Christoph Hellwig 51297686e0 iomap: allocate s_dio_done_wq for async reads as well ... commit 7fd8720dff2d9c70cf5a1a13b7513af01952ec02 upstream. Since commit 222f2c7c6d14 ("iomap: always run error completions in user context"), read error completions are deferred to s_dio_done_wq. This means the workqueue also needs to be allocated for async reads. Fixes: 222f2c7c6d14 ("iomap: always run error completions in user context") Reported-by: syzbot+a2b9a4ed0d61b1efb3f5@syzkaller.appspotmail.com Signed-off-by: Christoph Hellwig <hch@lst.de> Link: https://patch.msgid.link/20251124140013.902853-1-hch@lst.de Tested-by: syzbot+a2b9a4ed0d61b1efb3f5@syzkaller.appspotmail.com Reviewed-by: Dave Chinner <dchinner@redhat.com> Reviewed-by: Darrick J. Wong <djwong@kernel.org> Signed-off-by: Christian Brauner <brauner@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2026-01-08 10:15:06 +01:00
..
9p	9p: fix cache/debug options printing in v9fs_show_options	2025-12-18 13:55:15 +01:00
adfs	move asm/unaligned.h to linux/unaligned.h	2024-10-02 17:23:23 -04:00
affs	affs: don't write overlarge OFS data block size fields	2025-04-10 14:39:29 +02:00
afs	afs: Fix potential null pointer dereference in afs_put_server	2025-10-02 13:44:14 +02:00
autofs	autofs: fix thinko in validate_dev_ioctl()	2024-10-28 13:16:56 +01:00
bcachefs	add a string-to-qstr constructor	2025-07-10 16:05:08 +02:00
befs
bfs	bfs: Reconstruct file type when loading from disk	2025-12-12 18:37:20 +01:00
btrfs	btrfs: don't rewrite ret from inode_permission	2026-01-08 10:14:56 +01:00
cachefiles	cachefiles: Fix the incorrect return value in __cachefiles_write()	2025-07-24 08:56:30 +02:00
ceph	ceph: fix multifs mds auth caps issue	2025-11-13 15:34:35 -05:00
coda	coda: use param->file for FSCONFIG_SET_FD	2024-08-19 13:45:03 +02:00
configfs	configfs: Do not override creating attribute file failure in populate_attrs()	2025-06-27 11:11:12 +01:00
cramfs	cramfs: Verify inode mode when loading from disk	2025-10-19 16:34:06 +02:00
crypto	fscrypt: Don't use problematic non-inline crypto engines	2025-08-20 18:30:15 +02:00
debugfs	debugfs: fix mount options not being applied	2025-08-28 16:31:08 +02:00
devpts
dlm	dlm: check for defined force value in dlm_lockspace_release	2025-10-29 14:08:52 +01:00
ecryptfs	move asm/unaligned.h to linux/unaligned.h	2024-10-02 17:23:23 -04:00
efivarfs	efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare	2025-09-04 15:31:52 +02:00
efs	efs: fix the efs new mount api implementation	2024-12-05 14:01:10 +01:00
erofs	erofs: fix unexpected EIO under memory pressure	2026-01-08 10:14:56 +01:00
exfat	exfat: zero out post-EOF page cache on file extension	2026-01-08 10:14:11 +01:00
exportfs
ext2	ext2: Handle fiemap on empty files to prevent EINVAL	2025-08-20 18:30:21 +02:00
ext4	ext4: align max orphan file size with e2fsprogs limit	2026-01-08 10:14:15 +01:00
f2fs	f2fs: fix to propagate error from f2fs_enable_checkpoint()	2026-01-08 10:14:59 +01:00
fat	fat: fix uninitialized variable	2024-10-17 00:28:06 -07:00
freevxfs
