Applied filters: Label=subsystems:netfilter (drop)
Extra filters: [With Repro]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
KASAN: invalid-free in rcu_free_sheaf prio:high fs netfilter 24 19 7h37m 94d 16/29 never 979d5b8de8ed ieee802154: hwsim: serialize pib updates to fix double-free
WARNING in nf_flow_offload_ip_hook prio:normal netfilter -1 syz, C done 9 42d 42d 29/29 1d05h 8aecf0bbcc72 netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()
KCSAN: data-race in hash_ip4_add / hash_ip4_head prio:normal netfilter 6 1 174d 174d 29/29 62d 2358f7427ccd netfilter: ipset: Fix data race between add and dump in all hash types
BUG: using smp_processor_id() in preemptible code in cpu_mt prio:normal netfilter 4 4 93d 119d 29/29 62d c376f07e16c0 netfilter: xt_cpu: prefer raw_smp_processor_id
KASAN: use-after-free Read in nf_hook_entry_head netfilter 19 syz error 62 183d 208d 29/29 131d b7cdc5a97d02 netfilter: nf_tables: Fix for duplicate device in netdev hooks
possible deadlock in nf_tables_dumpreset_obj netfilter 4 1 273d 269d 29/29 131d 7f261bb906bf netfilter: nf_tables: revert commit_mutex usage in reset path
WARNING in nft_map_deactivate netfilter -1 syz, C error 5 196d 208d 29/29 131d fb7fb4016300 netfilter: nf_tables: clone set on flush only
KASAN: slab-use-after-free Read in nft_array_get_cmp netfilter 19 syz, C error 5 229d 230d 29/29 131d 35f83a75529a netfilter: nft_set_rbtree: don't gc elements on insert
WARNING in nf_conntrack_cleanup_net_list netfilter -1 765 143d 277d 29/29 131d 2ef02ac38d3c inet: frags: drop fraglist conntrack references
WARNING in br_nf_local_in bridge netfilter -1 1 375d 371d 29/29 316d netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm
WARNING in nf_reject_fill_skb_dst netfilter -1 syz, C done 214 377d 390d 29/29 337d netfilter: nf_reject: don't leak dst refcount for loopback packets
WARNING in nf_send_reset6 netfilter -1 syz, C 9 381d 389d 29/29 337d netfilter: nf_reject: don't leak dst refcount for loopback packets
WARNING in nf_send_unreach6 netfilter -1 508 377d 391d 29/29 337d netfilter: nf_reject: don't leak dst refcount for loopback packets
WARNING in nft_socket_init (2) netfilter -1 syz, C done 6 399d 417d 29/29 341d 1dee968d22ea netfilter: nft_socket: remove WARN_ON_ONCE with huge level value
WARNING in ip_mr_output netfilter -1 syz, C error 74 442d 445d 29/29 375d beead7eea896 net: ipv4: guard ip_mr_output() with rcu
KASAN: slab-out-of-bounds Read in nfacct_mt_checkentry netfilter 17 syz, C done 7 426d 424d 29/29 375d bf58e667af7d netfilter: xt_nfacct: don't assume acct name is null-terminated
KMSAN: uninit-value in nf_flow_offload_inet_hook (2) netfilter 7 syz, C 13 432d 435d 29/29 375d 18cdb3d982da netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
BUG: assuming non migratable context at ./include/linux/filter.h:LINE netfilter -1 syz, C done 1189 388d 424d 29/29 375d 17ce3e5949bc bpf: Disable migration in nf_hook_run_bpf().
WARNING in dev_setup_tc netfilter -1 38 551d 556d 28/29 461d 0a13c1e0a449 net: revert to lockless TC_SETUP_BLOCK and TC_SETUP_FT
KASAN: slab-use-after-free Read in nf_tables_trans_destroy_work (2) netfilter 19 syz 1 562d 562d 28/29 461d fb8286562ecf netfilter: nf_tables: make destruction work queue pernet
KMSAN: uninit-value in __nf_conncount_add netfilter 7 1 559d 555d 28/29 461d d653bfeb07eb netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree()
WARNING in __nf_unregister_net_hook (8) netfilter -1 2 521d 532d 28/29 461d 688c15017d5c netfilter: nf_tables: don't unregister hook when table is dormant
WARNING in nft_socket_init netfilter -1 syz, C done 14 591d 659d 28/29 497d b7529880cb96 netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level
KASAN: slab-out-of-bounds Read in led_tg_check netfilter 17 syz, C done 5 653d 663d 28/29 497d 04317f4eb2aa netfilter: x_tables: fix LED ID check in led_tg_check()
BUG: using smp_processor_id() in preemptible code in nft_inner_eval netfilter 4 2 662d 662d 28/29 497d 7b1d83da254b netfilter: nft_inner: incorrect percpu area handling under softirq
