usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
KASAN: slab-use-after-free Read in percpu_ref_put block 18 11d 81d 28/28 9d23h 0b50b7313ef2 bcachefs: Fix refcounting in discard path
WARNING in blk_rq_map_user_iov block C done 3546 258d 401d 25/28 197d 13f3956eb568 block: Fix WARNING in _copy_from_iter
WARNING in copy_page_from_iter block C done 1987 267d 578d 25/28 197d 13f3956eb568 block: Fix WARNING in _copy_from_iter
general protection fault in bio_first_folio block C done 683 268d 302d 25/28 256d 7bed6f3d08b7 block: Fix iterating over an empty bio with bio_for_each_folio_all
BUG: unable to handle kernel NULL pointer dereference in __bio_release_pages block C 6 273d 271d 25/28 256d 7bed6f3d08b7 block: Fix iterating over an empty bio with bio_for_each_folio_all
WARNING in blk_mq_start_request block C done 29 324d 341d 25/28 266d 53f2bca26092 block/null_blk: Fix double blk_mq_start_request() warning
kernel BUG in __block_write_begin_int block C done 14 386d 405d 25/28 297d 4aa8cdd5e523 iomap: handle error conditions more gracefully in iomap_to_bh
INFO: task hung in clean_bdev_aliases block C done 201 378d 404d 25/28 297d 381c043233e6 iomap: add a workaround for racy i_size updates on block devices
KASAN: slab-out-of-bounds Read in bio_split_rw block C done 1 471d 467d 23/28 367d 0b7ec177b589 crypto: algif_hash - Fix race between MORE and non-MORE sends
WARNING in blkdev_put (3) reiserfs block C done 377 480d 484d 23/28 380d c576c4bf9ecf reiserfs: fix blkdev_put() warning from release_journal_dev()
WARNING in blkdev_get_by_dev block C done 45 479d 484d 23/28 380d 985958b8584c block: fix wrong mode for blkdev_get_by_dev() from disk_scan_partitions()
KASAN: user-memory-access Write in zram_slot_lock block reiserfs C done 3 510d 510d 22/28 469d 3eb96946f0be block: make bio_check_eod work for zero sized devices
WARNING in blkdev_put (2) block C unreliable 250 568d 597d 22/28 492d 428913bce1e6 block: fix wrong mode for blkdev_put() from disk_scan_partitions()
WARNING in _copy_from_iter block tipc C error 32057 580d 674d 22/28 492d 11a4d6f67cf5 tipc: fix kernel warning when sending SYN message
KASAN: use-after-free Read in delete_partition (2) block C done 1 1293d 1292d 22/28 549d b5cfbd35ecca block: check disk exist before trying to add partition
general protection fault in blk_mq_update_nr_hw_queues block C error 16 694d 706d 22/28 597d 90b0296ece4b block: fix crash in 'blk_mq_elv_switch_none'
KASAN: use-after-free Read in bio_poll block C done 6 887d 887d 22/28 597d 9650b453a3d4 block: ignore RWF_HIPRI hint for sync dio
BUG: sleeping function called from invalid context in blk_mq_release block 1 926d 926d 22/28 597d d578c770c852 block: avoid calling blkg_free() in atomic context
KASAN: use-after-free Read in setup_rw_floppy block 3 967d 984d 22/28 597d 233087ca0636 floppy: disable FDRAWCMD by default
memory leak in blk_iolatency_init (2) block cgroups C 131 738d 945d 22/28 597d daaca3522a8e block: release rq qos structures for queue without disk
upstream boot error: general protection fault in enqueue_entity block 1 789d 789d 22/28 597d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
general protection fault in submit_bio_checks block btrfs C done 1258 963d 986d 22/28 597d 78e3437450be block: call bio_associate_blkg from bio_reset
possible deadlock in blkdev_put (3) block C 870 873d 945d 22/28 597d d292dc80686a loop: don't destroy lo->workqueue in __loop_clr_fd
upstream boot error: BUG: unable to handle kernel paging request in blk_mq_get_tag block 1 791d 791d 22/28 597d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
