syzbot


Applied filters: Label=subsystems:mm (drop)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
KASAN: null-ptr-deref Write in sys_io_uring_register mm 12 C done 15 378d 385d 1/29 never xarray-extract-helper-from-__xa_insertcmpxchg-fix
BUG: sleeping function called from invalid context in alloc_buffer_head mm 5 15 954d 960d 1/29 never workingset: add missing rcu_read_unlock() in lru_gen_refault()
WARNING: suspicious RCU usage in mas_walk (3) mm 4 C done 12 791d 805d 1/29 never mempolicy: migration attempt to match interleave nodes: fix
linux-next test error: kernel BUG in folio_add_new_anon_rmap mm -1 2 442d 442d 1/29 never mm-add-pageanonnotksm-fix
KASAN: slab-use-after-free Read in do_sync_mmap_readahead mm 19 C done 3 185d 189d 2/29 never mm-filemap-allow-arch-to-request-folio-size-for-exec-memory-fix
KASAN: slab-use-after-free Read in __list_lru_walk_one (3) mm 19 48 5h31m 23d 2/29 never gfs2: Fix slab-use-after-free in qd_put
KASAN: slab-use-after-free Read in finish_fault mm 19 C done 8 557d 559d 1/29 never mm-memory-extend-finish_fault-to-support-large-folio-fix
KASAN: use-after-free Read in __vma_adjust mm 19 C done 10 1235d 1291d 1/29 never fs/userfaultfd: fix vma iteration in mas_for_each() loop
kernel BUG in folio_flags mm -1 62 630d 1077d 1/29 never mm-reimplement-compound_nr-fix
WARNING in page_add_anon_rmap mm -1 C done 1041 827d 828d 1/29 never mm-rmap-simplify-pageanonexclusive-sanity-checks-when-adding-anon-rmap-fix
WARNING in raw_ioctl usb mm -1 C 664 17d 60d 28/29 never usb: raw-gadget: cap raw_io transfer length to KMALLOC_MAX_SIZE
general protection fault in vma_is_shmem mm io-uring 2 C error 28 1219d 1221d 1/29 never mm/gup.c: Fix return value for __gup_longterm_locked()
linux-next boot error: kernel BUG at include/linux/page-flags.h:LINE! mm -1 3 1847d 1847d 1/29 never fixup for "mm: refactor initialization of stuct page for holes"
WARNING in memory_failure mm -1 C 4 69d 91d 28/29 never 77008e1b2ef7 mm/huge_memory: do not change split_huge_page*() target order silently
general protection fault in shmem_mapping mm 2 C done 17 310d 312d 1/29 never mm/huge_memory: do not drop the original folio during truncate
BUG: unable to handle kernel paging request in alloc_huge_page mm 8 C unreliable 491 1594d 1593d 1/29 never mm/hugetlb: Initialize page to NULL in alloc_buddy_huge_page_with_mpol()
KASAN: slab-use-after-free Read in madvise_collapse mm 19 C error 5 884d 885d 1/29 never mm/khugepaged: collapse_pte_mapped_thp() with mmap_read_lock(): fix
kernel BUG in free_bprm fs mm -1 C done 445 413d 414d 1/29 never exec: NULL out bprm->argv0 when it is an ERR_PTR
kernel BUG in collapse_file (3) mm -1 C done 14 884d 891d 1/29 never mm/khugepaged: collapse_pte_mapped_thp() with mmap_read_lock(): fix
possible deadlock in collapse_file mm 4 C done 189 1024d 1025d 1/29 never mm/khugepaged: fix vm_lock/i_mmap_rwsem inversion in retract_page_tables
linux-next test error: WARNING in vma_merge mm -1 6 1064d 1065d 1/29 never mm/madvise: fix VMA_ITERATOR start position
WARNING in blkdev_common_ioctl mm -1 C 5 15d 12d 21/29 never a58383fa45c7 block: add allocation size check in blkdev_pr_read_keys()
linux-next boot error: WARNING in prepare_kswapd_sleep mm -1 15 1854d 1856d 1/29 never mm/memcg: warn on missing memcg on mem_cgroup_page_lruvec()
KMSAN: kernel-infoleak in hugetlbfs_read_iter fs mm 9 C 7 44d 43d 28/29 never de8798965fd0 mm/memfd: fix information leak in hugetlb folios
WARNING in vma_merge mm -1 C done 18115 758d 1337d 1/29 never mm/mlock: use maple state in apply_mlockall_flags()
general protection fault in vma_interval_tree_remove mm 10 C done 14 573d 1332d 1/29 never mm/mmap: fix advanced maple tree API for mmap_region() mm/mmap: qvoid dereferencing next on null in BUG_ON()
KASAN: slab-use-after-free Read in mtree_range_walk mm 19 3 33d 43d 28/29 never 270065f514c5 mm/mmap_lock: reset maple state on lock_vma_under_rcu() retry
KASAN: slab-use-after-free Read in mremap mm 19 C done 122 127d 130d 2/29 never mm/mremap: do not incorrectly reference invalid VMA in VM_WARN_ON_ONCE()
WARNING in folio_lruvec_lock cgroups mm -1 1 192d 188d 2/29 never mm/vma: correctly invoke late KSM check after mmap hook
KASAN: slab-out-of-bounds Read in shrink_folio_list mm 19 C 683 898d 899d 1/29 never mm: call folio_mapping() inside folio_needs_release()
KASAN: slab-use-after-free Read in handle_mm_fault mm 19 C done 107 523d 526d 1/29 never mm: check for VM_DROPPABLE in vma prior to handling mm fault
WARNING in handle_userfault mm -1 C error 71 895d 903d 1/29 never mm: fix a lockdep issue in vma_assert_write_locked
WARNING: refcount bug in __vma_enter_locked mm 13 C done 27 21d 29d 28/29 never mm: fix vma_start_write_killable() signal handling
WARNING in folio_memcg mm -1 C done 3851 9d02h 492d 1/29 never mm: kmem: fix split_page_memcg()
INFO: task hung in remove_inode_hugepages fs mm 1 C done 52 441d 533d 1/29 never INFO: task hung in remove_inode_hugepages
kernel BUG in vma_replace_policy mm -1 C done 6 831d 840d 1/29 never mm: lock VMAs skipped by a failed queue_pages_range()
kernel BUG in mfill_atomic_copy mm -1 C error 3 898d 894d 1/29 never mm: userfaultfd: check for start + len overflow in validate_range: fix
KASAN: slab-use-after-free Read in move_pages_pte mm 19 C done 3 383d 381d 1/29 never mm: pgtable: make ptlock be freed by RCU
WARNING in hugetlb_vma_assert_locked mm -1 C 8 90d 92d 29/29 35d cec944dd329f hugetlbfs: move lock assertions after early returns in huge_pmd_unshare() dd83609b8898 hugetlbfs: skip VMAs without shareable locks in hugetlb_vmdelete_list
WARNING: locking bug in __set_page_owner (2) mm 4 4 70d 75d 29/29 36d c83aab85e181 mm: don't spin in add_stack_record when gfp flags don't allow
WARNING in xfs_init_fs_context mm -1 syz 21 74d 177d 29/29 36d 0f41997b1b2b xfs: don't use __GFP_NOFAIL in xfs_init_fs_context
general protection fault in unpin_user_pages_dirty_lock mm 2 C 4 107d 107d 29/29 55d e3c05b6e370c mm/gup: remove record_subpages()
WARNING in ext4_init_orphan_info ext4 mm -1 C done 5 82d 106d 29/29 55d 0a6ce20c1564 ext4: verify orphan file size is not too big
WARNING: bad unlock balance in copy_process mm 4 C 304 81d 207d 29/29 55d 4ec3c15462b9 futex: Use correct exit on failure from futex_hash_allocate_default()
INFO: task hung in v9fs_file_fsync mm fs 1 C done 14 88d 128d 29/29 55d e8fe3f07a357 9p/trans_fd: p9_fd_request: kick rx thread if EPOLLIN
WARNING in max_vclocks_store mm net -1 C 3 116d 351d 29/29 55d e9f35294e18d ptp: Add a upper bound on max_vclocks
KCSAN: data-race in __unmap_hugepage_range / alloc_surplus_hugetlb_folio mm 6 1 131d 131d 29/29 55d 21cc2b5c5062 mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range()
WARNING in nfsd_file_cache_init mm -1 C error 4 80d 78d 29/29 55d f7dfa0f31b13 slub: Don't call lockdep_unregister_key() for immature kmem_cache.
