Applied filters: WithRepro (drop) Label=subsystems:fs (drop)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
KASAN: slab-use-after-free Read in sysfs_emit prio:high fs 19 syz, C 21 7d02h 50d 2/29 never media: redrat3: fix UAF in probe error path leaving rc device registered
KASAN: slab-use-after-free Read in lookup_noperm_common prio:high usb fs 19 syz, C 11 31d 58d 23/29 never b15b548d52b4 i2c: core: fix debugfs UAF on adapter removal
kernel BUG in free_bprm fs mm -1 syz, C done 445 688d 689d 1/29 never exec: NULL out bprm->argv0 when it is an ERR_PTR
WARNING in eventfs_create_events_dir prio:low trace fs -1 syz, C error 9 20d 32d 23/29 never 1704aaaf5d22 eventfs: Initialize ei->children and ei->list in init_ei()
KASAN: slab-use-after-free Write in config_item_get prio:normal fs 22 syz, C error 8 38d 58d 16/29 never configfs: unhash the dentry before dropping the item in rmdir
general protection fault in bch2_prt_vprintf fs 2 syz, C error inconclusive 4 628d 665d 2/29 never bcachefs: journal_entry_btree_keys_to_text() is more careful
WARNING in bch2_prt_printf prio:high fs -1 syz, C done error 103 364d 868d 2/29 never bcachefs: journal_entry_btree_keys_to_text() is more careful
KASAN: use-after-free Read in check_extent_overbig prio:high fs 19 syz, C done done 18 377d 659d 2/29 never bcachefs: fix check_extent_overbig() call
kernel BUG in bch2_btree_path_peek_slot prio:low fs -1 syz, C error error 1546 487d 665d 2/29 never bcachefs: fix assert in bch2_btree_path_traverse_cached()
kernel BUG in do_bch2_trans_commit_to_journal_replay prio:normal fs -1 syz 22 429d 432d 2/29 never bcachefs: do_bch2_trans_commit_to_journal_replay handles accounting
kernel BUG in bch2_printbuf_exit prio:high fs -1 syz, C error 29 431d 435d 2/29 never bcachefs: convert str_hash.c to CLASS
kernel BUG in bch2_btree_repair_topology_recurse prio:high fs -1 syz, C done 7 361d 421d 2/29 never bcachefs: btree_check_root_boundaries()
INFO: task hung in __bch2_fs_stop prio:high fs 1 syz, C done 1589 357d 832d 2/29 never bcachefs: Increase BCH_MIN_NR_NBUCKETS
BUG: sleeping function called from invalid context in procfs_procmap_ioctl fs 5 syz done 101 448d 450d 2/29 never mm/maps: move kmalloc() call location in do_procmap_query() out of RCU critical section
INFO: task hung in __closure_sync prio:high fs 1 syz, C done 8591 348d 875d 2/29 never bcachefs: Increase BCH_MIN_NR_NBUCKETS
WARNING in bchfs_truncate fs -1 syz, C done 366 364d 874d 2/29 never bcachefs: Increase BCH_MIN_NR_NBUCKETS
UBSAN: array-index-out-of-bounds in bch2_accounting_validate prio:high fs 15 syz, C done 23 350d 417d 2/29 never bcachefs: Ignore accounting key type larger than BCH_DISK_ACCOUNTING_TYPE_NR
KMSAN: uninit-value in __bch2_alloc_v4_to_text prio:high fs 7 syz, C 3 460d 465d 2/29 never bcachefs: Fix refs to undefined fields in __bch2_alloc_v4_to_text()
INFO: task hung in bchfs_fpunch (2) prio:high fs mm 1 syz, C done 2 414d 458d 2/29 never bcachefs: Fix readahead involved deadlock
INFO: task hung in bchfs_fallocate (2) fs 1 syz, C done inconclusive 6 405d 632d 2/29 never bcachefs: Fix readahead involved deadlock
INFO: task hung in bch2_readahead prio:high fs 1 syz, C done 375 377d 858d 2/29 never bcachefs: Fix readahead involved deadlock
INFO: task hung in invalidate_inode_pages2_range (3) prio:high fs block 1 syz, C done 58 12d 574d 2/29 never bcachefs: Fix readahead involved deadlock
KASAN: slab-out-of-bounds Write in bch2_dirent_init_name prio:high fs 21 syz, C error 1496 340d 465d 2/29 never bcachefs: Fix padding zeroout when creating casefolded dirents
KMSAN: uninit-value in bch2_check_subvols prio:high fs 7 syz, C 53 362d 451d 2/29 never bcachefs: Fix missing compat code in check_subvol()
WARNING in bch2_dev_free (2) prio:low fs -1 syz, C done 5 430d 435d 2/29 never bcachefs: Fix __bch2_fs_read_write() error path
kernel BUG in __journal_res_get (3) prio:high fs -1 syz, C inconclusive 175 341d 464d 2/29 never bcachefs: Fix __bch2_fs_read_write() error path
KASAN: use-after-free Read in bch2_check_dirents fs 19 syz, C done 769 360d 679d 2/29 never bcachefs: Fix UAF in check_dirent()
KASAN: use-after-free Read in check_dirent fs 19 syz, C done 13 399d 581d 2/29 never bcachefs: Fix UAF in check_dirent()
KASAN: slab-use-after-free Write in bch2_do_discards prio:high fs 22 syz 137 361d 431d 2/29 never bcachefs: Fix UAF by journal write path
KASAN: slab-use-after-free Write in bch2_get_next_dev prio:high fs 22 syz, C 1331 340d 434d 2/29 never bcachefs: Fix UAF by journal write path
WARNING in bch2_fs_journal_start prio:high fs -1 syz, C done 14 462d 482d 2/29 never bcachefs: Don't allow mounting with crazy numbers of dirty journal entries
possible deadlock in __balance_push_cpu_stop prio:high fs 4 syz, C 46 14d 28d 22/29 never 5541d8975841 mm/slab: disallow kfree_rcu_sheaf() on PREEMPT_RT again
possible deadlock in configfs_rmdir prio:low fs 4 syz, C error 2840 1h12m 59d 26/29 never 9dbf74f4022f usb: gadget: f_tcm: fix deadlock in usbg_make_tpg()
general protection fault in __bch2_err_trace prio:normal fs 2 syz, C done 25 360d 416d 2/29 never bcachefs: Delete faulty read_only/nochanges check in fs_open()
KMSAN: uninit-value in bch2_alloc_sectors_start_trans (2) prio:high fs 7 syz 875 361d 527d 2/29 never bcachefs: Add missing ei_last_dirtied update
INFO: task hung in io_sq_thread_stop fs io-uring 1 syz, C done 211 2048d 2207d 1/29 never io_uring: don't sleep schedule in SQPOLL thread if we need to park
memory leak in adfs_init_fs_context prio:low fs 3 syz, C 2 69d 286d 22/29 never b12e20c6ac15 adfs: fix memory leak in sb->s_fs_info
INFO: task hung in remove_inode_hugepages mm fs 1 syz, C done 52 717d 809d 1/29 never INFO: task hung in remove_inode_hugepages
KASAN: slab-use-after-free Read in debugfs_u32_get (2) prio:normal fs 19 syz 1 90d 100d 29/29 59d 2e996ca81f95 netdevsim: remove ethtool debugfs files before freeing netdev
KASAN: slab-use-after-free Read in reverse_path_check_proc prio:high fs 19 syz, C 113 109d 126d 29/29 72d a1e9718b406b eventpoll: restore EP_UNACTIVE_PTR sentinel for ctx->tfile_check_list
general protection fault in __umount_mnt fs 2 syz, C error 21 179d 189d 29/29 127d ad4999496e73 mount: always duplicate mount
UBSAN: shift-out-of-bounds in minix_statfs fs -1 syz, C inconclusive error 75 242d 1747d 29/29 142d 8c97a6ddc956 minix: Add required sanity checking to minix_check_superblock()
possible deadlock in __configfs_open_file fs 4 syz, C 29 224d 642d 29/29 142d 14d4ac19d189 scsi: target: Fix recursive locking in __configfs_open_file()
BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio (4) fs 10 syz, C done 5746 248d 678d 29/29 142d 777a8560fd29 lib/buildid: use __kernel_read() for sleepable context
memory leak in __shmem_file_setup fs 3 syz, C 1 260d 256d 29/29 142d 605f6586ecf7 mm/vma: do not leak memory when .mmap_prepare swaps the file
general protection fault in grab_requested_root fs 2 syz, C 21 212d 225d 29/29 142d 81f16c9778d7 statmount: Fix the null-ptr-deref in do_statmount()
kernel BUG in sctp_getsockopt_peeloff_common fs -1 syz, C done 6 297d 298d 29/29 243d afb9917d9b37 Revert "net/socket: convert sock_map_fd() to FD_ADD()"
kernel BUG in socket fs -1 syz, C 145 280d 275d 29/29 243d afb9917d9b37 Revert "net/socket: convert sock_map_fd() to FD_ADD()"
memory leak in debugfs_change_name fs 3 syz, C 1 295d 291d 29/29 247d d412ff9e26eb debugfs: Fix memleak in debugfs_change_name().