WARNING in blk_mq_release block C error 11 777d 796d 22/28 597d aa0c680c3aa9 block: Do not call blk_put_queue() if gendisk allocation fails
KASAN: use-after-free Read in blk_mq_sched_free_rqs block C error 8 845d 894d 22/28 597d 50e34d78815e block: disable the elevator int del_gendisk
upstream boot error: general protection fault in blk_mq_alloc_and_init_hctx block 1 791d 791d 22/28 597d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
memory leak in blk_mq_init_tags block usb C 2 924d 930d 22/28 597d 03252259e18e scsi: sd: Clean up gendisk if device_add_disk() failed
general protection fault in __loop_clr_fd block C done 5702 1653d 1681d 20/28 878d 87579e9b7d8d loop: use worker per cgroup instead of kworker
memory leak in blk_iolatency_init block cgroups C 833 950d 1125d 20/28 949d 6f5ddde41069 blkcg: fix memory leak in blk_iolatency_init
possible deadlock in __loop_clr_fd (3) block 2972 1004d 1067d 20/28 949d 6050fa4c84cc loop: don't hold lo_mutex during __loop_clr_fd()
KASAN: use-after-free Read in srcu_invoke_callbacks block syz error 4 994d 1006d 20/28 949d 850fd2abbe02 block: cleanup q->srcu
KCSAN: data-race in sbitmap_queue_clear / sbitmap_queue_clear (3) block 5 1077d 1084d 20/28 949d 9f8b93a7df4d sbitmap: silence data race warning
general protection fault in set_task_ioprio block C done 19 1026d 1027d 20/28 949d a957b61254a7 block: fix error in handling dead task for ioprio setting
linux-next boot error: general protection fault in blk_mq_free_request block 6 1089d 1090d 20/28 949d e0d78afeb8d1 block: fix too broad elevator check in blk_mq_free_request()
KASAN: use-after-free Read in disk_release_events block fuse syz inconclusive 1 1038d 1034d 20/28 949d 99d8690aae4b block: fix error unwinding in device_add_disk
WARNING in nbd_dev_add (2) block 4 1066d 1064d 20/28 949d 278167fd2f8f block: add __must_check for *add_disk*() callers
KASAN: use-after-free Read in blk_mq_sched_tags_teardown block usb C done 6 1086d 1084d 20/28 949d 8bdf7b3fe1f4 blk-mq-sched: Don't reference queue tagset in blk_mq_sched_tags_teardown()
BUG: unable to handle kernel paging request in __blk_mq_alloc_requests io-uring block C unreliable 107 1068d 1077d 20/28 949d a22c00be90de block: assign correct tag before doing prefetch of request
possible deadlock in blkdev_put (2) block C done 502 949d 1051d 20/28 949d 322c4293ecc5 loop: make autoclear operation asynchronous
INFO: task can't die in blk_mq_freeze_queue_wait block 221 1055d 1063d 20/28 949d 95febeb61bf8 block: fix missing queue put in error path
INFO: task can't die in __bio_queue_enter block 185 1055d 1063d 20/28 949d 10f7335e3627 blk-mq: don't grab ->q_usage_counter in blk_mq_sched_bio_merge
KASAN: use-after-free Read in bdev_free_inode block syz error 7 1100d 1120d 20/28 949d 06cc978d3ff2 block: genhd: fix double kfree() in __alloc_disk_node()
WARNING in blk_rq_append_bio block usb C done 6 1279d 1245d 20/28 1068d cbb749cf377a block: remove an incorrect check from blk_rq_append_bio
possible deadlock in __loop_clr_fd (2) block ext4 C unreliable 6977 1068d 1193d 20/28 1068d 1c500ad70638 loop: reduce the loop_ctl_mutex scope
KASAN: use-after-free Read in disk_part_iter_next (2) block C done 327 1291d 1309d 20/28 1068d e82fc7855749 block: don't create too many partitions
INFO: task hung in del_gendisk block C done 5 1157d 1189d 20/28 1068d 68c9417b193d nbd: do del_gendisk() asynchronously for NBD_DESTROY_ON_DISCONNECT
