syzbot

Applied filters: Label=subsystems:hams (drop)

Title	Rank 🛈	Repro	Cause bisect	Fix bisect	Count	Last	Reported	Patched	Closed	Patch
KASAN: slab-use-after-free Read in rose_get_neigh hams	19	C	error		1449	50d	442d	28/29	never	34a500caf48c rose: fix dangling neighbour pointers in rose_rt_device_down()
KASAN: slab-use-after-free Read in rose_timer_expiry (3) hams	19				5871	42m	100d	1/29	never	net: rose: include node references in rose_neigh refcount
WARNING: refcount bug in ax25_release (3) hams	13	C	done		5256	153d	458d	28/29	78d	bca0902e6173 ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt 2f6efbabceb6 ax25: Remove broken autobind
BUG: soft lockup in rose_loopback_timer hams	1	C			1	209d	205d	28/29	78d	a1300691aed9 net: rose: lock the socket in rose_bind()
KASAN: slab-use-after-free Read in rose_timer_expiry (2) hams	19				158	105d	229d	28/29	105d	5de7665e0a07 net: rose: fix timer races against user threads
possible deadlock in ax25_setsockopt hams	4				2	231d	239d	28/29	110d	95fc45d1dea8 ax25: rcu protect dev->ax25_ptr
kernel BUG in nr_header hams	-1				2	279d	266d	28/29	113d	a6d75ecee2bf net: lapb: increase LAPB_HEADER_LEN
memory leak in nr_create (3) hams	3	C			9	616d	806d	26/29	414d	0b9130247f3b netrom: Fix a memory leak in nr_heartbeat_expiry()
possible deadlock in nr_rt_ioctl hams	4	C	inconclusive		8	452d	480d	25/29	446d	e03e7f20ebf7 netrom: fix possible dead-lock in nr_rt_ioctl()
WARNING: refcount bug in ax25_release (2) hams	13	C			240	462d	527d	25/29	462d	467324bcfe1a ax25: Fix netdev refcount issue
WARNING in rose_device_event hams	-1				1	623d	623d	25/29	583d	64b8bc7d5f14 net/rose: fix races in rose_kill_by_device()
general protection fault in prepare_to_wait (2) hams	8	syz	inconclusive		4	702d	740d	23/29	685d	c2f8fd794960 netrom: Deny concurrent connect().
KASAN: use-after-free Write in nr_release hams	24	C	done	error	1784	825d	2098d	22/29	811d	611792920925 netrom: Fix use-after-free caused by accept on already connected socket
WARNING: refcount bug in nr_release (4) hams	13	C			24	926d	1230d	22/29	811d	409db27e3a2e netrom: Fix use-after-free of a listening socket.
KASAN: use-after-free Read in do_accept hams	19				1	957d	952d	22/29	811d	409db27e3a2e netrom: Fix use-after-free of a listening socket.
