Applied filters: WithRepro (drop) Label=subsystems:kernel (drop)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
WARNING in __secure_computing kernel prio:high -1 syz, C error 8 60d 236d 2/29 never signalfd: don't dequeue the forced fatal signals
KASAN: slab-out-of-bounds Read in reg_fixed_voltage_probe prio:normal kernel 17 syz, C 7 51d 52d 2/29 never regulator: fixed: reject incompatible platform devices
INFO: task hung in remove_one prio:low kernel 1 syz error 318 27m 644d 27/29 never b3217bdb0091 netdevsim: drop the ability to change max_vfs via debugfs
general protection fault in follow_pfnmap_start kernel 2 syz, C 38 726d 741d 1/29 never mm: fix null pointer dereference in pfnmap_lockdep_assert
WARNING in follow_pte kernel -1 syz, C 230 751d 831d 1/29 never mm: fix mmap_assert_locked() in follow_pte()
WARNING in its_msi_teardown prio:high kernel -1 syz, C 2 64d 75d 2/29 never irqchip/gic-v3-its: Don't WARN on LPI free allocation failure
WARNING in futex_hash_allocate prio:low kernel -1 syz, C error 2107 44d 64d 27/29 never d8aa5dd97944 futex: Fix might_sleep() warning in futex_pivot_pending()
WARNING: still has locks held in devlink_compat_flash_update kernel prio:low 4 syz, C 5 4d02h 46d 3/29 never devlink: use direct firmware requests for flash updates
INFO: task hung in bch2_copygc_stop prio:high kernel 1 syz, C done 31386 365d 864d 2/29 never bcachefs: Increase BCH_MIN_NR_NBUCKETS
INFO: task hung in hci_cmd_sync_clear (3) prio:high kernel 1 syz done 118 15d 702d 26/29 never b1f24c1ab523 Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister
general protection fault in bnep_session prio:high kernel 7 syz error 1395 27d 687d 27/29 never 9b851b09b392 Bluetooth: hci_sysfs: Fix NULL pointer dereference in device_del()
general protection fault in remove_waiter prio:high kernel 2 syz 6 155d 166d 29/29 89d 40a25d59e85b locking/rtmutex: Skip remove_waiter() when waiter is not enqueued
WARNING in task_participate_group_stop (2) prio:low kernel -1 syz, C inconclusive unreliable 25 150d 3088d 29/29 89d 90918794a4e2 signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()
WARNING in get_from_partial_node prio:low kernel -1 syz, C 133 144d 180d 29/29 89d 5f41161059fd debugobjects: Do not fill_pool() if pi_blocked_on
WARNING in do_notify_parent prio:low kernel -1 syz, C error 195082 112d 226d 29/29 89d 09e7827e7857 kernel/fork: validate exit_signal in kernel_clone()
INFO: task hung in restrict_one_thread_callback lsm kernel 1 syz, C 39 203d 234d 29/29 144d ff88df67dbf7 landlock: Serialize TSYNC thread restriction
WARNING in _cpu_down kernel prio:low -1 syz, C 37 204d 217d 29/29 144d c8c4a2972f83 padata: Put CPU offline callback in ONLINE section to allow failure
WARNING in __mmdrop (2) kernel -1 syz, C 7 241d 244d 29/29 159d 61dc9f776705 procfs: fix possible double mmput() in do_procmap_query()
memory leak in do_timer_create kernel 3 syz, C 1 334d 333d 29/29 278d e0fd4d42e27f posix-timers: Plug potential memory leak in do_timer_create()
WARNING in driver_unregister (2) kernel -1 syz, C error 3214 309d 464d 29/29 278d 72262330f7b3 comedi: c6xdigio: Fix invalid PNP driver unregistration
KASAN: vmalloc-out-of-bounds Read in run_irq_workd kernel 17 syz, C error 225 345d 407d 29/29 278d 4e9077638301 bpf: Sync pending IRQ work before freeing ring buffer
KASAN: slab-out-of-bounds Read in __cpa_addr kernel 17 syz, C done 601 358d 371d 29/29 328d f25785f9b088 x86/mm: Fix overflow in __cpa_addr()
general protection fault in try_to_wake_up (3) kernel 2 syz 23 385d 404d 29/29 347d b549113738e8 futex: Prevent use-after-free during requeue-PI
KMSAN: kernel-infoleak in vmci_host_unlocked_ioctl (3) kernel 9 syz, C 20 451d 479d 29/29 397d 8282013b5605 vmci: Prevent the dispatching of uninitialized payloads vmci: Prevent the dispatching of uninitialized payloads
KASAN: wild-memory-access Read in get_futex_key kernel 17 syz, C 34 477d 503d 29/29 432d 8337204c5889 futex: Handle invalid node numbers supplied by user
INFO: task hung in __bch2_fsck_err kernel 1 syz 2 570d 566d 29/29 432d 0acb385ec19c bcachefs: Fix possible console lock involved deadlock
possible deadlock in console_flush_all (3) kernel 4 syz, C error 52145 432d 820d 29/29 432d 0acb385ec19c bcachefs: Fix possible console lock involved deadlock
INFO: task hung in uevent_show (2) kernel 1 syz, C inconclusive 8325 463d 702d 29/29 451d dc1771f71854 Revert "drivers: core: synchronize really_probe() and dev_uevent()"
WARNING in get_pat_info kernel -1 syz, C done done 36 499d 764d 29/29 460d f8e97613fed2 mm: convert VM_PFNMAP tracking to pfnmap_track() + pfnmap_untrack()