KASAN: use-after-free Read in blk_mq_exit_sched block usb C done 9 1207d 1222d 20/28 1068d f0c1c4d2864e blk-mq: fix use-after-free in blk_mq_exit_sched
WARNING in nbd_dev_add block C inconclusive 131 1069d 1329d 20/28 1068d b1a811633f73 block: nbd: add sanity check for first_minor
general protection fault in blk_mq_run_hw_queues block C unreliable 305 1149d 1196d 20/28 1068d 16ad3db3b24c nbd: fix order of cleaning up the queue and freeing the tagset
WARNING: suspicious RCU usage in kernfs_find_and_get_ns block 1 1216d 1216d 20/28 1068d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
general protection fault in do_blk_trace_setup block trace C done 25 1144d 1145d 20/28 1068d 1d1cf156dc17 sg: pass the device name to blk_trace_setup
possible deadlock in bd_register_pending_holders block 3 1074d 1128d 20/28 1068d dfbb3409b27f block: genhd: don't call blkdev_show() with major_names_lock held
general protection fault in wb_timer_fn block C done 60 1146d 1156d 20/28 1068d d152c682f03c block: add an explicit ->disk backpointer to the request_queue
KASAN: use-after-free Read in disk_part_iter_next block C unreliable 243 1313d 1401d 19/28 1313d aebf5db91705 block: fix use-after-free in disk_part_iter_next
KMSAN: kernel-infoleak in scsi_cmd_ioctl block 131 1431d 1504d 15/28 1427d 6d53a9fe5a19 block/scsi-ioctl: Fix kernel-infoleak in scsi_put_cdrom_generic_arg()
KASAN: use-after-free Read in delete_partition block C done done 3 1503d 1499d 15/28 1427d 08fc1ab6d748 block: fix locking in bdev_del_partition
KASAN: use-after-free Read in bdev_del_partition block C done 1 1503d 1503d 15/28 1479d 08fc1ab6d748 block: fix locking in bdev_del_partition
INFO: task hung in blkdev_issue_flush (2) block C done error 3 1771d 1929d 15/28 1565d 2b5c8f0063e4 nbd: replace kill_bdev() with __invalidate_device() again
memory leak in bio_clone_fast block C 1 1888d 1887d 15/28 1565d 7b6620d7db56 block: remove REQ_NOWAIT_INLINE
WARNING: refcount bug in blk_mq_free_request (2) block C done error 5 1895d 1895d 15/28 1565d de6346ecbc8f nbd: protect cmd->status with cmd->lock
KASAN: null-ptr-deref Write in blk_mq_map_swqueue block C done 3 1661d 1661d 15/28 1570d d0930bb8f46b blk-mq: Fix a recently introduced regression in blk_mq_realloc_hw_ctxs()
WARNING in __blk_mq_delay_run_hw_queue block C done error 6 1730d 1835d 15/28 1617d 6e66b4939241 blk-mq: Keep set->nr_hw_queues and set->map[].nr_queues in sync
KASAN: use-after-free Read in percpu_ref_switch_to_atomic_rcu block 5 1687d 1710d 15/28 1641d c1e2148f8ecb io_uring: free fixed_file_data after RCU grace period
KCSAN: data-race in process_srcu / synchronize_srcu block 112 1710d 1805d 15/28 1698d 844a378de337 srcu: Apply *_ONCE() to ->srcu_last_gp_end
BUG: workqueue lockup (4) block C 47 1791d 2198d 15/28 1766d 7e7c005b4b1f rtc: disable uie before setting time and enable after
WARNING in blk_mq_sched_free_requests (2) block 7 1842d 1846d 13/28 1824d 284b94be1925 blk-mq: move lockdep_assert_held() into elevator_exit
WARNING in blk_mq_sched_free_requests block C done 4 1949d 1951d 12/28 1921d c326f846ebc2 blk-mq: remove WARN_ON(!q->elevator) from blk_mq_sched_free_requests
KASAN: use-after-free Read in blk_mq_free_rqs block C error 3481 1951d 1955d 12/28 1928d c3e2219216c9 block: free sched's request pool in blk_cleanup_queue
general protection fault in loop_validate_file (2) block 3 2033d 2036d 11/28 2022d f7c8a4120eed loop: access lo_backing_file only when the loop device is Lo_bound
WARNING in __flush_work block C 402 2077d 2083d 11/28 2048d 2e3c18d0ada1 block: pass no-op callback to INIT_WORK().
