Applied filters: WithRepro (drop) Label=subsystems:fs (drop)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
possible deadlock in configfs_rmdir prio:low fs 4 syz, C error 2023 30m 29d 17/29 never 9dbf74f4022f usb: gadget: f_tcm: fix deadlock in usbg_make_tpg()
BUG: sleeping function called from invalid context in procfs_procmap_ioctl fs 5 syz done 101 418d 420d 2/29 never mm/maps: move kmalloc() call location in do_procmap_query() out of RCU critical section
INFO: task hung in io_sq_thread_stop fs io-uring 1 syz, C done 211 2018d 2177d 1/29 never io_uring: don't sleep schedule in SQPOLL thread if we need to park
kernel BUG in free_bprm fs mm -1 syz, C done 445 658d 659d 1/29 never exec: NULL out bprm->argv0 when it is an ERR_PTR
general protection fault in bch2_prt_vprintf fs 2 syz, C error inconclusive 4 598d 635d 2/29 never bcachefs: journal_entry_btree_keys_to_text() is more careful
WARNING in bch2_prt_printf prio:high fs -1 syz, C done error 103 334d 838d 2/29 never bcachefs: journal_entry_btree_keys_to_text() is more careful
KASAN: use-after-free Read in check_extent_overbig prio:high fs 19 syz, C done done 18 347d 629d 2/29 never bcachefs: fix check_extent_overbig() call
kernel BUG in bch2_btree_path_peek_slot prio:low fs -1 syz, C error error 1546 457d 635d 2/29 never bcachefs: fix assert in bch2_btree_path_traverse_cached()
kernel BUG in do_bch2_trans_commit_to_journal_replay prio:normal fs -1 syz 22 399d 402d 2/29 never bcachefs: do_bch2_trans_commit_to_journal_replay handles accounting
kernel BUG in bch2_printbuf_exit prio:high fs -1 syz, C error 29 401d 405d 2/29 never bcachefs: convert str_hash.c to CLASS
kernel BUG in bch2_btree_repair_topology_recurse prio:high fs -1 syz, C done 7 331d 391d 2/29 never bcachefs: btree_check_root_boundaries()
INFO: task hung in __bch2_fs_stop prio:high fs 1 syz, C done 1589 327d 802d 2/29 never bcachefs: Increase BCH_MIN_NR_NBUCKETS
INFO: task hung in __closure_sync prio:high fs 1 syz, C done 8591 318d 845d 2/29 never bcachefs: Increase BCH_MIN_NR_NBUCKETS
WARNING in bchfs_truncate fs -1 syz, C done 366 334d 844d 2/29 never bcachefs: Increase BCH_MIN_NR_NBUCKETS
UBSAN: array-index-out-of-bounds in bch2_accounting_validate prio:high fs 15 syz, C done 23 320d 387d 2/29 never bcachefs: Ignore accounting key type larger than BCH_DISK_ACCOUNTING_TYPE_NR
KMSAN: uninit-value in __bch2_alloc_v4_to_text prio:high fs 7 syz, C 3 430d 435d 2/29 never bcachefs: Fix refs to undefined fields in __bch2_alloc_v4_to_text()
INFO: task hung in bchfs_fpunch (2) prio:high fs mm 1 syz, C done 2 384d 428d 2/29 never bcachefs: Fix readahead involved deadlock
INFO: task hung in bchfs_fallocate (2) fs 1 syz, C done inconclusive 6 375d 602d 2/29 never bcachefs: Fix readahead involved deadlock
INFO: task hung in bch2_readahead prio:high fs 1 syz, C done 375 347d 828d 2/29 never bcachefs: Fix readahead involved deadlock
INFO: task hung in invalidate_inode_pages2_range (3) prio:high fs 1 syz, C done 57 78d 544d 2/29 never bcachefs: Fix readahead involved deadlock
KASAN: slab-out-of-bounds Write in bch2_dirent_init_name prio:high fs 21 syz, C error 1496 310d 435d 2/29 never bcachefs: Fix padding zeroout when creating casefolded dirents
KMSAN: uninit-value in bch2_check_subvols prio:high fs 7 syz, C 53 332d 421d 2/29 never bcachefs: Fix missing compat code in check_subvol()
WARNING in bch2_dev_free (2) prio:low fs -1 syz, C done 5 400d 405d 2/29 never bcachefs: Fix __bch2_fs_read_write() error path
kernel BUG in __journal_res_get (3) prio:high fs -1 syz, C inconclusive 175 311d 434d 2/29 never bcachefs: Fix __bch2_fs_read_write() error path
KASAN: use-after-free Read in bch2_check_dirents fs 19 syz, C done 769 330d 649d 2/29 never bcachefs: Fix UAF in check_dirent()
KASAN: use-after-free Read in check_dirent fs 19 syz, C done 13 369d 551d 2/29 never bcachefs: Fix UAF in check_dirent()
KASAN: slab-use-after-free Write in bch2_do_discards prio:high fs 22 syz 137 331d 401d 2/29 never bcachefs: Fix UAF by journal write path
KASAN: slab-use-after-free Write in bch2_get_next_dev prio:high fs 22 syz, C 1331 310d 404d 2/29 never bcachefs: Fix UAF by journal write path
WARNING in bch2_fs_journal_start prio:high fs -1 syz, C done 14 432d 452d 2/29 never bcachefs: Don't allow mounting with crazy numbers of dirty journal entries
general protection fault in __bch2_err_trace prio:normal fs 2 syz, C done 25 330d 386d 2/29 never bcachefs: Delete faulty read_only/nochanges check in fs_open()
KMSAN: uninit-value in bch2_alloc_sectors_start_trans (2) prio:high fs 7 syz 875 331d 497d 2/29 never bcachefs: Add missing ei_last_dirtied update
INFO: task hung in remove_inode_hugepages fs mm 1 syz, C done 52 687d 779d 1/29 never INFO: task hung in remove_inode_hugepages
KASAN: slab-use-after-free Read in debugfs_u32_get (2) prio:normal fs 19 syz 1 60d 70d 29/29 29d 2e996ca81f95 netdevsim: remove ethtool debugfs files before freeing netdev
KASAN: slab-use-after-free Read in reverse_path_check_proc prio:high fs 19 syz, C 113 80d 96d 29/29 42d a1e9718b406b eventpoll: restore EP_UNACTIVE_PTR sentinel for ctx->tfile_check_list
general protection fault in __umount_mnt fs 2 syz, C error 21 149d 159d 29/29 97d ad4999496e73 mount: always duplicate mount
UBSAN: shift-out-of-bounds in minix_statfs fs -1 syz, C inconclusive error 75 213d 1717d 29/29 112d 8c97a6ddc956 minix: Add required sanity checking to minix_check_superblock()
possible deadlock in __configfs_open_file fs 4 syz, C 29 194d 612d 29/29 112d 14d4ac19d189 scsi: target: Fix recursive locking in __configfs_open_file()
BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio (4) fs 10 syz, C done 5746 218d 648d 29/29 112d 777a8560fd29 lib/buildid: use __kernel_read() for sleepable context
memory leak in __shmem_file_setup fs 3 syz, C 1 230d 226d 29/29 112d 605f6586ecf7 mm/vma: do not leak memory when .mmap_prepare swaps the file
general protection fault in grab_requested_root fs 2 syz, C 21 182d 195d 29/29 112d 81f16c9778d7 statmount: Fix the null-ptr-deref in do_statmount()
kernel BUG in sctp_getsockopt_peeloff_common fs -1 syz, C done 6 267d 268d 29/29 213d afb9917d9b37 Revert "net/socket: convert sock_map_fd() to FD_ADD()"
kernel BUG in socket fs -1 syz, C 145 250d 245d 29/29 213d afb9917d9b37 Revert "net/socket: convert sock_map_fd() to FD_ADD()"
memory leak in debugfs_change_name fs 3 syz, C 1 265d 261d 29/29 217d d412ff9e26eb debugfs: Fix memleak in debugfs_change_name().
WARNING in minix_unlink fs -1 syz, C inconclusive done 458 260d 642d 29/29 217d 009a2ba40303 Fix a drop_nlink warning in minix_rename
memory leak in getname_flags fs 3 syz, C 1 245d 245d 29/29 217d b14fad555302 io_uring: fix filename leak in __io_openat_prep()
KASAN: slab-use-after-free Read in driver_remove_file fs 19 syz, C error done 296 264d 393d 29/29 218d 72262330f7b3 comedi: c6xdigio: Fix invalid PNP driver unregistration
general protection fault in fd_install fs 2 syz, C 64 264d 265d 29/29 231d 8cf01d0c4372 mqueue: correct the type of ro to int
WARNING in minix_rmdir fs -1 syz, C inconclusive 92 282d 595d 29/29 231d d3e0e8661ceb Fix a drop_nlink warning in minix_rmdir
WARNING in nsproxy_ns_active_get fs -1 syz, C 377 288d 294d 29/29 231d cefd55bd2159 nsproxy: fix free_nsproxy() and simplify create_new_namespaces()
kernel BUG in may_open (2) fs -1 syz, C done 17716 232d 414d 29/29 231d 34ab4c75588c bfs: Reconstruct file type when loading from disk 7f9d34b0a7cb cramfs: Verify inode mode when loading from disk 005d4b0d33f6 hfsplus: Verify inode mode when loading from disk 0a9e74051313 isofs: Verify inode mode when loading from disk 7a5aa54fba2b jfs: Verify inode mode when loading from disk 73861970938a minixfs: Verify inode mode when loading from disk 4aead50caf67 nilfs2: reject invalid file types when reading inodes 4e8011ffec79 ntfs3: pretend $Extend records as regular files bc107a619f02 squashfs: verify inode mode when loading from disk
KMSAN: kernel-infoleak in hugetlbfs_read_iter fs mm 9 syz, C 7 290d 289d 29/29 231d de8798965fd0 mm/memfd: fix information leak in hugetlb folios
general protection fault in fsnotify_destroy_group fs 2 syz, C error 2 274d 272d 29/29 231d 7129098f4f7b fanotify: convert fanotify_init() to FD_PREPARE()
WARNING in nsproxy_ns_active_put fs -1 syz, C done 38 288d 294d 29/29 231d cefd55bd2159 nsproxy: fix free_nsproxy() and simplify create_new_namespaces()
WARNING in minix_rename fs -1 syz error 7 342d 428d 29/29 231d 009a2ba40303 Fix a drop_nlink warning in minix_rename
WARNING in destroy_super_work fs -1 syz done 107 288d 292d 29/29 231d f8d5a8970d2f ns: handle setns(pidfd, ...) cleanly
general protection fault in mntput fs 2 syz, C error 17 267d 272d 29/29 231d 05885f41658c namespace: convert fsmount() to FD_PREPARE()
BUG: sleeping function called from invalid context in hook_sb_delete fs 5 syz, C done 11887 249d 337d 29/29 231d 56325e8c68c0 landlock: fix splats from iput() after it started calling might_sleep()
WARNING in dax_iomap_rw fs -1 syz, C 5 315d 329d 29/29 268d 154d1e7ad9e5 dax: skip read lock assertion for read-only filesystems
WARNING in invalidate_bh_lru fs -1 syz, C done done 5172 516d 1344d 29/29 281d 6f861765464f fs: Block writes to mounted block devices
VFS: Busy inodes after unmount (use-after-free) (3) fs 2 syz, C error 85 300d 330d 29/29 281d 56094ad3eaa2 vfs: Don't leak disconnected dentries on umount
kernel BUG in qlist_free_all (2) fs -1 syz, C done 5 315d 346d 29/29 281d 25718fdcbdd2 net: gro_cells: Use nested-BH locking for gro_cell
INFO: task hung in bch2_direct_write (2) fs 1 syz, C unreliable done 15 367d 376d 29/29 287d f2c61db29f27 Remove bcachefs core code
