|
KASAN: use-after-free Read in jfs_lazycommit
prio:high
jfs
|
19 |
syz, C |
error |
|
4273 |
18h06m |
1449d
|
0/29 |
never |
From 7e1a0b91e9efa8bec40fc5397ba6c4e683d72df0 Mon Sep 17 00:00:00 2001
|
|
INFO: task hung in __writeback_inodes_sb_nr (6)
prio:high
jfs
|
1 |
syz, C |
done |
|
4177 |
33d |
1191d
|
1/29 |
never |
PM: hibernate: Fix block device handling in test_resume mode
|
|
general protection fault in blk_update_request
jfs
|
19 |
syz, C |
error |
|
230 |
157d |
687d
|
29/29 |
122d |
b15e4310633f
jfs: Set the lbmDone flag at the end of lbmIODone
|
|
BUG: corrupted list in dbUpdatePMap
jfs
|
8 |
syz, C |
error |
|
141 |
159d |
318d
|
29/29 |
122d |
3c778ec88208
jfs: fix corrupted list in dbUpdatePMap
|
|
INFO: task hung in filename_rmdir
jfs
|
1 |
syz, C |
error |
|
5 |
154d |
204d
|
29/29 |
122d |
5422fe71d26d
ext4: avoid infinite loops caused by residual data
|
|
INFO: task hung in filename_unlinkat
jfs
|
1 |
syz, C |
error |
|
14 |
184d |
207d
|
29/29 |
122d |
5422fe71d26d
ext4: avoid infinite loops caused by residual data
|
|
UBSAN: shift-out-of-bounds in dbSplit (3)
jfs
|
-1 |
syz, C |
|
|
8 |
193d |
507d
|
29/29 |
122d |
cce219b203c4
jfs: add dmapctl integrity check to prevent invalid operations
|
|
general protection fault in lmLogSync (2)
jfs
|
22 |
syz, C |
error |
|
8238 |
125d |
1451d
|
29/29 |
122d |
ca5848ae87d2
jfs: hold LOG_LOCK on umount to avoid null-ptr-deref
|
|
WARNING in jfs_rename
jfs
|
-1 |
syz, C |
inconclusive |
|
13 |
267d |
499d
|
29/29 |
136d |
9218dc26fd92
jfs: nlink overflow in jfs_rename
|
|
kernel BUG in folio_set_bh (2)
ntfs3
jfs
|
-1 |
syz, C |
|
|
46 |
150d |
250d
|
29/29 |
136d |
ab7ad7abb366
romfs: check sb_set_blocksize() return value
|
|
INFO: task hung in __bread_gfp (7)
udf
jfs
|
1 |
syz, C |
done |
|
6 |
360d |
365d
|
29/29 |
325d |
ab073abf6d97
block: fix EOD return for device with nr_sectors == 0
|
|
kernel BUG in clear_inode (3)
jfs
|
-1 |
syz, C |
error |
|
637 |
383d |
465d
|
29/29 |
380d |
2d91b3765cd0
jfs: truncate good inode pages when hard link is 0
|
|
UBSAN: array-index-out-of-bounds in dbAllocAG
jfs
|
15 |
syz, C |
|
|
1 |
504d |
514d
|
29/29 |
380d |
c214006856ff
jfs: upper bound check of tree index in dbAllocAG
|
|
kernel BUG in jfs_truncate_nolock
jfs
|
-1 |
syz, C |
error |
|
5 |
461d |
474d
|
29/29 |
380d |
2d04df811642
jfs: Regular file corruption check
|
|
UBSAN: array-index-out-of-bounds in add_missing_indices
jfs
|
15 |
syz, C |
|
|
187 |
467d |
662d
|
29/29 |
439d |
5dff41a86377
jfs: fix array-index-out-of-bounds read in add_missing_indices
|
|
UBSAN: shift-out-of-bounds in dbAllocAG (2)
jfs
|
-1 |
syz, C |
done |
|
5 |
511d |
561d
|
29/29 |
439d |
37bfb464ddca
jfs: validate AG parameters in dbMount() to prevent crashes
|
|
KMSAN: uninit-value in diFree
jfs
|
7 |
syz, C |
|
|
2 |
578d |
578d
|
28/29 |
466d |
9629d7d66c62
jfs: Fix uninit-value access of imap allocated in the diMount() function
|
|
KASAN: slab-out-of-bounds Read in ea_get (4)
jfs
|
17 |
syz, C |
|
|
4 |
561d |
585d
|
28/29 |
466d |
fdf480da5837
jfs: fix slab-out-of-bounds read in ea_get()
|
|
BUG: unable to handle kernel paging request in txBeginAnon
jfs
|
11 |
syz, C |
inconclusive |
|
43 |
559d |
848d
|
28/29 |
466d |
b5799dd77054
