Applied filters: Label=subsystems:fs (drop)
Extra filters: [With Repro]

Title	Rank 🛈	Repro	Cause bisect	Fix bisect	Count	Last	Reported	Patched	Closed	Patch
KMSAN: uninit-value in bch2_check_subvols prio:high fs	7	syz, C			53	366d	455d	2/29	never	bcachefs: Fix missing compat code in check_subvol()
possible deadlock in configfs_rmdir prio:low fs	4	syz, C	error		2950	1h08m	63d	27/29	never	9dbf74f4022f usb: gadget: f_tcm: fix deadlock in usbg_make_tpg()
general protection fault in seq_read_iter (2) prio:low fs	19				4	42d	145d	24/29	never	net: add missing ref_tracker_dir_exit() to net_passive_dec()
possible deadlock in __balance_push_cpu_stop prio:high fs	4	syz, C			46	18d	32d	26/29	never	5541d8975841 mm/slab: disallow kfree_rcu_sheaf() on PREEMPT_RT again
BUG: sleeping function called from invalid context in procfs_procmap_ioctl fs	5	syz	done		101	452d	454d	2/29	never	mm/maps: move kmalloc() call location in do_procmap_query() out of RCU critical section
linux-next boot error: WARNING in kmem_cache_free fs	-1				45	2287d	2291d	1/29	never	mm, slab/slub: improve error reporting and overhead of cache_from_obj()-fix
KASAN: slab-use-after-free Read in sysfs_emit prio:high fs	19	syz, C			21	11d	54d	2/29	never	media: redrat3: fix UAF in probe error path leaving rc device registered
WARNING in bch2_prt_printf prio:high fs	-1	syz, C	done	error	103	368d	872d	2/29	never	bcachefs: journal_entry_btree_keys_to_text() is more careful
linux-next boot error: BUG: unable to handle kernel NULL pointer dereference in mempool_init_node ceph fs	-1				12	2147d	2149d	1/29	never	kasan-simplify-kasan_poison_kfree-temp-fix
INFO: task hung in io_sq_thread_stop fs io-uring	1	syz, C	done		211	2052d	2211d	1/29	never	io_uring: don't sleep schedule in SQPOLL thread if we need to park
KASAN: invalid-free in rcu_free_sheaf prio:high fs netfilter	24				438	24m	109d	26/29	never	979d5b8de8ed ieee802154: hwsim: serialize pib updates to fix double-free
KASAN: slab-use-after-free Read in lookup_noperm_common prio:high usb fs	19	syz, C			11	35d	62d	27/29	never	b15b548d52b4 i2c: core: fix debugfs UAF on adapter removal
WARNING in do_new_mount (6) prio:normal fs	-1				83	4d11h	24d	19/29	never	1abd643f3783 fs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbot's "WARNING in do_new_mount" saga
KASAN: slab-use-after-free Read in proc_invalidate_siblings_dcache (2) prio:high fs	19				4	111d	251d	26/29	never	cdd812d0683d exit: hold a reference to thread_pid across proc_flush_pid
kernel BUG in free_bprm fs mm	-1	syz, C	done		445	693d	693d	1/29	never	exec: NULL out bprm->argv0 when it is an ERR_PTR
WARNING in eventfs_create_events_dir prio:low trace fs	-1	syz, C	error		9	24d	36d	27/29	never	1704aaaf5d22 eventfs: Initialize ei->children and ei->list in init_ei()
KMSAN: uninit-value in __d_lookup_rcu prio:high fs	7				2	98d	136d	19/29	never	76d8e697242e dcache: unpoison the inline name buffer in __d_alloc()
KASAN: slab-use-after-free Write in config_item_get prio:normal fs	22	syz, C	error		8	42d	62d	24/29	never	f06c2d26d199 configfs: unhash the dentry before dropping the item in rmdir
general protection fault in bch2_prt_vprintf fs	2	syz, C	error	inconclusive	4	632d	669d	2/29	never	bcachefs: journal_entry_btree_keys_to_text() is more careful
KASAN: use-after-free Read in check_extent_overbig prio:high fs	19	syz, C	done	done	18	381d	663d	2/29	never	bcachefs: fix check_extent_overbig() call
kernel BUG in bch2_btree_path_peek_slot prio:low fs	-1	syz, C	error	error	1546	491d	669d	2/29	never	bcachefs: fix assert in bch2_btree_path_traverse_cached()
kernel BUG in do_bch2_trans_commit_to_journal_replay prio:normal fs	-1	syz			22	433d	437d	2/29	never	bcachefs: do_bch2_trans_commit_to_journal_replay handles accounting
WARNING in bch2_verify_accounting_clean prio:high fs	-1				29	349d	598d	2/29	never	bcachefs: do_bch2_trans_commit_to_journal_replay handles accounting
kernel BUG in bch2_printbuf_exit prio:high fs	-1	syz, C	error		29	436d	439d	2/29	never	bcachefs: convert str_hash.c to CLASS
kernel BUG in bch2_btree_repair_topology_recurse prio:high fs	-1	syz, C	done		7	365d	425d	2/29	never	bcachefs: btree_check_root_boundaries()
INFO: task hung in __bch2_fs_stop prio:high fs	1	syz, C	done		1589	361d	836d	2/29	never	bcachefs: Increase BCH_MIN_NR_NBUCKETS
INFO: task hung in __closure_sync prio:high fs	1	syz, C	done		8591	352d	879d	2/29	never	bcachefs: Increase BCH_MIN_NR_NBUCKETS
WARNING in bchfs_truncate fs	-1	syz, C	done		366	368d	879d	2/29	never	bcachefs: Increase BCH_MIN_NR_NBUCKETS
UBSAN: array-index-out-of-bounds in bch2_accounting_validate prio:high fs	15	syz, C	done		23	354d	422d	2/29	never	bcachefs: Ignore accounting key type larger than BCH_DISK_ACCOUNTING_TYPE_NR
kernel BUG in bch2_fill_extent (2) prio:high fs	-1				10	359d	442d	2/29	never	bcachefs: Fix unhandled key type in fiemap_fill_extent
KMSAN: uninit-value in __bch2_alloc_v4_to_text prio:high fs	7	syz, C			3	464d	469d	2/29	never	bcachefs: Fix refs to undefined fields in __bch2_alloc_v4_to_text()
INFO: task hung in bchfs_fpunch (2) prio:high fs mm	1	syz, C	done		2	418d	462d	2/29	never	bcachefs: Fix readahead involved deadlock
INFO: task hung in bchfs_fallocate (2) fs	1	syz, C	done	inconclusive	6	409d	636d	2/29	never	bcachefs: Fix readahead involved deadlock
INFO: task hung in bch2_readahead prio:high fs	1	syz, C	done		375	381d	863d	2/29	never	bcachefs: Fix readahead involved deadlock
INFO: task hung in invalidate_inode_pages2_range (3) prio:high fs block	1	syz, C	done		58	17d	579d	2/29	never	bcachefs: Fix readahead involved deadlock
KASAN: slab-out-of-bounds Write in bch2_dirent_init_name prio:high fs	21	syz, C	error		1496	344d	469d	2/29	never	bcachefs: Fix padding zeroout when creating casefolded dirents
kernel panic: in transaction restart: transaction_restart_relock, last restarted by prio:high fs	2				5	426d	426d	2/29	never	bcachefs: Fix incorrect transaction handling
WARNING in bch2_dev_free (2) prio:low fs	-1	syz, C	done		5	434d	439d	2/29	never	bcachefs: Fix __bch2_fs_read_write() error path
kernel BUG in __journal_res_get (3) prio:high fs	-1	syz, C	inconclusive		175	345d	468d	2/29	never	bcachefs: Fix __bch2_fs_read_write() error path
KASAN: slab-out-of-bounds Read in __bch2_alloc_to_v4 prio:high fs	17				20	452d	450d	2/29	never	bcachefs: Fix __bch2_alloc_to_v4 copy
KASAN: use-after-free Read in bch2_check_dirents fs	19	syz, C	done		769	364d	683d	2/29	never	bcachefs: Fix UAF in check_dirent()
KASAN: use-after-free Read in check_dirent fs	19	syz, C	done		13	403d	585d	2/29	never	bcachefs: Fix UAF in check_dirent()
KASAN: slab-use-after-free Write in bch2_do_discards prio:high fs	22	syz			137	365d	435d	2/29	never	bcachefs: Fix UAF by journal write path
KASAN: slab-use-after-free Write in bch2_get_next_dev prio:high fs	22	syz, C			1331	344d	438d	2/29	never	bcachefs: Fix UAF by journal write path
WARNING in closure_put_after_sub prio:high fs	-1				2	416d	440d	2/29	never	bcachefs: Ensure we don't return with closure on waitlist
WARNING in bch2_fs_journal_start prio:high fs	-1	syz, C	done		14	466d	486d	2/29	never	bcachefs: Don't allow mounting with crazy numbers of dirty journal entries
general protection fault in __bch2_err_trace prio:normal fs	2	syz, C	done		25	364d	420d	2/29	never	bcachefs: Delete faulty read_only/nochanges check in fs_open()
KMSAN: uninit-value in bch2_alloc_sectors_start_trans (2) prio:high fs	7	syz			875	366d	531d	2/29	never	bcachefs: Add missing ei_last_dirtied update
memory leak in adfs_init_fs_context prio:low fs	3	syz, C			2	73d	290d	26/29	never	b12e20c6ac15 adfs: fix memory leak in sb->s_fs_info
INFO: task hung in remove_inode_hugepages mm fs	1	syz, C	done		52	721d	813d	1/29	never	INFO: task hung in remove_inode_hugepages
KASAN: slab-use-after-free Read in debugfs_u32_get (2) prio:normal fs	19	syz			1	94d	104d	29/29	63d	2e996ca81f95 netdevsim: remove ethtool debugfs files before freeing netdev
KASAN: slab-use-after-free Read in shrink_dcache_tree prio:high actionable fs	19				2	103d	104d	29/29	76d	89038cc87d80 locking/rt: Fix the incorrect RCU protection in rt_spin_unlock()
KASAN: slab-use-after-free Read in reverse_path_check_proc prio:high fs	19	syz, C			113	114d	130d	29/29	76d	a1e9718b406b eventpoll: restore EP_UNACTIVE_PTR sentinel for ctx->tfile_check_list
general protection fault in __umount_mnt fs	2	syz, C	error		21	183d	193d	29/29	132d	ad4999496e73 mount: always duplicate mount
possible deadlock in writeout_period fs mm	4				1	236d	232d	29/29	145d	dd9e2f5b38f1 flex_proportions: make fprop_new_period() hardirq safe
UBSAN: shift-out-of-bounds in minix_statfs fs	-1	syz, C	inconclusive	error	75	247d	1752d	29/29	146d	8c97a6ddc956 minix: Add required sanity checking to minix_check_superblock()
KASAN: slab-use-after-free Read in clone_mnt fs	19				130	216d	227d	29/29	146d	a41dbf5e004e mount: hold namespace_sem across copy in create_new_namespace()
possible deadlock in __configfs_open_file fs	4	syz, C			29	228d	646d	29/29	146d	14d4ac19d189 scsi: target: Fix recursive locking in __configfs_open_file()
BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio (4) fs	10	syz, C	done		5746	253d	682d	29/29	146d	777a8560fd29 lib/buildid: use __kernel_read() for sleepable context
memory leak in __shmem_file_setup fs	3	syz, C			1	265d	261d	29/29	146d	605f6586ecf7 mm/vma: do not leak memory when .mmap_prepare swaps the file
general protection fault in grab_requested_root fs	2	syz, C			21	216d	229d	29/29	146d	81f16c9778d7 statmount: Fix the null-ptr-deref in do_statmount()
kernel BUG in sctp_getsockopt_peeloff_common fs	-1	syz, C	done		6	301d	302d	29/29	247d	afb9917d9b37 Revert "net/socket: convert sock_map_fd() to FD_ADD()"
kernel BUG in socket fs	-1	syz, C			145	285d	279d	29/29	247d	afb9917d9b37 Revert "net/socket: convert sock_map_fd() to FD_ADD()"
memory leak in debugfs_change_name fs	3	syz, C			1	299d	295d	29/29	251d	d412ff9e26eb debugfs: Fix memleak in debugfs_change_name().
