Applied filters: Label=subsystems:fs (drop)
Extra filters: [With Repro]

Title	Rank 🛈	Repro	Cause bisect	Fix bisect	Count	Last	Reported	Patched	Closed	Patch
INFO: task hung in io_sq_thread_stop io-uring fs	1	syz, C	done		211	2091d	2250d	1/29	never	io_uring: don't sleep schedule in SQPOLL thread if we need to park
KASAN: slab-use-after-free Read in trace_event_raw_event_hugetlbfs__inode fs mm	19	C			2	12d	10d	2/29	never	hugetlbfs: move hugetlbfs_free_inode tracepoint to ->destroy_inode()
WARNING in do_new_mount (6) prio:normal fs	-1				83	43d	63d	26/29	never	1abd643f3783 fs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbot's "WARNING in do_new_mount" saga
WARNING in minix_rmdir (2) prio:high fs	-1	syz, C	error		7	8d10h	22d	26/29	never	fc9577079df8 minix: reject rmdir of a directory with a corrupted link count
WARNING in V1_minix_truncate (2) prio:high fs	-1	syz, C			4	21d	23d	26/29	never	60e23b13980b minix: restore uptodate on bitmap buffers before redirtying them
KASAN: slab-use-after-free Read in proc_invalidate_siblings_dcache (2) prio:high fs	19				4	150d	290d	27/29	never	cdd812d0683d exit: hold a reference to thread_pid across proc_flush_pid
kernel BUG in free_bprm fs mm	-1	syz, C	done		445	731d	732d	1/29	never	exec: NULL out bprm->argv0 when it is an ERR_PTR
WARNING in eventfs_create_events_dir prio:low fs trace	-1	syz, C	error		9	63d	75d	27/29	never	1704aaaf5d22 eventfs: Initialize ei->children and ei->list in init_ei()
KMSAN: uninit-value in __d_lookup_rcu prio:high fs	7				2	137d	175d	26/29	never	76d8e697242e dcache: unpoison the inline name buffer in __d_alloc()
KASAN: slab-use-after-free Write in config_item_get prio:normal fs	22	syz, C	error		8	81d	101d	27/29	never	f06c2d26d199 configfs: unhash the dentry before dropping the item in rmdir
linux-next boot error: WARNING in kmem_cache_free fs	-1				45	2326d	2329d	1/29	never	mm, slab/slub: improve error reporting and overhead of cache_from_obj()-fix
general protection fault in bch2_prt_vprintf fs	2	syz, C	error	inconclusive	4	671d	708d	2/29	never	bcachefs: journal_entry_btree_keys_to_text() is more careful
WARNING in bch2_prt_printf prio:high fs	-1	syz, C	done	error	103	406d	911d	2/29	never	bcachefs: journal_entry_btree_keys_to_text() is more careful
KASAN: use-after-free Read in check_extent_overbig prio:high fs	19	syz, C	done	done	18	420d	702d	2/29	never	bcachefs: fix check_extent_overbig() call
kernel BUG in bch2_btree_path_peek_slot prio:low fs	-1	syz, C	error	error	1546	530d	708d	2/29	never	bcachefs: fix assert in bch2_btree_path_traverse_cached()
kernel BUG in do_bch2_trans_commit_to_journal_replay prio:normal fs	-1	syz			22	472d	475d	2/29	never	bcachefs: do_bch2_trans_commit_to_journal_replay handles accounting
WARNING in bch2_verify_accounting_clean prio:high fs	-1				29	387d	637d	2/29	never	bcachefs: do_bch2_trans_commit_to_journal_replay handles accounting
kernel BUG in bch2_printbuf_exit prio:high fs	-1	syz, C	error		29	474d	478d	2/29	never	bcachefs: convert str_hash.c to CLASS
possible deadlock in configfs_rmdir prio:low fs	4	syz, C	error		3893	2h33m	102d	27/29	never	9dbf74f4022f usb: gadget: f_tcm: fix deadlock in usbg_make_tpg()
kernel BUG in bch2_btree_repair_topology_recurse prio:high fs	-1	syz, C	done		7	404d	464d	2/29	never	bcachefs: btree_check_root_boundaries()
INFO: task hung in __bch2_fs_stop prio:high fs	1	syz, C	done		1589	400d	875d	2/29	never	bcachefs: Increase BCH_MIN_NR_NBUCKETS
INFO: task hung in __closure_sync prio:high fs	1	syz, C	done		8591	391d	918d	2/29	never	bcachefs: Increase BCH_MIN_NR_NBUCKETS
WARNING in bchfs_truncate fs	-1	syz, C	done		366	407d	917d	2/29	never	bcachefs: Increase BCH_MIN_NR_NBUCKETS
UBSAN: array-index-out-of-bounds in bch2_accounting_validate prio:high fs	15	syz, C	done		23	393d	460d	2/29	never	bcachefs: Ignore accounting key type larger than BCH_DISK_ACCOUNTING_TYPE_NR
kernel BUG in bch2_fill_extent (2) prio:high fs	-1				10	398d	480d	2/29	never	bcachefs: Fix unhandled key type in fiemap_fill_extent
KMSAN: uninit-value in __bch2_alloc_v4_to_text prio:high fs	7	syz, C			3	503d	508d	2/29	never	bcachefs: Fix refs to undefined fields in __bch2_alloc_v4_to_text()
INFO: task hung in bchfs_fpunch (2) prio:high fs mm	1	syz, C	done		2	457d	501d	2/29	never	bcachefs: Fix readahead involved deadlock
KASAN: slab-use-after-free Read in sysfs_emit prio:high driver-core fs	19	syz, C			22	17d	93d	26/29	never	af452b9e0133 media: redrat3: fix UAF in probe error path leaving rc device registered
INFO: task hung in bchfs_fallocate (2) fs	1	syz, C	done	inconclusive	6	447d	675d	2/29	never	bcachefs: Fix readahead involved deadlock
INFO: task hung in bch2_readahead prio:high fs	1	syz, C	done		375	420d	901d	2/29	never	bcachefs: Fix readahead involved deadlock
INFO: task hung in invalidate_inode_pages2_range (3) prio:high fs block	1	syz, C	done		58	55d	617d	2/29	never	bcachefs: Fix readahead involved deadlock
KASAN: slab-out-of-bounds Write in bch2_dirent_init_name prio:high fs	21	syz, C	error		1496	383d	508d	2/29	never	bcachefs: Fix padding zeroout when creating casefolded dirents
KMSAN: uninit-value in bch2_check_subvols prio:high fs	7	syz, C			53	405d	494d	2/29	never	bcachefs: Fix missing compat code in check_subvol()
kernel panic: in transaction restart: transaction_restart_relock, last restarted by prio:high fs	2				5	465d	465d	2/29	never	bcachefs: Fix incorrect transaction handling
WARNING in bch2_dev_free (2) prio:low fs	-1	syz, C	done		5	473d	478d	2/29	never	bcachefs: Fix __bch2_fs_read_write() error path
kernel BUG in __journal_res_get (3) prio:high fs	-1	syz, C	inconclusive		175	383d	507d	2/29	never	bcachefs: Fix __bch2_fs_read_write() error path
KASAN: slab-out-of-bounds Read in __bch2_alloc_to_v4 prio:high fs	17				20	491d	489d	2/29	never	bcachefs: Fix __bch2_alloc_to_v4 copy
KASAN: use-after-free Read in bch2_check_dirents fs prio:high	19	syz, C	done		769	403d	722d	2/29	never	bcachefs: Fix UAF in check_dirent()
KASAN: use-after-free Read in check_dirent fs	19	syz, C	done		13	442d	624d	2/29	never	bcachefs: Fix UAF in check_dirent()
KASAN: slab-use-after-free Write in bch2_do_discards prio:high fs	22	syz			137	404d	474d	2/29	never	bcachefs: Fix UAF by journal write path
KASAN: slab-use-after-free Write in bch2_get_next_dev prio:high fs	22	syz, C			1331	383d	477d	2/29	never	bcachefs: Fix UAF by journal write path
WARNING in closure_put_after_sub prio:high fs	-1				2	455d	479d	2/29	never	bcachefs: Ensure we don't return with closure on waitlist
WARNING in bch2_fs_journal_start prio:high fs	-1	syz, C	done		14	505d	525d	2/29	never	bcachefs: Don't allow mounting with crazy numbers of dirty journal entries
general protection fault in __bch2_err_trace prio:normal fs	2	syz, C	done		25	403d	459d	2/29	never	bcachefs: Delete faulty read_only/nochanges check in fs_open()
KMSAN: uninit-value in bch2_alloc_sectors_start_trans (2) prio:high fs	7	syz			875	404d	570d	2/29	never	bcachefs: Add missing ei_last_dirtied update
memory leak in adfs_init_fs_context prio:low fs	3	syz, C			2	112d	329d	27/29	never	b12e20c6ac15 adfs: fix memory leak in sb->s_fs_info
INFO: task hung in remove_inode_hugepages mm fs	1	syz, C	done		52	760d	852d	1/29	never	INFO: task hung in remove_inode_hugepages
INFO: task hung in remove_one prio:low fs driver-core	1	syz	error		343	1d00h	670d	27/29	never	b3217bdb0091 netdevsim: drop the ability to change max_vfs via debugfs
general protection fault in seq_read_iter (2) prio:low fs driver-core	19				4	80d	184d	27/29	never	net: add missing ref_tracker_dir_exit() to net_passive_dec()
linux-next boot error: BUG: unable to handle kernel NULL pointer dereference in mempool_init_node fs ceph	-1				12	2186d	2187d	1/29	never	kasan-simplify-kasan_poison_kfree-temp-fix
possible deadlock in __balance_push_cpu_stop prio:high fs	4	syz, C			46	57d	70d	27/29	never	5541d8975841 mm/slab: disallow kfree_rcu_sheaf() on PREEMPT_RT again
BUG: sleeping function called from invalid context in procfs_procmap_ioctl fs mm	5	syz	done		101	491d	493d	2/29	never	mm/maps: move kmalloc() call location in do_procmap_query() out of RCU critical section
KASAN: slab-use-after-free Read in debugfs_u32_get (2) prio:normal driver-core fs	19	syz			1	133d	143d	29/29	102d	2e996ca81f95 netdevsim: remove ethtool debugfs files before freeing netdev
KASAN: slab-use-after-free Read in shrink_dcache_tree prio:high actionable fs	19				2	142d	143d	29/29	115d	89038cc87d80 locking/rt: Fix the incorrect RCU protection in rt_spin_unlock()
KASAN: slab-use-after-free Read in reverse_path_check_proc prio:high fs	19	syz, C			113	152d	169d	29/29	115d	a1e9718b406b eventpoll: restore EP_UNACTIVE_PTR sentinel for ctx->tfile_check_list
general protection fault in __umount_mnt fs	2	syz, C	error		21	222d	232d	29/29	170d	ad4999496e73 mount: always duplicate mount
possible deadlock in writeout_period mm fs	4				1	275d	271d	29/29	183d	dd9e2f5b38f1 flex_proportions: make fprop_new_period() hardirq safe
UBSAN: shift-out-of-bounds in minix_statfs fs	-1	syz, C	inconclusive	error	75	285d	1790d	29/29	185d	8c97a6ddc956 minix: Add required sanity checking to minix_check_superblock()
KASAN: slab-use-after-free Read in clone_mnt fs	19				130	255d	266d	29/29	185d	a41dbf5e004e mount: hold namespace_sem across copy in create_new_namespace()
possible deadlock in __configfs_open_file fs	4	syz, C			29	267d	685d	29/29	185d	14d4ac19d189 scsi: target: Fix recursive locking in __configfs_open_file()
BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio (4) fs mm	10	syz, C	done		5746	291d	721d	29/29	185d	777a8560fd29 lib/buildid: use __kernel_read() for sleepable context
memory leak in __shmem_file_setup fs	3	syz, C			1	303d	299d	29/29	185d	605f6586ecf7 mm/vma: do not leak memory when .mmap_prepare swaps the file
general protection fault in grab_requested_root fs	2	syz, C			21	255d	268d	29/29	185d	81f16c9778d7 statmount: Fix the null-ptr-deref in do_statmount()
kernel BUG in sctp_getsockopt_peeloff_common fs	-1	syz, C	done		6	340d	341d	29/29	286d	afb9917d9b37 Revert "net/socket: convert sock_map_fd() to FD_ADD()"
kernel BUG in socket fs	-1	syz, C			145	323d	318d	29/29	286d	afb9917d9b37 Revert "net/socket: convert sock_map_fd() to FD_ADD()"
memory leak in debugfs_change_name driver-core fs	3	syz, C			1	338d	334d	29/29	290d	d412ff9e26eb debugfs: Fix memleak in debugfs_change_name().