jfs: add check read-only before truncation in jfs_truncate_nolock()
0176e69743ec
jfs: add check read-only before txBeginAnon() call
|
|
possible deadlock in diFree (2)
jfs
|
4 |
syz, C |
|
|
40 |
542d |
668d
|
28/29 |
466d |
b61e69bb1c04
jfs: Prevent copying of nlink with value 0 from disk inode
|
|
kernel BUG in clear_inode (2)
jfs
|
-1 |
syz, C |
inconclusive |
|
986 |
466d |
691d
|
28/29 |
466d |
8c3f9a70d2d4
jfs: reject on-disk inodes of an unsupported type
|
|
UBSAN: array-index-out-of-bounds in dtReadFirst (2)
jfs
|
19 |
syz, C |
error |
|
119 |
510d |
638d
|
28/29 |
466d |
a8dfb2168906
jfs: add index corruption check to DT_GETPAGE()
|
|
divide error in dbAllocAG
jfs
|
2 |
syz, C |
done |
|
172 |
541d |
656d
|
28/29 |
466d |
ddf2846f22e8
jfs: add sanity check for agwidth in dbMount
|
|
UBSAN: array-index-out-of-bounds in jfs_readdir
jfs
|
19 |
syz, C |
inconclusive |
|
89 |
650d |
901d
|
28/29 |
643d |
839f102efb16
jfs: fix array-index-out-of-bounds in jfs_readdir
|
|
UBSAN: shift-out-of-bounds in dbSplit (2)
jfs
|
-1 |
syz, C |
error |
|
403 |
656d |
901d
|
28/29 |
643d |
a5f5e4698f8a
jfs: fix shift-out-of-bounds in dbSplit
|
|
UBSAN: array-index-out-of-bounds in dbAdjTree (2)
jfs
|
15 |
syz, C |
inconclusive |
|
77 |
669d |
855d
|
28/29 |
643d |
a174706ba4da
jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
|
|
UBSAN: array-index-out-of-bounds in dtReadFirst
jfs
|
19 |
syz, C |
error |
|
200 |
644d |
872d
|
28/29 |
643d |
ca84a2c9be48
jfs: array-index-out-of-bounds fix in dtReadFirst
|
|
UBSAN: array-index-out-of-bounds in dbNextAG (2)
jfs
|
15 |
syz, C |
inconclusive |
|
53 |
731d |
801d
|
28/29 |
697d |
e63866a47556
jfs: fix out-of-bounds in dbNextAG() and diAlloc()
|
|
UBSAN: array-index-out-of-bounds in dbSplit
jfs
|
15 |
syz, C |
inconclusive |
|
31 |
738d |
786d
|
28/29 |
698d |
d64ff0d23067
jfs: check if leafidx greater than num leaves per dmap tree
|
|
UBSAN: shift-out-of-bounds in dbFindBits
jfs
|
-1 |
syz, C |
error |
|
53 |
700d |
803d
|
28/29 |
698d |
b0b2fc815e51
jfs: UBSAN: shift-out-of-bounds in dbFindBits
|
|
KASAN: slab-use-after-free Read in dbFreeBits
jfs
|
19 |
syz, C |
done |
|
6 |
735d |
765d
|
28/29 |
698d |
d6c1b3599b2f
jfs: Fix uaf in dbFreeBits
|
|
general protection fault in dtInsertEntry
jfs
|
17 |
syz, C |
inconclusive |
|
501 |
769d |
894d
|
27/29 |
767d |
ce6dede912f0
jfs: fix null ptr deref in dtInsertEntry
|
|
UBSAN: array-index-out-of-bounds in diFree
jfs
|
15 |
syz, C |
inconclusive |
|
226 |
769d |
879d
|
27/29 |
767d |
f73f969b2eb3
jfs: Fix array-index-out-of-bounds in diFree
|
|
UBSAN: shift-out-of-bounds in dbDiscardAG
jfs
|
-1 |
syz, C |
unreliable |
|
5 |
805d |
820d
|
27/29 |
767d |
7063b80268e2
jfs: Fix shift-out-of-bounds in dbDiscardAG
|
|
KASAN: slab-out-of-bounds Read in ea_get (2)
jfs
|
17 |
syz, C |
|
|
33 |
805d |
869d
|
26/29 |
802d |
7c55b78818cf
jfs: xattr: fix buffer overflow for invalid xattr
|
|
INFO: task hung in deactivate_super (2)
jfs
|
1 |
syz, C |
inconclusive |
done |
121 |
931d |
1270d
|
25/29 |
894d |
6f861765464f
fs: Block writes to mounted block devices
|
|
BUG: unable to handle kernel NULL pointer dereference in dtInsertEntry
jfs
|
19 |
syz, C |
error |
done |
29 |
961d |
1454d
|
25/29 |
914d |
6f861765464f
fs: Block writes to mounted block devices
