Applied filters: Label=subsystems:netfilter (drop)
Extra filters: [With Repro]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
KASAN: invalid-free in rcu_free_sheaf prio:high fs netfilter 24 62 17m 98d 18/29 never 979d5b8de8ed ieee802154: hwsim: serialize pib updates to fix double-free
WARNING in nf_flow_offload_ip_hook prio:normal netfilter -1 syz, C done 9 46d 46d 29/29 5d01h 8aecf0bbcc72 netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()
KCSAN: data-race in hash_ip4_add / hash_ip4_head prio:normal netfilter 6 1 178d 178d 29/29 66d 2358f7427ccd netfilter: ipset: Fix data race between add and dump in all hash types
BUG: using smp_processor_id() in preemptible code in cpu_mt prio:normal netfilter 4 4 97d 122d 29/29 66d c376f07e16c0 netfilter: xt_cpu: prefer raw_smp_processor_id
KASAN: use-after-free Read in nf_hook_entry_head netfilter 19 syz error 62 187d 212d 29/29 135d b7cdc5a97d02 netfilter: nf_tables: Fix for duplicate device in netdev hooks
possible deadlock in nf_tables_dumpreset_obj netfilter 4 1 277d 273d 29/29 135d 7f261bb906bf netfilter: nf_tables: revert commit_mutex usage in reset path
WARNING in nft_map_deactivate netfilter -1 syz, C error 5 200d 212d 29/29 135d fb7fb4016300 netfilter: nf_tables: clone set on flush only
KASAN: slab-use-after-free Read in nft_array_get_cmp netfilter 19 syz, C error 5 233d 233d 29/29 135d 35f83a75529a netfilter: nft_set_rbtree: don't gc elements on insert
WARNING in nf_conntrack_cleanup_net_list netfilter -1 765 147d 281d 29/29 135d 2ef02ac38d3c inet: frags: drop fraglist conntrack references
WARNING in br_nf_local_in bridge netfilter -1 1 379d 375d 29/29 319d netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm
WARNING in nf_reject_fill_skb_dst netfilter -1 syz, C done 214 381d 394d 29/29 341d netfilter: nf_reject: don't leak dst refcount for loopback packets
WARNING in nf_send_reset6 netfilter -1 syz, C 9 385d 393d 29/29 341d netfilter: nf_reject: don't leak dst refcount for loopback packets
WARNING in nf_send_unreach6 netfilter -1 508 381d 394d 29/29 341d netfilter: nf_reject: don't leak dst refcount for loopback packets
WARNING in nft_socket_init (2) netfilter -1 syz, C done 6 403d 420d 29/29 345d 1dee968d22ea netfilter: nft_socket: remove WARN_ON_ONCE with huge level value
WARNING in ip_mr_output netfilter -1 syz, C error 74 446d 448d 29/29 379d beead7eea896 net: ipv4: guard ip_mr_output() with rcu
KASAN: slab-out-of-bounds Read in nfacct_mt_checkentry netfilter 17 syz, C done 7 430d 428d 29/29 379d bf58e667af7d netfilter: xt_nfacct: don't assume acct name is null-terminated
KMSAN: uninit-value in nf_flow_offload_inet_hook (2) netfilter 7 syz, C 13 436d 438d 29/29 379d 18cdb3d982da netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
BUG: assuming non migratable context at ./include/linux/filter.h:LINE netfilter -1 syz, C done 1189 391d 428d 29/29 379d 17ce3e5949bc bpf: Disable migration in nf_hook_run_bpf().
WARNING in dev_setup_tc netfilter -1 38 555d 560d 28/29 465d 0a13c1e0a449 net: revert to lockless TC_SETUP_BLOCK and TC_SETUP_FT
KASAN: slab-use-after-free Read in nf_tables_trans_destroy_work (2) netfilter 19 syz 1 566d 565d 28/29 465d fb8286562ecf netfilter: nf_tables: make destruction work queue pernet
KMSAN: uninit-value in __nf_conncount_add netfilter 7 1 563d 559d 28/29 465d d653bfeb07eb netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree()
WARNING in __nf_unregister_net_hook (8) netfilter -1 2 524d 536d 28/29 465d 688c15017d5c netfilter: nf_tables: don't unregister hook when table is dormant
WARNING in nft_socket_init netfilter -1 syz, C done 14 595d 663d 28/29 500d b7529880cb96 netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level
KASAN: slab-out-of-bounds Read in led_tg_check netfilter 17 syz, C done 5 657d 667d 28/29 500d 04317f4eb2aa netfilter: x_tables: fix LED ID check in led_tg_check()
BUG: using smp_processor_id() in preemptible code in nft_inner_eval netfilter 4 2 666d 666d 28/29 500d 7b1d83da254b netfilter: nft_inner: incorrect percpu area handling under softirq
