Extra filters: [With Repro]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
general protection fault in em_cmp_match 2 syz, C 1 1334d 1334d 0/1 never 9cd3fd2054c3 net_sched: reject TCF_EM_SIMPLE case for complex ematch module
KASAN: use-after-free Read in tc_chain_fill_node 19 syz, C 1031 1253d 2498d 0/1 never 6f99528e9797 net: core: netlink: add helper refcount dec and lock function 9d7e82cec35c net: sched: add helper function to take reference to Qdisc 3a7d0d07a386 net: sched: extend Qdisc with rcu 86bd446b5ceb net: sched: rename qdisc_destroy() to qdisc_put() e368fdb61d8e net: sched: use Qdisc rcu API instead of relying on rtnl lock
KASAN: use-after-free Read in skb_dequeue (2) 19 syz, C done 2 1789d 1819d 1/1 1759d bb2853a6a421 tty: Fix data race between tiocsti() and flush_to_ldisc()
KASAN: use-after-free Read in ext4_xattr_set_entry (2) 19 syz, C done 7 1792d 2250d 1/1 1761d a54c4613dac1 ext4: fix race writing to an inline_data file while its xattrs are changing
inconsistent lock state in sco_sock_timeout 4 syz, C done 19 1792d 2183d 1/1 1762d ba316be1b6a0 Bluetooth: schedule SCO timeouts with delayed_work
BUG: sleeping function called from invalid context in lock_sock_nested (2) 5 syz, C done 3909 1793d 1886d 1/1 1762d e04480920d1e Bluetooth: defer cleanup of resources in hci_unregister_dev()
KASAN: slab-out-of-bounds Write in ext4_write_inline_data 22 syz, C done 3 1798d 2004d 1/1 1768d a54c4613dac1 ext4: fix race writing to an inline_data file while its xattrs are changing
BUG: soft lockup in tx 1 syz, C done 1 1801d 1831d 1/1 1770d c7c5e6ff533f fq_codel: reject silly quantum parameters
BUG: corrupted list in kobject_add_internal 8 syz, C done 2 1805d 2052d 1/1 1775d 734bc5ff7831 Bluetooth: avoid circular locks in sco_sock_connect
kernel BUG in kvm_hv_set_msr_common -1 syz done 2 1805d 1836d 1/1 1775d 8750e72a79dd KVM: remember position in kvm->vcpus array
BUG: unable to handle kernel paging request in do_syscall_64 8 syz, C done 3 1811d 2329d 1/1 1778d a49145acfb97 fbmem: add margin check to fb_check_caps()
general protection fault in do_syscall_64 (2) 2 syz done 2 1810d 2143d 1/1 1778d a49145acfb97 fbmem: add margin check to fb_check_caps()
KASAN: use-after-free Read in ip_check_mc_rcu 19 syz done 7 1812d 1963d 1/1 1778d 23d2b94043ca igmp: Add ip_mc_list lock in ip_check_mc_rcu
KASAN: slab-out-of-bounds Write in decode_data 21 syz, C done 1 1813d 2359d 1/1 1782d 19d1532a1876 net: 6pack: fix slab-out-of-bounds in decode_data
INFO: task hung in do_fb_ioctl (2) 1 syz, C done 7 1813d 2228d 1/1 1783d a49145acfb97 fbmem: add margin check to fb_check_caps()
BUG: unable to handle kernel paging request in do_csum 8 syz, C done 1 1813d 2032d 1/1 1783d 1d011c4803c7 ip_gre: add validation for csum_start
BUG: unable to handle kernel NULL pointer dereference in __lookup_slow (2) 10 syz, C done 15 1823d 1947d 1/1 1791d 2acf15b94d5b reiserfs: add check for root_inode in reiserfs_fill_super
KASAN: use-after-free Read in search_by_entry_key (2) 19 syz, C done 2 1824d 1974d 1/1 1794d 2acf15b94d5b reiserfs: add check for root_inode in reiserfs_fill_super
KASAN: use-after-free Read in __queue_work 19 syz done 5 1825d 2197d 1/1 1794d e04480920d1e Bluetooth: defer cleanup of resources in hci_unregister_dev()
WARNING in close_fs_devices -1 syz, C done 105 1835d 2153d 1/1 1805d f267aeb6dea5 ocfs2: fix zero out valid data
possible deadlock in cleanup_net 4 syz, C done 5212 1836d 2098d 1/1 1805d e04480920d1e Bluetooth: defer cleanup of resources in hci_unregister_dev()
possible deadlock in __sock_release 4 syz, C done 57446 1836d 2098d 1/1 1805d 4694ae373dc2 PCI: Leave Apple Thunderbolt controllers on for s2idle or standby
KASAN: use-after-free Write in hci_sock_bind 22 syz, C done 12 1842d 2401d 1/1 1809d e04480920d1e Bluetooth: defer cleanup of resources in hci_unregister_dev()
kernel BUG at drivers/dma-buf/dma-buf.c:LINE! -1 syz done 1 1840d 2322d 1/1 1809d 3abab27c322e drm: Return -ENOTTY for non-drm ioctls
unexpected kernel reboot -1 syz, C done 684 1849d 2625d 1/1 1818d b97f07458373 KVM: x86: determine if an exception has an error code only when injecting it.
