Applied filters: Label=subsystems:netfilter (drop)
Extra filters: [With Repro]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
KASAN: invalid-free in rcu_free_sheaf prio:high fs netfilter 24 112 56m 100d 18/29 never 979d5b8de8ed ieee802154: hwsim: serialize pib updates to fix double-free
WARNING in nf_flow_offload_ip_hook prio:normal netfilter -1 syz, C done 9 48d 47d 29/29 6d16h 8aecf0bbcc72 netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()
KCSAN: data-race in hash_ip4_add / hash_ip4_head prio:normal netfilter 6 1 179d 179d 29/29 67d 2358f7427ccd netfilter: ipset: Fix data race between add and dump in all hash types
BUG: using smp_processor_id() in preemptible code in cpu_mt prio:normal netfilter 4 4 98d 124d 29/29 67d c376f07e16c0 netfilter: xt_cpu: prefer raw_smp_processor_id
KASAN: use-after-free Read in nf_hook_entry_head netfilter 19 syz error 62 189d 213d 29/29 137d b7cdc5a97d02 netfilter: nf_tables: Fix for duplicate device in netdev hooks
possible deadlock in nf_tables_dumpreset_obj netfilter 4 1 279d 275d 29/29 137d 7f261bb906bf netfilter: nf_tables: revert commit_mutex usage in reset path
WARNING in nft_map_deactivate netfilter -1 syz, C error 5 202d 213d 29/29 137d fb7fb4016300 netfilter: nf_tables: clone set on flush only
KASAN: slab-use-after-free Read in nft_array_get_cmp netfilter 19 syz, C error 5 235d 235d 29/29 137d 35f83a75529a netfilter: nft_set_rbtree: don't gc elements on insert
WARNING in nf_conntrack_cleanup_net_list netfilter -1 765 148d 283d 29/29 137d 2ef02ac38d3c inet: frags: drop fraglist conntrack references
WARNING in br_nf_local_in bridge netfilter -1 1 380d 376d 29/29 321d netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm
WARNING in nf_reject_fill_skb_dst netfilter -1 syz, C done 214 382d 395d 29/29 342d netfilter: nf_reject: don't leak dst refcount for loopback packets
WARNING in nf_send_reset6 netfilter -1 syz, C 9 387d 395d 29/29 342d netfilter: nf_reject: don't leak dst refcount for loopback packets
WARNING in nf_send_unreach6 netfilter -1 508 382d 396d 29/29 342d netfilter: nf_reject: don't leak dst refcount for loopback packets
WARNING in nft_socket_init (2) netfilter -1 syz, C done 6 405d 422d 29/29 347d 1dee968d22ea netfilter: nft_socket: remove WARN_ON_ONCE with huge level value
WARNING in ip_mr_output netfilter -1 syz, C error 74 448d 450d 29/29 381d beead7eea896 net: ipv4: guard ip_mr_output() with rcu
KASAN: slab-out-of-bounds Read in nfacct_mt_checkentry netfilter 17 syz, C done 7 432d 430d 29/29 381d bf58e667af7d netfilter: xt_nfacct: don't assume acct name is null-terminated
KMSAN: uninit-value in nf_flow_offload_inet_hook (2) netfilter 7 syz, C 13 438d 440d 29/29 381d 18cdb3d982da netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
BUG: assuming non migratable context at ./include/linux/filter.h:LINE netfilter -1 syz, C done 1189 393d 430d 29/29 381d 17ce3e5949bc bpf: Disable migration in nf_hook_run_bpf().
WARNING in dev_setup_tc netfilter -1 38 557d 562d 28/29 467d 0a13c1e0a449 net: revert to lockless TC_SETUP_BLOCK and TC_SETUP_FT
KASAN: slab-use-after-free Read in nf_tables_trans_destroy_work (2) netfilter 19 syz 1 568d 567d 28/29 467d fb8286562ecf netfilter: nf_tables: make destruction work queue pernet
KMSAN: uninit-value in __nf_conncount_add netfilter 7 1 565d 561d 28/29 467d d653bfeb07eb netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree()
WARNING in __nf_unregister_net_hook (8) netfilter -1 2 526d 538d 28/29 467d 688c15017d5c netfilter: nf_tables: don't unregister hook when table is dormant
WARNING in nft_socket_init netfilter -1 syz, C done 14 596d 664d 28/29 502d b7529880cb96 netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level
KASAN: slab-out-of-bounds Read in led_tg_check netfilter 17 syz, C done 5 658d 669d 28/29 502d 04317f4eb2aa netfilter: x_tables: fix LED ID check in led_tg_check()
BUG: using smp_processor_id() in preemptible code in nft_inner_eval netfilter 4 2 668d 668d 28/29 502d 7b1d83da254b netfilter: nft_inner: incorrect percpu area handling under softirq
