Applied filters: NoSubsystem=true (drop)
Extra filters: [With Repro]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
linux-next build error (26) -1 43 3d17h 54d 1/29 never apparmor: replace decompress_zstd() prototype with its entity
WARNING: possible circular locking dependency detected (5) -1 syz, C 1 328d 328d 29/29 284d 9f7c02e03157 nbd: restrict sockets to TCP and UDP
upstream build error (23) -1 46 376d 376d 29/29 339d f627b51aaa04 compiler_types: Provide __no_kstack_erase to disable coverage only on Clang
riscv/fixes test error: can't ssh into the instance -1 48 705d 723d 28/29 656d 1ff95eb2bebd riscv: Fix RISCV_ALTERNATIVE_EARLY
riscv/fixes boot error: can't ssh into the instance (3) -1 210 811d 865d 25/29 809d f5c12105c15f mm,page_owner: fix refcount imbalance
upstream boot error: can't ssh into the instance (16) -1 415 890d 943d 25/29 867d f6564fce256a mm, kmsan: fix infinite recursion due to RCU critical section
riscv/fixes boot error: failed to read from qemu: EOF -1 54 976d 985d 25/29 920d 420370f3ae3d riscv: Check if the code to patch lies in the exit section
KASAN: use-after-free Read in j1939_session_get_by_addr 19 syz, C done error 66 2458d 2470d 25/29 940d d966635b384b can: j1939: transport: make sure the aborted session will be deactivated only once
riscv/fixes boot error: can't ssh into the instance (2) -1 109 1159d 1165d 23/29 1133d 25abe0db9243 riscv: Fix kfence now that the linear mapping can be backed by PUD/P4D/PGD
kernel BUG in vmf_insert_pfn_prot -1 syz, C done done 1933 1183d 1788d 22/29 1152d a5b44c4adb16 drm/fbdev-generic: Always use shadow buffering
unregister_netdevice: waiting for DEV to become free (7) 2 syz, C inconclusive 20422 1158d 1360d 22/29 1158d 266e9b3475ba RDMA/siw: Remove namespace check from siw_netdev_event()
INFO: task hung in tcindex_partial_destroy_work 1 syz, C done unreliable 84 2006d 2142d 22/29 1158d 8c710f75256b net/sched: Retire tcindex classifier
WARNING: fbcon: Driver 'vkmsdrmfb' missed to adjust virtual screen size (0x0 vs. 64x768) -1 syz, C unreliable error 24 1491d 1491d 22/29 1158d 1935f0deb611 drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
WARNING: can't access registers at entry_SYSCALL_64_after_hwframe -1 syz, C 15 1265d 1270d 22/29 1158d 00c8f01c4e84 objtool: Fix ORC 'signal' propagation
WARNING in j1939_xtp_rx_abort_one -1 syz, C done 379 1294d 1832d 22/29 1158d d0553680f94c can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate
upstream-arm64 build error -1 11 1266d 1269d 22/29 1158d d54170812ef1 arm64: fix .idmap.text assertion for large kernels
WARNING in submit_bio_checks -1 syz, C done unreliable 1851 1601d 2221d 22/29 1210d 57e95e4670d1 block: fix and cleanup bio_check_ro
KASAN: use-after-free Read in hci_cmd_timeout 19 syz, C done error 371 1339d 2652d 22/29 1215d 97dfaf073f58 Bluetooth: hci_sync: cancel cmd_timer if hci_open failed
WARNING in __dev_queue_xmit -1 syz, C done 16774 1262d 1476d 22/29 1262d dc633700f00f net/af_packet: check len when min_header_len equals to 0 b12e924a2f5b net/ieee802154: don't warn zero-sized raw_sendmsg() 3a4d061c699b net/ieee802154: reject zero-sized raw_sendmsg()
INFO: task hung in addrconf_verify_work (6) 1 syz, C done 86 1266d 1503d 22/29 1262d ff1fa2081d17 net: tun: avoid disabling NAPI twice
KASAN: use-after-free Read in drm_gem_object_release_handle 19 syz, C done 362 1343d 1728d 22/29 1262d 24013314be6e drm/shmem-helper: Remove errant put in error path
KASAN: slab-out-of-bounds Read in vxlan_vnifilter_dump_dev 19 syz, C done 30 1592d 1593d 22/29 1262d 9d570741aec1 vxlan: do not feed vxlan_vnifilter_dump_dev with non vxlan devices
WARNING in bpf_check (3) -1 syz, C done done 1736 1408d 2341d 22/29 1262d 34dd3bad1a6f bpf: Relax the requirement to use preallocated hash maps in tracing progs.