WARNING in minix_unlink fs	-1	syz, C	inconclusive	done	458	295d	676d	29/29	251d	009a2ba40303 Fix a drop_nlink warning in minix_rename
memory leak in getname_flags fs	3	syz, C			1	279d	279d	29/29	251d	b14fad555302 io_uring: fix filename leak in __io_openat_prep()
KASAN: slab-use-after-free Read in driver_remove_file fs	19	syz, C	error	done	296	298d	427d	29/29	252d	72262330f7b3 comedi: c6xdigio: Fix invalid PNP driver unregistration
general protection fault in fd_install fs	2	syz, C			64	298d	299d	29/29	265d	8cf01d0c4372 mqueue: correct the type of ro to int
WARNING in minix_rmdir fs	-1	syz, C	inconclusive		92	316d	629d	29/29	265d	d3e0e8661ceb Fix a drop_nlink warning in minix_rmdir
WARNING in nsproxy_ns_active_get fs	-1	syz, C			377	322d	328d	29/29	265d	cefd55bd2159 nsproxy: fix free_nsproxy() and simplify create_new_namespaces()
kernel BUG in may_open (2) fs	-1	syz, C	done		17716	266d	448d	29/29	265d	34ab4c75588c bfs: Reconstruct file type when loading from disk 7f9d34b0a7cb cramfs: Verify inode mode when loading from disk 005d4b0d33f6 hfsplus: Verify inode mode when loading from disk 0a9e74051313 isofs: Verify inode mode when loading from disk 7a5aa54fba2b jfs: Verify inode mode when loading from disk 73861970938a minixfs: Verify inode mode when loading from disk 4aead50caf67 nilfs2: reject invalid file types when reading inodes 4e8011ffec79 ntfs3: pretend $Extend records as regular files bc107a619f02 squashfs: verify inode mode when loading from disk
KMSAN: kernel-infoleak in hugetlbfs_read_iter fs mm	9	syz, C			7	324d	323d	29/29	265d	de8798965fd0 mm/memfd: fix information leak in hugetlb folios
general protection fault in fsnotify_destroy_group fs	2	syz, C	error		2	308d	306d	29/29	265d	7129098f4f7b fanotify: convert fanotify_init() to FD_PREPARE()
WARNING in nsproxy_ns_active_put fs	-1	syz, C	done		38	322d	328d	29/29	265d	cefd55bd2159 nsproxy: fix free_nsproxy() and simplify create_new_namespaces()
WARNING in minix_rename fs	-1	syz	error		7	376d	462d	29/29	265d	009a2ba40303 Fix a drop_nlink warning in minix_rename
WARNING in destroy_super_work fs	-1	syz	done		107	322d	327d	29/29	265d	f8d5a8970d2f ns: handle setns(pidfd, ...) cleanly
general protection fault in mntput fs	2	syz, C	error		17	301d	306d	29/29	265d	05885f41658c namespace: convert fsmount() to FD_PREPARE()
BUG: sleeping function called from invalid context in hook_sb_delete fs	5	syz, C	done		11887	283d	371d	29/29	265d	56325e8c68c0 landlock: fix splats from iput() after it started calling might_sleep()
WARNING in dax_iomap_rw fs	-1	syz, C			5	349d	363d	29/29	302d	154d1e7ad9e5 dax: skip read lock assertion for read-only filesystems
WARNING in invalidate_bh_lru fs	-1	syz, C	done	done	5172	550d	1378d	29/29	315d	6f861765464f fs: Block writes to mounted block devices
VFS: Busy inodes after unmount (use-after-free) (3) fs	2	syz, C	error		85	334d	364d	29/29	315d	56094ad3eaa2 vfs: Don't leak disconnected dentries on umount
kernel BUG in qlist_free_all (2) fs	-1	syz, C	done		5	349d	380d	29/29	315d	25718fdcbdd2 net: gro_cells: Use nested-BH locking for gro_cell
INFO: task hung in bch2_direct_write (2) fs	1	syz, C	unreliable	done	15	401d	410d	29/29	321d	f2c61db29f27 Remove bcachefs core code
INFO: task hung in v9fs_file_fsync fs mm	1	syz, C	done		14	367d	407d	29/29	335d	e8fe3f07a357 9p/trans_fd: p9_fd_request: kick rx thread if EPOLLIN
WARNING in sysfs_emit_at fs	-1	syz, C			2	389d	385d	29/29	335d	9dfec4a51df9 USB: core: remove the move buf action
possible deadlock in path_openat (3) fs	4				1	395d	395d	29/29	335d	9f7c02e03157 nbd: restrict sockets to TCP and UDP
general protection fault in iter_file_splice_write fs	2	syz, C	done	done	2812	406d	862d	29/29	349d	netfs: Fix unbuffered write error handling
WARNING in path_noexec mm fs	-1	syz, C	done		14318	364d	449d	29/29	364d	secretmem: use SB_I_NOEXEC
kernel BUG in bch2_journal_keys_peek_max fs	-1	syz, C	done		45	457d	594d	29/29	379d	425da82c63e3 bcachefs: btree_iter: fix updates, journal overlay
kernel BUG in bch2_journal_keys_peek_prev_min fs	-1				1	461d	457d	29/29	383d	1f8aede70d49 bcachefs: fix bch2_journal_keys_peek_prev_min() underflow
KASAN: use-after-free Read in bch2_btree_node_read_done fs	19	syz, C	done		64	464d	673d	29/29	390d	d89a34b14df5 bcachefs: Move bset size check before csum check
kernel BUG in bch2_btree_path_level_init (3) fs	-1	syz, C	done		489	390d	647d	29/29	390d	9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
kernel BUG in __bch2_bkey_compat fs	-1	syz, C	done	done	5	473d	473d	29/29	390d	9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
kernel BUG in bch2_trans_update_by_path fs	-1	syz, C	done		857	392d	467d	29/29	390d	c72d628469b8 bcachefs: Fix btree for nonexistent tree depth
BUG: unable to handle kernel paging request in __bch2_bkey_unpack_key fs	8	syz, C			75	466d	490d	29/29	390d	9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
kernel panic: trans should be locked, unlocked by bch2_btree_update_start fs	2	syz, C	error	error	361	472d	663d	29/29	390d	5c4acbc8ce90 bcachefs: Don't unlock the trans if ret doesn't match BCH_ERR_operation_blocked
kernel BUG in bch2_bkey_cmp_packed (2) fs	-1	syz, C			7	474d	485d	29/29	390d	9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
kernel BUG in bch2_reconstruct_snapshots fs	-1	syz, C	done	done	7	498d	590d	29/29	390d	b2e2bed11980 bcachefs: Add missing key type checks to check_snapshot_exists()
BUG: unable to handle kernel NULL pointer dereference in bch2_btree_update_start fs	10	syz, C			6	461d	473d	29/29	390d	56be92c63f02 bcachefs: Fix pool->alloc NULL pointer dereference
KASAN: use-after-free Read in bch2_checksum fs	19	syz, C	error	done	8	494d	506d	29/29	390d	d89a34b14df5 bcachefs: Move bset size check before csum check
kernel BUG in bch2_btree_node_iter_init (2) fs	-1	syz, C	done		3	447d	447d	29/29	390d	9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
kernel panic: in transaction restart: transaction_restart_mem_realloced, last restarted by fs	2				2	459d	456d	29/29	390d	fbf913cb72a5 bcachefs: Fix incorrect transaction restart handling
KASAN: slab-use-after-free Read in bch2_str_hash_repair_key fs	19	syz, C	done		226	456d	476d	29/29	390d	9b54efe66c9b bcachefs: Fix alloc_req use after free
kernel BUG in __bch2_bkey_unpack_key fs	-1	syz, C			43	469d	490d	29/29	390d	9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
UBSAN: shift-out-of-bounds in __bch2_btree_node_hash_insert fs	-1	syz, C	done		434	452d	636d	29/29	390d	96de8f852031 bcachefs: mark invalid_btree_id autofix
KASAN: slab-use-after-free Read in bch2_bucket_alloc_trans fs	19	syz, C	error		550	457d	475d	29/29	390d	9b54efe66c9b bcachefs: Fix alloc_req use after free
UBSAN: shift-out-of-bounds in __bch2_bkey_unpack_key fs	-1	syz, C	done		54	473d	489d	29/29	390d	03208bd06a61 bcachefs: don't return fsck_fix for unfixable node errors in __btree_err
kernel BUG in __btree_trans_update_by_path fs	-1	syz, C	done		20	448d	454d	29/29	390d	c72d628469b8 bcachefs: Fix btree for nonexistent tree depth
kernel BUG in __bkey_unpack_pos (2) fs	-1	syz, C	done		24	446d	643d	29/29	390d	9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
KASAN: use-after-free Read in poly1305_update fs	19	syz, C	done		8	458d	473d	29/29	390d	d89a34b14df5 bcachefs: Move bset size check before csum check
BUG: unable to handle kernel NULL pointer dereference in mempool_alloc_noprof (2) fs	10	syz, C	done		8	469d	486d	29/29	390d	56be92c63f02 bcachefs: Fix pool->alloc NULL pointer dereference
KASAN: slab-use-after-free Read in bch2_copygc fs	19	syz, C	done		25	390d	448d	29/29	390d	c02b943f7d12 bcachefs: Fix reference to invalid bucket in copygc
possible deadlock in trans_set_locked fs	4	syz, C			113	468d	669d	29/29	417d	ff1dd05f8233 bcachefs: bch2_trans_relock() is trylock for lockdep
possible deadlock in __bch2_count_fsck_err fs	4				12	484d	501d	29/29	419d	0acb385ec19c bcachefs: Fix possible console lock involved deadlock
WARNING in rhashtable_init_noprof fs	-1	syz, C	done		131	473d	491d	29/29	419d	757601ef8533 bcachefs: Don't put rhashtable on stack
possible deadlock in __bch2_folio_reservation_get (2) fs	4				25	476d	505d	29/29	419d	0acb385ec19c bcachefs: Fix possible console lock involved deadlock
WARNING in lookup_object_or_alloc fs	-1				7	476d	486d	29/29	419d	757601ef8533 bcachefs: Don't put rhashtable on stack
KASAN: slab-out-of-bounds Read in bch2_sb_members_v1_to_text fs	17	syz, C	done		6	476d	476d	29/29	419d	205da7c02673 bcachefs: Don't trust sb->nr_devices in members_to_text()
possible deadlock in __bch2_fsck_err (2) fs	4	syz, C			4	504d	505d	29/29	419d	0acb385ec19c bcachefs: Fix possible console lock involved deadlock
KASAN: slab-out-of-bounds Read in bch2_sb_members_v2_to_text fs	17	syz, C	done		34	475d	491d	29/29	419d	205da7c02673 bcachefs: Don't trust sb->nr_devices in members_to_text()
WARNING in __init_work (2) fs	-1	syz, C			5971	466d	475d	29/29	419d	757601ef8533 bcachefs: Don't put rhashtable on stack
possible deadlock in bch2_trans_begin fs	4				5	488d	618d	29/29	419d	0acb385ec19c bcachefs: Fix possible console lock involved deadlock
divide error in bch2_sb_members_v2_to_text fs	2	syz, C	done		3	476d	476d	29/29	419d	205da7c02673 bcachefs: Don't trust sb->nr_devices in members_to_text()
UBSAN: array-index-out-of-bounds in bch2_sb_downgrade_update fs	15	syz, C			539	467d	519d	29/29	419d	082c74411491 bcachefs: Fix downgrade_table_extra()
WARNING in bch2_printbuf_make_room fs	-1	syz, C	error		2	478d	868d	29/29	428d	dc5bfdf8eaed bcachefs: fix the memory leak in exception case
BUG: unable to handle kernel paging request in bch2_dirent_to_text fs	8	syz, C	done	error	3	493d	804d	29/29	434d	f39055220f6f bcachefs: Add missing validation for superblock section clean
kernel BUG in vfs_get_tree (2) fs	-1	syz, C	done		22	482d	479d	29/29	440d	9c6185609947 bcachefs: Call bch2_fs_start before getting vfs superblock
KASAN: use-after-free Read in sysv_new_inode (2) fs	19	syz, C	inconclusive	error	21224	541d	874d	29/29	440d	448fa70158f9 sysv: Remove the filesystem
kernel BUG in bch2_fill_extent fs	-1				8	498d	518d	29/29	446d	a2f546330ef9 bcachefs: Fix losing return code in next_fiemap_extent()
BUG: unable to handle kernel NULL pointer dereference in do_pagemap_scan fs	10	syz, C	inconclusive	done	45	507d	1010d	29/29	449d	65c66047259f proc: fix the issue of proc_mem_open returning NULL
kernel BUG in may_open fs	-1	syz, C	error		137019	449d	545d	29/29	449d	cfd86ef7e8e7 anon_inode: use a proper mode internally
kernel BUG in __bch2_trans_commit (2) fs	-1				105	449d	493d	29/29	449d	97e69f12edb1 bcachefs: Fix missing BTREE_UPDATE_internal_snapshot_node
WARNING in bch2_dev_free fs	-1	syz, C	done		258	477d	539d	28/29	473d	d62922ba3cfc bcachefs: Prevent granting write refs when filesystem is read-only
KMSAN: uninit-value in btree_interior_update_work fs	7				2	556d	608d	28/29	473d	1f88c3567495 bcachefs: Fix a KMSAN splat in btree_update_nodes_written()
KMSAN: uninit-value in bch2_extent_crc_append (2) fs	7	syz, C			4	559d	570d	28/29	474d	53cf2a3daa4c bcachefs: Fix kmsan warnings in bch2_extent_crc_pack()
KMSAN: uninit-value in bch2_trans_start_alloc_update fs	7	syz, C			1051	550d	673d	28/29	475d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_btree_node_iter_init (2) fs	7	syz, C			309	550d	681d	28/29	475d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_inode_v3_validate fs	7	syz, C			5866	551d	680d	28/29	475d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_btree_node_get fs	7	syz, C			18	561d	667d	28/29	475d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_btree_node_check_topology fs	7	syz, C			19	577d	688d	28/29	475d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_dev_freespace_init fs	7	syz, C			432	551d	664d	28/29	475d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_checksum_update (2) fs	19	syz, C	done		7	558d	653d	28/29	475d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_bucket_alloc_early fs	7	syz, C			219	554d	692d	28/29	475d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_trans_start_alloc_update_noupdate fs	7				2	639d	635d	28/29	475d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in __build_ro_aux_tree fs	7				3	644d	655d	28/29	475d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_btree_ptr_v2_validate fs	7	syz, C			55	551d	602d	28/29	475d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_xattr_validate fs	7	syz, C			22	574d	656d	28/29	475d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_alloc_v4_validate (2) fs	7	syz, C			514	554d	681d	28/29	475d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in __bch2_bkey_cmp_left_packed fs	7	syz			2	617d	644d	28/29	475d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in rw_aux_tree_set (2) fs	7	syz, C			2356	552d	676d	28/29	475d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
WARNING in bch2_opt_check_may_set fs	-1				4	551d	547d	28/29	475d	2dd202dbaf0a bcachefs: Recovery no longer holds state_lock
KMSAN: uninit-value in bch2_dirent_rename (2) fs	7				5	639d	649d	28/29	475d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_dirent_validate fs	7				214	617d	668d	28/29	475d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_bkey_val_validate fs	7	syz, C			17	557d	669d	28/29	475d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_inode_unpack (2) fs	7				9	620d	636d	28/29	475d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_bkey_ptrs_validate fs	7	syz, C			15	556d	667d	28/29	475d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_readdir (2) fs	7				2	626d	626d	28/29	475d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_bucket_alloc_trans fs	7	syz, C			15	528d	660d	28/29	475d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_bkey_cmp_packed_inlined (2) fs	7	syz, C			309	551d	671d	28/29	475d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
kernel BUG in bch2_fs_initialize fs	-1	syz	done		1004	530d	536d	28/29	476d	806776ad9c20 bcachefs: Add missing error handling
kernel BUG in qlist_free_all net fs	-1	syz, C	done	done	12	528d	676d	28/29	476d	3a04334d6282 bcachefs: Fix b->written overflow
WARNING in bch2_bkey_pick_read_device fs	-1	syz, C	error		89	546d	550d	28/29	476d	3c72d3eea97b bcachefs: Fix WARN() in bch2_bkey_pick_read_device()