KASAN: use-after-free Read in reservation_object_test_signaled_rcu 19 syz, C done 4 1848d 2084d 1/1 1818d 3abab27c322e drm: Return -ENOTTY for non-drm ioctls
BUG: unable to handle kernel paging request in diFree 8 syz, C done 18 1849d 2140d 1/1 1818d 9d574f985fe3 jfs: fix GPF in diFree
KASAN: use-after-free Read in hci_chan_del 19 syz, C done 24 1852d 2197d 1/1 1820d e2cb6b891ad2 bluetooth: eliminate the potential race condition when removing the HCI controller
WARNING in drm_prime_destroy_file_private -1 syz done 6 1850d 2042d 1/1 1820d 3abab27c322e drm: Return -ENOTTY for non-drm ioctls
divide error in do_journal_end (2) 2 syz, C done 4 1855d 1966d 1/1 1823d a149127be52f reiserfs: add check for invalid 1st journal block
general protection fault in mount_fs 2 syz, C done 12 1854d 2085d 1/1 1823d 8f6840c4fd1e ext4: return error code when ext4_fill_flex_info() fails
WARNING: suspicious RCU usage in vxlan_xmit 4 syz, C done 1 1859d 1859d 1/1 1829d 85e8b032d6eb vxlan: add missing rcu_read_lock() in neigh_reduce()
WARNING in batadv_iv_send_outstanding_bat_ogm_packet -1 syz, C done 373 1866d 2482d 1/1 1836d 9f460ae31c44 batman-adv: Avoid WARN_ON timing related checks
general protection fault in ieee802154_llsec_parse_dev_addr 2 syz, C done 32 1869d 1988d 1/1 1839d 25bdbfbb2d83 HID: quirks: Set INCREMENT_USAGE_ON_DUPLICATE for Saitek X65
KASAN: use-after-free Read in qfq_search_class 19 syz, C done 2 1873d 2359d 1/1 1842d 0cd58e5c53ba pkt_sched: sch_qfq: fix qfq_change_class() error path
KASAN: use-after-free Read in ntfs_iget (2) 19 syz, C done 1 1874d 1874d 1/1 1844d d98e4d95411b ntfs: fix validity check for file name attribute
WARNING in sta_apply_parameters -1 syz, C done 1 1874d 2101d 1/1 1844d 0ee4d55534f8 mac80211: remove warning in ieee80211_get_sband()
WARNING in sta_info_alloc -1 syz, C done 15 1877d 2134d 1/1 1847d 0ee4d55534f8 mac80211: remove warning in ieee80211_get_sband()
KASAN: null-ptr-deref Write in vhci_shutdown_connection 12 syz done 498 1880d 2062d 1/1 1847d 8d0caedb7596 can: bcm/raw/isotp: use per module netdevice notifier
WARNING in process_one_work -1 syz, C done 9 1882d 2448d 1/1 1852d 9f460ae31c44 batman-adv: Avoid WARN_ON timing related checks
general protection fault in try_to_wake_up 2 syz done 229 1883d 1970d 1/1 1852d 8d0caedb7596 can: bcm/raw/isotp: use per module netdevice notifier
WARNING: ODEBUG bug in slave_kobj_release -1 syz, C done 28 1888d 2064d 1/1 1858d 35d96e631860 bonding: init notify_work earlier to avoid uninitialized use
KASAN: use-after-free Read in drm_getunique 19 syz done 2 1901d 2069d 1/1 1870d b436acd1cf7f drm: Fix use-after-free read in drm_getunique()
BUG: unable to handle kernel NULL pointer dereference in corrupted 10 syz, C done 6 1902d 2484d 1/1 1872d 4ac06a1e013c nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect
KASAN: global-out-of-bounds Read in soft_cursor 17 syz, C done 22 1903d 2370d 1/1 1872d 860dafa90259 vt: Fix character height handling with VT_RESIZEX
KASAN: global-out-of-bounds Read in bit_putcs 19 syz, C done 214 1903d 2440d 1/1 1872d 860dafa90259 vt: Fix character height handling with VT_RESIZEX
WARNING: ODEBUG bug in cancel_delayed_work -1 syz, C done 1226 1905d 2201d 1/1 1873d 3a9d54b1947e Bluetooth: Set CONF_NOT_COMPLETE as l2cap_chan default
KASAN: use-after-free Read in hci_send_acl 19 syz, C done 3 1906d 2198d 1/1 1873d 5c4c8c954409 Bluetooth: verify AMP hci_chan before amp_destroy
KASAN: use-after-free Read in nfc_llcp_sock_unlink 19 syz, C done 22 1906d 1943d 1/1 1873d c61760e6940d net/nfc: fix use-after-free llcp_sock_bind/connect
WARNING in hsr_addr_subst_dest -1 syz, C done 3099 1906d 2674d 1/1 1873d 4b793acdca00 hsr: use netdev_err() instead of WARN_ONCE()
KASAN: slab-out-of-bounds Read in soft_cursor (2) 17 syz, C done 8 1905d 2027d 1/1 1873d 860dafa90259 vt: Fix character height handling with VT_RESIZEX
possible deadlock in tty_port_close_start 4 syz, C done 47 1911d 2377d 1/1 1881d c0070e1e6027 ttyprintk: Add TTY hangup callback.
KASAN: null-ptr-deref Read in llcp_sock_getname 11 syz, C 37 1914d 2474d 1/1 1886d 4ac06a1e013c nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect
kernel BUG in z_erofs_map_blocks_iter -1 syz done 10 1927d 1988d 1/1 1896d 24a806d849c0 erofs: add unsupported inode i_format check
kernel BUG at fs/inode.c:LINE! (2) -1 syz, C done 5 1930d 2069d 1/1 1898d 24a806d849c0 erofs: add unsupported inode i_format check
general protection fault in __queue_work 2 syz done 1 1930d 2178d 1/1 1898d e2cb6b891ad2 bluetooth: eliminate the potential race condition when removing the HCI controller
general protection fault in nl802154_del_llsec_devkey 2 syz, C done 110 1943d 2003d 1/1 1912d 27c746869e1a net: ieee802154: fix nl802154 del llsec devkey
general protection fault in nl802154_add_llsec_key 2 syz, C done 106 1943d 1999d 1/1 1912d 20d5fe2d7103 net: ieee802154: fix nl802154 add llsec key
general protection fault in nl802154_del_llsec_key 2 syz, C done 91 1943d 1996d 1/1 1912d 37feaaf5ceb2 net: ieee802154: fix nl802154 del llsec key
general protection fault in ieee802154_llsec_parse_key_id 11 syz, C done 64 1944d 1994d 1/1 1913d 6f7f657f2440 net: ieee802154: nl-mac: fix check on panid
WARNING in cfg80211_connect -1 syz, C done 336 1943d 2138d 1/1 1913d 1b5ab825d9ac cfg80211: remove WARN_ON() in cfg80211_sme_connect
general protection fault in nl802154_del_llsec_dev 2 syz, C done 70 1945d 2001d 1/1 1915d 3d1eac2f4558 net: ieee802154: fix nl802154 del llsec dev
general protection fault in crypto_destroy_tfm 2 syz done 12 1946d 1991d 1/1 1916d a0b96b4a6274 drivers: net: fix memory leak in peak_usb_create_dev
BUG: sleeping function called from invalid context in htb_destroy 5 syz, C done 2 1965d 2487d 1/1 1935d e323d865b361 net: sched: validate stab values
possible deadlock in red_change 4 syz, C done 10 1967d 2207d 1/1 1936d e323d865b361 net: sched: validate stab values
BUG: unable to handle kernel NULL pointer dereference in __lookup_slow 10 syz, C done 23 1980d 2138d 1/1 1947d d24396c5290b reiserfs: add check for an invalid ih_entry_count
WARNING in ext4_xattr_set_entry -1 syz, C done 12 1980d 2115d 1/1 1950d 6b22489911b7 ext4: do not try to set xattr into ea_inode if value is empty
BUG: unable to handle kernel NULL pointer dereference in amp_read_loc_assoc_final_data 10 syz, C done 114 1984d 2200d 1/1 1950d e8bd76ede155 Bluetooth: Fix null pointer dereference in amp_read_loc_assoc_final_data
KASAN: use-after-free Read in skb_dequeue 19 syz done 1 1992d 2196d 1/1 1959d c17af96554a8 btrfs: raid56: simplify tracking of Q stripe presence
KASAN: use-after-free Read in ntfs_iget 19 syz, C done 1 1991d 2052d 1/1 1959d 4dfe6bd94959 ntfs: check for valid standard information attribute
