syzbot

Applied filters: Label=subsystems:hams (drop)

Title	Repro	Cause bisect	Fix bisect	Count	Last	Reported	Patched	Closed	Patch
WARNING: refcount bug in ax25_release (2) hams	C			16	2d21h	45d	23/26	never	467324bcfe1a ax25: Fix netdev refcount issue
WARNING in rose_device_event hams				1	141d	141d	25/26	100d	64b8bc7d5f14 net/rose: fix races in rose_kill_by_device()
general protection fault in prepare_to_wait (2) hams	syz	inconclusive		4	220d	257d	23/26	203d	c2f8fd794960 netrom: Deny concurrent connect().
KASAN: use-after-free Write in nr_release hams	C	done	error	1784	342d	1616d	22/26	328d	611792920925 netrom: Fix use-after-free caused by accept on already connected socket
WARNING: refcount bug in nr_release (4) hams	C			24	443d	748d	22/26	328d	409db27e3a2e netrom: Fix use-after-free of a listening socket.
KASAN: use-after-free Read in do_accept hams				1	474d	470d	22/26	328d	409db27e3a2e netrom: Fix use-after-free of a listening socket.
memory leak in nr_create (2) hams	C			11	399d	458d	22/26	328d	611792920925 netrom: Fix use-after-free caused by accept on already connected socket
general protection fault in ax25_send_frame (2) hams				13	544d	531d	22/26	433d	e97c089d7a49 rose: Fix NULL pointer dereference in rose_send_frame()
general protection fault in rose_send_frame (2) hams				7	546d	571d	22/26	433d	e97c089d7a49 rose: Fix NULL pointer dereference in rose_send_frame()
KASAN: use-after-free Read in sixpack_close hams	C	done		879	895d	900d	20/26	785d	81b1d548d00b hamradio: remove needs_free_netdev to avoid UAF
memory leak in nr_create hams	C			250	1016d	1801d	20/26	904d	517a16b1a88b netrom: Decrease sock refcount when sock timers expire
KASAN: slab-out-of-bounds Write in decode_data hams	C	done	error	7	1455d	1610d	20/26	904d	19d1532a1876 net: 6pack: fix slab-out-of-bounds in decode_data
KMSAN: uninit-value in ax25_connect hams	C			15	1332d	1464d	15/26	1323d	2f2a7ffad5c6 AX.25: Fix out-of-bounds read in ax25_connect()
KMSAN: uninit-value in __dev_get_by_name hams	C			2	1446d	1446d	15/26	1384d	687775cec056 ax25: fix setsockopt(SO_BINDTODEVICE)
WARNING: held lock freed! (2) hams	C	done		1	1763d	1759d	12/26	1709d	4638faac0327 netrom: hold sock when setting skb->destructor
KASAN: use-after-free Read in release_sock hams	C	done		10	1733d	1742d	12/26	1709d	4638faac0327 netrom: hold sock when setting skb->destructor
KASAN: use-after-free Read in nr_release hams	C	done		25	1711d	1790d	12/26	1709d	4638faac0327 netrom: hold sock when setting skb->destructor
KASAN: use-after-free Read in nr_insert_socket hams	C	done		22	1733d	1750d	12/26	1709d	4638faac0327 netrom: hold sock when setting skb->destructor
KASAN: use-after-free Read in nr_rx_frame (2) hams	C	done		3	1737d	1745d	12/26	1709d	4638faac0327 netrom: hold sock when setting skb->destructor
memory leak in nr_rx_frame hams	C			5	1738d	1801d	12/26	1732d	c8c8218ec5af netrom: fix a memory leak in nr_rx_frame()
inconsistent lock state in ax25_destroy_timer hams				2	1781d	1782d	12/26	1757d	d4d5d8e83c96 ax25: fix inconsistent lock state in ax25_destroy_timer
inconsistent lock state in ax25_rt_autobind hams				2	1781d	1781d	12/26	1757d	d4d5d8e83c96 ax25: fix inconsistent lock state in ax25_destroy_timer
INFO: rcu detected stall in rose_loopback_timer hams				5	1817d	1835d	12/26	1802d	0453c6824595 net/rose: fix unbound loop in rose_loopback_timer()
KASAN: stack-out-of-bounds Write in rose_write_internal hams				1	1876d	1876d	12/26	1848d	e5dcc0c3223c net: rose: fix a possible stack overflow
general protection fault in ax25cmp hams	C			2294	1919d	1951d	11/26	1884d	b0cf029234f9 net/rose: fix NULL ax25_cb kernel panic
KASAN: use-after-free Read in refcount_inc_not_zero_checked hams	syz			24	1887d	1947d	11/26	1884d	63346650c1a9 netrom: switch to sock timer API
KASAN: use-after-free Read in kmemdup hams				1	1930d	1930d	11/26	1884d	63530aba7826 ax25: fix possible use-after-free
WARNING: refcount bug in nr_release hams				1	1943d	1942d	11/26	1884d	63346650c1a9 netrom: switch to sock timer API
inconsistent lock state in nr_find_socket hams	C			19	1935d	1951d	11/26	1933d	7314f5480f3e netrom: fix locking in nr_find_socket()
kernel BUG at kernel/time/timer.c:LINE! (2) hams	C			5	1946d	1948d	11/26	1933d	202700e30740 net/hamradio/6pack: use mod_timer() to rearm timers
KASAN: use-after-free Read in nr_rx_frame hams	syz			2	1940d	1947d	11/26	1933d	7314f5480f3e netrom: fix locking in nr_find_socket()
possible deadlock in nr_destroy_socket hams	syz			20	1937d	1947d	11/26	1933d	7314f5480f3e netrom: fix locking in nr_find_socket()
KASAN: use-after-free Read in ax25_fillin_cb hams	syz			4	1954d	1951d	11/26	1933d	c433570458e4 ax25: fix a use-after-free in ax25_fillin_cb()