Extra filters: [With Repro]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
KASAN: invalid-free in hci_req_sync_complete bluetooth 24 syz 179 770d 844d 1/29 never Bluetooth: Fix double free in hci_req_sync_complete
KASAN: slab-use-after-free Read in netdev_register_kobject (2) prio:high actionable kernel 19 3 69d 74d 1/29 never Bluetooth: bnep: pin L2CAP connection during netdev registration Bluetooth: bnep: pin L2CAP connection during netdev registration
INFO: rcu detected stall in kvm_vcpu_ioctl (4) prio:high kvm kvm-x86 1 syz, C error 8 7d22h 230d 1/29 never KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock
kernel BUG in xfs_buf_free prio:high xfs -1 24 12d 30d 25/29 never d852729c5f4f xfs: handle NULL b_addr in xfs_buf_free
KASAN: null-ptr-deref Write in sys_io_uring_register mm 12 syz, C done 15 611d 618d 1/29 never xarray-extract-helper-from-__xa_insertcmpxchg-fix
WARNING in res_to_rt rdma prio:low -1 syz 910 1d15h 6d05h 1/29 never RDMA/cma: Fix WARNING in res_to_rt
BUG: sleeping function called from invalid context in alloc_buffer_head mm 5 15 1188d 1193d 1/29 never workingset: add missing rcu_read_unlock() in lru_gen_refault()
possible deadlock in zd_chip_disable_rxtx usb wireless 4 syz, C 44 15d 2073d 2/29 never wifi: zd1211rw: reject secondary interfaces to prevent conflicts
WARNING in ieee80211_encrypt_tx_skb prio:low wireless -1 syz, C 4 14d 33d 2/29 never wifi: mac80211: don't encrypt pre-auth (ETH_P_PREAUTH) frames
KASAN: slab-out-of-bounds Read in ieee80211_ie_split_ric (3) prio:normal wireless 17 syz, C 2 17d 36d 27/29 never a2f5286ca4f3 wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie()
UBSAN: shift-out-of-bounds in squashfs_xz_comp_opts prio:high squashfs -1 syz, C error 4 140d 178d 2/29 never Squashfs: check xz dictionary size isn't zero
WARNING in virtio_transport_send_pkt_info (2) prio:high kvm net virt -1 syz, C error 4 16d 260d 1/29 never vsock/virtio: restore msg_iter on transmission failure
WARNING in iomap_write_begin xfs iomap -1 syz, C error 6 717d 731d 1/29 never vfs: Fix implicit conversion problem when testing overflow case
WARNING: lock held when returning to user space in lock_vma_under_rcu prio:high mm 4 1 153d 149d 2/29 never userfaultfd: fix lock leak in mfill_get_vma()
WARNING in folio_add_new_anon_rmap prio:high mm -1 syz, C error 14 153d 152d 2/29 never userfaultfd-introduce-struct-mfill_state-fix
WARNING in vcpu_run (2) prio:high kvm-x86 -1 syz, C error 5 25d 55d 1/29 never KVM: x86: Don't WARN if IRQ disappears because it was cleared from the PIC
general protection fault in usbtest_probe usb prio:low 8 syz, C 16 12d 17d 1/29 never usb: usbtest: disable dynamic ID support
KASAN: slab-use-after-free Read in trace_event_raw_event_udc_log_req usb 19 1 11d 8d10h 1/29 never usb: gadget: uvc: fix dangling pointers in uvc_function_bind() and uvc_function_unbind()
memory leak in uss720_probe prio:high usb 3 syz, C 3 3d19h 29d 2/29 never USB: misc: uss720: Fix leak in get_1284_register
general protection fault in uvcg_video_init usb prio:low 8 89 1d20h 17d 1/29 never usb: gadget: uvc: Fix null pointer dereference in uvcg_video_init()
possible deadlock in digi_set_modem_signals usb prio:high 4 syz, C error 6 5d12h 14d 2/29 never USB: serial: digi_acceleport: add port lock nesting annotation
memory leak in try_get_usb_function_instance usb prio:low 3 syz, C 1 5d05h 15d 1/29 never usb: gadget: midi2: remove default configfs groups on teardown
WARNING in hv_tlb_flush_enqueue prio:high kvm-x86 -1 syz, C 2 53d 53d 2/29 never KVM: x86/hyperv: Ensure vCPU's Hyper-V object is initialized on cross-vCPU accesses
WARNING in spcp8x5_get_msr prio:low usb -1 syz, C 33 2h25m 9d02h 2/29 never USB: serial: spcp8x5: drop broken carrier detect support
WARNING in __dev_queue_xmit (6) net prio:low -1 syz, C error 21 6d16h 4d11h 20/29 never 6bcd76c134c5 af_packet: Don't send zero-byte data in tpacket_snd().
possible deadlock in configfs_rmdir prio:low fs 4 syz, C error 1304 2h14m 17d 1/29 never usb: gadget: f_tcm: fix deadlock in usbg_make_tpg()
linux-next build error (26) -1 43 8d09h 59d 1/29 never apparmor: replace decompress_zstd() prototype with its entity
general protection fault in dummy_timer (2) prio:high usb 19 syz, C 96 18d 628d 28/29 never d5e5cd3654d2 usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback
KASAN: slab-out-of-bounds Read in usbatm_usb_disconnect prio:high usb 17 syz, C 19 24d 28d 28/29 never usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect
UBSAN: array-index-out-of-bounds in uea_bind usb prio:high 15 syz, C 85 6d16h 14d 2/29 never usb: atm: ueagle-atm: fix array-index-out-of-bounds in uea_bind()
WARNING in cxacru_cm/usb_submit_urb (3) usb prio:high -1 syz, C 86 1d05h 14d 14/29 never usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm()
KMSAN: uninit-value in bch2_alloc_sectors_start_trans (2) prio:high fs 7 syz 875 319d 485d 2/29 never bcachefs: Add missing ei_last_dirtied update
WARNING: kmalloc bug in memslot_rmap_alloc kvm-x86 -1 syz, C unreliable 3 1774d 1804d 1/29 never KVM: replace large kvmalloc allocation with vmalloc
KASAN: slab-use-after-free Read in cxacru_poll_status usb prio:high 19 syz 19 20h04m 14d 2/29 never usb: atm: cxacru: fix use-after-free in cxacru_poll_status
WARNING in udf_free_blocks (3) prio:high udf -1 syz, C error 5 51d 55d 2/29 never udf: avoid recursive s_alloc_mutex deadlock when freeing AED blocks
INFO: task hung in remove_inode_hugepages mm fs 1 syz, C done 52 675d 767d 1/29 never INFO: task hung in remove_inode_hugepages
general protection fault in __bch2_err_trace prio:normal fs 2 syz, C done 25 318d 374d 2/29 never bcachefs: Delete faulty read_only/nochanges check in fs_open()
WARNING in bch2_fs_journal_start prio:high fs -1 syz, C done 14 420d 440d 2/29 never bcachefs: Don't allow mounting with crazy numbers of dirty journal entries
WARNING in udf_open_lvid prio:low udf -1 syz, C 49 1d06h 88d 2/29 never udf: Mark LVID buffer as uptodate before marking it dirty
KCSAN: data-race in __fput / __tty_hangup (4) prio:low serial 6 9 24d 1211d 1/29 never tty: tty_io: fix race between tty_fops and hung_up_tty_fops
WARNING in closure_put_after_sub prio:high fs -1 2 370d 394d 2/29 never bcachefs: Ensure we don't return with closure on waitlist
BUG: unable to handle kernel paging request in __ftrace_set_clr_event_nolock trace prio:low 8 34 3d11h 4d01h 17/29 never tracing: Fix NULL pointer dereference in module event cache removal
KMSAN: uninit-value in sw842_compress (2) prio:high crypto 7 5 64d 69d 2/29 never tmpfs: zero unused folio tail for long symlinks
INFO: task hung in genl_rcv_msg (4) net 1 syz, C done 876 2h07m 681d 28/29 never 22f8aa35964e tipc: fix infinite loop in __tipc_nl_compat_dumpit
KASAN: slab-use-after-free Write in bch2_get_next_dev prio:high fs 22 syz, C 1331 298d 392d 2/29 never bcachefs: Fix UAF by journal write path
KASAN: slab-use-after-free Write in bch2_do_discards prio:high fs 22 syz 137 319d 389d 2/29 never bcachefs: Fix UAF by journal write path
KCSAN: data-race in hrtimer_interrupt / print_cpu (5) prio:low kernel 6 321 2d14h 981d 2/29 never timer_list: Annotate print_cpu() diagnostic reads
KCSAN: data-race in ktime_get_real_seconds / timekeeping_update_from_shadow (4) race:harmful prio:high kernel 6 4 45d 88d 1/29 never timekeeping: Use READ_ONCE/WRITE_ONCE() for xtime_sec to prevent tearing
KASAN: slab-use-after-free Read in ring_buffer_iter_advance trace prio:normal actionable 19 1 15d 11d 22/29 never bf98d7b0d5a9 ring-buffer: Prevent subbuf order change when resizing is disabled
KASAN: use-after-free Read in check_dirent fs 19 syz, C done 13 357d 539d 2/29 never bcachefs: Fix UAF in check_dirent()
WARNING in __rt_mutex_slowlock_locked (3) prio:normal ocfs2 -1 syz, C error 3 54d 55d 2/29 never ocfs2: use inode_lock_nested() for orphan dir locking
KASAN: use-after-free Read in ocfs2_search_dirblock ocfs2 19 syz, C inconclusive 14 582d 728d 1/29 never ocfs2: fix directory entry check in ocfs2_search_dirblock()
KASAN: use-after-free Read in bch2_check_dirents fs 19 syz, C done 769 318d 637d 2/29 never bcachefs: Fix UAF in check_dirent()
possible deadlock in ocfs2_init_acl prio:high ocfs2 4 syz, C inconclusive 31475 4h10m 722d 1/29 never ocfs2: fix circular locking dependency in ocfs2_init_acl()
KASAN: slab-out-of-bounds Read in __bch2_alloc_to_v4 prio:high fs 17 20 406d 404d 2/29 never bcachefs: Fix __bch2_alloc_to_v4 copy
kernel BUG in __journal_res_get (3) prio:high fs -1 syz, C inconclusive 175 298d 422d 2/29 never bcachefs: Fix __bch2_fs_read_write() error path
possible deadlock in ocfs2_acquire_dquot prio:high ocfs2 4 syz, C 71841 241d 684d 2/29 never ocfs2: fix circular locking dependency in ocfs2_acquire_dquot
kernel BUG in link_path_walk prio:high ocfs2 -1 syz, C error 20788 8m 254d 2/29 never ocfs2: do not use make_bad_inode() in ocfs2_read_inode_block_full()
WARNING in nvmet_fc_register_targetport nvme prio:high -1 C 2 1d17h 3d01h 0/29 never nvmet-fc: fix invalid free in LS IOD error path
KMSAN: kernel-infoleak in filemap_read prio:high block 18 syz, C 9090 59d 944d 1/29 never ntfs3: fix info-leak in ntfs_rename()
KMSAN: uninit-value in nci_dev_up (3) prio:high net nfc 7 1 92d 88d 2/29 never nfc: nci: fix use of uninitialized memory in CORE_INIT_RSP parsing
WARNING in netfs_writepages (3) prio:high netfs -1 syz, C 12 18d 39d 26/29 never 1d78d56c43ef netfs: Fix folio_queue ENOMEM in writeback by adding a mempool
WARNING in bch2_dev_free (2) prio:low fs -1 syz, C done 5 388d 393d 2/29 never bcachefs: Fix __bch2_fs_read_write() error path
WARNING in nf_flow_offload_ip_hook netfilter prio:normal -1 syz, C done 9 11d 10d 25/29 never 8aecf0bbcc72 netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()
kernel panic: in transaction restart: transaction_restart_relock, last restarted by prio:high fs 2 5 380d 380d 2/29 never bcachefs: Fix incorrect transaction handling
KMSAN: uninit-value in bch2_check_subvols prio:high fs 7 syz, C 53 320d 409d 2/29 never bcachefs: Fix missing compat code in check_subvol()
INFO: task hung in remove_one prio:low kernel 1 syz error 276 1d13h 585d 1/29 never netdevsim: drop the ability to change max_vfs via debugfs
KMSAN: uninit-value in rtl8150_open (2) prio:high net usb 7 5 74d 142d 3/29 never net: usb: rtl8150: handle link status read failures
memory leak in udp_tunnel_nic_netdevice_event prio:high net 3 syz, C 6 21d 21d 27/29 never 080695e6f005 net: udp_tunnel: fix memory leak in udp_tunnel_nic_unregister()
KASAN: slab-out-of-bounds Write in bch2_dirent_init_name prio:high fs 21 syz, C error 1496 298d 423d 2/29 never bcachefs: Fix padding zeroout when creating casefolded dirents
KMSAN: uninit-value in steam_register prio:high input usb 7 3 69d 66d 1/29 never HID: steam: Reject short reads
WARNING in sk_mc_loop net prio:low -1 3 9d23h 10d 25/29 never b8a39a09ae4e net: remove WARN_ON_ONCE() from sk_mc_loop()
memory leak in vlan_vid_add prio:normal net 3 syz, C 1 24d 38d 28/29 never dcf15eaf5641 net: hsr: fix memory leak on slave unregistration by removing synced VLANs
INFO: task hung in invalidate_inode_pages2_range (3) prio:high fs 1 syz, C done 57 66d 532d 2/29 never bcachefs: Fix readahead involved deadlock
KASAN: slab-use-after-free Write in snd_usb_midi_v2_free sound prio:high 22 246 2h30m 10d 11/29 never ALSA: usb: Fix UAF at delayed release of MIDI2 EPs
WARNING in netdev_queue_get_dma_dev net prio:low -1 syz, C 272 7h08m 10d 20/29 never 92465f46f3c3 net: expect instance lock in netdev_queue_get_dma_dev()
KASAN: slab-out-of-bounds Read in copy_from_sockptr prio:high net 17 syz 25 4d11h 10d 25/29 never d0c80dbb9704 net/atm: fix slab-out-of-bounds read in vcc_setsockopt()
kernel BUG in mfill_atomic_copy mm -1 syz, C error 3 1131d 1127d 1/29 never mm: userfaultfd: check for start + len overflow in validate_range: fix
KASAN: slab-use-after-free Read in move_pages_pte mm 19 syz, C done 3 617d 615d 1/29 never mm: pgtable: make ptlock be freed by RCU
kernel BUG in vma_replace_policy mm -1 syz, C done 6 1065d 1074d 1/29 never mm: lock VMAs skipped by a failed queue_pages_range()
WARNING in folio_memcg prio:low mm -1 syz, C done 3851 242d 725d 1/29 never mm: kmem: fix split_page_memcg()
general protection fault in follow_pfnmap_start kernel 2 syz, C 38 668d 682d 1/29 never mm: fix null pointer dereference in pfnmap_lockdep_assert
WARNING in follow_pte kernel -1 syz, C 230 692d 772d 1/29 never mm: fix mmap_assert_locked() in follow_pte()
WARNING in handle_userfault mm -1 syz, C error 71 1129d 1136d 1/29 never mm: fix a lockdep issue in vma_assert_write_locked
KASAN: slab-use-after-free Read in handle_mm_fault mm 19 syz, C done 107 756d 759d 1/29 never mm: check for VM_DROPPABLE in vma prior to handling mm fault
INFO: task hung in bch2_readahead prio:high fs 1 syz, C done 375 335d 816d 2/29 never bcachefs: Fix readahead involved deadlock
KASAN: slab-out-of-bounds Read in shrink_folio_list mm 19 syz, C 683 1131d 1132d 1/29 never mm: call folio_mapping() inside folio_needs_release()
INFO: task hung in bchfs_fallocate (2) fs 1 syz, C done inconclusive 6 362d 590d 2/29 never bcachefs: Fix readahead involved deadlock
WARNING in va_alloc mm prio:high -1 7 12d 14d 1/29 never mm/vmalloc: do not warn on -ENOMEM from va_alloc()
KASAN: use-after-free Read in ptdump_pte_entry (2) actionable prio:normal mm 19 1 72d 66d 26/29 never 26444eb71465 mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF
WARNING in folio_lruvec_lock prio:high mm cgroups -1 1 425d 421d 2/29 never mm/vma: correctly invoke late KSM check after mmap hook
WARNING in __page_table_check_ptes_set (3) prio:low mm -1 syz, C 13 43d 274d 2/29 never mm/userfaultfd: clear uffd-wp PTE state when re-registering without WP
kernel BUG in swap_cgroup_record (2) prio:high mm cgroups -1 syz, C error 227 213d 217d 2/29 never mm/swap_cgroup: fix kernel BUG in swap_cgroup_record
KCSAN: data-race in shmem_fallocate / shmem_fault (9) prio:low mm 6 125 7d23h 666d 2/29 never mm/shmem: fix data-race in shmem_fault
INFO: task hung in bch2_page_fault prio:high ext4 exfat ntfs3 1 syz done 42 359d 609d 2/29 never bcachefs: Fix readahead involved deadlock
possible deadlock in xfs_dquot_disk_alloc (2) prio:high xfs 4 2 37d 33d 1/29 never xfs: restore nofs context unconditionally in xfs_trans_roll
KCSAN: data-race in shmem_getattr / shmem_recalc_inode prio:low mm 6 236 4d03h 771d 2/29 never mm/shmem: annotate benign data-race in shmem_getattr()
KASAN: slab-use-after-free Read in mremap mm 19 syz, C done 122 360d 363d 2/29 never mm/mremap: do not incorrectly reference invalid VMA in VM_WARN_ON_ONCE()
general protection fault in vma_interval_tree_remove mm 10 syz, C done 14 807d 1565d 1/29 never mm/mmap: fix advanced maple tree API for mmap_region() mm/mmap: qvoid dereferencing next on null in BUG_ON()
WARNING in vma_merge mm -1 syz, C done 18115 991d 1570d 1/29 never mm/mlock: use maple state in apply_mlockall_flags()
linux-next boot error: WARNING in prepare_kswapd_sleep mm -1 15 2088d 2089d 1/29 never mm/memcg: warn on missing memcg on mem_cgroup_page_lruvec()
INFO: task hung in bchfs_fpunch (2) prio:high fs mm 1 syz, C done 2 372d 416d 2/29 never bcachefs: Fix readahead involved deadlock
BUG: sleeping function called from invalid context in procfs_procmap_ioctl fs 5 syz done 101 406d 408d 2/29 never mm/maps: move kmalloc() call location in do_procmap_query() out of RCU critical section
KASAN: slab-use-after-free Read in hidraw_report_event prio:high input usb 19 syz, C error 4 109d 109d 1/29 never HID: core: quiesce input in hid_hw_stop() to prevent use-after-free hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop
linux-next test error: WARNING in vma_merge mm -1 6 1297d 1298d 1/29 never mm/madvise: fix VMA_ITERATOR start position
INFO: task hung in pipe_release (6) prio:high kernfs 1 syz done 20 69d 533d 2/29 never bcachefs: Fix readahead involved deadlock
WARNING in asus_remove prio:low input usb -1 syz, C 270 5h02m 197d 2/29 never HID: asus: Add check for cancelling fn_lock_sync_work
possible deadlock in collapse_file mm 4 syz, C done 189 1258d 1259d 1/29 never mm/khugepaged: fix vm_lock/i_mmap_rwsem inversion in retract_page_tables
KMSAN: uninit-value in __bch2_alloc_v4_to_text prio:high fs 7 syz, C 3 418d 423d 2/29 never bcachefs: Fix refs to undefined fields in __bch2_alloc_v4_to_text()
kernel BUG in collapse_file (3) mm -1 syz, C done 14 1117d 1124d 1/29 never mm/khugepaged: collapse_pte_mapped_thp() with mmap_read_lock(): fix
KASAN: slab-use-after-free Read in madvise_collapse mm 19 syz, C error 5 1118d 1118d 1/29 never mm/khugepaged: collapse_pte_mapped_thp() with mmap_read_lock(): fix
BUG: unable to handle kernel paging request in alloc_huge_page mm 8 syz, C unreliable 491 1827d 1826d 1/29 never mm/hugetlb: Initialize page to NULL in alloc_buddy_huge_page_with_mpol()
kernel BUG in bch2_fill_extent (2) prio:high fs -1 10 313d 395d 2/29 never bcachefs: Fix unhandled key type in fiemap_fill_extent
UBSAN: array-index-out-of-bounds in bch2_accounting_validate prio:high fs 15 syz, C done 23 308d 375d 2/29 never bcachefs: Ignore accounting key type larger than BCH_DISK_ACCOUNTING_TYPE_NR
general protection fault in shmem_mapping mm 2 syz, C done 17 544d 546d 1/29 never mm/huge_memory: do not drop the original folio during truncate
WARNING in bchfs_truncate fs -1 syz, C done 366 322d 832d 2/29 never bcachefs: Increase BCH_MIN_NR_NBUCKETS
INFO: task hung in __closure_sync prio:high fs 1 syz, C done 8591 306d 833d 2/29 never bcachefs: Increase BCH_MIN_NR_NBUCKETS
KASAN: use-after-free Read in jfs_lazycommit prio:high jfs 19 syz, C error 4227 5h54m 1413d 0/29 never From 7e1a0b91e9efa8bec40fc5397ba6c4e683d72df0 Mon Sep 17 00:00:00 2001
WARNING in vmap_pages_range_noflush (2) net bpf -1 syz, C error 250 1452d 1454d 1/29 never mm/gup.c: Fix return value for __gup_longterm_locked()
general protection fault in vma_is_shmem mm io-uring 2 syz, C error 28 1453d 1454d 1/29 never mm/gup.c: Fix return value for __gup_longterm_locked()
WARNING in page_add_anon_rmap mm -1 syz, C done 1041 1060d 1061d 1/29 never mm-rmap-simplify-pageanonexclusive-sanity-checks-when-adding-anon-rmap-fix
INFO: task hung in bch2_copygc_stop prio:high kernel 1 syz, C done 31386 306d 805d 2/29 never bcachefs: Increase BCH_MIN_NR_NBUCKETS
INFO: task hung in __bch2_fs_stop prio:high fs 1 syz, C done 1589 315d 790d 2/29 never bcachefs: Increase BCH_MIN_NR_NBUCKETS
kernel BUG in bch2_btree_repair_topology_recurse prio:high fs -1 syz, C done 7 319d 379d 2/29 never bcachefs: btree_check_root_boundaries()
kernel BUG in folio_flags mm -1 66 23d 1310d 1/29 never mm-reimplement-compound_nr-fix
KASAN: slab-use-after-free Read in finish_fault mm 19 syz, C done 8 790d 792d 1/29 never mm-memory-extend-finish_fault-to-support-large-folio-fix
KASAN: slab-use-after-free Read in do_sync_mmap_readahead prio:high mm 19 syz, C done 3 419d 422d 2/29 never mm-filemap-allow-arch-to-request-folio-size-for-exec-memory-fix
linux-next test error: kernel BUG in folio_add_new_anon_rmap mm -1 2 675d 675d 1/29 never mm-add-pageanonnotksm-fix
linux-next boot error: WARNING in kmem_cache_free fs -1 45 2241d 2244d 1/29 never mm, slab/slub: improve error reporting and overhead of cache_from_obj()-fix
KASAN: slab-use-after-free Write in bt_accept_dequeue prio:high actionable bluetooth 22 3 56d 56d 1/29 never Bluetooth: fix UAF in bt_accept_dequeue() Bluetooth: fix UAF in bt_accept_dequeue()
kernel BUG in bch2_printbuf_exit prio:high fs -1 syz, C error 29 389d 393d 2/29 never bcachefs: convert str_hash.c to CLASS
WARNING: suspicious RCU usage in mas_walk (3) mm 4 syz, C done 12 1025d 1039d 1/29 never mempolicy: migration attempt to match interleave nodes: fix
WARNING in set_mm_walk prio:high mm -1 C 2 2d13h 4d01h 1/29 never memcg: make the v1 soft limit knob inert
KASAN: use-after-free Read in em28xx_init_extension (2) prio:high usb media 19 syz, C done 1461 9d12h 1598d 1/29 never media: em28xx: fix use-after-free of dev_next->devlist on disconnect
KASAN: use-after-free Read in em28xx_close_extension (2) prio:high usb media 19 syz, C error 17 11d 694d 1/29 never media: em28xx: defer audio-only extension registration
memory leak in vidtv_psi_registration_desc_init prio:high media 3 syz, C 2 25d 31d 1/29 never media: dvb-core: fix feed leak on failed DMX_ADD_PID
WARNING: ODEBUG bug in cec_transmit_msg_fh prio:high media -1 5 30d 57d 2/29 never media: cec: disable delayed work before freeing an interrupted transmit
WARNING in bch2_verify_accounting_clean prio:high fs -1 29 302d 552d 2/29 never bcachefs: do_bch2_trans_commit_to_journal_replay handles accounting
memory leak in l2tp_tunnel_create (2) net prio:high 3 syz, C 1 8d18h 7d09h 20/29 never 9006c116dd11 l2tp: fix tunnel and session refcount leak on seq_file release
memory leak in inet_create (3) net prio:high 3 syz, C 1 6d03h 6d02h 20/29 never 9006c116dd11 l2tp: fix tunnel and session refcount leak on seq_file release
possible deadlock in lock_timer_base trace bpf 4 syz, C 142 576d 2049d 1/29 never kfence: fix potential deadlock due to wake_up()
WARNING in kcov_remote_start (6) kernel prio:low -1 42315 11m 648d 1/29 never kcov: fix data corruption and race conditions on PREEMPT_RT by moving saved remote state to task_struct
KASAN: vmalloc-out-of-bounds Read in kcov_remote_start prio:normal bluetooth usb 17 3566 45m 313d 1/29 never kcov: fix data corruption and race conditions on PREEMPT_RT by moving saved remote state to task_struct
KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop prio:normal usb 17 490 17m 311d 1/29 never kcov: fix data corruption and race conditions on PREEMPT_RT by moving saved remote state to task_struct
kernel BUG in do_bch2_trans_commit_to_journal_replay prio:normal fs -1 syz 22 387d 390d 2/29 never bcachefs: do_bch2_trans_commit_to_journal_replay handles accounting
WARNING in kcov_task_exit prio:low kernel -1 22515 11m 313d 1/29 never kcov: fix data corruption and race conditions on PREEMPT_RT by moving saved remote state to task_struct
linux-next boot error: BUG: unable to handle kernel NULL pointer dereference in mempool_init_node ceph fs -1 12 2101d 2102d 1/29 never kasan-simplify-kasan_poison_kfree-temp-fix
KASAN: slab-use-after-free Read in ipvlan_hard_header (5) net prio:high 19 1 15d 10d 20/29 never e16e960d55a4 ipvlan: inherit needed_headroom and needed_tailroom from phy_dev
WARNING in rcu_note_context_switch (5) prio:low net -1 syz, C error 10 33d 231d 28/29 never 313a123e1fca ipv6: Change allocation flags to match rcu_read_lock section requirements
KASAN: slab-use-after-free Read in ip6gre_tunnel_xmit prio:high net 19 syz, C error error 33 225d 633d 0/29 never ip6_gre: use skb_vlan_inet_prepare() instead of pskb_inet_may_pull()
INFO: task hung in io_sq_thread_stop fs io-uring 1 syz, C done 211 2006d 2165d 1/29 never io_uring: don't sleep schedule in SQPOLL thread if we need to park
KASAN: use-after-free Read in __vma_adjust mm 19 syz, C done 10 1468d 1524d 1/29 never fs/userfaultfd: fix vma iteration in mas_for_each() loop
KASAN: wild-memory-access Read in md5_update prio:high crypto 17 syz, C done 8 342d 342d 2/29 never fixup: mm/gup: remove record_subpages()
KASAN: null-ptr-deref Read in io_sqe_buffer_register prio:high io-uring 11 syz, C done 54 340d 344d 2/29 never fixup: mm/gup: remove record_subpages()
kernel BUG in bch2_btree_path_peek_slot prio:low fs -1 syz, C error error 1546 445d 623d 2/29 never bcachefs: fix assert in bch2_btree_path_traverse_cached()
KASAN: use-after-free Read in check_extent_overbig prio:high fs 19 syz, C done done 18 335d 617d 2/29 never bcachefs: fix check_extent_overbig() call
linux-next boot error: kernel BUG at include/linux/page-flags.h:LINE! mm -1 3 2080d 2080d 1/29 never fixup for "mm: refactor initialization of stuct page for holes"
general protection fault in ar_context_release linux1394 prio:high 2 syz, C 8 10d 8d10h 19/29 never 42d217add8d8 firewire: ohci: fix NULL pointer dereference in ar_context_release
KASAN: global-out-of-bounds Read in soft_cursor (3) fbdev 19 18 2h20m 8d02h 22/29 never e033cbf3975a fbdev: bitblit: bound-check glyph index in bit_cursor()
WARNING in bch2_prt_printf prio:high fs -1 syz, C done error 103 321d 826d 2/29 never bcachefs: journal_entry_btree_keys_to_text() is more careful
INFO: trying to register non-static key in f2fs_exist_written_data prio:high f2fs -1 syz, C error 152 88d 98d 2/29 never f2fs: initialize ino_entry_info before checkpoint load
general protection fault in bch2_prt_vprintf fs 2 syz, C error inconclusive 4 586d 623d 2/29 never bcachefs: journal_entry_btree_keys_to_text() is more careful
kernel BUG in f2fs_abort_atomic_write f2fs -1 syz 2 1276d 1320d 1/29 never f2fs: fix to avoid race condition of f2fs_abort_atomic_write()
BUG: unable to handle kernel NULL pointer dereference in set_page_dirty f2fs 10 syz, C 317 735d 1450d 1/29 never f2fs: fix missing mapping caused by the mount/umount race
WARNING in super_dev_register prio:normal fuse -1 syz, C 10 40d 43d 2/29 never block: reject block device inodes with i_rdev == 0 in lookup_bdev()
KMSAN: uninit-value in erspan_build_header (2) net 7 syz, C 346 69d 875d 1/29 never bpf: Don't redirect too small packets
KASAN: slab-use-after-free Read in __ext4_check_dir_entry prio:high ext4 19 syz, C error error 7 8d00h 410d 1/29 never ext4: validate readdir offset before accessing dirent
KMSAN: uninit-value in batadv_get_vid (2) batman 7 syz, C 1212 58d 955d 1/29 never bpf: Don't redirect too small packets
WARNING in ext4_xattr_inode_update_ref (2) prio:low ext4 -1 syz, C error 14881 8m 288d 1/29 never ext4: validate EA inode i_nlink in ext4_xattr_inode_iget
INFO: task hung in do_rmdir (7) prio:high kernfs 1 syz, C error error 3 212d 223d 1/29 never ext4: stop retrying saturated xattr cache entries
INFO: task hung in exit_mmap (2) prio:low mm 1 syz, C done error 59 115d 476d 2/29 never bpf: Fix mmap_lock leak in irq_work path
possible deadlock in wait_transaction_locked (3) prio:high ext4 4 syz, C error 872 3h39m 227d 1/29 never ext4: skip extra isize expansion during mount to prevent deadlock
possible deadlock in ext4_evict_inode (5) prio:high ext4 4 syz, C error 585 1d12h 282d 1/29 never ext4: fix circular lock dependency in ext4_ext_migrate
possible deadlock in br_multicast_rcv (3) bridge 4 syz, C done error 76 21d 1306d 2/29 never bridge: mcast: Fix a false positive lockdep splat
KASAN: slab-out-of-bounds Read in l2cap_sock_setsockopt (2) bluetooth prio:high 19 2 15d 21d 1/29 never Bluetooth: L2CAP: access chan->conn safely in get/setsockopt
kernel BUG in btrfs_alloc_ordered_extent prio:high btrfs -1 syz, C error 280 13h09m 53d 1/29 never btrfs: always wait for ordered extents to avoid OE races
KASAN: use-after-free Read in p9_req_put v9fs 19 339 4d16h 1458d 1/29 never 9p: p9_client_create: use p9_client_destroy on failure
UBSAN: array-index-out-of-bounds in snd_dummy_probe sound prio:normal 15 syz, C 14 10d 9d03h 1/29 never ALSA: dummy: Check card index validity at probe
kernel BUG in free_bprm fs mm -1 syz, C done 445 646d 647d 1/29 never exec: NULL out bprm->argv0 when it is an ERR_PTR
possible deadlock in snd_rawmidi_kernel_open sound prio:high 4 11 21h56m 16d 1/29 never ALSA: rawmidi: Work around false-positive mutex lockdep warning
KASAN: null-ptr-deref Read in l2cap_chan_hold_unless_zero bluetooth prio:high 11 syz, C 8 7d06h 25d 1/29 never Bluetooth: L2CAP: fix race l2cap_sock_cleanup_listen() vs. put_chan
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb (2) prio:high bluetooth 19 syz error 134 3d21h 682d 1/29 never Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN
KASAN: slab-use-after-free Read in l2cap_disconn_ind (3) prio:high bluetooth 19 2 18d 93d 2/29 never Bluetooth: L2CAP: use proto_lock for l2cap_data to fix l2cap_disconn_ind
general protection fault in comedi_get_is_subdevice_running prio:low comedi 2 1 89d 85d 28/29 never 17221216ae8c comedi: comedi_parport: deal with premature interrupt
WARNING in update_curr_idle prio:high kernel -1 188 52d 63d 0/29 never c095741713d1 sched/fair: Fix newidle vs core-sched
WARNING in btrfs_add_delayed_iput (3) prio:low btrfs -1 5 4d03h 73d 1/29 never btrfs: fix pending delayed iputs when using autodefrag
KASAN: slab-use-after-free Read in close_fs_devices prio:high btrfs 19 22 410d 414d 2/29 never btrfs: fix a use-after-free race if btrfs_open_devices() failed
INFO: task hung in __writeback_inodes_sb_nr (6) prio:high jfs 1 syz, C done 4176 37d 1155d 1/29 never PM: hibernate: Fix block device handling in test_resume mode
WARNING in release_mtd_partition (2) mtd -1 syz, C 304 28d 416d 29/29 6d06h 9d4af746af8c mtd: fix double free and WARN_ON in add_mtd_device() error paths
general protection fault in __schedule (3) prio:low sound 2 1649 16d 63d 29/29 6d06h sched/fair: Fix newidle vs core-sched
divide error in mac80211_hwsim_write_tsf prio:normal wireless 2 1 57d 53d 29/29 6d06h 23b493d9dc5f wifi: mac80211_hwsim: avoid treating MCS as legacy rate index
WARNING in btrfs_force_cow_block prio:high btrfs -1 4 56d 55d 29/29 6d06h ae4316f332e0 btrfs: do not try compression for data reloc inodes
KASAN: slab-use-after-free Write in btrfs_put_root prio:high actionable btrfs 22 4 62d 73d 29/29 6d06h 83201804efa4 btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol()
KASAN: stack-out-of-bounds Read in xfrm_state_find (6) prio:high net 17 2 51d 50d 29/29 6d06h ea528f18231e xfrm: reject optional IPTFS templates in outbound policies
WARNING in add_mtd_device mtd prio:low -1 syz, C 14 28d 55d 29/29 6d06h ae9d8058f132 mtd: mtdpart: fix uninitialized erasesize on MTDPART_OFS_RETAIN error path a74e31d0a2d5 mtd: mtdpart: validate partition bounds in mtd_add_partition()
kernel BUG in gfs2_jindex_free (2) prio:high gfs2 -1 syz, C error error 1398 122d 427d 29/29 11d bb47cce7a1ee gfs2: gfs2_log_flush withdraw fixes
WARNING in kernfs_new_node (3) prio:high kernfs -1 syz error error 54 60d 725d 29/29 16d e2674dfbed8a usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect()
KASAN: slab-use-after-free Read in debugfs_u32_get (2) prio:normal fs 19 syz 1 48d 58d 29/29 16d 2e996ca81f95 netdevsim: remove ethtool debugfs files before freeing netdev
KASAN: slab-use-after-free Read in kernfs_root prio:high kernfs 19 37 41d 437d 29/29 16d e2674dfbed8a usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect()
general protection fault in ieee802154_release_queue prio:high wpan 2 1 50d 46d 29/29 16d 539dfcf69105 mac802154: remove interfaces with RCU list deletion
general protection fault in mtree_load prio:low trace 2 syz, C 3 45d 53d 29/29 16d 169328645663 uprobes/x86: Use proper mm_struct in __in_uprobe_trampoline
KASAN: slab-use-after-free Read in netfs_unbuffered_write prio:high netfs 19 syz, C 8 45d 77d 29/29 16d 64f04f978923 netfs: Fix DIO write retry for filesystems without a ->prepare_write()
KASAN: slab-use-after-free Write in iowarrior_write_callback (2) actionable prio:high usb 22 1 99d 87d 29/29 16d bc0e4f16c44e USB: iowarrior: fix use-after-free on disconnect
WARNING in ublk_ch_batch_io_uring_cmd prio:high block -1 1 50d 46d 29/29 16d f01f5275feb7 ublk: snapshot batch commands before preparing I/O
KMSAN: uninit-value in xlog_verify_head prio:high xfs 7 1 138d 134d 29/29 16d cc9af5e461ea xfs: use null daddr for unset first bad log block
possible deadlock in ext4_xattr_inode_lookup_create prio:high ext4 4 syz, C done error 287 85d 685d 29/29 24d 7f473f971382 ext4: lockdep: handle i_data_sem subclassing for special inodes
BUG: sleeping function called from invalid context in netif_rx_mode_run prio:normal net 5 1 81d 77d 29/29 24d 5eec4427b89c bridge: Fix sleep in atomic context in netlink path
KMSAN: kernel-infoleak in irqentry_exit (2) kernel prio:high 9 11110 25d 26d 29/29 25d 6d99479799c6 rseq: Fix using an uninitialized stack variable in rseq_exit_user_update()
KASAN: slab-use-after-free Read in bnep_add_connection actionable prio:normal bluetooth 19 1 87d 80d 29/29 29d 59e932ded949 Bluetooth: bnep: Fix UAF read of dev->name
general protection fault in xdp_master_redirect prio:low bpf net 2 1 74d 74d 29/29 30d net, bpf: check master for NULL in xdp_master_redirect()
KMSAN: uninit-value in hfsplus_bnode_find prio:high hfs 7 syz, C 24 58d 122d 29/29 30d d67aadee19ff hfs/hfsplus: zero-initialize buffer in hfs_bnode_read 3f95e2661574 hfsplus: Add a sanity check for btree node size
WARNING in dma_resv_add_fence prio:high media dri -1 syz, C 7 94d 99d 29/29 30d 9af1b6e175c8 drm/virtio: use uninterruptible resv lock for plane updates drm/virtio: use uninterruptible resv lock for plane updates
WARNING: refcount bug in nsim_fib_event_nb (3) prio:normal net 13 10 59d 65d 29/29 30d 06b693d2eb66 ipv4: fib: Don't dump dying fib_info in fib_leaf_notify().