WARNING in minix_unlink fs	-1	syz, C	inconclusive	done	458	333d	715d	29/29	290d	009a2ba40303 Fix a drop_nlink warning in minix_rename
memory leak in getname_flags fs	3	syz, C			1	318d	318d	29/29	290d	b14fad555302 io_uring: fix filename leak in __io_openat_prep()
KASAN: slab-use-after-free Read in driver_remove_file driver-core fs	19	syz, C	error	done	296	337d	466d	29/29	291d	72262330f7b3 comedi: c6xdigio: Fix invalid PNP driver unregistration
general protection fault in fd_install fs	2	syz, C			64	337d	338d	29/29	304d	8cf01d0c4372 mqueue: correct the type of ro to int
WARNING in minix_rmdir fs	-1	syz, C	inconclusive		92	354d	668d	29/29	304d	d3e0e8661ceb Fix a drop_nlink warning in minix_rmdir
WARNING in nsproxy_ns_active_get fs	-1	syz, C			377	360d	367d	29/29	304d	cefd55bd2159 nsproxy: fix free_nsproxy() and simplify create_new_namespaces()
kernel BUG in may_open (2) fs	-1	syz, C	done		17716	304d	487d	29/29	304d	34ab4c75588c bfs: Reconstruct file type when loading from disk 7f9d34b0a7cb cramfs: Verify inode mode when loading from disk 005d4b0d33f6 hfsplus: Verify inode mode when loading from disk 0a9e74051313 isofs: Verify inode mode when loading from disk 7a5aa54fba2b jfs: Verify inode mode when loading from disk 73861970938a minixfs: Verify inode mode when loading from disk 4aead50caf67 nilfs2: reject invalid file types when reading inodes 4e8011ffec79 ntfs3: pretend $Extend records as regular files bc107a619f02 squashfs: verify inode mode when loading from disk
KMSAN: kernel-infoleak in hugetlbfs_read_iter fs mm	9	syz, C			7	363d	362d	29/29	304d	de8798965fd0 mm/memfd: fix information leak in hugetlb folios
general protection fault in fsnotify_destroy_group fs	2	syz, C	error		2	347d	345d	29/29	304d	7129098f4f7b fanotify: convert fanotify_init() to FD_PREPARE()
WARNING in nsproxy_ns_active_put fs	-1	syz, C	done		38	361d	367d	29/29	304d	cefd55bd2159 nsproxy: fix free_nsproxy() and simplify create_new_namespaces()
WARNING in minix_rename fs	-1	syz	error		7	414d	501d	29/29	304d	009a2ba40303 Fix a drop_nlink warning in minix_rename
WARNING in destroy_super_work fs	-1	syz	done		107	360d	365d	29/29	304d	f8d5a8970d2f ns: handle setns(pidfd, ...) cleanly
general protection fault in mntput fs	2	syz, C	error		17	340d	345d	29/29	304d	05885f41658c namespace: convert fsmount() to FD_PREPARE()
BUG: sleeping function called from invalid context in hook_sb_delete fs	5	syz, C	done		11887	322d	410d	29/29	304d	56325e8c68c0 landlock: fix splats from iput() after it started calling might_sleep()
WARNING in dax_iomap_rw fs	-1	syz, C			5	388d	402d	29/29	341d	154d1e7ad9e5 dax: skip read lock assertion for read-only filesystems
WARNING in invalidate_bh_lru fs	-1	syz, C	done	done	5172	588d	1416d	29/29	354d	6f861765464f fs: Block writes to mounted block devices
VFS: Busy inodes after unmount (use-after-free) (3) fs	2	syz, C	error		85	373d	403d	29/29	354d	56094ad3eaa2 vfs: Don't leak disconnected dentries on umount
kernel BUG in qlist_free_all (2) fs	-1	syz, C	done		5	388d	419d	29/29	354d	25718fdcbdd2 net: gro_cells: Use nested-BH locking for gro_cell
INFO: task hung in bch2_direct_write (2) fs	1	syz, C	unreliable	done	15	440d	448d	29/29	360d	f2c61db29f27 Remove bcachefs core code
INFO: task hung in v9fs_file_fsync mm fs	1	syz, C	done		14	406d	446d	29/29	374d	e8fe3f07a357 9p/trans_fd: p9_fd_request: kick rx thread if EPOLLIN
WARNING in sysfs_emit_at driver-core fs	-1	syz, C			2	427d	423d	29/29	374d	9dfec4a51df9 USB: core: remove the move buf action
possible deadlock in path_openat (3) fs driver-core	4				1	433d	433d	29/29	374d	9f7c02e03157 nbd: restrict sockets to TCP and UDP
general protection fault in iter_file_splice_write fs	2	syz, C	done	done	2812	444d	901d	29/29	388d	netfs: Fix unbuffered write error handling
WARNING in path_noexec fs mm	-1	syz, C	done		14318	403d	488d	29/29	403d	secretmem: use SB_I_NOEXEC
kernel BUG in bch2_journal_keys_peek_max fs	-1	syz, C	done		45	496d	633d	29/29	418d	425da82c63e3 bcachefs: btree_iter: fix updates, journal overlay
kernel BUG in bch2_journal_keys_peek_prev_min fs	-1				1	500d	496d	29/29	422d	1f8aede70d49 bcachefs: fix bch2_journal_keys_peek_prev_min() underflow
KASAN: use-after-free Read in bch2_btree_node_read_done fs	19	syz, C	done		64	502d	712d	29/29	429d	d89a34b14df5 bcachefs: Move bset size check before csum check
kernel BUG in bch2_btree_path_level_init (3) fs	-1	syz, C	done		489	429d	686d	29/29	429d	9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
kernel BUG in __bch2_bkey_compat fs	-1	syz, C	done	done	5	512d	512d	29/29	429d	9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
kernel BUG in bch2_trans_update_by_path fs	-1	syz, C	done		857	431d	506d	29/29	429d	c72d628469b8 bcachefs: Fix btree for nonexistent tree depth
BUG: unable to handle kernel paging request in __bch2_bkey_unpack_key fs	8	syz, C			75	505d	529d	29/29	429d	9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
kernel panic: trans should be locked, unlocked by bch2_btree_update_start fs	2	syz, C	error	error	361	511d	702d	29/29	429d	5c4acbc8ce90 bcachefs: Don't unlock the trans if ret doesn't match BCH_ERR_operation_blocked
kernel BUG in bch2_bkey_cmp_packed (2) fs	-1	syz, C			7	513d	523d	29/29	429d	9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
kernel BUG in bch2_reconstruct_snapshots fs	-1	syz, C	done	done	7	537d	628d	29/29	429d	b2e2bed11980 bcachefs: Add missing key type checks to check_snapshot_exists()
BUG: unable to handle kernel NULL pointer dereference in bch2_btree_update_start fs	10	syz, C			6	499d	512d	29/29	429d	56be92c63f02 bcachefs: Fix pool->alloc NULL pointer dereference
KASAN: use-after-free Read in bch2_checksum fs	19	syz, C	error	done	8	533d	545d	29/29	429d	d89a34b14df5 bcachefs: Move bset size check before csum check
kernel BUG in bch2_btree_node_iter_init (2) fs	-1	syz, C	done		3	486d	486d	29/29	429d	9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
kernel panic: in transaction restart: transaction_restart_mem_realloced, last restarted by fs	2				2	498d	495d	29/29	429d	fbf913cb72a5 bcachefs: Fix incorrect transaction restart handling
KASAN: slab-use-after-free Read in bch2_str_hash_repair_key fs	19	syz, C	done		226	495d	515d	29/29	429d	9b54efe66c9b bcachefs: Fix alloc_req use after free
kernel BUG in __bch2_bkey_unpack_key fs	-1	syz, C			43	508d	529d	29/29	429d	9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
UBSAN: shift-out-of-bounds in __bch2_btree_node_hash_insert fs	-1	syz, C	done		434	491d	675d	29/29	429d	96de8f852031 bcachefs: mark invalid_btree_id autofix
KASAN: slab-use-after-free Read in bch2_bucket_alloc_trans fs	19	syz, C	error		550	495d	513d	29/29	429d	9b54efe66c9b bcachefs: Fix alloc_req use after free
UBSAN: shift-out-of-bounds in __bch2_bkey_unpack_key fs	-1	syz, C	done		54	512d	528d	29/29	429d	03208bd06a61 bcachefs: don't return fsck_fix for unfixable node errors in __btree_err
kernel BUG in __btree_trans_update_by_path fs	-1	syz, C	done		20	487d	492d	29/29	429d	c72d628469b8 bcachefs: Fix btree for nonexistent tree depth
kernel BUG in __bkey_unpack_pos (2) fs	-1	syz, C	done		24	484d	681d	29/29	429d	9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
KASAN: use-after-free Read in poly1305_update fs	19	syz, C	done		8	497d	512d	29/29	429d	d89a34b14df5 bcachefs: Move bset size check before csum check
BUG: unable to handle kernel NULL pointer dereference in mempool_alloc_noprof (2) fs	10	syz, C	done		8	508d	524d	29/29	429d	56be92c63f02 bcachefs: Fix pool->alloc NULL pointer dereference
KASAN: slab-use-after-free Read in bch2_copygc fs	19	syz, C	done		25	429d	487d	29/29	429d	c02b943f7d12 bcachefs: Fix reference to invalid bucket in copygc
possible deadlock in trans_set_locked fs	4	syz, C			113	507d	708d	29/29	456d	ff1dd05f8233 bcachefs: bch2_trans_relock() is trylock for lockdep
possible deadlock in __bch2_count_fsck_err fs	4				12	522d	540d	29/29	458d	0acb385ec19c bcachefs: Fix possible console lock involved deadlock
WARNING in rhashtable_init_noprof fs	-1	syz, C	done		131	512d	530d	29/29	458d	757601ef8533 bcachefs: Don't put rhashtable on stack
possible deadlock in __bch2_folio_reservation_get (2) fs	4				25	515d	544d	29/29	458d	0acb385ec19c bcachefs: Fix possible console lock involved deadlock
WARNING in lookup_object_or_alloc fs	-1				7	515d	525d	29/29	458d	757601ef8533 bcachefs: Don't put rhashtable on stack
KASAN: slab-out-of-bounds Read in bch2_sb_members_v1_to_text fs	17	syz, C	done		6	515d	515d	29/29	458d	205da7c02673 bcachefs: Don't trust sb->nr_devices in members_to_text()
possible deadlock in __bch2_fsck_err (2) fs	4	syz, C			4	542d	544d	29/29	458d	0acb385ec19c bcachefs: Fix possible console lock involved deadlock
KASAN: slab-out-of-bounds Read in bch2_sb_members_v2_to_text fs	17	syz, C	done		34	514d	530d	29/29	458d	205da7c02673 bcachefs: Don't trust sb->nr_devices in members_to_text()
WARNING in __init_work (2) fs	-1	syz, C			5971	505d	513d	29/29	458d	757601ef8533 bcachefs: Don't put rhashtable on stack
possible deadlock in bch2_trans_begin fs	4				5	527d	657d	29/29	458d	0acb385ec19c bcachefs: Fix possible console lock involved deadlock
divide error in bch2_sb_members_v2_to_text fs	2	syz, C	done		3	515d	515d	29/29	458d	205da7c02673 bcachefs: Don't trust sb->nr_devices in members_to_text()
UBSAN: array-index-out-of-bounds in bch2_sb_downgrade_update fs	15	syz, C			539	506d	558d	29/29	458d	082c74411491 bcachefs: Fix downgrade_table_extra()
WARNING in bch2_printbuf_make_room fs	-1	syz, C	error		2	516d	907d	29/29	466d	dc5bfdf8eaed bcachefs: fix the memory leak in exception case
BUG: unable to handle kernel paging request in bch2_dirent_to_text fs	8	syz, C	done	error	3	532d	843d	29/29	473d	f39055220f6f bcachefs: Add missing validation for superblock section clean
kernel BUG in vfs_get_tree (2) fs	-1	syz, C	done		22	521d	517d	29/29	479d	9c6185609947 bcachefs: Call bch2_fs_start before getting vfs superblock
KASAN: use-after-free Read in sysv_new_inode (2) fs	19	syz, C	inconclusive	error	21224	579d	912d	29/29	479d	448fa70158f9 sysv: Remove the filesystem
kernel BUG in bch2_fill_extent fs	-1				8	537d	557d	29/29	485d	a2f546330ef9 bcachefs: Fix losing return code in next_fiemap_extent()
BUG: unable to handle kernel NULL pointer dereference in do_pagemap_scan fs mm	10	syz, C	inconclusive	done	45	546d	1048d	29/29	488d	65c66047259f proc: fix the issue of proc_mem_open returning NULL
kernel BUG in may_open fs	-1	syz, C	error		137019	488d	584d	29/29	488d	cfd86ef7e8e7 anon_inode: use a proper mode internally
kernel BUG in __bch2_trans_commit (2) fs	-1				105	488d	532d	29/29	488d	97e69f12edb1 bcachefs: Fix missing BTREE_UPDATE_internal_snapshot_node
WARNING in bch2_dev_free fs	-1	syz, C	done		258	516d	578d	28/29	512d	d62922ba3cfc bcachefs: Prevent granting write refs when filesystem is read-only
KMSAN: uninit-value in btree_interior_update_work fs	7				2	595d	647d	28/29	512d	1f88c3567495 bcachefs: Fix a KMSAN splat in btree_update_nodes_written()
KMSAN: uninit-value in bch2_extent_crc_append (2) fs	7	syz, C			4	598d	608d	28/29	513d	53cf2a3daa4c bcachefs: Fix kmsan warnings in bch2_extent_crc_pack()
KMSAN: uninit-value in bch2_trans_start_alloc_update fs	7	syz, C			1051	589d	712d	28/29	514d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_btree_node_iter_init (2) fs	7	syz, C			309	589d	720d	28/29	514d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_inode_v3_validate fs	7	syz, C			5866	590d	718d	28/29	514d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_btree_node_get fs	7	syz, C			18	600d	706d	28/29	514d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_btree_node_check_topology fs	7	syz, C			19	616d	727d	28/29	514d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_dev_freespace_init fs	7	syz, C			432	589d	703d	28/29	514d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_checksum_update (2) fs	19	syz, C	done		7	597d	692d	28/29	514d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_bucket_alloc_early fs	7	syz, C			219	593d	731d	28/29	514d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_trans_start_alloc_update_noupdate fs	7				2	678d	674d	28/29	514d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in __build_ro_aux_tree fs	7				3	683d	694d	28/29	514d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_btree_ptr_v2_validate fs	7	syz, C			55	590d	641d	28/29	514d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_xattr_validate fs	7	syz, C			22	612d	694d	28/29	514d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_alloc_v4_validate (2) fs	7	syz, C			514	593d	720d	28/29	514d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in __bch2_bkey_cmp_left_packed fs	7	syz			2	656d	683d	28/29	514d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in rw_aux_tree_set (2) fs	7	syz, C			2356	591d	715d	28/29	514d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
WARNING in bch2_opt_check_may_set fs	-1				4	589d	585d	28/29	514d	2dd202dbaf0a bcachefs: Recovery no longer holds state_lock
KMSAN: uninit-value in bch2_dirent_rename (2) fs	7				5	678d	688d	28/29	514d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_dirent_validate fs	7				214	655d	707d	28/29	514d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_bkey_val_validate fs	7	syz, C			17	596d	708d	28/29	514d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_inode_unpack (2) fs	7				9	659d	675d	28/29	514d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_bkey_ptrs_validate fs	7	syz, C			15	594d	706d	28/29	514d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_readdir (2) fs	7				2	665d	665d	28/29	514d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_bucket_alloc_trans fs	7	syz, C			15	567d	699d	28/29	514d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_bkey_cmp_packed_inlined (2) fs	7	syz, C			309	590d	710d	28/29	514d	9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
kernel BUG in bch2_fs_initialize fs	-1	syz	done		1004	569d	574d	28/29	515d	806776ad9c20 bcachefs: Add missing error handling
kernel BUG in qlist_free_all net fs	-1	syz, C	done	done	12	567d	715d	28/29	515d	3a04334d6282 bcachefs: Fix b->written overflow
