|
general protection fault in vma_is_shmem
io-uring
mm
|
2 |
C |
error |
|
28 |
1378d |
1379d
|
1/29 |
never |
mm/gup.c: Fix return value for __gup_longterm_locked()
|
|
KASAN: null-ptr-deref Read in io_sqe_buffer_register
io-uring
|
11 |
C |
done |
|
54 |
265d |
269d
|
2/29 |
never |
fixup: mm/gup: remove record_subpages()
|
|
INFO: task hung in io_sq_thread_stop
fs
io-uring
|
1 |
C |
done |
|
211 |
1931d |
2090d
|
1/29 |
never |
io_uring: don't sleep schedule in SQPOLL thread if we need to park
|
|
WARNING in io_wq_put_and_exit
io-uring
|
-1 |
syz |
|
|
74 |
15d |
91d
|
29/29 |
10d |
41859843f27d
io_uring/tctx: mark io_wq as exiting before error path teardown
|
|
KCSAN: data-race in io_waitid_complete / io_waitid_wait
io-uring
|
6 |
|
|
|
6 |
144d |
171d
|
29/29 |
25d |
b994ace83a2b
io_uring/waitid: fix KCSAN warning on io_waitid->head
|
|
KCSAN: data-race in io_flush_timeouts / io_issue_sqe (2)
io-uring
|
6 |
|
|
|
58 |
116d |
341d
|
29/29 |
25d |
42b12cb5fd45
io_uring/timeout: annotate data race in io_flush_timeouts()
|
|
INFO: task hung in io_wq_put_and_exit (6)
io-uring
|
1 |
C |
error |
|
74 |
127d |
286d
|
29/29 |
25d |
10dc95939817
io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop
1f293098a313
io_uring/io-wq: don't trigger hung task for syzbot craziness
|
|
possible deadlock in io_uring_del_tctx_node
io-uring
|
4 |
|
|
|
6 |
151d |
152d
|
29/29 |
125d |
5623eb1ed035
io_uring/tctx: add separate lock for list of tctx's in ctx
|
|
INFO: task hung in io_uring_del_tctx_node (5)
io-uring
|
1 |
C |
done |
|
19 |
158d |
215d
|
29/29 |
144d |
101e596e7404
io_uring/fdinfo: cap SQ iteration at max SQ entries
|
|
memory leak in io_submit_sqes (5)
io-uring
|
3 |
syz |
|
|
3 |
181d |
181d
|
29/29 |
144d |
84230ad2d2af
io_uring/poll: correctly handle io_poll_add() return value on update
|
|
INFO: task hung in io_uring_alloc_task_context (6)
io-uring
|
1 |
syz |
|
|
5 |
181d |
210d
|
29/29 |
144d |
101e596e7404
io_uring/fdinfo: cap SQ iteration at max SQ entries
|
|
KASAN: global-out-of-bounds Read in io_uring_show_fdinfo
io-uring
|
17 |
C |
done |
|
7 |
209d |
212d
|
29/29 |
144d |
8cd5a59e4d51
io_uring/fdinfo: validate opcode before checking if it's an 128b one
|
|
memory leak in iovec_from_user (2)
io-uring
|
3 |
C |
|
|
1 |
204d |
202d
|
29/29 |
144d |
d3c9c213c0b8
io_uring/rw: ensure allocated iovec gets cleared for early failure
|
|
KASAN: slab-use-after-free Read in io_waitid_wait
io-uring
|
19 |
C |
|
|
3 |
237d |
236d
|
29/29 |
213d |
2f8229d53d98
io_uring/waitid: always prune wait queue entry in io_waitid_wait()
|
|
KASAN: slab-use-after-free Read in __io_req_task_work_add (2)
io-uring
|
19 |
|
|
|
2 |
254d |
255d
|
29/29 |
213d |
df8922afc37a
io_uring/msg_ring: kill alloc_cache for io_kiocb allocations
|
|
WARNING in __vmap_pages_range_noflush
io-uring
|
-1 |
C |
done |
|
14 |
296d |
296d
|
29/29 |
269d |
33503c083fda
io_uring/memmap: cast nr_pages to size_t before shifting
|
|
KASAN: slab-use-after-free Read in __io_req_task_work_add
io-uring
|
19 |
|
|
|
1 |
331d |
327d
|
29/29 |
269d |
fc582cd26e88
io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU
|
|
WARNING: ODEBUG bug in io_sq_offload_create
io-uring
|
-1 |
C |
|
|
8 |
347d |
348d
|
29/29 |
298d |
f2320f1dd6f6