BUG: sleeping function called from invalid context in static_key_slow_inc 5 syz, C done 82 1349d 1362d 22/29 1262d af295e854a4e l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
KASAN: use-after-free Read in ath9k_hif_usb_rx_cb (2) 19 syz, C done 48810 1459d 2092d 22/29 1262d 0ac4827f78c7 ath9k: fix use-after-free in ath9k_hif_usb_rx_cb
KASAN: use-after-free Read in madvise_update_vma 19 syz, C done 38 1627d 1644d 22/29 1262d 942341dcc574 mm: fix use-after-free when anon vma name is used after vma is freed
BUG: sleeping function called from invalid context in sk_psock_stop 5 syz, C done 232 1463d 1521d 22/29 1262d 697fb80a5364 bpf: Fix sockmap calling sleepable function in teardown path
WARNING in __dma_map_sg_attrs -1 syz, C inconclusive 65 1462d 1712d 22/29 1262d 9e9fa6a9198b udmabuf: Set the DMA mask for the udmabuf device (v2)
possible deadlock in p9_req_put 4 syz, C done 2815 1372d 1463d 22/29 1262d 52f1c45dde91 9p: trans_fd/p9_conn_cancel: drop client lock earlier
WARNING in pskb_expand_head -1 syz, C done done 222 1376d 2023d 22/29 1262d dbae2b062824 net: skb: introduce and use a single page frag cache
KASAN: use-after-free Read in __kernfs_remove 19 syz, C done 3985 1402d 1445d 22/29 1262d 4abc99652812 kernfs: fix use-after-free in __kernfs_remove
INFO: task hung in synchronize_rcu (3) 1 syz, C done done 374 1272d 2209d 22/29 1262d 2d08935682ac KVM: x86: Don't re-acquire SRCU lock in complete_emulated_io()
WARNING: suspicious RCU usage (5) -1 syz, C done 1 1518d 1514d 20/29 1508d f4e61f0c9add x86/kvm: Fix broken irq restoration in kvm_wait
WARNING in drm_gem_shmem_vm_open -1 syz done done 38 1682d 1817d 20/29 1549d 0499f419b76f video: vga16fb: Only probe for EGA and VGA 16 color graphic cards
INFO: task hung in usb_get_descriptor 1 syz, C done done 4149 1612d 2134d 20/29 1549d 363eaa3a450a usbip: synchronize event handler with sysfs code paths
WARNING in cgroup_finalize_control -1 syz done done 9 1753d 2281d 20/29 1615d 7ee285395b21 cgroup: Make rebind_subsystems() disable v2 controllers all at once
WARNING in ref_tracker_dir_exit -1 syz, C done 16271 1671d 1700d 20/29 1615d 34ac17ecbf57 ethtool: use ethnl_parse_header_dev_put()
WARNING in sta_info_insert_rcu -1 syz, C done done 2533 1709d 2146d 20/29 1615d a6555f844549 mac80211: Drop frames from invalid MAC address in ad-hoc mode
WARNING in loop_add -1 syz, C done error 64 1730d 2544d 20/29 1615d 278167fd2f8f block: add __must_check for *add_disk*() callers
kernel BUG at net/core/dev.c:LINE! (4) -1 syz, C done done 432 1699d 2086d 20/29 1615d f123cffdd8fe net: netlink: af_netlink: Prevent empty skb by adding a check on len.
WARNING in bpf_warn_invalid_xdp_action -1 syz, C done done 8941 1672d 2391d 20/29 1615d 2cbad989033b bpf: Do not WARN in bpf_warn_invalid_xdp_action()
unregister_netdevice: waiting for DEV to become free (6) 2 syz, C error 13128 1615d 1734d 20/29 1615d 34ac17ecbf57 ethtool: use ethnl_parse_header_dev_put()
BUG: unable to handle kernel NULL pointer dereference in bpf 10 syz, C done 753 1673d 1744d 20/29 1615d ad10c381d133 bpf: Add missing map_delete_elem method to bloom filter map
unregister_netdevice: waiting for DEV to become free (5) 2 syz, C done 40035 1734d 1979d 20/29 1734d 0d7a7b2014b1 ipv6: remove extra dev_hold() for fallback tunnels
WARNING in taprio_change -1 syz, C done 746 1920d 2156d 20/29 1734d ed8157f1ebf1 net: sched: tapr: prevent cycle_time == 0 in parse_taprio_schedule
WARNING in netlbl_cipsov4_add -1 syz, C inconclusive 4433 1797d 1997d 20/29 1734d 8ca34a13f7f9 net: cipso: fix warnings in netlbl_cipsov4_add_std
WARNING in cfg80211_connect -1 syz, C done 2320 1947d 2139d 20/29 1734d 1b5ab825d9ac cfg80211: remove WARN_ON() in cfg80211_sme_connect
BUG: unable to handle kernel paging request in corrupted (3) 8 syz, C done 45 1742d 1911d 20/29 1734d 7a274727702c io_uring: don't modify req->poll for rw
possible deadlock in loop_probe 4 syz, C done 20656 1855d 1880d 20/29 1734d 962bf783ef65 mtd: break circular locks in register_mtd_blktrans
linux-next build error (12) -1 63 1861d 1959d 20/29 1734d 7aae231ac93b bpf: tcp: Limit calling some tcp cc functions to CONFIG_DYNAMIC_FTRACE
WARNING: suspicious RCU usage in bond_ipsec_add_sa (2) 4 syz, C done 540 1862d 2149d 20/29 1734d b648eba4c69e bonding: fix suspicious RCU usage in bond_ipsec_add_sa()
linux-next test error: unregister_netdevice: waiting for DEV to become free -1 2 1957d 1957d 20/29 1734d 0d7a7b2014b1 ipv6: remove extra dev_hold() for fallback tunnels
KASAN: slab-out-of-bounds Read in qrtr_endpoint_post (2) 17 syz, C done 41 1836d 2200d 20/29 1734d ad9d24c9429e net: qrtr: fix OOB Read in qrtr_endpoint_post
net-next test error: unregister_netdevice: waiting for DEV to become free -1 18 1957d 1959d 20/29 1734d 0d7a7b2014b1 ipv6: remove extra dev_hold() for fallback tunnels
BUG: MAX_LOCKDEP_ENTRIES too low! -1 syz, C done 179076 1919d 2610d 20/29 1734d 5dc33592e955 lockdep: Allow tuning tracing capacity constants.
possible deadlock in del_gendisk 4 syz, C done 158215 1797d 1944d 20/29 1734d 990e78116d38 block: loop: fix deadlock between open and remove
memory leak in rds_send_probe 3 syz, C done 27 2032d 2574d 20/29 1734d 49bfcbfd989a net: rds: fix memory leak in rds_recvmsg
WARNING: still has locks held in io_sq_thread 4 syz, C done 8689 1946d 1960d 20/29 1734d 82734c5b1b24 io_uring: drop sqd lock before handling signals for SQPOLL
memory leak in h4_recv_buf 3 syz, C done 21 1844d 2604d 20/29 1734d bb2853a6a421 tty: Fix data race between tiocsti() and flush_to_ldisc()
WARNING in sta_info_alloc -1 syz, C done done 145 1880d 2134d 20/29 1734d 0ee4d55534f8 mac80211: remove warning in ieee80211_get_sband()
WARNING: ODEBUG bug in cancel_delayed_work -1 syz, C done 3384 1750d 2201d 20/29 1734d 3a9d54b1947e Bluetooth: Set CONF_NOT_COMPLETE as l2cap_chan default
possible deadlock in console_lock_spinning_enable 4 syz, C done 1693 1734d 2607d 20/29 1734d c0070e1e6027 ttyprintk: Add TTY hangup callback.
