Applied filters: WithRepro (drop) Label=subsystems:fs (drop)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
KASAN: slab-use-after-free Read in lookup_noperm_common prio:high usb fs 19 syz, C 11 12d 39d 21/29 never b15b548d52b4 i2c: core: fix debugfs UAF on adapter removal
possible deadlock in configfs_rmdir prio:low fs 4 syz, C error 2295 24m 41d 24/29 never 9dbf74f4022f usb: gadget: f_tcm: fix deadlock in usbg_make_tpg()
possible deadlock in __balance_push_cpu_stop prio:high fs 4 syz, C 40 19m 9d20h 2/29 never mm/slab: disallow kfree_rcu_sheaf() on PREEMPT_RT again
BUG: sleeping function called from invalid context in procfs_procmap_ioctl fs 5 syz done 101 430d 432d 2/29 never mm/maps: move kmalloc() call location in do_procmap_query() out of RCU critical section
KASAN: slab-use-after-free Read in sysfs_emit prio:high fs 19 syz, C 6 7d05h 32d 2/29 never media: redrat3: fix UAF in probe error path leaving rc device registered
INFO: task hung in io_sq_thread_stop fs io-uring 1 syz, C done 211 2030d 2189d 1/29 never io_uring: don't sleep schedule in SQPOLL thread if we need to park
kernel BUG in free_bprm fs mm -1 syz, C done 445 670d 671d 1/29 never exec: NULL out bprm->argv0 when it is an ERR_PTR
WARNING in eventfs_create_events_dir fs trace prio:low -1 syz, C error 9 2d06h 14d 21/29 never 1704aaaf5d22 eventfs: Initialize ei->children and ei->list in init_ei()
KASAN: slab-use-after-free Write in config_item_get prio:normal fs 22 syz, C error 8 20d 40d 12/29 never f06c2d26d199 configfs: unhash the dentry before dropping the item in rmdir
general protection fault in bch2_prt_vprintf fs 2 syz, C error inconclusive 4 610d 647d 2/29 never bcachefs: journal_entry_btree_keys_to_text() is more careful
WARNING in bch2_prt_printf prio:high fs -1 syz, C done error 103 345d 850d 2/29 never bcachefs: journal_entry_btree_keys_to_text() is more careful
KASAN: use-after-free Read in check_extent_overbig prio:high fs 19 syz, C done done 18 359d 641d 2/29 never bcachefs: fix check_extent_overbig() call
kernel BUG in bch2_btree_path_peek_slot prio:low fs -1 syz, C error error 1546 469d 647d 2/29 never bcachefs: fix assert in bch2_btree_path_traverse_cached()
kernel BUG in do_bch2_trans_commit_to_journal_replay prio:normal fs -1 syz 22 411d 414d 2/29 never bcachefs: do_bch2_trans_commit_to_journal_replay handles accounting
kernel BUG in bch2_printbuf_exit prio:high fs -1 syz, C error 29 413d 417d 2/29 never bcachefs: convert str_hash.c to CLASS
kernel BUG in bch2_btree_repair_topology_recurse prio:high fs -1 syz, C done 7 343d 403d 2/29 never bcachefs: btree_check_root_boundaries()
INFO: task hung in __bch2_fs_stop prio:high fs 1 syz, C done 1589 339d 814d 2/29 never bcachefs: Increase BCH_MIN_NR_NBUCKETS
INFO: task hung in __closure_sync prio:high fs 1 syz, C done 8591 330d 857d 2/29 never bcachefs: Increase BCH_MIN_NR_NBUCKETS
WARNING in bchfs_truncate fs -1 syz, C done 366 346d 856d 2/29 never bcachefs: Increase BCH_MIN_NR_NBUCKETS
UBSAN: array-index-out-of-bounds in bch2_accounting_validate prio:high fs 15 syz, C done 23 332d 399d 2/29 never bcachefs: Ignore accounting key type larger than BCH_DISK_ACCOUNTING_TYPE_NR
KMSAN: uninit-value in __bch2_alloc_v4_to_text prio:high fs 7 syz, C 3 442d 447d 2/29 never bcachefs: Fix refs to undefined fields in __bch2_alloc_v4_to_text()
INFO: task hung in bchfs_fpunch (2) prio:high fs mm 1 syz, C done 2 396d 440d 2/29 never bcachefs: Fix readahead involved deadlock
INFO: task hung in bchfs_fallocate (2) fs 1 syz, C done inconclusive 6 386d 614d 2/29 never bcachefs: Fix readahead involved deadlock
INFO: task hung in bch2_readahead prio:high fs 1 syz, C done 375 359d 840d 2/29 never bcachefs: Fix readahead involved deadlock
INFO: task hung in invalidate_inode_pages2_range (3) prio:high fs 1 syz, C done 57 90d 556d 2/29 never bcachefs: Fix readahead involved deadlock
KASAN: slab-out-of-bounds Write in bch2_dirent_init_name prio:high fs 21 syz, C error 1496 322d 447d 2/29 never bcachefs: Fix padding zeroout when creating casefolded dirents
KMSAN: uninit-value in bch2_check_subvols prio:high fs 7 syz, C 53 344d 433d 2/29 never bcachefs: Fix missing compat code in check_subvol()
WARNING in bch2_dev_free (2) prio:low fs -1 syz, C done 5 412d 417d 2/29 never bcachefs: Fix __bch2_fs_read_write() error path
kernel BUG in __journal_res_get (3) prio:high fs -1 syz, C inconclusive 175 322d 446d 2/29 never bcachefs: Fix __bch2_fs_read_write() error path
KASAN: use-after-free Read in bch2_check_dirents fs 19 syz, C done 769 342d 661d 2/29 never bcachefs: Fix UAF in check_dirent()
KASAN: use-after-free Read in check_dirent fs 19 syz, C done 13 381d 563d 2/29 never bcachefs: Fix UAF in check_dirent()
KASAN: slab-use-after-free Write in bch2_do_discards prio:high fs 22 syz 137 343d 413d 2/29 never bcachefs: Fix UAF by journal write path
KASAN: slab-use-after-free Write in bch2_get_next_dev prio:high fs 22 syz, C 1331 322d 416d 2/29 never bcachefs: Fix UAF by journal write path
WARNING in bch2_fs_journal_start prio:high fs -1 syz, C done 14 444d 464d 2/29 never bcachefs: Don't allow mounting with crazy numbers of dirty journal entries
general protection fault in __bch2_err_trace prio:normal fs 2 syz, C done 25 342d 398d 2/29 never bcachefs: Delete faulty read_only/nochanges check in fs_open()
KMSAN: uninit-value in bch2_alloc_sectors_start_trans (2) prio:high fs 7 syz 875 343d 509d 2/29 never bcachefs: Add missing ei_last_dirtied update
memory leak in adfs_init_fs_context prio:low fs 3 syz, C 2 51d 268d 2/29 never adfs: fix memory leak in sb->s_fs_info
INFO: task hung in remove_inode_hugepages fs mm 1 syz, C done 52 699d 791d 1/29 never INFO: task hung in remove_inode_hugepages
KASAN: slab-use-after-free Read in debugfs_u32_get (2) prio:normal fs 19 syz 1 72d 82d 29/29 40d 2e996ca81f95 netdevsim: remove ethtool debugfs files before freeing netdev
KASAN: slab-use-after-free Read in reverse_path_check_proc prio:high fs 19 syz, C 113 91d 108d 29/29 54d a1e9718b406b eventpoll: restore EP_UNACTIVE_PTR sentinel for ctx->tfile_check_list
general protection fault in __umount_mnt fs 2 syz, C error 21 160d 171d 29/29 109d ad4999496e73 mount: always duplicate mount
UBSAN: shift-out-of-bounds in minix_statfs fs -1 syz, C inconclusive error 75 224d 1729d 29/29 124d 8c97a6ddc956 minix: Add required sanity checking to minix_check_superblock()
possible deadlock in __configfs_open_file fs 4 syz, C 29 206d 624d 29/29 124d 14d4ac19d189 scsi: target: Fix recursive locking in __configfs_open_file()
BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio (4) fs 10 syz, C done 5746 230d 660d 29/29 124d 777a8560fd29 lib/buildid: use __kernel_read() for sleepable context
memory leak in __shmem_file_setup fs 3 syz, C 1 242d 238d 29/29 124d 605f6586ecf7 mm/vma: do not leak memory when .mmap_prepare swaps the file
general protection fault in grab_requested_root fs 2 syz, C 21 194d 207d 29/29 124d 81f16c9778d7 statmount: Fix the null-ptr-deref in do_statmount()
kernel BUG in sctp_getsockopt_peeloff_common fs -1 syz, C done 6 279d 280d 29/29 225d afb9917d9b37 Revert "net/socket: convert sock_map_fd() to FD_ADD()"
kernel BUG in socket fs -1 syz, C 145 262d 257d 29/29 225d afb9917d9b37 Revert "net/socket: convert sock_map_fd() to FD_ADD()"
memory leak in debugfs_change_name fs 3 syz, C 1 277d 273d 29/29 229d d412ff9e26eb debugfs: Fix memleak in debugfs_change_name().
