Applied filters: Label=subsystems:netfilter (drop)
Extra filters: [With Repro]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
WARNING in nf_flow_offload_ip_hook netfilter prio:normal -1 syz, C done 9 25d 25d 28/29 never 8aecf0bbcc72 netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()
KCSAN: data-race in hash_ip4_add / hash_ip4_head prio:normal netfilter 6 1 157d 157d 29/29 45d 2358f7427ccd netfilter: ipset: Fix data race between add and dump in all hash types
BUG: using smp_processor_id() in preemptible code in cpu_mt prio:normal netfilter 4 4 76d 102d 29/29 45d c376f07e16c0 netfilter: xt_cpu: prefer raw_smp_processor_id
KASAN: use-after-free Read in nf_hook_entry_head netfilter 19 syz error 62 166d 191d 29/29 114d b7cdc5a97d02 netfilter: nf_tables: Fix for duplicate device in netdev hooks
possible deadlock in nf_tables_dumpreset_obj netfilter 4 1 256d 252d 29/29 114d 7f261bb906bf netfilter: nf_tables: revert commit_mutex usage in reset path
WARNING in nft_map_deactivate netfilter -1 syz, C error 5 179d 191d 29/29 114d fb7fb4016300 netfilter: nf_tables: clone set on flush only
KASAN: slab-use-after-free Read in nft_array_get_cmp netfilter 19 syz, C error 5 212d 212d 29/29 114d 35f83a75529a netfilter: nft_set_rbtree: don't gc elements on insert
WARNING in nf_conntrack_cleanup_net_list netfilter -1 765 126d 260d 29/29 114d 2ef02ac38d3c inet: frags: drop fraglist conntrack references
WARNING in br_nf_local_in bridge netfilter -1 1 358d 354d 29/29 298d netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm
WARNING in nf_reject_fill_skb_dst netfilter -1 syz, C done 214 360d 373d 29/29 320d netfilter: nf_reject: don't leak dst refcount for loopback packets
WARNING in nf_send_reset6 netfilter -1 syz, C 9 364d 372d 29/29 320d netfilter: nf_reject: don't leak dst refcount for loopback packets
WARNING in nf_send_unreach6 netfilter -1 508 360d 373d 29/29 320d netfilter: nf_reject: don't leak dst refcount for loopback packets
WARNING in nft_socket_init (2) netfilter -1 syz, C done 6 382d 399d 29/29 324d 1dee968d22ea netfilter: nft_socket: remove WARN_ON_ONCE with huge level value
WARNING in ip_mr_output netfilter -1 syz, C error 74 425d 428d 29/29 358d beead7eea896 net: ipv4: guard ip_mr_output() with rcu
KASAN: slab-out-of-bounds Read in nfacct_mt_checkentry netfilter 17 syz, C done 7 409d 407d 29/29 358d bf58e667af7d netfilter: xt_nfacct: don't assume acct name is null-terminated
KMSAN: uninit-value in nf_flow_offload_inet_hook (2) netfilter 7 syz, C 13 415d 417d 29/29 358d 18cdb3d982da netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
BUG: assuming non migratable context at ./include/linux/filter.h:LINE netfilter -1 syz, C done 1189 370d 407d 29/29 358d 17ce3e5949bc bpf: Disable migration in nf_hook_run_bpf().
WARNING in dev_setup_tc netfilter -1 38 534d 539d 28/29 444d 0a13c1e0a449 net: revert to lockless TC_SETUP_BLOCK and TC_SETUP_FT
KASAN: slab-use-after-free Read in nf_tables_trans_destroy_work (2) netfilter 19 syz 1 545d 545d 28/29 444d fb8286562ecf netfilter: nf_tables: make destruction work queue pernet
KMSAN: uninit-value in __nf_conncount_add netfilter 7 1 542d 538d 28/29 444d d653bfeb07eb netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree()
WARNING in __nf_unregister_net_hook (8) netfilter -1 2 503d 515d 28/29 444d 688c15017d5c netfilter: nf_tables: don't unregister hook when table is dormant
WARNING in nft_socket_init netfilter -1 syz, C done 14 574d 642d 28/29 479d b7529880cb96 netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level
KASAN: slab-out-of-bounds Read in led_tg_check netfilter 17 syz, C done 5 636d 646d 28/29 479d 04317f4eb2aa netfilter: x_tables: fix LED ID check in led_tg_check()
BUG: using smp_processor_id() in preemptible code in nft_inner_eval netfilter 4 2 645d 645d 28/29 479d 7b1d83da254b netfilter: nft_inner: incorrect percpu area handling under softirq
KASAN: slab-out-of-bounds Read in bitmap_ip_add (2) netfilter 17 syz, C 3 659d 655d 28/29 621d 35f56c554eb1 netfilter: ipset: add missing range check in bitmap_ip_uadt