KASAN: slab-out-of-bounds Read in bitmap_ip_add (2) netfilter 17 syz, C 3 676d 672d 28/29 638d 35f56c554eb1 netfilter: ipset: add missing range check in bitmap_ip_uadt
KCSAN: assert: race in dequeue_entities netfilter audit 14 2118 680d 718d 28/29 670d b55945c500c5 sched: Fix pick_next_task_fair() vs try_to_wake_up() race
WARNING in xt_cluster_mt (2) netfilter -1 syz, C inconclusive 5 713d 711d 28/29 671d 0bfcb7b71e73 netfilter: xtables: avoid NFPROTO_UNSPEC where needed
BUG: using __this_cpu_write() in preemptible code in nf_dup_ipv4 netfilter 4 1 729d 729d 28/29 671d 92ceba94de6f netfilter: nf_tables: prevent nf_skb_duplicated corruption
INFO: task hung in ip_tunnel_init_net (3) netfilter 1 41 672d 704d 28/29 671d a1494d532e28 netdevsim: use cond_resched() in nsim_dev_trap_report_work()
KMSAN: uninit-value in nf_reject_ip6_tcphdr_put netfilter 7 syz, C 136 718d 732d 28/29 693d 9c778fe48d20 UPSTREAM: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
KASAN: slab-use-after-free Read in ip6_send_skb netfilter 19 1 758d 758d 28/29 705d faa389b2fbaa ipv6: prevent UAF in ip6_send_skb()
KMSAN: uninit-value in nf_flow_offload_inet_hook netfilter 7 4 757d 767d 28/29 712d 6ea14ccb60c8 netfilter: flowtable: validate vlan header
KASAN: slab-use-after-free Read in nf_tables_trans_destroy_work netfilter 19 syz, C error 147 798d 805d 26/29 770d 9f6958ba2e90 netfilter: nf_tables: unconditionally flush pending work before notifier
net-next test error: WARNING: suspicious RCU usage in _destroy_all_sets netfilter -1 128 816d 823d 26/29 797d 8ecd06277a76 netfilter: ipset: Fix suspicious rcu_dereference_protected()
upstream test error: WARNING: suspicious RCU usage in _destroy_all_sets netfilter -1 293 816d 823d 26/29 797d 8ecd06277a76 netfilter: ipset: Fix suspicious rcu_dereference_protected()
general protection fault in nf_tproxy_laddr4 netfilter 8 syz, C error 5 845d 855d 25/29 826d 21a673bddc8f netfilter: tproxy: bail out if IP has been disabled on the device
WARNING: suspicious RCU usage in nfqnl_reinject netfilter 4 2 836d 853d 25/29 826d dc21c6cc3d69 netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
KASAN: slab-use-after-free Read in ip_skb_dst_mtu netfilter 19 syz, C error 5 891d 923d 25/29 845d 18685451fc4e inet: inet_defrag: prevent sk release while still in use
KASAN: slab-out-of-bounds Read in update_counters netfilter bridge 17 syz, C 3 892d 892d 25/29 845d 0c83842df40f netfilter: validate user input for expected length
KASAN: slab-out-of-bounds Read in do_ipt_set_ctl netfilter 17 syz, C 111 883d 894d 25/29 845d 0c83842df40f netfilter: validate user input for expected length
KMSAN: uninit-value in xt_check_entry_offsets netfilter 7 1 889d 889d 25/29 845d 65acf6e0501a netfilter: complete validation of user input
KMSAN: uninit-value in nf_flow_offload_ip_hook netfilter 7 syz, C 5 893d 894d 25/29 845d 87b3593bed18 netfilter: flowtable: validate pppoe header
WARNING: ODEBUG bug in ip_set_free netfilter -1 syz, C 42 941d 944d 25/29 901d 27c5a095e251 netfilter: ipset: Missing gc cancellations fixed
WARNING: ODEBUG bug in hash_netiface4_destroy netfilter -1 syz, C done 80 942d 956d 25/29 901d 27c5a095e251 netfilter: ipset: Missing gc cancellations fixed
KMSAN: uninit-value in __nla_validate_parse (3) netfilter 17 24 916d 938d 25/29 902d 9a0d18853c28 netlink: add nla be16/32 types to minlen array
WARNING in __nf_unregister_net_hook (6) netfilter -1 syz, C error 2 947d 1063d 25/29 902d bccebf647017 netfilter: nf_tables: set dormant flag on hook register failure
inconsistent lock state in nf_connlabels_put netfilter 4 syz, C done 4 1055d 1055d 25/29 985d 643d12603664 netfilter: conntrack: switch connlabels to atomic_t
WARNING: proc registration bug in clusterip_tg_check (3) netfilter -1 syz, C done inconclusive 9 1334d 1867d 22/29 1195d 9db5d918e2c0 netfilter: ip_tables: remove clusterip target
KASAN: vmalloc-out-of-bounds Read in __ebt_unregister_table bridge netfilter 17 syz, C error 4 1305d 1305d 22/29 1195d e58a171d35e3 netfilter: ebtables: fix table blob use-after-free
