Applied filters: WithRepro (drop) Label=subsystems:fs (drop)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
INFO: task hung in invalidate_inode_pages2_range (3) prio:high fs 1 syz, C done 57 59d 525d 2/29 never bcachefs: Fix readahead involved deadlock
KASAN: slab-out-of-bounds Write in bch2_dirent_init_name prio:high fs 21 syz, C error 1496 291d 416d 2/29 never bcachefs: Fix padding zeroout when creating casefolded dirents
KMSAN: uninit-value in bch2_check_subvols prio:high fs 7 syz, C 53 312d 402d 2/29 never bcachefs: Fix missing compat code in check_subvol()
WARNING in bch2_dev_free (2) prio:low fs -1 syz, C done 5 380d 386d 2/29 never bcachefs: Fix __bch2_fs_read_write() error path
kernel BUG in __journal_res_get (3) prio:high fs -1 syz, C inconclusive 175 291d 415d 2/29 never bcachefs: Fix __bch2_fs_read_write() error path
KASAN: use-after-free Read in bch2_check_dirents fs 19 syz, C done 769 311d 630d 2/29 never bcachefs: Fix UAF in check_dirent()
KASAN: use-after-free Read in check_dirent fs 19 syz, C done 13 350d 532d 2/29 never bcachefs: Fix UAF in check_dirent()
KASAN: slab-use-after-free Write in bch2_do_discards prio:high fs 22 syz 137 311d 381d 2/29 never bcachefs: Fix UAF by journal write path
KASAN: slab-use-after-free Write in bch2_get_next_dev prio:high fs 22 syz, C 1331 291d 385d 2/29 never bcachefs: Fix UAF by journal write path
WARNING in bch2_fs_journal_start prio:high fs -1 syz, C done 14 412d 433d 2/29 never bcachefs: Don't allow mounting with crazy numbers of dirty journal entries
general protection fault in __bch2_err_trace prio:normal fs 2 syz, C done 25 311d 367d 2/29 never bcachefs: Delete faulty read_only/nochanges check in fs_open()
KMSAN: uninit-value in bch2_alloc_sectors_start_trans (2) prio:high fs 7 syz 875 312d 478d 2/29 never bcachefs: Add missing ei_last_dirtied update
INFO: task hung in io_sq_thread_stop fs io-uring 1 syz, C done 211 1999d 2158d 1/29 never io_uring: don't sleep schedule in SQPOLL thread if we need to park
INFO: task hung in remove_inode_hugepages mm fs 1 syz, C done 52 668d 760d 1/29 never INFO: task hung in remove_inode_hugepages
INFO: task hung in bchfs_fpunch (2) prio:high fs mm 1 syz, C done 2 365d 409d 2/29 never bcachefs: Fix readahead involved deadlock
BUG: sleeping function called from invalid context in procfs_procmap_ioctl fs 5 syz done 101 399d 401d 2/29 never mm/maps: move kmalloc() call location in do_procmap_query() out of RCU critical section
KMSAN: uninit-value in __bch2_alloc_v4_to_text prio:high fs 7 syz, C 3 411d 416d 2/29 never bcachefs: Fix refs to undefined fields in __bch2_alloc_v4_to_text()
UBSAN: array-index-out-of-bounds in bch2_accounting_validate prio:high fs 15 syz, C done 23 300d 368d 2/29 never bcachefs: Ignore accounting key type larger than BCH_DISK_ACCOUNTING_TYPE_NR
WARNING in bchfs_truncate fs -1 syz, C done 366 315d 825d 2/29 never bcachefs: Increase BCH_MIN_NR_NBUCKETS
INFO: task hung in __closure_sync prio:high fs 1 syz, C done 8591 298d 826d 2/29 never bcachefs: Increase BCH_MIN_NR_NBUCKETS
kernel BUG in free_bprm fs mm -1 syz, C done 445 639d 640d 1/29 never exec: NULL out bprm->argv0 when it is an ERR_PTR
INFO: task hung in __bch2_fs_stop prio:high fs 1 syz, C done 1589 307d 783d 2/29 never bcachefs: Increase BCH_MIN_NR_NBUCKETS
kernel BUG in bch2_btree_repair_topology_recurse prio:high fs -1 syz, C done 7 312d 372d 2/29 never bcachefs: btree_check_root_boundaries()
kernel BUG in bch2_printbuf_exit prio:high fs -1 syz, C error 29 382d 386d 2/29 never bcachefs: convert str_hash.c to CLASS
INFO: task hung in bch2_readahead prio:high fs 1 syz, C done 375 328d 809d 2/29 never bcachefs: Fix readahead involved deadlock
kernel BUG in do_bch2_trans_commit_to_journal_replay prio:normal fs -1 syz 22 380d 383d 2/29 never bcachefs: do_bch2_trans_commit_to_journal_replay handles accounting
kernel BUG in bch2_btree_path_peek_slot prio:low fs -1 syz, C error error 1546 437d 616d 2/29 never bcachefs: fix assert in bch2_btree_path_traverse_cached()
KASAN: use-after-free Read in check_extent_overbig prio:high fs 19 syz, C done done 18 327d 610d 2/29 never bcachefs: fix check_extent_overbig() call
WARNING in bch2_prt_printf prio:high fs -1 syz, C done error 103 314d 818d 2/29 never bcachefs: journal_entry_btree_keys_to_text() is more careful
INFO: task hung in bchfs_fallocate (2) fs 1 syz, C done inconclusive 6 355d 582d 2/29 never bcachefs: Fix readahead involved deadlock
general protection fault in bch2_prt_vprintf fs 2 syz, C error inconclusive 4 579d 616d 2/29 never bcachefs: journal_entry_btree_keys_to_text() is more careful
KASAN: slab-use-after-free Read in debugfs_u32_get (2) prio:normal fs 19 syz 1 41d 51d 29/29 9d17h 2e996ca81f95 netdevsim: remove ethtool debugfs files before freeing netdev
KASAN: slab-use-after-free Read in reverse_path_check_proc prio:high fs 19 syz, C 113 60d 77d 29/29 23d a1e9718b406b eventpoll: restore EP_UNACTIVE_PTR sentinel for ctx->tfile_check_list
general protection fault in __umount_mnt fs 2 syz, C error 21 129d 139d 29/29 78d ad4999496e73 mount: always duplicate mount
UBSAN: shift-out-of-bounds in minix_statfs fs -1 syz, C inconclusive error 75 193d 1698d 29/29 93d 8c97a6ddc956 minix: Add required sanity checking to minix_check_superblock()
possible deadlock in __configfs_open_file fs 4 syz, C 29 175d 593d 29/29 93d 14d4ac19d189 scsi: target: Fix recursive locking in __configfs_open_file()
BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio (4) fs 10 syz, C done 5746 199d 628d 29/29 93d 777a8560fd29 lib/buildid: use __kernel_read() for sleepable context
memory leak in __shmem_file_setup fs 3 syz, C 1 211d 207d 29/29 93d 605f6586ecf7 mm/vma: do not leak memory when .mmap_prepare swaps the file
general protection fault in grab_requested_root fs 2 syz, C 21 163d 176d 29/29 93d 81f16c9778d7 statmount: Fix the null-ptr-deref in do_statmount()
kernel BUG in sctp_getsockopt_peeloff_common fs -1 syz, C done 6 248d 249d 29/29 194d afb9917d9b37 Revert "net/socket: convert sock_map_fd() to FD_ADD()"
kernel BUG in socket fs -1 syz, C 145 231d 226d 29/29 194d afb9917d9b37 Revert "net/socket: convert sock_map_fd() to FD_ADD()"
memory leak in debugfs_change_name fs 3 syz, C 1 246d 242d 29/29 198d d412ff9e26eb debugfs: Fix memleak in debugfs_change_name().
WARNING in minix_unlink fs -1 syz, C inconclusive done 458 241d 623d 29/29 198d 009a2ba40303 Fix a drop_nlink warning in minix_rename
memory leak in getname_flags fs 3 syz, C 1 226d 226d 29/29 198d b14fad555302 io_uring: fix filename leak in __io_openat_prep()
KASAN: slab-use-after-free Read in driver_remove_file fs 19 syz, C error done 296 245d 374d 29/29 199d 72262330f7b3 comedi: c6xdigio: Fix invalid PNP driver unregistration
general protection fault in fd_install fs 2 syz, C 64 244d 246d 29/29 212d 8cf01d0c4372 mqueue: correct the type of ro to int
WARNING in minix_rmdir fs -1 syz, C inconclusive 92 262d 576d 29/29 212d d3e0e8661ceb Fix a drop_nlink warning in minix_rmdir
WARNING in nsproxy_ns_active_get fs -1 syz, C 377 268d 274d 29/29 212d cefd55bd2159 nsproxy: fix free_nsproxy() and simplify create_new_namespaces()
kernel BUG in may_open (2) fs -1 syz, C done 17716 212d 395d 29/29 212d 34ab4c75588c bfs: Reconstruct file type when loading from disk 7f9d34b0a7cb cramfs: Verify inode mode when loading from disk 005d4b0d33f6 hfsplus: Verify inode mode when loading from disk 0a9e74051313 isofs: Verify inode mode when loading from disk 7a5aa54fba2b jfs: Verify inode mode when loading from disk 73861970938a minixfs: Verify inode mode when loading from disk 4aead50caf67 nilfs2: reject invalid file types when reading inodes 4e8011ffec79 ntfs3: pretend $Extend records as regular files bc107a619f02 squashfs: verify inode mode when loading from disk
KMSAN: kernel-infoleak in hugetlbfs_read_iter fs mm 9 syz, C 7 271d 270d 29/29 212d de8798965fd0 mm/memfd: fix information leak in hugetlb folios
general protection fault in fsnotify_destroy_group fs 2 syz, C error 2 255d 252d 29/29 212d 7129098f4f7b fanotify: convert fanotify_init() to FD_PREPARE()
WARNING in nsproxy_ns_active_put fs -1 syz, C done 38 268d 274d 29/29 212d cefd55bd2159 nsproxy: fix free_nsproxy() and simplify create_new_namespaces()
WARNING in minix_rename fs -1 syz error 7 322d 409d 29/29 212d 009a2ba40303 Fix a drop_nlink warning in minix_rename
WARNING in destroy_super_work fs -1 syz done 107 268d 273d 29/29 212d f8d5a8970d2f ns: handle setns(pidfd, ...) cleanly
general protection fault in mntput fs 2 syz, C error 17 247d 252d 29/29 212d 05885f41658c namespace: convert fsmount() to FD_PREPARE()
BUG: sleeping function called from invalid context in hook_sb_delete fs 5 syz, C done 11887 230d 317d 29/29 212d 56325e8c68c0 landlock: fix splats from iput() after it started calling might_sleep()
WARNING in dax_iomap_rw fs -1 syz, C 5 296d 309d 29/29 248d 154d1e7ad9e5 dax: skip read lock assertion for read-only filesystems
WARNING in invalidate_bh_lru fs -1 syz, C done done 5172 496d 1324d 29/29 261d 6f861765464f fs: Block writes to mounted block devices
VFS: Busy inodes after unmount (use-after-free) (3) fs 2 syz, C error 85 281d 310d 29/29 262d 56094ad3eaa2 vfs: Don't leak disconnected dentries on umount
kernel BUG in qlist_free_all (2) fs -1 syz, C done 5 296d 327d 29/29 262d 25718fdcbdd2 net: gro_cells: Use nested-BH locking for gro_cell
INFO: task hung in bch2_direct_write (2) fs 1 syz, C unreliable done 15 347d 356d 29/29 268d f2c61db29f27 Remove bcachefs core code
INFO: task hung in v9fs_file_fsync fs mm 1 syz, C done 14 314d 354d 29/29 281d e8fe3f07a357 9p/trans_fd: p9_fd_request: kick rx thread if EPOLLIN