INFO: task hung in v9fs_file_fsync fs mm 1 syz, C done 14 333d 373d 29/29 301d e8fe3f07a357 9p/trans_fd: p9_fd_request: kick rx thread if EPOLLIN
WARNING in sysfs_emit_at fs -1 syz, C 2 354d 350d 29/29 301d 9dfec4a51df9 USB: core: remove the move buf action
general protection fault in iter_file_splice_write fs 2 syz, C done done 2812 372d 828d 29/29 315d netfs: Fix unbuffered write error handling
WARNING in path_noexec mm fs -1 syz, C done 14318 330d 415d 29/29 330d secretmem: use SB_I_NOEXEC
kernel BUG in bch2_journal_keys_peek_max fs -1 syz, C done 45 423d 560d 29/29 345d 425da82c63e3 bcachefs: btree_iter: fix updates, journal overlay
KASAN: use-after-free Read in bch2_btree_node_read_done fs 19 syz, C done 64 430d 639d 29/29 356d d89a34b14df5 bcachefs: Move bset size check before csum check
kernel BUG in bch2_btree_path_level_init (3) fs -1 syz, C done 489 356d 613d 29/29 356d 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
kernel BUG in __bch2_bkey_compat fs -1 syz, C done done 5 439d 439d 29/29 356d 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
kernel BUG in bch2_trans_update_by_path fs -1 syz, C done 857 358d 433d 29/29 356d c72d628469b8 bcachefs: Fix btree for nonexistent tree depth
BUG: unable to handle kernel paging request in __bch2_bkey_unpack_key fs 8 syz, C 75 432d 456d 29/29 356d 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
kernel panic: trans should be locked, unlocked by bch2_btree_update_start fs 2 syz, C error error 361 438d 629d 29/29 356d 5c4acbc8ce90 bcachefs: Don't unlock the trans if ret doesn't match BCH_ERR_operation_blocked
kernel BUG in bch2_bkey_cmp_packed (2) fs -1 syz, C 7 440d 450d 29/29 356d 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
kernel BUG in bch2_reconstruct_snapshots fs -1 syz, C done done 7 464d 555d 29/29 356d b2e2bed11980 bcachefs: Add missing key type checks to check_snapshot_exists()
BUG: unable to handle kernel NULL pointer dereference in bch2_btree_update_start fs 10 syz, C 6 427d 439d 29/29 356d 56be92c63f02 bcachefs: Fix pool->alloc NULL pointer dereference
KASAN: use-after-free Read in bch2_checksum fs 19 syz, C error done 8 460d 472d 29/29 356d d89a34b14df5 bcachefs: Move bset size check before csum check
kernel BUG in bch2_btree_node_iter_init (2) fs -1 syz, C done 3 413d 413d 29/29 356d 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
KASAN: slab-use-after-free Read in bch2_str_hash_repair_key fs 19 syz, C done 226 422d 442d 29/29 356d 9b54efe66c9b bcachefs: Fix alloc_req use after free
kernel BUG in __bch2_bkey_unpack_key fs -1 syz, C 43 435d 456d 29/29 356d 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
UBSAN: shift-out-of-bounds in __bch2_btree_node_hash_insert fs -1 syz, C done 434 418d 602d 29/29 356d 96de8f852031 bcachefs: mark invalid_btree_id autofix
KASAN: slab-use-after-free Read in bch2_bucket_alloc_trans fs 19 syz, C error 550 423d 440d 29/29 356d 9b54efe66c9b bcachefs: Fix alloc_req use after free
UBSAN: shift-out-of-bounds in __bch2_bkey_unpack_key fs -1 syz, C done 54 439d 455d 29/29 356d 03208bd06a61 bcachefs: don't return fsck_fix for unfixable node errors in __btree_err
kernel BUG in __btree_trans_update_by_path fs -1 syz, C done 20 414d 420d 29/29 356d c72d628469b8 bcachefs: Fix btree for nonexistent tree depth
kernel BUG in __bkey_unpack_pos (2) fs -1 syz, C done 24 411d 608d 29/29 356d 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
KASAN: use-after-free Read in poly1305_update fs 19 syz, C done 8 424d 439d 29/29 356d d89a34b14df5 bcachefs: Move bset size check before csum check
BUG: unable to handle kernel NULL pointer dereference in mempool_alloc_noprof (2) fs 10 syz, C done 8 435d 451d 29/29 356d 56be92c63f02 bcachefs: Fix pool->alloc NULL pointer dereference
KASAN: slab-use-after-free Read in bch2_copygc fs 19 syz, C done 25 356d 414d 29/29 356d c02b943f7d12 bcachefs: Fix reference to invalid bucket in copygc
possible deadlock in trans_set_locked fs 4 syz, C 113 434d 635d 29/29 383d ff1dd05f8233 bcachefs: bch2_trans_relock() is trylock for lockdep
WARNING in rhashtable_init_noprof fs -1 syz, C done 131 439d 457d 29/29 385d 757601ef8533 bcachefs: Don't put rhashtable on stack
KASAN: slab-out-of-bounds Read in bch2_sb_members_v1_to_text fs 17 syz, C done 6 442d 442d 29/29 385d 205da7c02673 bcachefs: Don't trust sb->nr_devices in members_to_text()
possible deadlock in __bch2_fsck_err (2) fs 4 syz, C 4 470d 471d 29/29 385d 0acb385ec19c bcachefs: Fix possible console lock involved deadlock
KASAN: slab-out-of-bounds Read in bch2_sb_members_v2_to_text fs 17 syz, C done 34 441d 457d 29/29 385d 205da7c02673 bcachefs: Don't trust sb->nr_devices in members_to_text()
WARNING in __init_work (2) fs -1 syz, C 5971 432d 440d 29/29 385d 757601ef8533 bcachefs: Don't put rhashtable on stack
divide error in bch2_sb_members_v2_to_text fs 2 syz, C done 3 442d 442d 29/29 385d 205da7c02673 bcachefs: Don't trust sb->nr_devices in members_to_text()
UBSAN: array-index-out-of-bounds in bch2_sb_downgrade_update fs 15 syz, C 539 433d 485d 29/29 385d 082c74411491 bcachefs: Fix downgrade_table_extra()
WARNING in bch2_printbuf_make_room fs -1 syz, C error 2 444d 834d 29/29 394d dc5bfdf8eaed bcachefs: fix the memory leak in exception case
BUG: unable to handle kernel paging request in bch2_dirent_to_text fs 8 syz, C done error 3 459d 770d 29/29 400d f39055220f6f bcachefs: Add missing validation for superblock section clean
kernel BUG in vfs_get_tree (2) fs -1 syz, C done 22 448d 445d 29/29 406d 9c6185609947 bcachefs: Call bch2_fs_start before getting vfs superblock
KASAN: use-after-free Read in sysv_new_inode (2) fs 19 syz, C inconclusive error 21224 506d 839d 29/29 406d 448fa70158f9 sysv: Remove the filesystem
BUG: unable to handle kernel NULL pointer dereference in do_pagemap_scan fs 10 syz, C inconclusive done 45 473d 976d 29/29 415d 65c66047259f proc: fix the issue of proc_mem_open returning NULL
kernel BUG in may_open fs -1 syz, C error 137019 415d 511d 29/29 415d cfd86ef7e8e7 anon_inode: use a proper mode internally
WARNING in bch2_dev_free fs -1 syz, C done 258 443d 505d 28/29 439d d62922ba3cfc bcachefs: Prevent granting write refs when filesystem is read-only
KMSAN: uninit-value in bch2_extent_crc_append (2) fs 7 syz, C 4 525d 536d 28/29 440d 53cf2a3daa4c bcachefs: Fix kmsan warnings in bch2_extent_crc_pack()
KMSAN: uninit-value in bch2_trans_start_alloc_update fs 7 syz, C 1051 516d 639d 28/29 441d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_btree_node_iter_init (2) fs 7 syz, C 309 516d 647d 28/29 441d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_inode_v3_validate fs 7 syz, C 5866 517d 645d 28/29 441d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_btree_node_get fs 7 syz, C 18 527d 633d 28/29 441d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_btree_node_check_topology fs 7 syz, C 19 543d 654d 28/29 441d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_dev_freespace_init fs 7 syz, C 432 517d 630d 28/29 441d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_checksum_update (2) fs 19 syz, C done 7 524d 619d 28/29 441d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_bucket_alloc_early fs 7 syz, C 219 520d 658d 28/29 441d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_btree_ptr_v2_validate fs 7 syz, C 55 517d 568d 28/29 441d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_xattr_validate fs 7 syz, C 22 539d 621d 28/29 441d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_alloc_v4_validate (2) fs 7 syz, C 514 520d 647d 28/29 441d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in __bch2_bkey_cmp_left_packed fs 7 syz 2 583d 610d 28/29 441d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in rw_aux_tree_set (2) fs 7 syz, C 2356 518d 642d 28/29 441d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_bkey_val_validate fs 7 syz, C 17 523d 635d 28/29 441d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_bkey_ptrs_validate fs 7 syz, C 15 522d 633d 28/29 441d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_bucket_alloc_trans fs 7 syz, C 15 494d 626d 28/29 441d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_bkey_cmp_packed_inlined (2) fs 7 syz, C 309 517d 637d 28/29 441d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
kernel BUG in bch2_fs_initialize fs -1 syz done 1004 496d 501d 28/29 442d 806776ad9c20 bcachefs: Add missing error handling
kernel BUG in qlist_free_all net fs -1 syz, C done done 12 494d 642d 28/29 442d 3a04334d6282 bcachefs: Fix b->written overflow
WARNING in bch2_bkey_pick_read_device fs -1 syz, C error 89 512d 516d 28/29 442d 3c72d3eea97b bcachefs: Fix WARN() in bch2_bkey_pick_read_device()
KASAN: slab-use-after-free Read in bchfs_read fs 19 syz, C done 34 501d 508d 28/29 442d 34b47e3d73a2 bcachefs: Fix UAF in bchfs_read()
kernel BUG in bch2_run_recovery_pass (2) fs -1 syz, C 70 510d 579d 28/29 442d 962322475bb5 bcachefs: Handle backpointers with unknown data types
BUG: sleeping function called from invalid context in bch2_printbuf_make_room (2) fs 5 syz, C error 59 509d 512d 28/29 442d b2ffadcc7f8f bcachefs: Fix scheduling while atomic from logging changes
kernel BUG in bch2_btree_node_iter_init fs -1 syz, C done done 167 466d 570d 28/29 442d 3a04334d6282 bcachefs: Fix b->written overflow
general protection fault in bch2_snapshot_tree_oldest_subvol fs 8 syz, C done 14 487d 510d 28/29 442d aa6a591f0fd7 bcachefs: Fix null ptr deref in bch2_snapshot_tree_oldest_subvol() 71f8e806a5e4 bcachefs: Stricter checks on "key allowed in this btree"
