Applied filters: Label=prio:normal (drop)
Extra filters: [With Repro]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
INFO: task hung in xfs_buf_item_unpin (2) prio:normal xfs 1 syz, C done done 160 15d 803d 27/29 never 41a28c865d1d xfs: don't hold buffer locks across sync transaction commit in xfs_sync_sb_buf
WARNING: suspicious RCU usage in xfrm_nlmsg_multicast prio:normal net 4 syz, C error 163 44d 89d 26/29 never 42d100f5232f xfrm: add missing RCU read lock in xfrm_send_migrate_state()
divide error in mac80211_hwsim_link_info_changed (3) prio:normal wireless 2 6 76d 183d 26/29 never 3f28551d0241 wifi: mac80211: reset state when starting AP fails
memory leak in ieee80211_mesh_csa_beacon prio:normal wireless 3 syz, C 4 45d 65d 26/29 never 860134b3af77 wifi: mac80211: mesh: reset the CSA state when leaving
UBSAN: array-index-out-of-bounds in snd_dummy_probe prio:normal sound 15 syz, C 14 84d 83d 27/29 never 02442d5fe8ee ALSA: dummy: Check card index validity at probe
KASAN: use-after-free Read in kvm_setup_guest_pvclock prio:normal kvm-x86 19 syz, C 5 90d 120d 22/29 never da260bcb56fe KVM: pfncache: use a dedicated invalidation sequence for cache refresh
divide error in tcp_rcv_space_adjust (4) prio:normal net 2 4 61d 78d 26/29 never 83a945a529d6 UPSTREAM: tcp: do not let tcp_rmem be set below 4096
general protection fault in __bch2_err_trace prio:normal fs 2 syz, C done 25 393d 448d 2/29 never bcachefs: Delete faulty read_only/nochanges check in fs_open()
kernel BUG in do_bch2_trans_commit_to_journal_replay prio:normal fs -1 syz 22 461d 465d 2/29 never bcachefs: do_bch2_trans_commit_to_journal_replay handles accounting
WARNING in super_dev_register prio:normal fuse -1 syz, C 10 114d 117d 28/29 never 83887ad02f30 block: reject block device inodes with i_rdev == 0 in lookup_bdev()
BUG: using smp_processor_id() in preemptible code in bpf_mem_cache_free_rcu prio:normal bpf 4 syz, C error 2284 13d 120d 26/29 never de020dc8049b bpf: Fix missing migration protection in __rhtab_map_lookup_and_delete_batch()
UBSAN: array-index-out-of-bounds in print_bpf_insn (2) prio:normal bpf 17 syz, C 5821 37d 69d 27/29 never 37e5c4f4d285 bpf: Reject invalid LDSX instruction in disassembly
KASAN: slab-use-after-free Read in add_root_to_dirty_list prio:normal actionable btrfs 19 4 15d 21d 4/29 never btrfs: fix use-after-free on quota enable allocation failure btrfs: fix use-after-free on quota enable allocation failure
WARNING in btrfs_init_new_device prio:normal btrfs -1 syz, C error 194 3h15m 79d 2/29 never btrfs: unwind device add when sysfs registration fails
KASAN: slab-use-after-free Write in config_item_get prio:normal fs 22 syz, C error 8 70d 90d 27/29 never f06c2d26d199 configfs: unhash the dentry before dropping the item in rmdir
KASAN: slab-out-of-bounds Read in ctl_ioctl prio:normal dm 17 syz, C 4 25d 39d 25/29 never 9b3fcf519d37 dm ioctl: don't let data_start run past the buffer
KASAN: wild-memory-access Write in __journal_read_write prio:normal dm 21 C 2 27d 27d 25/29 never fc79aeb86a2c dm-integrity: validate the superblock on resume
KASAN: slab-use-after-free Read in dm_table_get_mode prio:normal dm 19 syz, C 1 36d 35d 25/29 never c9417c1c5269 dm: fix reading free memory in do_resume
WARNING in do_new_mount (6) prio:normal fs -1 83 32d 53d 26/29 never 1abd643f3783 fs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbot's "WARNING in do_new_mount" saga
general protection fault in __ip6_del_rt_siblings prio:normal net 2 1 55d 53d 27/29 never cdca92eddc02 ipv6: null-check fib6_node before accessing in __ip6_del_rt_siblings()
possible deadlock in xsk_diag_dump (3) prio:normal bpf net 4 6 57d 64d 27/29 never a8455260b2e9 ipvlan: unregister upper devices outside pnodes_lock
possible deadlock in ipvlan_uninit prio:normal net 4 syz, C error 7402 33d 108d 27/29 never a8455260b2e9 ipvlan: unregister upper devices outside pnodes_lock
KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop prio:normal usb 17 506 65d 386d 27/29 never 2eed77fdcb0c kcov: fix data corruption and race conditions on PREEMPT_RT
KASAN: vmalloc-out-of-bounds Read in kcov_remote_start prio:normal bluetooth 17 3647 65d 388d 27/29 never 2eed77fdcb0c kcov: fix data corruption and race conditions on PREEMPT_RT
kernel BUG in sock_sendmsg_nosec prio:normal net -1 syz, C 2 58d 58d 27/29 never 73e594c19b4f af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header().
