Extra filters: [With Repro]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
INFO: rcu detected stall in perf_release (3) origin:lts-only 1 syz, C done 6 54d 140d 3/3 23h14m 6b552ffd21f9 rcu: Fix rcu_read_unlock() deadloop due to IRQ work
INFO: task hung in i2c_tiny_usb_disconnect origin:upstream 1 syz, C done 1 55d 88d 3/3 2d02h 1f1bcd4eca6c i2c: core: fix debugfs UAF on adapter removal
UBSAN: array-index-out-of-bounds in aiptek_irq 15 syz, C done 170 57d 147d 3/3 7d10h db947097f77a Input: aiptek - validate raw macro indices before updating state
WARNING in aa_policy_destroy origin:lts-only -1 syz, C done 28 65d 76d 3/3 20d 62f159fac764 apparmor: policy_int make sure list heads are initialized before fail path
WARNING in pkcs1pad_verify -1 syz, C done 13 77d 80d 3/3 40d bf7b8de87559 crypto: rsa-pkcs1pad: Don't WARN on an empty digest
KASAN: slab-out-of-bounds Read in usbatm_usb_disconnect 17 syz, C done 1 78d 78d 3/3 42d e814ae925f6f usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect
general protection fault in i915_pci_probe 2 syz, C done 30 79d 92d 3/3 44d 2239e6b49d33 drm/i915: Guard against NULL driver_data in i915_pci_probe()
UBSAN: array-index-out-of-bounds in snd_dummy_probe 15 syz, C done 2 87d 92d 3/3 52d 4d0892a90b57 ALSA: dummy: Check card index validity at probe
WARNING in usb_stor_msg_common/usb_submit_urb -1 22 54d 78d 3/3 52d 9c261a83131e usb-storage: ene_ub6250: fix race between scan work and probe
WARNING in nvmet_fc_alloc_ls_iodlist -1 syz, C done 1 88d 88d 3/3 57d 1a8f007faefe nvmet-fc: fix invalid free in LS IOD error path
INFO: task hung in __bread_gfp origin:lts-only 1 syz, C done 9 572d 642d 3/3 63d aa2ddcc65e85 block: make bio_check_eod work for zero sized devices
WARNING in firmware_fallback_sysfs origin:upstream missing-backport -1 syz, C error 256 104d 1319d 3/3 103d bbfedc847140 usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect()
BUG: unable to handle kernel paging request in nilfs_mdt_save_to_shadow_map 8 syz, C done 49 157d 231d 3/3 126d 7902b1df1520 nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map
inconsistent lock state in __sk_receive_skb 4 syz, C done 12 163d 200d 3/3 133d 02c04df84de7 phonet/pep: disable BH around forwarded sk_receive_skb()
INFO: task hung in ip6gre_exit_batch_net (2) origin:lts-only 1 syz, C done 1 174d 174d 3/3 142d 24a40df79307 ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3()
KASAN: slab-out-of-bounds Read in drop_buffers (2) origin:lts-only 17 syz, C inconclusive 18 210d 412d 3/3 208d 4a977fcc0d6a erofs: Fix the slab-out-of-bounds in drop_buffers()
INFO: task hung in z_erofs_runqueue origin:lts-only 1 syz, C inconclusive 232 212d 837d 3/3 208d c1172e65aad4 erofs: handle overlapped pclusters out of crafted images properly
INFO: rcu detected stall in sys_close origin:lts-only 1 syz, C done 1 335d 367d 3/3 297d f4bf3ca2e5cb softirq: Add trace points for tasklet entry/exit
KASAN: slab-out-of-bounds Write in copy_to_urb origin:lts-only 21 syz, C done 7 341d 344d 3/3 297d 2d5ce84a81a7 ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check
KASAN: slab-out-of-bounds Write in stack_map_get_build_id_offset origin:lts-only 21 syz, C done 3 354d 364d 3/3 297d f4bf3ca2e5cb softirq: Add trace points for tasklet entry/exit