KASAN: slab-use-after-free Read in bchfs_read fs	19	syz, C	done		34	535d	542d	28/29	476d	34b47e3d73a2 bcachefs: Fix UAF in bchfs_read()
kernel BUG in bch2_run_recovery_pass (2) fs	-1	syz, C			70	544d	613d	28/29	476d	962322475bb5 bcachefs: Handle backpointers with unknown data types
BUG: sleeping function called from invalid context in bch2_printbuf_make_room (2) fs	5	syz, C	error		59	544d	546d	28/29	476d	b2ffadcc7f8f bcachefs: Fix scheduling while atomic from logging changes
kernel BUG in bch2_btree_node_iter_init fs	-1	syz, C	done	done	167	500d	604d	28/29	476d	3a04334d6282 bcachefs: Fix b->written overflow
general protection fault in bch2_snapshot_tree_oldest_subvol fs	8	syz, C	done		14	521d	544d	28/29	476d	aa6a591f0fd7 bcachefs: Fix null ptr deref in bch2_snapshot_tree_oldest_subvol() 71f8e806a5e4 bcachefs: Stricter checks on "key allowed in this btree"
KASAN: slab-out-of-bounds Read in validate_bset_keys fs	19	syz, C			5	576d	575d	28/29	476d	3a04334d6282 bcachefs: Fix b->written overflow
KMSAN: uninit-value in bch2_copygc (2) fs	7				1	551d	547d	28/29	476d	9ea24b287b3b bcachefs: Eliminate padding in move_bucket_key
KMSAN: uninit-value in bch2_write_inode fs	7	syz, C			4476	564d	612d	28/29	476d	58517f4df842 bcachefs: Initialize from_inode members for bch_io_opts
kernel BUG in bch2_stripe_validate fs	-1	syz, C	done	done	6	554d	639d	28/29	476d	71f8e806a5e4 bcachefs: Stricter checks on "key allowed in this btree"
kernel BUG in __journal_res_get (2) fs	-1	syz, C	error	done	1527	477d	685d	28/29	476d	4c0d2c67ac6d bcachefs: Fix early startup error path
KCSAN: data-race in bprm_execve / copy_fs (4) mm fs	6				1	558d	558d	28/29	476d	af7bb0d2ca45 exec: fix the racy usage of fs_struct->in_exec
BUG: unable to handle kernel paging request in efivarfs_pm_notify fs efi	8	syz, C			1037	573d	583d	28/29	476d	cb6ae457bc6a efivarfs: Defer PM notifier registration until .fill_super
kernel BUG in __bch2_trans_commit fs	-1	syz, C	unreliable		11858	684d	709d	28/29	507d	8b22abb4c840 bcachefs: -o norecovery now bails out of recovery earlier
possible deadlock in bch2_alloc_sectors_start_trans fs	4	syz, C	inconclusive		64	665d	687d	28/29	509d	2cd85fea49d8 bcachefs: Don't recurse in check_discard_freespace_key
kernel BUG in bch2_get_scanned_nodes fs	-1	syz, C	done		101	610d	670d	28/29	510d	a6f4794fcd86 bcachefs: struct bkey_validate_context
kernel BUG in bch2_evacuate_bucket fs	-1	syz, C	done		4	674d	673d	28/29	511d	9e92d6e9efb0 bcachefs: Kill bch2_get_next_backpointer()
VFS: Busy inodes after unmount (use-after-free) fs	2	syz, C	error		55684	512d	1343d	28/29	511d	965b5dd1894f ocfs2: free inode when ocfs2_get_init_inode() fails
kernel BUG in bch2_btree_path_traverse_one fs	-1	syz, C	done		9	659d	692d	28/29	511d	f11ca2ab18e3 bcachefs: Guard against backpointers to unknown btrees
kernel BUG in bch2_journal_pin_set fs	-1	syz, C	done		11	620d	673d	28/29	511d	b3d82c2f2761 bcachefs: Guard against journal seq overflow
WARNING in bch2_journal_flush_seq_async fs	-1	syz, C			27	617d	742d	28/29	511d	4746ee182a76 bcachefs: Check for inode journal seq in the future
general protection fault in proc_scheduler fs	2	syz			6	630d	635d	28/29	511d	d38e26e36206 mptcp: sysctl: sched: avoid using current->nsproxy
kernel BUG in bch2_rechecksum_bio fs	-1	syz, C			4	680d	690d	28/29	511d	9bdb3b73e732 bcachefs: Check for extent crc uncompressed/compressed size mismatch
kernel BUG in __bch2_journal_pin_put fs	-1	syz, C			11	632d	674d	28/29	511d	b3d82c2f2761 bcachefs: Guard against journal seq overflow
kernel BUG in const_folio_flags (2) fs mm	-1	syz			3	616d	676d	28/29	511d	3203b3ab0fcf mm/filemap: don't call folio_test_locked() without a reference in next_uptodate_folio()
kernel BUG in __bch2_btree_node_write fs	-1	syz, C			110	617d	726d	28/29	511d	75eabea6988e bcachefs: Fix dup/misordered check in btree node read
kernel BUG in bch2_btree_node_lock_write fs	-1	syz, C	done		8	665d	677d	28/29	511d	f9e0a9be70c8 bcachefs: Issue a transaction restart after commit in repair
kernel BUG in bch2_btree_pos_to_text (2) fs	-1	syz, C			51	618d	676d	28/29	511d	abf23afa36eb bcachefs: Fix btree node scan when unknown btree IDs are present
kernel BUG in bch2_bucket_alloc_trans (3) fs	-1	syz, C	error		711	617d	680d	28/29	511d	828552ca74a4 bcachefs: Kill bch2_bucket_alloc_new_fs()
kernel BUG in bch2_journal_noflush_seq fs	-1	syz, C	done	done	841	617d	811d	28/29	511d	0eafe758ac44 bcachefs: Check for bucket journal seq in the future
general protection fault in bch2_checksum fs	19	syz, C	done		34	513d	804d	28/29	511d	f7f196170dcd bcachefs: cryptographic MACs on superblock are not (yet?) supported
possible deadlock in __bch2_fsck_err fs	4				2	661d	661d	28/29	511d	49f2d182638a bcachefs: Kill unnecessary mark_lock usage
WARNING: locking bug in eventfd_signal_mask io-uring fs	4	syz, C	done		6	635d	639d	28/29	511d	a9c83a0ab66a io_uring/timeout: flush timeouts outside of the timeout lock
general protection fault in bch2_btree_path_traverse_one fs	8	syz, C	done		564	604d	705d	28/29	511d	90f3683e8f7c bcachefs: Fix null ptr deref in btree_path_lock_root() c7e78f7b0178 bcachefs: Ignore empty btree root journal entries
BUG: corrupted list in bch2_btree_and_journal_iter_exit fs	8	syz, C	done		7	627d	673d	28/29	511d	0184dfa3b821 bcachefs: Fix journal_iter list corruption
WARNING in mark_buffer_dirty (6) fs	-1	syz, C	error		11669	511d	1078d	28/29	511d	ca76bb226bf4 nilfs2: do not force clear folio if buffer is referenced
kernel BUG in bch2_bio_compress (2) fs	-1	syz, C			5	559d	684d	28/29	511d	3d0b3b51c5ab bcachefs: Don't BUG_ON() when superblock feature wasn't set for compressed data
kernel BUG in bch2_btree_write_buffer_flush_locked fs	-1	syz, C	done		35	621d	701d	28/29	511d	b3d82c2f2761 bcachefs: Guard against journal seq overflow
kernel BUG in bch2_btree_root_read fs	-1	syz, C			9	602d	676d	28/29	511d	828552ca74a4 bcachefs: Kill bch2_bucket_alloc_new_fs()
KASAN: slab-out-of-bounds Write in __put_unused_fd fs	22	syz, C	done		5	634d	637d	28/29	511d	0c0214df28f0 fanotify: Fix crash in fanotify_init(2)
possible deadlock in page_cache_ra_unbounded mm fs	4	syz, C	error	done	163	618d	1378d	28/29	573d	6f861765464f fs: Block writes to mounted block devices
KASAN: use-after-free Read in reiserfs_fill_super (3) fs	19	syz, C	error	done	47	680d	725d	28/29	624d	fb6f20ecb121 reiserfs: The last commit
kernel BUG in bch2_fs_btree_write_buffer_exit fs	-1	syz, C	done		6138	680d	732d	28/29	640d	ca43f73cd172 bcachefs: bch2_btree_write_buffer_flush_going_ro()
kernel BUG in bch2_journal_res_get (2) fs	-1	syz, C			1710	680d	705d	28/29	640d	ca43f73cd172 bcachefs: bch2_btree_write_buffer_flush_going_ro()
kernel BUG in bch2_fs_btree_cache_exit fs	-1	syz, C	done		2766	680d	712d	28/29	640d	ca43f73cd172 bcachefs: bch2_btree_write_buffer_flush_going_ro()
kernel BUG in __bch2_btree_node_hash_insert fs	-1	syz, C	done		396	681d	689d	28/29	652d	0b6ec0c5ac6c bcachefs: Fix assertion pop in topology repair
KASAN: slab-out-of-bounds Read in journal_entry_dev_usage_to_text fs	17	syz, C	done		33	682d	792d	28/29	652d	657d4282d8c4 bcachefs: Fix journal_entry_dev_usage_to_text() overrun
kernel BUG in __bkey_unpack_pos fs	-1	syz, C			4	660d	699d	28/29	652d	dc537189b5cf bcachefs: Fix validate_bset() repair path
kernel BUG in bch2_trans_node_iter_init fs	-1	syz, C	done		13	691d	705d	28/29	652d	f8f1dde68681 bcachefs: Fix missing validation for bch_backpointer.level
kernel BUG in bch2_btree_path_level_init (2) fs	-1	syz, C	done		29	656d	706d	28/29	652d	f8f1dde68681 bcachefs: Fix missing validation for bch_backpointer.level
KCSAN: data-race in __ep_remove / __fput (5) fs	6				1	739d	739d	28/29	652d	6474353a5e3d epoll: annotate racy check
kernel BUG in bch2_dev_btree_bitmap_mark fs	-1	syz, C	done		31	684d	708d	28/29	652d	27a036a0c3e7 bcachefs: Fix bch_member.btree_bitmap_shift validation
kernel BUG in bch2_bkey_pack_pos_lossy fs	-1	syz, C			7	691d	703d	28/29	652d	dc537189b5cf bcachefs: Fix validate_bset() repair path
kernel BUG in bch2_run_recovery_pass fs	-1	syz, C	done		17	685d	705d	28/29	652d	2642084f26b5 bcachefs: Allow for unknown key types in backpointers fsck
kernel BUG in bch2_ptr_swab fs	-1	syz, C	inconclusive		11	690d	707d	28/29	652d	840c2fbcc5cd bcachefs: Fix assertion pop in bch2_ptr_swab()
kernel BUG in __bch2_bkey_cmp_packed_format_checked fs	-1	syz, C			4	705d	705d	28/29	657d	d335bb3fd3a4 bcachefs: Ancient versions with bad bkey_formats are no longer supported
kernel BUG in bch2_bkey_cmp_packed fs	-1	syz, C			8	691d	705d	28/29	657d	d335bb3fd3a4 bcachefs: Ancient versions with bad bkey_formats are no longer supported
kernel BUG in bch2_inconsistent_error fs	-1	syz, C			4	691d	703d	28/29	657d	f9f0a5390dce bcachefs: Change OPT_STR max to be 1 less than the size of choices array
KASAN: slab-use-after-free Read in bch2_reconstruct_alloc fs	19	syz, C	done		2	702d	706d	28/29	684d	8e910ca20e11 bcachefs: Fix UAF in bch2_reconstruct_alloc()
kernel BUG in bch2_bucket_alloc_trans (2) fs	-1	syz, C	done		103	685d	713d	28/29	684d	3fd27e9c57bf bcachefs: init freespace inited bits to 0 in bch2_fs_initialize
KASAN: null-ptr-deref Read in bch2_sb_set_upgrade_extra fs	11	syz, C			2	711d	707d	28/29	684d	a25a83de45b4 bcachefs: fix null-ptr-deref in have_stripes()
general protection fault in btree_node_iter_and_journal_peek fs	2	syz, C			3	708d	730d	28/29	684d	3726a1970bd7 bcachefs: Fix NULL ptr dereference in btree_node_iter_and_journal_peek
UBSAN: shift-out-of-bounds in bch2_alloc_to_text fs	-1	syz, C			29	696d	709d	28/29	684d	5c41f75d1b92 bcachefs: fix shift oob in alloc_lru_idx_fragmentation
UBSAN: shift-out-of-bounds in validate_sb_layout fs	-1	syz, C	done		7	698d	706d	28/29	684d	2045fc4295c4 bcachefs: Fix invalid shift in validate_sb_layout()
possible deadlock in bch2_replicas_entry_validate fs	4	syz, C	done		9468	707d	726d	28/29	685d	bf4baaa087e2 bcachefs: Fix lockdep splat in bch2_accounting_read
kernel BUG in bch2_btree_pos_to_text fs	-1	syz, C			8	689d	738d	28/29	686d	0151d10a480d bcachefs: add check for btree id against max in try read node
KCSAN: data-race in __fsnotify_parent / __fsnotify_recalc_mask (5) fs	6				15	730d	817d	28/29	686d	35ceae44742e fsnotify: Avoid data race between fsnotify_recalc_mask() and fsnotify_object_watched()
kernel BUG in submit_bh_wbc (3) nilfs fs	-1	syz, C	done		18	708d	716d	28/29	686d	6ed469df0bfb nilfs2: fix kernel bug due to missing clearing of buffer delay flag
general protection fault in prt_str fs	2	syz, C	done		2	728d	743d	28/29	686d	a30f32222df2 bcachefs: Fix NULL pointer dereference in bch2_opt_to_text
general protection fault in bch2_alloc_read fs	2	syz, C			7	727d	733d	28/29	686d	a319aeaebb6c bcachefs: Fix missing bounds checks in bch2_alloc_read()
UBSAN: shift-out-of-bounds in bch2_stripe_to_text fs	-1	syz, C			3	738d	734d	28/29	686d	9f25dbe0bf91 bcachefs: Add missing validation for bch_stripe.csum_granularity_bits
UBSAN: shift-out-of-bounds in member_to_text fs	-1	syz, C			12	713d	757d	28/29	686d	c1bd21bb6518 bcachefs: Fix invalid shift in member_to_text()
KASAN: slab-use-after-free Read in bch2_direct_write fs	19				11	730d	733d	28/29	686d	573ddcdc5607 bcachefs: fix uaf in bch2_dio_write_done()
WARNING in __bch2_fsck_err (2) fs	-1	syz, C			3	726d	722d	28/29	705d	5612daafb764 bcachefs: Fix fsck warnings from bkey validation
general protection fault in bch2_fs_recovery fs	8	syz, C			10	731d	749d	28/29	707d	025c55a4c7f1 bcachefs: return err ptr instead of null in read sb clean
kernel BUG in vfs_get_tree fs	-1	syz, C	done		318	725d	769d	28/29	707d	b29c30ab48e0 bcachefs: Fix incorrect IS_ERR_OR_NULL usage
KMSAN: uninit-value in bch2_bkey_cmp_packed_inlined fs	7	syz, C			7	731d	750d	28/29	707d	0696a18a8cc3 bcachefs: memset bounce buffer portion to 0 after key_sort_fix_overlapping
WARNING: suspicious RCU usage in bch2_snapshot_tree_oldest_subvol fs	4	syz, C			21	731d	742d	28/29	707d	39c3aad43f6f bcachefs: Hold read lock in bch2_snapshot_tree_oldest_subvol()
general protection fault in __copy_super fs	2	syz, C	done		5	736d	738d	28/29	707d	40d40c6bea19 bcachefs: assign return error when iterating through layout
KASAN: slab-use-after-free Read in lockref_get_not_dead (2) fs	19	syz	error		1	757d	753d	28/29	707d	4e32c25b58b9 libfs: fix get_stashed_dentry()
kernel BUG in bch2_lru_change (2) fs	-1	syz, C			2	775d	774d	28/29	726d	9482f3b05332 bcachefs: avoid overflowing LRU_TIME_BITS for cached data lru
WARNING in bch2_fs_journal_stop fs	-1	syz, C	done		1463	773d	805d	28/29	726d	7f2de6947f92 bcachefs: Fix warning in bch2_fs_journal_stop()
kernel BUG in bch2_journal_replay fs	-1	syz, C	done		3	769d	841d	28/29	726d	cab18be6957b bcachefs: Fix replay_now_at() assert
WARNING in bch2_write_super fs	-1				3	773d	770d	28/29	726d	6575b8c9877c bcachefs: Fix locking in bch2_ioc_setlabel()
KMSAN: uninit-value in bch2_alloc_v4_validate fs	7	syz, C			5	770d	768d	28/29	726d	8ed823b19214 bcachefs: Fix compat issue with old alloc_v4 keys
WARNING in __bch2_fsck_err fs	-1	syz, C			200	728d	774d	28/29	726d	075cabf324c3 bcachefs: Fix forgetting to pass trans to fsck_err()
KASAN: slab-out-of-bounds Write in bch2_dev_journal_init fs	21	syz, C			2	772d	772d	28/29	726d	bdbdd4759f08 bcachefs: Fix missing validation in bch2_sb_journal_v2_validate()
WARNING in discard_new_inode fs	-1	syz, C			3	774d	774d	28/29	726d	99c87fe0f584 bcachefs: fix incorrect i_state usage
kernel BUG in bch2_sort_keys fs	-1	syz, C	error		3	853d	877d	27/29	754d	5dfd3746b6c4 bcachefs: Fix needs_whiteout BUG_ON() in bkey_sort()
WARNING in __virt_to_phys (5) fs	-1				4	777d	773d	27/29	761d	9bd01500e4d8 bcachefs: Fix freeing of error pointers
possible deadlock in bch2_gc_mark_key fs	4	syz, C	done		86	778d	855d	27/29	761d	1841027c7de4 bcachefs: bch2_gc_btree() should not use btree_root_lock
WARNING in __replicas_deltas_realloc fs	-1	syz, C			9	781d	804d	27/29	763d	1d16c605cc55 bcachefs: Disk space accounting rewrite
kernel BUG in bch2_bucket_alloc_freelist fs	-1				1	832d	828d	27/29	763d	44ec5990357b bcachefs: Don't use the new_fs() bucket alloc path on an initialized fs