KASAN: slab-out-of-bounds Read in bitmap_ip_add (2) netfilter 17 syz, C 3 681d 678d 28/29 643d 35f56c554eb1 netfilter: ipset: add missing range check in bitmap_ip_uadt
KCSAN: assert: race in dequeue_entities netfilter audit 14 2118 686d 723d 28/29 675d b55945c500c5 sched: Fix pick_next_task_fair() vs try_to_wake_up() race
WARNING in xt_cluster_mt (2) netfilter -1 syz, C inconclusive 5 719d 717d 28/29 677d 0bfcb7b71e73 netfilter: xtables: avoid NFPROTO_UNSPEC where needed
BUG: using __this_cpu_write() in preemptible code in nf_dup_ipv4 netfilter 4 1 734d 734d 28/29 677d 92ceba94de6f netfilter: nf_tables: prevent nf_skb_duplicated corruption
INFO: task hung in ip_tunnel_init_net (3) netfilter 1 41 677d 709d 28/29 677d a1494d532e28 netdevsim: use cond_resched() in nsim_dev_trap_report_work()
KMSAN: uninit-value in nf_reject_ip6_tcphdr_put netfilter 7 syz, C 136 724d 737d 28/29 698d 9c778fe48d20 UPSTREAM: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
KASAN: slab-use-after-free Read in ip6_send_skb netfilter 19 1 764d 764d 28/29 711d faa389b2fbaa ipv6: prevent UAF in ip6_send_skb()
KMSAN: uninit-value in nf_flow_offload_inet_hook netfilter 7 4 762d 772d 28/29 717d 6ea14ccb60c8 netfilter: flowtable: validate vlan header
KASAN: slab-use-after-free Read in nf_tables_trans_destroy_work netfilter 19 syz, C error 147 803d 811d 26/29 775d 9f6958ba2e90 netfilter: nf_tables: unconditionally flush pending work before notifier
net-next test error: WARNING: suspicious RCU usage in _destroy_all_sets netfilter -1 128 822d 828d 26/29 803d 8ecd06277a76 netfilter: ipset: Fix suspicious rcu_dereference_protected()
upstream test error: WARNING: suspicious RCU usage in _destroy_all_sets netfilter -1 293 822d 828d 26/29 803d 8ecd06277a76 netfilter: ipset: Fix suspicious rcu_dereference_protected()
general protection fault in nf_tproxy_laddr4 netfilter 8 syz, C error 5 851d 860d 25/29 831d 21a673bddc8f netfilter: tproxy: bail out if IP has been disabled on the device
WARNING: suspicious RCU usage in nfqnl_reinject netfilter 4 2 842d 859d 25/29 831d dc21c6cc3d69 netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
KASAN: slab-use-after-free Read in ip_skb_dst_mtu netfilter 19 syz, C error 5 897d 928d 25/29 851d 18685451fc4e inet: inet_defrag: prevent sk release while still in use
KASAN: slab-out-of-bounds Read in update_counters netfilter bridge 17 syz, C 3 897d 897d 25/29 851d 0c83842df40f netfilter: validate user input for expected length
KASAN: slab-out-of-bounds Read in do_ipt_set_ctl netfilter 17 syz, C 111 888d 899d 25/29 851d 0c83842df40f netfilter: validate user input for expected length
KMSAN: uninit-value in xt_check_entry_offsets netfilter 7 1 895d 895d 25/29 851d 65acf6e0501a netfilter: complete validation of user input
KMSAN: uninit-value in nf_flow_offload_ip_hook netfilter 7 syz, C 5 899d 899d 25/29 851d 87b3593bed18 netfilter: flowtable: validate pppoe header
WARNING: ODEBUG bug in ip_set_free netfilter -1 syz, C 42 947d 950d 25/29 907d 27c5a095e251 netfilter: ipset: Missing gc cancellations fixed
WARNING: ODEBUG bug in hash_netiface4_destroy netfilter -1 syz, C done 80 947d 961d 25/29 907d 27c5a095e251 netfilter: ipset: Missing gc cancellations fixed
KMSAN: uninit-value in __nla_validate_parse (3) netfilter 17 24 922d 943d 25/29 908d 9a0d18853c28 netlink: add nla be16/32 types to minlen array
WARNING in __nf_unregister_net_hook (6) netfilter -1 syz, C error 2 952d 1069d 25/29 908d bccebf647017 netfilter: nf_tables: set dormant flag on hook register failure
inconsistent lock state in nf_connlabels_put netfilter 4 syz, C done 4 1060d 1061d 25/29 991d 643d12603664 netfilter: conntrack: switch connlabels to atomic_t
WARNING: proc registration bug in clusterip_tg_check (3) netfilter -1 syz, C done inconclusive 9 1339d 1873d 22/29 1200d 9db5d918e2c0 netfilter: ip_tables: remove clusterip target
KASAN: vmalloc-out-of-bounds Read in __ebt_unregister_table bridge netfilter 17 syz, C error 4 1311d 1311d 22/29 1200d e58a171d35e3 netfilter: ebtables: fix table blob use-after-free