WARNING in minix_unlink fs -1 syz, C inconclusive done 458 290d 672d 29/29 247d 009a2ba40303 Fix a drop_nlink warning in minix_rename
memory leak in getname_flags fs 3 syz, C 1 275d 275d 29/29 247d b14fad555302 io_uring: fix filename leak in __io_openat_prep()
KASAN: slab-use-after-free Read in driver_remove_file fs 19 syz, C error done 296 294d 423d 29/29 248d 72262330f7b3 comedi: c6xdigio: Fix invalid PNP driver unregistration
general protection fault in fd_install fs 2 syz, C 64 294d 295d 29/29 261d 8cf01d0c4372 mqueue: correct the type of ro to int
WARNING in minix_rmdir fs -1 syz, C inconclusive 92 311d 625d 29/29 261d d3e0e8661ceb Fix a drop_nlink warning in minix_rmdir
WARNING in nsproxy_ns_active_get fs -1 syz, C 377 318d 324d 29/29 261d cefd55bd2159 nsproxy: fix free_nsproxy() and simplify create_new_namespaces()
kernel BUG in may_open (2) fs -1 syz, C done 17716 262d 444d 29/29 261d 34ab4c75588c bfs: Reconstruct file type when loading from disk 7f9d34b0a7cb cramfs: Verify inode mode when loading from disk 005d4b0d33f6 hfsplus: Verify inode mode when loading from disk 0a9e74051313 isofs: Verify inode mode when loading from disk 7a5aa54fba2b jfs: Verify inode mode when loading from disk 73861970938a minixfs: Verify inode mode when loading from disk 4aead50caf67 nilfs2: reject invalid file types when reading inodes 4e8011ffec79 ntfs3: pretend $Extend records as regular files bc107a619f02 squashfs: verify inode mode when loading from disk
KMSAN: kernel-infoleak in hugetlbfs_read_iter fs mm 9 syz, C 7 320d 319d 29/29 261d de8798965fd0 mm/memfd: fix information leak in hugetlb folios
general protection fault in fsnotify_destroy_group fs 2 syz, C error 2 304d 302d 29/29 261d 7129098f4f7b fanotify: convert fanotify_init() to FD_PREPARE()
WARNING in nsproxy_ns_active_put fs -1 syz, C done 38 318d 324d 29/29 261d cefd55bd2159 nsproxy: fix free_nsproxy() and simplify create_new_namespaces()
WARNING in minix_rename fs -1 syz error 7 372d 458d 29/29 261d 009a2ba40303 Fix a drop_nlink warning in minix_rename
WARNING in destroy_super_work fs -1 syz done 107 318d 322d 29/29 261d f8d5a8970d2f ns: handle setns(pidfd, ...) cleanly
general protection fault in mntput fs 2 syz, C error 17 297d 302d 29/29 261d 05885f41658c namespace: convert fsmount() to FD_PREPARE()
BUG: sleeping function called from invalid context in hook_sb_delete fs 5 syz, C done 11887 279d 367d 29/29 261d 56325e8c68c0 landlock: fix splats from iput() after it started calling might_sleep()
WARNING in dax_iomap_rw fs -1 syz, C 5 345d 359d 29/29 298d 154d1e7ad9e5 dax: skip read lock assertion for read-only filesystems
WARNING in invalidate_bh_lru fs -1 syz, C done done 5172 546d 1374d 29/29 311d 6f861765464f fs: Block writes to mounted block devices
VFS: Busy inodes after unmount (use-after-free) (3) fs 2 syz, C error 85 330d 360d 29/29 311d 56094ad3eaa2 vfs: Don't leak disconnected dentries on umount
kernel BUG in qlist_free_all (2) fs -1 syz, C done 5 345d 376d 29/29 311d 25718fdcbdd2 net: gro_cells: Use nested-BH locking for gro_cell
INFO: task hung in bch2_direct_write (2) fs 1 syz, C unreliable done 15 397d 406d 29/29 317d f2c61db29f27 Remove bcachefs core code
INFO: task hung in v9fs_file_fsync fs mm 1 syz, C done 14 363d 403d 29/29 331d e8fe3f07a357 9p/trans_fd: p9_fd_request: kick rx thread if EPOLLIN
WARNING in sysfs_emit_at fs -1 syz, C 2 384d 380d 29/29 331d 9dfec4a51df9 USB: core: remove the move buf action
general protection fault in iter_file_splice_write fs 2 syz, C done done 2812 402d 858d 29/29 345d netfs: Fix unbuffered write error handling
WARNING in path_noexec mm fs -1 syz, C done 14318 360d 445d 29/29 360d secretmem: use SB_I_NOEXEC
kernel BUG in bch2_journal_keys_peek_max fs -1 syz, C done 45 453d 590d 29/29 375d 425da82c63e3 bcachefs: btree_iter: fix updates, journal overlay
KASAN: use-after-free Read in bch2_btree_node_read_done fs 19 syz, C done 64 460d 669d 29/29 386d d89a34b14df5 bcachefs: Move bset size check before csum check
kernel BUG in bch2_btree_path_level_init (3) fs -1 syz, C done 489 386d 643d 29/29 386d 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
kernel BUG in __bch2_bkey_compat fs -1 syz, C done done 5 469d 469d 29/29 386d 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
kernel BUG in bch2_trans_update_by_path fs -1 syz, C done 857 388d 463d 29/29 386d c72d628469b8 bcachefs: Fix btree for nonexistent tree depth
BUG: unable to handle kernel paging request in __bch2_bkey_unpack_key fs 8 syz, C 75 462d 486d 29/29 386d 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
kernel panic: trans should be locked, unlocked by bch2_btree_update_start fs 2 syz, C error error 361 468d 659d 29/29 386d 5c4acbc8ce90 bcachefs: Don't unlock the trans if ret doesn't match BCH_ERR_operation_blocked
kernel BUG in bch2_bkey_cmp_packed (2) fs -1 syz, C 7 470d 480d 29/29 386d 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
kernel BUG in bch2_reconstruct_snapshots fs -1 syz, C done done 7 494d 585d 29/29 386d b2e2bed11980 bcachefs: Add missing key type checks to check_snapshot_exists()
BUG: unable to handle kernel NULL pointer dereference in bch2_btree_update_start fs 10 syz, C 6 457d 469d 29/29 386d 56be92c63f02 bcachefs: Fix pool->alloc NULL pointer dereference
KASAN: use-after-free Read in bch2_checksum fs 19 syz, C error done 8 490d 502d 29/29 386d d89a34b14df5 bcachefs: Move bset size check before csum check
kernel BUG in bch2_btree_node_iter_init (2) fs -1 syz, C done 3 443d 443d 29/29 386d 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
KASAN: slab-use-after-free Read in bch2_str_hash_repair_key fs 19 syz, C done 226 452d 472d 29/29 386d 9b54efe66c9b bcachefs: Fix alloc_req use after free
kernel BUG in __bch2_bkey_unpack_key fs -1 syz, C 43 465d 486d 29/29 386d 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
UBSAN: shift-out-of-bounds in __bch2_btree_node_hash_insert fs -1 syz, C done 434 448d 632d 29/29 386d 96de8f852031 bcachefs: mark invalid_btree_id autofix
KASAN: slab-use-after-free Read in bch2_bucket_alloc_trans fs 19 syz, C error 550 453d 470d 29/29 386d 9b54efe66c9b bcachefs: Fix alloc_req use after free
UBSAN: shift-out-of-bounds in __bch2_bkey_unpack_key fs -1 syz, C done 54 469d 485d 29/29 386d 03208bd06a61 bcachefs: don't return fsck_fix for unfixable node errors in __btree_err
kernel BUG in __btree_trans_update_by_path fs -1 syz, C done 20 444d 450d 29/29 386d c72d628469b8 bcachefs: Fix btree for nonexistent tree depth
kernel BUG in __bkey_unpack_pos (2) fs -1 syz, C done 24 441d 638d 29/29 386d 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
KASAN: use-after-free Read in poly1305_update fs 19 syz, C done 8 454d 469d 29/29 386d d89a34b14df5 bcachefs: Move bset size check before csum check
BUG: unable to handle kernel NULL pointer dereference in mempool_alloc_noprof (2) fs 10 syz, C done 8 465d 481d 29/29 386d 56be92c63f02 bcachefs: Fix pool->alloc NULL pointer dereference
KASAN: slab-use-after-free Read in bch2_copygc fs 19 syz, C done 25 386d 444d 29/29 386d c02b943f7d12 bcachefs: Fix reference to invalid bucket in copygc
possible deadlock in trans_set_locked fs 4 syz, C 113 464d 665d 29/29 413d ff1dd05f8233 bcachefs: bch2_trans_relock() is trylock for lockdep
WARNING in rhashtable_init_noprof fs -1 syz, C done 131 469d 487d 29/29 415d 757601ef8533 bcachefs: Don't put rhashtable on stack
KASAN: slab-out-of-bounds Read in bch2_sb_members_v1_to_text fs 17 syz, C done 6 472d 472d 29/29 415d 205da7c02673 bcachefs: Don't trust sb->nr_devices in members_to_text()
possible deadlock in __bch2_fsck_err (2) fs 4 syz, C 4 500d 501d 29/29 415d 0acb385ec19c bcachefs: Fix possible console lock involved deadlock
KASAN: slab-out-of-bounds Read in bch2_sb_members_v2_to_text fs 17 syz, C done 34 471d 487d 29/29 415d 205da7c02673 bcachefs: Don't trust sb->nr_devices in members_to_text()
WARNING in __init_work (2) fs -1 syz, C 5971 462d 470d 29/29 415d 757601ef8533 bcachefs: Don't put rhashtable on stack
divide error in bch2_sb_members_v2_to_text fs 2 syz, C done 3 472d 472d 29/29 415d 205da7c02673 bcachefs: Don't trust sb->nr_devices in members_to_text()
UBSAN: array-index-out-of-bounds in bch2_sb_downgrade_update fs 15 syz, C 539 463d 515d 29/29 415d 082c74411491 bcachefs: Fix downgrade_table_extra()
WARNING in bch2_printbuf_make_room fs -1 syz, C error 2 473d 864d 29/29 424d dc5bfdf8eaed bcachefs: fix the memory leak in exception case
BUG: unable to handle kernel paging request in bch2_dirent_to_text fs 8 syz, C done error 3 489d 800d 29/29 430d f39055220f6f bcachefs: Add missing validation for superblock section clean
kernel BUG in vfs_get_tree (2) fs -1 syz, C done 22 478d 474d 29/29 436d 9c6185609947 bcachefs: Call bch2_fs_start before getting vfs superblock
KASAN: use-after-free Read in sysv_new_inode (2) fs 19 syz, C inconclusive error 21224 536d 869d 29/29 436d 448fa70158f9 sysv: Remove the filesystem
BUG: unable to handle kernel NULL pointer dereference in do_pagemap_scan fs 10 syz, C inconclusive done 45 503d 1006d 29/29 445d 65c66047259f proc: fix the issue of proc_mem_open returning NULL
kernel BUG in may_open fs -1 syz, C error 137019 445d 541d 29/29 445d cfd86ef7e8e7 anon_inode: use a proper mode internally
WARNING in bch2_dev_free fs -1 syz, C done 258 473d 535d 28/29 469d d62922ba3cfc bcachefs: Prevent granting write refs when filesystem is read-only
KMSAN: uninit-value in bch2_extent_crc_append (2) fs 7 syz, C 4 555d 566d 28/29 470d 53cf2a3daa4c bcachefs: Fix kmsan warnings in bch2_extent_crc_pack()