kernel BUG in bch2_fs_journal_stop fs	-1	syz, C	done		4370	777d	869d	27/29	763d	600b8be5e747 bcachefs: Change bch2_fs_journal_stop() BUG_ON() to warning
kernel BUG in __replicas_entry_idx fs	-1	syz, C	done	unreliable	3	859d	862d	27/29	764d	8bb8d683a401 bcachefs: Delete journal-buf-sharded old style accounting
kernel BUG in bch2_fs_release (2) fs	-1				1	828d	824d	27/29	764d	759b2e800f16 bcachefs: Switch online_reserved shutdown assert to WARN()
kernel panic: not locked: inodes NUM:NUM:NUM cached fs	2	syz, C			2	847d	858d	27/29	764d	385f0c05d670 bcachefs: kill key cache arg to bch2_assert_pos_locked()
BUG: MAX_LOCK_DEPTH too low! (4) fs	-1	syz, C	error		1364	778d	875d	27/29	765d	375476c41405 bcachefs: Add lockdep support for btree node locks
WARNING in bch2_fs_ioctl fs	-1	syz, C	done		36	778d	840d	27/29	768d	d293ece10810 bcachefs: Fix shutdown ordering
KASAN: global-out-of-bounds Read in srcu_gp_start_if_needed fs	17				1	860d	856d	27/29	768d	d293ece10810 bcachefs: Fix shutdown ordering
kernel panic: bch_dev->ref underflow, last put: bch2_get_next_dev fs	2	syz, C	done		21	858d	868d	27/29	768d	9667214b30ef bcachefs: Fix ref in trans_mark_dev_sbs() error path
WARNING: suspicious RCU usage in bch2_bucket_ref_update fs	4	syz, C	done		5	813d	812d	27/29	777d	6f692b1672bd bcachefs: Fix RCU splat
kernel BUG in bch2_bucket_alloc_trans fs	-1				18	803d	832d	27/29	777d	44ec5990357b bcachefs: Don't use the new_fs() bucket alloc path on an initialized fs
BUG: sleeping function called from invalid context in bch2_printbuf_make_room fs	5	syz, C	done		27	801d	799d	27/29	777d	737759fc098f bcachefs: Fix printbuf usage while atomic
UBSAN: shift-out-of-bounds in bch2_bkey_format_invalid (2) fs	-1	syz, C			117	777d	842d	27/29	777d	a0bd30e4ea9d bcachefs: Fix shift greater than integer size
WARNING: lock held when returning to user space in ns_ioctl fs	4	syz, C	done		147	792d	804d	27/29	777d	280e36f0d5b9 nsfs: use cleanup guard
BUG: unable to handle kernel NULL pointer dereference in path_from_stashed fs	10	syz, C			23	798d	801d	27/29	777d	f60d38cb02d0 pidfs: when time ns disabled add check for ioctl
kernel BUG in bch2_ioctl_fsck_online fs	-1	syz, C	done		3	833d	829d	26/29	808d	9bd01500e4d8 bcachefs: Fix freeing of error pointers
WARNING in __virt_to_phys (4) fs	-1	syz, C			2	821d	817d	26/29	808d	9bd01500e4d8 bcachefs: Fix freeing of error pointers
UBSAN: shift-out-of-bounds in bch2_btree_node_read_done fs	-1	syz, C			3	836d	859d	26/29	810d	9e7cfb35e266 bcachefs: Check for invalid btree IDs
UBSAN: array-index-out-of-bounds in bch2_bkey_swab_key fs	15				2	845d	843d	26/29	811d	d47df4f616d5 bcachefs: Fix array-index-out-of-bounds
INFO: task hung in journal_quiesce fs	1	syz			76	823d	852d	26/29	811d	89d21b69b4f8 bcachefs: Add missing bch2_journal_do_writes() call
UBSAN: array-index-out-of-bounds in lock_timer_base fs kvm	15				4	834d	848d	26/29	812d	b79922009214 bcachefs: Add missing synchronize_srcu_expedited() call when shutting down
WARNING in bch2_fs_read_write_early fs	-1	syz, C			35	829d	837d	26/29	812d	1ba44217f825 bcachefs: delete_dead_snapshots() doesn't need to go RW
UBSAN: shift-out-of-bounds in read_one_super (2) fs	-1				4	838d	834d	26/29	812d	d406545613b5 bcachefs: Fix shift overflow in read_one_super()
KASAN: slab-use-after-free Read in bch2_sb_errors_from_cpu fs	19	syz, C			2	830d	826d	26/29	812d	211c581de28e bcachefs: slab-use-after-free Read in bch2_sb_errors_from_cpu
UBSAN: shift-out-of-bounds in bch2_blacklist_entries_gc fs	-1	syz, C			45	826d	826d	26/29	812d	472237b69d07 bcachefs: Fix shift-out-of-bounds in bch2_blacklist_entries_gc
kernel BUG in bch2_journal_res_get fs	-1	syz, C			2	842d	838d	26/29	812d	dbf4d79b7fc7 bcachefs: Fix early init error path in journal code
kernel BUG in bch2_lru_change fs	-1	syz, C	done		4	830d	845d	26/29	812d	cff07e2739d8 bcachefs: Guard against overflowing LRU_TIME_BITS
WARNING: locking bug in srcu_gp_start_if_needed kvm fs	4				2	839d	841d	26/29	812d	f770a6e9a3d7 bcachefs: Fix initialization order for srcu barrier
WARNING: kmalloc bug in __snapshot_t_mut fs	-1	syz, C	done		10	822d	853d	26/29	812d	64cd7de998f3 bcachefs: Fix kmalloc bug in __snapshot_t_mut
KASAN: slab-use-after-free Read in bch2_fs_recovery fs	19				21	830d	831d	26/29	812d	2fe79ce7d1e8 bcachefs: Fix a UAF after write_super()
WARNING: locking bug in __timer_delete_sync fs kvm	4				6	826d	850d	26/29	812d	b79922009214 bcachefs: Add missing synchronize_srcu_expedited() call when shutting down
kernel BUG in gc_bucket fs	-1	syz, C	done		221	846d	850d	26/29	812d	9432e90df1b8 bcachefs: Check for invalid bucket from bucket_gen(), gc_bucket()
general protection fault in bch2_fs_btree_key_cache_exit fs	2				6	838d	839d	26/29	831d	b30b70ad8bff bcachefs: Fix early error path in bch2_fs_btree_key_cache_exit()
UBSAN: shift-out-of-bounds in bch2_sb_dev_has_data fs	-1	syz, C	done		15	871d	868d	25/29	841d	bcfbaea8e547 bcachefs: Fix shift overflows in replicas.c
kernel panic: not locked: inodes NUM:ADDR:NUM cached fs	2	syz, C			2	868d	864d	25/29	841d	6ce26ad376bd bcachefs: Fix missing parens in drop_locks_do()
kernel BUG in bch2_btree_iter_verify_entry_exit fs	-1	syz, C	done		3	861d	866d	25/29	841d	765b8cb8acab bcachefs: Check for subvolues with bogus snapshot/inode fields
kernel BUG in bch2_checksum fs	-1	syz, C	done		9	858d	868d	25/29	841d	6b74fdcc8e25 bcachefs: bch2_checksum() returns 0 for unknown checksum type
general protection fault in poll_state_synchronize_srcu fs	2				5	861d	861d	25/29	841d	d293ece10810 bcachefs: Fix shutdown ordering
kernel BUG in cpu_replicas_add_entry fs	-1	syz, C	done		11	852d	870d	25/29	841d	5fa421448d1f bcachefs: Fix bogus verify_replicas_entry() assert
KASAN: stack-out-of-bounds Read in __bch2_encrypt_bio fs	17	syz, C	done		2	871d	868d	25/29	841d	2ba24864d2f6 bcachefs: Fix stack oob in __bch2_encrypt_bio()
UBSAN: shift-out-of-bounds in bch2_btree_lost_data fs	-1	syz, C	done		3	867d	865d	25/29	841d	f108ddd467b5 bcachefs: Fix shift overflow in btree_lost_data()
kernel BUG in bch2_fs_release fs	-1				3	853d	858d	25/29	841d	d509cadc3a48 bcachefs: Fix debug assert
kernel panic: bch_dev->ref underflow, last put: bch2_trigger_alloc fs	2	syz, C	done		6	858d	869d	25/29	841d	9667214b30ef bcachefs: Fix ref in trans_mark_dev_sbs() error path
general protection fault in __bch2_insert_snapshot_whiteouts fs	8	syz, C	done		65	856d	868d	25/29	841d	6d48e61364ae bcachefs: Add missing guard in bch2_snapshot_has_children()
KASAN: slab-use-after-free Read in evict_inodes fs	19	syz, C	done		2	873d	869d	25/29	841d	d93ff5fa40b9 bcachefs: Fix race path in bch2_inode_insert()
KMSAN: uninit-value in bch2_dirent_invalid fs	7	syz, C			239	841d	869d	25/29	841d	2195b755ebd2 bcachefs: Fix unsafety in bch2_dirent_name_bytes()
kernel BUG in bch2_fs_recovery fs	-1	syz, C	done	done	161	873d	879d	25/29	841d	7ffec9ccdc6a bcachefs: don't free error pointers
UBSAN: shift-out-of-bounds in read_one_super fs	-1	syz, C	done		31	847d	876d	25/29	846d	71dac2482ad3 bcachefs: BCH_SB_LAYOUT_SIZE_BITS_MAX
WARNING: kmalloc bug in bch2_dev_buckets_resize fs	-1	syz, C			17	847d	878d	25/29	846d	db42549d402c bcachefs: Add a better limit for maximum number of buckets
WARNING in __virt_to_phys (3) fs	-1	syz, C			447	846d	879d	25/29	846d	7ffec9ccdc6a bcachefs: don't free error pointers
KMSAN: uninit-value in __bch2_write_index fs	7				1	879d	879d	25/29	846d	1267df40acb2 bcachefs: Initialize bch_write_op->failed in inline data path
BUG: unable to handle kernel paging request in bch2_fs_btree_key_cache_exit fs	8	syz, C			1002	846d	879d	25/29	846d	b30b70ad8bff bcachefs: Fix early error path in bch2_fs_btree_key_cache_exit()
UBSAN: shift-out-of-bounds in __bch2_bkey_invalid fs	-1	syz, C	done		6	851d	877d	25/29	846d	2bb9600d5d47 bcachefs: Guard against unknown k.k->type in __bkey_invalid()
KASAN: slab-out-of-bounds Read in bch2_sb_downgrade_to_text fs	17	syz, C	done		32	863d	877d	25/29	846d	692aa7a54b2b bcachefs: Fix sb_field_downgrade validation
KASAN: slab-out-of-bounds Read in bch2_sb_clean_to_text fs	17	syz, C	done		3	868d	877d	25/29	846d	f39055220f6f bcachefs: Add missing validation for superblock section clean
kernel BUG in bch2_alloc_v4_invalid fs	-1	syz, C	error		3	854d	877d	25/29	846d	6b8cbfc3db75 bcachefs: Fix assert in bch2_alloc_v4_invalid()
KASAN: slab-out-of-bounds Read in bch2_varint_decode_fast fs	17	syz, C			583	846d	879d	25/29	846d	4a8521b6bb81 bcachefs: Inodes need extra padding for varint_decode_fast()
UBSAN: shift-out-of-bounds in bch2_bkey_format_invalid fs	-1	syz, C			45	849d	874d	25/29	846d	61692c7812ab bcachefs: bch2_bkey_format_field_overflows()
UBSAN: shift-out-of-bounds in rewrite_old_nodes_pred fs	-1	syz, C	done		3	877d	877d	25/29	846d	0ec5b3b7ccfc bcachefs: Fix shift-by-64 in bformat_needs_redo()
kernel BUG in bch2_btree_node_read_done fs	-1	syz, C	error		5	877d	879d	25/29	846d	a2ddaf965f6a bcachefs: bucket_pos_to_bp_noerror()
INFO: rcu detected stall in rtnl_newlink (4) sctp fs	1	syz, C	error		9	867d	943d	25/29	860d	b1f532a3b1e6 batman-adv: Avoid infinite loop trying to resize local TT
KASAN: slab-use-after-free Read in __fput (2) fs	19	syz, C	done		6	884d	889d	25/29	860d	4efaa5acf0a1 epoll: be better about file lifetimes
general protection fault in __ep_remove fs	2	syz, C			1	905d	904d	25/29	860d	4efaa5acf0a1 epoll: be better about file lifetimes
WARNING: ODEBUG bug in bdev_super_lock (2) fs	-1	syz, C	done		3	898d	895d	25/29	860d	22650a99821d fs,block: yield devices early
kernel BUG at fs/inode.c:LINE! (2) fs	-1	syz, C	done	unreliable	322	875d	2223d	25/29	862d	319c15174757 epoll: take epitem list out of struct file
WARNING in stashed_dentry_prune (2) fs	-1	syz, C	done		54	887d	895d	25/29	864d	9d9539db8638 pidfs: remove config option
WARNING in __sk_destruct batman fs	-1				2	914d	947d	25/29	901d	2a750d6a5b36 rds: tcp: Fix use-after-free of net in reqsk_timer_handler().
WARNING in stashed_dentry_prune fs	-1	syz, C	done		20	931d	930d	25/29	901d	9d9539db8638 pidfs: remove config option
WARNING: ODEBUG bug in bdev_super_lock fs	-1	syz, C			3	905d	915d	25/29	902d	59a55a63c246 fs,block: get holder during claim
KASAN: slab-use-after-free Read in sys_io_cancel fs	19	syz, C	done		894	903d	941d	25/29	903d	28468cbed92e Revert "fs/aio: Make io_cancel() generate completions again"
BUG: sleeping function called from invalid context in __getblk_gfp fs	5	syz, C	error	done	3673	1007d	1401d	25/29	903d	f123dc86388c sysv: don't call sb_bread() with pointers_lock held
possible deadlock in reiserfs_dirty_inode fs	4	syz, C	done	done	519	973d	1401d	25/29	923d	6f861765464f fs: Block writes to mounted block devices
BUG: sleeping function called from invalid context in __bread_gfp fs	5	syz, C	error	done	359	999d	1400d	25/29	923d	6f861765464f fs: Block writes to mounted block devices
INFO: task hung in reiserfs_sync_fs fs	1	syz, C	error	done	22	999d	1378d	25/29	923d	6f861765464f fs: Block writes to mounted block devices
general protection fault in __fget_files (2) fs	2	syz, C	done	done	1	1006d	1002d	25/29	951d	6f861765464f fs: Block writes to mounted block devices
BUG: unable to handle kernel paging request in reiserfs_readdir_inode fs	19	syz, C	error	done	11	997d	1363d	25/29	951d	6f861765464f fs: Block writes to mounted block devices
kernel BUG in entry_points_to_object fs	-1	syz, C	done	done	21	998d	1042d	25/29	951d	6f861765464f fs: Block writes to mounted block devices
KASAN: vmalloc-out-of-bounds Read in cleanup_bitmap_list fs	17	syz, C	error	done	100	1001d	1432d	25/29	956d	6f861765464f fs: Block writes to mounted block devices
KASAN: use-after-free Read in set_de_name_and_namelen fs	19	syz, C	error	done	15	1003d	1404d	25/29	959d	6f861765464f fs: Block writes to mounted block devices
BUG: unable to handle kernel NULL pointer dereference in reiserfs_find_entry fs	19	syz, C	error	done	25	1006d	1443d	25/29	970d	6f861765464f fs: Block writes to mounted block devices
KASAN: use-after-free Read in reiserfs_get_unused_objectid fs	19	syz, C	inconclusive	done	3	1008d	1281d	25/29	972d	6f861765464f fs: Block writes to mounted block devices
possible deadlock in chown_common fs	4	syz, C	error	done	22	981d	1451d	25/29	973d	6f861765464f fs: Block writes to mounted block devices
kernel BUG in balance_leaf fs	-1	syz, C	error	done	16	1013d	1364d	25/29	973d	6f861765464f fs: Block writes to mounted block devices
possible deadlock in pipe_write fs	4	syz, C	inconclusive		181	976d	1654d	25/29	973d	055ca8355991 fs/pipe: Fix lockdep false-positive in watchqueue pipe_write()
kernel BUG in direntry_check_right fs	-1	syz, C	done	done	2	1012d	1055d	25/29	973d	6f861765464f fs: Block writes to mounted block devices
KASAN: slab-out-of-bounds Read in search_by_key (2) fs	17	syz, C			4435	995d	1426d	25/29	973d	dd8f87f21dc3 reiserfs: fix uninit-value in comp_keys
INFO: trying to register non-static key in debugfs_file_get fs	-1				289	1013d	1013d	25/29	980d	88ac06a9f938 Revert "debugfs: annotate debugfs handlers vs. removal with lockdep"
WARNING in debugfs_file_get fs	-1				239	1014d	1032d	25/29	980d	88ac06a9f938 Revert "debugfs: annotate debugfs handlers vs. removal with lockdep"
WARNING in pagemap_scan_pmd_entry fs	-1	syz, C	inconclusive		48	1027d	1049d	25/29	983d	0dff1b407def mm/pagemap: fix ioctl(PAGEMAP_SCAN) on vma check
WARNING in page_copy_sane fs mm	-1	syz, C	done		3	1111d	1108d	25/29	1014d	a08c7193e4f1 mm/filemap: remove hugetlb special casing in filemap.c
INFO: rcu detected stall in statfs fs	1				1	1144d	1144d	23/29	1083d	8c21ab1bae94 net/sched: fq_pie: avoid stalls in fq_pie_timer()
possible deadlock in inode_add_bytes fs	4	syz, C	done		124	1171d	1169d	23/29	1083d	509f006932de shmem: fix quota lock nesting in huge hole handling
INFO: task hung in pipe_release (4) fs	1	syz, C	done		51	1175d	1176d	23/29	1083d	0f71c9caf267 udp: Fix __ip_append_data()'s handling of MSG_SPLICE_PAGES
KASAN: slab-use-after-free Read in test_bdev_super_fc fs	19	syz, C	done		7	1150d	1153d	23/29	1083d	aca740cecbe5 fs: open block device after superblock creation
KMSAN: uninit-value in reiserfs_security_init fs	7				4169	1178d	1238d	23/29	1097d	d031f4e8b493 reiserfs: Initialize sec->length in reiserfs_security_init().