general protection fault in _wait_barrier prio:normal raid 2 C 3 3d17h 61d 2/29 never md: Fix the null-ptr-deref of 'mddev->private' while submitting IO
WARNING: kobject bug in bind_rdev_to_array prio:normal raid -1 24 1d00h 38d 2/29 never md: don't hand out the array before md_alloc() has added mddev->kobj
KASAN: slab-use-after-free Read in __dynamic_dev_dbg prio:normal driver-core media 19 syz, C 540 21h09m 41d 20/29 never 118a3590a408 media: imon: fix use-after-free in display_close via dev_dbg
KASAN: slab-use-after-free Read in vidtv_bridge_on_new_pkts_avail prio:normal media 19 C 10 46d 64d 20/29 never 2af02ccd048b media: vidtv: fix uaf in vidtv_bridge_on_new_pkts_avail
KASAN: vmalloc-out-of-bounds Write in tpg_fill_plane_buffer (5) prio:normal media 21 C 43 13h46m 95d 20/29 never a2ec28dd2a88 media: vivid: round the height down to the vertical subsampling factor
WARNING in cfg80211_pernet_exit prio:normal -1 C error 1 62d 57d 27/29 never debac3a20dec net: Remove conflicting altnames for dying netns in __dev_change_net_namespace().
possible deadlock in sch_direct_xmit (6) prio:normal net 4 332 4d05h 170d 24/29 never 2d36ec73836e net: erspan: set lltx to avoid sch_direct_xmit deadlock
KASAN: slab-use-after-free Read in nla_put_napi_id prio:normal net 19 3 64d 72d 27/29 never 07e98a4d5e9c netdevsim: update queue NAPI association on queue reset
KASAN: slab-use-after-free Read in netdev_nl_queue_fill_one prio:normal net 19 13 63d 81d 27/29 never 07e98a4d5e9c netdevsim: update queue NAPI association on queue reset
WARNING: suspicious RCU usage in expect_iter_name prio:normal netfilter 4 syz, C error 1558 25d 46d 26/29 never 207d591c3532 netfilter: ctnetlink: fix suspicious RCU usage in expect_iter_name
INFO: task hung in nilfs_transaction_begin (3) prio:normal nilfs 1 syz, C error 7 57d 104d 27/29 never ce5a5ad1a833 nilfs2: fix infinite loop in nilfs_clean_segments()
BUG: corrupted list in nilfs_lookup_dirty_data_buffers prio:normal nilfs 8 syz, C 3 103d 125d 27/29 never a1735eae5544 nilfs2: reject invalid block index in GC ioctl
WARNING in nilfs_segctor_abort_construction (3) prio:normal nilfs -1 3 115d 147d 27/29 never 6b38b82be46b nilfs2: suppress false positive WARN_ONs for sufile after an FS error
WARNING in blk_revalidate_disk_zones prio:normal block -1 9 56d 76d 27/29 never 4e1f23f9c33c null_blk: serialize configfs attribute updates with device setup
KASAN: slab-use-after-free Read in nvmf_free_options prio:normal actionable nvme 19 4 55d 78d 27/29 never 56e6279266f6 nvme-fc: fix double free of fabrics options when nvme_add_ctrl() fails
KASAN: null-ptr-deref Write in fput prio:normal ocfs2 12 syz, C error error 4 36d 80d 2/29 never ocfs2/heartbeat: serialize concurrent writes to a region's dev attribute
WARNING in __rt_mutex_slowlock_locked (3) prio:normal ocfs2 -1 syz, C error 3 128d 130d 27/29 never 2fdf181afd43 ocfs2: use inode_lock_nested() for orphan dir locking
KASAN: slab-use-after-free Read in dentry_name prio:normal actionable overlayfs 19 2 31d 38d 26/29 never ae146bc1abde ovl: fix UAF in ovl_do_mkdir() debug print
KASAN: slab-out-of-bounds Read in reg_fixed_voltage_probe prio:normal kernel 17 syz, C 7 67d 68d 24/29 never f7396c2dbbc1 regulator: fixed: reject incompatible platform devices
