Extra filters: [With Repro]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
possible deadlock in input_event missing-backport origin:upstream 4 syz, C done 554 140d 1206d 2/3 never 897d6a724773 fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
WARNING in drm_property_add_enum -1 syz, C done 1 56d 74d 2/3 never 08c8ec285479 drm/gud: NUL-terminate TV mode names read from the device
general protection fault in usbtest_probe origin:upstream 2 syz, C done 7 67d 103d 2/3 never 0103ac7a4ad3 usb: usbtest: disable dynamic ID support
WARNING in smsusb_start_streaming/usb_submit_urb origin:upstream -1 syz, C done 3 446d 537d 2/3 never 503bbde34cc3 usb: core: usb_submit_urb: downgrade type check
KASAN: use-after-free Read in uea_upload_pre_firmware 19 syz, C done 3 82d 101d 2/3 never f92832262718 usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect
WARNING in udf_process_sequence origin:lts-only -1 syz, C done 4 436d 444d 2/3 never 1a11201668e8 udf: Verify partition map count
inconsistent lock state in valid_state (3) origin:upstream 4 syz, C done 303 68d 198d 2/3 never b2606c302d7f phonet/pep: disable BH around forwarded sk_receive_skb()
general protection fault in nilfs_mdt_save_to_shadow_map origin:upstream 2 syz, C done 26 157d 215d 2/3 never 837c7a59fb58 nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map
KASAN: use-after-free Read in hdm_disconnect origin:upstream 19 syz, C done 135 371d 800d 2/3 never 578eb18cd111 most: usb: Fix use-after-free in hdm_disconnect
WARNING in ceph_con_v2_try_read origin:upstream -1 syz, C done 6 55d 100d 2/3 never 279c0852999f libceph: validate banner payload length
general protection fault in bcsp_recv origin:upstream 8 syz, C done 13 340d 509d 2/3 never ca94b2b036c2 Bluetooth: bcsp: receive data only if registered
KASAN: use-after-free Read in release_card_device 19 syz, C done 22 70d 77d 2/3 never d3d67f680dbc ALSA: core: Fix use-after-free in snd_card_do_free()
KASAN: use-after-free Write in xfs_trans_committed_bulk origin:lts-only 22 syz, C done 43 511d 1333d 2/3 never 9bc7d3a94f28 xfs: fix super block buf log item UAF during force shutdown
WARNING in aa_policy_destroy -1 syz, C done 10 64d 75d 2/3 never ee017ef9aa2c apparmor: policy_int make sure list heads are initialized before fail path
UBSAN: array-index-out-of-bounds in snd_dummy_probe 15 syz, C done 3 72d 92d 2/3 never b7579e86afce ALSA: dummy: Check card index validity at probe
kernel BUG in pskb_expand_head (2) origin:lts-only -1 syz, C done 7 441d 474d 2/3 never 5ca2e29f6834 bpf, sockmap: Fix panic when calling skb_linearize
BUG: unable to handle kernel paging request in preempt_schedule_irq origin:upstream 8 syz, C done 21 435d 555d 2/3 never 7375f22495e7 fs/buffer: fix use-after-free when call bh_read() helper
INFO: task hung in f2fs_balance_fs origin:upstream 1 syz, C done 528 66d 1337d 2/3 never dafc90da0233 f2fs: fix to round down start offset of fallocate for pin file
UBSAN: shift-out-of-bounds in aio_iiro_16_attach origin:lts-only -1 syz, C done 29 437d 471d 2/3 never 66acb1586737 comedi: aio_iiro_16: Fix bit shift out of bounds
possible deadlock in ext4_writepages (2) origin:upstream 4 syz, C done 676 54d 420d 2/3 never 9c3469377b1d ext4: skip extra isize expansion during mount to prevent deadlock
KASAN: use-after-free Read in remove_wait_queue 19 syz, C done 25 437d 459d 2/3 never 35b6fc51c666 comedi: fix race between polling and detaching
possible deadlock in __blockdev_direct_IO origin:upstream 4 syz, C done 24 444d 723d 2/3 never 7375f22495e7 fs/buffer: fix use-after-free when call bh_read() helper
UBSAN: shift-out-of-bounds in pcl726_attach origin:upstream -1 syz, C done 19 434d 484d 2/3 never bab220b0bb5a comedi: pcl726: Prevent invalid irq number
WARNING in pkcs1pad_verify -1 syz, C done 4 78d 80d 2/3 never 6b81b6f400d1 crypto: rsa-pkcs1pad: Don't WARN on an empty digest
possible deadlock in try_to_wake_up origin:upstream 4 syz, C done 49 300d 943d 3/3 292d d240b789dded mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