KASAN: slab-use-after-free Write in binder_remove_device kernel 22 syz, C done 7 505d 506d 29/29 461d 9857af0fcff3 binder: fix yet another UAF in binder_devices
KCSAN: data-race in process_one_work / process_one_work kernel 6 syz 231 1136d 1039d 29/29 461d 70e1683ca3a6 workqueue: Fix race condition in wq->stats incrementation
general protection fault in native_tss_update_io_bitmap kernel 2 syz, C error 7 509d 593d 29/29 461d 8b68e978718f x86/iopl: Cure TIF_IO_BITMAP inconsistencies
possible deadlock in get_partial_node (2) kernel 4 syz, C done done 4 580d 603d 28/29 489d 3a04334d6282 bcachefs: Fix b->written overflow
KASAN: slab-use-after-free Read in binder_release_work kernel 19 syz, C done done 2151 669d 739d 28/29 523d 7e20434cbca8 binder: fix freeze UAF in binder_release_work()
WARNING in bitmap_parselist_user kernel -1 syz, C 35 644d 663d 28/29 524d dd2a5b5514ab mm/util: make memdup_user_nul() similar to memdup_user()
WARNING: locking bug in get_random_u8 kernel 4 syz 70 623d 695d 28/29 524d d40797d6720e kasan: make kasan_record_aux_stack_noalloc() the default behaviour
WARNING in posixtimer_send_sigqueue (2) kernel -1 syz, C done 557 616d 664d 28/29 524d 8c4840277b6d signal/posixtimers: Handle ignore/blocked sequences correctly
WARNING in posixtimer_send_sigqueue kernel -1 syz, C error 196 665d 697d 28/29 665d cdc905d16b07 posix-timers: Fix spurious warning on double enqueue versus do_exit()
WARNING: locking bug in try_to_wake_up kernel 19 syz, C error 157 699d 880d 28/29 698d 41fd1e94066a btrfs: wait for fixup workers before stopping cleaner kthread during umount
KASAN: stack-out-of-bounds Read in profile_pc kernel 17 syz, C error done 9302 835d 1960d 28/29 711d 093d9603b600 x86: stop playing stack games in profile_pc()
kernel BUG in binder_inc_ref_for_node kernel -1 syz, C error 16721 791d 821d 28/29 739d 11512c197d38 binder: fix descriptor lookup for context manager
KMSAN: uninit-value in profile_hits (3) kernel 19 syz, C 1529 806d 1021d 27/29 780d 7c51f7bbf057 profiling: remove prof_cpu_mask
possible deadlock in __hrtimer_run_queues (2) kernel 4 syz, C error done 16 899d 931d 26/29 843d 98e948fb60d4 bpf: Allow delete from sockmap/sockhash only if update is allowed
WARNING: suspicious RCU usage in __do_softirq kernel 4 syz, C 199 896d 923d 25/29 872d 1dd1eff161bd softirq: Fix suspicious RCU usage in __do_softirq()
general protection fault in timerqueue_del (2) kernel 2 syz, C done done 3 1026d 1168d 25/29 985d 6f861765464f fs: Block writes to mounted block devices
general protection fault in __hrtimer_run_queues (3) kernel 17 syz, C error done 2 1037d 1201d 25/29 986d 6f861765464f fs: Block writes to mounted block devices
possible deadlock in __run_timers kernel 4 syz, C error done 1 1033d 1029d 25/29 986d 6f861765464f fs: Block writes to mounted block devices
general protection fault in usb_hub_create_port_device kernel 2 syz, C done done 4 1126d 1132d 25/29 1026d fd6f7ad2fd4d driver core: return an error when dev_set_name() hasn't happened
general protection fault in serio_handle_event kernel 2 syz, C done done 6 1122d 1130d 25/29 1026d fd6f7ad2fd4d driver core: return an error when dev_set_name() hasn't happened
general protection fault in nfc_register_device kernel 11 syz, C done 190 1028d 1141d 25/29 1026d fd6f7ad2fd4d driver core: return an error when dev_set_name() hasn't happened
general protection fault in wpan_phy_register kernel 2 syz, C done done 7 1119d 1126d 25/29 1026d fd6f7ad2fd4d driver core: return an error when dev_set_name() hasn't happened
general protection fault in hci_register_dev kernel 2 syz, C unreliable done 4 1124d 1131d 25/29 1026d fd6f7ad2fd4d driver core: return an error when dev_set_name() hasn't happened
KASAN: slab-use-after-free Read in pwq_release_workfn kernel 19 syz, C unreliable 79 1088d 1138d 25/29 1026d 643445531829 workqueue: Fix UAF report by KASAN in pwq_release_workfn()
memory leak in binder_transaction (2) kernel 3 syz, C 2 1126d 1421d 25/29 1026d 1aa3aaf8953c binder: fix memory leaks of spam and pending work
BUG: MAX_LOCKDEP_CHAIN_HLOCKS too low! (2) kernel -1 syz, C 2688 1097d 2053d 23/29 1096d 39285e124edb net: team: do not use dynamic lockdep key
kernel BUG in workingset_activation (2) kernel -1 syz, C inconclusive done 40 1235d 1427d 22/29 1199d 0143d148d1e8 usb: usbfs: Enforce page requirements for mmap
memory leak in copy_process (5) kernel 3 syz, C 1 1319d 1315d 22/29 1222d 2aab4b969002 af_unix: fix struct pid leaks in OOB support
general protection fault in hrtimer_active (5) kernel 2 syz, C error 22 1336d 1340d 22/29 1222d 4fab64126891 net/sched: fix error recovery in qdisc_create()