INFO: task hung in nfnetlink_rcv_msg (3) netfilter 1 syz, C done 5 1381d 1392d 22/29 1200d 5e29dc36bd5e netfilter: ipset: Rework long task execution when adding/deleting entries
KASAN: slab-out-of-bounds Read in cttimeout_net_exit netfilter 17 syz, C 1444 1549d 1587d 22/29 1304d aeed55a08d0b netfilter: cttimeout: fix slab-out-of-bounds read in cttimeout_net_exit 394e771684f7 netfilter: cttimeout: fix slab-out-of-bounds read typo in cttimeout_net_exit
kernel panic: corrupted stack end in inet6_sendmsg netfilter 2 1 1452d 1452d 22/29 1304d b81d591386c3 riscv: Increase stack size under KASAN
KASAN: use-after-free Read in nf_hook_entries_grow netfilter 19 syz, C done done 5 1695d 1735d 22/29 1304d 6069da443bf6 netfilter: nf_tables: unregister flowtable hooks on netns exit
UBSAN: array-index-out-of-bounds in nfnetlink_unbind netfilter 17 syz, C done 6621 1570d 1587d 22/29 1304d ffd219efd9ee netfilter: nfnetlink: fix warn in nfnetlink_unbind
kernel panic: corrupted stack end in tcp_setsockopt netfilter 2 3 1409d 1558d 22/29 1304d b81d591386c3 riscv: Increase stack size under KASAN
KASAN: use-after-free Read in nf_confirm netfilter 19 syz, C done 605 1571d 1587d 22/29 1304d 56b14ecec97f netfilter: conntrack: re-fetch conntrack after insertion
KASAN: use-after-free Read in nf_tables_trans_destroy_work netfilter 19 syz, C done 6 1434d 1441d 22/29 1304d d4bc8271db21 netfilter: nf_tables: netlink notifier might race to release objects 26b5934ff419 netfilter: nf_tables: release flow rule object from commit path
WARNING in nf_tables_exit_net netfilter -1 syz, C error 3 1422d 1422d 22/29 1304d 03c1f1ef1584 netfilter: Cleanup nft_net->module_list from nf_tables_exit_net()
memory leak in nft_chain_parse_hook netfilter 3 syz, C 1 1486d 1483d 22/29 1304d 77972a36ecc4 netfilter: nf_tables: clean up hook list when offload flags check fails
KASAN: use-after-free Read in __nf_register_net_hook netfilter 19 syz, C error 5 1666d 1666d 22/29 1304d 56763f12b0f0 netfilter: fix use-after-free in __nf_register_net_hook()
memory leak in do_replace bridge netfilter 3 syz, C 1 1466d 1462d 22/29 1304d 62ce44c4fff9 netfilter: ebtables: fix memory leak when blob is malformed
WARNING in nfnetlink_unbind netfilter -1 syz, C done 235 1570d 1587d 22/29 1304d ffd219efd9ee netfilter: nfnetlink: fix warn in nfnetlink_unbind
WARNING: suspicious RCU usage in nft_do_chain netfilter 4 1 1666d 1666d 22/29 1304d 17a8f31bba7b netfilter: egress: silence egress hook lockdep splats
WARNING: kmalloc bug in hash_ip_create netfilter -1 syz, C done 641 1815d 1843d 20/29 1657d 7bbc3d385bd8 netfilter: ipset: Fix oversized kvmalloc() calls
KASAN: use-after-free Read in nft_table_lookup (2) netfilter 19 syz done 1 1837d 1833d 20/29 1657d a499b03bf36b netfilter: nf_tables: unlink table before deleting it
KCSAN: data-race in __nf_conntrack_alloc / __nf_conntrack_find_get (3) netfilter 6 2 1748d 1748d 20/29 1657d 802a7dc5cf1b netfilter: conntrack: annotate data-races around ct->timeout
WARNING: kmalloc bug in hash_net_create netfilter -1 syz, C done 283 1816d 1843d 20/29 1657d 7bbc3d385bd8 netfilter: ipset: Fix oversized kvmalloc() calls
WARNING: kmalloc bug in nf_tables_newset netfilter -1 syz, C done 95 1815d 1843d 20/29 1657d 45928afe94a0 netfilter: nf_tables: Fix oversized kvmalloc() calls
WARNING: kmalloc bug in hash_mac_create netfilter -1 syz, C done 11 1836d 1841d 20/29 1657d 7bbc3d385bd8 netfilter: ipset: Fix oversized kvmalloc() calls
KASAN: use-after-free Read in nft_set_destroy netfilter 19 1 1742d 1742d 20/29 1657d 0f7d9b31ce7a netfilter: nf_tables: fix use-after-free in nft_set_catchall_destroy()
INFO: task can't die in nf_ct_iterate_cleanup (2) netfilter 1 1 1830d 1830d 20/29 1657d e9edc188fc76 netfilter: conntrack: serialize hash resizes and cleanups
KASAN: use-after-free Read in nf_tables_dump_sets netfilter 19 syz done done 1 1839d 1868d 20/29 1657d a499b03bf36b netfilter: nf_tables: unlink table before deleting it
WARNING in __nf_unregister_net_hook (4) netfilter -1 syz, C error 66 1659d 1989d 20/29 1657d 68a3765c659f netfilter: nf_tables: skip netdev events generated on netns removal