KCSAN: assert: race in dequeue_entities netfilter audit 14 2118 663d 700d 28/29 653d b55945c500c5 sched: Fix pick_next_task_fair() vs try_to_wake_up() race
WARNING in xt_cluster_mt (2) netfilter -1 syz, C inconclusive 5 696d 694d 28/29 654d 0bfcb7b71e73 netfilter: xtables: avoid NFPROTO_UNSPEC where needed
BUG: using __this_cpu_write() in preemptible code in nf_dup_ipv4 netfilter 4 1 712d 712d 28/29 654d 92ceba94de6f netfilter: nf_tables: prevent nf_skb_duplicated corruption
INFO: task hung in ip_tunnel_init_net (3) netfilter 1 41 655d 687d 28/29 654d a1494d532e28 netdevsim: use cond_resched() in nsim_dev_trap_report_work()
KMSAN: uninit-value in nf_reject_ip6_tcphdr_put netfilter 7 syz, C 136 701d 714d 28/29 676d 9c778fe48d20 UPSTREAM: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
KASAN: slab-use-after-free Read in ip6_send_skb netfilter 19 1 741d 741d 28/29 688d faa389b2fbaa ipv6: prevent UAF in ip6_send_skb()
KMSAN: uninit-value in nf_flow_offload_inet_hook netfilter 7 4 740d 749d 28/29 694d 6ea14ccb60c8 netfilter: flowtable: validate vlan header
KASAN: slab-use-after-free Read in nf_tables_trans_destroy_work netfilter 19 syz, C error 147 781d 788d 26/29 753d 9f6958ba2e90 netfilter: nf_tables: unconditionally flush pending work before notifier
net-next test error: WARNING: suspicious RCU usage in _destroy_all_sets netfilter -1 128 799d 806d 26/29 780d 8ecd06277a76 netfilter: ipset: Fix suspicious rcu_dereference_protected()
upstream test error: WARNING: suspicious RCU usage in _destroy_all_sets netfilter -1 293 799d 806d 26/29 780d 8ecd06277a76 netfilter: ipset: Fix suspicious rcu_dereference_protected()
general protection fault in nf_tproxy_laddr4 netfilter 8 syz, C error 5 828d 838d 25/29 809d 21a673bddc8f netfilter: tproxy: bail out if IP has been disabled on the device
WARNING: suspicious RCU usage in nfqnl_reinject netfilter 4 2 819d 836d 25/29 809d dc21c6cc3d69 netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
KASAN: slab-use-after-free Read in ip_skb_dst_mtu netfilter 19 syz, C error 5 874d 906d 25/29 828d 18685451fc4e inet: inet_defrag: prevent sk release while still in use
KASAN: slab-out-of-bounds Read in update_counters netfilter bridge 17 syz, C 3 875d 875d 25/29 828d 0c83842df40f netfilter: validate user input for expected length
KASAN: slab-out-of-bounds Read in do_ipt_set_ctl netfilter 17 syz, C 111 866d 877d 25/29 828d 0c83842df40f netfilter: validate user input for expected length
KMSAN: uninit-value in xt_check_entry_offsets netfilter 7 1 872d 872d 25/29 828d 65acf6e0501a netfilter: complete validation of user input
KMSAN: uninit-value in nf_flow_offload_ip_hook netfilter 7 syz, C 5 876d 876d 25/29 828d 87b3593bed18 netfilter: flowtable: validate pppoe header
WARNING: ODEBUG bug in ip_set_free netfilter -1 syz, C 42 924d 927d 25/29 884d 27c5a095e251 netfilter: ipset: Missing gc cancellations fixed
WARNING: ODEBUG bug in hash_netiface4_destroy netfilter -1 syz, C done 80 924d 938d 25/29 884d 27c5a095e251 netfilter: ipset: Missing gc cancellations fixed
KMSAN: uninit-value in __nla_validate_parse (3) netfilter 17 24 899d 920d 25/29 885d 9a0d18853c28 netlink: add nla be16/32 types to minlen array
WARNING in __nf_unregister_net_hook (6) netfilter -1 syz, C error 2 929d 1046d 25/29 885d bccebf647017 netfilter: nf_tables: set dormant flag on hook register failure
inconsistent lock state in nf_connlabels_put netfilter 4 syz, C done 4 1037d 1038d 25/29 968d 643d12603664 netfilter: conntrack: switch connlabels to atomic_t
WARNING: proc registration bug in clusterip_tg_check (3) netfilter -1 syz, C done inconclusive 9 1316d 1850d 22/29 1177d 9db5d918e2c0 netfilter: ip_tables: remove clusterip target
KASAN: vmalloc-out-of-bounds Read in __ebt_unregister_table bridge netfilter 17 syz, C error 4 1288d 1288d 22/29 1177d e58a171d35e3 netfilter: ebtables: fix table blob use-after-free
INFO: task hung in nfnetlink_rcv_msg (3) netfilter 1 syz, C done 5 1358d 1369d 22/29 1177d 5e29dc36bd5e netfilter: ipset: Rework long task execution when adding/deleting entries