KASAN: slab-out-of-bounds Read in bitmap_ip_add (2) netfilter 17 syz, C 3 680d 676d 28/29 642d 35f56c554eb1 netfilter: ipset: add missing range check in bitmap_ip_uadt
KCSAN: assert: race in dequeue_entities netfilter audit 14 2118 684d 721d 28/29 674d b55945c500c5 sched: Fix pick_next_task_fair() vs try_to_wake_up() race
WARNING in xt_cluster_mt (2) netfilter -1 syz, C inconclusive 5 717d 715d 28/29 675d 0bfcb7b71e73 netfilter: xtables: avoid NFPROTO_UNSPEC where needed
BUG: using __this_cpu_write() in preemptible code in nf_dup_ipv4 netfilter 4 1 733d 733d 28/29 675d 92ceba94de6f netfilter: nf_tables: prevent nf_skb_duplicated corruption
INFO: task hung in ip_tunnel_init_net (3) netfilter 1 41 676d 708d 28/29 675d a1494d532e28 netdevsim: use cond_resched() in nsim_dev_trap_report_work()
KMSAN: uninit-value in nf_reject_ip6_tcphdr_put netfilter 7 syz, C 136 722d 735d 28/29 696d 9c778fe48d20 UPSTREAM: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
KASAN: slab-use-after-free Read in ip6_send_skb netfilter 19 1 762d 762d 28/29 709d faa389b2fbaa ipv6: prevent UAF in ip6_send_skb()
KMSAN: uninit-value in nf_flow_offload_inet_hook netfilter 7 4 761d 770d 28/29 715d 6ea14ccb60c8 netfilter: flowtable: validate vlan header
KASAN: slab-use-after-free Read in nf_tables_trans_destroy_work netfilter 19 syz, C error 147 802d 809d 26/29 774d 9f6958ba2e90 netfilter: nf_tables: unconditionally flush pending work before notifier
net-next test error: WARNING: suspicious RCU usage in _destroy_all_sets netfilter -1 128 820d 827d 26/29 801d 8ecd06277a76 netfilter: ipset: Fix suspicious rcu_dereference_protected()
upstream test error: WARNING: suspicious RCU usage in _destroy_all_sets netfilter -1 293 820d 827d 26/29 801d 8ecd06277a76 netfilter: ipset: Fix suspicious rcu_dereference_protected()
general protection fault in nf_tproxy_laddr4 netfilter 8 syz, C error 5 849d 859d 25/29 830d 21a673bddc8f netfilter: tproxy: bail out if IP has been disabled on the device
WARNING: suspicious RCU usage in nfqnl_reinject netfilter 4 2 840d 857d 25/29 830d dc21c6cc3d69 netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
KASAN: slab-use-after-free Read in ip_skb_dst_mtu netfilter 19 syz, C error 5 895d 927d 25/29 849d 18685451fc4e inet: inet_defrag: prevent sk release while still in use
KASAN: slab-out-of-bounds Read in update_counters netfilter bridge 17 syz, C 3 896d 896d 25/29 849d 0c83842df40f netfilter: validate user input for expected length
KASAN: slab-out-of-bounds Read in do_ipt_set_ctl netfilter 17 syz, C 111 887d 898d 25/29 849d 0c83842df40f netfilter: validate user input for expected length
KMSAN: uninit-value in xt_check_entry_offsets netfilter 7 1 893d 893d 25/29 849d 65acf6e0501a netfilter: complete validation of user input
KMSAN: uninit-value in nf_flow_offload_ip_hook netfilter 7 syz, C 5 897d 897d 25/29 849d 87b3593bed18 netfilter: flowtable: validate pppoe header
WARNING: ODEBUG bug in ip_set_free netfilter -1 syz, C 42 945d 948d 25/29 905d 27c5a095e251 netfilter: ipset: Missing gc cancellations fixed
WARNING: ODEBUG bug in hash_netiface4_destroy netfilter -1 syz, C done 80 945d 959d 25/29 905d 27c5a095e251 netfilter: ipset: Missing gc cancellations fixed
KMSAN: uninit-value in __nla_validate_parse (3) netfilter 17 24 920d 941d 25/29 906d 9a0d18853c28 netlink: add nla be16/32 types to minlen array
WARNING in __nf_unregister_net_hook (6) netfilter -1 syz, C error 2 950d 1067d 25/29 906d bccebf647017 netfilter: nf_tables: set dormant flag on hook register failure
inconsistent lock state in nf_connlabels_put netfilter 4 syz, C done 4 1058d 1059d 25/29 989d 643d12603664 netfilter: conntrack: switch connlabels to atomic_t
WARNING: proc registration bug in clusterip_tg_check (3) netfilter -1 syz, C done inconclusive 9 1337d 1871d 22/29 1198d 9db5d918e2c0 netfilter: ip_tables: remove clusterip target
KASAN: vmalloc-out-of-bounds Read in __ebt_unregister_table bridge netfilter 17 syz, C error 4 1309d 1309d 22/29 1198d e58a171d35e3 netfilter: ebtables: fix table blob use-after-free
