syzbot


fs subsystem


List(s): linux-fsdevel@vger.kernel.org
Fixed bugs: 418
Parent subsystem(s): kernel (92)
Child subsystems: afs (5) autofs (2) bcachefs (44) bfs (4) btrfs (45) cifs (0) erofs (0) exfat (21) ext4 (79) f2fs (8) fscrypt (1) fsverity (0) fuse (6) gfs2 (40) hfs (29) iomap (1) isofs (2) jffs2 (3) jfs (66) kernfs (32) netfs (3) nfs (9) nilfs (5) ntfs3 (27) ocfs2 (58) orangefs (0) overlayfs (4) squashfs (2) udf (10) v9fs (4) xfs (21)
open (59):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
memory leak in debugfs_change_name fs 3 C 1 4d03h 5h16m PATCH [5h13m]
WARNING in sched_mm_cid_fork fs mm -1 syz error 66 7h26m 5d09h
kernel BUG in sctp_getsockopt_peeloff_common fs -1 C done 6 5d21h 7d05h 💬 5 [3d05h]
KASAN: null-ptr-deref Read in drop_buffers (5) fs 11 5 27d 28d
KASAN: use-after-free Read in hpfs_count_dnodes fs 19 C error 9 11h20m 41d 💬 1 [40d]
INFO: rcu detected stall in unwind_next_frame (5) fs 1 syz error 22 20h42m 55d
INFO: rcu detected stall in eventpoll_release_file (2) fs 1 C error 1 30d 60d
WARNING in copy_mnt_ns fs -1 C done unreliable 33 60d 67d PATCH [62d]
WARNING in free_mnt_ns fs -1 C done unreliable 115 59d 68d PATCH [62d]
WARNING in path_noexec (2) mm fs -1 C error 10097 15m 68d PATCH [58d]
WARNING: bad unlock balance in namespace_unlock fs 4 C unreliable 9 75d 75d PATCH [70d]
KASAN: slab-use-after-free Read in bus_remove_driver fs 19 C 85 13d 75d 💬 1 [75d]
WARNING: bad unlock balance in hugetlb_vmdelete_list fs mm 4 C 1 76d 76d PATCH [74d]
KASAN: slab-use-after-free Read in proc_invalidate_siblings_dcache fs 19 1 85d 81d
KASAN: slab-use-after-free Read in driver_remove_file fs 19 C error 296 3d01h 132d PATCH [78d]
kernel BUG in mpage_readahead fs -1 39 6h06m 132d 💬 1 [32d]
general protection fault in simple_recursive_removal (5) fs wireless 2 C 2 138d 137d PATCH [137d]
KASAN: use-after-free Read in hpfs_get_ea fs 19 C error 4016 19m 143d PATCH [54d]
WARNING: suspicious RCU usage in proc_sys_compare fs 4 C error 1444 153d 158d
INFO: task hung in __iterate_supers fs 1 C error 4563 now 186d
kernel BUG in __filemap_add_folio fs mm -1 C done 1082 5h01m 227d 💬 2 [7d23h]
INFO: task hung in page_cache_ra_order mm fs 1 C done 67 1d10h 229d 💬 1 [229d]
kernel panic: KASAN: panic_on_warn set ... block fs 2 10 20d 233d 💬 2 [138d]
WARNING: bad unlock balance in traverse fs 4 C 53 65d 284d
WARNING: bad unlock balance in seq_read_iter fs 4 C 41 74d 310d PATCH [310d]
BUG: corrupted list in remove_wait_queue (2) fs 19 C done 59 6d21h 319d PATCH [245d]
possible deadlock in __configfs_open_file fs 4 C 28 13d 351d
INFO: task hung in hugetlbfs_zero_partial_page fs mm 1 syz done 3 116d 352d
INFO: rcu detected stall in sys_symlinkat (5) tomoyo mm fs 1 syz error 76 1d22h 369d
WARNING in minix_unlink fs -1 C inconclusive 457 10d 380d 💬 6 [378d]
BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio (4) fs 10 C done 5044 now 386d PATCH [18d]
INFO: task hung in do_coredump (3) fs 1 C done 361 1d07h 417d 💬 4 [153d]
INFO: task hung in fdget_pos fs kernfs 1 C inconclusive inconclusive 116 14d 425d 💬 1 [13d]
possible deadlock in input_inject_event usb fs 4 C done 1937 11h11m 436d PATCH [51d]
INFO: task hung in page_cache_ra_unbounded (2) mm fs 1 C done 3649 8d07h 462d 💬 1 [7d02h]
KASAN: slab-use-after-free Read in lockref_get wireless fs 19 C done inconclusive 34 26d 510d PATCH [509d]
INFO: rcu detected stall in sys_close (7) fs 1 C error 14 14d 598d
BUG: soft lockup in pipe_read mm fs 1 syz 5 306d 683d
INFO: rcu detected stall in dput (8) fs 1 C done 566 9h22m 707d
WARNING: proc registration bug in bcm_connect fs -1 C inconclusive inconclusive 322 462d 727d PATCH [485d]
go runtime error fs 2 syz error inconclusive 24 51d 745d
INFO: task hung in user_get_super (2) fs 1 C error 988 13h40m 750d
INFO: rcu detected stall in clock_adjtime (2) fs 1 C error inconclusive 111 1d18h 792d
UBSAN: shift-out-of-bounds in befs_check_sb fs -1 C error done 69 1d16h 880d PATCH [521d]
INFO: rcu detected stall in vfs_readlink fs 1 C 3 341d 933d 💬 2 [931d]
INFO: task hung in synchronize_rcu (4) fs net 1 C done error 1726 48m 949d 💬 6 [7d02h]
WARNING in do_mkdirat fs -1 C error error 638 2h21m 1101d 💬 22 [664d]
WARNING in path_openat fs -1 C error done 169 17h20m 1102d 💬 1 [664d]
INFO: task hung in lookup_slow (3) fs 1 C unreliable 1926 2d00h 1123d 💬 2 [7d02h]
INFO: task hung in path_openat (7) fs 1 C unreliable 4635 1d23h 1159d 💬 2 [7d02h]
WARNING in inc_nlink (3) fs -1 C error error 6903 15h03m 1361d 💬 1 [7d02h]
INFO: task hung in filename_create (4) fs 1 C error error 2373 3h15m 1447d
UBSAN: shift-out-of-bounds in minix_statfs fs -1 C inconclusive error 71 4d23h 1456d PATCH [34m]
possible deadlock in input_event (2) fs 4 C inconclusive 6499 9h43m 1488d 💬 3 [7d02h]
INFO: task hung in sys_io_destroy fs 1 C inconclusive inconclusive 3 46d 1601d 💬 4 [1581d]
INFO: task can't die in wait_on_page_bit_common fs mm 1 C done 5 1575d 1927d
INFO: rcu detected stall in seq_read (2) fs 1 C done error 5 1378d 1964d 💬 1 [1964d]
INFO: rcu detected stall in sys_clock_adjtime fs 1 C done inconclusive 147 6d14h 1979d
INFO: task hung in do_read_cache_page (3) fs mm 1 C done inconclusive 88 1244d 2142d 💬 2 [2036d]
moderation (85):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KCSAN: data-race in fill_mg_cmtime / simple_unlink fs 6 1 2h52m 2h51m
KCSAN: data-race in d_make_discardable / step_into_slowpath fs 6 1 10h45m 10h44m
KCSAN: data-race in file_update_time_flags / inode_set_ctime_to_ts fs 6 1 18h51m 18h50m
KCSAN: data-race in d_make_discardable / path_lookupat fs 6 2 1d15h 1d15h
KCSAN: data-race in drop_nlink / generic_fillattr (10) fs 6 1 1d18h 1d18h