KASAN: slab-out-of-bounds Read in validate_bset_keys fs 19 syz, C 5 542d 541d 28/29 442d 3a04334d6282 bcachefs: Fix b->written overflow
KMSAN: uninit-value in bch2_write_inode fs 7 syz, C 4476 530d 578d 28/29 442d 58517f4df842 bcachefs: Initialize from_inode members for bch_io_opts
kernel BUG in bch2_stripe_validate fs -1 syz, C done done 6 520d 605d 28/29 442d 71f8e806a5e4 bcachefs: Stricter checks on "key allowed in this btree"
kernel BUG in __journal_res_get (2) fs -1 syz, C error done 1527 442d 650d 28/29 442d 4c0d2c67ac6d bcachefs: Fix early startup error path
BUG: unable to handle kernel paging request in efivarfs_pm_notify fs efi 8 syz, C 1037 539d 549d 28/29 442d cb6ae457bc6a efivarfs: Defer PM notifier registration until .fill_super
kernel BUG in __bch2_trans_commit fs -1 syz, C unreliable 11858 650d 675d 28/29 473d 8b22abb4c840 bcachefs: -o norecovery now bails out of recovery earlier
possible deadlock in bch2_alloc_sectors_start_trans fs 4 syz, C inconclusive 64 631d 653d 28/29 475d 2cd85fea49d8 bcachefs: Don't recurse in check_discard_freespace_key
kernel BUG in bch2_get_scanned_nodes fs -1 syz, C done 101 575d 636d 28/29 476d a6f4794fcd86 bcachefs: struct bkey_validate_context
kernel BUG in bch2_evacuate_bucket fs -1 syz, C done 4 640d 639d 28/29 477d 9e92d6e9efb0 bcachefs: Kill bch2_get_next_backpointer()
VFS: Busy inodes after unmount (use-after-free) fs 2 syz, C error 55684 478d 1309d 28/29 477d 965b5dd1894f ocfs2: free inode when ocfs2_get_init_inode() fails
kernel BUG in bch2_btree_path_traverse_one fs -1 syz, C done 9 625d 658d 28/29 477d f11ca2ab18e3 bcachefs: Guard against backpointers to unknown btrees
kernel BUG in bch2_journal_pin_set fs -1 syz, C done 11 586d 639d 28/29 477d b3d82c2f2761 bcachefs: Guard against journal seq overflow
WARNING in bch2_journal_flush_seq_async fs -1 syz, C 27 583d 707d 28/29 477d 4746ee182a76 bcachefs: Check for inode journal seq in the future
general protection fault in proc_scheduler fs 2 syz 6 596d 601d 28/29 477d d38e26e36206 mptcp: sysctl: sched: avoid using current->nsproxy
kernel BUG in bch2_rechecksum_bio fs -1 syz, C 4 646d 656d 28/29 477d 9bdb3b73e732 bcachefs: Check for extent crc uncompressed/compressed size mismatch
kernel BUG in __bch2_journal_pin_put fs -1 syz, C 11 598d 640d 28/29 477d b3d82c2f2761 bcachefs: Guard against journal seq overflow
kernel BUG in const_folio_flags (2) fs mm -1 syz 3 581d 641d 28/29 477d 3203b3ab0fcf mm/filemap: don't call folio_test_locked() without a reference in next_uptodate_folio()
kernel BUG in __bch2_btree_node_write fs -1 syz, C 110 583d 692d 28/29 477d 75eabea6988e bcachefs: Fix dup/misordered check in btree node read
kernel BUG in bch2_btree_node_lock_write fs -1 syz, C done 8 631d 643d 28/29 477d f9e0a9be70c8 bcachefs: Issue a transaction restart after commit in repair
kernel BUG in bch2_btree_pos_to_text (2) fs -1 syz, C 51 584d 642d 28/29 477d abf23afa36eb bcachefs: Fix btree node scan when unknown btree IDs are present
kernel BUG in bch2_bucket_alloc_trans (3) fs -1 syz, C error 711 583d 646d 28/29 477d 828552ca74a4 bcachefs: Kill bch2_bucket_alloc_new_fs()
kernel BUG in bch2_journal_noflush_seq fs -1 syz, C done done 841 583d 777d 28/29 477d 0eafe758ac44 bcachefs: Check for bucket journal seq in the future
general protection fault in bch2_checksum fs 19 syz, C done 34 479d 770d 28/29 477d f7f196170dcd bcachefs: cryptographic MACs on superblock are not (yet?) supported
WARNING: locking bug in eventfd_signal_mask io-uring fs 4 syz, C done 6 601d 605d 28/29 477d a9c83a0ab66a io_uring/timeout: flush timeouts outside of the timeout lock
general protection fault in bch2_btree_path_traverse_one fs 8 syz, C done 564 570d 670d 28/29 477d 90f3683e8f7c bcachefs: Fix null ptr deref in btree_path_lock_root() c7e78f7b0178 bcachefs: Ignore empty btree root journal entries
BUG: corrupted list in bch2_btree_and_journal_iter_exit fs 8 syz, C done 7 593d 639d 28/29 477d 0184dfa3b821 bcachefs: Fix journal_iter list corruption
WARNING in mark_buffer_dirty (6) fs -1 syz, C error 11669 477d 1044d 28/29 477d ca76bb226bf4 nilfs2: do not force clear folio if buffer is referenced
kernel BUG in bch2_bio_compress (2) fs -1 syz, C 5 525d 650d 28/29 477d 3d0b3b51c5ab bcachefs: Don't BUG_ON() when superblock feature wasn't set for compressed data
kernel BUG in bch2_btree_write_buffer_flush_locked fs -1 syz, C done 35 587d 667d 28/29 477d b3d82c2f2761 bcachefs: Guard against journal seq overflow
kernel BUG in bch2_btree_root_read fs -1 syz, C 9 568d 642d 28/29 477d 828552ca74a4 bcachefs: Kill bch2_bucket_alloc_new_fs()
KASAN: slab-out-of-bounds Write in __put_unused_fd fs 22 syz, C done 5 599d 603d 28/29 477d 0c0214df28f0 fanotify: Fix crash in fanotify_init(2)
possible deadlock in page_cache_ra_unbounded mm fs 4 syz, C error done 163 584d 1344d 28/29 539d 6f861765464f fs: Block writes to mounted block devices
KASAN: use-after-free Read in reiserfs_fill_super (3) fs 19 syz, C error done 47 646d 691d 28/29 590d fb6f20ecb121 reiserfs: The last commit
kernel BUG in bch2_fs_btree_write_buffer_exit fs -1 syz, C done 6138 646d 698d 28/29 606d ca43f73cd172 bcachefs: bch2_btree_write_buffer_flush_going_ro()
kernel BUG in bch2_journal_res_get (2) fs -1 syz, C 1710 646d 670d 28/29 606d ca43f73cd172 bcachefs: bch2_btree_write_buffer_flush_going_ro()
kernel BUG in bch2_fs_btree_cache_exit fs -1 syz, C done 2766 646d 677d 28/29 606d ca43f73cd172 bcachefs: bch2_btree_write_buffer_flush_going_ro()
kernel BUG in __bch2_btree_node_hash_insert fs -1 syz, C done 396 647d 655d 28/29 618d 0b6ec0c5ac6c bcachefs: Fix assertion pop in topology repair
KASAN: slab-out-of-bounds Read in journal_entry_dev_usage_to_text fs 17 syz, C done 33 648d 758d 28/29 618d 657d4282d8c4 bcachefs: Fix journal_entry_dev_usage_to_text() overrun
kernel BUG in __bkey_unpack_pos fs -1 syz, C 4 626d 665d 28/29 618d dc537189b5cf bcachefs: Fix validate_bset() repair path
kernel BUG in bch2_trans_node_iter_init fs -1 syz, C done 13 656d 670d 28/29 618d f8f1dde68681 bcachefs: Fix missing validation for bch_backpointer.level
kernel BUG in bch2_btree_path_level_init (2) fs -1 syz, C done 29 622d 672d 28/29 618d f8f1dde68681 bcachefs: Fix missing validation for bch_backpointer.level
kernel BUG in bch2_dev_btree_bitmap_mark fs -1 syz, C done 31 650d 674d 28/29 618d 27a036a0c3e7 bcachefs: Fix bch_member.btree_bitmap_shift validation
kernel BUG in bch2_bkey_pack_pos_lossy fs -1 syz, C 7 657d 669d 28/29 618d dc537189b5cf bcachefs: Fix validate_bset() repair path
kernel BUG in bch2_run_recovery_pass fs -1 syz, C done 17 651d 671d 28/29 618d 2642084f26b5 bcachefs: Allow for unknown key types in backpointers fsck
kernel BUG in bch2_ptr_swab fs -1 syz, C inconclusive 11 656d 673d 28/29 618d 840c2fbcc5cd bcachefs: Fix assertion pop in bch2_ptr_swab()
kernel BUG in __bch2_bkey_cmp_packed_format_checked fs -1 syz, C 4 671d 670d 28/29 623d d335bb3fd3a4 bcachefs: Ancient versions with bad bkey_formats are no longer supported
kernel BUG in bch2_bkey_cmp_packed fs -1 syz, C 8 657d 670d 28/29 623d d335bb3fd3a4 bcachefs: Ancient versions with bad bkey_formats are no longer supported
kernel BUG in bch2_inconsistent_error fs -1 syz, C 4 657d 669d 28/29 623d f9f0a5390dce bcachefs: Change OPT_STR max to be 1 less than the size of choices array
KASAN: slab-use-after-free Read in bch2_reconstruct_alloc fs 19 syz, C done 2 668d 672d 28/29 650d 8e910ca20e11 bcachefs: Fix UAF in bch2_reconstruct_alloc()
kernel BUG in bch2_bucket_alloc_trans (2) fs -1 syz, C done 103 651d 679d 28/29 650d 3fd27e9c57bf bcachefs: init freespace inited bits to 0 in bch2_fs_initialize
KASAN: null-ptr-deref Read in bch2_sb_set_upgrade_extra fs 11 syz, C 2 676d 672d 28/29 650d a25a83de45b4 bcachefs: fix null-ptr-deref in have_stripes()
general protection fault in btree_node_iter_and_journal_peek fs 2 syz, C 3 673d 696d 28/29 650d 3726a1970bd7 bcachefs: Fix NULL ptr dereference in btree_node_iter_and_journal_peek
UBSAN: shift-out-of-bounds in bch2_alloc_to_text fs -1 syz, C 29 662d 674d 28/29 650d 5c41f75d1b92 bcachefs: fix shift oob in alloc_lru_idx_fragmentation
UBSAN: shift-out-of-bounds in validate_sb_layout fs -1 syz, C done 7 664d 672d 28/29 650d 2045fc4295c4 bcachefs: Fix invalid shift in validate_sb_layout()
possible deadlock in bch2_replicas_entry_validate fs 4 syz, C done 9468 673d 692d 28/29 651d bf4baaa087e2 bcachefs: Fix lockdep splat in bch2_accounting_read
kernel BUG in bch2_btree_pos_to_text fs -1 syz, C 8 655d 704d 28/29 652d 0151d10a480d bcachefs: add check for btree id against max in try read node
kernel BUG in submit_bh_wbc (3) nilfs fs -1 syz, C done 18 674d 681d 28/29 652d 6ed469df0bfb nilfs2: fix kernel bug due to missing clearing of buffer delay flag
general protection fault in prt_str fs 2 syz, C done 2 694d 709d 28/29 652d a30f32222df2 bcachefs: Fix NULL pointer dereference in bch2_opt_to_text
general protection fault in bch2_alloc_read fs 2 syz, C 7 692d 699d 28/29 652d a319aeaebb6c bcachefs: Fix missing bounds checks in bch2_alloc_read()
UBSAN: shift-out-of-bounds in bch2_stripe_to_text fs -1 syz, C 3 704d 700d 28/29 652d 9f25dbe0bf91 bcachefs: Add missing validation for bch_stripe.csum_granularity_bits
UBSAN: shift-out-of-bounds in member_to_text fs -1 syz, C 12 679d 723d 28/29 652d c1bd21bb6518 bcachefs: Fix invalid shift in member_to_text()
WARNING in __bch2_fsck_err (2) fs -1 syz, C 3 692d 688d 28/29 671d 5612daafb764 bcachefs: Fix fsck warnings from bkey validation
general protection fault in bch2_fs_recovery fs 8 syz, C 10 697d 715d 28/29 673d 025c55a4c7f1 bcachefs: return err ptr instead of null in read sb clean