WARNING in minix_unlink fs -1 syz, C inconclusive done 458 272d 654d 29/29 229d 009a2ba40303 Fix a drop_nlink warning in minix_rename
memory leak in getname_flags fs 3 syz, C 1 257d 257d 29/29 229d b14fad555302 io_uring: fix filename leak in __io_openat_prep()
KASAN: slab-use-after-free Read in driver_remove_file fs 19 syz, C error done 296 276d 405d 29/29 230d 72262330f7b3 comedi: c6xdigio: Fix invalid PNP driver unregistration
general protection fault in fd_install fs 2 syz, C 64 275d 277d 29/29 243d 8cf01d0c4372 mqueue: correct the type of ro to int
WARNING in minix_rmdir fs -1 syz, C inconclusive 92 293d 607d 29/29 243d d3e0e8661ceb Fix a drop_nlink warning in minix_rmdir
WARNING in nsproxy_ns_active_get fs -1 syz, C 377 299d 305d 29/29 243d cefd55bd2159 nsproxy: fix free_nsproxy() and simplify create_new_namespaces()
kernel BUG in may_open (2) fs -1 syz, C done 17716 243d 426d 29/29 243d 34ab4c75588c bfs: Reconstruct file type when loading from disk 7f9d34b0a7cb cramfs: Verify inode mode when loading from disk 005d4b0d33f6 hfsplus: Verify inode mode when loading from disk 0a9e74051313 isofs: Verify inode mode when loading from disk 7a5aa54fba2b jfs: Verify inode mode when loading from disk 73861970938a minixfs: Verify inode mode when loading from disk 4aead50caf67 nilfs2: reject invalid file types when reading inodes 4e8011ffec79 ntfs3: pretend $Extend records as regular files bc107a619f02 squashfs: verify inode mode when loading from disk
KMSAN: kernel-infoleak in hugetlbfs_read_iter fs mm 9 syz, C 7 302d 301d 29/29 243d de8798965fd0 mm/memfd: fix information leak in hugetlb folios
general protection fault in fsnotify_destroy_group fs 2 syz, C error 2 286d 284d 29/29 243d 7129098f4f7b fanotify: convert fanotify_init() to FD_PREPARE()
WARNING in nsproxy_ns_active_put fs -1 syz, C done 38 300d 305d 29/29 243d cefd55bd2159 nsproxy: fix free_nsproxy() and simplify create_new_namespaces()
WARNING in minix_rename fs -1 syz error 7 353d 440d 29/29 243d 009a2ba40303 Fix a drop_nlink warning in minix_rename
WARNING in destroy_super_work fs -1 syz done 107 299d 304d 29/29 243d f8d5a8970d2f ns: handle setns(pidfd, ...) cleanly
general protection fault in mntput fs 2 syz, C error 17 279d 284d 29/29 243d 05885f41658c namespace: convert fsmount() to FD_PREPARE()
BUG: sleeping function called from invalid context in hook_sb_delete fs 5 syz, C done 11887 261d 349d 29/29 243d 56325e8c68c0 landlock: fix splats from iput() after it started calling might_sleep()
WARNING in dax_iomap_rw fs -1 syz, C 5 327d 341d 29/29 280d 154d1e7ad9e5 dax: skip read lock assertion for read-only filesystems
WARNING in invalidate_bh_lru fs -1 syz, C done done 5172 527d 1355d 29/29 293d 6f861765464f fs: Block writes to mounted block devices
VFS: Busy inodes after unmount (use-after-free) (3) fs 2 syz, C error 85 312d 342d 29/29 293d 56094ad3eaa2 vfs: Don't leak disconnected dentries on umount
kernel BUG in qlist_free_all (2) fs -1 syz, C done 5 327d 358d 29/29 293d 25718fdcbdd2 net: gro_cells: Use nested-BH locking for gro_cell
INFO: task hung in bch2_direct_write (2) fs 1 syz, C unreliable done 15 378d 387d 29/29 299d f2c61db29f27 Remove bcachefs core code
INFO: task hung in v9fs_file_fsync fs mm 1 syz, C done 14 345d 385d 29/29 313d e8fe3f07a357 9p/trans_fd: p9_fd_request: kick rx thread if EPOLLIN
WARNING in sysfs_emit_at fs -1 syz, C 2 366d 362d 29/29 313d 9dfec4a51df9 USB: core: remove the move buf action
general protection fault in iter_file_splice_write fs 2 syz, C done done 2812 383d 840d 29/29 327d netfs: Fix unbuffered write error handling
WARNING in path_noexec mm fs -1 syz, C done 14318 342d 427d 29/29 342d secretmem: use SB_I_NOEXEC
kernel BUG in bch2_journal_keys_peek_max fs -1 syz, C done 45 434d 572d 29/29 357d 425da82c63e3 bcachefs: btree_iter: fix updates, journal overlay
KASAN: use-after-free Read in bch2_btree_node_read_done fs 19 syz, C done 64 441d 651d 29/29 368d d89a34b14df5 bcachefs: Move bset size check before csum check
kernel BUG in bch2_btree_path_level_init (3) fs -1 syz, C done 489 368d 625d 29/29 368d 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
kernel BUG in __bch2_bkey_compat fs -1 syz, C done done 5 451d 451d 29/29 368d 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
kernel BUG in bch2_trans_update_by_path fs -1 syz, C done 857 370d 445d 29/29 368d c72d628469b8 bcachefs: Fix btree for nonexistent tree depth
BUG: unable to handle kernel paging request in __bch2_bkey_unpack_key fs 8 syz, C 75 444d 468d 29/29 368d 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
kernel panic: trans should be locked, unlocked by bch2_btree_update_start fs 2 syz, C error error 361 450d 641d 29/29 368d 5c4acbc8ce90 bcachefs: Don't unlock the trans if ret doesn't match BCH_ERR_operation_blocked
kernel BUG in bch2_bkey_cmp_packed (2) fs -1 syz, C 7 452d 462d 29/29 368d 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
kernel BUG in bch2_reconstruct_snapshots fs -1 syz, C done done 7 476d 567d 29/29 368d b2e2bed11980 bcachefs: Add missing key type checks to check_snapshot_exists()
BUG: unable to handle kernel NULL pointer dereference in bch2_btree_update_start fs 10 syz, C 6 438d 451d 29/29 368d 56be92c63f02 bcachefs: Fix pool->alloc NULL pointer dereference
KASAN: use-after-free Read in bch2_checksum fs 19 syz, C error done 8 472d 484d 29/29 368d d89a34b14df5 bcachefs: Move bset size check before csum check
kernel BUG in bch2_btree_node_iter_init (2) fs -1 syz, C done 3 425d 425d 29/29 368d 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
KASAN: slab-use-after-free Read in bch2_str_hash_repair_key fs 19 syz, C done 226 434d 454d 29/29 368d 9b54efe66c9b bcachefs: Fix alloc_req use after free
kernel BUG in __bch2_bkey_unpack_key fs -1 syz, C 43 447d 468d 29/29 368d 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
UBSAN: shift-out-of-bounds in __bch2_btree_node_hash_insert fs -1 syz, C done 434 430d 614d 29/29 368d 96de8f852031 bcachefs: mark invalid_btree_id autofix
KASAN: slab-use-after-free Read in bch2_bucket_alloc_trans fs 19 syz, C error 550 434d 452d 29/29 368d 9b54efe66c9b bcachefs: Fix alloc_req use after free
UBSAN: shift-out-of-bounds in __bch2_bkey_unpack_key fs -1 syz, C done 54 451d 467d 29/29 368d 03208bd06a61 bcachefs: don't return fsck_fix for unfixable node errors in __btree_err
kernel BUG in __btree_trans_update_by_path fs -1 syz, C done 20 426d 431d 29/29 368d c72d628469b8 bcachefs: Fix btree for nonexistent tree depth
kernel BUG in __bkey_unpack_pos (2) fs -1 syz, C done 24 423d 620d 29/29 368d 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
KASAN: use-after-free Read in poly1305_update fs 19 syz, C done 8 435d 451d 29/29 368d d89a34b14df5 bcachefs: Move bset size check before csum check
BUG: unable to handle kernel NULL pointer dereference in mempool_alloc_noprof (2) fs 10 syz, C done 8 447d 463d 29/29 368d 56be92c63f02 bcachefs: Fix pool->alloc NULL pointer dereference
KASAN: slab-use-after-free Read in bch2_copygc fs 19 syz, C done 25 368d 426d 29/29 368d c02b943f7d12 bcachefs: Fix reference to invalid bucket in copygc
possible deadlock in trans_set_locked fs 4 syz, C 113 446d 647d 29/29 395d ff1dd05f8233 bcachefs: bch2_trans_relock() is trylock for lockdep
WARNING in rhashtable_init_noprof fs -1 syz, C done 131 451d 469d 29/29 397d 757601ef8533 bcachefs: Don't put rhashtable on stack
KASAN: slab-out-of-bounds Read in bch2_sb_members_v1_to_text fs 17 syz, C done 6 454d 454d 29/29 397d 205da7c02673 bcachefs: Don't trust sb->nr_devices in members_to_text()
possible deadlock in __bch2_fsck_err (2) fs 4 syz, C 4 481d 482d 29/29 397d 0acb385ec19c bcachefs: Fix possible console lock involved deadlock
KASAN: slab-out-of-bounds Read in bch2_sb_members_v2_to_text fs 17 syz, C done 34 452d 469d 29/29 397d 205da7c02673 bcachefs: Don't trust sb->nr_devices in members_to_text()
WARNING in __init_work (2) fs -1 syz, C 5971 444d 452d 29/29 397d 757601ef8533 bcachefs: Don't put rhashtable on stack
divide error in bch2_sb_members_v2_to_text fs 2 syz, C done 3 454d 454d 29/29 397d 205da7c02673 bcachefs: Don't trust sb->nr_devices in members_to_text()
UBSAN: array-index-out-of-bounds in bch2_sb_downgrade_update fs 15 syz, C 539 445d 497d 29/29 397d 082c74411491 bcachefs: Fix downgrade_table_extra()
WARNING in bch2_printbuf_make_room fs -1 syz, C error 2 455d 846d 29/29 405d dc5bfdf8eaed bcachefs: fix the memory leak in exception case
BUG: unable to handle kernel paging request in bch2_dirent_to_text fs 8 syz, C done error 3 471d 782d 29/29 412d f39055220f6f bcachefs: Add missing validation for superblock section clean
kernel BUG in vfs_get_tree (2) fs -1 syz, C done 22 460d 456d 29/29 418d 9c6185609947 bcachefs: Call bch2_fs_start before getting vfs superblock
KASAN: use-after-free Read in sysv_new_inode (2) fs 19 syz, C inconclusive error 21224 518d 851d 29/29 418d 448fa70158f9 sysv: Remove the filesystem
BUG: unable to handle kernel NULL pointer dereference in do_pagemap_scan fs 10 syz, C inconclusive done 45 485d 987d 29/29 427d 65c66047259f proc: fix the issue of proc_mem_open returning NULL
kernel BUG in may_open fs -1 syz, C error 137019 427d 523d 29/29 427d cfd86ef7e8e7 anon_inode: use a proper mode internally
WARNING in bch2_dev_free fs -1 syz, C done 258 455d 517d 28/29 451d d62922ba3cfc bcachefs: Prevent granting write refs when filesystem is read-only
KMSAN: uninit-value in bch2_extent_crc_append (2) fs 7 syz, C 4 537d 547d 28/29 452d 53cf2a3daa4c bcachefs: Fix kmsan warnings in bch2_extent_crc_pack()