INFO: task hung in nfnetlink_rcv_msg (3) netfilter 1 syz, C done 5 1375d 1386d 22/29 1195d 5e29dc36bd5e netfilter: ipset: Rework long task execution when adding/deleting entries
KASAN: slab-out-of-bounds Read in cttimeout_net_exit netfilter 17 syz, C 1444 1544d 1581d 22/29 1299d aeed55a08d0b netfilter: cttimeout: fix slab-out-of-bounds read in cttimeout_net_exit 394e771684f7 netfilter: cttimeout: fix slab-out-of-bounds read typo in cttimeout_net_exit
kernel panic: corrupted stack end in inet6_sendmsg netfilter 2 1 1447d 1447d 22/29 1299d b81d591386c3 riscv: Increase stack size under KASAN
KASAN: use-after-free Read in nf_hook_entries_grow netfilter 19 syz, C done done 5 1689d 1730d 22/29 1299d 6069da443bf6 netfilter: nf_tables: unregister flowtable hooks on netns exit
UBSAN: array-index-out-of-bounds in nfnetlink_unbind netfilter 17 syz, C done 6621 1565d 1581d 22/29 1299d ffd219efd9ee netfilter: nfnetlink: fix warn in nfnetlink_unbind
kernel panic: corrupted stack end in tcp_setsockopt netfilter 2 3 1404d 1552d 22/29 1299d b81d591386c3 riscv: Increase stack size under KASAN
KASAN: use-after-free Read in nf_confirm netfilter 19 syz, C done 605 1565d 1581d 22/29 1299d 56b14ecec97f netfilter: conntrack: re-fetch conntrack after insertion
KASAN: use-after-free Read in nf_tables_trans_destroy_work netfilter 19 syz, C done 6 1429d 1435d 22/29 1299d d4bc8271db21 netfilter: nf_tables: netlink notifier might race to release objects 26b5934ff419 netfilter: nf_tables: release flow rule object from commit path
WARNING in nf_tables_exit_net netfilter -1 syz, C error 3 1417d 1416d 22/29 1299d 03c1f1ef1584 netfilter: Cleanup nft_net->module_list from nf_tables_exit_net()
memory leak in nft_chain_parse_hook netfilter 3 syz, C 1 1481d 1477d 22/29 1299d 77972a36ecc4 netfilter: nf_tables: clean up hook list when offload flags check fails
KASAN: use-after-free Read in __nf_register_net_hook netfilter 19 syz, C error 5 1661d 1661d 22/29 1299d 56763f12b0f0 netfilter: fix use-after-free in __nf_register_net_hook()
memory leak in do_replace bridge netfilter 3 syz, C 1 1460d 1456d 22/29 1299d 62ce44c4fff9 netfilter: ebtables: fix memory leak when blob is malformed
WARNING in nfnetlink_unbind netfilter -1 syz, C done 235 1565d 1581d 22/29 1299d ffd219efd9ee netfilter: nfnetlink: fix warn in nfnetlink_unbind
WARNING: suspicious RCU usage in nft_do_chain netfilter 4 1 1660d 1660d 22/29 1299d 17a8f31bba7b netfilter: egress: silence egress hook lockdep splats
WARNING: kmalloc bug in hash_ip_create netfilter -1 syz, C done 641 1810d 1837d 20/29 1651d 7bbc3d385bd8 netfilter: ipset: Fix oversized kvmalloc() calls
KASAN: use-after-free Read in nft_table_lookup (2) netfilter 19 syz done 1 1832d 1828d 20/29 1651d a499b03bf36b netfilter: nf_tables: unlink table before deleting it
KCSAN: data-race in __nf_conntrack_alloc / __nf_conntrack_find_get (3) netfilter 6 2 1743d 1743d 20/29 1651d 802a7dc5cf1b netfilter: conntrack: annotate data-races around ct->timeout
WARNING: kmalloc bug in hash_net_create netfilter -1 syz, C done 283 1810d 1837d 20/29 1651d 7bbc3d385bd8 netfilter: ipset: Fix oversized kvmalloc() calls
WARNING: kmalloc bug in nf_tables_newset netfilter -1 syz, C done 95 1810d 1837d 20/29 1651d 45928afe94a0 netfilter: nf_tables: Fix oversized kvmalloc() calls
WARNING: kmalloc bug in hash_mac_create netfilter -1 syz, C done 11 1831d 1835d 20/29 1651d 7bbc3d385bd8 netfilter: ipset: Fix oversized kvmalloc() calls
KASAN: use-after-free Read in nft_set_destroy netfilter 19 1 1737d 1737d 20/29 1651d 0f7d9b31ce7a netfilter: nf_tables: fix use-after-free in nft_set_catchall_destroy()
INFO: task can't die in nf_ct_iterate_cleanup (2) netfilter 1 1 1824d 1824d 20/29 1651d e9edc188fc76 netfilter: conntrack: serialize hash resizes and cleanups
KASAN: use-after-free Read in nf_tables_dump_sets netfilter 19 syz done done 1 1834d 1862d 20/29 1651d a499b03bf36b netfilter: nf_tables: unlink table before deleting it
WARNING in __nf_unregister_net_hook (4) netfilter -1 syz, C error 66 1654d 1984d 20/29 1651d 68a3765c659f netfilter: nf_tables: skip netdev events generated on netns removal