KASAN: use-after-free Read in ntfs_read_locked_inode 19 syz, C done 2 1994d 2144d 1/1 1964d 4dfe6bd94959 ntfs: check for valid standard information attribute
kernel BUG in pfkey_send_acquire -1 syz, C done 56 2001d 2030d 1/1 1970d cecf5d87ff20 block: split .sysfs_lock into two locks
general protection fault in ioctl_standard_call 2 syz, C done 23 2005d 2118d 1/1 1974d 5122565188ba wext: fix NULL-ptr-dereference with cfg80211's lack of commit()
KASAN: slab-out-of-bounds Read in squashfs_export_iget 17 syz, C done 5 2016d 2116d 1/1 1986d eabac19e40c0 squashfs: add more sanity checks in inode lookup
general protection fault in ieee80211_subif_start_xmit 2 syz, C done 4 2020d 2062d 1/1 1987d 054c9939b480 mac80211: pause TX while changing interface type
UBSAN: undefined-behaviour in tcindex_set_parms -1 syz, C done 39 2032d 2147d 1/1 1994d bcd0cf19ef82 net_sched: avoid shift-out-of-bounds in tcindex_set_parms()
kernel BUG at fs/reiserfs/prints.c:LINE! -1 syz, C done 5 2043d 2134d 1/1 1995d d24396c5290b reiserfs: add check for an invalid ih_entry_count
KASAN: use-after-free Read in search_by_entry_key 19 syz, C done 1 2043d 2133d 1/1 1996d d24396c5290b reiserfs: add check for an invalid ih_entry_count
KASAN: slab-out-of-bounds Read in squashfs_get_id 17 syz, C 58 2001d 2145d 1/1 1997d f37aa4c7366e squashfs: add more sanity checks in id lookup
KASAN: use-after-free Read in squashfs_get_id 19 syz, C 3 2041d 2094d 1/1 1997d f37aa4c7366e squashfs: add more sanity checks in id lookup
KASAN: use-after-free Read in tls_write_space 19 syz, C done 25 2048d 2674d 1/1 2018d f45a4248ea4c net: usb: rtl8150: set random MAC address when set_ethernet_addr() fails
divide error in do_journal_end 2 syz, C done 2 2051d 2111d 1/1 2020d d24396c5290b reiserfs: add check for an invalid ih_entry_count
general protection fault in dqput 2 syz, C done 2 2051d 2065d 1/1 2021d 11c514a99bb9 quota: Sanity-check quota file headers on load
WARNING in md_ioctl -1 syz, C done 199 2051d 2669d 1/1 2021d c731b84b51bf md: fix a warning caused by a race between concurrent md_ioctl()s
general protection fault in hci_phy_link_complete_evt 2 syz, C done 28 2056d 2198d 1/1 2025d 6dfccd13db2f Bluetooth: Fix null pointer dereference in hci_event_packet()
KASAN: use-after-free Read in leaf_paste_entries 19 syz, C done 1 2059d 2059d 1/1 2028d d24396c5290b reiserfs: add check for an invalid ih_entry_count
general protection fault in hci_event_packet 2 syz, C done 3 2059d 2125d 1/1 2029d 6dfccd13db2f Bluetooth: Fix null pointer dereference in hci_event_packet()
KASAN: slab-out-of-bounds Read in hci_le_meta_evt 17 syz, C done 12 2059d 2200d 1/1 2029d f7e0e8b2f1b0 Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt()
KASAN: use-after-free Read in reiserfs_read_locked_inode 19 syz, C done 4 2063d 2145d 1/1 2032d d24396c5290b reiserfs: add check for an invalid ih_entry_count
INFO: task hung in rdma_destroy_id 1 syz, C done 2 2063d 2093d 1/1 2033d 96ebc9c871d8 usb: uas: Add PNY USB Portable SSD to unusual_uas
INFO: task hung in do_read_cache_page 1 syz, C done 2 2065d 2125d 1/1 2034d 8d1ddb5e7937 fcntl: Fix potential deadlock in send_sig{io, urg}()
BUG: unable to handle kernel paging request in dquot_add_space 8 syz, C done 1 2066d 2126d 1/1 2035d 11c514a99bb9 quota: Sanity-check quota file headers on load
BUG: unable to handle kernel paging request in dqput 8 syz, C done 8 2065d 2134d 1/1 2035d 11c514a99bb9 quota: Sanity-check quota file headers on load
general protection fault in gfs2_ri_update 2 syz, C done 28 2070d 2146d 1/1 2038d 778721510e84 gfs2: check for empty rgrp tree in gfs2_ri_update
KASAN: use-after-free Write in sco_chan_del 22 syz, C done 10 2074d 2197d 1/1 2043d 6dfccd13db2f Bluetooth: Fix null pointer dereference in hci_event_packet()
KASAN: use-after-free Read in btrfs_scan_one_device 19 syz, C done 43 2078d 2153d 1/1 2047d 0697d9a61099 btrfs: don't access possibly stale fs_info data for printing duplicate device
BUG: sleeping function called from invalid context in corrupted 5 syz, C done 2 2084d 2085d 1/1 2053d 7bc40aedf24d mac80211: free sta in sta_info_insert_finish() on errors
BUG: sleeping function called from invalid context in sta_info_move_state 5 syz, C done 760 2084d 2086d 1/1 2053d 7bc40aedf24d mac80211: free sta in sta_info_insert_finish() on errors
KASAN: slab-out-of-bounds Read in ntfs_attr_find 17 syz, C done 10 2086d 2142d 1/1 2055d 4f8c94022f0b ntfs: add check for mft record size in superblock
general protection fault in rose_send_frame 2 syz, C done 5 2089d 2667d 1/1 2055d 3b3fd068c56e rose: Fix Null pointer dereference in rose_send_frame()
KASAN: slab-out-of-bounds Read in soft_cursor 17 syz, C done 61 2103d 2441d 1/1 2073d 13774d81f385 ALSA: hda: fix a runtime pm issue in SOF when integrated GPU is disabled
KASAN: use-after-free Read in debugfs_remove 19 syz, C done 15 2107d 2604d 1/1 2077d bad8e64fb19d blktrace: fix debugfs use after free
UBSAN: undefined-behaviour in init_sb -1 syz, C done 2 2110d 2143d 1/1 2079d 0ddc5154b24c gfs2: add validation checks for size of superblock
WARNING in unlock_new_inode -1 syz, C done 66 2110d 2148d 1/1 2079d 8859bf2b1278 reiserfs: only call unlock_new_inode() if I_NEW
KASAN: use-after-free Read in tipc_mcast_xmit 19 syz, C done 3 2111d 2134d 1/1 2080d ed42989eab57 tipc: fix the skb_unshare() in tipc_buf_append()
KASAN: global-out-of-bounds Read in fb_pad_aligned_buffer 17 syz, C done 5 2111d 2437d 1/1 2080d 3c4e0dff2095 vt: Disable KD_FONT_OP_COPY
KASAN: use-after-free Read in ntfs_attr_find 19 syz, C done 13 2112d 2142d 1/1 2081d 4f8c94022f0b ntfs: add check for mft record size in superblock
divide error in tabledist 2 syz, C done 3 2121d 2478d 1/1 2091d eadd1befdd77 netem: fix zero division in tabledist
general protection fault in qp_release_pages 2 syz, C done 4 2122d 2125d 1/1 2091d 90ca6333fd65 VMCI: check return value of get_user_pages_fast() for errors
UBSAN: undefined-behaviour in tabledist -1 syz, C done 2 2130d 2130d 1/1 2098d eadd1befdd77 netem: fix zero division in tabledist
KASAN: global-out-of-bounds Read in fbcon_get_font 17 syz, C done 47 2130d 2441d 1/1 2098d 5af08640795b fbcon: Fix global-out-of-bounds read in fbcon_get_font()
KASAN: slab-out-of-bounds Read in fbcon_get_font 17 syz, C done 97 2133d 2442d 1/1 2103d bc5269ca7650 vt_ioctl: change VT_RESIZEX ioctl to check for error return from vc_resize()
general protection fault in get_unique_tuple 2 syz, C done 33 2134d 2396d 1/1 2103d 1cc5ef91d2ff netfilter: ctnetlink: add a range check for l3/l4 protonum
general protection fault in nf_nat_setup_info 2 syz, C done 22 2138d 2230d 1/1 2108d 1cc5ef91d2ff netfilter: ctnetlink: add a range check for l3/l4 protonum
KASAN: use-after-free Read in soft_cursor 19 syz, C done 16 2143d 2440d 1/1 2113d ec0972adecb3 fbcon: Fix user font detection test at fbcon_resize().