WARNING in hsr_forward_skb -1 syz, C done done 1310 1949d 2777d 20/29 1734d 9d6803921a16 net: hsr: Reset MAC header for Tx path
INFO: task hung in hub_port_init 1 syz, C done 15888 1734d 2134d 20/29 1734d 258c81b341c8 usbip: give back URBs for unsent unlink requests during cleanup
net-next build error (3) -1 7 2012d 2009d 20/29 1948d 9c97921a51a0 net: fix building errors on powerpc when CONFIG_RETPOLINE is not set
INFO: task hung in addrconf_verify_work (4) 1 syz, C done 132 1997d 2084d 20/29 1948d d349f9976868 net_sched: fix RTNL deadlock again caused by request_module()
general protection fault in rose_send_frame 2 syz, C done done 664 2089d 2768d 19/29 1979d 3b3fd068c56e rose: Fix Null pointer dereference in rose_send_frame()
WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected (2) -1 syz, C done 640 2043d 2161d 19/29 1979d 8d1ddb5e7937 fcntl: Fix potential deadlock in send_sig{io, urg}()
WARNING: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway -1 2 2092d 2088d 19/29 1979d dc889b8d4a81 bfs: don't use WARNING: string when it's just info.
KASAN: null-ptr-deref Write in bdi_put 12 syz, C done done 601 2036d 2070d 19/29 1979d 2d2f6f1b4799 block: pre-initialize struct block_device in bdev_alloc_inode
kernel BUG at net/core/skbuff.c:LINE! (3) -1 syz, C done 4399 1994d 3111d 19/29 1979d afbc293add64 af_key: relax availability checks for skb size calculation
unregister_netdevice: waiting for DEV to become free (4) 2 syz, C done 50394 1979d 2181d 19/29 1979d 5399d52233c4 rxrpc: Fix deadlock around release of dst cached on udp tunnel
WARNING: filesystem loop5 was created with 512 inodes, the real maximum is 511, mounting anyway -1 2 2085d 2081d 19/29 1979d dc889b8d4a81 bfs: don't use WARNING: string when it's just info.
WARNING: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway -1 4 2092d 2141d 19/29 1979d dc889b8d4a81 bfs: don't use WARNING: string when it's just info.
general protection fault in call_commit_handler 2 syz, C done 428 2035d 2116d 19/29 1979d 5122565188ba wext: fix NULL-ptr-dereference with cfg80211's lack of commit()
WARNING: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway -1 3 2078d 2146d 19/29 1979d dc889b8d4a81 bfs: don't use WARNING: string when it's just info.
WARNING: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway -1 3 2092d 2088d 19/29 1979d dc889b8d4a81 bfs: don't use WARNING: string when it's just info.
upstream build error (11) -1 25 2035d 2112d 15/29 2035d f78f63da916e mm/process_vm_access: Add missing #include <linux/compat.h>
BUG: MAX_LOCKDEP_CHAIN_HLOCKS too low! -1 syz, C done error 25236 2273d 2713d 15/29 2069d 1a33e10e4a95 net: partially revert dynamic lockdep key changes
BUG: using __this_cpu_read() in preemptible code in trace_hardirqs_on 4 syz, C done 502745 2095d 2126d 15/29 2092d f8e48a3dca06 lockdep: Fix preemption WARN for spurious IRQ-enable
INFO: trying to register non-static key in uhid_char_release -1 syz, C done done 26 2169d 2347d 15/29 2092d bce1305c0ece HID: core: Correctly handle ReportSize being zero
kernel panic: Fatal exception (3) 2 syz, C done 2 2127d 2125d 15/29 2092d eadd1befdd77 netem: fix zero division in tabledist
WARNING in print_bfs_bug -1 syz, C done 14759 2124d 2477d 15/29 2092d 6d1823ccc480 lockdep: Optimize the memory usage of circular queue
INFO: task hung in io_uring_setup 1 syz, C done 51 2161d 2167d 15/29 2092d 7e84e1c7566a io_uring: allow disabling rings during the creation
INFO: task hung in addrconf_verify_work (3) 1 syz, C done 75 2105d 2140d 15/29 2092d 0fedc63fadf0 net_sched: commit action insertions together
WARNING: ODEBUG bug in exit_to_user_mode_prepare -1 syz, C done done 27 2167d 2172d 15/29 2092d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
possible deadlock in _snd_pcm_stream_lock_irqsave 4 syz, C done 997 2124d 2161d 15/29 2092d 6564d0ad67ef ALSA: ctl: Workaround for lockdep warning wrt card->ctl_files_rwlock
WARNING in percpu_ref_exit (2) -1 syz, C done done 272 2128d 2424d 15/29 2092d c1e2148f8ecb io_uring: free fixed_file_data after RCU grace period
bpf-next test error: BUG: program execution failed: executor 0: exit status 67 -1 12 2124d 2124d 15/29 2092d d25e2e9388ed netfilter: restore NF_INET_NUMHOOKS
INFO: task hung in htable_put 1 syz, C done done 29 2365d 2418d 15/29 2092d 99b79c3900d4 netfilter: xt_hashlimit: unregister proc file before releasing mutex
WARNING: refcount bug in l2cap_chan_put 13 syz, C inconclusive done 13 2195d 2359d 15/29 2092d b83764f9220a Bluetooth: Fix kernel oops triggered by hci_adv_monitors_clear()
KASAN: global-out-of-bounds Read in vga16fb_imageblit 17 syz, C done 1071 2157d 2441d 15/29 2130d bd018a6a75ce video: fbdev: fix OOB read in vga_8planes_imageblit()
INFO: rcu detected stall in ext4_file_write_iter 1 syz, C inconclusive done 93 2190d 2722d 15/29 2145d 7e24969022cb block: allow for_each_bvec to support zero len bvec
WARNING in restore_regulatory_settings -1 syz, C done 10414 2163d 2407d 15/29 2145d 47caf685a685 cfg80211: regulatory: reject invalid hints
kernel BUG at mm/hugetlb.c:LINE! -1 syz, C done error 10 2204d 2317d 15/29 2153d 15568299b7d9 hugetlbfs: prevent filesystem stacking of hugetlbfs
WARNING in ptrace_stop -1 syz, C done 1413 2204d 2208d 15/29 2153d d136122f5845 sched: Fix race against ptrace_freeze_trace()
general protection fault in do_con_write 2 syz, C done 10703 2205d 2441d 15/29 2153d ce684552a266 vt: Reject zero-sized screen buffer size.