BUG: unable to handle kernel paging request in bcsp_recv origin:upstream missing-backport 8 syz, C done 19 338d 557d 3/3 297d ca94b2b036c2 Bluetooth: bcsp: receive data only if registered
KASAN: use-after-free Read in hdm_disconnect 19 syz, C done 153 372d 801d 3/3 333d 4b1270902609 most: usb: Fix use-after-free in hdm_disconnect
WARNING in minix_rmdir -1 syz, C done 1 392d 392d 3/3 353d 73861970938a minixfs: Verify inode mode when loading from disk
UBSAN: shift-out-of-bounds in pcl726_attach -1 syz, C done 16 434d 462d 3/3 395d 96cb948408b3 comedi: pcl726: Prevent invalid irq number
kernel panic: stack is corrupted in __schedule (3) origin:upstream missing-backport 2 syz, C done 5 437d 543d 3/3 400d 7375f22495e7 fs/buffer: fix use-after-free when call bh_read() helper
WARNING in udf_process_sequence origin:lts-only -1 syz, C done 4 439d 444d 3/3 402d 1a11201668e8 udf: Verify partition map count
KASAN: use-after-free Read in rose_get_neigh 19 syz, C done 98 453d 597d 3/3 412d 34a500caf48c rose: fix dangling neighbour pointers in rose_rt_device_down()
BUG: unable to handle kernel paging request in preempt_schedule_irq 8 syz, C done 14 460d 499d 3/3 421d 7375f22495e7 fs/buffer: fix use-after-free when call bh_read() helper
kernel BUG in hpage_collapse_scan_file origin:lts-only -1 syz, C done 6 459d 463d 3/3 426d f1897f2f08b2 mm: khugepaged: fix call hpage_collapse_scan_file() for anonymous vma
UBSAN: shift-out-of-bounds in pcl812_attach origin:upstream -1 syz, C done 11 469d 480d 3/3 433d b14b076ce593 comedi: pcl812: Fix bit shift out of bounds
WARNING in comedi_unlocked_ioctl origin:upstream -1 syz, C done 13 471d 482d 3/3 435d 08ae4b20f5e8 comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
general protection fault in mcp_i2c_xfer origin:upstream missing-backport 2 syz, C done 32 473d 587d 3/3 441d f2d4a5834638 HID: mcp2221: Set driver data before I2C adapter add
WARNING in format_decode origin:upstream -1 syz, C done 314 480d 1083d 3/3 449d f8242745871f bpf: Reject %p% format string in bprintf-like helpers
general protection fault in htb_qlen_notify origin:lts-only 2 syz, C done 4 481d 482d 3/3 449d ffdde7bf5a43 net/sched: Abort __tc_modify_qdisc if parent class does not exist
WARNING in ath6kl_bmi_get_target_info -1 syz, C done 20 483d 739d 3/3 450d e7417421d893 wifi: ath6kl: remove WARN on bad firmware input
WARNING in dib0700_i2c_xfer/usb_submit_urb origin:upstream -1 syz, C done 3 506d 511d 3/3 472d 270aa0106206 mm/uffd: fix vma operation where start addr cuts part of vma
WARNING in ext4_iomap_begin (2) origin:upstream -1 syz, C done 10 507d 592d 3/3 476d 1a77a028a392 ext4: ensure i_size is smaller than maxbytes
INFO: trying to register non-static key in cfg80211_dev_free origin:lts-only -1 syz, C done 5 514d 563d 3/3 479d fc88dee89d7b wifi: cfg80211: init wiphy_work before allocating rfkill fails
possible deadlock in ocfs2_finish_quota_recovery origin:upstream 4 syz, C done 12 549d 642d 3/3 517d fcaf3b2683b0 ocfs2: stop quota recovery before disabling quotas
KASAN: use-after-free Read in __ocfs2_find_path 19 syz, C done 5 574d 759d 3/3 540d 81aba693b129 ocfs2: remove unreasonable unlock in ocfs2_read_blocks
WARNING in plfxlc_mac_release origin:upstream missing-backport -1 syz, C inconclusive 2 550d 660d 3/3 545d 93d646911be1 wifi: plfxlc: Remove erroneous assert in plfxlc_mac_release
