|
general protection fault in bch2_prt_vprintf
fs
|
2 |
C |
error |
inconclusive |
4 |
478d |
515d
|
2/29 |
never |
bcachefs: journal_entry_btree_keys_to_text() is more careful
|
|
WARNING in bch2_prt_printf
fs
|
-1 |
C |
done |
error |
103 |
213d |
717d
|
2/29 |
never |
bcachefs: journal_entry_btree_keys_to_text() is more careful
|
|
KASAN: use-after-free Read in check_extent_overbig
fs
|
19 |
C |
done |
done |
18 |
226d |
509d
|
2/29 |
never |
bcachefs: fix check_extent_overbig() call
|
|
kernel BUG in bch2_btree_path_peek_slot
fs
|
-1 |
C |
error |
error |
1546 |
336d |
515d
|
2/29 |
never |
bcachefs: fix assert in bch2_btree_path_traverse_cached()
|
|
general protection fault in grab_requested_root
fs
|
2 |
C |
|
|
21 |
62d |
75d
|
28/29 |
never |
81f16c9778d7
statmount: Fix the null-ptr-deref in do_statmount()
|
|
possible deadlock in __configfs_open_file
fs
|
4 |
C |
|
|
29 |
74d |
492d
|
28/29 |
never |
14d4ac19d189
scsi: target: Fix recursive locking in __configfs_open_file()
|
|
kernel BUG in do_bch2_trans_commit_to_journal_replay
fs
|
-1 |
syz |
|
|
22 |
279d |
282d
|
2/29 |
never |
bcachefs: do_bch2_trans_commit_to_journal_replay handles accounting
|
|
INFO: task hung in remove_inode_hugepages
fs
mm
|
1 |
C |
done |
|
52 |
567d |
659d
|
1/29 |
never |
INFO: task hung in remove_inode_hugepages
|
|
KASAN: slab-use-after-free Read in clone_mnt
fs
|
19 |
|
|
|
130 |
62d |
73d
|
28/29 |
never |
a41dbf5e004e
mount: hold namespace_sem across copy in create_new_namespace()
|
|
general protection fault in __umount_mnt
fs
|
2 |
C |
error |
|
21 |
28d |
38d
|
26/29 |
never |
ad4999496e73
mount: always duplicate mount
|
|
WARNING in bch2_verify_accounting_clean
fs
|
-1 |
|
|
|
29 |
194d |
444d
|
2/29 |
never |
bcachefs: do_bch2_trans_commit_to_journal_replay handles accounting
|
|
memory leak in __shmem_file_setup
fs
|
3 |
C |
|
|
1 |
110d |
106d
|
28/29 |
never |
605f6586ecf7
mm/vma: do not leak memory when .mmap_prepare swaps the file
|
|
BUG: sleeping function called from invalid context in procfs_procmap_ioctl
fs
|
5 |
syz |
done |
|
101 |
298d |
300d
|
2/29 |
never |
mm/maps: move kmalloc() call location in do_procmap_query() out of RCU critical section
|
|
KMSAN: uninit-value in bch2_alloc_sectors_start_trans (2)
fs
|
7 |
syz |
|
|
875 |
211d |
377d
|
2/29 |
never |
bcachefs: Add missing ei_last_dirtied update
|
|
general protection fault in __bch2_err_trace
fs
|
2 |
C |
done |
|
25 |
210d |
266d
|
2/29 |
never |
bcachefs: Delete faulty read_only/nochanges check in fs_open()
|
|
kernel BUG in free_bprm
fs
mm
|
-1 |
C |
done |
|
445 |
538d |
539d
|
1/29 |
never |
exec: NULL out bprm->argv0 when it is an ERR_PTR
|
|
WARNING in bch2_fs_journal_start
fs
|
-1 |
C |
done |
|
14 |
311d |
332d
|
2/29 |
never |
bcachefs: Don't allow mounting with crazy numbers of dirty journal entries
|
|
WARNING in closure_put_after_sub
fs
|
-1 |
|
|
|
2 |
261d |
285d
|
2/29 |
never |
bcachefs: Ensure we don't return with closure on waitlist
|
|
linux-next boot error: WARNING in kmem_cache_free
fs
|
-1 |
|
|
|
45 |
2132d |
2136d
|
1/29 |
never |
mm, slab/slub: improve error reporting and overhead of cache_from_obj()-fix
|
|
UBSAN: shift-out-of-bounds in minix_statfs
fs
|
-1 |
C |
inconclusive |
error |
75 |
92d |
1597d
|
28/29 |
never |
8c97a6ddc956
minix: Add required sanity checking to minix_check_superblock()
|
|
KASAN: slab-use-after-free Write in bch2_get_next_dev
fs
|
22 |
C |
|
|
1331 |
190d |
284d
|
2/29 |
never |
bcachefs: Fix UAF by journal write path
|
|
KASAN: slab-use-after-free Write in bch2_do_discards
fs
|
22 |
syz |
|
|
137 |
210d |
280d
|
2/29 |
never |
bcachefs: Fix UAF by journal write path
|
|
kernel BUG in bch2_printbuf_exit
fs
|
-1 |
C |
error |
|
29 |
281d |
285d
|
2/29 |
never |
bcachefs: convert str_hash.c to CLASS
|
|
BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio (4)
fs
|
10 |
C |
done |
|
5746 |
98d |
527d
|
28/29 |
never |
777a8560fd29
lib/buildid: use __kernel_read() for sleepable context
|
|
KASAN: use-after-free Read in check_dirent
fs
|
19 |
C |
done |
|
13 |
249d |
431d
|
2/29 |
never |
bcachefs: Fix UAF in check_dirent()
|
|
KASAN: use-after-free Read in bch2_check_dirents
fs
|
19 |
C |
done |
|
769 |
210d |
529d
|
2/29 |
never |
bcachefs: Fix UAF in check_dirent()
|
|
linux-next boot error: BUG: unable to handle kernel NULL pointer dereference in mempool_init_node
fs
ceph
|
-1 |
|
|
|
12 |
1992d |
1994d
|
1/29 |
never |
kasan-simplify-kasan_poison_kfree-temp-fix
|
|
KASAN: slab-out-of-bounds Read in __bch2_alloc_to_v4
fs
|
17 |
|
|
|
20 |
298d |
295d
|
2/29 |
never |
bcachefs: Fix __bch2_alloc_to_v4 copy
|
|
kernel BUG in __journal_res_get (3)
fs
|
-1 |
C |
inconclusive |
|
175 |
190d |
314d
|
2/29 |
never |
bcachefs: Fix __bch2_fs_read_write() error path
|
|
WARNING in bch2_dev_free (2)
fs
|
-1 |
C |
done |
|
5 |
279d |
285d
|
2/29 |
never |
bcachefs: Fix __bch2_fs_read_write() error path
|
|
kernel panic: in transaction restart: transaction_restart_relock, last restarted by
fs
|
2 |
|
|
|
5 |
271d |
271d
|
2/29 |
never |
bcachefs: Fix incorrect transaction handling
|
|
KMSAN: uninit-value in bch2_check_subvols
fs
|
7 |
C |
|
|
53 |
211d |
301d
|
2/29 |
never |
bcachefs: Fix missing compat code in check_subvol()
|
|
KASAN: slab-out-of-bounds Write in bch2_dirent_init_name
fs
|
21 |
C |
error |
|
1496 |
190d |
315d
|
2/29 |
never |
bcachefs: Fix padding zeroout when creating casefolded dirents
|
|
INFO: task hung in io_sq_thread_stop
fs
io-uring
|
1 |
C |
done |
|
211 |
1898d |
2057d
|
1/29 |
never |
io_uring: don't sleep schedule in SQPOLL thread if we need to park
|
|
INFO: task hung in invalidate_inode_pages2_range (3)
fs
|
1 |
C |
done |
|
56 |
65d |
424d
|
2/29 |
never |
bcachefs: Fix readahead involved deadlock
|
|
kernel BUG in bch2_btree_repair_topology_recurse
fs
|
-1 |
C |
done |
|
7 |
211d |
271d
|
2/29 |
never |
bcachefs: btree_check_root_boundaries()
|
|
INFO: task hung in bch2_readahead
fs
|
1 |
C |
done |
|
375 |
227d |
708d
|
2/29 |
never |
bcachefs: Fix readahead involved deadlock
|
|
INFO: task hung in bchfs_fallocate (2)
fs
|
1 |
C |
done |
inconclusive |
6 |
254d |
481d
|
2/29 |
never |
bcachefs: Fix readahead involved deadlock
|
|
INFO: task hung in bchfs_fpunch (2)
fs
mm
|
1 |
C |
done |
|
2 |
263d |
308d
|
2/29 |
never |
bcachefs: Fix readahead involved deadlock
|
|
INFO: task hung in pipe_release (6)
fs
|
1 |
syz |
done |
|
18 |
11d |
424d
|
2/29 |
never |
bcachefs: Fix readahead involved deadlock
|
|
KMSAN: uninit-value in __bch2_alloc_v4_to_text
fs
|
7 |
C |
|
|
3 |
310d |
315d
|
2/29 |
never |
bcachefs: Fix refs to undefined fields in __bch2_alloc_v4_to_text()
|
|
kernel BUG in bch2_fill_extent (2)
fs
|
-1 |
|
|
|
10 |
205d |
287d
|
2/29 |
never |
bcachefs: Fix unhandled key type in fiemap_fill_extent
|
|
possible deadlock in writeout_period
mm
fs
|
4 |
|
|
|
1 |
82d |
78d
|
28/29 |
never |
dd9e2f5b38f1
flex_proportions: make fprop_new_period() hardirq safe
|
|
UBSAN: array-index-out-of-bounds in bch2_accounting_validate
fs
|
15 |
C |
done |
|
23 |
199d |
267d
|
2/29 |
never |
bcachefs: Ignore accounting key type larger than BCH_DISK_ACCOUNTING_TYPE_NR
|
|
WARNING in bchfs_truncate
fs
|
-1 |
C |
done |
|
366 |
214d |
724d
|
2/29 |
never |
bcachefs: Increase BCH_MIN_NR_NBUCKETS
|
|
INFO: task hung in __closure_sync
fs
|
1 |
C |
done |
|
8591 |
197d |
725d
|
2/29 |
never |
bcachefs: Increase BCH_MIN_NR_NBUCKETS
|
|
INFO: task hung in __bch2_fs_stop
fs
|
1 |
C |
done |
|
1589 |
206d |
682d
|
2/29 |
never |
bcachefs: Increase BCH_MIN_NR_NBUCKETS
|
|
kernel BUG in sctp_getsockopt_peeloff_common
fs
|
-1 |
C |
done |
|
6 |
147d |
148d
|
29/29 |
93d |
afb9917d9b37
Revert "net/socket: convert sock_map_fd() to FD_ADD()"
|
|
kernel BUG in socket
fs
|
-1 |
C |
|
|
145 |
130d |
125d
|
29/29 |
93d |
afb9917d9b37
Revert "net/socket: convert sock_map_fd() to FD_ADD()"
|
|
memory leak in debugfs_change_name
fs
|
3 |
C |
|
|
1 |
145d |
141d
|
29/29 |
97d |
d412ff9e26eb
debugfs: Fix memleak in debugfs_change_name().
|
|
WARNING in minix_unlink
fs
|
-1 |
C |
inconclusive |
done |
458 |
140d |
522d
|
29/29 |
97d |
009a2ba40303
Fix a drop_nlink warning in minix_rename
|
|
memory leak in getname_flags
fs
|
3 |
C |
|
|
1 |
125d |
125d
|
29/29 |
97d |
b14fad555302
io_uring: fix filename leak in __io_openat_prep()
|
|
KASAN: slab-use-after-free Read in driver_remove_file
fs
|
19 |
C |
error |
done |
296 |
144d |
273d
|
29/29 |
98d |
72262330f7b3
comedi: c6xdigio: Fix invalid PNP driver unregistration
|
|
general protection fault in fd_install
fs
|
2 |
C |
|
|
64 |
143d |
145d
|
29/29 |
111d |
8cf01d0c4372
mqueue: correct the type of ro to int
|
|
WARNING in minix_rmdir
fs
|
-1 |
C |
inconclusive |
|
92 |
161d |
475d
|
29/29 |
111d |
d3e0e8661ceb
Fix a drop_nlink warning in minix_rmdir
|
|
WARNING in nsproxy_ns_active_get
fs
|
-1 |
C |
|
|
377 |
167d |
173d
|
29/29 |
111d |
cefd55bd2159
nsproxy: fix free_nsproxy() and simplify create_new_namespaces()
|
|
kernel BUG in may_open (2)
fs
|
-1 |
C |
done |
|
17716 |
111d |
294d
|
29/29 |
111d |
34ab4c75588c
bfs: Reconstruct file type when loading from disk
7f9d34b0a7cb
cramfs: Verify inode mode when loading from disk
005d4b0d33f6
hfsplus: Verify inode mode when loading from disk
0a9e74051313
isofs: Verify inode mode when loading from disk
7a5aa54fba2b
jfs: Verify inode mode when loading from disk
73861970938a
minixfs: Verify inode mode when loading from disk
4aead50caf67
nilfs2: reject invalid file types when reading inodes
4e8011ffec79
ntfs3: pretend $Extend records as regular files
bc107a619f02
squashfs: verify inode mode when loading from disk
|
|
KMSAN: kernel-infoleak in hugetlbfs_read_iter
fs
mm
|
9 |
C |
|
|
7 |
169d |
169d
|
29/29 |
111d |
de8798965fd0
mm/memfd: fix information leak in hugetlb folios
|
|
general protection fault in fsnotify_destroy_group
fs
|
2 |
C |
error |
|
2 |
154d |
151d
|
29/29 |
111d |
7129098f4f7b
fanotify: convert fanotify_init() to FD_PREPARE()
|
|
WARNING in nsproxy_ns_active_put
fs
|
-1 |
C |
done |
|
38 |
167d |
173d
|
29/29 |
111d |
cefd55bd2159
nsproxy: fix free_nsproxy() and simplify create_new_namespaces()
|
|
WARNING in minix_rename
fs
|
-1 |
syz |
error |
|
7 |
221d |
308d
|
29/29 |
111d |
009a2ba40303
Fix a drop_nlink warning in minix_rename
|
|
WARNING in destroy_super_work
fs
|
-1 |
syz |
done |
|
107 |
167d |
172d
|
29/29 |
111d |
f8d5a8970d2f
ns: handle setns(pidfd, ...) cleanly
|
|
general protection fault in mntput
fs
|
2 |
C |
error |
|
17 |
146d |
151d
|
29/29 |
111d |
05885f41658c
namespace: convert fsmount() to FD_PREPARE()
|
|
BUG: sleeping function called from invalid context in hook_sb_delete
fs
|
5 |
C |
done |
|
11887 |
129d |
216d
|
29/29 |
111d |
56325e8c68c0
landlock: fix splats from iput() after it started calling might_sleep()
|
|
WARNING in dax_iomap_rw
fs
|
-1 |
C |
|
|
5 |
195d |
208d
|
29/29 |
147d |
154d1e7ad9e5
dax: skip read lock assertion for read-only filesystems
|
|
WARNING in invalidate_bh_lru
fs
|
-1 |
C |
done |
done |
5172 |
395d |
1223d
|
29/29 |
160d |
6f861765464f
fs: Block writes to mounted block devices
|
|
VFS: Busy inodes after unmount (use-after-free) (3)
fs
|
2 |
C |
error |
|
85 |
180d |
209d
|
29/29 |
161d |
56094ad3eaa2
vfs: Don't leak disconnected dentries on umount
|
|
kernel BUG in qlist_free_all (2)
fs
|
-1 |
C |
done |
|
5 |
195d |
226d
|
29/29 |
161d |
25718fdcbdd2
net: gro_cells: Use nested-BH locking for gro_cell
|
|
INFO: task hung in bch2_direct_write (2)
fs
|
1 |
C |
unreliable |
done |
15 |
246d |
255d
|
29/29 |
167d |
f2c61db29f27
Remove bcachefs core code
|
|
INFO: task hung in v9fs_file_fsync
fs
mm
|
1 |
C |
done |
|
14 |
213d |
253d
|
29/29 |
180d |
e8fe3f07a357
9p/trans_fd: p9_fd_request: kick rx thread if EPOLLIN
|
|
WARNING in sysfs_emit_at
fs
|
-1 |
C |
|
|
2 |
234d |
230d
|
29/29 |
180d |
9dfec4a51df9
USB: core: remove the move buf action
|
|
possible deadlock in path_openat (3)
fs
|
4 |
|
|
|
1 |
240d |
240d
|
29/29 |
180d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
general protection fault in iter_file_splice_write
fs
|
2 |
C |
done |
done |
2812 |
251d |
708d
|
29/29 |
195d |
netfs: Fix unbuffered write error handling
|
|
WARNING in path_noexec
mm
fs
|
-1 |
C |
done |
|
14318 |
210d |
295d
|
29/29 |
210d |
secretmem: use SB_I_NOEXEC
|
|
kernel BUG in bch2_journal_keys_peek_max
fs
|
-1 |
C |
done |
|
45 |
302d |
440d
|
29/29 |
225d |
425da82c63e3
bcachefs: btree_iter: fix updates, journal overlay
|
|
kernel BUG in bch2_journal_keys_peek_prev_min
fs
|
-1 |
|
|
|
1 |
307d |
303d
|
29/29 |
229d |
1f8aede70d49
bcachefs: fix bch2_journal_keys_peek_prev_min() underflow
|
|
KASAN: use-after-free Read in bch2_btree_node_read_done
fs
|
19 |
C |
done |
|
64 |
309d |
519d
|
29/29 |
236d |
d89a34b14df5
bcachefs: Move bset size check before csum check
|
|
kernel BUG in bch2_btree_path_level_init (3)
fs
|
-1 |
C |
done |
|
489 |
236d |
493d
|
29/29 |
236d |
9fe8ec866442
bcachefs: Don't build aux search tree when still repairing node
|
|
kernel BUG in __bch2_bkey_compat
fs
|
-1 |
C |
done |
done |
5 |
319d |
319d
|
29/29 |
236d |
9fe8ec866442
bcachefs: Don't build aux search tree when still repairing node
|
|
kernel BUG in bch2_trans_update_by_path
fs
|
-1 |
C |
done |
|
857 |
238d |
313d
|
29/29 |
236d |
c72d628469b8
bcachefs: Fix btree for nonexistent tree depth
|
|
BUG: unable to handle kernel paging request in __bch2_bkey_unpack_key
fs
|
8 |
C |
|
|
75 |
312d |
336d
|
29/29 |
236d |
9fe8ec866442
bcachefs: Don't build aux search tree when still repairing node
|
|
kernel panic: trans should be locked, unlocked by bch2_btree_update_start
fs
|
2 |
C |
error |
error |
361 |
318d |
509d
|
29/29 |
236d |
5c4acbc8ce90
bcachefs: Don't unlock the trans if ret doesn't match BCH_ERR_operation_blocked
|
|
kernel BUG in bch2_bkey_cmp_packed (2)
fs
|
-1 |
C |
|
|
7 |
320d |
330d
|
29/29 |
236d |
9fe8ec866442