WARNING in inc_nlink -1 syz, C done 26 2219d 2322d 15/29 2153d facb03dddec0 fs/minix: don't allow getting deleted inodes
KASAN: use-after-free Read in get_block 19 syz, C done 23 2219d 2297d 15/29 2153d 270ef41094e9 fs/minix: reject too-large maximum file size
KASAN: use-after-free Read in l2cap_chan_close 19 syz, C done 37 2195d 2375d 15/29 2153d f9c70bdc279b Bluetooth: add a mutex lock to avoid UAF in do_enale_set
WARNING in vkms_vblank_simulate -1 syz, C done 12903 2160d 2736d 15/29 2153d 51f644b40b4b drm/atomic-helper: reset vblank on crtc reset
WARNING in hsr_addr_subst_dest -1 syz, C done done 8639 2319d 2776d 15/29 2182d 4b793acdca00 hsr: use netdev_err() instead of WARN_ONCE()
BUG: unable to handle kernel paging request in netif_receive_generic_xdp 8 syz, C done done 160 2258d 2394d 15/29 2204d 96aa1b22bd6b tun: correct header offsets in napi frags mode
BUG: using smp_processor_id() in preemptible [ADDR] code: syz-executor 4 syz, C done 22297 2260d 2598d 15/29 2214d 1378817486d6 tipc: block BH before using dst_cache
KASAN: null-ptr-deref Write in choke_reset 12 syz, C done 1441 2270d 2304d 15/29 2214d 8738c85c72b3 sch_choke: avoid potential panic in choke_reset()
WARNING in memtype_reserve -1 syz, C done 600 2275d 2284d 15/29 2214d a0e710a7def4 USB: usbfs: fix mmap dma mismatch
BUG: unable to handle kernel paging request in do_xdp_generic 8 syz, C done done 7444 2288d 2395d 15/29 2214d 96aa1b22bd6b tun: correct header offsets in napi frags mode
INFO: task syz-executor can't die for more than 143 seconds. (2) -1 syz, C done 2512 2215d 2483d 15/29 2214d 566d136289dc pipe: Fix pipe_full() test in opipe_prep().
net-next test error: BUG: using smp_processor_id() in preemptible code in corrupted -1 4 2248d 2249d 15/29 2214d 811985365378 ext4: mballoc: Use this_cpu_read instead of this_cpu_ptr
net test error: BUG: using smp_processor_id() in preemptible code in corrupted -1 3 2245d 2247d 15/29 2214d 811985365378 ext4: mballoc: Use this_cpu_read instead of this_cpu_ptr
memory leak in bio_copy_user_iov 3 syz, C done 34 2424d 2609d 15/29 2231d 3b7995a98ad7 block: fix memleak when __blk_rq_map_user_iov() is failed
KASAN: slab-out-of-bounds Write in tcindex_set_parms 21 syz, C done 10 2324d 2345d 15/29 2282d 0d1c3530e1bd net_sched: keep alloc_hash updated after hash allocation
WARNING: bad unlock balance in ucma_event_handler 4 syz, C done 143 2315d 2979d 15/29 2282d 7c11910783a1 RDMA/ucma: Put a lock around every call to the rdma_cm layer
WARNING: bad unlock balance in ucma_destroy_id 4 syz done 44 2350d 2903d 15/29 2282d 7c11910783a1 RDMA/ucma: Put a lock around every call to the rdma_cm layer
possible deadlock in free_ioctx_users (2) 4 syz, C done 44 2312d 2320d 15/29 2282d 63f818f46af9 proc: Use a dedicated lock in struct pid
WARNING: ODEBUG bug in route4_change -1 syz, C done 68 2319d 2343d 15/29 2282d ef299cc3fa1a net_sched: cls_route: remove the right filter from hashtable
KASAN: use-after-free Write in release_tty 22 syz, C done 591 2319d 2441d 15/29 2282d ca4463bf8438 vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console
INFO: task hung in hashlimit_mt_check_common 1 syz, C done 20 2364d 2403d 15/29 2307d 8d0015a7ab76 netfilter: xt_hashlimit: limit the max size of hashtable c4a3922d2d20 netfilter: xt_hashlimit: reduce hashlimit_mutex scope for htable_put()
memory leak in dma_buf_ioctl 3 syz, C done 129 2358d 2574d 15/29 2307d d1f37226431f dma-buf: free dmabuf->name in dma_buf_release()
KASAN: use-after-free Read in n_tty_receive_buf_common 19 syz, C done 68 2362d 2438d 15/29 2307d 07e6124a1a46 vt: selection, close sel_buffer race
general protection fault in nf_flow_table_offload_setup 2 syz, C done done 835 2361d 2394d 15/29 2307d a7da92c2c8a1 netfilter: flowtable: skip offload setup if disabled
KASAN: use-after-free Read in find_match 19 syz, C done 142 2361d 2367d 15/29 2307d 44bfa9c5e5f0 net: rtnetlink: fix bugs in rtnl_alt_ifname()
unregister_netdevice: waiting for DEV to become free (3) 2 syz, C 1864 2307d 2369d 15/29 2307d e34f1753eebc ethtool: limit bitset size
BUG: corrupted list in __nf_tables_abort 8 syz, C done done 29 2388d 2396d 15/29 2336d eb014de4fd41 netfilter: nf_tables: autoload modules from the abort path
KASAN: slab-out-of-bounds Read in bitmap_ipmac_gc 17 syz, C done done 70 2377d 2393d 15/29 2336d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
possible deadlock in wg_set_device 4 syz, C done 33 2374d 2379d 15/29 2342d ec31c2676a10 wireguard: noise: reject peers with low order public keys
memory leak in kobject_set_name_vargs (2) 3 syz, C done 47 2390d 2574d 15/29 2364d cb626bf566eb net-sysfs: Fix reference count leak
KASAN: slab-out-of-bounds Read in bitmap_port_gc 17 syz, C done 197 2378d 2395d 15/29 2364d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: slab-out-of-bounds Read in bitmap_ipmac_list 17 syz, C done 108 2380d 2396d 15/29 2364d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