UBSAN: array-index-out-of-bounds in txCommit (2) origin:lts-only 15 syz, C done 152 559d 1096d 3/3 552d a779ed754e52 jfs: define xtree root and page independently
UBSAN: shift-out-of-bounds in extAlloc origin:upstream missing-backport -1 syz, C done 204 569d 1333d 3/3 552d a779ed754e52 jfs: define xtree root and page independently
UBSAN: array-index-out-of-bounds in xtSearch (2) origin:lts-only 15 syz, C done 98 616d 1095d 3/3 552d a779ed754e52 jfs: define xtree root and page independently
UBSAN: array-index-out-of-bounds in xtInsert origin:lts-only 15 syz, C done 1331 559d 1330d 3/3 552d a779ed754e52 jfs: define xtree root and page independently
BUG: unable to handle kernel NULL pointer dereference in ntfs_sparse_cluster origin:lts-only 10 syz, C done 375 850d 1330d 3/3 586d 406a037d93b7 fs/ntfs3: Change new sparse cluster processing
WARNING in ar5523_submit_rx_cmd/usb_submit_urb origin:upstream missing-backport -1 syz, C done 7 632d 1284d 3/3 598d 34f7ebff1b96 wifi: ar5523: enable proper endpoint verification
possible deadlock in team_port_change_check origin:upstream 4 syz, C done 61 631d 947d 3/3 598d adff6ac889e1 team: prevent adding a device which is already a team device lower
KASAN: use-after-free Read in ocfs2_get_next_id origin:lts-only 19 syz, C done 4 660d 661d 3/3 628d 2d4311924863 ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
kernel BUG in close_ctree origin:upstream missing-backport -1 syz, C done 622 666d 1333d 3/3 633d 902806baf3c1 drm/bridge: adv7511_audio: Update Audio InfoFrame properly
INFO: task hung in __fdget_pos (3) origin:lts-only 1 syz, C done 1 672d 674d 3/3 637d 31beabd0f47f exfat: fix the infinite loop in exfat_readdir()
divide error in drm_mode_debug_printmodeline origin:upstream 2 syz, C done 1 683d 1147d 3/3 645d 69fbb01e8917 drm/modes: Avoid divide by zero harder in drm_mode_vrefresh()
WARNING in nilfs_rmdir -1 syz, C done 42 683d 706d 3/3 646d ef942d233643 nilfs2: prevent use of deleted inode
WARNING in inet_sock_destruct origin:upstream missing-backport -1 syz, C done 631 690d 1303d 3/3 647d ca70b8baf2bd tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
WARNING in netdev_queue_update_kobjects (2) origin:lts-only -1 syz, C done 344 690d 734d 3/3 649d 27aabf27fd01 Bluetooth: fix use-after-free in device_for_each_child()
WARNING: locking bug in ext4_move_extents origin:upstream missing-backport 4 syz, C done 1248 691d 1245d 3/3 651d be063ffa28bc locking/lockdep: Avoid creating new name string literals in lockdep_set_subclass()
KASAN: slab-out-of-bounds Read in ea_get origin:upstream missing-backport 17 syz, C done 5 694d 1251d 3/3 652d d9f9d96136cb jfs: xattr: check invalid xattr size more strictly
INFO: rcu detected stall in sys_newfstatat origin:upstream 1 syz, C done 8 698d 1235d 3/3 655d d77278196441 devlink: bump the instance index directly when iterating
UBSAN: shift-out-of-bounds in dbSplit -1 syz, C done 18 716d 933d 3/3 665d 51a203470f50 jfs: fix shift-out-of-bounds in dbSplit
INFO: task hung in blkdev_get_by_dev origin:lts-only 1 syz, C done 25 724d 1011d 3/3 672d d77278196441 devlink: bump the instance index directly when iterating
WARNING in ieee80211_get_max_required_bw origin:lts-only -1 syz, C done 25 725d 739d 3/3 679d 5cf45281a6ee Revert "wifi: mac80211: fix RCU list iterations"