WARNING in sysfs_emit_at fs -1 syz, C 2 335d 331d 29/29 281d 9dfec4a51df9 USB: core: remove the move buf action
general protection fault in iter_file_splice_write fs 2 syz, C done done 2812 352d 809d 29/29 296d netfs: Fix unbuffered write error handling
WARNING in path_noexec mm fs -1 syz, C done 14318 311d 396d 29/29 311d secretmem: use SB_I_NOEXEC
kernel BUG in bch2_journal_keys_peek_max fs -1 syz, C done 45 403d 541d 29/29 326d 425da82c63e3 bcachefs: btree_iter: fix updates, journal overlay
KASAN: use-after-free Read in bch2_btree_node_read_done fs 19 syz, C done 64 410d 620d 29/29 337d d89a34b14df5 bcachefs: Move bset size check before csum check
kernel BUG in bch2_btree_path_level_init (3) fs -1 syz, C done 489 337d 594d 29/29 337d 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
kernel BUG in __bch2_bkey_compat fs -1 syz, C done done 5 420d 420d 29/29 337d 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
kernel BUG in bch2_trans_update_by_path fs -1 syz, C done 857 339d 414d 29/29 337d c72d628469b8 bcachefs: Fix btree for nonexistent tree depth
BUG: unable to handle kernel paging request in __bch2_bkey_unpack_key fs 8 syz, C 75 413d 437d 29/29 337d 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
kernel panic: trans should be locked, unlocked by bch2_btree_update_start fs 2 syz, C error error 361 419d 610d 29/29 337d 5c4acbc8ce90 bcachefs: Don't unlock the trans if ret doesn't match BCH_ERR_operation_blocked
kernel BUG in bch2_bkey_cmp_packed (2) fs -1 syz, C 7 421d 431d 29/29 337d 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
kernel BUG in bch2_reconstruct_snapshots fs -1 syz, C done done 7 445d 536d 29/29 337d b2e2bed11980 bcachefs: Add missing key type checks to check_snapshot_exists()
BUG: unable to handle kernel NULL pointer dereference in bch2_btree_update_start fs 10 syz, C 6 407d 420d 29/29 337d 56be92c63f02 bcachefs: Fix pool->alloc NULL pointer dereference
KASAN: use-after-free Read in bch2_checksum fs 19 syz, C error done 8 441d 453d 29/29 337d d89a34b14df5 bcachefs: Move bset size check before csum check
kernel BUG in bch2_btree_node_iter_init (2) fs -1 syz, C done 3 393d 394d 29/29 337d 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
KASAN: slab-use-after-free Read in bch2_str_hash_repair_key fs 19 syz, C done 226 403d 423d 29/29 337d 9b54efe66c9b bcachefs: Fix alloc_req use after free
kernel BUG in __bch2_bkey_unpack_key fs -1 syz, C 43 416d 437d 29/29 337d 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
UBSAN: shift-out-of-bounds in __bch2_btree_node_hash_insert fs -1 syz, C done 434 399d 583d 29/29 337d 96de8f852031 bcachefs: mark invalid_btree_id autofix
KASAN: slab-use-after-free Read in bch2_bucket_alloc_trans fs 19 syz, C error 550 403d 421d 29/29 337d 9b54efe66c9b bcachefs: Fix alloc_req use after free
UBSAN: shift-out-of-bounds in __bch2_bkey_unpack_key fs -1 syz, C done 54 419d 436d 29/29 337d 03208bd06a61 bcachefs: don't return fsck_fix for unfixable node errors in __btree_err
kernel BUG in __btree_trans_update_by_path fs -1 syz, C done 20 395d 400d 29/29 337d c72d628469b8 bcachefs: Fix btree for nonexistent tree depth
kernel BUG in __bkey_unpack_pos (2) fs -1 syz, C done 24 392d 589d 29/29 337d 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
KASAN: use-after-free Read in poly1305_update fs 19 syz, C done 8 404d 420d 29/29 337d d89a34b14df5 bcachefs: Move bset size check before csum check
BUG: unable to handle kernel NULL pointer dereference in mempool_alloc_noprof (2) fs 10 syz, C done 8 416d 432d 29/29 337d 56be92c63f02 bcachefs: Fix pool->alloc NULL pointer dereference
KASAN: slab-use-after-free Read in bch2_copygc fs 19 syz, C done 25 337d 395d 29/29 337d c02b943f7d12 bcachefs: Fix reference to invalid bucket in copygc
possible deadlock in trans_set_locked fs 4 syz, C 113 415d 616d 29/29 364d ff1dd05f8233 bcachefs: bch2_trans_relock() is trylock for lockdep
WARNING in rhashtable_init_noprof fs -1 syz, C done 131 420d 438d 29/29 366d 757601ef8533 bcachefs: Don't put rhashtable on stack
KASAN: slab-out-of-bounds Read in bch2_sb_members_v1_to_text fs 17 syz, C done 6 422d 423d 29/29 366d 205da7c02673 bcachefs: Don't trust sb->nr_devices in members_to_text()
possible deadlock in __bch2_fsck_err (2) fs 4 syz, C 4 450d 451d 29/29 366d 0acb385ec19c bcachefs: Fix possible console lock involved deadlock
KASAN: slab-out-of-bounds Read in bch2_sb_members_v2_to_text fs 17 syz, C done 34 421d 438d 29/29 366d 205da7c02673 bcachefs: Don't trust sb->nr_devices in members_to_text()
WARNING in __init_work (2) fs -1 syz, C 5971 413d 421d 29/29 366d 757601ef8533 bcachefs: Don't put rhashtable on stack
divide error in bch2_sb_members_v2_to_text fs 2 syz, C done 3 423d 423d 29/29 366d 205da7c02673 bcachefs: Don't trust sb->nr_devices in members_to_text()
UBSAN: array-index-out-of-bounds in bch2_sb_downgrade_update fs 15 syz, C 539 414d 466d 29/29 366d 082c74411491 bcachefs: Fix downgrade_table_extra()
WARNING in bch2_printbuf_make_room fs -1 syz, C error 2 424d 815d 29/29 374d dc5bfdf8eaed bcachefs: fix the memory leak in exception case
BUG: unable to handle kernel paging request in bch2_dirent_to_text fs 8 syz, C done error 3 440d 750d 29/29 381d f39055220f6f bcachefs: Add missing validation for superblock section clean
kernel BUG in vfs_get_tree (2) fs -1 syz, C done 22 428d 425d 29/29 387d 9c6185609947 bcachefs: Call bch2_fs_start before getting vfs superblock
KASAN: use-after-free Read in sysv_new_inode (2) fs 19 syz, C inconclusive error 21224 487d 820d 29/29 387d 448fa70158f9 sysv: Remove the filesystem
BUG: unable to handle kernel NULL pointer dereference in do_pagemap_scan fs 10 syz, C inconclusive done 45 453d 956d 29/29 395d 65c66047259f proc: fix the issue of proc_mem_open returning NULL
kernel BUG in may_open fs -1 syz, C error 137019 395d 492d 29/29 395d cfd86ef7e8e7 anon_inode: use a proper mode internally
WARNING in bch2_dev_free fs -1 syz, C done 258 424d 486d 28/29 420d d62922ba3cfc bcachefs: Prevent granting write refs when filesystem is read-only
KMSAN: uninit-value in bch2_extent_crc_append (2) fs 7 syz, C 4 506d 516d 28/29 420d 53cf2a3daa4c bcachefs: Fix kmsan warnings in bch2_extent_crc_pack()
KMSAN: uninit-value in bch2_trans_start_alloc_update fs 7 syz, C 1051 497d 619d 28/29 422d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_btree_node_iter_init (2) fs 7 syz, C 309 497d 628d 28/29 422d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_inode_v3_validate fs 7 syz, C 5866 497d 626d 28/29 422d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_btree_node_get fs 7 syz, C 18 508d 614d 28/29 422d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_btree_node_check_topology fs 7 syz, C 19 523d 634d 28/29 422d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_dev_freespace_init fs 7 syz, C 432 497d 611d 28/29 422d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_checksum_update (2) fs 19 syz, C done 7 505d 600d 28/29 422d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_bucket_alloc_early fs 7 syz, C 219 501d 639d 28/29 422d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_btree_ptr_v2_validate fs 7 syz, C 55 498d 549d 28/29 422d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_xattr_validate fs 7 syz, C 22 520d 602d 28/29 422d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_alloc_v4_validate (2) fs 7 syz, C 514 501d 628d 28/29 422d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in __bch2_bkey_cmp_left_packed fs 7 syz 2 564d 591d 28/29 422d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in rw_aux_tree_set (2) fs 7 syz, C 2356 498d 623d 28/29 422d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_bkey_val_validate fs 7 syz, C 17 503d 616d 28/29 422d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_bkey_ptrs_validate fs 7 syz, C 15 502d 614d 28/29 422d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_bucket_alloc_trans fs 7 syz, C 15 475d 607d 28/29 422d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_bkey_cmp_packed_inlined (2) fs 7 syz, C 309 498d 618d 28/29 422d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
kernel BUG in bch2_fs_initialize fs -1 syz done 1004 477d 482d 28/29 423d 806776ad9c20 bcachefs: Add missing error handling
kernel BUG in qlist_free_all net fs -1 syz, C done done 12 475d 623d 28/29 423d 3a04334d6282 bcachefs: Fix b->written overflow
WARNING in bch2_bkey_pick_read_device fs -1 syz, C error 89 493d 497d 28/29 423d 3c72d3eea97b bcachefs: Fix WARN() in bch2_bkey_pick_read_device()
KASAN: slab-use-after-free Read in bchfs_read fs 19 syz, C done 34 482d 489d 28/29 423d 34b47e3d73a2 bcachefs: Fix UAF in bchfs_read()
kernel BUG in bch2_run_recovery_pass (2) fs -1 syz, C 70 490d 559d 28/29 423d 962322475bb5 bcachefs: Handle backpointers with unknown data types
BUG: sleeping function called from invalid context in bch2_printbuf_make_room (2) fs 5 syz, C error 59 490d 492d 28/29 423d b2ffadcc7f8f bcachefs: Fix scheduling while atomic from logging changes
kernel BUG in bch2_btree_node_iter_init fs -1 syz, C done done 167 446d 550d 28/29 423d 3a04334d6282 bcachefs: Fix b->written overflow
general protection fault in bch2_snapshot_tree_oldest_subvol fs 8 syz, C done 14 468d 490d 28/29 423d aa6a591f0fd7 bcachefs: Fix null ptr deref in bch2_snapshot_tree_oldest_subvol() 71f8e806a5e4 bcachefs: Stricter checks on "key allowed in this btree"
KASAN: slab-out-of-bounds Read in validate_bset_keys fs 19 syz, C 5 522d 522d 28/29 423d 3a04334d6282 bcachefs: Fix b->written overflow