fuse	fuse: fix readahead reclaim deadlock	2026-01-08 10:14:31 +01:00
gfs2	gfs2: fix freeze error handling	2026-01-08 10:14:56 +01:00
hfs	hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits()	2025-10-29 14:08:52 +01:00
hfsplus	hfsplus: fix volume corruption issue for generic/073	2026-01-08 10:13:57 +01:00
hostfs	hostfs: Fix only passing host root in boot stage with new mount	2025-11-24 10:35:56 +01:00
hpfs	fs/hpfs: Fix error code for new_inode() failure in mkdir/create/mknod/symlink	2025-11-13 15:34:33 -05:00
hugetlbfs	mm/hugetlb: fix folio is still mapped when deleted	2025-10-02 13:44:14 +02:00
iomap	iomap: allocate s_dio_done_wq for async reads as well	2026-01-08 10:15:06 +01:00
isofs	isofs: check the return value of sb_min_blocksize() in isofs_fill_super	2025-12-01 11:43:20 +01:00
jbd2	jbd2: fix the inconsistency between checksum and data in memory for journal sb	2026-01-08 10:14:56 +01:00
jffs2	jffs2: check jffs2_prealloc_raw_node_refs() result in few other places	2025-06-27 11:11:37 +01:00
jfs	jfs: fix uninitialized waitqueue in transaction manager	2025-11-13 15:34:27 -05:00
kernfs	kernfs: Fix UAF in polling when open file is released	2025-09-19 16:35:47 +02:00
lockd	lockd: fix vfs_test_lock() calls	2026-01-08 10:14:49 +01:00
minix	minixfs: Verify inode mode when loading from disk	2025-10-19 16:34:05 +02:00
netfs	netfs: Prevent duplicate unlocking	2025-10-12 12:57:17 +02:00
nfs	NFS: Fix inheritance of the block sizes when automounting	2025-12-18 13:55:18 +01:00
nfs_common	nfsd: rename nfsd_serv_ prefixed methods and variables with nfsd_net_	2026-01-08 10:14:09 +01:00
nfsd	nfsd: Drop the client reference in client_states_open()	2026-01-08 10:14:51 +01:00
nilfs2	nilfs2: avoid having an active sc_timer before freeing sci	2025-11-24 10:36:00 +01:00
nls	fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8()	2025-12-18 13:55:18 +01:00
notify	fsnotify: do not generate ACCESS/MODIFY events on child for special files	2026-01-08 10:14:24 +01:00
ntfs3	ntfs: Do not overwrite uptodate pages	2026-01-08 10:14:37 +01:00
ocfs2	ocfs2: fix kernel BUG in ocfs2_find_victim_chain	2026-01-08 10:14:21 +01:00
omfs	fs: Convert aops->write_begin to take a folio	2024-08-07 11:33:21 +02:00
openpromfs
orangefs	orangefs: fix xattr related buffer overflow...	2025-11-13 15:34:31 -05:00
overlayfs	ovl: use I_MUTEX_PARENT when locking parent in ovl_create_temp()	2025-08-28 16:31:10 +02:00
proc	proc: proc_maps_open allow proc_mem_open to return NULL	2025-11-24 10:36:08 +01:00
pstore	pstore: Change kmsg_bytes storage size to u32	2025-05-29 11:02:58 +02:00
qnx4
qnx6	fs/qnx6: Fix building with GCC 15	2025-01-23 17:22:55 +01:00
quota	fs: quota: create dedicated workqueue for quota_release_work	2025-10-19 16:33:49 +02:00
ramfs
reiserfs	move asm/unaligned.h to linux/unaligned.h	2024-10-02 17:23:23 -04:00
romfs	romfs: fix romfs_read_folio()	2024-08-21 22:32:58 +02:00
smb	ksmbd: Fix memory leak in get_file_all_info()	2026-01-08 10:14:37 +01:00
squashfs	Squashfs: reject negative file sizes in squashfs_read_inode()	2025-10-19 16:34:00 +02:00