general protection fault in nf_tables_dump_tables netfilter 2 syz done done 4 1816d 1816d 20/29 1651d a499b03bf36b netfilter: nf_tables: unlink table before deleting it
WARNING in destroy_conntrack netfilter -1 syz, C done 1 1864d 1862d 20/29 1770d e3245a7b7b34 netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with mutex
WARNING: suspicious RCU usage in get_counters (2) netfilter 4 1 1905d 1905d 20/29 1770d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
WARNING: suspicious RCU usage in gc_worker netfilter 4 3 1924d 1951d 20/29 1770d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
divide error in nft_limit_init netfilter 2 syz, C done 4 1983d 1985d 20/29 1770d b895bdf5d643 netfilter: nft_limit: avoid possible divide error in nft_limit_init
KASAN: slab-out-of-bounds Write in xt_compat_target_from_user netfilter 21 syz, C error error 1 2221d 2219d 20/29 1770d b29c457a6511 netfilter: x_tables: fix compat match/target pad out-of-bound write
WARNING: suspicious RCU usage in vfree netfilter 4 1 1945d 1945d 20/29 1770d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
BUG: sleeping function called from invalid context in __alloc_skb netfilter 5 syz, C done 33 1818d 1959d 20/29 1770d 7072a355ba19 netfilter: nfnetlink: add a missing rcu_read_unlock()
net-next test error: WARNING in __nf_unregister_net_hook netfilter -1 42 1956d 1967d 20/29 1770d 43016d02cf6e netfilter: arptables: use pernet ops struct during unregister
upstream test error: WARNING in corrupted netfilter -1 1 1956d 1956d 20/29 1770d 43016d02cf6e netfilter: arptables: use pernet ops struct during unregister
UBSAN: shift-out-of-bounds in nft_hash_estimate netfilter -1 syz, C done 3 1958d 1959d 20/29 1770d a54754ec9891 netfilter: nftables: avoid overflows in nft_hash_buckets()
linux-next test error: WARNING in __nf_unregister_net_hook netfilter -1 21 1960d 1963d 20/29 1770d 43016d02cf6e netfilter: arptables: use pernet ops struct during unregister
KASAN: use-after-free Write in nft_ct_tmpl_put_pcpu netfilter 22 syz, C done 3 1865d 1865d 20/29 1770d e3245a7b7b34 netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with mutex
general protection fault in nft_set_elem_expr_alloc netfilter 2 syz, C done 3 1934d 1930d 20/29 1770d ad9f151e560b netfilter: nf_tables: initialize set before expression setup
WARNING: suspicious RCU usage in __clear_user netfilter 4 1 1938d 1938d 20/29 1770d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
kernel BUG at lib/string.c:LINE! (6) netfilter -1 syz, C done 2 2097d 2093d 19/29 2015d 6cb56218ad9e netfilter: xt_RATEEST: reject non-null terminated string from userspace
UBSAN: shift-out-of-bounds in hash_mac_create netfilter -1 syz, C unreliable 29 2082d 2101d 19/29 2015d 5c8193f568ae netfilter: ipset: fix shift-out-of-bounds in htable_bits()
memory leak in nf_tables_addchain netfilter 3 syz, C 1 2228d 2225d 15/29 2189d 59136aa3b264 netfilter: nf_tables: free chain context when BINDING flag is missing
WARNING in compat_do_ebt_get_ctl bridge netfilter -1 syz, C done 15 2219d 2230d 15/29 2189d 5c04da55c754 netfilter: ebtables: reject bogus getopt len value
WARNING in __nf_unregister_net_hook (2) netfilter -1 syz, C done 9 2255d 2254d 15/29 2189d 1e9451cbda45 netfilter: nf_tables: fix nat hook table deletion
invalid opcode in __phys_addr (2) netfilter 2 1 2269d 2269d 15/29 2233d c4e8fa9074ad netfilter: ipset: call ip_set_free() instead of kfree()
memory leak in ctnetlink_del_conntrack netfilter 3 syz, C 1 2291d 2288d 15/29 2250d 6c2d2176a85e netfilter: ctnetlink: memleak in filter initialization error path
memory leak in nf_tables_parse_netdev_hooks (3) netfilter 3 syz, C 1 2291d 2288d 15/29 2250d 3003055f5066 netfilter: nf_tables: hook list memleak in flowtable deletion
BUG: unable to handle kernel NULL pointer dereference in local_bh_disable netfilter 10 1 2281d 2281d 15/29 2250d 3021e69219e2 kcov: check kcov_softirq in kcov_remote_stop()
KASAN: invalid-free in nf_tables_newset netfilter 24 syz, C done 21 2342d 2358d 15/29 2280d 7fb6f78df700 netfilter: nf_tables: do not leave dangling pointer in nf_tables_set_alloc_name