WARNING in media_create_pad_link origin:upstream -1 syz, C error 2 794d 1326d 3/3 690d 19464d732252 media: uvcvideo: Require entities to have a non-zero unique ID
kernel BUG in ocfs2_truncate_inline origin:lts-only -1 syz, C done 4 736d 739d 3/3 690d 2fe5d62e122b ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
BUG: unable to handle kernel NULL pointer dereference in lookup_one_unlocked origin:upstream 10 syz, C 2 718d 718d 3/3 690d ff43d008bbf9 ovl: Filter invalid inodes with missing lookup function
SYZFAIL: tun: can't open /dev/net/tun origin:upstream -1 syz done 1 766d 1070d 3/3 733d d77278196441 devlink: bump the instance index directly when iterating
kernel BUG in jbd2_cleanup_journal_tail origin:upstream -1 syz, C done 9 768d 779d 3/3 737d 82dfdd1e31e7 ocfs2: fix null-ptr-deref when journal load failed.
INFO: task hung in ext4_quota_write origin:upstream missing-backport 1 syz, C done 9 803d 1044d 3/3 758d 0752e7fb549d ext4: do not create EA inode under buffer lock
UBSAN: shift-out-of-bounds in dbDiscardAG (2) origin:lts-only -1 syz, C done 5 808d 813d 3/3 773d 7063b80268e2 jfs: Fix shift-out-of-bounds in dbDiscardAG
WARNING in cset_cgroup_from_root origin:lts-only -1 syz, C done 139 808d 824d 3/3 773d d23b5c577715 cgroup: Make operations on the cgroup root_list RCU safe
possible deadlock in hfsplus_file_extend origin:upstream missing-backport 4 syz, C done 2760 824d 1332d 3/3 788d c11c3a4524be hfsplus: fix to avoid false alarm of circular locking
WARNING in skb_checksum_help origin:upstream missing-backport -1 syz, C done 2523 827d 1245d 3/3 793d e269d79c7d35 net: missing check virtio
possible deadlock in rds_wake_sk_sleep origin:upstream missing-backport 4 syz, C done 1 830d 1242d 3/3 793d 2c66293a452c net:rds: Fix possible deadlock in rds_message_put
KASAN: stack-out-of-bounds Read in profile_pc 17 syz, C done 690 853d 1270d 3/3 812d 093d9603b600 x86: stop playing stack games in profile_pc()
WARNING in __xdp_reg_mem_model origin:upstream -1 syz, C done 2 861d 932d 3/3 821d 7e9f79428372 xdp: Remove WARN() from __xdp_reg_mem_model()
WARNING in skb_ensure_writable -1 syz, C done 496 861d 936d 3/3 821d dacc15e9cb24 bpf: Avoid splat in pskb_pull_reason
possible deadlock in console_emit_next_record origin:upstream 4 syz, C done 38 863d 1065d 3/3 822d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
WARNING in ieee80211_check_rate_mask origin:lts-only -1 syz, C done 10 825d 1087d 3/3 824d 139faad888ef wifi: mac80211: check basic rates validity
BUG: unable to handle kernel paging request in bpf_dispatcher_xdp origin:lts-only 8 syz, C done 16 1008d 1313d 3/3 824d d0d2df38f5d0 bpf: Synchronize dispatcher update with bpf_dispatcher_xdp_func
WARNING: lock held when returning to user space in f2fs_write_single_data_page origin:upstream missing-backport 4 syz, C done 1 1051d 1255d 3/3 831d f2ba11ba9325 f2fs: avoid dead loop in f2fs_issue_checkpoint()
kernel BUG in create_pending_snapshot origin:lts-only -1 syz, C done 4 1110d 1292d 3/3 831d 588df4829d7f btrfs: do not BUG_ON on failure to get dir index for new snapshot
KASAN: use-after-free Read in try_to_wake_up origin:upstream missing-backport 19 syz, C done 44 881d 1312d 3/3 836d 1c3844c5f4ea nilfs2: fix potential hang in nilfs_detach_log_writer()
kernel BUG in submit_bh_wbc origin:lts-only -1 syz, C done 19 882d 1310d 3/3 838d f2f26b4a84a0 nilfs2: fix failure to detect DAT corruption in btree and direct mappings