WARNING in __ethtool_get_link_ksettings net prio:high -1 5 53d 54d 29/29 30d cd1c188db109 vlan: defer real device state propagation to netdev_work
INFO: task hung in netdev_rx_mode_work prio:high net 1 44 50d 53d 29/29 30d cd1c188db109 vlan: defer real device state propagation to netdev_work
possible deadlock in assign_fw usb 4 syz, C done 185 64d 768d 29/29 30d d3ec78f8f8d4 firmware_loader: Fix recursive lock in device_cache_fw_images()
possible deadlock in rhashtable_free_and_destroy prio:high mm 4 8 94d 115d 29/29 30d 060d4e94b8d4 rhashtable: give each instance its own lockdep class
UBSAN: array-index-out-of-bounds in ocfs2_dx_dir_lookup_rec prio:high ocfs2 15 1 88d 84d 29/29 30d 6371a07148ee ocfs2: fix buffer head management in ocfs2_read_blocks()
KASAN: slab-use-after-free Read in z_erofs_decompress_kickoff prio:high erofs 19 2 81d 103d 29/29 30d 1aee05e814d2 erofs: fix use-after-free on sbi->sync_decompress
general protection fault in jbd2_journal_dirty_metadata (2) prio:high ext4 2 syz, C error 28 61d 102d 29/29 30d 8fc197cf366b jbd2: check for aborted handle in jbd2_journal_dirty_metadata()
INFO: task hung in btrfs_invalidate_folio (4) prio:high btrfs 1 syz, C error 7 80d 80d 29/29 30d 532085d00eb5 btrfs: fix deadlock cloning inline extent when using flushoncommit
kernel BUG in ext4_write_inline_data_end (2) ext4 -1 syz, C inconclusive error 174 56d 924d 29/29 30d ad09aa45965d ext4: fix kernel BUG in ext4_write_inline_data_end
kernel BUG in __get_vm_area_node prio:high bridge -1 2 100d 97d 29/29 30d 04aa71da5f35 mm/vmalloc: do not trigger BUG() on BH disabled context
WARNING in trace_suspend_resume/usb_submit_urb prio:low media -1 syz, C 11 88d 116d 29/29 30d 171022c7d594 media: rc: igorplugusb: fix control request setup packet
general protection fault in __hfsplus_setxattr prio:high hfs 2 syz, C error 153 69d 122d 29/29 30d 7a41fd2b32e5 hfsplus: Remove the duplicate attr inode dirty marking action
KASAN: slab-out-of-bounds Read in hfsplus_bnode_read prio:high hfs 21 syz, C error error 521 382d 1357d 29/29 30d 966cb76fb285 hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length
KMSAN: uninit-value in mptcp_established_options prio:high mptcp 7 syz 3191 70d 105d 29/29 30d 5e939544f9d2 mptcp: fix uninit-value in mptcp_established_options
INFO: task hung in nilfs_transaction_begin (2) prio:low nilfs 1 syz, C error 14 69d 109d 29/29 30d 0e7a690fe435 nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers
general protection fault in ovl_iterate prio:high overlayfs 8 syz, C 20 69d 234d 29/29 30d 1711b6ed6953 ovl: keep err zero after successful ovl_cache_get()
WARNING in io_pin_pages (2) io-uring prio:low -1 syz, C 22 53d 55d 29/29 30d 3996771b8f75 io_uring/memmap: bound io_pin_pages() by page array byte size
general protection fault in arp_create (4) prio:high net 2 2 91d 89d 29/29 30d f80d3d98d2ff batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface
WARNING: suspicious RCU usage in kernfs_put prio:high kernfs 4 1 130d 126d 29/29 30d 0fdde3f2aead kernfs: fix suspicious RCU usage in kernfs_put()
KASAN: slab-use-after-free Read in shrink_dcache_tree prio:high actionable fs 19 2 57d 58d 29/29 30d 89038cc87d80 locking/rt: Fix the incorrect RCU protection in rt_spin_unlock()
possible deadlock in mptcp_subflow_create_socket (3) prio:low mptcp 4 140 32d 155d 29/29 30d d532cddb6c60 nbd: Reclassify sockets to avoid lockdep circular dependency
WARNING in page_counter_uncharge (2) prio:high cgroups mm -1 syz, C error 10 59d 139d 29/29 30d 15807d0ddde3 mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch
inconsistent lock state in bpf_lru_push_free prio:low bpf 4 syz, C error 313 64d 235d 29/29 30d 89edbdfc5d03 bpf: Fix NMI/tracepoint re-entry deadlock on lru locks
possible deadlock in __ethtool_get_link_ksettings prio:high net 4 154 49d 60d 29/29 30d cd1c188db109 vlan: defer real device state propagation to netdev_work
general protection fault in vidtv_psi_ts_psi_write_into prio:high media 8 79 49d 214d 29/29 30d 7d8bf3d8f910 media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
general protection fault in ocfs2_assure_trans_credits (2) prio:high ocfs2 2 12 63d 73d 29/29 30d f9ab30c96b0f ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits
WARNING in ip_rt_bug (3) prio:high net -1 syz, C error 54 76d 87d 29/29 30d 7eb72c1e3984 ipv4: icmp: reject broadcast/multicast routes
KASAN: slab-use-after-free Read in dma_buf_fd actionable prio:high dri media 19 21 88d 156d 29/29 30d ead6680f354f dma-buf: fix UAF in dma_buf_fd() tracepoint
KASAN: slab-use-after-free Read in current_time prio:high kernfs 19 syz, C 2 78d 74d 29/29 30d b93c55b4932d bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs
KMSAN: uninit-value in _find_next_bit prio:high ocfs2 7 syz, C 30 122d 511d 29/29 30d 93c8c6ea90be ocfs2: use kzalloc for quota recovery bitmap allocation
WARNING: ODEBUG bug in i2c_device_remove (2) prio:high i2c usb -1 syz, C 3 102d 116d 29/29 30d 680daf40a82d media: rtl2832: fix use-after-free in rtl2832_remove()
general protection fault in can_rx_unregister (2) prio:normal can 8 syz, C 3 83d 83d 29/29 30d 8ba68464e478 bonding: refuse to enslave CAN devices
KASAN: slab-use-after-free Read in fb_mode_is_equal actionable prio:high fbdev 19 3 70d 65d 29/29 30d 2c1c805c65fb fbdev: fix use-after-free in store_modes()
WARNING in __ocfs2_decrease_refcount prio:high ocfs2 -1 12 59d 88d 29/29 30d 1ec3cca2d8b6 ocfs2: fix out-of-bounds write in ocfs2_remove_refcount_extent
KASAN: slab-use-after-free Write in gfs2_qd_dealloc (3) prio:high gfs2 22 syz, C error 146 186d 443d 29/29 30d f9c9ec2c319f gfs2: fix use-after-free in gfs2_qd_dealloc
KASAN: slab-use-after-free Read in ipvlan_hard_header (4) prio:high actionable net 19 2 102d 63d 29/29 30d f4c3d89fc986 tipc: fix UAF in tipc_l2_send_msg()
WARNING in cfg80211_chandef_dfs_required (2) prio:low wireless -1 38 79d 138d 29/29 30d dc14686f27df wifi: cfg80211: wext: validate chandef in monitor mode
possible deadlock in __sk_receive_skb prio:high net 4 syz, C error 80 84d 87d 29/29 30d dbc81608e3a6 phonet/pep: disable BH around forwarded sk_receive_skb()
kernel BUG in f2fs_do_truncate_blocks (2) prio:high f2fs -1 1 105d 101d 29/29 30d 8712353ed80f f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
KCSAN: data-race in hash_ip4_add / hash_ip4_head prio:normal netfilter 6 1 142d 142d 29/29 30d 2358f7427ccd netfilter: ipset: Fix data race between add and dump in all hash types
KASAN: slab-out-of-bounds Read in cache_seq_start_rcu prio:high net nfs 17 syz, C 67 79d 115d 29/29 30d ea25e3c7915b sunrpc: prevent out-of-bounds read in __cache_seq_start()
KASAN: vmalloc-out-of-bounds Write in tpg_fill_plane_buffer (4) prio:normal media 21 255 30d 396d 29/29 30d c2d1a2130c93 media: vivid: check for vb2_is_busy() when toggling caps
KASAN: slab-use-after-free Read in sit_tunnel_xmit prio:high net 19 1 69d 68d 29/29 30d f0e42f0c4337 ipv6: sit: reload inner IPv6 header after GSO offloads
WARNING in hsr_addr_is_self prio:low net -1 8 72d 76d 29/29 30d afd0f17ca462 hsr: Remove WARN_ONCE() in hsr_addr_is_self().
memory leak in path_openat (3) prio:high io-uring 3 syz, C 1 63d 63d 29/29 30d 2564ca2e31bd io_uring/nop: fix file reference leak with IOSQE_FIXED_FILE
possible deadlock in ocfs2_evict_inode prio:high ocfs2 4 syz, C error 2694 60d 726d 29/29 30d ff6f26c58421 ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write
possible deadlock in bpf_lru_push_free (2) prio:low bpf 4 syz, C error inconclusive 1 160d 274d 29/29 30d 89edbdfc5d03 bpf: Fix NMI/tracepoint re-entry deadlock on lru locks
KMSAN: uninit-value in ni_seek_data_or_hole prio:high ntfs3 7 syz, C 6 83d 80d 29/29 30d 57ac2831c8e0 fs/ntfs3: prevent potential lcn remains uninitialized
possible deadlock in udp_sendmsg (2) prio:low net 4 2 62d 62d 29/29 30d d532cddb6c60 nbd: Reclassify sockets to avoid lockdep circular dependency
KMSAN: uninit-value in __fl_lookup (3) prio:high net 7 7 58d 77d 29/29 30d bf6e8af2c8be flow_dissector: check device type before reading ETH_ADDRS
KASAN: slab-use-after-free Read in fib_rules_lookup net prio:high 19 37 57d 59d 29/29 30d d954a67a7dfa ipv4: fib_rule: Move fib4_rules_exit() to ->exit(). 46762cefe7f4 net: serialize netif_running() check in enqueue_to_backlog()
possible deadlock in mptcp_sendmsg prio:low mptcp 4 1 89d 89d 29/29 30d d532cddb6c60 nbd: Reclassify sockets to avoid lockdep circular dependency
KCSAN: data-race in xfrm_lookup_with_ifid / xfrm_policy_delete race:benign prio:low net 6 1 63d 63d 29/29 30d 68de007d5ac9 xfrm: annotate data-races around xfrm_policy_count[] and xfrm_policy_default[]
KASAN: out-of-bounds Read in hfsplus_bnode_move hfs 17 syz, C inconclusive error 3 253d 935d 29/29 30d 966cb76fb285 hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length
UBSAN: shift-out-of-bounds in xfrm_selector_match (3) prio:high net -1 1 62d 60d 29/29 30d 40f0b1047918 xfrm: validate selector family and prefixlen during match
general protection fault in remove_waiter prio:high kernel 2 syz 6 96d 108d 29/29 30d 40a25d59e85b locking/rtmutex: Skip remove_waiter() when waiter is not enqueued
KASAN: slab-use-after-free Write in __ipv6_dev_ac_dec prio:high net 22 1 100d 100d 29/29 30d f723ccaff2fb ipv6: anycast: insert aca into global hash under idev->lock
WARNING in wiphy_register (5) prio:low wireless -1 syz, C error 6 100d 99d 29/29 30d 0bdfb1a4697f wifi: mac80211_hwsim: reject NAN on multi-radio wiphys
general protection fault in kernel_sock_shutdown (4) rdma prio:normal 19 syz, C 105 71d 113d 29/29 30d 0b28000b64f4 RDMA/nldev: Add mutual exclusion in nldev_dellink()
WARNING in rcuref_put_slowpath net prio:high -1 1 57d 53d 29/29 30d 7116764ca53f tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy()
KMSAN: kernel-infoleak in move_addr_to_user (7) prio:high hams wpan 9 syz, C 46 104d 691d 29/29 30d 4db86f8ab11b ieee802154: fix kernel-infoleak in dgram_recvmsg()
linux-next test error: WARNING in __alloc_workqueue prio:low nvme -1 26 67d 76d 29/29 30d 8757fd9500cf nvme-tcp: Use WQ_PERCPU explicitly if wq_unbound is false.
WARNING in task_participate_group_stop (2) prio:low kernel -1 syz, C inconclusive unreliable 25 91d 3029d 29/29 30d 90918794a4e2 signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()
possible deadlock in tcp_recvmsg prio:low net 4 1 109d 109d 29/29 30d d532cddb6c60 nbd: Reclassify sockets to avoid lockdep circular dependency
KCSAN: data-race in rds_poll / rds_sendmsg race:harmful prio:low rds 6 1 89d 85d 29/29 30d 67636cab273e rds: annotate data-race around rs_seen_congestion
general protection fault in skb_segment (5) prio:normal net 2 34 60d 63d 29/29 30d 2bf43d0e2e6a tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF)
BUG: using smp_processor_id() in preemptible code in cpu_mt prio:normal netfilter 4 4 61d 87d 29/29 30d c376f07e16c0 netfilter: xt_cpu: prefer raw_smp_processor_id
KASAN: slab-use-after-free Read in sk_msg_recvmsg prio:normal bpf net 19 syz, C error error 3 185d 180d 29/29 30d c010995b29c8 sockmap: Fix use-after-free in udp_bpf_recvmsg()
kernel BUG in replace_file_extents prio:high btrfs -1 54 68d 118d 29/29 30d a6908f88c9da btrfs: validate data reloc tree file extent item members
inconsistent lock state in __sk_receive_skb prio:high net 4 syz, C error 147 72d 161d 29/29 30d dbc81608e3a6 phonet/pep: disable BH around forwarded sk_receive_skb()
KASAN: slab-out-of-bounds Read in usbtmc_interrupt prio:high usb 17 syz, C 5 88d 363d 29/29 30d 52f2ad3f7e5e usb: usbtmc: check URB actual_length for interrupt-IN notifications
UBSAN: shift-out-of-bounds in ieee80211_parse_tx_radiotap prio:normal wireless -1 syz, C error 67 70d 76d 29/29 30d 6c0cf89f36ac wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap
KASAN: wild-memory-access Read in lookup_swap_cgroup_id (2) prio:high cgroups mm 17 4 126d 189d 29/29 30d 63b02a9409cb mm: swap_cgroup: fix NULL deref in lookup_swap_cgroup_id on swapless host
KASAN: slab-use-after-free Read in ipv6_chk_acast_addr prio:high net 19 1 85d 77d 29/29 30d f723ccaff2fb ipv6: anycast: insert aca into global hash under idev->lock
possible deadlock in lock_two_nondirectories (2) prio:high ext4 overlayfs 4 syz, C error 17 49d 71d 29/29 30d c143957520c6 ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT
WARNING in kvm_read_guest_offset_cached kvm -1 syz, C 4 98d 394d 29/29 30d 923ca078f08c KVM: x86: Don't leave APF half-enabled on bad APF data GPA
KASAN: slab-use-after-free Read in replace_file_extents actionable prio:high btrfs 19 1 88d 74d 29/29 30d ae2eb64bfd97 btrfs: fix use-after-free after relocation failure with concurrent COW
BUG: sleeping function called from invalid context in lockref_get_not_dead prio:high gfs2 5 syz, C error 13 103d 121d 29/29 30d b99a1f0f18ee gfs2: fix quota init duplicate scan
UBSAN: array-index-out-of-bounds in ocfs2_grow_tree (2) prio:high ocfs2 15 1 117d 113d 29/29 30d 452a8467be81 ocfs2: fix UBSAN array-index-out-of-bounds in ocfs2_sum_rightmost_rec
WARNING in get_from_partial_node prio:low kernel -1 syz, C 133 86d 122d 29/29 30d 5f41161059fd debugobjects: Do not fill_pool() if pi_blocked_on
WARNING in __alloc_workqueue (2) prio:low wireless -1 syz, C 3731 52d 66d 29/29 30d 311c9ff097fd wifi: ath6kl: fix invalid workqueue flags in ath6kl_usb_create()
WARNING in nbd_add_socket nbd prio:low -1 syz, C error 78 50d 54d 29/29 30d 9280e6edf656 nbd: don't warn when reclassifying a busy socket lock
WARNING in ni_rename (2) prio:low ntfs3 -1 syz, C done 226 53d 288d 29/29 30d e8ed78f40eec fs/ntfs3: call _ntfs_bad_inode() when failing to rename
KMSAN: kernel-infoleak in irqentry_exit prio:high kernel 9 61732 30d 76d 29/29 30d 6d99479799c6 rseq: Fix using an uninitialized stack variable in rseq_exit_user_update()
BUG: corrupted list in dev_deactivate_many (2) prio:high net 8 syz 8 66d 67d 29/29 30d 8eed5519e496 net: watchdog: fix refcount tracking races net: watchdog: fix refcount tracking races
WARNING: ODEBUG bug in smpboot_thread_fn prio:high kernel -1 5 102d 102d 29/29 30d 4df78ff02629 bridge: mcast: Fix a possible use-after-free when removing a bridge port
WARNING: refcount bug in __inet_csk_reqsk_queue_drop prio:high net 13 9 78d 76d 29/29 30d e10902df2448 tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req().
WARNING in stub_timer (2) prio:high kernel -1 1 64d 60d 29/29 30d b81dde13cc16 debugobjects: Plug race against a concurrent OOM disable
KASAN: slab-use-after-free Read in reverse_path_check_proc prio:high fs 19 syz, C 113 67d 84d 29/29 30d a1e9718b406b eventpoll: restore EP_UNACTIVE_PTR sentinel for ctx->tfile_check_list
WARNING in br_fill_linkxstats prio:low bridge -1 5 86d 88d 29/29 30d bdd39576bf50 net: bridge: prevent too big nested attributes in br_fill_linkxstats()
memory leak in init_srcu_struct_fields prio:low bluetooth 3 syz, C 11 74d 76d 29/29 30d 37b3009bf597 Bluetooth: fix memory leak in error path of hci_alloc_dev()
KMSAN: uninit-value in lowpan_xmit prio:low wpan 7 188 70d 72d 29/29 30d 3a5f3f7aff18 ieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit()
KASAN: slab-use-after-free Read in snd_pcm_oss_look_for_setup (2) prio:normal sound 19 1 89d 84d 29/29 30d 4cc54bdd54b3 ALSA: pcm: oss: Fix setup list UAF on proc write error
WARNING in do_notify_parent prio:low kernel -1 syz, C error 195082 53d 167d 29/29 30d 09e7827e7857 kernel/fork: validate exit_signal in kernel_clone()
UBSAN: array-index-out-of-bounds in decompress_lznt ntfs3 15 syz, C done error 2 701d 822d 29/29 30d 7160a57192fb ntfs3: fix out-of-bounds read in decompress_lznt
possible deadlock in keyring_clear (3) prio:high keyrings lsm 4 syz, C 81 48d 311d 29/29 30d 696c030e1e34 fscrypt: Replace mk_users keyring with simple list
possible deadlock in l2tp_ip6_sendmsg (2) prio:low net 4 4 79d 106d 29/29 30d d532cddb6c60 nbd: Reclassify sockets to avoid lockdep circular dependency
general protection fault in h4_recv prio:normal bluetooth 2 syz, C error 4 131d 127d 29/29 52d 902fe40bce70 Bluetooth: hci_uart: Fix NULL deref in recv callbacks when priv is uninitialized
WARNING in drm_prime_destroy_file_private (3) dri prio:high -1 syz, C error 183 90d 94d 29/29 74d dc366607c41c drm: Replace old pointer to new idr
BUG: sleeping function called from invalid context in ip_vs_conn_new lvs prio:high 5 syz, C 2034 100d 123d 29/29 74d d493d9de1c21 ipvs: fix the spin_lock usage for RT build
memory leak in xfrm_policy_construct prio:normal net 3 syz, C 8 128d 128d 29/29 77d xfrm: fix refcount leak in xfrm_migrate_policy_find
WARNING: bad unlock balance in do_wp_page mm prio:high 4 8 95d 110d 29/29 78d mm: memcontrol: fix rcu unbalance in get_non_dying_memcg_end()
kernel BUG in folio_end_read (3) f2fs prio:low -1 1 126d 122d 29/29 84d 570e2ccc7cb3 f2fs: avoid reading already updated pages during GC
general protection fault in rt6_insert_exception net 2 1 103d 102d 29/29 84d 5ad509c1fdad ipv6: Fix null-ptr-deref in fib6_mtu().
KASAN: slab-use-after-free Read in pressure_write cgroups 19 syz, C error 3 130d 127d 29/29 84d a5b98009f16d sched/psi: fix race between file release and pressure write
KASAN: slab-use-after-free Read in snd_pcm_action_single (2) sound 19 1 118d 114d 29/29 84d e5c33cdc6f40 ALSA: aloop: Fix peer runtime UAF during format-change stop
KCSAN: data-race in igmp_rcv / igmp_rcv (2) net 6 1 150d 106d 29/29 84d c6bebaa744f7 ipv4: igmp: annotate data-races in igmp_heard_query()
KASAN: slab-use-after-free Read in rtl8150_start_xmit usb net 19 146 95d 116d 29/29 84d 23f0e34c64ac net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit()
KCSAN: data-race in bond_3ad_get_active_agg_info / bond_3ad_state_machine_handler (3) net prio:high 6 1 109d 108d 29/29 84d c4f050ce06c5 bonding: 3ad: implement proper RCU rules for port->aggregator
KASAN: slab-use-after-free Write in rsi_91x_deinit actionable wireless prio:high 22 1 122d 116d 29/29 84d db57a1aa54ff wifi: rsi: fix kthread lifetime race between self-exit and external-stop
WARNING in vma_mark_detached prio:high mm -1 syz, C error 8 93d 116d 29/29 84d 619eab23e1ce mm/vma: do not try to unmap a VMA if mmap_prepare() invoked from mmap()
kernel BUG in pn_socket_connect net -1 1 107d 107d 29/29 84d 5b0c911bcdbd net: phonet: do not BUG_ON() in pn_socket_autobind() on failed bind
kernel BUG in pn_socket_sendmsg net -1 syz, C 19 107d 115d 29/29 84d 5b0c911bcdbd net: phonet: do not BUG_ON() in pn_socket_autobind() on failed bind
memory leak in hub_event (4) usb 3 syz, C 1 112d 111d 29/29 84d 7a5f1cd22d47 ALSA: caiaq: fix usb_dev refcount leak on probe failure
UBSAN: shift-out-of-bounds in ip_vs_rht_desired_size lvs -1 7 99d 109d 29/29 84d 4ee52b7021a7 ipvs: fix shift-out-of-bounds in ip_vs_rht_desired_size
WARNING in sock_map_destroy (3) bpf net -1 syz, C done error 5 113d 134d 29/29 84d 6451d58a3556 sockmap: Fix sk_psock_drop() race vs sock_map_{unhash,close,destroy}().