WARNING in nf_nat_unregister_fn netfilter -1 1 2342d 2342d 15/29 2280d b4faef1739dd netfilter: nat: fix error handling upon registering inet hook
INFO: task hung in hashlimit_net_exit netfilter 1 syz done 53 2398d 2406d 15/29 2343d 8d0015a7ab76 netfilter: xt_hashlimit: limit the max size of hashtable
WARNING: proc registration bug in hashlimit_mt_check_common netfilter -1 syz, C done 320 2383d 2408d 15/29 2343d 99b79c3900d4 netfilter: xt_hashlimit: unregister proc file before releasing mutex
INFO: rcu detected stall in ip_set_uadd netfilter 1 syz, C done 11 2388d 2425d 15/29 2343d f66ee0410b1c netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports
memory leak in nf_tables_parse_netdev_hooks (2) netfilter 3 syz, C 2 2383d 2387d 15/29 2343d 2d285f26ecd0 netfilter: nf_tables: free flowtable hooks on hook register error
INFO: rcu detected stall in ip_set_udel netfilter 1 syz, C done 12 2403d 2425d 15/29 2343d f66ee0410b1c netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports
general protection fault in ip_set_comment_free netfilter 2 syz, C done 19 2387d 2423d 15/29 2343d 8af1c6fbd923 netfilter: ipset: Fix forceadd evaluation path
KASAN: slab-out-of-bounds Read in bitmap_ip_add netfilter 17 syz done done 7 2420d 2431d 15/29 2364d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
general protection fault in __nf_tables_chain_type_lookup netfilter 2 1 2429d 2429d 15/29 2370d 826035498ec1 netfilter: nf_tables: add __nft_chain_type_get()
KASAN: slab-out-of-bounds Read in bitmap_ip_ext_cleanup netfilter 17 syz, C done done 8 2414d 2430d 15/29 2372d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: slab-out-of-bounds Read in bitmap_port_ext_cleanup netfilter 17 syz, C done done 10 2423d 2431d 15/29 2372d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: slab-out-of-bounds Read in bitmap_ipmac_destroy netfilter 17 syz, C done done 2 2426d 2425d 15/29 2372d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: slab-out-of-bounds Read in bitmap_ipmac_ext_cleanup netfilter 17 syz, C unreliable done 15 2414d 2430d 15/29 2372d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: slab-out-of-bounds Read in bitmap_port_destroy netfilter 17 syz, C done done 2 2426d 2426d 15/29 2372d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: use-after-free Read in bitmap_ip_ext_cleanup netfilter 19 syz, C done done 2 2430d 2431d 15/29 2396d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: use-after-free Read in bitmap_ipmac_ext_cleanup netfilter 19 syz, C done done 2 2430d 2430d 15/29 2396d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: slab-out-of-bounds Write in bitmap_ip_del netfilter 21 syz, C done done 7 2428d 2430d 15/29 2396d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: use-after-free Read in bitmap_ip_destroy netfilter 19 syz, C done done 1 2430d 2430d 15/29 2399d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
WARNING in nft_request_module netfilter -1 syz, C done 7 2434d 2434d 15/29 2401d 9332d27d7918 netfilter: nf_tables: remove WARN and add NLA_STRING upper limits
KASAN: slab-out-of-bounds Read in bitmap_ip_list netfilter 17 syz, C 85 2415d 2432d 15/29 2401d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: use-after-free Read in bitmap_port_ext_cleanup netfilter 19 syz, C done 11 2431d 2439d 15/29 2401d c120959387ef netfilter: fix a use-after-free in mtype_destroy()
KASAN: use-after-free Read in __nf_tables_abort netfilter 19 syz, C done 3 2428d 2430d 15/29 2401d eb014de4fd41 netfilter: nf_tables: autoload modules from the abort path
WARNING: suspicious RCU usage in find_set_and_id netfilter 4 syz done 6 2426d 2428d 15/29 2401d 5038517119d5 netfilter: ipset: fix suspicious RCU usage in find_set_and_id
BUG: corrupted list in nft_obj_del netfilter 8 syz, C done 7 2432d 2434d 15/29 2401d 335178d5429c netfilter: nf_tables: fix flowtable list del corruption
BUG: corrupted list in nf_tables_commit netfilter 8 syz, C done 8 2434d 2434d 15/29 2401d 335178d5429c netfilter: nf_tables: fix flowtable list del corruption
general protection fault in dccp_timeout_nlattr_to_obj netfilter 2 syz, C done 7 2441d 2443d 15/29 2401d 1d9a7acd3d1e netfilter: conntrack: dccp, sctp: handle null timeout argument