bcachefs: Don't build aux search tree when still repairing node
|
|
kernel BUG in bch2_reconstruct_snapshots
fs
|
-1 |
C |
done |
done |
7 |
344d |
435d
|
29/29 |
236d |
b2e2bed11980
bcachefs: Add missing key type checks to check_snapshot_exists()
|
|
BUG: unable to handle kernel NULL pointer dereference in bch2_btree_update_start
fs
|
10 |
C |
|
|
6 |
306d |
319d
|
29/29 |
236d |
56be92c63f02
bcachefs: Fix pool->alloc NULL pointer dereference
|
|
KASAN: use-after-free Read in bch2_checksum
fs
|
19 |
C |
error |
done |
8 |
340d |
352d
|
29/29 |
236d |
d89a34b14df5
bcachefs: Move bset size check before csum check
|
|
kernel BUG in bch2_btree_node_iter_init (2)
fs
|
-1 |
C |
done |
|
3 |
292d |
293d
|
29/29 |
236d |
9fe8ec866442
bcachefs: Don't build aux search tree when still repairing node
|
|
kernel panic: in transaction restart: transaction_restart_mem_realloced, last restarted by
fs
|
2 |
|
|
|
2 |
305d |
302d
|
29/29 |
236d |
fbf913cb72a5
bcachefs: Fix incorrect transaction restart handling
|
|
KASAN: slab-use-after-free Read in bch2_str_hash_repair_key
fs
|
19 |
C |
done |
|
226 |
302d |
322d
|
29/29 |
236d |
9b54efe66c9b
bcachefs: Fix alloc_req use after free
|
|
kernel BUG in __bch2_bkey_unpack_key
fs
|
-1 |
C |
|
|
43 |
315d |
336d
|
29/29 |
236d |
9fe8ec866442
bcachefs: Don't build aux search tree when still repairing node
|
|
UBSAN: shift-out-of-bounds in __bch2_btree_node_hash_insert
fs
|
-1 |
C |
done |
|
434 |
298d |
482d
|
29/29 |
236d |
96de8f852031
bcachefs: mark invalid_btree_id autofix
|
|
KASAN: slab-use-after-free Read in bch2_bucket_alloc_trans
fs
|
19 |
C |
error |
|
550 |
302d |
320d
|
29/29 |
236d |
9b54efe66c9b
bcachefs: Fix alloc_req use after free
|
|
UBSAN: shift-out-of-bounds in __bch2_bkey_unpack_key
fs
|
-1 |
C |
done |
|
54 |
318d |
335d
|
29/29 |
236d |
03208bd06a61
bcachefs: don't return fsck_fix for unfixable node errors in __btree_err
|
|
kernel BUG in __btree_trans_update_by_path
fs
|
-1 |
C |
done |
|
20 |
294d |
299d
|
29/29 |
236d |
c72d628469b8
bcachefs: Fix btree for nonexistent tree depth
|
|
kernel BUG in __bkey_unpack_pos (2)
fs
|
-1 |
C |
done |
|
24 |
291d |
488d
|
29/29 |
236d |
9fe8ec866442
bcachefs: Don't build aux search tree when still repairing node
|
|
KASAN: use-after-free Read in poly1305_update
fs
|
19 |
C |
done |
|
8 |
303d |
319d
|
29/29 |
236d |
d89a34b14df5
bcachefs: Move bset size check before csum check
|
|
BUG: unable to handle kernel NULL pointer dereference in mempool_alloc_noprof (2)
fs
|
10 |
C |
done |
|
8 |
315d |
331d
|
29/29 |
236d |
56be92c63f02
bcachefs: Fix pool->alloc NULL pointer dereference
|
|
KASAN: slab-use-after-free Read in bch2_copygc
fs
|
19 |
C |
done |
|
25 |
236d |
294d
|
29/29 |
236d |
c02b943f7d12
bcachefs: Fix reference to invalid bucket in copygc
|
|
possible deadlock in trans_set_locked
fs
|
4 |
C |
|
|
113 |
314d |
515d
|
29/29 |
263d |
ff1dd05f8233
bcachefs: bch2_trans_relock() is trylock for lockdep
|
|
possible deadlock in __bch2_count_fsck_err
fs
|
4 |
|
|
|
12 |
329d |
347d
|
29/29 |
265d |
0acb385ec19c
bcachefs: Fix possible console lock involved deadlock
|
|
WARNING in rhashtable_init_noprof
fs
|
-1 |
C |
done |
|
131 |
319d |
337d
|
29/29 |
265d |
757601ef8533
bcachefs: Don't put rhashtable on stack
|
|
possible deadlock in __bch2_folio_reservation_get (2)
fs
|
4 |
|
|
|
25 |
321d |
350d
|
29/29 |
265d |
0acb385ec19c
bcachefs: Fix possible console lock involved deadlock
|
|
WARNING in lookup_object_or_alloc
fs
|
-1 |
|
|
|
7 |
321d |
332d
|
29/29 |
265d |
757601ef8533
bcachefs: Don't put rhashtable on stack
|
|
KASAN: slab-out-of-bounds Read in bch2_sb_members_v1_to_text
fs
|
17 |
C |
done |
|
6 |
321d |
322d
|
29/29 |
265d |
205da7c02673
bcachefs: Don't trust sb->nr_devices in members_to_text()
|
|
possible deadlock in __bch2_fsck_err (2)
fs
|
4 |
C |
|
|
4 |
349d |
350d
|
29/29 |
265d |
0acb385ec19c
bcachefs: Fix possible console lock involved deadlock
|
|
KASAN: slab-out-of-bounds Read in bch2_sb_members_v2_to_text
fs
|
17 |
C |
done |
|
34 |
320d |
337d
|
29/29 |
265d |
205da7c02673
bcachefs: Don't trust sb->nr_devices in members_to_text()
|
|
WARNING in __init_work (2)
fs
|
-1 |
C |
|
|
5971 |
312d |
320d
|
29/29 |
265d |
757601ef8533
bcachefs: Don't put rhashtable on stack
|
|
possible deadlock in bch2_trans_begin
fs
|
4 |
|
|
|
5 |
334d |
463d
|
29/29 |
265d |
0acb385ec19c
bcachefs: Fix possible console lock involved deadlock
|
|
divide error in bch2_sb_members_v2_to_text
fs
|
2 |
C |
done |
|
3 |
321d |
322d
|
29/29 |
265d |
205da7c02673
bcachefs: Don't trust sb->nr_devices in members_to_text()
|
|
UBSAN: array-index-out-of-bounds in bch2_sb_downgrade_update
fs
|
15 |
C |
|
|
539 |
312d |
365d
|
29/29 |
265d |
082c74411491
bcachefs: Fix downgrade_table_extra()
|
|
WARNING in bch2_printbuf_make_room
fs
|
-1 |
C |
error |
|
2 |
323d |
714d
|
29/29 |
273d |
dc5bfdf8eaed
bcachefs: fix the memory leak in exception case
|
|
BUG: unable to handle kernel paging request in bch2_dirent_to_text
fs
|
8 |
C |
done |
error |
3 |
339d |
649d
|
29/29 |
280d |
f39055220f6f
bcachefs: Add missing validation for superblock section clean
|
|
kernel BUG in vfs_get_tree (2)
fs
|
-1 |
C |
done |
|
22 |
327d |
324d
|
29/29 |
286d |
9c6185609947
bcachefs: Call bch2_fs_start before getting vfs superblock
|
|
KASAN: use-after-free Read in sysv_new_inode (2)
fs
|
19 |
C |
inconclusive |
error |
21224 |
386d |
719d
|
29/29 |
286d |
448fa70158f9
sysv: Remove the filesystem
|
|
kernel BUG in bch2_fill_extent
fs
|
-1 |
|
|
|
8 |
344d |
363d
|
29/29 |
292d |
a2f546330ef9
bcachefs: Fix losing return code in next_fiemap_extent()
|
|
BUG: unable to handle kernel NULL pointer dereference in do_pagemap_scan
fs
|
10 |
C |
inconclusive |
done |
45 |
352d |
855d
|
29/29 |
294d |
65c66047259f
proc: fix the issue of proc_mem_open returning NULL
|
|
kernel BUG in may_open
fs
|
-1 |
C |
error |
|
137019 |
294d |
391d
|
29/29 |
294d |
cfd86ef7e8e7
anon_inode: use a proper mode internally
|
|
kernel BUG in __bch2_trans_commit (2)
fs
|
-1 |
|
|
|
105 |
295d |
339d
|
29/29 |
294d |
97e69f12edb1
bcachefs: Fix missing BTREE_UPDATE_internal_snapshot_node
|
|
WARNING in bch2_dev_free
fs
|
-1 |
C |
done |
|
258 |
323d |
385d
|
28/29 |
319d |
d62922ba3cfc
bcachefs: Prevent granting write refs when filesystem is read-only
|
|
KMSAN: uninit-value in btree_interior_update_work
fs
|
7 |
|
|
|
2 |
402d |
454d
|
28/29 |
319d |
1f88c3567495
bcachefs: Fix a KMSAN splat in btree_update_nodes_written()
|
|
KMSAN: uninit-value in bch2_extent_crc_append (2)
fs
|
7 |
C |
|
|
4 |
405d |
415d
|
28/29 |
319d |
53cf2a3daa4c
bcachefs: Fix kmsan warnings in bch2_extent_crc_pack()
|
|
KMSAN: uninit-value in bch2_trans_start_alloc_update
fs
|
7 |
C |
|
|
1051 |
396d |
518d
|
28/29 |
321d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_btree_node_iter_init (2)
fs
|
7 |
C |
|
|
309 |
396d |
527d
|
28/29 |
321d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_inode_v3_validate
fs
|
7 |
C |
|
|
5866 |
396d |
525d
|
28/29 |
321d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_btree_node_get
fs
|
7 |
C |
|
|
18 |
407d |
513d
|
28/29 |
321d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_btree_node_check_topology
fs
|
7 |
C |
|
|
19 |
422d |
533d
|
28/29 |
321d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_dev_freespace_init
fs
|
7 |
C |
|
|
432 |
396d |
510d
|
28/29 |
321d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_checksum_update (2)
fs
|
19 |
C |
done |
|
7 |
404d |
499d
|
28/29 |
321d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_bucket_alloc_early
fs
|
7 |
C |
|
|
219 |
400d |
538d
|
28/29 |
321d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_trans_start_alloc_update_noupdate
fs
|
7 |
|
|
|
2 |
484d |
480d
|
28/29 |
321d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in __build_ro_aux_tree
fs
|
7 |
|
|
|
3 |
490d |
501d
|
28/29 |
321d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_btree_ptr_v2_validate
fs
|
7 |
C |
|
|
55 |
397d |
448d
|
28/29 |
321d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_xattr_validate
fs
|
7 |
C |
|
|
22 |
419d |
501d
|
28/29 |
321d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_alloc_v4_validate (2)
fs
|
7 |
C |
|
|
514 |
400d |
527d
|
28/29 |
321d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in __bch2_bkey_cmp_left_packed
fs
|
7 |
syz |
|
|
2 |
463d |
490d
|
28/29 |
321d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in rw_aux_tree_set (2)
fs
|
7 |
C |
|
|
2356 |
397d |
522d
|
28/29 |
321d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
WARNING in bch2_opt_check_may_set
fs
|
-1 |
|
|
|
4 |
396d |
392d
|
28/29 |
321d |
2dd202dbaf0a
bcachefs: Recovery no longer holds state_lock
|
|
KMSAN: uninit-value in bch2_dirent_rename (2)
fs
|
7 |
|
|
|
5 |
485d |
495d
|
28/29 |
321d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_dirent_validate
fs
|
7 |
|
|
|
214 |
462d |
513d
|
28/29 |
321d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_bkey_val_validate
fs
|
7 |
C |
|
|
17 |
402d |
515d
|
28/29 |
321d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_inode_unpack (2)
fs
|
7 |
|
|
|
9 |
466d |
481d
|
28/29 |
321d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_bkey_ptrs_validate
fs
|
7 |
C |
|
|
15 |
401d |
513d
|
28/29 |
321d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_readdir (2)
fs
|
7 |
|
|
|
2 |
471d |
472d
|
28/29 |
321d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_bucket_alloc_trans
fs
|
7 |
C |
|
|
15 |
374d |
506d
|
28/29 |
321d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_bkey_cmp_packed_inlined (2)
fs
|
7 |
C |
|
|
309 |
397d |
517d
|
28/29 |
321d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
kernel BUG in bch2_fs_initialize
fs
|
-1 |
syz |
done |
|
1004 |
376d |
381d
|
28/29 |
322d |
806776ad9c20
bcachefs: Add missing error handling
|
|
kernel BUG in qlist_free_all
net
fs
|
-1 |
C |
done |
done |
12 |
374d |
522d
|
28/29 |
322d |
3a04334d6282
bcachefs: Fix b->written overflow
|
|
WARNING in bch2_bkey_pick_read_device
fs
|
-1 |
C |
error |
|
89 |
392d |
396d
|
28/29 |
322d |
3c72d3eea97b
bcachefs: Fix WARN() in bch2_bkey_pick_read_device()
|
|
KASAN: slab-use-after-free Read in bchfs_read
fs
|
19 |
C |
done |
|
34 |
381d |
388d
|
28/29 |
322d |
34b47e3d73a2
bcachefs: Fix UAF in bchfs_read()
|
|
kernel BUG in bch2_run_recovery_pass (2)
fs
|
-1 |
C |
|
|
70 |
389d |
458d
|
28/29 |
322d |
962322475bb5
bcachefs: Handle backpointers with unknown data types
|
|
BUG: sleeping function called from invalid context in bch2_printbuf_make_room (2)
fs
|
5 |
C |
error |
|
59 |
389d |
391d
|
28/29 |
322d |
b2ffadcc7f8f
bcachefs: Fix scheduling while atomic from logging changes
|
|
kernel BUG in bch2_btree_node_iter_init
fs
|
-1 |
C |
done |
done |
167 |
345d |
449d
|
28/29 |
322d |
3a04334d6282
bcachefs: Fix b->written overflow
|
|
general protection fault in bch2_snapshot_tree_oldest_subvol
fs
|
8 |
C |
done |
|
14 |
367d |
389d
|
28/29 |
322d |
aa6a591f0fd7
bcachefs: Fix null ptr deref in bch2_snapshot_tree_oldest_subvol()
71f8e806a5e4
bcachefs: Stricter checks on "key allowed in this btree"
|
|
KASAN: slab-out-of-bounds Read in validate_bset_keys
fs
|
19 |
C |
|
|
5 |
421d |
421d
|
28/29 |
322d |
3a04334d6282
bcachefs: Fix b->written overflow
|
|
KMSAN: uninit-value in bch2_copygc (2)
fs
|
7 |
|
|
|
1 |
397d |
393d
|
28/29 |
322d |
9ea24b287b3b
bcachefs: Eliminate padding in move_bucket_key
|
|
KMSAN: uninit-value in bch2_write_inode
fs
|
7 |
C |
|
|
4476 |
410d |
458d
|
28/29 |
322d |
58517f4df842
bcachefs: Initialize from_inode members for bch_io_opts
|
|
kernel BUG in bch2_stripe_validate
fs
|
-1 |
C |
done |
done |
6 |
399d |
484d
|
28/29 |
322d |
71f8e806a5e4
bcachefs: Stricter checks on "key allowed in this btree"
|
|
kernel BUG in __journal_res_get (2)
fs
|
-1 |
C |
error |
done |
1527 |
322d |
530d
|
28/29 |
322d |
4c0d2c67ac6d
bcachefs: Fix early startup error path
|
|
KCSAN: data-race in bprm_execve / copy_fs (4)
mm
fs
|
6 |
|
|
|
1 |
404d |
404d
|
28/29 |
322d |
af7bb0d2ca45
exec: fix the racy usage of fs_struct->in_exec
|
|
BUG: unable to handle kernel paging request in efivarfs_pm_notify
fs
efi
|
8 |
C |
|
|
1037 |
418d |
429d
|
28/29 |
322d |
cb6ae457bc6a
efivarfs: Defer PM notifier registration until .fill_super
|
|
kernel BUG in __bch2_trans_commit
fs
|
-1 |
C |
unreliable |
|
11858 |
529d |
554d
|
28/29 |
352d |
8b22abb4c840
bcachefs: -o norecovery now bails out of recovery earlier
|
|
possible deadlock in bch2_alloc_sectors_start_trans
fs
|
4 |
C |
inconclusive |
|
64 |
511d |
532d
|
28/29 |
355d |
2cd85fea49d8
bcachefs: Don't recurse in check_discard_freespace_key
|
|
kernel BUG in bch2_get_scanned_nodes
fs
|
-1 |
C |
done |
|
101 |
455d |
516d
|
28/29 |
356d |
a6f4794fcd86
bcachefs: struct bkey_validate_context
|
|
kernel BUG in bch2_evacuate_bucket
fs
|
-1 |
C |
done |
|
4 |
519d |
519d
|
28/29 |
356d |
9e92d6e9efb0
bcachefs: Kill bch2_get_next_backpointer()
|
|
VFS: Busy inodes after unmount (use-after-free)
fs
|
2 |
C |
error |
|
55684 |
357d |
1189d
|
28/29 |
357d |
965b5dd1894f
ocfs2: free inode when ocfs2_get_init_inode() fails
|
|
kernel BUG in bch2_btree_path_traverse_one
fs
|
-1 |
C |
done |
|
9 |
504d |
538d
|
28/29 |
357d |
f11ca2ab18e3
bcachefs: Guard against backpointers to unknown btrees
|
|
kernel BUG in bch2_journal_pin_set
fs
|
-1 |
C |
done |
|
11 |
465d |
519d
|
28/29 |
357d |
b3d82c2f2761
bcachefs: Guard against journal seq overflow
|
|
WARNING in bch2_journal_flush_seq_async
fs
|
-1 |
C |
|
|
27 |
463d |
587d
|
28/29 |
357d |
4746ee182a76
bcachefs: Check for inode journal seq in the future
|
|
general protection fault in proc_scheduler
fs
|
2 |
syz |
|
|
6 |
476d |
481d
|
28/29 |
357d |
d38e26e36206
mptcp: sysctl: sched: avoid using current->nsproxy
|
|
kernel BUG in bch2_rechecksum_bio
fs
|
-1 |
C |
|
|
4 |
525d |
536d
|
28/29 |
357d |
9bdb3b73e732