BUG: sleeping function called from invalid context in ip_vs_conn_expire lvs 5 1 123d 122d 29/29 84d d493d9de1c21 ipvs: fix the spin_lock usage for RT build
INFO: task hung in lbs_remove_card usb libertas prio:high 1 syz, C 14933 87d 365d 29/29 84d 4a142520d166 wifi: libertas: notify firmware load wait on disconnect
general protection fault in task_work_cancel lsm prio:high 2 syz error 15 141d 160d 29/29 85d 929553bbb4cd landlock: Fully release unused TSYNC work entries
general protection fault in task_work_cancel_match prio:high kernel 2 10 147d 175d 29/29 85d 929553bbb4cd landlock: Fully release unused TSYNC work entries
general protection fault in bq_flush_to_queue (2) net bpf 2 syz, C error error 6 168d 249d 29/29 85d 869c63d5975d bpf: Fix race in cpumap on PREEMPT_RT 7ef83bf1712b net: move promiscuity handling into netdev_rx_mode_work
WARNING in hfsplus_bnode_create hfs -1 syz, C error 1338 122d 1351d 29/29 85d d8a73cc46c84 hfsplus: return error when node already exists in hfs_bnode_create 8ad2c6a36ac4 hfsplus: validate b-tree node 0 bitmap at mount time
WARNING in msdos_rmdir exfat -1 syz, C error error 1 200d 214d 29/29 85d 8cafcb881364 fat: avoid parent link count underflow in rmdir
BUG: MAX_LOCK_DEPTH too low! (6) net prio:normal -1 1 153d 153d 29/29 85d b7405dcf7385 bonding: prevent potential infinite loop in bond_header_parse()
BUG: stack guard page was hit in addrconf_rs_timer prio:high net -1 1 153d 153d 29/29 85d b7405dcf7385 bonding: prevent potential infinite loop in bond_header_parse()
KASAN: slab-use-after-free Read in xfs_buf_rele (4) xfs 19 syz, C 59 123d 346d 29/29 85d 497560b9ef42 xfs: switch (back) to a per-buftarg buffer hash
KASAN: slab-out-of-bounds Read in ext4_ext_correct_indexes ext4 19 syz, C error error 7 155d 445d 29/29 85d 2acb5c12ebd8 ext4: validate p_idx bounds in ext4_ext_correct_indexes
WARNING in nilfs_btree_mark nilfs -1 syz, C error 9 122d 148d 29/29 85d be3e5d10643d nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty()
general protection fault in blk_update_request jfs 19 syz, C error 230 120d 651d 29/29 85d b15e4310633f jfs: Set the lbmDone flag at the end of lbmIODone
possible deadlock in ocfs2_del_inode_from_orphan ocfs2 4 syz, C inconclusive 7741 85d 680d 29/29 85d 19aa667ace53 ocfs2: fix deadlock when creating quota file
WARNING in pt_iommu_amdv1_init iommu -1 syz, C 16 119d 144d 29/29 85d 8c4dc1a5025f iommufd/selftest: Remove MOCK_IOMMUPT_AMDV1 format
WARNING in nilfs_ioctl_prepare_clean_segments nilfs -1 syz, C error 3 130d 150d 29/29 85d be3e5d10643d nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty()
KMSAN: uninit-value in hfsplus_strcasecmp (2) hfs 7 syz, C 3 126d 207d 29/29 85d b6b592275aef hfsplus: fix uninit-value by validating catalog record size
BUG: corrupted list in btrfs_free_compr_folio btrfs 8 21 138d 151d 29/29 85d 0dcabcb920a5 btrfs: zlib: handle page aligned compressed size correctly
KASAN: slab-out-of-bounds Read in af_alg_pull_tsgl crypto 19 syz, C error 3375 121d 133d 29/29 85d 31d00156e50e crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
KMSAN: uninit-value in f2fs_sanity_check_node_footer f2fs 7 1 166d 162d 29/29 85d 7b9161a605e9 f2fs: fix to avoid uninit-value access in f2fs_sanity_check_node_footer
WARNING in create_strip_zones mm -1 5 163d 159d 29/29 85d 078d1d8e688d md/raid0: use kvzalloc/kvfree for strip_zone and devlist allocations
kernel BUG in __kmap_local_pfn_prot mm -1 1 156d 152d 29/29 85d 631c1111501f mm/zswap: add missing kunmap_local()
KMSAN: uninit-value in sixpack_receive_buf (4) hams 7 8 214d 262d 29/29 85d bf9a38803b26 net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf
general protection fault in bio_alloc_bioset block 2 syz error 5 144d 147d 29/29 85d 67807fbaf127 block: fix bio_alloc_bioset slowpath GFP handling
INFO: task hung in wg_netns_pre_exit (5) wireguard 1 syz, C done 397 122d 688d 29/29 85d 60a25ef8dacb wireguard: device: use exit_rtnl callback instead of manual rtnl_lock in pre_exit
kernel BUG in pfkey_send_migrate net -1 syz, C error 3 146d 153d 29/29 85d eb2d16a7d599 af_key: validate families in pfkey_send_migrate()
BUG: corrupted list in dbUpdatePMap jfs 8 syz, C error 141 122d 282d 29/29 85d 3c778ec88208 jfs: fix corrupted list in dbUpdatePMap
INFO: task hung in filename_rmdir jfs 1 syz, C error 5 117d 168d 29/29 85d 5422fe71d26d ext4: avoid infinite loops caused by residual data
general protection fault in ext4_split_extent_at ext4 2 1 153d 148d 29/29 85d 3ceda17325fc ext4: skip split extent recovery on corruption
BUG: unable to handle kernel NULL pointer dereference in netfs_unbuffered_write netfs 19 syz, C 494 98d 161d 29/29 85d e9075e420a1e netfs: Fix NULL pointer dereference in netfs_unbuffered_write() on retry
kernel BUG in netfs_limit_iter netfs -1 syz, C 371 139d 161d 29/29 85d 67e467a11f62 netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators
WARNING in wbt_init_enable_default block -1 syz, C error 491 121d 232d 29/29 85d e9b004ff8306 blk-wbt: remove WARN_ON_ONCE from wbt_init_enable_default()
INFO: task hung in filename_unlinkat jfs 1 syz, C error 14 148d 170d 29/29 85d 5422fe71d26d ext4: avoid infinite loops caused by residual data
INFO: task hung in restrict_one_thread_callback lsm kernel 1 syz, C 39 144d 175d 29/29 85d ff88df67dbf7 landlock: Serialize TSYNC thread restriction
KASAN: slab-use-after-free Write in le_read_features_complete bluetooth 22 syz, C error 505 144d 249d 29/29 85d 035c25007c9e Bluetooth: hci_sync: Fix UAF in le_read_features_complete
general protection fault in bond_header_create net 2 syz 10 143d 154d 29/29 85d 425000dbf173 team: fix header_ops type confusion with non-Ethernet ports
KASAN: slab-use-after-free Read in ocfs2_fault ocfs2 19 syz, C done 363 121d 701d 29/29 85d 7de554cabf16 ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY
WARNING in u32_change (2) net -1 syz, C error 760 121d 163d 29/29 85d 34bd3c6b0bd3 net: sched: cls_u32: Avoid memcpy() false-positive warning in u32_init_knode()
UBSAN: shift-out-of-bounds in dbSplit (3) jfs -1 syz, C 8 156d 471d 29/29 85d cce219b203c4 jfs: add dmapctl integrity check to prevent invalid operations
KASAN: slab-use-after-free Write in usb_anchor_suspend_wakeups (2) usb 22 syz, C error 27 155d 865d 29/29 85d 8a768552f7a8 usb: usbtmc: Flush anchored URBs in usbtmc_release
KASAN: slab-use-after-free Read in v4l2_release (2) media 19 syz, C error error 6 127d 355d 29/29 85d 3b7da2b4d0fe media: hackrf: fix to not free memory after the device is registered in hackrf_probe()
WARNING in deferred_split_folio mm -1 syz error 4 136d 135d 29/29 85d 3bac01168982 mm: fix deferred split queue races during migration
general protection fault in usb_gadget_udc_reset (4) usb 2 syz, C error 16 152d 293d 29/29 85d 616a63ff495d USB: dummy-hcd: Fix locking/synchronization error
KASAN: slab-use-after-free Read in thermal_zone_device_check pm 19 2 181d 234d 29/29 85d 45b859b07282 thermal: core: Address thermal zone removal races with resume
KASAN: slab-use-after-free Read in __video_do_ioctl media 19 3 214d 364d 29/29 85d 3b7da2b4d0fe media: hackrf: fix to not free memory after the device is registered in hackrf_probe()
KASAN: slab-use-after-free Read in l2cap_unregister_user bluetooth 22 syz, C done 46133 99d 651d 29/29 85d 752a6c9596dd Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user
general protection fault in vidtv_psi_desc_assign media 2 syz 160 129d 227d 29/29 85d f8e1fc918a9f media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections
KASAN: slab-use-after-free Write in as102_release (2) media 22 156 119d 469d 29/29 85d 8bd29dbe03fc media: as102: fix to not free memory after the device is registered in as102_usb_probe()
WARNING in reg_bounds_sanity_check (2) bpf -1 syz, C done 20146 122d 343d 29/29 85d b254c6d816e5 bpf: Simulate branches to prune based on range violations
KASAN: slab-use-after-free Read in sock_def_readable (2) net 19 syz, C 123 118d 159d 29/29 85d 922814879542 atm: lec: fix use-after-free in sock_def_readable()
BUG: unable to handle kernel paging request in bond_rr_gen_slave_id (3) net 8 13 148d 182d 29/29 85d 1921f91298d1 net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master
KASAN: slab-use-after-free Read in ext4_ext_remove_space ext4 19 syz, C error 73 143d 501d 29/29 85d 3822743dc203 ext4: reject mount if bigalloc with s_first_data_block != 0
general protection fault in aead_recvmsg crypto 2 syz, C error 165 121d 133d 29/29 85d 3d14bd48e3a7 crypto: algif_aead - Fix minimum RX size check for decryption
WARNING in ieee80211_tdls_oper (3) wireless -1 syz, C error 1 159d 158d 29/29 85d 7d73872d949c wifi: mac80211: check tdls flag in ieee80211_tdls_oper
WARNING in _cpu_down kernel prio:low -1 syz, C 37 145d 158d 29/29 85d c8c4a2972f83 padata: Put CPU offline callback in ONLINE section to allow failure
KASAN: slab-use-after-free Read in sk_psock_verdict_data_ready (4) bpf net prio:normal 19 1 137d 136d 29/29 85d ad8391d37f33 bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready().
general protection fault in rose_transmit_link (4) hams 21 syz, C error 2058 140d 211d 29/29 85d e1f0a18c9564 net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect
KMSAN: uninit-value in fuse_dentry_revalidate (2) fuse prio:high 7 syz, C 261 121d 180d 29/29 85d 5a6baf204610 fuse: fix uninit-value in fuse_dentry_revalidate()
WARNING in attr_data_get_block_locked prio:high ntfs3 -1 syz, C 12 100d 172d 29/29 85d d7ea8495fd30 fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked()
WARNING in filename_mkdirat gfs2 prio:high -1 syz, C 84 95d 179d 29/29 85d 2ff7cf7e0640 gfs2: Call unlock_new_inode before d_instantiate
KASAN: use-after-free Write in ocfs2_write_end_nolock actionable ocfs2 prio:high 22 26 96d 134d 29/29 85d 7bc5da4842be ocfs2: fix out-of-bounds write in ocfs2_write_end_inline
KMSAN: uninit-value in vidtv_ts_null_write_into media prio:low 7 syz, C 50 121d 180d 29/29 85d 5f8e73bde67e media: vidtv: fix pass-by-value structs causing MSAN warnings
KASAN: stack-out-of-bounds Read in l2cap_send_cmd bluetooth prio:high 17 syz, C 174 141d 153d 29/29 85d 9d87cb22195b Bluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_req
inconsistent lock state in igrab xfs prio:high 4 syz, C error 521 101d 181d 29/29 85d f621324dfb3d iomap: fix lockdep complaint when reads fail
BUG: sleeping function called from invalid context in usb_tx_block usb libertas prio:high 5 syz, C 780 116d 171d 29/29 85d 7c5c2b661bdb wifi: libertas: don't kill URBs in interrupt context
KASAN: null-ptr-deref Read in smc_tcp_syn_recv_sock smc 11 syz, C error inconclusive 24 157d 501d 29/29 85d 6d5e4538364b net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock()
memory leak in run_add_entry (2) prio:high ntfs3 3 syz, C 1 133d 147d 29/29 85d 87ac077d6ea8 ntfs3: fix memory leak in indx_create_allocate()
kernel BUG in f2fs_issue_discard_timeout f2fs prio:low -1 6 137d 157d 29/29 85d 6af249c996f7 f2fs: fix to do sanity check on dcc->discard_cmd_cnt conditionally
general protection fault in nilfs_mdt_save_to_shadow_map nilfs prio:normal 2 syz, C error 87 122d 150d 29/29 85d 4a4e0328edd9 nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map
KMSAN: uninit-value in ntfs_iomap_begin ntfs3 prio:high 7 syz, C 191 122d 173d 29/29 85d e98266e823a1 fs/ntfs3: prevent uninitialized lcn caused by zero len
inconsistent lock state in das16m1_interrupt comedi prio:low 4 35 123d 181d 29/29 85d 4b9a9a6d71e3 comedi: Reinit dev->spinlock between attachments to low-level drivers
WARNING in __static_key_slow_dec_cpuslocked (3) kernel prio:low -1 1 196d 163d 29/29 85d b94ae8e0d5fe wifi: mac80211: Fix static_branch_dec() underflow for aql_disable.
KMSAN: uninit-value in bpf_prog_test_run_skb bpf prio:high 7 syz, C 4 146d 226d 29/29 85d 12bec2bd4b76 bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb
general protection fault in f2fs_in_warm_node_list prio:high f2fs 2 syz, C error 11247 114d 177d 29/29 85d 2d9c4a4ed4ee f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io()
KASAN: slab-use-after-free Read in rds_conn_path_drop rds prio:high 19 1 162d 162d 29/29 85d ebf71dd4aff4 net/rds: Restrict use of RDS/IB to the initial network namespace
KCSAN: data-race in rtc_dev_poll / rtc_pie_update_irq (6) rtc prio:low 6 12 135d 209d 29/29 85d b47bcab6ee92 rtc: add data_race() in rtc_dev_poll()
INFO: task hung in btrfs_invalidate_folio (3) prio:high btrfs 1 syz, C error 9 135d 148d 29/29 85d b48c980b6a7e btrfs: fix deadlock between reflink and transaction commit when using flushoncommit
memory leak in do_cmd_ioctl comedi 3 syz, C 2 158d 242d 29/29 85d 29f644f14b89 comedi: runflags cannot determine whether to reclaim chanlist
WARNING in __folio_mark_dirty (3) ext4 -1 syz, C error 115 124d 267d 29/29 85d 9b25f381de6b ext4: unmap invalidated folios from page tables in mpage_release_unused_pages()
BUG: unable to handle kernel paging request in dt2815_attach comedi 8 syz, C 4 203d 202d 29/29 85d 93853512f565 comedi: dt2815: add hardware detection to prevent crash
KASAN: use-after-free Read in v4l2_fh_init usb media 19 syz, C error inconclusive 7824 117d 2674d 29/29 85d a66485a934c7 media: em28xx: fix use-after-free in em28xx_v4l2_open()
KASAN: global-out-of-bounds Read in ip6gre_header net 17 syz, C error 3 132d 135d 29/29 85d b120e4432f9f net: lapbether: handle NETDEV_PRE_TYPE_CHANGE
kernel BUG in ext4_write_inline_data (4) ext4 -1 syz, C error 13 99d 193d 29/29 85d ed9356a30e59 ext4: convert inline data to extents when truncate exceeds inline size
kernel BUG in resv_map_release (3) mm -1 syz, C inconclusive error 35 132d 640d 29/29 85d 0217c7fb4de4 mm/userfaultfd: fix hugetlb fault mutex hash calculation
WARNING in io_wq_put_and_exit io-uring -1 syz 74 90d 166d 29/29 85d 41859843f27d io_uring/tctx: mark io_wq as exiting before error path teardown
INFO: task hung in rpm_resume (2) usb pm 1 syz, C 17 180d 305d 29/29 85d 069c8f5aebe4 net: usb: aqc111: Do not perform PM inside suspend callback
KFENCE: invalid free in gid_table_release_one rdma 24 syz, C error 5478 123d 136d 29/29 85d 973403ca3553 RDMA/core: Fix memory free for GID table
memory leak in radix_tree_insert (2) arm-msm net 3 syz, C 1 199d 981d 29/29 85d 2428083101f6 net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak
INFO: task hung in usb_audio_probe (5) sound 1 483 95d 121d 29/29 85d 3c318f97dcc5 ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES
KASAN: slab-use-after-free Read in rpm_suspend pm 19 3 240d 338d 29/29 85d 29ab76827761 PM: runtime: Fix a race condition related to device removal
BUG: sleeping function called from invalid context in vhost_get_avail_idx kvm net virt 5 syz, C 1 118d 116d 29/29 85d e08a9fac5cf8 vhost_net: fix sleeping with preempt-disabled in vhost_net_busy_poll()
memory leak in vidtv_psi_service_desc_init media 3 syz, C 13 103d 185d 29/29 85d a0e5a598fe9a media: vidtv: fix nfeeds state corruption on start_streaming failure
general protection fault in rwsem_mark_wake mm prio:high 2 syz, C error 9235 147d 150d 29/29 85d 68bcd8b6e0b1 locking/rwsem: Fix logic error in rwsem_del_waiter()
memory leak in fscrypt_setup_filename fscrypt f2fs 3 syz, C 1 164d 164d 29/29 85d 3cf11e6f36c1 f2fs: fix to avoid memory leak in f2fs_rename()
KMSAN: uninit-value in nl80211_send_pmsr_capa wireless 7 11 148d 164d 29/29 85d bd9121a5e9fa wifi: mac80211_hwsim: fully initialise PMSR capabilities
WARNING in drm_atomic_helper_wait_for_vblanks (5) dri -1 syz 464 96d 248d 29/29 85d 79ae8510b5b8 drm/atomic: Increase timeout in drm_atomic_helper_wait_for_vblanks()
KMSAN: uninit-value in netif_skb_features (4) net 7 syz, C 116 135d 311d 29/29 85d ddc748a391dd net: use skb_header_pointer() for TCPv4 GSO frag_off check
general protection fault in __umount_mnt fs 2 syz, C error 21 137d 147d 29/29 85d ad4999496e73 mount: always duplicate mount
general protection fault in lmLogSync (2) jfs 22 syz, C error 8238 89d 1415d 29/29 85d ca5848ae87d2 jfs: hold LOG_LOCK on umount to avoid null-ptr-deref
possible deadlock in ocfs2_extend_dir ocfs2 prio:high 4 1 167d 163d 29/29 85d b02da26a992d ocfs2: fix possible deadlock between unlink and dio_end_io_write
upstream test error: WARNING in enqueue_to_backlog net -1 70 176d 183d 29/29 97d net: fix backlog_unlock_irq_restore() vs CONFIG_PREEMPT_RT
possible deadlock in writeout_period fs mm 4 1 190d 186d 29/29 98d dd9e2f5b38f1 flex_proportions: make fprop_new_period() hardirq safe
KASAN: slab-use-after-free Write in number media 22 syz, C 3 228d 225d 29/29 98d a260bd22a355 media: mc: fix potential use-after-free in media_request_alloc()
KCSAN: data-race in __inet_lookup_established / inet_put_port (5) net 6 5 165d 179d 29/29 98d 29252397bcc1 inet: annotate data-races around isk->inet_num
BUG: using __this_cpu_read() in preemptible code in __delay arm 4 1 173d 169d 29/29 99d e5cb94ba5f96 arm64: Fix sampling the "stable" virtual counter in preemptible section
general protection fault in fn_enter serial 2 syz, C error 6 198d 199d 29/29 99d 0a15f43b92dd Revert "tty: tty_port: add workqueue to flip TTY buffer"
general protection fault in qt2_read_bulk_callback (2) usb 2 syz, C error 44 198d 199d 29/29 99d 0a15f43b92dd Revert "tty: tty_port: add workqueue to flip TTY buffer"
KCSAN: data-race in bond_rcv_validate / bond_rcv_validate (2) net 6 1 206d 206d 29/29 99d f6c3665b6dc5 bonding: annotate data-races around slave->last_rx
general protection fault in k_pad serial 2 syz, C error 20 198d 199d 29/29 99d 0a15f43b92dd Revert "tty: tty_port: add workqueue to flip TTY buffer"
general protection fault in to_utf8 serial 2 syz, C error 37 198d 199d 29/29 99d 0a15f43b92dd Revert "tty: tty_port: add workqueue to flip TTY buffer"
unregister_netdevice: waiting for DEV to become free (8) net 2 syz, C done 443850 100d 1162d 29/29 100d 9af0feae8016 RDMA/core: Fix stale RoCE GIDs during netdev events at registration fa3c411d21eb RDMA/core: always drop device refcount in ib_del_sub_device_and_put() f12b69d8f228 batman-adv: Release references to inactive interfaces ec69daabe452 bpf: Fix reference count leak in bpf_prog_test_run_xdp() 7fcbe5b2c6a4 can: j1939: implement NETDEV_UNREGISTER notification handler 5d5602236f5d can: j1939: make j1939_session_activate() fail if device is no longer registered ac782f4e3bfc ipv4: Fix reference count leak when using error routes with nexthop objects 1809c82aa073 net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts bb4c698633c0 team: avoid NETDEV_CHANGEMTU event when unregistering slave 4efa91a28576 xfrm: always flush state and policy upon NETDEV_UNREGISTER event
KASAN: slab-use-after-free Read in macvlan_forward_source net 19 16 196d 218d 29/29 100d f8db6475a836 macvlan: fix error recovery in macvlan_common_newlink() 7470a7a63dc1 macvlan: fix possible UAF in macvlan_forward_source()
UBSAN: shift-out-of-bounds in minix_statfs fs -1 syz, C inconclusive error 75 200d 1705d 29/29 100d 8c97a6ddc956 minix: Add required sanity checking to minix_check_superblock()
BUG: unable to handle kernel paging request in ip_route_output_key_hash_rcu net 17 syz, C 910 162d 182d 29/29 100d 21ec92774d15 net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop
general protection fault in sigd_send net 11 syz, C error 10 191d 288d 29/29 100d ae88a5d2f29b net: atm: fix crash due to unvalidated vcc pointer in sigd_send()
KASAN: slab-out-of-bounds Read in strnchr bpf 17 syz, C error 14 216d 221d 29/29 100d 9df5fad801c5 bpf: Reject BPF_MAP_TYPE_INSN_ARRAY in check_reg_const_str()
INFO: task hung in ntfs_file_write_iter (2) ntfs3 1 syz, C error 6 149d 230d 29/29 100d 27b75ca4e51e fs/ntfs3: prevent infinite loops caused by the next valid being the same
memory leak in napi_skb_cache_get (2) net virt 3 syz, C 1 214d 211d 29/29 100d 21e4271e6509 Bluetooth: purge error queues in socket destructors
KASAN: slab-use-after-free Read in folio_remove_rmap_ptes mm 19 1 236d 231d 29/29 100d 61f67c230a5e mm/vma: fix anon_vma UAF on mremap() faulted, unfaulted merge
possible deadlock in rds_tcp_tune (2) rds 4 1 173d 169d 29/29 100d 6a877ececd6d net/rds: Fix circular locking dependency in rds_tcp_tune
KASAN: use-after-free Write in iomap_write_end iomap 22 6 196d 196d 29/29 100d faddeb848305 gfs2: Fix use-after-free in iomap inline data write path
memory leak in l2tp_tunnel_create net 3 syz, C 9 209d 213d 29/29 100d 4d10edfd1475 l2tp: Fix memleak in l2tp_udp_encap_recv().
possible deadlock in blkdev_read_iter block 4 syz, C 11 194d 203d 29/29 100d b5cbacd7f86f procfs: avoid fetching build ID while holding VMA lock
kernel BUG in may_open (3) hfs -1 syz, C error 11 197d 214d 29/29 100d ed8889ca21b6 hfsplus: pretend special inodes as regular files
general protection fault in ife_tlv_meta_encode net 2 syz, C error 6 204d 205d 29/29 100d 27880b0b0d35 net/sched: act_ife: avoid possible NULL deref
KASAN: slab-use-after-free Read in clone_mnt fs 19 130 170d 181d 29/29 100d a41dbf5e004e mount: hold namespace_sem across copy in create_new_namespace()
WARNING in pvr2_send_request_ex pvrusb2 usb -1 syz, C 2 243d 252d 29/29 100d a8333c8262ae media: pvrusb2: fix URB leak in pvr2_send_request_ex
WARNING: refcount bug in __add_used_btf bpf 13 syz, C error 6 180d 192d 29/29 100d ccd2d799ed44 bpf: Fix a potential use-after-free of BTF object
WARNING in usb_tx_block usb libertas -1 syz, C 15 125d 242d 29/29 100d d66676e6ca96 wifi: libertas: fix WARNING in usb_tx_block
WARNING in ata_scsi_deferred_qc_work ide -1 2 165d 171d 29/29 100d aac9b27f7c1f ata: libata: cancel pending work after clearing deferred_qc
KASAN: stack-out-of-bounds Read in mptcp_pm_nl_get_local_id mptcp 17 1 222d 205d 29/29 100d e2a9eeb69f7d mptcp: fix race in mptcp_pm_nl_flush_addrs_doit()
kernel BUG in f2fs_write_end_io f2fs -1 syz, C inconclusive 285 102d 500d 29/29 100d 50ac3ecd8e05 f2fs: fix to do sanity check on node footer in {read,write}_end_io
KMSAN: uninit-value in ovl_fill_real overlayfs 7 1 208d 204d 29/29 100d 1992330d90dd ovl: Fix uninit-value in ovl_fill_real
KCSAN: data-race in rxrpc_peer_keepalive_worker / rxrpc_send_data_packet afs net 6 1 261d 219d 29/29 100d 5d5fe8bcd331 rxrpc: Fix data-race warning and potential load/store tearing
KASAN: slab-out-of-bounds Read in fib6_add_rt2node net 17 syz, C 38 176d 184d 29/29 100d 8244f959e2c1 ipv6: Fix out-of-bound access in fib6_add_rt2node().
kernel BUG in fib6_add_rt2node (2) net -1 syz, C error 18 200d 220d 29/29 100d bbf4a17ad9ff ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF
KASAN: use-after-free Read in nf_hook_entry_head netfilter 19 syz error 62 152d 176d 29/29 100d b7cdc5a97d02 netfilter: nf_tables: Fix for duplicate device in netdev hooks
WARNING in __mmdrop (2) kernel -1 syz, C 7 183d 185d 29/29 100d 61dc9f776705 procfs: fix possible double mmput() in do_procmap_query()
KASAN: slab-use-after-free Read in qfq_search_class net 19 1 214d 214d 29/29 100d 3879cffd9d07 net/sched: sch_qfq: do not free existing class in qfq_change_class()
memory leak in prepare_creds (6) lsm 3 syz, C 2 180d 202d 29/29 100d 1cb968a2013f nfsd: Fix cred ref leak in nfsd_nl_threads_set_doit().
possible deadlock in nf_tables_dumpreset_obj netfilter 4 1 242d 238d 29/29 100d 7f261bb906bf netfilter: nf_tables: revert commit_mutex usage in reset path
KCSAN: data-race in l2tp_tunnel_del_work / sk_common_release (7) net 6 18 209d 211d 29/29 100d 7a29f6bf60f2 l2tp: avoid one data-race in l2tp_tunnel_del_work()
general protection fault in snd_scarlett2_controls_create sound 2 syz, C 5 163d 160d 29/29 100d df1d8abf36ca ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces
KCSAN: data-race in br_fdb_update / br_fdb_update (8) bridge 6 44 220d 219d 29/29 100d b25a0b4a2193 net: bridge: annotate data-races around fdb->{updated,used}
possible deadlock in gup_fast_fallback (2) mm 4 syz, C 21 102d 190d 29/29 100d b5cbacd7f86f procfs: avoid fetching build ID while holding VMA lock
general protection fault in squashfs_copy_data squashfs 2 syz, C error 4 182d 180d 29/29 100d fdb24a820a58 Squashfs: check metadata block offset is within range
possible deadlock in __configfs_open_file fs 4 syz, C 29 182d 600d 29/29 100d 14d4ac19d189 scsi: target: Fix recursive locking in __configfs_open_file()
KASAN: slab-out-of-bounds Write in copy_to_urb (2) usb sound 21 syz, C 5 215d 214d 29/29 100d ef5749ef8b30 ALSA: usb-audio: Prevent excessive number of frames
kernel BUG in ipgre_header (4) net -1 syz, C 9 209d 218d 29/29 100d e67c577d8989 ipv4: ip_gre: make ipgre_header() robust
KMSAN: uninit-value in __inet_bind net 7 syz, C 410 175d 181d 29/29 100d 7b821da55b3f rds: tcp: fix uninit-value in __inet_bind
KASAN: slab-use-after-free Read in __list_lru_walk_one (3) mm 19 96 196d 257d 29/29 100d 22150a7d401d gfs2: Fix slab-use-after-free in qd_put
KASAN: use-after-free Read in f2fs_write_end_io (2) f2fs 19 syz, C 14 186d 235d 29/29 100d ce2739e482bc f2fs: fix to avoid UAF in f2fs_write_end_io()
kernel BUG in ocfs2_move_extents ocfs2 -1 syz, C 163 183d 239d 29/29 100d c62e7e6444cd ocfs2: add check for free bits before allocation in ocfs2_move_extent()
WARNING in vcpu_run kvm-x86 -1 syz, C done 43 213d 658d 29/29 100d ead63640d4e7 KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block()
KASAN: slab-use-after-free Read in inet6_addr_del (2) net 19 1 249d 214d 29/29 100d ddf96c393a33 ipv6: Fix use-after-free in inet6_addr_del().
KASAN: use-after-free Read in ocfs2_check_dir_entry ocfs2 19 syz, C error 6 218d 246d 29/29 100d 1524af3685b3 ocfs2: validate inline data i_size during inode read
WARNING in nft_map_deactivate netfilter -1 syz, C error 5 165d 176d 29/29 100d fb7fb4016300 netfilter: nf_tables: clone set on flush only
memory leak in v4l2_ctrl_handler_init_class (2) usb media 3 syz, C 14 198d 262d 29/29 100d b8bf939d77c0 media: radio-keene: fix memory leak in error path
KMSAN: uninit-value in longest_match_std (2) ntfs3 7 syz, C 23820 177d 948d 29/29 100d f223ebffa185 fs/ntfs3: Initialize new folios before use
WARNING in skb_attempt_defer_free net -1 syz, C 16 197d 221d 29/29 100d e5c8eda39a9f udp: call skb_orphan() before skb_attempt_defer_free()
KCSAN: data-race in sk_psock_drop / unix_stream_sendmsg bpf net 6 1 176d 170d 29/29 100d 2ef2b20cf4e0 net: annotate data-races around sk->sk_{data_ready,write_space}
kernel BUG in ocfs2_remove_refcount_tree ocfs2 -1 syz, C error 6 250d 249d 29/29 100d 688dab01c3bb ocfs2: validate i_refcount_loc when refcount flag is set
KCSAN: data-race in io_waitid_complete / io_waitid_wait io-uring 6 6 219d 246d 29/29 100d b994ace83a2b io_uring/waitid: fix KCSAN warning on io_waitid->head
KCSAN: data-race in io_flush_timeouts / io_issue_sqe (2) io-uring 6 58 191d 416d 29/29 100d 42b12cb5fd45 io_uring/timeout: annotate data race in io_flush_timeouts()
kernel BUG in hfs_new_inode hfs -1 syz, C done error 4 224d 295d 29/29 100d b226804532a8 hfs: Replace BUG_ON with error handling for CNID count checks
memory leak in __build_skb (4) net 3 syz, C 1 217d 214d 29/29 100d 9a56796ad258 gue: Fix skb memleak with inner IP protocol 0.