WARNING in bch2_bkey_pick_read_device fs	-1	syz, C	error		89	585d	589d	28/29	515d	3c72d3eea97b bcachefs: Fix WARN() in bch2_bkey_pick_read_device()
KASAN: slab-use-after-free Read in bchfs_read fs	19	syz, C	done		34	574d	581d	28/29	515d	34b47e3d73a2 bcachefs: Fix UAF in bchfs_read()
kernel BUG in bch2_run_recovery_pass (2) fs	-1	syz, C			70	582d	651d	28/29	515d	962322475bb5 bcachefs: Handle backpointers with unknown data types
BUG: sleeping function called from invalid context in bch2_printbuf_make_room (2) fs	5	syz, C	error		59	582d	585d	28/29	515d	b2ffadcc7f8f bcachefs: Fix scheduling while atomic from logging changes
kernel BUG in bch2_btree_node_iter_init fs	-1	syz, C	done	done	167	539d	643d	28/29	515d	3a04334d6282 bcachefs: Fix b->written overflow
general protection fault in bch2_snapshot_tree_oldest_subvol fs	8	syz, C	done		14	560d	583d	28/29	515d	aa6a591f0fd7 bcachefs: Fix null ptr deref in bch2_snapshot_tree_oldest_subvol() 71f8e806a5e4 bcachefs: Stricter checks on "key allowed in this btree"
KASAN: slab-out-of-bounds Read in validate_bset_keys fs	19	syz, C			5	615d	614d	28/29	515d	3a04334d6282 bcachefs: Fix b->written overflow
KMSAN: uninit-value in bch2_copygc (2) fs	7				1	590d	586d	28/29	515d	9ea24b287b3b bcachefs: Eliminate padding in move_bucket_key
KMSAN: uninit-value in bch2_write_inode fs	7	syz, C			4476	603d	651d	28/29	515d	58517f4df842 bcachefs: Initialize from_inode members for bch_io_opts
kernel BUG in bch2_stripe_validate fs	-1	syz, C	done	done	6	593d	677d	28/29	515d	71f8e806a5e4 bcachefs: Stricter checks on "key allowed in this btree"
kernel BUG in __journal_res_get (2) fs	-1	syz, C	error	done	1527	515d	723d	28/29	515d	4c0d2c67ac6d bcachefs: Fix early startup error path
KCSAN: data-race in bprm_execve / copy_fs (4) fs mm	6				1	597d	597d	28/29	515d	af7bb0d2ca45 exec: fix the racy usage of fs_struct->in_exec
BUG: unable to handle kernel paging request in efivarfs_pm_notify efi fs	8	syz, C			1037	612d	622d	28/29	515d	cb6ae457bc6a efivarfs: Defer PM notifier registration until .fill_super
kernel BUG in __bch2_trans_commit fs	-1	syz, C	unreliable		11858	723d	747d	28/29	546d	8b22abb4c840 bcachefs: -o norecovery now bails out of recovery earlier
possible deadlock in bch2_alloc_sectors_start_trans fs	4	syz, C	inconclusive		64	704d	725d	28/29	548d	2cd85fea49d8 bcachefs: Don't recurse in check_discard_freespace_key
kernel BUG in bch2_get_scanned_nodes fs	-1	syz, C	done		101	648d	709d	28/29	549d	a6f4794fcd86 bcachefs: struct bkey_validate_context
kernel BUG in bch2_evacuate_bucket fs	-1	syz, C	done		4	713d	712d	28/29	549d	9e92d6e9efb0 bcachefs: Kill bch2_get_next_backpointer()
VFS: Busy inodes after unmount (use-after-free) fs	2	syz, C	error		55684	551d	1382d	28/29	550d	965b5dd1894f ocfs2: free inode when ocfs2_get_init_inode() fails
kernel BUG in bch2_btree_path_traverse_one fs	-1	syz, C	done		9	698d	731d	28/29	550d	f11ca2ab18e3 bcachefs: Guard against backpointers to unknown btrees
kernel BUG in bch2_journal_pin_set fs	-1	syz, C	done		11	659d	712d	28/29	550d	b3d82c2f2761 bcachefs: Guard against journal seq overflow
WARNING in bch2_journal_flush_seq_async fs	-1	syz, C			27	656d	780d	28/29	550d	4746ee182a76 bcachefs: Check for inode journal seq in the future
general protection fault in proc_scheduler fs	2	syz			6	669d	674d	28/29	550d	d38e26e36206 mptcp: sysctl: sched: avoid using current->nsproxy
kernel BUG in bch2_rechecksum_bio fs	-1	syz, C			4	719d	729d	28/29	550d	9bdb3b73e732 bcachefs: Check for extent crc uncompressed/compressed size mismatch
kernel BUG in __bch2_journal_pin_put fs	-1	syz, C			11	670d	712d	28/29	550d	b3d82c2f2761 bcachefs: Guard against journal seq overflow
kernel BUG in const_folio_flags (2) fs mm	-1	syz			3	654d	714d	28/29	550d	3203b3ab0fcf mm/filemap: don't call folio_test_locked() without a reference in next_uptodate_folio()
kernel BUG in __bch2_btree_node_write fs	-1	syz, C			110	656d	765d	28/29	550d	75eabea6988e bcachefs: Fix dup/misordered check in btree node read
kernel BUG in bch2_btree_node_lock_write fs	-1	syz, C	done		8	704d	716d	28/29	550d	f9e0a9be70c8 bcachefs: Issue a transaction restart after commit in repair
kernel BUG in bch2_btree_pos_to_text (2) fs	-1	syz, C			51	657d	715d	28/29	550d	abf23afa36eb bcachefs: Fix btree node scan when unknown btree IDs are present
kernel BUG in bch2_bucket_alloc_trans (3) fs	-1	syz, C	error		711	656d	719d	28/29	550d	828552ca74a4 bcachefs: Kill bch2_bucket_alloc_new_fs()
kernel BUG in bch2_journal_noflush_seq fs	-1	syz, C	done	done	841	656d	850d	28/29	550d	0eafe758ac44 bcachefs: Check for bucket journal seq in the future
general protection fault in bch2_checksum fs	19	syz, C	done		34	552d	843d	28/29	550d	f7f196170dcd bcachefs: cryptographic MACs on superblock are not (yet?) supported
possible deadlock in __bch2_fsck_err fs	4				2	700d	700d	28/29	550d	49f2d182638a bcachefs: Kill unnecessary mark_lock usage
WARNING: locking bug in eventfd_signal_mask io-uring fs	4	syz, C	done		6	674d	678d	28/29	550d	a9c83a0ab66a io_uring/timeout: flush timeouts outside of the timeout lock
general protection fault in bch2_btree_path_traverse_one fs	8	syz, C	done		564	642d	743d	28/29	550d	90f3683e8f7c bcachefs: Fix null ptr deref in btree_path_lock_root() c7e78f7b0178 bcachefs: Ignore empty btree root journal entries
BUG: corrupted list in bch2_btree_and_journal_iter_exit fs	8	syz, C	done		7	666d	712d	28/29	550d	0184dfa3b821 bcachefs: Fix journal_iter list corruption
WARNING in mark_buffer_dirty (6) fs	-1	syz, C	error		11669	550d	1117d	28/29	550d	ca76bb226bf4 nilfs2: do not force clear folio if buffer is referenced
kernel BUG in bch2_bio_compress (2) fs	-1	syz, C			5	598d	723d	28/29	550d	3d0b3b51c5ab bcachefs: Don't BUG_ON() when superblock feature wasn't set for compressed data
kernel BUG in bch2_btree_write_buffer_flush_locked fs	-1	syz, C	done		35	660d	740d	28/29	550d	b3d82c2f2761 bcachefs: Guard against journal seq overflow
kernel BUG in bch2_btree_root_read fs	-1	syz, C			9	641d	715d	28/29	550d	828552ca74a4 bcachefs: Kill bch2_bucket_alloc_new_fs()
KASAN: slab-out-of-bounds Write in __put_unused_fd fs	22	syz, C	done		5	672d	676d	28/29	550d	0c0214df28f0 fanotify: Fix crash in fanotify_init(2)
possible deadlock in page_cache_ra_unbounded mm fs	4	syz, C	error	done	163	656d	1417d	28/29	612d	6f861765464f fs: Block writes to mounted block devices
KASAN: use-after-free Read in reiserfs_fill_super (3) fs	19	syz, C	error	done	47	719d	764d	28/29	663d	fb6f20ecb121 reiserfs: The last commit
kernel BUG in bch2_fs_btree_write_buffer_exit fs	-1	syz, C	done		6138	719d	771d	28/29	679d	ca43f73cd172 bcachefs: bch2_btree_write_buffer_flush_going_ro()
kernel BUG in bch2_journal_res_get (2) fs	-1	syz, C			1710	719d	743d	28/29	679d	ca43f73cd172 bcachefs: bch2_btree_write_buffer_flush_going_ro()
kernel BUG in bch2_fs_btree_cache_exit fs	-1	syz, C	done		2766	719d	750d	28/29	679d	ca43f73cd172 bcachefs: bch2_btree_write_buffer_flush_going_ro()
kernel BUG in __bch2_btree_node_hash_insert fs	-1	syz, C	done		396	720d	728d	28/29	691d	0b6ec0c5ac6c bcachefs: Fix assertion pop in topology repair
KASAN: slab-out-of-bounds Read in journal_entry_dev_usage_to_text fs	17	syz, C	done		33	721d	831d	28/29	691d	657d4282d8c4 bcachefs: Fix journal_entry_dev_usage_to_text() overrun
kernel BUG in __bkey_unpack_pos fs	-1	syz, C			4	699d	738d	28/29	691d	dc537189b5cf bcachefs: Fix validate_bset() repair path
kernel BUG in bch2_trans_node_iter_init fs	-1	syz, C	done		13	729d	743d	28/29	691d	f8f1dde68681 bcachefs: Fix missing validation for bch_backpointer.level
kernel BUG in bch2_btree_path_level_init (2) fs	-1	syz, C	done		29	695d	745d	28/29	691d	f8f1dde68681 bcachefs: Fix missing validation for bch_backpointer.level
KCSAN: data-race in __ep_remove / __fput (5) fs	6				1	778d	778d	28/29	691d	6474353a5e3d epoll: annotate racy check
kernel BUG in bch2_dev_btree_bitmap_mark fs	-1	syz, C	done		31	723d	747d	28/29	691d	27a036a0c3e7 bcachefs: Fix bch_member.btree_bitmap_shift validation
kernel BUG in bch2_bkey_pack_pos_lossy fs	-1	syz, C			7	730d	742d	28/29	691d	dc537189b5cf bcachefs: Fix validate_bset() repair path
kernel BUG in bch2_run_recovery_pass fs	-1	syz, C	done		17	723d	744d	28/29	691d	2642084f26b5 bcachefs: Allow for unknown key types in backpointers fsck
kernel BUG in bch2_ptr_swab fs	-1	syz, C	inconclusive		11	728d	745d	28/29	691d	840c2fbcc5cd bcachefs: Fix assertion pop in bch2_ptr_swab()
kernel BUG in __bch2_bkey_cmp_packed_format_checked fs	-1	syz, C			4	743d	743d	28/29	696d	d335bb3fd3a4 bcachefs: Ancient versions with bad bkey_formats are no longer supported
kernel BUG in bch2_bkey_cmp_packed fs	-1	syz, C			8	730d	743d	28/29	696d	d335bb3fd3a4 bcachefs: Ancient versions with bad bkey_formats are no longer supported
kernel BUG in bch2_inconsistent_error fs	-1	syz, C			4	730d	741d	28/29	696d	f9f0a5390dce bcachefs: Change OPT_STR max to be 1 less than the size of choices array
KASAN: slab-use-after-free Read in bch2_reconstruct_alloc fs	19	syz, C	done		2	740d	745d	28/29	723d	8e910ca20e11 bcachefs: Fix UAF in bch2_reconstruct_alloc()
kernel BUG in bch2_bucket_alloc_trans (2) fs	-1	syz, C	done		103	723d	751d	28/29	723d	3fd27e9c57bf bcachefs: init freespace inited bits to 0 in bch2_fs_initialize
KASAN: null-ptr-deref Read in bch2_sb_set_upgrade_extra fs	11	syz, C			2	749d	745d	28/29	723d	a25a83de45b4 bcachefs: fix null-ptr-deref in have_stripes()
general protection fault in btree_node_iter_and_journal_peek fs	2	syz, C			3	746d	768d	28/29	723d	3726a1970bd7 bcachefs: Fix NULL ptr dereference in btree_node_iter_and_journal_peek
UBSAN: shift-out-of-bounds in bch2_alloc_to_text fs	-1	syz, C			29	735d	747d	28/29	723d	5c41f75d1b92 bcachefs: fix shift oob in alloc_lru_idx_fragmentation
UBSAN: shift-out-of-bounds in validate_sb_layout fs	-1	syz, C	done		7	736d	745d	28/29	723d	2045fc4295c4 bcachefs: Fix invalid shift in validate_sb_layout()
possible deadlock in bch2_replicas_entry_validate fs	4	syz, C	done		9468	746d	765d	28/29	724d	bf4baaa087e2 bcachefs: Fix lockdep splat in bch2_accounting_read
kernel BUG in bch2_btree_pos_to_text fs	-1	syz, C			8	728d	777d	28/29	725d	0151d10a480d bcachefs: add check for btree id against max in try read node
KCSAN: data-race in __fsnotify_parent / __fsnotify_recalc_mask (5) fs	6				15	769d	856d	28/29	725d	35ceae44742e fsnotify: Avoid data race between fsnotify_recalc_mask() and fsnotify_object_watched()
kernel BUG in submit_bh_wbc (3) nilfs fs	-1	syz, C	done		18	747d	754d	28/29	725d	6ed469df0bfb nilfs2: fix kernel bug due to missing clearing of buffer delay flag
general protection fault in prt_str fs	2	syz, C	done		2	767d	782d	28/29	725d	a30f32222df2 bcachefs: Fix NULL pointer dereference in bch2_opt_to_text
general protection fault in bch2_alloc_read fs	2	syz, C			7	765d	772d	28/29	725d	a319aeaebb6c bcachefs: Fix missing bounds checks in bch2_alloc_read()
UBSAN: shift-out-of-bounds in bch2_stripe_to_text fs	-1	syz, C			3	776d	772d	28/29	725d	9f25dbe0bf91 bcachefs: Add missing validation for bch_stripe.csum_granularity_bits
UBSAN: shift-out-of-bounds in member_to_text fs	-1	syz, C			12	752d	796d	28/29	725d	c1bd21bb6518 bcachefs: Fix invalid shift in member_to_text()
KASAN: slab-use-after-free Read in bch2_direct_write fs	19				11	769d	772d	28/29	725d	573ddcdc5607 bcachefs: fix uaf in bch2_dio_write_done()
WARNING in __bch2_fsck_err (2) fs	-1	syz, C			3	764d	760d	28/29	744d	5612daafb764 bcachefs: Fix fsck warnings from bkey validation
general protection fault in bch2_fs_recovery fs	8	syz, C			10	769d	788d	28/29	746d	025c55a4c7f1 bcachefs: return err ptr instead of null in read sb clean
kernel BUG in vfs_get_tree fs	-1	syz, C	done		318	764d	808d	28/29	746d	b29c30ab48e0 bcachefs: Fix incorrect IS_ERR_OR_NULL usage
KMSAN: uninit-value in bch2_bkey_cmp_packed_inlined fs	7	syz, C			7	769d	789d	28/29	746d	0696a18a8cc3 bcachefs: memset bounce buffer portion to 0 after key_sort_fix_overlapping
WARNING: suspicious RCU usage in bch2_snapshot_tree_oldest_subvol fs	4	syz, C			21	769d	781d	28/29	746d	39c3aad43f6f bcachefs: Hold read lock in bch2_snapshot_tree_oldest_subvol()
general protection fault in __copy_super fs	2	syz, C	done		5	775d	777d	28/29	746d	40d40c6bea19 bcachefs: assign return error when iterating through layout
KASAN: slab-use-after-free Read in lockref_get_not_dead (2) fs	19	syz	error		1	796d	792d	28/29	746d	4e32c25b58b9 libfs: fix get_stashed_dentry()
kernel BUG in bch2_lru_change (2) fs	-1	syz, C			2	814d	813d	28/29	765d	9482f3b05332 bcachefs: avoid overflowing LRU_TIME_BITS for cached data lru
WARNING in bch2_fs_journal_stop fs	-1	syz, C	done		1463	812d	843d	28/29	765d	7f2de6947f92 bcachefs: Fix warning in bch2_fs_journal_stop()
kernel BUG in bch2_journal_replay fs	-1	syz, C	done		3	808d	880d	28/29	765d	cab18be6957b bcachefs: Fix replay_now_at() assert
WARNING in bch2_write_super fs	-1				3	812d	809d	28/29	765d	6575b8c9877c bcachefs: Fix locking in bch2_ioc_setlabel()
KMSAN: uninit-value in bch2_alloc_v4_validate fs	7	syz, C			5	809d	807d	28/29	765d	8ed823b19214 bcachefs: Fix compat issue with old alloc_v4 keys
WARNING in __bch2_fsck_err fs	-1	syz, C			200	766d	813d	28/29	765d	075cabf324c3 bcachefs: Fix forgetting to pass trans to fsck_err()
KASAN: slab-out-of-bounds Write in bch2_dev_journal_init fs	21	syz, C			2	811d	811d	28/29	765d	bdbdd4759f08 bcachefs: Fix missing validation in bch2_sb_journal_v2_validate()
WARNING in discard_new_inode fs	-1	syz, C			3	813d	813d	28/29	765d	99c87fe0f584 bcachefs: fix incorrect i_state usage
kernel BUG in bch2_sort_keys fs	-1	syz, C	error		3	892d	916d	27/29	792d	5dfd3746b6c4 bcachefs: Fix needs_whiteout BUG_ON() in bkey_sort()
WARNING in __virt_to_phys (5) fs	-1				4	816d	812d	27/29	800d	9bd01500e4d8 bcachefs: Fix freeing of error pointers
possible deadlock in bch2_gc_mark_key fs	4	syz, C	done		86	817d	894d	27/29	800d	1841027c7de4 bcachefs: bch2_gc_btree() should not use btree_root_lock
WARNING in __replicas_deltas_realloc fs	-1	syz, C			9	820d	843d	27/29	802d	1d16c605cc55 bcachefs: Disk space accounting rewrite
kernel BUG in bch2_bucket_alloc_freelist fs	-1				1	871d	867d	27/29	802d	44ec5990357b bcachefs: Don't use the new_fs() bucket alloc path on an initialized fs