INFO: task hung in nfnetlink_rcv_msg (3) netfilter 1 syz, C done 5 1379d 1390d 22/29 1198d 5e29dc36bd5e netfilter: ipset: Rework long task execution when adding/deleting entries
KASAN: slab-out-of-bounds Read in cttimeout_net_exit netfilter 17 syz, C 1444 1548d 1585d 22/29 1302d aeed55a08d0b netfilter: cttimeout: fix slab-out-of-bounds read in cttimeout_net_exit 394e771684f7 netfilter: cttimeout: fix slab-out-of-bounds read typo in cttimeout_net_exit
kernel panic: corrupted stack end in inet6_sendmsg netfilter 2 1 1450d 1450d 22/29 1302d b81d591386c3 riscv: Increase stack size under KASAN
KASAN: use-after-free Read in nf_hook_entries_grow netfilter 19 syz, C done done 5 1693d 1734d 22/29 1302d 6069da443bf6 netfilter: nf_tables: unregister flowtable hooks on netns exit
UBSAN: array-index-out-of-bounds in nfnetlink_unbind netfilter 17 syz, C done 6621 1569d 1585d 22/29 1302d ffd219efd9ee netfilter: nfnetlink: fix warn in nfnetlink_unbind
kernel panic: corrupted stack end in tcp_setsockopt netfilter 2 3 1408d 1556d 22/29 1302d b81d591386c3 riscv: Increase stack size under KASAN
KASAN: use-after-free Read in nf_confirm netfilter 19 syz, C done 605 1569d 1585d 22/29 1302d 56b14ecec97f netfilter: conntrack: re-fetch conntrack after insertion
KASAN: use-after-free Read in nf_tables_trans_destroy_work netfilter 19 syz, C done 6 1433d 1439d 22/29 1302d d4bc8271db21 netfilter: nf_tables: netlink notifier might race to release objects 26b5934ff419 netfilter: nf_tables: release flow rule object from commit path
WARNING in nf_tables_exit_net netfilter -1 syz, C error 3 1421d 1420d 22/29 1302d 03c1f1ef1584 netfilter: Cleanup nft_net->module_list from nf_tables_exit_net()
memory leak in nft_chain_parse_hook netfilter 3 syz, C 1 1484d 1481d 22/29 1302d 77972a36ecc4 netfilter: nf_tables: clean up hook list when offload flags check fails
KASAN: use-after-free Read in __nf_register_net_hook netfilter 19 syz, C error 5 1665d 1665d 22/29 1302d 56763f12b0f0 netfilter: fix use-after-free in __nf_register_net_hook()
memory leak in do_replace bridge netfilter 3 syz, C 1 1464d 1460d 22/29 1302d 62ce44c4fff9 netfilter: ebtables: fix memory leak when blob is malformed
WARNING in nfnetlink_unbind netfilter -1 syz, C done 235 1569d 1585d 22/29 1302d ffd219efd9ee netfilter: nfnetlink: fix warn in nfnetlink_unbind
WARNING: suspicious RCU usage in nft_do_chain netfilter 4 1 1664d 1664d 22/29 1302d 17a8f31bba7b netfilter: egress: silence egress hook lockdep splats
WARNING: kmalloc bug in hash_ip_create netfilter -1 syz, C done 641 1814d 1841d 20/29 1655d 7bbc3d385bd8 netfilter: ipset: Fix oversized kvmalloc() calls
KASAN: use-after-free Read in nft_table_lookup (2) netfilter 19 syz done 1 1836d 1832d 20/29 1655d a499b03bf36b netfilter: nf_tables: unlink table before deleting it
KCSAN: data-race in __nf_conntrack_alloc / __nf_conntrack_find_get (3) netfilter 6 2 1747d 1747d 20/29 1655d 802a7dc5cf1b netfilter: conntrack: annotate data-races around ct->timeout
WARNING: kmalloc bug in hash_net_create netfilter -1 syz, C done 283 1814d 1841d 20/29 1655d 7bbc3d385bd8 netfilter: ipset: Fix oversized kvmalloc() calls
WARNING: kmalloc bug in nf_tables_newset netfilter -1 syz, C done 95 1814d 1841d 20/29 1655d 45928afe94a0 netfilter: nf_tables: Fix oversized kvmalloc() calls
WARNING: kmalloc bug in hash_mac_create netfilter -1 syz, C done 11 1835d 1839d 20/29 1655d 7bbc3d385bd8 netfilter: ipset: Fix oversized kvmalloc() calls
KASAN: use-after-free Read in nft_set_destroy netfilter 19 1 1740d 1740d 20/29 1655d 0f7d9b31ce7a netfilter: nf_tables: fix use-after-free in nft_set_catchall_destroy()
INFO: task can't die in nf_ct_iterate_cleanup (2) netfilter 1 1 1828d 1828d 20/29 1655d e9edc188fc76 netfilter: conntrack: serialize hash resizes and cleanups
KASAN: use-after-free Read in nf_tables_dump_sets netfilter 19 syz done done 1 1838d 1866d 20/29 1655d a499b03bf36b netfilter: nf_tables: unlink table before deleting it
WARNING in __nf_unregister_net_hook (4) netfilter -1 syz, C error 66 1657d 1987d 20/29 1655d 68a3765c659f netfilter: nf_tables: skip netdev events generated on netns removal