KASAN: global-out-of-bounds Read in __hw_addr_add_ex (4) net 17 1 226d 213d 29/29 100d c84fcb79e5db bonding: limit BOND_MODE_8023AD to Ethernet devices
BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio (4) fs 10 syz, C done 5746 206d 636d 29/29 100d 777a8560fd29 lib/buildid: use __kernel_read() for sleepable context
KASAN: stack-out-of-bounds Write in dev_map_redirect_multi bpf net 21 2 173d 184d 29/29 100d b7bf516c3ecd bpf: Fix stack-out-of-bounds write in devmap
KASAN: slab-use-after-free Read in xfrm_state_find net 19 1395 176d 340d 29/29 100d 1799d8abeabc xfrm6: fix uninitialized saddr in xfrm6_get_saddr()
KASAN: use-after-free Read in __linkwatch_run_queue net 19 syz 108 191d 457d 29/29 100d 83b67cc9be92 linkwatch: use __dev_put() in callers to prevent UAF
WARNING in br_multicast_del_pg bridge -1 2 180d 185d 29/29 100d 8b769e311a86 net: bridge: mcast: always update mdb_n_entries for vlan contexts
KASAN: slab-use-after-free Read in nft_array_get_cmp netfilter 19 syz, C error 5 198d 198d 29/29 100d 35f83a75529a netfilter: nft_set_rbtree: don't gc elements on insert
memory leak in ntfs_init_fs_context (2) ntfs3 3 syz, C 350 177d 249d 29/29 100d f7edab0cee03 fs/ntfs3: fix ntfs_mount_options leak in ntfs_fill_super()
general protection fault in snd_scarlett2_init sound 2 syz, C 3 163d 159d 29/29 100d df1d8abf36ca ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces
WARNING in __dma_map_sg_attrs (2) trace -1 syz, C 4 197d 197d 29/29 100d daafcc0ef0b3 tracing/dma: Cap dma_map_sg tracepoint arrays to prevent buffer overflow
KMSAN: uninit-value in __inet6_bind (2) net 7 syz, C 78 176d 183d 29/29 100d 7b821da55b3f rds: tcp: fix uninit-value in __inet_bind
WARNING in __skb_flow_dissect (7) net -1 275 213d 206d 29/29 100d 5f9b32909659 bonding: provide a net pointer to __skb_flow_dissect()
BUG: corrupted list in io_poll_remove_entries media 8 syz, C error 8 174d 186d 29/29 100d bfbc0b5b32a8 media: dvb-core: fix wrong reinitialization of ringbuffer on reopen
memory leak in __shmem_file_setup fs 3 syz, C 1 218d 214d 29/29 100d 605f6586ecf7 mm/vma: do not leak memory when .mmap_prepare swaps the file
KCSAN: data-race in fib_table_lookup / fib_table_lookup (4) net 6 1 200d 199d 29/29 100d 6e84fc395e90 ipv4: fib: Annotate access to struct fib_alias.fa_state.
BUG: sleeping function called from invalid context in __bpf_stream_push_str net virt 5 syz, C done 88 207d 249d 29/29 100d 99a3e3a1cfc9 slab: fix kmalloc_nolock() context check for PREEMPT_RT
WARNING in ip_rt_bug (2) net -1 syz, C done error 612 100d 1402d 29/29 100d 81b84de32bb2 xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path
memory leak in skb_clone (3) bluetooth batman 3 syz, C 4 103d 219d 29/29 100d 21e4271e6509 Bluetooth: purge error queues in socket destructors
UBSAN: array-index-out-of-bounds in ocfs2_xa_remove_entry ocfs2 15 syz, C 62 188d 246d 29/29 100d d3cd8de2e17e ocfs2: adjust ocfs2_xa_remove_entry() to match UBSAN boundary checks
possible deadlock in __btrfs_release_delayed_node (5) btrfs 4 2 210d 238d 29/29 100d 1e1f2055ad5a btrfs: release path before iget_failed() in btrfs_read_locked_inode()
kernel BUG in bio_chain gfs2 block -1 syz, C error 5696 206d 250d 29/29 100d 4a94f052e098 gfs2: Initialize bio->bi_opf early
general protection fault in create_empty_buffers (5) btrfs 2 syz, C 6 216d 218d 29/29 100d 3f29d661e568 btrfs: sync read disk super and set block size
KASAN: slab-out-of-bounds Read in ext4_search_dir ext4 19 syz, C 5 233d 317d 29/29 100d 08e136ebd193 loop: don't change loop device under exclusive opener in loop_set_status
memory leak in __kthread_create_on_node gfs2 3 syz, C 1 197d 196d 29/29 100d da6f5bbc2e79 gfs2: fix memory leaks in gfs2_fill_super error path
possible deadlock in sch_direct_xmit (5) net 4 syz, C unreliable 1245 100d 220d 29/29 100d 872ac785e768 ipv4: ip_tunnel: spread netdev_lockdep_set_classes()
KASAN: slab-use-after-free Write in rt6_disable_ip net 22 1 226d 214d 29/29 100d 9a6f0c4d5796 dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list()
INFO: task hung in usb_bulk_msg (2) usb 1 syz, C 8 158d 187d 29/29 100d 7784caa413a8 USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts
general protection fault in grab_requested_root fs 2 syz, C 21 170d 183d 29/29 100d 81f16c9778d7 statmount: Fix the null-ptr-deref in do_statmount()
KMSAN: uninit-value in ieee80211_radiotap_iterator_next wireless 7 3 180d 178d 29/29 100d c854758abe0b wifi: radiotap: reject radiotap with unknown bits
general protection fault in lec_arp_clear_vccs net 19 syz, C error 84 128d 332d 29/29 100d 101bacb303e8 atm: lec: fix null-ptr-deref in lec_arp_clear_vccs
general protection fault in btrfs_evict_inode btrfs 2 syz, C 11 265d 298d 29/29 100d f157dd661339 btrfs: fix NULL dereference on root when tracing inode eviction
WARNING in tracing_buffers_mmap_close (3) trace -1 syz, C 2 171d 169d 29/29 100d e39bb9e02b68 tracing: Fix WARN_ON in tracing_buffers_mmap_close
BUG: unable to handle kernel paging request in kvm_vgic_destroy kvmarm 8 syz, C 7 155d 167d 29/29 100d ac6769c8f948 KVM: arm64: Eagerly init vgic dist/redist on vgic creation
KASAN: slab-use-after-free Read in handle_tx (2) net 19 syz, C 1086 183d 905d 29/29 100d 308e7e4d0a84 serial: caif: fix use-after-free in caif_serial ldisc_close()
memory leak in __skb_tstamp_tx bluetooth 3 syz, C 1 219d 219d 29/29 100d 21e4271e6509 Bluetooth: purge error queues in socket destructors
WARNING in folio_remove_rmap_ptes mm -1 syz, C 1 222d 234d 29/29 100d 61f67c230a5e mm/vma: fix anon_vma UAF on mremap() faulted, unfaulted merge
KMSAN: uninit-value in IP6_ECN_decapsulate (3) net 7 syz, C 4 219d 219d 29/29 100d 81c734dae203 ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()
KCSAN: data-race in tcp_assign_congestion_control / tcp_v6_syn_recv_sock race:harmful net 6 1 182d 178d 29/29 100d 858d2a4f67ff tcp: fix potential race in tcp_v6_syn_recv_sock()
UBSAN: array-index-out-of-bounds in __ocfs2_find_path ocfs2 15 syz, C inconclusive 12 183d 242d 29/29 100d e0b0f2834c9b ocfs2: fix oob in __ocfs2_find_path
KMSAN: uninit-value in pfn_reader_next iommu 7 syz, C 395 195d 202d 29/29 100d 2724138b2f7f iommufd: Initialize batch->kind in batch_clear()
WARNING in ntfs_extend_initialized_size (2) ntfs3 -1 syz, C error 7 180d 180d 29/29 100d 10d7c95af043 fs/ntfs3: add delayed-allocation (delalloc) support
WARNING in kvm_gmem_fault_user_mapping kvm -1 syz, C error 3 183d 196d 29/29 100d dd085fe9a8eb mm: thp: deny THP for files on anonymous inodes
KMSAN: kernel-infoleak in __skb_datagram_iter (5) net 9 47 103d 218d 29/29 100d 21cbf883d073 wifi: avoid kernel-infoleak from struct iw_point
kernel BUG in ocfs2_write_block ocfs2 -1 syz, C inconclusive 29 221d 695d 29/29 100d 4e9f69c06215 ocfs2: add validate function for slot map blocks
KASAN: stack-out-of-bounds Write in dev_map_enqueue_multi bpf net 21 1 164d 164d 29/29 100d b7bf516c3ecd bpf: Fix stack-out-of-bounds write in devmap
memory leak in percpu_ref_init nfs 3 syz, C 1 231d 241d 29/29 100d 0b88bfa42e54 NFSD: net ref data still needs to be freed even if net hasn't startup
WARNING in kvm_apic_accept_events (2) kvm-x86 -1 syz, C 72 188d 262d 29/29 100d c4a365cd4a4e KVM: x86: Drop WARN on INIT/SIPI being blocked when vCPU is in Wait-For-SIPI
INFO: task hung in nilfs_segctor_thread (6) nilfs 1 syz, C done 41 100d 241d 29/29 100d ed527ef0c264 nilfs2: Fix potential block overflow that cause system hang
BUG: unable to handle kernel paging request in sk_skb_reason_drop hams 22 syz, C 39 122d 211d 29/29 100d ba1096c31528 netrom: fix double-free in nr_route_frame()
WARNING in fpsimd_restore_current_state arm -1 syz, C 27 191d 283d 29/29 100d 128a7494a9f1 arm64/fpsimd: ptrace: Fix SVE writes on !SME systems
possible deadlock in inet6_getname net 4 syz, C error 122 169d 182d 29/29 100d 021fd0f87004 net/rds: fix recursive lock in rds_tcp_conn_slots_available
WARNING in nf_conntrack_cleanup_net_list netfilter -1 765 111d 246d 29/29 100d 2ef02ac38d3c inet: frags: drop fraglist conntrack references
KASAN: slab-use-after-free Write in arp_create net 22 2 149d 219d 29/29 100d c92510f5e3f8 arp: do not assume dev_hard_header() does not change skb->head
KASAN: slab-out-of-bounds Read in xlog_cksum xfs 17 syz, C error 15 212d 528d 29/29 100d 44b9553c3dd0 xfs: validate log record version against superblock log version
INFO: rcu detected stall in purge_vmap_node mm 1 syz, C error 2 218d 214d 29/29 100d 5747435e0fd4 mm/vmalloc: prevent RCU stalls in kasan_release_vmalloc_node
WARNING in jfs_rename jfs -1 syz, C inconclusive 13 231d 462d 29/29 100d 9218dc26fd92 jfs: nlink overflow in jfs_rename
WARNING in kcm_write_msgs net -1 syz, C done 622 182d 2339d 29/29 100d ca220141fa8e kcm: fix zero-frag skb in frag_list on partial sendmsg error
WARNING in mptcp_pm_nl_del_addr_doit mptcp -1 30 164d 293d 29/29 100d d191101dee25 mptcp: pm: in-kernel: always set ID as avail when rm endp
WARNING in ops_undo_list net -1 3 164d 177d 29/29 100d 479d589b40b8 bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded
KMSAN: uninit-value in fuse_fileattr_get fuse 7 syz, C 19 176d 189d 29/29 100d cb184dd19154 fs: init flags_valid before calling vfs_fileattr_get
KASAN: use-after-free Read in z_erofs_transform_plain (2) erofs 19 syz, C error 5 175d 171d 29/29 100d 4a2d046e4b13 erofs: fix interlaced plain identification for encoded extents
memory leak in llcp_sock_create net nfc 3 syz, C 6 219d 202d 29/29 100d 165c34fb6068 nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame().
memory leak in hfs_init_fs_context hfs 3 syz, C 2 218d 274d 29/29 100d 05ce49a902be hfs: ensure sb->s_fs_info is always cleaned up
possible deadlock in ntfs_look_for_free_space ntfs3 4 syz, C error 4338 176d 644d 29/29 100d 08ce2fee1b86 ntfs3: fix circular locking dependency in run_unpack_ex
BUG: unable to handle kernel paging request in tcf_idrinfo_destroy net 8 1 248d 244d 29/29 100d adb25a46dc0a net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy
general protection fault in rebuild_sched_domains_locked cgroups 2 syz, C 7 164d 180d 29/29 100d 085f067389d1 cgroup/cpuset: fix null-ptr-deref in rebuild_sched_domains_cpuslocked
INFO: task hung in __rmap_walk_file mm 1 syz, C error 7 218d 308d 29/29 100d b7880cb166ab migrate: correct lock ordering for hugetlb file folios
UBSAN: shift-out-of-bounds in ata_qc_issue ide -1 4 180d 178d 29/29 100d eddb98ad9364 ata: libata-eh: correctly handle deferred qc timeouts
memory leak in es58x_open usb 3 syz 1 225d 235d 29/29 100d b1979778e985 can: etas_es58x: allow partial RX URB allocation to succeed
INFO: task hung in io_wq_put_and_exit (6) io-uring 1 syz, C error 74 202d 361d 29/29 100d 10dc95939817 io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop 1f293098a313 io_uring/io-wq: don't trigger hung task for syzbot craziness
WARNING: locking bug in nci_close_device (3) nfc net 4 10 198d 219d 29/29 100d d2492688bb9f nfc: nci: Fix race between rfkill and nci_unregister_device().
INFO: task hung in ni_readpage_cmpr (3) ntfs3 1 syz, C done 6 226d 241d 29/29 100d e37a75bb866c fs/ntfs3: fix deadlock in ni_read_folio_cmpr
KASAN: slab-use-after-free Read in snd_pcm_stop sound 19 syz, C error 29 107d 199d 29/29 100d 826af7fa62e3 ALSA: aloop: Fix racy access at PCM trigger
INFO: trying to register non-static key in bcm_can_tx can -1 syz, C error 5 167d 178d 29/29 100d c35636e91e39 can: bcm: fix locking for bcm_op runtime updates
kernel BUG in folio_set_bh (2) ntfs3 jfs -1 syz, C 46 113d 214d 29/29 100d ab7ad7abb366 romfs: check sb_set_blocksize() return value
general protection fault in rds_tcp_accept_one rds 19 syz, C 1334 175d 186d 29/29 100d 6bf45704a92a net/rds: Fix NULL pointer dereference in rds_tcp_accept_one
kernel BUG in ext4_swap_extents ext4 -1 syz, C 6 209d 249d 29/29 100d 0ef7ef422730 ext4: add missing down_write_data_sem in mext_move_extent().
BUG: corrupted list in dev_deactivate_many net 19 syz, C 22 108d 347d 29/29 100d 83b67cc9be92 linkwatch: use __dev_put() in callers to prevent UAF
general protection fault in bio_seg_gap block 2 syz, C done 231 275d 273d 29/29 192d fd9ecd005252 block: fix merging data-less bios
WARNING in mdiobus_get_phy net usb -1 syz 2 232d 242d 29/29 200d a1e077a3f76e net: usb: asix: validate PHY address before use
KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor wireless 19 syz, C 989 221d 271d 29/29 200d cbf0dc37bb4e wifi: mac80211: fix list iteration in ieee80211_add_virtual_monitor()
WARNING in ieee80211_determine_chan_mode wireless -1 syz, C 1 245d 255d 29/29 200d 99067b58a408 wifi: mac80211: don't WARN for connections on invalid channels
WARNING in nfc_dev_down net nfc -1 syz, C error 12 227d 242d 29/29 200d 1ab526d97a57 net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write
memory leak in rtl8150_set_multicast net usb 3 syz 1 245d 241d 29/29 200d 12cab1191d98 net: usb: rtl8150: fix memory leak on usb_submit_urb() failure
kernel BUG in ip6_pol_route (2) net -1 syz, C error 1134 227d 272d 29/29 200d 1adaea51c61b ipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RT
BUG: corrupted list in team_priority_option_set (6) net 8 5 236d 288d 29/29 200d 932ac51d9953 team: fix check for port enabled in team_queue_override_port_prio_changed()
KMSAN: uninit-value in ib_nl_handle_ip_res_resp rdma 7 syz, C 8 267d 318d 29/29 200d a7b8e876e0ef RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly
WARNING in subflow_data_ready (4) mptcp -1 syz, C 556 222d 359d 29/29 200d 71154bbe4942 mptcp: fallback earlier on simult connection
WARNING in ieee80211_ocb_rx_no_sta (2) wireless -1 syz, C 7 248d 263d 29/29 200d ff4071c60018 wifi: mac80211: ocb: skip rx_no_sta when interface is not joined
kernel BUG in dql_completed net usb -1 1 246d 238d 29/29 200d e34f0df3d81a usbnet: avoid a possible crash in dql_completed()
possible deadlock in io_uring_del_tctx_node io-uring 4 6 226d 227d 29/29 200d 5623eb1ed035 io_uring/tctx: add separate lock for list of tctx's in ctx
WARNING in gid_table_release_one (3) rdma -1 syz, C done 455 223d 458d 29/29 200d 57f3cb6c8415 RDMA/cm: Fix leaking the multicast GID table reference
KASAN: invalid-access Write in do_bad_area bpf -1 syz, C 34838 228d 313d 29/29 200d 007f5da43b3d mm/kasan: fix incorrect unpoisoning in vrealloc for KASAN
kernel BUG in ip6gre_header (6) net -1 syz, C 127 228d 246d 29/29 200d db5b4e39c4e6 ip6_gre: make ip6gre_header() robust
kernel BUG in sctp_getsockopt_peeloff_common fs -1 syz, C done 6 255d 256d 29/29 201d afb9917d9b37 Revert "net/socket: convert sock_map_fd() to FD_ADD()"
kernel BUG in socket fs -1 syz, C 145 238d 233d 29/29 201d afb9917d9b37 Revert "net/socket: convert sock_map_fd() to FD_ADD()"
KASAN: slab-use-after-free Read in br_switchdev_fdb_notify (2) bridge 19 4 291d 308d 29/29 204d 8dca36978aa8 net: bridge: fix use-after-free due to MST port state bypass
WARNING in kvm_set_vm_id_reg kvmarm -1 syz, C 23 269d 272d 29/29 205d 0f559cd91e37 KVM: arm64: Finalize ID registers only once per VM
possible deadlock in ipv6_sock_mc_close (4) net 4 syz, C done 7 251d 249d 29/29 205d b98f06f9a5d3 sctp: Fetch inet6_sk() after setting ->pinet6 in sctp_clone_sock().
general protection fault in simple_xattrs_free kernfs 10 350 230d 247d 29/29 205d 2b742094582d fs/kernfs: null-ptr deref in simple_xattrs_free()
WARNING in iopt_map_pages (3) iommu -1 syz, C 4 244d 249d 29/29 205d e6a973af1113 iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED
memory leak in btrfs_read_chunk_tree btrfs 3 syz, C 1 253d 249d 29/29 205d b57f2ddd2873 btrfs: fix memory leak of fs_devices in degraded seed device path
memory leak in debugfs_change_name fs 3 syz, C 1 253d 249d 29/29 205d d412ff9e26eb debugfs: Fix memleak in debugfs_change_name().
KASAN: invalid-free in inet_sock_destruct net 24 syz, C inconclusive 10 239d 249d 29/29 205d d7ff61e6f3ef sctp: Clear inet_opt in sctp_v6_copy_ip_options().
KMSAN: uninit-value in skb_clone batman 7 syz, C 3 264d 262d 29/29 205d 188e0fa5a679 net/hsr: fix NULL pointer dereference in prp_get_untagged_frame()
WARNING in minix_unlink fs -1 syz, C inconclusive done 458 248d 630d 29/29 205d 009a2ba40303 Fix a drop_nlink warning in minix_rename
kernel BUG in btrfs_qgroup_inherit btrfs -1 syz, C 4 245d 249d 29/29 205d 428e1b114c1a Revert "btrfs: add ASSERTs on prealloc in qgroup functions"
KASAN: slab-use-after-free Write in defer_free bpf 22 syz, C 238 236d 249d 29/29 205d 53ca00a19d34 mm/slub: reset KASAN tag in defer_free() before accessing freed memory
memory leak in getname_flags fs 3 syz, C 1 233d 233d 29/29 205d b14fad555302 io_uring: fix filename leak in __io_openat_prep()
kernel BUG in iommu_pages_start_incoherent iommu -1 3 237d 246d 29/29 205d 7a089c5d35aa iommupt: Return ERR_PTR from _table_alloc()
memory leak in qgroup_reserve_data btrfs 3 syz, C 1 249d 246d 29/29 205d 37343524f000 btrfs: fix changeset leak on mmap write after failure to reserve metadata
memory leak in prepare_creds (5) lsm 3 syz, C 60 207d 280d 29/29 205d df8d829bba3a nfsd: fix memory leak in nfsd_create_serv error paths
WARNING in blkdev_common_ioctl mm -1 syz, C 5 248d 246d 29/29 205d a58383fa45c7 block: add allocation size check in blkdev_pr_read_keys()
memory leak in nr_sendmsg hams 3 syz, C 1 263d 259d 29/29 205d 613d12dd794e netrom: Fix memory leak in nr_sendmsg()
KASAN: slab-use-after-free Read in driver_remove_file fs 19 syz, C error done 296 252d 381d 29/29 206d 72262330f7b3 comedi: c6xdigio: Fix invalid PNP driver unregistration
INFO: trying to register non-static key in ntfs_setattr ntfs3 -1 syz, C done done 8 257d 305d 29/29 219d be99c62ac7e7 ntfs3: init run lock for extend inode
KASAN: slab-out-of-bounds Write in __bpf_get_stackid bpf 21 syz, C error 170 287d 382d 29/29 219d 23f852daa4ba bpf: Fix stackmap overflow check in __bpf_get_stackid()
INFO: task hung in comedi_open comedi 1 syz, C 24 236d 375d 29/29 219d f24c6e3a39fa comedi: multiq3: sanitize config options in multiq3_attach()
WARNING in get_next_unlocked_entry erofs -1 syz, C 8 255d 270d 29/29 219d ebe4f3f6eb0c erofs: correct FSDAX detection
KMSAN: uninit-value in hci_cmd_complete_evt bluetooth 7 syz, C 37 283d 636d 29/29 219d 5c5f1f64681c Bluetooth: hci_event: validate skb length for unknown CC opcode
WARNING in memory_failure mm -1 syz, C 4 303d 325d 29/29 219d 77008e1b2ef7 mm/huge_memory: do not change split_huge_page*() target order silently
UBSAN: shift-out-of-bounds in sctp_transport_update_rto (2) sctp -1 1 282d 281d 29/29 219d 1534ff77757e sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto
INFO: trying to register non-static key in ntfs_set_size ntfs3 -1 syz, C done 235 242d 333d 29/29 219d be99c62ac7e7 ntfs3: init run lock for extend inode
KASAN: slab-use-after-free Read in br_switchdev_fdb_populate bridge 19 1 290d 284d 29/29 219d 8dca36978aa8 net: bridge: fix use-after-free due to MST port state bypass
WARNING in tcf_classify net -1 2 281d 290d 29/29 219d b8a7826e4b1a net: sched: Don't use WARN_ON_ONCE() for -ENOMEM in tcf_classify().
kernel BUG in folio_set_bh ntfs3 -1 syz, C done 202 220d 407d 29/29 219d d1693a7d5a38 ntfs: set dummy blocksize to read boot_block when mounting
KASAN: slab-out-of-bounds Write in copy_to_urb usb sound 21 syz, C 33 222d 282d 29/29 219d 05a1fc5efdd8 ALSA: usb-audio: Fix potential overflow of PCM transfer buffer
memory leak in do_timer_create kernel 3 syz, C 1 275d 274d 29/29 219d e0fd4d42e27f posix-timers: Plug potential memory leak in do_timer_create()
general protection fault in fd_install fs 2 syz, C 64 252d 253d 29/29 219d 8cf01d0c4372 mqueue: correct the type of ro to int
WARNING in __rt_mutex_slowlock_locked (2) exfat -1 syz, C done 9 256d 281d 29/29 219d 866cba367541 exfat: validate the cluster bitmap bits of directory
BUG: unable to handle kernel NULL pointer dereference in posix_clock_ioctl net 10 12 276d 304d 29/29 219d 329d050bbe63 gve: Implement settime64 with -EOPNOTSUPP
WARNING in f2fs_rename2 (2) f2fs -1 syz, C 5 292d 305d 29/29 219d d33f89b34aa3 f2fs: invalidate dentry cache on failed whiteout creation
INFO: task hung in io_uring_del_tctx_node (5) io-uring 1 syz, C done 19 233d 291d 29/29 219d 101e596e7404 io_uring/fdinfo: cap SQ iteration at max SQ entries
WARNING in __blk_add_trace trace block -1 syz, C done 94 290d 294d 29/29 219d 4a0940bdcac2 blktrace: use debug print to report dropped events
WARNING in minix_rmdir fs -1 syz, C inconclusive 92 269d 583d 29/29 219d d3e0e8661ceb Fix a drop_nlink warning in minix_rmdir
WARNING in nsproxy_ns_active_get fs -1 syz, C 377 275d 282d 29/29 219d cefd55bd2159 nsproxy: fix free_nsproxy() and simplify create_new_namespaces()
kernel BUG in __update_extent_tree_range f2fs -1 18 249d 310d 29/29 219d 7c37c7951032 f2fs: fix to avoid updating zero-sized extent in extent cache
kernel BUG in hfsplus_bnode_put hfs -1 syz, C error 180 257d 1304d 29/29 219d 152af1142878 hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create
KASAN: global-out-of-bounds Read in bit_putcs (3) fbdev 17 syz, C 58 292d 744d 29/29 219d 18c4ef4e765a fbdev: bitblit: bound-check glyph index in bit_putcs*
WARNING in em_nbyte_match net -1 syz, C done 7 251d 266d 29/29 219d 4fe5a00ec707 net: sched: fix TCF_LAYER_TRANSPORT handling in tcf_get_base_ptr()
BUG: unable to handle kernel NULL pointer dereference in pc_clock_gettime net 10 7 281d 293d 29/29 219d 6ab753b5d8e5 gve: Implement gettimex64 with -EOPNOTSUPP
WARNING: refcount bug in __vma_enter_locked mm 13 syz, C done 27 255d 262d 29/29 219d faf3c923523e mm: fix vma_start_write_killable() signal handling
KMSAN: uninit-value in pctv452e_i2c_msg media 7 65 255d 308d 29/29 219d 1a31cb278210 media: dvb-usb: pctv452e: move snd/rcv len check before kmalloc
KASAN: slab-use-after-free Write in kvm_gmem_release kvm 22 syz, C done 12 245d 295d 29/29 219d ae431059e75d KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying
kernel BUG in may_open (2) fs -1 syz, C done 17716 219d 402d 29/29 219d 34ab4c75588c bfs: Reconstruct file type when loading from disk 7f9d34b0a7cb cramfs: Verify inode mode when loading from disk 005d4b0d33f6 hfsplus: Verify inode mode when loading from disk 0a9e74051313 isofs: Verify inode mode when loading from disk 7a5aa54fba2b jfs: Verify inode mode when loading from disk 73861970938a minixfs: Verify inode mode when loading from disk 4aead50caf67 nilfs2: reject invalid file types when reading inodes 4e8011ffec79 ntfs3: pretend $Extend records as regular files bc107a619f02 squashfs: verify inode mode when loading from disk
memory leak in io_submit_sqes (5) io-uring 3 syz 3 256d 256d 29/29 219d 84230ad2d2af io_uring/poll: correctly handle io_poll_add() return value on update
KMSAN: kernel-infoleak in hugetlbfs_read_iter fs mm 9 syz, C 7 278d 277d 29/29 219d de8798965fd0 mm/memfd: fix information leak in hugetlb folios
WARNING: refcount bug in mptcp_schedule_work (2) mptcp 13 5 267d 274d 29/29 219d 035bca3f017e mptcp: fix race condition in mptcp_schedule_work()
WARNING in drm_wait_one_vblank (2) dri -1 syz, C error 3650 219d 743d 29/29 219d f050da08a4ed drm/vblank: Increase timeout in drm_wait_one_vblank()
divide error in __tcp_select_window (4) net 2 syz, C done 14 260d 262d 29/29 219d f07f4ea53e22 mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose().