kernel BUG in bch2_fs_journal_stop fs	-1	syz, C	done		4370	816d	908d	27/29	802d	600b8be5e747 bcachefs: Change bch2_fs_journal_stop() BUG_ON() to warning
kernel BUG in __replicas_entry_idx fs	-1	syz, C	done	unreliable	3	898d	901d	27/29	802d	8bb8d683a401 bcachefs: Delete journal-buf-sharded old style accounting
kernel BUG in bch2_fs_release (2) fs	-1				1	866d	862d	27/29	803d	759b2e800f16 bcachefs: Switch online_reserved shutdown assert to WARN()
kernel panic: not locked: inodes NUM:NUM:NUM cached fs	2	syz, C			2	886d	897d	27/29	803d	385f0c05d670 bcachefs: kill key cache arg to bch2_assert_pos_locked()
BUG: MAX_LOCK_DEPTH too low! (4) fs	-1	syz, C	error		1364	817d	913d	27/29	804d	375476c41405 bcachefs: Add lockdep support for btree node locks
WARNING in bch2_fs_ioctl fs	-1	syz, C	done		36	817d	879d	27/29	806d	d293ece10810 bcachefs: Fix shutdown ordering
KASAN: global-out-of-bounds Read in srcu_gp_start_if_needed fs	17				1	899d	894d	27/29	806d	d293ece10810 bcachefs: Fix shutdown ordering
kernel panic: bch_dev->ref underflow, last put: bch2_get_next_dev fs	2	syz, C	done		21	897d	907d	27/29	806d	9667214b30ef bcachefs: Fix ref in trans_mark_dev_sbs() error path
WARNING: suspicious RCU usage in bch2_bucket_ref_update fs	4	syz, C	done		5	852d	851d	27/29	815d	6f692b1672bd bcachefs: Fix RCU splat
kernel BUG in bch2_bucket_alloc_trans fs	-1				18	841d	870d	27/29	815d	44ec5990357b bcachefs: Don't use the new_fs() bucket alloc path on an initialized fs
BUG: sleeping function called from invalid context in bch2_printbuf_make_room fs	5	syz, C	done		27	840d	838d	27/29	815d	737759fc098f bcachefs: Fix printbuf usage while atomic
UBSAN: shift-out-of-bounds in bch2_bkey_format_invalid (2) fs	-1	syz, C			117	816d	880d	27/29	815d	a0bd30e4ea9d bcachefs: Fix shift greater than integer size
WARNING: lock held when returning to user space in ns_ioctl fs	4	syz, C	done		147	831d	843d	27/29	815d	280e36f0d5b9 nsfs: use cleanup guard
BUG: unable to handle kernel NULL pointer dereference in path_from_stashed fs	10	syz, C			23	836d	840d	27/29	815d	f60d38cb02d0 pidfs: when time ns disabled add check for ioctl
kernel BUG in bch2_ioctl_fsck_online fs	-1	syz, C	done		3	872d	868d	26/29	847d	9bd01500e4d8 bcachefs: Fix freeing of error pointers
WARNING in __virt_to_phys (4) fs	-1	syz, C			2	860d	856d	26/29	847d	9bd01500e4d8 bcachefs: Fix freeing of error pointers
UBSAN: shift-out-of-bounds in bch2_btree_node_read_done fs	-1	syz, C			3	875d	898d	26/29	848d	9e7cfb35e266 bcachefs: Check for invalid btree IDs
UBSAN: array-index-out-of-bounds in bch2_bkey_swab_key fs	15				2	883d	882d	26/29	850d	d47df4f616d5 bcachefs: Fix array-index-out-of-bounds
INFO: task hung in journal_quiesce fs	1	syz			76	862d	890d	26/29	850d	89d21b69b4f8 bcachefs: Add missing bch2_journal_do_writes() call
UBSAN: array-index-out-of-bounds in lock_timer_base fs kvm	15				4	873d	887d	26/29	851d	b79922009214 bcachefs: Add missing synchronize_srcu_expedited() call when shutting down
WARNING in bch2_fs_read_write_early fs	-1	syz, C			35	868d	876d	26/29	851d	1ba44217f825 bcachefs: delete_dead_snapshots() doesn't need to go RW
UBSAN: shift-out-of-bounds in read_one_super (2) fs	-1				4	877d	873d	26/29	851d	d406545613b5 bcachefs: Fix shift overflow in read_one_super()
KASAN: slab-use-after-free Read in bch2_sb_errors_from_cpu fs	19	syz, C			2	868d	865d	26/29	851d	211c581de28e bcachefs: slab-use-after-free Read in bch2_sb_errors_from_cpu
UBSAN: shift-out-of-bounds in bch2_blacklist_entries_gc fs	-1	syz, C			45	865d	865d	26/29	851d	472237b69d07 bcachefs: Fix shift-out-of-bounds in bch2_blacklist_entries_gc
kernel BUG in bch2_journal_res_get fs	-1	syz, C			2	881d	877d	26/29	851d	dbf4d79b7fc7 bcachefs: Fix early init error path in journal code
kernel BUG in bch2_lru_change fs	-1	syz, C	done		4	868d	884d	26/29	851d	cff07e2739d8 bcachefs: Guard against overflowing LRU_TIME_BITS
WARNING: locking bug in srcu_gp_start_if_needed kvm fs	4				2	878d	879d	26/29	851d	f770a6e9a3d7 bcachefs: Fix initialization order for srcu barrier
WARNING: kmalloc bug in __snapshot_t_mut fs	-1	syz, C	done		10	861d	892d	26/29	851d	64cd7de998f3 bcachefs: Fix kmalloc bug in __snapshot_t_mut
KASAN: slab-use-after-free Read in bch2_fs_recovery fs	19				21	869d	870d	26/29	851d	2fe79ce7d1e8 bcachefs: Fix a UAF after write_super()
WARNING: locking bug in __timer_delete_sync fs kvm	4				6	865d	889d	26/29	851d	b79922009214 bcachefs: Add missing synchronize_srcu_expedited() call when shutting down
kernel BUG in gc_bucket fs	-1	syz, C	done		221	884d	889d	26/29	851d	9432e90df1b8 bcachefs: Check for invalid bucket from bucket_gen(), gc_bucket()
general protection fault in bch2_fs_btree_key_cache_exit fs	2				6	877d	877d	26/29	870d	b30b70ad8bff bcachefs: Fix early error path in bch2_fs_btree_key_cache_exit()
UBSAN: shift-out-of-bounds in bch2_sb_dev_has_data fs	-1	syz, C	done		15	909d	907d	25/29	879d	bcfbaea8e547 bcachefs: Fix shift overflows in replicas.c
kernel panic: not locked: inodes NUM:ADDR:NUM cached fs	2	syz, C			2	906d	902d	25/29	879d	6ce26ad376bd bcachefs: Fix missing parens in drop_locks_do()
kernel BUG in bch2_btree_iter_verify_entry_exit fs	-1	syz, C	done		3	899d	905d	25/29	879d	765b8cb8acab bcachefs: Check for subvolues with bogus snapshot/inode fields
kernel BUG in bch2_checksum fs	-1	syz, C	done		9	897d	907d	25/29	879d	6b74fdcc8e25 bcachefs: bch2_checksum() returns 0 for unknown checksum type
general protection fault in poll_state_synchronize_srcu fs	2				5	899d	899d	25/29	879d	d293ece10810 bcachefs: Fix shutdown ordering
kernel BUG in cpu_replicas_add_entry fs	-1	syz, C	done		11	890d	909d	25/29	879d	5fa421448d1f bcachefs: Fix bogus verify_replicas_entry() assert
KASAN: stack-out-of-bounds Read in __bch2_encrypt_bio fs	17	syz, C	done		2	910d	907d	25/29	879d	2ba24864d2f6 bcachefs: Fix stack oob in __bch2_encrypt_bio()
UBSAN: shift-out-of-bounds in bch2_btree_lost_data fs	-1	syz, C	done		3	905d	904d	25/29	879d	f108ddd467b5 bcachefs: Fix shift overflow in btree_lost_data()
kernel BUG in bch2_fs_release fs	-1				3	892d	896d	25/29	879d	d509cadc3a48 bcachefs: Fix debug assert
kernel panic: bch_dev->ref underflow, last put: bch2_trigger_alloc fs	2	syz, C	done		6	897d	908d	25/29	879d	9667214b30ef bcachefs: Fix ref in trans_mark_dev_sbs() error path
general protection fault in __bch2_insert_snapshot_whiteouts fs	8	syz, C	done		65	895d	907d	25/29	879d	6d48e61364ae bcachefs: Add missing guard in bch2_snapshot_has_children()
KASAN: slab-use-after-free Read in evict_inodes fs	19	syz, C	done		2	912d	908d	25/29	879d	d93ff5fa40b9 bcachefs: Fix race path in bch2_inode_insert()
KMSAN: uninit-value in bch2_dirent_invalid fs	7	syz, C			239	879d	908d	25/29	879d	2195b755ebd2 bcachefs: Fix unsafety in bch2_dirent_name_bytes()
kernel BUG in bch2_fs_recovery fs	-1	syz, C	done	done	161	912d	918d	25/29	880d	7ffec9ccdc6a bcachefs: don't free error pointers
UBSAN: shift-out-of-bounds in read_one_super fs	-1	syz, C	done		31	886d	915d	25/29	885d	71dac2482ad3 bcachefs: BCH_SB_LAYOUT_SIZE_BITS_MAX
WARNING: kmalloc bug in bch2_dev_buckets_resize fs	-1	syz, C			17	886d	917d	25/29	885d	db42549d402c bcachefs: Add a better limit for maximum number of buckets
WARNING in __virt_to_phys (3) fs	-1	syz, C			447	885d	918d	25/29	885d	7ffec9ccdc6a bcachefs: don't free error pointers
KMSAN: uninit-value in __bch2_write_index fs	7				1	917d	917d	25/29	885d	1267df40acb2 bcachefs: Initialize bch_write_op->failed in inline data path
BUG: unable to handle kernel paging request in bch2_fs_btree_key_cache_exit fs	8	syz, C			1002	885d	918d	25/29	885d	b30b70ad8bff bcachefs: Fix early error path in bch2_fs_btree_key_cache_exit()
UBSAN: shift-out-of-bounds in __bch2_bkey_invalid fs	-1	syz, C	done		6	890d	916d	25/29	885d	2bb9600d5d47 bcachefs: Guard against unknown k.k->type in __bkey_invalid()
KASAN: slab-out-of-bounds Read in bch2_sb_downgrade_to_text fs	17	syz, C	done		32	902d	915d	25/29	885d	692aa7a54b2b bcachefs: Fix sb_field_downgrade validation
KASAN: slab-out-of-bounds Read in bch2_sb_clean_to_text fs	17	syz, C	done		3	906d	916d	25/29	885d	f39055220f6f bcachefs: Add missing validation for superblock section clean
kernel BUG in bch2_alloc_v4_invalid fs	-1	syz, C	error		3	893d	916d	25/29	885d	6b8cbfc3db75 bcachefs: Fix assert in bch2_alloc_v4_invalid()
KASAN: slab-out-of-bounds Read in bch2_varint_decode_fast fs	17	syz, C			583	885d	918d	25/29	885d	4a8521b6bb81 bcachefs: Inodes need extra padding for varint_decode_fast()
UBSAN: shift-out-of-bounds in bch2_bkey_format_invalid fs	-1	syz, C			45	888d	913d	25/29	885d	61692c7812ab bcachefs: bch2_bkey_format_field_overflows()
UBSAN: shift-out-of-bounds in rewrite_old_nodes_pred fs	-1	syz, C	done		3	916d	916d	25/29	885d	0ec5b3b7ccfc bcachefs: Fix shift-by-64 in bformat_needs_redo()
kernel BUG in bch2_btree_node_read_done fs	-1	syz, C	error		5	915d	918d	25/29	885d	a2ddaf965f6a bcachefs: bucket_pos_to_bp_noerror()
INFO: rcu detected stall in rtnl_newlink (4) driver-core sctp fs	1	syz, C	error		9	906d	982d	25/29	899d	b1f532a3b1e6 batman-adv: Avoid infinite loop trying to resize local TT
KASAN: slab-use-after-free Read in __fput (2) fs driver-core	19	syz, C	done		6	923d	928d	25/29	899d	4efaa5acf0a1 epoll: be better about file lifetimes
general protection fault in __ep_remove fs	2	syz, C			1	944d	943d	25/29	899d	4efaa5acf0a1 epoll: be better about file lifetimes
WARNING: ODEBUG bug in bdev_super_lock (2) fs	-1	syz, C	done		3	936d	934d	25/29	899d	22650a99821d fs,block: yield devices early
kernel BUG at fs/inode.c:LINE! (2) fs	-1	syz, C	done	unreliable	322	914d	2262d	25/29	900d	319c15174757 epoll: take epitem list out of struct file
WARNING in stashed_dentry_prune (2) fs	-1	syz, C	done		54	925d	934d	25/29	903d	9d9539db8638 pidfs: remove config option
WARNING in __sk_destruct batman fs	-1				2	953d	986d	25/29	939d	2a750d6a5b36 rds: tcp: Fix use-after-free of net in reqsk_timer_handler().
WARNING in stashed_dentry_prune fs	-1	syz, C	done		20	970d	969d	25/29	940d	9d9539db8638 pidfs: remove config option
WARNING: ODEBUG bug in bdev_super_lock fs	-1	syz, C			3	944d	954d	25/29	941d	59a55a63c246 fs,block: get holder during claim
KASAN: slab-use-after-free Read in sys_io_cancel fs	19	syz, C	done		894	941d	979d	25/29	941d	28468cbed92e Revert "fs/aio: Make io_cancel() generate completions again"
BUG: sleeping function called from invalid context in __getblk_gfp fs	5	syz, C	error	done	3673	1046d	1440d	25/29	941d	f123dc86388c sysv: don't call sb_bread() with pointers_lock held
possible deadlock in reiserfs_dirty_inode fs	4	syz, C	done	done	519	1012d	1440d	25/29	962d	6f861765464f fs: Block writes to mounted block devices
BUG: sleeping function called from invalid context in __bread_gfp fs	5	syz, C	error	done	359	1038d	1439d	25/29	962d	6f861765464f fs: Block writes to mounted block devices
INFO: task hung in reiserfs_sync_fs fs	1	syz, C	error	done	22	1038d	1417d	25/29	962d	6f861765464f fs: Block writes to mounted block devices
general protection fault in __fget_files (2) fs	2	syz, C	done	done	1	1045d	1041d	25/29	990d	6f861765464f fs: Block writes to mounted block devices
BUG: unable to handle kernel paging request in reiserfs_readdir_inode fs	19	syz, C	error	done	11	1036d	1402d	25/29	990d	6f861765464f fs: Block writes to mounted block devices
kernel BUG in entry_points_to_object fs	-1	syz, C	done	done	21	1036d	1081d	25/29	990d	6f861765464f fs: Block writes to mounted block devices
KASAN: vmalloc-out-of-bounds Read in cleanup_bitmap_list fs	17	syz, C	error	done	100	1039d	1471d	25/29	995d	6f861765464f fs: Block writes to mounted block devices
KASAN: use-after-free Read in set_de_name_and_namelen fs	19	syz, C	error	done	15	1042d	1443d	25/29	998d	6f861765464f fs: Block writes to mounted block devices
BUG: unable to handle kernel NULL pointer dereference in reiserfs_find_entry fs	19	syz, C	error	done	25	1045d	1481d	25/29	1009d	6f861765464f fs: Block writes to mounted block devices
KASAN: use-after-free Read in reiserfs_get_unused_objectid fs	19	syz, C	inconclusive	done	3	1047d	1320d	25/29	1011d	6f861765464f fs: Block writes to mounted block devices
possible deadlock in chown_common fs	4	syz, C	error	done	22	1020d	1489d	25/29	1012d	6f861765464f fs: Block writes to mounted block devices
kernel BUG in balance_leaf fs	-1	syz, C	error	done	16	1052d	1403d	25/29	1012d	6f861765464f fs: Block writes to mounted block devices
possible deadlock in pipe_write fs	4	syz, C	inconclusive		181	1014d	1692d	25/29	1012d	055ca8355991 fs/pipe: Fix lockdep false-positive in watchqueue pipe_write()
kernel BUG in direntry_check_right fs	-1	syz, C	done	done	2	1050d	1094d	25/29	1012d	6f861765464f fs: Block writes to mounted block devices
KASAN: slab-out-of-bounds Read in search_by_key (2) fs	17	syz, C			4435	1034d	1465d	25/29	1012d	dd8f87f21dc3 reiserfs: fix uninit-value in comp_keys
INFO: trying to register non-static key in debugfs_file_get driver-core fs	-1				289	1052d	1052d	25/29	1019d	88ac06a9f938 Revert "debugfs: annotate debugfs handlers vs. removal with lockdep"
WARNING in debugfs_file_get driver-core fs	-1				239	1053d	1070d	25/29	1019d	88ac06a9f938 Revert "debugfs: annotate debugfs handlers vs. removal with lockdep"
WARNING in pagemap_scan_pmd_entry fs mm	-1	syz, C	inconclusive		48	1066d	1088d	25/29	1022d	0dff1b407def mm/pagemap: fix ioctl(PAGEMAP_SCAN) on vma check
WARNING in page_copy_sane fs mm	-1	syz, C	done		3	1150d	1146d	25/29	1052d	a08c7193e4f1 mm/filemap: remove hugetlb special casing in filemap.c
INFO: rcu detected stall in statfs fs	1				1	1182d	1182d	23/29	1122d	8c21ab1bae94 net/sched: fq_pie: avoid stalls in fq_pie_timer()
possible deadlock in inode_add_bytes fs	4	syz, C	done		124	1209d	1208d	23/29	1122d	509f006932de shmem: fix quota lock nesting in huge hole handling
INFO: task hung in pipe_release (4) fs	1	syz, C	done		51	1214d	1214d	23/29	1122d	0f71c9caf267 udp: Fix __ip_append_data()'s handling of MSG_SPLICE_PAGES
KASAN: slab-use-after-free Read in test_bdev_super_fc fs	19	syz, C	done		7	1189d	1192d	23/29	1122d	aca740cecbe5 fs: open block device after superblock creation
KMSAN: uninit-value in reiserfs_security_init fs	7				4169	1217d	1277d	23/29	1136d	d031f4e8b493 reiserfs: Initialize sec->length in reiserfs_security_init().