KMSAN: uninit-value in qdisc_run kernel 7 syz, C 2 1433d 1370d 22/29 1222d 3a415d59c1db net/sched: sch_taprio: fix possible use-after-free
kernel BUG in __text_poke kernel -1 syz, C 80 1526d 1701d 22/29 1326d 1d5f82d9dd47 bpf, x86: fix freeing of not-finalized bpf_prog_pack d24d2a2b0a81 bpf: bpf_prog_pack: Set proper size before freeing ro_header
inconsistent lock state in fs_reclaim_acquire (3) kernel 4 syz, C 2 1441d 1446d 22/29 1326d 2d1f274b95c6 skmsg: pass gfp argument to alloc_sk_msg()
WARNING in exit_tasks_rcu_finish kernel -1 syz, C done 20 1580d 1583d 22/29 1326d 0356d4e66214 rcu-tasks: Track blocked RCU Tasks Trace readers
KASAN: use-after-free Read in dev_uevent kernel 19 syz 54 1333d 2306d 22/29 1326d 16b1941eac2b usb: gadget: Fix use-after-free bug by not setting udc->dev.driver
memory leak in watch_queue_set_size kernel 3 syz, C 1 1668d 1661d 22/29 1326d b490207017ba watch_queue: Free the page array when watch_queue is dismantled
BUG: unable to handle kernel paging request in get_desc kernel 8 syz error 8 1426d 1438d 22/29 1326d 97650148a15e x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
KASAN: use-after-free Read in notifier_call_chain kernel 19 syz, C error 157 1418d 1424d 22/29 1326d 5daadc86f27e net: tun: Fix use-after-free in tun_detach()
KMSAN: kernel-infoleak in vmci_host_unlocked_ioctl (2) kernel 9 syz, C 2 1475d 1474d 22/29 1326d e5b0d06d9b10 misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()
WARNING in binder_alloc_vma_close kernel -1 syz, C done 18 1478d 1568d 22/29 1326d b0cab80ecd54 android: binder: fix lockdep check on clearing vma
KASAN: slab-out-of-bounds Write in watch_queue_set_filter kernel 21 syz, C inconclusive 7 1666d 1670d 22/29 1326d c993ee0f9f81 watch_queue: Fix filter limit check
BUG: sleeping function called from invalid context in binder_ioctl kernel 5 syz, C done 30 1603d 1609d 22/29 1326d aed86f8add0e binder: fix atomic sleep when get extended error
general protection fault in reweight_entity kernel 2 syz, C error done 10 1702d 1756d 22/29 1326d 13765de8148f sched/fair: Fix fault in reweight_entity
kernel BUG in __page_mapcount kernel -1 syz, C error 45 1726d 1960d 22/29 1326d 24d7275ce279 fs/proc: task_mmu.c: don't read mapcount for migration entry
kernel BUG in binder_alloc_deferred_release kernel -1 syz, C done 4 1573d 1575d 22/29 1326d a43cfc87caaf android: binder: stop saving a pointer to the VMA
general protection fault in shm_close kernel 2 syz, C done 48 1427d 1428d 22/29 1326d b6305049f306 ipc/shm: call underlying open/close vm_ops
general protection fault in binder_alloc_new_buf kernel 12 syz, C error 315 1482d 1513d 22/29 1326d 1da52815d5f1 binder: fix alloc->vma_vm_mm null-ptr dereference
KASAN: use-after-free Read in __post_watch_notification kernel 19 syz, C inconclusive 1 1540d 1538d 22/29 1326d e64ab2dbd882 watch_queue: Fix missing locking in add_watch_to_object()
KASAN: use-after-free Read in task_work_run (2) kernel 19 syz, C unreliable 18 1405d 1497d 22/29 1326d 517e6a301f34 perf: Fix perf_pending_task() UaF
memory leak in do_seccomp (2) kernel 3 syz, C 4 1509d 2058d 22/29 1326d a1140cb215fa seccomp: Move copy_seccomp() to no failure path.
general protection fault in binder_alloc_print_pages kernel 12 syz, C error 157 1482d 1513d 22/29 1326d 1da52815d5f1 binder: fix alloc->vma_vm_mm null-ptr dereference
KASAN: null-ptr-deref Read in __free_pages kernel 11 syz, C inconclusive 21 1405d 1666d 22/29 1326d a635415a064e watch_queue: Fix NULL dereference in error cleanup
KASAN: use-after-free Read in net_tx_action kernel 19 syz, C inconclusive 3 1461d 1506d 22/29 1326d ebda44da44f6 net: sched: fix race condition in qdisc_graft()
KASAN: use-after-free Read in post_one_notification kernel 19 syz, C inconclusive 19 1466d 1666d 22/29 1326d 353f7988dd84 watchqueue: make sure to serialize 'wqueue->defunct' properly
memory leak in setup_mq_sysctls kernel 3 syz, C 2 1403d 1575d 22/29 1326d db7cfc380900 ipc: Free mq_sysctls if ipc namespace creation failed
WARNING in __queue_work (3) kernel -1 syz error 953 1427d 2260d 22/29 1326d 877afadad2dc Bluetooth: When HCI work queue is drained, only queue chained work
WARNING in static_key_slow_try_dec (3) kernel -1 syz, C 26 1337d 1497d 22/29 1326d 921ebde3c0d2 netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
WARNING in static_key_slow_try_dec (2) kernel -1 syz, C unreliable 5417 1818d 1886d 20/29 1679d f7d8a19f9a05 Revert "KVM: x86: Open code necessary bits of kvm_lapic_set_base() at vCPU RESET"
WARNING in emulate_vsyscall kernel -1 syz, C done done 3890 1842d 2023d 20/29 1679d d4ffd5df9d18 x86/fault: Fix wrong signal when vsyscall fails with pkey