KASAN: slab-use-after-free Read in mtree_range_walk mm 19 3 266d 276d 29/29 219d 270065f514c5 mm/mmap_lock: reset maple state on lock_vma_under_rcu() retry
memory leak in map_create bpf 3 syz, C 1 275d 271d 29/29 219d 688b745401ab bpf: Fix exclusive map memory leak
WARNING in xfrm_state_fini (4) net -1 syz, C done 89278 253d 306d 29/29 219d 10deb6986484 xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added
possible deadlock in dqget ocfs2 ext4 4 syz, C error 100357 228d 682d 29/29 219d 524c3853831c jbd2: use a per-journal lock_class_key for jbd2_trans_commit_key
BUG: sleeping function called from invalid context in __bio_release_pages (2) scsi 5 3 277d 274d 29/29 219d 90449f2d1e1f scsi: sg: Do not sleep in atomic context
KMSAN: uninit-value in bcmp (3) ntfs3 19 syz, C error 625 253d 733d 29/29 219d a8a3ca23bbd9 fs/ntfs3: Initialize allocated memory before use
WARNING in f2fs_delete_entry (2) f2fs -1 syz, C 4 307d 319d 29/29 219d f37981edcd06 f2fs: Add sanity checks before unlinking and loading inodes
KMSAN: uninit-value in ntfs_read_bh ntfs3 7 syz, C 202 259d 712d 29/29 219d 73e6b9dacf72 ntfs3: fix uninit memory after failed mi_read in mi_format_new
memory leak in smb3_fs_context_fullpath cifs 3 syz, C 1 276d 274d 29/29 219d 7e4d9120cfa4 cifs: fix memory leak in smb3_fs_context_parse_param error path
memory leak in __blkdev_issue_zero_pages block udf 3 syz 1 257d 253d 29/29 219d f7e3f852a42d block: fix memory leak in __blkdev_issue_zero_pages
INFO: task hung in io_uring_alloc_task_context (6) io-uring 1 syz 5 256d 286d 29/29 219d 101e596e7404 io_uring/fdinfo: cap SQ iteration at max SQ entries
general protection fault in ocfs2_prepare_dir_for_insert (2) ocfs2 8 syz, C error 20 251d 431d 29/29 219d aa5b6a72ccd9 ocfs2: add directory size check to ocfs2_find_dir_space_id()
KMSAN: uninit-value in ntfs_read_hdr (3) ntfs3 7 syz, C 6 224d 331d 29/29 219d a8a3ca23bbd9 fs/ntfs3: Initialize allocated memory before use 9948dcb2f7b5 ntfs3: Fix uninit buffer allocated by __getname()
KASAN: use-after-free Read in ocfs2_dir_foreach_blk ocfs2 19 syz, C error 115 245d 686d 29/29 219d 390ac56cf0f6 ocfs2: add boundary check to ocfs2_check_dir_entry()
WARNING in indx_insert_into_buffer (3) ntfs3 -1 syz, C done 11 294d 313d 29/29 219d c3856bb499ea ntfs3: avoid memcpy size warning
general protection fault in iomap_dio_bio_end_io ext4 iomap 2 syz, C error 16 260d 264d 29/29 219d 7fd8720dff2d iomap: allocate s_dio_done_wq for async reads as well
KASAN: use-after-free Read in ocfs2_claim_suballoc_bits ocfs2 19 syz, C inconclusive 326 249d 722d 29/29 219d e1c70505ee81 ocfs2: add extra consistency checks for chain allocator dinodes
WARNING in raw_ioctl usb mm -1 syz, C 664 250d 294d 29/29 219d a5160af78be7 usb: raw-gadget: cap raw_io transfer length to KMALLOC_MAX_SIZE
kernel BUG in ipgre_header (3) net -1 syz, C 99 220d 298d 29/29 219d 0ae9cfc454ea team: Move team device type change at the end of team_port_add
BUG: sleeping function called from invalid context in mon_complete usb 5 21 262d 336d 29/29 219d 09bf21bf5249 usbip: Fix locking bug in RT-enabled kernels
KASAN: slab-use-after-free Read in l2cap_recv_acldata (2) bluetooth 19 3 299d 338d 29/29 219d 79a2d4678ba9 Bluetooth: hci_core: lookup hci_conn on RX path on protocol side
WARNING in shmem_unlink (2) overlayfs -1 syz, C done 3 260d 260d 29/29 219d e9c70084a64e ovl: fail ovl_lock_rename_workdir() if either target is unhashed
WARNING in driver_unregister (2) kernel -1 syz, C error 3214 250d 405d 29/29 219d 72262330f7b3 comedi: c6xdigio: Fix invalid PNP driver unregistration
kernel BUG in ocfs2_truncate_file ocfs2 -1 syz, C 179 246d 691d 29/29 219d 58b6fcd2ab34 ocfs2: mark inode bad upon validation failure during read
general protection fault in fsnotify_destroy_group fs 2 syz, C error 2 262d 260d 29/29 219d 7129098f4f7b fanotify: convert fanotify_init() to FD_PREPARE()
KASAN: slab-use-after-free Write in recv_work (3) nbd 22 syz, C 6 257d 285d 29/29 219d 9517b82d8d42 nbd: defer config put in recv_work
KASAN: slab-use-after-free Read in mgmt_pending_remove bluetooth 19 syz 2 275d 271d 29/29 219d 89bb613511cc Bluetooth: hci_sock: Prevent race in socket write iter and sock bind
KMSAN: uninit-value in sctp_inq_pop (3) sctp 7 syz, C 9 298d 298d 29/29 219d 51e5ad549c43 net: sctp: fix KMSAN uninit-value in sctp_inq_pop
UBSAN: array-index-out-of-bounds in ocfs2_block_group_fill ocfs2 15 syz, C done 6 302d 303d 29/29 219d e1c70505ee81 ocfs2: add extra consistency checks for chain allocator dinodes
WARNING in nsproxy_ns_active_put fs -1 syz, C done 38 276d 282d 29/29 219d cefd55bd2159 nsproxy: fix free_nsproxy() and simplify create_new_namespaces()
possible deadlock in padata_do_serial crypto 4 syz, C 40877 248d 411d 29/29 219d af3852cda347 padata: remove __padata_list_init()
kernel BUG in ext4_write_inline_data (3) ext4 -1 syz, C error 8 226d 335d 29/29 219d 892e1cf17555 ext4: refresh inline data size before write operations
general protection fault in gfs2_log_is_empty gfs2 19 syz, C done 92 294d 303d 29/29 219d 9c4a3de6cd5b gfs2: Asynchronous withdraw
WARNING in ntfs_put_super ntfs3 -1 syz, C done 40466 268d 290d 29/29 219d aee4d5a521e9 ntfs3: fix double free of sbi->options->nls and clarify ownership of fc->fs_private
WARNING in minix_rename fs -1 syz error 7 329d 416d 29/29 219d 009a2ba40303 Fix a drop_nlink warning in minix_rename
BUG: corrupted list in sctp_destroy_sock sctp 8 syz, C done 10 277d 281d 29/29 219d 73edb26b06ea sctp: Don't inherit do_auto_asconf in sctp_clone_sock().
KASAN: slab-use-after-free Read in btusb_disconnect usb bluetooth 19 syz, C 5 320d 406d 29/29 219d 23d22f2f7176 Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF
KASAN: slab-use-after-free Read in vidtv_psi_eit_event_destroy media 19 2 380d 377d 29/29 219d 98aabfe2d79f media: vidtv: initialize local pointers upon transfer of memory ownership
KASAN: slab-use-after-free Read in cmp_fnames (2) ntfs3 19 1 362d 358d 29/29 219d 02f312754c87 ntfs3: fix use-after-free of sbi->options in cmp_fnames
kernel BUG in __ocfs2_move_extent ocfs2 -1 syz, C 16 298d 311d 29/29 219d 8a7d58845fae ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent()
divide error in iova_bitmap_alloc iommu 2 syz, C 1 297d 311d 29/29 219d cb30dfa75d55 iommufd: Don't overflow during division for dirty tracking
BUG: unable to handle kernel NULL pointer dereference in pc_clock_settime net 10 7 276d 289d 29/29 219d 329d050bbe63 gve: Implement settime64 with -EOPNOTSUPP
KASAN: vmalloc-out-of-bounds Read in run_irq_workd kernel 17 syz, C error 225 286d 349d 29/29 219d 4e9077638301 bpf: Sync pending IRQ work before freeing ring buffer
WARNING in bpf_bprintf_prepare (3) bpf -1 syz, C done 6 273d 298d 29/29 219d c1da3df7191f bpf: Prevent nesting overflow in bpf_try_get_buffers
KASAN: global-out-of-bounds Read in io_uring_show_fdinfo io-uring 17 syz, C done 7 285d 288d 29/29 219d 8cd5a59e4d51 io_uring/fdinfo: validate opcode before checking if it's an 128b one
KMSAN: uninit-value in em_canid_match can net 7 syz, C 7 260d 262d 29/29 219d 0c922106d7a5 net/sched: em_canid: fix uninit-value in em_canid_match
KASAN: slab-use-after-free Read in tipc_mon_reinit_self tipc 19 1 335d 281d 29/29 219d 0725e6afb551 tipc: Fix use-after-free in tipc_mon_reinit_self().
WARNING in tracing_start_tr trace -1 syz, C 20 251d 485d 29/29 219d 02e7769e38c8 tracing: Fix enabling of tracing on file release
kernel BUG in ocfs2_commit_truncate ocfs2 -1 syz, C inconclusive 8 265d 607d 29/29 219d a2b1c419ff72 ocfs2: add inline inode consistency check to ocfs2_validate_inode_block()
KMSAN: kernel-infoleak in __skb_datagram_iter (4) net 18 syz, C 1050 219d 812d 29/29 219d 62b656e43eae net: sched: act_connmark: initialize struct tc_ife to fix kernel leak ce50039be49e net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak
KASAN: use-after-free Read in ocfs2_dx_dir_lookup_rec ocfs2 19 syz, C 14 263d 320d 29/29 219d 1b34743c31fe ocfs2: add extra consistency check to ocfs2_dx_dir_lookup_rec()
kernel BUG in ocfs2_remove_btree_range (2) ocfs2 -1 syz, C 5 255d 261d 29/29 219d 4ac577ae741e ocfs2: check tl_used after reading it from trancate log inode
WARNING in ocfs2_unlink ocfs2 -1 syz, C inconclusive 139 244d 577d 29/29 219d 7efb45f9685f ocfs2: invalidate inode if i_mode is zero after block read
memory leak in iovec_from_user (2) io-uring 3 syz, C 1 280d 277d 29/29 219d d3c9c213c0b8 io_uring/rw: ensure allocated iovec gets cleared for early failure
WARNING in destroy_super_work fs -1 syz done 107 275d 280d 29/29 219d f8d5a8970d2f ns: handle setns(pidfd, ...) cleanly
general protection fault in afs_request_key afs 2 14 260d 265d 29/29 219d d27c71257825 afs: Fix delayed allocation of a cell's anonymous key 19eef1d98eed afs: Fix uninit var in afs_alloc_anon_key()
memory leak in ocfs2_new_path_from_path ocfs2 3 syz, C 5 245d 280d 29/29 219d 2214ec4bf89d ocfs2: fix memory leak in ocfs2_merge_rec_left()
WARNING in ring_buffer_map_get_reader trace -1 5 224d 282d 29/29 219d aa997d2d2a0b ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up
memory leak in smb3_fs_context_parse_param cifs 3 syz, C 1 280d 280d 29/29 219d e8c73eb7db0a cifs: client: fix memory leak in smb3_fs_context_parse_param
general protection fault in pcl818_ai_cancel comedi 2 syz, C error 14192 250d 405d 29/29 219d a51f025b5038 comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel()
KASAN: slab-use-after-free Read in mptcp_pm_del_add_timer mptcp 19 1 302d 270d 29/29 219d 426358d9be7c mptcp: fix a race in mptcp_pm_del_add_timer()
BUG: unable to handle kernel NULL pointer dereference in parse_insn comedi 10 26 278d 394d 29/29 219d 0de7d9cd07a2 comedi: check device's attached status in compat ioctls
general protection fault in mntput fs 2 syz, C error 17 255d 260d 29/29 219d 05885f41658c namespace: convert fsmount() to FD_PREPARE()
BUG: unable to handle kernel NULL pointer dereference in pc_clock_adjtime net 10 5 269d 285d 29/29 219d 6ab753b5d8e5 gve: Implement gettimex64 with -EOPNOTSUPP
WARNING: ODEBUG bug in gfs2_fill_super gfs2 -1 syz, C done 24 295d 298d 29/29 219d 9c4a3de6cd5b gfs2: Asynchronous withdraw
KMSAN: uninit-value in attr_set_size ntfs3 7 syz, C 3 299d 313d 29/29 219d 5f33da04e6ce fs/ntfs3: fix KMSAN uninit-value in ni_create_attr_list
WARNING: ODEBUG bug in nilfs_detach_log_writer (2) nilfs -1 syz, C 4 293d 291d 29/29 219d 9a6b60cb147d nilfs2: avoid having an active sc_timer before freeing sci
kernel BUG in ocfs2_claim_suballoc_bits ocfs2 -1 syz, C inconclusive 1706 242d 722d 29/29 219d 039bef30e320 ocfs2: fix kernel BUG in ocfs2_find_victim_chain
KASAN: use-after-free Read in ocfs2_listxattr ocfs2 19 syz, C 5 265d 277d 29/29 219d 2a4f33430e96 ocfs2: validate inline xattr size and entry count in ocfs2_xattr_ibody_list
WARNING in xfrm_state_migrate (2) net -1 2 284d 313d 29/29 219d 5502bc4746e8 xfrm: make state as DEAD before final put when migrate fails
divide error in ocfs2_block_group_fill (3) ocfs2 2 syz, C 3 293d 299d 29/29 219d 93ce0ff117b0 ocfs2: validate cl_bpc in allocator inodes to prevent divide-by-zero
memory leak in ni_add_subrecord ntfs3 3 syz, C 1 265d 277d 29/29 219d ccc4e86d1c24 fs/ntfs3: Prevent memory leaks in add sub record
WARNING in tracing_buffers_mmap_close (2) trace -1 syz, C 4 238d 276d 29/29 219d b042fdf18e89 tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs
BUG: sleeping function called from invalid context in hook_sb_delete fs 5 syz, C done 11887 237d 325d 29/29 219d 56325e8c68c0 landlock: fix splats from iput() after it started calling might_sleep()
WARNING in dax_iomap_rw fs -1 syz, C 5 303d 317d 29/29 256d 154d1e7ad9e5 dax: skip read lock assertion for read-only filesystems
INFO: task hung in v9fs_evict_inode v9fs 1 syz, C error done 2597 301d 617d 29/29 260d netfs: fix reference leak
kernel BUG in kvm_s2_put_page kvmarm -1 syz, C 88 289d 329d 29/29 266d fc670ad5966f Revert "KVM: arm64: Reschedule as needed when destroying the stage-2 page-tables"
BUG: sleeping function called from invalid context in f2fs_drop_inode f2fs 5 43 291d 311d 29/29 266d 1ee889fdf409 f2fs: don't call iput() from f2fs_drop_inode()
WARNING in hugetlb_vma_assert_locked mm -1 syz, C 8 323d 325d 29/29 268d cec944dd329f hugetlbfs: move lock assertions after early returns in huge_pmd_unshare() dd83609b8898 hugetlbfs: skip VMAs without shareable locks in hugetlb_vmdelete_list
WARNING in invalidate_bh_lru fs -1 syz, C done done 5172 503d 1331d 29/29 269d 6f861765464f fs: Block writes to mounted block devices
possible deadlock in gro_cells_receive net 4 1 300d 298d 29/29 269d c5394b8b7a92 net: gro_cells: fix lock imbalance in gro_cells_receive()
KASAN: slab-use-after-free Read in hdm_disconnect usb 19 syz, C error 18706 289d 746d 29/29 269d 4b1270902609 most: usb: Fix use-after-free in hdm_disconnect
WARNING: locking bug in __set_page_owner (2) mm 4 4 303d 309d 29/29 269d c83aab85e181 mm: don't spin in add_stack_record when gfp flags don't allow
WARNING in xfs_init_fs_context mm -1 syz 21 307d 411d 29/29 269d 0f41997b1b2b xfs: don't use __GFP_NOFAIL in xfs_init_fs_context
BUG: sleeping function called from invalid context in sock_map_delete_elem net bpf 5 syz, C error 58 299d 352d 29/29 269d 7c33e97a6ef5 bpf: Do not disable preemption in bpf_test_run().
VFS: Busy inodes after unmount (use-after-free) (3) fs 2 syz, C error 85 288d 318d 29/29 269d 56094ad3eaa2 vfs: Don't leak disconnected dentries on umount
kernel BUG in qlist_free_all (2) fs -1 syz, C done 5 303d 334d 29/29 269d 25718fdcbdd2 net: gro_cells: Use nested-BH locking for gro_cell
divide error in comedi_buf_write_free comedi 2 130 294d 401d 29/29 269d 87b318ba81dd comedi: fix divide-by-zero in comedi_buf_munge()
KASAN: slab-out-of-bounds Read in __cpa_addr kernel 17 syz, C done 601 299d 313d 29/29 269d f25785f9b088 x86/mm: Fix overflow in __cpa_addr()
kernel BUG in ext4_es_cache_extent (3) ext4 -1 syz, C 4 330d 344d 29/29 269d 1d3ad183943b ext4: detect invalid INLINE_DATA + EXTENTS flag combination
kernel BUG in populate_free_space_tree (2) btrfs -1 syz error 3 318d 318d 29/29 269d a5a51bf4e9b7 btrfs: do not assert we found block group item when creating free space tree
WARNING in cgroup_freeze cgroups -1 syz, C done 847 297d 316d 29/29 269d 93a4b36ef3cf cgroup: Fix seqcount lockdep assertion in cgroup freezer
KASAN: stack-out-of-bounds Read in cp2112_xfer input 17 syz, C error 8 303d 333d 29/29 269d 362f21536966 HID: cp2112: Add parameter validation to data length
possible deadlock in vsock_linger virt net 4 syz, C 7 298d 298d 29/29 269d f7c877e75352 vsock: fix lock inversion in vsock_assign_transport()
kernel BUG in scrub_stripe_get_kaddr btrfs -1 syz, C error 293 301d 319d 29/29 269d 42d3a055d946 btrfs: do not use folio_test_partial_kmap() in ASSERT()s
KMSAN: uninit-value in poly1305_blocks crypto 7 syz, C 10 297d 298d 29/29 269d 1af424b15401 lib/crypto: poly1305: Restore dependency of arch code on !KMSAN
WARNING in nsfs_fh_to_dentry nfs -1 syz, C 77 289d 329d 29/29 269d 15623c860c93 nsfs: handle inode number mismatches gracefully in file handles
kernel BUG in ocfs2_refcount_cal_cow_clusters ocfs2 -1 syz, C 8 296d 314d 29/29 269d 78a63493f8e3 ocfs2: clear extent cache after moving/defragmenting extents
WARNING in copy_highpage arm -1 1 321d 317d 29/29 269d b98c94eed4a9 arm64: mte: Do not warn if the page is already tagged in copy_highpage()
BUG: sleeping function called from invalid context in __set_page_owner net virt 5 syz, C done 79 295d 309d 29/29 269d c83aab85e181 mm: don't spin in add_stack_record when gfp flags don't allow
general protection fault in __smc_diag_dump (4) smc 2 syz, C done 6 295d 331d 29/29 269d f584239a9ed2 net/smc: fix general protection fault in __smc_diag_dump
KASAN: stack-out-of-bounds Read in exfat_nls_to_utf16 exfat 17 syz, C done 36 293d 313d 29/29 269d 2d8636119b92 exfat: fix out-of-bounds in exfat_nls_to_ucs2()
kernel BUG in dnotify_free_mark ntfs3 -1 syz, C error done 22993 368d 1386d 29/29 270d 55ad333de0f8 fs/ntfs3: Unify inode corruption marking with _ntfs_bad_inode()
WARNING in media_create_pad_link (2) usb media -1 syz, C error done 11 310d 513d 29/29 273d 0e2ee70291e6 media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID
possible deadlock in f2fs_do_truncate_blocks f2fs 4 5 292d 307d 29/29 273d ca8b201f2854 f2fs: fix to avoid potential deadlock
INFO: rcu detected stall in watchdog bpf 1 syz, C error done 14 335d 1457d 29/29 273d eecd203ada43 media: imon: make send_packet() more robust
INFO: rcu detected stall in dummy_timer (4) usb 1 syz, C inconclusive done 25 336d 1497d 29/29 273d eecd203ada43 media: imon: make send_packet() more robust
INFO: task hung in bch2_direct_write (2) fs 1 syz, C unreliable done 15 355d 363d 29/29 275d f2c61db29f27 Remove bcachefs core code
general protection fault in hfs_find_init hfs 10 syz, C done done 1024 378d 3058d 29/29 284d 736a0516a162 hfs: fix general protection fault in hfs_find_init()
WARNING in br_nf_local_in bridge netfilter -1 1 343d 339d 29/29 284d netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm
general protection fault in unpin_user_pages_dirty_lock mm 2 syz, C 4 341d 341d 29/29 288d e3c05b6e370c mm/gup: remove record_subpages()
WARNING in ext4_init_orphan_info ext4 mm -1 syz, C done 5 315d 340d 29/29 289d 0a6ce20c1564 ext4: verify orphan file size is not too big
KASAN: slab-use-after-free Read in io_waitid_wait io-uring 19 syz, C 3 312d 311d 29/29 289d 2f8229d53d98 io_uring/waitid: always prune wait queue entry in io_waitid_wait()
general protection fault in vc_deallocate serial 2 syz, C done 475 331d 340d 29/29 289d fc702e7df456 vt: move vc_saved_screen to within tty allocated judgment
possible deadlock in xfs_ilock_attr_map_shared (2) kasan 4 3 347d 401d 29/29 289d 79357cd06d41 mm/vmalloc, mm/kasan: respect gfp mask in kasan_populate_vmalloc()
KASAN: slab-use-after-free Write in iommufd_eventq_fops_release iommu 22 syz, C 5 335d 333d 29/29 289d 4e034bf045b1 iommufd: Fix race during abort for file descriptors
possible deadlock in __snd_pcm_lib_xfer (2) sound 4 syz, C done 9 328d 350d 29/29 289d 9fc4a3da9a02 ALSA: pcm: Disable bottom softirqs as part of spin_lock_irq() on PREEMPT_RT
possible deadlock in kernfs_unlink_sibling kernfs 4 26 313d 344d 29/29 289d 9f7c02e03157 nbd: restrict sockets to TCP and UDP
possible deadlock in device_create kernel 4 25 313d 345d 29/29 289d 9f7c02e03157 nbd: restrict sockets to TCP and UDP
KASAN: use-after-free Read in ocfs2_get_system_file_inode ocfs2 19 syz, C done 5 356d 354d 29/29 289d fe7a283b3916 ocfs2: add suballoc slot check in ocfs2_validate_inode_block()
WARNING in write_raw_marker_to_buffer trace -1 syz, C 29 306d 308d 29/29 289d bda745ee8fbb tracing: Fix tracing_mark_raw_write() to use buf and not ubuf 54b91e54b113 tracing: Stop fortify-string from warning in tracing_mark_raw_write()
KMSAN: uninit-value in hfs_find_set_zero_bits hfs 7 syz, C 4210 320d 1257d 29/29 289d 2048ec5b98db hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits()
KCSAN: data-race in ip_vs_add_service / ip_vs_out_hook lvs 6 6 326d 436d 29/29 289d 944b6b216c03 ipvs: Use READ_ONCE/WRITE_ONCE for ipvs->enable
general protection fault in bcsp_recv bluetooth 8 syz, C error 1003 297d 545d 29/29 289d ca94b2b036c2 Bluetooth: bcsp: receive data only if registered
possible deadlock in __alloc_workqueue kernel 4 6 313d 334d 29/29 289d 9f7c02e03157 nbd: restrict sockets to TCP and UDP
INFO: task hung in __bread_gfp (7) udf jfs 1 syz, C done 6 323d 328d 29/29 289d ab073abf6d97 block: fix EOD return for device with nr_sectors == 0
WARNING in rtl8150_start_xmit/usb_submit_urb net usb -1 syz, C 5 330d 350d 29/29 289d 958baf5eaee3 net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast
KASAN: slab-use-after-free Read in media_devnode_unregister usb media 19 syz, C 2055 336d 339d 29/29 289d 8cfc8cec1b4d media: mc: Clear minor number before put device
general protection fault in snd_usbmidi_do_output usb sound 2 syz, C error 8 319d 326d 29/29 289d 9f2c0ac1423d ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free
possible deadlock in mptcp_pm_addr_send_ack mptcp 4 2 337d 343d 29/29 289d 9f7c02e03157 nbd: restrict sockets to TCP and UDP
possible deadlock in do_ip_setsockopt (5) net 4 4 317d 338d 29/29 289d 9f7c02e03157 nbd: restrict sockets to TCP and UDP
KASAN: slab-out-of-bounds Write in fuse_dev_do_write fuse 21 syz, C 6 352d 357d 29/29 289d 9d81ba6d49a7 fuse: Block access to folio overlimit
WARNING in __rt_mutex_slowlock_locked exfat ext4 -1 syz, C done 10 299d 358d 29/29 289d 79c1587b6cda exfat: validate cluster allocation bits of the allocation bitmap
general protection fault in print_reg_state bpf 2 syz, C done 4 319d 325d 29/29 289d 34904582b502 bpf: Skip scalar adjustment for BPF_NEG if dst is a pointer
possible deadlock in mptcp_subflow_shutdown mptcp 4 1 345d 345d 29/29 289d 9f7c02e03157 nbd: restrict sockets to TCP and UDP
WARNING in ext4_xattr_inode_update_ref ext4 -1 syz, C error 1291 289d 338d 29/29 289d 57295e835408 ext4: guard against EA inode refcount underflow in xattr update
WARNING: bad unlock balance in copy_process mm 4 syz, C 304 314d 440d 29/29 289d 4ec3c15462b9 futex: Use correct exit on failure from futex_hash_allocate_default()
KASAN: slab-use-after-free Read in snd_usbmidi_error_timer (2) sound 19 12 320d 324d 29/29 289d 9f2c0ac1423d ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free
KASAN: use-after-free Read in __pnet_find_base_ndev smc 19 2 324d 337d 29/29 289d 3d3466878afd smc: Fix use-after-free in __pnet_find_base_ndev().
INFO: task hung in v9fs_file_fsync fs mm 1 syz, C done 14 321d 361d 29/29 289d e8fe3f07a357 9p/trans_fd: p9_fd_request: kick rx thread if EPOLLIN
KMSAN: uninit-value in __hfsplus_ext_cache_extent hfs 7 syz, C 2471 319d 960d 29/29 289d 4840ceadef42 hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent()
WARNING in ah6_output net -1 syz, C error 8 326d 447d 29/29 289d 2327a3d6f65c net: ipv6: fix field-spanning memcpy warning in AH output
KASAN: slab-use-after-free Read in release_sock (2) bluetooth 19 1 358d 352d 29/29 289d 862c62810856 Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
WARNING in convert_ctx_accesses (2) bpf -1 syz, C 16 320d 335d 29/29 289d 6fabca2fc94d bpf: Explicitly check accesses to bpf_sock_addr
WARNING in maybe_exit_scc bpf -1 syz, C done 59 317d 333d 29/29 289d a3c73d629ea1 bpf: dont report verifier bug for missing bpf_scc_visit on speculative path
KMSAN: uninit-value in squashfs_get_parent squashfs 7 syz, C 2 330d 330d 29/29 289d 74058c0a9fc8 Squashfs: fix uninit-value in squashfs_get_parent
general protection fault in btrfs_root_node btrfs 8 syz, C done 670 313d 710d 29/29 289d ed4e6b5d644c btrfs: ref-verify: handle damaged extent root tree
possible deadlock in __mptcp_close_ssk mptcp 4 5 314d 343d 29/29 289d 9f7c02e03157 nbd: restrict sockets to TCP and UDP
general protection fault in ocfs2_evict_inode (2) ocfs2 2 syz, C error 68 353d 360d 29/29 289d f46e8ef8bb7b ocfs2: prevent release journal inode after journal shutdown
KASAN: global-out-of-bounds Read in z_erofs_decompress_queue erofs 17 syz, C done 6 357d 357d 29/29 289d 131897c65e2b erofs: fix invalid algorithm for encoded extents
WARNING in ovl_copy_up_file (2) squashfs -1 syz, C error 12 323d 323d 29/29 289d 9f1c14c1de1b Squashfs: reject negative file sizes in squashfs_read_inode()
WARNING in max_vclocks_store mm net -1 syz, C 3 349d 585d 29/29 289d e9f35294e18d ptp: Add a upper bound on max_vclocks
KMSAN: uninit-value in hfsplus_delete_cat hfs 7 syz, C 4901 319d 1348d 29/29 289d 9b3d15a75891 hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat()
INFO: task hung in ocfs2_page_mkwrite (2) ocfs2 1 syz, C error 4 359d 358d 29/29 289d 04100f775c2e ocfs2: fix recursive semaphore deadlock in fiemap call
general protection fault in xa_destroy ext4 8 17 299d 355d 29/29 289d 3c3fac6bc0a9 ext4: fix potential null deref in ext4_mb_init()
possible deadlock in snd_pcm_drop sound 4 syz, C error 4 320d 319d 29/29 289d 9fc4a3da9a02 ALSA: pcm: Disable bottom softirqs as part of spin_lock_irq() on PREEMPT_RT
possible deadlock in sctp_sock_migrate (2) sctp 4 5 319d 343d 29/29 289d 9f7c02e03157 nbd: restrict sockets to TCP and UDP
KMSAN: uninit-value in nci_dev_up (2) nfc net 7 syz, C 34 316d 372d 29/29 289d 9c328f54741b net: nfc: nci: Add parameter validation for packet data
KCSAN: data-race in __unmap_hugepage_range / alloc_surplus_hugetlb_folio mm 6 1 365d 365d 29/29 289d 21cc2b5c5062 mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range()
kernel BUG in netfs_perform_write netfs -1 syz, C error 17 325d 344d 29/29 289d 66d938e89e94 netfs: Prevent duplicate unlocking
WARNING in __linkwatch_sync_dev (2) net -1 syz, C done 952 302d 428d 29/29 289d 23a6037ce76c bonding: Remove support for use_carrier
KCSAN: data-race in snd_seq_fifo_cell_out / snd_seq_fifo_poll_wait sound 6 1 367d 367d 29/29 289d 1f9fc89cbbe8 ALSA: seq: Fix KCSAN data-race warning at snd_seq_fifo_poll_wait()
possible deadlock in tcp_sendmsg net 4 6 316d 344d 29/29 289d 9f7c02e03157 nbd: restrict sockets to TCP and UDP
BUG: sleeping function called from invalid context in dummy_dequeue usb 5 syz, C error 6278 334d 354d 29/29 289d 8d63c83d8eb9 USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels
possible deadlock in mptcp_close (2) mptcp 4 1 349d 349d 29/29 289d 9f7c02e03157 nbd: restrict sockets to TCP and UDP
kernel BUG in clear_inode (4) f2fs -1 syz, C done 6 308d 339d 29/29 289d 9251a9e6e871 f2fs: fix to truncate first page in error path of f2fs_truncate()
kernel BUG in f2fs_truncate_hole (2) f2fs -1 2 356d 358d 29/29 289d c18ecd99e0c7 f2fs: fix to do sanity check on node footer for non inode dnode
general protection fault in blk_mq_free_tags_callback block 2 syz, C 3 326d 326d 29/29 289d 670bfe683850 blk-mq: fix null-ptr-deref in blk_mq_free_tags() from error path
WARNING in nfsd_file_cache_init mm -1 syz, C error 4 313d 311d 29/29 289d f7dfa0f31b13 slub: Don't call lockdep_unregister_key() for immature kmem_cache.
general protection fault in f2fs_check_opt_consistency f2fs 2 syz, C done 5 316d 363d 29/29 289d 930a9a6ee8e7 f2fs: fix to avoid NULL pointer dereference in f2fs_check_quota_consistency()
WARNING: locking bug in vgic_put_irq kvmarm 4 syz, C 7 347d 354d 29/29 289d d54594accf73 KVM: arm64: vgic-v3: Erase LPIs from xarray outside of raw spinlocks
KASAN: slab-use-after-free Read in __io_req_task_work_add (2) io-uring 19 2 329d 330d 29/29 289d df8922afc37a io_uring/msg_ring: kill alloc_cache for io_kiocb allocations
WARNING in ni_rename ntfs3 -1 syz, C error 233 291d 411d 29/29 289d 0dc7117da8f9 fs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist
possible deadlock in vsock_connectible_setsockopt net virt 4 1 333d 333d 29/29 289d 9f7c02e03157 nbd: restrict sockets to TCP and UDP
KASAN: slab-use-after-free Write in __xfrm_state_delete net 22 syz, C done 4863 298d 381d 29/29 289d cd8ae32e4e46 xfrm: xfrm_alloc_spi shouldn't use 0 as SPI
general protection fault in try_to_wake_up (3) kernel 2 syz 23 326d 346d 29/29 289d b549113738e8 futex: Prevent use-after-free during requeue-PI
KASAN: vmalloc-out-of-bounds Write in imageblit (5) fbdev 21 syz, C 1075 289d 340d 29/29 289d 3637d34b35b2 fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds
KASAN: slab-out-of-bounds Read in hfsplus_bmap_alloc hfs 17 syz, C 1 380d 536d 29/29 289d 738d5a51864e hfs: validate record offset in hfsplus_bmap_alloc
general protection fault in exfat_utf16_to_nls exfat 2 syz, C done 11 323d 324d 29/29 289d 29c063658d53 exfat: combine iocharset and utf8 option setup
INFO: task hung in erofs_bread erofs 1 syz, C 4 333d 333d 29/29 289d 334c0e493c2a erofs: avoid reading more for fragment maps
WARNING in sysfs_emit_at fs -1 syz, C 2 342d 338d 29/29 289d 9dfec4a51df9 USB: core: remove the move buf action
KASAN: use-after-free Read in udf_update_tag udf 19 syz, C 27 322d 723d 29/29 289d 3bd5e45c2ce3 fs: udf: fix OOB read in lengthAllocDescs handling
WARNING: possible circular locking dependency detected (5) -1 syz, C 1 333d 333d 29/29 289d 9f7c02e03157 nbd: restrict sockets to TCP and UDP
possible deadlock in serial8250_handle_irq hams 4 syz, C 180 319d 1120d 29/29 289d 38b04ed7072e 6pack: drop redundant locking and refcounting
INFO: trying to register non-static key in skb_dequeue (4) audit -1 syz, C done 20 344d 344d 29/29 289d 2aef21a6a603 audit: init ab->skb_list earlier in audit_buffer_alloc()
possible deadlock in inet_shutdown net 4 syz, C done 11 334d 343d 29/29 289d 9f7c02e03157 nbd: restrict sockets to TCP and UDP
WARNING in inet_sock_destruct (5) net -1 syz, C error 8 302d 339d 29/29 289d a3967baad4d5 tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.