KASAN: stack-out-of-bounds Read in unwind_next_frame (5) fs 17 1 5d21h 1d21h
KCSAN: data-race in d_make_discardable / do_readlinkat fs 6 2 1d02h 2d05h
KCSAN: data-race in generic_fillattr / inode_set_ctime_to_ts (4) fs 6 1 2d16h 2d16h
VFS: Busy inodes after unmount (use-after-free) (4) fs 2 1 7d01h 3d01h
KASAN: slab-use-after-free Read in locks_remove_file fs 19 1 7d14h 3d14h
KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark (3) mm fs 6 1 4d09h 4d09h
KASAN: slab-use-after-free Read in dnotify_flush fs 19 1 8d09h 4d09h
KCSAN: data-race in d_delete / step_into_slowpath fs 6 3 9h37m 4d09h
KASAN: null-ptr-deref Write in d_delete_notify fs 12 1 8d12h 4d12h
KCSAN: data-race in __follow_mount_rcu / d_set_mounted fs 6 1 5d02h 5d02h
KCSAN: data-race in generic_fillattr / setattr_copy (5) fs 6 1 5d12h 5d12h
KCSAN: data-race in dont_mount / step_into_slowpath fs 6 3 3d21h 6d02h
KCSAN: data-race in dont_mount / path_lookupat fs 6 5 2d18h 6d02h
KCSAN: data-race in dentry_unlink_inode / step_into_slowpath fs 6 11 11h45m 6d08h
KCSAN: data-race in inode_update_timestamps / inode_update_timestamps (5) fs 6 1 7d17h 7d17h
KCSAN: data-race in file_update_time / inode_update_timestamps (6) fs 6 1 13d 13d
KCSAN: data-race in pipe_poll / pipe_release (12) fs 6 1 14d 14d
KCSAN: data-race in file_update_time / inode_set_ctime_to_ts (2) fs 6 2 13d 17d
BUG: corrupted list in do_lock_mount fs 8 1 24d 20d
general protection fault in put_mnt_ns fs 2 11 24d 21d
BUG: corrupted list in filename_create fs 8 1 25d 21d
WARNING in chmod_common (4) fs -1 1 28d 24d
KCSAN: data-race in pipe_release / pipe_wait_readable (9) fs 6 1 25d 25d
WARNING in __generic_file_fsync (3) fs -1 1 31d 27d
WARNING in put_mnt_ns fs -1 1936 26d 31d
KCSAN: data-race in lookup_fast / shrink_dentry_list (12) fs 6 1 35d 35d
KCSAN: data-race in __d_instantiate / path_openat (2) fs 6 1 37d 37d
possible deadlock in flush_end_io mm fs 4 164 2h15m 43d
KCSAN: data-race in fill_mg_cmtime / inode_set_ctime_current fs 6 2 19d 44d
KCSAN: data-race in __umount_mnt / choose_mountpoint_rcu fs 6 1 45d 45d
KCSAN: data-race in atime_needs_update / inode_set_ctime_to_ts (2) fs 6 1 51d 51d
upstream test error: KCSAN: data-race in __xa_clear_mark / xas_find_marked (4) mm fs -1 2 9d12h 57d
KCSAN: data-race in __d_instantiate / step_into (4) fs 6 3 8d04h 60d
KASAN: slab-use-after-free Read in seq_printf fs 19 2 42d 62d
WARNING in notify_change (8) fs -1 1 66d 62d
KCSAN: data-race in pipe_release / pipe_wait_writable (4) fs 6 2 45d 66d
possible deadlock in do_lock_mount fs 4 4 63d 66d
general protection fault in mpage_readahead fs 2 3 4d23h 67d
WARNING: locking bug in vfs_setxattr fs 4 1 72d 68d
KCSAN: data-race in setattr_copy / vfs_write (4) fs 6 2 53d 69d
KCSAN: data-race in __writeback_single_inode / xas_clear_mark (8) fs mm 6 4 5d23h 72d