WARNING in hrtimer_forward kernel -1 syz, C done done 217 1724d 2208d 20/29 1679d 313bbd1990b6 mac80211-hwsim: fix late beacon hrtimer handling
INFO: rcu detected stall in br_multicast_query_expired kernel 1 syz, C inconclusive 2 1756d 1756d 20/29 1679d f83a112bd91a net: bridge: mcast: add and enforce startup query interval minimum
WARNING in trc_read_check_handler kernel -1 syz, C unreliable done 40 1806d 1894d 20/29 1679d 96017bf90397 rcu-tasks: Simplify trc_read_check_handler() atomic operations
general protection fault in hrtimer_active (3) kernel 2 syz done error 34 1713d 2018d 20/29 1679d e28587cc491e sit: do not call ipip6_dev_free() from sit_init_net()
KASAN: use-after-free Write in dec_rlimit_ucounts kernel 22 syz, C 4 1879d 1913d 20/29 1797d 345daff2e994 ucounts: Fix race condition between alloc_ucounts and put_ucounts bbb6d0f3e1fe ucounts: Increase ucounts reference counter before the security hook
memory leak in kobject_set_name_vargs (4) kernel 3 syz, C 171 1865d 2152d 20/29 1797d 8fd0c1b0647a nilfs2: fix memory leak in nilfs_sysfs_delete_device_group
WARNING in ex_handler_fprestore kernel -1 syz, C done 5 1960d 1967d 20/29 1797d 484cea4f362e x86/fpu: Prevent state corruption in __fpu__restore_sig()
BUG: using smp_processor_id() in preemptible code in clock_was_set kernel 4 syz, C done 231 1886d 1887d 20/29 1797d 9482fd71dbb8 hrtimer: Use raw_cpu_ptr() in clock_was_set()
BUG: unable to handle kernel paging request in csum_partial (3) kernel 8 syz, C done 1 1884d 1915d 20/29 1797d 9cf448c200ba ip6_gre: add validation for csum_start 1d011c4803c7 ip_gre: add validation for csum_start
KASAN: use-after-free Write in get_ucounts kernel 22 syz unreliable done 7 1894d 1922d 20/29 1797d 345daff2e994 ucounts: Fix race condition between alloc_ucounts and put_ucounts
memory leak in __send_signal kernel 3 syz 3 1940d 1954d 20/29 1797d 399f8dd9a866 signal: Prevent sigqueue caching after task got released
BUG: scheduling while atomic: syz-executor/ADDR kernel -1 syz, C done 5 1873d 1930d 20/29 1797d 72ff2bf04db2 crypto: aesni - xts_crypt() return if walk.nbytes is 0
memory leak in copy_process (2) kernel 3 syz, C 2 2038d 2037d 20/29 1797d f60a85cad677 bpf: Fix umd memory leak in copy_process()
UBSAN: shift-out-of-bounds in profile_init kernel -1 syz, C unreliable 23 1865d 1916d 20/29 1797d 2d186afd04d6 profiling: fix shift-out-of-bounds bugs
UBSAN: shift-out-of-bounds in load_balance kernel -1 syz 2167 1983d 2087d 20/29 1797d 39a2a6eb5c9b sched/fair: Fix shift-out-of-bounds in load_balance()
KASAN: use-after-free Read in firmware_fallback_sysfs kernel 19 syz, C error 16514 1880d 2079d 20/29 1797d 75d95e2e39b2 firmware_loader: fix use-after-free in firmware_fallback_sysfs
WARNING in futex_requeue kernel -1 syz 4 1862d 1867d 20/29 1797d 4f07ec0d76f2 futex: Prevent inconsistent state and exit race
WARNING in __static_key_slow_dec kernel -1 syz, C unreliable 19 1861d 1864d 20/29 1797d 6d5f1ef83868 bonding: Fix negative jump label count on nested bonding
KASAN: global-out-of-bounds Read in netlink_policy_dump_add_policy (2) kernel 17 syz, C done 2 2072d 2072d 20/29 1965d 33b347503f01 vdpa: Define vdpa mgmt device, ops and a netlink interface
KASAN: use-after-free Read in __cpuhp_state_remove_instance kernel 19 syz, C unreliable done 2726 2032d 2054d 20/29 2001d 470ec4ed8c91 io-wq: fix double put of 'wq' in error path
WARNING in qp_broker_alloc kernel -1 syz, C inconclusive 24 2057d 2092d 20/29 2011d 2fd10bcf0310 drivers/misc/vmw_vmci: restrict too big queue size in qp_host_alloc_queue
general protection fault in rose_transmit_clear_request kernel 2 syz, C done 5 2171d 2637d 19/29 2042d 3b3fd068c56e rose: Fix Null pointer dereference in rose_send_frame()
KMSAN: kernel-infoleak in vmci_host_unlocked_ioctl kernel 9 syz, C 22 2071d 2155d 19/29 2042d 31dcb6c30a26 misc: vmw_vmci: fix kernel info-leak by initializing dbells in vmci_ctx_get_chkpt_doorbells()
BUG: unable to handle kernel NULL pointer dereference in call_rcu kernel 10 syz, C done 85 2112d 2115d 19/29 2042d 13384f6125ad kasan: fix null pointer dereference in kasan_record_aux_stack
memory leak in copy_process kernel 3 syz, C 23 2060d 2157d 19/29 2042d 450677dcb0cc mm/madvise: fix memory leak from process_madvise
INFO: rcu detected stall in process_one_work (3) kernel 1 syz, C done done 1 2196d 2238d 15/29 2156d 1d0e850a49a5 afs: Fix cell removal
WARNING in binder_transaction_buffer_release (2) kernel -1 syz, C done done 442 2289d 2329d 15/29 2156d e8b8ae7ce32e binder: Remove bogus warning on failed same-process transaction