general protection fault in nf_tables_dump_tables netfilter 2 syz done done 4 1820d 1820d 20/29 1655d a499b03bf36b netfilter: nf_tables: unlink table before deleting it
WARNING in destroy_conntrack netfilter -1 syz, C done 1 1868d 1866d 20/29 1774d e3245a7b7b34 netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with mutex
WARNING: suspicious RCU usage in get_counters (2) netfilter 4 1 1909d 1909d 20/29 1774d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
WARNING: suspicious RCU usage in gc_worker netfilter 4 3 1928d 1955d 20/29 1774d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
divide error in nft_limit_init netfilter 2 syz, C done 4 1987d 1988d 20/29 1774d b895bdf5d643 netfilter: nft_limit: avoid possible divide error in nft_limit_init
KASAN: slab-out-of-bounds Write in xt_compat_target_from_user netfilter 21 syz, C error error 1 2224d 2223d 20/29 1774d b29c457a6511 netfilter: x_tables: fix compat match/target pad out-of-bound write
WARNING: suspicious RCU usage in vfree netfilter 4 1 1949d 1949d 20/29 1774d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
BUG: sleeping function called from invalid context in __alloc_skb netfilter 5 syz, C done 33 1821d 1963d 20/29 1774d 7072a355ba19 netfilter: nfnetlink: add a missing rcu_read_unlock()
net-next test error: WARNING in __nf_unregister_net_hook netfilter -1 42 1960d 1971d 20/29 1774d 43016d02cf6e netfilter: arptables: use pernet ops struct during unregister
upstream test error: WARNING in corrupted netfilter -1 1 1960d 1960d 20/29 1774d 43016d02cf6e netfilter: arptables: use pernet ops struct during unregister
UBSAN: shift-out-of-bounds in nft_hash_estimate netfilter -1 syz, C done 3 1962d 1962d 20/29 1774d a54754ec9891 netfilter: nftables: avoid overflows in nft_hash_buckets()
linux-next test error: WARNING in __nf_unregister_net_hook netfilter -1 21 1964d 1967d 20/29 1774d 43016d02cf6e netfilter: arptables: use pernet ops struct during unregister
KASAN: use-after-free Write in nft_ct_tmpl_put_pcpu netfilter 22 syz, C done 3 1868d 1868d 20/29 1774d e3245a7b7b34 netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with mutex
general protection fault in nft_set_elem_expr_alloc netfilter 2 syz, C done 3 1938d 1934d 20/29 1774d ad9f151e560b netfilter: nf_tables: initialize set before expression setup
WARNING: suspicious RCU usage in __clear_user netfilter 4 1 1942d 1942d 20/29 1774d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
kernel BUG at lib/string.c:LINE! (6) netfilter -1 syz, C done 2 2100d 2096d 19/29 2019d 6cb56218ad9e netfilter: xt_RATEEST: reject non-null terminated string from userspace
UBSAN: shift-out-of-bounds in hash_mac_create netfilter -1 syz, C unreliable 29 2086d 2105d 19/29 2019d 5c8193f568ae netfilter: ipset: fix shift-out-of-bounds in htable_bits()
memory leak in nf_tables_addchain netfilter 3 syz, C 1 2232d 2229d 15/29 2193d 59136aa3b264 netfilter: nf_tables: free chain context when BINDING flag is missing
WARNING in compat_do_ebt_get_ctl bridge netfilter -1 syz, C done 15 2223d 2234d 15/29 2193d 5c04da55c754 netfilter: ebtables: reject bogus getopt len value
WARNING in __nf_unregister_net_hook (2) netfilter -1 syz, C done 9 2259d 2258d 15/29 2193d 1e9451cbda45 netfilter: nf_tables: fix nat hook table deletion
invalid opcode in __phys_addr (2) netfilter 2 1 2273d 2273d 15/29 2236d c4e8fa9074ad netfilter: ipset: call ip_set_free() instead of kfree()
memory leak in ctnetlink_del_conntrack netfilter 3 syz, C 1 2295d 2292d 15/29 2254d 6c2d2176a85e netfilter: ctnetlink: memleak in filter initialization error path
memory leak in nf_tables_parse_netdev_hooks (3) netfilter 3 syz, C 1 2295d 2292d 15/29 2254d 3003055f5066 netfilter: nf_tables: hook list memleak in flowtable deletion
BUG: unable to handle kernel NULL pointer dereference in local_bh_disable netfilter 10 1 2285d 2285d 15/29 2254d 3021e69219e2 kcov: check kcov_softirq in kcov_remote_stop()
KASAN: invalid-free in nf_tables_newset netfilter 24 syz, C done 21 2346d 2362d 15/29 2283d 7fb6f78df700 netfilter: nf_tables: do not leave dangling pointer in nf_tables_set_alloc_name