general protection fault in nf_tables_dump_tables netfilter 2 syz done done 4 1822d 1822d 20/29 1657d a499b03bf36b netfilter: nf_tables: unlink table before deleting it
WARNING in destroy_conntrack netfilter -1 syz, C done 1 1870d 1868d 20/29 1776d e3245a7b7b34 netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with mutex
WARNING: suspicious RCU usage in get_counters (2) netfilter 4 1 1911d 1911d 20/29 1776d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
WARNING: suspicious RCU usage in gc_worker netfilter 4 3 1930d 1956d 20/29 1776d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
divide error in nft_limit_init netfilter 2 syz, C done 4 1989d 1990d 20/29 1776d b895bdf5d643 netfilter: nft_limit: avoid possible divide error in nft_limit_init
KASAN: slab-out-of-bounds Write in xt_compat_target_from_user netfilter 21 syz, C error error 1 2226d 2225d 20/29 1776d b29c457a6511 netfilter: x_tables: fix compat match/target pad out-of-bound write
WARNING: suspicious RCU usage in vfree netfilter 4 1 1950d 1950d 20/29 1776d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
BUG: sleeping function called from invalid context in __alloc_skb netfilter 5 syz, C done 33 1823d 1965d 20/29 1776d 7072a355ba19 netfilter: nfnetlink: add a missing rcu_read_unlock()
net-next test error: WARNING in __nf_unregister_net_hook netfilter -1 42 1962d 1972d 20/29 1776d 43016d02cf6e netfilter: arptables: use pernet ops struct during unregister
upstream test error: WARNING in corrupted netfilter -1 1 1962d 1962d 20/29 1776d 43016d02cf6e netfilter: arptables: use pernet ops struct during unregister
UBSAN: shift-out-of-bounds in nft_hash_estimate netfilter -1 syz, C done 3 1964d 1964d 20/29 1776d a54754ec9891 netfilter: nftables: avoid overflows in nft_hash_buckets()
linux-next test error: WARNING in __nf_unregister_net_hook netfilter -1 21 1966d 1968d 20/29 1776d 43016d02cf6e netfilter: arptables: use pernet ops struct during unregister
KASAN: use-after-free Write in nft_ct_tmpl_put_pcpu netfilter 22 syz, C done 3 1870d 1870d 20/29 1776d e3245a7b7b34 netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with mutex
general protection fault in nft_set_elem_expr_alloc netfilter 2 syz, C done 3 1939d 1936d 20/29 1776d ad9f151e560b netfilter: nf_tables: initialize set before expression setup
WARNING: suspicious RCU usage in __clear_user netfilter 4 1 1944d 1944d 20/29 1776d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
kernel BUG at lib/string.c:LINE! (6) netfilter -1 syz, C done 2 2102d 2098d 19/29 2021d 6cb56218ad9e netfilter: xt_RATEEST: reject non-null terminated string from userspace
UBSAN: shift-out-of-bounds in hash_mac_create netfilter -1 syz, C unreliable 29 2087d 2107d 19/29 2021d 5c8193f568ae netfilter: ipset: fix shift-out-of-bounds in htable_bits()
memory leak in nf_tables_addchain netfilter 3 syz, C 1 2233d 2231d 15/29 2195d 59136aa3b264 netfilter: nf_tables: free chain context when BINDING flag is missing
WARNING in compat_do_ebt_get_ctl bridge netfilter -1 syz, C done 15 2225d 2236d 15/29 2195d 5c04da55c754 netfilter: ebtables: reject bogus getopt len value
WARNING in __nf_unregister_net_hook (2) netfilter -1 syz, C done 9 2261d 2259d 15/29 2195d 1e9451cbda45 netfilter: nf_tables: fix nat hook table deletion
invalid opcode in __phys_addr (2) netfilter 2 1 2274d 2274d 15/29 2238d c4e8fa9074ad netfilter: ipset: call ip_set_free() instead of kfree()
memory leak in ctnetlink_del_conntrack netfilter 3 syz, C 1 2296d 2294d 15/29 2256d 6c2d2176a85e netfilter: ctnetlink: memleak in filter initialization error path
memory leak in nf_tables_parse_netdev_hooks (3) netfilter 3 syz, C 1 2296d 2294d 15/29 2256d 3003055f5066 netfilter: nf_tables: hook list memleak in flowtable deletion
BUG: unable to handle kernel NULL pointer dereference in local_bh_disable netfilter 10 1 2286d 2286d 15/29 2256d 3021e69219e2 kcov: check kcov_softirq in kcov_remote_stop()
KASAN: invalid-free in nf_tables_newset netfilter 24 syz, C done 21 2348d 2363d 15/29 2285d 7fb6f78df700 netfilter: nf_tables: do not leave dangling pointer in nf_tables_set_alloc_name