io_uring/sqpoll: don't put task_struct on tctx setup failure
|
|
WARNING in io_register_clone_buffers
io-uring
|
-1 |
C |
|
|
4 |
354d |
350d
|
29/29 |
298d |
1d27f11bf02b
io_uring/rsrc: validate buffer count with offset for cloning
|
|
BUG: unable to handle kernel NULL pointer dereference in io_buffer_select
io-uring
|
10 |
C |
|
|
102 |
379d |
385d
|
29/29 |
327d |
f446c6311e86
io_uring/memmap: don't use page_address() on a highmem page
|
|
KCSAN: data-race in io_submit_sqes / io_uring_show_fdinfo
io-uring
|
6 |
|
|
|
1 |
396d |
396d
|
29/29 |
327d |
f024d3a8ded0
io_uring/fdinfo: annotate racy sq/cq head/tail reads
|
|
KMSAN: uninit-value in xa_find
io-uring
net
|
7 |
|
|
|
28964 |
358d |
369d
|
29/29 |
327d |
eda4623cf989
io_uring/zcrx: init id for xa_find
|
|
BUG: unable to handle kernel NULL pointer dereference in io_ring_buffers_peek
io-uring
|
10 |
C |
|
|
68 |
380d |
385d
|
29/29 |
327d |
f446c6311e86
io_uring/memmap: don't use page_address() on a highmem page
|
|
WARNING: refcount bug in io_send_zc_cleanup (2)
io-uring
|
13 |
C |
done |
|
6 |
435d |
435d
|
28/29 |
355d |
67c007d6c12d
io_uring/net: fix sendzc double notif flush
|
|
INFO: task hung in io_wq_put_and_exit (4)
io-uring
|
1 |
C |
unreliable |
|
86 |
359d |
588d
|
28/29 |
355d |
cf960726eb65
io_uring/kbuf: reject zero sized provided buffers
|
|
KCSAN: data-race in io_req_task_cancel / io_wq_free_work
io-uring
|
6 |
|
|
|
1 |
423d |
423d
|
28/29 |
355d |
390513642ee6
io_uring: always do atomic put from iowq
|
|
WARNING: refcount bug in io_tx_ubuf_complete
io-uring
|
13 |
|
|
|
15 |
435d |
432d
|
28/29 |
355d |
67c007d6c12d
io_uring/net: fix sendzc double notif flush
|
|
WARNING in io_pin_pages
io-uring
|
-1 |
C |
done |
|
14 |
558d |
555d
|
28/29 |
390d |
0c0a4eae26ac
io_uring: check for overflows in io_pin_pages
|
|
KMSAN: uninit-value in io_recv
io-uring
|
7 |
C |
|
|
31 |
513d |
513d
|
28/29 |
390d |
c6e60a0a68b7
io_uring/net: always initialize kmsg->msg.msg_inq upfront
|
|
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_files_register (3)
io-uring
|
6 |
|
|
|
1 |
566d |
564d
|
28/29 |
390d |
e358e09a894d
io_uring: protect register tracing
|
|
KASAN: slab-use-after-free Read in thread_group_cputime
io-uring
|
19 |
|
|
|
3 |
430d |
506d
|
28/29 |
390d |
4b7cfa8b6c28
io_uring/sqpoll: zero sqd->thread on tctx errors
|
|
WARNING in __io_uring_free
io-uring
|
-1 |
|
|
|
1 |
562d |
558d
|
28/29 |
390d |
7eb75ce75271
io_uring/tctx: work around xa_store() allocation error issue
|
|
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (12)
io-uring
|
6 |
|
|
|
4 |
507d |
538d
|
28/29 |
390d |
a13030fd194c
io_uring: simplify the SQPOLL thread check when cancelling requests
|
|
WARNING: locking bug in eventfd_signal_mask
io-uring
fs
|
4 |
C |
done |
|
6 |
514d |
518d
|
28/29 |
390d |
a9c83a0ab66a
io_uring/timeout: flush timeouts outside of the timeout lock
|
|
WARNING in __io_submit_flush_completions
io-uring
|
-1 |
C |
|
|
23 |
507d |
527d
|
28/29 |
390d |
60495b08cf7a
io_uring: silence false positive warnings
|
|
KMSAN: uninit-value in io_nop
io-uring
|
7 |
C |
|
|
39 |
546d |
556d
|
28/29 |
390d |
ee116574de84
io_uring/nop: ensure nop->fd is always initialized
|
|
general protection fault in io_uring_show_fdinfo (2)
io-uring
|
2 |
C |
done |