bcachefs: Check for extent crc uncompressed/compressed size mismatch
|
|
kernel BUG in __bch2_journal_pin_put
fs
|
-1 |
C |
|
|
11 |
477d |
519d
|
28/29 |
357d |
b3d82c2f2761
bcachefs: Guard against journal seq overflow
|
|
kernel BUG in const_folio_flags (2)
fs
mm
|
-1 |
syz |
|
|
3 |
461d |
521d
|
28/29 |
357d |
3203b3ab0fcf
mm/filemap: don't call folio_test_locked() without a reference in next_uptodate_folio()
|
|
kernel BUG in __bch2_btree_node_write
fs
|
-1 |
C |
|
|
110 |
462d |
572d
|
28/29 |
357d |
75eabea6988e
bcachefs: Fix dup/misordered check in btree node read
|
|
kernel BUG in bch2_btree_node_lock_write
fs
|
-1 |
C |
done |
|
8 |
511d |
523d
|
28/29 |
357d |
f9e0a9be70c8
bcachefs: Issue a transaction restart after commit in repair
|
|
kernel BUG in bch2_btree_pos_to_text (2)
fs
|
-1 |
C |
|
|
51 |
464d |
522d
|
28/29 |
357d |
abf23afa36eb
bcachefs: Fix btree node scan when unknown btree IDs are present
|
|
kernel BUG in bch2_bucket_alloc_trans (3)
fs
|
-1 |
C |
error |
|
711 |
462d |
525d
|
28/29 |
357d |
828552ca74a4
bcachefs: Kill bch2_bucket_alloc_new_fs()
|
|
kernel BUG in bch2_journal_noflush_seq
fs
|
-1 |
C |
done |
done |
841 |
462d |
656d
|
28/29 |
357d |
0eafe758ac44
bcachefs: Check for bucket journal seq in the future
|
|
general protection fault in bch2_checksum
fs
|
19 |
C |
done |
|
34 |
358d |
650d
|
28/29 |
357d |
f7f196170dcd
bcachefs: cryptographic MACs on superblock are not (yet?) supported
|
|
possible deadlock in __bch2_fsck_err
fs
|
4 |
|
|
|
2 |
507d |
507d
|
28/29 |
357d |
49f2d182638a
bcachefs: Kill unnecessary mark_lock usage
|
|
WARNING: locking bug in eventfd_signal_mask
io-uring
fs
|
4 |
C |
done |
|
6 |
481d |
485d
|
28/29 |
357d |
a9c83a0ab66a
io_uring/timeout: flush timeouts outside of the timeout lock
|
|
general protection fault in bch2_btree_path_traverse_one
fs
|
8 |
C |
done |
|
564 |
449d |
550d
|
28/29 |
357d |
90f3683e8f7c
bcachefs: Fix null ptr deref in btree_path_lock_root()
c7e78f7b0178
bcachefs: Ignore empty btree root journal entries
|
|
BUG: corrupted list in bch2_btree_and_journal_iter_exit
fs
|
8 |
C |
done |
|
7 |
473d |
519d
|
28/29 |
357d |
0184dfa3b821
bcachefs: Fix journal_iter list corruption
|
|
WARNING in mark_buffer_dirty (6)
fs
|
-1 |
C |
error |
|
11669 |
357d |
924d
|
28/29 |
357d |
ca76bb226bf4
nilfs2: do not force clear folio if buffer is referenced
|
|
kernel BUG in bch2_bio_compress (2)
fs
|
-1 |
C |
|
|
5 |
405d |
530d
|
28/29 |
357d |
3d0b3b51c5ab
bcachefs: Don't BUG_ON() when superblock feature wasn't set for compressed data
|
|
kernel BUG in bch2_btree_write_buffer_flush_locked
fs
|
-1 |
C |
done |
|
35 |
466d |
547d
|
28/29 |
357d |
b3d82c2f2761
bcachefs: Guard against journal seq overflow
|
|
kernel BUG in bch2_btree_root_read
fs
|
-1 |
C |
|
|
9 |
447d |
522d
|
28/29 |
357d |
828552ca74a4
bcachefs: Kill bch2_bucket_alloc_new_fs()
|
|
KASAN: slab-out-of-bounds Write in __put_unused_fd
fs
|
22 |
C |
done |
|
5 |
479d |
483d
|
28/29 |
357d |
0c0214df28f0
fanotify: Fix crash in fanotify_init(2)
|
|
possible deadlock in page_cache_ra_unbounded
mm
fs
|
4 |
C |
error |
done |
163 |
463d |
1224d
|
28/29 |
419d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: use-after-free Read in reiserfs_fill_super (3)
fs
|
19 |
C |
error |
done |
47 |
526d |
571d
|
28/29 |
470d |
fb6f20ecb121
reiserfs: The last commit
|
|
kernel BUG in bch2_fs_btree_write_buffer_exit
fs
|
-1 |
C |
done |
|
6138 |
526d |
577d
|
28/29 |
485d |
ca43f73cd172
bcachefs: bch2_btree_write_buffer_flush_going_ro()
|
|
kernel BUG in bch2_journal_res_get (2)
fs
|
-1 |
C |
|
|
1710 |
526d |
550d
|
28/29 |
485d |
ca43f73cd172
bcachefs: bch2_btree_write_buffer_flush_going_ro()
|
|
kernel BUG in bch2_fs_btree_cache_exit
fs
|
-1 |
C |
done |
|
2766 |
526d |
557d
|
28/29 |
485d |
ca43f73cd172
bcachefs: bch2_btree_write_buffer_flush_going_ro()
|
|
kernel BUG in __bch2_btree_node_hash_insert
fs
|
-1 |
C |
done |
|
396 |
526d |
535d
|
28/29 |
498d |
0b6ec0c5ac6c
bcachefs: Fix assertion pop in topology repair
|
|
KASAN: slab-out-of-bounds Read in journal_entry_dev_usage_to_text
fs
|
17 |
C |
done |
|
33 |
528d |
637d
|
28/29 |
498d |
657d4282d8c4
bcachefs: Fix journal_entry_dev_usage_to_text() overrun
|
|
kernel BUG in __bkey_unpack_pos
fs
|
-1 |
C |
|
|
4 |
506d |
545d
|
28/29 |
498d |
dc537189b5cf
bcachefs: Fix validate_bset() repair path
|
|
kernel BUG in bch2_trans_node_iter_init
fs
|
-1 |
C |
done |
|
13 |
536d |
550d
|
28/29 |
498d |
f8f1dde68681
bcachefs: Fix missing validation for bch_backpointer.level
|
|
kernel BUG in bch2_btree_path_level_init (2)
fs
|
-1 |
C |
done |
|
29 |
502d |
552d
|
28/29 |
498d |
f8f1dde68681
bcachefs: Fix missing validation for bch_backpointer.level
|
|
KCSAN: data-race in __ep_remove / __fput (5)
fs
|
6 |
|
|
|
1 |
585d |
584d
|
28/29 |
498d |
6474353a5e3d
epoll: annotate racy check
|
|
kernel BUG in bch2_dev_btree_bitmap_mark
fs
|
-1 |
C |
done |
|
31 |
530d |
554d
|
28/29 |
498d |
27a036a0c3e7
bcachefs: Fix bch_member.btree_bitmap_shift validation
|
|
kernel BUG in bch2_bkey_pack_pos_lossy
fs
|
-1 |
C |
|
|
7 |
537d |
548d
|
28/29 |
498d |
dc537189b5cf
bcachefs: Fix validate_bset() repair path
|
|
kernel BUG in bch2_run_recovery_pass
fs
|
-1 |
C |
done |
|
17 |
530d |
551d
|
28/29 |
498d |
2642084f26b5
bcachefs: Allow for unknown key types in backpointers fsck
|
|
kernel BUG in bch2_ptr_swab
fs
|
-1 |
C |
inconclusive |
|
11 |
535d |
552d
|
28/29 |
498d |
840c2fbcc5cd
bcachefs: Fix assertion pop in bch2_ptr_swab()
|
|
kernel BUG in __bch2_bkey_cmp_packed_format_checked
fs
|
-1 |
C |
|
|
4 |
550d |
550d
|
28/29 |
502d |
d335bb3fd3a4
bcachefs: Ancient versions with bad bkey_formats are no longer supported
|
|
kernel BUG in bch2_bkey_cmp_packed
fs
|
-1 |
C |
|
|
8 |
537d |
550d
|
28/29 |
502d |
d335bb3fd3a4
bcachefs: Ancient versions with bad bkey_formats are no longer supported
|
|
kernel BUG in bch2_inconsistent_error
fs
|
-1 |
C |
|
|
4 |
537d |
548d
|
28/29 |
502d |
f9f0a5390dce
bcachefs: Change OPT_STR max to be 1 less than the size of choices array
|
|
KASAN: slab-use-after-free Read in bch2_reconstruct_alloc
fs
|
19 |
C |
done |
|
2 |
547d |
552d
|
28/29 |
530d |
8e910ca20e11
bcachefs: Fix UAF in bch2_reconstruct_alloc()
|
|
kernel BUG in bch2_bucket_alloc_trans (2)
fs
|
-1 |
C |
done |
|
103 |
530d |
558d
|
28/29 |
530d |
3fd27e9c57bf
bcachefs: init freespace inited bits to 0 in bch2_fs_initialize
|
|
KASAN: null-ptr-deref Read in bch2_sb_set_upgrade_extra
fs
|
11 |
C |
|
|
2 |
556d |
552d
|
28/29 |
530d |
a25a83de45b4
bcachefs: fix null-ptr-deref in have_stripes()
|
|
general protection fault in btree_node_iter_and_journal_peek
fs
|
2 |
C |
|
|
3 |
553d |
575d
|
28/29 |
530d |
3726a1970bd7
bcachefs: Fix NULL ptr dereference in btree_node_iter_and_journal_peek
|
|
UBSAN: shift-out-of-bounds in bch2_alloc_to_text
fs
|
-1 |
C |
|
|
29 |
542d |
554d
|
28/29 |
530d |
5c41f75d1b92
bcachefs: fix shift oob in alloc_lru_idx_fragmentation
|
|
UBSAN: shift-out-of-bounds in validate_sb_layout
fs
|
-1 |
C |
done |
|
7 |
543d |
552d
|
28/29 |
530d |
2045fc4295c4
bcachefs: Fix invalid shift in validate_sb_layout()
|
|
possible deadlock in bch2_replicas_entry_validate
fs
|
4 |
C |
done |
|
9468 |
553d |
572d
|
28/29 |
531d |
bf4baaa087e2
bcachefs: Fix lockdep splat in bch2_accounting_read
|
|
kernel BUG in bch2_btree_pos_to_text
fs
|
-1 |
C |
|
|
8 |
534d |
583d
|
28/29 |
531d |
0151d10a480d
bcachefs: add check for btree id against max in try read node
|
|
KCSAN: data-race in __fsnotify_parent / __fsnotify_recalc_mask (5)
fs
|
6 |
|
|
|
15 |
576d |
663d
|
28/29 |
531d |
35ceae44742e
fsnotify: Avoid data race between fsnotify_recalc_mask() and fsnotify_object_watched()
|
|
kernel BUG in submit_bh_wbc (3)
nilfs
fs
|
-1 |
C |
done |
|
18 |
554d |
561d
|
28/29 |
531d |
6ed469df0bfb
nilfs2: fix kernel bug due to missing clearing of buffer delay flag
|
|
general protection fault in prt_str
fs
|
2 |
C |
done |
|
2 |
574d |
589d
|
28/29 |
531d |
a30f32222df2
bcachefs: Fix NULL pointer dereference in bch2_opt_to_text
|
|
general protection fault in bch2_alloc_read
fs
|
2 |
C |
|
|
7 |
572d |
579d
|
28/29 |
531d |
a319aeaebb6c
bcachefs: Fix missing bounds checks in bch2_alloc_read()
|
|
UBSAN: shift-out-of-bounds in bch2_stripe_to_text
fs
|
-1 |
C |
|
|
3 |
583d |
579d
|
28/29 |
531d |
9f25dbe0bf91
bcachefs: Add missing validation for bch_stripe.csum_granularity_bits
|
|
UBSAN: shift-out-of-bounds in member_to_text
fs
|
-1 |
C |
|
|
12 |
558d |
603d
|
28/29 |
531d |
c1bd21bb6518
bcachefs: Fix invalid shift in member_to_text()
|
|
KASAN: slab-use-after-free Read in bch2_direct_write
fs
|
19 |
|
|
|
11 |
576d |
578d
|
28/29 |
531d |
573ddcdc5607
bcachefs: fix uaf in bch2_dio_write_done()
|
|
WARNING in __bch2_fsck_err (2)
fs
|
-1 |
C |
|
|
3 |
571d |
567d
|
28/29 |
551d |
5612daafb764
bcachefs: Fix fsck warnings from bkey validation
|
|
general protection fault in bch2_fs_recovery
fs
|
8 |
C |
|
|
10 |
576d |
595d
|
28/29 |
553d |
025c55a4c7f1
bcachefs: return err ptr instead of null in read sb clean
|
|
kernel BUG in vfs_get_tree
fs
|
-1 |
C |
done |
|
318 |
571d |
614d
|
28/29 |
553d |
b29c30ab48e0
bcachefs: Fix incorrect IS_ERR_OR_NULL usage
|
|
KMSAN: uninit-value in bch2_bkey_cmp_packed_inlined
fs
|
7 |
C |
|
|
7 |
576d |
596d
|
28/29 |
553d |
0696a18a8cc3
bcachefs: memset bounce buffer portion to 0 after key_sort_fix_overlapping
|
|
WARNING: suspicious RCU usage in bch2_snapshot_tree_oldest_subvol
fs
|
4 |
C |
|
|
21 |
576d |
588d
|
28/29 |
553d |
39c3aad43f6f
bcachefs: Hold read lock in bch2_snapshot_tree_oldest_subvol()
|
|
general protection fault in __copy_super
fs
|
2 |
C |
done |
|
5 |
581d |
584d
|
28/29 |
553d |
40d40c6bea19
bcachefs: assign return error when iterating through layout
|
|
KASAN: slab-use-after-free Read in lockref_get_not_dead (2)
fs
|
19 |
syz |
error |
|
1 |
603d |
599d
|
28/29 |
553d |
4e32c25b58b9
libfs: fix get_stashed_dentry()
|
|
kernel BUG in bch2_lru_change (2)
fs
|
-1 |
C |
|
|
2 |
620d |
620d
|
28/29 |
572d |
9482f3b05332
bcachefs: avoid overflowing LRU_TIME_BITS for cached data lru
|
|
WARNING in bch2_fs_journal_stop
fs
|
-1 |
C |
done |
|
1463 |
619d |
650d
|
28/29 |
572d |
7f2de6947f92
bcachefs: Fix warning in bch2_fs_journal_stop()
|
|
kernel BUG in bch2_journal_replay
fs
|
-1 |
C |
done |
|
3 |
615d |
687d
|
28/29 |
572d |
cab18be6957b
bcachefs: Fix replay_now_at() assert
|
|
WARNING in bch2_write_super
fs
|
-1 |
|
|
|
3 |
619d |
615d
|
28/29 |
572d |
6575b8c9877c
bcachefs: Fix locking in bch2_ioc_setlabel()
|
|
KMSAN: uninit-value in bch2_alloc_v4_validate
fs
|
7 |
C |
|
|
5 |
615d |
614d
|
28/29 |
572d |
8ed823b19214
bcachefs: Fix compat issue with old alloc_v4 keys
|
|
WARNING in __bch2_fsck_err
fs
|
-1 |
C |
|
|
200 |
573d |
620d
|
28/29 |
572d |
075cabf324c3
bcachefs: Fix forgetting to pass trans to fsck_err()
|
|
KASAN: slab-out-of-bounds Write in bch2_dev_journal_init
fs
|
21 |
C |
|
|
2 |
618d |
618d
|
28/29 |
572d |
bdbdd4759f08
bcachefs: Fix missing validation in bch2_sb_journal_v2_validate()
|
|
WARNING in discard_new_inode
fs
|
-1 |
C |
|
|
3 |
620d |
620d
|
28/29 |
572d |
99c87fe0f584
bcachefs: fix incorrect i_state usage
|
|
kernel BUG in bch2_sort_keys
fs
|
-1 |
C |
error |
|
3 |
699d |
723d
|
27/29 |
599d |
5dfd3746b6c4
bcachefs: Fix needs_whiteout BUG_ON() in bkey_sort()
|
|
WARNING in __virt_to_phys (5)
fs
|
-1 |
|
|
|
4 |
623d |
619d
|
27/29 |
607d |
9bd01500e4d8
bcachefs: Fix freeing of error pointers
|
|
possible deadlock in bch2_gc_mark_key
fs
|
4 |
C |
done |
|
86 |
624d |
701d
|
27/29 |
607d |
1841027c7de4
bcachefs: bch2_gc_btree() should not use btree_root_lock
|
|
WARNING in __replicas_deltas_realloc
fs
|
-1 |
C |
|
|
9 |
627d |
649d
|
27/29 |
608d |
1d16c605cc55
bcachefs: Disk space accounting rewrite
|
|
kernel BUG in bch2_bucket_alloc_freelist
fs
|
-1 |
|
|
|
1 |
678d |
674d
|
27/29 |
609d |
44ec5990357b
bcachefs: Don't use the new_fs() bucket alloc path on an initialized fs
|
|
kernel BUG in bch2_fs_journal_stop
fs
|
-1 |
C |
done |
|
4370 |
622d |
715d
|
27/29 |
609d |
600b8be5e747
bcachefs: Change bch2_fs_journal_stop() BUG_ON() to warning
|
|
kernel BUG in __replicas_entry_idx
fs
|
-1 |
C |
done |
unreliable |
3 |
705d |
708d
|
27/29 |
609d |
8bb8d683a401
bcachefs: Delete journal-buf-sharded old style accounting
|
|
kernel BUG in bch2_fs_release (2)
fs
|
-1 |
|
|
|
1 |
673d |
669d
|
27/29 |
609d |
759b2e800f16
bcachefs: Switch online_reserved shutdown assert to WARN()
|
|
kernel panic: not locked: inodes NUM:NUM:NUM cached
fs
|
2 |
C |
|
|
2 |
693d |
704d
|
27/29 |
610d |
385f0c05d670
bcachefs: kill key cache arg to bch2_assert_pos_locked()
|
|
BUG: MAX_LOCK_DEPTH too low! (4)
fs
|
-1 |
C |
error |
|
1364 |
624d |
720d
|
27/29 |
611d |
375476c41405
bcachefs: Add lockdep support for btree node locks
|
|
WARNING in bch2_fs_ioctl
fs
|
-1 |
C |
done |
|
36 |
624d |
686d
|
27/29 |
613d |
d293ece10810
bcachefs: Fix shutdown ordering
|
|
KASAN: global-out-of-bounds Read in srcu_gp_start_if_needed
fs
|
17 |
|
|
|
1 |
705d |
701d
|
27/29 |
613d |
d293ece10810
bcachefs: Fix shutdown ordering
|
|
kernel panic: bch_dev->ref underflow, last put: bch2_get_next_dev
fs
|
2 |
C |
done |
|
21 |
704d |
714d
|
27/29 |
613d |
9667214b30ef
bcachefs: Fix ref in trans_mark_dev_sbs() error path
|
|
WARNING: suspicious RCU usage in bch2_bucket_ref_update
fs
|
4 |
C |
done |
|
5 |
659d |
658d
|
27/29 |
622d |
6f692b1672bd
bcachefs: Fix RCU splat
|
|
kernel BUG in bch2_bucket_alloc_trans
fs
|
-1 |
|
|
|
18 |
648d |
677d
|
27/29 |
622d |
44ec5990357b
bcachefs: Don't use the new_fs() bucket alloc path on an initialized fs
|
|
BUG: sleeping function called from invalid context in bch2_printbuf_make_room
fs
|
5 |
C |
done |
|
27 |
647d |
645d
|
27/29 |
622d |
737759fc098f
bcachefs: Fix printbuf usage while atomic
|
|
UBSAN: shift-out-of-bounds in bch2_bkey_format_invalid (2)
fs