kernel BUG in vfs_get_tree fs -1 syz, C done 318 691d 735d 28/29 673d b29c30ab48e0 bcachefs: Fix incorrect IS_ERR_OR_NULL usage
KMSAN: uninit-value in bch2_bkey_cmp_packed_inlined fs 7 syz, C 7 696d 716d 28/29 673d 0696a18a8cc3 bcachefs: memset bounce buffer portion to 0 after key_sort_fix_overlapping
WARNING: suspicious RCU usage in bch2_snapshot_tree_oldest_subvol fs 4 syz, C 21 697d 708d 28/29 673d 39c3aad43f6f bcachefs: Hold read lock in bch2_snapshot_tree_oldest_subvol()
general protection fault in __copy_super fs 2 syz, C done 5 702d 704d 28/29 673d 40d40c6bea19 bcachefs: assign return error when iterating through layout
KASAN: slab-use-after-free Read in lockref_get_not_dead (2) fs 19 syz error 1 723d 719d 28/29 673d 4e32c25b58b9 libfs: fix get_stashed_dentry()
kernel BUG in bch2_lru_change (2) fs -1 syz, C 2 741d 740d 28/29 692d 9482f3b05332 bcachefs: avoid overflowing LRU_TIME_BITS for cached data lru
WARNING in bch2_fs_journal_stop fs -1 syz, C done 1463 739d 771d 28/29 692d 7f2de6947f92 bcachefs: Fix warning in bch2_fs_journal_stop()
kernel BUG in bch2_journal_replay fs -1 syz, C done 3 735d 807d 28/29 692d cab18be6957b bcachefs: Fix replay_now_at() assert
KMSAN: uninit-value in bch2_alloc_v4_validate fs 7 syz, C 5 736d 734d 28/29 692d 8ed823b19214 bcachefs: Fix compat issue with old alloc_v4 keys
WARNING in __bch2_fsck_err fs -1 syz, C 200 694d 740d 28/29 692d 075cabf324c3 bcachefs: Fix forgetting to pass trans to fsck_err()
KASAN: slab-out-of-bounds Write in bch2_dev_journal_init fs 21 syz, C 2 738d 738d 28/29 692d bdbdd4759f08 bcachefs: Fix missing validation in bch2_sb_journal_v2_validate()
WARNING in discard_new_inode fs -1 syz, C 3 740d 740d 28/29 692d 99c87fe0f584 bcachefs: fix incorrect i_state usage
kernel BUG in bch2_sort_keys fs -1 syz, C error 3 819d 843d 27/29 720d 5dfd3746b6c4 bcachefs: Fix needs_whiteout BUG_ON() in bkey_sort()
possible deadlock in bch2_gc_mark_key fs 4 syz, C done 86 744d 821d 27/29 727d 1841027c7de4 bcachefs: bch2_gc_btree() should not use btree_root_lock
WARNING in __replicas_deltas_realloc fs -1 syz, C 9 747d 770d 27/29 729d 1d16c605cc55 bcachefs: Disk space accounting rewrite
kernel BUG in bch2_fs_journal_stop fs -1 syz, C done 4370 743d 835d 27/29 729d 600b8be5e747 bcachefs: Change bch2_fs_journal_stop() BUG_ON() to warning
kernel BUG in __replicas_entry_idx fs -1 syz, C done unreliable 3 825d 828d 27/29 729d 8bb8d683a401 bcachefs: Delete journal-buf-sharded old style accounting
kernel panic: not locked: inodes NUM:NUM:NUM cached fs 2 syz, C 2 813d 824d 27/29 730d 385f0c05d670 bcachefs: kill key cache arg to bch2_assert_pos_locked()
BUG: MAX_LOCK_DEPTH too low! (4) fs -1 syz, C error 1364 744d 840d 27/29 731d 375476c41405 bcachefs: Add lockdep support for btree node locks
WARNING in bch2_fs_ioctl fs -1 syz, C done 36 744d 806d 27/29 734d d293ece10810 bcachefs: Fix shutdown ordering
kernel panic: bch_dev->ref underflow, last put: bch2_get_next_dev fs 2 syz, C done 21 824d 834d 27/29 734d 9667214b30ef bcachefs: Fix ref in trans_mark_dev_sbs() error path
WARNING: suspicious RCU usage in bch2_bucket_ref_update fs 4 syz, C done 5 779d 778d 27/29 743d 6f692b1672bd bcachefs: Fix RCU splat
BUG: sleeping function called from invalid context in bch2_printbuf_make_room fs 5 syz, C done 27 767d 765d 27/29 743d 737759fc098f bcachefs: Fix printbuf usage while atomic
UBSAN: shift-out-of-bounds in bch2_bkey_format_invalid (2) fs -1 syz, C 117 743d 808d 27/29 743d a0bd30e4ea9d bcachefs: Fix shift greater than integer size
WARNING: lock held when returning to user space in ns_ioctl fs 4 syz, C done 147 758d 770d 27/29 743d 280e36f0d5b9 nsfs: use cleanup guard
BUG: unable to handle kernel NULL pointer dereference in path_from_stashed fs 10 syz, C 23 764d 767d 27/29 743d f60d38cb02d0 pidfs: when time ns disabled add check for ioctl
kernel BUG in bch2_ioctl_fsck_online fs -1 syz, C done 3 799d 795d 26/29 774d 9bd01500e4d8 bcachefs: Fix freeing of error pointers
WARNING in __virt_to_phys (4) fs -1 syz, C 2 787d 783d 26/29 774d 9bd01500e4d8 bcachefs: Fix freeing of error pointers
UBSAN: shift-out-of-bounds in bch2_btree_node_read_done fs -1 syz, C 3 802d 825d 26/29 776d 9e7cfb35e266 bcachefs: Check for invalid btree IDs
INFO: task hung in journal_quiesce fs 1 syz 76 789d 817d 26/29 777d 89d21b69b4f8 bcachefs: Add missing bch2_journal_do_writes() call
WARNING in bch2_fs_read_write_early fs -1 syz, C 35 795d 803d 26/29 778d 1ba44217f825 bcachefs: delete_dead_snapshots() doesn't need to go RW
KASAN: slab-use-after-free Read in bch2_sb_errors_from_cpu fs 19 syz, C 2 796d 792d 26/29 778d 211c581de28e bcachefs: slab-use-after-free Read in bch2_sb_errors_from_cpu
UBSAN: shift-out-of-bounds in bch2_blacklist_entries_gc fs -1 syz, C 45 792d 792d 26/29 778d 472237b69d07 bcachefs: Fix shift-out-of-bounds in bch2_blacklist_entries_gc
kernel BUG in bch2_journal_res_get fs -1 syz, C 2 808d 804d 26/29 778d dbf4d79b7fc7 bcachefs: Fix early init error path in journal code
kernel BUG in bch2_lru_change fs -1 syz, C done 4 795d 811d 26/29 778d cff07e2739d8 bcachefs: Guard against overflowing LRU_TIME_BITS
WARNING: kmalloc bug in __snapshot_t_mut fs -1 syz, C done 10 788d 819d 26/29 778d 64cd7de998f3 bcachefs: Fix kmalloc bug in __snapshot_t_mut
kernel BUG in gc_bucket fs -1 syz, C done 221 812d 816d 26/29 778d 9432e90df1b8 bcachefs: Check for invalid bucket from bucket_gen(), gc_bucket()
UBSAN: shift-out-of-bounds in bch2_sb_dev_has_data fs -1 syz, C done 15 836d 834d 25/29 807d bcfbaea8e547 bcachefs: Fix shift overflows in replicas.c
kernel panic: not locked: inodes NUM:ADDR:NUM cached fs 2 syz, C 2 834d 830d 25/29 807d 6ce26ad376bd bcachefs: Fix missing parens in drop_locks_do()
kernel BUG in bch2_btree_iter_verify_entry_exit fs -1 syz, C done 3 827d 832d 25/29 807d 765b8cb8acab bcachefs: Check for subvolues with bogus snapshot/inode fields
kernel BUG in bch2_checksum fs -1 syz, C done 9 824d 834d 25/29 807d 6b74fdcc8e25 bcachefs: bch2_checksum() returns 0 for unknown checksum type
kernel BUG in cpu_replicas_add_entry fs -1 syz, C done 11 818d 836d 25/29 807d 5fa421448d1f bcachefs: Fix bogus verify_replicas_entry() assert
KASAN: stack-out-of-bounds Read in __bch2_encrypt_bio fs 17 syz, C done 2 837d 834d 25/29 807d 2ba24864d2f6 bcachefs: Fix stack oob in __bch2_encrypt_bio()
UBSAN: shift-out-of-bounds in bch2_btree_lost_data fs -1 syz, C done 3 833d 831d 25/29 807d f108ddd467b5 bcachefs: Fix shift overflow in btree_lost_data()
kernel panic: bch_dev->ref underflow, last put: bch2_trigger_alloc fs 2 syz, C done 6 824d 835d 25/29 807d 9667214b30ef bcachefs: Fix ref in trans_mark_dev_sbs() error path
general protection fault in __bch2_insert_snapshot_whiteouts fs 8 syz, C done 65 822d 834d 25/29 807d 6d48e61364ae bcachefs: Add missing guard in bch2_snapshot_has_children()
KASAN: slab-use-after-free Read in evict_inodes fs 19 syz, C done 2 839d 835d 25/29 807d d93ff5fa40b9 bcachefs: Fix race path in bch2_inode_insert()
KMSAN: uninit-value in bch2_dirent_invalid fs 7 syz, C 239 807d 835d 25/29 807d 2195b755ebd2 bcachefs: Fix unsafety in bch2_dirent_name_bytes()
kernel BUG in bch2_fs_recovery fs -1 syz, C done done 161 839d 845d 25/29 807d 7ffec9ccdc6a bcachefs: don't free error pointers
UBSAN: shift-out-of-bounds in read_one_super fs -1 syz, C done 31 813d 842d 25/29 812d 71dac2482ad3 bcachefs: BCH_SB_LAYOUT_SIZE_BITS_MAX
WARNING: kmalloc bug in bch2_dev_buckets_resize fs -1 syz, C 17 813d 844d 25/29 812d db42549d402c bcachefs: Add a better limit for maximum number of buckets
WARNING in __virt_to_phys (3) fs -1 syz, C 447 812d 845d 25/29 812d 7ffec9ccdc6a bcachefs: don't free error pointers
BUG: unable to handle kernel paging request in bch2_fs_btree_key_cache_exit fs 8 syz, C 1002 812d 845d 25/29 812d b30b70ad8bff bcachefs: Fix early error path in bch2_fs_btree_key_cache_exit()
UBSAN: shift-out-of-bounds in __bch2_bkey_invalid fs -1 syz, C done 6 817d 843d 25/29 812d 2bb9600d5d47 bcachefs: Guard against unknown k.k->type in __bkey_invalid()
KASAN: slab-out-of-bounds Read in bch2_sb_downgrade_to_text fs 17 syz, C done 32 829d 842d 25/29 812d 692aa7a54b2b bcachefs: Fix sb_field_downgrade validation
KASAN: slab-out-of-bounds Read in bch2_sb_clean_to_text fs 17 syz, C done 3 834d 843d 25/29 812d f39055220f6f bcachefs: Add missing validation for superblock section clean
kernel BUG in bch2_alloc_v4_invalid fs -1 syz, C error 3 820d 843d 25/29 812d 6b8cbfc3db75 bcachefs: Fix assert in bch2_alloc_v4_invalid()
KASAN: slab-out-of-bounds Read in bch2_varint_decode_fast fs 17 syz, C 583 812d 845d 25/29 812d 4a8521b6bb81 bcachefs: Inodes need extra padding for varint_decode_fast()
UBSAN: shift-out-of-bounds in bch2_bkey_format_invalid fs -1 syz, C 45 815d 840d 25/29 812d 61692c7812ab bcachefs: bch2_bkey_format_field_overflows()
UBSAN: shift-out-of-bounds in rewrite_old_nodes_pred fs -1 syz, C done 3 843d 843d 25/29 812d 0ec5b3b7ccfc bcachefs: Fix shift-by-64 in bformat_needs_redo()
kernel BUG in bch2_btree_node_read_done fs -1 syz, C error 5 843d 845d 25/29 812d a2ddaf965f6a bcachefs: bucket_pos_to_bp_noerror()
INFO: rcu detected stall in rtnl_newlink (4) sctp fs 1 syz, C error 9 833d 909d 25/29 826d b1f532a3b1e6 batman-adv: Avoid infinite loop trying to resize local TT
KASAN: slab-use-after-free Read in __fput (2) fs 19 syz, C done 6 850d 855d 25/29 826d 4efaa5acf0a1 epoll: be better about file lifetimes
general protection fault in __ep_remove fs 2 syz, C 1 871d 870d 25/29 826d 4efaa5acf0a1 epoll: be better about file lifetimes
WARNING: ODEBUG bug in bdev_super_lock (2) fs -1 syz, C done 3 863d 861d 25/29 826d 22650a99821d fs,block: yield devices early