KASAN: global-out-of-bounds Read in get_unique_tuple 17 syz, C done 1 2144d 2384d 1/1 2113d 1cc5ef91d2ff netfilter: ctnetlink: add a range check for l3/l4 protonum
KASAN: global-out-of-bounds Read in fbcon_resize 17 syz, C done 286 2146d 2166d 1/1 2116d ec0972adecb3 fbcon: Fix user font detection test at fbcon_resize().
general protection fault in __sock_release 2 syz done 8 2160d 2173d 1/1 2130d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
WARNING in snd_pcm_plugin_build_mulaw -1 syz, C done 2 2162d 2172d 1/1 2131d 949a1ebe8cea ALSA: pcm: oss: Remove superfluous WARN_ON() for mulaw sanity check
KASAN: use-after-free Read in seq_release_private 19 syz done 1 2161d 2161d 1/1 2131d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
WARNING: ODEBUG bug in get_signal -1 syz done 3 2163d 2173d 1/1 2132d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
WARNING in snd_pcm_drop -1 syz done 1 2164d 2164d 1/1 2132d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
WARNING: ODEBUG bug in exit_to_usermode_loop -1 syz done 2 2163d 2165d 1/1 2132d 70e37988db94 nvmet-fc: Fix a missed _irqsave version of spin_lock in 'nvmet_fc_fod_op_done()'
general protection fault in tty_release 2 syz, C done 9 2165d 2171d 1/1 2134d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: use-after-free Write in __sock_release 22 syz done 1 2166d 2166d 1/1 2135d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: use-after-free Read in locks_remove_file 19 syz done 4 2165d 2173d 1/1 2135d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: use-after-free Read in cuse_channel_release 19 syz done 1 2167d 2167d 1/1 2136d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: use-after-free Read in __fput 19 syz done 1 2167d 2167d 1/1 2136d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: use-after-free Write in ex_handler_refcount 22 syz, C done 11 2167d 2376d 1/1 2137d f9c70bdc279b Bluetooth: add a mutex lock to avoid UAF in do_enale_set
kernel BUG at include/linux/fs.h:LINE! -1 syz done 1 2167d 2167d 1/1 2137d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: use-after-free Read in snd_pcm_oss_release 19 syz done 1 2167d 2167d 1/1 2137d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
kernel BUG at fs/inode.c:LINE! -1 syz done 2 2168d 2197d 1/1 2138d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: invalid-free in vcs_release 24 syz done 1 2168d 2168d 1/1 2138d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: use-after-free Read in fbcon_cursor 19 syz done 4 2170d 2429d 1/1 2139d 50145474f6ef fbcon: remove soft scrollback code
BUG: corrupted list in mousedev_release 8 syz done 1 2170d 2170d 1/1 2139d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: use-after-free Read in eventfd_release 19 syz done 1 2171d 2171d 1/1 2141d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
INFO: trying to register non-static key in uhid_char_release -1 syz, C done 3 2171d 2193d 1/1 2141d bce1305c0ece HID: core: Correctly handle ReportSize being zero
WARNING in corrupted (2) -1 syz, C done 1 2172d 2172d 1/1 2141d 949a1ebe8cea ALSA: pcm: oss: Remove superfluous WARN_ON() for mulaw sanity check
INFO: trying to register non-static key in uhid_dev_destroy -1 syz, C done 14 2180d 2347d 1/1 2149d bce1305c0ece HID: core: Correctly handle ReportSize being zero
KASAN: slab-out-of-bounds Read in vcs_scr_readw 17 syz, C inconclusive 80 2432d 2441d 1/1 2151d 0c9acb1af77a vcs: prevent write access to vcsu devices
WARNING in inc_nlink -1 syz, C done 8 2181d 2330d 1/1 2151d facb03dddec0 fs/minix: don't allow getting deleted inodes
BUG: unable to handle kernel NULL pointer dereference in get_block 10 syz, C done 60 2186d 2336d 1/1 2154d 270ef41094e9 fs/minix: reject too-large maximum file size
KASAN: slab-out-of-bounds Read in get_block 17 syz, C done 3 2189d 2304d 1/1 2158d 270ef41094e9 fs/minix: reject too-large maximum file size
KASAN: use-after-free Read in get_block 19 syz, C done 6 2189d 2320d 1/1 2158d 270ef41094e9 fs/minix: reject too-large maximum file size
KASAN: slab-out-of-bounds Read in hci_event_packet 17 syz, C done 15 2189d 2399d 1/1 2158d 51c19bf3d5cf Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt()
KASAN: slab-out-of-bounds Read in bacpy 17 syz, C done 3 2194d 2656d 1/1 2160d 51c19bf3d5cf Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt()
KASAN: slab-out-of-bounds Read in hci_extended_inquiry_result_evt 17 syz, C done 6 2193d 2227d 1/1 2160d 51c19bf3d5cf Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt()
KASAN: null-ptr-deref Read in drm_dp_aux_dev_get_by_minor 11 syz, C done 1 2193d 2253d 1/1 2160d 270ef41094e9 fs/minix: reject too-large maximum file size
KASAN: slab-out-of-bounds Read in hci_inquiry_result_with_rssi_evt 17 syz, C done 4 2192d 2222d 1/1 2160d 629b49c848ee Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_with_rssi_evt()
KASAN: use-after-free Read in l2cap_chan_close 19 syz, C done 8 2193d 2376d 1/1 2160d f9c70bdc279b Bluetooth: add a mutex lock to avoid UAF in do_enale_set
BUG: unable to handle kernel NULL pointer dereference in do_syscall_64 (2) 10 syz, C done 4 2197d 2210d 1/1 2166d 033724d68642 fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins.