general protection fault in splice_to_socket fs	2	syz, C	done		4	1241d	1244d	23/29	1136d	ca2d49f77ce4 splice, net: Fix splice_to_socket() to handle pipe bufs larger than a page
KASAN: null-ptr-deref Write in get_block (2) fs	12	syz, C	error		11	1231d	1265d	23/29	1136d	ea2b62f30589 fs/sysv: Null check to prevent null-ptr-deref bug
KCSAN: data-race in inotify_handle_inode_event / inotify_remove_from_idr fs	6				363	1279d	1293d	22/29	1225d	c915d8f5918b inotify: Avoid reporting event with invalid wd
possible deadlock in do_writepages fs mm	4				15	1290d	1293d	22/29	1225d	00d873c17e29 ext4: avoid deadlock in fs reclaim with page writeback
KASAN: null-ptr-deref Read in ida_free (3) fs	11	syz, C	error		4	1322d	1319d	22/29	1248d	cb2239c198ad fs: drop peer group ids under namespace lock
KMSAN: uninit-value in ondemand_readahead fs mm	7	syz, C			221	1346d	1509d	22/29	1248d	3e35102666f8 fs/cramfs/inode.c: initialize file_ra_state
INFO: task hung in write_cache_pages (2) mm fs	1	syz, C	done		36	1276d	1347d	22/29	1248d	fb3592c41a44 migrate_pages: fix deadlock in batched migration
KMSAN: uninit-value in vfs_write fs	7	syz, C			3	1371d	1341d	22/29	1248d	2b4c99f7d9a5 can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write
KASAN: use-after-free Read in mas_next_nentry fs	19	syz, C	error	done	343	1461d	1655d	22/29	1352d	59f2f4b8a757 fs/userfaultfd: Fix maple tree iterator in userfaultfd_unregister()
linux-next boot error: kernel BUG in putname fs	-1				1	1544d	1544d	22/29	1352d	9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
kernel panic: corrupted stack end in tun_chr_close fs	2				1	1644d	1644d	22/29	1352d	b81d591386c3 riscv: Increase stack size under KASAN
INFO: rcu detected stall in sys_lsetxattr fs	1	syz, C	done		2	1664d	1663d	22/29	1352d	0014edaedfd8 fs: unset MNT_WRITE_HOLD on failure
upstream boot error: general protection fault in __proc_create fs	-1				1	1546d	1546d	22/29	1352d	9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
INFO: rcu detected stall in sys_setxattr (2) fs	1	syz, C	done		3	1663d	1663d	22/29	1352d	0014edaedfd8 fs: unset MNT_WRITE_HOLD on failure
general protection fault in __dentry_path (2) fs	8	syz, C	error		174	1657d	1667d	22/29	1352d	5c697c367a66 KVM: Initialize debugfs_dentry when a VM is created to avoid NULL deref
WARNING in mntput_no_expire (3) fs	-1	syz, C	inconclusive		29	1402d	1818d	22/29	1352d	a91714312eb1 percpu_ref_init(): clean ->percpu_count_ref on failure
kernel panic: stack is corrupted in ksys_write fs	2				1	1525d	1521d	22/29	1352d	b81d591386c3 riscv: Increase stack size under KASAN
KASAN: slab-out-of-bounds Read in __fscache_acquire_volume fs mm	17	syz, C	done	done	1	1531d	1531d	22/29	1352d	9f0933ac026f fscache: fix OOB Read in __fscache_acquire_volume
KASAN: use-after-free Read in do_sync_mmap_readahead mm fs	19				1	1631d	1627d	22/29	1352d	dcfa24ba6899 filemap: Cache the value of vm_flags
usb-testing boot error: general protection fault in rcu_core fs mm	-1				23	1526d	1545d	22/29	1352d	9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
KASAN: null-ptr-deref Write in io_file_get_normal io-uring fs	12	syz, C	done		107	1597d	1682d	22/29	1352d	d5361233e9ab io_uring: drop the old style inflight file tracking
usb-testing boot error: BUG: unable to handle kernel paging request in insert_header fs	-1				1	1530d	1530d	22/29	1352d	9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
memory leak in iovec_from_user fs io-uring	3	syz, C			1	1670d	1666d	22/29	1352d	323b190ba2de io_uring: free iovec if file assignment fails
KCSAN: data-race in do_epoll_wait / do_epoll_wait fs	6				83	1627d	1836d	22/29	1352d	d679ae94fdd5 list: fix a data-race around ep->rdllist
usb-testing boot error: general protection fault in __register_sysctl_table (2) fs	-1				1	1530d	1530d	22/29	1352d	9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
BUG: unable to handle kernel paging request in truncate_inode_partial_folio fs mm	8	syz, C	error		4	1553d	1593d	22/29	1352d	84ac013046cc secretmem: fix unhandled fault in truncate
kernel panic: corrupted stack end in lo_ioctl mm fs	2				4	1358d	1480d	22/29	1352d	b81d591386c3 riscv: Increase stack size under KASAN
general protection fault in legacy_parse_param fs	21	syz, C	done		20	1692d	1953d	22/29	1352d	ecff30575b5a LSM: general protection fault in legacy_parse_param
KASAN: use-after-free Read in io_rsrc_node_ref_zero fs	19	syz, C	done		3	1720d	1720d	22/29	1352d	80912cef18f1 io_uring: disallow modification of rsrc_data during quiesce
KASAN: use-after-free Read in add_wait_queue fs io-uring	19	syz, C	done	done	13	1685d	1691d	22/29	1352d	d89a4fac0fbc io_uring: fix assuming triggered poll waitqueue is the single poll
BUG: unable to handle kernel NULL pointer dereference in io_do_iopoll fs io-uring	10	syz, C	done		3	1636d	1635d	22/29	1352d	aa184e8671f0 io_uring: don't attempt to IOPOLL for MSG_RING requests
possible deadlock in snd_hrtimer_callback (2) fs	4	syz, C	inconclusive		582	1557d	1823d	22/29	1352d	96b097091c66 ALSA: pcm: Use deferred fasync helper 95cc637c1afd ALSA: timer: Use deferred fasync helper
BUG: unable to handle kernel paging request in eventfd_ctx_put fs	8	syz, C	done		7	1477d	1505d	22/29	1352d	7353633814f6 KVM: x86/xen: Fix eventfd error handling in kvm_xen_eventfd_assign()
KMSAN: uninit-value in tomoyo_path_chown fs	7	syz, C			13763	1509d	1510d	22/29	1352d	f52d74b190f8 open: always initialize ownership fields
KASAN: use-after-free Read in filp_close io-uring fs	19	syz, C	done		17	1394d	1622d	22/29	1352d	40a1926022d1 fix the breakage in close_fd_get_file() calling conventions change
usb-testing boot error: kernel BUG in putname fs	-1				1	1530d	1530d	22/29	1352d	9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
KASAN: use-after-free Read in mas_next_entry fs	19	syz, C	error		16	1463d	1476d	22/29	1352d	59f2f4b8a757 fs/userfaultfd: Fix maple tree iterator in userfaultfd_unregister()
UBSAN: array-index-out-of-bounds in io_submit_sqes fs	15				4	1621d	1621d	22/29	1352d	fcde59feb1af io_uring: add io_op_defs 'def' pointer in req init and issue
kernel panic: corrupted stack end in loop_control_ioctl driver-core fs	2				2	1474d	1559d	22/29	1352d	b81d591386c3 riscv: Increase stack size under KASAN
possible deadlock in snd_timer_notify (2) fs	4				151	1557d	1821d	22/29	1352d	95cc637c1afd ALSA: timer: Use deferred fasync helper
WARNING: still has locks held in io_ring_submit_lock io-uring fs	4	syz, C	done		3	1637d	1637d	22/29	1352d	e7637a492b9f io_uring: fix locking state for empty buffer group
KCSAN: data-race in call_rcu / rcu_gp_kthread fs	6				1	1944d	1944d	20/29	1705d	2431774f04d1 rcu: Mark accesses to rcu_state.n_force_qs
general protection fault in io_uring_register fs io-uring	2	syz	done		1	1885d	1881d	20/29	1705d	41d3a6bd1d37 io_uring: pin SQPOLL data before unlocking ring lock
KASAN: use-after-free Write in io_queue_worker_create fs io-uring	22	syz, C	unreliable		132	1788d	1797d	20/29	1705d	71a85387546e io-wq: check for wq exit after adding new worker task_work e47498afeca9 io-wq: remove spurious bit clear on task_work addition
possible deadlock in io_flush_timeouts fs	4				5	1806d	1807d	20/29	1705d	6af3f48bf615 io_uring: fix link traversal locking
INFO: task hung in io_uring_del_tctx_node io-uring fs	1	syz, C	unreliable		37	1707d	1871d	20/29	1705d	8bab4c09f24e io_uring: allow conditional reschedule for intensive iterators
KASAN: use-after-free Write in io_submit_one fs	22	syz, C	done		11	1792d	1830d	20/29	1705d	75feae73a280 block: fix single bio async DIO error handling
KCSAN: data-race in call_rcu / rcu_gp_fqs_loop fs	6				1	1841d	1839d	20/29	1705d	2431774f04d1 rcu: Mark accesses to rcu_state.n_force_qs
inconsistent lock state in io_poll_remove_all fs	4				63	1805d	1807d	20/29	1705d	6af3f48bf615 io_uring: fix link traversal locking
WARNING in inc_nlink (2) fs	-1	syz, C	inconclusive	done	21	1705d	2042d	20/29	1705d	97f044f690ba fuse: don't increment nlink in link()
possible deadlock in io_worker_cancel_cb fs io-uring	4	syz, C	done		9	1786d	1790d	20/29	1705d	d800c65c2d4e io-wq: drop wqe lock before creating new worker
INFO: task hung in io_uring_try_cancel_requests io-uring fs	1	syz, C	error		41	1794d	1836d	20/29	1705d	f75d118349be io_uring: harder fdinfo sq/cq ring iterating
WARNING in io_try_cancel_userdata (2) fs	-1				1	1812d	1808d	20/29	1705d	617a89484deb io_uring: fail cancellation for EXITING tasks
WARNING in signalfd_cleanup fs io-uring	-1	syz, C	done		201	1751d	1767d	20/29	1705d	791f3465c4af io_uring: fix UAF due to missing POLLFREE handling
INFO: rcu detected stall in newstat fs usb	1	syz, C	unreliable	done	4	1799d	1922d	20/29	1705d	476db72e5219 media: mceusb: return without resubmitting URB in case of -EPROTO error.
INFO: task hung in io_uring_cancel_generic (2) io-uring fs	1	syz, C	done		97	1789d	1816d	20/29	1705d	78a780602075 io_uring: ensure task_work gets run as part of cancelations
INFO: rcu detected stall in io_wqe_worker (2) fs io-uring	1	syz, C	done		2	1837d	1837d	20/29	1705d	c5e0321e43de Revert "devlink: Remove not-executed trap policer notifications"
possible deadlock in io_poll_double_wake (3) io-uring fs	4	syz, C	error	done	703	1760d	2034d	20/29	1705d	aa43477b0402 io_uring: poll rework
INFO: task hung in io_wqe_worker fs io-uring	1	syz, C	unreliable		3	1847d	1843d	20/29	1705d	1d5f5ea7cb7d io-wq: remove worker to owner tw dependency
KASAN: null-ptr-deref Read in filp_close (2) fs	19	syz, C			3	1943d	2052d	20/29	1823d	3b0462726e7e cgroup: verify that source is a string 9b5b872215fe file: fix close_range() for unshare+cloexec
WARNING in io_sq_thread_park fs	-1				1	2055d	2055d	20/29	1824d	a185f1db59f1 io_uring: do ctx sqd ejection in a clear context
possible deadlock in snd_timer_notify fs	4				119	1825d	1932d	20/29	1824d	f671a691e299 fcntl: fix potential deadlocks for &fown_struct.lock
memory leak in io_sqe_buffers_register fs	3	syz, C			2	2017d	2017d	20/29	1824d	bb6659cc0ad3 io_uring: Fix memory leak in io_sqe_buffers_register()
WARNING in io_link_timeout_fn fs io-uring	-1	syz, C	done		2	2005d	2005d	20/29	1824d	447c19f3b507 io_uring: fix ltout double free on completion race
KASAN: out-of-bounds Read in leaf_paste_entries fs	17	syz, C	inconclusive		8	1855d	2086d	20/29	1824d	13d257503c09 reiserfs: check directory items on read from disk
upstream boot error: kernel panic: VFS: Unable to mount root fs on unknown-block(0,0) fs	-1				235	1945d	1953d	20/29	1824d	c43ddbf97f46 scsi: virtio_scsi: Do not overwrite SCSI status
WARNING: suspicious RCU usage in count (2) fs mm	4				1	1996d	1996d	20/29	1824d	3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
general protection fault in io_commit_cqring (2) fs io-uring	12	syz, C	done		82	2036d	2049d	20/29	1824d	51520426f4bc io_uring: handle setup-failed ctx in kill_timeouts
INFO: task hung in io_sq_thread_park (2) fs io-uring	1	syz	done		2	1945d	1941d	20/29	1824d	46fee9ab02cb io_uring: remove double poll entry on arm failure
KCSAN: data-race in __io_uring_cancel / io_uring_try_cancel_requests fs	6				3	1989d	1991d	20/29	1824d	b16ef427adf3 io_uring: fix data race to avoid potential NULL-deref
WARNING in __percpu_ref_exit (2) fs	-1	syz, C	error	done	31	1824d	2063d	20/29	1824d	a298232ee6b9 io_uring: fix link timeout refs
INFO: task hung in __io_uring_cancel fs io-uring	1	syz, C	done		5	1962d	2028d	20/29	1824d	28090c133869 io_uring: fix work_exit sqpoll cancellations
possible deadlock in _snd_pcm_stream_lock_irqsave (2) fs	4				120	1825d	1932d	20/29	1824d	f671a691e299 fcntl: fix potential deadlocks for &fown_struct.lock
memory leak in create_io_worker io-uring fs	3	syz, C			5	1847d	1886d	20/29	1824d	66e70be72288 io-wq: fix memory leak in create_io_worker()
WARNING in io_wqe_enqueue io-uring fs	-1	syz, C	done		13	1982d	1982d	20/29	1824d	e6ab8991c5d0 io_uring: fix false WARN_ONCE
usb-testing boot error: kernel panic: VFS: Unable to mount root fs on unknown-block(0,0) fs	-1				27	1944d	1949d	20/29	1824d	c43ddbf97f46 scsi: virtio_scsi: Do not overwrite SCSI status
possible deadlock in snd_pcm_period_elapsed (2) fs	4				52	1825d	1932d	20/29	1824d	f671a691e299 fcntl: fix potential deadlocks for &fown_struct.lock
WARNING in io_poll_double_wake fs io-uring	-1	syz, C	done	done	1124	1925d	2027d	20/29	1824d	a890d01e4ee0 io_uring: fix poll requests leaking second poll entries
general protection fault in cdev_del (2) fs	11	syz, C	error		45	1957d	2235d	20/29	1824d	8a12f8836145 net: hso: fix null-ptr-deref during tty device unregistration 0a360e8b65d6 tty: n_gsm: check error while registering tty devices
INFO: task hung in io_wq_put_and_exit io-uring fs	1	syz, C	unreliable		628	1825d	1886d	20/29	1824d	3b33e3f4a6c0 io-wq: fix silly logic error in io_task_work_match()
possible deadlock in do_fcntl usb fs	4	syz, C	done		245	1900d	2231d	20/29	1824d	f671a691e299 fcntl: fix potential deadlocks for &fown_struct.lock
WARNING: suspicious RCU usage in kernel_execve fs mm	4				1	1960d	1960d	20/29	1824d	3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
WARNING: refcount bug in __io_queue_sqe fs	13				1	2026d	2016d	20/29	1824d	a298232ee6b9 io_uring: fix link timeout refs
BUG: unable to handle kernel NULL pointer dereference in kiocb_done io-uring fs	10	syz, C	unreliable	done	3	1891d	1891d	20/29	1824d	b8ce1b9d25cc io_uring: don't submit half-prepared drain request
possible deadlock in io_uring_register fs	4				16	1883d	1886d	20/29	1824d	009ad9f0c6ee io_uring: drop ctx->uring_lock before acquiring sqd->lock
WARNING in io_try_cancel_userdata fs io-uring	-1	syz	unreliable		4	1898d	1902d	20/29	1824d	dadebc350da2 io_uring: fix io_try_cancel_userdata race for iowq