kernel BUG at fs/inode.c:LINE! (2) fs -1 syz, C done unreliable 322 841d 2189d 25/29 827d 319c15174757 epoll: take epitem list out of struct file
WARNING in stashed_dentry_prune (2) fs -1 syz, C done 54 853d 861d 25/29 830d 9d9539db8638 pidfs: remove config option
WARNING in stashed_dentry_prune fs -1 syz, C done 20 897d 896d 25/29 867d 9d9539db8638 pidfs: remove config option
WARNING: ODEBUG bug in bdev_super_lock fs -1 syz, C 3 871d 881d 25/29 868d 59a55a63c246 fs,block: get holder during claim
KASAN: slab-use-after-free Read in sys_io_cancel fs 19 syz, C done 894 869d 906d 25/29 869d 28468cbed92e Revert "fs/aio: Make io_cancel() generate completions again"
BUG: sleeping function called from invalid context in __getblk_gfp fs 5 syz, C error done 3673 973d 1367d 25/29 869d f123dc86388c sysv: don't call sb_bread() with pointers_lock held
possible deadlock in reiserfs_dirty_inode fs 4 syz, C done done 519 939d 1367d 25/29 889d 6f861765464f fs: Block writes to mounted block devices
BUG: sleeping function called from invalid context in __bread_gfp fs 5 syz, C error done 359 965d 1366d 25/29 889d 6f861765464f fs: Block writes to mounted block devices
INFO: task hung in reiserfs_sync_fs fs 1 syz, C error done 22 965d 1344d 25/29 889d 6f861765464f fs: Block writes to mounted block devices
general protection fault in __fget_files (2) fs 2 syz, C done done 1 972d 968d 25/29 917d 6f861765464f fs: Block writes to mounted block devices
BUG: unable to handle kernel paging request in reiserfs_readdir_inode fs 19 syz, C error done 11 963d 1329d 25/29 917d 6f861765464f fs: Block writes to mounted block devices
kernel BUG in entry_points_to_object fs -1 syz, C done done 21 963d 1008d 25/29 917d 6f861765464f fs: Block writes to mounted block devices
KASAN: vmalloc-out-of-bounds Read in cleanup_bitmap_list fs 17 syz, C error done 100 966d 1398d 25/29 922d 6f861765464f fs: Block writes to mounted block devices
KASAN: use-after-free Read in set_de_name_and_namelen fs 19 syz, C error done 15 969d 1370d 25/29 925d 6f861765464f fs: Block writes to mounted block devices
BUG: unable to handle kernel NULL pointer dereference in reiserfs_find_entry fs 19 syz, C error done 25 972d 1408d 25/29 936d 6f861765464f fs: Block writes to mounted block devices
KASAN: use-after-free Read in reiserfs_get_unused_objectid fs 19 syz, C inconclusive done 3 974d 1247d 25/29 938d 6f861765464f fs: Block writes to mounted block devices
possible deadlock in chown_common fs 4 syz, C error done 22 947d 1417d 25/29 939d 6f861765464f fs: Block writes to mounted block devices
kernel BUG in balance_leaf fs -1 syz, C error done 16 979d 1330d 25/29 939d 6f861765464f fs: Block writes to mounted block devices
possible deadlock in pipe_write fs 4 syz, C inconclusive 181 942d 1620d 25/29 939d 055ca8355991 fs/pipe: Fix lockdep false-positive in watchqueue pipe_write()
kernel BUG in direntry_check_right fs -1 syz, C done done 2 978d 1021d 25/29 939d 6f861765464f fs: Block writes to mounted block devices
KASAN: slab-out-of-bounds Read in search_by_key (2) fs 17 syz, C 4435 961d 1392d 25/29 939d dd8f87f21dc3 reiserfs: fix uninit-value in comp_keys
WARNING in pagemap_scan_pmd_entry fs -1 syz, C inconclusive 48 993d 1015d 25/29 949d 0dff1b407def mm/pagemap: fix ioctl(PAGEMAP_SCAN) on vma check
WARNING in page_copy_sane fs mm -1 syz, C done 3 1077d 1074d 25/29 980d a08c7193e4f1 mm/filemap: remove hugetlb special casing in filemap.c
possible deadlock in inode_add_bytes fs 4 syz, C done 124 1137d 1135d 23/29 1049d 509f006932de shmem: fix quota lock nesting in huge hole handling
INFO: task hung in pipe_release (4) fs 1 syz, C done 51 1141d 1141d 23/29 1049d 0f71c9caf267 udp: Fix __ip_append_data()'s handling of MSG_SPLICE_PAGES
KASAN: slab-use-after-free Read in test_bdev_super_fc fs 19 syz, C done 7 1116d 1119d 23/29 1049d aca740cecbe5 fs: open block device after superblock creation
general protection fault in splice_to_socket fs 2 syz, C done 4 1168d 1171d 23/29 1063d ca2d49f77ce4 splice, net: Fix splice_to_socket() to handle pipe bufs larger than a page
KASAN: null-ptr-deref Write in get_block (2) fs 12 syz, C error 11 1158d 1192d 23/29 1063d ea2b62f30589 fs/sysv: Null check to prevent null-ptr-deref bug
KASAN: null-ptr-deref Read in ida_free (3) fs 11 syz, C error 4 1250d 1246d 22/29 1175d cb2239c198ad fs: drop peer group ids under namespace lock
KMSAN: uninit-value in ondemand_readahead fs mm 7 syz, C 221 1273d 1436d 22/29 1175d 3e35102666f8 fs/cramfs/inode.c: initialize file_ra_state
INFO: task hung in write_cache_pages (2) mm fs 1 syz, C done 36 1203d 1274d 22/29 1175d fb3592c41a44 migrate_pages: fix deadlock in batched migration
KMSAN: uninit-value in vfs_write fs 7 syz, C 3 1299d 1268d 22/29 1175d 2b4c99f7d9a5 can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write
KASAN: use-after-free Read in mas_next_nentry fs mm 19 syz, C error done 343 1388d 1582d 22/29 1279d 59f2f4b8a757 fs/userfaultfd: Fix maple tree iterator in userfaultfd_unregister()
INFO: rcu detected stall in sys_lsetxattr fs 1 syz, C done 2 1591d 1590d 22/29 1279d 0014edaedfd8 fs: unset MNT_WRITE_HOLD on failure
INFO: rcu detected stall in sys_setxattr (2) fs 1 syz, C done 3 1591d 1590d 22/29 1279d 0014edaedfd8 fs: unset MNT_WRITE_HOLD on failure
general protection fault in __dentry_path (2) fs 8 syz, C error 174 1584d 1595d 22/29 1279d 5c697c367a66 KVM: Initialize debugfs_dentry when a VM is created to avoid NULL deref
WARNING in mntput_no_expire (3) fs -1 syz, C inconclusive 29 1329d 1745d 22/29 1279d a91714312eb1 percpu_ref_init(): clean ->percpu_count_ref on failure
KASAN: slab-out-of-bounds Read in __fscache_acquire_volume fs mm 17 syz, C done done 1 1458d 1458d 22/29 1279d 9f0933ac026f fscache: fix OOB Read in __fscache_acquire_volume
KASAN: null-ptr-deref Write in io_file_get_normal io-uring fs 12 syz, C done 107 1525d 1609d 22/29 1279d d5361233e9ab io_uring: drop the old style inflight file tracking
memory leak in iovec_from_user fs io-uring 3 syz, C 1 1597d 1593d 22/29 1279d 323b190ba2de io_uring: free iovec if file assignment fails
BUG: unable to handle kernel paging request in truncate_inode_partial_folio fs mm 8 syz, C error 4 1481d 1520d 22/29 1279d 84ac013046cc secretmem: fix unhandled fault in truncate
general protection fault in legacy_parse_param fs 21 syz, C done 20 1619d 1881d 22/29 1279d ecff30575b5a LSM: general protection fault in legacy_parse_param
KASAN: use-after-free Read in io_rsrc_node_ref_zero fs 19 syz, C done 3 1647d 1647d 22/29 1279d 80912cef18f1 io_uring: disallow modification of rsrc_data during quiesce
KASAN: use-after-free Read in add_wait_queue fs io-uring 19 syz, C done done 13 1612d 1618d 22/29 1279d d89a4fac0fbc io_uring: fix assuming triggered poll waitqueue is the single poll
BUG: unable to handle kernel NULL pointer dereference in io_do_iopoll fs io-uring 10 syz, C done 3 1563d 1562d 22/29 1279d aa184e8671f0 io_uring: don't attempt to IOPOLL for MSG_RING requests
possible deadlock in snd_hrtimer_callback (2) fs 4 syz, C inconclusive 582 1484d 1750d 22/29 1279d 96b097091c66 ALSA: pcm: Use deferred fasync helper 95cc637c1afd ALSA: timer: Use deferred fasync helper
BUG: unable to handle kernel paging request in eventfd_ctx_put fs 8 syz, C done 7 1404d 1432d 22/29 1279d 7353633814f6 KVM: x86/xen: Fix eventfd error handling in kvm_xen_eventfd_assign()
KMSAN: uninit-value in tomoyo_path_chown fs 7 syz, C 13763 1436d 1437d 22/29 1279d f52d74b190f8 open: always initialize ownership fields
KASAN: use-after-free Read in filp_close io-uring fs 19 syz, C done 17 1321d 1549d 22/29 1279d 40a1926022d1 fix the breakage in close_fd_get_file() calling conventions change
KASAN: use-after-free Read in mas_next_entry fs mm 19 syz, C error 16 1390d 1403d 22/29 1279d 59f2f4b8a757 fs/userfaultfd: Fix maple tree iterator in userfaultfd_unregister()
WARNING: still has locks held in io_ring_submit_lock fs io-uring 4 syz, C done 3 1564d 1564d 22/29 1279d e7637a492b9f io_uring: fix locking state for empty buffer group
general protection fault in io_uring_register fs io-uring 2 syz done 1 1812d 1808d 20/29 1632d 41d3a6bd1d37 io_uring: pin SQPOLL data before unlocking ring lock
KASAN: use-after-free Write in io_queue_worker_create fs io-uring 22 syz, C unreliable 132 1715d 1724d 20/29 1632d 71a85387546e io-wq: check for wq exit after adding new worker task_work e47498afeca9 io-wq: remove spurious bit clear on task_work addition
INFO: task hung in io_uring_del_tctx_node io-uring fs 1 syz, C unreliable 37 1634d 1798d 20/29 1632d 8bab4c09f24e io_uring: allow conditional reschedule for intensive iterators
KASAN: use-after-free Write in io_submit_one fs 22 syz, C done 11 1719d 1757d 20/29 1632d 75feae73a280 block: fix single bio async DIO error handling
WARNING in inc_nlink (2) fs -1 syz, C inconclusive done 21 1632d 1969d 20/29 1632d 97f044f690ba fuse: don't increment nlink in link()
possible deadlock in io_worker_cancel_cb io-uring fs 4 syz, C done 9 1713d 1717d 20/29 1632d d800c65c2d4e io-wq: drop wqe lock before creating new worker
INFO: task hung in io_uring_try_cancel_requests fs io-uring 1 syz, C error 41 1721d 1763d 20/29 1632d f75d118349be io_uring: harder fdinfo sq/cq ring iterating
WARNING in signalfd_cleanup fs io-uring -1 syz, C done 201 1679d 1694d 20/29 1632d 791f3465c4af io_uring: fix UAF due to missing POLLFREE handling
INFO: rcu detected stall in newstat fs usb 1 syz, C unreliable done 4 1726d 1849d 20/29 1632d 476db72e5219 media: mceusb: return without resubmitting URB in case of -EPROTO error.