possible deadlock in scheduler_tick origin:upstream missing-backport 4 syz, C done 237 901d 960d 3/3 862d 6693b172f008 bpf: Allow delete from sockmap/sockhash only if update is allowed
kernel BUG in ipgre_header origin:upstream -1 syz, C error 5 923d 1083d 3/3 863d 3cffa2ddc4d3 bonding: stop the device in bond_setup_by_slave()
WARNING in vmk80xx_write_packet/usb_submit_urb origin:upstream -1 syz, C done 1 928d 961d 3/3 892d d1718530e3f6 comedi: vmk80xx: fix incomplete endpoint checking
WARNING in gre_tap_xmit origin:upstream -1 syz, C done 2 929d 929d 3/3 894d 42f853b42899 net l2tp: drop flow hash on forward
possible deadlock in rcu_report_exp_cpu_mult 4 syz, C done 7 938d 963d 3/3 902d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
WARNING in sock_map_unref -1 syz, C done 18 939d 942d 3/3 904d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
BUG: soft lockup in sys_sendmsg (2) origin:upstream 1 syz, C done 1 942d 942d 3/3 904d b1f532a3b1e6 batman-adv: Avoid infinite loop trying to resize local TT
possible deadlock in swake_up_one 4 syz, C done 1 941d 941d 3/3 904d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in __hrtimer_run_queues (2) 4 syz, C done 2 940d 946d 3/3 909d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in unix_notinflight 4 syz, C done 1 941d 941d 3/3 910d b46f4eaa4f0e af_unix: Clear stale u->oob_skb.
WARNING in __mod_timer -1 syz, C done 1 951d 951d 3/3 920d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in try_to_wake_up 4 syz, C done 1 952d 952d 3/3 920d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
BUG: unable to handle kernel paging request in bpf_probe_read_kernel_str origin:upstream 8 syz, C done 1 972d 1002d 3/3 941d 32019c659ecf x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()
WARNING in ieee80211_bss_info_change_notify -1 syz, C done 442 976d 1338d 3/3 945d f78c1375339a wifi: nl80211: reject iftype change with mesh ID change
BUG: unable to handle kernel paging request in bit_putcs 8 syz, C done 4 977d 1172d 3/3 946d 00d6a284fcf3 fbcon: always restore the old font data in fbcon_do_set_font()
KASAN: slab-out-of-bounds Read in ntfs_listxattr 17 syz, C done 52 980d 1317d 3/3 947d 731ab1f98288 fs/ntfs3: Fix oob in ntfs_listxattr
BUG: unable to handle kernel NULL pointer dereference in sk_psock_verdict_data_ready origin:upstream 10 syz, C done 1 995d 995d 3/3 962d 4588b13abcbd bpf, sockmap: Fix NULL pointer dereference in sk_psock_verdict_data_ready()
UBSAN: array-index-out-of-bounds in diNewExt origin:lts-only 15 syz, C done 2 1017d 1017d 3/3 976d 58fca355ad37 drm/amd/display: Implement bounds check for stream encoder creation in DCN301
possible deadlock in hci_rfkill_set_block 4 syz, C done 1032 1039d 1107d 3/3 1000d 769bf60e17ee Bluetooth: Fix deadlock in vhci_send_frame
UBSAN: shift-out-of-bounds in scalar32_min_max_arsh origin:upstream -1 syz, C done 1 1050d 1050d 3/3 1020d 4bb7ea946a37 bpf: fix precision backtracking instruction iteration
general protection fault in __unmap_hugepage_range_final origin:upstream 2 syz, C done 13 1060d 1099d 3/3 1029d 574a6db80f3e hugetlb: fix null-ptr-deref in hugetlb_vma_lock_write
WARNING in fib6_add -1 syz, C done 2 1059d 1226d 3/3 1029d 75475bb51e78 ipv6: fix potential NULL deref in fib6_add()