KMSAN: uninit-value in bch2_trans_start_alloc_update fs 7 syz, C 1051 546d 669d 28/29 471d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_btree_node_iter_init (2) fs 7 syz, C 309 546d 677d 28/29 471d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_inode_v3_validate fs 7 syz, C 5866 547d 675d 28/29 471d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_btree_node_get fs 7 syz, C 18 557d 663d 28/29 471d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_btree_node_check_topology fs 7 syz, C 19 573d 684d 28/29 471d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_dev_freespace_init fs 7 syz, C 432 547d 660d 28/29 471d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_checksum_update (2) fs 19 syz, C done 7 554d 649d 28/29 471d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_bucket_alloc_early fs 7 syz, C 219 550d 688d 28/29 471d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_btree_ptr_v2_validate fs 7 syz, C 55 547d 598d 28/29 471d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_xattr_validate fs 7 syz, C 22 569d 651d 28/29 471d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_alloc_v4_validate (2) fs 7 syz, C 514 550d 677d 28/29 471d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in __bch2_bkey_cmp_left_packed fs 7 syz 2 613d 640d 28/29 471d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in rw_aux_tree_set (2) fs 7 syz, C 2356 548d 672d 28/29 471d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_bkey_val_validate fs 7 syz, C 17 553d 665d 28/29 471d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_bkey_ptrs_validate fs 7 syz, C 15 552d 663d 28/29 471d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_bucket_alloc_trans fs 7 syz, C 15 524d 656d 28/29 471d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_bkey_cmp_packed_inlined (2) fs 7 syz, C 309 547d 667d 28/29 471d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
kernel BUG in bch2_fs_initialize fs -1 syz done 1004 526d 531d 28/29 472d 806776ad9c20 bcachefs: Add missing error handling
kernel BUG in qlist_free_all net fs -1 syz, C done done 12 524d 672d 28/29 472d 3a04334d6282 bcachefs: Fix b->written overflow
WARNING in bch2_bkey_pick_read_device fs -1 syz, C error 89 542d 546d 28/29 472d 3c72d3eea97b bcachefs: Fix WARN() in bch2_bkey_pick_read_device()
KASAN: slab-use-after-free Read in bchfs_read fs 19 syz, C done 34 531d 538d 28/29 472d 34b47e3d73a2 bcachefs: Fix UAF in bchfs_read()
kernel BUG in bch2_run_recovery_pass (2) fs -1 syz, C 70 540d 609d 28/29 472d 962322475bb5 bcachefs: Handle backpointers with unknown data types
BUG: sleeping function called from invalid context in bch2_printbuf_make_room (2) fs 5 syz, C error 59 539d 542d 28/29 472d b2ffadcc7f8f bcachefs: Fix scheduling while atomic from logging changes
kernel BUG in bch2_btree_node_iter_init fs -1 syz, C done done 167 496d 600d 28/29 472d 3a04334d6282 bcachefs: Fix b->written overflow
general protection fault in bch2_snapshot_tree_oldest_subvol fs 8 syz, C done 14 517d 540d 28/29 472d aa6a591f0fd7 bcachefs: Fix null ptr deref in bch2_snapshot_tree_oldest_subvol() 71f8e806a5e4 bcachefs: Stricter checks on "key allowed in this btree"
KASAN: slab-out-of-bounds Read in validate_bset_keys fs 19 syz, C 5 572d 571d 28/29 472d 3a04334d6282 bcachefs: Fix b->written overflow
KMSAN: uninit-value in bch2_write_inode fs 7 syz, C 4476 560d 608d 28/29 472d 58517f4df842 bcachefs: Initialize from_inode members for bch_io_opts
kernel BUG in bch2_stripe_validate fs -1 syz, C done done 6 550d 635d 28/29 472d 71f8e806a5e4 bcachefs: Stricter checks on "key allowed in this btree"
kernel BUG in __journal_res_get (2) fs -1 syz, C error done 1527 472d 680d 28/29 472d 4c0d2c67ac6d bcachefs: Fix early startup error path
BUG: unable to handle kernel paging request in efivarfs_pm_notify fs efi 8 syz, C 1037 569d 579d 28/29 472d cb6ae457bc6a efivarfs: Defer PM notifier registration until .fill_super
kernel BUG in __bch2_trans_commit fs -1 syz, C unreliable 11858 680d 705d 28/29 503d 8b22abb4c840 bcachefs: -o norecovery now bails out of recovery earlier
possible deadlock in bch2_alloc_sectors_start_trans fs 4 syz, C inconclusive 64 661d 683d 28/29 505d 2cd85fea49d8 bcachefs: Don't recurse in check_discard_freespace_key
kernel BUG in bch2_get_scanned_nodes fs -1 syz, C done 101 605d 666d 28/29 506d a6f4794fcd86 bcachefs: struct bkey_validate_context
kernel BUG in bch2_evacuate_bucket fs -1 syz, C done 4 670d 669d 28/29 507d 9e92d6e9efb0 bcachefs: Kill bch2_get_next_backpointer()
VFS: Busy inodes after unmount (use-after-free) fs 2 syz, C error 55684 508d 1339d 28/29 507d 965b5dd1894f ocfs2: free inode when ocfs2_get_init_inode() fails
kernel BUG in bch2_btree_path_traverse_one fs -1 syz, C done 9 655d 688d 28/29 507d f11ca2ab18e3 bcachefs: Guard against backpointers to unknown btrees
kernel BUG in bch2_journal_pin_set fs -1 syz, C done 11 616d 669d 28/29 507d b3d82c2f2761 bcachefs: Guard against journal seq overflow
WARNING in bch2_journal_flush_seq_async fs -1 syz, C 27 613d 737d 28/29 507d 4746ee182a76 bcachefs: Check for inode journal seq in the future
general protection fault in proc_scheduler fs 2 syz 6 626d 631d 28/29 507d d38e26e36206 mptcp: sysctl: sched: avoid using current->nsproxy
kernel BUG in bch2_rechecksum_bio fs -1 syz, C 4 676d 686d 28/29 507d 9bdb3b73e732 bcachefs: Check for extent crc uncompressed/compressed size mismatch
kernel BUG in __bch2_journal_pin_put fs -1 syz, C 11 628d 670d 28/29 507d b3d82c2f2761 bcachefs: Guard against journal seq overflow
kernel BUG in const_folio_flags (2) fs mm -1 syz 3 611d 671d 28/29 507d 3203b3ab0fcf mm/filemap: don't call folio_test_locked() without a reference in next_uptodate_folio()
kernel BUG in __bch2_btree_node_write fs -1 syz, C 110 613d 722d 28/29 507d 75eabea6988e bcachefs: Fix dup/misordered check in btree node read
kernel BUG in bch2_btree_node_lock_write fs -1 syz, C done 8 661d 673d 28/29 507d f9e0a9be70c8 bcachefs: Issue a transaction restart after commit in repair
kernel BUG in bch2_btree_pos_to_text (2) fs -1 syz, C 51 614d 672d 28/29 507d abf23afa36eb bcachefs: Fix btree node scan when unknown btree IDs are present
kernel BUG in bch2_bucket_alloc_trans (3) fs -1 syz, C error 711 613d 676d 28/29 507d 828552ca74a4 bcachefs: Kill bch2_bucket_alloc_new_fs()
kernel BUG in bch2_journal_noflush_seq fs -1 syz, C done done 841 613d 807d 28/29 507d 0eafe758ac44 bcachefs: Check for bucket journal seq in the future
general protection fault in bch2_checksum fs 19 syz, C done 34 509d 800d 28/29 507d f7f196170dcd bcachefs: cryptographic MACs on superblock are not (yet?) supported
WARNING: locking bug in eventfd_signal_mask io-uring fs 4 syz, C done 6 631d 635d 28/29 507d a9c83a0ab66a io_uring/timeout: flush timeouts outside of the timeout lock
general protection fault in bch2_btree_path_traverse_one fs 8 syz, C done 564 600d 700d 28/29 507d 90f3683e8f7c bcachefs: Fix null ptr deref in btree_path_lock_root() c7e78f7b0178 bcachefs: Ignore empty btree root journal entries
BUG: corrupted list in bch2_btree_and_journal_iter_exit fs 8 syz, C done 7 623d 669d 28/29 507d 0184dfa3b821 bcachefs: Fix journal_iter list corruption
WARNING in mark_buffer_dirty (6) fs -1 syz, C error 11669 507d 1074d 28/29 507d ca76bb226bf4 nilfs2: do not force clear folio if buffer is referenced
kernel BUG in bch2_bio_compress (2) fs -1 syz, C 5 555d 680d 28/29 507d 3d0b3b51c5ab bcachefs: Don't BUG_ON() when superblock feature wasn't set for compressed data
kernel BUG in bch2_btree_write_buffer_flush_locked fs -1 syz, C done 35 617d 697d 28/29 507d b3d82c2f2761 bcachefs: Guard against journal seq overflow
kernel BUG in bch2_btree_root_read fs -1 syz, C 9 598d 672d 28/29 507d 828552ca74a4 bcachefs: Kill bch2_bucket_alloc_new_fs()
KASAN: slab-out-of-bounds Write in __put_unused_fd fs 22 syz, C done 5 629d 633d 28/29 507d 0c0214df28f0 fanotify: Fix crash in fanotify_init(2)
possible deadlock in page_cache_ra_unbounded mm fs 4 syz, C error done 163 614d 1374d 28/29 569d 6f861765464f fs: Block writes to mounted block devices
KASAN: use-after-free Read in reiserfs_fill_super (3) fs 19 syz, C error done 47 676d 721d 28/29 620d fb6f20ecb121 reiserfs: The last commit
kernel BUG in bch2_fs_btree_write_buffer_exit fs -1 syz, C done 6138 676d 728d 28/29 636d ca43f73cd172 bcachefs: bch2_btree_write_buffer_flush_going_ro()
kernel BUG in bch2_journal_res_get (2) fs -1 syz, C 1710 676d 700d 28/29 636d ca43f73cd172 bcachefs: bch2_btree_write_buffer_flush_going_ro()
kernel BUG in bch2_fs_btree_cache_exit fs -1 syz, C done 2766 676d 707d 28/29 636d ca43f73cd172 bcachefs: bch2_btree_write_buffer_flush_going_ro()
kernel BUG in __bch2_btree_node_hash_insert fs -1 syz, C done 396 677d 685d 28/29 648d 0b6ec0c5ac6c bcachefs: Fix assertion pop in topology repair
KASAN: slab-out-of-bounds Read in journal_entry_dev_usage_to_text fs 17 syz, C done 33 678d 788d 28/29 648d 657d4282d8c4 bcachefs: Fix journal_entry_dev_usage_to_text() overrun
kernel BUG in __bkey_unpack_pos fs -1 syz, C 4 656d 695d 28/29 648d dc537189b5cf bcachefs: Fix validate_bset() repair path
kernel BUG in bch2_trans_node_iter_init fs -1 syz, C done 13 686d 700d 28/29 648d f8f1dde68681 bcachefs: Fix missing validation for bch_backpointer.level
kernel BUG in bch2_btree_path_level_init (2) fs -1 syz, C done 29 652d 702d 28/29 648d f8f1dde68681 bcachefs: Fix missing validation for bch_backpointer.level
kernel BUG in bch2_dev_btree_bitmap_mark fs -1 syz, C done 31 680d 704d 28/29 648d 27a036a0c3e7 bcachefs: Fix bch_member.btree_bitmap_shift validation
kernel BUG in bch2_bkey_pack_pos_lossy fs -1 syz, C 7 687d 699d 28/29 648d dc537189b5cf bcachefs: Fix validate_bset() repair path
kernel BUG in bch2_run_recovery_pass fs -1 syz, C done 17 681d 701d 28/29 648d 2642084f26b5 bcachefs: Allow for unknown key types in backpointers fsck
kernel BUG in bch2_ptr_swab fs -1 syz, C inconclusive 11 685d 703d 28/29 648d 840c2fbcc5cd bcachefs: Fix assertion pop in bch2_ptr_swab()
kernel BUG in __bch2_bkey_cmp_packed_format_checked fs -1 syz, C 4 701d 700d 28/29 653d d335bb3fd3a4 bcachefs: Ancient versions with bad bkey_formats are no longer supported
kernel BUG in bch2_bkey_cmp_packed fs -1 syz, C 8 687d 700d 28/29 653d d335bb3fd3a4 bcachefs: Ancient versions with bad bkey_formats are no longer supported
kernel BUG in bch2_inconsistent_error fs -1 syz, C 4 687d 699d 28/29 653d f9f0a5390dce bcachefs: Change OPT_STR max to be 1 less than the size of choices array
KASAN: slab-use-after-free Read in bch2_reconstruct_alloc fs 19 syz, C done 2 698d 702d 28/29 680d 8e910ca20e11 bcachefs: Fix UAF in bch2_reconstruct_alloc()
kernel BUG in bch2_bucket_alloc_trans (2) fs -1 syz, C done 103 681d 709d 28/29 680d 3fd27e9c57bf bcachefs: init freespace inited bits to 0 in bch2_fs_initialize
KASAN: null-ptr-deref Read in bch2_sb_set_upgrade_extra fs 11 syz, C 2 706d 702d 28/29 680d a25a83de45b4 bcachefs: fix null-ptr-deref in have_stripes()
general protection fault in btree_node_iter_and_journal_peek fs 2 syz, C 3 703d 725d 28/29 680d 3726a1970bd7 bcachefs: Fix NULL ptr dereference in btree_node_iter_and_journal_peek
UBSAN: shift-out-of-bounds in bch2_alloc_to_text fs -1 syz, C 29 692d 704d 28/29 680d 5c41f75d1b92 bcachefs: fix shift oob in alloc_lru_idx_fragmentation