|
19 |
577d |
576d
|
28/29 |
531d |
d50f94d761a5
io_uring/rsrc: get rid of the empty node and dummy_ubuf
|
|
general protection fault in io_sqe_buffer_register
io-uring
|
2 |
C |
done |
|
55 |
573d |
576d
|
28/29 |
531d |
d50f94d761a5
io_uring/rsrc: get rid of the empty node and dummy_ubuf
|
|
WARNING in io_sq_offload_create
io-uring
|
-1 |
C |
|
|
284 |
614d |
618d
|
28/29 |
580d |
a09c17240bdf
io_uring/sqpoll: retain test for whether the CPU is valid
|
|
INFO: rcu detected stall in sys_io_uring_enter (2)
io-uring
|
1 |
|
|
|
37 |
598d |
618d
|
28/29 |
586d |
eac2ca2d682f
io_uring: check if we need to reschedule during overflow flush
|
|
KCSAN: data-race in io_sq_thread / io_sq_thread_park (9)
io-uring
|
6 |
|
|
|
1 |
661d |
656d
|
28/29 |
605d |
e4956dc7a84d
io_uring/sqpoll: annotate debug task == current with data_race()
|
|
KMSAN: uninit-value in io_req_task_work_add_remote
io-uring
|
7 |
C |
|
|
10 |
674d |
676d
|
27/29 |
646d |
0db4618e8fab
io_uring/msg_ring: fix uninitialized use of target_req->flags
|
|
general protection fault in tomoyo_socket_bind_permission
io-uring
|
2 |
C |
|
|
4 |
687d |
687d
|
27/29 |
655d |
ad00e629145b
io_uring/net: check socket is valid in io_bind()/io_listen()
|
|
general protection fault in __io_remove_buffers
io-uring
|
2 |
C |
done |
|
3 |
684d |
682d
|
27/29 |
655d |
bcc87d978b83
io_uring: fix error pbuf checking
|
|
WARNING in io_cqring_event_overflow (2)
io-uring
|
-1 |
|
|
|
16 |
699d |
698d
|
27/29 |
655d |
3b7c16be30e3
io_uring/msg_ring: fix overflow posting
|
|
KMSAN: uninit-value in io_req_cqe_overflow (3)
io-uring
|
7 |
C |
|
|
16 |
716d |
717d
|
26/29 |
674d |
18414a4a2eab
io_uring/net: assign kmsg inq/flags before buffer selection
|
|
KMSAN: uninit-value in io_issue_sqe
io-uring
|
7 |
|
|
|
2 |
720d |
734d
|
25/29 |
719d |
18414a4a2eab
io_uring/net: assign kmsg inq/flags before buffer selection
|
|
KMSAN: uninit-value in io_sendrecv_fail
io-uring
|
7 |
C |
|
|
29 |
799d |
806d
|
25/29 |
781d |
e21e1c45e1fe
io_uring: clear opcode specific data for an early failure
|
|
KMSAN: uninit-value in io_rw_fail (2)
io-uring
|
7 |
|
|
|
1 |
845d |
841d
|
25/29 |
837d |
0a535eddbe0d
io_uring/rw: ensure io->bytes_done is always initialized
|
|
KMSAN: uninit-value in io_rw_fail
io-uring
|
7 |
C |
|
|
25 |
852d |
868d
|
25/29 |
849d |
0a535eddbe0d
io_uring/rw: ensure io->bytes_done is always initialized
|
|
WARNING in get_pte_pfn
mm
io-uring
|
-1 |
C |
error |
|
2 |
881d |
891d
|
25/29 |
852d |
c28ac3c7eb94
mm/mglru: skip special VMAs in lru_gen_look_around()
|
|
BUG: unable to handle kernel NULL pointer dereference in __io_remove_buffers (2)
io-uring
|
10 |
|
|
|
86 |
967d |
972d
|
25/29 |
892d |
f8024f1f36a3
io_uring/kbuf: don't allow registered buffer rings on highmem pages
|
|
UBSAN: array-index-out-of-bounds in io_setup_async_msg
io-uring
|
15 |
C |
done |
|
3 |
992d |
991d
|
25/29 |
892d |
c21a8027ad8a
io_uring/net: fix iter retargeting for selected buf
|
|
general protection fault in io_get_cqe_overflow
io-uring
|
2 |
C |
done |
|
2 |
974d |
972d
|
25/29 |
892d |
1658633c0465
io_uring: ensure io_lockdep_assert_cq_locked() handles disabled rings
|
|
general protection fault in io_sqpoll_wq_cpu_affinity
io-uring
|
2 |
|
|
|
33 |
996d |
1007d
|
23/29 |
962d |