WARNING in __kernel_write_iter origin:upstream -1 syz, C done 224 1067d 1325d 3/3 1036d 0ac1d13a55eb btrfs: send: ensure send_fd is writable
WARNING in lookup_inline_extent_backref origin:upstream -1 syz, C done 2 1069d 1237d 3/3 1039d a8892fd71933 btrfs: do not allow non subvolume root targets for snapshot
WARNING in nilfs_sufile_set_segment_usage origin:upstream -1 syz, C done 4 1086d 1333d 3/3 1052d 675abf8df135 nilfs2: prevent WARNING in nilfs_sufile_set_segment_usage()
KASAN: use-after-free Read in unix_stream_read_actor origin:lts-only 19 syz, C done 1 1086d 1090d 3/3 1052d 4b7b492615cf af_unix: fix use-after-free in unix_stream_read_actor()
WARNING in __alloc_skb origin:upstream -1 syz, C done 2 1092d 1092d 3/3 1060d c0a2a1b0d631 ppp: limit MRU to 64K
WARNING in imon_probe origin:upstream -1 syz done 2 1172d 1241d 3/3 1065d a1766a4fd83b media: imon: fix access to invalid resource for the second interface
WARNING in inet_csk_get_port origin:upstream -1 syz, C done 11 1114d 1143d 3/3 1081d 8b9c79c0ecd2 tcp: Fix listen() warning with v4-mapped-v6 address.
KASAN: use-after-free Read in diFree origin:lts-only 19 syz, C done 7 1134d 1295d 3/3 1102d 4de3a603010e jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount
possible deadlock in f2fs_getxattr origin:upstream missing-backport 4 syz, C done 1043 1143d 1200d 3/3 1107d 980b592c6087 f2fs: avoid false alarm of circular locking
UBSAN: array-index-out-of-bounds in f2fs_iget origin:upstream 15 syz, C done 1 1172d 1172d 3/3 1121d 0d545a8e77cb Revert "f2fs: fix to do sanity check on extent cache correctly"
WARNING in bpf_xdp_adjust_tail -1 syz, C done 238 1177d 1338d 3/3 1123d 20acffcdc2b7 net: core: remove unnecessary frame_sz check in bpf_xdp_adjust_tail()
WARNING in sta_info_insert_rcu origin:upstream -1 syz, C done 1 1180d 1180d 3/3 1126d 676a42341013 wifi: cfg80211: reject auth/assoc to AP with our address
KASAN: null-ptr-deref Write in get_block origin:upstream missing-backport 12 syz, C done 4 1189d 1235d 3/3 1130d 1416eebaad80 fs/sysv: Null check to prevent null-ptr-deref bug
UBSAN: shift-out-of-bounds in dbUpdatePMap origin:upstream -1 syz, C done 1 1201d 1242d 3/3 1134d c7feb54b1138 jfs: jfs_dmap: Validate db_l2nbperpage while mounting
WARNING in corrupted -1 syz, C done 3 1208d 1327d 3/3 1135d 8abb53c5167c media: usb: siano: Fix warning due to null work_func_t function pointer
WARNING in usbnet_start_xmit/usb_submit_urb origin:lts-only -1 syz, C done 2 1201d 1272d 3/3 1135d 1bebbd9b8037 net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
WARNING in smsusb_start_streaming -1 syz, C done 1 1205d 1205d 3/3 1135d 8abb53c5167c media: usb: siano: Fix warning due to null work_func_t function pointer
WARNING in smsusb_term_device -1 syz, C done 131 1206d 1327d 3/3 1135d 8abb53c5167c media: usb: siano: Fix warning due to null work_func_t function pointer
BUG: unable to handle kernel NULL pointer dereference in indx_find origin:lts-only 10 syz, C done 3 1210d 1331d 3/3 1135d 0e8235d28f3a fs/ntfs3: Check fields while reading
UBSAN: shift-out-of-bounds in dbFree origin:upstream -1 syz, C done 1 1219d 1283d 3/3 1139d c7feb54b1138 jfs: jfs_dmap: Validate db_l2nbperpage while mounting
UBSAN: array-index-out-of-bounds in xtSearch origin:upstream 15 syz, C done 3 1215d 1292d 3/3 1139d f27f759f4cd4 jfs: validate max amount of blocks before allocation.