UBSAN: shift-out-of-bounds in validate_sb_layout fs -1 syz, C done 7 694d 702d 28/29 680d 2045fc4295c4 bcachefs: Fix invalid shift in validate_sb_layout()
possible deadlock in bch2_replicas_entry_validate fs 4 syz, C done 9468 703d 722d 28/29 681d bf4baaa087e2 bcachefs: Fix lockdep splat in bch2_accounting_read
kernel BUG in bch2_btree_pos_to_text fs -1 syz, C 8 685d 734d 28/29 682d 0151d10a480d bcachefs: add check for btree id against max in try read node
kernel BUG in submit_bh_wbc (3) nilfs fs -1 syz, C done 18 704d 711d 28/29 682d 6ed469df0bfb nilfs2: fix kernel bug due to missing clearing of buffer delay flag
general protection fault in prt_str fs 2 syz, C done 2 724d 739d 28/29 682d a30f32222df2 bcachefs: Fix NULL pointer dereference in bch2_opt_to_text
general protection fault in bch2_alloc_read fs 2 syz, C 7 722d 729d 28/29 682d a319aeaebb6c bcachefs: Fix missing bounds checks in bch2_alloc_read()
UBSAN: shift-out-of-bounds in bch2_stripe_to_text fs -1 syz, C 3 734d 730d 28/29 682d 9f25dbe0bf91 bcachefs: Add missing validation for bch_stripe.csum_granularity_bits
UBSAN: shift-out-of-bounds in member_to_text fs -1 syz, C 12 709d 753d 28/29 682d c1bd21bb6518 bcachefs: Fix invalid shift in member_to_text()
WARNING in __bch2_fsck_err (2) fs -1 syz, C 3 722d 718d 28/29 701d 5612daafb764 bcachefs: Fix fsck warnings from bkey validation
general protection fault in bch2_fs_recovery fs 8 syz, C 10 727d 745d 28/29 703d 025c55a4c7f1 bcachefs: return err ptr instead of null in read sb clean
kernel BUG in vfs_get_tree fs -1 syz, C done 318 721d 765d 28/29 703d b29c30ab48e0 bcachefs: Fix incorrect IS_ERR_OR_NULL usage
KMSAN: uninit-value in bch2_bkey_cmp_packed_inlined fs 7 syz, C 7 726d 746d 28/29 703d 0696a18a8cc3 bcachefs: memset bounce buffer portion to 0 after key_sort_fix_overlapping
WARNING: suspicious RCU usage in bch2_snapshot_tree_oldest_subvol fs 4 syz, C 21 726d 738d 28/29 703d 39c3aad43f6f bcachefs: Hold read lock in bch2_snapshot_tree_oldest_subvol()
general protection fault in __copy_super fs 2 syz, C done 5 732d 734d 28/29 703d 40d40c6bea19 bcachefs: assign return error when iterating through layout
KASAN: slab-use-after-free Read in lockref_get_not_dead (2) fs 19 syz error 1 753d 749d 28/29 703d 4e32c25b58b9 libfs: fix get_stashed_dentry()
kernel BUG in bch2_lru_change (2) fs -1 syz, C 2 771d 770d 28/29 722d 9482f3b05332 bcachefs: avoid overflowing LRU_TIME_BITS for cached data lru
WARNING in bch2_fs_journal_stop fs -1 syz, C done 1463 769d 801d 28/29 722d 7f2de6947f92 bcachefs: Fix warning in bch2_fs_journal_stop()
kernel BUG in bch2_journal_replay fs -1 syz, C done 3 765d 837d 28/29 722d cab18be6957b bcachefs: Fix replay_now_at() assert
KMSAN: uninit-value in bch2_alloc_v4_validate fs 7 syz, C 5 766d 764d 28/29 722d 8ed823b19214 bcachefs: Fix compat issue with old alloc_v4 keys
WARNING in __bch2_fsck_err fs -1 syz, C 200 723d 770d 28/29 722d 075cabf324c3 bcachefs: Fix forgetting to pass trans to fsck_err()
KASAN: slab-out-of-bounds Write in bch2_dev_journal_init fs 21 syz, C 2 768d 768d 28/29 722d bdbdd4759f08 bcachefs: Fix missing validation in bch2_sb_journal_v2_validate()
WARNING in discard_new_inode fs -1 syz, C 3 770d 770d 28/29 722d 99c87fe0f584 bcachefs: fix incorrect i_state usage
kernel BUG in bch2_sort_keys fs -1 syz, C error 3 849d 873d 27/29 750d 5dfd3746b6c4 bcachefs: Fix needs_whiteout BUG_ON() in bkey_sort()
possible deadlock in bch2_gc_mark_key fs 4 syz, C done 86 774d 851d 27/29 757d 1841027c7de4 bcachefs: bch2_gc_btree() should not use btree_root_lock
WARNING in __replicas_deltas_realloc fs -1 syz, C 9 777d 800d 27/29 759d 1d16c605cc55 bcachefs: Disk space accounting rewrite
kernel BUG in bch2_fs_journal_stop fs -1 syz, C done 4370 773d 865d 27/29 759d 600b8be5e747 bcachefs: Change bch2_fs_journal_stop() BUG_ON() to warning
kernel BUG in __replicas_entry_idx fs -1 syz, C done unreliable 3 855d 858d 27/29 759d 8bb8d683a401 bcachefs: Delete journal-buf-sharded old style accounting
kernel panic: not locked: inodes NUM:NUM:NUM cached fs 2 syz, C 2 843d 854d 27/29 760d 385f0c05d670 bcachefs: kill key cache arg to bch2_assert_pos_locked()
BUG: MAX_LOCK_DEPTH too low! (4) fs -1 syz, C error 1364 774d 870d 27/29 761d 375476c41405 bcachefs: Add lockdep support for btree node locks
WARNING in bch2_fs_ioctl fs -1 syz, C done 36 774d 836d 27/29 764d d293ece10810 bcachefs: Fix shutdown ordering
kernel panic: bch_dev->ref underflow, last put: bch2_get_next_dev fs 2 syz, C done 21 854d 864d 27/29 764d 9667214b30ef bcachefs: Fix ref in trans_mark_dev_sbs() error path
WARNING: suspicious RCU usage in bch2_bucket_ref_update fs 4 syz, C done 5 809d 808d 27/29 773d 6f692b1672bd bcachefs: Fix RCU splat
BUG: sleeping function called from invalid context in bch2_printbuf_make_room fs 5 syz, C done 27 797d 795d 27/29 773d 737759fc098f bcachefs: Fix printbuf usage while atomic
UBSAN: shift-out-of-bounds in bch2_bkey_format_invalid (2) fs -1 syz, C 117 773d 838d 27/29 773d a0bd30e4ea9d bcachefs: Fix shift greater than integer size
WARNING: lock held when returning to user space in ns_ioctl fs 4 syz, C done 147 788d 800d 27/29 773d 280e36f0d5b9 nsfs: use cleanup guard
BUG: unable to handle kernel NULL pointer dereference in path_from_stashed fs 10 syz, C 23 793d 797d 27/29 773d f60d38cb02d0 pidfs: when time ns disabled add check for ioctl
kernel BUG in bch2_ioctl_fsck_online fs -1 syz, C done 3 829d 825d 26/29 804d 9bd01500e4d8 bcachefs: Fix freeing of error pointers
WARNING in __virt_to_phys (4) fs -1 syz, C 2 817d 813d 26/29 804d 9bd01500e4d8 bcachefs: Fix freeing of error pointers
UBSAN: shift-out-of-bounds in bch2_btree_node_read_done fs -1 syz, C 3 832d 855d 26/29 806d 9e7cfb35e266 bcachefs: Check for invalid btree IDs
INFO: task hung in journal_quiesce fs 1 syz 76 819d 847d 26/29 807d 89d21b69b4f8 bcachefs: Add missing bch2_journal_do_writes() call
WARNING in bch2_fs_read_write_early fs -1 syz, C 35 825d 833d 26/29 808d 1ba44217f825 bcachefs: delete_dead_snapshots() doesn't need to go RW
KASAN: slab-use-after-free Read in bch2_sb_errors_from_cpu fs 19 syz, C 2 825d 822d 26/29 808d 211c581de28e bcachefs: slab-use-after-free Read in bch2_sb_errors_from_cpu
UBSAN: shift-out-of-bounds in bch2_blacklist_entries_gc fs -1 syz, C 45 822d 822d 26/29 808d 472237b69d07 bcachefs: Fix shift-out-of-bounds in bch2_blacklist_entries_gc
kernel BUG in bch2_journal_res_get fs -1 syz, C 2 838d 834d 26/29 808d dbf4d79b7fc7 bcachefs: Fix early init error path in journal code
kernel BUG in bch2_lru_change fs -1 syz, C done 4 825d 841d 26/29 808d cff07e2739d8 bcachefs: Guard against overflowing LRU_TIME_BITS
WARNING: kmalloc bug in __snapshot_t_mut fs -1 syz, C done 10 818d 849d 26/29 808d 64cd7de998f3 bcachefs: Fix kmalloc bug in __snapshot_t_mut
kernel BUG in gc_bucket fs -1 syz, C done 221 842d 846d 26/29 808d 9432e90df1b8 bcachefs: Check for invalid bucket from bucket_gen(), gc_bucket()
UBSAN: shift-out-of-bounds in bch2_sb_dev_has_data fs -1 syz, C done 15 866d 864d 25/29 837d bcfbaea8e547 bcachefs: Fix shift overflows in replicas.c
kernel panic: not locked: inodes NUM:ADDR:NUM cached fs 2 syz, C 2 864d 860d 25/29 837d 6ce26ad376bd bcachefs: Fix missing parens in drop_locks_do()
kernel BUG in bch2_btree_iter_verify_entry_exit fs -1 syz, C done 3 856d 862d 25/29 837d 765b8cb8acab bcachefs: Check for subvolues with bogus snapshot/inode fields
kernel BUG in bch2_checksum fs -1 syz, C done 9 854d 864d 25/29 837d 6b74fdcc8e25 bcachefs: bch2_checksum() returns 0 for unknown checksum type
kernel BUG in cpu_replicas_add_entry fs -1 syz, C done 11 848d 866d 25/29 837d 5fa421448d1f bcachefs: Fix bogus verify_replicas_entry() assert
KASAN: stack-out-of-bounds Read in __bch2_encrypt_bio fs 17 syz, C done 2 867d 864d 25/29 837d 2ba24864d2f6 bcachefs: Fix stack oob in __bch2_encrypt_bio()
UBSAN: shift-out-of-bounds in bch2_btree_lost_data fs -1 syz, C done 3 863d 861d 25/29 837d f108ddd467b5 bcachefs: Fix shift overflow in btree_lost_data()
kernel panic: bch_dev->ref underflow, last put: bch2_trigger_alloc fs 2 syz, C done 6 854d 865d 25/29 837d 9667214b30ef bcachefs: Fix ref in trans_mark_dev_sbs() error path
general protection fault in __bch2_insert_snapshot_whiteouts fs 8 syz, C done 65 852d 864d 25/29 837d 6d48e61364ae bcachefs: Add missing guard in bch2_snapshot_has_children()
KASAN: slab-use-after-free Read in evict_inodes fs 19 syz, C done 2 869d 865d 25/29 837d d93ff5fa40b9 bcachefs: Fix race path in bch2_inode_insert()
KMSAN: uninit-value in bch2_dirent_invalid fs 7 syz, C 239 837d 865d 25/29 837d 2195b755ebd2 bcachefs: Fix unsafety in bch2_dirent_name_bytes()
kernel BUG in bch2_fs_recovery fs -1 syz, C done done 161 869d 875d 25/29 837d 7ffec9ccdc6a bcachefs: don't free error pointers
UBSAN: shift-out-of-bounds in read_one_super fs -1 syz, C done 31 843d 872d 25/29 842d 71dac2482ad3 bcachefs: BCH_SB_LAYOUT_SIZE_BITS_MAX
WARNING: kmalloc bug in bch2_dev_buckets_resize fs -1 syz, C 17 843d 874d 25/29 842d db42549d402c bcachefs: Add a better limit for maximum number of buckets
WARNING in __virt_to_phys (3) fs -1 syz, C 447 842d 875d 25/29 842d 7ffec9ccdc6a bcachefs: don't free error pointers
BUG: unable to handle kernel paging request in bch2_fs_btree_key_cache_exit fs 8 syz, C 1002 842d 875d 25/29 842d b30b70ad8bff bcachefs: Fix early error path in bch2_fs_btree_key_cache_exit()
UBSAN: shift-out-of-bounds in __bch2_bkey_invalid fs -1 syz, C done 6 847d 873d 25/29 842d 2bb9600d5d47 bcachefs: Guard against unknown k.k->type in __bkey_invalid()
KASAN: slab-out-of-bounds Read in bch2_sb_downgrade_to_text fs 17 syz, C done 32 859d 872d 25/29 842d 692aa7a54b2b bcachefs: Fix sb_field_downgrade validation
KASAN: slab-out-of-bounds Read in bch2_sb_clean_to_text fs 17 syz, C done 3 864d 873d 25/29 842d f39055220f6f bcachefs: Add missing validation for superblock section clean
kernel BUG in bch2_alloc_v4_invalid fs -1 syz, C error 3 850d 873d 25/29 842d 6b8cbfc3db75 bcachefs: Fix assert in bch2_alloc_v4_invalid()
KASAN: slab-out-of-bounds Read in bch2_varint_decode_fast fs 17 syz, C 583 842d 875d 25/29 842d 4a8521b6bb81 bcachefs: Inodes need extra padding for varint_decode_fast()
UBSAN: shift-out-of-bounds in bch2_bkey_format_invalid fs -1 syz, C 45 845d 870d 25/29 842d 61692c7812ab bcachefs: bch2_bkey_format_field_overflows()