KCSAN: data-race in try_to_migrate_one / zap_page_range_single_batched mm 6 1 90d 89d 29/29 55d 989c2f55ca48 mm: silence data-race in update_hiwater_rss
WARNING in try_to_migrate_one (3) mm -1 C done done 6 113d 136d 29/29 70d cf1b80dc31a1 mm: pass page directly instead of using folio_page
BUG: unable to handle kernel paging request in move_pages mm 8 C 4 145d 159d 29/29 76d aba6faec0103 userfaultfd: fix a crash in UFFDIO_MOVE when PMD is a migration entry
WARNING in move_page_tables mm -1 C 3 134d 133d 29/29 76d 772e5b4a5e83 mm/mremap: fix WARN with uffd that has remap events disabled
WARNING in follow_page_pte usb input mm -1 C done 6 140d 140d 29/29 76d cf1b80dc31a1 mm: pass page directly instead of using folio_page
WARNING in path_noexec fs mm -1 C done 14318 85d 170d 29/29 84d secretmem: use SB_I_NOEXEC
WARNING in move_to_new_folio (2) gfs2 mm -1 C error 398 148d 168d 29/29 106d 5c8f12cf1e64 gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops
kernel BUG in try_to_unmap_one (2) mm -1 C 7 177d 202d 29/29 110d 9f1e8cd0b7c4 mm/vmscan: fix hwpoisoned large folio handling in shrink_folio_list
kernel BUG in sanity_check_pinned_pages mm -1 C 3 185d 203d 29/29 110d 5afb4bf9fc62 io_uring/rsrc: fix folio unpinning
possible deadlock in upgrade_mmap_lock_carefully (2) ntfs3 mm 4 C error 6 181d 198d 29/29 110d a49f0abd8959 Revert "fs/ntfs3: Replace inode_trylock with inode_lock"
kernel BUG in alloc_hugetlb_folio_reserve mm -1 C done 98 164d 354d 29/29 110d c39b87456411 mm/hugetlb: don't crash when allocating a folio if there are no resv
WARNING in comedi_unlocked_ioctl mm comedi -1 C 262 156d 173d 29/29 110d 08ae4b20f5e8 comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
BUG: Bad rss-counter state (5) mm -1 C done 2365 164d 590d 29/29 138d 43e027e41423 mm: memory: extend finish_fault() to support large folio
WARNING in vma_modify mm -1 C done 21 192d 201d 29/29 139d 0cf4b1687a18 mm/vma: reset VMA iterator on commit_merge() OOM failure
KCSAN: data-race in try_to_migrate_one / zap_page_range_single mm 6 1 309d 309d 29/29 169d 2e9765672332 mm: annotate data race in update_hiwater_rss
WARNING in move_to_new_folio mm -1 C done 1366 169d 255d 29/29 169d 906d7ce3b59d jfs: implement migrate_folio for jfs_metapage_aops
WARNING in folio_large_mapcount mm -1 2 205d 221d 29/29 169d 595cf683519a mm/khugepaged: fix race with folio split/free using temporary reference
WARNING: locking bug in __set_page_owner mm 4 C error inconclusive 179425 324d 415d 29/29 172d d40797d6720e kasan: make kasan_record_aux_stack_noalloc() the default behaviour
general protection fault in lock_vma_under_rcu mm 2 syz done 3 303d 302d 28/29 195d f35ab95ca0af mm: replace vm_lock and detached flag with a reference count
general protection fault in sys_mremap mm 2 C 35 264d 266d 28/29 196d 36eed5400805 mm/mremap: do not set vrm->vma NULL immediately prior to checking it
WARNING in do_wp_page mm -1 1 259d 255d 28/29 196d 8bdea2fce980 mm/memory: move sanity checks in do_wp_page() after mapcount vs. refcount stabilization
WARNING in vma_merge_existing_range mm -1 87 206d 357d 28/29 196d 47b16d0462a4 mm: abort vma_modify() on merge out of memory failure
KMSAN: uninit-value in __alloc_frozen_pages_noprof mm 7 C 6 292d 305d 28/29 196d 8fe9ed44dc29 mm/page_alloc: fix uninitialized variable
KCSAN: data-race in bprm_execve / copy_fs (4) fs mm 6 1 279d 278d 28/29 196d af7bb0d2ca45 exec: fix the racy usage of fs_struct->in_exec
possible deadlock in efivarfs_actor mm 4 C 8 273d 290d 28/29 196d dec1277875a5 efivarfs: use I_MUTEX_CHILD nested lock to traverse variables on resume
KCSAN: data-race in mprotect_fixup / try_to_migrate_one mm 6 1 322d 322d 28/29 196d e92b6e7bb618 mm: use READ/WRITE_ONCE() for vma->vm_flags on migrate, mprotect
BUG: unable to handle kernel paging request in vma_merge_existing_range mm 8 C done 8 251d 278d 28/29 196d 41e6ddcaa0f1 mm/vma: add give_up_on_oom option on modify/merge, use in uffd release
BUG: sleeping function called from invalid context in folio_mc_copy mm 5 C done 5415 239d 271d 28/29 196d 2d900efff915 mm/migrate: fix sleep in atomic for large folios and buffer heads
upstream test error: WARNING in enable_work mm -1 20 352d 348d 28/29 230d cd6313beaeae Revert "vmstat: disable vmstat_work on vmstat_cpu_down_prep()"
possible deadlock in zswap_store mm 4 C inconclusive 24203 302d 352d 28/29 231d 4dff389c9f1d Revert "mm: zswap: fix race between [de]compression and CPU hotunplug"
KASAN: slab-use-after-free Write in zswap_store mm 24 8 352d 366d 28/29 231d 12dcb0ef5406 mm: zswap: properly synchronize freeing resources during CPU hotunplug
general protection fault in account_kernel_stack (3) mm 2 C 7 356d 371d 28/29 231d 4db3d750ac7e nvmet: Don't overflow subsysnqn
WARNING in lock_list_lru_of_memcg bcachefs mm -1 syz 2 312d 375d 28/29 231d 62e72d2cf702 mm, madvise: fix potential workingset node list_lru leaks
general protection fault in do_migrate_pages mm 2 C 2 382d 399d 28/29 231d 091c1dd2d4df mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
kernel BUG in const_folio_flags (2) fs mm -1 syz 3 336d 396d 28/29 231d 3203b3ab0fcf mm/filemap: don't call folio_test_locked() without a reference in next_uptodate_folio()
KASAN: slab-use-after-free Read in __mmap_region mm 19 C 7 345d 382d 28/29 231d 42c4e4b20d9c mm: correctly reference merged VMA
BUG: stack guard page was hit in sys_open mm v9fs -1 C 11 372d 408d 28/29 231d 4acb665cf4f3 netfs: Work around recursion by abandoning retry if nothing read
general protection fault in vsscanf (2) mm 2 C 11 367d 373d 28/29 231d d3ac65d274b3 mm: huge_memory: handle strsep not finding delimiter
KASAN: out-of-bounds Read in copy_from_kernel_nofault mm 17 C done 1628 273d 450d 28/29 231d e4137f08816b mm, kasan, kmsan: instrument copy_from/to_kernel_nofault
general protection fault in find_mergeable_anon_vma mm 2 1 385d 380d 28/29 231d 8ac662f5da19 fork: avoid inappropriate uprobe access to invalid mm
WARNING: locking bug in __rmqueue_pcplist mm 4 C 11148 323d 416d 28/29 231d d40797d6720e kasan: make kasan_record_aux_stack_noalloc() the default behaviour
possible deadlock in page_cache_ra_unbounded mm fs 4 C error done 163 338d 1099d 28/29 294d 6f861765464f fs: Block writes to mounted block devices
BUG: Bad page state in kvm_coalesced_mmio_init mm -1 1 414d 414d 28/29 373d 66edc3a5894c mm: page_alloc: move mlocked flag clearance into free_pages_prepare()
general protection fault in swap_reclaim_full_clusters mm 2 C 1530 405d 413d 28/29 373d dcf32ea7eced mm: swapfile: fix cluster reclaim work crash on rotational devices
WARNING in folio_walk_start mm -1 1 437d 435d 28/29 405d 7c18d4811000 mm/pagewalk: fix usage of pmd_leaf()/pud_leaf() without present check
possible deadlock in lock_mm_and_find_vma (2) mm 4 C 6626 408d 480d 28/29 405d 58a039e679fe mm: split critical region in remap_file_pages() and invoke LSMs in between
KCSAN: data-race in __delete_from_swap_cache / __try_to_reclaim_swap mm 6 1 448d 448d 28/29 406d 818f916e3a07 mm: swap: prevent possible data-race in __try_to_reclaim_swap
WARNING in copy_huge_pmd mm -1 C done 361 440d 457d 28/29 406d 47fa30118f02 mm/huge_memory: check pmd_special() only after pmd_present()
KMSAN: uninit-value in lzo1x_1_do_compress (3) mm 7 1 485d 481d 28/29 428d 2b59ffad47db jfs: Fix uninit-value access of new_ea in ea_buffer
