syzbot

 sign-in | mailing list | source | docs | 🏰
🐞 Open [1278]
≡ Subsystems
🐞 Fixed [7230]
🐞 Invalid [19127]
⬇ Missing Backports [222]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
✨ AI
💬 Send us feedback

Applied filters: Label=subsystems:mptcp (drop)
Extra filters: [With Repro]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
KMSAN: uninit-value in mptcp_established_options prio:high mptcp 7 syz 3191 42d 77d 29/29 2d17h 5e939544f9d2 mptcp: fix uninit-value in mptcp_established_options
possible deadlock in mptcp_subflow_create_socket (3) prio:low mptcp 4 140 4d04h 127d 29/29 2d17h d532cddb6c60 nbd: Reclassify sockets to avoid lockdep circular dependency
possible deadlock in mptcp_sendmsg prio:low mptcp 4 1 61d 61d 29/29 2d17h d532cddb6c60 nbd: Reclassify sockets to avoid lockdep circular dependency
KASAN: stack-out-of-bounds Read in mptcp_pm_nl_get_local_id mptcp 17 1 194d 177d 29/29 72d e2a9eeb69f7d mptcp: fix race in mptcp_pm_nl_flush_addrs_doit()
WARNING in mptcp_pm_nl_del_addr_doit mptcp -1 30 136d 265d 29/29 72d d191101dee25 mptcp: pm: in-kernel: always set ID as avail when rm endp
WARNING in subflow_data_ready (4) mptcp -1 C 556 194d 331d 29/29 172d 71154bbe4942 mptcp: fallback earlier on simult connection
WARNING: refcount bug in mptcp_schedule_work (2) mptcp 13 5 239d 246d 29/29 191d 035bca3f017e mptcp: fix race condition in mptcp_schedule_work()
KASAN: slab-use-after-free Read in mptcp_pm_del_add_timer mptcp 19 1 274d 242d 29/29 191d 426358d9be7c mptcp: fix a race in mptcp_pm_del_add_timer()
possible deadlock in mptcp_pm_addr_send_ack mptcp 4 2 309d 315d 29/29 261d 9f7c02e03157 nbd: restrict sockets to TCP and UDP
possible deadlock in mptcp_subflow_shutdown mptcp 4 1 316d 316d 29/29 261d 9f7c02e03157 nbd: restrict sockets to TCP and UDP
possible deadlock in __mptcp_close_ssk mptcp 4 5 286d 315d 29/29 261d 9f7c02e03157 nbd: restrict sockets to TCP and UDP
possible deadlock in mptcp_close (2) mptcp 4 1 321d 321d 29/29 261d 9f7c02e03157 nbd: restrict sockets to TCP and UDP
possible deadlock in __mptcp_push_pending mptcp 4 3 286d 317d 29/29 261d 9f7c02e03157 nbd: restrict sockets to TCP and UDP
WARNING in mptcp_pm_nl_addr_send_ack mptcp -1 1 516d 514d 28/29 402d f865c24bc551 mptcp: always handle address removal under msk socket lock
INFO: task hung in lock_sock_nested (5) mptcp tipc 1 C done 43 447d 568d 28/29 437d 06cc8786516f tls: skip setting sk_write_space on rekey
WARNING in mptcp_pm_nl_set_flags (2) mptcp -1 syz done 2 554d 549d 28/29 437d 1bb0d1348546 mptcp: pm: only set fullmesh for subflow endp
WARNING in __mptcp_clean_una (2) mptcp -1 C done 11 538d 578d 28/29 437d 619af16b3b57 mptcp: handle fastopen disconnect correctly
KMSAN: uninit-value in mptcp_incoming_options (2) mptcp 7 9 544d 549d 28/29 437d c86b000782da mptcp: consolidate suboption status
possible deadlock in sk_clone_lock (3) mptcp 4 C 21 631d 680d 28/29 612d 3d041393ea8c mptcp: prevent MPC handshake on port-based signal endpoints
WARNING in __mptcp_move_skbs_from_subflow mptcp -1 C error 90 645d 732d 28/29 612d 4dabcdf58121 tcp: fix mptcp DSS corruption due to large pmtu xmit