WARNING in nf_nat_unregister_fn netfilter -1 1 2348d 2347d 15/29 2285d b4faef1739dd netfilter: nat: fix error handling upon registering inet hook
INFO: task hung in hashlimit_net_exit netfilter 1 syz done 53 2403d 2411d 15/29 2349d 8d0015a7ab76 netfilter: xt_hashlimit: limit the max size of hashtable
WARNING: proc registration bug in hashlimit_mt_check_common netfilter -1 syz, C done 320 2389d 2414d 15/29 2349d 99b79c3900d4 netfilter: xt_hashlimit: unregister proc file before releasing mutex
INFO: rcu detected stall in ip_set_uadd netfilter 1 syz, C done 11 2394d 2431d 15/29 2349d f66ee0410b1c netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports
memory leak in nf_tables_parse_netdev_hooks (2) netfilter 3 syz, C 2 2388d 2393d 15/29 2349d 2d285f26ecd0 netfilter: nf_tables: free flowtable hooks on hook register error
INFO: rcu detected stall in ip_set_udel netfilter 1 syz, C done 12 2408d 2431d 15/29 2349d f66ee0410b1c netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports
general protection fault in ip_set_comment_free netfilter 2 syz, C done 19 2392d 2429d 15/29 2349d 8af1c6fbd923 netfilter: ipset: Fix forceadd evaluation path
KASAN: slab-out-of-bounds Read in bitmap_ip_add netfilter 17 syz done done 7 2425d 2437d 15/29 2370d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
general protection fault in __nf_tables_chain_type_lookup netfilter 2 1 2435d 2434d 15/29 2376d 826035498ec1 netfilter: nf_tables: add __nft_chain_type_get()
KASAN: slab-out-of-bounds Read in bitmap_ip_ext_cleanup netfilter 17 syz, C done done 8 2420d 2436d 15/29 2378d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: slab-out-of-bounds Read in bitmap_port_ext_cleanup netfilter 17 syz, C done done 10 2428d 2436d 15/29 2378d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: slab-out-of-bounds Read in bitmap_ipmac_destroy netfilter 17 syz, C done done 2 2431d 2431d 15/29 2378d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: slab-out-of-bounds Read in bitmap_ipmac_ext_cleanup netfilter 17 syz, C unreliable done 15 2420d 2435d 15/29 2378d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: slab-out-of-bounds Read in bitmap_port_destroy netfilter 17 syz, C done done 2 2432d 2432d 15/29 2378d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: use-after-free Read in bitmap_ip_ext_cleanup netfilter 19 syz, C done done 2 2436d 2436d 15/29 2402d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: use-after-free Read in bitmap_ipmac_ext_cleanup netfilter 19 syz, C done done 2 2435d 2436d 15/29 2402d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: slab-out-of-bounds Write in bitmap_ip_del netfilter 21 syz, C done done 7 2433d 2435d 15/29 2402d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: use-after-free Read in bitmap_ip_destroy netfilter 19 syz, C done done 1 2436d 2436d 15/29 2405d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
WARNING in nft_request_module netfilter -1 syz, C done 7 2439d 2440d 15/29 2406d 9332d27d7918 netfilter: nf_tables: remove WARN and add NLA_STRING upper limits
KASAN: slab-out-of-bounds Read in bitmap_ip_list netfilter 17 syz, C 85 2421d 2437d 15/29 2406d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: use-after-free Read in bitmap_port_ext_cleanup netfilter 19 syz, C done 11 2436d 2445d 15/29 2406d c120959387ef netfilter: fix a use-after-free in mtype_destroy()
KASAN: use-after-free Read in __nf_tables_abort netfilter 19 syz, C done 3 2433d 2435d 15/29 2406d eb014de4fd41 netfilter: nf_tables: autoload modules from the abort path
WARNING: suspicious RCU usage in find_set_and_id netfilter 4 syz done 6 2431d 2434d 15/29 2406d 5038517119d5 netfilter: ipset: fix suspicious RCU usage in find_set_and_id
BUG: corrupted list in nft_obj_del netfilter 8 syz, C done 7 2437d 2440d 15/29 2406d 335178d5429c netfilter: nf_tables: fix flowtable list del corruption
BUG: corrupted list in nf_tables_commit netfilter 8 syz, C done 8 2440d 2440d 15/29 2406d 335178d5429c netfilter: nf_tables: fix flowtable list del corruption
general protection fault in dccp_timeout_nlattr_to_obj netfilter 2 syz, C done 7 2446d 2449d 15/29 2406d 1d9a7acd3d1e netfilter: conntrack: dccp, sctp: handle null timeout argument