KMSAN: uninit-value in bch2_write_inode fs 7 syz, C 4476 511d 559d 28/29 423d 58517f4df842 bcachefs: Initialize from_inode members for bch_io_opts
kernel BUG in bch2_stripe_validate fs -1 syz, C done done 6 500d 585d 28/29 423d 71f8e806a5e4 bcachefs: Stricter checks on "key allowed in this btree"
kernel BUG in __journal_res_get (2) fs -1 syz, C error done 1527 423d 631d 28/29 423d 4c0d2c67ac6d bcachefs: Fix early startup error path
BUG: unable to handle kernel paging request in efivarfs_pm_notify fs efi 8 syz, C 1037 520d 530d 28/29 423d cb6ae457bc6a efivarfs: Defer PM notifier registration until .fill_super
kernel BUG in __bch2_trans_commit fs -1 syz, C unreliable 11858 630d 655d 28/29 453d 8b22abb4c840 bcachefs: -o norecovery now bails out of recovery earlier
possible deadlock in bch2_alloc_sectors_start_trans fs 4 syz, C inconclusive 64 612d 633d 28/29 456d 2cd85fea49d8 bcachefs: Don't recurse in check_discard_freespace_key
kernel BUG in bch2_get_scanned_nodes fs -1 syz, C done 101 556d 617d 28/29 457d a6f4794fcd86 bcachefs: struct bkey_validate_context
kernel BUG in bch2_evacuate_bucket fs -1 syz, C done 4 620d 620d 28/29 457d 9e92d6e9efb0 bcachefs: Kill bch2_get_next_backpointer()
VFS: Busy inodes after unmount (use-after-free) fs 2 syz, C error 55684 458d 1290d 28/29 458d 965b5dd1894f ocfs2: free inode when ocfs2_get_init_inode() fails
kernel BUG in bch2_btree_path_traverse_one fs -1 syz, C done 9 605d 639d 28/29 458d f11ca2ab18e3 bcachefs: Guard against backpointers to unknown btrees
kernel BUG in bch2_journal_pin_set fs -1 syz, C done 11 566d 620d 28/29 458d b3d82c2f2761 bcachefs: Guard against journal seq overflow
WARNING in bch2_journal_flush_seq_async fs -1 syz, C 27 564d 688d 28/29 458d 4746ee182a76 bcachefs: Check for inode journal seq in the future
general protection fault in proc_scheduler fs 2 syz 6 577d 582d 28/29 458d d38e26e36206 mptcp: sysctl: sched: avoid using current->nsproxy
kernel BUG in bch2_rechecksum_bio fs -1 syz, C 4 626d 637d 28/29 458d 9bdb3b73e732 bcachefs: Check for extent crc uncompressed/compressed size mismatch
kernel BUG in __bch2_journal_pin_put fs -1 syz, C 11 578d 620d 28/29 458d b3d82c2f2761 bcachefs: Guard against journal seq overflow
kernel BUG in const_folio_flags (2) fs mm -1 syz 3 562d 622d 28/29 458d 3203b3ab0fcf mm/filemap: don't call folio_test_locked() without a reference in next_uptodate_folio()
kernel BUG in __bch2_btree_node_write fs -1 syz, C 110 563d 673d 28/29 458d 75eabea6988e bcachefs: Fix dup/misordered check in btree node read
kernel BUG in bch2_btree_node_lock_write fs -1 syz, C done 8 612d 624d 28/29 458d f9e0a9be70c8 bcachefs: Issue a transaction restart after commit in repair
kernel BUG in bch2_btree_pos_to_text (2) fs -1 syz, C 51 565d 623d 28/29 458d abf23afa36eb bcachefs: Fix btree node scan when unknown btree IDs are present
kernel BUG in bch2_bucket_alloc_trans (3) fs -1 syz, C error 711 563d 626d 28/29 458d 828552ca74a4 bcachefs: Kill bch2_bucket_alloc_new_fs()
kernel BUG in bch2_journal_noflush_seq fs -1 syz, C done done 841 563d 757d 28/29 458d 0eafe758ac44 bcachefs: Check for bucket journal seq in the future
general protection fault in bch2_checksum fs 19 syz, C done 34 459d 751d 28/29 458d f7f196170dcd bcachefs: cryptographic MACs on superblock are not (yet?) supported
WARNING: locking bug in eventfd_signal_mask io-uring fs 4 syz, C done 6 582d 586d 28/29 458d a9c83a0ab66a io_uring/timeout: flush timeouts outside of the timeout lock
general protection fault in bch2_btree_path_traverse_one fs 8 syz, C done 564 550d 651d 28/29 458d 90f3683e8f7c bcachefs: Fix null ptr deref in btree_path_lock_root() c7e78f7b0178 bcachefs: Ignore empty btree root journal entries
BUG: corrupted list in bch2_btree_and_journal_iter_exit fs 8 syz, C done 7 574d 620d 28/29 458d 0184dfa3b821 bcachefs: Fix journal_iter list corruption
WARNING in mark_buffer_dirty (6) fs -1 syz, C error 11669 458d 1025d 28/29 458d ca76bb226bf4 nilfs2: do not force clear folio if buffer is referenced
kernel BUG in bch2_bio_compress (2) fs -1 syz, C 5 506d 631d 28/29 458d 3d0b3b51c5ab bcachefs: Don't BUG_ON() when superblock feature wasn't set for compressed data
kernel BUG in bch2_btree_write_buffer_flush_locked fs -1 syz, C done 35 567d 648d 28/29 458d b3d82c2f2761 bcachefs: Guard against journal seq overflow
kernel BUG in bch2_btree_root_read fs -1 syz, C 9 548d 623d 28/29 458d 828552ca74a4 bcachefs: Kill bch2_bucket_alloc_new_fs()
KASAN: slab-out-of-bounds Write in __put_unused_fd fs 22 syz, C done 5 580d 584d 28/29 458d 0c0214df28f0 fanotify: Fix crash in fanotify_init(2)
possible deadlock in page_cache_ra_unbounded mm fs 4 syz, C error done 163 564d 1325d 28/29 520d 6f861765464f fs: Block writes to mounted block devices
KASAN: use-after-free Read in reiserfs_fill_super (3) fs 19 syz, C error done 47 627d 672d 28/29 571d fb6f20ecb121 reiserfs: The last commit
kernel BUG in bch2_fs_btree_write_buffer_exit fs -1 syz, C done 6138 627d 678d 28/29 586d ca43f73cd172 bcachefs: bch2_btree_write_buffer_flush_going_ro()
kernel BUG in bch2_journal_res_get (2) fs -1 syz, C 1710 627d 651d 28/29 586d ca43f73cd172 bcachefs: bch2_btree_write_buffer_flush_going_ro()
kernel BUG in bch2_fs_btree_cache_exit fs -1 syz, C done 2766 627d 658d 28/29 586d ca43f73cd172 bcachefs: bch2_btree_write_buffer_flush_going_ro()
kernel BUG in __bch2_btree_node_hash_insert fs -1 syz, C done 396 627d 636d 28/29 599d 0b6ec0c5ac6c bcachefs: Fix assertion pop in topology repair
KASAN: slab-out-of-bounds Read in journal_entry_dev_usage_to_text fs 17 syz, C done 33 629d 738d 28/29 599d 657d4282d8c4 bcachefs: Fix journal_entry_dev_usage_to_text() overrun
kernel BUG in __bkey_unpack_pos fs -1 syz, C 4 607d 646d 28/29 599d dc537189b5cf bcachefs: Fix validate_bset() repair path
kernel BUG in bch2_trans_node_iter_init fs -1 syz, C done 13 637d 651d 28/29 599d f8f1dde68681 bcachefs: Fix missing validation for bch_backpointer.level
kernel BUG in bch2_btree_path_level_init (2) fs -1 syz, C done 29 603d 653d 28/29 599d f8f1dde68681 bcachefs: Fix missing validation for bch_backpointer.level
kernel BUG in bch2_dev_btree_bitmap_mark fs -1 syz, C done 31 631d 655d 28/29 599d 27a036a0c3e7 bcachefs: Fix bch_member.btree_bitmap_shift validation
kernel BUG in bch2_bkey_pack_pos_lossy fs -1 syz, C 7 638d 649d 28/29 599d dc537189b5cf bcachefs: Fix validate_bset() repair path
kernel BUG in bch2_run_recovery_pass fs -1 syz, C done 17 631d 652d 28/29 599d 2642084f26b5 bcachefs: Allow for unknown key types in backpointers fsck
kernel BUG in bch2_ptr_swab fs -1 syz, C inconclusive 11 636d 653d 28/29 599d 840c2fbcc5cd bcachefs: Fix assertion pop in bch2_ptr_swab()
kernel BUG in __bch2_bkey_cmp_packed_format_checked fs -1 syz, C 4 651d 651d 28/29 603d d335bb3fd3a4 bcachefs: Ancient versions with bad bkey_formats are no longer supported
kernel BUG in bch2_bkey_cmp_packed fs -1 syz, C 8 638d 651d 28/29 603d d335bb3fd3a4 bcachefs: Ancient versions with bad bkey_formats are no longer supported
kernel BUG in bch2_inconsistent_error fs -1 syz, C 4 638d 649d 28/29 603d f9f0a5390dce bcachefs: Change OPT_STR max to be 1 less than the size of choices array
KASAN: slab-use-after-free Read in bch2_reconstruct_alloc fs 19 syz, C done 2 648d 653d 28/29 631d 8e910ca20e11 bcachefs: Fix UAF in bch2_reconstruct_alloc()
kernel BUG in bch2_bucket_alloc_trans (2) fs -1 syz, C done 103 631d 659d 28/29 631d 3fd27e9c57bf bcachefs: init freespace inited bits to 0 in bch2_fs_initialize
KASAN: null-ptr-deref Read in bch2_sb_set_upgrade_extra fs 11 syz, C 2 657d 653d 28/29 631d a25a83de45b4 bcachefs: fix null-ptr-deref in have_stripes()
general protection fault in btree_node_iter_and_journal_peek fs 2 syz, C 3 654d 676d 28/29 631d 3726a1970bd7 bcachefs: Fix NULL ptr dereference in btree_node_iter_and_journal_peek
UBSAN: shift-out-of-bounds in bch2_alloc_to_text fs -1 syz, C 29 643d 655d 28/29 631d 5c41f75d1b92 bcachefs: fix shift oob in alloc_lru_idx_fragmentation
UBSAN: shift-out-of-bounds in validate_sb_layout fs -1 syz, C done 7 644d 653d 28/29 631d 2045fc4295c4 bcachefs: Fix invalid shift in validate_sb_layout()
possible deadlock in bch2_replicas_entry_validate fs 4 syz, C done 9468 654d 673d 28/29 632d bf4baaa087e2 bcachefs: Fix lockdep splat in bch2_accounting_read
kernel BUG in bch2_btree_pos_to_text fs -1 syz, C 8 636d 684d 28/29 632d 0151d10a480d bcachefs: add check for btree id against max in try read node
kernel BUG in submit_bh_wbc (3) nilfs fs -1 syz, C done 18 655d 662d 28/29 632d 6ed469df0bfb nilfs2: fix kernel bug due to missing clearing of buffer delay flag
general protection fault in prt_str fs 2 syz, C done 2 675d 690d 28/29 632d a30f32222df2 bcachefs: Fix NULL pointer dereference in bch2_opt_to_text
general protection fault in bch2_alloc_read fs 2 syz, C 7 673d 680d 28/29 632d a319aeaebb6c bcachefs: Fix missing bounds checks in bch2_alloc_read()
UBSAN: shift-out-of-bounds in bch2_stripe_to_text fs -1 syz, C 3 684d 680d 28/29 632d 9f25dbe0bf91 bcachefs: Add missing validation for bch_stripe.csum_granularity_bits
UBSAN: shift-out-of-bounds in member_to_text fs -1 syz, C 12 659d 704d 28/29 632d c1bd21bb6518 bcachefs: Fix invalid shift in member_to_text()
WARNING in __bch2_fsck_err (2) fs -1 syz, C 3 672d 668d 28/29 652d 5612daafb764 bcachefs: Fix fsck warnings from bkey validation
general protection fault in bch2_fs_recovery fs 8 syz, C 10 677d 696d 28/29 654d 025c55a4c7f1 bcachefs: return err ptr instead of null in read sb clean