KMSAN: kernel-infoleak in copy_page_to_iter (2) mm fs	9	syz, C			2099	1919d	2977d	20/29	1824d	ce3aba43599f ext4: fix kernel infoleak via ext4_extent_header
KASAN: use-after-free Read in io_worker_handle_work fs	19				2	1968d	1998d	20/29	1824d	3743c1723bfc io-wq: Fix UAF when wakeup wqe in hash waitqueue
WARNING: suspicious RCU usage in proc_alloc_inode fs	4				1	1966d	1966d	20/29	1824d	3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
WARNING in mntput_no_expire (2) fs	-1	syz, C	done		68	1831d	2046d	20/29	1824d	7d01ef7585c0 Make sure nd->path.mnt and nd->path.dentry are always valid pointers
WARNING: suspicious RCU usage in __fput fs	4				1	1992d	1992d	20/29	1824d	3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
general protection fault in __io_file_supports_nowait fs io-uring	2	syz, C	done	done	13	1888d	1894d	20/29	1824d	c6d3d9cbd659 io_uring: fix queueing half-created requests
KASAN: use-after-free Read in bdev_evict_inode fs	19	syz, C	unreliable		1305	1908d	1911d	20/29	1824d	889c05cc5834 block: ensure the bdi is freed after inode_detach_wb
INFO: task hung in io_uring_cancel_generic io-uring fs	1	syz, C	unreliable		151	1824d	1945d	20/29	1824d	1b48773f9fd0 io_uring: fix io_drain_req()
WARNING: suspicious RCU usage in getname_flags fs	4				2	1952d	2043d	20/29	1824d	3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
KASAN: use-after-free Read in __d_alloc (2) fs	19	syz, C	unreliable		6774	1866d	1909d	20/29	1824d	0766ec82e5fb namei: Fix use after free in kern_path_locked
possible deadlock in f_getown fs	4	syz, C	done	done	164	1902d	2231d	20/29	1824d	f671a691e299 fcntl: fix potential deadlocks for &fown_struct.lock
possible deadlock in snd_hrtimer_callback fs	4	syz, C	done		571	1825d	1932d	20/29	1824d	f671a691e299 fcntl: fix potential deadlocks for &fown_struct.lock
possible deadlock in io_sq_thread_finish fs	4	syz, C	unreliable	done	4	2069d	2071d	20/29	1824d	f4e61f0c9add x86/kvm: Fix broken irq restoration in kvm_wait
WARNING: suspicious RCU usage in __alloc_file fs	4				1	2011d	2011d	20/29	1824d	3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
WARNING in io_rsrc_node_switch io-uring fs	-1	syz, C	done		174	2009d	2018d	20/29	1824d	47b228ce6f66 io_uring: fix unchecked error in switch_start()
WARNING in io_wq_submit_work (2) io-uring fs	-1	syz, C	done	done	52	1883d	1886d	20/29	1824d	713b9825a4c4 io-wq: fix cancellation on create-worker failure
KASAN: null-ptr-deref Write in io_uring_cancel_sqpoll fs	12				170	1825d	2080d	20/29	1824d	6d042ffb598e io_uring: Check current->io_uring in io_uring_cancel_sqpoll
KASAN: stack-out-of-bounds Read in iov_iter_revert fs io-uring	17	syz, C	error		14	1896d	1913d	20/29	1824d	89c2b3b74918 io_uring: reexpand under-reexpanded iters
WARNING in internal_create_group driver-core fs	-1	syz, C	inconclusive		20	1888d	1942d	20/29	1824d	b1a811633f73 block: nbd: add sanity check for first_minor
kernel BUG in remove_inode_hugepages fs mm	-1	syz, C	unreliable		3	1909d	1909d	20/29	1824d	c7b1850dfb41 hugetlb: don't pass page cache pages to restore_reserve_on_error
WARNING in io_wq_put fs io-uring	-1	syz, C	unreliable		3	2058d	2069d	20/29	1824d	f5d2d23bf0d9 io-wq: fix race around pending work on teardown
WARNING in io_uring_setup (2) fs io-uring	-1	syz, C	done		40	2009d	2018d	20/29	1824d	47b228ce6f66 io_uring: fix unchecked error in switch_start()
INFO: task can't die in d_alloc_parallel fs	1				2	2133d	2149d	20/29	1986d	0ce20dd84089 mm: add Kernel Electric-Fence infrastructure
KASAN: use-after-free Read in idr_for_each (2) io-uring fs	19	syz, C	error	done	86	2062d	2224d	20/29	2028d	61cf93700fe6 io_uring: Convert personality_idr to XArray
INFO: task hung in io_uring_cancel_task_requests fs io-uring	1	syz, C			305	2062d	2097d	20/29	2038d	34343786ecc5 io_uring: unpark SQPOLL thread for cancelation
KASAN: use-after-free Read in tctx_task_work fs	19				2	2081d	2078d	20/29	2038d	2c32395d8111 io_uring: fix __tctx_task_work() ctx race
KASAN: invalid-free in io_req_caches_free fs	24				5	2081d	2084d	20/29	2038d	8e5c66c485a8 io_uring: clear request count when freeing caches
INFO: task hung in io_sq_thread_park fs io-uring	1	syz, C	unreliable		263	2073d	2078d	20/29	2038d	3ebba796fa25 io_uring: ensure that SQPOLL thread is started for exit
memory leak in io_submit_sqes (2) fs io-uring	3	syz, C			1	2076d	2075d	20/29	2038d	f01272541d2c io-wq: ensure all pending work is canceled on exit
possible deadlock in io_poll_double_wake (2) io-uring fs	4	syz, C	error	error	431	2038d	2231d	20/29	2038d	1c3b3e6527e5 io_uring: ignore double poll add on the same waitqueue head
inconsistent lock state in io_dismantle_req fs io-uring	4	syz, C			2	2105d	2105d	20/29	2038d	9ae1f8dd372e io_uring: fix inconsistent lock state
general protection fault in io_sqe_files_unregister fs	2				2	2130d	2128d	19/29	2069d	3e2224c5867f io_uring: Fix return value from alloc_fixed_file_ref_node
kernel BUG at mm/page-writeback.c:LINE! fs mm	-1				1	2138d	2134d	19/29	2069d	c2407cf7d22d mm: make wait_on_page_writeback() wait for multiple pending writebacks
WARNING in io_uring_flush fs io-uring	-1	syz, C	unreliable		10	2113d	2122d	19/29	2069d	4325cb498cb7 io_uring: fix uring_flush in exit_files() warning
KASAN: use-after-free Read in search_by_entry_key fs	19	syz, C	done		3	2217d	2221d	19/29	2069d	d24396c5290b reiserfs: add check for an invalid ih_entry_count
WARNING in percpu_ref_kill_and_confirm (2) fs	-1	syz, C	done		71	2144d	2152d	19/29	2069d	9faadcc8abe4 io_uring: fix double io_uring free
WARNING in io_ring_ctx_wait_and_kill fs	-1	syz, C	done		9	2123d	2124d	19/29	2069d	06585c497b55 io_uring: do sqo disable on install_fd error
INFO: task hung in __io_uring_files_cancel io-uring fs	1	syz, C	done		30	2110d	2177d	19/29	2069d	bee749b187ac io_uring: fix files cancellation
KASAN: use-after-free Read in reiserfs_fill_super fs	19	syz, C	error	done	2	2162d	2161d	19/29	2069d	d24396c5290b reiserfs: add check for an invalid ih_entry_count
BUG: unable to handle kernel paging request in percpu_ref_exit fs	8	syz, C	done		3	2130d	2128d	19/29	2069d	3e2224c5867f io_uring: Fix return value from alloc_fixed_file_ref_node
INFO: task can't die in io_sq_thread_stop fs	1				1	2187d	2183d	19/29	2069d	65b2b213484a io_uring: check kthread stopped flag when sq thread is unparked
general protection fault in io_disable_sqo_submit io-uring fs	2	syz, C	done		124	2120d	2124d	19/29	2069d	b4411616c26f io_uring: fix null-deref in io_disable_sqo_submit
WARNING in io_uring_cancel_task_requests io-uring fs	-1	syz	done		69	2105d	2109d	19/29	2069d	70b2c60d3797 io_uring: fix sqo ownership false positive warning
inconsistent lock state in io_file_data_ref_zero fs	4	syz, C	done		7152	2151d	2175d	19/29	2069d	ac0648a56c1f io_uring: use bottom half safe lock for fixed file data
BUG: corrupted list in io_file_get fs io-uring	8	syz, C	done		3	2109d	2109d	19/29	2069d	f609cbb8911e io_uring: fix list corruption for splice file_get
WARNING in io_wq_submit_work fs	-1				4	2116d	2120d	19/29	2069d	ca70f00bed6c io_uring: fix cancellation taking mutex while TASK_UNINTERRUPTIBLE
possible deadlock in send_sigio (2) fs	4	syz, C	done	done	40	2138d	2250d	19/29	2069d	8d1ddb5e7937 fcntl: Fix potential deadlock in send_sig{io, urg}()
kernel BUG at fs/reiserfs/prints.c:LINE! fs	-1	syz, C	done	done	5	2159d	2238d	19/29	2069d	d24396c5290b reiserfs: add check for an invalid ih_entry_count
memory leak in generic_parse_monolithic fs	3	syz, C			11	2159d	2185d	19/29	2069d	4cb682964706 afs: Fix memory leak when mounting with multiple source parameters
KASAN: slab-out-of-bounds Write in record_print_text fs	21	syz, C	done	unreliable	17	2109d	2112d	19/29	2069d	08d60e599954 printk: fix string termination for record_print_text()
BUG: unable to handle kernel NULL pointer dereference in __lookup_slow fs	10	syz, C	inconclusive	done	3	2091d	2231d	19/29	2069d	d24396c5290b reiserfs: add check for an invalid ih_entry_count
possible deadlock in send_sigurg (2) fs	4	syz, C	done		25	2155d	2206d	19/29	2069d	8d1ddb5e7937 fcntl: Fix potential deadlock in send_sig{io, urg}()
possible deadlock in proc_pid_syscall (2) fs	4				2	2253d	2262d	19/29	2069d	f7cfd871ae0c exec: Transform exec_update_mutex into a rw_semaphore 78af4dc949da perf: Break deadlock involving exec_update_mutex
WARNING in io_disable_sqo_submit fs	-1	syz, C	done		9	2114d	2122d	19/29	2069d	6b393a1ff174 io_uring: fix false positive sqo warning on flush
KASAN: null-ptr-deref Read in filp_close fs	11	syz, C	done		9	2149d	2151d	19/29	2069d	fec8a6a69103 close_range: unshare all fds for CLOSE_RANGE_UNSHARE | CLOSE_RANGE_CLOEXEC 6abc20f8f879 selftests/core: add regression test for CLOSE_RANGE_UNSHARE | CLOSE_RANGE_CLOEXEC
possible deadlock in io_timeout_fn (2) fs	4				4	2130d	2137d	19/29	2069d	4aa84f2ffa81 io_uring: dont kill fasync under completion_lock
KASAN: null-ptr-deref Write in kthread_use_mm fs io-uring	12	syz, C	done		2	2196d	2196d	15/29	2178d	4b70cf9dea4c io_uring: ensure consistent view of original task ->mm from SQPOLL
general protection fault in io_uring_show_cred fs	2	syz, C	done		4	2193d	2193d	15/29	2178d	6b47ab81c9a9 io_uring: use correct pointer for io_uring_show_cred()
KASAN: use-after-free Write in io_submit_sqes io-uring fs	22	syz, C	error		2	2196d	2195d	15/29	2178d	cb8a8ae31074 io_uring: drop req/tctx io_identity separately
INFO: task can't die in corrupted fs	1	syz, C	done		4	2196d	2222d	15/29	2182d	86f33603f8c5 f2fs: handle errors of f2fs_get_meta_page_nofail
WARNING in unlock_new_inode fs	-1	syz, C	done		76	2219d	3124d	15/29	2182d	8859bf2b1278 reiserfs: only call unlock_new_inode() if I_NEW
memory leak in reiserfs_parse_options fs	3	syz, C			4	2246d	2442d	15/29	2182d	e9d4709fcc26 reiserfs: Fix memory leak in reiserfs_parse_options()
general protection fault in percpu_ref_exit fs	2	syz, C	done		3	2217d	2221d	15/29	2182d	7ea6bf2e6c40 percpu_ref: don't refer to ref->data if it isn't allocated
KASAN: use-after-free Read in fscache_alloc_cookie fs	19	syz	done		1	2234d	2234d	15/29	2182d	1d0e850a49a5 afs: Fix cell removal
KASAN: use-after-free Read in io_wqe_worker fs io-uring	19	syz, C	error		2	2232d	2233d	15/29	2182d	c4068bf898dd io-wq: fix use-after-free in io_wq_worker_running
WARNING: suspicious RCU usage in io_init_identity fs	4				1536	2208d	2213d	15/29	2182d	1e6fa5216a0e io_uring: COW io_identity on mismatch
inconsistent lock state in xa_destroy io-uring fs	4	syz, C			755	2220d	2221d	15/29	2182d	ca6484cd308a io_uring: no need to call xa_destroy() on empty xarray
INFO: task hung in io_uring_flush io-uring fs	1	syz, C	done	done	11	2273d	2280d	15/29	2182d	b7ddce3cbf01 io_uring: fix cancel of deferred reqs with ->files
general protection fault in open_xa_dir fs	2	syz, C	done		3	2217d	2229d	15/29	2182d	c2bb80b8bdd0 reiserfs: Fix oops during mount
KMSAN: uninit-value in search_by_key fs	7				1549	2187d	2238d	15/29	2182d	4443390e08d3 reiserfs: Initialize inode keys properly
KASAN: use-after-free Write in io_wq_worker_running io-uring fs	22	syz, C	error		14	2225d	2252d	15/29	2182d	c4068bf898dd io-wq: fix use-after-free in io_wq_worker_running
KMSAN: uninit-value in __fget_light (2) fs	7	syz, C			18	2199d	2208d	15/29	2182d	d5e4d0a5e692 inet_diag: validate INET_DIAG_REQ_PROTOCOL attribute
possible deadlock in mnt_want_write fs	4	syz, C	done	done	662	2221d	3029d	15/29	2182d	146d62e5a586 ovl: detect overlapping layers
general protection fault in __do_sys_io_uring_register fs	2				80	2209d	2215d	15/29	2182d	55cbc2564ab2 io_uring: fix error path cleanup in io_sqe_files_register()
inconsistent lock state in io_uring_add_task_file fs	4				1	2221d	2220d	15/29	2182d	ce765372bc44 io_uring: Fix use of XArray in __io_uring_files_cancel
KMSAN: uninit-value in qtree_entry_unused fs	7				396	2187d	2238d	15/29	2182d	3d3dc274ce73 quota: clear padding in v2r1_mem2diskdqb()
general protection fault in io_poll_double_wake (2) fs io-uring	2	syz, C	error		2	2232d	2231d	15/29	2208d	8706e04ed7d6 io_uring: always delete double poll wait entry on match
possible deadlock in io_write fs	4				2	2229d	2231d	15/29	2208d	fad8e0de4426 io_uring: fix potential ABBA deadlock in ->show_fdinfo()
memory leak in do_eventfd fs	3	syz, C			2	2266d	2362d	15/29	2220d	f65886606c2d KVM: fix memory leak in kvm_io_bus_unregister_dev()
upstream boot error: KASAN: global-out-of-bounds Read in internal_create_group driver-core fs	-1				273	2266d	2278d	15/29	2235d	62c789270c0b libnvdimm: KASAN: global-out-of-bounds Read in internal_create_group
possible deadlock in __io_queue_deferred io-uring fs	4	syz, C	error		1	2281d	2280d	15/29	2243d	7271ef3a93a8 io_uring: fix recursive completion locking on oveflow flush
WARNING in __kernel_read fs	-1	syz, C	done		60	2250d	2308d	15/29	2243d	a39c46067c84 net/9p: validate fds in p9_fd_open
general protection fault in cdev_del usb fs	2	syz, C			315	2252d	2720d	15/29	2243d	e911e99a0770 usb: hso: check for return value in hso_serial_common_create()
BUG: unable to handle kernel NULL pointer dereference in loop_rw_iter io-uring fs	10	syz, C	done		24	2268d	2280d	15/29	2243d	2dd2111d0d38 io_uring: Fix NULL pointer dereference in loop_rw_iter()
KASAN: use-after-free Read in io_async_task_func fs io-uring	19	syz	error		1	2279d	2279d	15/29	2243d	6d816e088c35 io_uring: hold 'ctx' reference around task_work queue + execute
WARNING in drop_nlink fs	-1	syz, C	done	error	1	2390d	2386d	15/29	2243d	facb03dddec0 fs/minix: don't allow getting deleted inodes
KASAN: use-after-free Read in ceph_mdsc_destroy ceph fs	19				4	2282d	2298d	15/29	2243d	a7caa88f8b72 ceph: fix use-after-free for fsc->mdsc