KASAN: slab-use-after-free Read in ring_buffer_iter_advance prio:normal actionable trace 19 1 89d 85d 28/29 never bf98d7b0d5a9 ring-buffer: Prevent subbuf order change when resizing is disabled
KASAN: slab-use-after-free Read in cifs_crypto_secmech_release prio:normal actionable cifs 19 1 12d 8d09h 2/29 never smb: client: hold server info until cifsd exits
KASAN: use-after-free Read in ring_buffer_peek prio:normal 19 C 1 76d 72d 27/29 never 372f8534244d tracing: Fix use-after-free in trace_pipe read on sub-buffer order change
KASAN: slab-use-after-free Read in f_midi2_opts_iface_name_show prio:normal usb 19 12 67d 75d 27/29 never fed0aa7c6eae usb: gadget: f_midi2: fix use-after-free in string attribute show path
WARNING: refcount bug in trace_suspend_resume (2) prio:normal usb 13 syz, C 5 58d 79d 20/29 never cb3b441f2698 usb: gadget: fix refcount underflow in gadgetfs_bind() error path
KASAN: stack-out-of-bounds Write in append_midi1_out_jack prio:normal usb 21 C 6 48d 62d 26/29 never 310c2d4608d8 usb: gadget: midi2: Fix the jack descriptor array sizes
KASAN: slab-use-after-free Read in trace_event_raw_event_udc_log_req prio:normal usb 19 C 2 41d 82d 27/29 never bdab5605259b usb: gadget: uvc: fix dangling pointers in uvc_function_bind() and uvc_function_unbind()
KMSAN: uninit-value in cfg80211_classify8021d prio:normal wireless 7 syz, C 24 218d 372d 26/29 never 48b2c5c628b0 wifi: cfg80211: check IP header size in cfg80211_classify8021d()
INFO: task hung in inet_rtm_newaddr prio:normal net 1 syz, C done 312 6h00m 671d 26/29 never f4e72e375807 wifi: cfg80211: reduce RTNL holding in regulatory enforcement
general protection fault in ieee80211_put_srates_elem prio:normal wireless 2 syz, C error error 15 191d 281d 26/29 never ac7472a24bd4 wifi: mac80211: abort chanswitch when leaving a mesh
WARNING in __ieee80211_start_scan (2) prio:normal wireless -1 2 13d 135d 26/29 never cd54bf333f56 wifi: mac80211: add HE 6 GHz capability in the scan elems len
WARNING in mac80211_hwsim_tx (2) prio:normal wireless -1 syz, C error 448 10h03m 170d 26/29 never e14bf37bb2b3 wifi: mac80211: don't allow injecting frames wider than the chanctx
BUG: using smp_processor_id() in preemptible code in ieee80211_tx_control_port prio:normal wireless 4 syz, C error 32 44d 48d 24/29 never aaf06d7cb648 wifi: mac80211: fix stats/preemption in ieee80211_tx_control_port()
WARNING in nf_flow_offload_ip_hook prio:normal netfilter -1 syz, C done 9 85d 85d 29/29 44d 8aecf0bbcc72 netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()
KASAN: slab-out-of-bounds Read in ieee80211_ie_split_ric (3) prio:normal wireless 17 syz, C 2 92d 110d 29/29 44d a2f5286ca4f3 wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie()
KASAN: use-after-free Read in ptdump_pte_entry (2) actionable prio:normal mm 19 1 147d 140d 29/29 44d 26444eb71465 mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF
memory leak in vlan_vid_add prio:normal net 3 syz, C 1 99d 113d 29/29 71d dcf15eaf5641 net: hsr: fix memory leak on slave unregistration by removing synced VLANs