WARNING in kvm_arch_vcpu_ioctl_run (6) kvm-x86 -1 syz, C 117 312d 393d 29/29 289d e750f8539128 KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O
possible deadlock in tipc_shutdown tipc 4 6 329d 344d 29/29 289d 9f7c02e03157 nbd: restrict sockets to TCP and UDP
KASAN: slab-use-after-free Read in napi_gro_frags (2) net 19 syz, C done 3 339d 332d 29/29 289d 1091860a16a8 net: tun: Update napi->skb after XDP process
WARNING in do_misc_fixups bpf -1 syz, C 7604 337d 375d 29/29 289d e4414b01c1cd bpf: Check the helper function is valid in get_helper_proto
possible deadlock in smc_diag_dump_proto smc 4 syz, C error 113 343d 346d 29/29 289d 5d6b58c932ec net: lockless sock_i_ino()
general protection fault in find_match (6) net 17 syz, C 102 326d 332d 29/29 289d 390b3a300d78 nexthop: Forbid FDB status change while nexthop is in a group
KMSAN: kernel-infoleak in rng_recvmsg crypto 9 syz, C 50 315d 371d 29/29 289d 9aa7e045f4af crypto: jitter - Mark intermediary memory as clean
WARNING in ext4_xattr_block_set (3) ext4 -1 syz, C error 73 301d 332d 29/29 289d 44d2a72f4d64 ext4: validate ea_ino and size in check_xattrs
WARNING in est_timer net -1 syz, C error 497 344d 353d 29/29 289d 9f74c0ea9b26 net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y
KMSAN: uninit-value in lan78xx_reset net usb 7 syz, C 14 310d 344d 29/29 289d 49bdb63ff644 net: usb: lan78xx: Fix lost EEPROM read timeout error(-ETIMEDOUT) in lan78xx_read_raw_eeprom
possible deadlock in inet_sendmsg net 4 2 340d 341d 29/29 289d 9f7c02e03157 nbd: restrict sockets to TCP and UDP
WARNING in tracing_buffers_mmap_close trace -1 syz, C 1378 309d 607d 29/29 289d de4cbd704731 ring buffer: Propagate __rb_map_vma return value to caller
KASAN: slab-use-after-free Read in cmp_bss wireless 19 syz, C 13 346d 368d 29/29 289d 26e84445f02c wifi: cfg80211: fix use-after-free in cmp_bss()
possible deadlock in path_openat (3) fs 4 1 348d 348d 29/29 289d 9f7c02e03157 nbd: restrict sockets to TCP and UDP
possible deadlock in do_tcp_setsockopt net 4 1 343d 343d 29/29 289d 9f7c02e03157 nbd: restrict sockets to TCP and UDP
KCSAN: data-race in try_to_migrate_one / zap_page_range_single_batched mm 6 1 324d 322d 29/29 289d 989c2f55ca48 mm: silence data-race in update_hiwater_rss
possible deadlock in __mptcp_push_pending mptcp 4 3 314d 345d 29/29 289d 9f7c02e03157 nbd: restrict sockets to TCP and UDP
possible deadlock in __netdev_update_features net 4 syz, C done 227 291d 438d 29/29 289d 0f82c3ba66c6 macsec: sync features on RTM_NEWLINK
possible deadlock in smc_shutdown (3) smc 4 2 322d 349d 29/29 289d 9f7c02e03157 nbd: restrict sockets to TCP and UDP
possible deadlock in task_fork_fair bpf trace 4 syz, C done done 9106 628d 1041d 29/29 303d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
UBSAN: shift-out-of-bounds in aio_iiro_16_attach comedi -1 syz, C 56 390d 403d 29/29 303d 66acb1586737 comedi: aio_iiro_16: Fix bit shift out of bounds
general protection fault in iter_file_splice_write fs 2 syz, C done done 2812 359d 816d 29/29 303d netfs: Fix unbuffered write error handling
WARNING in try_to_migrate_one (3) mm -1 syz, C done done 6 347d 370d 29/29 303d cf1b80dc31a1 mm: pass page directly instead of using folio_page
WARNING in kvm_apic_accept_events kvm-x86 -1 syz, C error done 27 337d 435d 29/29 303d 0fe3e8d804fd KVM: x86: Move INIT_RECEIVED vs. INIT/SIPI blocked check to KVM_RUN
WARNING in nf_reject_fill_skb_dst netfilter -1 syz, C done 214 345d 358d 29/29 305d netfilter: nf_reject: don't leak dst refcount for loopback packets
WARNING in nf_send_reset6 netfilter -1 syz, C 9 350d 358d 29/29 305d netfilter: nf_reject: don't leak dst refcount for loopback packets
WARNING in nf_send_unreach6 netfilter -1 508 345d 359d 29/29 305d netfilter: nf_reject: don't leak dst refcount for loopback packets
KMSAN: uninit-value in sctp_inq_pop (2) sctp 7 syz, C 4089 366d 1679d 29/29 310d fd60d8a08619 sctp: linearize cloned gso packets in sctp_rcv
KMSAN: kernel-infoleak in do_insn_ioctl comedi 18 syz, C 164 356d 393d 29/29 310d 3cd212e895ca comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl()
general protection fault in rose_rt_ioctl hams 2 syz, C 64 351d 352d 29/29 310d 1cc8a5b534e5 net: rose: fix a typo in rose_clear_routes()
UBSAN: shift-out-of-bounds in pcl726_attach comedi -1 syz, C 318 356d 405d 29/29 310d 96cb948408b3 comedi: pcl726: Prevent invalid irq number
KASAN: slab-out-of-bounds Read in mcp2221_raw_event input usb 19 syz, C 1144 310d 616d 29/29 310d b56cc41a3ae7 hid: fix I2C read buffer overflow in raw_event() for mcp2221
possible deadlock in bch2_symlink exfat 4 syz, C error 1135 345d 684d 29/29 310d 5f1c8965e748 ovl: use I_MUTEX_PARENT when locking parent in ovl_create_temp()
general protection fault in atmtcp_c_send atm 2 syz, C done 7 353d 359d 29/29 310d ec79003c5f9d atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().
BUG: unable to handle kernel paging request in move_pages mm 8 syz, C 4 379d 393d 29/29 310d aba6faec0103 userfaultfd: fix a crash in UFFDIO_MOVE when PMD is a migration entry
UBSAN: shift-out-of-bounds in ax88772_bind usb -1 syz, C done 19 358d 363d 29/29 310d 24ef2f53c07f net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization
WARNING in xfrm_state_fini (3) net -1 syz, C done 122008 310d 381d 29/29 310d 42e42562c9cf xfrm: flush all states in xfrm_state_fini
possible deadlock in posix_clock_unregister kernel 4 16 365d 405d 29/29 310d 2efe41234dbd ptp: prevent possible ABBA deadlock in ptp_clock_freerun()
WARNING: ODEBUG bug in __sk_destruct (3) net -1 syz, C error 12 355d 371d 29/29 310d 52565a935213 net: kcm: Fix race condition in kcm_unattach()
WARNING in shmem_unlink overlayfs -1 syz inconclusive 12 326d 363d 29/29 310d e8bd877fb76b ovl: fix possible double unlink
WARNING in css_rstat_exit cgroups -1 syz 39 358d 427d 29/29 310d eea51c6e3f66 cgroup: avoid null de-ref in css_rstat_exit()
WARNING in __ww_mutex_wound dri -1 syz, C 16832 349d 381d 29/29 310d 21924af67d69 locking: Fix __clear_task_blocked_on() warning from __ww_mutex_wound() path
possible deadlock in xsk_diag_dump (2) net bpf 4 1 375d 375d 29/29 310d c64237960819 hamradio: ignore ops-locked netdevs
KMSAN: uninit-value in sctp_assoc_bh_rcv sctp 7 syz, C 258 366d 496d 29/29 310d fd60d8a08619 sctp: linearize cloned gso packets in sctp_rcv
BUG: unable to handle kernel paging request in nsim_queue_free net 8 syz 49 345d 379d 29/29 310d b2cafefaf047 netdevsim: Fix wild pointer access in nsim_queue_free().
KMSAN: uninit-value in hsr_get_node (3) net 7 syz, C 30 359d 848d 29/29 310d 7af76e9d18a9 net, hsr: reject HSR frame if skb can't hold tag
KASAN: slab-use-after-free Read in rose_timer_expiry (3) hams 19 6059 345d 452d 29/29 310d da9c9c877597 net: rose: include node references in rose_neigh refcount
WARNING in move_page_tables mm -1 syz, C 3 367d 367d 29/29 310d 772e5b4a5e83 mm/mremap: fix WARN with uffd that has remap events disabled
WARNING in nft_socket_init (2) netfilter -1 syz, C done 6 367d 385d 29/29 310d 1dee968d22ea netfilter: nft_socket: remove WARN_ON_ONCE with huge level value
WARNING in follow_page_pte input usb mm -1 syz, C done 6 373d 373d 29/29 310d cf1b80dc31a1 mm: pass page directly instead of using folio_page
WARNING in virtio_transport_send_pkt_info net virt kvm -1 syz, C 145 350d 368d 29/29 310d 7fb1291257ea vsock/virtio: Fix message iterator handling on transmit path
possible deadlock in xsk_notifier (3) bpf net 4 3 365d 416d 29/29 310d 53898ebabe84 net: lapbether: ignore ops-locked netdevs
KMSAN: uninit-value in __sctp_v6_cmp_addr (2) sctp 7 syz, C 9 354d 353d 29/29 310d 2e8750469242 sctp: initialize more fields in sctp_v6_from_sk()
KMSAN: kernel-infoleak in do_insnlist_ioctl comedi 18 syz, C 10 358d 389d 29/29 310d 3cd212e895ca comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl()
WARNING in rxe_skb_tx_dtor rdma -1 syz, C 11 357d 470d 29/29 310d 3c3e9a9f2972 RDMA/rxe: Flush delayed SKBs while releasing RXE resources
WARNING in path_noexec mm fs -1 syz, C done 14318 318d 403d 29/29 318d secretmem: use SB_I_NOEXEC
kernel BUG in f2fs_sync_node_pages f2fs -1 syz, C done 4275 343d 425d 29/29 323d 6dea74e454c2 f2fs: Fix __write_node_folio() conversion
WARNING in bdev_count_inflight_rw block -1 2 413d 412d 29/29 328d c007062188d8 block: fix false warning in bdev_count_inflight_rw()
WARNING: suspicious RCU usage in corrupted (3) net 4 syz, C done done 1 384d 445d 29/29 331d 7f12c3385048 net, bpf: Fix RCU usage in task_cls_state() for BPF programs
INFO: task hung in hub_activate (3) usb 1 177 408d 409d 29/29 333d 9bd9c8026341 usb: hub: Fix flushing of delayed work used for post resume purposes
WARNING in flush_delayed_work usb -1 syz, C 704 408d 413d 29/29 333d 9bd9c8026341 usb: hub: Fix flushing of delayed work used for post resume purposes
kernel BUG in bch2_journal_keys_peek_max fs -1 syz, C done 45 410d 548d 29/29 333d 425da82c63e3 bcachefs: btree_iter: fix updates, journal overlay
kernel BUG in bch2_journal_keys_peek_prev_min fs -1 1 415d 411d 29/29 337d 1f8aede70d49 bcachefs: fix bch2_journal_keys_peek_prev_min() underflow
WARNING in osif_xfer/usb_submit_urb usb -1 syz, C error done 18 419d 466d 29/29 337d 56ad91c1aa9c i2c: robotfuzz-osif: disable zero-length read messages
KMSAN: kernel-infoleak in vmci_host_unlocked_ioctl (3) kernel 9 syz, C 20 392d 421d 29/29 339d 8282013b5605 vmci: Prevent the dispatching of uninitialized payloads vmci: Prevent the dispatching of uninitialized payloads
WARNING in move_to_new_folio (2) gfs2 mm -1 syz, C error 398 382d 402d 29/29 340d 5c8f12cf1e64 gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops
WARNING in __vmap_pages_range_noflush io-uring -1 syz, C done 14 372d 371d 29/29 344d 33503c083fda io_uring/memmap: cast nr_pages to size_t before shifting
WARNING in bpf_check (4) bpf -1 syz, C done 5241 344d 450d 29/29 344d e09299225d5b bpf: Reject narrower access to pointer ctx fields
WARNING in ip6_mr_output net -1 syz, C done 143 409d 413d 29/29 344d af232e7615e4 ipv6: guard ip6_mr_output() with rcu
KASAN: use-after-free Read in bch2_btree_node_read_done fs 19 syz, C done 64 417d 627d 29/29 344d d89a34b14df5 bcachefs: Move bset size check before csum check
WARNING in _ieee80211_sta_cur_vht_bw wireless -1 syz, C 52 400d 414d 29/29 344d 58fcb1b4287c wifi: mac80211: reject VHT opmode for unsupported channel widths
KASAN: slab-use-after-free Read in rose_get_neigh hams 19 syz, C error 1449 402d 794d 29/29 344d 34a500caf48c rose: fix dangling neighbour pointers in rose_rt_device_down()
KASAN: slab-use-after-free Read in br_multicast_has_router_adjacent bridge 19 2 418d 415d 29/29 344d 7544f3f5b0b5 bridge: mcast: Fix use-after-free during router port configuration
KASAN: slab-out-of-bounds Read in mon_copy_to_buff usb 17 syz, C 7 396d 403d 29/29 344d 0d0777ccaa2d HID: core: ensure __hid_request reserves the report ID as the first byte
KASAN: slab-use-after-free Read in do_check bpf 19 syz, C 15 427d 429d 29/29 344d 3d71b8b9abae bpf: Fix state use-after-free on push_stack() err
WARNING in ieee80211_tdls_oper wireless -1 syz, C 6 435d 459d 29/29 344d 16ecdab5446f wifi: mac80211: reject TDLS operations when station is not associated
WARNING in ipv6_gso_segment net -1 syz, C 8 380d 380d 29/29 344d d45cf1e7d718 ipv6: reject malicious packets in ipv6_gso_segment()
kernel BUG in try_to_unmap_one (2) mm -1 syz, C 7 411d 435d 29/29 344d 9f1e8cd0b7c4 mm/vmscan: fix hwpoisoned large folio handling in shrink_folio_list
kernel BUG in bch2_btree_path_level_init (3) fs -1 syz, C done 489 344d 601d 29/29 344d 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
WARNING in perf_pending_task perf -1 syz, C 35773 391d 416d 29/29 344d 3da6bb419750 perf/core: Fix WARN in perf_sigtrap()
possible deadlock in team_del_slave (3) net 4 syz, C error 386707 356d 840d 29/29 344d bfb4fb77f9a8 team: replace team lock with rtnl lock
general protection fault in __smc_diag_dump (3) smc 2 syz, C error 102 351d 645d 29/29 344d 60ada4fe644e smc: Fix various oops due to inet_sock type confusion.
UBSAN: shift-out-of-bounds in das16m1_attach comedi -1 syz, C 92 390d 406d 29/29 344d ed93c6f68a3b comedi: das16m1: Fix bit shift out of bounds
WARNING in hashtab_init selinux -1 syz, C 992 380d 422d 29/29 344d 9ab71d9204c3 selinux: add __GFP_NOWARN to hashtab_init() allocations
kernel BUG in __bch2_bkey_compat fs -1 syz, C done done 5 427d 427d 29/29 344d 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
possible deadlock in bdev_release block 4 11 377d 420d 29/29 344d 8b428f42f3ed nbd: fix lockdep deadlock warning
INFO: task hung in generic_file_write_iter (3) exfat 1 syz, C error 4 347d 387d 29/29 344d fb0e9db99eef fat: fix too many log in fat_chain_add()
KASAN: slab-use-after-free Read in br_multicast_add_router bridge 19 1 432d 427d 29/29 344d 7544f3f5b0b5 bridge: mcast: Fix use-after-free during router port configuration
WARNING in bdev_getblk udf -1 syz, C done 146 345d 404d 29/29 344d 7e49538288e5 loop: Avoid updating block size under exclusive owner
kernel BUG in do_write_page f2fs -1 23 402d 409d 29/29 344d 8f4688591d96 f2fs: fix to use f2fs_is_valid_blkaddr_raw() in do_write_page()
kernel BUG in bch2_trans_update_by_path fs -1 syz, C done 857 346d 421d 29/29 344d c72d628469b8 bcachefs: Fix btree for nonexistent tree depth
BUG: unable to handle kernel paging request in __bch2_bkey_unpack_key fs 8 syz, C 75 420d 444d 29/29 344d 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
KMSAN: uninit-value in __try_merge_extent_node f2fs 7 3 385d 422d 29/29 344d 154467f4ad03 f2fs: fix KMSAN uninit-value in extent_info usage
WARNING in udf_process_sequence udf -1 syz, C error 1 400d 399d 29/29 344d 1a11201668e8 udf: Verify partition map count
WARNING in btrfs_rebuild_free_space_tree btrfs -1 syz, C 1 436d 432d 29/29 344d 1e6ed33cabba btrfs: fix failure to rebuild free space tree using multiple transactions
WARNING in reg_bounds_sanity_check bpf -1 syz, C done 6525 344d 409d 29/29 344d 6279846b9b25 bpf: Forget ranges when refining tnum after JSET
general protection fault in clip_push ext4 net 8 syz, C 5 413d 420d 29/29 344d b993ea46b3b6 atm: clip: prevent NULL deref in clip_push()
general protection fault in qfq_qlen_notify net 2 syz, C 18 400d 406d 29/29 344d ffdde7bf5a43 net/sched: Abort __tc_modify_qdisc if parent class does not exist
KASAN: slab-use-after-free Read in disk_add_events fuse block 19 syz, C 4 381d 381d 29/29 344d 1df1fc845d22 md: fix create on open mddev lifetime regression
WARNING in ip_mr_output netfilter -1 syz, C error 74 410d 413d 29/29 344d beead7eea896 net: ipv4: guard ip_mr_output() with rcu
kernel BUG in clear_inode (3) jfs -1 syz, C error 637 347d 428d 29/29 344d 2d91b3765cd0 jfs: truncate good inode pages when hard link is 0
general protection fault in drr_qlen_notify net 10 syz, C done 101 397d 406d 29/29 344d ffdde7bf5a43 net/sched: Abort __tc_modify_qdisc if parent class does not exist
general protection fault in qdisc_tree_reduce_backlog net 8 syz, C done 255 394d 406d 29/29 344d ffdde7bf5a43 net/sched: Abort __tc_modify_qdisc if parent class does not exist
WARNING: refcount bug in process_scheduled_works fuse 13 syz, C done 277 371d 381d 29/29 344d 1df1fc845d22 md: fix create on open mddev lifetime regression
Unable to handle kernel write to read-only memory at virtual address ADDR (2) net lsm -1 1 403d 402d 29/29 344d 60ada4fe644e smc: Fix various oops due to inet_sock type confusion.
kernel panic: trans should be locked, unlocked by bch2_btree_update_start fs 2 syz, C error error 361 426d 617d 29/29 344d 5c4acbc8ce90 bcachefs: Don't unlock the trans if ret doesn't match BCH_ERR_operation_blocked
upstream build error (23) -1 46 380d 381d 29/29 344d f627b51aaa04 compiler_types: Provide __no_kstack_erase to disable coverage only on Clang
KMSAN: uninit-value in xfrm_state_find (4) net 19 2406 344d 450d 29/29 344d 94d077c33173 xfrm: state: initialize state_ptrs earlier in xfrm_state_find
WARNING in usbnet_status_start usb -1 syz, C 349 389d 402d 29/29 344d 4c4ca3c46167 usb: net: sierra: check for no status endpoint
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb (4) bluetooth 12 syz, C 8 403d 403d 29/29 344d a0075accbf0d Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb()
BUG: unable to handle kernel paging request in ocfs2_unlock_and_free_folios ocfs2 8 syz, C 141 368d 425d 29/29 344d 2ae826799932 ocfs2: reset folio to NULL when get folio fails
general protection fault in hfsc_qlen_notify net 10 syz, C 161 393d 407d 29/29 344d ffdde7bf5a43 net/sched: Abort __tc_modify_qdisc if parent class does not exist
KMSAN: uninit-value in pptp_xmit (3) net 7 syz, C 49 374d 381d 29/29 344d de9c4861fb42 pptp: ensure minimal skb length in pptp_xmit()
KASAN: use-after-free Read in crypto_poly1305_update bcachefs 19 syz, C done done 20 424d 543d 29/29 344d d89a34b14df5 bcachefs: Move bset size check before csum check
KASAN: slab-use-after-free Read in skb_queue_purge_reason (3) bluetooth 19 5 416d 424d 29/29 344d 1d6123102e9f Bluetooth: hci_core: Fix use-after-free in vhci_flush()
KASAN: slab-use-after-free Read in __io_req_task_work_add io-uring 19 1 407d 402d 29/29 344d fc582cd26e88 io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU
KASAN: slab-out-of-bounds Read in ntfs_utf16_to_nls ntfs3 17 syz, C error 5 432d 436d 29/29 344d e841ecb13933 fs/ntfs3: Add sanity check for file name
general protection fault in htb_qlen_notify net 10 syz, C done 166 397d 407d 29/29 344d ffdde7bf5a43 net/sched: Abort __tc_modify_qdisc if parent class does not exist
BUG: stack guard page was hit in sock_close net -1 1 410d 408d 29/29 344d c489f3283dbf atm: clip: Fix infinite recursive call of clip_push().
KASAN: slab-use-after-free Write in recv_work (2) nbd 22 syz, C 16 363d 459d 29/29 344d aa9552438ebf nbd: fix uaf in nbd_genl_connect() error path
WARNING in do_check bpf -1 syz, C error 51 356d 427d 29/29 344d 3157f7e29996 bpf: handle jset (if a & b ...) as a jump in CFG computation
KASAN: slab-out-of-bounds Read in poly1305_update_arch bcachefs 19 syz, C done done 29 439d 830d 29/29 344d d89a34b14df5 bcachefs: Move bset size check before csum check
kernel BUG in bch2_bkey_cmp_packed (2) fs -1 syz, C 7 428d 438d 29/29 344d 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
kernel BUG in bch2_reconstruct_snapshots fs -1 syz, C done done 7 452d 543d 29/29 344d b2e2bed11980 bcachefs: Add missing key type checks to check_snapshot_exists()
KMSAN: uninit-value in get_temp_cnct hwmon 7 9 395d 421d 29/29 344d 495a4f0dce9c hwmon: (corsair-cpro) Validate the size of the received input buffer
UBSAN: array-index-out-of-bounds in dbAllocAG jfs 15 syz, C 1 468d 478d 29/29 344d c214006856ff jfs: upper bound check of tree index in dbAllocAG
KASAN: slab-use-after-free Read in neon_poly1305_update bcachefs 19 syz, C 5 752d 819d 29/29 344d d89a34b14df5 bcachefs: Move bset size check before csum check
possible deadlock in __ocfs2_flush_truncate_log ocfs2 4 syz, C inconclusive 3410 368d 517d 29/29 344d 08eabe4b9e98 ocfs2: avoid potential ABBA deadlock by reordering tl_inode lock
UBSAN: shift-out-of-bounds in gfs2_dir_read (2) gfs2 -1 syz, C 13 392d 396d 29/29 344d 557c024ca725 gfs2: Validate i_depth for exhash directories
KMSAN: uninit-value in dt2817_dio_insn_bits comedi 7 2 405d 403d 29/29 344d e9cb26291d00 comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
kernel BUG in sanity_check_pinned_pages mm -1 syz, C 3 419d 437d 29/29 344d 5afb4bf9fc62 io_uring/rsrc: fix folio unpinning
WARNING in btrfs_add_delayed_iput btrfs -1 2 399d 436d 29/29 344d a26bf338cdad btrfs: fix race between async reclaim worker and close_ctree()
BUG: unable to handle kernel NULL pointer dereference in bch2_btree_update_start fs 10 syz, C 6 414d 427d 29/29 344d 56be92c63f02 bcachefs: Fix pool->alloc NULL pointer dereference
WARNING in check_helper_call bpf -1 syz, C done 7 367d 409d 29/29 344d 65fdafd6765f bpf: Avoid warning on multiple referenced args in call
KASAN: use-after-free Read in bch2_checksum fs 19 syz, C error done 8 448d 460d 29/29 344d d89a34b14df5 bcachefs: Move bset size check before csum check
kernel BUG in bch2_btree_node_iter_init (2) fs -1 syz, C done 3 401d 401d 29/29 344d 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
possible deadlock in upgrade_mmap_lock_carefully (2) ntfs3 mm 4 syz, C error 6 414d 432d 29/29 344d a49f0abd8959 Revert "fs/ntfs3: Replace inode_trylock with inode_lock"
KASAN: slab-out-of-bounds Read in pause_parse_request net 17 syz, C done 217 408d 414d 29/29 344d 99e3eb454cc4 net: ethtool: avoid OOB accesses in PAUSE_SET
possible deadlock in dev_set_allmulti (2) net 4 2 417d 425d 29/29 344d bfb4fb77f9a8 team: replace team lock with rtnl lock
WARNING in kvfree_call_rcu net lsm -1 syz, C 2 403d 402d 29/29 344d 60ada4fe644e smc: Fix various oops due to inet_sock type confusion.
WARNING in format_decode (3) bpf trace -1 syz, C done 2248 390d 997d 29/29 344d f8242745871f bpf: Reject %p% format string in bprintf-like helpers
KASAN: slab-out-of-bounds Read in nfacct_mt_checkentry netfilter 17 syz, C done 7 395d 393d 29/29 344d bf58e667af7d netfilter: xt_nfacct: don't assume acct name is null-terminated
KASAN: vmalloc-out-of-bounds Write in imageblit (4) fbdev 21 syz, C 3869 344d 723d 29/29 344d af0db3c1f898 fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
kernel BUG in __hfsplus_setxattr hfs -1 syz, C error 18903 368d 1357d 29/29 344d c7c6363ca186 hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
kernel panic: in transaction restart: transaction_restart_mem_realloced, last restarted by fs 2 2 413d 410d 29/29 344d fbf913cb72a5 bcachefs: Fix incorrect transaction restart handling
WARNING in record_func_key bpf -1 syz, C 90 406d 409d 29/29 344d 032547272eb0 bpf: Avoid warning on unexpected map for tail call
WARNING in hfsplus_free_extents hfs -1 syz, C error 402 387d 1348d 29/29 344d fcb96956c921 hfsplus: remove mutex_lock check in hfsplus_free_extents
KMSAN: uninit-value in nf_flow_offload_inet_hook (2) netfilter 7 syz, C 13 401d 403d 29/29 344d 18cdb3d982da netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
KASAN: slab-use-after-free Read in bch2_str_hash_repair_key fs 19 syz, C done 226 410d 430d 29/29 344d 9b54efe66c9b bcachefs: Fix alloc_req use after free
general protection fault in tipc_conn_close (4) tipc 2 1 412d 408d 29/29 344d 667eeab4999e tipc: Fix use-after-free in tipc_conn_close().
kernel BUG in __bch2_bkey_unpack_key fs -1 syz, C 43 423d 444d 29/29 344d 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
UBSAN: shift-out-of-bounds in __bch2_btree_node_hash_insert fs -1 syz, C done 434 406d 590d 29/29 344d 96de8f852031 bcachefs: mark invalid_btree_id autofix
KASAN: slab-out-of-bounds Read in ocfs2_dx_dir_lookup_rec ocfs2 19 syz, C 76 344d 624d 29/29 344d 44acc46d182f ocfs2: avoid NULL pointer dereference in dx_dir_lookup_rec()
kernel BUG in folio_unlock (3) f2fs netfs -1 syz, C done 2837 429d 540d 29/29 344d 6dea74e454c2 f2fs: Fix __write_node_folio() conversion
KASAN: slab-use-after-free Read in io_poll_remove_entries comedi 19 syz, C 12 382d 391d 29/29 344d 35b6fc51c666 comedi: fix race between polling and detaching
possible deadlock in rpc_close_pipes net nfs 4 syz, C 904 406d 408d 29/29 344d 2a8061ee5e41 better lockdep annotations for simple_recursive_removal()
WARNING: suspicious RCU usage in task_cls_state net 4 syz, C done 175 357d 445d 29/29 344d 7f12c3385048 net, bpf: Fix RCU usage in task_cls_state() for BPF programs
BUG: assuming non migratable context at ./include/linux/filter.h:LINE netfilter -1 syz, C done 1189 356d 393d 29/29 344d 17ce3e5949bc bpf: Disable migration in nf_hook_run_bpf().