general protection fault in splice_to_socket fs	2	syz, C	done		4	1202d	1205d	23/29	1097d	ca2d49f77ce4 splice, net: Fix splice_to_socket() to handle pipe bufs larger than a page
KASAN: null-ptr-deref Write in get_block (2) fs	12	syz, C	error		11	1192d	1226d	23/29	1097d	ea2b62f30589 fs/sysv: Null check to prevent null-ptr-deref bug
KCSAN: data-race in inotify_handle_inode_event / inotify_remove_from_idr fs	6				363	1241d	1254d	22/29	1186d	c915d8f5918b inotify: Avoid reporting event with invalid wd
possible deadlock in do_writepages fs mm	4				15	1251d	1254d	22/29	1186d	00d873c17e29 ext4: avoid deadlock in fs reclaim with page writeback
KASAN: null-ptr-deref Read in ida_free (3) fs	11	syz, C	error		4	1284d	1280d	22/29	1209d	cb2239c198ad fs: drop peer group ids under namespace lock
KMSAN: uninit-value in ondemand_readahead fs mm	7	syz, C			221	1307d	1470d	22/29	1209d	3e35102666f8 fs/cramfs/inode.c: initialize file_ra_state
INFO: task hung in write_cache_pages (2) mm fs	1	syz, C	done		36	1237d	1308d	22/29	1209d	fb3592c41a44 migrate_pages: fix deadlock in batched migration
KMSAN: uninit-value in vfs_write fs	7	syz, C			3	1333d	1302d	22/29	1209d	2b4c99f7d9a5 can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write
KASAN: use-after-free Read in mas_next_nentry fs mm	19	syz, C	error	done	343	1422d	1616d	22/29	1313d	59f2f4b8a757 fs/userfaultfd: Fix maple tree iterator in userfaultfd_unregister()
linux-next boot error: kernel BUG in putname fs	-1				1	1506d	1506d	22/29	1313d	9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
kernel panic: corrupted stack end in tun_chr_close fs	2				1	1605d	1605d	22/29	1313d	b81d591386c3 riscv: Increase stack size under KASAN
INFO: rcu detected stall in sys_lsetxattr fs	1	syz, C	done		2	1625d	1624d	22/29	1313d	0014edaedfd8 fs: unset MNT_WRITE_HOLD on failure
upstream boot error: general protection fault in __proc_create fs	-1				1	1508d	1508d	22/29	1313d	9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
INFO: rcu detected stall in sys_setxattr (2) fs	1	syz, C	done		3	1625d	1624d	22/29	1313d	0014edaedfd8 fs: unset MNT_WRITE_HOLD on failure
general protection fault in __dentry_path (2) fs	8	syz, C	error		174	1618d	1629d	22/29	1313d	5c697c367a66 KVM: Initialize debugfs_dentry when a VM is created to avoid NULL deref
WARNING in mntput_no_expire (3) fs	-1	syz, C	inconclusive		29	1363d	1779d	22/29	1313d	a91714312eb1 percpu_ref_init(): clean ->percpu_count_ref on failure
kernel panic: stack is corrupted in ksys_write fs	2				1	1486d	1482d	22/29	1313d	b81d591386c3 riscv: Increase stack size under KASAN
KASAN: slab-out-of-bounds Read in __fscache_acquire_volume fs mm	17	syz, C	done	done	1	1493d	1492d	22/29	1313d	9f0933ac026f fscache: fix OOB Read in __fscache_acquire_volume
KASAN: use-after-free Read in do_sync_mmap_readahead mm fs	19				1	1592d	1588d	22/29	1313d	dcfa24ba6899 filemap: Cache the value of vm_flags
usb-testing boot error: general protection fault in rcu_core fs mm	-1				23	1487d	1506d	22/29	1313d	9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
KASAN: null-ptr-deref Write in io_file_get_normal io-uring fs	12	syz, C	done		107	1559d	1643d	22/29	1313d	d5361233e9ab io_uring: drop the old style inflight file tracking
usb-testing boot error: BUG: unable to handle kernel paging request in insert_header fs	-1				1	1492d	1492d	22/29	1313d	9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
memory leak in iovec_from_user fs io-uring	3	syz, C			1	1631d	1627d	22/29	1313d	323b190ba2de io_uring: free iovec if file assignment fails
KCSAN: data-race in do_epoll_wait / do_epoll_wait fs	6				83	1589d	1798d	22/29	1313d	d679ae94fdd5 list: fix a data-race around ep->rdllist
usb-testing boot error: general protection fault in __register_sysctl_table (2) fs	-1				1	1491d	1491d	22/29	1313d	9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
BUG: unable to handle kernel paging request in truncate_inode_partial_folio fs mm	8	syz, C	error		4	1515d	1554d	22/29	1313d	84ac013046cc secretmem: fix unhandled fault in truncate
kernel BUG in ntfs_read_inode_mount fs	-1				1	1717d	1716d	22/29	1313d	714fbf2647b1 ntfs: add sanity check on allocation size
kernel panic: corrupted stack end in lo_ioctl mm fs	2				4	1320d	1441d	22/29	1313d	b81d591386c3 riscv: Increase stack size under KASAN
general protection fault in legacy_parse_param fs	21	syz, C	done		20	1653d	1915d	22/29	1313d	ecff30575b5a LSM: general protection fault in legacy_parse_param
KASAN: use-after-free Read in io_rsrc_node_ref_zero fs	19	syz, C	done		3	1681d	1681d	22/29	1313d	80912cef18f1 io_uring: disallow modification of rsrc_data during quiesce
KASAN: use-after-free Read in add_wait_queue fs io-uring	19	syz, C	done	done	13	1646d	1652d	22/29	1313d	d89a4fac0fbc io_uring: fix assuming triggered poll waitqueue is the single poll
BUG: unable to handle kernel NULL pointer dereference in io_do_iopoll fs io-uring	10	syz, C	done		3	1597d	1596d	22/29	1313d	aa184e8671f0 io_uring: don't attempt to IOPOLL for MSG_RING requests
possible deadlock in snd_hrtimer_callback (2) fs	4	syz, C	inconclusive		582	1518d	1784d	22/29	1313d	96b097091c66 ALSA: pcm: Use deferred fasync helper 95cc637c1afd ALSA: timer: Use deferred fasync helper
BUG: unable to handle kernel paging request in eventfd_ctx_put fs	8	syz, C	done		7	1438d	1466d	22/29	1313d	7353633814f6 KVM: x86/xen: Fix eventfd error handling in kvm_xen_eventfd_assign()
KMSAN: uninit-value in tomoyo_path_chown fs	7	syz, C			13763	1470d	1471d	22/29	1313d	f52d74b190f8 open: always initialize ownership fields
KASAN: use-after-free Read in filp_close io-uring fs	19	syz, C	done		17	1355d	1584d	22/29	1313d	40a1926022d1 fix the breakage in close_fd_get_file() calling conventions change
usb-testing boot error: kernel BUG in putname fs	-1				1	1491d	1491d	22/29	1313d	9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
KASAN: use-after-free Read in mas_next_entry fs mm	19	syz, C	error		16	1424d	1438d	22/29	1313d	59f2f4b8a757 fs/userfaultfd: Fix maple tree iterator in userfaultfd_unregister()
UBSAN: array-index-out-of-bounds in io_submit_sqes fs	15				4	1582d	1583d	22/29	1313d	fcde59feb1af io_uring: add io_op_defs 'def' pointer in req init and issue
kernel panic: corrupted stack end in loop_control_ioctl fs	2				2	1435d	1520d	22/29	1313d	b81d591386c3 riscv: Increase stack size under KASAN
possible deadlock in snd_timer_notify (2) fs	4				151	1518d	1782d	22/29	1313d	95cc637c1afd ALSA: timer: Use deferred fasync helper
WARNING: still has locks held in io_ring_submit_lock fs io-uring	4	syz, C	done		3	1598d	1598d	22/29	1313d	e7637a492b9f io_uring: fix locking state for empty buffer group
KCSAN: data-race in call_rcu / rcu_gp_kthread fs	6				1	1905d	1905d	20/29	1666d	2431774f04d1 rcu: Mark accesses to rcu_state.n_force_qs
general protection fault in io_uring_register fs io-uring	2	syz	done		1	1846d	1842d	20/29	1666d	41d3a6bd1d37 io_uring: pin SQPOLL data before unlocking ring lock
KASAN: use-after-free Write in io_queue_worker_create fs io-uring	22	syz, C	unreliable		132	1749d	1759d	20/29	1666d	71a85387546e io-wq: check for wq exit after adding new worker task_work e47498afeca9 io-wq: remove spurious bit clear on task_work addition
possible deadlock in io_flush_timeouts fs	4				5	1767d	1768d	20/29	1666d	6af3f48bf615 io_uring: fix link traversal locking
INFO: task hung in io_uring_del_tctx_node io-uring fs	1	syz, C	unreliable		37	1668d	1832d	20/29	1666d	8bab4c09f24e io_uring: allow conditional reschedule for intensive iterators
KASAN: use-after-free Write in io_submit_one fs	22	syz, C	done		11	1753d	1791d	20/29	1666d	75feae73a280 block: fix single bio async DIO error handling
KCSAN: data-race in call_rcu / rcu_gp_fqs_loop fs	6				1	1802d	1800d	20/29	1666d	2431774f04d1 rcu: Mark accesses to rcu_state.n_force_qs
inconsistent lock state in io_poll_remove_all fs	4				63	1766d	1768d	20/29	1666d	6af3f48bf615 io_uring: fix link traversal locking
WARNING in inc_nlink (2) fs	-1	syz, C	inconclusive	done	21	1667d	2003d	20/29	1666d	97f044f690ba fuse: don't increment nlink in link()
possible deadlock in io_worker_cancel_cb io-uring fs	4	syz, C	done		9	1747d	1752d	20/29	1666d	d800c65c2d4e io-wq: drop wqe lock before creating new worker
INFO: task hung in io_uring_try_cancel_requests fs io-uring	1	syz, C	error		41	1756d	1797d	20/29	1666d	f75d118349be io_uring: harder fdinfo sq/cq ring iterating
WARNING in io_try_cancel_userdata (2) fs	-1				1	1773d	1769d	20/29	1666d	617a89484deb io_uring: fail cancellation for EXITING tasks
WARNING in signalfd_cleanup fs io-uring	-1	syz, C	done		201	1713d	1728d	20/29	1666d	791f3465c4af io_uring: fix UAF due to missing POLLFREE handling
INFO: rcu detected stall in newstat fs usb	1	syz, C	unreliable	done	4	1760d	1884d	20/29	1666d	476db72e5219 media: mceusb: return without resubmitting URB in case of -EPROTO error.
INFO: task hung in io_uring_cancel_generic (2) io-uring fs	1	syz, C	done		97	1750d	1777d	20/29	1666d	78a780602075 io_uring: ensure task_work gets run as part of cancelations
INFO: rcu detected stall in io_wqe_worker (2) fs io-uring	1	syz, C	done		2	1799d	1799d	20/29	1666d	c5e0321e43de Revert "devlink: Remove not-executed trap policer notifications"
possible deadlock in io_poll_double_wake (3) io-uring fs	4	syz, C	error	done	703	1722d	1995d	20/29	1666d	aa43477b0402 io_uring: poll rework
INFO: task hung in io_wqe_worker fs io-uring	1	syz, C	unreliable		3	1808d	1804d	20/29	1666d	1d5f5ea7cb7d io-wq: remove worker to owner tw dependency
KASAN: null-ptr-deref Read in filp_close (2) fs	19	syz, C			3	1905d	2014d	20/29	1784d	3b0462726e7e cgroup: verify that source is a string 9b5b872215fe file: fix close_range() for unshare+cloexec
WARNING in io_sq_thread_park fs	-1				1	2017d	2017d	20/29	1785d	a185f1db59f1 io_uring: do ctx sqd ejection in a clear context
possible deadlock in snd_timer_notify fs	4				119	1786d	1893d	20/29	1785d	f671a691e299 fcntl: fix potential deadlocks for &fown_struct.lock
memory leak in io_sqe_buffers_register fs	3	syz, C			2	1978d	1979d	20/29	1785d	bb6659cc0ad3 io_uring: Fix memory leak in io_sqe_buffers_register()
WARNING in io_link_timeout_fn fs io-uring	-1	syz, C	done		2	1966d	1966d	20/29	1785d	447c19f3b507 io_uring: fix ltout double free on completion race
KASAN: out-of-bounds Read in leaf_paste_entries fs	17	syz, C	inconclusive		8	1817d	2048d	20/29	1785d	13d257503c09 reiserfs: check directory items on read from disk
upstream boot error: kernel panic: VFS: Unable to mount root fs on unknown-block(0,0) fs	-1				235	1907d	1914d	20/29	1785d	c43ddbf97f46 scsi: virtio_scsi: Do not overwrite SCSI status
WARNING: suspicious RCU usage in count (2) fs mm	4				1	1957d	1957d	20/29	1785d	3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
general protection fault in io_commit_cqring (2) io-uring fs	12	syz, C	done		82	1997d	2011d	20/29	1785d	51520426f4bc io_uring: handle setup-failed ctx in kill_timeouts
INFO: task hung in io_sq_thread_park (2) fs io-uring	1	syz	done		2	1907d	1903d	20/29	1785d	46fee9ab02cb io_uring: remove double poll entry on arm failure
KCSAN: data-race in __io_uring_cancel / io_uring_try_cancel_requests fs	6				3	1950d	1952d	20/29	1785d	b16ef427adf3 io_uring: fix data race to avoid potential NULL-deref
WARNING in __percpu_ref_exit (2) fs	-1	syz, C	error	done	31	1786d	2024d	20/29	1785d	a298232ee6b9 io_uring: fix link timeout refs
INFO: task hung in __io_uring_cancel fs io-uring	1	syz, C	done		5	1923d	1989d	20/29	1785d	28090c133869 io_uring: fix work_exit sqpoll cancellations
possible deadlock in _snd_pcm_stream_lock_irqsave (2) fs	4				120	1786d	1893d	20/29	1785d	f671a691e299 fcntl: fix potential deadlocks for &fown_struct.lock
memory leak in create_io_worker io-uring fs	3	syz, C			5	1808d	1847d	20/29	1785d	66e70be72288 io-wq: fix memory leak in create_io_worker()
WARNING in io_wqe_enqueue io-uring fs	-1	syz, C	done		13	1943d	1943d	20/29	1785d	e6ab8991c5d0 io_uring: fix false WARN_ONCE
usb-testing boot error: kernel panic: VFS: Unable to mount root fs on unknown-block(0,0) fs	-1				27	1906d	1911d	20/29	1785d	c43ddbf97f46 scsi: virtio_scsi: Do not overwrite SCSI status
possible deadlock in snd_pcm_period_elapsed (2) fs	4				52	1786d	1893d	20/29	1785d	f671a691e299 fcntl: fix potential deadlocks for &fown_struct.lock
WARNING in io_poll_double_wake fs io-uring	-1	syz, C	done	done	1124	1887d	1988d	20/29	1785d	a890d01e4ee0 io_uring: fix poll requests leaking second poll entries
general protection fault in cdev_del (2) fs	11	syz, C	error		45	1919d	2196d	20/29	1785d	8a12f8836145 net: hso: fix null-ptr-deref during tty device unregistration 0a360e8b65d6 tty: n_gsm: check error while registering tty devices
INFO: task hung in io_wq_put_and_exit io-uring fs	1	syz, C	unreliable		628	1786d	1847d	20/29	1785d	3b33e3f4a6c0 io-wq: fix silly logic error in io_task_work_match()
possible deadlock in do_fcntl usb fs	4	syz, C	done		245	1861d	2193d	20/29	1785d	f671a691e299 fcntl: fix potential deadlocks for &fown_struct.lock
WARNING: suspicious RCU usage in kernel_execve fs mm	4				1	1922d	1922d	20/29	1785d	3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
WARNING: refcount bug in __io_queue_sqe fs	13				1	1987d	1978d	20/29	1785d	a298232ee6b9 io_uring: fix link timeout refs
BUG: unable to handle kernel NULL pointer dereference in kiocb_done fs io-uring	10	syz, C	unreliable	done	3	1853d	1852d	20/29	1785d	b8ce1b9d25cc io_uring: don't submit half-prepared drain request
possible deadlock in io_uring_register fs	4				16	1845d	1847d	20/29	1785d	009ad9f0c6ee io_uring: drop ctx->uring_lock before acquiring sqd->lock
WARNING in io_try_cancel_userdata fs io-uring	-1	syz	unreliable		4	1859d	1863d	20/29	1785d	dadebc350da2 io_uring: fix io_try_cancel_userdata race for iowq