KMSAN: uninit-value in bch2_trans_start_alloc_update fs 7 syz, C 1051 528d 651d 28/29 453d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_btree_node_iter_init (2) fs 7 syz, C 309 528d 659d 28/29 453d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_inode_v3_validate fs 7 syz, C 5866 529d 657d 28/29 453d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_btree_node_get fs 7 syz, C 18 539d 645d 28/29 453d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_btree_node_check_topology fs 7 syz, C 19 555d 666d 28/29 453d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_dev_freespace_init fs 7 syz, C 432 528d 642d 28/29 453d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_checksum_update (2) fs 19 syz, C done 7 536d 631d 28/29 453d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_bucket_alloc_early fs 7 syz, C 219 532d 670d 28/29 453d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_btree_ptr_v2_validate fs 7 syz, C 55 529d 580d 28/29 453d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_xattr_validate fs 7 syz, C 22 551d 633d 28/29 453d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_alloc_v4_validate (2) fs 7 syz, C 514 532d 659d 28/29 453d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in __bch2_bkey_cmp_left_packed fs 7 syz 2 595d 622d 28/29 453d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in rw_aux_tree_set (2) fs 7 syz, C 2356 529d 654d 28/29 453d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_bkey_val_validate fs 7 syz, C 17 535d 647d 28/29 453d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_bkey_ptrs_validate fs 7 syz, C 15 533d 645d 28/29 453d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_bucket_alloc_trans fs 7 syz, C 15 506d 638d 28/29 453d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_bkey_cmp_packed_inlined (2) fs 7 syz, C 309 529d 649d 28/29 453d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
kernel BUG in bch2_fs_initialize fs -1 syz done 1004 508d 513d 28/29 454d 806776ad9c20 bcachefs: Add missing error handling
kernel BUG in qlist_free_all net fs -1 syz, C done done 12 506d 654d 28/29 454d 3a04334d6282 bcachefs: Fix b->written overflow
WARNING in bch2_bkey_pick_read_device fs -1 syz, C error 89 524d 528d 28/29 454d 3c72d3eea97b bcachefs: Fix WARN() in bch2_bkey_pick_read_device()
KASAN: slab-use-after-free Read in bchfs_read fs 19 syz, C done 34 513d 520d 28/29 454d 34b47e3d73a2 bcachefs: Fix UAF in bchfs_read()
kernel BUG in bch2_run_recovery_pass (2) fs -1 syz, C 70 521d 590d 28/29 454d 962322475bb5 bcachefs: Handle backpointers with unknown data types
BUG: sleeping function called from invalid context in bch2_printbuf_make_room (2) fs 5 syz, C error 59 521d 524d 28/29 454d b2ffadcc7f8f bcachefs: Fix scheduling while atomic from logging changes
kernel BUG in bch2_btree_node_iter_init fs -1 syz, C done done 167 478d 582d 28/29 454d 3a04334d6282 bcachefs: Fix b->written overflow
general protection fault in bch2_snapshot_tree_oldest_subvol fs 8 syz, C done 14 499d 522d 28/29 454d aa6a591f0fd7 bcachefs: Fix null ptr deref in bch2_snapshot_tree_oldest_subvol() 71f8e806a5e4 bcachefs: Stricter checks on "key allowed in this btree"
KASAN: slab-out-of-bounds Read in validate_bset_keys fs 19 syz, C 5 554d 553d 28/29 454d 3a04334d6282 bcachefs: Fix b->written overflow
KMSAN: uninit-value in bch2_write_inode fs 7 syz, C 4476 542d 590d 28/29 454d 58517f4df842 bcachefs: Initialize from_inode members for bch_io_opts
kernel BUG in bch2_stripe_validate fs -1 syz, C done done 6 532d 616d 28/29 454d 71f8e806a5e4 bcachefs: Stricter checks on "key allowed in this btree"
kernel BUG in __journal_res_get (2) fs -1 syz, C error done 1527 454d 662d 28/29 454d 4c0d2c67ac6d bcachefs: Fix early startup error path
BUG: unable to handle kernel paging request in efivarfs_pm_notify fs efi 8 syz, C 1037 551d 561d 28/29 454d cb6ae457bc6a efivarfs: Defer PM notifier registration until .fill_super
kernel BUG in __bch2_trans_commit fs -1 syz, C unreliable 11858 662d 686d 28/29 485d 8b22abb4c840 bcachefs: -o norecovery now bails out of recovery earlier
possible deadlock in bch2_alloc_sectors_start_trans fs 4 syz, C inconclusive 64 643d 664d 28/29 487d 2cd85fea49d8 bcachefs: Don't recurse in check_discard_freespace_key
kernel BUG in bch2_get_scanned_nodes fs -1 syz, C done 101 587d 648d 28/29 488d a6f4794fcd86 bcachefs: struct bkey_validate_context
kernel BUG in bch2_evacuate_bucket fs -1 syz, C done 4 651d 651d 28/29 488d 9e92d6e9efb0 bcachefs: Kill bch2_get_next_backpointer()
VFS: Busy inodes after unmount (use-after-free) fs 2 syz, C error 55684 490d 1321d 28/29 489d 965b5dd1894f ocfs2: free inode when ocfs2_get_init_inode() fails
kernel BUG in bch2_btree_path_traverse_one fs -1 syz, C done 9 637d 670d 28/29 489d f11ca2ab18e3 bcachefs: Guard against backpointers to unknown btrees
kernel BUG in bch2_journal_pin_set fs -1 syz, C done 11 597d 651d 28/29 489d b3d82c2f2761 bcachefs: Guard against journal seq overflow
WARNING in bch2_journal_flush_seq_async fs -1 syz, C 27 595d 719d 28/29 489d 4746ee182a76 bcachefs: Check for inode journal seq in the future
general protection fault in proc_scheduler fs 2 syz 6 608d 613d 28/29 489d d38e26e36206 mptcp: sysctl: sched: avoid using current->nsproxy
kernel BUG in bch2_rechecksum_bio fs -1 syz, C 4 658d 668d 28/29 489d 9bdb3b73e732 bcachefs: Check for extent crc uncompressed/compressed size mismatch
kernel BUG in __bch2_journal_pin_put fs -1 syz, C 11 609d 651d 28/29 489d b3d82c2f2761 bcachefs: Guard against journal seq overflow
kernel BUG in const_folio_flags (2) fs mm -1 syz 3 593d 653d 28/29 489d 3203b3ab0fcf mm/filemap: don't call folio_test_locked() without a reference in next_uptodate_folio()
kernel BUG in __bch2_btree_node_write fs -1 syz, C 110 595d 704d 28/29 489d 75eabea6988e bcachefs: Fix dup/misordered check in btree node read
kernel BUG in bch2_btree_node_lock_write fs -1 syz, C done 8 643d 655d 28/29 489d f9e0a9be70c8 bcachefs: Issue a transaction restart after commit in repair
kernel BUG in bch2_btree_pos_to_text (2) fs -1 syz, C 51 596d 654d 28/29 489d abf23afa36eb bcachefs: Fix btree node scan when unknown btree IDs are present
kernel BUG in bch2_bucket_alloc_trans (3) fs -1 syz, C error 711 595d 658d 28/29 489d 828552ca74a4 bcachefs: Kill bch2_bucket_alloc_new_fs()
kernel BUG in bch2_journal_noflush_seq fs -1 syz, C done done 841 595d 789d 28/29 489d 0eafe758ac44 bcachefs: Check for bucket journal seq in the future
general protection fault in bch2_checksum fs 19 syz, C done 34 490d 782d 28/29 489d f7f196170dcd bcachefs: cryptographic MACs on superblock are not (yet?) supported
WARNING: locking bug in eventfd_signal_mask io-uring fs 4 syz, C done 6 613d 617d 28/29 489d a9c83a0ab66a io_uring/timeout: flush timeouts outside of the timeout lock
general protection fault in bch2_btree_path_traverse_one fs 8 syz, C done 564 581d 682d 28/29 489d 90f3683e8f7c bcachefs: Fix null ptr deref in btree_path_lock_root() c7e78f7b0178 bcachefs: Ignore empty btree root journal entries
BUG: corrupted list in bch2_btree_and_journal_iter_exit fs 8 syz, C done 7 605d 651d 28/29 489d 0184dfa3b821 bcachefs: Fix journal_iter list corruption
WARNING in mark_buffer_dirty (6) fs -1 syz, C error 11669 489d 1056d 28/29 489d ca76bb226bf4 nilfs2: do not force clear folio if buffer is referenced
kernel BUG in bch2_bio_compress (2) fs -1 syz, C 5 537d 662d 28/29 489d 3d0b3b51c5ab bcachefs: Don't BUG_ON() when superblock feature wasn't set for compressed data
kernel BUG in bch2_btree_write_buffer_flush_locked fs -1 syz, C done 35 599d 679d 28/29 489d b3d82c2f2761 bcachefs: Guard against journal seq overflow
kernel BUG in bch2_btree_root_read fs -1 syz, C 9 579d 654d 28/29 489d 828552ca74a4 bcachefs: Kill bch2_bucket_alloc_new_fs()
KASAN: slab-out-of-bounds Write in __put_unused_fd fs 22 syz, C done 5 611d 615d 28/29 489d 0c0214df28f0 fanotify: Fix crash in fanotify_init(2)
possible deadlock in page_cache_ra_unbounded mm fs 4 syz, C error done 163 595d 1356d 28/29 551d 6f861765464f fs: Block writes to mounted block devices
KASAN: use-after-free Read in reiserfs_fill_super (3) fs 19 syz, C error done 47 658d 703d 28/29 602d fb6f20ecb121 reiserfs: The last commit
kernel BUG in bch2_fs_btree_write_buffer_exit fs -1 syz, C done 6138 658d 709d 28/29 617d ca43f73cd172 bcachefs: bch2_btree_write_buffer_flush_going_ro()
kernel BUG in bch2_journal_res_get (2) fs -1 syz, C 1710 658d 682d 28/29 617d ca43f73cd172 bcachefs: bch2_btree_write_buffer_flush_going_ro()
kernel BUG in bch2_fs_btree_cache_exit fs -1 syz, C done 2766 658d 689d 28/29 617d ca43f73cd172 bcachefs: bch2_btree_write_buffer_flush_going_ro()
kernel BUG in __bch2_btree_node_hash_insert fs -1 syz, C done 396 659d 667d 28/29 630d 0b6ec0c5ac6c bcachefs: Fix assertion pop in topology repair
KASAN: slab-out-of-bounds Read in journal_entry_dev_usage_to_text fs 17 syz, C done 33 660d 770d 28/29 630d 657d4282d8c4 bcachefs: Fix journal_entry_dev_usage_to_text() overrun
kernel BUG in __bkey_unpack_pos fs -1 syz, C 4 638d 677d 28/29 630d dc537189b5cf bcachefs: Fix validate_bset() repair path
kernel BUG in bch2_trans_node_iter_init fs -1 syz, C done 13 668d 682d 28/29 630d f8f1dde68681 bcachefs: Fix missing validation for bch_backpointer.level
kernel BUG in bch2_btree_path_level_init (2) fs -1 syz, C done 29 634d 684d 28/29 630d f8f1dde68681 bcachefs: Fix missing validation for bch_backpointer.level
kernel BUG in bch2_dev_btree_bitmap_mark fs -1 syz, C done 31 662d 686d 28/29 630d 27a036a0c3e7 bcachefs: Fix bch_member.btree_bitmap_shift validation
kernel BUG in bch2_bkey_pack_pos_lossy fs -1 syz, C 7 669d 681d 28/29 630d dc537189b5cf bcachefs: Fix validate_bset() repair path
kernel BUG in bch2_run_recovery_pass fs -1 syz, C done 17 662d 683d 28/29 630d 2642084f26b5 bcachefs: Allow for unknown key types in backpointers fsck
kernel BUG in bch2_ptr_swab fs -1 syz, C inconclusive 11 667d 684d 28/29 630d 840c2fbcc5cd bcachefs: Fix assertion pop in bch2_ptr_swab()
kernel BUG in __bch2_bkey_cmp_packed_format_checked fs -1 syz, C 4 682d 682d 28/29 635d d335bb3fd3a4 bcachefs: Ancient versions with bad bkey_formats are no longer supported
kernel BUG in bch2_bkey_cmp_packed fs -1 syz, C 8 669d 682d 28/29 635d d335bb3fd3a4 bcachefs: Ancient versions with bad bkey_formats are no longer supported
kernel BUG in bch2_inconsistent_error fs -1 syz, C 4 669d 680d 28/29 635d f9f0a5390dce bcachefs: Change OPT_STR max to be 1 less than the size of choices array
KASAN: slab-use-after-free Read in bch2_reconstruct_alloc fs 19 syz, C done 2 679d 684d 28/29 662d 8e910ca20e11 bcachefs: Fix UAF in bch2_reconstruct_alloc()
kernel BUG in bch2_bucket_alloc_trans (2) fs -1 syz, C done 103 662d 690d 28/29 662d 3fd27e9c57bf bcachefs: init freespace inited bits to 0 in bch2_fs_initialize
KASAN: null-ptr-deref Read in bch2_sb_set_upgrade_extra fs 11 syz, C 2 688d 684d 28/29 662d a25a83de45b4 bcachefs: fix null-ptr-deref in have_stripes()
general protection fault in btree_node_iter_and_journal_peek fs 2 syz, C 3 685d 707d 28/29 662d 3726a1970bd7 bcachefs: Fix NULL ptr dereference in btree_node_iter_and_journal_peek
UBSAN: shift-out-of-bounds in bch2_alloc_to_text fs -1 syz, C 29 674d 686d 28/29 662d 5c41f75d1b92 bcachefs: fix shift oob in alloc_lru_idx_fragmentation