kernel BUG in vfs_get_tree fs -1 syz, C done 318 672d 715d 28/29 654d b29c30ab48e0 bcachefs: Fix incorrect IS_ERR_OR_NULL usage
KMSAN: uninit-value in bch2_bkey_cmp_packed_inlined fs 7 syz, C 7 677d 697d 28/29 654d 0696a18a8cc3 bcachefs: memset bounce buffer portion to 0 after key_sort_fix_overlapping
WARNING: suspicious RCU usage in bch2_snapshot_tree_oldest_subvol fs 4 syz, C 21 677d 689d 28/29 654d 39c3aad43f6f bcachefs: Hold read lock in bch2_snapshot_tree_oldest_subvol()
general protection fault in __copy_super fs 2 syz, C done 5 683d 685d 28/29 654d 40d40c6bea19 bcachefs: assign return error when iterating through layout
KASAN: slab-use-after-free Read in lockref_get_not_dead (2) fs 19 syz error 1 704d 700d 28/29 654d 4e32c25b58b9 libfs: fix get_stashed_dentry()
kernel BUG in bch2_lru_change (2) fs -1 syz, C 2 721d 721d 28/29 673d 9482f3b05332 bcachefs: avoid overflowing LRU_TIME_BITS for cached data lru
WARNING in bch2_fs_journal_stop fs -1 syz, C done 1463 720d 751d 28/29 673d 7f2de6947f92 bcachefs: Fix warning in bch2_fs_journal_stop()
kernel BUG in bch2_journal_replay fs -1 syz, C done 3 716d 788d 28/29 673d cab18be6957b bcachefs: Fix replay_now_at() assert
KMSAN: uninit-value in bch2_alloc_v4_validate fs 7 syz, C 5 716d 715d 28/29 673d 8ed823b19214 bcachefs: Fix compat issue with old alloc_v4 keys
WARNING in __bch2_fsck_err fs -1 syz, C 200 674d 721d 28/29 673d 075cabf324c3 bcachefs: Fix forgetting to pass trans to fsck_err()
KASAN: slab-out-of-bounds Write in bch2_dev_journal_init fs 21 syz, C 2 719d 719d 28/29 673d bdbdd4759f08 bcachefs: Fix missing validation in bch2_sb_journal_v2_validate()
WARNING in discard_new_inode fs -1 syz, C 3 721d 721d 28/29 673d 99c87fe0f584 bcachefs: fix incorrect i_state usage
kernel BUG in bch2_sort_keys fs -1 syz, C error 3 800d 824d 27/29 700d 5dfd3746b6c4 bcachefs: Fix needs_whiteout BUG_ON() in bkey_sort()
possible deadlock in bch2_gc_mark_key fs 4 syz, C done 86 725d 802d 27/29 708d 1841027c7de4 bcachefs: bch2_gc_btree() should not use btree_root_lock
WARNING in __replicas_deltas_realloc fs -1 syz, C 9 728d 750d 27/29 709d 1d16c605cc55 bcachefs: Disk space accounting rewrite
kernel BUG in bch2_fs_journal_stop fs -1 syz, C done 4370 723d 816d 27/29 710d 600b8be5e747 bcachefs: Change bch2_fs_journal_stop() BUG_ON() to warning
kernel BUG in __replicas_entry_idx fs -1 syz, C done unreliable 3 806d 809d 27/29 710d 8bb8d683a401 bcachefs: Delete journal-buf-sharded old style accounting
kernel panic: not locked: inodes NUM:NUM:NUM cached fs 2 syz, C 2 794d 805d 27/29 711d 385f0c05d670 bcachefs: kill key cache arg to bch2_assert_pos_locked()
BUG: MAX_LOCK_DEPTH too low! (4) fs -1 syz, C error 1364 725d 821d 27/29 712d 375476c41405 bcachefs: Add lockdep support for btree node locks
WARNING in bch2_fs_ioctl fs -1 syz, C done 36 725d 787d 27/29 714d d293ece10810 bcachefs: Fix shutdown ordering
kernel panic: bch_dev->ref underflow, last put: bch2_get_next_dev fs 2 syz, C done 21 805d 815d 27/29 714d 9667214b30ef bcachefs: Fix ref in trans_mark_dev_sbs() error path
WARNING: suspicious RCU usage in bch2_bucket_ref_update fs 4 syz, C done 5 760d 759d 27/29 723d 6f692b1672bd bcachefs: Fix RCU splat
BUG: sleeping function called from invalid context in bch2_printbuf_make_room fs 5 syz, C done 27 748d 746d 27/29 723d 737759fc098f bcachefs: Fix printbuf usage while atomic
UBSAN: shift-out-of-bounds in bch2_bkey_format_invalid (2) fs -1 syz, C 117 724d 788d 27/29 723d a0bd30e4ea9d bcachefs: Fix shift greater than integer size
WARNING: lock held when returning to user space in ns_ioctl fs 4 syz, C done 147 739d 750d 27/29 723d 280e36f0d5b9 nsfs: use cleanup guard
BUG: unable to handle kernel NULL pointer dereference in path_from_stashed fs 10 syz, C 23 744d 748d 27/29 723d f60d38cb02d0 pidfs: when time ns disabled add check for ioctl
kernel BUG in bch2_ioctl_fsck_online fs -1 syz, C done 3 779d 775d 26/29 755d 9bd01500e4d8 bcachefs: Fix freeing of error pointers
WARNING in __virt_to_phys (4) fs -1 syz, C 2 768d 764d 26/29 755d 9bd01500e4d8 bcachefs: Fix freeing of error pointers
UBSAN: shift-out-of-bounds in bch2_btree_node_read_done fs -1 syz, C 3 782d 806d 26/29 756d 9e7cfb35e266 bcachefs: Check for invalid btree IDs
INFO: task hung in journal_quiesce fs 1 syz 76 769d 798d 26/29 758d 89d21b69b4f8 bcachefs: Add missing bch2_journal_do_writes() call
WARNING in bch2_fs_read_write_early fs -1 syz, C 35 776d 784d 26/29 759d 1ba44217f825 bcachefs: delete_dead_snapshots() doesn't need to go RW
KASAN: slab-use-after-free Read in bch2_sb_errors_from_cpu fs 19 syz, C 2 776d 773d 26/29 759d 211c581de28e bcachefs: slab-use-after-free Read in bch2_sb_errors_from_cpu
UBSAN: shift-out-of-bounds in bch2_blacklist_entries_gc fs -1 syz, C 45 773d 773d 26/29 759d 472237b69d07 bcachefs: Fix shift-out-of-bounds in bch2_blacklist_entries_gc
kernel BUG in bch2_journal_res_get fs -1 syz, C 2 789d 785d 26/29 759d dbf4d79b7fc7 bcachefs: Fix early init error path in journal code
kernel BUG in bch2_lru_change fs -1 syz, C done 4 776d 791d 26/29 759d cff07e2739d8 bcachefs: Guard against overflowing LRU_TIME_BITS
WARNING: kmalloc bug in __snapshot_t_mut fs -1 syz, C done 10 769d 800d 26/29 759d 64cd7de998f3 bcachefs: Fix kmalloc bug in __snapshot_t_mut
kernel BUG in gc_bucket fs -1 syz, C done 221 792d 797d 26/29 759d 9432e90df1b8 bcachefs: Check for invalid bucket from bucket_gen(), gc_bucket()
UBSAN: shift-out-of-bounds in bch2_sb_dev_has_data fs -1 syz, C done 15 817d 815d 25/29 787d bcfbaea8e547 bcachefs: Fix shift overflows in replicas.c
kernel panic: not locked: inodes NUM:ADDR:NUM cached fs 2 syz, C 2 814d 810d 25/29 787d 6ce26ad376bd bcachefs: Fix missing parens in drop_locks_do()
kernel BUG in bch2_btree_iter_verify_entry_exit fs -1 syz, C done 3 807d 813d 25/29 787d 765b8cb8acab bcachefs: Check for subvolues with bogus snapshot/inode fields
kernel BUG in bch2_checksum fs -1 syz, C done 9 805d 815d 25/29 787d 6b74fdcc8e25 bcachefs: bch2_checksum() returns 0 for unknown checksum type
kernel BUG in cpu_replicas_add_entry fs -1 syz, C done 11 798d 817d 25/29 787d 5fa421448d1f bcachefs: Fix bogus verify_replicas_entry() assert
KASAN: stack-out-of-bounds Read in __bch2_encrypt_bio fs 17 syz, C done 2 818d 815d 25/29 787d 2ba24864d2f6 bcachefs: Fix stack oob in __bch2_encrypt_bio()
UBSAN: shift-out-of-bounds in bch2_btree_lost_data fs -1 syz, C done 3 813d 812d 25/29 787d f108ddd467b5 bcachefs: Fix shift overflow in btree_lost_data()
kernel panic: bch_dev->ref underflow, last put: bch2_trigger_alloc fs 2 syz, C done 6 805d 816d 25/29 787d 9667214b30ef bcachefs: Fix ref in trans_mark_dev_sbs() error path
general protection fault in __bch2_insert_snapshot_whiteouts fs 8 syz, C done 65 802d 815d 25/29 787d 6d48e61364ae bcachefs: Add missing guard in bch2_snapshot_has_children()
KASAN: slab-use-after-free Read in evict_inodes fs 19 syz, C done 2 820d 816d 25/29 787d d93ff5fa40b9 bcachefs: Fix race path in bch2_inode_insert()
KMSAN: uninit-value in bch2_dirent_invalid fs 7 syz, C 239 787d 815d 25/29 787d 2195b755ebd2 bcachefs: Fix unsafety in bch2_dirent_name_bytes()
kernel BUG in bch2_fs_recovery fs -1 syz, C done done 161 820d 825d 25/29 788d 7ffec9ccdc6a bcachefs: don't free error pointers
UBSAN: shift-out-of-bounds in read_one_super fs -1 syz, C done 31 794d 823d 25/29 793d 71dac2482ad3 bcachefs: BCH_SB_LAYOUT_SIZE_BITS_MAX
WARNING: kmalloc bug in bch2_dev_buckets_resize fs -1 syz, C 17 793d 825d 25/29 793d db42549d402c bcachefs: Add a better limit for maximum number of buckets
WARNING in __virt_to_phys (3) fs -1 syz, C 447 793d 826d 25/29 793d 7ffec9ccdc6a bcachefs: don't free error pointers
BUG: unable to handle kernel paging request in bch2_fs_btree_key_cache_exit fs 8 syz, C 1002 793d 826d 25/29 793d b30b70ad8bff bcachefs: Fix early error path in bch2_fs_btree_key_cache_exit()
UBSAN: shift-out-of-bounds in __bch2_bkey_invalid fs -1 syz, C done 6 798d 824d 25/29 793d 2bb9600d5d47 bcachefs: Guard against unknown k.k->type in __bkey_invalid()
KASAN: slab-out-of-bounds Read in bch2_sb_downgrade_to_text fs 17 syz, C done 32 810d 823d 25/29 793d 692aa7a54b2b bcachefs: Fix sb_field_downgrade validation
KASAN: slab-out-of-bounds Read in bch2_sb_clean_to_text fs 17 syz, C done 3 814d 824d 25/29 793d f39055220f6f bcachefs: Add missing validation for superblock section clean
kernel BUG in bch2_alloc_v4_invalid fs -1 syz, C error 3 800d 824d 25/29 793d 6b8cbfc3db75 bcachefs: Fix assert in bch2_alloc_v4_invalid()
KASAN: slab-out-of-bounds Read in bch2_varint_decode_fast fs 17 syz, C 583 793d 826d 25/29 793d 4a8521b6bb81 bcachefs: Inodes need extra padding for varint_decode_fast()
UBSAN: shift-out-of-bounds in bch2_bkey_format_invalid fs -1 syz, C 45 796d 821d 25/29 793d 61692c7812ab bcachefs: bch2_bkey_format_field_overflows()
UBSAN: shift-out-of-bounds in rewrite_old_nodes_pred fs -1 syz, C done 3 824d 824d 25/29 793d 0ec5b3b7ccfc bcachefs: Fix shift-by-64 in bformat_needs_redo()
kernel BUG in bch2_btree_node_read_done fs -1 syz, C error 5 823d 826d 25/29 793d a2ddaf965f6a bcachefs: bucket_pos_to_bp_noerror()
INFO: rcu detected stall in rtnl_newlink (4) sctp fs 1 syz, C error 9 814d 890d 25/29 806d b1f532a3b1e6 batman-adv: Avoid infinite loop trying to resize local TT
KASAN: slab-use-after-free Read in __fput (2) fs 19 syz, C done 6 830d 836d 25/29 806d 4efaa5acf0a1 epoll: be better about file lifetimes
general protection fault in __ep_remove fs 2 syz, C 1 852d 851d 25/29 806d 4efaa5acf0a1 epoll: be better about file lifetimes
WARNING: ODEBUG bug in bdev_super_lock (2) fs -1 syz, C done 3 844d 842d 25/29 806d 22650a99821d fs,block: yield devices early
