|
KASAN: use-after-free Read in jfs_lazycommit
prio:high
jfs
|
19 |
syz, C |
error |
|
4247 |
4h02m |
1425d
|
0/29 |
never |
From 7e1a0b91e9efa8bec40fc5397ba6c4e683d72df0 Mon Sep 17 00:00:00 2001
|
|
INFO: task hung in __writeback_inodes_sb_nr (6)
prio:high
jfs
|
1 |
syz, C |
done |
|
4177 |
8d23h |
1166d
|
1/29 |
never |
PM: hibernate: Fix block device handling in test_resume mode
|
|
general protection fault in blk_update_request
jfs
|
19 |
syz, C |
error |
|
230 |
132d |
662d
|
29/29 |
97d |
b15e4310633f
jfs: Set the lbmDone flag at the end of lbmIODone
|
|
BUG: corrupted list in dbUpdatePMap
jfs
|
8 |
syz, C |
error |
|
141 |
134d |
293d
|
29/29 |
97d |
3c778ec88208
jfs: fix corrupted list in dbUpdatePMap
|
|
INFO: task hung in filename_rmdir
jfs
|
1 |
syz, C |
error |
|
5 |
129d |
180d
|
29/29 |
97d |
5422fe71d26d
ext4: avoid infinite loops caused by residual data
|
|
INFO: task hung in filename_unlinkat
jfs
|
1 |
syz, C |
error |
|
14 |
160d |
182d
|
29/29 |
97d |
5422fe71d26d
ext4: avoid infinite loops caused by residual data
|
|
UBSAN: shift-out-of-bounds in dbSplit (3)
jfs
|
-1 |
syz, C |
|
|
8 |
168d |
482d
|
29/29 |
97d |
cce219b203c4
jfs: add dmapctl integrity check to prevent invalid operations
|
|
general protection fault in lmLogSync (2)
jfs
|
22 |
syz, C |
error |
|
8238 |
100d |
1426d
|
29/29 |
97d |
ca5848ae87d2
jfs: hold LOG_LOCK on umount to avoid null-ptr-deref
|
|
WARNING in jfs_rename
jfs
|
-1 |
syz, C |
inconclusive |
|
13 |
242d |
474d
|
29/29 |
112d |
9218dc26fd92
jfs: nlink overflow in jfs_rename
|
|
kernel BUG in folio_set_bh (2)
ntfs3
jfs
|
-1 |
syz, C |
|
|
46 |
125d |
225d
|
29/29 |
112d |
ab7ad7abb366
romfs: check sb_set_blocksize() return value
|
|
INFO: task hung in __bread_gfp (7)
udf
jfs
|
1 |
syz, C |
done |
|
6 |
335d |
340d
|
29/29 |
300d |
ab073abf6d97
block: fix EOD return for device with nr_sectors == 0
|
|
kernel BUG in clear_inode (3)
jfs
|
-1 |
syz, C |
error |
|
637 |
359d |
440d
|
29/29 |
356d |
2d91b3765cd0
jfs: truncate good inode pages when hard link is 0
|
|
UBSAN: array-index-out-of-bounds in dbAllocAG
jfs
|
15 |
syz, C |
|
|
1 |
479d |
489d
|
29/29 |
356d |
c214006856ff
jfs: upper bound check of tree index in dbAllocAG
|
|
kernel BUG in jfs_truncate_nolock
jfs
|
-1 |
syz, C |
error |
|
5 |
436d |
449d
|
29/29 |
356d |
2d04df811642
jfs: Regular file corruption check
|
|
UBSAN: array-index-out-of-bounds in add_missing_indices
jfs
|
15 |
syz, C |
|
|
187 |
442d |
638d
|
29/29 |
414d |
5dff41a86377
jfs: fix array-index-out-of-bounds read in add_missing_indices
|
|
UBSAN: shift-out-of-bounds in dbAllocAG (2)
jfs
|
-1 |
syz, C |
done |
|
5 |
486d |
536d
|
29/29 |
414d |
37bfb464ddca
jfs: validate AG parameters in dbMount() to prevent crashes
|
|
KMSAN: uninit-value in diFree
jfs
|
7 |
syz, C |
|
|
2 |
553d |
553d
|
28/29 |
442d |
9629d7d66c62
jfs: Fix uninit-value access of imap allocated in the diMount() function
|
|
KASAN: slab-out-of-bounds Read in ea_get (4)
jfs
|
17 |
syz, C |
|
|
4 |
537d |
560d
|
28/29 |
442d |
fdf480da5837
jfs: fix slab-out-of-bounds read in ea_get()
|
|
BUG: unable to handle kernel paging request in txBeginAnon
jfs
|
11 |
syz, C |
inconclusive |
|
43 |
534d |
823d
|
28/29 |
442d |
b5799dd77054