UBSAN: shift-out-of-bounds in validate_sb_layout fs -1 syz, C done 7 675d 684d 28/29 662d 2045fc4295c4 bcachefs: Fix invalid shift in validate_sb_layout()
possible deadlock in bch2_replicas_entry_validate fs 4 syz, C done 9468 685d 704d 28/29 663d bf4baaa087e2 bcachefs: Fix lockdep splat in bch2_accounting_read
kernel BUG in bch2_btree_pos_to_text fs -1 syz, C 8 667d 716d 28/29 664d 0151d10a480d bcachefs: add check for btree id against max in try read node
kernel BUG in submit_bh_wbc (3) nilfs fs -1 syz, C done 18 686d 693d 28/29 664d 6ed469df0bfb nilfs2: fix kernel bug due to missing clearing of buffer delay flag
general protection fault in prt_str fs 2 syz, C done 2 706d 721d 28/29 664d a30f32222df2 bcachefs: Fix NULL pointer dereference in bch2_opt_to_text
general protection fault in bch2_alloc_read fs 2 syz, C 7 704d 711d 28/29 664d a319aeaebb6c bcachefs: Fix missing bounds checks in bch2_alloc_read()
UBSAN: shift-out-of-bounds in bch2_stripe_to_text fs -1 syz, C 3 715d 711d 28/29 664d 9f25dbe0bf91 bcachefs: Add missing validation for bch_stripe.csum_granularity_bits
UBSAN: shift-out-of-bounds in member_to_text fs -1 syz, C 12 690d 735d 28/29 664d c1bd21bb6518 bcachefs: Fix invalid shift in member_to_text()
WARNING in __bch2_fsck_err (2) fs -1 syz, C 3 703d 699d 28/29 683d 5612daafb764 bcachefs: Fix fsck warnings from bkey validation
general protection fault in bch2_fs_recovery fs 8 syz, C 10 708d 727d 28/29 685d 025c55a4c7f1 bcachefs: return err ptr instead of null in read sb clean
kernel BUG in vfs_get_tree fs -1 syz, C done 318 703d 747d 28/29 685d b29c30ab48e0 bcachefs: Fix incorrect IS_ERR_OR_NULL usage
KMSAN: uninit-value in bch2_bkey_cmp_packed_inlined fs 7 syz, C 7 708d 728d 28/29 685d 0696a18a8cc3 bcachefs: memset bounce buffer portion to 0 after key_sort_fix_overlapping
WARNING: suspicious RCU usage in bch2_snapshot_tree_oldest_subvol fs 4 syz, C 21 708d 720d 28/29 685d 39c3aad43f6f bcachefs: Hold read lock in bch2_snapshot_tree_oldest_subvol()
general protection fault in __copy_super fs 2 syz, C done 5 714d 716d 28/29 685d 40d40c6bea19 bcachefs: assign return error when iterating through layout
KASAN: slab-use-after-free Read in lockref_get_not_dead (2) fs 19 syz error 1 735d 731d 28/29 685d 4e32c25b58b9 libfs: fix get_stashed_dentry()
kernel BUG in bch2_lru_change (2) fs -1 syz, C 2 753d 752d 28/29 704d 9482f3b05332 bcachefs: avoid overflowing LRU_TIME_BITS for cached data lru
WARNING in bch2_fs_journal_stop fs -1 syz, C done 1463 751d 782d 28/29 704d 7f2de6947f92 bcachefs: Fix warning in bch2_fs_journal_stop()
kernel BUG in bch2_journal_replay fs -1 syz, C done 3 747d 819d 28/29 704d cab18be6957b bcachefs: Fix replay_now_at() assert
KMSAN: uninit-value in bch2_alloc_v4_validate fs 7 syz, C 5 748d 746d 28/29 704d 8ed823b19214 bcachefs: Fix compat issue with old alloc_v4 keys
WARNING in __bch2_fsck_err fs -1 syz, C 200 705d 752d 28/29 704d 075cabf324c3 bcachefs: Fix forgetting to pass trans to fsck_err()
KASAN: slab-out-of-bounds Write in bch2_dev_journal_init fs 21 syz, C 2 750d 750d 28/29 704d bdbdd4759f08 bcachefs: Fix missing validation in bch2_sb_journal_v2_validate()
WARNING in discard_new_inode fs -1 syz, C 3 752d 752d 28/29 704d 99c87fe0f584 bcachefs: fix incorrect i_state usage
kernel BUG in bch2_sort_keys fs -1 syz, C error 3 831d 855d 27/29 731d 5dfd3746b6c4 bcachefs: Fix needs_whiteout BUG_ON() in bkey_sort()
possible deadlock in bch2_gc_mark_key fs 4 syz, C done 86 756d 833d 27/29 739d 1841027c7de4 bcachefs: bch2_gc_btree() should not use btree_root_lock
WARNING in __replicas_deltas_realloc fs -1 syz, C 9 759d 781d 27/29 740d 1d16c605cc55 bcachefs: Disk space accounting rewrite
kernel BUG in bch2_fs_journal_stop fs -1 syz, C done 4370 755d 847d 27/29 741d 600b8be5e747 bcachefs: Change bch2_fs_journal_stop() BUG_ON() to warning
kernel BUG in __replicas_entry_idx fs -1 syz, C done unreliable 3 837d 840d 27/29 741d 8bb8d683a401 bcachefs: Delete journal-buf-sharded old style accounting
kernel panic: not locked: inodes NUM:NUM:NUM cached fs 2 syz, C 2 825d 836d 27/29 742d 385f0c05d670 bcachefs: kill key cache arg to bch2_assert_pos_locked()
BUG: MAX_LOCK_DEPTH too low! (4) fs -1 syz, C error 1364 756d 852d 27/29 743d 375476c41405 bcachefs: Add lockdep support for btree node locks
WARNING in bch2_fs_ioctl fs -1 syz, C done 36 756d 818d 27/29 745d d293ece10810 bcachefs: Fix shutdown ordering
kernel panic: bch_dev->ref underflow, last put: bch2_get_next_dev fs 2 syz, C done 21 836d 846d 27/29 745d 9667214b30ef bcachefs: Fix ref in trans_mark_dev_sbs() error path
WARNING: suspicious RCU usage in bch2_bucket_ref_update fs 4 syz, C done 5 791d 790d 27/29 754d 6f692b1672bd bcachefs: Fix RCU splat
BUG: sleeping function called from invalid context in bch2_printbuf_make_room fs 5 syz, C done 27 779d 777d 27/29 754d 737759fc098f bcachefs: Fix printbuf usage while atomic
UBSAN: shift-out-of-bounds in bch2_bkey_format_invalid (2) fs -1 syz, C 117 755d 819d 27/29 754d a0bd30e4ea9d bcachefs: Fix shift greater than integer size
WARNING: lock held when returning to user space in ns_ioctl fs 4 syz, C done 147 770d 781d 27/29 754d 280e36f0d5b9 nsfs: use cleanup guard
BUG: unable to handle kernel NULL pointer dereference in path_from_stashed fs 10 syz, C 23 775d 779d 27/29 754d f60d38cb02d0 pidfs: when time ns disabled add check for ioctl
kernel BUG in bch2_ioctl_fsck_online fs -1 syz, C done 3 811d 807d 26/29 786d 9bd01500e4d8 bcachefs: Fix freeing of error pointers
WARNING in __virt_to_phys (4) fs -1 syz, C 2 799d 795d 26/29 786d 9bd01500e4d8 bcachefs: Fix freeing of error pointers
UBSAN: shift-out-of-bounds in bch2_btree_node_read_done fs -1 syz, C 3 814d 837d 26/29 787d 9e7cfb35e266 bcachefs: Check for invalid btree IDs
INFO: task hung in journal_quiesce fs 1 syz 76 801d 829d 26/29 789d 89d21b69b4f8 bcachefs: Add missing bch2_journal_do_writes() call
WARNING in bch2_fs_read_write_early fs -1 syz, C 35 807d 815d 26/29 790d 1ba44217f825 bcachefs: delete_dead_snapshots() doesn't need to go RW
KASAN: slab-use-after-free Read in bch2_sb_errors_from_cpu fs 19 syz, C 2 807d 804d 26/29 790d 211c581de28e bcachefs: slab-use-after-free Read in bch2_sb_errors_from_cpu
UBSAN: shift-out-of-bounds in bch2_blacklist_entries_gc fs -1 syz, C 45 804d 804d 26/29 790d 472237b69d07 bcachefs: Fix shift-out-of-bounds in bch2_blacklist_entries_gc
kernel BUG in bch2_journal_res_get fs -1 syz, C 2 820d 816d 26/29 790d dbf4d79b7fc7 bcachefs: Fix early init error path in journal code
kernel BUG in bch2_lru_change fs -1 syz, C done 4 807d 823d 26/29 790d cff07e2739d8 bcachefs: Guard against overflowing LRU_TIME_BITS
WARNING: kmalloc bug in __snapshot_t_mut fs -1 syz, C done 10 800d 831d 26/29 790d 64cd7de998f3 bcachefs: Fix kmalloc bug in __snapshot_t_mut
kernel BUG in gc_bucket fs -1 syz, C done 221 823d 828d 26/29 790d 9432e90df1b8 bcachefs: Check for invalid bucket from bucket_gen(), gc_bucket()
UBSAN: shift-out-of-bounds in bch2_sb_dev_has_data fs -1 syz, C done 15 848d 846d 25/29 818d bcfbaea8e547 bcachefs: Fix shift overflows in replicas.c
kernel panic: not locked: inodes NUM:ADDR:NUM cached fs 2 syz, C 2 845d 841d 25/29 818d 6ce26ad376bd bcachefs: Fix missing parens in drop_locks_do()
kernel BUG in bch2_btree_iter_verify_entry_exit fs -1 syz, C done 3 838d 844d 25/29 818d 765b8cb8acab bcachefs: Check for subvolues with bogus snapshot/inode fields
kernel BUG in bch2_checksum fs -1 syz, C done 9 836d 846d 25/29 818d 6b74fdcc8e25 bcachefs: bch2_checksum() returns 0 for unknown checksum type
kernel BUG in cpu_replicas_add_entry fs -1 syz, C done 11 829d 848d 25/29 818d 5fa421448d1f bcachefs: Fix bogus verify_replicas_entry() assert
KASAN: stack-out-of-bounds Read in __bch2_encrypt_bio fs 17 syz, C done 2 849d 846d 25/29 818d 2ba24864d2f6 bcachefs: Fix stack oob in __bch2_encrypt_bio()
UBSAN: shift-out-of-bounds in bch2_btree_lost_data fs -1 syz, C done 3 844d 843d 25/29 818d f108ddd467b5 bcachefs: Fix shift overflow in btree_lost_data()
kernel panic: bch_dev->ref underflow, last put: bch2_trigger_alloc fs 2 syz, C done 6 836d 847d 25/29 818d 9667214b30ef bcachefs: Fix ref in trans_mark_dev_sbs() error path
general protection fault in __bch2_insert_snapshot_whiteouts fs 8 syz, C done 65 834d 846d 25/29 818d 6d48e61364ae bcachefs: Add missing guard in bch2_snapshot_has_children()
KASAN: slab-use-after-free Read in evict_inodes fs 19 syz, C done 2 851d 847d 25/29 818d d93ff5fa40b9 bcachefs: Fix race path in bch2_inode_insert()
KMSAN: uninit-value in bch2_dirent_invalid fs 7 syz, C 239 818d 847d 25/29 818d 2195b755ebd2 bcachefs: Fix unsafety in bch2_dirent_name_bytes()
kernel BUG in bch2_fs_recovery fs -1 syz, C done done 161 851d 857d 25/29 819d 7ffec9ccdc6a bcachefs: don't free error pointers
UBSAN: shift-out-of-bounds in read_one_super fs -1 syz, C done 31 825d 854d 25/29 824d 71dac2482ad3 bcachefs: BCH_SB_LAYOUT_SIZE_BITS_MAX
WARNING: kmalloc bug in bch2_dev_buckets_resize fs -1 syz, C 17 825d 856d 25/29 824d db42549d402c bcachefs: Add a better limit for maximum number of buckets
WARNING in __virt_to_phys (3) fs -1 syz, C 447 824d 857d 25/29 824d 7ffec9ccdc6a bcachefs: don't free error pointers
BUG: unable to handle kernel paging request in bch2_fs_btree_key_cache_exit fs 8 syz, C 1002 824d 857d 25/29 824d b30b70ad8bff bcachefs: Fix early error path in bch2_fs_btree_key_cache_exit()
UBSAN: shift-out-of-bounds in __bch2_bkey_invalid fs -1 syz, C done 6 829d 855d 25/29 824d 2bb9600d5d47 bcachefs: Guard against unknown k.k->type in __bkey_invalid()
KASAN: slab-out-of-bounds Read in bch2_sb_downgrade_to_text fs 17 syz, C done 32 841d 854d 25/29 824d 692aa7a54b2b bcachefs: Fix sb_field_downgrade validation
KASAN: slab-out-of-bounds Read in bch2_sb_clean_to_text fs 17 syz, C done 3 845d 855d 25/29 824d f39055220f6f bcachefs: Add missing validation for superblock section clean
kernel BUG in bch2_alloc_v4_invalid fs -1 syz, C error 3 832d 855d 25/29 824d 6b8cbfc3db75 bcachefs: Fix assert in bch2_alloc_v4_invalid()
KASAN: slab-out-of-bounds Read in bch2_varint_decode_fast fs 17 syz, C 583 824d 857d 25/29 824d 4a8521b6bb81 bcachefs: Inodes need extra padding for varint_decode_fast()
UBSAN: shift-out-of-bounds in bch2_bkey_format_invalid fs -1 syz, C 45 827d 852d 25/29 824d 61692c7812ab bcachefs: bch2_bkey_format_field_overflows()