|
-1 |
C |
|
|
117 |
623d |
687d
|
27/29 |
622d |
a0bd30e4ea9d
bcachefs: Fix shift greater than integer size
|
|
WARNING: lock held when returning to user space in ns_ioctl
fs
|
4 |
C |
done |
|
147 |
638d |
649d
|
27/29 |
622d |
280e36f0d5b9
nsfs: use cleanup guard
|
|
BUG: unable to handle kernel NULL pointer dereference in path_from_stashed
fs
|
10 |
C |
|
|
23 |
643d |
647d
|
27/29 |
622d |
f60d38cb02d0
pidfs: when time ns disabled add check for ioctl
|
|
kernel BUG in bch2_ioctl_fsck_online
fs
|
-1 |
C |
done |
|
3 |
678d |
674d
|
26/29 |
654d |
9bd01500e4d8
bcachefs: Fix freeing of error pointers
|
|
WARNING in __virt_to_phys (4)
fs
|
-1 |
C |
|
|
2 |
667d |
663d
|
26/29 |
654d |
9bd01500e4d8
bcachefs: Fix freeing of error pointers
|
|
UBSAN: shift-out-of-bounds in bch2_btree_node_read_done
fs
|
-1 |
C |
|
|
3 |
681d |
705d
|
26/29 |
655d |
9e7cfb35e266
bcachefs: Check for invalid btree IDs
|
|
UBSAN: array-index-out-of-bounds in bch2_bkey_swab_key
fs
|
15 |
|
|
|
2 |
690d |
688d
|
26/29 |
657d |
d47df4f616d5
bcachefs: Fix array-index-out-of-bounds
|
|
INFO: task hung in journal_quiesce
fs
|
1 |
syz |
|
|
76 |
668d |
697d
|
26/29 |
657d |
89d21b69b4f8
bcachefs: Add missing bch2_journal_do_writes() call
|
|
UBSAN: array-index-out-of-bounds in lock_timer_base
fs
kvm
|
15 |
|
|
|
4 |
680d |
694d
|
26/29 |
658d |
b79922009214
bcachefs: Add missing synchronize_srcu_expedited() call when shutting down
|
|
WARNING in bch2_fs_read_write_early
fs
|
-1 |
C |
|
|
35 |
675d |
683d
|
26/29 |
658d |
1ba44217f825
bcachefs: delete_dead_snapshots() doesn't need to go RW
|
|
UBSAN: shift-out-of-bounds in read_one_super (2)
fs
|
-1 |
|
|
|
4 |
683d |
680d
|
26/29 |
658d |
d406545613b5
bcachefs: Fix shift overflow in read_one_super()
|
|
KASAN: slab-use-after-free Read in bch2_sb_errors_from_cpu
fs
|
19 |
C |
|
|
2 |
675d |
672d
|
26/29 |
658d |
211c581de28e
bcachefs: slab-use-after-free Read in bch2_sb_errors_from_cpu
|
|
UBSAN: shift-out-of-bounds in bch2_blacklist_entries_gc
fs
|
-1 |
C |
|
|
45 |
672d |
672d
|
26/29 |
658d |
472237b69d07
bcachefs: Fix shift-out-of-bounds in bch2_blacklist_entries_gc
|
|
kernel BUG in bch2_journal_res_get
fs
|
-1 |
C |
|
|
2 |
688d |
684d
|
26/29 |
658d |
dbf4d79b7fc7
bcachefs: Fix early init error path in journal code
|
|
kernel BUG in bch2_lru_change
fs
|
-1 |
C |
done |
|
4 |
675d |
690d
|
26/29 |
658d |
cff07e2739d8
bcachefs: Guard against overflowing LRU_TIME_BITS
|
|
WARNING: locking bug in srcu_gp_start_if_needed
kvm
fs
|
4 |
|
|
|
2 |
685d |
686d
|
26/29 |
658d |
f770a6e9a3d7
bcachefs: Fix initialization order for srcu barrier
|
|
WARNING: kmalloc bug in __snapshot_t_mut
fs
|
-1 |
C |
done |
|
10 |
668d |
698d
|
26/29 |
658d |
64cd7de998f3
bcachefs: Fix kmalloc bug in __snapshot_t_mut
|
|
KASAN: slab-use-after-free Read in bch2_fs_recovery
fs
|
19 |
|
|
|
21 |
676d |
676d
|
26/29 |
658d |
2fe79ce7d1e8
bcachefs: Fix a UAF after write_super()
|
|
WARNING: locking bug in __timer_delete_sync
fs
kvm
|
4 |
|
|
|
6 |
671d |
696d
|
26/29 |
658d |
b79922009214
bcachefs: Add missing synchronize_srcu_expedited() call when shutting down
|
|
kernel BUG in gc_bucket
fs
|
-1 |
C |
done |
|
221 |
691d |
696d
|
26/29 |
658d |
9432e90df1b8
bcachefs: Check for invalid bucket from bucket_gen(), gc_bucket()
|
|
general protection fault in bch2_fs_btree_key_cache_exit
fs
|
2 |
|
|
|
6 |
684d |
684d
|
26/29 |
676d |
b30b70ad8bff
bcachefs: Fix early error path in bch2_fs_btree_key_cache_exit()
|
|
UBSAN: shift-out-of-bounds in bch2_sb_dev_has_data
fs
|
-1 |
C |
done |
|
15 |
716d |
714d
|
25/29 |
686d |
bcfbaea8e547
bcachefs: Fix shift overflows in replicas.c
|
|
kernel panic: not locked: inodes NUM:ADDR:NUM cached
fs
|
2 |
C |
|
|
2 |
713d |
709d
|
25/29 |
686d |
6ce26ad376bd
bcachefs: Fix missing parens in drop_locks_do()
|
|
kernel BUG in bch2_btree_iter_verify_entry_exit
fs
|
-1 |
C |
done |
|
3 |
706d |
712d
|
25/29 |
686d |
765b8cb8acab
bcachefs: Check for subvolues with bogus snapshot/inode fields
|
|
kernel BUG in bch2_checksum
fs
|
-1 |
C |
done |
|
9 |
704d |
714d
|
25/29 |
686d |
6b74fdcc8e25
bcachefs: bch2_checksum() returns 0 for unknown checksum type
|
|
general protection fault in poll_state_synchronize_srcu
fs
|
2 |
|
|
|
5 |
706d |
706d
|
25/29 |
686d |
d293ece10810
bcachefs: Fix shutdown ordering
|
|
kernel BUG in cpu_replicas_add_entry
fs
|
-1 |
C |
done |
|
11 |
697d |
716d
|
25/29 |
686d |
5fa421448d1f
bcachefs: Fix bogus verify_replicas_entry() assert
|
|
KASAN: stack-out-of-bounds Read in __bch2_encrypt_bio
fs
|
17 |
C |
done |
|
2 |
717d |
714d
|
25/29 |
686d |
2ba24864d2f6
bcachefs: Fix stack oob in __bch2_encrypt_bio()
|
|
UBSAN: shift-out-of-bounds in bch2_btree_lost_data
fs
|
-1 |
C |
done |
|
3 |
712d |
711d
|
25/29 |
686d |
f108ddd467b5
bcachefs: Fix shift overflow in btree_lost_data()
|
|
kernel BUG in bch2_fs_release
fs
|
-1 |
|
|
|
3 |
698d |
703d
|
25/29 |
686d |
d509cadc3a48
bcachefs: Fix debug assert
|
|
kernel panic: bch_dev->ref underflow, last put: bch2_trigger_alloc
fs
|
2 |
C |
done |
|
6 |
704d |
715d
|
25/29 |
686d |
9667214b30ef
bcachefs: Fix ref in trans_mark_dev_sbs() error path
|
|
general protection fault in __bch2_insert_snapshot_whiteouts
fs
|
8 |
C |
done |
|
65 |
701d |
714d
|
25/29 |
686d |
6d48e61364ae
bcachefs: Add missing guard in bch2_snapshot_has_children()
|
|
KASAN: slab-use-after-free Read in evict_inodes
fs
|
19 |
C |
done |
|
2 |
719d |
715d
|
25/29 |
686d |
d93ff5fa40b9
bcachefs: Fix race path in bch2_inode_insert()
|
|
KMSAN: uninit-value in bch2_dirent_invalid
fs
|
7 |
C |
|
|
239 |
686d |
714d
|
25/29 |
686d |
2195b755ebd2
bcachefs: Fix unsafety in bch2_dirent_name_bytes()
|
|
kernel BUG in bch2_fs_recovery
fs
|
-1 |
C |
done |
done |
161 |
719d |
724d
|
25/29 |
687d |
7ffec9ccdc6a
bcachefs: don't free error pointers
|
|
UBSAN: shift-out-of-bounds in read_one_super
fs
|
-1 |
C |
done |
|
31 |
693d |
722d
|
25/29 |
692d |
71dac2482ad3
bcachefs: BCH_SB_LAYOUT_SIZE_BITS_MAX
|
|
WARNING: kmalloc bug in bch2_dev_buckets_resize
fs
|
-1 |
C |
|
|
17 |
692d |
724d
|
25/29 |
692d |
db42549d402c
bcachefs: Add a better limit for maximum number of buckets
|
|
WARNING in __virt_to_phys (3)
fs
|
-1 |
C |
|
|
447 |
692d |
725d
|
25/29 |
692d |
7ffec9ccdc6a
bcachefs: don't free error pointers
|
|
KMSAN: uninit-value in __bch2_write_index
fs
|
7 |
|
|
|
1 |
724d |
724d
|
25/29 |
692d |
1267df40acb2
bcachefs: Initialize bch_write_op->failed in inline data path
|
|
BUG: unable to handle kernel paging request in bch2_fs_btree_key_cache_exit
fs
|
8 |
C |
|
|
1002 |
692d |
725d
|
25/29 |
692d |
b30b70ad8bff
bcachefs: Fix early error path in bch2_fs_btree_key_cache_exit()
|
|
UBSAN: shift-out-of-bounds in __bch2_bkey_invalid
fs
|
-1 |
C |
done |
|
6 |
697d |
723d
|
25/29 |
692d |
2bb9600d5d47
bcachefs: Guard against unknown k.k->type in __bkey_invalid()
|
|
KASAN: slab-out-of-bounds Read in bch2_sb_downgrade_to_text
fs
|
17 |
C |
done |
|
32 |
709d |
722d
|
25/29 |
692d |
692aa7a54b2b
bcachefs: Fix sb_field_downgrade validation
|
|
KASAN: slab-out-of-bounds Read in bch2_sb_clean_to_text
fs
|
17 |
C |
done |
|
3 |
713d |
723d
|
25/29 |
692d |
f39055220f6f
bcachefs: Add missing validation for superblock section clean
|
|
kernel BUG in bch2_alloc_v4_invalid
fs
|
-1 |
C |
error |
|
3 |
699d |
723d
|
25/29 |
692d |
6b8cbfc3db75
bcachefs: Fix assert in bch2_alloc_v4_invalid()
|
|
KASAN: slab-out-of-bounds Read in bch2_varint_decode_fast
fs
|
17 |
C |
|
|
583 |
692d |
725d
|
25/29 |
692d |
4a8521b6bb81
bcachefs: Inodes need extra padding for varint_decode_fast()
|
|
UBSAN: shift-out-of-bounds in bch2_bkey_format_invalid
fs
|
-1 |
C |
|
|
45 |
695d |
720d
|
25/29 |
692d |
61692c7812ab
bcachefs: bch2_bkey_format_field_overflows()
|
|
UBSAN: shift-out-of-bounds in rewrite_old_nodes_pred
fs
|
-1 |
C |
done |
|
3 |
723d |
723d
|
25/29 |
692d |
0ec5b3b7ccfc
bcachefs: Fix shift-by-64 in bformat_needs_redo()
|
|
kernel BUG in bch2_btree_node_read_done
fs
|
-1 |
C |
error |
|
5 |
722d |
725d
|
25/29 |
692d |
a2ddaf965f6a
bcachefs: bucket_pos_to_bp_noerror()
|
|
INFO: rcu detected stall in rtnl_newlink (4)
sctp
fs
|
1 |
C |
error |
|
9 |
713d |
789d
|
25/29 |
705d |
b1f532a3b1e6
batman-adv: Avoid infinite loop trying to resize local TT
|
|
KASAN: slab-use-after-free Read in __fput (2)
fs
|
19 |
C |
done |
|
6 |
729d |
735d
|
25/29 |
705d |
4efaa5acf0a1
epoll: be better about file lifetimes
|
|
general protection fault in __ep_remove
fs
|
2 |
C |
|
|
1 |
751d |
750d
|
25/29 |
705d |
4efaa5acf0a1
epoll: be better about file lifetimes
|
|
WARNING: ODEBUG bug in bdev_super_lock (2)
fs
|
-1 |
C |
done |
|
3 |
743d |
741d
|
25/29 |
705d |
22650a99821d
fs,block: yield devices early
|
|
kernel BUG at fs/inode.c:LINE! (2)
fs
|
-1 |
C |
done |
unreliable |
322 |
721d |
2069d
|
25/29 |
707d |
319c15174757
epoll: take epitem list out of struct file
|
|
WARNING in stashed_dentry_prune (2)
fs
|
-1 |
C |
done |
|
54 |
732d |
741d
|
25/29 |
710d |
9d9539db8638
pidfs: remove config option
|
|
WARNING in __sk_destruct
batman
fs
|
-1 |
|
|
|
2 |
760d |
792d
|
25/29 |
746d |
2a750d6a5b36
rds: tcp: Fix use-after-free of net in reqsk_timer_handler().
|
|
WARNING in stashed_dentry_prune
fs
|
-1 |
C |
done |
|
20 |
777d |
776d
|
25/29 |
747d |
9d9539db8638
pidfs: remove config option
|
|
WARNING: ODEBUG bug in bdev_super_lock
fs
|
-1 |
C |
|
|
3 |
750d |
761d
|
25/29 |
748d |
59a55a63c246
fs,block: get holder during claim
|
|
KASAN: slab-use-after-free Read in sys_io_cancel
fs
|
19 |
C |
done |
|
894 |
748d |
786d
|
25/29 |
748d |
28468cbed92e
Revert "fs/aio: Make io_cancel() generate completions again"
|
|
BUG: sleeping function called from invalid context in __getblk_gfp
fs
|
5 |
C |
error |
done |
3673 |
853d |
1247d
|
25/29 |
748d |
f123dc86388c
sysv: don't call sb_bread() with pointers_lock held
|
|
possible deadlock in reiserfs_dirty_inode
fs
|
4 |
C |
done |
done |
519 |
819d |
1247d
|
25/29 |
769d |
6f861765464f
fs: Block writes to mounted block devices
|
|
BUG: sleeping function called from invalid context in __bread_gfp
fs
|
5 |
C |
error |
done |
359 |
845d |
1246d
|
25/29 |
769d |
6f861765464f
fs: Block writes to mounted block devices
|
|
INFO: task hung in reiserfs_sync_fs
fs
|
1 |
C |
error |
done |
22 |
844d |
1224d
|
25/29 |
769d |
6f861765464f
fs: Block writes to mounted block devices
|
|
general protection fault in __fget_files (2)
fs
|
2 |
C |
done |
done |
1 |
852d |
848d
|
25/29 |
797d |
6f861765464f
fs: Block writes to mounted block devices
|
|
BUG: unable to handle kernel paging request in reiserfs_readdir_inode
fs
|
19 |
C |
error |
done |
11 |
843d |
1209d
|
25/29 |
797d |
6f861765464f
fs: Block writes to mounted block devices
|
|
kernel BUG in entry_points_to_object
fs
|
-1 |
C |
done |
done |
21 |
843d |
888d
|
25/29 |
797d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: vmalloc-out-of-bounds Read in cleanup_bitmap_list
fs
|
17 |
C |
error |
done |
100 |
846d |
1277d
|
25/29 |
801d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: use-after-free Read in set_de_name_and_namelen
fs
|
19 |
C |
error |
done |
15 |
849d |
1250d
|
25/29 |
805d |
6f861765464f
fs: Block writes to mounted block devices
|
|
BUG: unable to handle kernel NULL pointer dereference in reiserfs_find_entry
fs
|
19 |
C |
error |
done |
25 |
852d |
1288d
|
25/29 |
816d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: use-after-free Read in reiserfs_get_unused_objectid
fs
|
19 |
C |
inconclusive |
done |
3 |
853d |
1126d
|
25/29 |
818d |
6f861765464f
fs: Block writes to mounted block devices
|
|
possible deadlock in chown_common
fs
|
4 |
C |
error |
done |
22 |
827d |
1296d
|
25/29 |
819d |
6f861765464f
fs: Block writes to mounted block devices
|
|
kernel BUG in balance_leaf
fs
|
-1 |
C |
error |
done |
16 |
858d |
1210d
|
25/29 |
819d |
6f861765464f
fs: Block writes to mounted block devices
|
|
possible deadlock in pipe_write
fs
|
4 |
C |
inconclusive |
|
181 |
821d |
1499d
|
25/29 |
819d |
055ca8355991
fs/pipe: Fix lockdep false-positive in watchqueue pipe_write()
|
|
kernel BUG in direntry_check_right
fs
|
-1 |
C |
done |
done |
2 |
857d |
901d
|
25/29 |
819d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: slab-out-of-bounds Read in search_by_key (2)
fs
|
17 |
C |
|
|
4435 |
840d |
1272d
|
25/29 |
819d |
dd8f87f21dc3
reiserfs: fix uninit-value in comp_keys
|
|
INFO: trying to register non-static key in debugfs_file_get
fs
|
-1 |
|
|
|
289 |
859d |
859d
|
25/29 |
826d |
88ac06a9f938
Revert "debugfs: annotate debugfs handlers vs. removal with lockdep"
|
|
WARNING in debugfs_file_get
fs
|
-1 |
|
|
|
239 |
860d |
877d
|
25/29 |
826d |
88ac06a9f938
Revert "debugfs: annotate debugfs handlers vs. removal with lockdep"
|
|
WARNING in pagemap_scan_pmd_entry
fs
|
-1 |
C |
inconclusive |
|
48 |
872d |
895d
|
25/29 |
828d |
0dff1b407def
mm/pagemap: fix ioctl(PAGEMAP_SCAN) on vma check
|
|
WARNING in page_copy_sane
fs
mm
|
-1 |
C |
done |
|
3 |
957d |
953d
|
25/29 |
859d |
a08c7193e4f1
mm/filemap: remove hugetlb special casing in filemap.c
|
|
INFO: rcu detected stall in statfs
fs
|
1 |
|
|
|
1 |
989d |
989d
|
23/29 |
929d |
8c21ab1bae94
net/sched: fq_pie: avoid stalls in fq_pie_timer()
|
|
possible deadlock in inode_add_bytes
fs
|
4 |
C |
done |
|
124 |
1016d |
1015d
|
23/29 |
929d |
509f006932de
shmem: fix quota lock nesting in huge hole handling
|
|
INFO: task hung in pipe_release (4)
fs
|
1 |
C |
done |
|
51 |
1021d |
1021d
|
23/29 |
929d |
0f71c9caf267
udp: Fix __ip_append_data()'s handling of MSG_SPLICE_PAGES
|
|
KASAN: slab-use-after-free Read in test_bdev_super_fc
fs
|
19 |
C |
done |
|
7 |
996d |
998d
|
23/29 |
929d |
aca740cecbe5
fs: open block device after superblock creation
|
|
KMSAN: uninit-value in reiserfs_security_init
fs
|
7 |
|
|
|
4169 |
1023d |
1083d
|
23/29 |
943d |
d031f4e8b493
reiserfs: Initialize sec->length in reiserfs_security_init().