|
|
INFO: trying to register non-static key in txEnd
jfs
|
-1 |
syz, C |
inconclusive |
done |
20 |
987d |
1084d
|
25/29 |
914d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: slab-out-of-bounds Read in jfs_readdir
jfs
|
19 |
syz, C |
error |
done |
17 |
986d |
1347d
|
25/29 |
914d |
6f861765464f
fs: Block writes to mounted block devices
|
|
INFO: task hung in lmLogClose (2)
jfs
|
1 |
syz, C |
inconclusive |
done |
5 |
983d |
1076d
|
25/29 |
939d |
6f861765464f
fs: Block writes to mounted block devices
|
|
INFO: task hung in __get_metapage
jfs
|
1 |
syz, C |
error |
done |
32 |
986d |
1440d
|
25/29 |
941d |
6f861765464f
fs: Block writes to mounted block devices
|
|
kernel BUG in txLock
jfs
|
-1 |
syz, C |
inconclusive |
done |
10 |
989d |
1106d
|
25/29 |
946d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: slab-out-of-bounds Read in dtSearch
jfs
|
19 |
syz, C |
error |
done |
33 |
992d |
1455d
|
25/29 |
950d |
6f861765464f
fs: Block writes to mounted block devices
|
|
UBSAN: shift-out-of-bounds in dbSplit
jfs
|
-1 |
syz, C |
error |
done |
7 |
992d |
1447d
|
25/29 |
953d |
6f861765464f
fs: Block writes to mounted block devices
|
|
INFO: task hung in path_mount (2)
jfs
|
1 |
syz, C |
error |
done |
8 |
999d |
1128d
|
25/29 |
963d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: slab-use-after-free Read in jfs_evict_inode
jfs
|
19 |
syz |
error |
|
1 |
1063d |
1059d
|
25/29 |
963d |
e0e1958f4c36
jfs: fix uaf in jfs_evict_inode
|
|
UBSAN: array-index-out-of-bounds in diNewExt
jfs
|
15 |
syz, C |
inconclusive |
|
31 |
963d |
1015d
|
25/29 |
963d |
49f9637aafa6
jfs: fix array-index-out-of-bounds in diNewExt
|
|
general protection fault in dtSplitUp
jfs
|
2 |
syz, C |
error |
done |
2 |
1013d |
1449d
|
25/29 |
963d |
6f861765464f
fs: Block writes to mounted block devices
|
|
UBSAN: array-index-out-of-bounds in diWrite
jfs
|
15 |
syz, C |
error |
done |
13 |
1010d |
1430d
|
25/29 |
963d |
6f861765464f
fs: Block writes to mounted block devices
|
|
WARNING in ea_get
jfs
|
-1 |
syz, C |
error |
done |
10 |
1006d |
1451d
|
25/29 |
963d |
6f861765464f
fs: Block writes to mounted block devices
|
|
UBSAN: array-index-out-of-bounds in dtSplitRoot
jfs
|
15 |
syz, C |
error |
inconclusive |
2 |
1107d |
1435d
|
25/29 |
963d |
27e56f59bab5
UBSAN: array-index-out-of-bounds in dtSplitRoot
|
|
kernel BUG in txEnd
jfs
|
-1 |
syz, C |
inconclusive |
done |
6 |
973d |
1188d
|
25/29 |
963d |
6f861765464f
fs: Block writes to mounted block devices
|
|
UBSAN: shift-out-of-bounds in dbJoin
jfs
|
-1 |
syz, C |
error |
|
3 |
1056d |
1441d
|
25/29 |
963d |
cca974daeb6c
jfs: fix shift-out-of-bounds in dbJoin
|
|
UBSAN: array-index-out-of-bounds in dbAdjTree
jfs
|
15 |
syz, C |
error |
error |
41 |
977d |
1455d
|
25/29 |
963d |
9862ec7ac1cb
FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
74ecdda68242
jfs: fix array-index-out-of-bounds in dbAdjTree
|
|
UBSAN: array-index-out-of-bounds in xtSearch
jfs
|
15 |
syz, C |
unreliable |
done |
122 |
1029d |
1447d
|
25/29 |
986d |
a779ed754e52
jfs: define xtree root and page independently
|
|
UBSAN: array-index-out-of-bounds in txCommit
jfs
|
15 |
syz, C |
error |
done |
396 |
1052d |
1434d
|
25/29 |
986d |
a779ed754e52
jfs: define xtree root and page independently