INFO: rcu detected stall in do_vmi_munmap (2) mm 1 40 475d 492d 28/29 428d f806de88d8f7 maple_tree: remove rcu_read_lock() from mt_validate()
KASAN: slab-use-after-free Read in hugetlb_fault (2) mm 19 2 467d 471d 28/29 428d 98b74bb4d7e9 mm/hugetlb.c: fix UAF of vma in hugetlb fault pathway 2a058ab3286d mm: change vmf_anon_prepare() to __vmf_anon_prepare()
KCSAN: data-race in mem_cgroup_iter / mem_cgroup_iter cgroups mm 6 59 459d 481d 28/29 428d ec0db74b4b1f mm: restart if multiple traversals raced
memory leak in corrupted (2) mm exfat 3 syz 432 465d 631d 28/29 428d c290fe508eee exfat: resolve memory leak from exfat_create_upcase_table()
possible deadlock in __mmap_lock_do_trace_start_locking mm 4 C done done 30 513d 607d 27/29 482d 7d6be67cfdd4 mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
BUG: unable to handle kernel paging request in list_lru_add mm 10 C done done 11367 529d 841d 27/29 483d aacd897d4d75 Revert "bcachefs: Mark bch_inode_info as SLAB_ACCOUNT"
possible deadlock in __mmap_lock_do_trace_released mm 4 C done done 5 523d 539d 27/29 492d 7d6be67cfdd4 mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
KASAN: slab-use-after-free Read in lru_add_fn nilfs mm 19 C inconclusive 68 546d 594d 27/29 496d 49ae997f8f0d nilfs2: add missing check for inode numbers on directory entries nilfs2: add missing check for inode numbers on directory entries
BUG: corrupted list in __folio_undo_large_rmappable mm 8 C error 36 532d 531d 27/29 497d f708f6970cc9 mm/hugetlb: fix kernel NULL pointer dereference when migrating hugetlb folio
KMSAN: uninit-value in zswap_store mm 7 2 505d 563d 27/29 497d 65121eff3e4c ext4: avoid writing unitialized memory to disk in EA inodes
inconsistent lock state in valid_state (3) mm 4 C error 376 509d 558d 27/29 497d 7d6be67cfdd4 mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
possible deadlock in try_to_wake_up (5) mm 4 C 88 500d 572d 27/29 497d 7d6be67cfdd4 mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
KCSAN: data-race in __swap_writepage / scan_swap_map_slots (2) mm 6 2 533d 534d 27/29 497d 7b7aca6d7c0f mm: ignore data-race in __swap_writepage
general protection fault in dequeue_hugetlb_folio_nodemask (2) mm 2 C done 14 555d 561d 27/29 497d 09a533622842 mm/hugetlb: guard dequeue_hugetlb_folio_nodemask against NUMA_NO_NODE uses
BUG: sleeping function called from invalid context in vma_alloc_folio_noprof mm 5 C done 1 527d 526d 27/29 497d 280e36f0d5b9 nsfs: use cleanup guard
UBSAN: shift-out-of-bounds in try_to_shrink_lruvec mm -1 C done 4 573d 574d 27/29 497d 462966dc7d70 mm: vmscan: reset sc->priority on retry
WARNING in unmap_page_range (3) mm -1 C 169 635d 645d 26/29 522d f8572367eaff mm/memory: fix missing pte marker for !page on pte zaps
INFO: rcu detected stall in sys_wait4 (4) mm 1 C done done 2 588d 621d 26/29 530d fb66df20a720 net/sched: taprio: extend minimum interval restriction to entire cycle too
BUG: soft lockup in tcp_write_timer (4) mm 1 4 536d 561d 26/29 532d 22f008128625 USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
kernel BUG in __vma_reservation_common mm -1 C error 8 563d 597d 26/29 532d 8daf9c702ee7 mm/hugetlb: do not call vma_add_reservation upon ENOMEM
KMSAN: uninit-value in virtqueue_add (4) mm 7 C 203184 561d 723d 25/29 561d 61b258b0d2f6 x86: call instrumentation hooks from copy_mc.c
WARNING in __page_table_check_ptes_set mm -1 C 2 615d 611d 25/29 567d c88033efe9a3 mm/userfaultfd: reset ptes when close() for wr-protected ones
WARNING in __mod_memcg_lruvec_state cgroups mm -1 C 270 596d 631d 25/29 567d 4f687281012e mm: do not update memcg stats for NR_{FILE/SHMEM}_PMDMAPPED
possible deadlock in move_pages mm 4 C 206 636d 645d 25/29 580d 30af24facf0a userfaultfd: fix deadlock warning when locking src and dst VMAs
upstream boot error: WARNING: refcount bug in __reset_page_owner mm -1 555 614d 646d 25/29 580d f5c12105c15f mm,page_owner: fix refcount imbalance
KASAN: slab-use-after-free Read in __vma_reservation_common mm 19 syz 13 607d 621d 25/29 580d 37641efaa3fa hugetlb: check for anon_vma prior to folio allocation
upstream test error: WARNING: refcount bug in __reset_page_owner mm -1 13 622d 644d 25/29 580d f5c12105c15f mm,page_owner: fix refcount imbalance
WARNING: refcount bug in __reset_page_owner mm 13 C 93128 613d 645d 25/29 580d f5c12105c15f mm,page_owner: fix refcount imbalance
usb-testing boot error: WARNING: refcount bug in __reset_page_owner mm -1 126 610d 638d 25/29 580d f5c12105c15f mm,page_owner: fix refcount imbalance
BUG: unable to handle kernel paging request in copy_from_kernel_nofault (2) mm 8 C 2 621d 631d 25/29 580d c6f48506ba30 arm32, bpf: Reimplement sign-extension mov instruction
WARNING in __hugetlb_cgroup_uncharge_folio mm -1 syz 3 609d 618d 25/29 580d b76b46902c2d mm/hugetlb: fix missing hugetlb_lock for resv uncharge
kernel BUG in sg_init_one mm -1 C 1032 636d 645d 25/29 580d 9c500835f279 mm: zswap: fix kernel BUG in sg_init_one
kernel BUG in PageHuge mm -1 1 643d 639d 25/29 580d d99e3140a4d3 mm: turn folio_test_hugetlb into a PageType
WARNING in hugetlb_change_protection (2) mm -1 C 631 600d 627d 25/29 580d c5977c95dff1 mm/userfaultfd: allow hugetlb change protection upon poison entry
BUG: bad usercopy in raw_getsockopt hardening mm -1 C done 4 672d 672d 25/29 622d c8fba5d6df5e can: raw: fix getsockopt() for new CAN_RAW_XL_VCID_OPTS
BUG: unable to handle kernel paging request in copy_from_kernel_nofault mm 8 C done 5 666d 765d 25/29 635d 32019c659ecf x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()
WARNING in zswap_folio_swapin mm -1 1 693d 689d 25/29 635d 16e96ba5e92c mm/swap_state: update zswap LRU's protection range with the folio locked
kernel BUG in move_pages mm -1 C done 2 716d 712d 25/29 693d 5d4747a6cc8e userfaultfd: avoid huge_zero_page in UFFDIO_MOVE
WARNING in get_pte_pfn mm io-uring -1 C error 2 723d 733d 25/29 693d c28ac3c7eb94 mm/mglru: skip special VMAs in lru_gen_look_around()
WARNING in __folio_rmap_sanity_checks mm -1 C done 168 716d 721d 25/29 693d 9c5938694cd0 mm/rmap: silence VM_WARN_ON_FOLIO() in __folio_rmap_sanity_checks()
KMSAN: uninit-value in shrinker_alloc mm 7 syz 2 744d 722d 25/29 693d 7fba9420b726 mm: shrinker: use kvzalloc_node() from expand_one_shrinker_info()
general protection fault in hugetlb_vma_lock_write mm 2 C done 110 747d 787d 25/29 703d 187da0f8250a hugetlb: fix null-ptr-deref in hugetlb_vma_lock_write
WARNING in unmap_page_range (2) mm -1 C done 2112 743d 770d 25/29 703d 4980e837cab7 mm/pagemap: fix wr-protect even if PM_SCAN_WP_MATCHING not set
BUG: unable to handle kernel paging request in __pte_offset_map_lock mm 8 C 2 779d 789d 25/29 703d 9aa1345d66b8 mm: fix oops when filemap_map_pmd() without prealloc_pte
WARNING in page_copy_sane mm fs -1 C done 3 832d 828d 25/29 734d a08c7193e4f1 mm/filemap: remove hugetlb special casing in filemap.c
BUG: Bad page map (7) mm -1 C done 19 814d 836d 25/29 734d ce60f27bb62d mm: abstract moving to the next PFN
WARNING in try_grab_page xfs mm -1 C 48 819d 904d 23/29 804d f443fd5af5db crypto, cifs: fix error handling in extract_iter_to_sg()
possible deadlock in shmem_uncharge (2) mm 4 C done 29 891d 890d 23/29 804d 509f006932de shmem: fix quota lock nesting in huge hole handling
INFO: rcu detected stall in shmem_fault (5) cgroups mm 1 3 859d 879d 23/29 804d 8c21ab1bae94 net/sched: fq_pie: avoid stalls in fq_pie_timer()