kernel BUG at fs/inode.c:LINE! (2) fs -1 syz, C done unreliable 322 822d 2170d 25/29 808d 319c15174757 epoll: take epitem list out of struct file
WARNING in stashed_dentry_prune (2) fs -1 syz, C done 54 833d 842d 25/29 811d 9d9539db8638 pidfs: remove config option
WARNING in stashed_dentry_prune fs -1 syz, C done 20 878d 877d 25/29 848d 9d9539db8638 pidfs: remove config option
WARNING: ODEBUG bug in bdev_super_lock fs -1 syz, C 3 852d 862d 25/29 849d 59a55a63c246 fs,block: get holder during claim
KASAN: slab-use-after-free Read in sys_io_cancel fs 19 syz, C done 894 849d 887d 25/29 849d 28468cbed92e Revert "fs/aio: Make io_cancel() generate completions again"
BUG: sleeping function called from invalid context in __getblk_gfp fs 5 syz, C error done 3673 954d 1348d 25/29 849d f123dc86388c sysv: don't call sb_bread() with pointers_lock held
possible deadlock in reiserfs_dirty_inode fs 4 syz, C done done 519 920d 1348d 25/29 870d 6f861765464f fs: Block writes to mounted block devices
BUG: sleeping function called from invalid context in __bread_gfp fs 5 syz, C error done 359 946d 1347d 25/29 870d 6f861765464f fs: Block writes to mounted block devices
INFO: task hung in reiserfs_sync_fs fs 1 syz, C error done 22 945d 1325d 25/29 870d 6f861765464f fs: Block writes to mounted block devices
general protection fault in __fget_files (2) fs 2 syz, C done done 1 953d 949d 25/29 898d 6f861765464f fs: Block writes to mounted block devices
BUG: unable to handle kernel paging request in reiserfs_readdir_inode fs 19 syz, C error done 11 944d 1310d 25/29 898d 6f861765464f fs: Block writes to mounted block devices
kernel BUG in entry_points_to_object fs -1 syz, C done done 21 944d 989d 25/29 898d 6f861765464f fs: Block writes to mounted block devices
KASAN: vmalloc-out-of-bounds Read in cleanup_bitmap_list fs 17 syz, C error done 100 947d 1378d 25/29 903d 6f861765464f fs: Block writes to mounted block devices
KASAN: use-after-free Read in set_de_name_and_namelen fs 19 syz, C error done 15 950d 1351d 25/29 906d 6f861765464f fs: Block writes to mounted block devices
BUG: unable to handle kernel NULL pointer dereference in reiserfs_find_entry fs 19 syz, C error done 25 953d 1389d 25/29 917d 6f861765464f fs: Block writes to mounted block devices
KASAN: use-after-free Read in reiserfs_get_unused_objectid fs 19 syz, C inconclusive done 3 954d 1227d 25/29 919d 6f861765464f fs: Block writes to mounted block devices
possible deadlock in chown_common fs 4 syz, C error done 22 928d 1397d 25/29 920d 6f861765464f fs: Block writes to mounted block devices
kernel BUG in balance_leaf fs -1 syz, C error done 16 959d 1311d 25/29 920d 6f861765464f fs: Block writes to mounted block devices
possible deadlock in pipe_write fs 4 syz, C inconclusive 181 922d 1600d 25/29 920d 055ca8355991 fs/pipe: Fix lockdep false-positive in watchqueue pipe_write()
kernel BUG in direntry_check_right fs -1 syz, C done done 2 958d 1002d 25/29 920d 6f861765464f fs: Block writes to mounted block devices
KASAN: slab-out-of-bounds Read in search_by_key (2) fs 17 syz, C 4435 941d 1373d 25/29 920d dd8f87f21dc3 reiserfs: fix uninit-value in comp_keys
WARNING in pagemap_scan_pmd_entry fs -1 syz, C inconclusive 48 973d 996d 25/29 929d 0dff1b407def mm/pagemap: fix ioctl(PAGEMAP_SCAN) on vma check
WARNING in page_copy_sane fs mm -1 syz, C done 3 1058d 1054d 25/29 960d a08c7193e4f1 mm/filemap: remove hugetlb special casing in filemap.c
possible deadlock in inode_add_bytes fs 4 syz, C done 124 1117d 1116d 23/29 1030d 509f006932de shmem: fix quota lock nesting in huge hole handling
INFO: task hung in pipe_release (4) fs 1 syz, C done 51 1122d 1122d 23/29 1030d 0f71c9caf267 udp: Fix __ip_append_data()'s handling of MSG_SPLICE_PAGES
KASAN: slab-use-after-free Read in test_bdev_super_fc fs 19 syz, C done 7 1097d 1099d 23/29 1030d aca740cecbe5 fs: open block device after superblock creation
general protection fault in splice_to_socket fs 2 syz, C done 4 1149d 1152d 23/29 1044d ca2d49f77ce4 splice, net: Fix splice_to_socket() to handle pipe bufs larger than a page
KASAN: null-ptr-deref Write in get_block (2) fs 12 syz, C error 11 1139d 1172d 23/29 1044d ea2b62f30589 fs/sysv: Null check to prevent null-ptr-deref bug
KASAN: null-ptr-deref Read in ida_free (3) fs 11 syz, C error 4 1230d 1226d 22/29 1156d cb2239c198ad fs: drop peer group ids under namespace lock
KMSAN: uninit-value in ondemand_readahead fs mm 7 syz, C 221 1253d 1417d 22/29 1156d 3e35102666f8 fs/cramfs/inode.c: initialize file_ra_state
INFO: task hung in write_cache_pages (2) mm fs 1 syz, C done 36 1184d 1254d 22/29 1156d fb3592c41a44 migrate_pages: fix deadlock in batched migration
KMSAN: uninit-value in vfs_write fs 7 syz, C 3 1279d 1249d 22/29 1156d 2b4c99f7d9a5 can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write
KASAN: use-after-free Read in mas_next_nentry fs mm 19 syz, C error done 343 1369d 1563d 22/29 1260d 59f2f4b8a757 fs/userfaultfd: Fix maple tree iterator in userfaultfd_unregister()
INFO: rcu detected stall in sys_lsetxattr fs 1 syz, C done 2 1571d 1571d 22/29 1260d 0014edaedfd8 fs: unset MNT_WRITE_HOLD on failure
INFO: rcu detected stall in sys_setxattr (2) fs 1 syz, C done 3 1571d 1571d 22/29 1260d 0014edaedfd8 fs: unset MNT_WRITE_HOLD on failure
general protection fault in __dentry_path (2) fs 8 syz, C error 174 1565d 1575d 22/29 1260d 5c697c367a66 KVM: Initialize debugfs_dentry when a VM is created to avoid NULL deref
WARNING in mntput_no_expire (3) fs -1 syz, C inconclusive 29 1310d 1725d 22/29 1260d a91714312eb1 percpu_ref_init(): clean ->percpu_count_ref on failure
KASAN: slab-out-of-bounds Read in __fscache_acquire_volume fs mm 17 syz, C done done 1 1439d 1438d 22/29 1260d 9f0933ac026f fscache: fix OOB Read in __fscache_acquire_volume
KASAN: null-ptr-deref Write in io_file_get_normal io-uring fs 12 syz, C done 107 1505d 1590d 22/29 1260d d5361233e9ab io_uring: drop the old style inflight file tracking
memory leak in iovec_from_user fs io-uring 3 syz, C 1 1577d 1573d 22/29 1260d 323b190ba2de io_uring: free iovec if file assignment fails
BUG: unable to handle kernel paging request in truncate_inode_partial_folio fs mm 8 syz, C error 4 1461d 1500d 22/29 1260d 84ac013046cc secretmem: fix unhandled fault in truncate
general protection fault in legacy_parse_param fs 21 syz, C done 20 1600d 1861d 22/29 1260d ecff30575b5a LSM: general protection fault in legacy_parse_param
KASAN: use-after-free Read in io_rsrc_node_ref_zero fs 19 syz, C done 3 1628d 1627d 22/29 1260d 80912cef18f1 io_uring: disallow modification of rsrc_data during quiesce
KASAN: use-after-free Read in add_wait_queue fs io-uring 19 syz, C done done 13 1592d 1599d 22/29 1260d d89a4fac0fbc io_uring: fix assuming triggered poll waitqueue is the single poll
BUG: unable to handle kernel NULL pointer dereference in io_do_iopoll fs io-uring 10 syz, C done 3 1544d 1543d 22/29 1260d aa184e8671f0 io_uring: don't attempt to IOPOLL for MSG_RING requests
possible deadlock in snd_hrtimer_callback (2) fs 4 syz, C inconclusive 582 1464d 1731d 22/29 1260d 96b097091c66 ALSA: pcm: Use deferred fasync helper 95cc637c1afd ALSA: timer: Use deferred fasync helper
BUG: unable to handle kernel paging request in eventfd_ctx_put fs 8 syz, C done 7 1385d 1413d 22/29 1260d 7353633814f6 KVM: x86/xen: Fix eventfd error handling in kvm_xen_eventfd_assign()
KMSAN: uninit-value in tomoyo_path_chown fs 7 syz, C 13763 1417d 1418d 22/29 1260d f52d74b190f8 open: always initialize ownership fields
KASAN: use-after-free Read in filp_close io-uring fs 19 syz, C done 17 1301d 1530d 22/29 1260d 40a1926022d1 fix the breakage in close_fd_get_file() calling conventions change
KASAN: use-after-free Read in mas_next_entry fs mm 19 syz, C error 16 1370d 1384d 22/29 1260d 59f2f4b8a757 fs/userfaultfd: Fix maple tree iterator in userfaultfd_unregister()
WARNING: still has locks held in io_ring_submit_lock fs io-uring 4 syz, C done 3 1545d 1545d 22/29 1260d e7637a492b9f io_uring: fix locking state for empty buffer group
general protection fault in io_uring_register fs io-uring 2 syz done 1 1793d 1789d 20/29 1613d 41d3a6bd1d37 io_uring: pin SQPOLL data before unlocking ring lock
KASAN: use-after-free Write in io_queue_worker_create fs io-uring 22 syz, C unreliable 132 1696d 1705d 20/29 1613d 71a85387546e io-wq: check for wq exit after adding new worker task_work e47498afeca9 io-wq: remove spurious bit clear on task_work addition
INFO: task hung in io_uring_del_tctx_node io-uring fs 1 syz, C unreliable 37 1615d 1778d 20/29 1613d 8bab4c09f24e io_uring: allow conditional reschedule for intensive iterators
KASAN: use-after-free Write in io_submit_one fs 22 syz, C done 11 1700d 1737d 20/29 1613d 75feae73a280 block: fix single bio async DIO error handling
WARNING in inc_nlink (2) fs -1 syz, C inconclusive done 21 1613d 1950d 20/29 1613d 97f044f690ba fuse: don't increment nlink in link()
possible deadlock in io_worker_cancel_cb io-uring fs 4 syz, C done 9 1694d 1698d 20/29 1613d d800c65c2d4e io-wq: drop wqe lock before creating new worker
INFO: task hung in io_uring_try_cancel_requests fs io-uring 1 syz, C error 41 1702d 1744d 20/29 1613d f75d118349be io_uring: harder fdinfo sq/cq ring iterating
WARNING in signalfd_cleanup fs io-uring -1 syz, C done 201 1659d 1675d 20/29 1613d 791f3465c4af io_uring: fix UAF due to missing POLLFREE handling
INFO: rcu detected stall in newstat fs usb 1 syz, C unreliable done 4 1707d 1830d 20/29 1613d 476db72e5219 media: mceusb: return without resubmitting URB in case of -EPROTO error.