jfs: add check read-only before truncation in jfs_truncate_nolock()
0176e69743ec
jfs: add check read-only before txBeginAnon() call
|
|
possible deadlock in diFree (2)
jfs
|
4 |
syz, C |
|
|
40 |
517d |
643d
|
28/29 |
442d |
b61e69bb1c04
jfs: Prevent copying of nlink with value 0 from disk inode
|
|
kernel BUG in clear_inode (2)
jfs
|
-1 |
syz, C |
inconclusive |
|
986 |
442d |
667d
|
28/29 |
442d |
8c3f9a70d2d4
jfs: reject on-disk inodes of an unsupported type
|
|
UBSAN: array-index-out-of-bounds in dtReadFirst (2)
jfs
|
19 |
syz, C |
error |
|
119 |
485d |
613d
|
28/29 |
442d |
a8dfb2168906
jfs: add index corruption check to DT_GETPAGE()
|
|
divide error in dbAllocAG
jfs
|
2 |
syz, C |
done |
|
172 |
516d |
631d
|
28/29 |
442d |
ddf2846f22e8
jfs: add sanity check for agwidth in dbMount
|
|
UBSAN: array-index-out-of-bounds in jfs_readdir
jfs
|
19 |
syz, C |
inconclusive |
|
89 |
625d |
877d
|
28/29 |
618d |
839f102efb16
jfs: fix array-index-out-of-bounds in jfs_readdir
|
|
UBSAN: shift-out-of-bounds in dbSplit (2)
jfs
|
-1 |
syz, C |
error |
|
403 |
631d |
877d
|
28/29 |
618d |
a5f5e4698f8a
jfs: fix shift-out-of-bounds in dbSplit
|
|
UBSAN: array-index-out-of-bounds in dbAdjTree (2)
jfs
|
15 |
syz, C |
inconclusive |
|
77 |
644d |
830d
|
28/29 |
618d |
a174706ba4da
jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
|
|
UBSAN: array-index-out-of-bounds in dtReadFirst
jfs
|
19 |
syz, C |
error |
|
200 |
620d |
847d
|
28/29 |
618d |
ca84a2c9be48
jfs: array-index-out-of-bounds fix in dtReadFirst
|
|
UBSAN: array-index-out-of-bounds in dbNextAG (2)
jfs
|
15 |
syz, C |
inconclusive |
|
53 |
706d |
776d
|
28/29 |
673d |
e63866a47556
jfs: fix out-of-bounds in dbNextAG() and diAlloc()
|
|
UBSAN: array-index-out-of-bounds in dbSplit
jfs
|
15 |
syz, C |
inconclusive |
|
31 |
713d |
761d
|
28/29 |
673d |
d64ff0d23067
jfs: check if leafidx greater than num leaves per dmap tree
|
|
UBSAN: shift-out-of-bounds in dbFindBits
jfs
|
-1 |
syz, C |
error |
|
53 |
676d |
779d
|
28/29 |
673d |
b0b2fc815e51
jfs: UBSAN: shift-out-of-bounds in dbFindBits
|
|
KASAN: slab-use-after-free Read in dbFreeBits
jfs
|
19 |
syz, C |
done |
|
6 |
710d |
740d
|
28/29 |
673d |
d6c1b3599b2f
jfs: Fix uaf in dbFreeBits
|
|
general protection fault in dtInsertEntry
jfs
|
17 |
syz, C |
inconclusive |
|
501 |
744d |
869d
|
27/29 |
742d |
ce6dede912f0
jfs: fix null ptr deref in dtInsertEntry
|
|
UBSAN: array-index-out-of-bounds in diFree
jfs
|
15 |
syz, C |
inconclusive |
|
226 |
744d |
854d
|
27/29 |
742d |
f73f969b2eb3
jfs: Fix array-index-out-of-bounds in diFree
|
|
UBSAN: shift-out-of-bounds in dbDiscardAG
jfs
|
-1 |
syz, C |
unreliable |
|
5 |
780d |
796d
|
27/29 |
742d |
7063b80268e2
jfs: Fix shift-out-of-bounds in dbDiscardAG
|
|
KASAN: slab-out-of-bounds Read in ea_get (2)
jfs
|
17 |
syz, C |
|
|
33 |
780d |
845d
|
26/29 |
778d |
7c55b78818cf
jfs: xattr: fix buffer overflow for invalid xattr
|
|
INFO: task hung in deactivate_super (2)
jfs
|
1 |
syz, C |
inconclusive |
done |
121 |
906d |
1245d
|
25/29 |
870d |
6f861765464f
fs: Block writes to mounted block devices
|
|
BUG: unable to handle kernel NULL pointer dereference in dtInsertEntry
jfs
|
19 |
syz, C |
error |
done |
29 |
936d |
1430d
|
25/29 |
889d |
6f861765464f
fs: Block writes to mounted block devices