KASAN: slab-out-of-bounds Read in mt_validate_nulls mm 17 C error done 15 904d 902d 23/29 804d ae80b4041984 mm: validate the mm before dropping the mmap lock
kernel BUG in validate_mm (2) mm -1 C unreliable done 217 904d 902d 23/29 804d ae80b4041984 mm: validate the mm before dropping the mmap lock
INFO: rcu detected stall in ext4_file_write_iter (7) mm bpf ext4 1 3 845d 888d 23/29 804d 8c21ab1bae94 net/sched: fq_pie: avoid stalls in fq_pie_timer()
WARNING in __gup_longterm_locked mm -1 C error 90 902d 904d 23/29 804d 6cd06ab12d1a gup: make the stack expansion warning a bit more targeted
KCSAN: data-race in drain_all_stock / drain_obj_stock (4) mm cgroups 6 3 962d 978d 23/29 817d 3b8abb323953 mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required()
inconsistent lock state in lru_gen_rotate_memcg mm 4 C 61 908d 918d 23/29 817d 814bc1de03ea mm/mglru: make memcg_lru->lock irq safe
possible deadlock in __mod_timer (2) mm 4 1 959d 958d 22/29 906d eb799279fb1f debugobjects: Don't wake up kswapd from fill_pool()
possible deadlock in do_writepages fs mm 4 15 972d 975d 22/29 906d 00d873c17e29 ext4: avoid deadlock in fs reclaim with page writeback
kernel BUG in page_table_check_clear mm -1 C error 17 931d 964d 22/29 906d 44d0fb387b53 mm: page_table_check: Ensure user pages are not slab pages 0143d148d1e8 usb: usbfs: Enforce page requirements for mmap
kernel BUG in find_mergeable_anon_vma mm -1 C error 4 1025d 1022d 22/29 930d 3dd443254941 mm: enable maple tree RCU mode by default
KASAN: null-ptr-deref Read in filemap_fault mm udf 11 C done 112 958d 971d 22/29 930d 38a55db9877c filemap: Handle error return from __filemap_get_folio()
KMSAN: uninit-value in ondemand_readahead fs mm 7 C 221 1027d 1191d 22/29 930d 3e35102666f8 fs/cramfs/inode.c: initialize file_ra_state
KMSAN: kernel-infoleak in _copy_to_iter (8) mm 23 C 21180 930d 1024d 22/29 930d 8222d5910dae xfrm: Zero padding when dumping algos and encap
WARNING in split_huge_page_to_list (2) mm -1 C error 2334 954d 1218d 22/29 930d 4737edbbdd49 mm/huge_memory.c: warn with pr_warn_ratelimited instead of VM_WARN_ON_ONCE_FOLIO
KASAN: slab-use-after-free Read in mas_next_entry mm 19 syz error 3 991d 995d 22/29 930d f4e9e0e69468 mm/mempolicy: fix use-after-free of VMA iterator
net-next boot error: BUG: bad usercopy in qrtr_sendmsg hardening mm -1 30 1048d 1050d 22/29 930d 0b34d68049b0 net: enable usercopy for skb_small_head_cache
kernel BUG in hpage_collapse_scan_file mm -1 C unreliable 3 982d 1019d 22/29 930d 2ce0bdfebc74 mm: khugepaged: fix kernel BUG in hpage_collapse_scan_file()
WARNING in mbind_range mm -1 C error 3 1080d 1080d 22/29 930d 17dc622c7b0f maple_tree: fix mas_prev() and mas_find() state handling
BUG: bad usercopy in con_font_op hardening mm -1 C done 1 1026d 1026d 22/29 930d 18365ebf23f3 tty: vt: protect KD_FONT_OP_GET_TALL from unbound access
BUG: bad usercopy in put_cmsg hardening mm -1 C 3 1044d 1046d 22/29 930d 2558b8039d05 net: use a bounce buffer for copying skb->mark
KCSAN: data-race in strscpy / strscpy (3) ext4 mm 6 3 993d 978d 22/29 930d cf587db2ee02 kernel: Allow a kernel thread's name to be set in copy_process
INFO: task hung in write_cache_pages (2) fs mm 1 C done 36 957d 1028d 22/29 930d fb3592c41a44 migrate_pages: fix deadlock in batched migration
WARNING: CPU: NUM PID: NUM at mm/page_alloc.c:LINE get_page_from_freeli mm erofs -1 C error 1 1101d 1097d 22/29 930d 12724ba38992 erofs: fix kvcalloc() misuse with __GFP_NOFAIL
memory leak in prctl mm 3 C 1 1103d 1099d 22/29 930d a1193de562f5 mm: fix vma->anon_name memory leak for anonymous shmem VMAs
BUG: sleeping function called from invalid context in folio_copy mm 5 C unreliable 271 1615d 1613d 22/29 986d 715cbfd6c5c5 mm/migrate: Add folio_migrate_copy()
WARNING in alloc_charge_hpage mm -1 C error 112 1082d 1153d 22/29 1034d e031ff96b334 mm: khugepaged: allow page allocation fallback to eligible nodes dec1d352de5c mm: replace VM_WARN_ON to pr_warn if the node is offline with __GFP_THISNODE
kernel panic: corrupted stack end in vm_area_alloc mm 2 1 1268d 1268d 22/29 1034d b81d591386c3 riscv: Increase stack size under KASAN
KASAN: use-after-free Read in mas_next_nentry mm fs 19 C error done 343 1142d 1337d 22/29 1034d 59f2f4b8a757 fs/userfaultfd: Fix maple tree iterator in userfaultfd_unregister()
general protection fault in list_lru_add mm 8 C done 1125 1083d 1371d 22/29 1034d ae085d7f9365 mm: kfence: fix missing objcg housekeeping for SLAB
WARNING in change_protection mm -1 C unreliable 13 1176d 1181d 22/29 1034d 515778e2d790 mm/uffd: fix warning without PTE_MARKER_UFFD_WP compiled in
KASAN: use-after-free Read in unregister_shrinker (2) mm 19 C error 3799 1146d 1190d 22/29 1034d bd86c69dae65 NFSD: unregister shrinker when nfsd_init_net() fails
KMSAN: uninit-value in mpol_rebind_mm (2) mm 7 C 11 1288d 1412d 22/29 1034d 018160ad314d mm/mempolicy: fix uninit-value in mpol_rebind_policy()
KASAN: use-after-free Read in do_shrink_slab (2) mm 19 105 1159d 1183d 22/29 1034d bd86c69dae65 NFSD: unregister shrinker when nfsd_init_net() fails
KCSAN: data-race in lru_add_fn / skb_append_pagefrags mm 6 1 1158d 1154d 22/29 1034d 228ebc41dfab net: do not sense pfmemalloc status in skb_append_pagefrags()
possible deadlock in hugetlb_fault mm 4 2 1138d 1145d 22/29 1034d 04ada095dcfc hugetlb: don't delete vma_lock in hugetlb MADV_DONTNEED processing
kernel BUG in __filemap_get_folio mm -1 C done 814 1173d 1343d 22/29 1034d 63b1898fffcd XArray: Disallow sibling entries of nodes
KMSAN: uninit-value in mpol_rebind_task (2) mm 7 C 7 1289d 1450d 22/29 1034d 018160ad314d mm/mempolicy: fix uninit-value in mpol_rebind_policy()
WARNING: locking bug in hugetlb_no_page mm 4 C 1 1138d 1138d 22/29 1034d 04ada095dcfc hugetlb: don't delete vma_lock in hugetlb MADV_DONTNEED processing
KASAN: slab-out-of-bounds Read in __fscache_acquire_volume fs mm 17 C done done 1 1213d 1212d 22/29 1034d 9f0933ac026f fscache: fix OOB Read in __fscache_acquire_volume
usb-testing boot error: BUG: unable to handle kernel paging request in __handle_mm_fault mm -1 1 1226d 1226d 22/29 1034d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
KASAN: use-after-free Read in do_sync_mmap_readahead fs mm 19 1 1313d 1309d 22/29 1034d dcfa24ba6899 filemap: Cache the value of vm_flags
usb-testing boot error: general protection fault in rcu_core fs mm -1 23 1208d 1226d 22/29 1034d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
usb-testing boot error: WARNING in anon_vma_clone mm -1 1 1226d 1226d 22/29 1034d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
BUG: sleeping function called from invalid context in break_ksm mm 5 C 9 1161d 1161d 22/29 1034d d7c0e68dab98 mm/ksm: convert break_ksm() to use walk_page_range_vma()
WARNING in kcov_mmap mm -1 14 1311d 1365d 22/29 1034d ecc04463d1a3 kcov: don't generate a warning on vm_insert_page()'s failure
upstream boot error: BUG: corrupted list in copy_process mm -1 1 1228d 1228d 22/29 1034d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
kernel panic: corrupted stack end in shmem_fault cgroups mm 2 5 1041d 1171d 22/29 1034d b81d591386c3 riscv: Increase stack size under KASAN
usb-testing boot error: BUG: unable to handle kernel paging request in enqueue_task_fair mm -1 1 1211d 1211d 22/29 1034d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
general protection fault in hugetlbfs_parse_param mm 2 C 5 1150d 1161d 22/29 1034d 26215b7ee923 hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param()