sysfs
sysv	buffer: Convert __block_write_begin() to take a folio	2024-08-07 11:33:36 +02:00
tests	execve: Move KUnit tests to tests/ subdirectory	2024-07-22 18:25:47 -07:00
tracefs	tracefs: fix a leak in eventfs_create_events_dir()	2025-12-18 13:55:00 +01:00
ubifs	ubifs: skip dumping tnc tree when zroot is null	2025-02-08 09:58:01 +01:00
udf	fs: udf: fix OOB read in lengthAllocDescs handling	2025-10-15 12:00:21 +02:00
ufs	ufs_rename(): fix bogus argument of folio_release_kmap()	2024-10-02 00:05:09 -04:00
unicode	Revert "unicode: Don't special case ignorable code points"	2024-12-14 20:04:13 +01:00
vboxsf	vboxsf: fix building with GCC 15	2025-03-22 12:54:15 -07:00
verity	fsverity: expose verified fsverity built-in signatures to LSMs	2024-08-20 14:03:18 -04:00
xfs	xfs: fix a UAF problem in xattr repair	2026-01-08 10:14:23 +01:00
zonefs	zonefs fixes for 6.12-rc2	2024-10-02 12:02:15 -07:00
aio.c	fs/aio: Fix __percpu annotation of *cpu pointer in struct kioctx	2024-08-19 13:45:03 +02:00
anon_inodes.c	fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass	2025-07-10 16:05:09 +02:00
attr.c	nfsd-6.11 fixes:	2024-08-29 06:20:44 +12:00
backing-file.c	fs: pass offset and result to backing_file end_write() callback	2024-10-16 13:17:45 +02:00
bad_inode.c
binfmt_elf_fdpic.c	Revert "fs: don't block i_writecount during exec"	2024-12-05 14:02:50 +01:00
binfmt_elf.c	binfmt_elf: Move brk for static PIE even if ASLR disabled	2025-05-22 14:29:35 +02:00
binfmt_flat.c	binfmt_flat: Fix integer overflow bug on 32 bit systems	2025-02-17 10:05:04 +01:00
binfmt_misc.c	Revert "fs: don't block i_writecount during exec"	2024-12-05 14:02:50 +01:00
binfmt_script.c
bpf_fs_kfuncs.c	bpf: Add kfunc bpf_get_dentry_xattr() to read xattr from dentry	2024-08-07 11:26:54 -07:00
buffer.c	fs/buffer: fix use-after-free when call bh_read() helper	2025-08-28 16:31:08 +02:00
char_dev.c
compat_binfmt_elf.c
coredump.c	coredump: hand a pidfd to the usermode coredump helper	2025-06-04 14:43:52 +02:00
d_path.c
dax.c	dax: skip read lock assertion for read-only filesystems	2025-10-23 16:20:27 +02:00
dcache.c	nfs/vfs: discard d_exact_alias()	2025-12-18 13:55:17 +01:00
direct-io.c	fs/direct-io: Remove linux/prefetch.h include	2024-08-19 13:45:02 +02:00
drop_caches.c	sysctl: treewide: constify the ctl_table argument of proc_handlers	2024-07-24 20:59:29 +02:00
eventfd.c	introduce fd_file(), convert all accessors to it.	2024-08-12 22:00:43 -04:00
eventpoll.c	eventpoll: Replace rwlock with spinlock	2025-10-19 16:33:49 +02:00
exec.c	exec: Fix incorrect type for ret	2025-10-29 14:08:51 +01:00
fcntl.c	fcntl: make F_DUPFD_QUERY associative	2024-12-05 14:02:47 +01:00
fhandle.c	fhandle: use more consistent rules for decoding file handle from userns	2025-09-19 16:35:41 +02:00
file_table.c	add a string-to-qstr constructor	2025-07-10 16:05:08 +02:00
file.c	fs: always return zero on success from replace_fd()	2025-10-19 16:33:33 +02:00
filesystems.c	fs/filesystems: Fix potential unsigned integer underflow in fs_name()	2025-06-19 15:32:32 +02:00