KMSAN: kernel-infoleak in copy_page_to_iter (2) fs mm	9	syz, C			2099	1880d	2938d	20/29	1785d	ce3aba43599f ext4: fix kernel infoleak via ext4_extent_header
KASAN: use-after-free Read in io_worker_handle_work fs	19				2	1929d	1960d	20/29	1785d	3743c1723bfc io-wq: Fix UAF when wakeup wqe in hash waitqueue
WARNING: suspicious RCU usage in proc_alloc_inode fs	4				1	1927d	1927d	20/29	1785d	3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
WARNING in mntput_no_expire (2) fs	-1	syz, C	done		68	1793d	2007d	20/29	1785d	7d01ef7585c0 Make sure nd->path.mnt and nd->path.dentry are always valid pointers
WARNING: suspicious RCU usage in __fput fs	4				1	1953d	1953d	20/29	1785d	3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
general protection fault in __io_file_supports_nowait fs io-uring	2	syz, C	done	done	13	1850d	1855d	20/29	1785d	c6d3d9cbd659 io_uring: fix queueing half-created requests
KASAN: use-after-free Read in bdev_evict_inode fs	19	syz, C	unreliable		1305	1869d	1872d	20/29	1785d	889c05cc5834 block: ensure the bdi is freed after inode_detach_wb
WARNING in pvr2_i2c_core_done usb fs	-1	syz, C	error		5780	1906d	2561d	20/29	1785d	f8194e5e63fd media: pvrusb2: fix warning in pvr2_i2c_core_done
INFO: task hung in io_uring_cancel_generic io-uring fs	1	syz, C	unreliable		151	1785d	1906d	20/29	1785d	1b48773f9fd0 io_uring: fix io_drain_req()
WARNING: suspicious RCU usage in getname_flags fs	4				2	1914d	2005d	20/29	1785d	3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
KASAN: use-after-free Read in __d_alloc (2) fs	19	syz, C	unreliable		6774	1827d	1870d	20/29	1785d	0766ec82e5fb namei: Fix use after free in kern_path_locked
possible deadlock in f_getown fs	4	syz, C	done	done	164	1863d	2193d	20/29	1785d	f671a691e299 fcntl: fix potential deadlocks for &fown_struct.lock
possible deadlock in snd_hrtimer_callback fs	4	syz, C	done		571	1786d	1893d	20/29	1785d	f671a691e299 fcntl: fix potential deadlocks for &fown_struct.lock
possible deadlock in io_sq_thread_finish fs	4	syz, C	unreliable	done	4	2030d	2032d	20/29	1785d	f4e61f0c9add x86/kvm: Fix broken irq restoration in kvm_wait
WARNING: suspicious RCU usage in __alloc_file fs	4				1	1972d	1972d	20/29	1785d	3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
WARNING in io_rsrc_node_switch io-uring fs	-1	syz, C	done		174	1970d	1979d	20/29	1785d	47b228ce6f66 io_uring: fix unchecked error in switch_start()
WARNING in io_wq_submit_work (2) io-uring fs	-1	syz, C	done	done	52	1844d	1847d	20/29	1785d	713b9825a4c4 io-wq: fix cancellation on create-worker failure
KASAN: null-ptr-deref Write in io_uring_cancel_sqpoll fs	12				170	1786d	2041d	20/29	1785d	6d042ffb598e io_uring: Check current->io_uring in io_uring_cancel_sqpoll
KASAN: stack-out-of-bounds Read in iov_iter_revert fs io-uring	17	syz, C	error		14	1858d	1874d	20/29	1785d	89c2b3b74918 io_uring: reexpand under-reexpanded iters
WARNING in internal_create_group fs	-1	syz, C	inconclusive		20	1850d	1903d	20/29	1785d	b1a811633f73 block: nbd: add sanity check for first_minor
kernel BUG in remove_inode_hugepages fs mm	-1	syz, C	unreliable		3	1870d	1870d	20/29	1785d	c7b1850dfb41 hugetlb: don't pass page cache pages to restore_reserve_on_error
WARNING in io_wq_put fs io-uring	-1	syz, C	unreliable		3	2019d	2030d	20/29	1785d	f5d2d23bf0d9 io-wq: fix race around pending work on teardown
WARNING in io_uring_setup (2) fs io-uring	-1	syz, C	done		40	1970d	1979d	20/29	1785d	47b228ce6f66 io_uring: fix unchecked error in switch_start()
INFO: task can't die in d_alloc_parallel fs	1				2	2094d	2110d	20/29	1947d	0ce20dd84089 mm: add Kernel Electric-Fence infrastructure
KASAN: use-after-free Read in idr_for_each (2) io-uring fs	19	syz, C	error	done	86	2023d	2185d	20/29	1989d	61cf93700fe6 io_uring: Convert personality_idr to XArray
INFO: task hung in io_uring_cancel_task_requests fs io-uring	1	syz, C			305	2023d	2058d	20/29	1999d	34343786ecc5 io_uring: unpark SQPOLL thread for cancelation
KASAN: use-after-free Read in tctx_task_work fs	19				2	2042d	2039d	20/29	1999d	2c32395d8111 io_uring: fix __tctx_task_work() ctx race
KASAN: invalid-free in io_req_caches_free fs	24				5	2043d	2045d	20/29	1999d	8e5c66c485a8 io_uring: clear request count when freeing caches
INFO: task hung in io_sq_thread_park fs io-uring	1	syz, C	unreliable		263	2034d	2039d	20/29	1999d	3ebba796fa25 io_uring: ensure that SQPOLL thread is started for exit
memory leak in io_submit_sqes (2) fs io-uring	3	syz, C			1	2037d	2036d	20/29	1999d	f01272541d2c io-wq: ensure all pending work is canceled on exit
possible deadlock in io_poll_double_wake (2) io-uring fs	4	syz, C	error	error	431	1999d	2192d	20/29	1999d	1c3b3e6527e5 io_uring: ignore double poll add on the same waitqueue head
inconsistent lock state in io_dismantle_req fs io-uring	4	syz, C			2	2067d	2066d	20/29	1999d	9ae1f8dd372e io_uring: fix inconsistent lock state
general protection fault in io_sqe_files_unregister fs	2				2	2091d	2089d	19/29	2030d	3e2224c5867f io_uring: Fix return value from alloc_fixed_file_ref_node
kernel BUG at mm/page-writeback.c:LINE! fs mm	-1				1	2099d	2095d	19/29	2030d	c2407cf7d22d mm: make wait_on_page_writeback() wait for multiple pending writebacks
WARNING in io_uring_flush fs io-uring	-1	syz, C	unreliable		10	2074d	2083d	19/29	2030d	4325cb498cb7 io_uring: fix uring_flush in exit_files() warning
KASAN: use-after-free Read in search_by_entry_key fs	19	syz, C	done		3	2179d	2182d	19/29	2030d	d24396c5290b reiserfs: add check for an invalid ih_entry_count
WARNING in percpu_ref_kill_and_confirm (2) fs	-1	syz, C	done		71	2105d	2113d	19/29	2030d	9faadcc8abe4 io_uring: fix double io_uring free
WARNING in io_ring_ctx_wait_and_kill fs	-1	syz, C	done		9	2084d	2085d	19/29	2030d	06585c497b55 io_uring: do sqo disable on install_fd error
INFO: task hung in __io_uring_files_cancel io-uring fs	1	syz, C	done		30	2071d	2138d	19/29	2030d	bee749b187ac io_uring: fix files cancellation
KASAN: use-after-free Read in reiserfs_fill_super fs	19	syz, C	error	done	2	2124d	2122d	19/29	2030d	d24396c5290b reiserfs: add check for an invalid ih_entry_count
BUG: unable to handle kernel paging request in percpu_ref_exit fs	8	syz, C	done		3	2091d	2089d	19/29	2030d	3e2224c5867f io_uring: Fix return value from alloc_fixed_file_ref_node
INFO: task can't die in io_sq_thread_stop fs	1				1	2149d	2144d	19/29	2030d	65b2b213484a io_uring: check kthread stopped flag when sq thread is unparked
general protection fault in io_disable_sqo_submit fs io-uring	2	syz, C	done		124	2081d	2085d	19/29	2030d	b4411616c26f io_uring: fix null-deref in io_disable_sqo_submit
WARNING in io_uring_cancel_task_requests io-uring fs	-1	syz	done		69	2066d	2070d	19/29	2030d	70b2c60d3797 io_uring: fix sqo ownership false positive warning
inconsistent lock state in io_file_data_ref_zero fs	4	syz, C	done		7152	2112d	2136d	19/29	2030d	ac0648a56c1f io_uring: use bottom half safe lock for fixed file data
BUG: corrupted list in io_file_get fs io-uring	8	syz, C	done		3	2070d	2070d	19/29	2030d	f609cbb8911e io_uring: fix list corruption for splice file_get
WARNING in io_wq_submit_work fs	-1				4	2077d	2081d	19/29	2030d	ca70f00bed6c io_uring: fix cancellation taking mutex while TASK_UNINTERRUPTIBLE
possible deadlock in send_sigio (2) fs	4	syz, C	done	done	40	2099d	2211d	19/29	2030d	8d1ddb5e7937 fcntl: Fix potential deadlock in send_sig{io, urg}()
kernel BUG at fs/reiserfs/prints.c:LINE! fs	-1	syz, C	done	done	5	2121d	2199d	19/29	2030d	d24396c5290b reiserfs: add check for an invalid ih_entry_count
memory leak in generic_parse_monolithic fs	3	syz, C			11	2120d	2146d	19/29	2030d	4cb682964706 afs: Fix memory leak when mounting with multiple source parameters
KASAN: slab-out-of-bounds Write in record_print_text fs	21	syz, C	done	unreliable	17	2071d	2073d	19/29	2030d	08d60e599954 printk: fix string termination for record_print_text()
BUG: unable to handle kernel NULL pointer dereference in __lookup_slow fs	10	syz, C	inconclusive	done	3	2052d	2193d	19/29	2030d	d24396c5290b reiserfs: add check for an invalid ih_entry_count
possible deadlock in send_sigurg (2) fs	4	syz, C	done		25	2117d	2167d	19/29	2030d	8d1ddb5e7937 fcntl: Fix potential deadlock in send_sig{io, urg}()
possible deadlock in proc_pid_syscall (2) fs	4				2	2214d	2224d	19/29	2030d	f7cfd871ae0c exec: Transform exec_update_mutex into a rw_semaphore 78af4dc949da perf: Break deadlock involving exec_update_mutex
WARNING in io_disable_sqo_submit fs	-1	syz, C	done		9	2075d	2083d	19/29	2030d	6b393a1ff174 io_uring: fix false positive sqo warning on flush
KASAN: null-ptr-deref Read in filp_close fs	11	syz, C	done		9	2110d	2112d	19/29	2030d	fec8a6a69103 close_range: unshare all fds for CLOSE_RANGE_UNSHARE | CLOSE_RANGE_CLOEXEC 6abc20f8f879 selftests/core: add regression test for CLOSE_RANGE_UNSHARE | CLOSE_RANGE_CLOEXEC
possible deadlock in io_timeout_fn (2) fs	4				4	2091d	2098d	19/29	2030d	4aa84f2ffa81 io_uring: dont kill fasync under completion_lock
KASAN: null-ptr-deref Write in kthread_use_mm io-uring fs	12	syz, C	done		2	2158d	2157d	15/29	2139d	4b70cf9dea4c io_uring: ensure consistent view of original task ->mm from SQPOLL
general protection fault in io_uring_show_cred fs	2	syz, C	done		4	2155d	2154d	15/29	2139d	6b47ab81c9a9 io_uring: use correct pointer for io_uring_show_cred()
KASAN: use-after-free Write in io_submit_sqes fs io-uring	22	syz, C	error		2	2157d	2156d	15/29	2139d	cb8a8ae31074 io_uring: drop req/tctx io_identity separately
INFO: task can't die in corrupted fs	1	syz, C	done		4	2157d	2183d	15/29	2143d	86f33603f8c5 f2fs: handle errors of f2fs_get_meta_page_nofail
WARNING in unlock_new_inode fs	-1	syz, C	done		76	2180d	3085d	15/29	2143d	8859bf2b1278 reiserfs: only call unlock_new_inode() if I_NEW
memory leak in reiserfs_parse_options fs	3	syz, C			4	2208d	2403d	15/29	2143d	e9d4709fcc26 reiserfs: Fix memory leak in reiserfs_parse_options()
general protection fault in percpu_ref_exit fs	2	syz, C	done		3	2178d	2182d	15/29	2143d	7ea6bf2e6c40 percpu_ref: don't refer to ref->data if it isn't allocated
KASAN: use-after-free Read in fscache_alloc_cookie fs	19	syz	done		1	2196d	2195d	15/29	2143d	1d0e850a49a5 afs: Fix cell removal
KASAN: use-after-free Read in io_wqe_worker fs io-uring	19	syz, C	error		2	2193d	2194d	15/29	2143d	c4068bf898dd io-wq: fix use-after-free in io_wq_worker_running
WARNING: suspicious RCU usage in io_init_identity fs	4				1536	2170d	2174d	15/29	2143d	1e6fa5216a0e io_uring: COW io_identity on mismatch
inconsistent lock state in xa_destroy io-uring fs	4	syz, C			755	2181d	2182d	15/29	2143d	ca6484cd308a io_uring: no need to call xa_destroy() on empty xarray
INFO: task hung in io_uring_flush io-uring fs	1	syz, C	done	done	11	2234d	2241d	15/29	2143d	b7ddce3cbf01 io_uring: fix cancel of deferred reqs with ->files
general protection fault in open_xa_dir fs	2	syz, C	done		3	2179d	2190d	15/29	2143d	c2bb80b8bdd0 reiserfs: Fix oops during mount
KMSAN: uninit-value in search_by_key fs	7				1549	2148d	2199d	15/29	2143d	4443390e08d3 reiserfs: Initialize inode keys properly
KASAN: use-after-free Write in io_wq_worker_running io-uring fs	22	syz, C	error		14	2186d	2213d	15/29	2143d	c4068bf898dd io-wq: fix use-after-free in io_wq_worker_running
KMSAN: uninit-value in __fget_light (2) fs	7	syz, C			18	2160d	2170d	15/29	2143d	d5e4d0a5e692 inet_diag: validate INET_DIAG_REQ_PROTOCOL attribute
possible deadlock in mnt_want_write fs	4	syz, C	done	done	662	2183d	2990d	15/29	2143d	146d62e5a586 ovl: detect overlapping layers
general protection fault in __do_sys_io_uring_register fs	2				80	2170d	2176d	15/29	2143d	55cbc2564ab2 io_uring: fix error path cleanup in io_sqe_files_register()
inconsistent lock state in io_uring_add_task_file fs	4				1	2182d	2182d	15/29	2143d	ce765372bc44 io_uring: Fix use of XArray in __io_uring_files_cancel
KMSAN: uninit-value in qtree_entry_unused fs	7				396	2148d	2199d	15/29	2143d	3d3dc274ce73 quota: clear padding in v2r1_mem2diskdqb()
general protection fault in io_poll_double_wake (2) fs io-uring	2	syz, C	error		2	2193d	2193d	15/29	2169d	8706e04ed7d6 io_uring: always delete double poll wait entry on match
possible deadlock in io_write fs	4				2	2190d	2193d	15/29	2169d	fad8e0de4426 io_uring: fix potential ABBA deadlock in ->show_fdinfo()
memory leak in do_eventfd fs	3	syz, C			2	2227d	2323d	15/29	2181d	f65886606c2d KVM: fix memory leak in kvm_io_bus_unregister_dev()
upstream boot error: KASAN: global-out-of-bounds Read in internal_create_group fs	-1				273	2227d	2240d	15/29	2196d	62c789270c0b libnvdimm: KASAN: global-out-of-bounds Read in internal_create_group
possible deadlock in __io_queue_deferred fs io-uring	4	syz, C	error		1	2243d	2241d	15/29	2204d	7271ef3a93a8 io_uring: fix recursive completion locking on oveflow flush
WARNING in __kernel_read fs	-1	syz, C	done		60	2211d	2270d	15/29	2204d	a39c46067c84 net/9p: validate fds in p9_fd_open
general protection fault in cdev_del usb fs	2	syz, C			315	2213d	2681d	15/29	2204d	e911e99a0770 usb: hso: check for return value in hso_serial_common_create()
BUG: unable to handle kernel NULL pointer dereference in loop_rw_iter io-uring fs	10	syz, C	done		24	2230d	2241d	15/29	2204d	2dd2111d0d38 io_uring: Fix NULL pointer dereference in loop_rw_iter()
KASAN: use-after-free Read in io_async_task_func io-uring fs	19	syz	error		1	2241d	2241d	15/29	2204d	6d816e088c35 io_uring: hold 'ctx' reference around task_work queue + execute
WARNING in drop_nlink fs	-1	syz, C	done	error	1	2351d	2347d	15/29	2204d	facb03dddec0 fs/minix: don't allow getting deleted inodes
KASAN: use-after-free Read in ceph_mdsc_destroy ceph fs	19				4	2244d	2260d	15/29	2204d	a7caa88f8b72 ceph: fix use-after-free for fsc->mdsc
KASAN: use-after-free Read in path_init (2) fs	19	syz, C	done		29	2238d	2240d	15/29	2204d	24fb33d40d60 fix breakage in do_rmdir()