KASAN: use-after-free Read in __oom_reap_task_mm mm 19 1 1414d 1409d 22/29 1034d f798a1d4f94d mm: fix use-after-free bug when mm->mmap is reused after being freed
memory leak in xas_nomem mm 3 C 1 1310d 1306d 22/29 1034d 69a37a8ba1b4 mm/huge_memory: Fix xarray node memory leak
kernel panic: corrupted stack end in mld_dad_work mm 2 1 1205d 1205d 22/29 1034d b81d591386c3 riscv: Increase stack size under KASAN
KCSAN: data-race in lru_add_fn / tcp_build_frag mm 6 4 1203d 1212d 22/29 1034d 84ce071e38a6 net: introduce __skb_fill_page_desc_noacc
linux-next boot error: WARNING in kfence_protect kasan mm -1 12 1132d 1133d 22/29 1034d 3e844d842d49 x86/mm: Ensure forced page table splitting
usb-testing boot error: BUG: unable to handle kernel paging request in follow_page_mask mm -1 1 1209d 1205d 22/29 1034d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
WARNING in find_vma mm -1 C done 2616 1210d 1234d 22/29 1034d d6f35446d076 binder_alloc: Add missing mmap_lock calls when using the VMA 44e602b4e52f binder_alloc: add missing mmap_lock calls when using the VMA
WARNING in erofs_iget erofs mm -1 C 6 1155d 1205d 22/29 1034d 1dd73601a1cb erofs: fix order >= MAX_ORDER warning due to crafted negative i_size
upstream boot error: general protection fault in __get_vm_area_node mm -1 1 1226d 1226d 22/29 1034d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
WARNING in nsim_map_alloc_elem mm -1 C error 7 1228d 1249d 22/29 1034d d0b80a9edb1a netdevsim: Avoid allocation warnings triggered from user space
BUG: unable to handle kernel paging request in truncate_inode_partial_folio mm fs 8 C error 4 1235d 1274d 22/29 1034d 84ac013046cc secretmem: fix unhandled fault in truncate
WARNING in hugetlb_wp mm -1 C error 3 1146d 1152d 22/29 1034d f347454d0341 mm/gup: disallow FOLL_FORCE|FOLL_WRITE on hugetlb mappings
WARNING in register_shrinker_prepared mm f2fs -1 C error 64 1295d 1296d 22/29 1034d 5035ebc644ae mm: shrinkers: introduce debugfs interface for memory shrinkers
WARNING in __split_huge_page_tail io-uring arch mm -1 C error 155 1083d 1155d 22/29 1034d 5aae9265ee1a mm: prep_compound_tail() clear page->private
KASAN: use-after-free Read in register_shrinker_prepared (2) mm 19 C done 1145 1146d 1184d 22/29 1034d bd86c69dae65 NFSD: unregister shrinker when nfsd_init_net() fails
BUG: unable to handle kernel NULL pointer dereference in smack_inode_permission lsm mm 10 C 1 1140d 1136d 22/29 1034d 578b565b240a 9p/fd: Fix write overflow in p9_read_work
kernel BUG in hugepage_add_anon_rmap mm -1 2 1398d 1394d 22/29 1034d 4eecb8b9163d mm/migrate: Convert remove_migration_ptes() to folios
kernel BUG in mcopy_continue mm -1 4 1292d 1290d 22/29 1034d 73f37dbcfe17 mm: userfaultfd: fix UFFDIO_CONTINUE on fallocated shmem pages
upstream boot error: WARNING in copy_process mm -1 5 1225d 1228d 22/29 1034d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
general protection fault in xas_create_range mm 2 1 1378d 1374d 22/29 1034d 3e3c658055c0 XArray: Fix xas_create_range() when multi-order entry present
KASAN: invalid-free in free_prealloced_shrinker mm 22 C done 3 1253d 1253d 22/29 1034d 14773bfa70e6 mm: shrinkers: fix double kfree on shrinker name
kernel panic: corrupted stack end in lo_ioctl mm fs 2 4 1040d 1162d 22/29 1034d b81d591386c3 riscv: Increase stack size under KASAN
upstream boot error: general protection fault in copy_signal mm -1 1 1227d 1227d 22/29 1034d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
upstream boot error: BUG: corrupted list in find_and_remove_object mm -1 1 1228d 1228d 22/29 1034d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
KASAN: use-after-free Read in hugetlb_fault mm 24 C 383 1062d 1158d 22/29 1034d 04ada095dcfc hugetlb: don't delete vma_lock in hugetlb MADV_DONTNEED processing
BUG: unable to handle kernel paging request in percpu_counter_add_batch mm 8 140 1058d 1160d 22/29 1034d 64b4c411a6c7 ipc/msg.c: fix percpu_counter use after free
general protection fault in end_page_writeback mm nilfs 2 C error done 2 1133d 1163d 22/29 1034d 512c5ca01a36 nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty
BUG: sleeping function called from invalid context in vm_area_dup mm 5 C 3 1161d 1161d 22/29 1034d d7c0e68dab98 mm/ksm: convert break_ksm() to use walk_page_range_vma()
KASAN: use-after-free Read in hugetlb_handle_userfault mm 19 C 4 1179d 1202d 22/29 1034d 958f32ce832b mm: hugetlb: fix UAF in hugetlb_handle_userfault
BUG: bad usercopy in bpf_prog_get_info_by_fd mm hardening -1 1 1306d 1306d 22/29 1034d 10f3b29c65bb bpf, arm64: Clear prog->jited_len along prog->jited
BUG: Bad page map (5) mm 19 C 35 1075d 1333d 22/29 1034d 4d24de9425f7 mm: MADV_COLLAPSE: refetch vm_end after reacquiring mmap_lock
KASAN: use-after-free Read in mas_next_entry fs mm 19 C error 16 1144d 1158d 22/29 1034d 59f2f4b8a757 fs/userfaultfd: Fix maple tree iterator in userfaultfd_unregister()
WARNING in sco_sock_sendmsg mm -1 C inconclusive 2 1574d 1574d 22/29 1168d 0771cbb3b97d Bluetooth: SCO: Replace use of memcpy_from_msg with bt_skb_sendmsg
KCSAN: data-race in flush_tlb_batched_pending / try_to_unmap_one mm 6 2 1442d 1497d 20/29 1386d 5ee2fa2f0636 mm/rmap: fix potential batched TLB flush race
KMSAN: uninit-value in __mpol_equal (3) mm 7 13 1525d 1549d 20/29 1386d 6d2aec9e123b mm/mempolicy: do not allow illegal MPOL_F_NUMA_BALANCING | MPOL_LOCAL in mbind()
WARNING in page_counter_cancel (3) mm -1 C done 22 1444d 1494d 20/29 1386d 269bda9e7da4 mptcp: Check reclaim amount before reducing allocation
WARNING in __get_free_pages mm -1 21 1442d 1501d 20/29 1386d 545a32498c53 floppy: Add max size check for user space request
WARNING: refcount bug in sys_memfd_secret mm 13 C done done 4217 1521d 1523d 20/29 1386d 87066fdd2e30 Revert "mm/secretmem: use refcount_t instead of atomic_t"
KASAN: use-after-free Read in unmap_page_range (2) mm 19 C unreliable 4 1497d 1514d 20/29 1386d 337546e83fc7 mm/oom_kill.c: prevent a race between process_mrelease and exit_mmap
BUG: sleeping function called from invalid context in copy_huge_page mm 5 1 1538d 1534d 20/29 1386d a4aeaa06d45e mm: khugepaged: skip huge page collapse for special files
WARNING in page_counter_uncharge mm -1 C done done 2 1455d 1455d 20/29 1386d 269bda9e7da4 mptcp: Check reclaim amount before reducing allocation
INFO: rcu detected stall in syscall_exit_to_user_mode mm cgroups 1 78 1398d 1579d 20/29 1386d 313bbd1990b6 mac80211-hwsim: fix late beacon hrtimer handling
WARNING in new_slab mm -1 C inconclusive 2 1434d 1464d 20/29 1386d c12837d1bb31 ref_tracker: use __GFP_NOFAIL more carefully
kernel BUG in find_lock_entries mm -1 C done 10 1434d 1597d 20/29 1386d d417b49fff3e mm/filemap.c: remove bogus VM_BUG_ON
kernel BUG at mm/vmalloc.c:LINE! (2) mm -1 C done done 6605 1582d 1993d 20/29 1429d 537cf4e3cc2f xsk: Fix umem cleanup bug at socket destruct
WARNING: suspicious RCU usage in validate_mm mm 4 1 1660d 1660d 20/29 1505d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
WARNING: suspicious RCU usage in count (2) fs mm 4 1 1677d 1677d 20/29 1505d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
WARNING: suspicious RCU usage in rmap_walk_file mm 4 1 1685d 1685d 20/29 1505d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