WARNING in nf_nat_unregister_fn netfilter -1 1 2346d 2346d 15/29 2283d b4faef1739dd netfilter: nat: fix error handling upon registering inet hook
INFO: task hung in hashlimit_net_exit netfilter 1 syz done 53 2401d 2410d 15/29 2347d 8d0015a7ab76 netfilter: xt_hashlimit: limit the max size of hashtable
WARNING: proc registration bug in hashlimit_mt_check_common netfilter -1 syz, C done 320 2387d 2412d 15/29 2347d 99b79c3900d4 netfilter: xt_hashlimit: unregister proc file before releasing mutex
INFO: rcu detected stall in ip_set_uadd netfilter 1 syz, C done 11 2392d 2429d 15/29 2347d f66ee0410b1c netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports
memory leak in nf_tables_parse_netdev_hooks (2) netfilter 3 syz, C 2 2387d 2391d 15/29 2347d 2d285f26ecd0 netfilter: nf_tables: free flowtable hooks on hook register error
INFO: rcu detected stall in ip_set_udel netfilter 1 syz, C done 12 2407d 2429d 15/29 2347d f66ee0410b1c netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports
general protection fault in ip_set_comment_free netfilter 2 syz, C done 19 2390d 2427d 15/29 2347d 8af1c6fbd923 netfilter: ipset: Fix forceadd evaluation path
KASAN: slab-out-of-bounds Read in bitmap_ip_add netfilter 17 syz done done 7 2424d 2435d 15/29 2368d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
general protection fault in __nf_tables_chain_type_lookup netfilter 2 1 2433d 2433d 15/29 2374d 826035498ec1 netfilter: nf_tables: add __nft_chain_type_get()
KASAN: slab-out-of-bounds Read in bitmap_ip_ext_cleanup netfilter 17 syz, C done done 8 2418d 2434d 15/29 2376d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: slab-out-of-bounds Read in bitmap_port_ext_cleanup netfilter 17 syz, C done done 10 2427d 2435d 15/29 2376d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: slab-out-of-bounds Read in bitmap_ipmac_destroy netfilter 17 syz, C done done 2 2429d 2429d 15/29 2376d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: slab-out-of-bounds Read in bitmap_ipmac_ext_cleanup netfilter 17 syz, C unreliable done 15 2418d 2434d 15/29 2376d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: slab-out-of-bounds Read in bitmap_port_destroy netfilter 17 syz, C done done 2 2430d 2430d 15/29 2376d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: use-after-free Read in bitmap_ip_ext_cleanup netfilter 19 syz, C done done 2 2434d 2434d 15/29 2400d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: use-after-free Read in bitmap_ipmac_ext_cleanup netfilter 19 syz, C done done 2 2434d 2434d 15/29 2400d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: slab-out-of-bounds Write in bitmap_ip_del netfilter 21 syz, C done done 7 2432d 2434d 15/29 2400d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: use-after-free Read in bitmap_ip_destroy netfilter 19 syz, C done done 1 2434d 2434d 15/29 2403d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
WARNING in nft_request_module netfilter -1 syz, C done 7 2438d 2438d 15/29 2404d 9332d27d7918 netfilter: nf_tables: remove WARN and add NLA_STRING upper limits
KASAN: slab-out-of-bounds Read in bitmap_ip_list netfilter 17 syz, C 85 2419d 2436d 15/29 2404d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: use-after-free Read in bitmap_port_ext_cleanup netfilter 19 syz, C done 11 2434d 2443d 15/29 2404d c120959387ef netfilter: fix a use-after-free in mtype_destroy()
KASAN: use-after-free Read in __nf_tables_abort netfilter 19 syz, C done 3 2432d 2433d 15/29 2404d eb014de4fd41 netfilter: nf_tables: autoload modules from the abort path
WARNING: suspicious RCU usage in find_set_and_id netfilter 4 syz done 6 2429d 2432d 15/29 2404d 5038517119d5 netfilter: ipset: fix suspicious RCU usage in find_set_and_id
BUG: corrupted list in nft_obj_del netfilter 8 syz, C done 7 2436d 2438d 15/29 2404d 335178d5429c netfilter: nf_tables: fix flowtable list del corruption
BUG: corrupted list in nf_tables_commit netfilter 8 syz, C done 8 2438d 2438d 15/29 2404d 335178d5429c netfilter: nf_tables: fix flowtable list del corruption
general protection fault in dccp_timeout_nlattr_to_obj netfilter 2 syz, C done 7 2445d 2447d 15/29 2404d 1d9a7acd3d1e netfilter: conntrack: dccp, sctp: handle null timeout argument