KASAN: unknown-crash Read in do_exit kernel 17 syz, C inconclusive done 2 2214d 2219d 15/29 2156d a49145acfb97 fbmem: add margin check to fb_check_caps()
WARNING in syscall_exit_to_user_mode kernel -1 syz, C done done 1 2194d 2222d 15/29 2156d a49145acfb97 fbmem: add margin check to fb_check_caps()
WARNING in get_signal kernel -1 syz, C done 2 2199d 2201d 15/29 2156d 7b3c36fc4c23 ptrace: fix task_join_group_stop() for the case when current is traced
kernel panic: stack is corrupted in get_kernel_gp_address kernel 2 syz done done 1 2189d 2221d 15/29 2156d a49145acfb97 fbmem: add margin check to fb_check_caps()
KASAN: out-of-bounds Read in __switch_to (2) kernel 17 syz done done 1 2204d 2200d 15/29 2156d a49145acfb97 fbmem: add margin check to fb_check_caps()
WARNING in arch_install_hw_breakpoint kernel -1 syz, C inconclusive done 8 2642d 2759d 15/29 2156d e898e69d6b94 x86/hw_breakpoints: Make default case in hw_breakpoint_arch_parse() return an error
general protection fault in qp_release_pages kernel 2 syz, C done 2 2191d 2191d 15/29 2156d 90ca6333fd65 VMCI: check return value of get_user_pages_fast() for errors
KASAN: stack-out-of-bounds Read in csd_lock_record kernel 17 syz, C 226 2286d 2291d 15/29 2156d 35feb60474bf kernel/smp: Provide CSD lock timeout diagnostics
WARNING in irqentry_exit kernel -1 syz, C error done 2080 2190d 2257d 15/29 2156d 4d004099a668 lockdep: Fix lockdep recursion
memory leak in do_seccomp kernel 3 syz, C 6 2226d 2253d 15/29 2193d a566a9012acd seccomp: don't leak memory when filter install races
INFO: rcu detected stall in cleanup_net (4) kernel 1 syz, C done 5 2228d 2224d 15/29 2193d b5b73b26b3ca taprio: Fix allowing too small intervals
general protection fault in x86_fsgsbase_read_task kernel 2 syz, C done 2 2250d 2250d 15/29 2216d 8ab49526b53d x86/fsgsbase/64: Fix NULL deref in 86_fsgsbase_read_task
WARNING in idtentry_exit_cond_rcu kernel -1 syz 6 2290d 2287d 15/29 2216d bce9b042ec73 x86/traps: Disable interrupts in exc_aligment_check()
general protection fault in syscall_return_slowpath kernel 2 syz inconclusive done 1 2322d 2409d 15/29 2216d 033724d68642 fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins.
KASAN: stack-out-of-bounds Read in update_stack_state kernel 17 syz, C unreliable done 388 2460d 3154d 15/29 2246d 4ee7c60de83a init, tracing: Add initcall trace events
PANIC: double fault in fixup_bad_iret kernel 2 syz, C error 11753 2286d 2327d 15/29 2263d 5144f8a8dfd7 compiler_types.h: Add __no_sanitize_{address,undefined} to noinstr
WARNING in enqueue_task_dl kernel -1 syz, C done 13 2307d 2885d 15/29 2263d 740797ce3a12 sched/core: Fix PI boosting between RT and DEADLINE tasks
PANIC: double fault in check_preemption_disabled kernel 2 syz, C 2181 2295d 2299d 15/29 2263d c7aadc09321d x86/entry: Increase entry_stack size to a full page
BUG: MAX_LOCKDEP_CHAINS too low! kernel -1 syz, C done 17240 2278d 2936d 15/29 2278d e7511f560f54 bonding: remove useless stats_lock_key 1a33e10e4a95 net: partially revert dynamic lockdep key changes
KASAN: use-after-free Read in __hrtimer_run_queues kernel 19 syz, C done 299 2378d 2386d 15/29 2346d 73d20564e0dc hrtimer: Don't dereference the hrtimer pointer after the callback
WARNING: kobject bug in ib_register_device kernel -1 syz, C done 14 2384d 2422d 15/29 2346d 7aefa6237cfe RDMA/nl: Do not permit empty devices names during RDMA_NLDEV_CMD_NEWLINK/SET
INFO: rcu detected stall in hash_ip4_gc kernel 1 syz, C done 1 2452d 2451d 15/29 2371d f66ee0410b1c netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports
WARNING in switch_fpu_return kernel -1 syz done done 11 2442d 2475d 15/29 2391d 2620fe268e80 KVM: x86: Revert "KVM: X86: Fix fpu state crash in kvm guest"
KMSAN: uninit-value in __request_module (3) kernel 7 syz, C 58 2428d 2457d 15/29 2428d 36d79af7fb59 net-backports: net_sched: use validated TCA_KIND attribute in tc_new_tfilter()
kernel panic: stack is corrupted in __lock_acquire (4) kernel 2 syz error error 75 2523d 2681d 15/29 2428d 4da6a196f93b bpf: Sockmap/tls, during free we may call tcp_bpf_unhash() in loop
BUG: sleeping function called from invalid context in tpk_write kernel 5 syz, C done 12 2459d 2501d 15/29 2428d 9a655c77ff8f ttyprintk: fix a potential deadlock in interrupt context issue
BUG: unable to handle kernel paging request in do_csum (2) kernel 8 syz, C done 6 2451d 2453d 15/29 2428d 6cd021a58c18 udp: segment looped gso packets correctly
general protection fault in tss_update_io_bitmap kernel 2 syz, C done 65 2511d 2517d 15/29 2495d e3cb0c7102f0 x86/ioperm: Fix use of deprecated config option