INFO: task hung in io_uring_cancel_generic (2) io-uring fs 1 syz, C done 97 1696d 1723d 20/29 1613d 78a780602075 io_uring: ensure task_work gets run as part of cancelations
INFO: rcu detected stall in io_wqe_worker (2) fs io-uring 1 syz, C done 2 1745d 1745d 20/29 1613d c5e0321e43de Revert "devlink: Remove not-executed trap policer notifications"
possible deadlock in io_poll_double_wake (3) io-uring fs 4 syz, C error done 703 1668d 1941d 20/29 1613d aa43477b0402 io_uring: poll rework
INFO: task hung in io_wqe_worker fs io-uring 1 syz, C unreliable 3 1754d 1750d 20/29 1613d 1d5f5ea7cb7d io-wq: remove worker to owner tw dependency
KASAN: null-ptr-deref Read in filp_close (2) fs 19 syz, C 3 1851d 1960d 20/29 1731d 3b0462726e7e cgroup: verify that source is a string 9b5b872215fe file: fix close_range() for unshare+cloexec
memory leak in io_sqe_buffers_register fs 3 syz, C 2 1924d 1925d 20/29 1731d bb6659cc0ad3 io_uring: Fix memory leak in io_sqe_buffers_register()
WARNING in io_link_timeout_fn fs io-uring -1 syz, C done 2 1913d 1912d 20/29 1731d 447c19f3b507 io_uring: fix ltout double free on completion race
KASAN: out-of-bounds Read in leaf_paste_entries fs 17 syz, C inconclusive 8 1763d 1994d 20/29 1731d 13d257503c09 reiserfs: check directory items on read from disk
general protection fault in io_commit_cqring (2) io-uring fs 12 syz, C done 82 1943d 1957d 20/29 1731d 51520426f4bc io_uring: handle setup-failed ctx in kill_timeouts
INFO: task hung in io_sq_thread_park (2) fs io-uring 1 syz done 2 1853d 1849d 20/29 1731d 46fee9ab02cb io_uring: remove double poll entry on arm failure
WARNING in __percpu_ref_exit (2) fs -1 syz, C error done 31 1732d 1971d 20/29 1731d a298232ee6b9 io_uring: fix link timeout refs
INFO: task hung in __io_uring_cancel fs io-uring 1 syz, C done 5 1869d 1935d 20/29 1731d 28090c133869 io_uring: fix work_exit sqpoll cancellations
memory leak in create_io_worker io-uring fs 3 syz, C 5 1754d 1793d 20/29 1731d 66e70be72288 io-wq: fix memory leak in create_io_worker()
WARNING in io_wqe_enqueue io-uring fs -1 syz, C done 13 1890d 1890d 20/29 1731d e6ab8991c5d0 io_uring: fix false WARN_ONCE
WARNING in io_poll_double_wake fs io-uring -1 syz, C done done 1124 1833d 1934d 20/29 1731d a890d01e4ee0 io_uring: fix poll requests leaking second poll entries
general protection fault in cdev_del (2) fs 11 syz, C error 45 1865d 2143d 20/29 1731d 8a12f8836145 net: hso: fix null-ptr-deref during tty device unregistration 0a360e8b65d6 tty: n_gsm: check error while registering tty devices
INFO: task hung in io_wq_put_and_exit io-uring fs 1 syz, C unreliable 628 1732d 1793d 20/29 1731d 3b33e3f4a6c0 io-wq: fix silly logic error in io_task_work_match()
possible deadlock in do_fcntl usb fs 4 syz, C done 245 1807d 2139d 20/29 1731d f671a691e299 fcntl: fix potential deadlocks for &fown_struct.lock
BUG: unable to handle kernel NULL pointer dereference in kiocb_done fs io-uring 10 syz, C unreliable done 3 1799d 1798d 20/29 1731d b8ce1b9d25cc io_uring: don't submit half-prepared drain request
WARNING in io_try_cancel_userdata fs io-uring -1 syz unreliable 4 1806d 1810d 20/29 1731d dadebc350da2 io_uring: fix io_try_cancel_userdata race for iowq
KMSAN: kernel-infoleak in copy_page_to_iter (2) fs mm 9 syz, C 2099 1827d 2885d 20/29 1731d ce3aba43599f ext4: fix kernel infoleak via ext4_extent_header
WARNING in mntput_no_expire (2) fs -1 syz, C done 68 1739d 1954d 20/29 1731d 7d01ef7585c0 Make sure nd->path.mnt and nd->path.dentry are always valid pointers
general protection fault in __io_file_supports_nowait fs io-uring 2 syz, C done done 13 1796d 1801d 20/29 1731d c6d3d9cbd659 io_uring: fix queueing half-created requests
KASAN: use-after-free Read in bdev_evict_inode fs 19 syz, C unreliable 1305 1816d 1819d 20/29 1731d 889c05cc5834 block: ensure the bdi is freed after inode_detach_wb
WARNING in pvr2_i2c_core_done usb fs -1 syz, C error 5780 1853d 2508d 20/29 1731d f8194e5e63fd media: pvrusb2: fix warning in pvr2_i2c_core_done
INFO: task hung in io_uring_cancel_generic io-uring fs 1 syz, C unreliable 151 1731d 1853d 20/29 1731d 1b48773f9fd0 io_uring: fix io_drain_req()
KASAN: use-after-free Read in __d_alloc (2) fs 19 syz, C unreliable 6774 1773d 1817d 20/29 1731d 0766ec82e5fb namei: Fix use after free in kern_path_locked
possible deadlock in f_getown fs 4 syz, C done done 164 1809d 2139d 20/29 1731d f671a691e299 fcntl: fix potential deadlocks for &fown_struct.lock
possible deadlock in snd_hrtimer_callback fs 4 syz, C done 571 1732d 1840d 20/29 1731d f671a691e299 fcntl: fix potential deadlocks for &fown_struct.lock
possible deadlock in io_sq_thread_finish fs 4 syz, C unreliable done 4 1977d 1979d 20/29 1731d f4e61f0c9add x86/kvm: Fix broken irq restoration in kvm_wait
WARNING in io_rsrc_node_switch io-uring fs -1 syz, C done 174 1917d 1926d 20/29 1731d 47b228ce6f66 io_uring: fix unchecked error in switch_start()
WARNING in io_wq_submit_work (2) io-uring fs -1 syz, C done done 52 1791d 1793d 20/29 1731d 713b9825a4c4 io-wq: fix cancellation on create-worker failure
KASAN: stack-out-of-bounds Read in iov_iter_revert fs io-uring 17 syz, C error 14 1804d 1821d 20/29 1731d 89c2b3b74918 io_uring: reexpand under-reexpanded iters
WARNING in internal_create_group fs -1 syz, C inconclusive 20 1796d 1850d 20/29 1731d b1a811633f73 block: nbd: add sanity check for first_minor
kernel BUG in remove_inode_hugepages fs mm -1 syz, C unreliable 3 1816d 1816d 20/29 1731d c7b1850dfb41 hugetlb: don't pass page cache pages to restore_reserve_on_error
WARNING in io_wq_put fs io-uring -1 syz, C unreliable 3 1965d 1977d 20/29 1731d f5d2d23bf0d9 io-wq: fix race around pending work on teardown
WARNING in io_uring_setup (2) fs io-uring -1 syz, C done 40 1917d 1926d 20/29 1731d 47b228ce6f66 io_uring: fix unchecked error in switch_start()
KASAN: use-after-free Read in idr_for_each (2) io-uring fs 19 syz, C error done 86 1970d 2132d 20/29 1935d 61cf93700fe6 io_uring: Convert personality_idr to XArray
INFO: task hung in io_uring_cancel_task_requests fs io-uring 1 syz, C 305 1970d 2004d 20/29 1946d 34343786ecc5 io_uring: unpark SQPOLL thread for cancelation
INFO: task hung in io_sq_thread_park fs io-uring 1 syz, C unreliable 263 1981d 1985d 20/29 1946d 3ebba796fa25 io_uring: ensure that SQPOLL thread is started for exit
memory leak in io_submit_sqes (2) fs io-uring 3 syz, C 1 1983d 1983d 20/29 1946d f01272541d2c io-wq: ensure all pending work is canceled on exit
possible deadlock in io_poll_double_wake (2) io-uring fs 4 syz, C error error 431 1946d 2138d 20/29 1946d 1c3b3e6527e5 io_uring: ignore double poll add on the same waitqueue head
inconsistent lock state in io_dismantle_req fs io-uring 4 syz, C 2 2013d 2013d 20/29 1946d 9ae1f8dd372e io_uring: fix inconsistent lock state
WARNING in io_uring_flush fs io-uring -1 syz, C unreliable 10 2020d 2030d 19/29 1976d 4325cb498cb7 io_uring: fix uring_flush in exit_files() warning
KASAN: use-after-free Read in search_by_entry_key fs 19 syz, C done 3 2125d 2129d 19/29 1976d d24396c5290b reiserfs: add check for an invalid ih_entry_count
WARNING in percpu_ref_kill_and_confirm (2) fs -1 syz, C done 71 2051d 2059d 19/29 1976d 9faadcc8abe4 io_uring: fix double io_uring free
WARNING in io_ring_ctx_wait_and_kill fs -1 syz, C done 9 2031d 2032d 19/29 1976d 06585c497b55 io_uring: do sqo disable on install_fd error
INFO: task hung in __io_uring_files_cancel io-uring fs 1 syz, C done 30 2018d 2084d 19/29 1976d bee749b187ac io_uring: fix files cancellation
KASAN: use-after-free Read in reiserfs_fill_super fs 19 syz, C error done 2 2070d 2069d 19/29 1976d d24396c5290b reiserfs: add check for an invalid ih_entry_count
BUG: unable to handle kernel paging request in percpu_ref_exit fs 8 syz, C done 3 2038d 2036d 19/29 1976d 3e2224c5867f io_uring: Fix return value from alloc_fixed_file_ref_node
general protection fault in io_disable_sqo_submit fs io-uring 2 syz, C done 124 2028d 2032d 19/29 1976d b4411616c26f io_uring: fix null-deref in io_disable_sqo_submit
WARNING in io_uring_cancel_task_requests io-uring fs -1 syz done 69 2013d 2017d 19/29 1976d 70b2c60d3797 io_uring: fix sqo ownership false positive warning
inconsistent lock state in io_file_data_ref_zero fs 4 syz, C done 7152 2059d 2083d 19/29 1976d ac0648a56c1f io_uring: use bottom half safe lock for fixed file data
BUG: corrupted list in io_file_get fs io-uring 8 syz, C done 3 2017d 2017d 19/29 1976d f609cbb8911e io_uring: fix list corruption for splice file_get
possible deadlock in send_sigio (2) fs 4 syz, C done done 40 2046d 2158d 19/29 1976d 8d1ddb5e7937 fcntl: Fix potential deadlock in send_sig{io, urg}()
kernel BUG at fs/reiserfs/prints.c:LINE! fs -1 syz, C done done 5 2067d 2146d 19/29 1976d d24396c5290b reiserfs: add check for an invalid ih_entry_count
memory leak in generic_parse_monolithic fs 3 syz, C 11 2067d 2093d 19/29 1976d 4cb682964706 afs: Fix memory leak when mounting with multiple source parameters
KASAN: slab-out-of-bounds Write in record_print_text fs 21 syz, C done unreliable 17 2017d 2020d 19/29 1976d 08d60e599954 printk: fix string termination for record_print_text()
BUG: unable to handle kernel NULL pointer dereference in __lookup_slow fs 10 syz, C inconclusive done 3 1999d 2139d 19/29 1976d d24396c5290b reiserfs: add check for an invalid ih_entry_count
possible deadlock in send_sigurg (2) fs 4 syz, C done 25 2063d 2114d 19/29 1976d 8d1ddb5e7937 fcntl: Fix potential deadlock in send_sig{io, urg}()
WARNING in io_disable_sqo_submit fs -1 syz, C done 9 2022d 2029d 19/29 1976d 6b393a1ff174 io_uring: fix false positive sqo warning on flush
KASAN: null-ptr-deref Read in filp_close fs 11 syz, C done 9 2057d 2059d 19/29 1976d fec8a6a69103 close_range: unshare all fds for CLOSE_RANGE_UNSHARE | CLOSE_RANGE_CLOEXEC 6abc20f8f879 selftests/core: add regression test for CLOSE_RANGE_UNSHARE | CLOSE_RANGE_CLOEXEC
KASAN: null-ptr-deref Write in kthread_use_mm io-uring fs 12 syz, C done 2 2104d 2104d 15/29 2086d 4b70cf9dea4c io_uring: ensure consistent view of original task ->mm from SQPOLL
general protection fault in io_uring_show_cred fs 2 syz, C done 4 2101d 2101d 15/29 2086d 6b47ab81c9a9 io_uring: use correct pointer for io_uring_show_cred()
KASAN: use-after-free Write in io_submit_sqes fs io-uring 22 syz, C error 2 2104d 2103d 15/29 2086d cb8a8ae31074 io_uring: drop req/tctx io_identity separately