WARNING in unlock_mount (3) fs -1 10 11h44m 79d
WARNING in vfs_fileattr_set fs -1 3 6d23h 87d
KCSAN: data-race in __set_task_comm / strlen fs mm 6 6 4d06h 89d
KCSAN: data-race in __filemap_add_folio / invalidate_bdev (10) fs mm 6 4 13d 99d
KCSAN: data-race in init_file / prepare_creds (2) fs 6 11 1d12h 134d
KCSAN: data-race in pipe_lock / pipe_release (16) fs 6 4 6d09h 137d
BUG: corrupted list in chown_common fs 8 5 34d 139d
KCSAN: data-race in fifo_open / wait_for_partner (6) fs 6 130 11h49m 146d
KASAN: out-of-bounds Read in proc_pid_stack (2) fs 17 3 73d 157d
KCSAN: data-race in __wb_update_bandwidth / percpu_counter_add_batch (10) fs mm 6 9 45d 168d
KCSAN: data-race in filemap_read / filemap_read (6) fs 6 357 11h12m 176d
KCSAN: data-race in __dentry_kill / shrink_dentry_list (6) fs 6 7 6d06h 180d
KCSAN: data-race in fsnotify_detach_mark / fsnotify_handle_inode_event (4) fs 6 20 6d14h 193d
WARNING in lookup_slow (4) fs -1 10 3d03h 196d
WARNING in dqput (2) fs -1 10 9d21h 199d
KCSAN: data-race in __dentry_kill / step_into (9) fs 6 10 6d20h 218d
WARNING in do_rmdir fs -1 9 17d 231d
KCSAN: data-race in __d_rehash / fast_dput (4) fs 6 27 21h43m 268d
WARNING: refcount bug in call_timer_fn (4) perf trace fs 13 9 18d 292d
KCSAN: data-race in file_write_and_wait_range / xas_set_mark (2) fs mm 6 750 11h49m 384d
KCSAN: data-race in do_sendfile / do_sendfile (10) fs 6 24 1d10h 389d
KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event (2) fs 6 53 2d08h 421d
KCSAN: data-race in generic_fillattr / touch_atime (4) fs 6 43 4d09h 429d
BUG: corrupted list in vfs_setxattr fs 8 47 4d00h 433d
KCSAN: data-race in generic_fillattr / inode_add_bytes fs 6 139 1d15h 516d
KCSAN: data-race in d_delete / lookup_fast (7) fs 6 107 1d18h 524d
KCSAN: data-race in fasync_remove_entry / sock_wake_async (12) fs 6 43 1d23h 538d
KCSAN: data-race in __dentry_kill / fast_dput (2) fs 6 192 11h51m 555d
KCSAN: data-race in touch_atime / touch_atime (3) fs 6 531 11h12m 560d
KCSAN: data-race in __writeback_single_inode / xas_set_mark (6) fs mm 6 713 8h58m 580d
KCSAN: data-race in atime_needs_update / touch_atime (2) fs 6 497 11h13m 675d
KCSAN: data-race in atime_needs_update / inode_update_timestamps fs 6 408 2d02h 730d
KCSAN: data-race in atime_needs_update / inode_set_ctime_current fs 6 449 1d14h 730d
KCSAN: data-race in dentry_unlink_inode / step_into fs 6 syz 2200 7d06h 731d
KCSAN: data-race in d_delete / step_into (6) fs 6 853 7d01h 732d
KCSAN: data-race in __xa_clear_mark / xas_find_marked (2) fs mm 6 4977 12h37m 1625d
KCSAN: data-race in __xa_set_mark / xas_find_marked fs mm 6 1605 2d03h 1900d
KCSAN: data-race in xas_clear_mark / xas_find_marked (2) fs mm 6 4111 14d 2189d
KCSAN: data-race in xas_find_marked / xas_set_mark mm fs 6 2361 11h52m 2195d