KASAN: slab-out-of-bounds Read in cttimeout_net_exit netfilter 17 syz, C 1444 1527d 1564d 22/29 1281d aeed55a08d0b netfilter: cttimeout: fix slab-out-of-bounds read in cttimeout_net_exit 394e771684f7 netfilter: cttimeout: fix slab-out-of-bounds read typo in cttimeout_net_exit
kernel panic: corrupted stack end in inet6_sendmsg netfilter 2 1 1429d 1429d 22/29 1281d b81d591386c3 riscv: Increase stack size under KASAN
KASAN: use-after-free Read in nf_hook_entries_grow netfilter 19 syz, C done done 5 1672d 1713d 22/29 1281d 6069da443bf6 netfilter: nf_tables: unregister flowtable hooks on netns exit
UBSAN: array-index-out-of-bounds in nfnetlink_unbind netfilter 17 syz, C done 6621 1548d 1564d 22/29 1281d ffd219efd9ee netfilter: nfnetlink: fix warn in nfnetlink_unbind
kernel panic: corrupted stack end in tcp_setsockopt netfilter 2 3 1387d 1535d 22/29 1281d b81d591386c3 riscv: Increase stack size under KASAN
KASAN: use-after-free Read in nf_confirm netfilter 19 syz, C done 605 1548d 1564d 22/29 1281d 56b14ecec97f netfilter: conntrack: re-fetch conntrack after insertion
KASAN: use-after-free Read in nf_tables_trans_destroy_work netfilter 19 syz, C done 6 1412d 1418d 22/29 1281d d4bc8271db21 netfilter: nf_tables: netlink notifier might race to release objects 26b5934ff419 netfilter: nf_tables: release flow rule object from commit path
WARNING in nf_tables_exit_net netfilter -1 syz, C error 3 1400d 1399d 22/29 1281d 03c1f1ef1584 netfilter: Cleanup nft_net->module_list from nf_tables_exit_net()
memory leak in nft_chain_parse_hook netfilter 3 syz, C 1 1463d 1460d 22/29 1281d 77972a36ecc4 netfilter: nf_tables: clean up hook list when offload flags check fails
KASAN: use-after-free Read in __nf_register_net_hook netfilter 19 syz, C error 5 1644d 1644d 22/29 1281d 56763f12b0f0 netfilter: fix use-after-free in __nf_register_net_hook()
memory leak in do_replace bridge netfilter 3 syz, C 1 1443d 1439d 22/29 1281d 62ce44c4fff9 netfilter: ebtables: fix memory leak when blob is malformed
WARNING in nfnetlink_unbind netfilter -1 syz, C done 235 1548d 1564d 22/29 1281d ffd219efd9ee netfilter: nfnetlink: fix warn in nfnetlink_unbind
WARNING: suspicious RCU usage in nft_do_chain netfilter 4 1 1643d 1643d 22/29 1281d 17a8f31bba7b netfilter: egress: silence egress hook lockdep splats
WARNING: kmalloc bug in hash_ip_create netfilter -1 syz, C done 641 1793d 1820d 20/29 1634d 7bbc3d385bd8 netfilter: ipset: Fix oversized kvmalloc() calls
KASAN: use-after-free Read in nft_table_lookup (2) netfilter 19 syz done 1 1815d 1811d 20/29 1634d a499b03bf36b netfilter: nf_tables: unlink table before deleting it
KCSAN: data-race in __nf_conntrack_alloc / __nf_conntrack_find_get (3) netfilter 6 2 1726d 1726d 20/29 1634d 802a7dc5cf1b netfilter: conntrack: annotate data-races around ct->timeout
WARNING: kmalloc bug in hash_net_create netfilter -1 syz, C done 283 1793d 1820d 20/29 1634d 7bbc3d385bd8 netfilter: ipset: Fix oversized kvmalloc() calls
WARNING: kmalloc bug in nf_tables_newset netfilter -1 syz, C done 95 1793d 1820d 20/29 1634d 45928afe94a0 netfilter: nf_tables: Fix oversized kvmalloc() calls
WARNING: kmalloc bug in hash_mac_create netfilter -1 syz, C done 11 1814d 1818d 20/29 1634d 7bbc3d385bd8 netfilter: ipset: Fix oversized kvmalloc() calls
KASAN: use-after-free Read in nft_set_destroy netfilter 19 1 1719d 1719d 20/29 1634d 0f7d9b31ce7a netfilter: nf_tables: fix use-after-free in nft_set_catchall_destroy()
INFO: task can't die in nf_ct_iterate_cleanup (2) netfilter 1 1 1807d 1807d 20/29 1634d e9edc188fc76 netfilter: conntrack: serialize hash resizes and cleanups
KASAN: use-after-free Read in nf_tables_dump_sets netfilter 19 syz done done 1 1817d 1845d 20/29 1634d a499b03bf36b netfilter: nf_tables: unlink table before deleting it
WARNING in __nf_unregister_net_hook (4) netfilter -1 syz, C error 66 1636d 1966d 20/29 1634d 68a3765c659f netfilter: nf_tables: skip netdev events generated on netns removal
general protection fault in nf_tables_dump_tables netfilter 2 syz done done 4 1799d 1799d 20/29 1634d a499b03bf36b netfilter: nf_tables: unlink table before deleting it