KASAN: use-after-free Read in path_init (2) fs	19	syz, C	done		29	2277d	2278d	15/29	2243d	24fb33d40d60 fix breakage in do_rmdir()
WARNING in __kernel_write fs	-1	syz, C	done		522	2292d	2312d	15/29	2243d	a39c46067c84 net/9p: validate fds in p9_fd_open
KMSAN: uninit-value in get_block fs	7	syz, C			13	2359d	2362d	15/29	2243d	270ef41094e9 fs/minix: reject too-large maximum file size
KASAN: null-ptr-deref Write in get_block fs	12	syz, C	done		101	2309d	2422d	15/29	2243d	da27e0a0e5f6 fs/minix: check return value of sb_getblk()
memory leak in io_submit_sqes fs io-uring	3	syz, C			2	2260d	2279d	15/29	2243d	a36da65c4656 io_uring: fail poll arm on queue proc failure
KASAN: use-after-free Write in get_block fs	22	syz, C	inconclusive	inconclusive	12	2325d	2375d	15/29	2243d	270ef41094e9 fs/minix: reject too-large maximum file size
general protection fault in io_poll_double_wake io-uring fs	2	syz, C	done		8	2247d	2275d	15/29	2243d	d4e7cd36a90e io_uring: sanitize double poll handling
KASAN: use-after-free Read in lockref_get driver-core fs	19				7	2347d	2446d	15/29	2243d	bad8e64fb19d blktrace: fix debugfs use after free
KASAN: use-after-free Read in io_uring_setup (2) fs	19				1	2291d	2291d	15/29	2243d	d1719f70d0a5 io_uring: don't touch 'ctx' after installing file descriptor
possible deadlock in io_timeout_fn io-uring fs	4	syz, C	done		4	2277d	2280d	15/29	2243d	51a4cc112c7a io_uring: defer file table grabbing request cleanup for locked requests
possible deadlock in lock_trace (3) fs	4	syz	inconclusive	done	69	2410d	2545d	15/29	2272d	2db9dbf71bf9 proc: Use new infrastructure to fix deadlocks in execve
possible deadlock in do_io_accounting (3) fs	4	syz, C	inconclusive	done	39	2417d	2508d	15/29	2272d	76518d379885 proc: io_accounting: Use new infrastructure to fix deadlocks in execve
possible deadlock in proc_pid_personality fs	4	syz	inconclusive	done	3	2427d	2437d	15/29	2272d	2db9dbf71bf9 proc: Use new infrastructure to fix deadlocks in execve
KASAN: use-after-free Write in fsnotify_detach_connector_from_object fs	22	syz, C	done		4	2335d	2339d	15/29	2304d	ef1548adada5 proc: Use new_inode not new_inode_pseudo
BUG: unable to handle kernel NULL pointer dereference in number fs	10				1	2334d	2330d	15/29	2304d	3021e69219e2 kcov: check kcov_softirq in kcov_remote_stop()
INFO: task hung in locks_remove_posix fs input usb	1	syz			2231	2339d	2362d	15/29	2304d	187b96db5ca7 x86/unwind/orc: Fix unwind_get_return_address_ptr() for inactive tasks
linux-next boot error: general protection fault in tomoyo_get_local_path fs	-1				18	2361d	2367d	15/29	2304d	9d78edeaec75 proc: proc_pid_ns takes super_block as an argument
general protection fault in proc_kill_sb fs	2				8	2329d	2341d	15/29	2304d	058f2e4da79b proc: s_fs_info may be NULL when proc_kill_sb is called
INFO: trying to register non-static key in io_cqring_ev_posted (3) fs	-1	syz, C	done		3	2363d	2365d	15/29	2304d	583863ed9181 io_uring: initialize ctx->sqo_wait earlier
BUG: unable to handle kernel NULL pointer dereference in unlock_page fs mm	10				1	2336d	2336d	15/29	2304d	3021e69219e2 kcov: check kcov_softirq in kcov_remote_stop()
general protection fault in start_creating fs driver-core	2	syz, C	done		106	2326d	2355d	15/29	2304d	d56f5136b010 KVM: let kvm_destroy_vm_debugfs clean up vCPU debugfs directories
KCSAN: data-race in __rcu_read_unlock / sync_rcu_exp_select_node_cpus (2) fs mm	6				9	2372d	2539d	15/29	2304d	314eeb43e5f2 rcu: Add *_ONCE() and data_race() to rcu_node ->exp_tasks plus locking
KASAN: use-after-free Read in blkdev_direct_IO fs	19	syz, C	done	error	8	2649d	2654d	15/29	2321d	0eb6ddfb865c block: Fix __blkdev_direct_IO() for bio fragments
KASAN: use-after-free Read in blkdev_bio_end_io fs	19	syz, C	done	error	13	2639d	2651d	15/29	2321d	7b6620d7db56 block: remove REQ_NOWAIT_INLINE
KASAN: use-after-free Read in dput (2) fs	19	syz	done		4	2397d	2397d	15/29	2333d	4fa3b1c41737 proc: Handle umounts cleanly
INFO: rcu detected stall in io_uring_release fs	1	syz			15	2353d	2394d	15/29	2333d	3fd44c86711f io_uring: use cond_resched() in io_ring_ctx_wait_and_kill()
possible deadlock in io_submit_one (3) fs	4	syz	done		45	2402d	2409d	15/29	2372d	63f818f46af9 proc: Use a dedicated lock in struct pid
INFO: task hung in io_queue_file_removal fs	1	syz, C	done		16	2415d	2422d	15/29	2372d	4afdb733b160 io-uring: drop completion when removing file
KMSAN: uninit-value in simple_attr_read driver-core fs	7	syz, C			6	2375d	2445d	15/29	2372d	a65cab7d7f05 libfs: fix infoleak in simple_attr_read()
possible deadlock in send_sigurg fs	4	syz, C	done		65	2396d	2409d	15/29	2372d	63f818f46af9 proc: Use a dedicated lock in struct pid
INFO: trying to register non-static key in __io_uring_register fs	-1	syz, C	done		39	2404d	2405d	15/29	2372d	f7fe9346869a io_uring: initialize fixed_file_data lock
INFO: trying to register non-static key in io_cqring_ev_posted (2) fs	-1	syz, C	done		42	2375d	2412d	15/29	2372d	10bea96dcc13 io_uring: add missing finish_wait() in io_sq_thread()
possible deadlock in send_sigio fs	4	syz, C	done		7	2400d	2408d	15/29	2372d	63f818f46af9 proc: Use a dedicated lock in struct pid
memory leak in fasync_helper fs	3	syz, C			14	2466d	2526d	15/29	2397d	67f562e3e147 net/smc: transfer fasync_list in case of fallback
BUG: sleeping function called from invalid context in __kmalloc fs ceph	5	syz, C	done		5	2458d	2465d	15/29	2397d	b27a939e8376 ceph: canonicalize server path in place
WARNING: ODEBUG bug in io_sqe_files_unregister fs	-1	syz, C	done		964	2466d	2513d	15/29	2432d	2faf852d1be8 io_uring: cleanup fixed file data table references
memory leak in reiserfs_fill_super fs	3	syz, C			20	2473d	2523d	15/29	2454d	5474ca7da6f3 reiserfs: Fix memory leak of journal device string
KCSAN: data-race in __rcu_read_unlock / sync_rcu_exp_select_cpus fs mm	6				7	2466d	2560d	15/29	2454d	c51f83c315c3 rcu: Use READ_ONCE() for ->expmask in rcu_read_unlock_special()
kernel BUG at fs/namei.c:LINE! fs	-1				3593	2489d	2489d	15/29	2454d	c64cd6e34ea3 reimplement path_mountpoint() with less magic
BUG: corrupted list in __dentry_kill (2) driver-core fs	8	syz, C	done		4945	2522d	2522d	15/29	2454d	a3d1e7eb5abe simple_recursive_removal(): kernel-side rm -rf for ramfs-style filesystems
WARNING in do_dentry_open (2) fs	-1	syz, C	done		17	2474d	2471d	15/29	2454d	a37f4958f7b6 debugfs: Return -EPERM when locked down
KASAN: use-after-free Write in percpu_ref_switch_to_percpu fs	22				1	2469d	2468d	15/29	2454d	2faf852d1be8 io_uring: cleanup fixed file data table references
WARNING: refcount bug in chrdev_open fs	13	syz, C	inconclusive	done	15	2534d	2636d	15/29	2454d	68faa679b8be chardev: Avoid potential use-after-free in 'chrdev_open()'
linux-next boot error: general protection fault in do_mount_root fs	-1				9	2518d	2518d	15/29	2459d	7de7de7ca0ae Fix root mounting with no mount options
upstream boot error: general protection fault in do_mount_root fs	-1				12	2518d	2518d	15/29	2459d	7de7de7ca0ae Fix root mounting with no mount options
kernel BUG at fs/pipe.c:LINE! fs	-1	syz, C	done		693	2526d	2532d	15/29	2496d	8c7b8c34ae95 pipe: Remove assertion from pipe_poll()
general protection fault in io_commit_cqring fs	2	syz, C	done		3	2550d	2551d	15/29	2522d	15dff286d0e0 io_uring: check for validity of ->rings in teardown
INFO: task hung in io_wq_destroy fs	1	syz, C	done		20	2536d	2567d	15/29	2522d	b60fda6000a9 io-wq: wait for io_wq_create() to setup necessary workers
INFO: trying to register non-static key in io_cqring_ev_posted fs	-1	syz, C	done		6	2537d	2549d	15/29	2522d	eb065d301e8c io_uring: io_allocate_scq_urings() should return a sane state
WARNING in iov_iter_pipe fs	-1	syz, C	done		1117	2539d	2557d	15/29	2522d	419e9c38aa07 iomap: Fix pipe page leakage during splicing
BUG: unable to handle kernel paging request in io_wq_cancel_all fs	8	syz, C	done		2	2565d	2565d	15/29	2522d	975c99a57096 io_uring: io_wq_create() returns an error pointer, not NULL
KASAN: invalid-free in io_sqe_files_unregister fs	24	syz, C	done		3	2554d	2554d	15/29	2522d	46568e9be70f io_uring: fix error clear of ->file_table in io_sqe_files_register()
KASAN: use-after-free Read in do_mount fs	19	syz	done		6	2580d	2588d	14/29	2535d	0ecee6699064 fs/namespace.c: fix use-after-free of mount in mnt_warn_timestamp_expiry()
KMSAN: use-after-free in hidraw_ioctl lsm fs	18				1	2587d	2587d	13/29	2537d	416dacb819f5 HID: hidraw: Fix invalid read in hidraw_ioctl
KASAN: use-after-free Read in io_uring_setup fs	19	syz	error		1	2568d	2567d	13/29	2541d	044c1ab399af io_uring: don't touch ctx in setup after ring fd install
KASAN: use-after-free Read in ep_scan_ready_list fs	19	syz, C		done	39	3006d	3041d	13/29	2544d	430ac66eb4c5 net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree()
WARNING in mark_lock (2) fs	-1				14	2574d	2601d	13/29	2568d	8e00c4e9dd85 writeback: fix use-after-free in finish_writeback_work()
general protection fault in finish_writeback_work fs	2				10	2577d	2602d	13/29	2568d	8e00c4e9dd85 writeback: fix use-after-free in finish_writeback_work()
INFO: trying to register non-static key in finish_writeback_work fs	-1	syz	error		1	2603d	2600d	13/29	2568d	8e00c4e9dd85 writeback: fix use-after-free in finish_writeback_work()
INFO: task syz-executor can't die for more than 143 seconds. fs	-1	syz, C	done		61	2597d	2705d	13/29	2580d	8619e5bdeee8 /dev/mem: Bail out upon SIGKILL. 7c3a6aedcd6a kexec: bail out upon SIGKILL when allocating memory. 8f9e86ee7959 staging: android: ion: Bail out upon SIGKILL when allocating memory.
WARNING in kfree driver-core fs	-1	syz, C	done		2	2627d	2626d	13/29	2580d	43ce4c1feadb vfs: Add a single-or-reconfig keying to vfs_get_super()
WARNING in __blkdev_put (2) fs	-1	syz			3082	2644d	2651d	12/29	2619d	e91455bad5cf bdev: Fixup error handling in blkdev_get()
kernel panic: corrupted stack end in dput fs	2	syz	done		1	2686d	2686d	12/29	2629d	95fa145479fb bpf: sockmap/tls, close can race with map free
INFO: task hung in io_uring_release fs	1				24	2675d	2693d	12/29	2651d	a4c0b3decb33 io_uring: fix io_sq_thread_stop running in front of io_sq_thread
general protection fault in do_move_mount (2) fs	2	syz	done		7	2691d	2699d	12/29	2658d	570d7a98e7d6 vfs: move_mount: reject moving kernel internal mounts
possible deadlock in io_submit_one fs	4	syz, C	done		1779	2662d	2833d	12/29	2658d	cbcfa130a911 fs/userfaultfd.c: disable irqs for fault_pending and event locks
possible deadlock in userfaultfd_read (2) fs	4				228	2681d	2780d	12/29	2658d	cbcfa130a911 fs/userfaultfd.c: disable irqs for fault_pending and event locks
WARNING in notify_change fs	-1	syz, C			566	2745d	3134d	12/29	2663d	f69e749a4935 Abort file_remove_privs() for non-reg. files
WARNING in fanotify_handle_event fs	-1	syz, C	done		5	2700d	2699d	12/29	2677d	c285a2f01d69 fanotify: update connector fsid cache on add mark
BUG: Dentry still in use [unmount of tmpfs tmpfs] fs	-1				2	2709d	2708d	12/29	2677d	1b0b9cc8d379 vfs: fsmount: add missing mntget()
BUG: Dentry still in use [unmount of hugetlbfs hugetlbfs] fs	-1	syz, C	done		3	2699d	2699d	12/29	2677d	1b0b9cc8d379 vfs: fsmount: add missing mntget()
possible deadlock in aio_poll fs	4	syz, C			5041	2836d	2980d	12/29	2688d	ae62c16e105a userfaultfd: disable irqs when taking the waitqueue lock
INFO: task hung in __ia32_sys_io_uring_enter fs	1				2	2763d	2764d	12/29	2694d	b19062a56726 io_uring: fix possible deadlock between io_uring_{enter,register}
INFO: task hung in __x64_sys_io_uring_enter fs	1				12	2757d	2764d	12/29	2694d	b19062a56726 io_uring: fix possible deadlock between io_uring_{enter,register}
INFO: task hung in __get_super fs	1	syz, C			80	2697d	3142d	12/29	2697d	33ec3e53e7b1 loop: Don't change loop device under exclusive opener
general protection fault in do_move_mount fs	2				3	2740d	2739d	12/29	2703d	05883eee857e do_move_mount(): fix an unsafe use of is_anon_ns()
general protection fault in load_elf_binary mm fs	2	syz, C	done		15	2776d	2780d	12/29	2703d	cc338010a233 fs/binfmt_elf.c: free PT_INTERP filename ASAP
kernel BUG at mm/slab.c:LINE! (4) fs	-1				12	2715d	2782d	12/29	2703d	4f661542a402 tcp: fix zerocopy and notsent_lowat issues
general protection fault in put_fs_context fs	2	syz, C			9	2930d	2930d	12/29	2706d	8d0347f6c3a9 convert do_remount_sb() to fs_context
INFO: task hung in __io_uring_register fs	1	syz, C	done		51	2757d	2765d	12/29	2721d	b19062a56726 io_uring: fix possible deadlock between io_uring_{enter,register}
general protection fault in fanotify_handle_event fs	2	syz	done		5	2760d	2760d	12/29	2721d	b1da6a51871c fsnotify: Fix NULL ptr deref in fanotify_get_fsid()
BUG: unable to handle kernel paging request in do_mount fs	8	syz, C			194	2931d	2969d	12/29	2728d	3e1aeb00e6d1 vfs: Implement a filesystem superblock creation/configuration context
possible deadlock in seq_read fs	4	syz, C			19074	2773d	3263d	12/29	2766d	73601ea5b7b1 fs/open.c: allow opening only regular files during execve()
KASAN: use-after-free Read in link_path_walk fs	19	syz	done		5	2885d	2901d	12/29	2766d	1da6c4d9140c bpf: fix use after free in bpf_evict_inode
KASAN: use-after-free Read in trailing_symlink fs	19	syz	done		2	2886d	2901d	12/29	2766d	1da6c4d9140c bpf: fix use after free in bpf_evict_inode
KASAN: use-after-free Read in path_lookupat fs	19	syz	done		1	2901d	2901d	12/29	2766d	1da6c4d9140c bpf: fix use after free in bpf_evict_inode
KASAN: use-after-free Read in filemap_fault fs mm	19	syz, C			277	2860d	2871d	11/29	2777d	6b4c9f446981 filemap: drop the mmap_sem for all blocking operations
possible deadlock in __do_page_fault fs mm	4	syz, C			820	2803d	2970d	11/29	2781d	fb4415a12632 staging: android: ashmem: Don't call fallocate() with ashmem_mutex held.