general protection fault in nft_parse_register netfilter 2 1 2438d 2437d 15/29 2406d 7eaecf7963c1 netfilter: nft_osf: add missing check for DREG attribute
general protection fault in xt_rateest_tg_checkentry netfilter 2 syz, C done 12 2449d 2460d 15/29 2406d 1b789577f655 netfilter: arp_tables: init netns pointer in xt_tgchk_param struct
general protection fault in hash_netiface6_uadt netfilter 2 1 2445d 2445d 15/29 2406d 22dad713b8a5 netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present
general protection fault in xt_rateest_put netfilter 2 syz, C done 97 2437d 2444d 15/29 2406d 212e7f56605e netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct
general protection fault in hash_netnet6_uadt netfilter 2 1 2446d 2446d 15/29 2406d 22dad713b8a5 netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present
memory leak in nf_tables_parse_netdev_hooks netfilter 3 syz, C 6 2410d 2439d 15/29 2406d cd77e75b5e46 netfilter: nf_tables: fix memory leak in nf_tables_parse_netdev_hooks()
general protection fault in hash_ipmark6_uadt netfilter 2 2 2446d 2446d 15/29 2406d 22dad713b8a5 netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present
general protection fault in nft_chain_parse_hook netfilter 2 syz, C done 48 2425d 2440d 15/29 2406d 826035498ec1 netfilter: nf_tables: add __nft_chain_type_get()
WARNING in nf_tables_table_destroy netfilter -1 syz, C done done 1 2438d 2437d 15/29 2406d eb014de4fd41 netfilter: nf_tables: autoload modules from the abort path
KASAN: slab-out-of-bounds Read in bitmap_ip_gc netfilter 17 syz, C done 15 2419d 2437d 15/29 2406d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
general protection fault in nft_tunnel_get_init netfilter 2 syz, C done 7 2439d 2440d 15/29 2406d 1c702bf902bd netfilter: nft_tunnel: fix null-attribute check
KASAN: slab-out-of-bounds Read in bitmap_port_add netfilter 17 syz done 9 2431d 2437d 15/29 2406d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: slab-out-of-bounds Read in bitmap_ip_test netfilter 17 syz 10 2426d 2437d 15/29 2406d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
general protection fault in hash_ipportnet4_uadt netfilter 2 syz, C done 13 2446d 2448d 15/29 2406d 22dad713b8a5 netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present
KASAN: slab-out-of-bounds Read in bitmap_port_list netfilter 17 syz, C 152 2429d 2437d 15/29 2406d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: use-after-free Read in bitmap_port_destroy netfilter 19 syz, C 1 2437d 2437d 15/29 2406d c120959387ef netfilter: fix a use-after-free in mtype_destroy()
KMSAN: uninit-value in br_nf_forward_arp (3) bridge netfilter 7 2 2486d 2479d 15/29 2411d 5604285839aa net-backports: netfilter: bridge: make sure to pull arp header in br_nf_forward_arp()
KASAN: vmalloc-out-of-bounds Read in compat_copy_entries netfilter bridge 17 syz, C done 3 2472d 2472d 15/29 2411d e608f631f0ba netfilter: ebtables: compat: reject all padding in matches/watchers
KMSAN: uninit-value in nf_conntrack_tcp_packet netfilter 7 syz 3 2481d 2484d 15/29 2448d 9424e2e7ad93 net-backports: tcp: md5: fix potential overestimation of TCP option space
KCSAN: data-race in ip_finish_output2 / ip_finish_output2 netfilter 6 26 2477d 2522d 15/29 2474d 25c7a6d1f90e net: avoid potential false sharing in neighbor related code
KASAN: use-after-free Read in nf_ct_deliver_cached_events netfilter 19 syz, C done 169 2519d 2525d 15/29 2474d ad88b7a6aa3e netfilter: ecache: don't look for ecache extension on dying/unconfirmed conntracks
KCSAN: data-race in __nf_ct_refresh_acct / __nf_ct_refresh_acct netfilter 6 2460 2512d 2543d 13/29 2512d e37542ba111f net-backports: netfilter: conntrack: avoid possible false sharing
WARNING in xt_compat_add_offset netfilter -1 syz, C done 18 2603d 2767d 12/29 2581d 3b48300d5cc7 netfilter: ebtables: also count base chain policies
net-next build error (2) netfilter -1 2 2669d 2669d 12/29 2603d c9bb6165a16e netfilter: nf_conntrack_bridge: fix CONFIG_IPV6=y