general protection fault in nft_parse_register netfilter 2 1 2436d 2436d 15/29 2404d 7eaecf7963c1 netfilter: nft_osf: add missing check for DREG attribute
general protection fault in xt_rateest_tg_checkentry netfilter 2 syz, C done 12 2448d 2458d 15/29 2404d 1b789577f655 netfilter: arp_tables: init netns pointer in xt_tgchk_param struct
general protection fault in hash_netiface6_uadt netfilter 2 1 2444d 2444d 15/29 2404d 22dad713b8a5 netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present
general protection fault in xt_rateest_put netfilter 2 syz, C done 97 2435d 2442d 15/29 2404d 212e7f56605e netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct
general protection fault in hash_netnet6_uadt netfilter 2 1 2445d 2445d 15/29 2404d 22dad713b8a5 netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present
memory leak in nf_tables_parse_netdev_hooks netfilter 3 syz, C 6 2408d 2438d 15/29 2404d cd77e75b5e46 netfilter: nf_tables: fix memory leak in nf_tables_parse_netdev_hooks()
general protection fault in hash_ipmark6_uadt netfilter 2 2 2444d 2445d 15/29 2404d 22dad713b8a5 netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present
general protection fault in nft_chain_parse_hook netfilter 2 syz, C done 48 2423d 2438d 15/29 2404d 826035498ec1 netfilter: nf_tables: add __nft_chain_type_get()
WARNING in nf_tables_table_destroy netfilter -1 syz, C done done 1 2436d 2436d 15/29 2404d eb014de4fd41 netfilter: nf_tables: autoload modules from the abort path
KASAN: slab-out-of-bounds Read in bitmap_ip_gc netfilter 17 syz, C done 15 2417d 2435d 15/29 2404d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
general protection fault in nft_tunnel_get_init netfilter 2 syz, C done 7 2438d 2438d 15/29 2404d 1c702bf902bd netfilter: nft_tunnel: fix null-attribute check
KASAN: slab-out-of-bounds Read in bitmap_port_add netfilter 17 syz done 9 2429d 2436d 15/29 2404d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: slab-out-of-bounds Read in bitmap_ip_test netfilter 17 syz 10 2425d 2435d 15/29 2404d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
general protection fault in hash_ipportnet4_uadt netfilter 2 syz, C done 13 2444d 2446d 15/29 2404d 22dad713b8a5 netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present
KASAN: slab-out-of-bounds Read in bitmap_port_list netfilter 17 syz, C 152 2427d 2436d 15/29 2404d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: use-after-free Read in bitmap_port_destroy netfilter 19 syz, C 1 2435d 2435d 15/29 2404d c120959387ef netfilter: fix a use-after-free in mtype_destroy()
KMSAN: uninit-value in br_nf_forward_arp (3) bridge netfilter 7 2 2485d 2477d 15/29 2409d 5604285839aa net-backports: netfilter: bridge: make sure to pull arp header in br_nf_forward_arp()
KASAN: vmalloc-out-of-bounds Read in compat_copy_entries netfilter bridge 17 syz, C done 3 2470d 2470d 15/29 2409d e608f631f0ba netfilter: ebtables: compat: reject all padding in matches/watchers
KMSAN: uninit-value in nf_conntrack_tcp_packet netfilter 7 syz 3 2480d 2483d 15/29 2446d 9424e2e7ad93 net-backports: tcp: md5: fix potential overestimation of TCP option space
KCSAN: data-race in ip_finish_output2 / ip_finish_output2 netfilter 6 26 2476d 2521d 15/29 2472d 25c7a6d1f90e net: avoid potential false sharing in neighbor related code
KASAN: use-after-free Read in nf_ct_deliver_cached_events netfilter 19 syz, C done 169 2518d 2523d 15/29 2472d ad88b7a6aa3e netfilter: ecache: don't look for ecache extension on dying/unconfirmed conntracks
KCSAN: data-race in __nf_ct_refresh_acct / __nf_ct_refresh_acct netfilter 6 2460 2510d 2541d 13/29 2510d e37542ba111f net-backports: netfilter: conntrack: avoid possible false sharing
WARNING in xt_compat_add_offset netfilter -1 syz, C done 18 2601d 2765d 12/29 2579d 3b48300d5cc7 netfilter: ebtables: also count base chain policies
net-next build error (2) netfilter -1 2 2667d 2667d 12/29 2601d c9bb6165a16e netfilter: nf_conntrack_bridge: fix CONFIG_IPV6=y