|
|
general protection fault in splice_to_socket
fs
|
2 |
C |
done |
|
4 |
1048d |
1051d
|
23/29 |
943d |
ca2d49f77ce4
splice, net: Fix splice_to_socket() to handle pipe bufs larger than a page
|
|
KASAN: null-ptr-deref Write in get_block (2)
fs
|
12 |
C |
error |
|
11 |
1038d |
1071d
|
23/29 |
943d |
ea2b62f30589
fs/sysv: Null check to prevent null-ptr-deref bug
|
|
KCSAN: data-race in inotify_handle_inode_event / inotify_remove_from_idr
fs
|
6 |
|
|
|
363 |
1086d |
1100d
|
22/29 |
1032d |
c915d8f5918b
inotify: Avoid reporting event with invalid wd
|
|
possible deadlock in do_writepages
fs
mm
|
4 |
|
|
|
15 |
1097d |
1100d
|
22/29 |
1032d |
00d873c17e29
ext4: avoid deadlock in fs reclaim with page writeback
|
|
KASAN: null-ptr-deref Read in ida_free (3)
fs
|
11 |
C |
error |
|
4 |
1129d |
1125d
|
22/29 |
1055d |
cb2239c198ad
fs: drop peer group ids under namespace lock
|
|
KMSAN: uninit-value in ondemand_readahead
fs
mm
|
7 |
C |
|
|
221 |
1152d |
1316d
|
22/29 |
1055d |
3e35102666f8
fs/cramfs/inode.c: initialize file_ra_state
|
|
INFO: task hung in write_cache_pages (2)
mm
fs
|
1 |
C |
done |
|
36 |
1083d |
1153d
|
22/29 |
1055d |
fb3592c41a44
migrate_pages: fix deadlock in batched migration
|
|
KMSAN: uninit-value in vfs_write
fs
|
7 |
C |
|
|
3 |
1178d |
1148d
|
22/29 |
1055d |
2b4c99f7d9a5
can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write
|
|
KASAN: use-after-free Read in mas_next_nentry
fs
mm
|
19 |
C |
error |
done |
343 |
1268d |
1462d
|
22/29 |
1159d |
59f2f4b8a757
fs/userfaultfd: Fix maple tree iterator in userfaultfd_unregister()
|
|
linux-next boot error: kernel BUG in putname
fs
|
-1 |
|
|
|
1 |
1351d |
1351d
|
22/29 |
1159d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
kernel panic: corrupted stack end in tun_chr_close
fs
|
2 |
|
|
|
1 |
1450d |
1450d
|
22/29 |
1159d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
INFO: rcu detected stall in sys_lsetxattr
fs
|
1 |
C |
done |
|
2 |
1470d |
1470d
|
22/29 |
1159d |
0014edaedfd8
fs: unset MNT_WRITE_HOLD on failure
|
|
upstream boot error: general protection fault in __proc_create
fs
|
-1 |
|
|
|
1 |
1353d |
1353d
|
22/29 |
1159d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
INFO: rcu detected stall in sys_setxattr (2)
fs
|
1 |
C |
done |
|
3 |
1470d |
1470d
|
22/29 |
1159d |
0014edaedfd8
fs: unset MNT_WRITE_HOLD on failure
|
|
general protection fault in __dentry_path (2)
fs
|
8 |
C |
error |
|
174 |
1464d |
1474d
|
22/29 |
1159d |
5c697c367a66
KVM: Initialize debugfs_dentry when a VM is created to avoid NULL deref
|
|
WARNING in mntput_no_expire (3)
fs
|
-1 |
C |
inconclusive |
|
29 |
1209d |
1624d
|
22/29 |
1159d |
a91714312eb1
percpu_ref_init(): clean ->percpu_count_ref on failure
|
|
kernel panic: stack is corrupted in ksys_write
fs
|
2 |
|
|
|
1 |
1332d |
1328d
|
22/29 |
1159d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
KASAN: slab-out-of-bounds Read in __fscache_acquire_volume
fs
mm
|
17 |
C |
done |
done |
1 |
1338d |
1337d
|
22/29 |
1159d |
9f0933ac026f
fscache: fix OOB Read in __fscache_acquire_volume
|
|
KASAN: use-after-free Read in do_sync_mmap_readahead
mm
fs
|
19 |
|
|
|
1 |
1438d |
1434d
|
22/29 |
1159d |
dcfa24ba6899
filemap: Cache the value of vm_flags
|
|
usb-testing boot error: general protection fault in rcu_core
fs
mm
|
-1 |
|
|
|
23 |
1333d |
1351d
|
22/29 |
1159d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
KASAN: null-ptr-deref Write in io_file_get_normal
io-uring
fs
|
12 |
C |
done |
|
107 |
1404d |
1489d
|
22/29 |
1159d |
d5361233e9ab
io_uring: drop the old style inflight file tracking
|
|
usb-testing boot error: BUG: unable to handle kernel paging request in insert_header
fs
|
-1 |
|
|
|
1 |
1337d |
1337d
|
22/29 |
1159d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
memory leak in iovec_from_user
fs
io-uring
|
3 |
C |
|
|
1 |
1476d |
1472d
|
22/29 |
1159d |
323b190ba2de
io_uring: free iovec if file assignment fails
|
|
KCSAN: data-race in do_epoll_wait / do_epoll_wait
fs
|
6 |
|
|
|
83 |
1434d |
1643d
|
22/29 |
1159d |
d679ae94fdd5
list: fix a data-race around ep->rdllist
|
|
usb-testing boot error: general protection fault in __register_sysctl_table (2)
fs
|
-1 |
|
|
|
1 |
1337d |
1337d
|
22/29 |
1159d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
BUG: unable to handle kernel paging request in truncate_inode_partial_folio
fs
mm
|
8 |
C |
error |
|
4 |
1360d |
1399d
|
22/29 |
1159d |
84ac013046cc
secretmem: fix unhandled fault in truncate
|
|
kernel BUG in ntfs_read_inode_mount
fs
|
-1 |
|
|
|
1 |
1563d |
1562d
|
22/29 |
1159d |
714fbf2647b1
ntfs: add sanity check on allocation size
|
|
kernel panic: corrupted stack end in lo_ioctl
mm
fs
|
2 |
|
|
|
4 |
1165d |
1287d
|
22/29 |
1159d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
general protection fault in legacy_parse_param
fs
|
21 |
C |
done |
|
20 |
1499d |
1760d
|
22/29 |
1159d |
ecff30575b5a
LSM: general protection fault in legacy_parse_param
|
|
KASAN: use-after-free Read in io_rsrc_node_ref_zero
fs
|
19 |
C |
done |
|
3 |
1527d |
1526d
|
22/29 |
1159d |
80912cef18f1
io_uring: disallow modification of rsrc_data during quiesce
|
|
KASAN: use-after-free Read in add_wait_queue
fs
io-uring
|
19 |
C |
done |
done |
13 |
1491d |
1498d
|
22/29 |
1159d |
d89a4fac0fbc
io_uring: fix assuming triggered poll waitqueue is the single poll
|
|
BUG: unable to handle kernel NULL pointer dereference in io_do_iopoll
fs
io-uring
|
10 |
C |
done |
|
3 |
1443d |
1442d
|
22/29 |
1159d |
aa184e8671f0
io_uring: don't attempt to IOPOLL for MSG_RING requests
|
|
possible deadlock in snd_hrtimer_callback (2)
fs
|
4 |
C |
inconclusive |
|
582 |
1363d |
1630d
|
22/29 |
1159d |
96b097091c66
ALSA: pcm: Use deferred fasync helper
95cc637c1afd
ALSA: timer: Use deferred fasync helper
|
|
BUG: unable to handle kernel paging request in eventfd_ctx_put
fs
|
8 |
C |
done |
|
7 |
1284d |
1312d
|
22/29 |
1159d |
7353633814f6
KVM: x86/xen: Fix eventfd error handling in kvm_xen_eventfd_assign()
|
|
KMSAN: uninit-value in tomoyo_path_chown
fs
|
7 |
C |
|
|
13763 |
1316d |
1317d
|
22/29 |
1159d |
f52d74b190f8
open: always initialize ownership fields
|
|
KASAN: use-after-free Read in filp_close
io-uring
fs
|
19 |
C |
done |
|
17 |
1200d |
1429d
|
22/29 |
1159d |
40a1926022d1
fix the breakage in close_fd_get_file() calling conventions change
|
|
usb-testing boot error: kernel BUG in putname
fs
|
-1 |
|
|
|
1 |
1337d |
1337d
|
22/29 |
1159d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
KASAN: use-after-free Read in mas_next_entry
fs
mm
|
19 |
C |
error |
|
16 |
1269d |
1283d
|
22/29 |
1159d |
59f2f4b8a757
fs/userfaultfd: Fix maple tree iterator in userfaultfd_unregister()
|
|
UBSAN: array-index-out-of-bounds in io_submit_sqes
fs
|
15 |
|
|
|
4 |
1427d |
1428d
|
22/29 |
1159d |
fcde59feb1af
io_uring: add io_op_defs 'def' pointer in req init and issue
|
|
kernel panic: corrupted stack end in loop_control_ioctl
fs
|
2 |
|
|
|
2 |
1281d |
1365d
|
22/29 |
1159d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
possible deadlock in snd_timer_notify (2)
fs
|
4 |
|
|
|
151 |
1364d |
1628d
|
22/29 |
1159d |
95cc637c1afd
ALSA: timer: Use deferred fasync helper
|
|
WARNING: still has locks held in io_ring_submit_lock
fs
io-uring
|
4 |
C |
done |
|
3 |
1444d |
1444d
|
22/29 |
1159d |
e7637a492b9f
io_uring: fix locking state for empty buffer group
|
|
KCSAN: data-race in call_rcu / rcu_gp_kthread
fs
|
6 |
|
|
|
1 |
1751d |
1751d
|
20/29 |
1512d |
2431774f04d1
rcu: Mark accesses to rcu_state.n_force_qs
|
|
general protection fault in io_uring_register
fs
io-uring
|
2 |
syz |
done |
|
1 |
1691d |
1688d
|
20/29 |
1512d |
41d3a6bd1d37
io_uring: pin SQPOLL data before unlocking ring lock
|
|
KASAN: use-after-free Write in io_queue_worker_create
fs
io-uring
|
22 |
C |
unreliable |
|
132 |
1595d |
1604d
|
20/29 |
1512d |
71a85387546e
io-wq: check for wq exit after adding new worker task_work
e47498afeca9
io-wq: remove spurious bit clear on task_work addition
|
|
possible deadlock in io_flush_timeouts
fs
|
4 |
|
|
|
5 |
1613d |
1614d
|
20/29 |
1512d |
6af3f48bf615
io_uring: fix link traversal locking
|
|
INFO: task hung in io_uring_del_tctx_node
io-uring
fs
|
1 |
C |
unreliable |
|
37 |
1514d |
1677d
|
20/29 |
1512d |
8bab4c09f24e
io_uring: allow conditional reschedule for intensive iterators
|
|
KASAN: use-after-free Write in io_submit_one
fs
|
22 |
C |
done |
|
11 |
1599d |
1636d
|
20/29 |
1512d |
75feae73a280
block: fix single bio async DIO error handling
|
|
KCSAN: data-race in call_rcu / rcu_gp_fqs_loop
fs
|
6 |
|
|
|
1 |
1648d |
1646d
|
20/29 |
1512d |
2431774f04d1
rcu: Mark accesses to rcu_state.n_force_qs
|
|
inconsistent lock state in io_poll_remove_all
fs
|
4 |
|
|
|
63 |
1612d |
1614d
|
20/29 |
1512d |
6af3f48bf615
io_uring: fix link traversal locking
|
|
WARNING in inc_nlink (2)
fs
|
-1 |
C |
inconclusive |
done |
21 |
1512d |
1849d
|
20/29 |
1512d |
97f044f690ba
fuse: don't increment nlink in link()
|
|
possible deadlock in io_worker_cancel_cb
io-uring
fs
|
4 |
C |
done |
|
9 |
1593d |
1597d
|
20/29 |
1512d |
d800c65c2d4e
io-wq: drop wqe lock before creating new worker
|
|
INFO: task hung in io_uring_try_cancel_requests
fs
io-uring
|
1 |
C |
error |
|
41 |
1601d |
1643d
|
20/29 |
1512d |
f75d118349be
io_uring: harder fdinfo sq/cq ring iterating
|
|
WARNING in io_try_cancel_userdata (2)
fs
|
-1 |
|
|
|
1 |
1618d |
1614d
|
20/29 |
1512d |
617a89484deb
io_uring: fail cancellation for EXITING tasks
|
|
WARNING in signalfd_cleanup
fs
io-uring
|
-1 |
C |
done |
|
201 |
1558d |
1574d
|
20/29 |
1512d |
791f3465c4af
io_uring: fix UAF due to missing POLLFREE handling
|
|
INFO: rcu detected stall in newstat
fs
usb
|
1 |
C |
unreliable |
done |
4 |
1606d |
1729d
|
20/29 |
1512d |
476db72e5219
media: mceusb: return without resubmitting URB in case of -EPROTO error.
|
|
INFO: task hung in io_uring_cancel_generic (2)
io-uring
fs
|
1 |
C |
done |
|
97 |
1595d |
1622d
|
20/29 |
1512d |
78a780602075
io_uring: ensure task_work gets run as part of cancelations
|
|
INFO: rcu detected stall in io_wqe_worker (2)
fs
io-uring
|
1 |
C |
done |
|
2 |
1644d |
1644d
|
20/29 |
1512d |
c5e0321e43de
Revert "devlink: Remove not-executed trap policer notifications"
|
|
possible deadlock in io_poll_double_wake (3)
io-uring
fs
|
4 |
C |
error |
done |
703 |
1567d |
1840d
|
20/29 |
1512d |
aa43477b0402
io_uring: poll rework
|
|
INFO: task hung in io_wqe_worker
fs
io-uring
|
1 |
C |
unreliable |
|
3 |
1653d |
1649d
|
20/29 |
1512d |
1d5f5ea7cb7d
io-wq: remove worker to owner tw dependency
|
|
KASAN: null-ptr-deref Read in filp_close (2)
fs
|
19 |
C |
|
|
3 |
1750d |
1859d
|
20/29 |
1630d |
3b0462726e7e
cgroup: verify that source is a string
9b5b872215fe
file: fix close_range() for unshare+cloexec
|
|
WARNING in io_sq_thread_park
fs
|
-1 |
|
|
|
1 |
1862d |
1862d
|
20/29 |
1630d |
a185f1db59f1
io_uring: do ctx sqd ejection in a clear context
|
|
possible deadlock in snd_timer_notify
fs
|
4 |
|
|
|
119 |
1632d |
1739d
|
20/29 |
1630d |
f671a691e299
fcntl: fix potential deadlocks for &fown_struct.lock
|
|
memory leak in io_sqe_buffers_register
fs
|
3 |
C |
|
|
2 |
1823d |
1824d
|
20/29 |
1630d |
bb6659cc0ad3
io_uring: Fix memory leak in io_sqe_buffers_register()
|
|
WARNING in io_link_timeout_fn
fs
io-uring
|
-1 |
C |
done |
|
2 |
1812d |
1811d
|
20/29 |
1630d |
447c19f3b507
io_uring: fix ltout double free on completion race
|
|
KASAN: out-of-bounds Read in leaf_paste_entries
fs
|
17 |
C |
inconclusive |
|
8 |
1662d |
1893d
|
20/29 |
1630d |
13d257503c09
reiserfs: check directory items on read from disk
|
|
upstream boot error: kernel panic: VFS: Unable to mount root fs on unknown-block(0,0)
fs
|
-1 |
|
|
|
235 |
1752d |
1760d
|
20/29 |
1630d |
c43ddbf97f46
scsi: virtio_scsi: Do not overwrite SCSI status
|
|
WARNING: suspicious RCU usage in count (2)
fs
mm
|
4 |
|
|
|
1 |
1803d |
1803d
|
20/29 |
1630d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
general protection fault in io_commit_cqring (2)
io-uring
fs
|
12 |
C |
done |
|
82 |
1842d |
1856d
|
20/29 |
1630d |
51520426f4bc
io_uring: handle setup-failed ctx in kill_timeouts
|
|
INFO: task hung in io_sq_thread_park (2)
fs
io-uring
|
1 |
syz |
done |
|
2 |
1752d |
1748d
|
20/29 |
1630d |
46fee9ab02cb
io_uring: remove double poll entry on arm failure
|
|
KCSAN: data-race in __io_uring_cancel / io_uring_try_cancel_requests
fs
|
6 |
|
|
|
3 |
1796d |
1798d
|
20/29 |
1630d |
b16ef427adf3
io_uring: fix data race to avoid potential NULL-deref
|
|
WARNING in __percpu_ref_exit (2)
fs
|
-1 |
C |
error |
done |
31 |
1631d |
1870d
|
20/29 |
1630d |
a298232ee6b9
io_uring: fix link timeout refs
|
|
INFO: task hung in __io_uring_cancel
fs
io-uring
|
1 |
C |
done |
|
5 |
1768d |
1834d
|
20/29 |
1630d |
28090c133869
io_uring: fix work_exit sqpoll cancellations
|
|
possible deadlock in _snd_pcm_stream_lock_irqsave (2)
fs
|
4 |
|
|
|
120 |
1631d |
1738d
|
20/29 |
1630d |
f671a691e299
fcntl: fix potential deadlocks for &fown_struct.lock
|
|
memory leak in create_io_worker
io-uring
fs
|
3 |
C |
|
|
5 |
1653d |
1692d
|
20/29 |
1630d |
66e70be72288
io-wq: fix memory leak in create_io_worker()
|
|
WARNING in io_wqe_enqueue
io-uring
fs
|
-1 |
C |
done |
|
13 |
1789d |
1789d
|
20/29 |
1630d |
e6ab8991c5d0
io_uring: fix false WARN_ONCE
|
|
usb-testing boot error: kernel panic: VFS: Unable to mount root fs on unknown-block(0,0)
fs
|
-1 |
|
|
|
27 |
1751d |
1756d
|
20/29 |
1630d |
c43ddbf97f46
scsi: virtio_scsi: Do not overwrite SCSI status
|
|
possible deadlock in snd_pcm_period_elapsed (2)
fs
|
4 |
|
|
|
52 |
1632d |
1739d
|
20/29 |
1630d |
f671a691e299
fcntl: fix potential deadlocks for &fown_struct.lock
|
|
WARNING in io_poll_double_wake
fs
io-uring
|
-1 |
C |
done |
done |
1124 |
1732d |
1833d
|
20/29 |
1630d |
a890d01e4ee0
io_uring: fix poll requests leaking second poll entries
|
|
general protection fault in cdev_del (2)
fs
|
11 |
C |
error |
|
45 |
1764d |
2042d
|
20/29 |
1630d |
8a12f8836145
net: hso: fix null-ptr-deref during tty device unregistration
0a360e8b65d6
tty: n_gsm: check error while registering tty devices
|
|
INFO: task hung in io_wq_put_and_exit
io-uring
fs
|
1 |
C |
unreliable |
|
628 |
1631d |
1692d
|
20/29 |
1630d |
3b33e3f4a6c0
io-wq: fix silly logic error in io_task_work_match()
|
|
possible deadlock in do_fcntl
usb
fs
|
4 |
C |
done |
|
245 |
1706d |
2038d
|
20/29 |
1630d |
f671a691e299
fcntl: fix potential deadlocks for &fown_struct.lock
|
|
WARNING: suspicious RCU usage in kernel_execve
fs
mm
|
4 |
|
|
|
1 |
1767d |
1767d
|
20/29 |
1630d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
WARNING: refcount bug in __io_queue_sqe
fs
|
13 |
|
|
|
1 |
1832d |
1823d
|
20/29 |
1630d |
a298232ee6b9
io_uring: fix link timeout refs
|
|
BUG: unable to handle kernel NULL pointer dereference in kiocb_done
fs
io-uring
|
10 |
C |
unreliable |
done |
3 |
1698d |
1697d
|
20/29 |
1630d |
b8ce1b9d25cc
io_uring: don't submit half-prepared drain request
|
|
possible deadlock in io_uring_register
fs
|
4 |
|
|
|
16 |
1690d |
1692d
|
20/29 |
1630d |
009ad9f0c6ee
io_uring: drop ctx->uring_lock before acquiring sqd->lock
|
|
WARNING in io_try_cancel_userdata
fs
io-uring
|
-1 |
syz |
unreliable |
|
4 |
1705d |
1709d
|
20/29 |
1630d |
dadebc350da2
io_uring: fix io_try_cancel_userdata race for iowq
|
|
KMSAN: kernel-infoleak in copy_page_to_iter (2)
fs
mm
|
9 |
C |
|
|
2099 |
1726d |
2784d
|
20/29 |
1630d |