bd6fc5da4c51
io_uring: Don't set affinity on a dying sqpoll thread
|
|
general protection fault in io_uring_show_fdinfo
io-uring
|
2 |
C |
done |
|
17 |
994d |
1003d
|
23/29 |
962d |
32f5dea040ee
io_uring/fdinfo: only print ->sq_array[] if it's there
|
|
WARNING in io_get_cqe_overflow
io-uring
|
-1 |
|
|
|
1 |
1225d |
1224d
|
22/29 |
1088d |
e12d7a46f65a
io_uring/msg_ring: fix missing lock on overflow for IOPOLL
|
|
WARNING in io_cqring_event_overflow
io-uring
|
-1 |
C |
|
|
7 |
1228d |
1235d
|
22/29 |
1088d |
544d163d659d
io_uring: lock overflowing for IOPOLL
|
|
memory leak in io_submit_sqes (4)
io-uring
|
3 |
C |
|
|
1 |
1239d |
1238d
|
22/29 |
1088d |
febb985c06cb
io_uring/poll: add hash if ready poll request can't complete inline
|
|
WARNING in io_sync_cancel
io-uring
|
-1 |
C |
error |
|
3 |
1261d |
1257d
|
22/29 |
1088d |
23fffb2f09ce
io_uring/cancel: re-grab ctx mutex after finishing wait
|
|
WARNING in io_cqring_overflow_flush
io-uring
|
-1 |
C |
|
|
2 |
1261d |
1257d
|
22/29 |
1088d |
52ea806ad983
io_uring: finish waiting before flushing overflow entries
|
|
KASAN: use-after-free Read in io_worker_get
io-uring
|
19 |
C |
done |
done |
5 |
1204d |
1238d
|
22/29 |
1088d |
e6db6f9398da
io_uring/io-wq: only free worker if it was allocated for creation
|
|
KASAN: use-after-free Read in io_wq_worker_wake
io-uring
|
19 |
C |
done |
done |
1 |
1205d |
1238d
|
22/29 |
1088d |
e6db6f9398da
io_uring/io-wq: only free worker if it was allocated for creation
|
|
KASAN: wild-memory-access Read in io_wq_worker_running
io-uring
|
19 |
C |
|
|
39 |
1234d |
1240d
|
22/29 |
1088d |
e6db6f9398da
io_uring/io-wq: only free worker if it was allocated for creation
|
|
KASAN: use-after-free Read in tty_release
io-uring
serial
|
19 |
C |
done |
|
23 |
1521d |
1531d
|
22/29 |
1192d |
d89a4fac0fbc
io_uring: fix assuming triggered poll waitqueue is the single poll
|
|
KASAN: use-after-free Read in pty_close
serial
io-uring
fuse
|
19 |
C |
done |
|
4 |
1397d |
1424d
|
22/29 |
1192d |
7a121ced6e64
io_uring: don't miss setting REQ_F_DOUBLE_POLL
|
|
KASAN: slab-out-of-bounds Read in io_uring_show_fdinfo
io-uring
|
19 |
C |
done |
|
5 |
1323d |
1329d
|
22/29 |
1192d |
00927931cb63
io_uring: fix fdinfo sqe offsets calculation
|
|
kernel BUG in commit_creds
lsm
io-uring
|
-1 |
C |
done |
|
5 |
1503d |
1507d
|
22/29 |
1192d |
701521403cfb
io_uring: abort file assignment prior to assigning creds
|
|
memory leak in __vsock_create
net
virt
io-uring
|
3 |
C |
|
|
1 |
1516d |
1512d
|
22/29 |
1192d |
7e97cfed9929
vsock: Fix memory leak in vsock_connect()
|
|
inconsistent lock state in kmem_cache_alloc
io-uring
|
4 |
C |
|
|
4 |
1336d |
1343d
|
22/29 |
1192d |
b000145e9907
io_uring/rw: defer fsnotify calls to task context
|
|
KASAN: null-ptr-deref Write in io_file_get_normal
io-uring
fs
|
12 |
C |
done |
|
107 |
1437d |
1522d
|
22/29 |
1192d |
d5361233e9ab
io_uring: drop the old style inflight file tracking
|
|
memory leak in iovec_from_user
fs
io-uring
|
3 |
C |
|
|
1 |
1509d |
1505d
|
22/29 |
1192d |
323b190ba2de
io_uring: free iovec if file assignment fails
|
|
WARNING in inet_csk_destroy_sock (2)
io-uring
net
|
-1 |
C |
done |
|
8 |
1241d |
1327d
|
22/29 |
1192d |
e0833d1fedb0
dccp/tcp: Fixup bhash2 bucket when connect() fails.