KASAN: use-after-free Read in tick_sched_handle (3) kernel 19 syz, C done 12 2828d 2883d 13/29 2528d bc6e019b6ee6 fou: Prevent unbounded recursion in GUE error handler also with UDP-Lite
general protection fault in put_pid kernel 2 syz done done 3 2852d 2861d 13/29 2530d a8e911d13540 x86_64: increase stack size for KASAN_EXTRA
general protection fault in propagate_entity_cfs_rq kernel 2 syz, C done 1 3013d 3013d 13/29 2531d bab2c80e5a6c nsh: set mac len based on inner packet
WARNING: lock held when returning to user space in rcu_lock_acquire kernel 4 syz, C done 3 2566d 2566d 13/29 2553d 73956fc07dd7 membarrier: Fix RCU locking bug caused by faulty merge
general protection fault in make_kuid kernel 2 syz, C done 4 2614d 2639d 13/29 2553d 1dd9bc08cf14 vfs: set fs_context::user_ns for reconfigure
WARNING in rcu_note_context_switch kernel -1 syz, C done 1 2568d 2568d 13/29 2553d 73956fc07dd7 membarrier: Fix RCU locking bug caused by faulty merge
WARNING: lock held when returning to user space in membarrier_private_expedited kernel 4 syz, C done 7 2566d 2568d 13/29 2553d 73956fc07dd7 membarrier: Fix RCU locking bug caused by faulty merge
KMSAN: uninit-value in __request_module kernel 7 syz, C 13 2563d 2583d 13/29 2553d 62794fc4fbf5 net_sched: add max len check for TCA_KIND
memory leak in llcp_sock_bind kernel 3 syz, C done 2 2575d 2640d 13/29 2553d a0c2dc1fe63e nfc: fix memory leak in llcp_sock_bind()
INFO: rcu detected stall in sys_exit_group kernel 1 syz, C done 1 2585d 2581d 13/29 2560d d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
KASAN: slab-out-of-bounds Read in bpf_int_jit_compile kernel 17 syz, C done 1 2640d 2637d 12/29 2592d 7c2e988f400e bpf: fix x64 JIT code generation for jmp to 1st insn
KASAN: slab-out-of-bounds Read in do_jit kernel 17 syz, C done 16 2593d 2638d 12/29 2592d 7c2e988f400e bpf: fix x64 JIT code generation for jmp to 1st insn
BUG: unable to handle kernel paging request in hrtimer_interrupt kernel 8 syz done 2 2635d 2672d 12/29 2603d 95fa145479fb bpf: sockmap/tls, close can race with map free
general protection fault in rcu_core kernel 2 syz done 1 2652d 2651d 12/29 2603d 95fa145479fb bpf: sockmap/tls, close can race with map free
general protection fault in mm_update_next_owner kernel 2 syz done done 1 2683d 2683d 12/29 2603d 95fa145479fb bpf: sockmap/tls, close can race with map free
KASAN: use-after-free Write in validate_chain kernel 22 syz done 3 2659d 2670d 12/29 2603d 95fa145479fb bpf: sockmap/tls, close can race with map free
KASAN: use-after-free Read in psi_task_change kernel 19 syz done 1 2636d 2635d 12/29 2603d 95fa145479fb bpf: sockmap/tls, close can race with map free
KASAN: slab-out-of-bounds Write in check_noncircular kernel 21 syz done 1 2642d 2642d 12/29 2603d 95fa145479fb bpf: sockmap/tls, close can race with map free
WARNING in mark_lock kernel -1 syz done 2 2611d 2666d 12/29 2603d 95fa145479fb bpf: sockmap/tls, close can race with map free
kernel panic: stack is corrupted in validate_chain kernel 2 syz done 1 2666d 2665d 12/29 2603d 95fa145479fb bpf: sockmap/tls, close can race with map free
BUG: unable to handle kernel paging request in cpuacct_account_field kernel 8 syz done done 1 2670d 2670d 12/29 2603d 95fa145479fb bpf: sockmap/tls, close can race with map free
WARNING: held lock freed in nr_release kernel 4 syz, C done 344 2623d 2644d 12/29 2603d 4638faac0327 netrom: hold sock when setting skb->destructor
general protection fault in rb_erase (2) kernel 2 syz done 4 2632d 2839d 12/29 2603d 95fa145479fb bpf: sockmap/tls, close can race with map free
KASAN: slab-out-of-bounds Read in usage_accumulate kernel 17 syz done 3 2666d 2685d 12/29 2603d 95fa145479fb bpf: sockmap/tls, close can race with map free
WARNING: refcount bug in nr_rx_frame kernel 13 syz, C done 15 2627d 2643d 12/29 2603d 4638faac0327 netrom: hold sock when setting skb->destructor
BUG: unable to handle kernel paging request in bpf_prog_ADDR kernel 8 syz, C done 13 2625d 2642d 12/29 2603d 06a22d897d82 bpf: fix access to skb_shared_info->gso_segs
general protection fault in rb_next (3) kernel 2 syz done done 1 2676d 2674d 12/29 2603d 95fa145479fb bpf: sockmap/tls, close can race with map free
general protection fault in finish_task_switch (2) kernel 2 syz, C done 1538 2940d 2985d 12/29 2607d 26b471c7e2f7 KVM: nVMX: Fix bad cleanup on error of get/set nested state IOCTLs
memory leak in policydb_read kernel 3 syz, C done 1 2640d 2638d 12/29 2616d 45385237f65a selinux: fix memory leak in policydb_init()
WARNING in binder_transaction_buffer_release kernel -1 syz error 38 2659d 2702d 12/29 2616d 49ed96943a8e binder: prevent transactions to context manager from its own process.