UBSAN: shift-out-of-bounds in rewrite_old_nodes_pred fs -1 syz, C done 3 873d 873d 25/29 842d 0ec5b3b7ccfc bcachefs: Fix shift-by-64 in bformat_needs_redo()
kernel BUG in bch2_btree_node_read_done fs -1 syz, C error 5 873d 875d 25/29 842d a2ddaf965f6a bcachefs: bucket_pos_to_bp_noerror()
INFO: rcu detected stall in rtnl_newlink (4) sctp fs 1 syz, C error 9 863d 939d 25/29 856d b1f532a3b1e6 batman-adv: Avoid infinite loop trying to resize local TT
KASAN: slab-use-after-free Read in __fput (2) fs 19 syz, C done 6 880d 885d 25/29 856d 4efaa5acf0a1 epoll: be better about file lifetimes
general protection fault in __ep_remove fs 2 syz, C 1 901d 900d 25/29 856d 4efaa5acf0a1 epoll: be better about file lifetimes
WARNING: ODEBUG bug in bdev_super_lock (2) fs -1 syz, C done 3 893d 891d 25/29 856d 22650a99821d fs,block: yield devices early
kernel BUG at fs/inode.c:LINE! (2) fs -1 syz, C done unreliable 322 871d 2219d 25/29 857d 319c15174757 epoll: take epitem list out of struct file
WARNING in stashed_dentry_prune (2) fs -1 syz, C done 54 883d 891d 25/29 860d 9d9539db8638 pidfs: remove config option
WARNING in stashed_dentry_prune fs -1 syz, C done 20 927d 926d 25/29 897d 9d9539db8638 pidfs: remove config option
WARNING: ODEBUG bug in bdev_super_lock fs -1 syz, C 3 901d 911d 25/29 898d 59a55a63c246 fs,block: get holder during claim
KASAN: slab-use-after-free Read in sys_io_cancel fs 19 syz, C done 894 899d 936d 25/29 899d 28468cbed92e Revert "fs/aio: Make io_cancel() generate completions again"
BUG: sleeping function called from invalid context in __getblk_gfp fs 5 syz, C error done 3673 1003d 1397d 25/29 899d f123dc86388c sysv: don't call sb_bread() with pointers_lock held
possible deadlock in reiserfs_dirty_inode fs 4 syz, C done done 519 969d 1397d 25/29 919d 6f861765464f fs: Block writes to mounted block devices
BUG: sleeping function called from invalid context in __bread_gfp fs 5 syz, C error done 359 995d 1396d 25/29 919d 6f861765464f fs: Block writes to mounted block devices
INFO: task hung in reiserfs_sync_fs fs 1 syz, C error done 22 995d 1374d 25/29 919d 6f861765464f fs: Block writes to mounted block devices
general protection fault in __fget_files (2) fs 2 syz, C done done 1 1002d 998d 25/29 947d 6f861765464f fs: Block writes to mounted block devices
BUG: unable to handle kernel paging request in reiserfs_readdir_inode fs 19 syz, C error done 11 993d 1359d 25/29 947d 6f861765464f fs: Block writes to mounted block devices
kernel BUG in entry_points_to_object fs -1 syz, C done done 21 993d 1038d 25/29 947d 6f861765464f fs: Block writes to mounted block devices
KASAN: vmalloc-out-of-bounds Read in cleanup_bitmap_list fs 17 syz, C error done 100 996d 1428d 25/29 952d 6f861765464f fs: Block writes to mounted block devices
KASAN: use-after-free Read in set_de_name_and_namelen fs 19 syz, C error done 15 999d 1400d 25/29 955d 6f861765464f fs: Block writes to mounted block devices
BUG: unable to handle kernel NULL pointer dereference in reiserfs_find_entry fs 19 syz, C error done 25 1002d 1438d 25/29 966d 6f861765464f fs: Block writes to mounted block devices
KASAN: use-after-free Read in reiserfs_get_unused_objectid fs 19 syz, C inconclusive done 3 1004d 1277d 25/29 968d 6f861765464f fs: Block writes to mounted block devices
possible deadlock in chown_common fs 4 syz, C error done 22 977d 1447d 25/29 969d 6f861765464f fs: Block writes to mounted block devices
kernel BUG in balance_leaf fs -1 syz, C error done 16 1009d 1360d 25/29 969d 6f861765464f fs: Block writes to mounted block devices
possible deadlock in pipe_write fs 4 syz, C inconclusive 181 971d 1650d 25/29 969d 055ca8355991 fs/pipe: Fix lockdep false-positive in watchqueue pipe_write()
kernel BUG in direntry_check_right fs -1 syz, C done done 2 1008d 1051d 25/29 969d 6f861765464f fs: Block writes to mounted block devices
KASAN: slab-out-of-bounds Read in search_by_key (2) fs 17 syz, C 4435 991d 1422d 25/29 969d dd8f87f21dc3 reiserfs: fix uninit-value in comp_keys
WARNING in pagemap_scan_pmd_entry fs -1 syz, C inconclusive 48 1023d 1045d 25/29 979d 0dff1b407def mm/pagemap: fix ioctl(PAGEMAP_SCAN) on vma check
WARNING in page_copy_sane fs mm -1 syz, C done 3 1107d 1104d 25/29 1010d a08c7193e4f1 mm/filemap: remove hugetlb special casing in filemap.c
possible deadlock in inode_add_bytes fs 4 syz, C done 124 1167d 1165d 23/29 1079d 509f006932de shmem: fix quota lock nesting in huge hole handling
INFO: task hung in pipe_release (4) fs 1 syz, C done 51 1171d 1171d 23/29 1079d 0f71c9caf267 udp: Fix __ip_append_data()'s handling of MSG_SPLICE_PAGES
KASAN: slab-use-after-free Read in test_bdev_super_fc fs 19 syz, C done 7 1146d 1149d 23/29 1079d aca740cecbe5 fs: open block device after superblock creation
general protection fault in splice_to_socket fs 2 syz, C done 4 1198d 1201d 23/29 1093d ca2d49f77ce4 splice, net: Fix splice_to_socket() to handle pipe bufs larger than a page
KASAN: null-ptr-deref Write in get_block (2) fs 12 syz, C error 11 1188d 1222d 23/29 1093d ea2b62f30589 fs/sysv: Null check to prevent null-ptr-deref bug
KASAN: null-ptr-deref Read in ida_free (3) fs 11 syz, C error 4 1280d 1276d 22/29 1205d cb2239c198ad fs: drop peer group ids under namespace lock
KMSAN: uninit-value in ondemand_readahead fs mm 7 syz, C 221 1303d 1466d 22/29 1205d 3e35102666f8 fs/cramfs/inode.c: initialize file_ra_state
INFO: task hung in write_cache_pages (2) mm fs 1 syz, C done 36 1233d 1304d 22/29 1205d fb3592c41a44 migrate_pages: fix deadlock in batched migration
KMSAN: uninit-value in vfs_write fs 7 syz, C 3 1329d 1298d 22/29 1205d 2b4c99f7d9a5 can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write
KASAN: use-after-free Read in mas_next_nentry fs mm 19 syz, C error done 343 1418d 1612d 22/29 1309d 59f2f4b8a757 fs/userfaultfd: Fix maple tree iterator in userfaultfd_unregister()
INFO: rcu detected stall in sys_lsetxattr fs 1 syz, C done 2 1621d 1620d 22/29 1309d 0014edaedfd8 fs: unset MNT_WRITE_HOLD on failure
INFO: rcu detected stall in sys_setxattr (2) fs 1 syz, C done 3 1621d 1620d 22/29 1309d 0014edaedfd8 fs: unset MNT_WRITE_HOLD on failure
general protection fault in __dentry_path (2) fs 8 syz, C error 174 1614d 1625d 22/29 1309d 5c697c367a66 KVM: Initialize debugfs_dentry when a VM is created to avoid NULL deref
WARNING in mntput_no_expire (3) fs -1 syz, C inconclusive 29 1359d 1775d 22/29 1309d a91714312eb1 percpu_ref_init(): clean ->percpu_count_ref on failure
KASAN: slab-out-of-bounds Read in __fscache_acquire_volume fs mm 17 syz, C done done 1 1488d 1488d 22/29 1309d 9f0933ac026f fscache: fix OOB Read in __fscache_acquire_volume
KASAN: null-ptr-deref Write in io_file_get_normal io-uring fs 12 syz, C done 107 1555d 1639d 22/29 1309d d5361233e9ab io_uring: drop the old style inflight file tracking
memory leak in iovec_from_user fs io-uring 3 syz, C 1 1627d 1623d 22/29 1309d 323b190ba2de io_uring: free iovec if file assignment fails
BUG: unable to handle kernel paging request in truncate_inode_partial_folio fs mm 8 syz, C error 4 1511d 1550d 22/29 1309d 84ac013046cc secretmem: fix unhandled fault in truncate
general protection fault in legacy_parse_param fs 21 syz, C done 20 1649d 1910d 22/29 1309d ecff30575b5a LSM: general protection fault in legacy_parse_param
KASAN: use-after-free Read in io_rsrc_node_ref_zero fs 19 syz, C done 3 1677d 1677d 22/29 1309d 80912cef18f1 io_uring: disallow modification of rsrc_data during quiesce
KASAN: use-after-free Read in add_wait_queue fs io-uring 19 syz, C done done 13 1642d 1648d 22/29 1309d d89a4fac0fbc io_uring: fix assuming triggered poll waitqueue is the single poll
BUG: unable to handle kernel NULL pointer dereference in io_do_iopoll fs io-uring 10 syz, C done 3 1593d 1592d 22/29 1309d aa184e8671f0 io_uring: don't attempt to IOPOLL for MSG_RING requests
possible deadlock in snd_hrtimer_callback (2) fs 4 syz, C inconclusive 582 1514d 1780d 22/29 1309d 96b097091c66 ALSA: pcm: Use deferred fasync helper 95cc637c1afd ALSA: timer: Use deferred fasync helper
BUG: unable to handle kernel paging request in eventfd_ctx_put fs 8 syz, C done 7 1434d 1462d 22/29 1309d 7353633814f6 KVM: x86/xen: Fix eventfd error handling in kvm_xen_eventfd_assign()
KMSAN: uninit-value in tomoyo_path_chown fs 7 syz, C 13763 1466d 1467d 22/29 1309d f52d74b190f8 open: always initialize ownership fields
KASAN: use-after-free Read in filp_close io-uring fs 19 syz, C done 17 1351d 1579d 22/29 1309d 40a1926022d1 fix the breakage in close_fd_get_file() calling conventions change
KASAN: use-after-free Read in mas_next_entry fs mm 19 syz, C error 16 1420d 1433d 22/29 1309d 59f2f4b8a757 fs/userfaultfd: Fix maple tree iterator in userfaultfd_unregister()
WARNING: still has locks held in io_ring_submit_lock fs io-uring 4 syz, C done 3 1594d 1594d 22/29 1309d e7637a492b9f io_uring: fix locking state for empty buffer group
general protection fault in io_uring_register fs io-uring 2 syz done 1 1842d 1838d 20/29 1662d 41d3a6bd1d37 io_uring: pin SQPOLL data before unlocking ring lock
KASAN: use-after-free Write in io_queue_worker_create fs io-uring 22 syz, C unreliable 132 1745d 1754d 20/29 1662d 71a85387546e io-wq: check for wq exit after adding new worker task_work e47498afeca9 io-wq: remove spurious bit clear on task_work addition
INFO: task hung in io_uring_del_tctx_node io-uring fs 1 syz, C unreliable 37 1664d 1828d 20/29 1662d 8bab4c09f24e io_uring: allow conditional reschedule for intensive iterators
KASAN: use-after-free Write in io_submit_one fs 22 syz, C done 11 1749d 1787d 20/29 1662d 75feae73a280 block: fix single bio async DIO error handling
WARNING in inc_nlink (2) fs -1 syz, C inconclusive done 21 1662d 1999d 20/29 1662d 97f044f690ba fuse: don't increment nlink in link()
possible deadlock in io_worker_cancel_cb io-uring fs 4 syz, C done 9 1743d 1747d 20/29 1662d d800c65c2d4e io-wq: drop wqe lock before creating new worker
INFO: task hung in io_uring_try_cancel_requests fs io-uring 1 syz, C error 41 1751d 1793d 20/29 1662d f75d118349be io_uring: harder fdinfo sq/cq ring iterating
WARNING in signalfd_cleanup fs io-uring -1 syz, C done 201 1709d 1724d 20/29 1662d 791f3465c4af io_uring: fix UAF due to missing POLLFREE handling
INFO: rcu detected stall in newstat fs usb 1 syz, C unreliable done 4 1756d 1879d 20/29 1662d 476db72e5219 media: mceusb: return without resubmitting URB in case of -EPROTO error.