WARNING in destroy_conntrack netfilter -1 syz, C done 1 1847d 1845d 20/29 1753d e3245a7b7b34 netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with mutex
WARNING: suspicious RCU usage in get_counters (2) netfilter 4 1 1888d 1888d 20/29 1753d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
WARNING: suspicious RCU usage in gc_worker netfilter 4 3 1907d 1934d 20/29 1753d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
divide error in nft_limit_init netfilter 2 syz, C done 4 1966d 1967d 20/29 1753d b895bdf5d643 netfilter: nft_limit: avoid possible divide error in nft_limit_init
KASAN: slab-out-of-bounds Write in xt_compat_target_from_user netfilter 21 syz, C error error 1 2203d 2202d 20/29 1753d b29c457a6511 netfilter: x_tables: fix compat match/target pad out-of-bound write
WARNING: suspicious RCU usage in vfree netfilter 4 1 1928d 1928d 20/29 1753d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
BUG: sleeping function called from invalid context in __alloc_skb netfilter 5 syz, C done 33 1800d 1942d 20/29 1753d 7072a355ba19 netfilter: nfnetlink: add a missing rcu_read_unlock()
net-next test error: WARNING in __nf_unregister_net_hook netfilter -1 42 1939d 1950d 20/29 1753d 43016d02cf6e netfilter: arptables: use pernet ops struct during unregister
upstream test error: WARNING in corrupted netfilter -1 1 1939d 1939d 20/29 1753d 43016d02cf6e netfilter: arptables: use pernet ops struct during unregister
UBSAN: shift-out-of-bounds in nft_hash_estimate netfilter -1 syz, C done 3 1941d 1941d 20/29 1753d a54754ec9891 netfilter: nftables: avoid overflows in nft_hash_buckets()
linux-next test error: WARNING in __nf_unregister_net_hook netfilter -1 21 1943d 1946d 20/29 1753d 43016d02cf6e netfilter: arptables: use pernet ops struct during unregister
KASAN: use-after-free Write in nft_ct_tmpl_put_pcpu netfilter 22 syz, C done 3 1847d 1847d 20/29 1753d e3245a7b7b34 netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with mutex
general protection fault in nft_set_elem_expr_alloc netfilter 2 syz, C done 3 1917d 1913d 20/29 1753d ad9f151e560b netfilter: nf_tables: initialize set before expression setup
WARNING: suspicious RCU usage in __clear_user netfilter 4 1 1921d 1921d 20/29 1753d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
kernel BUG at lib/string.c:LINE! (6) netfilter -1 syz, C done 2 2079d 2075d 19/29 1998d 6cb56218ad9e netfilter: xt_RATEEST: reject non-null terminated string from userspace
UBSAN: shift-out-of-bounds in hash_mac_create netfilter -1 syz, C unreliable 29 2065d 2084d 19/29 1998d 5c8193f568ae netfilter: ipset: fix shift-out-of-bounds in htable_bits()
memory leak in nf_tables_addchain netfilter 3 syz, C 1 2211d 2208d 15/29 2172d 59136aa3b264 netfilter: nf_tables: free chain context when BINDING flag is missing
WARNING in compat_do_ebt_get_ctl bridge netfilter -1 syz, C done 15 2202d 2213d 15/29 2172d 5c04da55c754 netfilter: ebtables: reject bogus getopt len value
WARNING in __nf_unregister_net_hook (2) netfilter -1 syz, C done 9 2238d 2237d 15/29 2172d 1e9451cbda45 netfilter: nf_tables: fix nat hook table deletion
invalid opcode in __phys_addr (2) netfilter 2 1 2252d 2252d 15/29 2215d c4e8fa9074ad netfilter: ipset: call ip_set_free() instead of kfree()
memory leak in ctnetlink_del_conntrack netfilter 3 syz, C 1 2274d 2271d 15/29 2233d 6c2d2176a85e netfilter: ctnetlink: memleak in filter initialization error path
memory leak in nf_tables_parse_netdev_hooks (3) netfilter 3 syz, C 1 2274d 2271d 15/29 2233d 3003055f5066 netfilter: nf_tables: hook list memleak in flowtable deletion
BUG: unable to handle kernel NULL pointer dereference in local_bh_disable netfilter 10 1 2264d 2264d 15/29 2233d 3021e69219e2 kcov: check kcov_softirq in kcov_remote_stop()
KASAN: invalid-free in nf_tables_newset netfilter 24 syz, C done 21 2325d 2341d 15/29 2262d 7fb6f78df700 netfilter: nf_tables: do not leave dangling pointer in nf_tables_set_alloc_name
WARNING in nf_nat_unregister_fn netfilter -1 1 2325d 2325d 15/29 2262d b4faef1739dd netfilter: nat: fix error handling upon registering inet hook