ce3aba43599f
ext4: fix kernel infoleak via ext4_extent_header
|
|
KASAN: use-after-free Read in io_worker_handle_work
fs
|
19 |
|
|
|
2 |
1775d |
1805d
|
20/29 |
1630d |
3743c1723bfc
io-wq: Fix UAF when wakeup wqe in hash waitqueue
|
|
WARNING: suspicious RCU usage in proc_alloc_inode
fs
|
4 |
|
|
|
1 |
1772d |
1772d
|
20/29 |
1630d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
WARNING in mntput_no_expire (2)
fs
|
-1 |
C |
done |
|
68 |
1638d |
1853d
|
20/29 |
1630d |
7d01ef7585c0
Make sure nd->path.mnt and nd->path.dentry are always valid pointers
|
|
WARNING: suspicious RCU usage in __fput
fs
|
4 |
|
|
|
1 |
1798d |
1798d
|
20/29 |
1630d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
general protection fault in __io_file_supports_nowait
fs
io-uring
|
2 |
C |
done |
done |
13 |
1695d |
1700d
|
20/29 |
1630d |
c6d3d9cbd659
io_uring: fix queueing half-created requests
|
|
KASAN: use-after-free Read in bdev_evict_inode
fs
|
19 |
C |
unreliable |
|
1305 |
1715d |
1718d
|
20/29 |
1630d |
889c05cc5834
block: ensure the bdi is freed after inode_detach_wb
|
|
WARNING in pvr2_i2c_core_done
usb
fs
|
-1 |
C |
error |
|
5780 |
1752d |
2407d
|
20/29 |
1630d |
f8194e5e63fd
media: pvrusb2: fix warning in pvr2_i2c_core_done
|
|
INFO: task hung in io_uring_cancel_generic
io-uring
fs
|
1 |
C |
unreliable |
|
151 |
1630d |
1752d
|
20/29 |
1630d |
1b48773f9fd0
io_uring: fix io_drain_req()
|
|
WARNING: suspicious RCU usage in getname_flags
fs
|
4 |
|
|
|
2 |
1759d |
1850d
|
20/29 |
1630d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
KASAN: use-after-free Read in __d_alloc (2)
fs
|
19 |
C |
unreliable |
|
6774 |
1672d |
1716d
|
20/29 |
1630d |
0766ec82e5fb
namei: Fix use after free in kern_path_locked
|
|
possible deadlock in f_getown
fs
|
4 |
C |
done |
done |
164 |
1708d |
2038d
|
20/29 |
1630d |
f671a691e299
fcntl: fix potential deadlocks for &fown_struct.lock
|
|
possible deadlock in snd_hrtimer_callback
fs
|
4 |
C |
done |
|
571 |
1631d |
1739d
|
20/29 |
1630d |
f671a691e299
fcntl: fix potential deadlocks for &fown_struct.lock
|
|
possible deadlock in io_sq_thread_finish
fs
|
4 |
C |
unreliable |
done |
4 |
1876d |
1878d
|
20/29 |
1630d |
f4e61f0c9add
x86/kvm: Fix broken irq restoration in kvm_wait
|
|
WARNING: suspicious RCU usage in __alloc_file
fs
|
4 |
|
|
|
1 |
1818d |
1818d
|
20/29 |
1630d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
WARNING in io_rsrc_node_switch
io-uring
fs
|
-1 |
C |
done |
|
174 |
1816d |
1825d
|
20/29 |
1630d |
47b228ce6f66
io_uring: fix unchecked error in switch_start()
|
|
WARNING in io_wq_submit_work (2)
io-uring
fs
|
-1 |
C |
done |
done |
52 |
1690d |
1692d
|
20/29 |
1630d |
713b9825a4c4
io-wq: fix cancellation on create-worker failure
|
|
KASAN: null-ptr-deref Write in io_uring_cancel_sqpoll
fs
|
12 |
|
|
|
170 |
1632d |
1887d
|
20/29 |
1630d |
6d042ffb598e
io_uring: Check current->io_uring in io_uring_cancel_sqpoll
|
|
KASAN: stack-out-of-bounds Read in iov_iter_revert
fs
io-uring
|
17 |
C |
error |
|
14 |
1703d |
1720d
|
20/29 |
1630d |
89c2b3b74918
io_uring: reexpand under-reexpanded iters
|
|
WARNING in internal_create_group
fs
|
-1 |
C |
inconclusive |
|
20 |
1695d |
1749d
|
20/29 |
1630d |
b1a811633f73
block: nbd: add sanity check for first_minor
|
|
kernel BUG in remove_inode_hugepages
fs
mm
|
-1 |
C |
unreliable |
|
3 |
1715d |
1715d
|
20/29 |
1630d |
c7b1850dfb41
hugetlb: don't pass page cache pages to restore_reserve_on_error
|
|
WARNING in io_wq_put
fs
io-uring
|
-1 |
C |
unreliable |
|
3 |
1864d |
1876d
|
20/29 |
1630d |
f5d2d23bf0d9
io-wq: fix race around pending work on teardown
|
|
WARNING in io_uring_setup (2)
fs
io-uring
|
-1 |
C |
done |
|
40 |
1816d |
1825d
|
20/29 |
1630d |
47b228ce6f66
io_uring: fix unchecked error in switch_start()
|
|
INFO: task can't die in d_alloc_parallel
fs
|
1 |
|
|
|
2 |
1940d |
1956d
|
20/29 |
1793d |
0ce20dd84089
mm: add Kernel Electric-Fence infrastructure
|
|
KASAN: use-after-free Read in idr_for_each (2)
io-uring
fs
|
19 |
C |
error |
done |
86 |
1869d |
2031d
|
20/29 |
1834d |
61cf93700fe6
io_uring: Convert personality_idr to XArray
|
|
INFO: task hung in io_uring_cancel_task_requests
fs
io-uring
|
1 |
C |
|
|
305 |
1869d |
1903d
|
20/29 |
1844d |
34343786ecc5
io_uring: unpark SQPOLL thread for cancelation
|
|
KASAN: use-after-free Read in tctx_task_work
fs
|
19 |
|
|
|
2 |
1888d |
1885d
|
20/29 |
1844d |
2c32395d8111
io_uring: fix __tctx_task_work() ctx race
|
|
KASAN: invalid-free in io_req_caches_free
fs
|
24 |
|
|
|
5 |
1888d |
1891d
|
20/29 |
1844d |
8e5c66c485a8
io_uring: clear request count when freeing caches
|
|
INFO: task hung in io_sq_thread_park
fs
io-uring
|
1 |
C |
unreliable |
|
263 |
1880d |
1884d
|
20/29 |
1844d |
3ebba796fa25
io_uring: ensure that SQPOLL thread is started for exit
|
|
memory leak in io_submit_sqes (2)
fs
io-uring
|
3 |
C |
|
|
1 |
1882d |
1882d
|
20/29 |
1844d |
f01272541d2c
io-wq: ensure all pending work is canceled on exit
|
|
possible deadlock in io_poll_double_wake (2)
io-uring
fs
|
4 |
C |
error |
error |
431 |
1845d |
2037d
|
20/29 |
1844d |
1c3b3e6527e5
io_uring: ignore double poll add on the same waitqueue head
|
|
inconsistent lock state in io_dismantle_req
fs
io-uring
|
4 |
C |
|
|
2 |
1912d |
1912d
|
20/29 |
1844d |
9ae1f8dd372e
io_uring: fix inconsistent lock state
|
|
general protection fault in io_sqe_files_unregister
fs
|
2 |
|
|
|
2 |
1937d |
1935d
|
19/29 |
1875d |
3e2224c5867f
io_uring: Fix return value from alloc_fixed_file_ref_node
|
|
kernel BUG at mm/page-writeback.c:LINE!
fs
mm
|
-1 |
|
|
|
1 |
1945d |
1941d
|
19/29 |
1875d |
c2407cf7d22d
mm: make wait_on_page_writeback() wait for multiple pending writebacks
|
|
WARNING in io_uring_flush
fs
io-uring
|
-1 |
C |
unreliable |
|
10 |
1919d |
1929d
|
19/29 |
1875d |
4325cb498cb7
io_uring: fix uring_flush in exit_files() warning
|
|
KASAN: use-after-free Read in search_by_entry_key
fs
|
19 |
C |
done |
|
3 |
2024d |
2028d
|
19/29 |
1875d |
d24396c5290b
reiserfs: add check for an invalid ih_entry_count
|
|
WARNING in percpu_ref_kill_and_confirm (2)
fs
|
-1 |
C |
done |
|
71 |
1950d |
1958d
|
19/29 |
1875d |
9faadcc8abe4
io_uring: fix double io_uring free
|
|
WARNING in io_ring_ctx_wait_and_kill
fs
|
-1 |
C |
done |
|
9 |
1930d |
1931d
|
19/29 |
1875d |
06585c497b55
io_uring: do sqo disable on install_fd error
|
|
INFO: task hung in __io_uring_files_cancel
io-uring
fs
|
1 |
C |
done |
|
30 |
1917d |
1983d
|
19/29 |
1875d |
bee749b187ac
io_uring: fix files cancellation
|
|
KASAN: use-after-free Read in reiserfs_fill_super
fs
|
19 |
C |
error |
done |
2 |
1969d |
1968d
|
19/29 |
1875d |
d24396c5290b
reiserfs: add check for an invalid ih_entry_count
|
|
BUG: unable to handle kernel paging request in percpu_ref_exit
fs
|
8 |
C |
done |
|
3 |
1937d |
1935d
|
19/29 |
1875d |
3e2224c5867f
io_uring: Fix return value from alloc_fixed_file_ref_node
|
|
INFO: task can't die in io_sq_thread_stop
fs
|
1 |
|
|
|
1 |
1994d |
1990d
|
19/29 |
1875d |
65b2b213484a
io_uring: check kthread stopped flag when sq thread is unparked
|
|
general protection fault in io_disable_sqo_submit
fs
io-uring
|
2 |
C |
done |
|
124 |
1927d |
1931d
|
19/29 |
1875d |
b4411616c26f
io_uring: fix null-deref in io_disable_sqo_submit
|
|
WARNING in io_uring_cancel_task_requests
io-uring
fs
|
-1 |
syz |
done |
|
69 |
1912d |
1916d
|
19/29 |
1875d |
70b2c60d3797
io_uring: fix sqo ownership false positive warning
|
|
inconsistent lock state in io_file_data_ref_zero
fs
|
4 |
C |
done |
|
7152 |
1958d |
1982d
|
19/29 |
1875d |
ac0648a56c1f
io_uring: use bottom half safe lock for fixed file data
|
|
BUG: corrupted list in io_file_get
fs
io-uring
|
8 |
C |
done |
|
3 |
1916d |
1916d
|
19/29 |
1875d |
f609cbb8911e
io_uring: fix list corruption for splice file_get
|
|
WARNING in io_wq_submit_work
fs
|
-1 |
|
|
|
4 |
1922d |
1927d
|
19/29 |
1875d |
ca70f00bed6c
io_uring: fix cancellation taking mutex while TASK_UNINTERRUPTIBLE
|
|
possible deadlock in send_sigio (2)
fs
|
4 |
C |
done |
done |
40 |
1945d |
2057d
|
19/29 |
1875d |
8d1ddb5e7937
fcntl: Fix potential deadlock in send_sig{io, urg}()
|
|
kernel BUG at fs/reiserfs/prints.c:LINE!
fs
|
-1 |
C |
done |
done |
5 |
1966d |
2045d
|
19/29 |
1875d |
d24396c5290b
reiserfs: add check for an invalid ih_entry_count
|
|
memory leak in generic_parse_monolithic
fs
|
3 |
C |
|
|
11 |
1966d |
1992d
|
19/29 |
1875d |
4cb682964706
afs: Fix memory leak when mounting with multiple source parameters
|
|
KASAN: slab-out-of-bounds Write in record_print_text
fs
|
21 |
C |
done |
unreliable |
17 |
1916d |
1919d
|
19/29 |
1875d |
08d60e599954
printk: fix string termination for record_print_text()
|
|
BUG: unable to handle kernel NULL pointer dereference in __lookup_slow
fs
|
10 |
C |
inconclusive |
done |
3 |
1898d |
2038d
|
19/29 |
1875d |
d24396c5290b
reiserfs: add check for an invalid ih_entry_count
|
|
possible deadlock in send_sigurg (2)
fs
|
4 |
C |
done |
|
25 |
1962d |
2013d
|
19/29 |
1875d |
8d1ddb5e7937
fcntl: Fix potential deadlock in send_sig{io, urg}()
|
|
possible deadlock in proc_pid_syscall (2)
fs
|
4 |
|
|
|
2 |
2059d |
2069d
|
19/29 |
1875d |
f7cfd871ae0c
exec: Transform exec_update_mutex into a rw_semaphore
78af4dc949da
perf: Break deadlock involving exec_update_mutex
|
|
WARNING in io_disable_sqo_submit
fs
|
-1 |
C |
done |
|
9 |
1921d |
1928d
|
19/29 |
1875d |
6b393a1ff174
io_uring: fix false positive sqo warning on flush
|
|
KASAN: null-ptr-deref Read in filp_close
fs
|
11 |
C |
done |
|
9 |
1956d |
1958d
|
19/29 |
1875d |
fec8a6a69103
close_range: unshare all fds for CLOSE_RANGE_UNSHARE | CLOSE_RANGE_CLOEXEC
6abc20f8f879
selftests/core: add regression test for CLOSE_RANGE_UNSHARE | CLOSE_RANGE_CLOEXEC
|
|
possible deadlock in io_timeout_fn (2)
fs
|
4 |
|
|
|
4 |
1937d |
1944d
|
19/29 |
1875d |
4aa84f2ffa81
io_uring: dont kill fasync under completion_lock
|
|
KASAN: null-ptr-deref Write in kthread_use_mm
io-uring
fs
|
12 |
C |
done |
|
2 |
2003d |
2003d
|
15/29 |
1985d |
4b70cf9dea4c
io_uring: ensure consistent view of original task ->mm from SQPOLL
|
|
general protection fault in io_uring_show_cred
fs
|
2 |
C |
done |
|
4 |
2000d |
2000d
|
15/29 |
1985d |
6b47ab81c9a9
io_uring: use correct pointer for io_uring_show_cred()
|
|
KASAN: use-after-free Write in io_submit_sqes
fs
io-uring
|
22 |
C |
error |
|
2 |
2003d |
2002d
|
15/29 |
1985d |
cb8a8ae31074
io_uring: drop req/tctx io_identity separately
|
|
INFO: task can't die in corrupted
fs
|
1 |
C |
done |
|
4 |
2002d |
2029d
|
15/29 |
1989d |
86f33603f8c5
f2fs: handle errors of f2fs_get_meta_page_nofail
|
|
WARNING in unlock_new_inode
fs
|
-1 |
C |
done |
|
76 |
2026d |
2931d
|
15/29 |
1989d |
8859bf2b1278
reiserfs: only call unlock_new_inode() if I_NEW
|
|
memory leak in reiserfs_parse_options
fs
|
3 |
C |
|
|
4 |
2053d |
2249d
|
15/29 |
1989d |
e9d4709fcc26
reiserfs: Fix memory leak in reiserfs_parse_options()
|
|
general protection fault in percpu_ref_exit
fs
|
2 |
C |
done |
|
3 |
2024d |
2028d
|
15/29 |
1989d |
7ea6bf2e6c40
percpu_ref: don't refer to ref->data if it isn't allocated
|
|
KASAN: use-after-free Read in fscache_alloc_cookie
fs
|
19 |
syz |
done |
|
1 |
2041d |
2041d
|
15/29 |
1989d |
1d0e850a49a5
afs: Fix cell removal
|
|
KASAN: use-after-free Read in io_wqe_worker
fs
io-uring
|
19 |
C |
error |
|
2 |
2038d |
2040d
|
15/29 |
1989d |
c4068bf898dd
io-wq: fix use-after-free in io_wq_worker_running
|
|
WARNING: suspicious RCU usage in io_init_identity
fs
|
4 |
|
|
|
1536 |
2015d |
2020d
|
15/29 |
1989d |
1e6fa5216a0e
io_uring: COW io_identity on mismatch
|
|
inconsistent lock state in xa_destroy
io-uring
fs
|
4 |
C |
|
|
755 |
2027d |
2028d
|
15/29 |
1989d |
ca6484cd308a
io_uring: no need to call xa_destroy() on empty xarray
|
|
INFO: task hung in io_uring_flush
io-uring
fs
|
1 |
C |
done |
done |
11 |
2080d |
2087d
|
15/29 |
1989d |
b7ddce3cbf01
io_uring: fix cancel of deferred reqs with ->files
|
|
general protection fault in open_xa_dir
fs
|
2 |
C |
done |
|
3 |
2024d |
2036d
|
15/29 |
1989d |
c2bb80b8bdd0
reiserfs: Fix oops during mount
|
|
KMSAN: uninit-value in search_by_key
fs
|
7 |
|
|
|
1549 |
1994d |
2045d
|
15/29 |
1989d |
4443390e08d3
reiserfs: Initialize inode keys properly
|
|
KASAN: use-after-free Write in io_wq_worker_running
io-uring
fs
|
22 |
C |
error |
|
14 |
2032d |
2058d
|
15/29 |
1989d |
c4068bf898dd
io-wq: fix use-after-free in io_wq_worker_running
|
|
KMSAN: uninit-value in __fget_light (2)
fs
|
7 |
C |
|
|
18 |
2006d |
2015d
|
15/29 |
1989d |
d5e4d0a5e692
inet_diag: validate INET_DIAG_REQ_PROTOCOL attribute
|
|
possible deadlock in mnt_want_write
fs
|
4 |
C |
done |
done |
662 |
2028d |
2836d
|
15/29 |
1989d |
146d62e5a586
ovl: detect overlapping layers
|
|
general protection fault in __do_sys_io_uring_register
fs
|
2 |
|
|
|
80 |
2015d |
2022d
|
15/29 |
1989d |
55cbc2564ab2
io_uring: fix error path cleanup in io_sqe_files_register()
|
|
inconsistent lock state in io_uring_add_task_file
fs
|
4 |
|
|
|
1 |
2028d |
2027d
|
15/29 |
1989d |
ce765372bc44
io_uring: Fix use of XArray in __io_uring_files_cancel
|
|
KMSAN: uninit-value in qtree_entry_unused
fs
|
7 |
|
|
|
396 |
1993d |
2045d
|
15/29 |
1989d |
3d3dc274ce73
quota: clear padding in v2r1_mem2diskdqb()
|
|
general protection fault in io_poll_double_wake (2)
fs
io-uring
|
2 |
C |
error |
|
2 |
2039d |
2038d
|
15/29 |
2015d |
8706e04ed7d6
io_uring: always delete double poll wait entry on match
|
|
possible deadlock in io_write
fs
|
4 |
|
|
|
2 |
2036d |
2038d
|
15/29 |
2015d |
fad8e0de4426
io_uring: fix potential ABBA deadlock in ->show_fdinfo()
|
|
memory leak in do_eventfd
fs
|
3 |
C |
|
|
2 |
2073d |
2168d
|
15/29 |
2026d |
f65886606c2d
KVM: fix memory leak in kvm_io_bus_unregister_dev()
|
|
upstream boot error: KASAN: global-out-of-bounds Read in internal_create_group
fs
|
-1 |
|
|
|
273 |
2072d |
2085d
|
15/29 |
2041d |
62c789270c0b
libnvdimm: KASAN: global-out-of-bounds Read in internal_create_group
|
|
possible deadlock in __io_queue_deferred
fs
io-uring
|
4 |
C |
error |
|
1 |
2088d |
2087d
|
15/29 |
2049d |
7271ef3a93a8
io_uring: fix recursive completion locking on oveflow flush
|
|
WARNING in __kernel_read
fs
|
-1 |
C |
done |
|
60 |
2057d |
2115d
|
15/29 |
2049d |
a39c46067c84
net/9p: validate fds in p9_fd_open
|
|
general protection fault in cdev_del
usb
fs
|
2 |
C |
|
|
315 |
2059d |
2527d
|
15/29 |
2049d |
e911e99a0770
usb: hso: check for return value in hso_serial_common_create()
|
|
BUG: unable to handle kernel NULL pointer dereference in loop_rw_iter
io-uring
fs
|
10 |
C |
done |
|
24 |
2075d |
2087d
|
15/29 |
2049d |
2dd2111d0d38
io_uring: Fix NULL pointer dereference in loop_rw_iter()
|
|
KASAN: use-after-free Read in io_async_task_func
io-uring
fs
|
19 |
syz |
error |
|
1 |
2086d |
2086d
|
15/29 |
2049d |
6d816e088c35
io_uring: hold 'ctx' reference around task_work queue + execute
|
|
WARNING in drop_nlink
fs
|
-1 |
C |
done |
error |
1 |
2197d |
2193d
|
15/29 |
2049d |
facb03dddec0
fs/minix: don't allow getting deleted inodes
|
|
KASAN: use-after-free Read in ceph_mdsc_destroy
ceph
fs
|
19 |
|
|
|
4 |
2089d |
2105d
|
15/29 |
2049d |
a7caa88f8b72
ceph: fix use-after-free for fsc->mdsc
|
|
KASAN: use-after-free Read in path_init (2)
fs
|
19 |
C |
done |
|
29 |
2084d |
2085d
|
15/29 |
2049d |
24fb33d40d60
fix breakage in do_rmdir()
|
|
WARNING in __kernel_write
fs
|
-1 |
C |
done |
|
522 |
2098d |
2118d
|
15/29 |