INFO: task hung in io_uring_cancel_generic (2) io-uring fs 1 syz, C done 97 1746d 1773d 20/29 1662d 78a780602075 io_uring: ensure task_work gets run as part of cancelations
INFO: rcu detected stall in io_wqe_worker (2) fs io-uring 1 syz, C done 2 1794d 1794d 20/29 1662d c5e0321e43de Revert "devlink: Remove not-executed trap policer notifications"
possible deadlock in io_poll_double_wake (3) io-uring fs 4 syz, C error done 703 1718d 1991d 20/29 1662d aa43477b0402 io_uring: poll rework
INFO: task hung in io_wqe_worker fs io-uring 1 syz, C unreliable 3 1804d 1800d 20/29 1662d 1d5f5ea7cb7d io-wq: remove worker to owner tw dependency
KASAN: null-ptr-deref Read in filp_close (2) fs 19 syz, C 3 1901d 2009d 20/29 1780d 3b0462726e7e cgroup: verify that source is a string 9b5b872215fe file: fix close_range() for unshare+cloexec
memory leak in io_sqe_buffers_register fs 3 syz, C 2 1974d 1974d 20/29 1781d bb6659cc0ad3 io_uring: Fix memory leak in io_sqe_buffers_register()
WARNING in io_link_timeout_fn fs io-uring -1 syz, C done 2 1962d 1962d 20/29 1781d 447c19f3b507 io_uring: fix ltout double free on completion race
KASAN: out-of-bounds Read in leaf_paste_entries fs 17 syz, C inconclusive 8 1812d 2043d 20/29 1781d 13d257503c09 reiserfs: check directory items on read from disk
general protection fault in io_commit_cqring (2) io-uring fs 12 syz, C done 82 1993d 2006d 20/29 1781d 51520426f4bc io_uring: handle setup-failed ctx in kill_timeouts
INFO: task hung in io_sq_thread_park (2) fs io-uring 1 syz done 2 1903d 1899d 20/29 1781d 46fee9ab02cb io_uring: remove double poll entry on arm failure
WARNING in __percpu_ref_exit (2) fs -1 syz, C error done 31 1782d 2020d 20/29 1781d a298232ee6b9 io_uring: fix link timeout refs
INFO: task hung in __io_uring_cancel fs io-uring 1 syz, C done 5 1919d 1985d 20/29 1781d 28090c133869 io_uring: fix work_exit sqpoll cancellations
memory leak in create_io_worker io-uring fs 3 syz, C 5 1804d 1843d 20/29 1781d 66e70be72288 io-wq: fix memory leak in create_io_worker()
WARNING in io_wqe_enqueue io-uring fs -1 syz, C done 13 1939d 1939d 20/29 1781d e6ab8991c5d0 io_uring: fix false WARN_ONCE
WARNING in io_poll_double_wake fs io-uring -1 syz, C done done 1124 1882d 1984d 20/29 1781d a890d01e4ee0 io_uring: fix poll requests leaking second poll entries
general protection fault in cdev_del (2) fs 11 syz, C error 45 1914d 2192d 20/29 1781d 8a12f8836145 net: hso: fix null-ptr-deref during tty device unregistration 0a360e8b65d6 tty: n_gsm: check error while registering tty devices
INFO: task hung in io_wq_put_and_exit io-uring fs 1 syz, C unreliable 628 1782d 1843d 20/29 1781d 3b33e3f4a6c0 io-wq: fix silly logic error in io_task_work_match()
possible deadlock in do_fcntl usb fs 4 syz, C done 245 1857d 2188d 20/29 1781d f671a691e299 fcntl: fix potential deadlocks for &fown_struct.lock
BUG: unable to handle kernel NULL pointer dereference in kiocb_done fs io-uring 10 syz, C unreliable done 3 1849d 1848d 20/29 1781d b8ce1b9d25cc io_uring: don't submit half-prepared drain request
WARNING in io_try_cancel_userdata fs io-uring -1 syz unreliable 4 1855d 1859d 20/29 1781d dadebc350da2 io_uring: fix io_try_cancel_userdata race for iowq
KMSAN: kernel-infoleak in copy_page_to_iter (2) fs mm 9 syz, C 2099 1876d 2934d 20/29 1781d ce3aba43599f ext4: fix kernel infoleak via ext4_extent_header
WARNING in mntput_no_expire (2) fs -1 syz, C done 68 1789d 2003d 20/29 1781d 7d01ef7585c0 Make sure nd->path.mnt and nd->path.dentry are always valid pointers
general protection fault in __io_file_supports_nowait fs io-uring 2 syz, C done done 13 1845d 1851d 20/29 1781d c6d3d9cbd659 io_uring: fix queueing half-created requests
KASAN: use-after-free Read in bdev_evict_inode fs 19 syz, C unreliable 1305 1865d 1868d 20/29 1781d 889c05cc5834 block: ensure the bdi is freed after inode_detach_wb
WARNING in pvr2_i2c_core_done usb fs -1 syz, C error 5780 1902d 2557d 20/29 1781d f8194e5e63fd media: pvrusb2: fix warning in pvr2_i2c_core_done
INFO: task hung in io_uring_cancel_generic io-uring fs 1 syz, C unreliable 151 1781d 1902d 20/29 1781d 1b48773f9fd0 io_uring: fix io_drain_req()
KASAN: use-after-free Read in __d_alloc (2) fs 19 syz, C unreliable 6774 1823d 1866d 20/29 1781d 0766ec82e5fb namei: Fix use after free in kern_path_locked
possible deadlock in f_getown fs 4 syz, C done done 164 1859d 2188d 20/29 1781d f671a691e299 fcntl: fix potential deadlocks for &fown_struct.lock
possible deadlock in snd_hrtimer_callback fs 4 syz, C done 571 1782d 1889d 20/29 1781d f671a691e299 fcntl: fix potential deadlocks for &fown_struct.lock
possible deadlock in io_sq_thread_finish fs 4 syz, C unreliable done 4 2026d 2028d 20/29 1781d f4e61f0c9add x86/kvm: Fix broken irq restoration in kvm_wait
WARNING in io_rsrc_node_switch io-uring fs -1 syz, C done 174 1966d 1975d 20/29 1781d 47b228ce6f66 io_uring: fix unchecked error in switch_start()
WARNING in io_wq_submit_work (2) io-uring fs -1 syz, C done done 52 1840d 1843d 20/29 1781d 713b9825a4c4 io-wq: fix cancellation on create-worker failure
KASAN: stack-out-of-bounds Read in iov_iter_revert fs io-uring 17 syz, C error 14 1853d 1870d 20/29 1781d 89c2b3b74918 io_uring: reexpand under-reexpanded iters
WARNING in internal_create_group fs -1 syz, C inconclusive 20 1845d 1899d 20/29 1781d b1a811633f73 block: nbd: add sanity check for first_minor
kernel BUG in remove_inode_hugepages fs mm -1 syz, C unreliable 3 1866d 1866d 20/29 1781d c7b1850dfb41 hugetlb: don't pass page cache pages to restore_reserve_on_error
WARNING in io_wq_put fs io-uring -1 syz, C unreliable 3 2015d 2026d 20/29 1781d f5d2d23bf0d9 io-wq: fix race around pending work on teardown
WARNING in io_uring_setup (2) fs io-uring -1 syz, C done 40 1966d 1975d 20/29 1781d 47b228ce6f66 io_uring: fix unchecked error in switch_start()
KASAN: use-after-free Read in idr_for_each (2) io-uring fs 19 syz, C error done 86 2019d 2181d 20/29 1985d 61cf93700fe6 io_uring: Convert personality_idr to XArray
INFO: task hung in io_uring_cancel_task_requests fs io-uring 1 syz, C 305 2019d 2054d 20/29 1995d 34343786ecc5 io_uring: unpark SQPOLL thread for cancelation
INFO: task hung in io_sq_thread_park fs io-uring 1 syz, C unreliable 263 2030d 2035d 20/29 1995d 3ebba796fa25 io_uring: ensure that SQPOLL thread is started for exit
memory leak in io_submit_sqes (2) fs io-uring 3 syz, C 1 2033d 2032d 20/29 1995d f01272541d2c io-wq: ensure all pending work is canceled on exit
possible deadlock in io_poll_double_wake (2) io-uring fs 4 syz, C error error 431 1995d 2188d 20/29 1995d 1c3b3e6527e5 io_uring: ignore double poll add on the same waitqueue head
inconsistent lock state in io_dismantle_req fs io-uring 4 syz, C 2 2062d 2062d 20/29 1995d 9ae1f8dd372e io_uring: fix inconsistent lock state
WARNING in io_uring_flush fs io-uring -1 syz, C unreliable 10 2070d 2079d 19/29 2026d 4325cb498cb7 io_uring: fix uring_flush in exit_files() warning
KASAN: use-after-free Read in search_by_entry_key fs 19 syz, C done 3 2174d 2178d 19/29 2026d d24396c5290b reiserfs: add check for an invalid ih_entry_count
WARNING in percpu_ref_kill_and_confirm (2) fs -1 syz, C done 71 2101d 2109d 19/29 2026d 9faadcc8abe4 io_uring: fix double io_uring free
WARNING in io_ring_ctx_wait_and_kill fs -1 syz, C done 9 2080d 2081d 19/29 2026d 06585c497b55 io_uring: do sqo disable on install_fd error
INFO: task hung in __io_uring_files_cancel io-uring fs 1 syz, C done 30 2067d 2134d 19/29 2026d bee749b187ac io_uring: fix files cancellation
KASAN: use-after-free Read in reiserfs_fill_super fs 19 syz, C error done 2 2120d 2118d 19/29 2026d d24396c5290b reiserfs: add check for an invalid ih_entry_count
BUG: unable to handle kernel paging request in percpu_ref_exit fs 8 syz, C done 3 2087d 2085d 19/29 2026d 3e2224c5867f io_uring: Fix return value from alloc_fixed_file_ref_node
general protection fault in io_disable_sqo_submit fs io-uring 2 syz, C done 124 2077d 2081d 19/29 2026d b4411616c26f io_uring: fix null-deref in io_disable_sqo_submit
WARNING in io_uring_cancel_task_requests io-uring fs -1 syz done 69 2062d 2066d 19/29 2026d 70b2c60d3797 io_uring: fix sqo ownership false positive warning
inconsistent lock state in io_file_data_ref_zero fs 4 syz, C done 7152 2108d 2132d 19/29 2026d ac0648a56c1f io_uring: use bottom half safe lock for fixed file data
BUG: corrupted list in io_file_get fs io-uring 8 syz, C done 3 2066d 2066d 19/29 2026d f609cbb8911e io_uring: fix list corruption for splice file_get
possible deadlock in send_sigio (2) fs 4 syz, C done done 40 2095d 2207d 19/29 2026d 8d1ddb5e7937 fcntl: Fix potential deadlock in send_sig{io, urg}()
kernel BUG at fs/reiserfs/prints.c:LINE! fs -1 syz, C done done 5 2116d 2195d 19/29 2026d d24396c5290b reiserfs: add check for an invalid ih_entry_count
memory leak in generic_parse_monolithic fs 3 syz, C 11 2116d 2142d 19/29 2026d 4cb682964706 afs: Fix memory leak when mounting with multiple source parameters
KASAN: slab-out-of-bounds Write in record_print_text fs 21 syz, C done unreliable 17 2066d 2069d 19/29 2026d 08d60e599954 printk: fix string termination for record_print_text()
BUG: unable to handle kernel NULL pointer dereference in __lookup_slow fs 10 syz, C inconclusive done 3 2048d 2188d 19/29 2026d d24396c5290b reiserfs: add check for an invalid ih_entry_count
possible deadlock in send_sigurg (2) fs 4 syz, C done 25 2113d 2163d 19/29 2026d 8d1ddb5e7937 fcntl: Fix potential deadlock in send_sig{io, urg}()
WARNING in io_disable_sqo_submit fs -1 syz, C done 9 2071d 2079d 19/29 2026d 6b393a1ff174 io_uring: fix false positive sqo warning on flush
KASAN: null-ptr-deref Read in filp_close fs 11 syz, C done 9 2106d 2108d 19/29 2026d fec8a6a69103 close_range: unshare all fds for CLOSE_RANGE_UNSHARE | CLOSE_RANGE_CLOEXEC 6abc20f8f879 selftests/core: add regression test for CLOSE_RANGE_UNSHARE | CLOSE_RANGE_CLOEXEC
KASAN: null-ptr-deref Write in kthread_use_mm io-uring fs 12 syz, C done 2 2153d 2153d 15/29 2135d 4b70cf9dea4c io_uring: ensure consistent view of original task ->mm from SQPOLL
general protection fault in io_uring_show_cred fs 2 syz, C done 4 2150d 2150d 15/29 2135d 6b47ab81c9a9 io_uring: use correct pointer for io_uring_show_cred()
KASAN: use-after-free Write in io_submit_sqes fs io-uring 22 syz, C error 2 2153d 2152d 15/29 2135d cb8a8ae31074 io_uring: drop req/tctx io_identity separately