INFO: task hung in io_uring_cancel_generic (2) io-uring fs 1 syz, C done 97 1716d 1743d 20/29 1632d 78a780602075 io_uring: ensure task_work gets run as part of cancelations
INFO: rcu detected stall in io_wqe_worker (2) fs io-uring 1 syz, C done 2 1764d 1764d 20/29 1632d c5e0321e43de Revert "devlink: Remove not-executed trap policer notifications"
possible deadlock in io_poll_double_wake (3) io-uring fs 4 syz, C error done 703 1688d 1961d 20/29 1632d aa43477b0402 io_uring: poll rework
INFO: task hung in io_wqe_worker fs io-uring 1 syz, C unreliable 3 1774d 1770d 20/29 1632d 1d5f5ea7cb7d io-wq: remove worker to owner tw dependency
KASAN: null-ptr-deref Read in filp_close (2) fs 19 syz, C 3 1871d 1979d 20/29 1750d 3b0462726e7e cgroup: verify that source is a string 9b5b872215fe file: fix close_range() for unshare+cloexec
memory leak in io_sqe_buffers_register fs 3 syz, C 2 1944d 1944d 20/29 1751d bb6659cc0ad3 io_uring: Fix memory leak in io_sqe_buffers_register()
WARNING in io_link_timeout_fn fs io-uring -1 syz, C done 2 1932d 1932d 20/29 1751d 447c19f3b507 io_uring: fix ltout double free on completion race
KASAN: out-of-bounds Read in leaf_paste_entries fs 17 syz, C inconclusive 8 1782d 2013d 20/29 1751d 13d257503c09 reiserfs: check directory items on read from disk
general protection fault in io_commit_cqring (2) io-uring fs 12 syz, C done 82 1963d 1976d 20/29 1751d 51520426f4bc io_uring: handle setup-failed ctx in kill_timeouts
INFO: task hung in io_sq_thread_park (2) fs io-uring 1 syz done 2 1873d 1869d 20/29 1751d 46fee9ab02cb io_uring: remove double poll entry on arm failure
WARNING in __percpu_ref_exit (2) fs -1 syz, C error done 31 1752d 1990d 20/29 1751d a298232ee6b9 io_uring: fix link timeout refs
INFO: task hung in __io_uring_cancel fs io-uring 1 syz, C done 5 1889d 1955d 20/29 1751d 28090c133869 io_uring: fix work_exit sqpoll cancellations
memory leak in create_io_worker io-uring fs 3 syz, C 5 1774d 1813d 20/29 1751d 66e70be72288 io-wq: fix memory leak in create_io_worker()
WARNING in io_wqe_enqueue io-uring fs -1 syz, C done 13 1909d 1909d 20/29 1751d e6ab8991c5d0 io_uring: fix false WARN_ONCE
WARNING in io_poll_double_wake fs io-uring -1 syz, C done done 1124 1852d 1954d 20/29 1751d a890d01e4ee0 io_uring: fix poll requests leaking second poll entries
general protection fault in cdev_del (2) fs 11 syz, C error 45 1884d 2162d 20/29 1751d 8a12f8836145 net: hso: fix null-ptr-deref during tty device unregistration 0a360e8b65d6 tty: n_gsm: check error while registering tty devices
INFO: task hung in io_wq_put_and_exit io-uring fs 1 syz, C unreliable 628 1752d 1813d 20/29 1751d 3b33e3f4a6c0 io-wq: fix silly logic error in io_task_work_match()
possible deadlock in do_fcntl usb fs 4 syz, C done 245 1827d 2158d 20/29 1751d f671a691e299 fcntl: fix potential deadlocks for &fown_struct.lock
BUG: unable to handle kernel NULL pointer dereference in kiocb_done fs io-uring 10 syz, C unreliable done 3 1819d 1818d 20/29 1751d b8ce1b9d25cc io_uring: don't submit half-prepared drain request
WARNING in io_try_cancel_userdata fs io-uring -1 syz unreliable 4 1825d 1829d 20/29 1751d dadebc350da2 io_uring: fix io_try_cancel_userdata race for iowq
KMSAN: kernel-infoleak in copy_page_to_iter (2) fs mm 9 syz, C 2099 1846d 2904d 20/29 1751d ce3aba43599f ext4: fix kernel infoleak via ext4_extent_header
WARNING in mntput_no_expire (2) fs -1 syz, C done 68 1759d 1973d 20/29 1751d 7d01ef7585c0 Make sure nd->path.mnt and nd->path.dentry are always valid pointers
general protection fault in __io_file_supports_nowait fs io-uring 2 syz, C done done 13 1816d 1821d 20/29 1751d c6d3d9cbd659 io_uring: fix queueing half-created requests
KASAN: use-after-free Read in bdev_evict_inode fs 19 syz, C unreliable 1305 1835d 1838d 20/29 1751d 889c05cc5834 block: ensure the bdi is freed after inode_detach_wb
WARNING in pvr2_i2c_core_done usb fs -1 syz, C error 5780 1872d 2527d 20/29 1751d f8194e5e63fd media: pvrusb2: fix warning in pvr2_i2c_core_done
INFO: task hung in io_uring_cancel_generic io-uring fs 1 syz, C unreliable 151 1751d 1872d 20/29 1751d 1b48773f9fd0 io_uring: fix io_drain_req()
KASAN: use-after-free Read in __d_alloc (2) fs 19 syz, C unreliable 6774 1793d 1836d 20/29 1751d 0766ec82e5fb namei: Fix use after free in kern_path_locked
possible deadlock in f_getown fs 4 syz, C done done 164 1829d 2158d 20/29 1751d f671a691e299 fcntl: fix potential deadlocks for &fown_struct.lock
possible deadlock in snd_hrtimer_callback fs 4 syz, C done 571 1752d 1859d 20/29 1751d f671a691e299 fcntl: fix potential deadlocks for &fown_struct.lock
possible deadlock in io_sq_thread_finish fs 4 syz, C unreliable done 4 1996d 1998d 20/29 1751d f4e61f0c9add x86/kvm: Fix broken irq restoration in kvm_wait
WARNING in io_rsrc_node_switch io-uring fs -1 syz, C done 174 1936d 1945d 20/29 1751d 47b228ce6f66 io_uring: fix unchecked error in switch_start()
WARNING in io_wq_submit_work (2) io-uring fs -1 syz, C done done 52 1810d 1813d 20/29 1751d 713b9825a4c4 io-wq: fix cancellation on create-worker failure
KASAN: stack-out-of-bounds Read in iov_iter_revert fs io-uring 17 syz, C error 14 1823d 1840d 20/29 1751d 89c2b3b74918 io_uring: reexpand under-reexpanded iters
WARNING in internal_create_group fs -1 syz, C inconclusive 20 1816d 1869d 20/29 1751d b1a811633f73 block: nbd: add sanity check for first_minor
kernel BUG in remove_inode_hugepages fs mm -1 syz, C unreliable 3 1836d 1836d 20/29 1751d c7b1850dfb41 hugetlb: don't pass page cache pages to restore_reserve_on_error
WARNING in io_wq_put fs io-uring -1 syz, C unreliable 3 1985d 1996d 20/29 1751d f5d2d23bf0d9 io-wq: fix race around pending work on teardown
WARNING in io_uring_setup (2) fs io-uring -1 syz, C done 40 1936d 1945d 20/29 1751d 47b228ce6f66 io_uring: fix unchecked error in switch_start()
KASAN: use-after-free Read in idr_for_each (2) io-uring fs 19 syz, C error done 86 1989d 2151d 20/29 1955d 61cf93700fe6 io_uring: Convert personality_idr to XArray
INFO: task hung in io_uring_cancel_task_requests fs io-uring 1 syz, C 305 1989d 2024d 20/29 1965d 34343786ecc5 io_uring: unpark SQPOLL thread for cancelation
INFO: task hung in io_sq_thread_park fs io-uring 1 syz, C unreliable 263 2000d 2005d 20/29 1965d 3ebba796fa25 io_uring: ensure that SQPOLL thread is started for exit
memory leak in io_submit_sqes (2) fs io-uring 3 syz, C 1 2003d 2002d 20/29 1965d f01272541d2c io-wq: ensure all pending work is canceled on exit
possible deadlock in io_poll_double_wake (2) io-uring fs 4 syz, C error error 431 1965d 2158d 20/29 1965d 1c3b3e6527e5 io_uring: ignore double poll add on the same waitqueue head
inconsistent lock state in io_dismantle_req fs io-uring 4 syz, C 2 2032d 2032d 20/29 1965d 9ae1f8dd372e io_uring: fix inconsistent lock state
WARNING in io_uring_flush fs io-uring -1 syz, C unreliable 10 2040d 2049d 19/29 1996d 4325cb498cb7 io_uring: fix uring_flush in exit_files() warning
KASAN: use-after-free Read in search_by_entry_key fs 19 syz, C done 3 2144d 2148d 19/29 1996d d24396c5290b reiserfs: add check for an invalid ih_entry_count
WARNING in percpu_ref_kill_and_confirm (2) fs -1 syz, C done 71 2071d 2079d 19/29 1996d 9faadcc8abe4 io_uring: fix double io_uring free
WARNING in io_ring_ctx_wait_and_kill fs -1 syz, C done 9 2050d 2051d 19/29 1996d 06585c497b55 io_uring: do sqo disable on install_fd error
INFO: task hung in __io_uring_files_cancel io-uring fs 1 syz, C done 30 2037d 2104d 19/29 1996d bee749b187ac io_uring: fix files cancellation
KASAN: use-after-free Read in reiserfs_fill_super fs 19 syz, C error done 2 2090d 2088d 19/29 1996d d24396c5290b reiserfs: add check for an invalid ih_entry_count
BUG: unable to handle kernel paging request in percpu_ref_exit fs 8 syz, C done 3 2057d 2055d 19/29 1996d 3e2224c5867f io_uring: Fix return value from alloc_fixed_file_ref_node
general protection fault in io_disable_sqo_submit fs io-uring 2 syz, C done 124 2047d 2051d 19/29 1996d b4411616c26f io_uring: fix null-deref in io_disable_sqo_submit
WARNING in io_uring_cancel_task_requests io-uring fs -1 syz done 69 2032d 2036d 19/29 1996d 70b2c60d3797 io_uring: fix sqo ownership false positive warning
inconsistent lock state in io_file_data_ref_zero fs 4 syz, C done 7152 2078d 2102d 19/29 1996d ac0648a56c1f io_uring: use bottom half safe lock for fixed file data
BUG: corrupted list in io_file_get fs io-uring 8 syz, C done 3 2036d 2036d 19/29 1996d f609cbb8911e io_uring: fix list corruption for splice file_get
possible deadlock in send_sigio (2) fs 4 syz, C done done 40 2065d 2177d 19/29 1996d 8d1ddb5e7937 fcntl: Fix potential deadlock in send_sig{io, urg}()
kernel BUG at fs/reiserfs/prints.c:LINE! fs -1 syz, C done done 5 2086d 2165d 19/29 1996d d24396c5290b reiserfs: add check for an invalid ih_entry_count
memory leak in generic_parse_monolithic fs 3 syz, C 11 2086d 2112d 19/29 1996d 4cb682964706 afs: Fix memory leak when mounting with multiple source parameters
KASAN: slab-out-of-bounds Write in record_print_text fs 21 syz, C done unreliable 17 2036d 2039d 19/29 1996d 08d60e599954 printk: fix string termination for record_print_text()
BUG: unable to handle kernel NULL pointer dereference in __lookup_slow fs 10 syz, C inconclusive done 3 2018d 2158d 19/29 1996d d24396c5290b reiserfs: add check for an invalid ih_entry_count
possible deadlock in send_sigurg (2) fs 4 syz, C done 25 2083d 2133d 19/29 1996d 8d1ddb5e7937 fcntl: Fix potential deadlock in send_sig{io, urg}()
WARNING in io_disable_sqo_submit fs -1 syz, C done 9 2041d 2049d 19/29 1996d 6b393a1ff174 io_uring: fix false positive sqo warning on flush
KASAN: null-ptr-deref Read in filp_close fs 11 syz, C done 9 2076d 2078d 19/29 1996d fec8a6a69103 close_range: unshare all fds for CLOSE_RANGE_UNSHARE | CLOSE_RANGE_CLOEXEC 6abc20f8f879 selftests/core: add regression test for CLOSE_RANGE_UNSHARE | CLOSE_RANGE_CLOEXEC
KASAN: null-ptr-deref Write in kthread_use_mm io-uring fs 12 syz, C done 2 2124d 2123d 15/29 2105d 4b70cf9dea4c io_uring: ensure consistent view of original task ->mm from SQPOLL
general protection fault in io_uring_show_cred fs 2 syz, C done 4 2120d 2120d 15/29 2105d 6b47ab81c9a9 io_uring: use correct pointer for io_uring_show_cred()
KASAN: use-after-free Write in io_submit_sqes fs io-uring 22 syz, C error 2 2123d 2122d 15/29 2105d cb8a8ae31074 io_uring: drop req/tctx io_identity separately