KASAN: slab-use-after-free Read in mptcp_pm_nl_rm_addr_or_subflow mptcp 19 1 642d 641d 28/29 612d 7decd1f5904a mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
KASAN: slab-use-after-free Read in __timer_delete_sync mptcp 19 syz error 1 685d 682d 28/29 633d b4cd80b03389 mptcp: pm: Fix uaf in __timer_delete_sync
WARNING in mptcp_pm_nl_set_flags mptcp -1 syz done 3 690d 690d 28/29 633d 9366922adc6a mptcp: pm: fix ID 0 endp usage after multiple re-creations
WARNING in __mptcp_clean_una mptcp -1 C done done 248 757d 882d 26/29 714d fb7a0d334894 mptcp: ensure snd_nxt is properly initialized on connect
general protection fault in subflow_v6_route_req mptcp 2 C done 2 802d 802d 25/29 772d 445c0b69c729 mptcp: fix possible NULL dereferences
KMSAN: uninit-value in subflow_check_req mptcp 7 C 63 924d 919d 25/29 898d 66ff70df1a91 mptcp: use OPTION_MPTCP_MPJ_SYN in subflow_check_req()
WARNING in mptcp_check_listen_stop mptcp -1 C done 47 899d 947d 25/29 899d 4c0288299fd0 mptcp: prevent tcp diag from closing listener subflows
general protection fault in __mptcp_set_connected mptcp 2 2 980d 984d 25/29 909d d109a7767273 mptcp: fix possible NULL pointer dereference on close
KMSAN: uninit-value in mptcp_incoming_options mptcp 7 C 93 959d 968d 25/29 909d 237ff253f2d4 mptcp: fix uninit-value in mptcp_incoming_options
WARNING in subflow_data_ready mptcp -1 42 912d 996d 25/29 909d 4fd19a307016 mptcp: fix inconsistent state on fastopen race
possible deadlock in dccp_v4_ctl_send_reset mptcp 4 C done 26 1326d 1338d 22/29 1239d af295e854a4e l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
WARNING in mptcp_sendmsg_frag mptcp -1 C inconclusive 6 1759d 1766d 20/29 1584d efe686ffce01 mptcp: ensure tx skbs always have the MPTCP ext mptcp: ensure tx skbs always have the MPTCP ext
bpf-next test error: WARNING: refcount bug in ref_tracker_free mptcp -1 110 1659d 1677d 20/29 1592d 1d2f3d3c6268 mptcp: adjust to use netns refcount tracker
linux-next test error: WARNING: refcount bug in ref_tracker_free mptcp -1 12 1675d 1676d 20/29 1592d 1d2f3d3c6268 mptcp: adjust to use netns refcount tracker
INFO: rcu detected stall in sys_recvmmsg mptcp 1 C done 52 1628d 1760d 20/29 1592d 612f71d7328c mptcp: fix possible stall on recvmsg()
net-next test error: WARNING: refcount bug in ref_tracker_free mptcp -1 12 1675d 1676d 20/29 1592d 1d2f3d3c6268 mptcp: adjust to use netns refcount tracker
possible deadlock in mptcp_close mptcp 4 C done 931 1750d 1761d 20/29 1592d 49054556289e net: introduce and use lock_sock_fast_nested()
INFO: task hung in lock_sock_nested (4) mptcp 1 C done 6 2007d 2054d 19/29 1955d 05e3ecea4a63 mptcp: avoid potential infinite loop in mptcp_recvmsg()
WARNING in mptcp_reset_timer mptcp -1 C unreliable 1307 1973d 2067d 19/29 1955d b680a214ec28 mptcp: update rtx timeout only if required.
WARNING in warn_bad_map mptcp -1 1 2220d 2216d 15/29 2188d 9c29e3615274 mptcp: fix DSS map generation on fin retransmission
WARNING: bad unlock balance in mptcp_poll mptcp 4 C done 10 2285d 2288d 15/29 2220d e154659ba39a mptcp: fix double-unlock in mptcp_poll