fs_context.c
fs_parser.c
fs_pin.c
fs_struct.c
fs_types.c
fs-writeback.c	writeback: Avoid excessively long inode switching times	2025-10-19 16:34:06 +02:00
fsopen.c	fscontext: do not consume log entries when returning -EMSGSIZE	2025-10-19 16:33:33 +02:00
init.c
inode.c	bcachefs: do not use PF_MEMALLOC_NORECLAIM	2024-10-09 12:47:18 -07:00
internal.h	file: reclaim 24 bytes from f_owner	2024-08-28 13:05:39 +02:00
ioctl.c	introduce fd_file(), convert all accessors to it.	2024-08-12 22:00:43 -04:00
Kconfig	nfs: add missing selections of CONFIG_CRC32	2025-04-25 10:47:50 +02:00
Kconfig.binfmt
kernel_read_file.c	introduce fd_file(), convert all accessors to it.	2024-08-12 22:00:43 -04:00
libfs.c	shmem: fix recovery on rename failures	2026-01-08 10:13:54 +01:00
locks.c	lockd: fix vfs_test_lock() calls	2026-01-08 10:14:49 +01:00
Makefile	bpf: introduce new VFS based BPF kfuncs	2024-08-06 09:01:41 -07:00
mbcache.c
mnt_idmapping.c	fuse update for 6.12	2024-09-24 15:29:42 -07:00
mount.h	fs: kill MNT_ONRB	2025-01-17 13:40:50 +01:00
mpage.c	fs/writeback: convert wbc_account_cgroup_owner to take a folio	2025-01-17 13:40:33 +01:00
namei.c	openat2: don't trigger automounts with RESOLVE_NO_XDEV	2025-10-19 16:33:51 +02:00
namespace.c	fs/namespace: fix reference leak in grab_requested_mnt_ns	2025-12-07 06:24:56 +09:00
nsfs.c	[tree-wide] finally take no_llseek out	2024-09-27 08:18:43 -07:00
open.c	allow finish_no_open(file, ERR_PTR(-E...))	2025-11-13 15:34:26 -05:00
pidfs.c	pidfs: raise SB_I_NODEV and SB_I_NOEXEC	2025-08-20 18:30:21 +02:00
pipe.c	[tree-wide] finally take no_llseek out	2024-09-27 08:18:43 -07:00
pnode.c
pnode.h
posix_acl.c	fs: Use in_group_or_capable() helper to simplify the code	2024-08-30 08:22:37 +02:00
proc_namespace.c
read_write.c	copy_file_range: limit size if in compat mode	2025-10-19 16:34:05 +02:00
readdir.c	introduce fd_file(), convert all accessors to it.	2024-08-12 22:00:43 -04:00
remap_range.c	introduce fd_file(), convert all accessors to it.	2024-08-12 22:00:43 -04:00
select.c	select: Fix unbalanced user_access_end()	2025-02-08 09:56:53 +01:00
seq_file.c
signalfd.c	struct fd layout change (and conversion to accessor helpers)	2024-09-23 09:35:36 -07:00
splice.c	netfs: Fix unbuffered write error handling	2025-08-28 16:31:04 +02:00
stack.c
stat.c	introduce fd_file(), convert all accessors to it.	2024-08-12 22:00:43 -04:00
statfs.c	introduce fd_file(), convert all accessors to it.	2024-08-12 22:00:43 -04:00
super.c	fs/super.c: introduce get_tree_bdev_flags()	2024-10-21 14:30:26 +02:00
sync.c	introduce fd_file(), convert all accessors to it.	2024-08-12 22:00:43 -04:00
sysctls.c
timerfd.c	introduce fd_file(), convert all accessors to it.	2024-08-12 22:00:43 -04:00
userfaultfd.c	mm/userfaultfd: fix uninitialized output field for -EAGAIN race	2025-05-18 08:24:52 +02:00
utimes.c	introduce fd_file(), convert all accessors to it.	2024-08-12 22:00:43 -04:00
xattr.c	fs/xattr.c: fix simple_xattr_list()	2025-06-27 11:11:36 +01:00