INFO: task can't die in corrupted fs 1 syz, C done 4 2103d 2130d 15/29 2090d 86f33603f8c5 f2fs: handle errors of f2fs_get_meta_page_nofail
WARNING in unlock_new_inode fs -1 syz, C done 76 2127d 3032d 15/29 2090d 8859bf2b1278 reiserfs: only call unlock_new_inode() if I_NEW
memory leak in reiserfs_parse_options fs 3 syz, C 4 2154d 2350d 15/29 2090d e9d4709fcc26 reiserfs: Fix memory leak in reiserfs_parse_options()
general protection fault in percpu_ref_exit fs 2 syz, C done 3 2125d 2129d 15/29 2090d 7ea6bf2e6c40 percpu_ref: don't refer to ref->data if it isn't allocated
KASAN: use-after-free Read in fscache_alloc_cookie fs 19 syz done 1 2142d 2142d 15/29 2090d 1d0e850a49a5 afs: Fix cell removal
KASAN: use-after-free Read in io_wqe_worker fs io-uring 19 syz, C error 2 2139d 2141d 15/29 2090d c4068bf898dd io-wq: fix use-after-free in io_wq_worker_running
inconsistent lock state in xa_destroy io-uring fs 4 syz, C 755 2128d 2129d 15/29 2090d ca6484cd308a io_uring: no need to call xa_destroy() on empty xarray
INFO: task hung in io_uring_flush io-uring fs 1 syz, C done done 11 2181d 2188d 15/29 2090d b7ddce3cbf01 io_uring: fix cancel of deferred reqs with ->files
general protection fault in open_xa_dir fs 2 syz, C done 3 2125d 2137d 15/29 2090d c2bb80b8bdd0 reiserfs: Fix oops during mount
KASAN: use-after-free Write in io_wq_worker_running io-uring fs 22 syz, C error 14 2133d 2159d 15/29 2090d c4068bf898dd io-wq: fix use-after-free in io_wq_worker_running
KMSAN: uninit-value in __fget_light (2) fs 7 syz, C 18 2107d 2116d 15/29 2090d d5e4d0a5e692 inet_diag: validate INET_DIAG_REQ_PROTOCOL attribute
possible deadlock in mnt_want_write fs 4 syz, C done done 662 2129d 2937d 15/29 2090d 146d62e5a586 ovl: detect overlapping layers
general protection fault in io_poll_double_wake (2) fs io-uring 2 syz, C error 2 2140d 2139d 15/29 2116d 8706e04ed7d6 io_uring: always delete double poll wait entry on match
memory leak in do_eventfd fs 3 syz, C 2 2174d 2269d 15/29 2127d f65886606c2d KVM: fix memory leak in kvm_io_bus_unregister_dev()
possible deadlock in __io_queue_deferred fs io-uring 4 syz, C error 1 2189d 2188d 15/29 2150d 7271ef3a93a8 io_uring: fix recursive completion locking on oveflow flush
WARNING in __kernel_read fs -1 syz, C done 60 2158d 2216d 15/29 2150d a39c46067c84 net/9p: validate fds in p9_fd_open
general protection fault in cdev_del usb fs 2 syz, C 315 2160d 2628d 15/29 2150d e911e99a0770 usb: hso: check for return value in hso_serial_common_create()
BUG: unable to handle kernel NULL pointer dereference in loop_rw_iter io-uring fs 10 syz, C done 24 2176d 2188d 15/29 2150d 2dd2111d0d38 io_uring: Fix NULL pointer dereference in loop_rw_iter()
KASAN: use-after-free Read in io_async_task_func io-uring fs 19 syz error 1 2187d 2187d 15/29 2150d 6d816e088c35 io_uring: hold 'ctx' reference around task_work queue + execute
WARNING in drop_nlink fs -1 syz, C done error 1 2298d 2294d 15/29 2150d facb03dddec0 fs/minix: don't allow getting deleted inodes
KASAN: use-after-free Read in path_init (2) fs 19 syz, C done 29 2185d 2186d 15/29 2150d 24fb33d40d60 fix breakage in do_rmdir()
WARNING in __kernel_write fs -1 syz, C done 522 2199d 2219d 15/29 2150d a39c46067c84 net/9p: validate fds in p9_fd_open
KMSAN: uninit-value in get_block fs 7 syz, C 13 2266d 2270d 15/29 2150d 270ef41094e9 fs/minix: reject too-large maximum file size
KASAN: null-ptr-deref Write in get_block fs 12 syz, C done 101 2217d 2330d 15/29 2150d da27e0a0e5f6 fs/minix: check return value of sb_getblk()
memory leak in io_submit_sqes fs io-uring 3 syz, C 2 2168d 2187d 15/29 2150d a36da65c4656 io_uring: fail poll arm on queue proc failure
KASAN: use-after-free Write in get_block fs 22 syz, C inconclusive inconclusive 12 2233d 2283d 15/29 2150d 270ef41094e9 fs/minix: reject too-large maximum file size
general protection fault in io_poll_double_wake io-uring fs 2 syz, C done 8 2155d 2183d 15/29 2150d d4e7cd36a90e io_uring: sanitize double poll handling
possible deadlock in io_timeout_fn io-uring fs 4 syz, C done 4 2185d 2188d 15/29 2150d 51a4cc112c7a io_uring: defer file table grabbing request cleanup for locked requests
possible deadlock in lock_trace (3) fs 4 syz inconclusive done 69 2318d 2453d 15/29 2179d 2db9dbf71bf9 proc: Use new infrastructure to fix deadlocks in execve
possible deadlock in do_io_accounting (3) fs 4 syz, C inconclusive done 39 2325d 2415d 15/29 2179d 76518d379885 proc: io_accounting: Use new infrastructure to fix deadlocks in execve
possible deadlock in proc_pid_personality fs 4 syz inconclusive done 3 2335d 2344d 15/29 2179d 2db9dbf71bf9 proc: Use new infrastructure to fix deadlocks in execve
WARNING: bad unlock balance in rcu_lock_release fs 4 syz, C inconclusive done 1433 2320d 2602d 15/29 2180d 10476e630422 locking/lockdep: Fix bad recursion pattern
WARNING: bad unlock balance in rcu_core fs 4 syz, C inconclusive done 3578 2316d 2672d 15/29 2180d 10476e630422 locking/lockdep: Fix bad recursion pattern
KASAN: use-after-free Write in fsnotify_detach_connector_from_object fs 22 syz, C done 4 2242d 2247d 15/29 2212d ef1548adada5 proc: Use new_inode not new_inode_pseudo
INFO: task hung in locks_remove_posix fs input usb 1 syz 2231 2247d 2269d 15/29 2212d 187b96db5ca7 x86/unwind/orc: Fix unwind_get_return_address_ptr() for inactive tasks
INFO: trying to register non-static key in io_cqring_ev_posted (3) fs -1 syz, C done 3 2271d 2273d 15/29 2212d 583863ed9181 io_uring: initialize ctx->sqo_wait earlier
general protection fault in start_creating fs 2 syz, C done 106 2233d 2263d 15/29 2212d d56f5136b010 KVM: let kvm_destroy_vm_debugfs clean up vCPU debugfs directories
KASAN: use-after-free Read in blkdev_direct_IO fs 19 syz, C done error 8 2557d 2562d 15/29 2229d 0eb6ddfb865c block: Fix __blkdev_direct_IO() for bio fragments
KASAN: use-after-free Read in blkdev_bio_end_io fs 19 syz, C done error 13 2547d 2559d 15/29 2229d 7b6620d7db56 block: remove REQ_NOWAIT_INLINE
KASAN: use-after-free Read in dput (2) fs 19 syz done 4 2305d 2305d 15/29 2241d 4fa3b1c41737 proc: Handle umounts cleanly
INFO: rcu detected stall in io_uring_release fs 1 syz 15 2261d 2302d 15/29 2241d 3fd44c86711f io_uring: use cond_resched() in io_ring_ctx_wait_and_kill()
possible deadlock in io_submit_one (3) fs 4 syz done 45 2310d 2317d 15/29 2280d 63f818f46af9 proc: Use a dedicated lock in struct pid
INFO: task hung in io_queue_file_removal fs 1 syz, C done 16 2322d 2330d 15/29 2280d 4afdb733b160 io-uring: drop completion when removing file
KMSAN: uninit-value in simple_attr_read fs 7 syz, C 6 2283d 2353d 15/29 2280d a65cab7d7f05 libfs: fix infoleak in simple_attr_read()
possible deadlock in send_sigurg fs 4 syz, C done 65 2303d 2317d 15/29 2280d 63f818f46af9 proc: Use a dedicated lock in struct pid
INFO: trying to register non-static key in __io_uring_register fs -1 syz, C done 39 2311d 2313d 15/29 2280d f7fe9346869a io_uring: initialize fixed_file_data lock
INFO: trying to register non-static key in io_cqring_ev_posted (2) fs -1 syz, C done 42 2283d 2320d 15/29 2280d 10bea96dcc13 io_uring: add missing finish_wait() in io_sq_thread()
possible deadlock in send_sigio fs 4 syz, C done 7 2307d 2316d 15/29 2280d 63f818f46af9 proc: Use a dedicated lock in struct pid
memory leak in fasync_helper fs 3 syz, C 14 2373d 2434d 15/29 2305d 67f562e3e147 net/smc: transfer fasync_list in case of fallback
BUG: sleeping function called from invalid context in __kmalloc ceph fs 5 syz, C done 5 2366d 2373d 15/29 2305d b27a939e8376 ceph: canonicalize server path in place
WARNING: ODEBUG bug in io_sqe_files_unregister fs -1 syz, C done 964 2374d 2421d 15/29 2339d 2faf852d1be8 io_uring: cleanup fixed file data table references
memory leak in reiserfs_fill_super fs 3 syz, C 20 2381d 2430d 15/29 2362d 5474ca7da6f3 reiserfs: Fix memory leak of journal device string
BUG: corrupted list in __dentry_kill (2) fs 8 syz, C done 4945 2430d 2430d 15/29 2362d a3d1e7eb5abe simple_recursive_removal(): kernel-side rm -rf for ramfs-style filesystems
WARNING in do_dentry_open (2) fs -1 syz, C done 17 2382d 2379d 15/29 2362d a37f4958f7b6 debugfs: Return -EPERM when locked down
WARNING: refcount bug in chrdev_open fs 13 syz, C inconclusive done 15 2441d 2543d 15/29 2362d 68faa679b8be chardev: Avoid potential use-after-free in 'chrdev_open()'
kernel BUG at fs/pipe.c:LINE! fs -1 syz, C done 693 2433d 2440d 15/29 2403d 8c7b8c34ae95 pipe: Remove assertion from pipe_poll()
general protection fault in io_commit_cqring fs 2 syz, C done 3 2458d 2459d 15/29 2429d 15dff286d0e0 io_uring: check for validity of ->rings in teardown
INFO: task hung in io_wq_destroy fs 1 syz, C done 20 2444d 2475d 15/29 2429d b60fda6000a9 io-wq: wait for io_wq_create() to setup necessary workers
INFO: trying to register non-static key in io_cqring_ev_posted fs -1 syz, C done 6 2444d 2457d 15/29 2429d eb065d301e8c io_uring: io_allocate_scq_urings() should return a sane state
WARNING in iov_iter_pipe fs -1 syz, C done 1117 2447d 2465d 15/29 2429d 419e9c38aa07 iomap: Fix pipe page leakage during splicing
BUG: unable to handle kernel paging request in io_wq_cancel_all fs 8 syz, C done 2 2473d 2473d 15/29 2429d 975c99a57096 io_uring: io_wq_create() returns an error pointer, not NULL
KASAN: invalid-free in io_sqe_files_unregister fs 24 syz, C done 3 2462d 2462d 15/29 2429d 46568e9be70f io_uring: fix error clear of ->file_table in io_sqe_files_register()
KASAN: use-after-free Read in do_mount fs 19 syz done 6 2487d 2495d 14/29 2443d 0ecee6699064 fs/namespace.c: fix use-after-free of mount in mnt_warn_timestamp_expiry()
KASAN: use-after-free Read in io_uring_setup fs 19 syz error 1 2476d 2475d 13/29 2449d 044c1ab399af io_uring: don't touch ctx in setup after ring fd install
KASAN: use-after-free Read in ep_scan_ready_list fs 19 syz, C done 39 2913d 2949d 13/29 2451d 430ac66eb4c5 net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree()
INFO: trying to register non-static key in finish_writeback_work fs -1 syz error 1 2511d 2508d 13/29 2475d 8e00c4e9dd85 writeback: fix use-after-free in finish_writeback_work()
INFO: task syz-executor can't die for more than 143 seconds. fs -1 syz, C done 61 2505d 2612d 13/29 2487d 8619e5bdeee8 /dev/mem: Bail out upon SIGKILL. 7c3a6aedcd6a kexec: bail out upon SIGKILL when allocating memory. 8f9e86ee7959 staging: android: ion: Bail out upon SIGKILL when allocating memory.