divide error in fbcon_switch 2 syz, C done 259 2202d 2442d 1/1 2168d ce684552a266 vt: Reject zero-sized screen buffer size.
general protection fault in do_con_write 2 syz, C done 3008 2202d 2441d 1/1 2168d ce684552a266 vt: Reject zero-sized screen buffer size.
kernel BUG at fs/buffer.c:LINE! -1 syz done 23 2198d 2652d 1/1 2168d 270ef41094e9 fs/minix: reject too-large maximum file size
general protection fault in free_netdev 2 syz, C done 99 2200d 2230d 1/1 2168d 46ef5b89ec0e ip6_gre: fix null-ptr-deref in ip6gre_init_net()
BUG: unable to handle kernel paging request in do_con_trol 8 syz, C done 36 2203d 2435d 1/1 2172d ce684552a266 vt: Reject zero-sized screen buffer size.
WARNING in snd_info_get_line -1 syz, C done 23 2202d 2215d 1/1 2172d 60379ba08532 ALSA: info: Drop WARN_ON() from buffer NULL sanity check
BUG: unable to handle kernel paging request in insert_char 8 syz, C done 46 2216d 2437d 1/1 2186d ce684552a266 vt: Reject zero-sized screen buffer size.
INFO: task hung in __flush_work 1 syz done 6 2218d 2667d 1/1 2188d a39c46067c84 net/9p: validate fds in p9_fd_open
KASAN: null-ptr-deref Read in do_con_trol 11 syz, C done 1 2218d 2368d 1/1 2188d ce684552a266 vt: Reject zero-sized screen buffer size.
KASAN: null-ptr-deref Read in insert_char 11 syz, C done 3 2219d 2414d 1/1 2189d ce684552a266 vt: Reject zero-sized screen buffer size.
KASAN: user-memory-access Read in insert_char 17 syz, C done 2 2221d 2434d 1/1 2190d ce684552a266 vt: Reject zero-sized screen buffer size.
BUG: unable to handle kernel paging request in csi_J 8 syz, C done 3 2229d 2398d 1/1 2198d ce684552a266 vt: Reject zero-sized screen buffer size.
BUG: unable to handle kernel NULL pointer dereference in generic_perform_write (2) 10 syz, C done 1 2241d 2331d 1/1 2210d 829b37b8cddb ext4: avoid race conditions when remounting with options that change dax
WARNING in enqueue_task_dl -1 syz done 1 2248d 2577d 1/1 2218d ce9bc3b27f2a sched/deadline: Initialize ->dl_boosted
general protection fault in batadv_iv_ogm_schedule_buff 2 6 2336d 2392d 1/1 2223d 8e8ce08198de batman-adv: Don't schedule OGM for disabled interface
general protection fault in fq_codel_enqueue 2 syz, C done 5 2270d 2298d 1/1 2240d 6dd912f82680 net: check untrusted gso_size at kernel entry
kernel BUG at arch/x86/mm/physaddr.c:LINE! (2) -1 syz, C done 82 2271d 2411d 1/1 2240d 57d38f26d81e vt: fix unicode console freeing with a common interface
INFO: trying to register non-static key in hci_uart_flush -1 syz done 4 2276d 2520d 1/1 2245d 4946ea5c1237 netfilter: nf_conntrack_pptp: fix compilation warning with W=1 build
KASAN: use-after-free Write in snd_rawmidi_kernel_write1 22 syz, C done 1 2277d 2307d 1/1 2246d c1f6e3c818dd ALSA: rawmidi: Fix racy buffer resize under concurrent accesses
KASAN: null-ptr-deref Write in choke_reset 12 syz, C done 236 2278d 2303d 1/1 2248d e9b3c610a05c USB: serial: garmin_gps: add sanity checking for data length
KASAN: use-after-free Read in rdma_listen 19 syz done 143 2309d 2622d 1/1 2279d 7c11910783a1 RDMA/ucma: Put a lock around every call to the rdma_cm layer
KASAN: use-after-free Read in cma_cancel_operation 19 syz, C done 6 2321d 2472d 1/1 2291d 7c11910783a1 RDMA/ucma: Put a lock around every call to the rdma_cm layer
WARNING in geneve_exit_batch_net -1 syz, C done 2 2324d 2368d 1/1 2293d 0fda7600c2e1 geneve: move debug check after netdev unregister
WARNING: ODEBUG bug in rfcomm_dev_ioctl -1 syz, C done 1 2325d 2325d 1/1 2294d 71811cac8532 Bluetooth: RFCOMM: fix ODEBUG bug in rfcomm_dev_ioctl
KASAN: use-after-free Write in release_tty 22 syz, C done 148 2324d 2441d 1/1 2294d ca4463bf8438 vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console
WARNING: ODEBUG bug in route4_change -1 syz, C done 28 2329d 2348d 1/1 2298d ef299cc3fa1a net_sched: cls_route: remove the right filter from hashtable
WARNING: refcount bug in sock_wfree 13 syz, C done done 1 2332d 2452d 1/1 2302d 5c3e82fe1596 sctp: fix refcount bug in sctp_wfree
KASAN: use-after-free Read in tty_open 19 syz, C done 2 2335d 2442d 1/1 2305d ca4463bf8438 vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console
BUG: unable to handle kernel paging request in init_srcu_struct_fields 8 syz done 3 2336d 2534d 1/1 2305d 28df0642abbf usbip: tools: Fix read_usb_vudc_device() error path handling
KASAN: slab-out-of-bounds Read in selinux_xfrm_alloc_user 17 syz, C done 3 2338d 2342d 1/1 2306d a1a7e3a36e01 xfrm: add the missing verify_sec_ctx_len check in xfrm_add_acquire
WARNING: ODEBUG bug in rfcomm_dlc_free -1 syz, C done 21 2338d 2570d 1/1 2308d 71811cac8532 Bluetooth: RFCOMM: fix ODEBUG bug in rfcomm_dev_ioctl
KASAN: slab-out-of-bounds Write in tcindex_set_parms 21 syz, C done 2 2342d 2342d 1/1 2310d 0d1c3530e1bd net_sched: keep alloc_hash updated after hash allocation
KASAN: use-after-free Write in tcindex_set_parms 22 syz, C done 3 2341d 2345d 1/1 2310d 0d1c3530e1bd net_sched: keep alloc_hash updated after hash allocation
possible deadlock in ovl_write_iter (2) 4 syz done 2 2344d 2344d 1/1 2313d b63e48fb50e1 USB: Disable LPM on WD19's Realtek Hub
KASAN: use-after-free Read in n_tty_receive_buf_common 19 syz, C done 40 2346d 2440d 1/1 2315d e8c75a30a23c vt: selection, push sel_lock up
inconsistent lock state in rxrpc_put_client_connection_id 4 syz, C done 89 2354d 2371d 1/1 2323d 963485d436cc rxrpc: Fix call RCU cleanup using non-bh-safe locks