INFO: rcu detected stall in sock_close origin:upstream 1 syz, C done 1 1214d 1214d 3/3 1139d e739718444f7 net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
WARNING in btrfs_remove_chunk origin:lts-only -1 syz, C done 10 1225d 1315d 3/3 1143d 604e6681e114 btrfs: scrub: reject unsupported scrub flags
KASAN: use-after-free Read in gsm_cleanup_mux 19 syz, C done 4 1226d 1292d 3/3 1151d 3c4f8333b582 tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
BUG: unable to handle kernel NULL pointer dereference in hdr_find_e origin:upstream missing-backport 10 syz, C done 23 1228d 1324d 3/3 1153d 0e8235d28f3a fs/ntfs3: Check fields while reading
BUG: unable to handle kernel paging request in sctp_outq_tail origin:lts-only 8 syz, C done 2 1231d 1336d 3/3 1171d d2128636b303 sctp: check send stream number after wait_for_sndbuf
possible deadlock in static_key_slow_inc 4 syz, C done 1908 1226d 1338d 3/3 1176d 0d7a4e6589a0 cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex in freezer_css_{online,offline}()
kernel BUG in btrfs_global_root_insert -1 syz, C done 5 1235d 1305d 3/3 1186d 4389fb6b6a9d btrfs: do not ASSERT() on duplicated global roots
kernel BUG in btrfs_global_root_delete -1 syz, C done 6 1236d 1303d 3/3 1191d 4389fb6b6a9d btrfs: do not ASSERT() on duplicated global roots
BUG: soft lockup in addrconf_rs_timer 1 syz, C done 26 1240d 1252d 3/3 1193d cd2b8113c2e8 net/sched: fq_pie: ensure reasonable TCA_FQ_PIE_QUANTUM values
WARNING in nilfs_segctor_do_construct -1 syz, C done 2 1242d 1271d 3/3 1198d 69caea4eed1c nilfs2: fix possible out-of-bounds segment allocation in resize ioctl
BUG: soft lockup in fq_pie_timer 1 syz, C done 7 1244d 1252d 3/3 1202d cd2b8113c2e8 net/sched: fq_pie: ensure reasonable TCA_FQ_PIE_QUANTUM values
possible deadlock in ext4_xattr_set_handle 4 syz, C done 15 1246d 1334d 3/3 1207d b112babc565e ext4: add EA_INODE checking to ext4_iget()
kernel BUG in __phys_addr -1 syz, C done 2 1245d 1276d 3/3 1207d 98bea253aa28 fs/ntfs3: Validate MFT flags before replaying logs
BUG: soft lockup in tc_modify_qdisc origin:upstream 1 syz, C done 1 1250d 1250d 3/3 1214d cd2b8113c2e8 net/sched: fq_pie: ensure reasonable TCA_FQ_PIE_QUANTUM values
INFO: task hung in usbdev_open origin:lts-only 1 syz, C done 3 1257d 1314d 3/3 1225d d5dba4b7bf90 USB: sisusbvga: Add endpoint checks
WARNING in hfsplus_cat_write_inode origin:lts-only -1 syz, C done 9 1261d 1321d 3/3 1227d 48960a503fce fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()
WARNING in hfsplus_cat_read_inode origin:lts-only -1 syz, C done 24 1261d 1302d 3/3 1227d 48960a503fce fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()