WARNING in kfree fs -1 syz, C done 2 2535d 2534d 13/29 2487d 43ce4c1feadb vfs: Add a single-or-reconfig keying to vfs_get_super()
WARNING in __blkdev_put (2) fs -1 syz 3082 2552d 2559d 12/29 2526d e91455bad5cf bdev: Fixup error handling in blkdev_get()
kernel panic: corrupted stack end in dput fs 2 syz done 1 2594d 2594d 12/29 2537d 95fa145479fb bpf: sockmap/tls, close can race with map free
general protection fault in do_move_mount (2) fs 2 syz done 7 2598d 2607d 12/29 2566d 570d7a98e7d6 vfs: move_mount: reject moving kernel internal mounts
possible deadlock in io_submit_one fs 4 syz, C done 1779 2570d 2740d 12/29 2566d cbcfa130a911 fs/userfaultfd.c: disable irqs for fault_pending and event locks
WARNING in notify_change fs -1 syz, C 566 2653d 3042d 12/29 2571d f69e749a4935 Abort file_remove_privs() for non-reg. files
WARNING in fanotify_handle_event fs -1 syz, C done 5 2608d 2607d 12/29 2584d c285a2f01d69 fanotify: update connector fsid cache on add mark
BUG: Dentry still in use [unmount of hugetlbfs hugetlbfs] fs -1 syz, C done 3 2607d 2607d 12/29 2584d 1b0b9cc8d379 vfs: fsmount: add missing mntget()
possible deadlock in aio_poll fs 4 syz, C 5041 2744d 2888d 12/29 2595d ae62c16e105a userfaultfd: disable irqs when taking the waitqueue lock
INFO: task hung in __get_super fs 1 syz, C 80 2605d 3050d 12/29 2605d 33ec3e53e7b1 loop: Don't change loop device under exclusive opener
general protection fault in load_elf_binary fs mm 2 syz, C done 15 2683d 2688d 12/29 2611d cc338010a233 fs/binfmt_elf.c: free PT_INTERP filename ASAP
general protection fault in put_fs_context fs 2 syz, C 9 2837d 2838d 12/29 2614d 8d0347f6c3a9 convert do_remount_sb() to fs_context
INFO: task hung in __io_uring_register fs 1 syz, C done 51 2664d 2673d 12/29 2629d b19062a56726 io_uring: fix possible deadlock between io_uring_{enter,register}
general protection fault in fanotify_handle_event fs 2 syz done 5 2668d 2668d 12/29 2629d b1da6a51871c fsnotify: Fix NULL ptr deref in fanotify_get_fsid()
BUG: unable to handle kernel paging request in do_mount fs 8 syz, C 194 2839d 2877d 12/29 2636d 3e1aeb00e6d1 vfs: Implement a filesystem superblock creation/configuration context
possible deadlock in seq_read fs 4 syz, C 19074 2681d 3171d 12/29 2674d 73601ea5b7b1 fs/open.c: allow opening only regular files during execve()
KASAN: use-after-free Read in link_path_walk fs 19 syz done 5 2793d 2809d 12/29 2674d 1da6c4d9140c bpf: fix use after free in bpf_evict_inode
KASAN: use-after-free Read in trailing_symlink fs 19 syz done 2 2794d 2809d 12/29 2674d 1da6c4d9140c bpf: fix use after free in bpf_evict_inode
KASAN: use-after-free Read in path_lookupat fs 19 syz done 1 2809d 2809d 12/29 2674d 1da6c4d9140c bpf: fix use after free in bpf_evict_inode
KASAN: use-after-free Read in filemap_fault mm fs 19 syz, C 277 2768d 2778d 11/29 2685d 6b4c9f446981 filemap: drop the mmap_sem for all blocking operations
possible deadlock in __do_page_fault fs mm 4 syz, C 820 2710d 2877d 11/29 2689d fb4415a12632 staging: android: ashmem: Don't call fallocate() with ashmem_mutex held.
possible deadlock in vfs_fallocate fs 4 syz, C 3981 2911d 3022d 11/29 2689d fb4415a12632 staging: android: ashmem: Don't call fallocate() with ashmem_mutex held.
BUG: unable to handle kernel paging request in dput (2) fs 8 syz, C 4 2745d 2746d 11/29 2711d 36991ca68db9 blk-mq: protect debugfs_create_files() from failures 37ea7b630ae5 debugfs: debugfs_lookup() should return NULL if not found
general protection fault in __dentry_path fs 2 syz, C 2082 2713d 2746d 11/29 2711d 8ed0579c12b2 kvm: properly check debugfs dentry before using it
KASAN: use-after-free Read in posix_lock_inode fs 19 syz 5 2774d 2774d 11/29 2760d bf77ae4c98d7 locks: fix error in locks_move_blocks()
KASAN: use-after-free Read in locks_delete_block fs 19 syz 4 2802d 2824d 11/29 2760d 16306a61d3b7 fs/locks: always delete_block after waiting.
WARNING in userfaultfd_ioctl mm fs -1 syz, C 11 2794d 2803d 11/29 2779d 01e881f5a1fc userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered
WARNING: kmalloc bug in krealloc fs -1 syz, C 2 2944d 2944d 11/29 2824d 61448479a9f2 mm: don't warn about large allocations for slab
WARNING: kmalloc bug in vfs_getxattr_alloc fs -1 syz, C 9 2900d 2942d 11/29 2824d 61448479a9f2 mm: don't warn about large allocations for slab
KASAN: slab-out-of-bounds Read in fscache_alloc_cookie fs 17 syz, C 1936 2850d 2951d 11/29 2838d 1ff22883b0b2 fscache: Fix incomplete initialisation of inline key space fa520c47eaa1 fscache: Fix out of bound read in long cookie keys
general protection fault in ubifs_mount fs mtd 2 syz, C 216 2877d 2894d 11/29 2857d 37f31b6ca431 ubifs: Check for name being NULL while mounting
WARNING in __fsnotify_recalc_mask fs -1 syz 9 2909d 2911d 10/29 2887d d3bc0fa8411c fsnotify: fix false positive warning on inode delete
INFO: task hung in fsnotify_mark_destroy_workfn fs 1 syz 13 2919d 3033d 10/29 2890d 128f38041035 android: binder: Rate-limit debug and userspace triggered err msgs
BUG: soft lockup in d_walk fs 1 syz, C 163 2979d 3024d 8/29 2893d 4fb48871409e restore cond_resched() in shrink_dcache_parent()
general protection fault in send_sigurg_to_task fs 2 syz, C 6 2913d 2916d 8/29 2901d 84fe4cc09abc signal: Don't send signals to tasks that don't exist
general protection fault in send_sigio_to_task fs 2 syz, C 176 2912d 2916d 8/29 2901d 84fe4cc09abc signal: Don't send signals to tasks that don't exist
kernel BUG at fs/userfaultfd.c:LINE! (2) fs mm -1 syz, C 8 2926d 2944d 8/29 2921d 31e810aa1033 userfaultfd: remove uffd flags from vma->vm_flags if UFFD_EVENT_FORK fails
KASAN: stack-out-of-bounds Read in locks_remove_posix fs 17 syz, C 1 2939d 2939d 8/29 2922d 99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
KASAN: slab-out-of-bounds Read in getname_kernel fs 17 syz, C 8 2946d 3046d 8/29 2936d 02f51d45937f autofs: fix slab out of bounds read in getname_kernel()
KASAN: global-out-of-bounds Write in string fs 21 syz, C 7 2991d 3048d 8/29 2936d fe10e398e860 reiserfs: fix buffer overflow with long warning messages
BUG: unable to handle kernel paging request in dput fs 8 syz, C 26 2982d 2985d 8/29 2951d d85b399b64e8 fix proc_fill_cache() in case of d_alloc_parallel() failure
KASAN: use-after-free Read in __vfs_write fs 19 syz 14 2980d 2982d 8/29 2951d 66e58e0ef80a bpfilter: fix race in pipe access
general protection fault in pipe_write fs 2 syz 1 2982d 2982d 8/29 2951d 66e58e0ef80a bpfilter: fix race in pipe access
BUG: unable to handle kernel NULL pointer dereference in ep_item_poll fs 10 syz, C 15 2961d 2961d 8/29 2951d e88958e6369a net: handle NULL ->poll gracefully
general protection fault in __vfs_write fs 2 syz 25 2979d 2983d 8/29 2951d 66e58e0ef80a bpfilter: fix race in pipe access
KASAN: use-after-free Read in pipe_read fs 19 syz, C 3 2981d 2982d 8/29 2951d 66e58e0ef80a bpfilter: fix race in pipe access
KASAN: use-after-free Read in __kernel_write fs 19 syz 7 2980d 2982d 8/29 2951d 66e58e0ef80a bpfilter: fix race in pipe access
KASAN: null-ptr-deref Write in simple_write_to_buffer fs 12 syz, C 5 2991d 3016d 8/29 2951d fc14eebfc208 PM / hibernate: Fix oops at snapshot_write()
general protection fault in touch_atime fs 2 syz 6 2979d 2982d 8/29 2951d 66e58e0ef80a bpfilter: fix race in pipe access
WARNING in do_dentry_open fs -1 syz, C 26 2974d 2982d 8/29 2951d b16558579576 bpf: implement dummy fops for bpf objects
general protection fault in vfs_read fs 2 syz 2 2981d 2982d 8/29 2951d 66e58e0ef80a bpfilter: fix race in pipe access
BUG: unable to handle kernel NULL pointer dereference in do_sys_poll fs 10 syz, C 297 2961d 2961d 8/29 2951d e88958e6369a net: handle NULL ->poll gracefully
WARNING in sysfs_remove_group fs -1 syz, C 11125 2952d 3206d 8/29 2951d d3349b6b3c37 loop: remember whether sysfs_create_group() was done
INFO: rcu detected stall in d_walk fs 1 syz, C 25680 2976d 3038d 8/29 2951d 4fb48871409e restore cond_resched() in shrink_dcache_parent()
KASAN: use-after-free Read in remove_wait_queue (2) fs 19 syz, C 4 3071d 3082d 5/29 2983d af8d3c7c001a ppp: remove the PPPIOCDETACH ioctl
INFO: task hung in __blkdev_get fs 1 syz, C 662 3037d 3163d 5/29 3013d 1e047eaab3bb block/loop: fix deadlock after loop_set_status
BUG: corrupted list in __dentry_kill fs 8 syz, C 35 3030d 3050d 5/29 3013d 4a3877c4cedd rpc_pipefs: fix double-dput()
WARNING: refcount bug in put_pid_ns fs 13 syz 6 3051d 3050d 5/29 3013d 8e04944f0ea8 mm,vmscan: Allow preallocating memory for register_shrinker().
WARNING in format_decode fs -1 syz, C 1 3051d 3050d 5/29 3013d 9ad553abe66f fs/reiserfs/journal.c: add missing resierfs_warning() arg
KASAN: use-after-free Read in remove_wait_queue fs 19 syz, C 7 3088d 3098d 4/29 3083d 5eeb2ca02a2f ANDROID: binder: synchronize_rcu() when using POLLFREE.
WARNING in register_lock_class fs -1 syz, C 2 3152d 3149d 4/29 3105d f5cb779ba163 ANDROID: binder: remove waitqueue when thread exits.
KASAN: use-after-free Read in __lock_acquire (2) fs 19 syz, C 589 3108d 3184d 4/29 3105d f5cb779ba163 ANDROID: binder: remove waitqueue when thread exits.
general protection fault in page_mapping fs mm 2 syz, C 46 3132d 3160d 4/29 3109d 7d11f77f84b2 RDS: null pointer dereference in rds_atomic_free_op
BUG: unable to handle kernel NULL pointer dereference in page_mapping fs mm 10 syz, C 4 3152d 3155d 4/29 3109d 7d11f77f84b2 RDS: null pointer dereference in rds_atomic_free_op
BUG: unable to handle kernel paging request in devpts_mntget fs 8 syz, C 21 3122d 3199d 4/29 3109d c9cc8d01fb04 devpts: fix error handling in devpts_mntget()
general protection fault in show_timer fs 2 syz, C 10 3153d 3172d 4/29 3109d cef31d9af908 posix-timer: Properly check sigevent->sigev_notify
KASAN: use-after-free Read in __wake_up_common fs 19 syz, C 888 3109d 3119d 4/29 3109d 4cd879515d68 vhost_net: stop device during reset owner
kernel BUG at fs/userfaultfd.c:LINE! mm fs -1 syz, C 3 3152d 3149d 4/29 3109d 0cbb4b4f4c44 userfaultfd: clear the vma->vm_userfaultfd_ctx if UFFD_EVENT_FORK fails
general protection fault in proc_flush_task fs 2 syz 2 3155d 3172d 4/29 3114d c0ee554906c3 pid: Handle failure to allocate the first pid in a pid namespace
BUG: unable to handle kernel NULL pointer dereference in proc_flush_task fs 10 syz 1 3156d 3152d 4/29 3114d c0ee554906c3 pid: Handle failure to allocate the first pid in a pid namespace
KASAN: use-after-free Read in handle_userfault fs mm 19 syz, C 151 3143d 3206d 3/29 3131d 0cbb4b4f4c44 userfaultfd: clear the vma->vm_userfaultfd_ctx if UFFD_EVENT_FORK fails
WARNING in lock_release fs -1 syz, C 72 3153d 3186d 3/29 3150d ca0168e8a77c alloc_super(): do ->s_umount initialization earlier