|
|
INFO: trying to register non-static key in txEnd
jfs
|
-1 |
syz, C |
inconclusive |
done |
20 |
962d |
1060d
|
25/29 |
889d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: slab-out-of-bounds Read in jfs_readdir
jfs
|
19 |
syz, C |
error |
done |
17 |
961d |
1322d
|
25/29 |
889d |
6f861765464f
fs: Block writes to mounted block devices
|
|
INFO: task hung in lmLogClose (2)
jfs
|
1 |
syz, C |
inconclusive |
done |
5 |
959d |
1051d
|
25/29 |
914d |
6f861765464f
fs: Block writes to mounted block devices
|
|
INFO: task hung in __get_metapage
jfs
|
1 |
syz, C |
error |
done |
32 |
961d |
1415d
|
25/29 |
917d |
6f861765464f
fs: Block writes to mounted block devices
|
|
kernel BUG in txLock
jfs
|
-1 |
syz, C |
inconclusive |
done |
10 |
964d |
1082d
|
25/29 |
922d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: slab-out-of-bounds Read in dtSearch
jfs
|
19 |
syz, C |
error |
done |
33 |
967d |
1431d
|
25/29 |
925d |
6f861765464f
fs: Block writes to mounted block devices
|
|
UBSAN: shift-out-of-bounds in dbSplit
jfs
|
-1 |
syz, C |
error |
done |
7 |
968d |
1422d
|
25/29 |
929d |
6f861765464f
fs: Block writes to mounted block devices
|
|
INFO: task hung in path_mount (2)
jfs
|
1 |
syz, C |
error |
done |
8 |
974d |
1103d
|
25/29 |
938d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: slab-use-after-free Read in jfs_evict_inode
jfs
|
19 |
syz |
error |
|
1 |
1038d |
1034d
|
25/29 |
939d |
e0e1958f4c36
jfs: fix uaf in jfs_evict_inode
|
|
UBSAN: array-index-out-of-bounds in diNewExt
jfs
|
15 |
syz, C |
inconclusive |
|
31 |
939d |
990d
|
25/29 |
939d |
49f9637aafa6
jfs: fix array-index-out-of-bounds in diNewExt
|
|
general protection fault in dtSplitUp
jfs
|
2 |
syz, C |
error |
done |
2 |
988d |
1425d
|
25/29 |
939d |
6f861765464f
fs: Block writes to mounted block devices
|
|
UBSAN: array-index-out-of-bounds in diWrite
jfs
|
15 |
syz, C |
error |
done |
13 |
985d |
1405d
|
25/29 |
939d |
6f861765464f
fs: Block writes to mounted block devices
|
|
WARNING in ea_get
jfs
|
-1 |
syz, C |
error |
done |
10 |
981d |
1426d
|
25/29 |
939d |
6f861765464f
fs: Block writes to mounted block devices
|
|
UBSAN: array-index-out-of-bounds in dtSplitRoot
jfs
|
15 |
syz, C |
error |
inconclusive |
2 |
1083d |
1411d
|
25/29 |
939d |
27e56f59bab5
UBSAN: array-index-out-of-bounds in dtSplitRoot
|
|
kernel BUG in txEnd
jfs
|
-1 |
syz, C |
inconclusive |
done |
6 |
949d |
1163d
|
25/29 |
939d |
6f861765464f
fs: Block writes to mounted block devices
|
|
UBSAN: shift-out-of-bounds in dbJoin
jfs
|
-1 |
syz, C |
error |
|
3 |
1032d |
1416d
|
25/29 |
939d |
cca974daeb6c
jfs: fix shift-out-of-bounds in dbJoin
|
|
UBSAN: array-index-out-of-bounds in dbAdjTree
jfs
|
15 |
syz, C |
error |
error |
41 |
952d |
1430d
|
25/29 |
939d |
9862ec7ac1cb
FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
74ecdda68242
jfs: fix array-index-out-of-bounds in dbAdjTree
|
|
UBSAN: array-index-out-of-bounds in xtSearch
jfs
|
15 |
syz, C |
unreliable |
done |
122 |
1004d |
1422d
|
25/29 |
961d |
a779ed754e52
jfs: define xtree root and page independently
|
|
UBSAN: array-index-out-of-bounds in txCommit
jfs
|
15 |
syz, C |
error |
done |
396 |
1028d |
1409d
|
25/29 |
961d |
a779ed754e52
jfs: define xtree root and page independently