memory leak in binder_transaction kernel 3 syz, C 3 2665d 2677d 12/29 2625d 1909a671dbc3 binder: fix memory leak in error path
WARNING in static_key_slow_try_dec kernel -1 syz, C done 58 2648d 2652d 12/29 2625d d44e3fa5d7e6 ipv6: fix static key imbalance in fl_create()
general protection fault in get_task_pid kernel 2 syz, C done 24 2657d 2660d 12/29 2632d 28dd29c06d0d fork: return proper negative error code
memory leak in kobject_set_name_vargs kernel 3 syz, C 12 2659d 2693d 12/29 2650d 4f488fbca2a8 cfg80211: fix memory leak of wiphy device name
KMSAN: kernel-infoleak in copy_siginfo_to_user (2) kernel 9 syz, C 15 2680d 2710d 12/29 2650d f6e2aa91a46d signal/ptrace: Don't leak unitialized kernel memory with PTRACE_PEEK_SIGINFO
kernel BUG at drivers/android/binder_alloc.c:LINE! (3) kernel -1 syz, C done 24 2686d 2755d 12/29 2677d a3c7cd0cdf11 batman-adv: mcast: fix multicast tt/tvlv worker locking
BUG: unable to handle page fault for address = ADDR kernel -1 syz, C done 3 2727d 2726d 12/29 2695d baf76f0c58ae slip: make slhc_free() silently accept an error pointer
KASAN: use-after-free Read in seccomp_notify_release (2) kernel 19 syz, C done 9 2757d 2758d 12/29 2695d 7a0df7fbc145 seccomp: Make NEW_LISTENER and TSYNC flags exclusive
kernel BUG at drivers/android/binder_alloc.c:LINE! (2) kernel -1 syz, C 1257 2755d 2797d 11/29 2755d 26528be6720b binder: fix handling of misaligned binder object
KASAN: use-after-free Read in kobject_put kernel 19 syz, C 12 2783d 2915d 11/29 2755d e20a2e9c42c9 Bluetooth: Fix decrementing reference count twice in releasing socket
BUG: assuming atomic context at kernel/seccomp.c:LINE kernel -1 syz, C 709 2790d 2791d 11/29 2755d e80d02dd7630 seccomp, bpf: disable preemption before calling into bpf prog
KASAN: use-after-free Read in update_blocked_averages kernel 19 syz, C done 3 2877d 2892d 11/29 2762d bc6e019b6ee6 fou: Prevent unbounded recursion in GUE error handler also with UDP-Lite
WARNING in update_load_avg kernel -1 syz, C done 1 2884d 2883d 11/29 2762d bc6e019b6ee6 fou: Prevent unbounded recursion in GUE error handler also with UDP-Lite
KASAN: slab-out-of-bounds Read in tick_sched_handle kernel 17 syz, C done 7 2828d 2856d 11/29 2766d bc6e019b6ee6 fou: Prevent unbounded recursion in GUE error handler also with UDP-Lite
general protection fault in watchdog kernel 2 syz, C 1 2860d 2859d 11/29 2777d e2c8d550a973 netfilter: ebtables: account ebt_table_info to kmemcg
BUG: unable to handle kernel paging request in do_csum kernel 8 syz, C 11 2870d 2871d 11/29 2777d d5be7f632bad net-backports: net: validate untrusted gso packets without csum offload
kernel panic: stack is corrupted in printk kernel 2 syz, C 1 2837d 2837d 11/29 2777d 44039e00171b fou6: Prevent unbounded recursion in GUE error handler
general protection fault in rb_erase_cached kernel 2 syz, C 1 2837d 2837d 11/29 2777d 44039e00171b fou6: Prevent unbounded recursion in GUE error handler
KASAN: out-of-bounds Read in __switch_to kernel 17 syz, C 1 2837d 2837d 11/29 2777d 44039e00171b fou6: Prevent unbounded recursion in GUE error handler
WARNING: locking bug in corrupted kernel 4 syz, C 1 2826d 2826d 11/29 2777d 44039e00171b fou6: Prevent unbounded recursion in GUE error handler
KASAN: use-after-free Read in seccomp_notify_release kernel 19 syz, C 27 2782d 2831d 11/29 2777d a811dc61559e seccomp: fix UAF in user-trap code
KASAN: slab-out-of-bounds Write in fpstate_init kernel 21 syz, C 15088 2849d 2850d 11/29 2784d ed8e48122728 KVM: x86: fix size of x86_fpu_cache objects
WARNING in static_key_disable_cpuslocked kernel -1 syz 5 2867d 2886d 11/29 2831d 9c48060141bd udp: fix jump label misuse
WARNING in __rcu_read_unlock kernel -1 syz, C 2 2850d 2858d 11/29 2831d 11789039da53 fou: Prevent unbounded recursion in GUE error handler
BUG: corrupted list in cpu_stop_queue_work kernel 8 syz, C 24 3009d 3019d 11/29 2890d 552446a41661 shmem: Convert shmem_add_to_page_cache to XArray
KASAN: use-after-free Read in finish_task_switch kernel 19 syz, C 3047 2940d 2985d 11/29 2919d 26b471c7e2f7 KVM: nVMX: Fix bad cleanup on error of get/set nested state IOCTLs
KMSAN: uninit-value in do_msgrcv kernel 7 syz, C 8 2967d 3043d 8/29 2967d 39cfffd774a2 ipc/util.c: use ipc_rcu_putref() for failues in ipc_addid() 615c999cd8a0 ipc: compute kern_ipc_perm.id under the ipc lock e2652ae6bd74 ipc: reorganize initialization of kern_ipc_perm.seq
general protection fault in __delayacct_blkio_end kernel 2 syz, C 50 3002d 3098d 8/29 2987d b512719f771a delayacct: fix crash in delayacct_blkio_end() after delayacct init failure
KASAN: stack-out-of-bounds Read in __handle_mm_fault (2) kernel 17 syz, C 3 3005d 3007d 8/29 2988d 99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
general protection fault in scheduler_tick kernel 2 syz, C 1 3018d 3017d 8/29 2988d 99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
BUG: unable to handle kernel NULL pointer dereference in corrupted (2) kernel 10 syz, C 1 3008d 3008d 8/29 2988d 99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
KASAN: slab-out-of-bounds Read in corrupted kernel 17 syz, C 1 3008d 3008d 8/29 2988d 99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
KASAN: stack-out-of-bounds Read in account_system_index_time kernel 17 syz, C 2 3010d 3017d 8/29 2988d 99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
KASAN: stack-out-of-bounds Read in add_wait_queue kernel 17 syz, C 1 3017d 3017d 8/29 2988d 99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
BUG: unable to handle kernel paging request in cpuacct_charge kernel 8 syz 2 3009d 3009d 8/29 2988d 99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
KASAN: stack-out-of-bounds Read in timerqueue_add kernel 17 syz, C 4 3006d 3022d 8/29 2988d 99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
KASAN: stack-out-of-bounds Read in rcu_process_callbacks kernel 17 syz, C 1 3011d 3011d 8/29 2988d 99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
unexpected kernel reboot (2) kernel -1 syz, C 2073 3017d 3107d 8/29 3017d 0447378a4a79 kvm: vmx: Nested VM-entry prereqs for event inj.