INFO: task hung in hashlimit_net_exit netfilter 1 syz done 53 2380d 2389d 15/29 2326d 8d0015a7ab76 netfilter: xt_hashlimit: limit the max size of hashtable
WARNING: proc registration bug in hashlimit_mt_check_common netfilter -1 syz, C done 320 2366d 2391d 15/29 2326d 99b79c3900d4 netfilter: xt_hashlimit: unregister proc file before releasing mutex
INFO: rcu detected stall in ip_set_uadd netfilter 1 syz, C done 11 2371d 2408d 15/29 2326d f66ee0410b1c netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports
memory leak in nf_tables_parse_netdev_hooks (2) netfilter 3 syz, C 2 2366d 2370d 15/29 2326d 2d285f26ecd0 netfilter: nf_tables: free flowtable hooks on hook register error
INFO: rcu detected stall in ip_set_udel netfilter 1 syz, C done 12 2386d 2408d 15/29 2326d f66ee0410b1c netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports
general protection fault in ip_set_comment_free netfilter 2 syz, C done 19 2370d 2406d 15/29 2326d 8af1c6fbd923 netfilter: ipset: Fix forceadd evaluation path
KASAN: slab-out-of-bounds Read in bitmap_ip_add netfilter 17 syz done done 7 2403d 2414d 15/29 2347d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
general protection fault in __nf_tables_chain_type_lookup netfilter 2 1 2412d 2412d 15/29 2353d 826035498ec1 netfilter: nf_tables: add __nft_chain_type_get()
KASAN: slab-out-of-bounds Read in bitmap_ip_ext_cleanup netfilter 17 syz, C done done 8 2397d 2413d 15/29 2355d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: slab-out-of-bounds Read in bitmap_port_ext_cleanup netfilter 17 syz, C done done 10 2406d 2414d 15/29 2355d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: slab-out-of-bounds Read in bitmap_ipmac_destroy netfilter 17 syz, C done done 2 2408d 2408d 15/29 2355d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: slab-out-of-bounds Read in bitmap_ipmac_ext_cleanup netfilter 17 syz, C unreliable done 15 2397d 2413d 15/29 2355d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: slab-out-of-bounds Read in bitmap_port_destroy netfilter 17 syz, C done done 2 2409d 2409d 15/29 2355d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: use-after-free Read in bitmap_ip_ext_cleanup netfilter 19 syz, C done done 2 2413d 2413d 15/29 2379d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: use-after-free Read in bitmap_ipmac_ext_cleanup netfilter 19 syz, C done done 2 2413d 2413d 15/29 2379d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: slab-out-of-bounds Write in bitmap_ip_del netfilter 21 syz, C done done 7 2411d 2413d 15/29 2379d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: use-after-free Read in bitmap_ip_destroy netfilter 19 syz, C done done 1 2413d 2413d 15/29 2382d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
WARNING in nft_request_module netfilter -1 syz, C done 7 2417d 2417d 15/29 2383d 9332d27d7918 netfilter: nf_tables: remove WARN and add NLA_STRING upper limits
KASAN: slab-out-of-bounds Read in bitmap_ip_list netfilter 17 syz, C 85 2398d 2415d 15/29 2383d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: use-after-free Read in bitmap_port_ext_cleanup netfilter 19 syz, C done 11 2413d 2422d 15/29 2383d c120959387ef netfilter: fix a use-after-free in mtype_destroy()
KASAN: use-after-free Read in __nf_tables_abort netfilter 19 syz, C done 3 2411d 2413d 15/29 2383d eb014de4fd41 netfilter: nf_tables: autoload modules from the abort path
WARNING: suspicious RCU usage in find_set_and_id netfilter 4 syz done 6 2409d 2411d 15/29 2383d 5038517119d5 netfilter: ipset: fix suspicious RCU usage in find_set_and_id
BUG: corrupted list in nft_obj_del netfilter 8 syz, C done 7 2415d 2417d 15/29 2383d 335178d5429c netfilter: nf_tables: fix flowtable list del corruption
BUG: corrupted list in nf_tables_commit netfilter 8 syz, C done 8 2417d 2417d 15/29 2383d 335178d5429c netfilter: nf_tables: fix flowtable list del corruption
general protection fault in dccp_timeout_nlattr_to_obj netfilter 2 syz, C done 7 2424d 2426d 15/29 2383d 1d9a7acd3d1e netfilter: conntrack: dccp, sctp: handle null timeout argument