WARNING: refcount bug in cdev_get 13 syz, C done 105 2406d 2546d 15/29 2364d 68faa679b8be chardev: Avoid potential use-after-free in 'chrdev_open()'
inconsistent lock state in rxrpc_put_client_conn 4 syz, C done 18198 2373d 2379d 15/29 2364d 963485d436cc rxrpc: Fix call RCU cleanup using non-bh-safe locks
unregister_netdevice: waiting for DEV to become free (2) 2 syz, C done 385621 2369d 2916d 15/29 2369d ddd9b5e3e765 net-sysfs: Call dev_hold always in rx_queue_add_kobject
general protection fault in j1939_sk_bind 2 syz done done 22 2444d 2470d 15/29 2369d 00d4e14d2e4c can: j1939: j1939_sk_bind(): take priv after lock is held
possible deadlock in mon_bin_vma_fault 4 syz, C done 11427 2431d 2897d 15/29 2369d 19e6317d24c2 usb: mon: Fix a deadlock in usbmon between mmap and read
BUG: Bad rss-counter state (3) -1 syz, C unreliable done 438 2569d 3035d 15/29 2382d 173d9d9fd3dd mm/huge_memory: splitting set mapping+index before unfreeze
possible deadlock in flush_workqueue (2) 4 syz, C done done 256 2417d 2850d 15/29 2382d e7c58097793e hugetlbfs: revert "Use i_mmap_rwsem to fix page fault/truncate race"
KASAN: use-after-free Read in __queue_work (2) 19 syz, C done done 577 2600d 2954d 15/29 2406d 430ac66eb4c5 net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree()
KASAN: slab-out-of-bounds Write in pipe_write 21 syz, C done 40 2438d 2443d 15/29 2406d 8f868d68d335 pipe: Fix missing mask update after pipe_wait()
WARNING in tty_set_termios -1 syz, C done done 1997 2566d 2766d 15/29 2406d b36a1552d731 Bluetooth: hci_uart: check for missing tty operations
general protection fault in j1939_jsk_del 2 syz done 132 2446d 2470d 14/29 2445d fd81ebfe7975 can: j1939: socket: rework socket locking for j1939_sk_release() and j1939_sk_sendmsg()
INFO: task hung in synchronize_rcu 1 syz done 1206 2445d 2472d 14/29 2445d 8a44119a98be KVM: Fix NULL-ptr deref after kvm_create_vm fails
WARNING: suspicious RCU usage in kvm_dev_ioctl 4 syz, C done 333 2462d 2472d 14/29 2445d e2d3fcaf939d KVM: fix placement of refcount initialization
INFO: task hung in mpage_prepare_extent_to_map 1 syz done 18606 2469d 2477d 14/29 2445d 4655e5e5f387 mm,thp: recheck each page before collapsing file THP
WARNING in generic_make_request_checks -1 syz, C done 7760 2447d 2923d 13/29 2446d 8b2ded1c94c0 block: don't warn when doing fsync on read-only devices
memory leak in copy_net_ns 3 syz, C done 422 2473d 2511d 13/29 2452d 82ecff655e79 keys: Fix memory leak in copy_net_ns
general protection fault in kernfs_add_one 2 syz, C done 98 2561d 2884d 13/29 2452d ac43432cb1f5 driver core: Fix use-after-free and double free on glue directory
WARNING in kernfs_get -1 syz, C done 316 2562d 2891d 13/29 2454d ac43432cb1f5 driver core: Fix use-after-free and double free on glue directory
INFO: task hung in vivid_stop_generating_vid_cap 1 syz, C done done 81 2838d 2842d 13/29 2463d d65842f7126a media: vb2: add waiting_in_dqbuf flag
memory leak in llc_ui_create (2) 3 syz, C done 19 2487d 2606d 13/29 2470d c6ee11c39fcc llc: fix sk_buff leak in llc_sap_state_process()
BUG: assuming atomic context at net/kcm/kcmsock.c:LINE -1 syz, C done 178 2506d 2512d 13/29 2490d 0355d6c1d591 net-backports: kcm: disable preemption in kcm_parse_func_strparser()
WARNING: suspicious RCU usage in netem_enqueue 4 syz, C done 16 2508d 2522d 13/29 2490d 159d2c7d8106 net-backports: sch_netem: fix rcu splat in netem_enqueue()
general protection fault in __apic_accept_irq 2 syz, C done 69 2518d 2531d 13/29 2490d a073d7e3ad68 KVM: hyperv: Fix Direct Synthetic timers assert an interrupt w/o lapic_in_kernel
BUG: MAX_STACK_TRACE_ENTRIES too low! (2) -1 syz, C done 5045 2522d 2690d 13/29 2490d 12593b7467f9 locking/lockdep: Reduce space occupied by stack traces
general protection fault in qdisc_put 2 syz, C done 60 2518d 2528d 13/29 2490d 6efb971ba8ed net_sched: let qdisc_put() accept NULL pointer
INFO: rcu detected stall in addrconf_dad_work 1 syz, C done 126 2520d 2525d 13/29 2496d d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
INFO: rcu detected stall in br_handle_frame 1 syz, C done 341 2520d 2525d 13/29 2496d d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
INFO: rcu detected stall in mld_ifc_timer_expire 1 syz, C done 152 2520d 2528d 13/29 2496d d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
INFO: rcu detected stall in netlink_sendmsg (2) 1 syz, C done 11 2521d 2527d 13/29 2496d d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
WARNING: refcount bug in nr_insert_socket 13 syz, C done 55 2564d 2588d 13/29 2501d 4638faac0327 netrom: hold sock when setting skb->destructor
KASAN: null-ptr-deref Write in rxrpc_unuse_local 12 syz, C done 4422 2553d 2557d 12/29 2529d 68553f1a6f74 rxrpc: Fix local refcounting
WARNING in smc_unhash_sk (2) -1 syz, C done 1047 2539d 2675d 12/29 2539d cd2063604ea6 net/smc: avoid fallback in case of non-blocking connect