WARNING: kernel stack regs at (ptrval) in syzkaller has bad 'bp' value (ptrval) kernel -1 syz, C 3 3093d 3094d 8/29 3017d f044a84e040b crypto: don't optimize keccakf()
WARNING in dev_vprintk_emit kernel -1 syz, C 77 3063d 3190d 5/29 3049d 814596495dd2 cfg80211: further limit wiphy names to 64 bytes
kernel BUG at include/linux/mm.h:LINE! kernel -1 syz 68 3049d 3086d 5/29 3049d a466ef76b815 x86/kexec: Avoid double free_page() upon do_kexec_load() failure
general protection fault in account_system_index_time kernel 2 syz, C 2 3120d 3120d 5/29 3073d ae4745730cf8 net: Fix untag for vlan packets without ethernet header
WARNING in __debug_object_init kernel -1 syz, C 192 3112d 3122d 5/29 3079d bd03143007eb alarmtimer: Init nanosleep alarm timer on stack
KASAN: use-after-free Read in alloc_pid kernel 19 syz, C 7 3107d 3116d 5/29 3079d 8e04944f0ea8 mm,vmscan: Allow preallocating memory for register_shrinker().
WARNING: inconsistent lock state kernel -1 syz, C 22 3090d 3094d 5/29 3079d 6c1e851c4edc random: fix possible sleeping allocation from irq context
WARNING: kobject bug in device_add kernel -1 syz, C 563 3079d 3119d 5/29 3079d 3e14c6abbfb5 kobject: don't use WARN for registration failures
KASAN: use-after-free Read in binder_release_work kernel 19 syz, C 6 3092d 3113d 5/29 3079d 7aa135fcf263 ANDROID: binder: prevent transactions into own process.
inconsistent lock state in fs_reclaim_acquire kernel 4 syz, C 36235 3079d 3090d 5/29 3079d 6c1e851c4edc random: fix possible sleeping allocation from irq context
WARNING in binder_send_failed_reply kernel -1 syz, C 206 3153d 3237d 5/29 3108d e46a3b3ba750 ANDROID: binder: remove WARN() for redundant txn error
general protection fault in timerqueue_add kernel 2 syz, C 2 3121d 3121d 5/29 3111d c769accdf3d8 vlan: Fix vlan insertion for packets without ethernet header
general protection fault in try_to_wake_up kernel 2 syz 1 3123d 3119d 5/29 3111d c769accdf3d8 vlan: Fix vlan insertion for packets without ethernet header
general protection fault in hrtimer_active (2) kernel 2 syz, C 10612 3144d 3149d 4/29 3142d b7e31be38558 KVM: x86: fix vcpu initialization with userspace lapic
general protection fault in binder_poll kernel 2 syz, C 159 3153d 3237d 4/29 3149d f88982679f54 binder: check for binder_thread allocation failure in binder_poll()
KASAN: slab-out-of-bounds Read in string kernel 17 syz, C 129 3172d 3183d 4/29 3162d da17c73b6eb7 netfilter: x_tables: avoid out-of-bounds reads in xt_request_find_{match|target}
WARNING in do_debug kernel -1 syz, C 905 3168d 3268d 4/29 3164d efdab992813f KVM: x86: fix escape of guest dr6 to the host
kernel BUG at drivers/android/binder_alloc.c:LINE! kernel -1 syz, C 856 3232d 3237d 4/29 3175d fb2c445277e7 ANDROID: binder: fix transaction leak.
general protection fault in lockdep_invariant_state (2) kernel 2 syz, C 114 3231d 3260d 4/29 3180d 5e351ad10699 locking/lockdep: Fix possible NULL deref
general protection fault in hrtimer_active kernel 2 syz, C 669 3258d 3281d 3/29 3240d aec72f3392b1 net-tun: fix panics at dismantle time
WARNING in get_pi_state kernel -1 syz, C 42 3266d 3268d 3/29 3257d 153fbd1226fb futex: Fix more put_pi_state() vs. exit_pi_state_list() races
KASAN: use-after-free Read in __lock_acquire kernel 19 syz 894 3257d 3267d 3/29 3257d 153fbd1226fb futex: Fix more put_pi_state() vs. exit_pi_state_list() races
KASAN: use-after-free Read in do_raw_spin_unlock kernel 19 syz 3 3267d 3268d 3/29 3257d 153fbd1226fb futex: Fix more put_pi_state() vs. exit_pi_state_list() races
WARNING in __switch_to kernel -1 syz, C 535 3302d 3349d 3/29 3275d 814fb7bb7db5 x86/fpu: Don't let userspace set bogus xcomp_bv