WARNING in __kernel_write fs	-1	syz, C	done		522	2253d	2273d	15/29	2204d	a39c46067c84 net/9p: validate fds in p9_fd_open
KMSAN: uninit-value in get_block fs	7	syz, C			13	2320d	2323d	15/29	2204d	270ef41094e9 fs/minix: reject too-large maximum file size
KASAN: null-ptr-deref Write in get_block fs	12	syz, C	done		101	2270d	2383d	15/29	2204d	da27e0a0e5f6 fs/minix: check return value of sb_getblk()
memory leak in io_submit_sqes fs io-uring	3	syz, C			2	2221d	2240d	15/29	2204d	a36da65c4656 io_uring: fail poll arm on queue proc failure
KASAN: use-after-free Write in get_block fs	22	syz, C	inconclusive	inconclusive	12	2286d	2336d	15/29	2204d	270ef41094e9 fs/minix: reject too-large maximum file size
general protection fault in io_poll_double_wake io-uring fs	2	syz, C	done		8	2208d	2236d	15/29	2204d	d4e7cd36a90e io_uring: sanitize double poll handling
KASAN: use-after-free Read in lockref_get fs	19				7	2308d	2408d	15/29	2204d	bad8e64fb19d blktrace: fix debugfs use after free
KASAN: use-after-free Read in io_uring_setup (2) fs	19				1	2252d	2252d	15/29	2204d	d1719f70d0a5 io_uring: don't touch 'ctx' after installing file descriptor
possible deadlock in io_timeout_fn io-uring fs	4	syz, C	done		4	2239d	2241d	15/29	2204d	51a4cc112c7a io_uring: defer file table grabbing request cleanup for locked requests
possible deadlock in lock_trace (3) fs	4	syz	inconclusive	done	69	2372d	2506d	15/29	2233d	2db9dbf71bf9 proc: Use new infrastructure to fix deadlocks in execve
possible deadlock in do_io_accounting (3) fs	4	syz, C	inconclusive	done	39	2379d	2469d	15/29	2233d	76518d379885 proc: io_accounting: Use new infrastructure to fix deadlocks in execve
possible deadlock in proc_pid_personality fs	4	syz	inconclusive	done	3	2388d	2398d	15/29	2233d	2db9dbf71bf9 proc: Use new infrastructure to fix deadlocks in execve
WARNING: bad unlock balance in rcu_lock_release fs	4	syz, C	inconclusive	done	1433	2374d	2655d	15/29	2233d	10476e630422 locking/lockdep: Fix bad recursion pattern
WARNING: bad unlock balance in rcu_core fs	4	syz, C	inconclusive	done	3578	2370d	2725d	15/29	2233d	10476e630422 locking/lockdep: Fix bad recursion pattern
KASAN: use-after-free Write in fsnotify_detach_connector_from_object fs	22	syz, C	done		4	2296d	2300d	15/29	2265d	ef1548adada5 proc: Use new_inode not new_inode_pseudo
BUG: unable to handle kernel NULL pointer dereference in number fs	10				1	2295d	2291d	15/29	2265d	3021e69219e2 kcov: check kcov_softirq in kcov_remote_stop()
INFO: task hung in locks_remove_posix fs input usb	1	syz			2231	2300d	2323d	15/29	2265d	187b96db5ca7 x86/unwind/orc: Fix unwind_get_return_address_ptr() for inactive tasks
linux-next boot error: general protection fault in tomoyo_get_local_path fs	-1				18	2322d	2328d	15/29	2265d	9d78edeaec75 proc: proc_pid_ns takes super_block as an argument
general protection fault in proc_kill_sb fs	2				8	2291d	2302d	15/29	2265d	058f2e4da79b proc: s_fs_info may be NULL when proc_kill_sb is called
INFO: trying to register non-static key in io_cqring_ev_posted (3) fs	-1	syz, C	done		3	2324d	2327d	15/29	2265d	583863ed9181 io_uring: initialize ctx->sqo_wait earlier
BUG: unable to handle kernel NULL pointer dereference in unlock_page fs mm	10				1	2297d	2297d	15/29	2265d	3021e69219e2 kcov: check kcov_softirq in kcov_remote_stop()
general protection fault in start_creating fs	2	syz, C	done		106	2287d	2317d	15/29	2265d	d56f5136b010 KVM: let kvm_destroy_vm_debugfs clean up vCPU debugfs directories
KCSAN: data-race in __rcu_read_unlock / sync_rcu_exp_select_node_cpus (2) fs mm	6				9	2333d	2500d	15/29	2265d	314eeb43e5f2 rcu: Add *_ONCE() and data_race() to rcu_node ->exp_tasks plus locking
KASAN: use-after-free Read in blkdev_direct_IO fs	19	syz, C	done	error	8	2610d	2615d	15/29	2282d	0eb6ddfb865c block: Fix __blkdev_direct_IO() for bio fragments
KASAN: use-after-free Read in blkdev_bio_end_io fs	19	syz, C	done	error	13	2600d	2612d	15/29	2282d	7b6620d7db56 block: remove REQ_NOWAIT_INLINE
KASAN: use-after-free Read in dput (2) fs	19	syz	done		4	2358d	2358d	15/29	2294d	4fa3b1c41737 proc: Handle umounts cleanly
INFO: rcu detected stall in io_uring_release fs	1	syz			15	2314d	2355d	15/29	2294d	3fd44c86711f io_uring: use cond_resched() in io_ring_ctx_wait_and_kill()
possible deadlock in io_submit_one (3) fs	4	syz	done		45	2363d	2371d	15/29	2333d	63f818f46af9 proc: Use a dedicated lock in struct pid
INFO: task hung in io_queue_file_removal fs	1	syz, C	done		16	2376d	2384d	15/29	2333d	4afdb733b160 io-uring: drop completion when removing file
KMSAN: uninit-value in simple_attr_read fs	7	syz, C			6	2336d	2406d	15/29	2333d	a65cab7d7f05 libfs: fix infoleak in simple_attr_read()
possible deadlock in send_sigurg fs	4	syz, C	done		65	2357d	2371d	15/29	2333d	63f818f46af9 proc: Use a dedicated lock in struct pid
INFO: trying to register non-static key in __io_uring_register fs	-1	syz, C	done		39	2365d	2366d	15/29	2333d	f7fe9346869a io_uring: initialize fixed_file_data lock
INFO: trying to register non-static key in io_cqring_ev_posted (2) fs	-1	syz, C	done		42	2336d	2374d	15/29	2333d	10bea96dcc13 io_uring: add missing finish_wait() in io_sq_thread()
possible deadlock in send_sigio fs	4	syz, C	done		7	2361d	2370d	15/29	2333d	63f818f46af9 proc: Use a dedicated lock in struct pid
memory leak in fasync_helper fs	3	syz, C			14	2427d	2488d	15/29	2358d	67f562e3e147 net/smc: transfer fasync_list in case of fallback
BUG: sleeping function called from invalid context in __kmalloc ceph fs	5	syz, C	done		5	2420d	2426d	15/29	2358d	b27a939e8376 ceph: canonicalize server path in place
WARNING: ODEBUG bug in io_sqe_files_unregister fs	-1	syz, C	done		964	2428d	2475d	15/29	2393d	2faf852d1be8 io_uring: cleanup fixed file data table references
memory leak in reiserfs_fill_super fs	3	syz, C			20	2434d	2484d	15/29	2415d	5474ca7da6f3 reiserfs: Fix memory leak of journal device string
KCSAN: data-race in __rcu_read_unlock / sync_rcu_exp_select_cpus fs mm	6				7	2427d	2521d	15/29	2415d	c51f83c315c3 rcu: Use READ_ONCE() for ->expmask in rcu_read_unlock_special()
kernel BUG at fs/namei.c:LINE! fs	-1				3593	2451d	2451d	15/29	2415d	c64cd6e34ea3 reimplement path_mountpoint() with less magic
BUG: corrupted list in __dentry_kill (2) fs	8	syz, C	done		4945	2484d	2484d	15/29	2415d	a3d1e7eb5abe simple_recursive_removal(): kernel-side rm -rf for ramfs-style filesystems
WARNING in do_dentry_open (2) fs	-1	syz, C	done		17	2435d	2432d	15/29	2415d	a37f4958f7b6 debugfs: Return -EPERM when locked down
KASAN: use-after-free Write in percpu_ref_switch_to_percpu fs	22				1	2430d	2429d	15/29	2415d	2faf852d1be8 io_uring: cleanup fixed file data table references
WARNING: refcount bug in chrdev_open fs	13	syz, C	inconclusive	done	15	2495d	2597d	15/29	2415d	68faa679b8be chardev: Avoid potential use-after-free in 'chrdev_open()'
linux-next boot error: general protection fault in do_mount_root fs	-1				9	2479d	2479d	15/29	2420d	7de7de7ca0ae Fix root mounting with no mount options
upstream boot error: general protection fault in do_mount_root fs	-1				12	2479d	2480d	15/29	2420d	7de7de7ca0ae Fix root mounting with no mount options
kernel BUG at fs/pipe.c:LINE! fs	-1	syz, C	done		693	2487d	2494d	15/29	2457d	8c7b8c34ae95 pipe: Remove assertion from pipe_poll()
general protection fault in io_commit_cqring fs	2	syz, C	done		3	2512d	2512d	15/29	2483d	15dff286d0e0 io_uring: check for validity of ->rings in teardown
INFO: task hung in io_wq_destroy fs	1	syz, C	done		20	2497d	2528d	15/29	2483d	b60fda6000a9 io-wq: wait for io_wq_create() to setup necessary workers
INFO: trying to register non-static key in io_cqring_ev_posted fs	-1	syz, C	done		6	2498d	2510d	15/29	2483d	eb065d301e8c io_uring: io_allocate_scq_urings() should return a sane state
WARNING in iov_iter_pipe fs	-1	syz, C	done		1117	2501d	2518d	15/29	2483d	419e9c38aa07 iomap: Fix pipe page leakage during splicing
BUG: unable to handle kernel paging request in io_wq_cancel_all fs	8	syz, C	done		2	2527d	2527d	15/29	2483d	975c99a57096 io_uring: io_wq_create() returns an error pointer, not NULL
KASAN: invalid-free in io_sqe_files_unregister fs	24	syz, C	done		3	2515d	2515d	15/29	2483d	46568e9be70f io_uring: fix error clear of ->file_table in io_sqe_files_register()
KASAN: use-after-free Read in do_mount fs	19	syz	done		6	2541d	2549d	14/29	2496d	0ecee6699064 fs/namespace.c: fix use-after-free of mount in mnt_warn_timestamp_expiry()
KMSAN: use-after-free in hidraw_ioctl fs lsm	18				1	2548d	2548d	13/29	2499d	416dacb819f5 HID: hidraw: Fix invalid read in hidraw_ioctl
KASAN: use-after-free Read in io_uring_setup fs	19	syz	error		1	2529d	2529d	13/29	2503d	044c1ab399af io_uring: don't touch ctx in setup after ring fd install
KASAN: use-after-free Read in ep_scan_ready_list fs	19	syz, C		done	39	2967d	3002d	13/29	2505d	430ac66eb4c5 net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree()
WARNING in mark_lock (2) fs	-1				14	2535d	2562d	13/29	2529d	8e00c4e9dd85 writeback: fix use-after-free in finish_writeback_work()
general protection fault in finish_writeback_work fs	2				10	2538d	2563d	13/29	2529d	8e00c4e9dd85 writeback: fix use-after-free in finish_writeback_work()
INFO: trying to register non-static key in finish_writeback_work fs	-1	syz	error		1	2564d	2562d	13/29	2529d	8e00c4e9dd85 writeback: fix use-after-free in finish_writeback_work()
INFO: task syz-executor can't die for more than 143 seconds. fs	-1	syz, C	done		61	2558d	2666d	13/29	2541d	8619e5bdeee8 /dev/mem: Bail out upon SIGKILL. 7c3a6aedcd6a kexec: bail out upon SIGKILL when allocating memory. 8f9e86ee7959 staging: android: ion: Bail out upon SIGKILL when allocating memory.
WARNING in kfree fs	-1	syz, C	done		2	2588d	2587d	13/29	2541d	43ce4c1feadb vfs: Add a single-or-reconfig keying to vfs_get_super()
WARNING in __blkdev_put (2) fs	-1	syz			3082	2605d	2612d	12/29	2580d	e91455bad5cf bdev: Fixup error handling in blkdev_get()
kernel panic: corrupted stack end in dput fs	2	syz	done		1	2648d	2647d	12/29	2590d	95fa145479fb bpf: sockmap/tls, close can race with map free
INFO: task hung in io_uring_release fs	1				24	2637d	2654d	12/29	2612d	a4c0b3decb33 io_uring: fix io_sq_thread_stop running in front of io_sq_thread
general protection fault in do_move_mount (2) fs	2	syz	done		7	2652d	2660d	12/29	2619d	570d7a98e7d6 vfs: move_mount: reject moving kernel internal mounts
possible deadlock in io_submit_one fs	4	syz, C	done		1779	2623d	2794d	12/29	2619d	cbcfa130a911 fs/userfaultfd.c: disable irqs for fault_pending and event locks
possible deadlock in userfaultfd_read (2) fs mm	4				228	2642d	2741d	12/29	2619d	cbcfa130a911 fs/userfaultfd.c: disable irqs for fault_pending and event locks
WARNING in notify_change fs	-1	syz, C			566	2706d	3096d	12/29	2624d	f69e749a4935 Abort file_remove_privs() for non-reg. files
WARNING in fanotify_handle_event fs	-1	syz, C	done		5	2661d	2660d	12/29	2638d	c285a2f01d69 fanotify: update connector fsid cache on add mark
BUG: Dentry still in use [unmount of tmpfs tmpfs] fs	-1				2	2670d	2670d	12/29	2638d	1b0b9cc8d379 vfs: fsmount: add missing mntget()
BUG: Dentry still in use [unmount of hugetlbfs hugetlbfs] fs	-1	syz, C	done		3	2661d	2661d	12/29	2638d	1b0b9cc8d379 vfs: fsmount: add missing mntget()
possible deadlock in aio_poll fs	4	syz, C			5041	2797d	2942d	12/29	2649d	ae62c16e105a userfaultfd: disable irqs when taking the waitqueue lock
INFO: task hung in __ia32_sys_io_uring_enter fs	1				2	2724d	2725d	12/29	2655d	b19062a56726 io_uring: fix possible deadlock between io_uring_{enter,register}
INFO: task hung in __x64_sys_io_uring_enter fs	1				12	2718d	2725d	12/29	2655d	b19062a56726 io_uring: fix possible deadlock between io_uring_{enter,register}
INFO: task hung in __get_super fs	1	syz, C			80	2659d	3103d	12/29	2659d	33ec3e53e7b1 loop: Don't change loop device under exclusive opener
general protection fault in do_move_mount fs	2				3	2701d	2701d	12/29	2664d	05883eee857e do_move_mount(): fix an unsafe use of is_anon_ns()
general protection fault in load_elf_binary fs mm	2	syz, C	done		15	2737d	2741d	12/29	2664d	cc338010a233 fs/binfmt_elf.c: free PT_INTERP filename ASAP
kernel BUG at mm/slab.c:LINE! (4) fs	-1				12	2676d	2744d	12/29	2664d	4f661542a402 tcp: fix zerocopy and notsent_lowat issues
general protection fault in put_fs_context fs	2	syz, C			9	2891d	2891d	12/29	2667d	8d0347f6c3a9 convert do_remount_sb() to fs_context
INFO: task hung in __io_uring_register fs	1	syz, C	done		51	2718d	2726d	12/29	2682d	b19062a56726 io_uring: fix possible deadlock between io_uring_{enter,register}
general protection fault in fanotify_handle_event fs	2	syz	done		5	2721d	2721d	12/29	2682d	b1da6a51871c fsnotify: Fix NULL ptr deref in fanotify_get_fsid()
BUG: unable to handle kernel paging request in do_mount fs	8	syz, C			194	2893d	2931d	12/29	2689d	3e1aeb00e6d1 vfs: Implement a filesystem superblock creation/configuration context
possible deadlock in seq_read fs	4	syz, C			19074	2735d	3224d	12/29	2727d	73601ea5b7b1 fs/open.c: allow opening only regular files during execve()
KASAN: use-after-free Read in link_path_walk fs	19	syz	done		5	2847d	2862d	12/29	2727d	1da6c4d9140c bpf: fix use after free in bpf_evict_inode
KASAN: use-after-free Read in trailing_symlink fs	19	syz	done		2	2848d	2862d	12/29	2727d	1da6c4d9140c bpf: fix use after free in bpf_evict_inode
KASAN: use-after-free Read in path_lookupat fs	19	syz	done		1	2862d	2862d	12/29	2727d	1da6c4d9140c bpf: fix use after free in bpf_evict_inode
KASAN: use-after-free Read in filemap_fault mm fs	19	syz, C			277	2822d	2832d	11/29	2738d	6b4c9f446981 filemap: drop the mmap_sem for all blocking operations
possible deadlock in __do_page_fault fs mm	4	syz, C			820	2764d	2931d	11/29	2742d	fb4415a12632 staging: android: ashmem: Don't call fallocate() with ashmem_mutex held.