KASAN: use-after-free Write in diWrite origin:upstream 22 syz, C done 22 463d 775d 3/3 421d f98bf80b20f4 jfs: fix null ptr deref in dtInsertEntry
WARNING in ath6kl_bmi_get_target_info origin:upstream -1 syz, C done 18 483d 718d 3/3 450d e7417421d893 wifi: ath6kl: remove WARN on bad firmware input
WARNING in ext4_iomap_begin origin:upstream -1 syz, C done 8 513d 547d 3/3 478d 1a77a028a392 ext4: ensure i_size is smaller than maxbytes
KASAN: use-after-free Write in ext4_insert_dentry origin:upstream 22 syz, C done 4 555d 705d 3/3 520d 94824ac9a8aa ext4: fix off-by-one error in do_split
possible deadlock in j1939_sk_queue_drop_all origin:upstream missing-backport 4 syz, C done 7 577d 1194d 3/3 545d 5de195060b2e mm: resolve faulty mmap_region() error path behaviour
KASAN: use-after-free Read in __ocfs2_find_path origin:upstream 19 syz, C done 11 583d 760d 3/3 548d 17c99ab3db2b ocfs2: validate l_tree_depth to avoid out-of-bounds access
UBSAN: array-index-out-of-bounds in xtSearch (2) origin:lts-only 15 syz, C done 115 598d 1095d 3/3 551d a1166e98d80c jfs: define xtree root and page independently
KASAN: use-after-free Read in ocfs2_search_dirblock 19 syz, C done 8 608d 638d 3/3 572d 03b605ac1e5b ocfs2: check dir i_size in ocfs2_find_entry
possible deadlock in team_port_change_check origin:upstream 4 syz, C done 52 610d 947d 3/3 576d bd099a2fa9be team: prevent adding a device which is already a team device lower
KASAN: use-after-free Read in ocfs2_lock_global_qf origin:lts-only 19 syz, C done 4 660d 661d 3/3 628d f44e6d70c100 ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
INFO: task hung in do_rmdir origin:lts-only 1 syz, C done 5 679d 703d 3/3 644d 28c21f0ac529 exfat: fix the infinite loop in exfat_readdir()
WARNING in nilfs_rmdir origin:lts-only -1 syz, C done 4 682d 690d 3/3 644d 912188316a8c nilfs2: prevent use of deleted inode
WARNING in netdev_queue_update_kobjects (2) origin:upstream -1 syz, C done 303 690d 733d 3/3 648d 27aabf27fd01 Bluetooth: fix use-after-free in device_for_each_child()
WARNING: locking bug in ext4_ioctl 4 syz, C done 251 691d 1244d 3/3 650d 48c335245371 locking/lockdep: Avoid creating new name string literals in lockdep_set_subclass()
UBSAN: array-index-out-of-bounds in dbAdjTree origin:lts-only 15 syz, C done 7 691d 730d 3/3 651d a3d408870bc1 jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
possible deadlock in mi_read origin:upstream missing-backport 4 syz, C done 827 726d 1331d 3/3 682d 47e8a17491e3 fs/ntfs3: Fix possible deadlock in mi_read
WARNING in cfg80211_wext_siwgenie origin:lts-only -1 syz, C done 316 748d 791d 3/3 707d e0f67494957f Revert "wifi: cfg80211: check wiphy mutex is held for wdev mutex"
WARNING in rcu_sync_dtor origin:upstream -1 syz, C done 157 749d 831d 3/3 708d d3476f3dad4a ext4: don't set SB_RDONLY after filesystem errors
UBSAN: array-index-out-of-bounds in dbSplit 15 syz, C done 9 750d 762d 3/3 716d 25d2a3ff02f2 jfs: check if leafidx greater than num leaves per dmap tree
UBSAN: array-index-out-of-bounds in dbNextAG origin:upstream 15 syz, C done 4 757d 850d 3/3 720d e63866a47556 jfs: fix out-of-bounds in dbNextAG() and diAlloc()
WARNING: bad unlock balance in ocfs2_read_blocks origin:upstream 4 syz, C done 10 758d 778d 3/3 723d f55a33fe0fb5 ocfs2: remove unreasonable unlock in ocfs2_read_blocks
general protection fault in ima_post_path_mknod origin:lts-only 2 syz, C done 5 758d 759d 3/3 723d f386c802a6fd udf: Don't return bh from udf_expand_dir_adinicb()
KASAN: use-after-free Read in ext4_search_dir 19 syz, C done 5 759d 1237d 3/3 726d be2e9b111e27 ext4: avoid OOB when system.data xattr changes underneath the filesystem
KASAN: use-after-free Read in try_to_wake_up 19 syz, C done 71 776d 1232d 3/3 744d eb85dace897c nilfs2: fix potential hang in nilfs_detach_log_writer()
WARNING in skb_checksum_help origin:upstream missing-backport -1 syz, C done 3337 802d 1245d 3/3 757d e269d79c7d35 net: missing check virtio