KASAN: use-after-free Read in brnf_exit_net bridge netfilter 19 syz done 3 2647d 2650d 12/29 2603d 7e6daf50e1f4 netfilter: bridge: prevent UAF in brnf_exit_net()
general protection fault in nf_ct_gre_keymap_flush netfilter 2 syz, C 22 2792d 2798d 11/29 2733d ac088a88b5d5 netfilter: conntrack: fix error path in nf_conntrack_pernet_init()
INFO: rcu detected stall in netlink_sendmsg netfilter 1 syz 83 2772d 2827d 11/29 2755d 12750abad517 xfrm: policy: fix infinite loop when merging src-nodes
WARNING in cttimeout_default_get netfilter -1 syz, C 44 2845d 2865d 11/29 2844d 89259088c1b7 netfilter: nfnetlink_cttimeout: fetch timeouts for udplite and gre, too
general protection fault in icmp_timeout_obj_to_nlattr netfilter 2 syz, C 13 2877d 2881d 11/29 2869d 8866df9264a3 netfilter: nfnetlink_cttimeout: pass default timeout policy to obj_to_nlattr
general protection fault in ctnetlink_alloc_filter netfilter 2 syz, C 80 2918d 2922d 11/29 2869d 9306425b70bf netfilter: ctnetlink: must check mark attributes vs NULL
KMSAN: uninit-value in __nf_conntrack_find_get netfilter 7 syz, C 67 2980d 2987d 8/29 2965d 6613b6173dee netfilter: conntrack: dccp: treat SYNC/SYNCACK as invalid if no prior state
KMSAN: uninit-value in gc_worker netfilter 7 10 2981d 2993d 8/29 2965d 6613b6173dee netfilter: conntrack: dccp: treat SYNC/SYNCACK as invalid if no prior state
KMSAN: uninit-value in br_nf_forward_arp netfilter bridge 7 1 3033d 3030d 8/29 2987d b84bbaf7a6c8 packet: in packet_snd start writing at link layer allocation
KMSAN: uninit-value in nfqnl_recv_config (2) netfilter 7 syz, C 10 3008d 3023d 8/29 2995d ba062ebb2cd5 netfilter: nf_queue: augment nfqa_cfg_policy
KMSAN: uninit-value in ebt_stp_mt_check (2) bridge netfilter 7 syz, C 222 2995d 3027d 8/29 2995d c568503ef020 netfilter: x_tables: initialise match/target check parameter struct
WARNING in ebt_do_table bridge netfilter -1 syz, C 13 3004d 3028d 8/29 2995d 11ff7288beb2 netfilter: ebtables: reject non-bridge targets
KASAN: slab-out-of-bounds Read in nla_strlcpy netfilter 17 syz, C 34 3031d 3044d 5/29 3027d 4b83a9049a98 netfilter: provide correct argument to nla_strlcpy()
KASAN: use-after-free Read in nla_strlcpy netfilter 19 syz, C 59 3031d 3044d 5/29 3027d 4b83a9049a98 netfilter: provide correct argument to nla_strlcpy()
BUG: unable to handle kernel paging request in nla_strlcpy netfilter 8 1 3036d 3036d 5/29 3027d 4b83a9049a98 netfilter: provide correct argument to nla_strlcpy()
KMSAN: uninit-value in ebt_stp_mt_check netfilter bridge 7 syz, C 211 3027d 3072d 5/29 3027d a4995684a949 netfilter: bridge: stp fix reference to uninitialized data
KASAN: stack-out-of-bounds Write in compat_copy_entries netfilter bridge 21 syz 10 3032d 3070d 5/29 3027d 94c752f99954 netfilter: ebtables: handle string from userspace with care
KASAN: slab-out-of-bounds Read in clusterip_tg_check netfilter 17 syz, C 22 3151d 3157d 5/29 3051d 1a38956cce5e netfilter: ipt_CLUSTERIP: fix out-of-bounds accesses in clusterip_tg_check()
INFO: trying to register non-static key in del_timer_sync netfilter -1 syz, C 89 3131d 3157d 5/29 3052d 10414014bc08 netfilter: x_tables: fix missing timer initialization in xt_LED
BUG: unable to handle kernel paging request in cgroup_mt_destroy_v1 netfilter 8 syz, C 3 3154d 3154d 5/29 3052d ba7cd5d95f25 netfilter: xt_cgroup: initialize info->priv in cgroup_mt_check_v1()
KASAN: use-after-free Write in xt_rateest_put netfilter 22 syz, C 7 3155d 3156d 5/29 3052d 7dc68e98757a netfilter: xt_RATEEST: acquire xt_rateest_mutex for hash insert
KMSAN: uninit-value in ip6table_mangle_hook netfilter 7 syz, C 601 3057d 3088d 5/29 3057d b855ff827476 dccp: initialize ireq->ir_mark
KMSAN: uninit-value in iptable_mangle_hook netfilter 7 syz, C 1134 3057d 3088d 5/29 3057d b855ff827476 dccp: initialize ireq->ir_mark
BUG: unable to handle kernel paging request in compat_copy_entries netfilter bridge 8 syz 5 3123d 3121d 5/29 3071d b71812168571 netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets
WARNING in xt_cluster_mt netfilter -1 syz, C 4 3127d 3127d 5/29 3089d aebfa52a925d netfilter: drop template ct when conntrack is skipped.