|
|
WARNING in io_req_complete_failed
io-uring
|
-1 |
C |
error |
|
2 |
1283d |
1279d
|
22/29 |
1192d |
c06c6c5d2767
io_uring: always lock in io_apoll_task_func
|
|
WARNING: ODEBUG bug in kvm_xen_vcpu_set_attr
kvm
kvm-x86
io-uring
|
-1 |
C |
done |
|
4 |
1400d |
1452d
|
22/29 |
1192d |
af735db31285
KVM: x86/xen: Initialize Xen timer only once
c03689913635
KVM: x86/xen: Stop Xen timer before changing IRQ
|
|
WARNING in __split_huge_page_tail
arch
mm
io-uring
|
-1 |
C |
error |
|
155 |
1241d |
1313d
|
22/29 |
1192d |
5aae9265ee1a
mm: prep_compound_tail() clear page->private
|
|
KASAN: use-after-free Write in io_sendrecv_fail
io-uring
|
22 |
C |
|
|
75 |
1323d |
1346d
|
22/29 |
1192d |
a75155faef4e
io_uring/net: fix UAF in io_sendrecv_fail()
|
|
KASAN: use-after-free Read in add_wait_queue
fs
io-uring
|
19 |
C |
done |
done |
13 |
1524d |
1531d
|
22/29 |
1192d |
d89a4fac0fbc
io_uring: fix assuming triggered poll waitqueue is the single poll
|
|
BUG: unable to handle kernel NULL pointer dereference in io_do_iopoll
fs
io-uring
|
10 |
C |
done |
|
3 |
1476d |
1475d
|
22/29 |
1192d |
aa184e8671f0
io_uring: don't attempt to IOPOLL for MSG_RING requests
|
|
KASAN: use-after-free Read in __io_remove_buffers
io-uring
|
19 |
C |
done |
|
2 |
1394d |
1390d
|
22/29 |
1192d |
ec8516f3b7c4
io_uring: fix free of unallocated buffer list
|
|
KASAN: use-after-free Read in filp_close
io-uring
fs
|
19 |
C |
done |
|
17 |
1233d |
1462d
|
22/29 |
1192d |
40a1926022d1
fix the breakage in close_fd_get_file() calling conventions change
|
|
KASAN: use-after-free Read in inet_bind2_bucket_find
net
io-uring
|
19 |
C |
done |
|
13 |
1447d |
1454d
|
22/29 |
1192d |
593d1ebe00a4
Revert "net: Add a second bind table hashed by port and address"
|
|
WARNING: still has locks held in io_ring_submit_lock
fs
io-uring
|
4 |
C |
done |
|
3 |
1477d |
1477d
|
22/29 |
1192d |
e7637a492b9f
io_uring: fix locking state for empty buffer group
|
|
KASAN: invalid-free in io_clean_op
io-uring
|
24 |
C |
|
|
13 |
1326d |
1344d
|
22/29 |
1192d |
4c17a496a7a0
io_uring/net: fix cleanup double free free_iov init
|
|
general protection fault in io_uring_register
fs
io-uring
|
2 |
syz |
done |
|
1 |
1725d |
1721d
|
20/29 |
1545d |
41d3a6bd1d37
io_uring: pin SQPOLL data before unlocking ring lock
|
|
KASAN: use-after-free Write in io_queue_worker_create
fs
io-uring
|
22 |
C |
unreliable |
|
132 |
1628d |
1637d
|
20/29 |
1545d |
71a85387546e
io-wq: check for wq exit after adding new worker task_work
e47498afeca9
io-wq: remove spurious bit clear on task_work addition
|
|
INFO: task hung in io_uring_del_tctx_node
io-uring
fs
|
1 |
C |
unreliable |
|
37 |
1547d |
1710d
|
20/29 |
1545d |
8bab4c09f24e
io_uring: allow conditional reschedule for intensive iterators
|
|
possible deadlock in io_worker_cancel_cb
io-uring
fs
|
4 |
C |
done |
|
9 |
1626d |
1630d
|
20/29 |
1545d |
d800c65c2d4e
io-wq: drop wqe lock before creating new worker
|
|
BUG: unable to handle kernel paging request in __blk_mq_alloc_requests
io-uring
block
|
19 |
C |
unreliable |
|
107 |
1663d |