general protection fault in nft_parse_register netfilter 2 1 2432d 2432d 15/29 2401d 7eaecf7963c1 netfilter: nft_osf: add missing check for DREG attribute
general protection fault in xt_rateest_tg_checkentry netfilter 2 syz, C done 12 2444d 2454d 15/29 2401d 1b789577f655 netfilter: arp_tables: init netns pointer in xt_tgchk_param struct
general protection fault in hash_netiface6_uadt netfilter 2 1 2440d 2440d 15/29 2401d 22dad713b8a5 netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present
general protection fault in xt_rateest_put netfilter 2 syz, C done 97 2431d 2438d 15/29 2401d 212e7f56605e netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct
general protection fault in hash_netnet6_uadt netfilter 2 1 2441d 2441d 15/29 2401d 22dad713b8a5 netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present
memory leak in nf_tables_parse_netdev_hooks netfilter 3 syz, C 6 2404d 2434d 15/29 2401d cd77e75b5e46 netfilter: nf_tables: fix memory leak in nf_tables_parse_netdev_hooks()
general protection fault in hash_ipmark6_uadt netfilter 2 2 2440d 2441d 15/29 2401d 22dad713b8a5 netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present
general protection fault in nft_chain_parse_hook netfilter 2 syz, C done 48 2419d 2434d 15/29 2401d 826035498ec1 netfilter: nf_tables: add __nft_chain_type_get()
WARNING in nf_tables_table_destroy netfilter -1 syz, C done done 1 2432d 2432d 15/29 2401d eb014de4fd41 netfilter: nf_tables: autoload modules from the abort path
KASAN: slab-out-of-bounds Read in bitmap_ip_gc netfilter 17 syz, C done 15 2413d 2431d 15/29 2401d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
general protection fault in nft_tunnel_get_init netfilter 2 syz, C done 7 2434d 2434d 15/29 2401d 1c702bf902bd netfilter: nft_tunnel: fix null-attribute check
KASAN: slab-out-of-bounds Read in bitmap_port_add netfilter 17 syz done 9 2425d 2432d 15/29 2401d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: slab-out-of-bounds Read in bitmap_ip_test netfilter 17 syz 10 2421d 2431d 15/29 2401d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
general protection fault in hash_ipportnet4_uadt netfilter 2 syz, C done 13 2440d 2442d 15/29 2401d 22dad713b8a5 netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present
KASAN: slab-out-of-bounds Read in bitmap_port_list netfilter 17 syz, C 152 2424d 2432d 15/29 2401d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: use-after-free Read in bitmap_port_destroy netfilter 19 syz, C 1 2432d 2431d 15/29 2401d c120959387ef netfilter: fix a use-after-free in mtype_destroy()
KMSAN: uninit-value in br_nf_forward_arp (3) bridge netfilter 7 2 2481d 2473d 15/29 2405d 5604285839aa net-backports: netfilter: bridge: make sure to pull arp header in br_nf_forward_arp()
KASAN: vmalloc-out-of-bounds Read in compat_copy_entries netfilter bridge 17 syz, C done 3 2466d 2466d 15/29 2405d e608f631f0ba netfilter: ebtables: compat: reject all padding in matches/watchers
KMSAN: uninit-value in nf_conntrack_tcp_packet netfilter 7 syz 3 2476d 2479d 15/29 2442d 9424e2e7ad93 net-backports: tcp: md5: fix potential overestimation of TCP option space
KCSAN: data-race in ip_finish_output2 / ip_finish_output2 netfilter 6 26 2472d 2517d 15/29 2468d 25c7a6d1f90e net: avoid potential false sharing in neighbor related code
KASAN: use-after-free Read in nf_ct_deliver_cached_events netfilter 19 syz, C done 169 2514d 2520d 15/29 2468d ad88b7a6aa3e netfilter: ecache: don't look for ecache extension on dying/unconfirmed conntracks
KCSAN: data-race in __nf_ct_refresh_acct / __nf_ct_refresh_acct netfilter 6 2460 2507d 2537d 13/29 2507d e37542ba111f net-backports: netfilter: conntrack: avoid possible false sharing
WARNING in xt_compat_add_offset netfilter -1 syz, C done 18 2598d 2761d 12/29 2575d 3b48300d5cc7 netfilter: ebtables: also count base chain policies
net-next build error (2) netfilter -1 2 2664d 2664d 12/29 2598d c9bb6165a16e netfilter: nf_conntrack_bridge: fix CONFIG_IPV6=y