UBSAN: shift-out-of-bounds in rewrite_old_nodes_pred fs -1 syz, C done 3 855d 855d 25/29 824d 0ec5b3b7ccfc bcachefs: Fix shift-by-64 in bformat_needs_redo()
kernel BUG in bch2_btree_node_read_done fs -1 syz, C error 5 854d 857d 25/29 824d a2ddaf965f6a bcachefs: bucket_pos_to_bp_noerror()
INFO: rcu detected stall in rtnl_newlink (4) sctp fs 1 syz, C error 9 845d 921d 25/29 838d b1f532a3b1e6 batman-adv: Avoid infinite loop trying to resize local TT
KASAN: slab-use-after-free Read in __fput (2) fs 19 syz, C done 6 862d 867d 25/29 838d 4efaa5acf0a1 epoll: be better about file lifetimes
general protection fault in __ep_remove fs 2 syz, C 1 883d 882d 25/29 838d 4efaa5acf0a1 epoll: be better about file lifetimes
WARNING: ODEBUG bug in bdev_super_lock (2) fs -1 syz, C done 3 875d 873d 25/29 838d 22650a99821d fs,block: yield devices early
kernel BUG at fs/inode.c:LINE! (2) fs -1 syz, C done unreliable 322 853d 2201d 25/29 839d 319c15174757 epoll: take epitem list out of struct file
WARNING in stashed_dentry_prune (2) fs -1 syz, C done 54 864d 873d 25/29 842d 9d9539db8638 pidfs: remove config option
WARNING in stashed_dentry_prune fs -1 syz, C done 20 909d 908d 25/29 879d 9d9539db8638 pidfs: remove config option
WARNING: ODEBUG bug in bdev_super_lock fs -1 syz, C 3 883d 893d 25/29 880d 59a55a63c246 fs,block: get holder during claim
KASAN: slab-use-after-free Read in sys_io_cancel fs 19 syz, C done 894 880d 918d 25/29 880d 28468cbed92e Revert "fs/aio: Make io_cancel() generate completions again"
BUG: sleeping function called from invalid context in __getblk_gfp fs 5 syz, C error done 3673 985d 1379d 25/29 880d f123dc86388c sysv: don't call sb_bread() with pointers_lock held
possible deadlock in reiserfs_dirty_inode fs 4 syz, C done done 519 951d 1379d 25/29 901d 6f861765464f fs: Block writes to mounted block devices
BUG: sleeping function called from invalid context in __bread_gfp fs 5 syz, C error done 359 977d 1378d 25/29 901d 6f861765464f fs: Block writes to mounted block devices
INFO: task hung in reiserfs_sync_fs fs 1 syz, C error done 22 977d 1356d 25/29 901d 6f861765464f fs: Block writes to mounted block devices
general protection fault in __fget_files (2) fs 2 syz, C done done 1 984d 980d 25/29 929d 6f861765464f fs: Block writes to mounted block devices
BUG: unable to handle kernel paging request in reiserfs_readdir_inode fs 19 syz, C error done 11 975d 1341d 25/29 929d 6f861765464f fs: Block writes to mounted block devices
kernel BUG in entry_points_to_object fs -1 syz, C done done 21 975d 1020d 25/29 929d 6f861765464f fs: Block writes to mounted block devices
KASAN: vmalloc-out-of-bounds Read in cleanup_bitmap_list fs 17 syz, C error done 100 978d 1410d 25/29 934d 6f861765464f fs: Block writes to mounted block devices
KASAN: use-after-free Read in set_de_name_and_namelen fs 19 syz, C error done 15 981d 1382d 25/29 937d 6f861765464f fs: Block writes to mounted block devices
BUG: unable to handle kernel NULL pointer dereference in reiserfs_find_entry fs 19 syz, C error done 25 984d 1420d 25/29 948d 6f861765464f fs: Block writes to mounted block devices
KASAN: use-after-free Read in reiserfs_get_unused_objectid fs 19 syz, C inconclusive done 3 986d 1258d 25/29 950d 6f861765464f fs: Block writes to mounted block devices
possible deadlock in chown_common fs 4 syz, C error done 22 959d 1428d 25/29 951d 6f861765464f fs: Block writes to mounted block devices
kernel BUG in balance_leaf fs -1 syz, C error done 16 991d 1342d 25/29 951d 6f861765464f fs: Block writes to mounted block devices
possible deadlock in pipe_write fs 4 syz, C inconclusive 181 953d 1631d 25/29 951d 055ca8355991 fs/pipe: Fix lockdep false-positive in watchqueue pipe_write()
kernel BUG in direntry_check_right fs -1 syz, C done done 2 989d 1033d 25/29 951d 6f861765464f fs: Block writes to mounted block devices
KASAN: slab-out-of-bounds Read in search_by_key (2) fs 17 syz, C 4435 973d 1404d 25/29 951d dd8f87f21dc3 reiserfs: fix uninit-value in comp_keys
WARNING in pagemap_scan_pmd_entry fs -1 syz, C inconclusive 48 1005d 1027d 25/29 961d 0dff1b407def mm/pagemap: fix ioctl(PAGEMAP_SCAN) on vma check
WARNING in page_copy_sane fs mm -1 syz, C done 3 1089d 1085d 25/29 991d a08c7193e4f1 mm/filemap: remove hugetlb special casing in filemap.c
possible deadlock in inode_add_bytes fs 4 syz, C done 124 1148d 1147d 23/29 1061d 509f006932de shmem: fix quota lock nesting in huge hole handling
INFO: task hung in pipe_release (4) fs 1 syz, C done 51 1153d 1153d 23/29 1061d 0f71c9caf267 udp: Fix __ip_append_data()'s handling of MSG_SPLICE_PAGES
KASAN: slab-use-after-free Read in test_bdev_super_fc fs 19 syz, C done 7 1128d 1131d 23/29 1061d aca740cecbe5 fs: open block device after superblock creation
general protection fault in splice_to_socket fs 2 syz, C done 4 1180d 1183d 23/29 1075d ca2d49f77ce4 splice, net: Fix splice_to_socket() to handle pipe bufs larger than a page
KASAN: null-ptr-deref Write in get_block (2) fs 12 syz, C error 11 1170d 1204d 23/29 1075d ea2b62f30589 fs/sysv: Null check to prevent null-ptr-deref bug
KASAN: null-ptr-deref Read in ida_free (3) fs 11 syz, C error 4 1261d 1258d 22/29 1187d cb2239c198ad fs: drop peer group ids under namespace lock
KMSAN: uninit-value in ondemand_readahead fs mm 7 syz, C 221 1285d 1448d 22/29 1187d 3e35102666f8 fs/cramfs/inode.c: initialize file_ra_state
INFO: task hung in write_cache_pages (2) mm fs 1 syz, C done 36 1215d 1286d 22/29 1187d fb3592c41a44 migrate_pages: fix deadlock in batched migration
KMSAN: uninit-value in vfs_write fs 7 syz, C 3 1310d 1280d 22/29 1187d 2b4c99f7d9a5 can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write
KASAN: use-after-free Read in mas_next_nentry fs mm 19 syz, C error done 343 1400d 1594d 22/29 1291d 59f2f4b8a757 fs/userfaultfd: Fix maple tree iterator in userfaultfd_unregister()
INFO: rcu detected stall in sys_lsetxattr fs 1 syz, C done 2 1602d 1602d 22/29 1291d 0014edaedfd8 fs: unset MNT_WRITE_HOLD on failure
INFO: rcu detected stall in sys_setxattr (2) fs 1 syz, C done 3 1602d 1602d 22/29 1291d 0014edaedfd8 fs: unset MNT_WRITE_HOLD on failure
general protection fault in __dentry_path (2) fs 8 syz, C error 174 1596d 1606d 22/29 1291d 5c697c367a66 KVM: Initialize debugfs_dentry when a VM is created to avoid NULL deref
WARNING in mntput_no_expire (3) fs -1 syz, C inconclusive 29 1341d 1757d 22/29 1291d a91714312eb1 percpu_ref_init(): clean ->percpu_count_ref on failure
KASAN: slab-out-of-bounds Read in __fscache_acquire_volume fs mm 17 syz, C done done 1 1470d 1470d 22/29 1291d 9f0933ac026f fscache: fix OOB Read in __fscache_acquire_volume
KASAN: null-ptr-deref Write in io_file_get_normal io-uring fs 12 syz, C done 107 1536d 1621d 22/29 1291d d5361233e9ab io_uring: drop the old style inflight file tracking
memory leak in iovec_from_user fs io-uring 3 syz, C 1 1609d 1604d 22/29 1291d 323b190ba2de io_uring: free iovec if file assignment fails
BUG: unable to handle kernel paging request in truncate_inode_partial_folio fs mm 8 syz, C error 4 1492d 1532d 22/29 1291d 84ac013046cc secretmem: fix unhandled fault in truncate
general protection fault in legacy_parse_param fs 21 syz, C done 20 1631d 1892d 22/29 1291d ecff30575b5a LSM: general protection fault in legacy_parse_param
KASAN: use-after-free Read in io_rsrc_node_ref_zero fs 19 syz, C done 3 1659d 1659d 22/29 1291d 80912cef18f1 io_uring: disallow modification of rsrc_data during quiesce
KASAN: use-after-free Read in add_wait_queue fs io-uring 19 syz, C done done 13 1623d 1630d 22/29 1291d d89a4fac0fbc io_uring: fix assuming triggered poll waitqueue is the single poll
BUG: unable to handle kernel NULL pointer dereference in io_do_iopoll fs io-uring 10 syz, C done 3 1575d 1574d 22/29 1291d aa184e8671f0 io_uring: don't attempt to IOPOLL for MSG_RING requests
possible deadlock in snd_hrtimer_callback (2) fs 4 syz, C inconclusive 582 1496d 1762d 22/29 1291d 96b097091c66 ALSA: pcm: Use deferred fasync helper 95cc637c1afd ALSA: timer: Use deferred fasync helper
BUG: unable to handle kernel paging request in eventfd_ctx_put fs 8 syz, C done 7 1416d 1444d 22/29 1291d 7353633814f6 KVM: x86/xen: Fix eventfd error handling in kvm_xen_eventfd_assign()
KMSAN: uninit-value in tomoyo_path_chown fs 7 syz, C 13763 1448d 1449d 22/29 1291d f52d74b190f8 open: always initialize ownership fields
KASAN: use-after-free Read in filp_close io-uring fs 19 syz, C done 17 1332d 1561d 22/29 1291d 40a1926022d1 fix the breakage in close_fd_get_file() calling conventions change
KASAN: use-after-free Read in mas_next_entry fs mm 19 syz, C error 16 1402d 1415d 22/29 1291d 59f2f4b8a757 fs/userfaultfd: Fix maple tree iterator in userfaultfd_unregister()
WARNING: still has locks held in io_ring_submit_lock fs io-uring 4 syz, C done 3 1576d 1576d 22/29 1291d e7637a492b9f io_uring: fix locking state for empty buffer group
general protection fault in io_uring_register fs io-uring 2 syz done 1 1824d 1820d 20/29 1644d 41d3a6bd1d37 io_uring: pin SQPOLL data before unlocking ring lock
KASAN: use-after-free Write in io_queue_worker_create fs io-uring 22 syz, C unreliable 132 1727d 1736d 20/29 1644d 71a85387546e io-wq: check for wq exit after adding new worker task_work e47498afeca9 io-wq: remove spurious bit clear on task_work addition
INFO: task hung in io_uring_del_tctx_node io-uring fs 1 syz, C unreliable 37 1646d 1809d 20/29 1644d 8bab4c09f24e io_uring: allow conditional reschedule for intensive iterators
KASAN: use-after-free Write in io_submit_one fs 22 syz, C done 11 1731d 1769d 20/29 1644d 75feae73a280 block: fix single bio async DIO error handling
WARNING in inc_nlink (2) fs -1 syz, C inconclusive done 21 1644d 1981d 20/29 1644d 97f044f690ba fuse: don't increment nlink in link()
possible deadlock in io_worker_cancel_cb io-uring fs 4 syz, C done 9 1725d 1729d 20/29 1644d d800c65c2d4e io-wq: drop wqe lock before creating new worker
INFO: task hung in io_uring_try_cancel_requests fs io-uring 1 syz, C error 41 1733d 1775d 20/29 1644d f75d118349be io_uring: harder fdinfo sq/cq ring iterating
WARNING in signalfd_cleanup fs io-uring -1 syz, C done 201 1690d 1706d 20/29 1644d 791f3465c4af io_uring: fix UAF due to missing POLLFREE handling
INFO: rcu detected stall in newstat fs usb 1 syz, C unreliable done 4 1738d 1861d 20/29 1644d 476db72e5219 media: mceusb: return without resubmitting URB in case of -EPROTO error.