possible deadlock in __fs_reclaim_acquire mm 4 syz unreliable 672 1622d 1634d 20/29 1505d 187ad460b841 mm/page_alloc: avoid page allocator recursion with pagesets.lock held
WARNING: suspicious RCU usage in __get_free_pages mm 4 1 1695d 1695d 20/29 1505d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
WARNING: suspicious RCU usage in shrink_page_list mm 4 1 1688d 1688d 20/29 1505d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
WARNING: suspicious RCU usage in exit_mmap mm 4 1 1685d 1685d 20/29 1505d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
WARNING: suspicious RCU usage in shmem_alloc_page mm 4 1 1699d 1699d 20/29 1505d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
upstream build error (16) mm -1 243 1513d 1636d 20/29 1505d 498cc50b3fa9 clk: hisilicon: hi3559a: Drop __init markings everywhere
BUG: sleeping function called from invalid context in stack_depot_save mm 5 C unreliable 8490 1604d 1634d 20/29 1505d 187ad460b841 mm/page_alloc: avoid page allocator recursion with pagesets.lock held
general protection fault in try_grab_compound_head io-uring mm 7 C done 5 1606d 1634d 20/29 1505d d08af0a59684 mm/hugetlb: fix refs calculation from unaligned @vaddr
WARNING: suspicious RCU usage in kernel_execve mm fs 4 1 1642d 1642d 20/29 1505d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
WARNING in do_proc_bulk mm -1 C inconclusive 3 1696d 1696d 20/29 1505d 4f2629ea67e7 USB: usbfs: Don't WARN about excessively large memory allocations
WARNING: suspicious RCU usage in dup_mmap mm 4 1 1671d 1671d 20/29 1505d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
KMSAN: kernel-infoleak in copy_page_to_iter (2) mm fs 9 C 2099 1600d 2659d 20/29 1505d ce3aba43599f ext4: fix kernel infoleak via ext4_extent_header
WARNING: suspicious RCU usage in populate_vma_page_range mm 4 1 1668d 1668d 20/29 1505d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
WARNING: suspicious RCU usage in schedule_debug mm 4 1 1698d 1698d 20/29 1505d 7072a355ba19 netfilter: nfnetlink: add a missing rcu_read_unlock()
upstream test error: BUG: sleeping function called from invalid context in stack_depot_save mm -1 4 1624d 1637d 20/29 1505d 187ad460b841 mm/page_alloc: avoid page allocator recursion with pagesets.lock held
WARNING: suspicious RCU usage in vm_mmap_pgoff mm 4 1 1670d 1670d 20/29 1505d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
BUG: sleeping function called from invalid context in munlock_vma_pages_range mm 5 1 1626d 1622d 20/29 1505d 023e1a8dd502 mm/rmap: fix new bug: premature return from page_mlock_one()
KCSAN: data-race in expire_timers / try_to_del_timer_sync mm 6 1029 1598d 2003d 20/29 1505d bb7262b29547 timers: Move clearing of base::timer_running under base:: Lock
WARNING in tcindex_alloc_perfect_hash mm -1 C inconclusive 349 1635d 1809d 20/29 1505d 3f2db250099f net: sched: fix warning in tcindex_alloc_perfect_hash
KASAN: use-after-free Read in check_all_holdout_tasks_trace mm 19 syz done 4 1608d 1677d 20/29 1505d 1d10bf55d85d rcu-tasks: Don't delete holdouts within trc_inspect_reader()
kernel BUG in remove_inode_hugepages fs mm -1 C unreliable 3 1590d 1590d 20/29 1505d c7b1850dfb41 hugetlb: don't pass page cache pages to restore_reserve_on_error
KASAN: out-of-bounds Read in kfence_guarded_free kasan mm 17 C error 20 1816d 1827d 20/29 1657d 2b8305260fb3 kfence, kasan: make KFENCE compatible with KASAN
BUG: sleeping function called from invalid context in mm_access mm 5 C done 684 1804d 1807d 20/29 1719d 38e891849003 kbuild: lto: fix module versioning
kernel BUG at mm/page-writeback.c:LINE! fs mm -1 1 1820d 1816d 19/29 1750d c2407cf7d22d mm: make wait_on_page_writeback() wait for multiple pending writebacks
WARNING in rds_rdma_extra_size mm -1 C done 165 1785d 1809d 19/29 1750d a11148e6fcce net/rds: restrict iovecs length for RDS_CMSG_RDMA_ARGS
kernel BUG at include/linux/highmem.h:LINE! mm -1 C error 32 1854d 1859d 19/29 1750d 0060ef3b4e6d mm: support THPs in zero_user_segments
WARNING in squashfs_read_table mm squashfs -1 C inconclusive 50 1780d 1809d 19/29 1750d 506220d2ba21 squashfs: add more sanity checks in xattr id lookup
WARNING in bpf_prog_test_run_raw_tp mm -1 C done 36 1799d 1809d 19/29 1750d 7ac6ad051150 bpf: Reject too big ctx_size_in for raw_tp test run
WARNING in qrtr_tun_write_iter mm -1 C error 57 1778d 1809d 19/29 1750d 2a80c1581237 net/qrtr: restrict user-controlled length in qrtr_tun_write_iter()
possible deadlock in hugetlb_cow mm 4 C unreliable 341 1820d 1843d 19/29 1750d e7dd91c456a8 mm/hugetlb: fix deadlock in hugetlb_cow error path
INFO: rcu detected stall in sys_exit_group (6) mm 1 C 4 1910d 1917d 19/29 1750d c583bcb8f5ed rcu: Don't invoke try_invoke_on_locked_down_task() with irqs disabled
general protection fault in unlink_file_vma mm 2 C done 1 1936d 1932d 15/29 1864d bc4fe4cdd602 mm: mmap: Fix general protection fault in unlink_file_vma()
INFO: rcu detected stall in exit_group mm 1 C done done 1 1901d 1931d 15/29 1864d 1d0e850a49a5 afs: Fix cell removal
WARNING in wp_page_copy mm -1 syz done done 9 2137d 2213d 15/29 1864d c3e5ea6ee574 mm: avoid data corruption on CoW fault into PFN-mapped VMA
kernel panic: System is deadlocked on memory mm 2 C done 43 1990d 1988d 15/29 1864d 9066e5cfb73c mm, oom: make the calculation of oom badness more accurate
general protection fault in madvise_cold_or_pageout_pte_range mm 2 C done 3 1917d 1927d 15/29 1898d ce2684254bd4 mm: validate pmd after splitting
KASAN: use-after-free Write in page_counter_uncharge mm 24 2 1948d 1954d 15/29 1909d f1796544a0ca memcg: fix use-after-free in uncharge_batch
KASAN: use-after-free Write in page_counter_cancel mm 24 1 1958d 1954d 15/29 1909d f1796544a0ca memcg: fix use-after-free in uncharge_batch
KASAN: use-after-free Read in do_madvise io-uring mm 19 syz error 4 1949d 1950d 15/29 1909d 7867fd7cc44e mm: madvise: fix vma user-after-free
kernel BUG at mm/khugepaged.c:LINE! mm -1 C done 30 1951d 1963d 15/29 1924d f3f99d63a815 khugepaged: adjust VM_BUG_ON_MM() in __khugepaged_enter()
possible deadlock in shmem_fallocate (4) mm 4 C done 81 1975d 2189d 15/29 1924d 3e338d3c95c7 staging: android: ashmem: Fix lockdep warning for write operation
KCSAN: data-race in page_counter_try_charge / page_counter_try_charge (2) mm 6 148 1960d 2203d 15/29 1924d 6e4bd50f3888 mm/page_counter: fix various data races at memsw
KCSAN: data-race in vm_area_dup / vma_interval_tree_remove (2) mm 6 70 2019d 2133d 15/29 1924d cda099b37d71 fork: Annotate a data race in vm_area_dup()
general protection fault in khugepaged mm 2 C done 3 1981d 1994d 15/29 1924d 594cced14ad3 khugepaged: fix null-pointer dereference due to race
KCSAN: data-race in copy_process / copy_process (2) mm 6 294 2001d 2178d 15/29 1971d c17d1a3a8ee4 fork: annotate data race in copy_process()
general protection fault in unpin_user_pages mm 2 C done 13 2043d 2043d 15/29 1985d f78cdbd75a57 rds: fix crash in rds_info_getsockopt()
BUG: unable to handle kernel NULL pointer dereference in alloc_pages_vma mm 10 1 2015d 2011d 15/29 1985d 3021e69219e2 kcov: check kcov_softirq in kcov_remote_stop()
BUG: unable to handle kernel NULL pointer dereference in unlock_page mm fs 10 1 2017d 2017d 15/29 1985d 3021e69219e2 kcov: check kcov_softirq in kcov_remote_stop()
KCSAN: data-race in __rcu_read_unlock / sync_rcu_exp_select_node_cpus (2) fs mm 6 9 2053d 2220d 15/29 1985d 314eeb43e5f2 rcu: Add *_ONCE() and data_race() to rcu_node ->exp_tasks plus locking