KASAN: use-after-free Read in ext4_xattr_set_entry 19 syz done 10 2354d 2602d 1/1 2323d 9803387c55f7 ext4: validate the debug_want_extra_isize mount option at parse time
inconsistent lock state in rxrpc_put_client_conn 4 syz, C done 6584 2354d 2371d 1/1 2323d 963485d436cc rxrpc: Fix call RCU cleanup using non-bh-safe locks
kernel BUG at net/rxrpc/local_object.c:LINE! -1 syz, C done 13912 2356d 2566d 1/1 2325d d12040b6933f rxrpc: Fix lack of conn cleanup when local endpoint is cleaned up [ver #2]
general protection fault in selinux_socket_sendmsg 2 syz, C done 36 2356d 2537d 1/1 2326d 963485d436cc rxrpc: Fix call RCU cleanup using non-bh-safe locks
INFO: task hung in paste_selection 1 syz, C done 10 2357d 2433d 1/1 2327d e8c75a30a23c vt: selection, push sel_lock up
INFO: task hung in htable_put 1 syz, C done 8 2359d 2405d 1/1 2329d 8d0015a7ab76 netfilter: xt_hashlimit: limit the max size of hashtable
kernel BUG at fs/reiserfs/lock.c:LINE! (2) -1 syz, C done 2 2362d 2362d 1/1 2332d 4d5c1adaf893 reiserfs: Fix spurious unlock in reiserfs_fill_super() error handling
INFO: task hung in drain_all_pages 1 syz, C done 1 2363d 2393d 1/1 2332d 380324734956 s390/mm: Explicitly compare PAGE_DEFAULT_KEY against zero in storage_key_init_range
KASAN: stack-out-of-bounds Write in ax25_getname 21 syz, C done 4 2367d 2662d 1/1 2336d 42d84c8490f9 vhost: Check docket sk_family instead of call getname
INFO: task hung in hashlimit_mt_check_common 1 syz, C done 3 2369d 2384d 1/1 2337d 8d0015a7ab76 netfilter: xt_hashlimit: limit the max size of hashtable
INFO: task hung in tty_ldisc_hangup 1 syz, C done 10 2369d 2436d 1/1 2337d e8c75a30a23c vt: selection, push sel_lock up
general protection fault in padata_reorder 2 syz, C done 90 2368d 2371d 1/1 2337d cad926f70b5a padata: fix null pointer deref of pd->pinst
KASAN: slab-out-of-bounds Read in tcf_exts_destroy 17 syz, C done 1 2372d 2488d 1/1 2342d 599be01ee567 net_sched: fix an OOB access in cls_tcindex
BUG: sleeping function called from invalid context in tpk_write 5 syz, C done 30 2377d 2439d 1/1 2347d 9a655c77ff8f ttyprintk: fix a potential deadlock in interrupt context issue
general protection fault in path_openat 2 syz, C done 13 2377d 2383d 1/1 2347d 6404674acd59 vfs: fix do_last() regression
KASAN: slab-out-of-bounds Read in __nla_put_nohdr 17 syz, C done 1 2384d 2384d 1/1 2354d 61678d28d4a4 net_sched: fix datalen for ematch
general protection fault in nft_chain_parse_hook 2 syz, C done 5 2384d 2397d 1/1 2354d 826035498ec1 netfilter: nf_tables: add __nft_chain_type_get()
WARNING in cbq_destroy_class -1 syz, C done 1 2390d 2390d 1/1 2359d 2e24cd755552 net_sched: fix ops->bind_class() implementations
KASAN: slab-out-of-bounds Write in setup_udp_tunnel_sock 21 syz, C done 1 2390d 2390d 1/1 2360d 940ba1498665 gtp: make sure only SOCK_DGRAM UDP sockets are accepted
KASAN: use-after-free Read in snd_timer_resolution 19 syz, C done 2 2394d 2394d 1/1 2363d 60adcfde92fa ALSA: seq: Fix racy access for queue timer in proc read
KASAN: use-after-free Read in tcp_check_sack_reordering 19 syz, C done 1 2394d 2394d 1/1 2363d 9a655c77ff8f ttyprintk: fix a potential deadlock in interrupt context issue
general protection fault in xt_rateest_put 2 syz, C done 10 2395d 2397d 1/1 2364d 212e7f56605e netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct
BUG: corrupted list in nf_tables_commit 8 syz, C done 2 2397d 2397d 1/1 2366d 335178d5429c netfilter: nf_tables: fix flowtable list del corruption
WARNING in nft_request_module -1 syz, C done 1 2397d 2397d 1/1 2366d 9332d27d7918 netfilter: nf_tables: remove WARN and add NLA_STRING upper limits
general protection fault in nft_tunnel_get_init 2 syz, C done 1 2397d 2397d 1/1 2366d 1c702bf902bd netfilter: nft_tunnel: fix null-attribute check
general protection fault in nf_ct_netns_do_get 2 syz, C done 11 2402d 2416d 1/1 2368d 1b789577f655 netfilter: arp_tables: init netns pointer in xt_tgchk_param struct
KASAN: use-after-free Write in __alloc_skb 22 syz, C done 2 2401d 2469d 1/1 2371d d836f5c69d87 net: rtnetlink: validate IFLA_MTU attribute in rtnl_create_link()
general protection fault in xt_rateest_tg_checkentry 2 syz, C done 12 2401d 2418d 1/1 2371d 212e7f56605e netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct
KASAN: slab-out-of-bounds Read in macvlan_broadcast 17 syz, C done 10 2402d 2407d 1/1 2372d 96cc4b69581d macvlan: do not assume mac_header is set in macvlan_broadcast()
KASAN: use-after-free Read in macvlan_broadcast 19 syz, C done 7 2404d 2407d 1/1 2373d 96cc4b69581d macvlan: do not assume mac_header is set in macvlan_broadcast()
WARNING: bad unlock balance in gtp_encap_enable_socket 4 syz, C done 2 2405d 2408d 1/1 2375d 90d72256addf gtp: fix bad unlock balance in gtp_encap_enable_socket
BUG: sleeping function called from invalid context in lock_sock_nested 5 syz done 1 2409d 2439d 1/1 2377d 37f96694cf73 crypto: af_alg - Use bh_lock_sock in sk_destruct
general protection fault in rxrpc_connect_call 2 syz, C done 285 2412d 2576d 1/1 2382d d12040b6933f rxrpc: Fix lack of conn cleanup when local endpoint is cleaned up [ver #2]
possible deadlock in refcount_dec_and_mutex_lock 4 syz, C done done 5 2415d 2471d 1/1 2385d 1c05839aa973 nbd: fix shutdown and recv work deadlock v2
INFO: rcu detected stall in addrconf_dad_work (2) 1 syz, C done 1 2424d 2424d 1/1 2394d d9e15a273306 pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM
WARNING: refcount bug in cdev_get 13 syz, C done 12 2424d 2550d 1/1 2394d 94a72b3f024f bridge/mdb: remove wrong use of NLM_F_MULTI
possible deadlock in __might_fault 4 syz, C done 385 2425d 2676d 1/1 2395d 19e6317d24c2 usb: mon: Fix a deadlock in usbmon between mmap and read
INFO: task hung in fsnotify_mark_destroy_workfn 1 syz done 3 2428d 2615d 1/1 2397d 7e7c005b4b1f rtc: disable uie before setting time and enable after
possible deadlock in mon_bin_vma_fault 4 syz, C done 375 2428d 2677d 1/1 2398d 19e6317d24c2 usb: mon: Fix a deadlock in usbmon between mmap and read
WARNING in xfrm6_tunnel_net_exit -1 syz done 34 2429d 2678d 1/1 2399d f75a2804da39 xfrm: destroy xfrm_state synchronously on net exit path
inconsistent lock state in sp_get 4 syz, C done 1 2432d 2432d 1/1 2401d 5c9934b6767b 6pack,mkiss: fix possible deadlock
KASAN: slab-out-of-bounds Read in linear_transfer 17 syz, C done 2 2440d 2440d 1/1 2410d 4cc8d6505ab8 ALSA: pcm: oss: Avoid potential buffer overflows
WARNING: refcount bug in kobject_get 13 syz, C done 21 2440d 2670d 1/1 2410d ac43432cb1f5 driver core: Fix use-after-free and double free on glue directory
KASAN: use-after-free Read in slip_open 19 syz, C done done 7 2441d 2453d 1/1 2410d e58c19124189 slip: Fix use-after-free Read in slip_open
INFO: task hung in vivid_stop_generating_vid_cap 1 syz, C done 291 2444d 2677d 1/1 2413d 6dcd5d7a7a29 media: vivid: Fix wrong locking that causes race conditions on streaming stop
INFO: task hung in sdr_cap_stop_streaming 1 syz, C done 152 2444d 2677d 1/1 2413d 6dcd5d7a7a29 media: vivid: Fix wrong locking that causes race conditions on streaming stop
KASAN: use-after-free Read in __vb2_perform_fileio 19 syz, C done 13 2444d 2674d 1/1 2414d 6dcd5d7a7a29 media: vivid: Fix wrong locking that causes race conditions on streaming stop
KASAN: use-after-free Read in kfree_skb 19 syz, C done 95 2448d 2568d 1/1 2416d cf94da6f502d Bluetooth: Fix invalid-free in bcsp_close()
WARNING in __vb2_queue_cancel -1 syz, C done 11 2452d 2663d 1/1 2421d 6dcd5d7a7a29 media: vivid: Fix wrong locking that causes race conditions on streaming stop
WARNING: suspicious RCU usage in memfd_fcntl 4 syz, C done done 1879 2454d 2476d 1/1 2423d e4cc9c81e230 memfd: Use radix_tree_deref_slot_protected to avoid the warning.
possible deadlock in ovl_write_iter 4 syz done 84 2461d 2670d 1/1 2425d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
KASAN: use-after-free Read in rxrpc_send_keepalive 19 syz done 6 2476d 2549d 1/1 2426d c48fc11b69e9 rxrpc: Fix call ref leak
BUG: corrupted list in p9_fd_cancelled 8 syz done 2 2461d 2524d 1/1 2426d 697d877849d4 perf/core: Consistently fail fork on allocation failures
KASAN: use-after-free Read in __lock_sock 19 syz done 2 2478d 2478d 1/1 2426d 09d6ac8dc51a libata/ahci: Fix PCS quirk application
WARNING in corrupted -1 syz done 25 2498d 2650d 1/1 2427d c751798aa224 bpf: fix use after free in prog symbol exposure
possible deadlock in io_submit_one 4 syz done 406 2500d 2678d 1/1 2427d cbcfa130a911 fs/userfaultfd.c: disable irqs for fault_pending and event locks
WARNING in bpf_jit_free -1 syz done 293 2500d 2678d 1/1 2427d c751798aa224 bpf: fix use after free in prog symbol exposure
KASAN: use-after-free Read in pneigh_get_next 19 syz done 1 2612d 2612d 1/1 2428d f3e92cb8e2eb neigh: fix use-after-free read in pneigh_get_next
WARNING in ovl_rename -1 syz done 1 2660d 2660d 1/1 2428d 146d62e5a586 ovl: detect overlapping layers
kernel BUG at arch/x86/mm/physaddr.c:LINE! -1 syz done 1 2598d 2598d 1/1 2428d 5684abf7020d ip_tunnel: allow not to count pkts on tstats by setting skb's dev to NULL
WARNING in ovl_instantiate -1 syz done 5 2668d 2672d 1/1 2428d 146d62e5a586 ovl: detect overlapping layers
WARNING: suspicious RCU usage in llc_sap_close 4 syz, C done 10 2467d 2623d 1/1 2428d 9708d2b5b7c6 llc: avoid blocking in llc_sap_close()
BUG: unable to handle kernel NULL pointer dereference in blk_mq_map_swqueue 10 syz, C done 12 2477d 2662d 1/1 2430d e9e006f5fcf2 nbd: fix max number of supported devs
KASAN: null-ptr-deref Write in kvm_write_guest_virt_system 12 syz, C done 50 2494d 2512d 1/1 2432d c552ffb5c93d crypto: cavium/zip - Add missing single_release()
possible deadlock in free_ioctx_users 4 syz, C done 77 2500d 2623d 1/1 2432d 76e43c8ccaa3 fuse: fix deadlock with aio poll and fuse_iqueue::waitq.lock
KASAN: use-after-free Read in wait_consider_task 19 syz, C done 58 2504d 2514d 1/1 2433d fe9bc1644918 RDMA/restrack: Protect from reentry to resource return path
WARNING: ODEBUG bug in free_task -1 syz, C done 165 2504d 2514d 1/1 2433d fe9bc1644918 RDMA/restrack: Protect from reentry to resource return path
general protection fault in tcf_action_destroy 2 syz, C done 15 2502d 2524d 1/1 2433d b91ee4aa2a21 mISDN: enforce CAP_NET_RAW for raw sockets
WARNING: suspicious RCU usage in netem_enqueue 4 syz, C done 2 2506d 2511d 1/1 2434d 62794fc4fbf5 net_sched: add max len check for TCA_KIND
KASAN: use-after-free Read in __change_pid 19 syz, C done 4 2506d 2514d 1/1 2434d fe9bc1644918 RDMA/restrack: Protect from reentry to resource return path
possible deadlock in do_io_accounting 4 syz, C done 4 2505d 2617d 1/1 2434d 146d62e5a586 ovl: detect overlapping layers
KASAN: use-after-free Read in pids_release 19 syz, C done 7 2507d 2514d 1/1 2434d fe9bc1644918 RDMA/restrack: Protect from reentry to resource return path
general protection fault in release_task 2 syz, C done 3 2507d 2514d 1/1 2434d fe9bc1644918 RDMA/restrack: Protect from reentry to resource return path