INFO: task hung in io_uring_cancel_generic (2) io-uring fs 1 syz, C done 97 1728d 1755d 20/29 1644d 78a780602075 io_uring: ensure task_work gets run as part of cancelations
INFO: rcu detected stall in io_wqe_worker (2) fs io-uring 1 syz, C done 2 1776d 1776d 20/29 1644d c5e0321e43de Revert "devlink: Remove not-executed trap policer notifications"
possible deadlock in io_poll_double_wake (3) io-uring fs 4 syz, C error done 703 1699d 1973d 20/29 1644d aa43477b0402 io_uring: poll rework
INFO: task hung in io_wqe_worker fs io-uring 1 syz, C unreliable 3 1786d 1782d 20/29 1644d 1d5f5ea7cb7d io-wq: remove worker to owner tw dependency
KASAN: null-ptr-deref Read in filp_close (2) fs 19 syz, C 3 1882d 1991d 20/29 1762d 3b0462726e7e cgroup: verify that source is a string 9b5b872215fe file: fix close_range() for unshare+cloexec
memory leak in io_sqe_buffers_register fs 3 syz, C 2 1956d 1956d 20/29 1763d bb6659cc0ad3 io_uring: Fix memory leak in io_sqe_buffers_register()
WARNING in io_link_timeout_fn fs io-uring -1 syz, C done 2 1944d 1944d 20/29 1763d 447c19f3b507 io_uring: fix ltout double free on completion race
KASAN: out-of-bounds Read in leaf_paste_entries fs 17 syz, C inconclusive 8 1794d 2025d 20/29 1763d 13d257503c09 reiserfs: check directory items on read from disk
general protection fault in io_commit_cqring (2) io-uring fs 12 syz, C done 82 1975d 1988d 20/29 1763d 51520426f4bc io_uring: handle setup-failed ctx in kill_timeouts
INFO: task hung in io_sq_thread_park (2) fs io-uring 1 syz done 2 1884d 1880d 20/29 1763d 46fee9ab02cb io_uring: remove double poll entry on arm failure
WARNING in __percpu_ref_exit (2) fs -1 syz, C error done 31 1763d 2002d 20/29 1763d a298232ee6b9 io_uring: fix link timeout refs
INFO: task hung in __io_uring_cancel fs io-uring 1 syz, C done 5 1901d 1967d 20/29 1763d 28090c133869 io_uring: fix work_exit sqpoll cancellations
memory leak in create_io_worker io-uring fs 3 syz, C 5 1786d 1825d 20/29 1763d 66e70be72288 io-wq: fix memory leak in create_io_worker()
WARNING in io_wqe_enqueue io-uring fs -1 syz, C done 13 1921d 1921d 20/29 1763d e6ab8991c5d0 io_uring: fix false WARN_ONCE
WARNING in io_poll_double_wake fs io-uring -1 syz, C done done 1124 1864d 1966d 20/29 1763d a890d01e4ee0 io_uring: fix poll requests leaking second poll entries
general protection fault in cdev_del (2) fs 11 syz, C error 45 1896d 2174d 20/29 1763d 8a12f8836145 net: hso: fix null-ptr-deref during tty device unregistration 0a360e8b65d6 tty: n_gsm: check error while registering tty devices
INFO: task hung in io_wq_put_and_exit io-uring fs 1 syz, C unreliable 628 1763d 1825d 20/29 1763d 3b33e3f4a6c0 io-wq: fix silly logic error in io_task_work_match()
possible deadlock in do_fcntl usb fs 4 syz, C done 245 1839d 2170d 20/29 1763d f671a691e299 fcntl: fix potential deadlocks for &fown_struct.lock
BUG: unable to handle kernel NULL pointer dereference in kiocb_done fs io-uring 10 syz, C unreliable done 3 1830d 1830d 20/29 1763d b8ce1b9d25cc io_uring: don't submit half-prepared drain request
WARNING in io_try_cancel_userdata fs io-uring -1 syz unreliable 4 1837d 1841d 20/29 1763d dadebc350da2 io_uring: fix io_try_cancel_userdata race for iowq
KMSAN: kernel-infoleak in copy_page_to_iter (2) fs mm 9 syz, C 2099 1858d 2916d 20/29 1763d ce3aba43599f ext4: fix kernel infoleak via ext4_extent_header
WARNING in mntput_no_expire (2) fs -1 syz, C done 68 1770d 1985d 20/29 1763d 7d01ef7585c0 Make sure nd->path.mnt and nd->path.dentry are always valid pointers
general protection fault in __io_file_supports_nowait fs io-uring 2 syz, C done done 13 1827d 1833d 20/29 1763d c6d3d9cbd659 io_uring: fix queueing half-created requests
KASAN: use-after-free Read in bdev_evict_inode fs 19 syz, C unreliable 1305 1847d 1850d 20/29 1763d 889c05cc5834 block: ensure the bdi is freed after inode_detach_wb
WARNING in pvr2_i2c_core_done usb fs -1 syz, C error 5780 1884d 2539d 20/29 1763d f8194e5e63fd media: pvrusb2: fix warning in pvr2_i2c_core_done
INFO: task hung in io_uring_cancel_generic io-uring fs 1 syz, C unreliable 151 1763d 1884d 20/29 1763d 1b48773f9fd0 io_uring: fix io_drain_req()
KASAN: use-after-free Read in __d_alloc (2) fs 19 syz, C unreliable 6774 1804d 1848d 20/29 1763d 0766ec82e5fb namei: Fix use after free in kern_path_locked
possible deadlock in f_getown fs 4 syz, C done done 164 1841d 2170d 20/29 1763d f671a691e299 fcntl: fix potential deadlocks for &fown_struct.lock
possible deadlock in snd_hrtimer_callback fs 4 syz, C done 571 1763d 1871d 20/29 1763d f671a691e299 fcntl: fix potential deadlocks for &fown_struct.lock
possible deadlock in io_sq_thread_finish fs 4 syz, C unreliable done 4 2008d 2010d 20/29 1763d f4e61f0c9add x86/kvm: Fix broken irq restoration in kvm_wait
WARNING in io_rsrc_node_switch io-uring fs -1 syz, C done 174 1948d 1957d 20/29 1763d 47b228ce6f66 io_uring: fix unchecked error in switch_start()
WARNING in io_wq_submit_work (2) io-uring fs -1 syz, C done done 52 1822d 1825d 20/29 1763d 713b9825a4c4 io-wq: fix cancellation on create-worker failure
KASAN: stack-out-of-bounds Read in iov_iter_revert fs io-uring 17 syz, C error 14 1835d 1852d 20/29 1763d 89c2b3b74918 io_uring: reexpand under-reexpanded iters
WARNING in internal_create_group fs -1 syz, C inconclusive 20 1827d 1881d 20/29 1763d b1a811633f73 block: nbd: add sanity check for first_minor
kernel BUG in remove_inode_hugepages fs mm -1 syz, C unreliable 3 1847d 1847d 20/29 1763d c7b1850dfb41 hugetlb: don't pass page cache pages to restore_reserve_on_error
WARNING in io_wq_put fs io-uring -1 syz, C unreliable 3 1997d 2008d 20/29 1763d f5d2d23bf0d9 io-wq: fix race around pending work on teardown
WARNING in io_uring_setup (2) fs io-uring -1 syz, C done 40 1948d 1957d 20/29 1763d 47b228ce6f66 io_uring: fix unchecked error in switch_start()
KASAN: use-after-free Read in idr_for_each (2) io-uring fs 19 syz, C error done 86 2001d 2163d 20/29 1967d 61cf93700fe6 io_uring: Convert personality_idr to XArray
INFO: task hung in io_uring_cancel_task_requests fs io-uring 1 syz, C 305 2001d 2036d 20/29 1977d 34343786ecc5 io_uring: unpark SQPOLL thread for cancelation
INFO: task hung in io_sq_thread_park fs io-uring 1 syz, C unreliable 263 2012d 2017d 20/29 1977d 3ebba796fa25 io_uring: ensure that SQPOLL thread is started for exit
memory leak in io_submit_sqes (2) fs io-uring 3 syz, C 1 2015d 2014d 20/29 1977d f01272541d2c io-wq: ensure all pending work is canceled on exit
possible deadlock in io_poll_double_wake (2) io-uring fs 4 syz, C error error 431 1977d 2169d 20/29 1977d 1c3b3e6527e5 io_uring: ignore double poll add on the same waitqueue head
inconsistent lock state in io_dismantle_req fs io-uring 4 syz, C 2 2044d 2044d 20/29 1977d 9ae1f8dd372e io_uring: fix inconsistent lock state
WARNING in io_uring_flush fs io-uring -1 syz, C unreliable 10 2051d 2061d 19/29 2007d 4325cb498cb7 io_uring: fix uring_flush in exit_files() warning
KASAN: use-after-free Read in search_by_entry_key fs 19 syz, C done 3 2156d 2160d 19/29 2007d d24396c5290b reiserfs: add check for an invalid ih_entry_count
WARNING in percpu_ref_kill_and_confirm (2) fs -1 syz, C done 71 2083d 2091d 19/29 2007d 9faadcc8abe4 io_uring: fix double io_uring free
WARNING in io_ring_ctx_wait_and_kill fs -1 syz, C done 9 2062d 2063d 19/29 2007d 06585c497b55 io_uring: do sqo disable on install_fd error
INFO: task hung in __io_uring_files_cancel io-uring fs 1 syz, C done 30 2049d 2116d 19/29 2007d bee749b187ac io_uring: fix files cancellation
KASAN: use-after-free Read in reiserfs_fill_super fs 19 syz, C error done 2 2101d 2100d 19/29 2007d d24396c5290b reiserfs: add check for an invalid ih_entry_count
BUG: unable to handle kernel paging request in percpu_ref_exit fs 8 syz, C done 3 2069d 2067d 19/29 2007d 3e2224c5867f io_uring: Fix return value from alloc_fixed_file_ref_node
general protection fault in io_disable_sqo_submit fs io-uring 2 syz, C done 124 2059d 2063d 19/29 2007d b4411616c26f io_uring: fix null-deref in io_disable_sqo_submit
WARNING in io_uring_cancel_task_requests io-uring fs -1 syz done 69 2044d 2048d 19/29 2007d 70b2c60d3797 io_uring: fix sqo ownership false positive warning
inconsistent lock state in io_file_data_ref_zero fs 4 syz, C done 7152 2090d 2114d 19/29 2007d ac0648a56c1f io_uring: use bottom half safe lock for fixed file data
BUG: corrupted list in io_file_get fs io-uring 8 syz, C done 3 2048d 2048d 19/29 2007d f609cbb8911e io_uring: fix list corruption for splice file_get
possible deadlock in send_sigio (2) fs 4 syz, C done done 40 2077d 2189d 19/29 2007d 8d1ddb5e7937 fcntl: Fix potential deadlock in send_sig{io, urg}()
kernel BUG at fs/reiserfs/prints.c:LINE! fs -1 syz, C done done 5 2098d 2177d 19/29 2007d d24396c5290b reiserfs: add check for an invalid ih_entry_count
memory leak in generic_parse_monolithic fs 3 syz, C 11 2098d 2124d 19/29 2007d 4cb682964706 afs: Fix memory leak when mounting with multiple source parameters
KASAN: slab-out-of-bounds Write in record_print_text fs 21 syz, C done unreliable 17 2048d 2051d 19/29 2007d 08d60e599954 printk: fix string termination for record_print_text()
BUG: unable to handle kernel NULL pointer dereference in __lookup_slow fs 10 syz, C inconclusive done 3 2030d 2170d 19/29 2007d d24396c5290b reiserfs: add check for an invalid ih_entry_count
possible deadlock in send_sigurg (2) fs 4 syz, C done 25 2094d 2145d 19/29 2007d 8d1ddb5e7937 fcntl: Fix potential deadlock in send_sig{io, urg}()
WARNING in io_disable_sqo_submit fs -1 syz, C done 9 2053d 2061d 19/29 2007d 6b393a1ff174 io_uring: fix false positive sqo warning on flush
KASAN: null-ptr-deref Read in filp_close fs 11 syz, C done 9 2088d 2090d 19/29 2007d fec8a6a69103 close_range: unshare all fds for CLOSE_RANGE_UNSHARE | CLOSE_RANGE_CLOEXEC 6abc20f8f879 selftests/core: add regression test for CLOSE_RANGE_UNSHARE | CLOSE_RANGE_CLOEXEC
KASAN: null-ptr-deref Write in kthread_use_mm io-uring fs 12 syz, C done 2 2135d 2135d 15/29 2117d 4b70cf9dea4c io_uring: ensure consistent view of original task ->mm from SQPOLL
general protection fault in io_uring_show_cred fs 2 syz, C done 4 2132d 2132d 15/29 2117d 6b47ab81c9a9 io_uring: use correct pointer for io_uring_show_cred()
KASAN: use-after-free Write in io_submit_sqes fs io-uring 22 syz, C error 2 2135d 2134d 15/29 2117d cb8a8ae31074 io_uring: drop req/tctx io_identity separately