INFO: task can't die in corrupted fs 1 syz, C done 4 2153d 2179d 15/29 2139d 86f33603f8c5 f2fs: handle errors of f2fs_get_meta_page_nofail
WARNING in unlock_new_inode fs -1 syz, C done 76 2176d 3081d 15/29 2139d 8859bf2b1278 reiserfs: only call unlock_new_inode() if I_NEW
memory leak in reiserfs_parse_options fs 3 syz, C 4 2204d 2399d 15/29 2139d e9d4709fcc26 reiserfs: Fix memory leak in reiserfs_parse_options()
general protection fault in percpu_ref_exit fs 2 syz, C done 3 2174d 2178d 15/29 2139d 7ea6bf2e6c40 percpu_ref: don't refer to ref->data if it isn't allocated
KASAN: use-after-free Read in fscache_alloc_cookie fs 19 syz done 1 2192d 2191d 15/29 2139d 1d0e850a49a5 afs: Fix cell removal
KASAN: use-after-free Read in io_wqe_worker fs io-uring 19 syz, C error 2 2189d 2190d 15/29 2139d c4068bf898dd io-wq: fix use-after-free in io_wq_worker_running
inconsistent lock state in xa_destroy io-uring fs 4 syz, C 755 2177d 2178d 15/29 2139d ca6484cd308a io_uring: no need to call xa_destroy() on empty xarray
INFO: task hung in io_uring_flush io-uring fs 1 syz, C done done 11 2230d 2237d 15/29 2139d b7ddce3cbf01 io_uring: fix cancel of deferred reqs with ->files
general protection fault in open_xa_dir fs 2 syz, C done 3 2175d 2186d 15/29 2139d c2bb80b8bdd0 reiserfs: Fix oops during mount
KASAN: use-after-free Write in io_wq_worker_running io-uring fs 22 syz, C error 14 2182d 2209d 15/29 2139d c4068bf898dd io-wq: fix use-after-free in io_wq_worker_running
KMSAN: uninit-value in __fget_light (2) fs 7 syz, C 18 2156d 2165d 15/29 2139d d5e4d0a5e692 inet_diag: validate INET_DIAG_REQ_PROTOCOL attribute
possible deadlock in mnt_want_write fs 4 syz, C done done 662 2178d 2986d 15/29 2139d 146d62e5a586 ovl: detect overlapping layers
general protection fault in io_poll_double_wake (2) fs io-uring 2 syz, C error 2 2189d 2188d 15/29 2165d 8706e04ed7d6 io_uring: always delete double poll wait entry on match
memory leak in do_eventfd fs 3 syz, C 2 2223d 2319d 15/29 2177d f65886606c2d KVM: fix memory leak in kvm_io_bus_unregister_dev()
possible deadlock in __io_queue_deferred fs io-uring 4 syz, C error 1 2239d 2237d 15/29 2200d 7271ef3a93a8 io_uring: fix recursive completion locking on oveflow flush
WARNING in __kernel_read fs -1 syz, C done 60 2207d 2265d 15/29 2200d a39c46067c84 net/9p: validate fds in p9_fd_open
general protection fault in cdev_del usb fs 2 syz, C 315 2209d 2677d 15/29 2200d e911e99a0770 usb: hso: check for return value in hso_serial_common_create()
BUG: unable to handle kernel NULL pointer dereference in loop_rw_iter io-uring fs 10 syz, C done 24 2226d 2237d 15/29 2200d 2dd2111d0d38 io_uring: Fix NULL pointer dereference in loop_rw_iter()
KASAN: use-after-free Read in io_async_task_func io-uring fs 19 syz error 1 2237d 2236d 15/29 2200d 6d816e088c35 io_uring: hold 'ctx' reference around task_work queue + execute
WARNING in drop_nlink fs -1 syz, C done error 1 2347d 2343d 15/29 2200d facb03dddec0 fs/minix: don't allow getting deleted inodes
KASAN: use-after-free Read in path_init (2) fs 19 syz, C done 29 2234d 2236d 15/29 2200d 24fb33d40d60 fix breakage in do_rmdir()
WARNING in __kernel_write fs -1 syz, C done 522 2249d 2269d 15/29 2200d a39c46067c84 net/9p: validate fds in p9_fd_open
KMSAN: uninit-value in get_block fs 7 syz, C 13 2316d 2319d 15/29 2200d 270ef41094e9 fs/minix: reject too-large maximum file size
KASAN: null-ptr-deref Write in get_block fs 12 syz, C done 101 2266d 2379d 15/29 2200d da27e0a0e5f6 fs/minix: check return value of sb_getblk()
memory leak in io_submit_sqes fs io-uring 3 syz, C 2 2217d 2236d 15/29 2200d a36da65c4656 io_uring: fail poll arm on queue proc failure
KASAN: use-after-free Write in get_block fs 22 syz, C inconclusive inconclusive 12 2282d 2332d 15/29 2200d 270ef41094e9 fs/minix: reject too-large maximum file size
general protection fault in io_poll_double_wake io-uring fs 2 syz, C done 8 2204d 2232d 15/29 2200d d4e7cd36a90e io_uring: sanitize double poll handling
possible deadlock in io_timeout_fn io-uring fs 4 syz, C done 4 2235d 2237d 15/29 2200d 51a4cc112c7a io_uring: defer file table grabbing request cleanup for locked requests
possible deadlock in lock_trace (3) fs 4 syz inconclusive done 69 2367d 2502d 15/29 2229d 2db9dbf71bf9 proc: Use new infrastructure to fix deadlocks in execve
possible deadlock in do_io_accounting (3) fs 4 syz, C inconclusive done 39 2375d 2465d 15/29 2229d 76518d379885 proc: io_accounting: Use new infrastructure to fix deadlocks in execve
possible deadlock in proc_pid_personality fs 4 syz inconclusive done 3 2384d 2394d 15/29 2229d 2db9dbf71bf9 proc: Use new infrastructure to fix deadlocks in execve
WARNING: bad unlock balance in rcu_lock_release fs 4 syz, C inconclusive done 1433 2370d 2651d 15/29 2229d 10476e630422 locking/lockdep: Fix bad recursion pattern
WARNING: bad unlock balance in rcu_core fs 4 syz, C inconclusive done 3578 2366d 2721d 15/29 2229d 10476e630422 locking/lockdep: Fix bad recursion pattern
KASAN: use-after-free Write in fsnotify_detach_connector_from_object fs 22 syz, C done 4 2292d 2296d 15/29 2261d ef1548adada5 proc: Use new_inode not new_inode_pseudo
INFO: task hung in locks_remove_posix fs input usb 1 syz 2231 2296d 2319d 15/29 2261d 187b96db5ca7 x86/unwind/orc: Fix unwind_get_return_address_ptr() for inactive tasks
INFO: trying to register non-static key in io_cqring_ev_posted (3) fs -1 syz, C done 3 2320d 2323d 15/29 2261d 583863ed9181 io_uring: initialize ctx->sqo_wait earlier
general protection fault in start_creating fs 2 syz, C done 106 2283d 2312d 15/29 2261d d56f5136b010 KVM: let kvm_destroy_vm_debugfs clean up vCPU debugfs directories
KASAN: use-after-free Read in blkdev_direct_IO fs 19 syz, C done error 8 2606d 2611d 15/29 2278d 0eb6ddfb865c block: Fix __blkdev_direct_IO() for bio fragments
KASAN: use-after-free Read in blkdev_bio_end_io fs 19 syz, C done error 13 2596d 2608d 15/29 2278d 7b6620d7db56 block: remove REQ_NOWAIT_INLINE
KASAN: use-after-free Read in dput (2) fs 19 syz done 4 2354d 2354d 15/29 2290d 4fa3b1c41737 proc: Handle umounts cleanly
INFO: rcu detected stall in io_uring_release fs 1 syz 15 2310d 2351d 15/29 2290d 3fd44c86711f io_uring: use cond_resched() in io_ring_ctx_wait_and_kill()
possible deadlock in io_submit_one (3) fs 4 syz done 45 2359d 2366d 15/29 2329d 63f818f46af9 proc: Use a dedicated lock in struct pid
INFO: task hung in io_queue_file_removal fs 1 syz, C done 16 2372d 2379d 15/29 2329d 4afdb733b160 io-uring: drop completion when removing file
KMSAN: uninit-value in simple_attr_read fs 7 syz, C 6 2332d 2402d 15/29 2329d a65cab7d7f05 libfs: fix infoleak in simple_attr_read()
possible deadlock in send_sigurg fs 4 syz, C done 65 2353d 2366d 15/29 2329d 63f818f46af9 proc: Use a dedicated lock in struct pid
INFO: trying to register non-static key in __io_uring_register fs -1 syz, C done 39 2361d 2362d 15/29 2329d f7fe9346869a io_uring: initialize fixed_file_data lock
INFO: trying to register non-static key in io_cqring_ev_posted (2) fs -1 syz, C done 42 2332d 2369d 15/29 2329d 10bea96dcc13 io_uring: add missing finish_wait() in io_sq_thread()
possible deadlock in send_sigio fs 4 syz, C done 7 2357d 2365d 15/29 2329d 63f818f46af9 proc: Use a dedicated lock in struct pid
memory leak in fasync_helper fs 3 syz, C 14 2423d 2483d 15/29 2354d 67f562e3e147 net/smc: transfer fasync_list in case of fallback
BUG: sleeping function called from invalid context in __kmalloc ceph fs 5 syz, C done 5 2416d 2422d 15/29 2354d b27a939e8376 ceph: canonicalize server path in place
WARNING: ODEBUG bug in io_sqe_files_unregister fs -1 syz, C done 964 2423d 2470d 15/29 2389d 2faf852d1be8 io_uring: cleanup fixed file data table references
memory leak in reiserfs_fill_super fs 3 syz, C 20 2430d 2480d 15/29 2411d 5474ca7da6f3 reiserfs: Fix memory leak of journal device string
BUG: corrupted list in __dentry_kill (2) fs 8 syz, C done 4945 2479d 2479d 15/29 2411d a3d1e7eb5abe simple_recursive_removal(): kernel-side rm -rf for ramfs-style filesystems
WARNING in do_dentry_open (2) fs -1 syz, C done 17 2431d 2428d 15/29 2411d a37f4958f7b6 debugfs: Return -EPERM when locked down
WARNING: refcount bug in chrdev_open fs 13 syz, C inconclusive done 15 2491d 2593d 15/29 2411d 68faa679b8be chardev: Avoid potential use-after-free in 'chrdev_open()'
kernel BUG at fs/pipe.c:LINE! fs -1 syz, C done 693 2483d 2489d 15/29 2453d 8c7b8c34ae95 pipe: Remove assertion from pipe_poll()
general protection fault in io_commit_cqring fs 2 syz, C done 3 2508d 2508d 15/29 2479d 15dff286d0e0 io_uring: check for validity of ->rings in teardown
INFO: task hung in io_wq_destroy fs 1 syz, C done 20 2493d 2524d 15/29 2479d b60fda6000a9 io-wq: wait for io_wq_create() to setup necessary workers
INFO: trying to register non-static key in io_cqring_ev_posted fs -1 syz, C done 6 2494d 2506d 15/29 2479d eb065d301e8c io_uring: io_allocate_scq_urings() should return a sane state
WARNING in iov_iter_pipe fs -1 syz, C done 1117 2496d 2514d 15/29 2479d 419e9c38aa07 iomap: Fix pipe page leakage during splicing
BUG: unable to handle kernel paging request in io_wq_cancel_all fs 8 syz, C done 2 2523d 2523d 15/29 2479d 975c99a57096 io_uring: io_wq_create() returns an error pointer, not NULL
KASAN: invalid-free in io_sqe_files_unregister fs 24 syz, C done 3 2511d 2511d 15/29 2479d 46568e9be70f io_uring: fix error clear of ->file_table in io_sqe_files_register()
KASAN: use-after-free Read in do_mount fs 19 syz done 6 2537d 2545d 14/29 2492d 0ecee6699064 fs/namespace.c: fix use-after-free of mount in mnt_warn_timestamp_expiry()
KASAN: use-after-free Read in io_uring_setup fs 19 syz error 1 2525d 2524d 13/29 2499d 044c1ab399af io_uring: don't touch ctx in setup after ring fd install
KASAN: use-after-free Read in ep_scan_ready_list fs 19 syz, C done 39 2963d 2998d 13/29 2501d 430ac66eb4c5 net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree()
INFO: trying to register non-static key in finish_writeback_work fs -1 syz error 1 2560d 2558d 13/29 2525d 8e00c4e9dd85 writeback: fix use-after-free in finish_writeback_work()
INFO: task syz-executor can't die for more than 143 seconds. fs -1 syz, C done 61 2554d 2662d 13/29 2537d 8619e5bdeee8 /dev/mem: Bail out upon SIGKILL. 7c3a6aedcd6a kexec: bail out upon SIGKILL when allocating memory. 8f9e86ee7959 staging: android: ion: Bail out upon SIGKILL when allocating memory.