memory leak in nr_create (2) hams	3	C			11	881d	941d	22/29	811d	611792920925 netrom: Fix use-after-free caused by accept on already connected socket
general protection fault in ax25_send_frame (2) hams	10				13	1026d	1013d	22/29	915d	e97c089d7a49 rose: Fix NULL pointer dereference in rose_send_frame()
general protection fault in rose_send_frame (2) hams	2				7	1029d	1053d	22/29	915d	e97c089d7a49 rose: Fix NULL pointer dereference in rose_send_frame()
KASAN: use-after-free Read in sixpack_close hams	19	C	done		879	1377d	1382d	20/29	1268d	81b1d548d00b hamradio: remove needs_free_netdev to avoid UAF
memory leak in nr_create hams	3	C			250	1498d	2284d	20/29	1387d	517a16b1a88b netrom: Decrease sock refcount when sock timers expire
KASAN: slab-out-of-bounds Write in decode_data hams	23	C	done	error	7	1937d	2092d	20/29	1387d	19d1532a1876 net: 6pack: fix slab-out-of-bounds in decode_data
KMSAN: uninit-value in ax25_connect hams	7	C			15	1814d	1947d	15/29	1806d	2f2a7ffad5c6 AX.25: Fix out-of-bounds read in ax25_connect()
KMSAN: uninit-value in __dev_get_by_name hams	7	C			2	1929d	1929d	15/29	1867d	687775cec056 ax25: fix setsockopt(SO_BINDTODEVICE)
WARNING: held lock freed! (2) hams	-1	C	done		1	2245d	2242d	12/29	2192d	4638faac0327 netrom: hold sock when setting skb->destructor
KASAN: use-after-free Read in release_sock hams	19	C	done		10	2215d	2224d	12/29	2192d	4638faac0327 netrom: hold sock when setting skb->destructor
KASAN: use-after-free Read in nr_release hams	19	C	done		25	2193d	2272d	12/29	2192d	4638faac0327 netrom: hold sock when setting skb->destructor
KASAN: use-after-free Read in nr_insert_socket hams	19	C	done		22	2216d	2232d	12/29	2192d	4638faac0327 netrom: hold sock when setting skb->destructor
KASAN: use-after-free Read in nr_rx_frame (2) hams	19	C	done		3	2219d	2227d	12/29	2192d	4638faac0327 netrom: hold sock when setting skb->destructor
memory leak in nr_rx_frame hams	3	C			5	2220d	2284d	12/29	2214d	c8c8218ec5af netrom: fix a memory leak in nr_rx_frame()
inconsistent lock state in ax25_destroy_timer hams	4				2	2264d	2265d	12/29	2240d	d4d5d8e83c96 ax25: fix inconsistent lock state in ax25_destroy_timer
inconsistent lock state in ax25_rt_autobind hams	4				2	2263d	2264d	12/29	2240d	d4d5d8e83c96 ax25: fix inconsistent lock state in ax25_destroy_timer
INFO: rcu detected stall in rose_loopback_timer hams	1				5	2299d	2318d	12/29	2284d	0453c6824595 net/rose: fix unbound loop in rose_loopback_timer()
KASAN: stack-out-of-bounds Write in rose_write_internal hams	23				1	2358d	2358d	12/29	2331d	e5dcc0c3223c net: rose: fix a possible stack overflow
general protection fault in ax25cmp hams	2	C			2294	2401d	2434d	11/29	2366d	b0cf029234f9 net/rose: fix NULL ax25_cb kernel panic
KASAN: use-after-free Read in refcount_inc_not_zero_checked hams	19	syz			24	2370d	2429d	11/29	2366d	63346650c1a9 netrom: switch to sock timer API
KASAN: use-after-free Read in kmemdup hams	19				1	2412d	2412d	11/29	2366d	63530aba7826 ax25: fix possible use-after-free
WARNING: refcount bug in nr_release hams	13				1	2426d	2424d	11/29	2366d	63346650c1a9 netrom: switch to sock timer API
inconsistent lock state in nr_find_socket hams	4	C			19	2418d	2433d	11/29	2416d	7314f5480f3e netrom: fix locking in nr_find_socket()
kernel BUG at kernel/time/timer.c:LINE! (2) hams	-1	C			5	2428d	2430d	11/29	2416d	202700e30740 net/hamradio/6pack: use mod_timer() to rearm timers
KASAN: use-after-free Read in nr_rx_frame hams	19	syz			2	2423d	2429d	11/29	2416d	7314f5480f3e netrom: fix locking in nr_find_socket()
possible deadlock in nr_destroy_socket hams	4	syz			20	2419d	2429d	11/29	2416d	7314f5480f3e netrom: fix locking in nr_find_socket()
KASAN: use-after-free Read in ax25_fillin_cb hams	19	syz			4	2437d	2434d	11/29	2416d	c433570458e4 ax25: fix a use-after-free in ax25_fillin_cb()