INFO: task can't die in corrupted fs 1 syz, C done 4 2135d 2161d 15/29 2121d 86f33603f8c5 f2fs: handle errors of f2fs_get_meta_page_nofail
WARNING in unlock_new_inode fs -1 syz, C done 76 2158d 3063d 15/29 2121d 8859bf2b1278 reiserfs: only call unlock_new_inode() if I_NEW
memory leak in reiserfs_parse_options fs 3 syz, C 4 2185d 2381d 15/29 2121d e9d4709fcc26 reiserfs: Fix memory leak in reiserfs_parse_options()
general protection fault in percpu_ref_exit fs 2 syz, C done 3 2156d 2160d 15/29 2121d 7ea6bf2e6c40 percpu_ref: don't refer to ref->data if it isn't allocated
KASAN: use-after-free Read in fscache_alloc_cookie fs 19 syz done 1 2173d 2173d 15/29 2121d 1d0e850a49a5 afs: Fix cell removal
KASAN: use-after-free Read in io_wqe_worker fs io-uring 19 syz, C error 2 2171d 2172d 15/29 2121d c4068bf898dd io-wq: fix use-after-free in io_wq_worker_running
inconsistent lock state in xa_destroy io-uring fs 4 syz, C 755 2159d 2160d 15/29 2121d ca6484cd308a io_uring: no need to call xa_destroy() on empty xarray
INFO: task hung in io_uring_flush io-uring fs 1 syz, C done done 11 2212d 2219d 15/29 2121d b7ddce3cbf01 io_uring: fix cancel of deferred reqs with ->files
general protection fault in open_xa_dir fs 2 syz, C done 3 2156d 2168d 15/29 2121d c2bb80b8bdd0 reiserfs: Fix oops during mount
KASAN: use-after-free Write in io_wq_worker_running io-uring fs 22 syz, C error 14 2164d 2191d 15/29 2121d c4068bf898dd io-wq: fix use-after-free in io_wq_worker_running
KMSAN: uninit-value in __fget_light (2) fs 7 syz, C 18 2138d 2147d 15/29 2121d d5e4d0a5e692 inet_diag: validate INET_DIAG_REQ_PROTOCOL attribute
possible deadlock in mnt_want_write fs 4 syz, C done done 662 2160d 2968d 15/29 2121d 146d62e5a586 ovl: detect overlapping layers
general protection fault in io_poll_double_wake (2) fs io-uring 2 syz, C error 2 2171d 2170d 15/29 2147d 8706e04ed7d6 io_uring: always delete double poll wait entry on match
memory leak in do_eventfd fs 3 syz, C 2 2205d 2301d 15/29 2158d f65886606c2d KVM: fix memory leak in kvm_io_bus_unregister_dev()
possible deadlock in __io_queue_deferred fs io-uring 4 syz, C error 1 2220d 2219d 15/29 2182d 7271ef3a93a8 io_uring: fix recursive completion locking on oveflow flush
WARNING in __kernel_read fs -1 syz, C done 60 2189d 2247d 15/29 2182d a39c46067c84 net/9p: validate fds in p9_fd_open
general protection fault in cdev_del usb fs 2 syz, C 315 2191d 2659d 15/29 2182d e911e99a0770 usb: hso: check for return value in hso_serial_common_create()
BUG: unable to handle kernel NULL pointer dereference in loop_rw_iter io-uring fs 10 syz, C done 24 2207d 2219d 15/29 2182d 2dd2111d0d38 io_uring: Fix NULL pointer dereference in loop_rw_iter()
KASAN: use-after-free Read in io_async_task_func io-uring fs 19 syz error 1 2218d 2218d 15/29 2182d 6d816e088c35 io_uring: hold 'ctx' reference around task_work queue + execute
WARNING in drop_nlink fs -1 syz, C done error 1 2329d 2325d 15/29 2182d facb03dddec0 fs/minix: don't allow getting deleted inodes
KASAN: use-after-free Read in path_init (2) fs 19 syz, C done 29 2216d 2217d 15/29 2182d 24fb33d40d60 fix breakage in do_rmdir()
WARNING in __kernel_write fs -1 syz, C done 522 2231d 2251d 15/29 2182d a39c46067c84 net/9p: validate fds in p9_fd_open
KMSAN: uninit-value in get_block fs 7 syz, C 13 2298d 2301d 15/29 2182d 270ef41094e9 fs/minix: reject too-large maximum file size
KASAN: null-ptr-deref Write in get_block fs 12 syz, C done 101 2248d 2361d 15/29 2182d da27e0a0e5f6 fs/minix: check return value of sb_getblk()
memory leak in io_submit_sqes fs io-uring 3 syz, C 2 2199d 2218d 15/29 2182d a36da65c4656 io_uring: fail poll arm on queue proc failure
KASAN: use-after-free Write in get_block fs 22 syz, C inconclusive inconclusive 12 2264d 2314d 15/29 2182d 270ef41094e9 fs/minix: reject too-large maximum file size
general protection fault in io_poll_double_wake io-uring fs 2 syz, C done 8 2186d 2214d 15/29 2182d d4e7cd36a90e io_uring: sanitize double poll handling
possible deadlock in io_timeout_fn io-uring fs 4 syz, C done 4 2216d 2219d 15/29 2182d 51a4cc112c7a io_uring: defer file table grabbing request cleanup for locked requests
possible deadlock in lock_trace (3) fs 4 syz inconclusive done 69 2349d 2484d 15/29 2211d 2db9dbf71bf9 proc: Use new infrastructure to fix deadlocks in execve
possible deadlock in do_io_accounting (3) fs 4 syz, C inconclusive done 39 2356d 2447d 15/29 2211d 76518d379885 proc: io_accounting: Use new infrastructure to fix deadlocks in execve
possible deadlock in proc_pid_personality fs 4 syz inconclusive done 3 2366d 2376d 15/29 2211d 2db9dbf71bf9 proc: Use new infrastructure to fix deadlocks in execve
WARNING: bad unlock balance in rcu_lock_release fs 4 syz, C inconclusive done 1433 2351d 2633d 15/29 2211d 10476e630422 locking/lockdep: Fix bad recursion pattern
WARNING: bad unlock balance in rcu_core fs 4 syz, C inconclusive done 3578 2348d 2703d 15/29 2211d 10476e630422 locking/lockdep: Fix bad recursion pattern
KASAN: use-after-free Write in fsnotify_detach_connector_from_object fs 22 syz, C done 4 2274d 2278d 15/29 2243d ef1548adada5 proc: Use new_inode not new_inode_pseudo
INFO: task hung in locks_remove_posix fs input usb 1 syz 2231 2278d 2301d 15/29 2243d 187b96db5ca7 x86/unwind/orc: Fix unwind_get_return_address_ptr() for inactive tasks
INFO: trying to register non-static key in io_cqring_ev_posted (3) fs -1 syz, C done 3 2302d 2304d 15/29 2243d 583863ed9181 io_uring: initialize ctx->sqo_wait earlier
general protection fault in start_creating fs 2 syz, C done 106 2265d 2294d 15/29 2243d d56f5136b010 KVM: let kvm_destroy_vm_debugfs clean up vCPU debugfs directories
KASAN: use-after-free Read in blkdev_direct_IO fs 19 syz, C done error 8 2588d 2593d 15/29 2260d 0eb6ddfb865c block: Fix __blkdev_direct_IO() for bio fragments
KASAN: use-after-free Read in blkdev_bio_end_io fs 19 syz, C done error 13 2578d 2590d 15/29 2260d 7b6620d7db56 block: remove REQ_NOWAIT_INLINE
KASAN: use-after-free Read in dput (2) fs 19 syz done 4 2336d 2336d 15/29 2272d 4fa3b1c41737 proc: Handle umounts cleanly
INFO: rcu detected stall in io_uring_release fs 1 syz 15 2292d 2333d 15/29 2272d 3fd44c86711f io_uring: use cond_resched() in io_ring_ctx_wait_and_kill()
possible deadlock in io_submit_one (3) fs 4 syz done 45 2341d 2348d 15/29 2311d 63f818f46af9 proc: Use a dedicated lock in struct pid
INFO: task hung in io_queue_file_removal fs 1 syz, C done 16 2354d 2361d 15/29 2311d 4afdb733b160 io-uring: drop completion when removing file
KMSAN: uninit-value in simple_attr_read fs 7 syz, C 6 2314d 2384d 15/29 2311d a65cab7d7f05 libfs: fix infoleak in simple_attr_read()
possible deadlock in send_sigurg fs 4 syz, C done 65 2335d 2348d 15/29 2311d 63f818f46af9 proc: Use a dedicated lock in struct pid
INFO: trying to register non-static key in __io_uring_register fs -1 syz, C done 39 2343d 2344d 15/29 2311d f7fe9346869a io_uring: initialize fixed_file_data lock
INFO: trying to register non-static key in io_cqring_ev_posted (2) fs -1 syz, C done 42 2314d 2351d 15/29 2311d 10bea96dcc13 io_uring: add missing finish_wait() in io_sq_thread()
possible deadlock in send_sigio fs 4 syz, C done 7 2339d 2347d 15/29 2311d 63f818f46af9 proc: Use a dedicated lock in struct pid
memory leak in fasync_helper fs 3 syz, C 14 2405d 2465d 15/29 2336d 67f562e3e147 net/smc: transfer fasync_list in case of fallback
BUG: sleeping function called from invalid context in __kmalloc ceph fs 5 syz, C done 5 2397d 2404d 15/29 2336d b27a939e8376 ceph: canonicalize server path in place
WARNING: ODEBUG bug in io_sqe_files_unregister fs -1 syz, C done 964 2405d 2452d 15/29 2371d 2faf852d1be8 io_uring: cleanup fixed file data table references
memory leak in reiserfs_fill_super fs 3 syz, C 20 2412d 2461d 15/29 2393d 5474ca7da6f3 reiserfs: Fix memory leak of journal device string
BUG: corrupted list in __dentry_kill (2) fs 8 syz, C done 4945 2461d 2461d 15/29 2393d a3d1e7eb5abe simple_recursive_removal(): kernel-side rm -rf for ramfs-style filesystems
WARNING in do_dentry_open (2) fs -1 syz, C done 17 2413d 2410d 15/29 2393d a37f4958f7b6 debugfs: Return -EPERM when locked down
WARNING: refcount bug in chrdev_open fs 13 syz, C inconclusive done 15 2473d 2575d 15/29 2393d 68faa679b8be chardev: Avoid potential use-after-free in 'chrdev_open()'
kernel BUG at fs/pipe.c:LINE! fs -1 syz, C done 693 2465d 2471d 15/29 2435d 8c7b8c34ae95 pipe: Remove assertion from pipe_poll()
general protection fault in io_commit_cqring fs 2 syz, C done 3 2489d 2490d 15/29 2461d 15dff286d0e0 io_uring: check for validity of ->rings in teardown
INFO: task hung in io_wq_destroy fs 1 syz, C done 20 2475d 2506d 15/29 2461d b60fda6000a9 io-wq: wait for io_wq_create() to setup necessary workers
INFO: trying to register non-static key in io_cqring_ev_posted fs -1 syz, C done 6 2476d 2488d 15/29 2461d eb065d301e8c io_uring: io_allocate_scq_urings() should return a sane state
WARNING in iov_iter_pipe fs -1 syz, C done 1117 2478d 2496d 15/29 2461d 419e9c38aa07 iomap: Fix pipe page leakage during splicing
BUG: unable to handle kernel paging request in io_wq_cancel_all fs 8 syz, C done 2 2504d 2504d 15/29 2461d 975c99a57096 io_uring: io_wq_create() returns an error pointer, not NULL
KASAN: invalid-free in io_sqe_files_unregister fs 24 syz, C done 3 2493d 2493d 15/29 2461d 46568e9be70f io_uring: fix error clear of ->file_table in io_sqe_files_register()
KASAN: use-after-free Read in do_mount fs 19 syz done 6 2519d 2527d 14/29 2474d 0ecee6699064 fs/namespace.c: fix use-after-free of mount in mnt_warn_timestamp_expiry()
KASAN: use-after-free Read in io_uring_setup fs 19 syz error 1 2507d 2506d 13/29 2480d 044c1ab399af io_uring: don't touch ctx in setup after ring fd install
KASAN: use-after-free Read in ep_scan_ready_list fs 19 syz, C done 39 2945d 2980d 13/29 2483d 430ac66eb4c5 net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree()
INFO: trying to register non-static key in finish_writeback_work fs -1 syz error 1 2542d 2539d 13/29 2507d 8e00c4e9dd85 writeback: fix use-after-free in finish_writeback_work()
INFO: task syz-executor can't die for more than 143 seconds. fs -1 syz, C done 61 2536d 2644d 13/29 2519d 8619e5bdeee8 /dev/mem: Bail out upon SIGKILL. 7c3a6aedcd6a kexec: bail out upon SIGKILL when allocating memory. 8f9e86ee7959 staging: android: ion: Bail out upon SIGKILL when allocating memory.