possible deadlock in rds_wake_sk_sleep origin:upstream missing-backport 4 syz, C done 1 806d 1248d 3/3 765d 124f20c5f6e5 net:rds: Fix possible deadlock in rds_message_put
possible deadlock in hfsplus_file_extend missing-backport origin:lts-only 4 syz, C done 3439 808d 1334d 3/3 772d 603d064d406a hfsplus: fix to avoid false alarm of circular locking
UBSAN: array-index-out-of-bounds in diFree origin:upstream missing-backport 15 syz, C done 13 811d 857d 3/3 776d 63f7fdf733ad jfs: Fix array-index-out-of-bounds in diFree
possible deadlock in local_lock_acquire origin:upstream missing-backport 4 syz, C done 54 809d 951d 3/3 776d d240b789dded mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
possible deadlock in __lock_task_sighand origin:upstream 4 syz, C done 108 813d 965d 3/3 781d d240b789dded mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
WARNING in perf_event_release_kernel origin:upstream -1 syz, C done 1 816d 1045d 3/3 783d 3a5465418f5f perf: Fix event leak upon exec and file release
kernel BUG in __block_write_begin_int -1 syz, C done 3 839d 840d 3/3 798d a9e1ddc09ca5 nilfs2: fix kernel bug on rename operation of broken directory
KASAN: use-after-free Read in nilfs_set_link 19 syz, C done 1 839d 839d 3/3 798d a9e1ddc09ca5 nilfs2: fix kernel bug on rename operation of broken directory
kernel BUG in f2fs_vm_page_mkwrite origin:upstream -1 syz, C done 3 843d 885d 3/3 800d 70f5ef5f33c3 f2fs: fix return value of f2fs_convert_inline_inode()
WARNING in ieee80211_check_rate_mask origin:lts-only -1 syz, C done 29 810d 921d 3/3 807d badabac392d3 wifi: mac80211: check basic rates validity
SYZFAIL: clone failed origin:lts-only -1 syz done 1 889d 1011d 3/3 814d 74751ef5c191 perf/core: Fix missing wakeup when waiting for context reference
WARNING in hid_output_report origin:lts-only -1 syz, C done 8 858d 859d 3/3 819d 4aa2dcfbad53 HID: core: remove unnecessary WARN_ON() in implement()
possible deadlock in sock_hash_update_common origin:upstream 4 syz, C done 1 896d 896d 3/3 856d 98e948fb60d4 bpf: Allow delete from sockmap/sockhash only if update is allowed
WARNING in sock_hash_delete_elem -1 syz, C done 987 938d 965d 3/3 901d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in scheduler_tick 4 syz, C done 162 938d 963d 3/3 902d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
WARNING in sock_map_delete_elem -1 syz, C done 1015 938d 965d 3/3 903d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
WARNING in sock_map_unref -1 syz, C done 18 938d 941d 3/3 905d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in hrtimer_run_queues 4 syz, C done 20 938d 964d 3/3 907d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
WARNING: proc registration bug in scsi_host_alloc origin:lts-only -1 syz, C inconclusive 28 946d 1312d 3/3 938d f23a4d6e0757 scsi: core: Fix unremoved procfs host directory regression
BUG: unable to handle kernel paging request in bpf_probe_read_kernel_str origin:upstream 8 syz, C done 1 972d 1005d 3/3 940d 32019c659ecf x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()
BUG: unable to handle kernel paging request in copy_from_kernel_nofault origin:upstream 8 syz, C done 2 982d 1085d 3/3 951d 32019c659ecf x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()
KASAN: use-after-free Read in unix_stream_read_actor origin:lts-only 19 syz, C done 1 1088d 1089d 3/3 1057d 75bcfc188abf af_unix: fix use-after-free in unix_stream_read_actor()
INFO: task hung in xfs_buf_delwri_pushbuf origin:lts-only 1 syz, C done 30 1097d 1331d 3/3 1065d f0c2d7d2abca xfs: fix intermittent hang during quotacheck
general protection fault in inherit_task_group origin:upstream 2 syz, C done 4 1098d 1104d 3/3 1065d a71ef31485bb perf/core: Fix potential NULL deref
WARNING in isotp_tx_timer_handler -1 syz, C done 3 1099d 1303d 3/3 1067d e163ad6a8639 can: isotp: add local echo tx processing and tx without FC
UBSAN: shift-out-of-bounds in extAlloc origin:upstream -1 syz, C done 217 1144d 1336d 3/3 1112d 8f994b830dd0 jfs: validate max amount of blocks before allocation.