general protection fault in nft_parse_register netfilter 2 1 2415d 2415d 15/29 2383d 7eaecf7963c1 netfilter: nft_osf: add missing check for DREG attribute
general protection fault in xt_rateest_tg_checkentry netfilter 2 syz, C done 12 2427d 2437d 15/29 2383d 1b789577f655 netfilter: arp_tables: init netns pointer in xt_tgchk_param struct
general protection fault in hash_netiface6_uadt netfilter 2 1 2423d 2423d 15/29 2383d 22dad713b8a5 netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present
general protection fault in xt_rateest_put netfilter 2 syz, C done 97 2414d 2421d 15/29 2383d 212e7f56605e netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct
general protection fault in hash_netnet6_uadt netfilter 2 1 2424d 2424d 15/29 2383d 22dad713b8a5 netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present
memory leak in nf_tables_parse_netdev_hooks netfilter 3 syz, C 6 2387d 2417d 15/29 2383d cd77e75b5e46 netfilter: nf_tables: fix memory leak in nf_tables_parse_netdev_hooks()
general protection fault in hash_ipmark6_uadt netfilter 2 2 2423d 2424d 15/29 2383d 22dad713b8a5 netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present
general protection fault in nft_chain_parse_hook netfilter 2 syz, C done 48 2402d 2417d 15/29 2383d 826035498ec1 netfilter: nf_tables: add __nft_chain_type_get()
WARNING in nf_tables_table_destroy netfilter -1 syz, C done done 1 2415d 2415d 15/29 2383d eb014de4fd41 netfilter: nf_tables: autoload modules from the abort path
KASAN: slab-out-of-bounds Read in bitmap_ip_gc netfilter 17 syz, C done 15 2396d 2414d 15/29 2383d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
general protection fault in nft_tunnel_get_init netfilter 2 syz, C done 7 2417d 2417d 15/29 2383d 1c702bf902bd netfilter: nft_tunnel: fix null-attribute check
KASAN: slab-out-of-bounds Read in bitmap_port_add netfilter 17 syz done 9 2408d 2415d 15/29 2383d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: slab-out-of-bounds Read in bitmap_ip_test netfilter 17 syz 10 2404d 2414d 15/29 2383d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
general protection fault in hash_ipportnet4_uadt netfilter 2 syz, C done 13 2423d 2425d 15/29 2383d 22dad713b8a5 netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present
KASAN: slab-out-of-bounds Read in bitmap_port_list netfilter 17 syz, C 152 2407d 2415d 15/29 2383d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: use-after-free Read in bitmap_port_destroy netfilter 19 syz, C 1 2414d 2414d 15/29 2383d c120959387ef netfilter: fix a use-after-free in mtype_destroy()
KMSAN: uninit-value in br_nf_forward_arp (3) bridge netfilter 7 2 2464d 2456d 15/29 2388d 5604285839aa net-backports: netfilter: bridge: make sure to pull arp header in br_nf_forward_arp()
KASAN: vmalloc-out-of-bounds Read in compat_copy_entries netfilter bridge 17 syz, C done 3 2449d 2449d 15/29 2388d e608f631f0ba netfilter: ebtables: compat: reject all padding in matches/watchers
KMSAN: uninit-value in nf_conntrack_tcp_packet netfilter 7 syz 3 2459d 2462d 15/29 2425d 9424e2e7ad93 net-backports: tcp: md5: fix potential overestimation of TCP option space
KCSAN: data-race in ip_finish_output2 / ip_finish_output2 netfilter 6 26 2455d 2500d 15/29 2451d 25c7a6d1f90e net: avoid potential false sharing in neighbor related code
KASAN: use-after-free Read in nf_ct_deliver_cached_events netfilter 19 syz, C done 169 2497d 2502d 15/29 2451d ad88b7a6aa3e netfilter: ecache: don't look for ecache extension on dying/unconfirmed conntracks
KCSAN: data-race in __nf_ct_refresh_acct / __nf_ct_refresh_acct netfilter 6 2460 2489d 2520d 13/29 2489d e37542ba111f net-backports: netfilter: conntrack: avoid possible false sharing
WARNING in xt_compat_add_offset netfilter -1 syz, C done 18 2580d 2744d 12/29 2558d 3b48300d5cc7 netfilter: ebtables: also count base chain policies
net-next build error (2) netfilter -1 2 2646d 2646d 12/29 2580d c9bb6165a16e netfilter: nf_conntrack_bridge: fix CONFIG_IPV6=y