KASAN: use-after-free Read in brnf_exit_net bridge netfilter 19 syz done 3 2641d 2644d 12/29 2598d 7e6daf50e1f4 netfilter: bridge: prevent UAF in brnf_exit_net()
general protection fault in nf_ct_gre_keymap_flush netfilter 2 syz, C 22 2786d 2792d 11/29 2728d ac088a88b5d5 netfilter: conntrack: fix error path in nf_conntrack_pernet_init()
INFO: rcu detected stall in netlink_sendmsg netfilter 1 syz 83 2766d 2822d 11/29 2750d 12750abad517 xfrm: policy: fix infinite loop when merging src-nodes
WARNING in cttimeout_default_get netfilter -1 syz, C 44 2839d 2859d 11/29 2839d 89259088c1b7 netfilter: nfnetlink_cttimeout: fetch timeouts for udplite and gre, too
general protection fault in icmp_timeout_obj_to_nlattr netfilter 2 syz, C 13 2871d 2875d 11/29 2863d 8866df9264a3 netfilter: nfnetlink_cttimeout: pass default timeout policy to obj_to_nlattr
general protection fault in ctnetlink_alloc_filter netfilter 2 syz, C 80 2913d 2916d 11/29 2863d 9306425b70bf netfilter: ctnetlink: must check mark attributes vs NULL
KMSAN: uninit-value in __nf_conntrack_find_get netfilter 7 syz, C 67 2975d 2982d 8/29 2959d 6613b6173dee netfilter: conntrack: dccp: treat SYNC/SYNCACK as invalid if no prior state
KMSAN: uninit-value in gc_worker netfilter 7 10 2976d 2987d 8/29 2959d 6613b6173dee netfilter: conntrack: dccp: treat SYNC/SYNCACK as invalid if no prior state
KMSAN: uninit-value in br_nf_forward_arp netfilter bridge 7 1 3028d 3025d 8/29 2981d b84bbaf7a6c8 packet: in packet_snd start writing at link layer allocation
KMSAN: uninit-value in nfqnl_recv_config (2) netfilter 7 syz, C 10 3002d 3018d 8/29 2989d ba062ebb2cd5 netfilter: nf_queue: augment nfqa_cfg_policy
KMSAN: uninit-value in ebt_stp_mt_check (2) bridge netfilter 7 syz, C 222 2989d 3021d 8/29 2989d c568503ef020 netfilter: x_tables: initialise match/target check parameter struct
WARNING in ebt_do_table bridge netfilter -1 syz, C 13 2998d 3023d 8/29 2989d 11ff7288beb2 netfilter: ebtables: reject non-bridge targets
BUG: unable to handle kernel paging request in nla_strlcpy netfilter 8 1 3030d 3030d 5/29 3022d 4b83a9049a98 netfilter: provide correct argument to nla_strlcpy()
KMSAN: uninit-value in ebt_stp_mt_check netfilter bridge 7 syz, C 211 3022d 3067d 5/29 3022d a4995684a949 netfilter: bridge: stp fix reference to uninitialized data
KASAN: use-after-free Read in nla_strlcpy netfilter 19 syz, C 59 3026d 3038d 5/29 3022d 4b83a9049a98 netfilter: provide correct argument to nla_strlcpy()
KASAN: stack-out-of-bounds Write in compat_copy_entries netfilter bridge 21 syz 10 3027d 3065d 5/29 3022d 94c752f99954 netfilter: ebtables: handle string from userspace with care
KASAN: slab-out-of-bounds Read in nla_strlcpy netfilter 17 syz, C 34 3026d 3038d 5/29 3022d 4b83a9049a98 netfilter: provide correct argument to nla_strlcpy()
KASAN: slab-out-of-bounds Read in clusterip_tg_check netfilter 17 syz, C 22 3145d 3151d 5/29 3046d 1a38956cce5e netfilter: ipt_CLUSTERIP: fix out-of-bounds accesses in clusterip_tg_check()
INFO: trying to register non-static key in del_timer_sync netfilter -1 syz, C 89 3125d 3151d 5/29 3046d 10414014bc08 netfilter: x_tables: fix missing timer initialization in xt_LED
BUG: unable to handle kernel paging request in cgroup_mt_destroy_v1 netfilter 8 syz, C 3 3148d 3148d 5/29 3047d ba7cd5d95f25 netfilter: xt_cgroup: initialize info->priv in cgroup_mt_check_v1()
KASAN: use-after-free Write in xt_rateest_put netfilter 22 syz, C 7 3149d 3151d 5/29 3047d 7dc68e98757a netfilter: xt_RATEEST: acquire xt_rateest_mutex for hash insert
KMSAN: uninit-value in iptable_mangle_hook netfilter 7 syz, C 1134 3051d 3083d 5/29 3051d b855ff827476 dccp: initialize ireq->ir_mark
KMSAN: uninit-value in ip6table_mangle_hook netfilter 7 syz, C 601 3052d 3083d 5/29 3051d b855ff827476 dccp: initialize ireq->ir_mark
BUG: unable to handle kernel paging request in compat_copy_entries netfilter bridge 8 syz 5 3117d 3116d 5/29 3065d b71812168571 netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets
WARNING in xt_cluster_mt netfilter -1 syz, C 4 3121d 3121d 5/29 3083d aebfa52a925d netfilter: drop template ct when conntrack is skipped.