WARNING in kfree fs -1 syz, C done 2 2584d 2583d 13/29 2537d 43ce4c1feadb vfs: Add a single-or-reconfig keying to vfs_get_super()
WARNING in __blkdev_put (2) fs -1 syz 3082 2601d 2608d 12/29 2576d e91455bad5cf bdev: Fixup error handling in blkdev_get()
kernel panic: corrupted stack end in dput fs 2 syz done 1 2643d 2643d 12/29 2586d 95fa145479fb bpf: sockmap/tls, close can race with map free
general protection fault in do_move_mount (2) fs 2 syz done 7 2648d 2656d 12/29 2615d 570d7a98e7d6 vfs: move_mount: reject moving kernel internal mounts
possible deadlock in io_submit_one fs 4 syz, C done 1779 2619d 2790d 12/29 2615d cbcfa130a911 fs/userfaultfd.c: disable irqs for fault_pending and event locks
WARNING in notify_change fs -1 syz, C 566 2702d 3091d 12/29 2620d f69e749a4935 Abort file_remove_privs() for non-reg. files
WARNING in fanotify_handle_event fs -1 syz, C done 5 2657d 2656d 12/29 2634d c285a2f01d69 fanotify: update connector fsid cache on add mark
BUG: Dentry still in use [unmount of hugetlbfs hugetlbfs] fs -1 syz, C done 3 2656d 2656d 12/29 2634d 1b0b9cc8d379 vfs: fsmount: add missing mntget()
possible deadlock in aio_poll fs 4 syz, C 5041 2793d 2937d 12/29 2645d ae62c16e105a userfaultfd: disable irqs when taking the waitqueue lock
INFO: task hung in __get_super fs 1 syz, C 80 2655d 3099d 12/29 2655d 33ec3e53e7b1 loop: Don't change loop device under exclusive opener
general protection fault in load_elf_binary fs mm 2 syz, C done 15 2733d 2737d 12/29 2660d cc338010a233 fs/binfmt_elf.c: free PT_INTERP filename ASAP
general protection fault in put_fs_context fs 2 syz, C 9 2887d 2887d 12/29 2663d 8d0347f6c3a9 convert do_remount_sb() to fs_context
INFO: task hung in __io_uring_register fs 1 syz, C done 51 2714d 2722d 12/29 2678d b19062a56726 io_uring: fix possible deadlock between io_uring_{enter,register}
general protection fault in fanotify_handle_event fs 2 syz done 5 2717d 2717d 12/29 2678d b1da6a51871c fsnotify: Fix NULL ptr deref in fanotify_get_fsid()
BUG: unable to handle kernel paging request in do_mount fs 8 syz, C 194 2889d 2926d 12/29 2685d 3e1aeb00e6d1 vfs: Implement a filesystem superblock creation/configuration context
possible deadlock in seq_read fs 4 syz, C 19074 2731d 3220d 12/29 2723d 73601ea5b7b1 fs/open.c: allow opening only regular files during execve()
KASAN: use-after-free Read in link_path_walk fs 19 syz done 5 2842d 2858d 12/29 2723d 1da6c4d9140c bpf: fix use after free in bpf_evict_inode
KASAN: use-after-free Read in trailing_symlink fs 19 syz done 2 2844d 2858d 12/29 2723d 1da6c4d9140c bpf: fix use after free in bpf_evict_inode
KASAN: use-after-free Read in path_lookupat fs 19 syz done 1 2858d 2858d 12/29 2723d 1da6c4d9140c bpf: fix use after free in bpf_evict_inode
KASAN: use-after-free Read in filemap_fault mm fs 19 syz, C 277 2818d 2828d 11/29 2734d 6b4c9f446981 filemap: drop the mmap_sem for all blocking operations
possible deadlock in __do_page_fault fs mm 4 syz, C 820 2760d 2927d 11/29 2738d fb4415a12632 staging: android: ashmem: Don't call fallocate() with ashmem_mutex held.
possible deadlock in vfs_fallocate fs 4 syz, C 3981 2960d 3071d 11/29 2738d fb4415a12632 staging: android: ashmem: Don't call fallocate() with ashmem_mutex held.
BUG: unable to handle kernel paging request in dput (2) fs 8 syz, C 4 2795d 2795d 11/29 2760d 36991ca68db9 blk-mq: protect debugfs_create_files() from failures 37ea7b630ae5 debugfs: debugfs_lookup() should return NULL if not found
general protection fault in __dentry_path fs 2 syz, C 2082 2762d 2795d 11/29 2760d 8ed0579c12b2 kvm: properly check debugfs dentry before using it
KASAN: use-after-free Read in posix_lock_inode fs 19 syz 5 2823d 2823d 11/29 2810d bf77ae4c98d7 locks: fix error in locks_move_blocks()
KASAN: use-after-free Read in locks_delete_block fs 19 syz 4 2851d 2874d 11/29 2810d 16306a61d3b7 fs/locks: always delete_block after waiting.
WARNING in userfaultfd_ioctl mm fs -1 syz, C 11 2843d 2853d 11/29 2829d 01e881f5a1fc userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered
WARNING: kmalloc bug in krealloc fs -1 syz, C 2 2994d 2994d 11/29 2874d 61448479a9f2 mm: don't warn about large allocations for slab
WARNING: kmalloc bug in vfs_getxattr_alloc fs -1 syz, C 9 2949d 2991d 11/29 2874d 61448479a9f2 mm: don't warn about large allocations for slab
KASAN: slab-out-of-bounds Read in fscache_alloc_cookie fs 17 syz, C 1936 2899d 3001d 11/29 2888d 1ff22883b0b2 fscache: Fix incomplete initialisation of inline key space fa520c47eaa1 fscache: Fix out of bound read in long cookie keys
general protection fault in ubifs_mount fs mtd 2 syz, C 216 2927d 2944d 11/29 2906d 37f31b6ca431 ubifs: Check for name being NULL while mounting
WARNING in __fsnotify_recalc_mask fs -1 syz 9 2959d 2960d 10/29 2937d d3bc0fa8411c fsnotify: fix false positive warning on inode delete
INFO: task hung in fsnotify_mark_destroy_workfn fs 1 syz 13 2969d 3083d 10/29 2940d 128f38041035 android: binder: Rate-limit debug and userspace triggered err msgs
BUG: soft lockup in d_walk fs 1 syz, C 163 3028d 3074d 8/29 2942d 4fb48871409e restore cond_resched() in shrink_dcache_parent()
general protection fault in send_sigurg_to_task fs 2 syz, C 6 2962d 2965d 8/29 2950d 84fe4cc09abc signal: Don't send signals to tasks that don't exist
general protection fault in send_sigio_to_task fs 2 syz, C 176 2962d 2965d 8/29 2950d 84fe4cc09abc signal: Don't send signals to tasks that don't exist
kernel BUG at fs/userfaultfd.c:LINE! (2) fs mm -1 syz, C 8 2976d 2994d 8/29 2970d 31e810aa1033 userfaultfd: remove uffd flags from vma->vm_flags if UFFD_EVENT_FORK fails
KASAN: stack-out-of-bounds Read in locks_remove_posix fs 17 syz, C 1 2988d 2988d 8/29 2971d 99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
KASAN: slab-out-of-bounds Read in getname_kernel fs 17 syz, C 8 2996d 3095d 8/29 2985d 02f51d45937f autofs: fix slab out of bounds read in getname_kernel()
KASAN: global-out-of-bounds Write in string fs 21 syz, C 7 3040d 3097d 8/29 2985d fe10e398e860 reiserfs: fix buffer overflow with long warning messages
BUG: unable to handle kernel paging request in dput fs 8 syz, C 26 3031d 3034d 8/29 3000d d85b399b64e8 fix proc_fill_cache() in case of d_alloc_parallel() failure
KASAN: use-after-free Read in __vfs_write fs 19 syz 14 3029d 3032d 8/29 3000d 66e58e0ef80a bpfilter: fix race in pipe access
general protection fault in pipe_write fs 2 syz 1 3032d 3031d 8/29 3000d 66e58e0ef80a bpfilter: fix race in pipe access
BUG: unable to handle kernel NULL pointer dereference in ep_item_poll fs 10 syz, C 15 3010d 3011d 8/29 3000d e88958e6369a net: handle NULL ->poll gracefully
general protection fault in __vfs_write fs 2 syz 25 3028d 3032d 8/29 3000d 66e58e0ef80a bpfilter: fix race in pipe access
KASAN: use-after-free Read in pipe_read fs 19 syz, C 3 3030d 3032d 8/29 3000d 66e58e0ef80a bpfilter: fix race in pipe access
KASAN: use-after-free Read in __kernel_write fs 19 syz 7 3029d 3032d 8/29 3000d 66e58e0ef80a bpfilter: fix race in pipe access
KASAN: null-ptr-deref Write in simple_write_to_buffer fs 12 syz, C 5 3040d 3065d 8/29 3000d fc14eebfc208 PM / hibernate: Fix oops at snapshot_write()
general protection fault in touch_atime fs 2 syz 6 3029d 3032d 8/29 3000d 66e58e0ef80a bpfilter: fix race in pipe access
WARNING in do_dentry_open fs -1 syz, C 26 3024d 3031d 8/29 3000d b16558579576 bpf: implement dummy fops for bpf objects
general protection fault in vfs_read fs 2 syz 2 3030d 3032d 8/29 3000d 66e58e0ef80a bpfilter: fix race in pipe access
BUG: unable to handle kernel NULL pointer dereference in do_sys_poll fs 10 syz, C 297 3010d 3011d 8/29 3000d e88958e6369a net: handle NULL ->poll gracefully
WARNING in sysfs_remove_group fs -1 syz, C 11125 3001d 3255d 8/29 3000d d3349b6b3c37 loop: remember whether sysfs_create_group() was done
INFO: rcu detected stall in d_walk fs 1 syz, C 25680 3026d 3088d 8/29 3000d 4fb48871409e restore cond_resched() in shrink_dcache_parent()
KASAN: use-after-free Read in remove_wait_queue (2) fs 19 syz, C 4 3121d 3131d 5/29 3032d af8d3c7c001a ppp: remove the PPPIOCDETACH ioctl
INFO: task hung in __blkdev_get fs 1 syz, C 662 3086d 3212d 5/29 3062d 1e047eaab3bb block/loop: fix deadlock after loop_set_status
WARNING in format_decode fs -1 syz, C 1 3100d 3100d 5/29 3062d 9ad553abe66f fs/reiserfs/journal.c: add missing resierfs_warning() arg
WARNING: refcount bug in put_pid_ns fs 13 syz 6 3100d 3100d 5/29 3062d 8e04944f0ea8 mm,vmscan: Allow preallocating memory for register_shrinker().
BUG: corrupted list in __dentry_kill fs 8 syz, C 35 3080d 3100d 5/29 3062d 4a3877c4cedd rpc_pipefs: fix double-dput()
KASAN: use-after-free Read in remove_wait_queue fs 19 syz, C 7 3137d 3147d 4/29 3133d 5eeb2ca02a2f ANDROID: binder: synchronize_rcu() when using POLLFREE.
KASAN: use-after-free Read in __lock_acquire (2) fs 19 syz, C 589 3158d 3233d 4/29 3155d f5cb779ba163 ANDROID: binder: remove waitqueue when thread exits.
WARNING in register_lock_class fs -1 syz, C 2 3202d 3198d 4/29 3155d f5cb779ba163 ANDROID: binder: remove waitqueue when thread exits.
BUG: unable to handle kernel NULL pointer dereference in page_mapping fs mm 10 syz, C 4 3202d 3204d 4/29 3158d 7d11f77f84b2 RDS: null pointer dereference in rds_atomic_free_op
general protection fault in page_mapping fs mm 2 syz, C 46 3181d 3209d 4/29 3158d 7d11f77f84b2 RDS: null pointer dereference in rds_atomic_free_op
kernel BUG at fs/userfaultfd.c:LINE! mm fs -1 syz, C 3 3202d 3199d 4/29 3158d 0cbb4b4f4c44 userfaultfd: clear the vma->vm_userfaultfd_ctx if UFFD_EVENT_FORK fails
KASAN: use-after-free Read in __wake_up_common fs 19 syz, C 888 3159d 3168d 4/29 3158d 4cd879515d68 vhost_net: stop device during reset owner
BUG: unable to handle kernel paging request in devpts_mntget fs 8 syz, C 21 3171d 3248d 4/29 3158d c9cc8d01fb04 devpts: fix error handling in devpts_mntget()
general protection fault in show_timer fs 2 syz, C 10 3203d 3221d 4/29 3158d cef31d9af908 posix-timer: Properly check sigevent->sigev_notify
general protection fault in proc_flush_task fs 2 syz 2 3205d 3221d 4/29 3163d c0ee554906c3 pid: Handle failure to allocate the first pid in a pid namespace
BUG: unable to handle kernel NULL pointer dereference in proc_flush_task fs 10 syz 1 3205d 3201d 4/29 3163d c0ee554906c3 pid: Handle failure to allocate the first pid in a pid namespace
KASAN: use-after-free Read in handle_userfault fs mm 19 syz, C 151 3192d 3255d 3/29 3180d 0cbb4b4f4c44 userfaultfd: clear the vma->vm_userfaultfd_ctx if UFFD_EVENT_FORK fails
WARNING in lock_release fs -1 syz, C 72 3202d 3235d 3/29 3199d ca0168e8a77c alloc_super(): do ->s_umount initialization earlier