1672d
|
20/29 |
1545d |
a22c00be90de
block: assign correct tag before doing prefetch of request
|
|
INFO: task hung in io_uring_try_cancel_requests
fs
io-uring
|
1 |
C |
error |
|
41 |
1634d |
1676d
|
20/29 |
1545d |
f75d118349be
io_uring: harder fdinfo sq/cq ring iterating
|
|
WARNING in signalfd_cleanup
fs
io-uring
|
-1 |
C |
done |
|
201 |
1591d |
1607d
|
20/29 |
1545d |
791f3465c4af
io_uring: fix UAF due to missing POLLFREE handling
|
|
INFO: task hung in io_uring_cancel_generic (2)
io-uring
fs
|
1 |
C |
done |
|
97 |
1629d |
1655d
|
20/29 |
1545d |
78a780602075
io_uring: ensure task_work gets run as part of cancelations
|
|
INFO: rcu detected stall in io_wqe_worker (2)
fs
io-uring
|
1 |
C |
done |
|
2 |
1677d |
1677d
|
20/29 |
1545d |
c5e0321e43de
Revert "devlink: Remove not-executed trap policer notifications"
|
|
possible deadlock in io_poll_double_wake (3)
io-uring
fs
|
4 |
C |
error |
done |
703 |
1600d |
1873d
|
20/29 |
1545d |
aa43477b0402
io_uring: poll rework
|
|
INFO: task hung in io_wqe_worker
fs
io-uring
|
1 |
C |
unreliable |
|
3 |
1686d |
1682d
|
20/29 |
1545d |
1d5f5ea7cb7d
io-wq: remove worker to owner tw dependency
|
|
WARNING in io_link_timeout_fn
fs
io-uring
|
-1 |
C |
done |
|
2 |
1845d |
1845d
|
20/29 |
1663d |
447c19f3b507
io_uring: fix ltout double free on completion race
|
|
general protection fault in io_commit_cqring (2)
io-uring
fs
|
12 |
C |
done |
|
82 |
1875d |
1889d
|
20/29 |
1663d |
51520426f4bc
io_uring: handle setup-failed ctx in kill_timeouts
|
|
INFO: task hung in io_sq_thread_park (2)
fs
io-uring
|
1 |
syz |
done |
|
2 |
1785d |
1781d
|
20/29 |
1663d |
46fee9ab02cb
io_uring: remove double poll entry on arm failure
|
|
INFO: task hung in __io_uring_cancel
fs
io-uring
|
1 |
C |
done |
|
5 |
1802d |
1867d
|
20/29 |
1663d |
28090c133869
io_uring: fix work_exit sqpoll cancellations
|
|
memory leak in create_io_worker
io-uring
fs
|
3 |
C |
|
|
5 |
1686d |
1725d
|
20/29 |
1663d |
66e70be72288
io-wq: fix memory leak in create_io_worker()
|
|
WARNING in io_wqe_enqueue
io-uring
fs
|
-1 |
C |
done |
|
13 |
1822d |
1822d
|
20/29 |
1663d |
e6ab8991c5d0
io_uring: fix false WARN_ONCE
|
|
WARNING in io_poll_double_wake
fs
io-uring
|
-1 |
C |
done |
done |
1124 |
1765d |
1866d
|
20/29 |
1663d |
a890d01e4ee0
io_uring: fix poll requests leaking second poll entries
|
|
INFO: task hung in io_wq_put_and_exit
io-uring
fs
|
1 |
C |
unreliable |
|
628 |
1664d |
1725d
|
20/29 |
1663d |
3b33e3f4a6c0
io-wq: fix silly logic error in io_task_work_match()
|
|
general protection fault in try_grab_compound_head
io-uring
mm
|
7 |
C |
done |
|
5 |
1765d |
1793d
|
20/29 |
1663d |
d08af0a59684
mm/hugetlb: fix refs calculation from unaligned @vaddr
|
|
BUG: unable to handle kernel NULL pointer dereference in kiocb_done
fs
io-uring
|
10 |
C |
unreliable |
done |
3 |
1731d |
1731d
|
20/29 |
1663d |
b8ce1b9d25cc
io_uring: don't submit half-prepared drain request
|
|
WARNING in io_try_cancel_userdata
fs
io-uring
|
-1 |
syz |
unreliable |
|
4 |
1738d |
1742d
|
20/29 |
1663d |
dadebc350da2