WARNING in kfree fs -1 syz, C done 2 2566d 2565d 13/29 2519d 43ce4c1feadb vfs: Add a single-or-reconfig keying to vfs_get_super()
WARNING in __blkdev_put (2) fs -1 syz 3082 2583d 2590d 12/29 2558d e91455bad5cf bdev: Fixup error handling in blkdev_get()
kernel panic: corrupted stack end in dput fs 2 syz done 1 2625d 2625d 12/29 2568d 95fa145479fb bpf: sockmap/tls, close can race with map free
general protection fault in do_move_mount (2) fs 2 syz done 7 2630d 2638d 12/29 2597d 570d7a98e7d6 vfs: move_mount: reject moving kernel internal mounts
possible deadlock in io_submit_one fs 4 syz, C done 1779 2601d 2771d 12/29 2597d cbcfa130a911 fs/userfaultfd.c: disable irqs for fault_pending and event locks
WARNING in notify_change fs -1 syz, C 566 2684d 3073d 12/29 2602d f69e749a4935 Abort file_remove_privs() for non-reg. files
WARNING in fanotify_handle_event fs -1 syz, C done 5 2639d 2638d 12/29 2616d c285a2f01d69 fanotify: update connector fsid cache on add mark
BUG: Dentry still in use [unmount of hugetlbfs hugetlbfs] fs -1 syz, C done 3 2638d 2638d 12/29 2616d 1b0b9cc8d379 vfs: fsmount: add missing mntget()
possible deadlock in aio_poll fs 4 syz, C 5041 2775d 2919d 12/29 2627d ae62c16e105a userfaultfd: disable irqs when taking the waitqueue lock
INFO: task hung in __get_super fs 1 syz, C 80 2636d 3081d 12/29 2636d 33ec3e53e7b1 loop: Don't change loop device under exclusive opener
general protection fault in load_elf_binary fs mm 2 syz, C done 15 2715d 2719d 12/29 2642d cc338010a233 fs/binfmt_elf.c: free PT_INTERP filename ASAP
general protection fault in put_fs_context fs 2 syz, C 9 2869d 2869d 12/29 2645d 8d0347f6c3a9 convert do_remount_sb() to fs_context
INFO: task hung in __io_uring_register fs 1 syz, C done 51 2695d 2704d 12/29 2660d b19062a56726 io_uring: fix possible deadlock between io_uring_{enter,register}
general protection fault in fanotify_handle_event fs 2 syz done 5 2699d 2699d 12/29 2660d b1da6a51871c fsnotify: Fix NULL ptr deref in fanotify_get_fsid()
BUG: unable to handle kernel paging request in do_mount fs 8 syz, C 194 2870d 2908d 12/29 2667d 3e1aeb00e6d1 vfs: Implement a filesystem superblock creation/configuration context
possible deadlock in seq_read fs 4 syz, C 19074 2712d 3202d 12/29 2705d 73601ea5b7b1 fs/open.c: allow opening only regular files during execve()
KASAN: use-after-free Read in link_path_walk fs 19 syz done 5 2824d 2840d 12/29 2705d 1da6c4d9140c bpf: fix use after free in bpf_evict_inode
KASAN: use-after-free Read in trailing_symlink fs 19 syz done 2 2825d 2840d 12/29 2705d 1da6c4d9140c bpf: fix use after free in bpf_evict_inode
KASAN: use-after-free Read in path_lookupat fs 19 syz done 1 2840d 2840d 12/29 2705d 1da6c4d9140c bpf: fix use after free in bpf_evict_inode
KASAN: use-after-free Read in filemap_fault mm fs 19 syz, C 277 2799d 2810d 11/29 2716d 6b4c9f446981 filemap: drop the mmap_sem for all blocking operations
possible deadlock in __do_page_fault fs mm 4 syz, C 820 2742d 2909d 11/29 2720d fb4415a12632 staging: android: ashmem: Don't call fallocate() with ashmem_mutex held.
possible deadlock in vfs_fallocate fs 4 syz, C 3981 2942d 3053d 11/29 2720d fb4415a12632 staging: android: ashmem: Don't call fallocate() with ashmem_mutex held.
BUG: unable to handle kernel paging request in dput (2) fs 8 syz, C 4 2776d 2777d 11/29 2742d 36991ca68db9 blk-mq: protect debugfs_create_files() from failures 37ea7b630ae5 debugfs: debugfs_lookup() should return NULL if not found
general protection fault in __dentry_path fs 2 syz, C 2082 2744d 2777d 11/29 2742d 8ed0579c12b2 kvm: properly check debugfs dentry before using it
KASAN: use-after-free Read in posix_lock_inode fs 19 syz 5 2805d 2805d 11/29 2792d bf77ae4c98d7 locks: fix error in locks_move_blocks()
KASAN: use-after-free Read in locks_delete_block fs 19 syz 4 2833d 2856d 11/29 2792d 16306a61d3b7 fs/locks: always delete_block after waiting.
WARNING in userfaultfd_ioctl mm fs -1 syz, C 11 2825d 2835d 11/29 2811d 01e881f5a1fc userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered
WARNING: kmalloc bug in krealloc fs -1 syz, C 2 2976d 2975d 11/29 2856d 61448479a9f2 mm: don't warn about large allocations for slab
WARNING: kmalloc bug in vfs_getxattr_alloc fs -1 syz, C 9 2931d 2973d 11/29 2856d 61448479a9f2 mm: don't warn about large allocations for slab
KASAN: slab-out-of-bounds Read in fscache_alloc_cookie fs 17 syz, C 1936 2881d 2982d 11/29 2869d 1ff22883b0b2 fscache: Fix incomplete initialisation of inline key space fa520c47eaa1 fscache: Fix out of bound read in long cookie keys
general protection fault in ubifs_mount fs mtd 2 syz, C 216 2908d 2926d 11/29 2888d 37f31b6ca431 ubifs: Check for name being NULL while mounting
WARNING in __fsnotify_recalc_mask fs -1 syz 9 2940d 2942d 10/29 2918d d3bc0fa8411c fsnotify: fix false positive warning on inode delete
INFO: task hung in fsnotify_mark_destroy_workfn fs 1 syz 13 2951d 3065d 10/29 2921d 128f38041035 android: binder: Rate-limit debug and userspace triggered err msgs
BUG: soft lockup in d_walk fs 1 syz, C 163 3010d 3055d 8/29 2924d 4fb48871409e restore cond_resched() in shrink_dcache_parent()
general protection fault in send_sigurg_to_task fs 2 syz, C 6 2944d 2947d 8/29 2932d 84fe4cc09abc signal: Don't send signals to tasks that don't exist
general protection fault in send_sigio_to_task fs 2 syz, C 176 2943d 2947d 8/29 2932d 84fe4cc09abc signal: Don't send signals to tasks that don't exist
kernel BUG at fs/userfaultfd.c:LINE! (2) fs mm -1 syz, C 8 2957d 2976d 8/29 2952d 31e810aa1033 userfaultfd: remove uffd flags from vma->vm_flags if UFFD_EVENT_FORK fails
KASAN: stack-out-of-bounds Read in locks_remove_posix fs 17 syz, C 1 2970d 2970d 8/29 2953d 99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
KASAN: slab-out-of-bounds Read in getname_kernel fs 17 syz, C 8 2977d 3077d 8/29 2967d 02f51d45937f autofs: fix slab out of bounds read in getname_kernel()
KASAN: global-out-of-bounds Write in string fs 21 syz, C 7 3022d 3079d 8/29 2967d fe10e398e860 reiserfs: fix buffer overflow with long warning messages
BUG: unable to handle kernel paging request in dput fs 8 syz, C 26 3013d 3016d 8/29 2982d d85b399b64e8 fix proc_fill_cache() in case of d_alloc_parallel() failure
KASAN: use-after-free Read in __vfs_write fs 19 syz 14 3011d 3014d 8/29 2982d 66e58e0ef80a bpfilter: fix race in pipe access
general protection fault in pipe_write fs 2 syz 1 3013d 3013d 8/29 2982d 66e58e0ef80a bpfilter: fix race in pipe access
BUG: unable to handle kernel NULL pointer dereference in ep_item_poll fs 10 syz, C 15 2992d 2992d 8/29 2982d e88958e6369a net: handle NULL ->poll gracefully
general protection fault in __vfs_write fs 2 syz 25 3010d 3014d 8/29 2982d 66e58e0ef80a bpfilter: fix race in pipe access
KASAN: use-after-free Read in pipe_read fs 19 syz, C 3 3012d 3014d 8/29 2982d 66e58e0ef80a bpfilter: fix race in pipe access
KASAN: use-after-free Read in __kernel_write fs 19 syz 7 3011d 3014d 8/29 2982d 66e58e0ef80a bpfilter: fix race in pipe access
KASAN: null-ptr-deref Write in simple_write_to_buffer fs 12 syz, C 5 3022d 3047d 8/29 2982d fc14eebfc208 PM / hibernate: Fix oops at snapshot_write()
general protection fault in touch_atime fs 2 syz 6 3010d 3014d 8/29 2982d 66e58e0ef80a bpfilter: fix race in pipe access
WARNING in do_dentry_open fs -1 syz, C 26 3006d 3013d 8/29 2982d b16558579576 bpf: implement dummy fops for bpf objects
general protection fault in vfs_read fs 2 syz 2 3012d 3014d 8/29 2982d 66e58e0ef80a bpfilter: fix race in pipe access
BUG: unable to handle kernel NULL pointer dereference in do_sys_poll fs 10 syz, C 297 2992d 2992d 8/29 2982d e88958e6369a net: handle NULL ->poll gracefully
WARNING in sysfs_remove_group fs -1 syz, C 11125 2983d 3237d 8/29 2982d d3349b6b3c37 loop: remember whether sysfs_create_group() was done
INFO: rcu detected stall in d_walk fs 1 syz, C 25680 3008d 3070d 8/29 2982d 4fb48871409e restore cond_resched() in shrink_dcache_parent()
KASAN: use-after-free Read in remove_wait_queue (2) fs 19 syz, C 4 3103d 3113d 5/29 3014d af8d3c7c001a ppp: remove the PPPIOCDETACH ioctl
WARNING in format_decode fs -1 syz, C 1 3082d 3082d 5/29 3044d 9ad553abe66f fs/reiserfs/journal.c: add missing resierfs_warning() arg
WARNING: refcount bug in put_pid_ns fs 13 syz 6 3082d 3082d 5/29 3044d 8e04944f0ea8 mm,vmscan: Allow preallocating memory for register_shrinker().
BUG: corrupted list in __dentry_kill fs 8 syz, C 35 3062d 3082d 5/29 3044d 4a3877c4cedd rpc_pipefs: fix double-dput()
INFO: task hung in __blkdev_get fs 1 syz, C 662 3068d 3194d 5/29 3044d 1e047eaab3bb block/loop: fix deadlock after loop_set_status
KASAN: use-after-free Read in remove_wait_queue fs 19 syz, C 7 3119d 3129d 4/29 3115d 5eeb2ca02a2f ANDROID: binder: synchronize_rcu() when using POLLFREE.
KASAN: use-after-free Read in __lock_acquire (2) fs 19 syz, C 589 3140d 3215d 4/29 3137d f5cb779ba163 ANDROID: binder: remove waitqueue when thread exits.
WARNING in register_lock_class fs -1 syz, C 2 3184d 3180d 4/29 3137d f5cb779ba163 ANDROID: binder: remove waitqueue when thread exits.
BUG: unable to handle kernel NULL pointer dereference in page_mapping fs mm 10 syz, C 4 3183d 3186d 4/29 3140d 7d11f77f84b2 RDS: null pointer dereference in rds_atomic_free_op
general protection fault in page_mapping fs mm 2 syz, C 46 3163d 3191d 4/29 3140d 7d11f77f84b2 RDS: null pointer dereference in rds_atomic_free_op
general protection fault in show_timer fs 2 syz, C 10 3184d 3203d 4/29 3140d cef31d9af908 posix-timer: Properly check sigevent->sigev_notify
kernel BUG at fs/userfaultfd.c:LINE! mm fs -1 syz, C 3 3183d 3181d 4/29 3140d 0cbb4b4f4c44 userfaultfd: clear the vma->vm_userfaultfd_ctx if UFFD_EVENT_FORK fails
BUG: unable to handle kernel paging request in devpts_mntget fs 8 syz, C 21 3153d 3230d 4/29 3140d c9cc8d01fb04 devpts: fix error handling in devpts_mntget()
KASAN: use-after-free Read in __wake_up_common fs 19 syz, C 888 3140d 3150d 4/29 3140d 4cd879515d68 vhost_net: stop device during reset owner
BUG: unable to handle kernel NULL pointer dereference in proc_flush_task fs 10 syz 1 3187d 3183d 4/29 3145d c0ee554906c3 pid: Handle failure to allocate the first pid in a pid namespace
general protection fault in proc_flush_task fs 2 syz 2 3187d 3203d 4/29 3145d c0ee554906c3 pid: Handle failure to allocate the first pid in a pid namespace
KASAN: use-after-free Read in handle_userfault fs mm 19 syz, C 151 3174d 3237d 3/29 3162d 0cbb4b4f4c44 userfaultfd: clear the vma->vm_userfaultfd_ctx if UFFD_EVENT_FORK fails
WARNING in lock_release fs -1 syz, C 72 3184d 3217d 3/29 3181d ca0168e8a77c alloc_super(): do ->s_umount initialization earlier