syzbot


Applied filters: Label=subsystems:iommu (drop)
Title Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
UBSAN: shift-out-of-bounds in iova_bitmap_alloc iommu C done 6 111d 118d 28/28 3d15h e24c15510592 iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index()
WARNING in iommufd_device_unbind iommu syz error 3 157d 168d 28/28 3d15h d9df72c6acd6 iommu: iommufd: fix WARNING in iommufd_device_unbind
kernel BUG in dma_alloc_attrs iommu C 4 201d 206d 28/28 178d 78b2770c935f dma-mapping: fix tracing dma_alloc/free with vmalloc'd memory
kernel BUG in trace_dma_unmap_sg iommu C 5 224d 226d 28/28 199d bfc4a245a794 dma-mapping: fix DMA API tracing for chained scatterlists
WARNING in iopt_map_pages iommu C error 3 254d 334d 28/28 199d 8f6887349b2f iommufd: Protect against overflow of ALIGN() during iova allocation
KASAN: slab-use-after-free Read in iommufd_vfio_ioas iommu C done 4 536d 554d 25/28 475d 6f9c4d8c468c iommufd: Do not UAF during iommufd_put_object()
divide error in iommufd_test iommu C done 4 558d 560d 25/28 506d 2e22aac3ea9c iommufd/selftest: Fix page-size check in iommufd_test_dirty()
WARNING in iommufd_access_destroy iommu C done 3 664d 665d 23/28 575d 99f98a7c0d69 iommufd: IOMMUFD_DESTROY should not increase the refcount
KASAN: slab-use-after-free Read in iopt_unmap_iova_range iommu C error 7 682d 694d 23/28 575d 804ca14d04df iommufd: Do not access the area pointer after unlocking
WARNING in iommufd_test_check_pages iommu C error 4 689d 739d 23/28 589d 9883c7f84053 mm/gup: do not return 0 from pin_user_pages_fast() for bad args
KMSAN: kernel-infoleak in iommufd_vfio_ioctl iommu C 15 803d 816d 22/28 701d b3551ead6163 iommufd: Make sure to zero vfio_iommu_type1_info before copying to user
WARNING in dma_map_page_attrs iommu C unreliable 304 1644d 1661d 15/28 1635d 683a9c7ed817 RDMA: Fix software RDMA drivers for dma mapping error
usb-fuzzer boot error: general protection fault in dma_direct_max_mapping_size iommu 21 2114d 2117d 12/28 2096d 1b5d9a6e9835 scsi: core: fix the dma_max_mapping_size call