io_uring: fix io_try_cancel_userdata race for iowq
|
|
general protection fault in __io_file_supports_nowait
fs
io-uring
|
2 |
C |
done |
done |
13 |
1728d |
1733d
|
20/29 |
1663d |
c6d3d9cbd659
io_uring: fix queueing half-created requests
|
|
INFO: task hung in io_uring_cancel_generic
io-uring
fs
|
1 |
C |
unreliable |
|
151 |
1663d |
1785d
|
20/29 |
1663d |
1b48773f9fd0
io_uring: fix io_drain_req()
|
|
general protection fault in sock_from_file
net
io-uring
|
2 |
C |
inconclusive |
|
78 |
1728d |
1735d
|
20/29 |
1663d |
c6d3d9cbd659
io_uring: fix queueing half-created requests
|
|
WARNING in io_rsrc_node_switch
io-uring
fs
|
-1 |
C |
done |
|
174 |
1849d |
1858d
|
20/29 |
1663d |
47b228ce6f66
io_uring: fix unchecked error in switch_start()
|
|
WARNING in io_wq_submit_work (2)
io-uring
fs
|
-1 |
C |
done |
done |
52 |
1723d |
1725d
|
20/29 |
1663d |
713b9825a4c4
io-wq: fix cancellation on create-worker failure
|
|
KASAN: stack-out-of-bounds Read in iov_iter_revert
fs
io-uring
|
17 |
C |
error |
|
14 |
1736d |
1753d
|
20/29 |
1663d |
89c2b3b74918
io_uring: reexpand under-reexpanded iters
|
|
WARNING in io_wq_put
fs
io-uring
|
-1 |
C |
unreliable |
|
3 |
1897d |
1909d
|
20/29 |
1663d |
f5d2d23bf0d9
io-wq: fix race around pending work on teardown
|
|
WARNING in io_uring_setup (2)
fs
io-uring
|
-1 |
C |
done |
|
40 |
1849d |
1858d
|
20/29 |
1663d |
47b228ce6f66
io_uring: fix unchecked error in switch_start()
|
|
KASAN: use-after-free Read in idr_for_each (2)
io-uring
fs
|
19 |
C |
error |
done |
86 |
1902d |
2064d
|
20/29 |
1867d |
61cf93700fe6
io_uring: Convert personality_idr to XArray
|
|
INFO: task hung in io_uring_cancel_task_requests
fs
io-uring
|
1 |
C |
|
|
305 |
1902d |
1936d
|
20/29 |
1878d |
34343786ecc5
io_uring: unpark SQPOLL thread for cancelation
|
|
INFO: task hung in io_sq_thread_park
fs
io-uring
|
1 |
C |
unreliable |
|
263 |
1913d |
1917d
|
20/29 |
1878d |
3ebba796fa25
io_uring: ensure that SQPOLL thread is started for exit
|
|
memory leak in io_submit_sqes (2)
fs
io-uring
|
3 |
C |
|
|
1 |
1915d |
1915d
|
20/29 |
1878d |
f01272541d2c
io-wq: ensure all pending work is canceled on exit
|
|
possible deadlock in io_poll_double_wake (2)
io-uring
fs
|
4 |
C |
error |
error |
431 |
1878d |
2070d
|
20/29 |
1878d |
1c3b3e6527e5
io_uring: ignore double poll add on the same waitqueue head
|
|
inconsistent lock state in io_dismantle_req
fs
io-uring
|
4 |
C |
|
|
2 |
1945d |
1945d
|
20/29 |
1878d |
9ae1f8dd372e
io_uring: fix inconsistent lock state
|
|
WARNING in io_uring_flush
fs
io-uring
|
-1 |
C |
unreliable |
|
10 |
1952d |
1962d
|
19/29 |
1908d |
4325cb498cb7
io_uring: fix uring_flush in exit_files() warning
|
|
INFO: task hung in __io_uring_files_cancel
io-uring
fs
|
1 |
C |
done |
|
30 |
1950d |
2016d
|
19/29 |
1908d |
bee749b187ac
io_uring: fix files cancellation
|
|
general protection fault in io_disable_sqo_submit
fs
io-uring
|
2 |
C |
done |
|
124 |
1960d |
1964d
|
19/29 |
1908d |
b4411616c26f
io_uring: fix null-deref in io_disable_sqo_submit
|
|
WARNING in io_uring_cancel_task_requests
io-uring