KASAN: use-after-free Read in brnf_exit_net bridge netfilter 19 syz done 3 2624d 2627d 12/29 2580d 7e6daf50e1f4 netfilter: bridge: prevent UAF in brnf_exit_net()
general protection fault in nf_ct_gre_keymap_flush netfilter 2 syz, C 22 2769d 2775d 11/29 2711d ac088a88b5d5 netfilter: conntrack: fix error path in nf_conntrack_pernet_init()
INFO: rcu detected stall in netlink_sendmsg netfilter 1 syz 83 2749d 2805d 11/29 2733d 12750abad517 xfrm: policy: fix infinite loop when merging src-nodes
WARNING in cttimeout_default_get netfilter -1 syz, C 44 2822d 2842d 11/29 2822d 89259088c1b7 netfilter: nfnetlink_cttimeout: fetch timeouts for udplite and gre, too
general protection fault in icmp_timeout_obj_to_nlattr netfilter 2 syz, C 13 2854d 2858d 11/29 2846d 8866df9264a3 netfilter: nfnetlink_cttimeout: pass default timeout policy to obj_to_nlattr
general protection fault in ctnetlink_alloc_filter netfilter 2 syz, C 80 2896d 2899d 11/29 2846d 9306425b70bf netfilter: ctnetlink: must check mark attributes vs NULL
KMSAN: uninit-value in __nf_conntrack_find_get netfilter 7 syz, C 67 2958d 2964d 8/29 2942d 6613b6173dee netfilter: conntrack: dccp: treat SYNC/SYNCACK as invalid if no prior state
KMSAN: uninit-value in gc_worker netfilter 7 10 2958d 2970d 8/29 2942d 6613b6173dee netfilter: conntrack: dccp: treat SYNC/SYNCACK as invalid if no prior state
KMSAN: uninit-value in br_nf_forward_arp netfilter bridge 7 1 3011d 3008d 8/29 2964d b84bbaf7a6c8 packet: in packet_snd start writing at link layer allocation
KMSAN: uninit-value in nfqnl_recv_config (2) netfilter 7 syz, C 10 2985d 3001d 8/29 2972d ba062ebb2cd5 netfilter: nf_queue: augment nfqa_cfg_policy
KMSAN: uninit-value in ebt_stp_mt_check (2) bridge netfilter 7 syz, C 222 2972d 3004d 8/29 2972d c568503ef020 netfilter: x_tables: initialise match/target check parameter struct
WARNING in ebt_do_table bridge netfilter -1 syz, C 13 2981d 3006d 8/29 2972d 11ff7288beb2 netfilter: ebtables: reject non-bridge targets
BUG: unable to handle kernel paging request in nla_strlcpy netfilter 8 1 3013d 3013d 5/29 3004d 4b83a9049a98 netfilter: provide correct argument to nla_strlcpy()
KASAN: stack-out-of-bounds Write in compat_copy_entries netfilter bridge 21 syz 10 3010d 3048d 5/29 3004d 94c752f99954 netfilter: ebtables: handle string from userspace with care
KASAN: slab-out-of-bounds Read in nla_strlcpy netfilter 17 syz, C 34 3008d 3021d 5/29 3004d 4b83a9049a98 netfilter: provide correct argument to nla_strlcpy()
KMSAN: uninit-value in ebt_stp_mt_check netfilter bridge 7 syz, C 211 3005d 3050d 5/29 3004d a4995684a949 netfilter: bridge: stp fix reference to uninitialized data
KASAN: use-after-free Read in nla_strlcpy netfilter 19 syz, C 59 3008d 3021d 5/29 3004d 4b83a9049a98 netfilter: provide correct argument to nla_strlcpy()
KASAN: slab-out-of-bounds Read in clusterip_tg_check netfilter 17 syz, C 22 3128d 3134d 5/29 3029d 1a38956cce5e netfilter: ipt_CLUSTERIP: fix out-of-bounds accesses in clusterip_tg_check()
INFO: trying to register non-static key in del_timer_sync netfilter -1 syz, C 89 3108d 3134d 5/29 3029d 10414014bc08 netfilter: x_tables: fix missing timer initialization in xt_LED
BUG: unable to handle kernel paging request in cgroup_mt_destroy_v1 netfilter 8 syz, C 3 3131d 3131d 5/29 3030d ba7cd5d95f25 netfilter: xt_cgroup: initialize info->priv in cgroup_mt_check_v1()
KASAN: use-after-free Write in xt_rateest_put netfilter 22 syz, C 7 3132d 3133d 5/29 3030d 7dc68e98757a netfilter: xt_RATEEST: acquire xt_rateest_mutex for hash insert
KMSAN: uninit-value in iptable_mangle_hook netfilter 7 syz, C 1134 3034d 3065d 5/29 3034d b855ff827476 dccp: initialize ireq->ir_mark
KMSAN: uninit-value in ip6table_mangle_hook netfilter 7 syz, C 601 3034d 3065d 5/29 3034d b855ff827476 dccp: initialize ireq->ir_mark
BUG: unable to handle kernel paging request in compat_copy_entries netfilter bridge 8 syz 5 3100d 3099d 5/29 3048d b71812168571 netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets
WARNING in xt_cluster_mt netfilter -1 syz, C 4 3104d 3104d 5/29 3066d aebfa52a925d netfilter: drop template ct when conntrack is skipped.