WARNING in remove_proc_entry (8) net nfs -1 syz 76 378d 428d 29/29 344d e8d6f3ab5946 nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
KASAN: slab-use-after-free Read in bch2_bucket_alloc_trans fs 19 syz, C error 550 410d 428d 29/29 344d 9b54efe66c9b bcachefs: Fix alloc_req use after free
UBSAN: shift-out-of-bounds in __bch2_bkey_unpack_key fs -1 syz, C done 54 427d 443d 29/29 344d 03208bd06a61 bcachefs: don't return fsck_fix for unfixable node errors in __btree_err
WARNING in taprio_get_start_time (2) net -1 1 427d 427d 29/29 344d ae8508b25def net/sched: taprio: enforce minimum value for picos_per_byte
KASAN: slab-out-of-bounds Read in afs_proc_addr_prefs_write afs 17 syz, C 659 385d 605d 29/29 344d 9aa64182952d afs: Fix check for NULL terminator
possible deadlock in team_device_event (3) net 4 syz, C error 38569 356d 827d 29/29 344d bfb4fb77f9a8 team: replace team lock with rtnl lock
UBSAN: shift-out-of-bounds in s32ton (2) input usb -1 syz, C 4 389d 396d 29/29 344d a6b87bfc2ab5 HID: core: Harden s32ton() against conversion to 0 bits
linux-next test error: WARNING in apparmor_unix_stream_connect apparmor -1 30 380d 389d 29/29 344d f3c0675bb9e0 apparmor: fix test error: WARNING in apparmor_unix_stream_connect
general protection fault in pick_link (2) ntfs3 2 syz, C error 7 409d 423d 29/29 344d d99208b91933 fs/ntfs3: cancle set bad inode after removing name fails
KASAN: invalid-free in nl80211_dump_station wireless 24 5 394d 408d 29/29 344d 9a44b5e36cd6 wifi: cfg80211: fix double free for link_sinfo in nl80211_station_dump()
UBSAN: array-index-out-of-bounds in ieee80211_request_ibss_scan (2) wireless 15 238 388d 398d 29/29 344d 444020f4bf06 wifi: cfg80211: remove scan request n_channels counted_by
KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump bluetooth 17 syz, C 1512 380d 501d 29/29 344d 7af4d7b53502 Bluetooth: hci_devcd_dump: fix out-of-bounds via dev_coredumpv
VFS: Busy inodes after unmount (use-after-free) (2) btrfs 2 syz, C error 277 348d 460d 29/29 344d d0118d7d20bb ocfs2: update d_splice_alias() return code checking
KASAN: slab-use-after-free Read in tcp_prune_ofo_queue net 19 syz, C done 356 393d 395d 29/29 344d 7eeabfb23738 tcp: fix UaF in tcp_prune_ofo_queue()
WARNING: kernel/bpf/verifier.c:LINE at do_check, CPU: syz.NUM.NUM/NUM bpf -1 syz done 5 424d 416d 29/29 344d dadb59104c64 bpf: Fix aux usage after do_check_insn()
UBSAN: shift-out-of-bounds in pcl812_attach comedi -1 syz, C 288 389d 406d 29/29 344d b14b076ce593 comedi: pcl812: Fix bit shift out of bounds
kernel BUG in __btree_trans_update_by_path fs -1 syz, C done 20 402d 407d 29/29 344d c72d628469b8 bcachefs: Fix btree for nonexistent tree depth
BUG: unable to handle kernel paging request in afs_put_vlserverlist afs 8 syz, C 3 399d 488d 29/29 344d 8b3c655fa240 afs: Set vllist to NULL if addr parsing fails
kernel BUG in ext4_update_inline_data ext4 -1 syz, C 15 381d 403d 29/29 344d 099b847ccc6c ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
kernel BUG in populate_free_space_tree btrfs -1 syz, C 4 436d 435d 29/29 344d 1961d20f6fa8 btrfs: fix assertion when building free space tree
WARNING in inet_sock_destruct (4) net -1 syz, C done 6683 346d 1148d 29/29 344d d3a5f2871adc tcp: Correct signedness in skb remaining space calculation
WARNING: proc registration bug in atm_dev_register net -1 syz, C error 5 414d 422d 29/29 344d a433791aeaea atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
BUG: unable to handle kernel NULL pointer dereference in vcc_sendmsg net 10 1 453d 449d 29/29 344d 22fc46cea91d atm: clip: Fix NULL pointer dereference in vcc_sendmsg()
kernel BUG in alloc_hugetlb_folio_reserve mm -1 syz, C done 98 398d 587d 29/29 344d c39b87456411 mm/hugetlb: don't crash when allocating a folio if there are no resv
kernel BUG in __bkey_unpack_pos (2) fs -1 syz, C done 24 399d 596d 29/29 344d 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
KASAN: slab-use-after-free Read in __free_filter trace 19 syz, C 4 417d 417d 29/29 344d 6921d1e07cb5 tracing: Fix filter logic error
WARNING in convert_ctx_accesses bpf -1 syz, C done 80 358d 379d 29/29 344d ead3d7b2b6af bpf: Check flow_dissector ctx accesses are aligned
WARNING in comedi_unlocked_ioctl comedi mm -1 syz, C 262 390d 406d 29/29 344d 08ae4b20f5e8 comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
BUG: sleeping function called from invalid context in __xas_nomem (2) block 5 1 417d 413d 29/29 344d 0d519bb0de3b brd: fix sleeping function called from invalid context in brd_insert_page()
WARNING in iopt_map_pages (2) iommu -1 syz, C 4 403d 416d 29/29 344d b42497e3c0e7 iommufd: Prevent ALIGN() overflow
KASAN: use-after-free Read in poly1305_update fs 19 syz, C done 8 412d 427d 29/29 344d d89a34b14df5 bcachefs: Move bset size check before csum check
BUG: unable to handle kernel NULL pointer dereference in mempool_alloc_noprof (2) fs 10 syz, C done 8 423d 439d 29/29 344d 56be92c63f02 bcachefs: Fix pool->alloc NULL pointer dereference
KASAN: null-ptr-deref Write in rcuref_put (4) net 12 syz, C done 7 374d 492d 29/29 344d ae633388cae3 pptp: fix pptp_xmit() error path
KASAN: slab-use-after-free Read in bch2_copygc fs 19 syz, C done 25 344d 402d 29/29 344d c02b943f7d12 bcachefs: Fix reference to invalid bucket in copygc
kernel BUG in unregister_vlan_dev (3) net -1 7 426d 467d 29/29 344d 579d4f9ca9a9 net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
kernel BUG in jfs_truncate_nolock jfs -1 syz, C error 5 424d 437d 29/29 344d 2d04df811642 jfs: Regular file corruption check
KCSAN: data-race in pcpu_balance_workfn / pcpu_nr_pages (2) kernel 6 1 413d 413d 29/29 344d b112a4e0a1af mm/percpu: prevent concurrency problem for pcpu_nr_populated read with spin lock
WARNING in pend_sync_exception kvmarm -1 syz, C 100 394d 398d 29/29 356d efa1368ba9f4 KVM: arm64: Commit exceptions from KVM_SET_VCPU_EVENTS immediately
WARNING in pend_serror_exception kvmarm -1 syz, C 49 394d 398d 29/29 356d efa1368ba9f4 KVM: arm64: Commit exceptions from KVM_SET_VCPU_EVENTS immediately
possible deadlock in trans_set_locked fs 4 syz, C 113 422d 623d 29/29 371d ff1dd05f8233 bcachefs: bch2_trans_relock() is trylock for lockdep
BUG: Bad rss-counter state (5) mm -1 syz, C done 2365 397d 823d 29/29 372d 43e027e41423 mm: memory: extend finish_fault() to support large folio
KASAN: wild-memory-access Read in get_futex_key kernel 17 syz, C 34 418d 444d 29/29 373d 8337204c5889 futex: Handle invalid node numbers supplied by user
UBSAN: array-index-out-of-bounds in ip6_route_info_create net 15 27 379d 429d 29/29 373d b3979e3d2fc9 ipv6: Move fib6_config_validate() to ip6_route_add().
WARNING in ath6kl_bmi_get_target_info (2) usb wireless -1 syz, C error 10349 405d 743d 29/29 373d e7417421d893 wifi: ath6kl: remove WARN on bad firmware input
possible deadlock in __bch2_count_fsck_err fs 4 12 437d 455d 29/29 373d 0acb385ec19c bcachefs: Fix possible console lock involved deadlock
WARNING in rhashtable_init_noprof fs -1 syz, C done 131 427d 445d 29/29 373d 757601ef8533 bcachefs: Don't put rhashtable on stack
WARNING in vma_modify mm -1 syz, C done 21 426d 434d 29/29 373d 0cf4b1687a18 mm/vma: reset VMA iterator on commit_merge() OOM failure
WARNING in bio_alloc_bioset bcachefs -1 syz, C done 22792 420d 489d 29/29 373d f946ce0be45e bcachefs: Make sure opts.read_only gets propagated back to VFS
INFO: task hung in __bch2_fsck_err kernel 1 syz 2 511d 507d 29/29 373d 0acb385ec19c bcachefs: Fix possible console lock involved deadlock
BUG: corrupted list in mgmt_pending_remove bluetooth 19 syz, C error 44 441d 712d 29/29 373d 6fe26f694c82 Bluetooth: MGMT: Protect mgmt_pending list with its own lock
KMSAN: uninit-value in atmtcp_c_send atm 7 syz, C 6 391d 428d 29/29 373d 2f370ae1fb63 atm: atmtcp: Free invalid length skb in atmtcp_c_send().
WARNING in sta_info_insert_rcu (4) wireless -1 syz, C 27 422d 634d 29/29 373d d1b1a5eb27c4 wifi: mac80211: drop invalid source address OCB frames
possible deadlock in blk_mq_freeze_queue_nomemsave block 4 syz, C done 7798 425d 501d 29/29 373d 4bb08cf974c5 loop: move lo_set_size() out of queue freeze
possible deadlock in rtnl_newlink net 4 syz, C 11 429d 442d 29/29 373d b4a8085ceefb e1000: Move cancel_work_sync to avoid deadlock
general protection fault in veth_xdp_rcv wireguard 2 12 433d 438d 29/29 373d 9337c54401a5 veth: prevent NULL pointer dereference in veth_xdp_rcv
WARNING: suspicious RCU usage in mpls_getroute net 4 4 449d 424d 29/29 373d 6dbb0d97c509 mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
possible deadlock in __bch2_folio_reservation_get (2) fs 4 25 430d 459d 29/29 373d 0acb385ec19c bcachefs: Fix possible console lock involved deadlock
KASAN: slab-use-after-free Read in thread_group_cputime (2) kernel 19 1 456d 452d 29/29 373d ac0b8b327a56 io_uring: fix use-after-free of sq->thread in __io_uring_show_fdinfo()
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_complete (3) bluetooth 19 syz, C 5 434d 457d 29/29 373d e6ed54e86aae Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete
UBSAN: array-index-out-of-bounds in cfg80211_inform_bss_frame_data wireless 15 syz, C done 4 429d 428d 29/29 373d a85b8544d463 wifi: remove zero-length arrays
WARNING in iomap_iter (5) erofs iomap -1 syz, C done 6 426d 427d 29/29 373d 7869738b6908 erofs: refuse crafted out-of-file-range encoded extents
WARNING in lookup_object_or_alloc fs -1 7 430d 440d 29/29 373d 757601ef8533 bcachefs: Don't put rhashtable on stack
WARNING in __ieee80211_beacon_get wireless -1 syz, C done 143787 410d 2139d 29/29 373d d19bac3d4edc wifi: mac80211: don't WARN for late channel/color switch
KASAN: slab-out-of-bounds Read in bch2_sb_members_v1_to_text fs 17 syz, C done 6 430d 430d 29/29 373d 205da7c02673 bcachefs: Don't trust sb->nr_devices in members_to_text()
possible deadlock in loop_set_status block 4 syz, C done 20143 420d 629d 29/29 373d 4bb08cf974c5 loop: move lo_set_size() out of queue freeze
KASAN: slab-use-after-free Read in hci_sock_get_channel bluetooth 19 syz 1 450d 446d 29/29 373d 6fe26f694c82 Bluetooth: MGMT: Protect mgmt_pending list with its own lock
possible deadlock in __bch2_fsck_err (2) fs 4 syz, C 4 457d 458d 29/29 373d 0acb385ec19c bcachefs: Fix possible console lock involved deadlock
possible deadlock in console_flush_all (3) kernel 4 syz, C error 52145 373d 762d 29/29 373d 0acb385ec19c bcachefs: Fix possible console lock involved deadlock
KASAN: slab-use-after-free Read in lane_ioctl net 19 syz 7 421d 422d 29/29 373d d13a3824bfd2 net: atm: add lec_mutex
KASAN: slab-out-of-bounds Read in bch2_sb_members_v2_to_text fs 17 syz, C done 34 429d 445d 29/29 373d 205da7c02673 bcachefs: Don't trust sb->nr_devices in members_to_text()
WARNING in __init_work (2) fs -1 syz, C 5971 420d 428d 29/29 373d 757601ef8533 bcachefs: Don't put rhashtable on stack
WARNING: ODEBUG bug in io_sq_offload_create io-uring -1 syz, C 8 422d 423d 29/29 373d f2320f1dd6f6 io_uring/sqpoll: don't put task_struct on tctx setup failure
WARNING in io_register_clone_buffers io-uring -1 syz, C 4 429d 425d 29/29 373d 1d27f11bf02b io_uring/rsrc: validate buffer count with offset for cloning
possible deadlock in bch2_trans_begin fs 4 5 442d 571d 29/29 373d 0acb385ec19c bcachefs: Fix possible console lock involved deadlock
divide error in bch2_sb_members_v2_to_text fs 2 syz, C done 3 430d 430d 29/29 373d 205da7c02673 bcachefs: Don't trust sb->nr_devices in members_to_text()
UBSAN: array-index-out-of-bounds in bch2_sb_downgrade_update fs 15 syz, C 539 421d 473d 29/29 373d 082c74411491 bcachefs: Fix downgrade_table_extra()
KASAN: slab-out-of-bounds Read in hci_cmd_sync_alloc bluetooth 17 syz, C 4 457d 467d 29/29 379d 03f1700b9b4d Bluetooth: MGMT: reject malformed HCI_CMD_SYNC commands
WARNING in bch2_printbuf_make_room fs -1 syz, C error 2 431d 822d 29/29 381d dc5bfdf8eaed bcachefs: fix the memory leak in exception case
possible deadlock in deactivate_super (2) ocfs2 4 syz, C inconclusive done 8072 461d 558d 29/29 386d fcaf3b2683b0 ocfs2: stop quota recovery before disabling quotas
BUG: unable to handle kernel paging request in bch2_dirent_to_text fs 8 syz, C done error 3 447d 758d 29/29 388d f39055220f6f bcachefs: Add missing validation for superblock section clean
kernel BUG in zero_user_segments ntfs3 -1 syz, C inconclusive inconclusive 19179 624d 728d 29/29 393d 045fff619312 fs/ntfs3: Equivalent transition from page to folio
INFO: task hung in uevent_show (2) kernel 1 syz, C inconclusive 8325 405d 643d 29/29 393d dc1771f71854 Revert "drivers: core: synchronize really_probe() and dev_uevent()"
kernel BUG in vfs_get_tree (2) fs -1 syz, C done 22 436d 432d 29/29 394d 9c6185609947 bcachefs: Call bch2_fs_start before getting vfs superblock
WARNING in __folio_mark_dirty (2) gfs2 -1 syz, C error 790989 406d 1263d 29/29 394d ae9f3bd8259a gfs2: replace sd_aspace with sd_inode
KASAN: use-after-free Read in sysv_new_inode (2) fs 19 syz, C inconclusive error 21224 494d 827d 29/29 394d 448fa70158f9 sysv: Remove the filesystem
kernel BUG in bch2_fill_extent fs -1 8 452d 472d 29/29 400d a2f546330ef9 bcachefs: Fix losing return code in next_fiemap_extent()
WARNING in get_pat_info kernel -1 syz, C done done 36 440d 706d 29/29 402d f8e97613fed2 mm: convert VM_PFNMAP tracking to pfnmap_track() + pfnmap_untrack()
BUG: corrupted list in ring_buffer_subbuf_order_set trace 8 syz, C 1 438d 434d 29/29 403d 40ee2afafc1d ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set()
KMSAN: uninit-value in mii_nway_restart (2) usb 7 syz, C 224 435d 543d 29/29 403d 9ad0452c0277 net: ch9200: fix uninitialised access during mii_nway_restart
WARNING in bpf_map_lookup_percpu_elem bpf -1 syz, C done 2116 453d 837d 29/29 403d d4965578267e bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem()
WARNING: refcount bug in tipc_crypto_xmit tipc 13 syz, C done 4968 434d 445d 29/29 403d f29ccaa07cf3 net: tipc: fix refcount warning in tipc_aead_encrypt
general protection fault in jbd2_journal_dirty_metadata ext4 2 syz 9 470d 474d 29/29 403d af98b0157adf jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
KASAN: slab-out-of-bounds Read in iov_iter_revert netfs 17 syz, C 30 437d 460d 29/29 403d 4481f7f2b3df netfs: Fix oops in write-retry from mis-resetting the subreq iterator
possible deadlock in __nilfs_error (3) nilfs 4 syz, C error 947 457d 471d 29/29 403d fb881cd76045 nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs()
BUG: unable to handle kernel NULL pointer dereference in lo_rw_aio block 10 syz, C 10 468d 477d 29/29 403d f5c84eff634b loop: Add sanity check for read/write_iter
BUG: unable to handle kernel NULL pointer dereference in io_buffer_select io-uring 10 syz, C 102 455d 461d 29/29 403d f446c6311e86 io_uring/memmap: don't use page_address() on a highmem page
KASAN: slab-use-after-free Read in ib_register_device rdma 19 1 475d 471d 29/29 403d d0706bfd3ee4 RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem
BUG: sleeping function called from invalid context in team_change_rx_flags net 5 syz, C done 71 403d 451d 29/29 403d d8d85ef0a631 af_packet: move notifier's packet_dev_mc out of rcu critical section
upstream test error: KASAN: slab-use-after-free Write in binderfs_evict_inode kernel -1 31 436d 520d 29/29 403d 8c0a55982528 binder: fix use-after-free in binderfs_evict_inode()
divide error in mac80211_hwsim_set_tsf wireless 2 syz 1 493d 489d 29/29 403d c575f5374be7 wifi: mac80211_hwsim: Prevent tsf from setting if beacon is disabled
KMSAN: uninit-value in cxusb_i2c_xfer media 7 syz, C 556 444d 496d 29/29 403d 73fb3b92da84 media: cxusb: no longer judge rbuf when the write fails
kernel BUG in ext4_write_inline_data (2) ext4 -1 syz, C error 46 417d 631d 29/29 403d 227cb4ca5a65 ext4: inline: fix len overflow in ext4_prepare_inline_data
BUG: unable to handle kernel NULL pointer dereference in do_pagemap_scan fs 10 syz, C inconclusive done 45 461d 963d 29/29 403d 65c66047259f proc: fix the issue of proc_mem_open returning NULL
kernel BUG in may_open fs -1 syz, C error 137019 403d 499d 29/29 403d cfd86ef7e8e7 anon_inode: use a proper mode internally
WARNING in get_bpf_raw_tp_regs bpf trace -1 syz, C 2 456d 459d 29/29 403d 3880cdbed1c4 bpf: Fix WARN() in get_bpf_raw_tp_regs
BUG: unable to handle kernel NULL pointer dereference in generic_file_read_iter ntfs3 10 syz, C done 10 446d 491d 29/29 403d 8b26c8c376b2 fs/ntfs3: Add missing direct_IO in ntfs_aops_cmpr
upstream test error: KMSAN: use-after-free in mctp_dump_addrinfo net -1 128 456d 470d 29/29 403d f11cf946c0a9 net: mctp: Don't access ifa_index when missing
KASAN: slab-use-after-free Write in binder_remove_device kernel 22 syz, C done 7 446d 447d 29/29 403d 9857af0fcff3 binder: fix yet another UAF in binder_devices
UBSAN: shift-out-of-bounds in gfs2_fill_super gfs2 -1 3 472d 490d 29/29 403d 27d2f101e789 gfs2: check sb_min_blocksize return value
INFO: task hung in freeze_super (6) f2fs 1 syz, C done 3 453d 450d 29/29 403d c836d3b8d94e f2fs: fix to skip f2fs_balance_fs() if checkpoint is disabled
KASAN: vmalloc-out-of-bounds Write in tpg_fill_plane_buffer (3) media 21 syz, C 271 404d 758d 29/29 403d f83ac8d30c43 media: vivid: Change the siize of the composing
KCSAN: data-race in try_to_migrate_one / zap_page_range_single mm 6 1 543d 542d 29/29 403d 2e9765672332 mm: annotate data race in update_hiwater_rss
KASAN: slab-use-after-free Read in idr_for_each kernel 19 5 543d 546d 29/29 403d d66adabe9180 ipc: fix to protect IPCS lookups using RCU
INFO: trying to register non-static key in rxe_qp_do_cleanup rdma -1 7 441d 483d 29/29 403d 1c7eec4d5f3b RDMA/rxe: Fix "trying to register non-static key in rxe_qp_do_cleanup" bug
KASAN: use-after-free Write in __crypto_shash_import crypto 22 syz, C done 40 444d 445d 29/29 403d 0a84874c7e7d crypto: shash - Fix buffer overrun in import function
UBSAN: array-index-out-of-bounds in add_missing_indices jfs 15 syz, C 187 430d 626d 29/29 403d 5dff41a86377 jfs: fix array-index-out-of-bounds read in add_missing_indices
BUG: unable to handle kernel paging request in snd_pcm_format_set_silence (2) sound 8 syz, C 4 454d 468d 29/29 403d 93a81ca06577 ALSA: pcm: Fix race of buffer access at PCM OSS layer
general protection fault in dev_set_group net 2 syz, C error 3 436d 436d 29/29 403d feafc73f3e6a net: prevent a NULL deref in rtnl_create_link()
WARNING in __bpf_prog_ret0_warn bpf -1 syz, C 9 444d 467d 29/29 403d 86bc9c742426 bpf: Avoid __bpf_prog_ret0_warn when jit fails
BUG: sleeping function called from invalid context in dev_set_promiscuity net 5 370 403d 458d 29/29 403d 6b1d3c5f675c team: grab team lock during team_change_rx_flags
KASAN: slab-use-after-free Read in page_pool_put_unrefed_netmem net 19 3 508d 670d 29/29 403d 271683bb2cf3 page_pool: Fix use-after-free in page_pool_recycle_in_ring
KCSAN: data-race in io_submit_sqes / io_uring_show_fdinfo io-uring 6 1 471d 471d 29/29 403d f024d3a8ded0 io_uring/fdinfo: annotate racy sq/cq head/tail reads
UBSAN: array-index-out-of-bounds in ieee80211_request_ibss_scan wireless 15 syz, C error 29652 403d 473d 29/29 403d 82bbe02b2500 wifi: mac80211: Set n_channels after allocating struct cfg80211_scan_request
possible deadlock in nilfs_get_block nilfs 4 syz 30 461d 471d 29/29 403d fb881cd76045 nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs()
general protection fault in lookup_or_create_module_kobject bluetooth usb 2 syz, C 266 462d 466d 29/29 403d a6aeb739974e module: ensure that kobject_put() is safe for module type kobjects
BUG: sleeping function called from invalid context in pcpu_alloc_noprof net 5 syz, C done 4 453d 467d 29/29 403d 8e5f1bb81274 ipv6: Narrow down RCU critical section in inet6_rtm_newroute().
possible deadlock in print_event_fields trace 4 2 474d 470d 29/29 403d 0a8f11f8569e tracing: Do not take trace_event_sem in print_event_fields()
KMSAN: uninit-value in xa_find io-uring net 7 28964 433d 444d 29/29 403d eda4623cf989 io_uring/zcrx: init id for xa_find
linux-next test error: WARNING in switch_mm_irqs_off kernel -1 27 465d 487d 29/29 403d 52ebfe7412ce x86/mm: Remove the mm_cpumask(prev) warning from switch_mm_irqs_off()
BUG: unable to handle kernel NULL pointer dereference in io_ring_buffers_peek io-uring 10 syz, C 68 455d 461d 29/29 403d f446c6311e86 io_uring/memmap: don't use page_address() on a highmem page
KCSAN: data-race in process_one_work / process_one_work kernel 6 syz 231 1078d 981d 29/29 403d 70e1683ca3a6 workqueue: Fix race condition in wq->stats incrementation
general protection fault in native_tss_update_io_bitmap kernel 2 syz, C error 7 450d 534d 29/29 403d 8b68e978718f x86/iopl: Cure TIF_IO_BITMAP inconsistencies
INFO: task hung in f2fs_grab_cache_page f2fs 1 syz, C 1 513d 509d 29/29 403d 061cf3a84bde f2fs: fix to do sanity check on ino and xnid
kernel BUG in __bch2_trans_commit (2) fs -1 105 403d 447d 29/29 403d 97e69f12edb1 bcachefs: Fix missing BTREE_UPDATE_internal_snapshot_node
UBSAN: shift-out-of-bounds in __kfifo_alloc input usb -1 syz, C 33349 433d 501d 29/29 403d 6bf8ab7774a2 HID: wacom: fix shift OOB in kfifo allocation for zero pktlen
UBSAN: shift-out-of-bounds in dbAllocAG (2) jfs -1 syz, C done 5 474d 525d 29/29 403d 37bfb464ddca jfs: validate AG parameters in dbMount() to prevent crashes
KMSAN: uninit-value in do_output_route4 lvs 7 15 457d 470d 29/29 403d e34090d7214e ipvs: fix uninit-value for saddr in do_output_route4
WARNING in move_to_new_folio mm -1 syz, C done 1366 403d 489d 29/29 403d 906d7ce3b59d jfs: implement migrate_folio for jfs_metapage_aops
WARNING in ipv6_addr_prefix net -1 syz, C error 3056 421d 470d 29/29 403d 586ceac9acb7 ipv6: Restore fib6_config validation for SIOCADDRT.
WARNING in udp_tunnel_update_gro_rcv net -1 syz, C error 108 484d 514d 29/29 403d c26c192c3d48 udp: properly deal with xfrm encap and ADDRFORM
UBSAN: array-index-out-of-bounds in usbhid_parse usb 15 syz, C error 89 437d 1033d 29/29 403d fe7f7ac8e0c7 HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
upstream test error: KMSAN: uninit-value in mctp_dump_addrinfo net -1 9 461d 470d 29/29 403d f11cf946c0a9 net: mctp: Don't access ifa_index when missing
upstream-arm64 test error: WARNING in __apply_to_page_range arm -1 5 457d 461d 29/29 403d b81c688426a9 arm64/mm: Disable barrier batching in interrupt contexts
WARNING in folio_large_mapcount mm -1 2 438d 454d 29/29 403d 595cf683519a mm/khugepaged: fix race with folio split/free using temporary reference
KASAN: null-ptr-deref Read in gfs2_drop_inode gfs2 11 syz, C done 1050 437d 445d 29/29 403d 9126d2754c5e gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add
KASAN: slab-use-after-free Read in vidtv_mux_init media 19 syz 5 476d 522d 29/29 403d 1d5f88f05348 media: vidtv: Terminating the subsequent process of initialization failure
WARNING: ODEBUG bug in snd_rawmidi_free sound usb -1 syz, C error 1 467d 463d 29/29 403d 0718a78f6a9f ALSA: usb-audio: Kill timer properly at removal
KMSAN: uninit-value in usbnet_probe (3) usb 7 syz, C 159 444d 461d 29/29 403d 405b0d610745 net: usb: aqc111: fix error handling of usbnet read calls
KASAN: slab-out-of-bounds Write in tracing_splice_read_pipe trace 21 1 489d 484d 29/29 403d f5178c41bb43 tracing: Fix oob write in trace_seq_to_buffer()
WARNING in nla_get_range_unsigned (3) net -1 syz, C done 22 459d 463d 29/29 403d a96876057b9e netlink: fix policy dump for int with validation callback
kernel BUG in dec_valid_block_count f2fs -1 syz, C 13 445d 494d 29/29 403d 05872a167c2c f2fs: fix to do sanity check on sbi->total_valid_block_count
UBSAN: shift-out-of-bounds in squashfs_bio_read squashfs -1 syz, C 9 441d 496d 29/29 403d 734aa85390ea Squashfs: check return result of sb_min_blocksize
UBSAN: array-index-out-of-bounds in fbcon_info_from_console fbdev 15 3 556d 560d 29/29 403d cedc1b63394a fbcon: Make sure modelist not set on unregistered console
WARNING in ipmr_rules_exit (2) net -1 1 449d 437d 29/29 403d c46286fdd6aa mr: consolidate the ipmr_can_free_table() checks.
possible deadlock in smc_switch_to_fallback (2) smc 4 syz, C error done 27435 472d 781d 29/29 405d 752e2217d789 smc: Fix lockdep false-positive for IPPROTO_SMC.
WARNING in inode_set_cached_link ext4 -1 syz, C done unreliable 78396 494d 554d 29/29 406d 5f920d5d6083 ext4: verify fast symlink length
WARNING: locking bug in __set_page_owner mm 4 syz, C error inconclusive 179425 557d 649d 29/29 406d d40797d6720e kasan: make kasan_record_aux_stack_noalloc() the default behaviour
KASAN: use-after-free Write in ext4_insert_dentry ext4 22 syz, C done 117 490d 658d 28/29 424d 94824ac9a8aa ext4: fix off-by-one error in do_split
possible deadlock in trie_delete_elem bpf 4 syz, C done done 21444 503d 877d 28/29 424d 47979314c0fe bpf: Convert lpm_trie.c to rqspinlock
WARNING in ipv6_add_dev net -1 4 492d 493d 28/29 427d 04efcee6ef8d net: hold instance lock during NETDEV_CHANGE
WARNING in bch2_dev_free fs -1 syz, C done 258 431d 493d 28/29 427d d62922ba3cfc bcachefs: Prevent granting write refs when filesystem is read-only
KMSAN: uninit-value in btree_interior_update_work fs 7 2 510d 562d 28/29 427d 1f88c3567495 bcachefs: Fix a KMSAN splat in btree_update_nodes_written()
general protection fault in d_splice_alias udf 2 syz, C done done 15 556d 557d 28/29 427d 902e09c8acde fix braino in "9p: fix ->rename_sem exclusion"
general protection fault in __d_unalias udf nilfs 8 syz, C done 835 547d 557d 28/29 427d 902e09c8acde fix braino in "9p: fix ->rename_sem exclusion"
KMSAN: uninit-value in bch2_extent_crc_append (2) fs 7 syz, C 4 513d 523d 28/29 428d 53cf2a3daa4c bcachefs: Fix kmsan warnings in bch2_extent_crc_pack()
general protection fault in lock_vma_under_rcu mm 2 syz done 3 536d 535d 28/29 429d f35ab95ca0af mm: replace vm_lock and detached flag with a reference count
KMSAN: uninit-value in bch2_trans_start_alloc_update fs 7 syz, C 1051 504d 627d 28/29 429d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_btree_node_iter_init (2) fs 7 syz, C 309 504d 635d 28/29 429d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_inode_v3_validate fs 7 syz, C 5866 505d 633d 28/29 429d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_btree_node_get fs 7 syz, C 18 515d 621d 28/29 429d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_btree_node_check_topology fs 7 syz, C 19 531d 642d 28/29 429d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
upstream test error: BUG: unable to handle kernel NULL pointer dereference in msix_capability_init pci -1 10 506d 506d 28/29 429d 3ece3e8e5976 PCI/MSI: Handle the NOMASK flag correctly for all PCI/MSI backends
upstream test error: general protection fault in msix_capability_init pci -1 16 505d 502d 28/29 429d 3ece3e8e5976 PCI/MSI: Handle the NOMASK flag correctly for all PCI/MSI backends
KMSAN: uninit-value in bch2_dev_freespace_init fs 7 syz, C 432 504d 618d 28/29 429d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_checksum_update (2) fs 19 syz, C done 7 512d 607d 28/29 429d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_bucket_alloc_early fs 7 syz, C 219 508d 646d 28/29 429d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_trans_start_alloc_update_noupdate fs 7 2 593d 589d 28/29 429d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in __build_ro_aux_tree fs 7 3 598d 609d 28/29 429d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_btree_ptr_v2_validate fs 7 syz, C 55 505d 556d 28/29 429d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_xattr_validate fs 7 syz, C 22 527d 609d 28/29 429d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_alloc_v4_validate (2) fs 7 syz, C 514 508d 635d 28/29 429d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in __bch2_bkey_cmp_left_packed fs 7 syz 2 571d 598d 28/29 429d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in rw_aux_tree_set (2) fs 7 syz, C 2356 505d 630d 28/29 429d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
WARNING in bch2_opt_check_may_set fs -1 4 504d 500d 28/29 429d 2dd202dbaf0a bcachefs: Recovery no longer holds state_lock
KMSAN: uninit-value in bch2_dirent_rename (2) fs 7 5 593d 603d 28/29 429d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_dirent_validate fs 7 214 570d 622d 28/29 429d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
general protection fault in sys_mremap mm 2 syz, C 35 497d 500d 28/29 429d 36eed5400805 mm/mremap: do not set vrm->vma NULL immediately prior to checking it
KMSAN: uninit-value in bch2_bkey_val_validate fs 7 syz, C 17 511d 623d 28/29 429d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_inode_unpack (2) fs 7 9 574d 590d 28/29 429d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_bkey_ptrs_validate fs 7 syz, C 15 509d 621d 28/29 429d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_readdir (2) fs 7 2 580d 580d 28/29 429d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_bucket_alloc_trans fs 7 syz, C 15 482d 614d 28/29 429d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_bkey_cmp_packed_inlined (2) fs 7 syz, C 309 505d 625d 28/29 429d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KASAN: slab-use-after-free Read in nla_put (2) rdma 19 1 530d 525d 28/29 430d 1d6a9e7449e2 RDMA/core: Fix use-after-free when rename device name
BUG: sleeping function called from invalid context in __do_fault afs 5 1 506d 502d 28/29 430d a64e4d48a0b7 afs: Fix afs_dynroot_readdir() to not use the RCU read lock
kernel BUG in bch2_fs_initialize fs -1 syz done 1004 484d 489d 28/29 430d 806776ad9c20 bcachefs: Add missing error handling
possible deadlock in __bpf_ringbuf_reserve bpf 4 syz, C error 2490 480d 885d 28/29 430d a650d38915c1 bpf: Convert ringbuf map to rqspinlock
WARNING in dev_xdp_install bpf -1 syz, C 245 497d 504d 28/29 430d d996e412b2df bpf: add missing ops lock around dev_xdp_attach_link
WARNING: locking bug in kernfs_path_from_node kernfs 4 syz, C done 1037 560d 651d 28/29 430d 741c10b096bc kernfs: Use RCU to access kernfs_node::name.