fs
|
-1 |
syz |
done |
|
69 |
1945d |
1949d
|
19/29 |
1908d |
70b2c60d3797
io_uring: fix sqo ownership false positive warning
|
|
BUG: corrupted list in io_file_get
fs
io-uring
|
8 |
C |
done |
|
3 |
1949d |
1949d
|
19/29 |
1908d |
f609cbb8911e
io_uring: fix list corruption for splice file_get
|
|
KASAN: null-ptr-deref Write in kthread_use_mm
io-uring
fs
|
12 |
C |
done |
|
2 |
2036d |
2036d
|
15/29 |
2018d |
4b70cf9dea4c
io_uring: ensure consistent view of original task ->mm from SQPOLL
|
|
KASAN: use-after-free Write in io_submit_sqes
fs
io-uring
|
22 |
C |
error |
|
2 |
2036d |
2035d
|
15/29 |
2018d |
cb8a8ae31074
io_uring: drop req/tctx io_identity separately
|
|
KASAN: use-after-free Read in io_wqe_worker
fs
io-uring
|
19 |
C |
error |
|
2 |
2071d |
2073d
|
15/29 |
2022d |
c4068bf898dd
io-wq: fix use-after-free in io_wq_worker_running
|
|
inconsistent lock state in xa_destroy
io-uring
fs
|
4 |
C |
|
|
755 |
2060d |
2061d
|
15/29 |
2022d |
ca6484cd308a
io_uring: no need to call xa_destroy() on empty xarray
|
|
INFO: task hung in io_uring_flush
io-uring
fs
|
1 |
C |
done |
done |
11 |
2113d |
2120d
|
15/29 |
2022d |
b7ddce3cbf01
io_uring: fix cancel of deferred reqs with ->files
|
|
KASAN: use-after-free Write in io_wq_worker_running
io-uring
fs
|
22 |
C |
error |
|
14 |
2065d |
2091d
|
15/29 |
2022d |
c4068bf898dd
io-wq: fix use-after-free in io_wq_worker_running
|
|
general protection fault in io_poll_double_wake (2)
fs
io-uring
|
2 |
C |
error |
|
2 |
2072d |
2071d
|
15/29 |
2048d |
8706e04ed7d6
io_uring: always delete double poll wait entry on match
|
|
KASAN: use-after-free Read in do_madvise
io-uring
mm
|
19 |
syz |
error |
|
4 |
2107d |
2109d
|
15/29 |
2068d |
7867fd7cc44e
mm: madvise: fix vma user-after-free
|
|
possible deadlock in __lock_task_sighand
io-uring
|
4 |
C |
done |
|
12 |
2099d |
2100d
|
15/29 |
2074d |
fd7d6de22414
io_uring: don't recurse on tsk->sighand->siglock with signalfd
|
|
possible deadlock in __io_queue_deferred
fs
io-uring
|
4 |
C |
error |
|
1 |
2121d |
2120d
|
15/29 |
2082d |
7271ef3a93a8
io_uring: fix recursive completion locking on oveflow flush
|
|
BUG: unable to handle kernel NULL pointer dereference in loop_rw_iter
io-uring
fs
|
10 |
C |
done |
|
24 |
2108d |
2120d
|
15/29 |
2082d |
2dd2111d0d38
io_uring: Fix NULL pointer dereference in loop_rw_iter()
|
|
KASAN: use-after-free Read in io_async_task_func
io-uring
fs
|
19 |
syz |
error |
|
1 |
2119d |
2119d
|
15/29 |
2082d |
6d816e088c35
io_uring: hold 'ctx' reference around task_work queue + execute
|
|
memory leak in io_submit_sqes
fs
io-uring
|
3 |
C |
|
|
2 |
2100d |
2119d
|
15/29 |
2082d |
a36da65c4656
io_uring: fail poll arm on queue proc failure
|
|
general protection fault in io_poll_double_wake
io-uring
fs
|
2 |
C |
done |
|
8 |
2087d |
2115d
|
15/29 |
2082d |
d4e7cd36a90e
io_uring: sanitize double poll handling
|
|
possible deadlock in io_timeout_fn
io-uring
fs
|
4 |
C |
done |
|
4 |
2117d |
2120d
|
15/29 |
2082d |
51a4cc112c7a
io_uring: defer file table grabbing request cleanup for locked requests
|