divide error in mac80211_hwsim_write_tsf prio:normal wireless 2 1 131d 127d 29/29 80d 23b493d9dc5f wifi: mac80211_hwsim: avoid treating MCS as legacy rate index
KASAN: slab-use-after-free Read in debugfs_u32_get (2) prio:normal driver-core fs 19 syz 1 122d 132d 29/29 91d 2e996ca81f95 netdevsim: remove ethtool debugfs files before freeing netdev
BUG: sleeping function called from invalid context in netif_rx_mode_run prio:normal net 5 1 155d 151d 29/29 99d 5eec4427b89c bridge: Fix sleep in atomic context in netlink path
KASAN: slab-use-after-free Read in bnep_add_connection actionable prio:normal bluetooth 19 1 162d 155d 29/29 104d 59e932ded949 Bluetooth: bnep: Fix UAF read of dev->name
WARNING: refcount bug in nsim_fib_event_nb (3) prio:normal net 13 10 133d 140d 29/29 105d 06b693d2eb66 ipv4: fib: Don't dump dying fib_info in fib_leaf_notify().
general protection fault in can_rx_unregister (2) prio:normal can 8 syz, C 3 157d 157d 29/29 105d 8ba68464e478 bonding: refuse to enslave CAN devices
KCSAN: data-race in hash_ip4_add / hash_ip4_head prio:normal netfilter 6 1 217d 216d 29/29 105d 2358f7427ccd netfilter: ipset: Fix data race between add and dump in all hash types
KASAN: vmalloc-out-of-bounds Write in tpg_fill_plane_buffer (4) prio:normal media 21 255 105d 471d 29/29 105d c2d1a2130c93 media: vivid: check for vb2_is_busy() when toggling caps
general protection fault in kernel_sock_shutdown (4) rdma prio:normal 19 syz, C 105 146d 187d 29/29 105d 0b28000b64f4 RDMA/nldev: Add mutual exclusion in nldev_dellink()
general protection fault in skb_segment (5) prio:normal net 2 34 134d 137d 29/29 105d 2bf43d0e2e6a tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF)
BUG: using smp_processor_id() in preemptible code in cpu_mt prio:normal netfilter 4 4 136d 161d 29/29 105d c376f07e16c0 netfilter: xt_cpu: prefer raw_smp_processor_id
KASAN: slab-use-after-free Read in sk_msg_recvmsg prio:normal bpf net 19 syz, C error error 3 259d 254d 29/29 105d c010995b29c8 sockmap: Fix use-after-free in udp_bpf_recvmsg()
UBSAN: shift-out-of-bounds in ieee80211_parse_tx_radiotap prio:normal wireless -1 syz, C error 67 145d 150d 29/29 105d 6c0cf89f36ac wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap
KASAN: slab-use-after-free Read in snd_pcm_oss_look_for_setup (2) prio:normal sound 19 1 163d 158d 29/29 105d 4cc54bdd54b3 ALSA: pcm: oss: Fix setup list UAF on proc write error
general protection fault in h4_recv prio:normal bluetooth 2 syz, C error 4 206d 202d 29/29 126d 902fe40bce70 Bluetooth: hci_uart: Fix NULL deref in recv callbacks when priv is uninitialized
memory leak in xfrm_policy_construct prio:normal net 3 syz, C 8 202d 202d 29/29 151d xfrm: fix refcount leak in xfrm_migrate_policy_find
BUG: MAX_LOCK_DEPTH too low! (6) prio:normal net -1 1 228d 228d 29/29 160d b7405dcf7385 bonding: prevent potential infinite loop in bond_header_parse()
KASAN: slab-use-after-free Read in sk_psock_verdict_data_ready (4) prio:normal bpf net 19 1 211d 210d 29/29 160d ad8391d37f33 bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready().
general protection fault in nilfs_mdt_save_to_shadow_map prio:normal nilfs 2 syz, C error 87 197d 225d 29/29 160d 4a4e0328edd9 nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map