WARNING: bad unlock balance in get_user_pages_unlocked mm 4 1 2090d 2086d 15/29 2005d c7b6a566b985 mm/gup: Mark lock taken only after a successful retake
WARNING in __mmdrop mm -1 syz done 14 2341d 2350d 15/29 2005d 3d2c7d370475 Revert "vhost: access vq metadata through kernel virtual address"
WARNING in __vm_enough_memory (2) mm -1 syz done 6 2076d 2079d 15/29 2015d dadbd85f2afc mm: Fix MREMAP_DONTUNMAP accounting on VMA merge
possible deadlock in user_shm_lock mm 4 12 2043d 2080d 15/29 2015d ea0dfeb4209b shmem: fix possible deadlocks on shmlock_user_lock
possible deadlock in shmem_mfill_atomic_pte mm 4 C done 82 2042d 2093d 15/29 2015d 94b7cc01da5a mm: shmem: disable interrupt when acquiring info->lock in userfaultfd_copy path
possible deadlock in shmem_uncharge mm 4 C done 101 2043d 2082d 15/29 2015d ea0dfeb4209b shmem: fix possible deadlocks on shmlock_user_lock
WARNING: bad unlock balance in __get_user_pages_remote mm 4 C done 15 2086d 2086d 15/29 2054d c7b6a566b985 mm/gup: Mark lock taken only after a successful retake
KASAN: stack-out-of-bounds Write in mpol_to_str mm 23 C done 23 2095d 2099d 15/29 2054d aa9f7d5172fa mm: mempolicy: require at least one nodeid for MPOL_PREFERRED
BUG: unable to handle kernel paging request in kernel_get_mempolicy mm 8 C done 1 2090d 2087d 15/29 2054d ba841078cd05 mm/mempolicy: Allow lookup_node() to handle fatal signal
KCSAN: data-race in __rcu_read_unlock / sync_rcu_exp_select_cpus mm fs 6 7 2148d 2242d 15/29 2136d c51f83c315c3 rcu: Use READ_ONCE() for ->expmask in rcu_read_unlock_special()
KCSAN: data-race in __rcu_read_unlock / rcu_report_exp_cpu_mult cgroups mm 6 21 2151d 2211d 15/29 2136d c51f83c315c3 rcu: Use READ_ONCE() for ->expmask in rcu_read_unlock_special()
KASAN: slab-out-of-bounds Write in mpol_parse_str mm 23 C done 3 2174d 2170d 15/29 2136d c7a91bc7c2e1 mm/mempolicy.c: fix out of bounds write in mpol_parse_str()
KASAN: use-after-free Read in shmem_fault (2) mm 19 5 2247d 2307d 15/29 2203d 8897c1b1a179 shmem: pin the file in shmem_fault() if mmap_sem is dropped
general protection fault in memcg_flush_percpu_vmstats cgroups mm 2 C error 19 2246d 2309d 14/29 2216d 7961eee39784 mm: memcontrol: fix NULL-ptr deref in percpu stats flush
BUG: bad usercopy in read_rio mm hardening -1 2 2264d 2267d 13/29 2249d 015664d15270 USB: rio500: Remove Rio 500 kernel driver
kernel BUG at mm/huge_memory.c:LINE! mm -1 27 2376d 2547d 12/29 2300d a53190a4aaa3 mm: mempolicy: handle vma with unmovable pages mapped correctly in mbind
KASAN: slab-out-of-bounds Write in validate_chain hardening mm 23 syz done 6 2362d 2377d 12/29 2310d 95fa145479fb bpf: sockmap/tls, close can race with map free
KASAN: slab-out-of-bounds Read in corrupted (2) mm hardening 17 syz done 3 2343d 2393d 12/29 2310d 95fa145479fb bpf: sockmap/tls, close can race with map free
KASAN: use-after-free Read in corrupted (3) mm 19 syz done 1 2373d 2373d 12/29 2310d 95fa145479fb bpf: sockmap/tls, close can race with map free
WARNING in cgroup_rstat_updated mm -1 syz done 1 2331d 2331d 12/29 2310d 95fa145479fb bpf: sockmap/tls, close can race with map free
KASAN: use-after-free Read in unregister_shrinker mm 19 syz done 3 2389d 2393d 12/29 2333d 689d7ba4895b nfsd: fix cleanup of nfsd_reply_cache_init on failure
general protection fault in oom_unkillable_task mm 2 1 2389d 2384d 12/29 2333d ac311a14c682 oom: decouple mems_allowed from oom_unkillable_task
possible deadlock in userfaultfd_read (2) fs mm 4 228 2363d 2462d 12/29 2340d cbcfa130a911 fs/userfaultfd.c: disable irqs for fault_pending and event locks
memory leak in __memcg_init_list_lru_node mm 3 C 3 2389d 2403d 12/29 2358d 3510955b3271 mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node
general protection fault in load_elf_binary fs mm 2 C done 15 2457d 2461d 12/29 2384d cc338010a233 fs/binfmt_elf.c: free PT_INTERP filename ASAP
BUG: unable to handle kernel paging request in isolate_freepages_block mm 8 3 2428d 2423d 12/29 2384d 60fce36afa9c mm/compaction.c: correct zone boundary handling when isolating pages from a pageblock
WARNING: locking bug in copy_process mm 4 C done 3 2418d 2420d 12/29 2384d c3b7112df86b fork: do not release lock that wasn't taken
KASAN: use-after-free Read in get_mem_cgroup_from_mm cgroups mm 19 C done 375 2430d 2604d 12/29 2384d c3f3ce049f7d userfaultfd: use RCU to free the task struct when fork fails
BUG: bad usercopy in __check_heap_object (3) hardening mm -1 C 287 2657d 2727d 12/29 2388d 1f4aace60b0e fs/seq_file.c: simplify seq_file iteration code and interface
kernel panic: corrupted stack end in wb_workfn mm 2 C done 14 2550d 2550d 12/29 2449d ef82bcfa671b sctp: use memdup_user instead of vmemdup_user
WARNING: bad usercopy in fanotify_read mm hardening -1 C done 5 2479d 2479d 11/29 2459d b2d22b6bb33a fanotify: Allow copying of file handle to userspace
KASAN: use-after-free Read in filemap_fault fs mm 19 C 277 2542d 2552d 11/29 2459d 6b4c9f446981 filemap: drop the mmap_sem for all blocking operations
possible deadlock in shmem_fallocate (2) mm 4 C 1325 2484d 2693d 11/29 2463d fb4415a12632 staging: android: ashmem: Don't call fallocate() with ashmem_mutex held.
KMSAN: uninit-value in mpol_rebind_mm mm 7 6 2465d 2550d 11/29 2463d 2e25644e8da4 mm, mempolicy: fix uninit memory access
INFO: trying to register non-static key in dump_header mm -1 1 2494d 2494d 11/29 2463d b30b61ff6b1d drm/vkms: Fix flush_work() without INIT_WORK().
possible deadlock in __do_page_fault mm fs 4 C 820 2484d 2651d 11/29 2463d fb4415a12632 staging: android: ashmem: Don't call fallocate() with ashmem_mutex held.
BUG: unable to handle kernel NULL pointer dereference in __generic_file_write_iter fs mm 10 5 2489d 2498d 11/29 2463d ac5ceccce550 x86/unwind: Add hardcoded ORC entry for NULL f4f34e1b82eb x86/unwind: Handle NULL pointer calls better in frame unwinder
possible deadlock in userfaultfd_read mm fs 4 239 2463d 2517d 11/29 2463d d3d6a18d7d35 aio: Fix locking in aio_poll()
WARNING: locking bug in lock_downgrade mm 4 30 2528d 2584d 6/29 2469d 513e1073d52e locking/lockdep: Add debug_locks check in __lock_downgrade() locking/lockdep: Add debug_locks check in __lock_downgrade()
kernel BUG at mm/slab.c:LINE! (3) mm -1 C done 14 2470d 2597d 11/29 2469d bc6e019b6ee6 fou: Prevent unbounded recursion in GUE error handler also with UDP-Lite
INFO: task hung in generic_file_write_iter fs mm 1 7 2578d 2716d 11/29 2485d 04906b2f542c blockdev: Fix livelocks on loop device
KASAN: stack-out-of-bounds in do_raw_spin_lock mm hardening 17 C 1 2545d 2545d 11/29 2485d 44039e00171b fou6: Prevent unbounded recursion in GUE error handler
KASAN: out-of-bounds Read in update_curr hardening mm 17 syz 1 2545d 2545d 11/29 2485d 44039e00171b fou6: Prevent unbounded recursion in GUE error handler
KASAN: use-after-free Read in oom_kill_process mm 19 1 2533d 2529d 11/29 2485d cefc7ef3c87d mm, oom: fix use-after-free in oom_kill_process
possible deadlock in __wake_up_common_lock mm 4 7 2539d 2548d 11/29 2485d 73444bc4d8f9 mm, page_alloc: do not wake kswapd with zone lock held
KASAN: stack-out-of-bounds Write in page_counter_try_charge mm 23 1 2535d 2535d 11/29 2485d 44039e00171b fou6: Prevent unbounded recursion in GUE error handler
general protection fault in list_lru_count_one mm 2 C 12 2718d 2717d 11/29 2524d 8e04944f0ea8 mm,vmscan: Allow preallocating memory for register_shrinker().