KASAN: slab-out-of-bounds Read in class_equal 17 syz done 45 2560d 2633d 12/29 2539d 95fa145479fb bpf: sockmap/tls, close can race with map free
general protection fault in tcf_ife_init 2 syz, C done 72 2561d 2575d 12/29 2539d c8ec4632c6ac ife: error out when nla attributes are empty
general protection fault in tls_sk_proto_close 2 syz done 260 2539d 2572d 12/29 2539d 5d92e631b8be net/tls: partially revert fix transition through disconnect with close
WARNING in debug_check_no_obj_freed -1 syz, C done 47 2540d 2607d 12/29 2539d f9cedf1a9b1c net/smc: do not schedule tx_work in SMC_CLOSED state
BUG: unable to handle kernel NULL pointer dereference in corrupted (4) 10 syz done done 1 2603d 2602d 12/29 2539d 95fa145479fb bpf: sockmap/tls, close can race with map free
kernel panic: corrupted stack end in corrupted 2 syz done 17 2560d 2607d 12/29 2539d 95fa145479fb bpf: sockmap/tls, close can race with map free
WARNING in __mark_chain_precision -1 syz, C done 105 2553d 2589d 12/29 2553d b3b50f05dc50 bpf: fix precision bit propagation for BPF_ST instructions
kernel BUG at drivers/android/binder_alloc.c:LINE! (4) -1 syz, C done 26 2602d 2609d 12/29 2561d bb4a2e48d510 binder: return errors from buffer copy functions
general protection fault in ovs_ct_exit 2 syz, C done 9888 2603d 2608d 12/29 2561d b272a0ad7301 netns: restore ops before calling ops_exit_list
possible deadlock in userfaultfd_release 4 syz, C done 137 2600d 2843d 12/29 2568d cbcfa130a911 fs/userfaultfd.c: disable irqs for fault_pending and event locks
WARNING: syz-executor still has locks held! -1 syz, C done 233 2804d 2815d 12/29 2573d a72173ecfc67 Revert "exec: make de_thread() freezable"
general protection fault in __smc_diag_dump 2 syz done 309 2763d 2776d 12/29 2587d b03faa1fafc8 net/smc: postpone release of clcsock
KASAN: slab-out-of-bounds Read in rhashtable_walk_enter 17 syz, C done 48 2637d 2641d 12/29 2603d 526f5b851a96 tipc: fix modprobe tipc failed after switch order of device registration
KASAN: use-after-free Read in napi_gro_frags 19 syz, C done 16 2628d 2629d 12/29 2609d a4270d6795b0 net-gro: fix use-after-free read in napi_gro_frags()
BUG: using __this_cpu_read() in preemptible code in ip6_finish_output 4 syz, C done 18807 2681d 2686d 12/29 2613d 28b05b928868 net: use correct this_cpu primitive in dev_recursion_level
WARNING: ODEBUG bug in netdev_freemem -1 syz done 1042 2613d 2778d 12/29 2613d a3c7cd0cdf11 batman-adv: mcast: fix multicast tt/tvlv worker locking
KASAN: use-after-free Read in __vb2_perform_fileio 19 syz, C done 786 2651d 2841d 12/29 2613d d65842f7126a media: vb2: add waiting_in_dqbuf flag
possible deadlock in acct_pin_kill 4 syz, C done 273 2656d 2873d 12/29 2613d 9419a3191dcb acct_on(): don't mess with freeze protection
WARNING in compat_copy_entries (2) -1 syz done 19416 2645d 3078d 12/29 2631d 7caa56f006e9 netfilter: ebtables: CONFIG_COMPAT: drop a bogus WARN_ON
WARNING in percpu_ref_kill_and_confirm -1 syz, C done 443 2660d 2666d 12/29 2631d 35fa71a030ca io_uring: fail io_uring_register(2) on a dying io_uring instance
general protection fault in skb_queue_tail 2 syz, C done 35 2664d 2666d 12/29 2631d 032be5f19a94 rxrpc: fix race condition in rxrpc_input_packet()
WARNING in __kthread_bind_mask -1 syz, C done 2929 2665d 2676d 12/29 2631d 060586324648 io_uring: park SQPOLL thread if it's percpu
WARNING in io_uring_setup -1 syz, C done 3601 2656d 2676d 12/29 2631d 917257daa0fe io_uring: only test SQPOLL cpu after we've verified it
general protection fault in xfrmi_decode_session 2 syz, C done 16694 2656d 2727d 12/29 2631d 6ed69184ed9c xfrm: Reset secpath in xfrm failure
BUG: MAX_STACK_TRACE_ENTRIES too low! -1 syz, C done 1725 2692d 2718d 11/29 2691d 009bb421b6ce workqueue, lockdep: Fix an alloc_workqueue() error path
general protection fault in __x86_indirect_thunk_rbx 2 syz, C done 16 2832d 2833d 11/29 2698d d6367d624137 fs/locks: use properly initialized file_lock when unlocking.
WARNING: bad usercopy in corrupted (2) -1 syz, C done 12 2768d 2814d 11/29 2699d bc6e019b6ee6 fou: Prevent unbounded recursion in GUE error handler also with UDP-Lite
net-next boot error: can't ssh into the instance -1 33 2749d 2751d 11/29 2714d 947b7ac135b1 Revert "block: cover another queue enter recursion via BIO_QUEUE_ENTERED"
BUG: unable to handle kernel NULL pointer dereference in corrupted (3) 10 syz, C 1 2771d 2771d 11/29 2714d 44039e00171b fou6: Prevent unbounded recursion in GUE error handler
net boot error: can't ssh into the instance -1 42 2749d 2751d 11/29 2714d 947b7ac135b1 Revert "block: cover another queue enter recursion via BIO_QUEUE_ENTERED"
upstream boot error: can't ssh into the instance (2) -1 45 2751d 2752d 11/29 2714d 947b7ac135b1 Revert "block: cover another queue enter recursion via BIO_QUEUE_ENTERED"
net build error -1 2 2877d 2878d 11/29 2778d 16fdf8ba9839 rds: Fix build regression.