possible deadlock in vfs_fallocate fs	4	syz, C			3981	3003d	3114d	11/29	2781d	fb4415a12632 staging: android: ashmem: Don't call fallocate() with ashmem_mutex held.
BUG: unable to handle kernel NULL pointer dereference in __generic_file_write_iter fs mm	10				5	2808d	2816d	11/29	2781d	ac5ceccce550 x86/unwind: Add hardcoded ORC entry for NULL f4f34e1b82eb x86/unwind: Handle NULL pointer calls better in frame unwinder
possible deadlock in userfaultfd_read fs	4				239	2781d	2836d	11/29	2781d	d3d6a18d7d35 aio: Fix locking in aio_poll()
BUG: unable to handle kernel paging request in dput (2) fs	8	syz, C			4	2837d	2838d	11/29	2803d	36991ca68db9 blk-mq: protect debugfs_create_files() from failures 37ea7b630ae5 debugfs: debugfs_lookup() should return NULL if not found
INFO: task hung in generic_file_write_iter fs mm	1				7	2896d	3034d	11/29	2803d	04906b2f542c blockdev: Fix livelocks on loop device
general protection fault in __dentry_path fs	2	syz, C			2082	2805d	2838d	11/29	2803d	8ed0579c12b2 kvm: properly check debugfs dentry before using it
KASAN: use-after-free Read in posix_lock_inode fs	19	syz			5	2866d	2866d	11/29	2853d	bf77ae4c98d7 locks: fix error in locks_move_blocks()
KASAN: use-after-free Read in locks_delete_block fs	19	syz			4	2894d	2917d	11/29	2853d	16306a61d3b7 fs/locks: always delete_block after waiting.
WARNING in userfaultfd_ioctl fs	-1	syz, C			11	2886d	2896d	11/29	2872d	01e881f5a1fc userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered
WARNING: kmalloc bug in krealloc fs	-1	syz, C			2	3037d	3036d	11/29	2917d	61448479a9f2 mm: don't warn about large allocations for slab
WARNING: kmalloc bug in vfs_getxattr_alloc fs	-1	syz, C			9	2992d	3034d	11/29	2917d	61448479a9f2 mm: don't warn about large allocations for slab
KASAN: slab-out-of-bounds Read in fscache_alloc_cookie fs	17	syz, C			1936	2942d	3043d	11/29	2931d	1ff22883b0b2 fscache: Fix incomplete initialisation of inline key space fa520c47eaa1 fscache: Fix out of bound read in long cookie keys
general protection fault in ubifs_mount fs mtd	2	syz, C			216	2969d	2987d	11/29	2949d	37f31b6ca431 ubifs: Check for name being NULL while mounting
WARNING in __fsnotify_recalc_mask fs	-1	syz			9	3001d	3003d	10/29	2979d	d3bc0fa8411c fsnotify: fix false positive warning on inode delete
BUG: soft lockup in shrink_dcache_parent (2) fs	1				7	3071d	3078d	10/29	2980d	4fb48871409e restore cond_resched() in shrink_dcache_parent()
INFO: task hung in fsnotify_mark_destroy_workfn fs	1	syz			13	3012d	3126d	10/29	2982d	128f38041035 android: binder: Rate-limit debug and userspace triggered err msgs
BUG: soft lockup in d_walk fs	1	syz, C			163	3071d	3117d	8/29	2985d	4fb48871409e restore cond_resched() in shrink_dcache_parent()
general protection fault in send_sigurg_to_task fs	2	syz, C			6	3005d	3008d	8/29	2993d	84fe4cc09abc signal: Don't send signals to tasks that don't exist
general protection fault in send_sigio_to_task fs	2	syz, C			176	3004d	3008d	8/29	2993d	84fe4cc09abc signal: Don't send signals to tasks that don't exist
kernel BUG at mm/memory.c:LINE! mm fs	-1				1	3044d	3043d	8/29	3013d	bfd40eaff5ab mm: fix vma_is_anonymous() false-positives
kernel BUG at fs/userfaultfd.c:LINE! (2) fs	-1	syz, C			8	3018d	3037d	8/29	3013d	31e810aa1033 userfaultfd: remove uffd flags from vma->vm_flags if UFFD_EVENT_FORK fails
KASAN: stack-out-of-bounds Read in __d_lookup_rcu fs	17				1	3033d	3033d	8/29	3014d	99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
KASAN: stack-out-of-bounds Read in locks_remove_posix fs	17	syz, C			1	3031d	3031d	8/29	3014d	99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
KASAN: slab-out-of-bounds Read in getname_kernel fs	17	syz, C			8	3038d	3138d	8/29	3028d	02f51d45937f autofs: fix slab out of bounds read in getname_kernel()
KASAN: global-out-of-bounds Write in string fs	21	syz, C			7	3083d	3140d	8/29	3028d	fe10e398e860 reiserfs: fix buffer overflow with long warning messages
BUG: unable to handle kernel paging request in dput fs	8	syz, C			26	3074d	3077d	8/29	3043d	d85b399b64e8 fix proc_fill_cache() in case of d_alloc_parallel() failure
BUG: unable to handle kernel NULL pointer dereference in do_select fs	10				45	3053d	3053d	8/29	3043d	e88958e6369a net: handle NULL ->poll gracefully
general protection fault in wb_workfn (2) fs	2				38	3063d	3087d	8/29	3043d	3ee7e8697d58 bdi: Fix another oops in wb_workfn()
KASAN: use-after-free Read in __vfs_write fs	19	syz			14	3072d	3075d	8/29	3043d	66e58e0ef80a bpfilter: fix race in pipe access
general protection fault in pipe_write fs	2	syz			1	3074d	3074d	8/29	3043d	66e58e0ef80a bpfilter: fix race in pipe access
BUG: unable to handle kernel NULL pointer dereference in ep_item_poll fs	10	syz, C			15	3053d	3053d	8/29	3043d	e88958e6369a net: handle NULL ->poll gracefully
general protection fault in __vfs_write fs	2	syz			25	3071d	3075d	8/29	3043d	66e58e0ef80a bpfilter: fix race in pipe access
KASAN: use-after-free Read in pipe_read fs	19	syz, C			3	3073d	3075d	8/29	3043d	66e58e0ef80a bpfilter: fix race in pipe access
KASAN: use-after-free Read in finish_wait fs	19				8	3072d	3075d	8/29	3043d	66e58e0ef80a bpfilter: fix race in pipe access
KASAN: use-after-free Read in __kernel_write fs	19	syz			7	3072d	3075d	8/29	3043d	66e58e0ef80a bpfilter: fix race in pipe access
KASAN: null-ptr-deref Write in simple_write_to_buffer fs	12	syz, C			5	3083d	3108d	8/29	3043d	fc14eebfc208 PM / hibernate: Fix oops at snapshot_write()
general protection fault in touch_atime fs	2	syz			6	3071d	3075d	8/29	3043d	66e58e0ef80a bpfilter: fix race in pipe access
BUG: soft lockup in do_raw_spin_unlock (2) fs	1				1	3071d	3071d	8/29	3043d	4fb48871409e restore cond_resched() in shrink_dcache_parent()
general protection fault in __mnt_want_write fs	2				1	3073d	3073d	8/29	3043d	66e58e0ef80a bpfilter: fix race in pipe access
WARNING in do_dentry_open fs	-1	syz, C			26	3067d	3074d	8/29	3043d	b16558579576 bpf: implement dummy fops for bpf objects
INFO: task hung in namespace_unlock fs	1				15	3047d	3056d	8/29	3043d	ebec3f8f5271 n_tty: Access echo_* variables carefully.
general protection fault in vfs_read fs	2	syz			2	3073d	3075d	8/29	3043d	66e58e0ef80a bpfilter: fix race in pipe access
BUG: unable to handle kernel NULL pointer dereference in do_sys_poll fs	10	syz, C			297	3053d	3053d	8/29	3043d	e88958e6369a net: handle NULL ->poll gracefully
WARNING in sysfs_remove_group driver-core fs	-1	syz, C			11125	3044d	3298d	8/29	3043d	d3349b6b3c37 loop: remember whether sysfs_create_group() was done
INFO: rcu detected stall in d_walk fs	1	syz, C			25680	3069d	3131d	8/29	3043d	4fb48871409e restore cond_resched() in shrink_dcache_parent()
KASAN: use-after-free Read in pipe_wait fs	19				2	3072d	3073d	8/29	3043d	66e58e0ef80a bpfilter: fix race in pipe access
KASAN: use-after-free Read in remove_wait_queue (2) fs	19	syz, C			4	3164d	3174d	5/29	3075d	af8d3c7c001a ppp: remove the PPPIOCDETACH ioctl
general protection fault in wb_workfn fs	2				63	3097d	3124d	5/29	3096d	b8b784958ecc bdi: Fix oops in wb_workfn()
INFO: task hung in handle_userfault fs	1				3	3110d	3133d	5/29	3096d	8236b0ae31c8 bdi: wake up concurrent wb_shutdown() callers.
KASAN: use-after-free Read in debugfs_remove (2) driver-core fs	19				1	3122d	3120d	5/29	3096d	f53823c18131 bdi: Fix use after free bug in debugfs_remove()
INFO: task hung in __do_page_fault fs	1				1	3128d	3128d	5/29	3096d	8236b0ae31c8 bdi: wake up concurrent wb_shutdown() callers.
WARNING: refcount bug in put_pid_ns fs	13	syz			6	3143d	3143d	5/29	3105d	8e04944f0ea8 mm,vmscan: Allow preallocating memory for register_shrinker().
BUG: corrupted list in __dentry_kill fs	8	syz, C			35	3123d	3143d	5/29	3105d	4a3877c4cedd rpc_pipefs: fix double-dput()
INFO: task hung in __blkdev_get fs	1	syz, C			662	3129d	3255d	5/29	3105d	1e047eaab3bb block/loop: fix deadlock after loop_set_status
KASAN: null-ptr-deref Read in xattr_getsecurity fs	11				68	3121d	3133d	5/29	3105d	1f5781725dcb commoncap: Handle memory allocation failure.
WARNING in format_decode fs	-1	syz, C			1	3143d	3143d	5/29	3105d	9ad553abe66f fs/reiserfs/journal.c: add missing resierfs_warning() arg
WARNING in kmem_cache_free fs	-1				1	3137d	3137d	5/29	3105d	eea0d3ea7546 crypto: drbg - set freed buffers to NULL
KASAN: use-after-free Read in remove_wait_queue fs	19	syz, C			7	3180d	3190d	4/29	3176d	5eeb2ca02a2f ANDROID: binder: synchronize_rcu() when using POLLFREE.
KASAN: use-after-free Read in __fput fs	19				23	3258d	3292d	4/29	3189d	a5739435b5a3 fix kcm_clone()
WARNING in sysfs_warn_dup driver-core fs	-1				11	3203d	3246d	4/29	3198d	5d54f948aaac sysfs: turn WARN() into pr_warn()
KASAN: use-after-free Read in __lock_acquire (2) fs	19	syz, C			589	3201d	3276d	4/29	3198d	f5cb779ba163 ANDROID: binder: remove waitqueue when thread exits.
WARNING in register_lock_class fs	-1	syz, C			2	3245d	3241d	4/29	3198d	f5cb779ba163 ANDROID: binder: remove waitqueue when thread exits.
general protection fault in page_mapping fs mm	2	syz, C			46	3224d	3252d	4/29	3201d	7d11f77f84b2 RDS: null pointer dereference in rds_atomic_free_op
BUG: unable to handle kernel NULL pointer dereference in page_mapping fs mm	10	syz, C			4	3244d	3247d	4/29	3201d	7d11f77f84b2 RDS: null pointer dereference in rds_atomic_free_op
BUG: unable to handle kernel paging request in devpts_mntget fs	8	syz, C			21	3214d	3291d	4/29	3201d	c9cc8d01fb04 devpts: fix error handling in devpts_mntget()
KASAN: use-after-free Read in __wake_up_common fs	19	syz, C			888	3201d	3211d	4/29	3201d	4cd879515d68 vhost_net: stop device during reset owner
general protection fault in show_timer fs	2	syz, C			10	3245d	3264d	4/29	3201d	cef31d9af908 posix-timer: Properly check sigevent->sigev_notify
kernel BUG at fs/userfaultfd.c:LINE! fs	-1	syz, C			3	3244d	3242d	4/29	3201d	0cbb4b4f4c44 userfaultfd: clear the vma->vm_userfaultfd_ctx if UFFD_EVENT_FORK fails
general protection fault in proc_flush_task fs	2	syz			2	3248d	3264d	4/29	3206d	c0ee554906c3 pid: Handle failure to allocate the first pid in a pid namespace
BUG: unable to handle kernel NULL pointer dereference in proc_flush_task fs	10	syz			1	3248d	3244d	4/29	3206d	c0ee554906c3 pid: Handle failure to allocate the first pid in a pid namespace
KASAN: use-after-free Read in handle_userfault fs	19	syz, C			151	3235d	3298d	3/29	3223d	0cbb4b4f4c44 userfaultfd: clear the vma->vm_userfaultfd_ctx if UFFD_EVENT_FORK fails
WARNING in lock_release fs	-1	syz, C			72	3245d	3278d	3/29	3242d	ca0168e8a77c alloc_super(): do ->s_umount initialization earlier
general protection fault in iov_iter_fault_in_readable fs	2				5	3284d	3292d	3/29	3266d	ee74d9967b82 tun: do not arm flow_gc_timer in tun_flow_init()
KASAN: use-after-free Read in fsnotify fs	19				1	3327d	3291d	3/29	3266d	b3a006600582 dnotify: Handle errors from fsnotify_add_mark_locked() in fcntl_dirnotify()
kernel BUG at fs/notify/dnotify/dnotify.c:LINE! fs	-1				19	3283d	3295d	3/29	3266d	b3a006600582 dnotify: Handle errors from fsnotify_add_mark_locked() in fcntl_dirnotify()