INFO: task can't die in corrupted fs 1 syz, C done 4 2123d 2149d 15/29 2109d 86f33603f8c5 f2fs: handle errors of f2fs_get_meta_page_nofail
WARNING in unlock_new_inode fs -1 syz, C done 76 2146d 3051d 15/29 2109d 8859bf2b1278 reiserfs: only call unlock_new_inode() if I_NEW
memory leak in reiserfs_parse_options fs 3 syz, C 4 2174d 2369d 15/29 2109d e9d4709fcc26 reiserfs: Fix memory leak in reiserfs_parse_options()
general protection fault in percpu_ref_exit fs 2 syz, C done 3 2144d 2148d 15/29 2109d 7ea6bf2e6c40 percpu_ref: don't refer to ref->data if it isn't allocated
KASAN: use-after-free Read in fscache_alloc_cookie fs 19 syz done 1 2162d 2161d 15/29 2109d 1d0e850a49a5 afs: Fix cell removal
KASAN: use-after-free Read in io_wqe_worker fs io-uring 19 syz, C error 2 2159d 2160d 15/29 2109d c4068bf898dd io-wq: fix use-after-free in io_wq_worker_running
inconsistent lock state in xa_destroy io-uring fs 4 syz, C 755 2147d 2148d 15/29 2109d ca6484cd308a io_uring: no need to call xa_destroy() on empty xarray
INFO: task hung in io_uring_flush io-uring fs 1 syz, C done done 11 2200d 2207d 15/29 2109d b7ddce3cbf01 io_uring: fix cancel of deferred reqs with ->files
general protection fault in open_xa_dir fs 2 syz, C done 3 2145d 2156d 15/29 2109d c2bb80b8bdd0 reiserfs: Fix oops during mount
KASAN: use-after-free Write in io_wq_worker_running io-uring fs 22 syz, C error 14 2152d 2179d 15/29 2109d c4068bf898dd io-wq: fix use-after-free in io_wq_worker_running
KMSAN: uninit-value in __fget_light (2) fs 7 syz, C 18 2126d 2135d 15/29 2109d d5e4d0a5e692 inet_diag: validate INET_DIAG_REQ_PROTOCOL attribute
possible deadlock in mnt_want_write fs 4 syz, C done done 662 2148d 2956d 15/29 2109d 146d62e5a586 ovl: detect overlapping layers
general protection fault in io_poll_double_wake (2) fs io-uring 2 syz, C error 2 2159d 2158d 15/29 2135d 8706e04ed7d6 io_uring: always delete double poll wait entry on match
memory leak in do_eventfd fs 3 syz, C 2 2193d 2289d 15/29 2147d f65886606c2d KVM: fix memory leak in kvm_io_bus_unregister_dev()
possible deadlock in __io_queue_deferred fs io-uring 4 syz, C error 1 2209d 2207d 15/29 2170d 7271ef3a93a8 io_uring: fix recursive completion locking on oveflow flush
WARNING in __kernel_read fs -1 syz, C done 60 2177d 2235d 15/29 2170d a39c46067c84 net/9p: validate fds in p9_fd_open
general protection fault in cdev_del usb fs 2 syz, C 315 2179d 2647d 15/29 2170d e911e99a0770 usb: hso: check for return value in hso_serial_common_create()
BUG: unable to handle kernel NULL pointer dereference in loop_rw_iter io-uring fs 10 syz, C done 24 2196d 2207d 15/29 2170d 2dd2111d0d38 io_uring: Fix NULL pointer dereference in loop_rw_iter()
KASAN: use-after-free Read in io_async_task_func io-uring fs 19 syz error 1 2207d 2206d 15/29 2170d 6d816e088c35 io_uring: hold 'ctx' reference around task_work queue + execute
WARNING in drop_nlink fs -1 syz, C done error 1 2317d 2313d 15/29 2170d facb03dddec0 fs/minix: don't allow getting deleted inodes
KASAN: use-after-free Read in path_init (2) fs 19 syz, C done 29 2204d 2206d 15/29 2170d 24fb33d40d60 fix breakage in do_rmdir()
WARNING in __kernel_write fs -1 syz, C done 522 2219d 2239d 15/29 2170d a39c46067c84 net/9p: validate fds in p9_fd_open
KMSAN: uninit-value in get_block fs 7 syz, C 13 2286d 2289d 15/29 2170d 270ef41094e9 fs/minix: reject too-large maximum file size
KASAN: null-ptr-deref Write in get_block fs 12 syz, C done 101 2236d 2349d 15/29 2170d da27e0a0e5f6 fs/minix: check return value of sb_getblk()
memory leak in io_submit_sqes fs io-uring 3 syz, C 2 2187d 2206d 15/29 2170d a36da65c4656 io_uring: fail poll arm on queue proc failure
KASAN: use-after-free Write in get_block fs 22 syz, C inconclusive inconclusive 12 2252d 2302d 15/29 2170d 270ef41094e9 fs/minix: reject too-large maximum file size
general protection fault in io_poll_double_wake io-uring fs 2 syz, C done 8 2174d 2202d 15/29 2170d d4e7cd36a90e io_uring: sanitize double poll handling
possible deadlock in io_timeout_fn io-uring fs 4 syz, C done 4 2205d 2207d 15/29 2170d 51a4cc112c7a io_uring: defer file table grabbing request cleanup for locked requests
possible deadlock in lock_trace (3) fs 4 syz inconclusive done 69 2337d 2472d 15/29 2199d 2db9dbf71bf9 proc: Use new infrastructure to fix deadlocks in execve
possible deadlock in do_io_accounting (3) fs 4 syz, C inconclusive done 39 2345d 2435d 15/29 2199d 76518d379885 proc: io_accounting: Use new infrastructure to fix deadlocks in execve
possible deadlock in proc_pid_personality fs 4 syz inconclusive done 3 2354d 2364d 15/29 2199d 2db9dbf71bf9 proc: Use new infrastructure to fix deadlocks in execve
WARNING: bad unlock balance in rcu_lock_release fs 4 syz, C inconclusive done 1433 2340d 2621d 15/29 2199d 10476e630422 locking/lockdep: Fix bad recursion pattern
WARNING: bad unlock balance in rcu_core fs 4 syz, C inconclusive done 3578 2336d 2691d 15/29 2199d 10476e630422 locking/lockdep: Fix bad recursion pattern
KASAN: use-after-free Write in fsnotify_detach_connector_from_object fs 22 syz, C done 4 2262d 2266d 15/29 2231d ef1548adada5 proc: Use new_inode not new_inode_pseudo
INFO: task hung in locks_remove_posix fs input usb 1 syz 2231 2266d 2289d 15/29 2231d 187b96db5ca7 x86/unwind/orc: Fix unwind_get_return_address_ptr() for inactive tasks
INFO: trying to register non-static key in io_cqring_ev_posted (3) fs -1 syz, C done 3 2290d 2293d 15/29 2231d 583863ed9181 io_uring: initialize ctx->sqo_wait earlier
general protection fault in start_creating fs 2 syz, C done 106 2253d 2283d 15/29 2231d d56f5136b010 KVM: let kvm_destroy_vm_debugfs clean up vCPU debugfs directories
KASAN: use-after-free Read in blkdev_direct_IO fs 19 syz, C done error 8 2576d 2581d 15/29 2248d 0eb6ddfb865c block: Fix __blkdev_direct_IO() for bio fragments
KASAN: use-after-free Read in blkdev_bio_end_io fs 19 syz, C done error 13 2566d 2578d 15/29 2248d 7b6620d7db56 block: remove REQ_NOWAIT_INLINE
KASAN: use-after-free Read in dput (2) fs 19 syz done 4 2324d 2324d 15/29 2260d 4fa3b1c41737 proc: Handle umounts cleanly
INFO: rcu detected stall in io_uring_release fs 1 syz 15 2280d 2321d 15/29 2260d 3fd44c86711f io_uring: use cond_resched() in io_ring_ctx_wait_and_kill()
possible deadlock in io_submit_one (3) fs 4 syz done 45 2329d 2336d 15/29 2299d 63f818f46af9 proc: Use a dedicated lock in struct pid
INFO: task hung in io_queue_file_removal fs 1 syz, C done 16 2342d 2350d 15/29 2299d 4afdb733b160 io-uring: drop completion when removing file
KMSAN: uninit-value in simple_attr_read fs 7 syz, C 6 2302d 2372d 15/29 2299d a65cab7d7f05 libfs: fix infoleak in simple_attr_read()
possible deadlock in send_sigurg fs 4 syz, C done 65 2323d 2336d 15/29 2299d 63f818f46af9 proc: Use a dedicated lock in struct pid
INFO: trying to register non-static key in __io_uring_register fs -1 syz, C done 39 2331d 2332d 15/29 2299d f7fe9346869a io_uring: initialize fixed_file_data lock
INFO: trying to register non-static key in io_cqring_ev_posted (2) fs -1 syz, C done 42 2302d 2339d 15/29 2299d 10bea96dcc13 io_uring: add missing finish_wait() in io_sq_thread()
possible deadlock in send_sigio fs 4 syz, C done 7 2327d 2336d 15/29 2299d 63f818f46af9 proc: Use a dedicated lock in struct pid
memory leak in fasync_helper fs 3 syz, C 14 2393d 2454d 15/29 2324d 67f562e3e147 net/smc: transfer fasync_list in case of fallback
BUG: sleeping function called from invalid context in __kmalloc ceph fs 5 syz, C done 5 2386d 2392d 15/29 2324d b27a939e8376 ceph: canonicalize server path in place
WARNING: ODEBUG bug in io_sqe_files_unregister fs -1 syz, C done 964 2393d 2440d 15/29 2359d 2faf852d1be8 io_uring: cleanup fixed file data table references
memory leak in reiserfs_fill_super fs 3 syz, C 20 2400d 2450d 15/29 2381d 5474ca7da6f3 reiserfs: Fix memory leak of journal device string
BUG: corrupted list in __dentry_kill (2) fs 8 syz, C done 4945 2449d 2450d 15/29 2381d a3d1e7eb5abe simple_recursive_removal(): kernel-side rm -rf for ramfs-style filesystems
WARNING in do_dentry_open (2) fs -1 syz, C done 17 2401d 2398d 15/29 2381d a37f4958f7b6 debugfs: Return -EPERM when locked down
WARNING: refcount bug in chrdev_open fs 13 syz, C inconclusive done 15 2461d 2563d 15/29 2381d 68faa679b8be chardev: Avoid potential use-after-free in 'chrdev_open()'
kernel BUG at fs/pipe.c:LINE! fs -1 syz, C done 693 2453d 2459d 15/29 2423d 8c7b8c34ae95 pipe: Remove assertion from pipe_poll()
general protection fault in io_commit_cqring fs 2 syz, C done 3 2478d 2478d 15/29 2449d 15dff286d0e0 io_uring: check for validity of ->rings in teardown
INFO: task hung in io_wq_destroy fs 1 syz, C done 20 2463d 2494d 15/29 2449d b60fda6000a9 io-wq: wait for io_wq_create() to setup necessary workers
INFO: trying to register non-static key in io_cqring_ev_posted fs -1 syz, C done 6 2464d 2476d 15/29 2449d eb065d301e8c io_uring: io_allocate_scq_urings() should return a sane state
WARNING in iov_iter_pipe fs -1 syz, C done 1117 2466d 2484d 15/29 2449d 419e9c38aa07 iomap: Fix pipe page leakage during splicing
BUG: unable to handle kernel paging request in io_wq_cancel_all fs 8 syz, C done 2 2493d 2493d 15/29 2449d 975c99a57096 io_uring: io_wq_create() returns an error pointer, not NULL
KASAN: invalid-free in io_sqe_files_unregister fs 24 syz, C done 3 2481d 2481d 15/29 2449d 46568e9be70f io_uring: fix error clear of ->file_table in io_sqe_files_register()
KASAN: use-after-free Read in do_mount fs 19 syz done 6 2507d 2515d 14/29 2462d 0ecee6699064 fs/namespace.c: fix use-after-free of mount in mnt_warn_timestamp_expiry()
KASAN: use-after-free Read in io_uring_setup fs 19 syz error 1 2495d 2494d 13/29 2469d 044c1ab399af io_uring: don't touch ctx in setup after ring fd install
KASAN: use-after-free Read in ep_scan_ready_list fs 19 syz, C done 39 2933d 2968d 13/29 2471d 430ac66eb4c5 net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree()
INFO: trying to register non-static key in finish_writeback_work fs -1 syz error 1 2530d 2528d 13/29 2495d 8e00c4e9dd85 writeback: fix use-after-free in finish_writeback_work()
INFO: task syz-executor can't die for more than 143 seconds. fs -1 syz, C done 61 2524d 2632d 13/29 2507d 8619e5bdeee8 /dev/mem: Bail out upon SIGKILL. 7c3a6aedcd6a kexec: bail out upon SIGKILL when allocating memory. 8f9e86ee7959 staging: android: ion: Bail out upon SIGKILL when allocating memory.