unregister_netdevice: waiting for DEV to become free 2 syz, C 170521 2923d 3034d 8/29 2923d 8cc88773855f xfrm: fix missing dst_release() after policy blocking lbcast and multicast
WARNING: kernel stack regs has bad 'bp' value (3) -1 syz, C 7971 2955d 3110d 8/29 2953d b7b73cd5d746 crypto: x86/salsa20 - remove x86 salsa20 implementations
BUG: workqueue lockup (3) -1 syz, C 1215 2957d 3010d 8/29 2953d 4fb48871409e restore cond_resched() in shrink_dcache_parent()
WARNING: kernel stack frame pointer has bad value -1 syz, C 1108 2956d 3034d 8/29 2953d f044a84e040b crypto: don't optimize keccakf()
general protection fault in gfn_to_rmap 2 syz 7 3095d 3204d 5/29 3006d b7e31be38558 KVM: x86: fix vcpu initialization with userspace lapic
BUG: workqueue lockup (2) -1 syz, C 406 3013d 3171d 5/29 3011d 966031f34018 n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD)
WARNING in ata_qc_issue -1 syz, C 35 3190d 3209d 4/29 3061d 9173e5e80729 libata: remove WARN() for DMA or PIO command without data
WARNING in ata_bmdma_qc_issue -1 syz, C 1 3285d 3205d 4/29 3061d 2c1ec6fda2d0 libata: don't try to pass through NCQ commands to non-NCQ devices
KASAN: use-after-free Read in get_work_pool 19 syz 8 3187d 3209d 4/29 3061d 2cc683e88c0c kcm: lock lower socket in kcm_attach
BUG: unable to handle kernel paging request in ata_bmdma_qc_prep 8 syz, C 13 3196d 3205d 4/29 3061d 058f58e235cb libata: fix length validation of ATAPI-relayed SCSI commands
kernel BUG at arch/x86/kvm/x86.c:LINE! -1 syz 20 3176d 3209d 4/29 3073d 61cb57c9ed63 KVM: x86: Exit to user-mode on #UD intercept when emulator requires
lost connection to test machine (4) -1 syz, C 1189 3086d 3100d 4/29 3086d 9c2d63b843a5 bpf: fix mlock precharge on arraymaps
lost connection to test machine (3) -1 syz, C 4251 3108d 3147d 4/29 3108d 889c604fd0b5 netfilter: x_tables: fix int overflow in xt_alloc_table_info()
WARNING in task_participate_group_stop -1 syz, C 29 3190d 3205d 4/29 3111d 426915796cca kernel/signal.c: remove the no longer needed SIGNAL_UNKILLABLE check in complete_signal()
WARNING: kernel stack regs has bad 'bp' value (2) -1 syz, C 16238 3112d 3176d 4/29 3112d d8c7fe9f2a48 crypto: x86/twofish-3way - Fix %rbp usage
BUG: sleeping function called from invalid context at ./include/linux/uaccess.h:LINE -1 syz, C 19609 3179d 3204d 4/29 3117d 4d772cb85f64 KVM: x86: fix em_fxstor() sleeping while in atomic
possible deadlock in snd_seq_deliver_event 4 syz, C 6 3198d 3209d 4/29 3120d 1f20f9ff57ca ALSA: seq: Fix nested rwsem annotation for lockdep splat
kernel panic: softlockup: hung tasks 2 2 3247d 3217d 3/29 3167d 4ba161a793d5 SUNRPC: Allow connect to return EHOSTUNREACH
kernel BUG at net/key/af_key.c:LINE! -1 syz, C 63 3219d 3211d 3/29 3171d 0e74aa1d79a5 xfrm: Copy policy family in clone_policy
general protection fault in tun_flow_cleanup 2 1 3249d 3217d 3/29 3177d ee74d9967b82 tun: do not arm flow_gc_timer in tun_flow_init()
KASAN: slab-out-of-bounds Read in tipc_nametbl_lookup_dst_nodes 17 syz, C 22388 3189d 3211d 3/29 3177d f65163fed0e7 tipc: eliminate KASAN warning
possible deadlock in generic_file_write_iter 4 syz, C 61506 3177d 3200d 3/29 3177d e319e1fbd9d4 block, locking/lockdep: Assign a lock_class per gendisk used for wait_for_completion()
BUG: unable to handle kernel paging request in snd_seq_oss_readq_puts 8 syz, C 389 3197d 3203d 3/29 3187d 132d358b183a ALSA: seq: Fix OSS sysex delivery in OSS emulation
BUG: soft lockup -1 syz, C 466 3190d 3203d 3/29 3187d 9b7d869ee5a7 ALSA: timer: Limit max instances per timer
KASAN: use-after-free Write in __run_timers 22 6144 3214d 3274d 3/29 3194d 0ad646c81b21 net-backports: tun: call dev_get_valid_name() before register_netdevice()
BUG: workqueue lockup -1 syz, C 172 3194d 3205d 3/29 3194d 93161922c658 tun/tap: sanitize TUNSETSNDBUF input
general protection fault in __list_del_entry_valid 2 syz, C 72 3197d 3211d 3/29 3194d 1137b5e2529a ipsec: Fix aborted xfrm policy dump crash
kernel BUG at net/ipv4/tcp_output.c:LINE! -1 37 3253d 3266d 3/29 3197d b1ed4c4fa9a5 tcp: add an ability to dump and restore window parameters
WARNING in sk_stream_kill_queues -1 syz 96 3281d 3284d 3/29 3197d 7749d4ff88d3 net-backports: dccp: purge write queue in dccp_destroy_sock()
general protection fault in refcount_sub_and_test 2 1 3298d 3282d 3/29 3198d 12d94a804946 ipv6: fix NULL dereference in ip6_route_dev_notify()
WARNING in fib6_del -1 24 3259d 3273d 3/29 3199d 7483cea79957 ipv6: fib: Unlink replaced routes from their nodes
BUG: unable to handle kernel NULL pointer dereference in free_fib_info_rcu 10 3 3282d 3282d 3/29 3199d 187e5b3ac84d ipv4: fix NULL dereference in free_fib_info_rcu()
KASAN: use-after-free Read in ccid2_hc_tx_rto_expire 19 5 3276d 3281d 3/29 3199d 120e9dabaf55 dccp: defer ccid_hc_tx_delete() at dismantle time
KASAN: double-free or invalid-free in selinux_tun_dev_free_security 24 syz, C 12033 3275d 3285d 3/29 3199d ff244c6b29b1 tun: handle register_netdevice() failures properly
KASAN: use-after-free Read in dev_queue_xmit_nit 19 syz, C 13 3241d 3253d 3/29 3199d 008ba2a13f2d packet: hold bind lock when rebinding to fanout hook
general protection fault in kvm_cpuid 2 syz, C 20 3241d 3260d 3/29 3211d d1cd3ce90044 KVM: MMU: check guest CR3 reserved bits based on its physical address width.