2049d |
a39c46067c84
net/9p: validate fds in p9_fd_open
|
|
KMSAN: uninit-value in get_block
fs
|
7 |
C |
|
|
13 |
2165d |
2169d
|
15/29 |
2049d |
270ef41094e9
fs/minix: reject too-large maximum file size
|
|
KASAN: null-ptr-deref Write in get_block
fs
|
12 |
C |
done |
|
101 |
2116d |
2229d
|
15/29 |
2049d |
da27e0a0e5f6
fs/minix: check return value of sb_getblk()
|
|
memory leak in io_submit_sqes
fs
io-uring
|
3 |
C |
|
|
2 |
2067d |
2086d
|
15/29 |
2049d |
a36da65c4656
io_uring: fail poll arm on queue proc failure
|
|
KASAN: use-after-free Write in get_block
fs
|
22 |
C |
inconclusive |
inconclusive |
12 |
2132d |
2182d
|
15/29 |
2049d |
270ef41094e9
fs/minix: reject too-large maximum file size
|
|
general protection fault in io_poll_double_wake
io-uring
fs
|
2 |
C |
done |
|
8 |
2054d |
2082d
|
15/29 |
2049d |
d4e7cd36a90e
io_uring: sanitize double poll handling
|
|
KASAN: use-after-free Read in lockref_get
fs
|
19 |
|
|
|
7 |
2153d |
2253d
|
15/29 |
2049d |
bad8e64fb19d
blktrace: fix debugfs use after free
|
|
KASAN: use-after-free Read in io_uring_setup (2)
fs
|
19 |
|
|
|
1 |
2098d |
2098d
|
15/29 |
2049d |
d1719f70d0a5
io_uring: don't touch 'ctx' after installing file descriptor
|
|
possible deadlock in io_timeout_fn
io-uring
fs
|
4 |
C |
done |
|
4 |
2084d |
2087d
|
15/29 |
2049d |
51a4cc112c7a
io_uring: defer file table grabbing request cleanup for locked requests
|
|
possible deadlock in lock_trace (3)
fs
|
4 |
syz |
inconclusive |
done |
69 |
2217d |
2352d
|
15/29 |
2078d |
2db9dbf71bf9
proc: Use new infrastructure to fix deadlocks in execve
|
|
possible deadlock in do_io_accounting (3)
fs
|
4 |
C |
inconclusive |
done |
39 |
2224d |
2314d
|
15/29 |
2078d |
76518d379885
proc: io_accounting: Use new infrastructure to fix deadlocks in execve
|
|
possible deadlock in proc_pid_personality
fs
|
4 |
syz |
inconclusive |
done |
3 |
2234d |
2243d
|
15/29 |
2078d |
2db9dbf71bf9
proc: Use new infrastructure to fix deadlocks in execve
|
|
WARNING: bad unlock balance in rcu_lock_release
fs
|
4 |
C |
inconclusive |
done |
1433 |
2219d |
2501d
|
15/29 |
2079d |
10476e630422
locking/lockdep: Fix bad recursion pattern
|
|
WARNING: bad unlock balance in rcu_core
fs
|
4 |
C |
inconclusive |
done |
3578 |
2215d |
2571d
|
15/29 |
2079d |
10476e630422
locking/lockdep: Fix bad recursion pattern
|
|
KASAN: use-after-free Write in fsnotify_detach_connector_from_object
fs
|
22 |
C |
done |
|
4 |
2141d |
2146d
|
15/29 |
2111d |
ef1548adada5
proc: Use new_inode not new_inode_pseudo
|
|
BUG: unable to handle kernel NULL pointer dereference in number
fs
|
10 |
|
|
|
1 |
2141d |
2137d
|
15/29 |
2111d |
3021e69219e2
kcov: check kcov_softirq in kcov_remote_stop()
|
|
INFO: task hung in locks_remove_posix
fs
input
usb
|
1 |
syz |
|
|
2231 |
2146d |
2168d
|
15/29 |
2111d |
187b96db5ca7
x86/unwind/orc: Fix unwind_get_return_address_ptr() for inactive tasks
|
|
linux-next boot error: general protection fault in tomoyo_get_local_path
fs
|
-1 |
|
|
|
18 |
2168d |
2174d
|
15/29 |
2111d |
9d78edeaec75
proc: proc_pid_ns takes super_block as an argument
|
|
general protection fault in proc_kill_sb
fs
|
2 |
|
|
|
8 |
2136d |
2148d
|
15/29 |
2111d |
058f2e4da79b
proc: s_fs_info may be NULL when proc_kill_sb is called
|
|
INFO: trying to register non-static key in io_cqring_ev_posted (3)
fs
|
-1 |
C |
done |
|
3 |
2170d |
2172d
|
15/29 |
2111d |
583863ed9181
io_uring: initialize ctx->sqo_wait earlier
|
|
BUG: unable to handle kernel NULL pointer dereference in unlock_page
fs
mm
|
10 |
|
|
|
1 |
2142d |
2142d
|
15/29 |
2111d |
3021e69219e2
kcov: check kcov_softirq in kcov_remote_stop()
|
|
general protection fault in start_creating
fs
|
2 |
C |
done |
|
106 |
2132d |
2162d
|
15/29 |
2111d |
d56f5136b010
KVM: let kvm_destroy_vm_debugfs clean up vCPU debugfs directories
|
|
KCSAN: data-race in __rcu_read_unlock / sync_rcu_exp_select_node_cpus (2)
fs
mm
|
6 |
|
|
|
9 |
2179d |
2345d
|
15/29 |
2111d |
314eeb43e5f2
rcu: Add *_ONCE() and data_race() to rcu_node ->exp_tasks plus locking
|
|
KASAN: use-after-free Read in blkdev_direct_IO
fs
|
19 |
C |
done |
error |
8 |
2456d |
2461d
|
15/29 |
2128d |
0eb6ddfb865c
block: Fix __blkdev_direct_IO() for bio fragments
|
|
KASAN: use-after-free Read in blkdev_bio_end_io
fs
|
19 |
C |
done |
error |
13 |
2446d |
2458d
|
15/29 |
2128d |
7b6620d7db56
block: remove REQ_NOWAIT_INLINE
|
|
KASAN: use-after-free Read in dput (2)
fs
|
19 |
syz |
done |
|
4 |
2204d |
2204d
|
15/29 |
2140d |
4fa3b1c41737
proc: Handle umounts cleanly
|
|
INFO: rcu detected stall in io_uring_release
fs
|
1 |
syz |
|
|
15 |
2160d |
2201d
|
15/29 |
2140d |
3fd44c86711f
io_uring: use cond_resched() in io_ring_ctx_wait_and_kill()
|
|
possible deadlock in io_submit_one (3)
fs
|
4 |
syz |
done |
|
45 |
2209d |
2216d
|
15/29 |
2179d |
63f818f46af9
proc: Use a dedicated lock in struct pid
|
|
INFO: task hung in io_queue_file_removal
fs
|
1 |
C |
done |
|
16 |
2221d |
2229d
|
15/29 |
2179d |
4afdb733b160
io-uring: drop completion when removing file
|
|
KMSAN: uninit-value in simple_attr_read
fs
|
7 |
C |
|
|
6 |
2182d |
2252d
|
15/29 |
2179d |
a65cab7d7f05
libfs: fix infoleak in simple_attr_read()
|
|
possible deadlock in send_sigurg
fs
|
4 |
C |
done |
|
65 |
2202d |
2216d
|
15/29 |
2179d |
63f818f46af9
proc: Use a dedicated lock in struct pid
|
|
INFO: trying to register non-static key in __io_uring_register
fs
|
-1 |
C |
done |
|
39 |
2210d |
2212d
|
15/29 |
2179d |
f7fe9346869a
io_uring: initialize fixed_file_data lock
|
|
INFO: trying to register non-static key in io_cqring_ev_posted (2)
fs
|
-1 |
C |
done |
|
42 |
2182d |
2219d
|
15/29 |
2179d |
10bea96dcc13
io_uring: add missing finish_wait() in io_sq_thread()
|
|
possible deadlock in send_sigio
fs
|
4 |
C |
done |
|
7 |
2206d |
2215d
|
15/29 |
2179d |
63f818f46af9
proc: Use a dedicated lock in struct pid
|
|
memory leak in fasync_helper
fs
|
3 |
C |
|
|
14 |
2272d |
2333d
|
15/29 |
2204d |
67f562e3e147
net/smc: transfer fasync_list in case of fallback
|
|
BUG: sleeping function called from invalid context in __kmalloc
ceph
fs
|
5 |
C |
done |
|
5 |
2265d |
2272d
|
15/29 |
2204d |
b27a939e8376
ceph: canonicalize server path in place
|
|
WARNING: ODEBUG bug in io_sqe_files_unregister
fs
|
-1 |
C |
done |
|
964 |
2273d |
2320d
|
15/29 |
2238d |
2faf852d1be8
io_uring: cleanup fixed file data table references
|
|
memory leak in reiserfs_fill_super
fs
|
3 |
C |
|
|
20 |
2280d |
2329d
|
15/29 |
2261d |
5474ca7da6f3
reiserfs: Fix memory leak of journal device string
|
|
KCSAN: data-race in __rcu_read_unlock / sync_rcu_exp_select_cpus
fs
mm
|
6 |
|
|
|
7 |
2273d |
2367d
|
15/29 |
2261d |
c51f83c315c3
rcu: Use READ_ONCE() for ->expmask in rcu_read_unlock_special()
|
|
kernel BUG at fs/namei.c:LINE!
fs
|
-1 |
|
|
|
3593 |
2296d |
2296d
|
15/29 |
2261d |
c64cd6e34ea3
reimplement path_mountpoint() with less magic
|
|
BUG: corrupted list in __dentry_kill (2)
fs
|
8 |
C |
done |
|
4945 |
2329d |
2329d
|
15/29 |
2261d |
a3d1e7eb5abe
simple_recursive_removal(): kernel-side rm -rf for ramfs-style filesystems
|
|
WARNING in do_dentry_open (2)
fs
|
-1 |
C |
done |
|
17 |
2281d |
2278d
|
15/29 |
2261d |
a37f4958f7b6
debugfs: Return -EPERM when locked down
|
|
KASAN: use-after-free Write in percpu_ref_switch_to_percpu
fs
|
22 |
|
|
|
1 |
2275d |
2274d
|
15/29 |
2261d |
2faf852d1be8
io_uring: cleanup fixed file data table references
|
|
WARNING: refcount bug in chrdev_open
fs
|
13 |
C |
inconclusive |
done |
15 |
2340d |
2442d
|
15/29 |
2261d |
68faa679b8be
chardev: Avoid potential use-after-free in 'chrdev_open()'
|
|
linux-next boot error: general protection fault in do_mount_root
fs
|
-1 |
|
|
|
9 |
2324d |
2325d
|
15/29 |
2265d |
7de7de7ca0ae
Fix root mounting with no mount options
|
|
upstream boot error: general protection fault in do_mount_root
fs
|
-1 |
|
|
|
12 |
2325d |
2325d
|
15/29 |
2265d |
7de7de7ca0ae
Fix root mounting with no mount options
|
|
kernel BUG at fs/pipe.c:LINE!
fs
|
-1 |
C |
done |
|
693 |
2332d |
2339d
|
15/29 |
2302d |
8c7b8c34ae95
pipe: Remove assertion from pipe_poll()
|
|
general protection fault in io_commit_cqring
fs
|
2 |
C |
done |
|
3 |
2357d |
2358d
|
15/29 |
2328d |
15dff286d0e0
io_uring: check for validity of ->rings in teardown
|
|
INFO: task hung in io_wq_destroy
fs
|
1 |
C |
done |
|
20 |
2343d |
2373d
|
15/29 |
2328d |
b60fda6000a9
io-wq: wait for io_wq_create() to setup necessary workers
|
|
INFO: trying to register non-static key in io_cqring_ev_posted
fs
|
-1 |
C |
done |
|
6 |
2343d |
2356d
|
15/29 |
2328d |
eb065d301e8c
io_uring: io_allocate_scq_urings() should return a sane state
|
|
WARNING in iov_iter_pipe
fs
|
-1 |
C |
done |
|
1117 |
2346d |
2364d
|
15/29 |
2328d |
419e9c38aa07
iomap: Fix pipe page leakage during splicing
|
|
BUG: unable to handle kernel paging request in io_wq_cancel_all
fs
|
8 |
C |
done |
|
2 |
2372d |
2372d
|
15/29 |
2328d |
975c99a57096
io_uring: io_wq_create() returns an error pointer, not NULL
|
|
KASAN: invalid-free in io_sqe_files_unregister
fs
|
24 |
C |
done |
|
3 |
2361d |
2361d
|
15/29 |
2328d |
46568e9be70f
io_uring: fix error clear of ->file_table in io_sqe_files_register()
|
|
KASAN: use-after-free Read in do_mount
fs
|
19 |
syz |
done |
|
6 |
2386d |
2394d
|
14/29 |
2342d |
0ecee6699064
fs/namespace.c: fix use-after-free of mount in mnt_warn_timestamp_expiry()
|
|
KMSAN: use-after-free in hidraw_ioctl
fs
lsm
|
18 |
|
|
|
1 |
2394d |
2394d
|
13/29 |
2344d |
416dacb819f5
HID: hidraw: Fix invalid read in hidraw_ioctl
|
|
KASAN: use-after-free Read in io_uring_setup
fs
|
19 |
syz |
error |
|
1 |
2375d |
2374d
|
13/29 |
2348d |
044c1ab399af
io_uring: don't touch ctx in setup after ring fd install
|
|
KASAN: use-after-free Read in ep_scan_ready_list
fs
|
19 |
C |
|
done |
39 |
2812d |
2848d
|
13/29 |
2350d |
430ac66eb4c5
net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree()
|
|
WARNING in mark_lock (2)
fs
|
-1 |
|
|
|
14 |
2381d |
2408d
|
13/29 |
2374d |
8e00c4e9dd85
writeback: fix use-after-free in finish_writeback_work()
|
|
general protection fault in finish_writeback_work
fs
|
2 |
|
|
|
10 |
2383d |
2409d
|
13/29 |
2374d |
8e00c4e9dd85
writeback: fix use-after-free in finish_writeback_work()
|
|
INFO: trying to register non-static key in finish_writeback_work
fs
|
-1 |
syz |
error |
|
1 |
2410d |
2407d
|
13/29 |
2374d |
8e00c4e9dd85
writeback: fix use-after-free in finish_writeback_work()
|
|
INFO: task syz-executor can't die for more than 143 seconds.
fs
|
-1 |
C |
done |
|
61 |
2404d |
2511d
|
13/29 |
2386d |
8619e5bdeee8
/dev/mem: Bail out upon SIGKILL.
7c3a6aedcd6a
kexec: bail out upon SIGKILL when allocating memory.
8f9e86ee7959
staging: android: ion: Bail out upon SIGKILL when allocating memory.
|
|
WARNING in kfree
fs
|
-1 |
C |
done |
|
2 |
2434d |
2433d
|
13/29 |
2386d |
43ce4c1feadb
vfs: Add a single-or-reconfig keying to vfs_get_super()
|
|
WARNING in __blkdev_put (2)
fs
|
-1 |
syz |
|
|
3082 |
2451d |
2458d
|
12/29 |
2425d |
e91455bad5cf
bdev: Fixup error handling in blkdev_get()
|
|
kernel panic: corrupted stack end in dput
fs
|
2 |
syz |
done |
|
1 |
2493d |
2493d
|
12/29 |
2436d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
|
INFO: task hung in io_uring_release
fs
|
1 |
|
|
|
24 |
2482d |
2500d
|
12/29 |
2458d |
a4c0b3decb33
io_uring: fix io_sq_thread_stop running in front of io_sq_thread
|
|
general protection fault in do_move_mount (2)
fs
|
2 |
syz |
done |
|
7 |
2497d |
2506d
|
12/29 |
2465d |
570d7a98e7d6
vfs: move_mount: reject moving kernel internal mounts
|
|
possible deadlock in io_submit_one
fs
|
4 |
C |
done |
|
1779 |
2469d |
2639d
|
12/29 |
2465d |
cbcfa130a911
fs/userfaultfd.c: disable irqs for fault_pending and event locks
|
|
possible deadlock in userfaultfd_read (2)
fs
mm
|
4 |
|
|
|
228 |
2488d |
2587d
|
12/29 |
2465d |
cbcfa130a911
fs/userfaultfd.c: disable irqs for fault_pending and event locks
|
|
WARNING in notify_change
fs
|
-1 |
C |
|
|
566 |
2552d |
2941d
|
12/29 |
2470d |
f69e749a4935
Abort file_remove_privs() for non-reg. files
|
|
WARNING in fanotify_handle_event
fs
|
-1 |
C |
done |
|
5 |
2507d |
2506d
|
12/29 |
2483d |
c285a2f01d69
fanotify: update connector fsid cache on add mark
|
|
BUG: Dentry still in use [unmount of tmpfs tmpfs]
fs
|
-1 |
|
|
|
2 |
2516d |
2515d
|
12/29 |
2483d |
1b0b9cc8d379
vfs: fsmount: add missing mntget()
|
|
BUG: Dentry still in use [unmount of hugetlbfs hugetlbfs]
fs
|
-1 |
C |
done |
|
3 |
2506d |
2506d
|
12/29 |
2483d |
1b0b9cc8d379
vfs: fsmount: add missing mntget()
|
|
possible deadlock in aio_poll
fs
|
4 |
C |
|
|
5041 |
2642d |
2787d
|
12/29 |
2494d |
ae62c16e105a
userfaultfd: disable irqs when taking the waitqueue lock
|
|
INFO: task hung in __ia32_sys_io_uring_enter
fs
|
1 |
|
|
|
2 |
2570d |
2571d
|
12/29 |
2501d |
b19062a56726
io_uring: fix possible deadlock between io_uring_{enter,register}
|
|
INFO: task hung in __x64_sys_io_uring_enter
fs
|
1 |
|
|
|
12 |
2564d |
2571d
|
12/29 |
2501d |
b19062a56726
io_uring: fix possible deadlock between io_uring_{enter,register}
|
|
INFO: task hung in __get_super
fs
|
1 |
C |
|
|
80 |
2504d |
2949d
|
12/29 |
2504d |
33ec3e53e7b1
loop: Don't change loop device under exclusive opener
|
|
general protection fault in do_move_mount
fs
|
2 |
|
|
|
3 |
2546d |
2546d
|
12/29 |
2510d |
05883eee857e
do_move_mount(): fix an unsafe use of is_anon_ns()
|
|
general protection fault in load_elf_binary
fs
mm
|
2 |
C |
done |
|
15 |
2582d |
2587d
|
12/29 |
2510d |
cc338010a233
fs/binfmt_elf.c: free PT_INTERP filename ASAP
|
|
kernel BUG at mm/slab.c:LINE! (4)
fs
|
-1 |
|
|
|
12 |
2522d |
2589d
|
12/29 |
2510d |
4f661542a402
tcp: fix zerocopy and notsent_lowat issues
|
|
general protection fault in put_fs_context
fs
|
2 |
C |
|
|
9 |
2736d |
2737d
|
12/29 |
2513d |
8d0347f6c3a9
convert do_remount_sb() to fs_context
|
|
INFO: task hung in __io_uring_register
fs
|
1 |
C |
done |
|
51 |
2563d |
2572d
|
12/29 |
2528d |
b19062a56726
io_uring: fix possible deadlock between io_uring_{enter,register}
|
|
general protection fault in fanotify_handle_event
fs
|
2 |
syz |
done |
|
5 |
2567d |
2567d
|
12/29 |
2528d |
b1da6a51871c
fsnotify: Fix NULL ptr deref in fanotify_get_fsid()
|
|
BUG: unable to handle kernel paging request in do_mount
fs
|
8 |
C |
|
|
194 |
2738d |
2776d
|
12/29 |
2534d |
3e1aeb00e6d1
vfs: Implement a filesystem superblock creation/configuration context
|
|
possible deadlock in seq_read
fs
|
4 |
C |
|
|
19074 |
2580d |
3070d
|
12/29 |
2573d |
73601ea5b7b1
fs/open.c: allow opening only regular files during execve()
|
|
KASAN: use-after-free Read in link_path_walk
fs
|
19 |
syz |
done |
|
5 |
2692d |
2708d
|
12/29 |
2573d |
1da6c4d9140c
bpf: fix use after free in bpf_evict_inode
|
|
KASAN: use-after-free Read in trailing_symlink
fs
|
19 |
syz |
done |
|
2 |
2693d |
2708d
|
12/29 |
2573d |
1da6c4d9140c
bpf: fix use after free in bpf_evict_inode
|
|
KASAN: use-after-free Read in path_lookupat
fs
|
19 |
syz |
done |
|
1 |
2708d |
2708d
|
12/29 |
2573d |
1da6c4d9140c
bpf: fix use after free in bpf_evict_inode
|
|
KASAN: use-after-free Read in filemap_fault
mm
fs
|
19 |
C |
|
|
277 |
2667d |
2677d
|
11/29 |
2584d |
6b4c9f446981
filemap: drop the mmap_sem for all blocking operations
|
|
possible deadlock in __do_page_fault
fs
mm
|
4 |
C |
|
|
820 |
2609d |
2776d
|
11/29 |
2588d |
fb4415a12632
staging: android: ashmem: Don't call fallocate() with ashmem_mutex held.