general protection fault in wait_consider_task 2 syz, C done 5 2507d 2512d 1/1 2434d fe9bc1644918 RDMA/restrack: Protect from reentry to resource return path
INFO: rcu detected stall in netlink_sendmsg 1 syz, C done 3 2519d 2523d 1/1 2434d d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
KASAN: use-after-free Read in release_task 19 syz, C done 2 2509d 2511d 1/1 2435d fe9bc1644918 RDMA/restrack: Protect from reentry to resource return path
WARNING in handle_desc -1 syz, C done 1 2515d 2515d 1/1 2435d 3ca94192278c KVM: X86: Fix userspace set invalid CR4
BUG: unable to handle kernel NULL pointer dereference in tc_bind_tclass 10 syz, C done 18 2510d 2529d 1/1 2435d 8b142a00edcf net_sched: check cops->tcf_block in tc_bind_tclass()
general protection fault in qdisc_destroy 2 syz, C done 9 2514d 2524d 1/1 2435d 6efb971ba8ed net_sched: let qdisc_put() accept NULL pointer
INFO: rcu detected stall in addrconf_dad_work 1 syz, C done 19 2516d 2528d 1/1 2437d d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
INFO: rcu detected stall in mld_ifc_timer_expire 1 syz, C done 33 2516d 2528d 1/1 2437d d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
INFO: rcu detected stall in br_handle_frame 1 syz, C done 41 2516d 2529d 1/1 2437d d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
INFO: task hung in __x64_sys_io_destroy 1 syz, C done 1 2517d 2517d 1/1 2437d 2d29bcc8c237 media: tvp5150: fix switch exit in set control handler
WARNING: refcount bug in hci_register_dev 13 syz, C done 3 2523d 2535d 1/1 2438d ac43432cb1f5 driver core: Fix use-after-free and double free on glue directory
WARNING in kernfs_get -1 syz, C done 14 2523d 2662d 1/1 2438d ac43432cb1f5 driver core: Fix use-after-free and double free on glue directory
general protection fault in kernfs_add_one 2 syz, C done 8 2532d 2671d 1/1 2439d ac43432cb1f5 driver core: Fix use-after-free and double free on glue directory
general protection fault in packet_lookup_frame 2 syz, C done 1 2553d 2552d 1/1 2440d 32d3182cd2cd net/packet: fix race in tpacket_snd()
WARNING in tty_set_termios -1 syz, C done 151 2562d 2672d 1/1 2441d b36a1552d731 Bluetooth: hci_uart: check for missing tty operations
general protection fault in tcf_ife_init 2 syz, C done 15 2561d 2578d 1/1 2441d c8ec4632c6ac ife: error out when nla attributes are empty
KASAN: null-ptr-deref Write in kthread_stop 12 syz, C done 12 2561d 2666d 1/1 2441d 6dcd5d7a7a29 media: vivid: Fix wrong locking that causes race conditions on streaming stop
general protection fault in rds_recv_rcvbuf_delta 2 syz, C done 7 2568d 2615d 1/1 2442d c5c1a030a7db net/rds: An rds_sock is added too early to the hash table
INFO: task hung in blkdev_issue_flush 1 syz, C done 2 2595d 2595d 1/1 2442d 6e4d91aa0718 hwmon: (acpi_power_meter) Change log level for 'unsafe software power cap'
general protection fault in iptunnel_xmit 2 syz, C done 2 2569d 2569d 1/1 2442d 5684abf7020d ip_tunnel: allow not to count pkts on tstats by setting skb's dev to NULL
WARNING in kernfs_put -1 syz, C done 1 2600d 2600d 1/1 2443d ac43432cb1f5 driver core: Fix use-after-free and double free on glue directory
WARNING in notify_change -1 syz, C done 12 2606d 2662d 1/1 2443d f69e749a4935 Abort file_remove_privs() for non-reg. files
BUG: unable to handle kernel paging request in coalesced_mmio_write 8 syz, C done 2 2605d 2605d 1/1 2443d b60fe990c6b0 KVM: coalesced_mmio: add bounds checking
possible deadlock in userfaultfd_release 4 syz, C done 4 2606d 2611d 1/1 2443d cbcfa130a911 fs/userfaultfd.c: disable irqs for fault_pending and event locks
possible deadlock in acct_pin_kill 4 syz, C done 125 2636d 2671d 1/1 2444d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
WARNING in xfrm_state_fini -1 syz, C done 78 2653d 2677d 1/1 2444d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
WARNING in __flush_work -1 syz, C done 135 2650d 2656d 1/1 2444d ac3b35f11a06 drm/udl: Replace drm_dev_unref with drm_dev_put
KASAN: use-after-free Read in get_mem_cgroup_from_mm 19 syz, C done 6 2659d 2672d 1/1 2444d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
general protection fault in ip6erspan_set_version 2 syz, C done 7 2668d 2677d 1/1 2445d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
possible deadlock in pipe_lock 4 syz, C done 2 2660d 2663d 1/1 2445d 146d62e5a586 ovl: detect overlapping layers
general protection fault in sctp_timeout_obj_to_nlattr 2 syz, C done 7 2672d 2677d 1/1 2446d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
general protection fault in generic_timeout_obj_to_nlattr 2 syz, C done 11 2673d 2678d 1/1 2446d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
general protection fault in gre_timeout_obj_to_nlattr 2 syz, C done 13 2673d 2678d 1/1 2446d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
general protection fault in tcp_timeout_obj_to_nlattr 2 syz, C done 7 2674d 2676d 1/1 2446d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
general protection fault in icmp_timeout_obj_to_nlattr 2 syz, C done 3 2675d 2678d 1/1 2446d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
general protection fault in udp_timeout_obj_to_nlattr 2 syz, C done 8 2673d 2678d 1/1 2446d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
general protection fault in dccp_timeout_obj_to_nlattr 2 syz, C done 7 2673d 2678d 1/1 2446d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"