WARNING in __proc_create netfilter -1 syz, C 12 3118d 3111d 4/29 3097d b1d0a5d0cba4 netfilter: x_tables: add and use xt_check_proc_name
BUG: unable to handle kernel paging request in ebt_among_mt_check (2) netfilter bridge 8 syz, C 946 3097d 3113d 4/29 3097d c8d70a700a5b netfilter: bridge: ebt_among: add more missing match size checks
WARNING in __xlate_proc_name netfilter -1 syz, C 11 3116d 3152d 4/29 3097d b1d0a5d0cba4 netfilter: x_tables: add and use xt_check_proc_name
KASAN: slab-out-of-bounds Read in ip6_route_me_harder netfilter 17 syz, C 66 3116d 3124d 4/29 3115d 7d98386d55a5 netfilter: use skb_to_full_sk in ip6_route_me_harder
KASAN: use-after-free Write in nf_nat_ipv6_manip_pkt netfilter 22 syz, C 2 3131d 3130d 4/29 3115d b078556aecd7 netfilter: ipv6: fix use-after-free Write in nf_nat_ipv6_manip_pkt
WARNING in compat_copy_entries netfilter bridge -1 syz, C 434 3115d 3130d 4/29 3115d b71812168571 netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets
BUG: unable to handle kernel paging request in ebt_among_mt_check bridge netfilter 8 syz, C 823 3115d 3130d 4/29 3115d c4585a2823ed netfilter: bridge: ebt_among: add missing match size checks
KASAN: use-after-free Read in ip6_route_me_harder netfilter 19 syz, C 44 3116d 3124d 4/29 3115d 7d98386d55a5 netfilter: use skb_to_full_sk in ip6_route_me_harder
WARNING: bad unlock balance in hashlimit_mt_common netfilter 4 syz, C 2059 3125d 3138d 4/29 3122d de526f401284 netfilter: xt_hashlimit: fix lock imbalance
divide error in nf_nat_l4proto_unique_tuple netfilter 2 syz, C 2 3137d 3136d 4/29 3122d db57ccf0f2f4 netfilter: nat: cope with negative port range
kernel BUG at kernel/time/timer.c:LINE! netfilter -1 syz, C 18 3125d 3136d 4/29 3122d 10414014bc08 netfilter: x_tables: fix missing timer initialization in xt_LED
WARNING: ODEBUG bug in led_tg_destroy netfilter -1 syz, C 4 3128d 3136d 4/29 3122d 10414014bc08 netfilter: x_tables: fix missing timer initialization in xt_LED
possible deadlock in do_ipv6_setsockopt (2) netfilter 4 3642 3125d 3140d 4/29 3122d 01ea306f2ac2 netfilter: drop outermost socket lock in getsockopt()
general protection fault in arpt_do_table netfilter 2 syz, C 3 3127d 3127d 4/29 3122d 57ebd808a97d netfilter: add back stackpointer size checks
possible deadlock in do_ip_setsockopt (3) netfilter 4 3731 3125d 3141d 4/29 3122d 01ea306f2ac2 netfilter: drop outermost socket lock in getsockopt()
WARNING in __queue_work netfilter -1 syz, C 1 3132d 3132d 4/29 3122d cfc2c7405333 netfilter: IDLETIMER: be syzkaller friendly
general protection fault in ip6t_do_table netfilter 2 syz, C 8077 3126d 3152d 4/29 3122d 57ebd808a97d netfilter: add back stackpointer size checks
possible deadlock in do_ip_getsockopt (2) netfilter 4 206 3125d 3139d 4/29 3122d 01ea306f2ac2 netfilter: drop outermost socket lock in getsockopt()
WARNING: proc registration bug in clusterip_tg_check netfilter -1 syz, C 779 3125d 3143d 4/29 3122d b3e456fce9f5 netfilter: ipt_CLUSTERIP: fix a race condition of proc file creation
WARNING: ODEBUG bug in __queue_work netfilter -1 syz, C 2 3132d 3128d 4/29 3122d cfc2c7405333 netfilter: IDLETIMER: be syzkaller friendly
possible deadlock in xt_find_table_lock (2) netfilter 4 4 3140d 3139d 4/29 3122d 01ea306f2ac2 netfilter: drop outermost socket lock in getsockopt()
KASAN: use-after-free Write in xt_rateest_tg_checkentry netfilter 22 syz, C 2 3149d 3151d 4/29 3136d 7dc68e98757a netfilter: xt_RATEEST: acquire xt_rateest_mutex for hash insert
general protection fault in cgroup_mt_destroy_v1 netfilter 2 syz, C 91 3139d 3151d 4/29 3136d ba7cd5d95f25 netfilter: xt_cgroup: initialize info->priv in cgroup_mt_check_v1()
possible deadlock in do_ip_setsockopt (2) netfilter 4 59 3142d 3144d 4/29 3142d 3f34cfae1238 netfilter: on sockopt() acquire sock lock only in the required scope
possible deadlock in do_ip_getsockopt netfilter 4 22 3146d 3151d 4/29 3144d 3f34cfae1238 netfilter: on sockopt() acquire sock lock only in the required scope
possible deadlock in xt_find_target netfilter 4 34 3145d 3152d 4/29 3144d 3f34cfae1238 netfilter: on sockopt() acquire sock lock only in the required scope
suspicious RCU usage at net/netfilter/ipset/ip_set_core.c:LINE netfilter -1 syz, C 38048 3169d 3175d 4/29 3148d f998b6b10144 netfilter: ipset: Missing nfnl_lock()/nfnl_unlock() is added to ip_set_net_exit()
general protection fault in get_info netfilter 2 syz, C 760 3164d 3167d 4/29 3148d e3eeacbac4ad netfilter: x_tables: don't return garbage pointer on modprobe failure
general protection fault in nf_tables_dump_obj_done netfilter 2 syz, C 976 3170d 3175d 3/29 3161d 8bea728dce89 netfilter: nf_tables: fix potential NULL-ptr deref in nf_tables_dump_obj_done()
kernel BUG at lib/string.c:LINE! netfilter -1 syz, C 73 3262d 3278d 3/29 3248d e466af75c074 netfilter: x_tables: avoid stack-out-of-bounds read in xt_copy_counters_from_user