|
|
general protection fault in lbmStartIO
jfs
|
2 |
syz, C |
done |
|
2 |
1071d |
1078d
|
25/29 |
1004d |
6306ff39a7fc
jfs: fix log->bdev_handle null ptr deref in lbmStartIO
|
|
UBSAN: shift-out-of-bounds in dbAlloc (2)
jfs
|
-1 |
|
|
|
1 |
1101d |
1097d
|
25/29 |
1004d |
525b861a0081
fs/jfs: Add check for negative db_l2nbperpage
|
|
UBSAN: array-index-out-of-bounds in diAlloc
jfs
|
15 |
syz, C |
error |
inconclusive |
37 |
1044d |
1454d
|
25/29 |
1004d |
05d9ea1ceb62
jfs: fix array-index-out-of-bounds in diAlloc
|
|
UBSAN: array-index-out-of-bounds in dbFindLeaf
jfs
|
15 |
syz, C |
error |
|
6 |
1104d |
1418d
|
25/29 |
1004d |
22cad8bc1d36
jfs: fix array-index-out-of-bounds in dbFindLeaf
|
|
UBSAN: array-index-out-of-bounds in dbNextAG
jfs
|
15 |
syz, C |
inconclusive |
inconclusive |
52 |
1027d |
1455d
|
25/29 |
1004d |
64933ab7b048
fs/jfs: Add validity check for db_maxag and db_agpref
|
|
KASAN: invalid-free in dbUnmount
jfs
|
24 |
syz |
error |
|
119 |
1090d |
1350d
|
23/29 |
1074d |
cade5397e546
fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount()
|
|
KASAN: null-ptr-deref Read in txBegin
jfs
|
11 |
syz, C |
error |
|
30 |
1175d |
1309d
|
23/29 |
1074d |
47cfdc338d67
FS: JFS: Fix null-ptr-deref Read in txBegin
|
|
UBSAN: array-index-out-of-bounds in dbAllocDmapLev
jfs
|
15 |
syz, C |
error |
|
2 |
1193d |
1367d
|
23/29 |
1074d |
4e302336d5ca
fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
|
|
UBSAN: shift-out-of-bounds in dbFree
jfs
|
-1 |
syz, C |
error |
|
3 |
1214d |
1279d
|
23/29 |
1074d |
11509910c599
jfs: jfs_dmap: Validate db_l2nbperpage while mounting
|
|
WARNING in diUnmount
jfs
|
-1 |
syz, C |
error |
|
100 |
1101d |
1394d
|
23/29 |
1074d |
6e2bda2c192d
jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount
|
|
UBSAN: shift-out-of-bounds in extAlloc
jfs
|
-1 |
syz, C |
error |
|
6605 |
1095d |
1455d
|
23/29 |
1074d |
0225e10972fa
jfs: validate max amount of blocks before allocation.
|
|
UBSAN: shift-out-of-bounds in blkstol2
jfs
|
-1 |
syz, C |
error |
|
2 |
1418d |
1418d
|
22/29 |
1199d |
fad376fce0af
fs/jfs: fix shift exponent db_agl2size negative
|
|
UBSAN: shift-out-of-bounds in dbAllocBits
jfs
|
-1 |
syz, C |
error |
done |
4 |
1308d |
1441d
|
22/29 |
1199d |
fad376fce0af
fs/jfs: fix shift exponent db_agl2size negative
|
|
UBSAN: shift-out-of-bounds in dbFindCtl
jfs
|
-1 |
syz, C |
inconclusive |
done |
45 |
1300d |
1441d
|
22/29 |
1199d |
fad376fce0af
fs/jfs: fix shift exponent db_agl2size negative
|
|
divide error in dbNextAG
jfs
|
2 |
syz |
error |
|
2 |
1649d |
1645d
|
22/29 |
1303d |
2cc7cc01c15f
jfs: fix divide error in dbNextAG
|
|
UBSAN: shift-out-of-bounds in dbAllocAG
jfs
|
-1 |
syz, C |
error |
|
10 |
1420d |
1452d
|
22/29 |
1303d |
898f70669568
fs: jfs: fix shift-out-of-bounds in dbAllocAG
|
|
WARNING in jfs_symlink
jfs
|
-1 |
syz, C |
|
|
12 |
1425d |
1435d
|
22/29 |
1303d |
ebe060369f8d
jfs: Fix fortify moan in symlink
|
|
BUG: unable to handle kernel paging request in diFree
jfs
|
8 |
syz, C |
done |
|
13 |
1912d |
2183d
|
20/29 |
1775d |
9d574f985fe3
jfs: fix GPF in diFree
|
|
UBSAN: shift-out-of-bounds in chkSuper
jfs
|
-1 |
syz, C |
unreliable |
|
28 |
2038d |
2103d
|
20/29 |
1989d |
3bef198f1b17
JFS: more checks for invalid superblock
|