syzbot


Applied filters: Label=subsystems:hams (drop)
Title Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
WARNING: refcount bug in ax25_release (3) hams C done 5256 28d 333d 25/28 never ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt ax25: Remove broken autobind
possible deadlock in ax25_setsockopt hams 2 107d 114d 27/28 never 95fc45d1dea8 ax25: rcu protect dev->ax25_ptr
kernel BUG in nr_header hams 2 154d 141d 27/28 never a6d75ecee2bf net: lapb: increase LAPB_HEADER_LEN
KASAN: slab-use-after-free Read in rose_timer_expiry (2) hams 9 2d06h 105d 27/28 never 5de7665e0a07 net: rose: fix timer races against user threads
BUG: soft lockup in rose_loopback_timer hams C 1 84d 80d 26/28 never a1300691aed9 net: rose: lock the socket in rose_bind()
memory leak in nr_create (3) hams C 9 491d 681d 26/28 289d 0b9130247f3b netrom: Fix a memory leak in nr_heartbeat_expiry()
possible deadlock in nr_rt_ioctl hams C inconclusive 8 328d 355d 25/28 321d e03e7f20ebf7 netrom: fix possible dead-lock in nr_rt_ioctl()
WARNING: refcount bug in ax25_release (2) hams C 240 337d 403d 25/28 337d 467324bcfe1a ax25: Fix netdev refcount issue
WARNING in rose_device_event hams 1 498d 498d 25/28 458d 64b8bc7d5f14 net/rose: fix races in rose_kill_by_device()
general protection fault in prepare_to_wait (2) hams syz inconclusive 4 578d 615d 23/28 560d c2f8fd794960 netrom: Deny concurrent connect().
KASAN: use-after-free Write in nr_release hams C done error 1784 700d 1974d 22/28 686d 611792920925 netrom: Fix use-after-free caused by accept on already connected socket
WARNING: refcount bug in nr_release (4) hams C 24 801d 1106d 22/28 686d 409db27e3a2e netrom: Fix use-after-free of a listening socket.
KASAN: use-after-free Read in do_accept hams 1 832d 828d 22/28 686d 409db27e3a2e netrom: Fix use-after-free of a listening socket.
memory leak in nr_create (2) hams C 11 757d 816d 22/28 686d 611792920925 netrom: Fix use-after-free caused by accept on already connected socket
general protection fault in ax25_send_frame (2) hams 13 902d 889d 22/28 790d e97c089d7a49 rose: Fix NULL pointer dereference in rose_send_frame()
general protection fault in rose_send_frame (2) hams 7 904d 929d 22/28 790d e97c089d7a49 rose: Fix NULL pointer dereference in rose_send_frame()
KASAN: use-after-free Read in sixpack_close hams C done 879 1253d 1257d 20/28 1143d 81b1d548d00b hamradio: remove needs_free_netdev to avoid UAF
memory leak in nr_create hams C 250 1374d 2159d 20/28 1262d 517a16b1a88b netrom: Decrease sock refcount when sock timers expire
KASAN: slab-out-of-bounds Write in decode_data hams C done error 7 1812d 1968d 20/28 1262d 19d1532a1876 net: 6pack: fix slab-out-of-bounds in decode_data
KMSAN: uninit-value in ax25_connect hams C 15 1689d 1822d 15/28 1681d 2f2a7ffad5c6 AX.25: Fix out-of-bounds read in ax25_connect()
KMSAN: uninit-value in __dev_get_by_name hams C 2 1804d 1804d 15/28 1742d 687775cec056 ax25: fix setsockopt(SO_BINDTODEVICE)
WARNING: held lock freed! (2) hams C done 1 2121d 2117d 12/28 2067d 4638faac0327 netrom: hold sock when setting skb->destructor
KASAN: use-after-free Read in release_sock hams C done 10 2090d 2100d 12/28 2067d 4638faac0327 netrom: hold sock when setting skb->destructor
KASAN: use-after-free Read in nr_release hams C done 25 2069d 2148d 12/28 2067d 4638faac0327 netrom: hold sock when setting skb->destructor
KASAN: use-after-free Read in nr_insert_socket hams C done 22 2091d 2108d 12/28 2067d 4638faac0327 netrom: hold sock when setting skb->destructor
KASAN: use-after-free Read in nr_rx_frame (2) hams C done 3 2095d 2103d 12/28 2067d 4638faac0327 netrom: hold sock when setting skb->destructor
memory leak in nr_rx_frame hams C 5 2096d 2159d 12/28 2089d c8c8218ec5af netrom: fix a memory leak in nr_rx_frame()
inconsistent lock state in ax25_destroy_timer hams 2 2139d 2140d 12/28 2115d d4d5d8e83c96 ax25: fix inconsistent lock state in ax25_destroy_timer
inconsistent lock state in ax25_rt_autobind hams 2 2139d 2139d 12/28 2115d d4d5d8e83c96 ax25: fix inconsistent lock state in ax25_destroy_timer
INFO: rcu detected stall in rose_loopback_timer hams 5 2175d 2193d 12/28 2159d 0453c6824595 net/rose: fix unbound loop in rose_loopback_timer()
KASAN: stack-out-of-bounds Write in rose_write_internal hams 1 2234d 2234d 12/28 2206d e5dcc0c3223c net: rose: fix a possible stack overflow
general protection fault in ax25cmp hams C 2294 2277d 2309d 11/28 2242d b0cf029234f9 net/rose: fix NULL ax25_cb kernel panic
KASAN: use-after-free Read in refcount_inc_not_zero_checked hams syz 24 2245d 2305d 11/28 2242d 63346650c1a9 netrom: switch to sock timer API
KASAN: use-after-free Read in kmemdup hams 1 2288d 2288d 11/28 2242d 63530aba7826 ax25: fix possible use-after-free
WARNING: refcount bug in nr_release hams 1 2301d 2300d 11/28 2242d 63346650c1a9 netrom: switch to sock timer API
inconsistent lock state in nr_find_socket hams C 19 2293d 2309d 11/28 2291d 7314f5480f3e netrom: fix locking in nr_find_socket()
kernel BUG at kernel/time/timer.c:LINE! (2) hams C 5 2304d 2306d 11/28 2291d 202700e30740 net/hamradio/6pack: use mod_timer() to rearm timers
KASAN: use-after-free Read in nr_rx_frame hams syz 2 2298d 2305d 11/28 2291d 7314f5480f3e netrom: fix locking in nr_find_socket()
possible deadlock in nr_destroy_socket hams syz 20 2294d 2305d 11/28 2291d 7314f5480f3e netrom: fix locking in nr_find_socket()
KASAN: use-after-free Read in ax25_fillin_cb hams syz 4 2312d 2309d 11/28 2291d c433570458e4 ax25: fix a use-after-free in ax25_fillin_cb()