BUG: unable to handle kernel paging request in ebt_among_mt_check (2) netfilter bridge 8 syz, C 946 3080d 3096d 4/29 3080d c8d70a700a5b netfilter: bridge: ebt_among: add more missing match size checks
WARNING in __xlate_proc_name netfilter -1 syz, C 11 3099d 3135d 4/29 3080d b1d0a5d0cba4 netfilter: x_tables: add and use xt_check_proc_name
WARNING in __proc_create netfilter -1 syz, C 12 3101d 3094d 4/29 3080d b1d0a5d0cba4 netfilter: x_tables: add and use xt_check_proc_name
KASAN: use-after-free Read in ip6_route_me_harder netfilter 19 syz, C 44 3099d 3106d 4/29 3097d 7d98386d55a5 netfilter: use skb_to_full_sk in ip6_route_me_harder
KASAN: use-after-free Write in nf_nat_ipv6_manip_pkt netfilter 22 syz, C 2 3113d 3113d 4/29 3097d b078556aecd7 netfilter: ipv6: fix use-after-free Write in nf_nat_ipv6_manip_pkt
WARNING in compat_copy_entries netfilter bridge -1 syz, C 434 3097d 3113d 4/29 3097d b71812168571 netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets
KASAN: slab-out-of-bounds Read in ip6_route_me_harder netfilter 17 syz, C 66 3099d 3106d 4/29 3097d 7d98386d55a5 netfilter: use skb_to_full_sk in ip6_route_me_harder
BUG: unable to handle kernel paging request in ebt_among_mt_check bridge netfilter 8 syz, C 823 3097d 3113d 4/29 3097d c4585a2823ed netfilter: bridge: ebt_among: add missing match size checks
possible deadlock in do_ip_getsockopt (2) netfilter 4 206 3108d 3122d 4/29 3105d 01ea306f2ac2 netfilter: drop outermost socket lock in getsockopt()
general protection fault in ip6t_do_table netfilter 2 syz, C 8077 3109d 3135d 4/29 3105d 57ebd808a97d netfilter: add back stackpointer size checks
WARNING in __queue_work netfilter -1 syz, C 1 3115d 3115d 4/29 3105d cfc2c7405333 netfilter: IDLETIMER: be syzkaller friendly
WARNING: proc registration bug in clusterip_tg_check netfilter -1 syz, C 779 3107d 3125d 4/29 3105d b3e456fce9f5 netfilter: ipt_CLUSTERIP: fix a race condition of proc file creation
WARNING: bad unlock balance in hashlimit_mt_common netfilter 4 syz, C 2059 3107d 3120d 4/29 3105d de526f401284 netfilter: xt_hashlimit: fix lock imbalance
kernel BUG at kernel/time/timer.c:LINE! netfilter -1 syz, C 18 3108d 3119d 4/29 3105d 10414014bc08 netfilter: x_tables: fix missing timer initialization in xt_LED
WARNING: ODEBUG bug in led_tg_destroy netfilter -1 syz, C 4 3111d 3119d 4/29 3105d 10414014bc08 netfilter: x_tables: fix missing timer initialization in xt_LED
WARNING: ODEBUG bug in __queue_work netfilter -1 syz, C 2 3115d 3111d 4/29 3105d cfc2c7405333 netfilter: IDLETIMER: be syzkaller friendly
possible deadlock in do_ipv6_setsockopt (2) netfilter 4 3642 3107d 3123d 4/29 3105d 01ea306f2ac2 netfilter: drop outermost socket lock in getsockopt()
possible deadlock in do_ip_setsockopt (3) netfilter 4 3731 3107d 3124d 4/29 3105d 01ea306f2ac2 netfilter: drop outermost socket lock in getsockopt()
general protection fault in arpt_do_table netfilter 2 syz, C 3 3110d 3110d 4/29 3105d 57ebd808a97d netfilter: add back stackpointer size checks
possible deadlock in xt_find_table_lock (2) netfilter 4 4 3123d 3121d 4/29 3105d 01ea306f2ac2 netfilter: drop outermost socket lock in getsockopt()
divide error in nf_nat_l4proto_unique_tuple netfilter 2 syz, C 2 3120d 3119d 4/29 3105d db57ccf0f2f4 netfilter: nat: cope with negative port range
KASAN: use-after-free Write in xt_rateest_tg_checkentry netfilter 22 syz, C 2 3132d 3133d 4/29 3119d 7dc68e98757a netfilter: xt_RATEEST: acquire xt_rateest_mutex for hash insert
general protection fault in cgroup_mt_destroy_v1 netfilter 2 syz, C 91 3122d 3134d 4/29 3119d ba7cd5d95f25 netfilter: xt_cgroup: initialize info->priv in cgroup_mt_check_v1()
possible deadlock in do_ip_setsockopt (2) netfilter 4 59 3124d 3127d 4/29 3124d 3f34cfae1238 netfilter: on sockopt() acquire sock lock only in the required scope
possible deadlock in do_ip_getsockopt netfilter 4 22 3129d 3134d 4/29 3127d 3f34cfae1238 netfilter: on sockopt() acquire sock lock only in the required scope
possible deadlock in xt_find_target netfilter 4 34 3128d 3135d 4/29 3127d 3f34cfae1238 netfilter: on sockopt() acquire sock lock only in the required scope
general protection fault in get_info netfilter 2 syz, C 760 3147d 3150d 4/29 3131d e3eeacbac4ad netfilter: x_tables: don't return garbage pointer on modprobe failure
suspicious RCU usage at net/netfilter/ipset/ip_set_core.c:LINE netfilter -1 syz, C 38048 3152d 3158d 4/29 3131d f998b6b10144 netfilter: ipset: Missing nfnl_lock()/nfnl_unlock() is added to ip_set_net_exit()
general protection fault in nf_tables_dump_obj_done netfilter 2 syz, C 976 3153d 3158d 3/29 3144d 8bea728dce89 netfilter: nf_tables: fix potential NULL-ptr deref in nf_tables_dump_obj_done()
kernel BUG at lib/string.c:LINE! netfilter -1 syz, C 73 3245d 3261d 3/29 3231d e466af75c074 netfilter: x_tables: avoid stack-out-of-bounds read in xt_copy_counters_from_user