possible deadlock in exfat_iterate origin:upstream 4 syz, C done 81 1182d 1315d 3/3 1125d 1c33ca1e1974 exfat: release s_lock before calling dir_emit()
KASAN: null-ptr-deref Write in get_block origin:upstream missing-backport 12 syz, C done 2 1191d 1237d 3/3 1129d afd9a31b5aa4 fs/sysv: Null check to prevent null-ptr-deref bug
possible deadlock in hugetlbfs_file_mmap origin:lts-only 4 syz, C done 242 1197d 1335d 3/3 1133d 111cd11bbc54 sched/cpuset: Bring back cpuset_mutex
INFO: task hung in drop_current_rng origin:lts-only 1 syz, C done 307 1201d 1334d 3/3 1134d 2bb31abdbe55 hwrng: virtio - don't wait on cleanup
WARNING in corrupted -1 syz, C done 3 1212d 1326d 3/3 1138d 784a8027b8ac media: usb: siano: Fix warning due to null work_func_t function pointer
WARNING in usbnet_start_xmit/usb_submit_urb -1 syz, C done 2 1214d 1270d 3/3 1138d 27d0f755d649 net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
UBSAN: shift-out-of-bounds in dbFree origin:upstream -1 syz, C done 1 1223d 1284d 3/3 1142d de984faecddb jfs: jfs_dmap: Validate db_l2nbperpage while mounting
WARNING in nilfs_btree_assign -1 syz, C done 26 1234d 1309d 3/3 1182d b12011cea56b nilfs2: fix buffer corruption due to concurrent device reads
BUG: unable to handle kernel paging request in ext4_acquire_dquot origin:lts-only 8 syz, C done 2 1234d 1270d 3/3 1188d 32c2f51fffec quota: Properly disable quotas when add_dquot_ref() fails
BUG: unable to handle kernel NULL pointer dereference in hdr_find_e origin:lts-only 10 syz, C done 8 1238d 1323d 3/3 1191d 0e8235d28f3a fs/ntfs3: Check fields while reading
WARNING in nilfs_segctor_do_construct -1 syz, C done 2 1245d 1266d 3/3 1203d 4357336192ed nilfs2: fix possible out-of-bounds segment allocation in resize ioctl
possible deadlock in ext4_xattr_set_handle 4 syz, C done 42 1246d 1338d 3/3 1206d bdbfbb7d5057 ext4: add EA_INODE checking to ext4_iget()
general protection fault in gfs2_evict_inode 8 syz, C done 4 1250d 1301d 3/3 1216d 504a10d9e46b gfs2: Don't deref jdesc in evict
WARNING: bad unlock balance in l2cap_bredr_sig_cmd origin:lts-only 4 syz, C done 5 1261d 1293d 3/3 1227d 116b9c002c89 Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp
possible deadlock in sys_quotactl_fd origin:upstream 4 syz, C done 167 1261d 1310d 3/3 1227d 1de53f2223eb ext4: fix lockdep warning when enabling MMP
WARNING: bad unlock balance in l2cap_recv_frame origin:lts-only 4 syz, C done 5 1260d 1284d 3/3 1227d 116b9c002c89 Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp
WARNING in hfsplus_cat_write_inode origin:lts-only -1 syz, C done 9 1263d 1324d 3/3 1227d 37cab61a52d6 fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()
WARNING: ODEBUG bug in __do_softirq origin:lts-only -1 syz, C done 1 1268d 1270d 3/3 1238d cff0af3d1364 net/sched: sch_ingress: Only create under TC_H_INGRESS
kernel BUG in end_page_writeback origin:lts-only -1 syz, C done 6 1277d 1327d 3/3 1246d 5cdb422c8391 f2fs: fix to avoid use-after-free for cached IPU bio
BUG: unable to handle kernel paging request in sctp_outq_tail 8 syz, C done 2 1305d 1337d 3/3 1273d 667eb99cf7c1 sctp: check send stream number after wait_for_sndbuf
BUG: unable to handle kernel paging request in io_arm_poll_handler 8 syz, C done 11 1324d 1334d 3/3 1287d f4ba55411cc8 io_uring: avoid null-ptr-deref in io_arm_poll_handler
WARNING: refcount bug in qrtr_node_lookup 13 syz, C done 1 1329d 1329d 3/3 1297d b9ba5906c420 net: qrtr: Fix a refcount bug in qrtr_recvmsg()
KASAN: use-after-free Read in hfsplus_releasepage 19 syz, C done 1 1336d 1336d 3/3 1303d 05103d88482d fs: hfsplus: fix UAF issue in hfsplus_put_super
possible deadlock in l2tp_tunnel_register 4 syz, C done 41 1335d 1338d 3/3 1303d 9ca5e7ecab06 l2tp: Avoid possible recursive deadlock in l2tp_tunnel_register()