|
|
general protection fault in lbmStartIO
jfs
|
2 |
syz, C |
done |
|
2 |
1046d |
1053d
|
25/29 |
979d |
6306ff39a7fc
jfs: fix log->bdev_handle null ptr deref in lbmStartIO
|
|
UBSAN: shift-out-of-bounds in dbAlloc (2)
jfs
|
-1 |
|
|
|
1 |
1077d |
1073d
|
25/29 |
979d |
525b861a0081
fs/jfs: Add check for negative db_l2nbperpage
|
|
UBSAN: array-index-out-of-bounds in diAlloc
jfs
|
15 |
syz, C |
error |
inconclusive |
37 |
1019d |
1429d
|
25/29 |
979d |
05d9ea1ceb62
jfs: fix array-index-out-of-bounds in diAlloc
|
|
UBSAN: array-index-out-of-bounds in dbFindLeaf
jfs
|
15 |
syz, C |
error |
|
6 |
1079d |
1393d
|
25/29 |
979d |
22cad8bc1d36
jfs: fix array-index-out-of-bounds in dbFindLeaf
|
|
UBSAN: array-index-out-of-bounds in dbNextAG
jfs
|
15 |
syz, C |
inconclusive |
inconclusive |
52 |
1002d |
1430d
|
25/29 |
979d |
64933ab7b048
fs/jfs: Add validity check for db_maxag and db_agpref
|
|
KASAN: invalid-free in dbUnmount
jfs
|
24 |
syz |
error |
|
119 |
1066d |
1325d
|
23/29 |
1049d |
cade5397e546
fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount()
|
|
KASAN: null-ptr-deref Read in txBegin
jfs
|
11 |
syz, C |
error |
|
30 |
1150d |
1284d
|
23/29 |
1049d |
47cfdc338d67
FS: JFS: Fix null-ptr-deref Read in txBegin
|
|
UBSAN: array-index-out-of-bounds in dbAllocDmapLev
jfs
|
15 |
syz, C |
error |
|
2 |
1169d |
1342d
|
23/29 |
1049d |
4e302336d5ca
fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
|
|
UBSAN: shift-out-of-bounds in dbFree
jfs
|
-1 |
syz, C |
error |
|
3 |
1189d |
1255d
|
23/29 |
1049d |
11509910c599
jfs: jfs_dmap: Validate db_l2nbperpage while mounting
|
|
WARNING in diUnmount
jfs
|
-1 |
syz, C |
error |
|
100 |
1076d |
1369d
|
23/29 |
1049d |
6e2bda2c192d
jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount
|
|
UBSAN: shift-out-of-bounds in extAlloc
jfs
|
-1 |
syz, C |
error |
|
6605 |
1070d |
1430d
|
23/29 |
1049d |
0225e10972fa
jfs: validate max amount of blocks before allocation.
|
|
UBSAN: shift-out-of-bounds in blkstol2
jfs
|
-1 |
syz, C |
error |
|
2 |
1394d |
1394d
|
22/29 |
1175d |
fad376fce0af
fs/jfs: fix shift exponent db_agl2size negative
|
|
UBSAN: shift-out-of-bounds in dbAllocBits
jfs
|
-1 |
syz, C |
error |
done |
4 |
1283d |
1416d
|
22/29 |
1175d |
fad376fce0af
fs/jfs: fix shift exponent db_agl2size negative
|
|
UBSAN: shift-out-of-bounds in dbFindCtl
jfs
|
-1 |
syz, C |
inconclusive |
done |
45 |
1275d |
1417d
|
22/29 |
1175d |
fad376fce0af
fs/jfs: fix shift exponent db_agl2size negative
|
|
divide error in dbNextAG
jfs
|
2 |
syz |
error |
|
2 |
1625d |
1621d
|
22/29 |
1279d |
2cc7cc01c15f
jfs: fix divide error in dbNextAG
|
|
UBSAN: shift-out-of-bounds in dbAllocAG
jfs
|
-1 |
syz, C |
error |
|
10 |
1395d |
1427d
|
22/29 |
1279d |
898f70669568
fs: jfs: fix shift-out-of-bounds in dbAllocAG
|
|
WARNING in jfs_symlink
jfs
|
-1 |
syz, C |
|
|
12 |
1400d |
1411d
|
22/29 |
1279d |
ebe060369f8d
jfs: Fix fortify moan in symlink
|
|
BUG: unable to handle kernel paging request in diFree
jfs
|
8 |
syz, C |
done |
|
13 |
1887d |
2158d
|
20/29 |
1750d |
9d574f985fe3
jfs: fix GPF in diFree
|
|
UBSAN: shift-out-of-bounds in chkSuper
jfs
|
-1 |
syz, C |
unreliable |
|
28 |
2013d |
2079d
|
20/29 |
1965d |
3bef198f1b17
JFS: more checks for invalid superblock
|