KASAN: use-after-free Read in brnf_exit_net bridge netfilter 19 syz done 3 2645d 2648d 12/29 2601d 7e6daf50e1f4 netfilter: bridge: prevent UAF in brnf_exit_net()
general protection fault in nf_ct_gre_keymap_flush netfilter 2 syz, C 22 2790d 2796d 11/29 2731d ac088a88b5d5 netfilter: conntrack: fix error path in nf_conntrack_pernet_init()
INFO: rcu detected stall in netlink_sendmsg netfilter 1 syz 83 2770d 2826d 11/29 2754d 12750abad517 xfrm: policy: fix infinite loop when merging src-nodes
WARNING in cttimeout_default_get netfilter -1 syz, C 44 2843d 2863d 11/29 2843d 89259088c1b7 netfilter: nfnetlink_cttimeout: fetch timeouts for udplite and gre, too
general protection fault in icmp_timeout_obj_to_nlattr netfilter 2 syz, C 13 2875d 2879d 11/29 2867d 8866df9264a3 netfilter: nfnetlink_cttimeout: pass default timeout policy to obj_to_nlattr
general protection fault in ctnetlink_alloc_filter netfilter 2 syz, C 80 2917d 2920d 11/29 2867d 9306425b70bf netfilter: ctnetlink: must check mark attributes vs NULL
KMSAN: uninit-value in __nf_conntrack_find_get netfilter 7 syz, C 67 2979d 2985d 8/29 2963d 6613b6173dee netfilter: conntrack: dccp: treat SYNC/SYNCACK as invalid if no prior state
KMSAN: uninit-value in gc_worker netfilter 7 10 2979d 2991d 8/29 2963d 6613b6173dee netfilter: conntrack: dccp: treat SYNC/SYNCACK as invalid if no prior state
KMSAN: uninit-value in br_nf_forward_arp netfilter bridge 7 1 3032d 3028d 8/29 2985d b84bbaf7a6c8 packet: in packet_snd start writing at link layer allocation
KMSAN: uninit-value in nfqnl_recv_config (2) netfilter 7 syz, C 10 3006d 3022d 8/29 2993d ba062ebb2cd5 netfilter: nf_queue: augment nfqa_cfg_policy
KMSAN: uninit-value in ebt_stp_mt_check (2) bridge netfilter 7 syz, C 222 2993d 3025d 8/29 2993d c568503ef020 netfilter: x_tables: initialise match/target check parameter struct
WARNING in ebt_do_table bridge netfilter -1 syz, C 13 3002d 3027d 8/29 2993d 11ff7288beb2 netfilter: ebtables: reject non-bridge targets
KASAN: stack-out-of-bounds Write in compat_copy_entries netfilter bridge 21 syz 10 3030d 3069d 5/29 3025d 94c752f99954 netfilter: ebtables: handle string from userspace with care
KASAN: use-after-free Read in nla_strlcpy netfilter 19 syz, C 59 3029d 3042d 5/29 3025d 4b83a9049a98 netfilter: provide correct argument to nla_strlcpy()
BUG: unable to handle kernel paging request in nla_strlcpy netfilter 8 1 3034d 3034d 5/29 3025d 4b83a9049a98 netfilter: provide correct argument to nla_strlcpy()
KMSAN: uninit-value in ebt_stp_mt_check netfilter bridge 7 syz, C 211 3026d 3071d 5/29 3025d a4995684a949 netfilter: bridge: stp fix reference to uninitialized data
KASAN: slab-out-of-bounds Read in nla_strlcpy netfilter 17 syz, C 34 3029d 3042d 5/29 3025d 4b83a9049a98 netfilter: provide correct argument to nla_strlcpy()
KASAN: slab-out-of-bounds Read in clusterip_tg_check netfilter 17 syz, C 22 3149d 3155d 5/29 3050d 1a38956cce5e netfilter: ipt_CLUSTERIP: fix out-of-bounds accesses in clusterip_tg_check()
INFO: trying to register non-static key in del_timer_sync netfilter -1 syz, C 89 3129d 3155d 5/29 3050d 10414014bc08 netfilter: x_tables: fix missing timer initialization in xt_LED
BUG: unable to handle kernel paging request in cgroup_mt_destroy_v1 netfilter 8 syz, C 3 3152d 3152d 5/29 3051d ba7cd5d95f25 netfilter: xt_cgroup: initialize info->priv in cgroup_mt_check_v1()
KASAN: use-after-free Write in xt_rateest_put netfilter 22 syz, C 7 3153d 3154d 5/29 3051d 7dc68e98757a netfilter: xt_RATEEST: acquire xt_rateest_mutex for hash insert
KMSAN: uninit-value in iptable_mangle_hook netfilter 7 syz, C 1134 3055d 3086d 5/29 3055d b855ff827476 dccp: initialize ireq->ir_mark
KMSAN: uninit-value in ip6table_mangle_hook netfilter 7 syz, C 601 3055d 3086d 5/29 3055d b855ff827476 dccp: initialize ireq->ir_mark
BUG: unable to handle kernel paging request in compat_copy_entries netfilter bridge 8 syz 5 3121d 3120d 5/29 3069d b71812168571 netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets
WARNING in xt_cluster_mt netfilter -1 syz, C 4 3125d 3125d 5/29 3087d aebfa52a925d netfilter: drop template ct when conntrack is skipped.