general protection fault in transparent_hugepage_enabled mm 2 C 626 2548d 2556d 11/29 2534d 7635d9cbe832 mm, thp, proc: report THP eligibility for each vma
WARNING in userfaultfd_ioctl fs mm -1 C 11 2568d 2577d 11/29 2553d 01e881f5a1fc userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered
WARNING in alloc_pages_vma mm -1 C 98 2571d 2575d 11/29 2563d 356ff8a9a78f Revert "mm, thp: consolidate THP gfp handling into alloc_hugepage_direct_gfpmask"
WARNING in __put_task_struct (2) mm -1 C 17 2625d 2633d 11/29 2598d fe9bc1644918 RDMA/restrack: Protect from reentry to resource return path
kernel BUG at mm/shmem.c:LINE! mm -1 C 30 2725d 2727d 11/29 2598d 552446a41661 shmem: Convert shmem_add_to_page_cache to XArray
WARNING in try_charge xfs cgroups mm -1 syz 649 2645d 2699d 10/29 2645d 3100dab2aa09 mm: memcontrol: print proper OOM header when no eligible victim left
BUG: unable to handle kernel paging request in kfree (2) mm 8 C 297 2673d 2725d 10/29 2648d 7913690dcc5e net/9p/client.c: version pointer uninitialized
KASAN: use-after-free Read in do_shrink_slab mm 19 9 2681d 2684d 8/29 2674d 8df4a44cc46b mm: check shrinker is memcg-aware in register_shrinker_prepared()
WARNING: bad usercopy in __kvm_write_guest_page mm hardening -1 C 4 2775d 2768d 8/29 2678d 0a06d4256674 KVM: vmx: use local variable for current_vmptr when emulating VMPTRST
kernel BUG at mm/memory.c:LINE! fs mm -1 1 2726d 2725d 8/29 2694d bfd40eaff5ab mm: fix vma_is_anonymous() false-positives
kernel BUG at fs/userfaultfd.c:LINE! (2) fs mm -1 C 8 2700d 2718d 8/29 2694d 31e810aa1033 userfaultfd: remove uffd flags from vma->vm_flags if UFFD_EVENT_FORK fails
KASAN: stack-out-of-bounds Read in vma_interval_tree_insert (2) mm 17 1 2710d 2710d 8/29 2696d 99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
KASAN: stack-out-of-bounds Read in copy_page_range mm 17 1 2715d 2715d 8/29 2696d 99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
KASAN: stack-out-of-bounds Read in debug_check_no_obj_freed (5) mm 17 4 2711d 2717d 8/29 2696d 99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
KASAN: stack-out-of-bounds Read in unmap_page_range (3) mm 17 1 2711d 2711d 8/29 2696d 99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
kernel BUG at mm/slab.c:LINE! (2) hardening mm -1 C 701 2710d 2725d 8/29 2696d 6e6fddc78323 bpf: fix panic due to oob in bpf_prog_test_run_skb
KASAN: stack-out-of-bounds Read in get_mem_cgroup_from_mm cgroups mm 17 1 2723d 2723d 8/29 2696d 99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
KASAN: stack-out-of-bounds Read in change_protection mm 17 1 2718d 2718d 8/29 2696d 99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
KASAN: stack-out-of-bounds Write in __tlb_remove_page_size mm 23 1 2712d 2711d 8/29 2696d 99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
KASAN: stack-out-of-bounds Read in __tlb_remove_page_size mm 17 1 2713d 2712d 8/29 2696d 99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
KASAN: stack-out-of-bounds Read in tlb_flush_mmu_free mm 17 2 2721d 2724d 8/29 2696d 99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
kernel BUG at mm/gup.c:LINE! mm -1 syz 4 2732d 2730d 8/29 2710d 24962af7e104 fs, elf: make sure to page align bss in load_elf_library bb177a732c43 mm: do not bug_on on incorrect length in __mm_populate()
KASAN: use-after-free Read in corrupted mm 19 C 2 2779d 2782d 8/29 2724d 543b8f8662fe fuse: don't keep dead fuse_conn at fuse_fill_super().
general protection fault in shmem_unused_huge_count mm 2 8 2778d 2781d 5/29 2757d 79f546a696bf fs: don't scan the inode cache before SB_BORN is set
BUG: bad usercopy in __check_object_size hardening mm -1 1 2788d 2788d 5/29 2778d 2c5d5b13c6eb llc: better deal with too small mtu
INFO: task hung in __do_page_fault fs mm 1 1 2809d 2809d 5/29 2778d 8236b0ae31c8 bdi: wake up concurrent wb_shutdown() callers.
INFO: task hung in wb_shutdown (2) mm 1 5064 2790d 2823d 5/29 2778d 8236b0ae31c8 bdi: wake up concurrent wb_shutdown() callers.
INFO: task hung in handle_userfault mm fs 1 3 2792d 2815d 5/29 2778d 8236b0ae31c8 bdi: wake up concurrent wb_shutdown() callers.
general protection fault in kernfs_kill_sb mm 2 C 29 2787d 2823d 5/29 2786d 8e04944f0ea8 mm,vmscan: Allow preallocating memory for register_shrinker().
general protection fault in __mem_cgroup_free cgroups mm 2 C 22 2813d 2824d 5/29 2786d 4eaf431f6f71 memcg: fix per_node_info cleanup
WARNING: refcount bug in should_fail mm 13 C 3 2825d 2856d 5/29 2786d 8e04944f0ea8 mm,vmscan: Allow preallocating memory for register_shrinker().
general protection fault in qlist_move_cache mm cgroups 2 1 2829d 2829d 5/29 2818d c769accdf3d8 vlan: Fix vlan insertion for packets without ethernet header
possible deadlock in get_user_pages_unlocked mm 4 C 5 2859d 2882d 4/29 2832d 96312e61282a mm/gup.c: teach get_user_pages_unlocked to handle FOLL_NOWAIT
possible deadlock in shmem_file_llseek mm 4 C 4432 2841d 2905d 4/29 2832d cb57469c9573 staging: android: ashmem: Fix lockdep issue during llseek
kernel panic: Out of memory and no killable processes... (2) mm 2 C 1 2887d 2886d 4/29 2832d 0537250fdc6c netfilter: x_tables: make allocation less aggressive
possible deadlock in lru_add_drain_all mm 4 1300 2930d 2980d 4/29 2869d 9852a7212324 mm: drop hotplug lock from lru_add_drain_all()
KASAN: use-after-free Read in __do_page_fault mm 19 syz 679 2965d 2976d 4/29 2869d cb0631fd3cf9 x86/mm: fix use-after-free of vma during userfaultfd fault
WARNING in usercopy_warn mm hardening -1 C 171 2878d 2896d 4/29 2871d 79a8a642bf05 net: Whitelist the skbuff_head_cache "cb" field
WARNING in __check_heap_object mm hardening -1 C 5173 2897d 2968d 4/29 2879d ab9ee8e38b29 sctp: Define usercopy region in SCTP proto slab cache
WARNING in __alloc_pages_slowpath mm -1 C 9435 2882d 2911d 4/29 2879d 0c75f10312a3 staging: android: ion: Add __GFP_NOWARN for system contig heap
general protection fault in page_mapping fs mm 2 C 46 2906d 2933d 4/29 2882d 7d11f77f84b2 RDS: null pointer dereference in rds_atomic_free_op
BUG: unable to handle kernel NULL pointer dereference in page_mapping fs mm 10 C 4 2926d 2928d 4/29 2882d 7d11f77f84b2 RDS: null pointer dereference in rds_atomic_free_op
kernel BUG at fs/userfaultfd.c:LINE! fs mm -1 C 3 2926d 2923d 4/29 2883d 0cbb4b4f4c44 userfaultfd: clear the vma->vm_userfaultfd_ctx if UFFD_EVENT_FORK fails
BUG: bad usercopy in strncpy_from_user hardening mm -1 1 2919d 2915d 3/29 2904d d76c68109f37 crypto: pcrypt - fix freeing pcrypt instances
BUG: bad usercopy in rw_copy_check_uvector hardening mm -1 7 2908d 2923d 3/29 2904d d76c68109f37 crypto: pcrypt - fix freeing pcrypt instances
BUG: bad usercopy in alg_setsockopt hardening mm -1 5 2912d 2910d 3/29 2904d d76c68109f37 crypto: pcrypt - fix freeing pcrypt instances
BUG: bad usercopy in do_syslog hardening mm -1 1 2913d 2910d 3/29 2904d d76c68109f37 crypto: pcrypt - fix freeing pcrypt instances
KASAN: use-after-free Read in handle_userfault fs mm 19 C 151 2917d 2980d 3/29 2905d 0cbb4b4f4c44 userfaultfd: clear the vma->vm_userfaultfd_ctx if UFFD_EVENT_FORK fails
WARNING: suspicious RCU usage (3) mm -1 16 2947d 2947d 3/29 2925d ecaaab564978 crypto: salsa20 - fix blkcipher_walk API usage
WARNING in free_kthread_struct mm -1 C 136405 2965d 2969d 3/29 2948d e10237cc76ef kthread: zero the kthread data structure
general protection fault in iov_iter_fault_in_readable mm fs 2 5 2965d 2974d 3/29 2948d ee74d9967b82 tun: do not arm flow_gc_timer in tun_flow_init()