WARNING in kfree fs -1 syz, C done 2 2554d 2553d 13/29 2507d 43ce4c1feadb vfs: Add a single-or-reconfig keying to vfs_get_super()
WARNING in __blkdev_put (2) fs -1 syz 3082 2571d 2578d 12/29 2546d e91455bad5cf bdev: Fixup error handling in blkdev_get()
kernel panic: corrupted stack end in dput fs 2 syz done 1 2613d 2613d 12/29 2556d 95fa145479fb bpf: sockmap/tls, close can race with map free
general protection fault in do_move_mount (2) fs 2 syz done 7 2618d 2626d 12/29 2585d 570d7a98e7d6 vfs: move_mount: reject moving kernel internal mounts
possible deadlock in io_submit_one fs 4 syz, C done 1779 2589d 2760d 12/29 2585d cbcfa130a911 fs/userfaultfd.c: disable irqs for fault_pending and event locks
WARNING in notify_change fs -1 syz, C 566 2672d 3061d 12/29 2590d f69e749a4935 Abort file_remove_privs() for non-reg. files
WARNING in fanotify_handle_event fs -1 syz, C done 5 2627d 2626d 12/29 2604d c285a2f01d69 fanotify: update connector fsid cache on add mark
BUG: Dentry still in use [unmount of hugetlbfs hugetlbfs] fs -1 syz, C done 3 2626d 2626d 12/29 2604d 1b0b9cc8d379 vfs: fsmount: add missing mntget()
possible deadlock in aio_poll fs 4 syz, C 5041 2763d 2907d 12/29 2615d ae62c16e105a userfaultfd: disable irqs when taking the waitqueue lock
INFO: task hung in __get_super fs 1 syz, C 80 2625d 3069d 12/29 2625d 33ec3e53e7b1 loop: Don't change loop device under exclusive opener
general protection fault in load_elf_binary fs mm 2 syz, C done 15 2703d 2707d 12/29 2630d cc338010a233 fs/binfmt_elf.c: free PT_INTERP filename ASAP
general protection fault in put_fs_context fs 2 syz, C 9 2857d 2857d 12/29 2633d 8d0347f6c3a9 convert do_remount_sb() to fs_context
INFO: task hung in __io_uring_register fs 1 syz, C done 51 2684d 2692d 12/29 2648d b19062a56726 io_uring: fix possible deadlock between io_uring_{enter,register}
general protection fault in fanotify_handle_event fs 2 syz done 5 2687d 2687d 12/29 2648d b1da6a51871c fsnotify: Fix NULL ptr deref in fanotify_get_fsid()
BUG: unable to handle kernel paging request in do_mount fs 8 syz, C 194 2859d 2896d 12/29 2655d 3e1aeb00e6d1 vfs: Implement a filesystem superblock creation/configuration context
possible deadlock in seq_read fs 4 syz, C 19074 2701d 3190d 12/29 2693d 73601ea5b7b1 fs/open.c: allow opening only regular files during execve()
KASAN: use-after-free Read in link_path_walk fs 19 syz done 5 2813d 2828d 12/29 2693d 1da6c4d9140c bpf: fix use after free in bpf_evict_inode
KASAN: use-after-free Read in trailing_symlink fs 19 syz done 2 2814d 2828d 12/29 2693d 1da6c4d9140c bpf: fix use after free in bpf_evict_inode
KASAN: use-after-free Read in path_lookupat fs 19 syz done 1 2828d 2828d 12/29 2693d 1da6c4d9140c bpf: fix use after free in bpf_evict_inode
KASAN: use-after-free Read in filemap_fault mm fs 19 syz, C 277 2788d 2798d 11/29 2704d 6b4c9f446981 filemap: drop the mmap_sem for all blocking operations
possible deadlock in __do_page_fault fs mm 4 syz, C 820 2730d 2897d 11/29 2708d fb4415a12632 staging: android: ashmem: Don't call fallocate() with ashmem_mutex held.
possible deadlock in vfs_fallocate fs 4 syz, C 3981 2930d 3041d 11/29 2708d fb4415a12632 staging: android: ashmem: Don't call fallocate() with ashmem_mutex held.
BUG: unable to handle kernel paging request in dput (2) fs 8 syz, C 4 2765d 2765d 11/29 2730d 36991ca68db9 blk-mq: protect debugfs_create_files() from failures 37ea7b630ae5 debugfs: debugfs_lookup() should return NULL if not found
general protection fault in __dentry_path fs 2 syz, C 2082 2732d 2765d 11/29 2730d 8ed0579c12b2 kvm: properly check debugfs dentry before using it
KASAN: use-after-free Read in posix_lock_inode fs 19 syz 5 2793d 2793d 11/29 2780d bf77ae4c98d7 locks: fix error in locks_move_blocks()
KASAN: use-after-free Read in locks_delete_block fs 19 syz 4 2821d 2844d 11/29 2780d 16306a61d3b7 fs/locks: always delete_block after waiting.
WARNING in userfaultfd_ioctl mm fs -1 syz, C 11 2813d 2823d 11/29 2799d 01e881f5a1fc userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered
WARNING: kmalloc bug in krealloc fs -1 syz, C 2 2964d 2964d 11/29 2844d 61448479a9f2 mm: don't warn about large allocations for slab
WARNING: kmalloc bug in vfs_getxattr_alloc fs -1 syz, C 9 2919d 2961d 11/29 2844d 61448479a9f2 mm: don't warn about large allocations for slab
KASAN: slab-out-of-bounds Read in fscache_alloc_cookie fs 17 syz, C 1936 2869d 2971d 11/29 2858d 1ff22883b0b2 fscache: Fix incomplete initialisation of inline key space fa520c47eaa1 fscache: Fix out of bound read in long cookie keys
general protection fault in ubifs_mount fs mtd 2 syz, C 216 2897d 2914d 11/29 2876d 37f31b6ca431 ubifs: Check for name being NULL while mounting
WARNING in __fsnotify_recalc_mask fs -1 syz 9 2929d 2930d 10/29 2907d d3bc0fa8411c fsnotify: fix false positive warning on inode delete
INFO: task hung in fsnotify_mark_destroy_workfn fs 1 syz 13 2939d 3053d 10/29 2910d 128f38041035 android: binder: Rate-limit debug and userspace triggered err msgs
BUG: soft lockup in d_walk fs 1 syz, C 163 2998d 3044d 8/29 2912d 4fb48871409e restore cond_resched() in shrink_dcache_parent()
general protection fault in send_sigurg_to_task fs 2 syz, C 6 2932d 2935d 8/29 2920d 84fe4cc09abc signal: Don't send signals to tasks that don't exist
general protection fault in send_sigio_to_task fs 2 syz, C 176 2932d 2935d 8/29 2920d 84fe4cc09abc signal: Don't send signals to tasks that don't exist
kernel BUG at fs/userfaultfd.c:LINE! (2) fs mm -1 syz, C 8 2946d 2964d 8/29 2940d 31e810aa1033 userfaultfd: remove uffd flags from vma->vm_flags if UFFD_EVENT_FORK fails
KASAN: stack-out-of-bounds Read in locks_remove_posix fs 17 syz, C 1 2958d 2958d 8/29 2941d 99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
KASAN: slab-out-of-bounds Read in getname_kernel fs 17 syz, C 8 2966d 3065d 8/29 2955d 02f51d45937f autofs: fix slab out of bounds read in getname_kernel()
KASAN: global-out-of-bounds Write in string fs 21 syz, C 7 3010d 3067d 8/29 2955d fe10e398e860 reiserfs: fix buffer overflow with long warning messages
BUG: unable to handle kernel paging request in dput fs 8 syz, C 26 3001d 3004d 8/29 2970d d85b399b64e8 fix proc_fill_cache() in case of d_alloc_parallel() failure
KASAN: use-after-free Read in __vfs_write fs 19 syz 14 2999d 3002d 8/29 2970d 66e58e0ef80a bpfilter: fix race in pipe access
general protection fault in pipe_write fs 2 syz 1 3002d 3001d 8/29 2970d 66e58e0ef80a bpfilter: fix race in pipe access
BUG: unable to handle kernel NULL pointer dereference in ep_item_poll fs 10 syz, C 15 2980d 2981d 8/29 2970d e88958e6369a net: handle NULL ->poll gracefully
general protection fault in __vfs_write fs 2 syz 25 2998d 3002d 8/29 2970d 66e58e0ef80a bpfilter: fix race in pipe access
KASAN: use-after-free Read in pipe_read fs 19 syz, C 3 3000d 3002d 8/29 2970d 66e58e0ef80a bpfilter: fix race in pipe access
KASAN: use-after-free Read in __kernel_write fs 19 syz 7 2999d 3002d 8/29 2970d 66e58e0ef80a bpfilter: fix race in pipe access
KASAN: null-ptr-deref Write in simple_write_to_buffer fs 12 syz, C 5 3010d 3035d 8/29 2970d fc14eebfc208 PM / hibernate: Fix oops at snapshot_write()
general protection fault in touch_atime fs 2 syz 6 2999d 3002d 8/29 2970d 66e58e0ef80a bpfilter: fix race in pipe access
WARNING in do_dentry_open fs -1 syz, C 26 2994d 3001d 8/29 2970d b16558579576 bpf: implement dummy fops for bpf objects
general protection fault in vfs_read fs 2 syz 2 3000d 3002d 8/29 2970d 66e58e0ef80a bpfilter: fix race in pipe access
BUG: unable to handle kernel NULL pointer dereference in do_sys_poll fs 10 syz, C 297 2980d 2981d 8/29 2970d e88958e6369a net: handle NULL ->poll gracefully
WARNING in sysfs_remove_group fs -1 syz, C 11125 2971d 3225d 8/29 2970d d3349b6b3c37 loop: remember whether sysfs_create_group() was done
INFO: rcu detected stall in d_walk fs 1 syz, C 25680 2996d 3058d 8/29 2970d 4fb48871409e restore cond_resched() in shrink_dcache_parent()
KASAN: use-after-free Read in remove_wait_queue (2) fs 19 syz, C 4 3091d 3101d 5/29 3002d af8d3c7c001a ppp: remove the PPPIOCDETACH ioctl
WARNING in format_decode fs -1 syz, C 1 3070d 3070d 5/29 3032d 9ad553abe66f fs/reiserfs/journal.c: add missing resierfs_warning() arg
WARNING: refcount bug in put_pid_ns fs 13 syz 6 3070d 3070d 5/29 3032d 8e04944f0ea8 mm,vmscan: Allow preallocating memory for register_shrinker().
INFO: task hung in __blkdev_get fs 1 syz, C 662 3056d 3182d 5/29 3032d 1e047eaab3bb block/loop: fix deadlock after loop_set_status
BUG: corrupted list in __dentry_kill fs 8 syz, C 35 3050d 3070d 5/29 3032d 4a3877c4cedd rpc_pipefs: fix double-dput()
KASAN: use-after-free Read in remove_wait_queue fs 19 syz, C 7 3107d 3117d 4/29 3103d 5eeb2ca02a2f ANDROID: binder: synchronize_rcu() when using POLLFREE.
WARNING in register_lock_class fs -1 syz, C 2 3172d 3168d 4/29 3125d f5cb779ba163 ANDROID: binder: remove waitqueue when thread exits.
KASAN: use-after-free Read in __lock_acquire (2) fs 19 syz, C 589 3128d 3203d 4/29 3125d f5cb779ba163 ANDROID: binder: remove waitqueue when thread exits.
general protection fault in page_mapping fs mm 2 syz, C 46 3151d 3179d 4/29 3128d 7d11f77f84b2 RDS: null pointer dereference in rds_atomic_free_op
BUG: unable to handle kernel NULL pointer dereference in page_mapping fs mm 10 syz, C 4 3172d 3174d 4/29 3128d 7d11f77f84b2 RDS: null pointer dereference in rds_atomic_free_op
general protection fault in show_timer fs 2 syz, C 10 3173d 3192d 4/29 3128d cef31d9af908 posix-timer: Properly check sigevent->sigev_notify
BUG: unable to handle kernel paging request in devpts_mntget fs 8 syz, C 21 3141d 3218d 4/29 3128d c9cc8d01fb04 devpts: fix error handling in devpts_mntget()
kernel BUG at fs/userfaultfd.c:LINE! mm fs -1 syz, C 3 3172d 3169d 4/29 3128d 0cbb4b4f4c44 userfaultfd: clear the vma->vm_userfaultfd_ctx if UFFD_EVENT_FORK fails
KASAN: use-after-free Read in __wake_up_common fs 19 syz, C 888 3129d 3138d 4/29 3128d 4cd879515d68 vhost_net: stop device during reset owner
general protection fault in proc_flush_task fs 2 syz 2 3175d 3191d 4/29 3133d c0ee554906c3 pid: Handle failure to allocate the first pid in a pid namespace
BUG: unable to handle kernel NULL pointer dereference in proc_flush_task fs 10 syz 1 3175d 3171d 4/29 3133d c0ee554906c3 pid: Handle failure to allocate the first pid in a pid namespace
KASAN: use-after-free Read in handle_userfault fs mm 19 syz, C 151 3162d 3225d 3/29 3150d 0cbb4b4f4c44 userfaultfd: clear the vma->vm_userfaultfd_ctx if UFFD_EVENT_FORK fails
WARNING in lock_release fs -1 syz, C 72 3172d 3205d 3/29 3169d ca0168e8a77c alloc_super(): do ->s_umount initialization earlier