|
|
possible deadlock in vfs_fallocate
fs
|
4 |
C |
|
|
3981 |
2810d |
2921d
|
11/29 |
2588d |
fb4415a12632
staging: android: ashmem: Don't call fallocate() with ashmem_mutex held.
|
|
BUG: unable to handle kernel NULL pointer dereference in __generic_file_write_iter
mm
fs
|
10 |
|
|
|
5 |
2614d |
2623d
|
11/29 |
2588d |
ac5ceccce550
x86/unwind: Add hardcoded ORC entry for NULL
f4f34e1b82eb
x86/unwind: Handle NULL pointer calls better in frame unwinder
|
|
possible deadlock in userfaultfd_read
fs
mm
|
4 |
|
|
|
239 |
2588d |
2642d
|
11/29 |
2588d |
d3d6a18d7d35
aio: Fix locking in aio_poll()
|
|
BUG: unable to handle kernel paging request in dput (2)
fs
|
8 |
C |
|
|
4 |
2644d |
2645d
|
11/29 |
2610d |
36991ca68db9
blk-mq: protect debugfs_create_files() from failures
37ea7b630ae5
debugfs: debugfs_lookup() should return NULL if not found
|
|
INFO: task hung in generic_file_write_iter
mm
fs
|
1 |
|
|
|
7 |
2703d |
2841d
|
11/29 |
2610d |
04906b2f542c
blockdev: Fix livelocks on loop device
|
|
general protection fault in __dentry_path
fs
|
2 |
C |
|
|
2082 |
2612d |
2645d
|
11/29 |
2610d |
8ed0579c12b2
kvm: properly check debugfs dentry before using it
|
|
KASAN: use-after-free Read in posix_lock_inode
fs
|
19 |
syz |
|
|
5 |
2673d |
2673d
|
11/29 |
2659d |
bf77ae4c98d7
locks: fix error in locks_move_blocks()
|
|
KASAN: use-after-free Read in locks_delete_block
fs
|
19 |
syz |
|
|
4 |
2701d |
2723d
|
11/29 |
2659d |
16306a61d3b7
fs/locks: always delete_block after waiting.
|
|
WARNING in userfaultfd_ioctl
mm
fs
|
-1 |
C |
|
|
11 |
2693d |
2702d
|
11/29 |
2678d |
01e881f5a1fc
userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered
|
|
WARNING: kmalloc bug in krealloc
fs
|
-1 |
C |
|
|
2 |
2843d |
2843d
|
11/29 |
2723d |
61448479a9f2
mm: don't warn about large allocations for slab
|
|
WARNING: kmalloc bug in vfs_getxattr_alloc
fs
|
-1 |
C |
|
|
9 |
2799d |
2841d
|
11/29 |
2723d |
61448479a9f2
mm: don't warn about large allocations for slab
|
|
KASAN: slab-out-of-bounds Read in fscache_alloc_cookie
fs
|
17 |
C |
|
|
1936 |
2749d |
2850d
|
11/29 |
2737d |
1ff22883b0b2
fscache: Fix incomplete initialisation of inline key space
fa520c47eaa1
fscache: Fix out of bound read in long cookie keys
|
|
general protection fault in ubifs_mount
fs
mtd
|
2 |
C |
|
|
216 |
2776d |
2793d
|
11/29 |
2756d |
37f31b6ca431
ubifs: Check for name being NULL while mounting
|
|
WARNING in __fsnotify_recalc_mask
fs
|
-1 |
syz |
|
|
9 |
2808d |
2810d
|
10/29 |
2786d |
d3bc0fa8411c
fsnotify: fix false positive warning on inode delete
|
|
BUG: soft lockup in shrink_dcache_parent (2)
fs
|
1 |
|
|
|
7 |
2878d |
2885d
|
10/29 |
2787d |
4fb48871409e
restore cond_resched() in shrink_dcache_parent()
|
|
INFO: task hung in fsnotify_mark_destroy_workfn
fs
|
1 |
syz |
|
|
13 |
2818d |
2932d
|
10/29 |
2789d |
128f38041035
android: binder: Rate-limit debug and userspace triggered err msgs
|
|
BUG: soft lockup in d_walk
fs
|
1 |
C |
|
|
163 |
2878d |
2923d
|
8/29 |
2792d |
4fb48871409e
restore cond_resched() in shrink_dcache_parent()
|
|
general protection fault in send_sigurg_to_task
fs
|
2 |
C |
|
|
6 |
2812d |
2815d
|
8/29 |
2800d |
84fe4cc09abc
signal: Don't send signals to tasks that don't exist
|
|
general protection fault in send_sigio_to_task
fs
|
2 |
C |
|
|
176 |
2811d |
2815d
|
8/29 |
2800d |
84fe4cc09abc
signal: Don't send signals to tasks that don't exist
|
|
kernel BUG at mm/memory.c:LINE!
fs
mm
|
-1 |
|
|
|
1 |
2851d |
2850d
|
8/29 |
2820d |
bfd40eaff5ab
mm: fix vma_is_anonymous() false-positives
|
|
kernel BUG at fs/userfaultfd.c:LINE! (2)
fs
mm
|
-1 |
C |
|
|
8 |
2825d |
2843d
|
8/29 |
2820d |
31e810aa1033
userfaultfd: remove uffd flags from vma->vm_flags if UFFD_EVENT_FORK fails
|
|
KASAN: stack-out-of-bounds Read in __d_lookup_rcu
fs
|
17 |
|
|
|
1 |
2840d |
2840d
|
8/29 |
2821d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
|
KASAN: stack-out-of-bounds Read in locks_remove_posix
fs
|
17 |
C |
|
|
1 |
2838d |
2838d
|
8/29 |
2821d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
|
KASAN: slab-out-of-bounds Read in getname_kernel
fs
|
17 |
C |
|
|
8 |
2845d |
2945d
|
8/29 |
2835d |
02f51d45937f
autofs: fix slab out of bounds read in getname_kernel()
|
|
KASAN: global-out-of-bounds Write in string
fs
|
21 |
C |
|
|
7 |
2890d |
2947d
|
8/29 |
2835d |
fe10e398e860
reiserfs: fix buffer overflow with long warning messages
|
|
BUG: unable to handle kernel paging request in dput
fs
|
8 |
C |
|
|
26 |
2881d |
2884d
|
8/29 |
2850d |
d85b399b64e8
fix proc_fill_cache() in case of d_alloc_parallel() failure
|
|
BUG: unable to handle kernel NULL pointer dereference in do_select
fs
|
10 |
|
|
|
45 |
2860d |
2860d
|
8/29 |
2850d |
e88958e6369a
net: handle NULL ->poll gracefully
|
|
general protection fault in wb_workfn (2)
fs
|
2 |
|
|
|
38 |
2869d |
2894d
|
8/29 |
2850d |
3ee7e8697d58
bdi: Fix another oops in wb_workfn()
|
|
KASAN: use-after-free Read in __vfs_write
fs
|
19 |
syz |
|
|
14 |
2879d |
2881d
|
8/29 |
2850d |
66e58e0ef80a
bpfilter: fix race in pipe access
|
|
general protection fault in pipe_write
fs
|
2 |
syz |
|
|
1 |
2881d |
2881d
|
8/29 |
2850d |
66e58e0ef80a
bpfilter: fix race in pipe access
|
|
BUG: unable to handle kernel NULL pointer dereference in ep_item_poll
fs
|
10 |
C |
|
|
15 |
2860d |
2860d
|
8/29 |
2850d |
e88958e6369a
net: handle NULL ->poll gracefully
|
|
general protection fault in __vfs_write
fs
|
2 |
syz |
|
|
25 |
2878d |
2882d
|
8/29 |
2850d |
66e58e0ef80a
bpfilter: fix race in pipe access
|
|
KASAN: use-after-free Read in pipe_read
fs
|
19 |
C |
|
|
3 |
2880d |
2881d
|
8/29 |
2850d |
66e58e0ef80a
bpfilter: fix race in pipe access
|
|
KASAN: use-after-free Read in finish_wait
fs
|
19 |
|
|
|
8 |
2879d |
2881d
|
8/29 |
2850d |
66e58e0ef80a
bpfilter: fix race in pipe access
|
|
KASAN: use-after-free Read in __kernel_write
fs
|
19 |
syz |
|
|
7 |
2879d |
2881d
|
8/29 |
2850d |
66e58e0ef80a
bpfilter: fix race in pipe access
|
|
KASAN: null-ptr-deref Write in simple_write_to_buffer
fs
|
12 |
C |
|
|
5 |
2890d |
2915d
|
8/29 |
2850d |
fc14eebfc208
PM / hibernate: Fix oops at snapshot_write()
|
|
general protection fault in touch_atime
fs
|
2 |
syz |
|
|
6 |
2878d |
2881d
|
8/29 |
2850d |
66e58e0ef80a
bpfilter: fix race in pipe access
|
|
BUG: soft lockup in do_raw_spin_unlock (2)
fs
|
1 |
|
|
|
1 |
2878d |
2878d
|
8/29 |
2850d |
4fb48871409e
restore cond_resched() in shrink_dcache_parent()
|
|
general protection fault in __mnt_want_write
fs
|
2 |
|
|
|
1 |
2879d |
2879d
|
8/29 |
2850d |
66e58e0ef80a
bpfilter: fix race in pipe access
|
|
WARNING in do_dentry_open
fs
|
-1 |
C |
|
|
26 |
2873d |
2881d
|
8/29 |
2850d |
b16558579576
bpf: implement dummy fops for bpf objects
|
|
INFO: task hung in namespace_unlock
fs
|
1 |
|
|
|
15 |
2854d |
2863d
|
8/29 |
2850d |
ebec3f8f5271
n_tty: Access echo_* variables carefully.
|
|
general protection fault in vfs_read
fs
|
2 |
syz |
|
|
2 |
2880d |
2881d
|
8/29 |
2850d |
66e58e0ef80a
bpfilter: fix race in pipe access
|
|
BUG: unable to handle kernel NULL pointer dereference in do_sys_poll
fs
|
10 |
C |
|
|
297 |
2860d |
2860d
|
8/29 |
2850d |
e88958e6369a
net: handle NULL ->poll gracefully
|
|
WARNING in sysfs_remove_group
fs
|
-1 |
C |
|
|
11125 |
2851d |
3105d
|
8/29 |
2850d |
d3349b6b3c37
loop: remember whether sysfs_create_group() was done
|
|
INFO: rcu detected stall in d_walk
fs
|
1 |
C |
|
|
25680 |
2875d |
2937d
|
8/29 |
2850d |
4fb48871409e
restore cond_resched() in shrink_dcache_parent()
|
|
KASAN: use-after-free Read in pipe_wait
fs
|
19 |
|
|
|
2 |
2878d |
2879d
|
8/29 |
2850d |
66e58e0ef80a
bpfilter: fix race in pipe access
|
|
KASAN: use-after-free Read in remove_wait_queue (2)
fs
|
19 |
C |
|
|
4 |
2970d |
2981d
|
5/29 |
2882d |
af8d3c7c001a
ppp: remove the PPPIOCDETACH ioctl
|
|
INFO: task hung in __do_page_fault
fs
mm
|
1 |
|
|
|
1 |
2935d |
2934d
|
5/29 |
2903d |
8236b0ae31c8
bdi: wake up concurrent wb_shutdown() callers.
|
|
INFO: task hung in handle_userfault
fs
mm
|
1 |
|
|
|
3 |
2917d |
2940d
|
5/29 |
2903d |
8236b0ae31c8
bdi: wake up concurrent wb_shutdown() callers.
|
|
KASAN: use-after-free Read in debugfs_remove (2)
fs
|
19 |
|
|
|
1 |
2929d |
2927d
|
5/29 |
2903d |
f53823c18131
bdi: Fix use after free bug in debugfs_remove()
|
|
general protection fault in wb_workfn
fs
|
2 |
|
|
|
63 |
2904d |
2931d
|
5/29 |
2903d |
b8b784958ecc
bdi: Fix oops in wb_workfn()
|
|
WARNING: refcount bug in put_pid_ns
fs
|
13 |
syz |
|
|
6 |
2950d |
2949d
|
5/29 |
2912d |
8e04944f0ea8
mm,vmscan: Allow preallocating memory for register_shrinker().
|
|
KASAN: null-ptr-deref Read in xattr_getsecurity
fs
|
11 |
|
|
|
68 |
2928d |
2940d
|
5/29 |
2912d |
1f5781725dcb
commoncap: Handle memory allocation failure.
|
|
INFO: task hung in __blkdev_get
fs
|
1 |
C |
|
|
662 |
2936d |
3062d
|
5/29 |
2912d |
1e047eaab3bb
block/loop: fix deadlock after loop_set_status
|
|
BUG: corrupted list in __dentry_kill
fs
|
8 |
C |
|
|
35 |
2929d |
2949d
|
5/29 |
2912d |
4a3877c4cedd
rpc_pipefs: fix double-dput()
|
|
WARNING in format_decode
fs
|
-1 |
C |
|
|
1 |
2949d |
2949d
|
5/29 |
2912d |
9ad553abe66f
fs/reiserfs/journal.c: add missing resierfs_warning() arg
|
|
WARNING in kmem_cache_free
fs
|
-1 |
|
|
|
1 |
2944d |
2944d
|
5/29 |
2912d |
eea0d3ea7546
crypto: drbg - set freed buffers to NULL
|
|
KASAN: use-after-free Read in remove_wait_queue
fs
|
19 |
C |
|
|
7 |
2987d |
2997d
|
4/29 |
2982d |
5eeb2ca02a2f
ANDROID: binder: synchronize_rcu() when using POLLFREE.
|
|
KASAN: use-after-free Read in __fput
fs
|
19 |
|
|
|
23 |
3065d |
3099d
|
4/29 |
2996d |
a5739435b5a3
fix kcm_clone()
|
|
KASAN: use-after-free Read in __lock_acquire (2)
fs
|
19 |
C |
|
|
589 |
3007d |
3083d
|
4/29 |
3004d |
f5cb779ba163
ANDROID: binder: remove waitqueue when thread exits.
|
|
WARNING in register_lock_class
fs
|
-1 |
C |
|
|
2 |
3051d |
3048d
|
4/29 |
3004d |
f5cb779ba163
ANDROID: binder: remove waitqueue when thread exits.
|
|
WARNING in sysfs_warn_dup
fs
|
-1 |
|
|
|
11 |
3009d |
3053d
|
4/29 |
3004d |
5d54f948aaac
sysfs: turn WARN() into pr_warn()
|
|
general protection fault in page_mapping
fs
mm
|
2 |
C |
|
|
46 |
3031d |
3059d
|
4/29 |
3008d |
7d11f77f84b2
RDS: null pointer dereference in rds_atomic_free_op
|
|
BUG: unable to handle kernel NULL pointer dereference in page_mapping
fs
mm
|
10 |
C |
|
|
4 |
3051d |
3054d
|
4/29 |
3008d |
7d11f77f84b2
RDS: null pointer dereference in rds_atomic_free_op
|
|
general protection fault in show_timer
fs
|
2 |
C |
|
|
10 |
3052d |
3071d
|
4/29 |
3008d |
cef31d9af908
posix-timer: Properly check sigevent->sigev_notify
|
|
kernel BUG at fs/userfaultfd.c:LINE!
mm
fs
|
-1 |
C |
|
|
3 |
3051d |
3048d
|
4/29 |
3008d |
0cbb4b4f4c44
userfaultfd: clear the vma->vm_userfaultfd_ctx if UFFD_EVENT_FORK fails
|
|
BUG: unable to handle kernel paging request in devpts_mntget
fs
|
8 |
C |
|
|
21 |
3021d |
3098d
|
4/29 |
3008d |
c9cc8d01fb04
devpts: fix error handling in devpts_mntget()
|
|
KASAN: use-after-free Read in __wake_up_common
fs
|
19 |
C |
|
|
888 |
3008d |
3017d
|
4/29 |
3008d |
4cd879515d68
vhost_net: stop device during reset owner
|
|
general protection fault in proc_flush_task
fs
|
2 |
syz |
|
|
2 |
3054d |
3071d
|
4/29 |
3013d |
c0ee554906c3
pid: Handle failure to allocate the first pid in a pid namespace
|
|
BUG: unable to handle kernel NULL pointer dereference in proc_flush_task
fs
|
10 |
syz |
|
|
1 |
3055d |
3051d
|
4/29 |
3013d |
c0ee554906c3
pid: Handle failure to allocate the first pid in a pid namespace
|
|
KASAN: use-after-free Read in handle_userfault
fs
mm
|
19 |
C |
|
|
151 |
3042d |
3105d
|
3/29 |
3030d |
0cbb4b4f4c44
userfaultfd: clear the vma->vm_userfaultfd_ctx if UFFD_EVENT_FORK fails
|
|
WARNING in lock_release
fs
|
-1 |
C |
|
|
72 |
3052d |
3085d
|
3/29 |
3049d |
ca0168e8a77c
alloc_super(): do ->s_umount initialization earlier
|
|
general protection fault in iov_iter_fault_in_readable
fs
mm
|
2 |
|
|
|
5 |
3091d |
3099d
|
3/29 |
3073d |
ee74d9967b82
tun: do not arm flow_gc_timer in tun_flow_init()
|
|
kernel BUG at fs/notify/dnotify/dnotify.c:LINE!
fs
|
-1 |
|
|
|
19 |
3089d |
3101d
|
3/29 |
3073d |
b3a006600582
dnotify: Handle errors from fsnotify_add_mark_locked() in fcntl_dirnotify()
|
|
KASAN: use-after-free Read in fsnotify
fs
|
19 |
|
|
|
1 |
3134d |
3098d
|
3/29 |
3073d |
b3a006600582
dnotify: Handle errors from fsnotify_add_mark_locked() in fcntl_dirnotify()
|