INFO: task hung in lo_ioctl block 47 2382d 2499d 11/28 2048d 04906b2f542c blockdev: Fix livelocks on loop device
general protection fault in relay_open_buf block trace C 287 2081d 2082d 11/28 2048d 2c1cf00eeacb relay: check return of create_buf_file() properly
general protection fault in debugfs_create_files block C 111 2081d 2082d 11/28 2048d 36991ca68db9 blk-mq: protect debugfs_create_files() from failures
general protection fault in lo_ioctl (2) block syz 2 2356d 2356d 11/28 2097d 310ca162d779 block/loop: Use global lock for ioctl() operation.
possible deadlock in blkdev_reread_part block C 5736 2116d 2537d 11/28 2097d 0da03cab87e6 loop: Fix deadlock when calling blkdev_reread_part() 85b0a54a82e4 loop: Move loop_reread_partitions() out of loop_ctl_mutex
WARNING: locking bug in loop_control_ioctl block C 4018 2137d 2164d 11/28 2097d 628bd8594709 loop: Fix double mutex_unlock(&loop_ctl_mutex) in loop_control_ioctl()
INFO: task hung in loop_control_ioctl block 4 2193d 2387d 11/28 2097d 1dded9acf6dc loop: Avoid circular locking dependency between loop_ctl_mutex and bd_mutex
INFO: task hung in lo_open (2) block 10 2159d 2387d 11/28 2097d 1dded9acf6dc loop: Avoid circular locking dependency between loop_ctl_mutex and bd_mutex
INFO: task hung in lo_release block 1 2279d 2279d 11/28 2097d 1dded9acf6dc loop: Avoid circular locking dependency between loop_ctl_mutex and bd_mutex
BUG: unable to handle kernel NULL pointer dereference in blk_mq_map_swqueue block C 8 2188d 2208d 11/28 2161d e01ad46d53b5 blk-mq: fallback to previous nr_hw_queues when updating fails
upstream boot error (2) block 1 2175d 2174d 11/28 2161d 153fcd5f6d93 block: brd: associate with queue until adding disk
INFO: task hung in blk_queue_enter block C 1595 2287d 2360d 8/28 2287d cd4a4ae4683d block: don't use blocking queue entered for recursive bio submits
INFO: rcu detected stall in blkdev_ioctl block C 249 2318d 2493d 8/28 2287d d2ac838e4cd7 loop: add recursion validation to LOOP_CHANGE_FD
INFO: task hung in blk_freeze_queue block C 188 2289d 2440d 8/28 2287d d2ac838e4cd7 loop: add recursion validation to LOOP_CHANGE_FD
WARNING: lock held when returning to user space! block C 40 2367d 2382d 5/28 2349d bdac616db9bb loop: fix LOOP_GET_STATUS lock imbalance
KASAN: use-after-free Read in disk_unblock_events block C 65 2433d 2539d 5/28 2379d 897366537fb6 genhd: Fix use after free in __blkdev_get()
WARNING in tracepoint_probe_unregister block trace C 115 2407d 2534d 4/28 2407d a6da0024ffc1 blktrace: fix unlocked registration of tracepoints
WARNING in tracepoint_probe_register_prio block trace C 830 2407d 2543d 4/28 2407d a6da0024ffc1 blktrace: fix unlocked registration of tracepoints
WARNING: kmalloc bug in relay_open_buf block trace C 10 2425d 2440d 4/28 2420d 88913bd8ea2a kernel/relay.c: limit kmalloc size to KMALLOC_MAX_SIZE
KASAN: double-free or invalid-free in relay_open block trace C 106 2441d 2539d 4/28 2434d a1be1f3931bf kernel/relay.c: revert "kernel/relay.c: fix potential memory leak"
possible deadlock in blk_trace_remove block trace 5 2512d 2520d 3/28 2501d 2967acbb257a blktrace: fix trace mutex deadlock
WARNING in kmalloc_slab (2) block trace C 2478 2528d 2546d 3/28 2528d 864e2a1f8aac ipv6: flowlabel: do not leave opt->tot_len with garbage