possible deadlock in vfs_fallocate fs	4	syz, C			3981	2964d	3075d	11/29	2742d	fb4415a12632 staging: android: ashmem: Don't call fallocate() with ashmem_mutex held.
BUG: unable to handle kernel NULL pointer dereference in __generic_file_write_iter mm fs	10				5	2769d	2777d	11/29	2742d	ac5ceccce550 x86/unwind: Add hardcoded ORC entry for NULL f4f34e1b82eb x86/unwind: Handle NULL pointer calls better in frame unwinder
possible deadlock in userfaultfd_read fs mm	4				239	2743d	2797d	11/29	2742d	d3d6a18d7d35 aio: Fix locking in aio_poll()
BUG: unable to handle kernel paging request in dput (2) fs	8	syz, C			4	2799d	2799d	11/29	2765d	36991ca68db9 blk-mq: protect debugfs_create_files() from failures 37ea7b630ae5 debugfs: debugfs_lookup() should return NULL if not found
INFO: task hung in generic_file_write_iter mm fs	1				7	2857d	2995d	11/29	2765d	04906b2f542c blockdev: Fix livelocks on loop device
general protection fault in __dentry_path fs	2	syz, C			2082	2767d	2799d	11/29	2765d	8ed0579c12b2 kvm: properly check debugfs dentry before using it
KASAN: use-after-free Read in posix_lock_inode fs	19	syz			5	2827d	2827d	11/29	2814d	bf77ae4c98d7 locks: fix error in locks_move_blocks()
KASAN: use-after-free Read in locks_delete_block fs	19	syz			4	2855d	2878d	11/29	2814d	16306a61d3b7 fs/locks: always delete_block after waiting.
WARNING in userfaultfd_ioctl mm fs	-1	syz, C			11	2847d	2857d	11/29	2833d	01e881f5a1fc userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered
WARNING: kmalloc bug in krealloc fs	-1	syz, C			2	2998d	2998d	11/29	2878d	61448479a9f2 mm: don't warn about large allocations for slab
WARNING: kmalloc bug in vfs_getxattr_alloc fs	-1	syz, C			9	2953d	2996d	11/29	2878d	61448479a9f2 mm: don't warn about large allocations for slab
KASAN: slab-out-of-bounds Read in fscache_alloc_cookie fs	17	syz, C			1936	2903d	3005d	11/29	2892d	1ff22883b0b2 fscache: Fix incomplete initialisation of inline key space fa520c47eaa1 fscache: Fix out of bound read in long cookie keys
general protection fault in ubifs_mount fs mtd	2	syz, C			216	2931d	2948d	11/29	2910d	37f31b6ca431 ubifs: Check for name being NULL while mounting
WARNING in __fsnotify_recalc_mask fs	-1	syz			9	2963d	2964d	10/29	2941d	d3bc0fa8411c fsnotify: fix false positive warning on inode delete
BUG: soft lockup in shrink_dcache_parent (2) fs	1				7	3032d	3040d	10/29	2941d	4fb48871409e restore cond_resched() in shrink_dcache_parent()
INFO: task hung in fsnotify_mark_destroy_workfn fs	1	syz			13	2973d	3087d	10/29	2944d	128f38041035 android: binder: Rate-limit debug and userspace triggered err msgs
BUG: soft lockup in d_walk fs	1	syz, C			163	3032d	3078d	8/29	2946d	4fb48871409e restore cond_resched() in shrink_dcache_parent()
general protection fault in send_sigurg_to_task fs	2	syz, C			6	2966d	2969d	8/29	2954d	84fe4cc09abc signal: Don't send signals to tasks that don't exist
general protection fault in send_sigio_to_task fs	2	syz, C			176	2966d	2969d	8/29	2954d	84fe4cc09abc signal: Don't send signals to tasks that don't exist
kernel BUG at mm/memory.c:LINE! fs mm	-1				1	3005d	3005d	8/29	2974d	bfd40eaff5ab mm: fix vma_is_anonymous() false-positives
kernel BUG at fs/userfaultfd.c:LINE! (2) fs mm	-1	syz, C			8	2980d	2998d	8/29	2974d	31e810aa1033 userfaultfd: remove uffd flags from vma->vm_flags if UFFD_EVENT_FORK fails
KASAN: stack-out-of-bounds Read in __d_lookup_rcu fs	17				1	2994d	2994d	8/29	2975d	99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
KASAN: stack-out-of-bounds Read in locks_remove_posix fs	17	syz, C			1	2992d	2992d	8/29	2975d	99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
KASAN: slab-out-of-bounds Read in getname_kernel fs	17	syz, C			8	3000d	3099d	8/29	2989d	02f51d45937f autofs: fix slab out of bounds read in getname_kernel()
KASAN: global-out-of-bounds Write in string fs	21	syz, C			7	3044d	3101d	8/29	2989d	fe10e398e860 reiserfs: fix buffer overflow with long warning messages
BUG: unable to handle kernel paging request in dput fs	8	syz, C			26	3035d	3038d	8/29	3004d	d85b399b64e8 fix proc_fill_cache() in case of d_alloc_parallel() failure
BUG: unable to handle kernel NULL pointer dereference in do_select fs	10				45	3014d	3015d	8/29	3004d	e88958e6369a net: handle NULL ->poll gracefully
general protection fault in wb_workfn (2) fs	2				38	3024d	3048d	8/29	3004d	3ee7e8697d58 bdi: Fix another oops in wb_workfn()
KASAN: use-after-free Read in __vfs_write fs	19	syz			14	3033d	3036d	8/29	3004d	66e58e0ef80a bpfilter: fix race in pipe access
general protection fault in pipe_write fs	2	syz			1	3036d	3035d	8/29	3004d	66e58e0ef80a bpfilter: fix race in pipe access
BUG: unable to handle kernel NULL pointer dereference in ep_item_poll fs	10	syz, C			15	3014d	3015d	8/29	3004d	e88958e6369a net: handle NULL ->poll gracefully
general protection fault in __vfs_write fs	2	syz			25	3033d	3036d	8/29	3004d	66e58e0ef80a bpfilter: fix race in pipe access
KASAN: use-after-free Read in pipe_read fs	19	syz, C			3	3035d	3036d	8/29	3004d	66e58e0ef80a bpfilter: fix race in pipe access
KASAN: use-after-free Read in finish_wait fs	19				8	3033d	3036d	8/29	3004d	66e58e0ef80a bpfilter: fix race in pipe access
KASAN: use-after-free Read in __kernel_write fs	19	syz			7	3033d	3036d	8/29	3004d	66e58e0ef80a bpfilter: fix race in pipe access
KASAN: null-ptr-deref Write in simple_write_to_buffer fs	12	syz, C			5	3044d	3069d	8/29	3004d	fc14eebfc208 PM / hibernate: Fix oops at snapshot_write()
general protection fault in touch_atime fs	2	syz			6	3033d	3036d	8/29	3004d	66e58e0ef80a bpfilter: fix race in pipe access
BUG: soft lockup in do_raw_spin_unlock (2) fs	1				1	3032d	3032d	8/29	3004d	4fb48871409e restore cond_resched() in shrink_dcache_parent()
general protection fault in __mnt_want_write fs	2				1	3034d	3034d	8/29	3004d	66e58e0ef80a bpfilter: fix race in pipe access
WARNING in do_dentry_open fs	-1	syz, C			26	3028d	3035d	8/29	3004d	b16558579576 bpf: implement dummy fops for bpf objects
INFO: task hung in namespace_unlock fs	1				15	3008d	3017d	8/29	3004d	ebec3f8f5271 n_tty: Access echo_* variables carefully.
general protection fault in vfs_read fs	2	syz			2	3034d	3036d	8/29	3004d	66e58e0ef80a bpfilter: fix race in pipe access
BUG: unable to handle kernel NULL pointer dereference in do_sys_poll fs	10	syz, C			297	3014d	3015d	8/29	3004d	e88958e6369a net: handle NULL ->poll gracefully
WARNING in sysfs_remove_group fs	-1	syz, C			11125	3006d	3259d	8/29	3004d	d3349b6b3c37 loop: remember whether sysfs_create_group() was done
INFO: rcu detected stall in d_walk fs	1	syz, C			25680	3030d	3092d	8/29	3004d	4fb48871409e restore cond_resched() in shrink_dcache_parent()
KASAN: use-after-free Read in pipe_wait fs	19				2	3033d	3034d	8/29	3004d	66e58e0ef80a bpfilter: fix race in pipe access
KASAN: use-after-free Read in remove_wait_queue (2) fs	19	syz, C			4	3125d	3135d	5/29	3036d	af8d3c7c001a ppp: remove the PPPIOCDETACH ioctl
general protection fault in wb_workfn fs	2				63	3059d	3085d	5/29	3057d	b8b784958ecc bdi: Fix oops in wb_workfn()
KASAN: use-after-free Read in debugfs_remove (2) fs	19				1	3084d	3081d	5/29	3057d	f53823c18131 bdi: Fix use after free bug in debugfs_remove()
INFO: task hung in handle_userfault fs mm	1				3	3072d	3094d	5/29	3057d	8236b0ae31c8 bdi: wake up concurrent wb_shutdown() callers.
INFO: task hung in __do_page_fault fs mm	1				1	3089d	3089d	5/29	3057d	8236b0ae31c8 bdi: wake up concurrent wb_shutdown() callers.
WARNING: refcount bug in put_pid_ns fs	13	syz			6	3104d	3104d	5/29	3066d	8e04944f0ea8 mm,vmscan: Allow preallocating memory for register_shrinker().
INFO: task hung in __blkdev_get fs	1	syz, C			662	3090d	3216d	5/29	3066d	1e047eaab3bb block/loop: fix deadlock after loop_set_status
BUG: corrupted list in __dentry_kill fs	8	syz, C			35	3084d	3104d	5/29	3066d	4a3877c4cedd rpc_pipefs: fix double-dput()
WARNING in format_decode fs	-1	syz, C			1	3104d	3104d	5/29	3066d	9ad553abe66f fs/reiserfs/journal.c: add missing resierfs_warning() arg
WARNING in kmem_cache_free fs	-1				1	3098d	3098d	5/29	3066d	eea0d3ea7546 crypto: drbg - set freed buffers to NULL
KASAN: null-ptr-deref Read in xattr_getsecurity fs	11				68	3083d	3094d	5/29	3066d	1f5781725dcb commoncap: Handle memory allocation failure.
KASAN: use-after-free Read in remove_wait_queue fs	19	syz, C			7	3141d	3151d	4/29	3137d	5eeb2ca02a2f ANDROID: binder: synchronize_rcu() when using POLLFREE.
KASAN: use-after-free Read in __fput fs	19				23	3220d	3253d	4/29	3151d	a5739435b5a3 fix kcm_clone()
KASAN: use-after-free Read in __lock_acquire (2) fs	19	syz, C			589	3162d	3237d	4/29	3159d	f5cb779ba163 ANDROID: binder: remove waitqueue when thread exits.
WARNING in register_lock_class fs	-1	syz, C			2	3206d	3202d	4/29	3159d	f5cb779ba163 ANDROID: binder: remove waitqueue when thread exits.
WARNING in sysfs_warn_dup fs	-1				11	3164d	3207d	4/29	3159d	5d54f948aaac sysfs: turn WARN() into pr_warn()
general protection fault in page_mapping fs mm	2	syz, C			46	3185d	3213d	4/29	3162d	7d11f77f84b2 RDS: null pointer dereference in rds_atomic_free_op
BUG: unable to handle kernel NULL pointer dereference in page_mapping fs mm	10	syz, C			4	3206d	3208d	4/29	3162d	7d11f77f84b2 RDS: null pointer dereference in rds_atomic_free_op
BUG: unable to handle kernel paging request in devpts_mntget fs	8	syz, C			21	3175d	3252d	4/29	3162d	c9cc8d01fb04 devpts: fix error handling in devpts_mntget()
general protection fault in show_timer fs	2	syz, C			10	3207d	3226d	4/29	3162d	cef31d9af908 posix-timer: Properly check sigevent->sigev_notify
KASAN: use-after-free Read in __wake_up_common fs	19	syz, C			888	3163d	3172d	4/29	3162d	4cd879515d68 vhost_net: stop device during reset owner
kernel BUG at fs/userfaultfd.c:LINE! mm fs	-1	syz, C			3	3206d	3203d	4/29	3162d	0cbb4b4f4c44 userfaultfd: clear the vma->vm_userfaultfd_ctx if UFFD_EVENT_FORK fails
BUG: unable to handle kernel NULL pointer dereference in proc_flush_task fs	10	syz			1	3210d	3206d	4/29	3167d	c0ee554906c3 pid: Handle failure to allocate the first pid in a pid namespace
general protection fault in proc_flush_task fs	2	syz			2	3209d	3226d	4/29	3167d	c0ee554906c3 pid: Handle failure to allocate the first pid in a pid namespace
KASAN: use-after-free Read in handle_userfault fs mm	19	syz, C			151	3196d	3259d	3/29	3184d	0cbb4b4f4c44 userfaultfd: clear the vma->vm_userfaultfd_ctx if UFFD_EVENT_FORK fails
WARNING in lock_release fs	-1	syz, C			72	3207d	3239d	3/29	3203d	ca0168e8a77c alloc_super(): do ->s_umount initialization earlier
KASAN: use-after-free Read in fsnotify fs	19				1	3288d	3252d	3/29	3228d	b3a006600582 dnotify: Handle errors from fsnotify_add_mark_locked() in fcntl_dirnotify()
general protection fault in iov_iter_fault_in_readable fs mm	2				5	3245d	3253d	3/29	3228d	ee74d9967b82 tun: do not arm flow_gc_timer in tun_flow_init()
kernel BUG at fs/notify/dnotify/dnotify.c:LINE! fs	-1				19	3244d	3256d	3/29	3228d	b3a006600582 dnotify: Handle errors from fsnotify_add_mark_locked() in fcntl_dirnotify()