WARNING: bad unlock balance in l2cap_disconnect_rsp origin:lts-only 4 syz, C done 37 1260d 1294d 3/3 1227d fd269a0435f8 Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp
WARNING: bad unlock balance in l2cap_recv_frame origin:lts-only 4 syz, C done 22 1263d 1294d 3/3 1227d fd269a0435f8 Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp
KASAN: slab-out-of-bounds Read in xfs_btree_lookup_get_block origin:lts-only 17 syz, C done 1 1263d 1264d 3/3 1232d 22ed903eee23 xfs: verify buffer contents when we skip log replay
possible deadlock in ext4_multi_mount_protect origin:upstream 4 syz, C done 165 1268d 1310d 3/3 1235d 19fb73b8eaef ext4: fix lockdep warning when enabling MMP
WARNING in __virt_to_phys origin:lts-only -1 syz, C done 1 1267d 1273d 3/3 1235d 98bea253aa28 fs/ntfs3: Validate MFT flags before replaying logs
WARNING in kvfree -1 syz, C done 3 1278d 1315d 3/3 1246d c5fa4eedddd1 ext4: fix invalid free tracking in ext4_xattr_move_to_block()
WARNING in ath6kl_htc_pipe_rx_complete -1 syz, C done 1 1284d 1284d 3/3 1252d 644df7e865e7 wifi: ath6kl: reduce WARN to dev_dbg() in callback
WARNING in split_huge_page_to_list -1 syz, C done 140 1288d 1334d 3/3 1254d e8a7bdb6f76c mm/huge_memory.c: warn with pr_warn_ratelimited instead of VM_WARN_ON_ONCE_FOLIO
possible deadlock in blkcg_deactivate_policy 4 syz, C done 168 1290d 1336d 3/3 1254d b5dae1cd0d83 Revert "blk-cgroup: synchronize pd_free_fn() from blkg_free_workfn() and blkcg_deactivate_policy()"
general protection fault in io_poll_remove_entries 11 syz, C done 21 1313d 1331d 3/3 1282d 005308f7bdac io_uring/poll: clear single/double poll flags on poll arming
WARNING in ip6erspan_tunnel_xmit -1 syz, C done 1 1325d 1325d 3/3 1294d 8e50ed774554 erspan: do not use skb_mac_header() in ndo_start_xmit()
WARNING: refcount bug in qrtr_node_lookup 13 syz, C done 1 1329d 1329d 3/3 1298d aa95efa187b4 net: qrtr: Fix a refcount bug in qrtr_recvmsg()
possible deadlock in l2tp_tunnel_register 4 syz, C done 44 1336d 1338d 3/3 1303d 9ca5e7ecab06 l2tp: Avoid possible recursive deadlock in l2tp_tunnel_register()
WARNING in fscrypt_destroy_keyring -1 syz, C done 1 1334d 1334d 3/3 1303d d77531fac6a1 fscrypt: destroy keyring after security_sb_delete()
possible deadlock in throtl_pending_timer_fn 4 syz, C done 266 1335d 1336d 3/3 1303d b5dae1cd0d83 Revert "blk-cgroup: synchronize pd_free_fn() from blkg_free_workfn() and blkcg_deactivate_policy()"
KASAN: use-after-free Read in hfsplus_release_folio 19 syz, C done 2 1337d 1337d 3/3 1303d 0c80bef0b7d2 fs: hfsplus: fix UAF issue in hfsplus_put_super