BUG: unable to handle kernel paging request in ebt_among_mt_check (2) netfilter bridge 8 syz, C 946 3103d 3119d 4/29 3103d c8d70a700a5b netfilter: bridge: ebt_among: add more missing match size checks
WARNING in __xlate_proc_name netfilter -1 syz, C 11 3121d 3157d 4/29 3103d b1d0a5d0cba4 netfilter: x_tables: add and use xt_check_proc_name
WARNING in __proc_create netfilter -1 syz, C 12 3123d 3117d 4/29 3103d b1d0a5d0cba4 netfilter: x_tables: add and use xt_check_proc_name
KASAN: use-after-free Read in ip6_route_me_harder netfilter 19 syz, C 44 3121d 3129d 4/29 3120d 7d98386d55a5 netfilter: use skb_to_full_sk in ip6_route_me_harder
KASAN: use-after-free Write in nf_nat_ipv6_manip_pkt netfilter 22 syz, C 2 3136d 3136d 4/29 3120d b078556aecd7 netfilter: ipv6: fix use-after-free Write in nf_nat_ipv6_manip_pkt
WARNING in compat_copy_entries netfilter bridge -1 syz, C 434 3120d 3136d 4/29 3120d b71812168571 netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets
KASAN: slab-out-of-bounds Read in ip6_route_me_harder netfilter 17 syz, C 66 3121d 3129d 4/29 3120d 7d98386d55a5 netfilter: use skb_to_full_sk in ip6_route_me_harder
BUG: unable to handle kernel paging request in ebt_among_mt_check bridge netfilter 8 syz, C 823 3120d 3136d 4/29 3120d c4585a2823ed netfilter: bridge: ebt_among: add missing match size checks
WARNING: ODEBUG bug in led_tg_destroy netfilter -1 syz, C 4 3133d 3142d 4/29 3128d 10414014bc08 netfilter: x_tables: fix missing timer initialization in xt_LED
general protection fault in ip6t_do_table netfilter 2 syz, C 8077 3131d 3158d 4/29 3128d 57ebd808a97d netfilter: add back stackpointer size checks
WARNING in __queue_work netfilter -1 syz, C 1 3138d 3138d 4/29 3128d cfc2c7405333 netfilter: IDLETIMER: be syzkaller friendly
possible deadlock in do_ip_setsockopt (3) netfilter 4 3731 3130d 3147d 4/29 3128d 01ea306f2ac2 netfilter: drop outermost socket lock in getsockopt()
general protection fault in arpt_do_table netfilter 2 syz, C 3 3133d 3133d 4/29 3128d 57ebd808a97d netfilter: add back stackpointer size checks
possible deadlock in do_ipv6_setsockopt (2) netfilter 4 3642 3130d 3145d 4/29 3128d 01ea306f2ac2 netfilter: drop outermost socket lock in getsockopt()
kernel BUG at kernel/time/timer.c:LINE! netfilter -1 syz, C 18 3130d 3142d 4/29 3128d 10414014bc08 netfilter: x_tables: fix missing timer initialization in xt_LED
possible deadlock in xt_find_table_lock (2) netfilter 4 4 3146d 3144d 4/29 3128d 01ea306f2ac2 netfilter: drop outermost socket lock in getsockopt()
divide error in nf_nat_l4proto_unique_tuple netfilter 2 syz, C 2 3142d 3142d 4/29 3128d db57ccf0f2f4 netfilter: nat: cope with negative port range
possible deadlock in do_ip_getsockopt (2) netfilter 4 206 3130d 3145d 4/29 3128d 01ea306f2ac2 netfilter: drop outermost socket lock in getsockopt()
WARNING: ODEBUG bug in __queue_work netfilter -1 syz, C 2 3138d 3134d 4/29 3128d cfc2c7405333 netfilter: IDLETIMER: be syzkaller friendly
WARNING: proc registration bug in clusterip_tg_check netfilter -1 syz, C 779 3130d 3148d 4/29 3128d b3e456fce9f5 netfilter: ipt_CLUSTERIP: fix a race condition of proc file creation
WARNING: bad unlock balance in hashlimit_mt_common netfilter 4 syz, C 2059 3130d 3143d 4/29 3128d de526f401284 netfilter: xt_hashlimit: fix lock imbalance
general protection fault in cgroup_mt_destroy_v1 netfilter 2 syz, C 91 3145d 3157d 4/29 3142d ba7cd5d95f25 netfilter: xt_cgroup: initialize info->priv in cgroup_mt_check_v1()
KASAN: use-after-free Write in xt_rateest_tg_checkentry netfilter 22 syz, C 2 3155d 3156d 4/29 3142d 7dc68e98757a netfilter: xt_RATEEST: acquire xt_rateest_mutex for hash insert
possible deadlock in do_ip_setsockopt (2) netfilter 4 59 3147d 3150d 4/29 3147d 3f34cfae1238 netfilter: on sockopt() acquire sock lock only in the required scope
possible deadlock in do_ip_getsockopt netfilter 4 22 3152d 3157d 4/29 3150d 3f34cfae1238 netfilter: on sockopt() acquire sock lock only in the required scope
possible deadlock in xt_find_target netfilter 4 34 3151d 3158d 4/29 3150d 3f34cfae1238 netfilter: on sockopt() acquire sock lock only in the required scope
general protection fault in get_info netfilter 2 syz, C 760 3170d 3173d 4/29 3153d e3eeacbac4ad netfilter: x_tables: don't return garbage pointer on modprobe failure
suspicious RCU usage at net/netfilter/ipset/ip_set_core.c:LINE netfilter -1 syz, C 38048 3175d 3180d 4/29 3153d f998b6b10144 netfilter: ipset: Missing nfnl_lock()/nfnl_unlock() is added to ip_set_net_exit()
general protection fault in nf_tables_dump_obj_done netfilter 2 syz, C 976 3176d 3181d 3/29 3167d 8bea728dce89 netfilter: nf_tables: fix potential NULL-ptr deref in nf_tables_dump_obj_done()
kernel BUG at lib/string.c:LINE! netfilter -1 syz, C 73 3268d 3283d 3/29 3253d e466af75c074 netfilter: x_tables: avoid stack-out-of-bounds read in xt_copy_counters_from_user