KASAN: use-after-free Read in __list_add_valid 19 syz 26 3215d 3263d 3/29 3211d 008ba2a13f2d packet: hold bind lock when rebinding to fanout hook
BUG: unable to handle kernel paging request in skb_release_data 8 syz 15 3280d 3281d 3/29 3211d 0bbd7dad34f8 tun: make tun_build_skb() thread safe
general protection fault in skb_clone 2 syz 3 3280d 3280d 3/29 3211d 0bbd7dad34f8 tun: make tun_build_skb() thread safe
WARNING in __local_bh_enable_ip -1 22 3242d 3249d 3/29 3212d 930651a75bf1 bpf: do not disable/enable BH in bpf_map_free_id()
WARNING: kernel stack regs has bad 'bp' value -1 syz, C 66131 3240d 3285d 3/29 3212d d3dfbfe2e6e7 crypto: x86/sha256-avx2 - Fix RBP usage
kernel BUG at mm/slab.c:LINE! -1 syz, C 860 3259d 3263d 3/29 3212d 96e5ae4e76f1 bpf: fix numa_node validation
general protection fault in __skb_flow_dissect 2 syz, C 37 3282d 3284d 3/29 3212d 7324157b8af1 dsa: fix flow disector null pointer
KASAN: use-after-free Read in skb_push 19 4 3276d 3282d 3/29 3212d 5bfd37b4de5c tipc: fix use-after-free
possible deadlock in kcm_sendpage 4 syz 14 3264d 3267d 3/29 3212d 351050ecd652 kcm: do not attach PF_KCM sockets to avoid deadlock
KASAN: use-after-free Read in skb_release_data 19 syz 7 3281d 3281d 3/29 3212d 0bbd7dad34f8 tun: make tun_build_skb() thread safe
WARNING in refcount_inc -1 7 3265d 3273d 3/29 3212d 551143d8d954 net_sched: fix a refcount_t issue with noop_qdisc
BUG: Bad page state -1 syz, C 2 3281d 3282d 3/29 3212d 263630e8d176 mm/madvise.c: fix freeing of locked page with MADV_FREE
WARNING in idr_replace -1 syz, C 1209 3252d 3284d 3/29 3212d a47f68d6a944 idr: remove WARN_ON_ONCE() when trying to replace negative ID
KASAN: use-after-free Read in get_mm_exe_file 19 syz, C 2 3275d 3280d 3/29 3212d 2b7e8665b4ff fork: fix incorrect fput of ->exe_file causing use-after-free
general protection fault in perf_trace_block_get_rq 2 syz, C 180 3252d 3261d 3/29 3212d f8e9ec16611b block: tolerate tracing of NULL bio
KASAN: slab-out-of-bounds Read in skb_release_data 17 1 3280d 3280d 3/29 3212d 0bbd7dad34f8 tun: make tun_build_skb() thread safe
general protection fault in fib6_add 2 18 3276d 3282d 3/29 3212d 348a4002729c ipv6: repair fib6 tree in failure case
general protection fault in skb_release_data 2 syz 198 3280d 3281d 3/29 3212d 0bbd7dad34f8 tun: make tun_build_skb() thread safe
suspicious RCU usage at ./include/linux/kvm_host.h:LINE -1 syz, C 103402 3240d 3285d 3/29 3212d 021086e383fa KVM: fix rcu warning on VM_CREATE errors
KASAN: wild-memory-access Read in skb_copy_ubufs 17 syz, C 23 3280d 3281d 3/29 3212d 0bbd7dad34f8 tun: make tun_build_skb() thread safe
KASAN: use-after-free Read in ip6_pol_route 19 249 3275d 3283d 3/29 3212d 383143f31d7d ipv6: reset fn->rr_ptr when replacing route
KASAN: use-after-free Read in free_ldt_struct 19 syz, C 109 3269d 3283d 3/29 3212d ccd5b3235180 x86/mm: Fix use-after-free of ldt_struct
general protection fault in SyS_bpf 2 syz, C 10 3271d 3272d 3/29 3212d ae2b27b859a1 bpf: fix a return in sockmap_get_from_fd()
BUG: unable to handle kernel NULL pointer dereference at ADDR -1 syz, C 63 3269d 3283d 3/29 3212d 3fd871270732 strparser: initialize all callbacks
general protection fault in fib_dump_info 2 syz, C 428 3275d 3285d 3/29 3212d bc3aae2bbac4 net: check and errout if res->fi is NULL when RTM_F_FIB_MATCH is set
general protection fault in __ip_options_echo (2) 2 syz, C 2 3260d 3260d 3/29 3212d ca2c1418efe9 udp: drop head states only when all skb references are gone
INFO: task hung -1 syz, C 13878 3240d 3305d 3/29 3240d bd9dfc54e392 tcp: fix hang in tcp_sendpage_locked()
WARNING in kvm_arch_vcpu_ioctl_run -1 syz, C 20284 3240d 3305d 3/29 3240d bbeac2830f4d KVM: X86: Fix residual mmio emulation request to userspace
inconsistent lock state in sk_clone_lock 4 syz, C 16 3282d 3285d 2/29 3260d d624d276d1dd tcp: fix possible deadlock in TCP stack vs BPF filter
BUG: sleeping function called from invalid context at mm/slab.h:LINE -1 syz, C 8 3282d 3285d 2/29 3260d 36f41f8fc6d8 af_key: do not use GFP_KERNEL in atomic contexts
kernel BUG at mm/usercopy.c:LINE! -1 syz, C 23 3281d 3285d 2/29 3260d fd851ba9caa9 udp: harden copy_linear_skb()