WARNING in __xlate_proc_name netfilter -1 syz, C 11 3120d 3156d 4/29 3101d b1d0a5d0cba4 netfilter: x_tables: add and use xt_check_proc_name
WARNING in __proc_create netfilter -1 syz, C 12 3122d 3115d 4/29 3101d b1d0a5d0cba4 netfilter: x_tables: add and use xt_check_proc_name
BUG: unable to handle kernel paging request in ebt_among_mt_check (2) netfilter bridge 8 syz, C 946 3101d 3117d 4/29 3101d c8d70a700a5b netfilter: bridge: ebt_among: add more missing match size checks
WARNING in compat_copy_entries netfilter bridge -1 syz, C 434 3118d 3134d 4/29 3118d b71812168571 netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets
KASAN: slab-out-of-bounds Read in ip6_route_me_harder netfilter 17 syz, C 66 3120d 3127d 4/29 3118d 7d98386d55a5 netfilter: use skb_to_full_sk in ip6_route_me_harder
BUG: unable to handle kernel paging request in ebt_among_mt_check bridge netfilter 8 syz, C 823 3118d 3134d 4/29 3118d c4585a2823ed netfilter: bridge: ebt_among: add missing match size checks
KASAN: use-after-free Read in ip6_route_me_harder netfilter 19 syz, C 44 3119d 3127d 4/29 3118d 7d98386d55a5 netfilter: use skb_to_full_sk in ip6_route_me_harder
KASAN: use-after-free Write in nf_nat_ipv6_manip_pkt netfilter 22 syz, C 2 3134d 3134d 4/29 3118d b078556aecd7 netfilter: ipv6: fix use-after-free Write in nf_nat_ipv6_manip_pkt
WARNING: proc registration bug in clusterip_tg_check netfilter -1 syz, C 779 3128d 3146d 4/29 3126d b3e456fce9f5 netfilter: ipt_CLUSTERIP: fix a race condition of proc file creation
divide error in nf_nat_l4proto_unique_tuple netfilter 2 syz, C 2 3141d 3140d 4/29 3126d db57ccf0f2f4 netfilter: nat: cope with negative port range
WARNING in __queue_work netfilter -1 syz, C 1 3136d 3136d 4/29 3126d cfc2c7405333 netfilter: IDLETIMER: be syzkaller friendly
WARNING: ODEBUG bug in led_tg_destroy netfilter -1 syz, C 4 3132d 3140d 4/29 3126d 10414014bc08 netfilter: x_tables: fix missing timer initialization in xt_LED
possible deadlock in do_ip_setsockopt (3) netfilter 4 3731 3128d 3145d 4/29 3126d 01ea306f2ac2 netfilter: drop outermost socket lock in getsockopt()
possible deadlock in do_ipv6_setsockopt (2) netfilter 4 3642 3128d 3144d 4/29 3126d 01ea306f2ac2 netfilter: drop outermost socket lock in getsockopt()
general protection fault in arpt_do_table netfilter 2 syz, C 3 3131d 3131d 4/29 3126d 57ebd808a97d netfilter: add back stackpointer size checks
WARNING: ODEBUG bug in __queue_work netfilter -1 syz, C 2 3136d 3132d 4/29 3126d cfc2c7405333 netfilter: IDLETIMER: be syzkaller friendly
possible deadlock in xt_find_table_lock (2) netfilter 4 4 3144d 3142d 4/29 3126d 01ea306f2ac2 netfilter: drop outermost socket lock in getsockopt()
general protection fault in ip6t_do_table netfilter 2 syz, C 8077 3129d 3156d 4/29 3126d 57ebd808a97d netfilter: add back stackpointer size checks
kernel BUG at kernel/time/timer.c:LINE! netfilter -1 syz, C 18 3128d 3140d 4/29 3126d 10414014bc08 netfilter: x_tables: fix missing timer initialization in xt_LED
WARNING: bad unlock balance in hashlimit_mt_common netfilter 4 syz, C 2059 3128d 3141d 4/29 3126d de526f401284 netfilter: xt_hashlimit: fix lock imbalance
possible deadlock in do_ip_getsockopt (2) netfilter 4 206 3129d 3143d 4/29 3126d 01ea306f2ac2 netfilter: drop outermost socket lock in getsockopt()
KASAN: use-after-free Write in xt_rateest_tg_checkentry netfilter 22 syz, C 2 3153d 3154d 4/29 3140d 7dc68e98757a netfilter: xt_RATEEST: acquire xt_rateest_mutex for hash insert
general protection fault in cgroup_mt_destroy_v1 netfilter 2 syz, C 91 3143d 3155d 4/29 3140d ba7cd5d95f25 netfilter: xt_cgroup: initialize info->priv in cgroup_mt_check_v1()
possible deadlock in do_ip_setsockopt (2) netfilter 4 59 3145d 3148d 4/29 3145d 3f34cfae1238 netfilter: on sockopt() acquire sock lock only in the required scope
possible deadlock in do_ip_getsockopt netfilter 4 22 3150d 3155d 4/29 3148d 3f34cfae1238 netfilter: on sockopt() acquire sock lock only in the required scope
possible deadlock in xt_find_target netfilter 4 34 3149d 3156d 4/29 3148d 3f34cfae1238 netfilter: on sockopt() acquire sock lock only in the required scope
general protection fault in get_info netfilter 2 syz, C 760 3168d 3171d 4/29 3152d e3eeacbac4ad netfilter: x_tables: don't return garbage pointer on modprobe failure
suspicious RCU usage at net/netfilter/ipset/ip_set_core.c:LINE netfilter -1 syz, C 38048 3173d 3179d 4/29 3152d f998b6b10144 netfilter: ipset: Missing nfnl_lock()/nfnl_unlock() is added to ip_set_net_exit()
general protection fault in nf_tables_dump_obj_done netfilter 2 syz, C 976 3174d 3179d 3/29 3165d 8bea728dce89 netfilter: nf_tables: fix potential NULL-ptr deref in nf_tables_dump_obj_done()
kernel BUG at lib/string.c:LINE! netfilter -1 syz, C 73 3266d 3282d 3/29 3252d e466af75c074 netfilter: x_tables: avoid stack-out-of-bounds read in xt_copy_counters_from_user