WARNING in do_wp_page mm -1 1 493d 489d 28/29 430d 8bdea2fce980 mm/memory: move sanity checks in do_wp_page() after mapcount vs. refcount stabilization
WARNING in __free_event perf -1 syz, C done 73 480d 497d 28/29 430d 10a77965760c batman-adv: Fix double-hold of meshif when getting enabled 0ba3a4ab76fd perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init
KMSAN: uninit-value in isofs_readdir isofs 7 syz, C 2 555d 551d 28/29 430d 81a82e8f3388 isofs: fix KMSAN uninit-value bug in do_isofs_readdir()
KMSAN: uninit-value in __request_module (6) modules 7 syz, C 4 546d 548d 28/29 430d 5bef3ac184b5 team: better TEAM_OPTION_TYPE_STRING validation
WARNING in release_mtd_partition mtd -1 syz, C 8 439d 560d 28/29 430d 6697dae1e2da mtd: capture device name setting failure when adding mtd
KASAN: slab-out-of-bounds Read in isofs_fh_to_parent isofs 17 syz, C 3 501d 498d 28/29 430d 0405d4b63d08 isofs: Prevent the use of too small fid
possible deadlock in lapbeth_device_event x25 4 syz, C error 121826 498d 523d 28/29 430d 7220e8f4d4ee net: lapbether: use netdev_lockdep_set_classes() helper
KMSAN: uninit-value in ___bpf_prog_run (4) bpf 7 syz, C 322 548d 962d 28/29 430d 4c2d14c40a68 ppp: Fix KMSAN uninit-value warning with bpf
possible deadlock in xsk_diag_dump net bpf 4 4 487d 493d 28/29 430d f0433eea4688 net: don't mix device locking in dev_close_many() calls
possible deadlock in get_partial_node (2) kernel 4 syz, C done done 4 521d 544d 28/29 430d 3a04334d6282 bcachefs: Fix b->written overflow
WARNING in usbnet_start_xmit/usb_submit_urb (2) usb -1 syz, C error 10 541d 880d 28/29 430d 1cf9631d836b usbnet: gl620a: fix endpoint checking in genelink_bind()
general protection fault in ir_raw_event_store_with_filter usb media 22 syz, C error 879 550d 2347d 28/29 430d f656cfbc7a29 media: streamzap: fix race between device disconnection and urb callback
KASAN: slab-out-of-bounds Write in hfs_bnode_read_key (2) hfs 21 syz, C inconclusive 2056 515d 680d 28/29 430d bb5e07cb9277 hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
WARNING in tls_strp_msg_load net -1 syz, C done 4 511d 504d 28/29 430d 5071a1e606b3 net: tls: explicitly disallow disconnect
WARNING in net_passive_dec net -1 33 533d 539d 28/29 430d 5c70eb5c593d net: better track kernel sockets lifetime
KASAN: slab-use-after-free Read in key_put lsm keyrings 19 syz, C done 9 536d 634d 28/29 430d 75845c6c1a64 keys: Fix UAF in key_put()
possible deadlock in btrfs_tree_lock_nested btrfs 4 14 583d 586d 28/29 430d a216542027b8 btrfs: fix lockdep splat while merging a relocation root
kernel BUG in qlist_free_all net fs -1 syz, C done done 12 482d 630d 28/29 430d 3a04334d6282 bcachefs: Fix b->written overflow
WARNING in __linkwatch_sync_dev net -1 syz, C done 1038 430d 493d 28/29 430d 10a77965760c batman-adv: Fix double-hold of meshif when getting enabled f7a11cba0ed7 bonding: hold ops lock around get_link
WARNING in free_ruleset lsm -1 syz, C 76 476d 502d 28/29 430d fe81536af397 landlock: Remove incorrect warning
BUG: unable to handle kernel paging request in has_enough_free_secs f2fs 8 1 568d 564d 28/29 430d 986c50f6bca1 f2fs: fix to avoid accessing uninitialized curseg
WARNING: refcount bug in io_send_zc_cleanup (2) io-uring 13 syz, C done 6 510d 510d 28/29 430d 67c007d6c12d io_uring/net: fix sendzc double notif flush
WARNING in f2fs_unlink f2fs -1 syz, C done 215 505d 630d 28/29 430d 81edb983b3f5 f2fs: add check for deleted inode
WARNING in bch2_bkey_pick_read_device fs -1 syz, C error 89 500d 504d 28/29 430d 3c72d3eea97b bcachefs: Fix WARN() in bch2_bkey_pick_read_device()
WARNING: suspicious RCU usage in kernfs_node_dentry kernfs 4 syz, C done 476 534d 542d 28/29 430d 6ef5b6fae304 kernfs: Drop kernfs_rwsem while invoking lookup_positive_unlocked().
INFO: trying to register non-static key in cfg80211_dev_free wireless -1 syz, C 304 495d 515d 28/29 430d fc88dee89d7b wifi: cfg80211: init wiphy_work before allocating rfkill fails
KMSAN: uninit-value in validate_set (2) openvswitch 7 syz, C 6 493d 490d 28/29 430d 65d91192aa66 net: openvswitch: fix nested key length validation in the set() action
WARNING in vma_merge_existing_range mm -1 87 440d 590d 28/29 430d 47b16d0462a4 mm: abort vma_modify() on merge out of memory failure
KCSAN: data-race in p9_conn_cancel / p9_poll_workfn (9) v9fs 6 2 515d 553d 28/29 430d fbc0283fbeae 9p/trans_fd: mark concurrent read and writes to p9_conn->err
WARNING in cleanup_net (4) net -1 syz, C error 309 521d 540d 28/29 430d 5c70eb5c593d net: better track kernel sockets lifetime
general protection fault in bioset_exit (2) bcachefs 10 syz, C done done 23 518d 558d 28/29 430d 3a04334d6282 bcachefs: Fix b->written overflow
INFO: task hung in io_wq_put_and_exit (4) io-uring 1 syz, C unreliable 86 434d 664d 28/29 430d cf960726eb65 io_uring/kbuf: reject zero sized provided buffers
KASAN: slab-use-after-free Read in skb_queue_purge_reason (2) bluetooth 19 syz, C done 132 435d 819d 28/29 430d 5df5dafc171b Bluetooth: hci_uart: Fix another race during initialization
WARNING in net_free (4) net -1 syz 4 557d 627d 28/29 430d 5c70eb5c593d net: better track kernel sockets lifetime
WARNING in ntfs_extend_initialized_size ntfs3 -1 syz, C inconclusive inconclusive 4 633d 678d 28/29 430d ff3559264458 fs/ntfs3: Fix WARNING in ntfs_extend_initialized_size
general protection fault in ethnl_default_dumpit net 2 syz, C error 321 524d 525d 28/29 430d f36a9285828c net: ethtool: use correct device pointer in ethnl_default_dump_one()
WARNING: bad unlock balance in do_setlink net 4 syz, C done 401 487d 494d 28/29 430d 445e99bdf68d rtnetlink: Fix bad unlock balance in do_setlink().
UBSAN: array-index-out-of-bounds in bpf_prog_select_runtime bpf 15 syz, C done 1160 502d 883d 28/29 430d 6ebc5030e0c5 bpf: Fix array bounds error with may_goto
general protection fault in tipc_mon_reinit_self (3) tipc 2 2 483d 485d 28/29 430d d63527e109e8 tipc: fix NULL pointer dereference in tipc_mon_reinit_self()
KASAN: slab-use-after-free Read in bchfs_read fs 19 syz, C done 34 489d 496d 28/29 430d 34b47e3d73a2 bcachefs: Fix UAF in bchfs_read()
general protection fault in rtnl_create_link net 8 syz, C done 49 477d 487d 28/29 430d 4798cfa2097f net: don't try to ops lock uninitialized devs
general protection fault in kernel_sock_shutdown (3) net 2 syz 5 502d 501d 28/29 430d 10206302af85 sctp: add mutual exclusion in proc_sctp_do_udp_port()
KASAN: slab-out-of-bounds Read in atomic_ptr_type_ok bpf 17 syz, C done 4 523d 519d 28/29 430d 9aa8fe29f624 Merge branch 'bpf-fix-oob-read-and-add-tests-for-load-acquire-store-release' c03bb2fa327e bpf: Fix out-of-bounds read in check_atomic_load/store()
possible deadlock in __snd_timer_user_ioctl sound 4 1 515d 511d 28/29 430d 3424c8f53bc6 ALSA: timer: Don't take register_mutex with copy_from/to_user()
kernel BUG in bch2_run_recovery_pass (2) fs -1 syz, C 70 497d 566d 28/29 430d 962322475bb5 bcachefs: Handle backpointers with unknown data types
general protection fault in relocate_file_extent_cluster btrfs 2 syz, C 24 479d 496d 28/29 430d 50fecb8cf069 btrfs: fix invalid inode pointer after failure to create reloc inode
KCSAN: data-race in io_req_task_cancel / io_wq_free_work io-uring 6 1 498d 498d 28/29 430d 390513642ee6 io_uring: always do atomic put from iowq
possible deadlock in kvm_arch_pm_notifier kvm-x86 4 2 558d 585d 28/29 430d d9c5ed0a9b52 KVM: x86: Don't take kvm->lock when iterating over vCPUs in suspend notifier
WARNING in restore_regulatory_settings (3) wireless -1 syz, C inconclusive error 2 592d 675d 28/29 430d 59b348be7597 wifi: cfg80211: regulatory: improve invalid hints checking
KMSAN: uninit-value in __alloc_frozen_pages_noprof mm 7 syz, C 6 526d 539d 28/29 430d 8fe9ed44dc29 mm/page_alloc: fix uninitialized variable
WARNING in cxacru_cm/usb_submit_urb (2) usb -1 syz, C 8 544d 554d 28/29 430d c90aad369899 usb: atm: cxacru: fix a flaw in existing endpoint checks
kernel BUG in btrfs_split_ordered_extent btrfs -1 1 592d 588d 28/29 430d 0d85f5c2dd91 btrfs: fix assertion failure when splitting ordered extent after transaction abort
BUG: sleeping function called from invalid context in bch2_printbuf_make_room (2) fs 5 syz, C error 59 497d 500d 28/29 430d b2ffadcc7f8f bcachefs: Fix scheduling while atomic from logging changes
KMSAN: uninit-value in diFree jfs 7 syz, C 2 541d 541d 28/29 430d 9629d7d66c62 jfs: Fix uninit-value access of imap allocated in the diMount() function
possible deadlock in pcpu_alloc_noprof block 4 syz, C 257 430d 684d 28/29 430d 677bdb7346b6 bcachefs: Fix deadlock
KASAN: slab-out-of-bounds Read in ea_get (4) jfs 17 syz, C 4 525d 548d 28/29 430d fdf480da5837 jfs: fix slab-out-of-bounds read in ea_get()
INFO: task hung in __blockdev_direct_IO (4) exfat 1 syz, C done 3 453d 516d 28/29 430d b0522303f672 exfat: fix the infinite loop in exfat_find_last_cluster()
possible deadlock in gtp_encap_enable_socket net 4 syz, C error done 24 489d 690d 28/29 430d 752e2217d789 smc: Fix lockdep false-positive for IPPROTO_SMC.
kernel BUG in bch2_btree_node_iter_init fs -1 syz, C done done 167 454d 558d 28/29 430d 3a04334d6282 bcachefs: Fix b->written overflow
KCSAN: data-race in can_send / can_send (5) can 6 56 513d 523d 28/29 430d 80b5f90158d1 can: statistics: use atomic access in hot path
general protection fault in clone_private_mount overlayfs 2 syz, C done 713 550d 554d 28/29 430d db04662e2f4f fs: allow detached mounts in clone_private_mount()
WARNING: refcount bug in ax25_release (3) hams 13 syz, C done 5256 505d 810d 28/29 430d bca0902e6173 ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt 2f6efbabceb6 ax25: Remove broken autobind
KCSAN: data-race in snd_seq_poll / snd_seq_pool_init sound 6 3 514d 527d 28/29 430d e3cd33ab17c3 ALSA: seq: Improve data consistency at polling
general protection fault in bch2_snapshot_tree_oldest_subvol fs 8 syz, C done 14 475d 498d 28/29 430d aa6a591f0fd7 bcachefs: Fix null ptr deref in bch2_snapshot_tree_oldest_subvol() 71f8e806a5e4 bcachefs: Stricter checks on "key allowed in this btree"
WARNING in dev_setup_tc netfilter -1 38 520d 525d 28/29 430d 0a13c1e0a449 net: revert to lockless TC_SETUP_BLOCK and TC_SETUP_FT
possible deadlock in queue_stack_map_push_elem bpf 4 syz, C error 78 496d 849d 28/29 430d 2f41503d6476 bpf: Convert queue_stack map to rqspinlock
KASAN: slab-out-of-bounds Read in validate_bset_keys fs 19 syz, C 5 530d 529d 28/29 430d 3a04334d6282 bcachefs: Fix b->written overflow
KMSAN: uninit-value in bch2_copygc (2) fs 7 1 505d 501d 28/29 430d 9ea24b287b3b bcachefs: Eliminate padding in move_bucket_key
WARNING: suspicious RCU usage in kvm_vcpu_gfn_to_memslot kvm 4 syz, C 67 509d 568d 28/29 430d 3617c0ee7dec KVM: x86/xen: Only write Xen hypercall page for guest writes to MSR
BUG: soft lockup in rose_loopback_timer hams 1 syz, C 1 561d 557d 28/29 430d a1300691aed9 net: rose: lock the socket in rose_bind()
linux-next test error: KASAN: slab-use-after-free Write in binder_add_device kernel -1 28 562d 575d 28/29 430d e77aff5528a1 binderfs: fix use-after-free in binder_devices
general protection fault in vxlan_vnigroup_uninit net 2 syz, C 9 548d 550d 28/29 430d 5805402dcc56 vxlan: check vxlan_vnigroup_init() return value
possible deadlock in __queue_map_get bpf 4 syz, C error 180 495d 853d 28/29 430d 2f41503d6476 bpf: Convert queue_stack map to rqspinlock
kernel BUG in new_curseg (2) f2fs -1 syz, C done 24 506d 609d 28/29 430d 48ea8b200414 f2fs: fix to avoid panic once fallocation fails for pinfile
general protection fault in add_wait_queue kvm net virt 10 syz, C done 676 544d 557d 28/29 430d 78dafe1cf3af vsock: Orphan socket after transport release
kernel BUG in write_all_supers btrfs -1 syz, C 20 485d 505d 28/29 430d 65f2a3b2323e btrfs: remove folio order ASSERT()s in super block writeback path
KMSAN: uninit-value in bch2_write_inode fs 7 syz, C 4476 518d 566d 28/29 430d 58517f4df842 bcachefs: Initialize from_inode members for bch_io_opts
kernel BUG in pskb_expand_head (4) intel-wired-lan -1 1 534d 533d 28/29 430d 64e6a754d33d llc: do not use skb_get() before dev_queue_xmit()
general protection fault in ip_route_output_key_hash_rcu (3) net 7 4 534d 560d 28/29 430d 27843ce6ba3d ipvlan: ensure network headers are in skb linear part
BUG: sleeping function called from invalid context in snd_card_locked sound 5 1 535d 531d 28/29 430d c9ce148ea753 ALSA: seq: Avoid module auto-load handling at event delivery
BUG: sleeping function called from invalid context in ovl_cache_entry_new ntfs3 afs 5 syz, C done 52 473d 505d 28/29 430d a64e4d48a0b7 afs: Fix afs_dynroot_readdir() to not use the RCU read lock
KCSAN: data-race in p9_conn_cancel / p9_write_work (7) v9fs 6 2 524d 549d 28/29 430d fbc0283fbeae 9p/trans_fd: mark concurrent read and writes to p9_conn->err
KCSAN: data-race in virtqueue_disable_cb / virtqueue_enable_cb_delayed (9) virt 6 1 528d 528d 28/29 430d 2e2f925fe737 virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN
WARNING in drv_remove_interface wireless -1 syz, C done inconclusive 29 536d 2132d 28/29 430d 49f27f29446a wifi: nl80211: reject cooked mode if it is set along with other flags
kernel BUG in skbprio_enqueue net -1 syz, C 7 505d 505d 28/29 430d ce8fe975fd99 net_sched: skbprio: Remove overly strict queue assertions
general protection fault in afs_atcell_get_link afs 2 syz, C 25 511d 514d 28/29 430d 0307d16f3610 afs: Fix afs_atcell_get_link() to check if ws_cell is unset first
WARNING in call_s_stream media -1 syz, C 83 511d 870d 28/29 430d 36cef585e2a3 media: vimc: skip .s_stream() for stopped entities
KMSAN: uninit-value in __ipv6_addr_type net 7 syz, C 3 540d 540d 28/29 430d 27843ce6ba3d ipvlan: ensure network headers are in skb linear part
BUG: sleeping function called from invalid context in crypto_put_default_null_skcipher crypto 5 syz, C error 5 592d 592d 28/29 430d dcc47a028c24 crypto: null - Use spin lock instead of mutex 5b0af621c3f6 net: restrict SO_REUSEPORT to inet sockets
KASAN: slab-use-after-free Read in join_transaction btrfs 19 1 577d 571d 28/29 430d e2f0943cf373 btrfs: fix use-after-free when attempting to join an aborted transaction
KASAN: use-after-free Read in __ocfs2_find_path ocfs2 19 syz, C inconclusive 65 515d 674d 28/29 430d a406aff8c051 ocfs2: validate l_tree_depth to avoid out-of-bounds access
kernel BUG in bch2_stripe_validate fs -1 syz, C done done 6 508d 592d 28/29 430d 71f8e806a5e4 bcachefs: Stricter checks on "key allowed in this btree"
kernel BUG in __journal_res_get (2) fs -1 syz, C error done 1527 430d 638d 28/29 430d 4c0d2c67ac6d bcachefs: Fix early startup error path
WARNING in mptcp_pm_nl_addr_send_ack mptcp -1 1 544d 542d 28/29 430d f865c24bc551 mptcp: always handle address removal under msk socket lock
KASAN: slab-use-after-free Read in steam_input_open input usb 19 syz, C done 5 525d 538d 28/29 430d e53fc232a65f HID: hid-steam: Fix use-after-free when detaching device
KASAN: slab-use-after-free Read in nf_tables_trans_destroy_work (2) netfilter 19 syz 1 531d 530d 28/29 430d fb8286562ecf netfilter: nf_tables: make destruction work queue pernet
KCSAN: data-race in bprm_execve / copy_fs (4) mm fs 6 1 512d 512d 28/29 430d af7bb0d2ca45 exec: fix the racy usage of fs_struct->in_exec
KMSAN: uninit-value in ppp_sync_send (2) ppp 7 syz, C 3 537d 547d 28/29 430d aabc6596ffb3 net: ppp: Add bound checking for skb data on ppp_sync_txmung
KMSAN: uninit-value in __nf_conncount_add netfilter 7 1 527d 523d 28/29 430d d653bfeb07eb netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree()
BUG: unable to handle kernel paging request in txBeginAnon jfs 11 syz, C inconclusive 43 522d 812d 28/29 430d b5799dd77054 jfs: add check read-only before truncation in jfs_truncate_nolock() 0176e69743ec jfs: add check read-only before txBeginAnon() call
KASAN: slab-use-after-free Read in afs_dynroot_readdir afs 19 syz, C 2 488d 502d 28/29 430d a64e4d48a0b7 afs: Fix afs_dynroot_readdir() to not use the RCU read lock
possible deadlock in dev_set_allmulti net 4 218 472d 521d 28/29 430d 27b918007d96 net: vlan: don't propagate flags on open
WARNING in fsnotify_file_area_perm xfs -1 syz, C 9 517d 554d 28/29 430d 955fbe0ef19d Revert "fsnotify: generate pre-content permission event on page fault"
possible deadlock in diFree (2) jfs 4 syz, C 40 506d 631d 28/29 430d b61e69bb1c04 jfs: Prevent copying of nlink with value 0 from disk inode
KASAN: slab-use-after-free Read in software_node_notify_remove acpi 19 syz, C done 28 473d 495d 28/29 430d bc2c46426f2d software node: Prevent link creation failure from causing kobj reference count imbalance
kernel BUG in clear_inode (2) jfs -1 syz, C inconclusive 986 430d 655d 28/29 430d 8c3f9a70d2d4 jfs: reject on-disk inodes of an unsupported type
general protection fault in p9_client_walk v9fs 2 syz, C 3 506d 522d 28/29 430d 3f61ac7c65bd fs/9p: fix NULL pointer dereference on mkdir
possible deadlock in ipv6_sock_ac_close (4) net 4 syz, C error 5 497d 534d 28/29 430d 752e2217d789 smc: Fix lockdep false-positive for IPPROTO_SMC.
WARNING in __ceph_open_session ceph -1 syz, C done 321 492d 493d 28/29 430d 10a77965760c batman-adv: Fix double-hold of meshif when getting enabled
UBSAN: array-index-out-of-bounds in dtReadFirst (2) jfs 19 syz, C error 119 473d 601d 28/29 430d a8dfb2168906 jfs: add index corruption check to DT_GETPAGE()
kernel BUG in filemap_fault sound -1 syz, C done 138 435d 532d 28/29 430d 10a77965760c batman-adv: Fix double-hold of meshif when getting enabled
KASAN: slab-use-after-free Read in l2cap_send_cmd bluetooth 19 syz, C done 34 570d 900d 28/29 430d b4f82f9ed43a Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd
BUG: unable to handle kernel paging request in efivarfs_pm_notify fs efi 8 syz, C 1037 527d 537d 28/29 430d cb6ae457bc6a efivarfs: Defer PM notifier registration until .fill_super
WARNING: bad unlock balance in __rtnl_unlock net 4 syz, C done 18 526d 528d 28/29 430d f130a0cc1b4f inet: fix lwtunnel_valid_encap_type() lock imbalance
BUG: unable to handle kernel NULL pointer dereference in __generic_file_write_iter (2) ntfs3 10 syz, C 8 559d 593d 28/29 430d 285cec318bf5 fs/ntfs3: Keep write operations atomic
possible deadlock in lock_system_sleep pm 4 syz, C 3 541d 540d 28/29 430d 52323ed1444e PM: hibernate: Avoid deadlock in hibernate_compressor_param_set()
WARNING in file_seek_cur_needs_f_lock overlayfs ext4 -1 syz, C done 10 444d 494d 28/29 430d 10a77965760c batman-adv: Fix double-hold of meshif when getting enabled
BUG: sleeping function called from invalid context in __alloc_frozen_pages_noprof afs 5 syz, C done 61 487d 505d 28/29 430d a64e4d48a0b7 afs: Fix afs_dynroot_readdir() to not use the RCU read lock
KCSAN: assert: race in srcu_gp_start_if_needed perf trace 14 1 629d 628d 28/29 430d d31e31365b5b srcu: Force synchronization for srcu_get_delay()
possible deadlock in elv_iosched_store block 4 syz, C 56 445d 504d 28/29 430d 01b91bf14f6d block: don't grab elevator lock during queue initialization
WARNING in __nf_unregister_net_hook (8) netfilter -1 2 489d 501d 28/29 430d 688c15017d5c netfilter: nf_tables: don't unregister hook when table is dormant
possible deadlock in efivarfs_actor mm 4 syz, C 8 507d 523d 28/29 430d dec1277875a5 efivarfs: use I_MUTEX_CHILD nested lock to traverse variables on resume
INFO: task hung in _free_event perf 1 syz, C 2 611d 634d 28/29 430d 56799bc03565 perf: Fix hang while freeing sigtrap event
KCSAN: data-race in mprotect_fixup / try_to_migrate_one mm 6 1 556d 555d 28/29 430d e92b6e7bb618 mm: use READ/WRITE_ONCE() for vma->vm_flags on migrate, mprotect
WARNING: refcount bug in io_tx_ubuf_complete io-uring 13 15 510d 507d 28/29 430d 67c007d6c12d io_uring/net: fix sendzc double notif flush
divide error in dbAllocAG jfs 2 syz, C done 172 504d 619d 28/29 430d ddf2846f22e8 jfs: add sanity check for agwidth in dbMount
WARNING in vmx_handle_exit (2) kvm-x86 -1 syz, C 3 531d 611d 28/29 430d 64c947a1cf35 KVM: VMX: Reject KVM_RUN if userspace forces emulation during nested VM-Enter
BUG: unable to handle kernel paging request in vma_merge_existing_range mm 8 syz, C done 8 485d 512d 28/29 430d 41e6ddcaa0f1 mm/vma: add give_up_on_oom option on modify/merge, use in uffd release
WARNING in ucan_probe can -1 syz, C done 143 512d 543d 28/29 430d 1d22a122ffb1 can: ucan: fix out of bound read in strscpy() source
KASAN: stack-out-of-bounds Read in usb_check_int_endpoints usb 17 syz, C 61 501d 564d 28/29 430d 0b43d98ff29b HID: hid-thrustmaster: fix stack-out-of-bounds read in usb_check_int_endpoints()
WARNING in remove_proc_entry (7) nfs -1 syz 682 431d 554d 28/29 430d 930b64ca0c51 nfsd: don't ignore the return code of svc_proc_register()
BUG: bad usercopy in vfs_readlink ext4 -1 syz, C done 5 527d 556d 28/29 430d 5f920d5d6083 ext4: verify fast symlink length
possible deadlock in crypto_exit_scomp_ops_async crypto 4 2 527d 536d 28/29 430d c11bcbc0a517 mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead()
BUG: corrupted list in hci_chan_del (2) bluetooth 19 syz, C done 502 550d 554d 28/29 430d ab4eedb790ca Bluetooth: L2CAP: Fix corrupted list in hci_chan_del
general protection fault in bpf_map_offload_map_alloc bpf 2 494 524d 525d 28/29 430d 0a5c8b2c8ccb bpf: fix a possible NULL deref in bpf_map_offload_map_alloc()
possible deadlock in bpf_map_mmap bpf 4 1 575d 571d 28/29 430d bc27c52eea18 bpf: avoid holding freeze_mutex during mmap operation
BUG: sleeping function called from invalid context in folio_mc_copy mm 5 syz, C done 5415 473d 505d 28/29 430d 2d900efff915 mm/migrate: fix sleep in atomic for large folios and buffer heads
WARNING in to_nfit_bus_uuid acpi nvdimm -1 syz, C 4 534d 698d 28/29 430d 2ff0e408db36 acpi: nfit: fix narrowing conversion in acpi_nfit_ctl
KASAN: slab-use-after-free Read in rose_timer_expiry (2) hams 19 158 457d 581d 28/29 457d 5de7665e0a07 net: rose: fix timer races against user threads
kernel BUG in __bch2_trans_commit fs -1 syz, C unreliable 11858 638d 662d 28/29 461d 8b22abb4c840 bcachefs: -o norecovery now bails out of recovery earlier
possible deadlock in ax25_setsockopt hams 4 2 583d 591d 28/29 462d 95fc45d1dea8 ax25: rcu protect dev->ax25_ptr
WARNING in kvm_timer_update_irq kvmarm -1 syz, C 15 630d 662d 28/29 462d 38d7aacca092 KVM: arm64: Get rid of userspace_irqchip_in_use
WARNING in kvm_handle_mmio_return kvmarm -1 syz, C 5 631d 638d 28/29 463d e735a5da6442 KVM: arm64: Don't retire aborted MMIO instruction
possible deadlock in bch2_alloc_sectors_start_trans fs 4 syz, C inconclusive 64 619d 640d 28/29 463d 2cd85fea49d8 bcachefs: Don't recurse in check_discard_freespace_key
WARNING in sk_skb_reason_drop (2) net -1 1 606d 606d 28/29 463d cdd0b9132d71 ip: Return drop reason if in_dev is NULL in ip_route_input_rcu().
KASAN: slab-use-after-free Read in ipvlan_get_iflink net 19 6 589d 686d 28/29 463d cb358ff94154 ipvlan: Fix use-after-free in ipvlan_get_iflink().
KASAN: vmalloc-out-of-bounds Write in push_insn_history bpf 21 136 614d 627d 28/29 464d d699440f58ce mm: fix vrealloc()'s KASAN poisoning logic
KASAN: vmalloc-out-of-bounds Write in vrealloc_noprof bpf 21 syz, C done 440 464d 627d 28/29 464d d699440f58ce mm: fix vrealloc()'s KASAN poisoning logic
upstream test error: WARNING in enable_work mm -1 20 585d 582d 28/29 464d cd6313beaeae Revert "vmstat: disable vmstat_work on vmstat_cpu_down_prep()"
kernel BUG in bch2_get_scanned_nodes fs -1 syz, C done 101 563d 624d 28/29 464d a6f4794fcd86 bcachefs: struct bkey_validate_context
WARNING: lock held when returning to user space in rtnl_link_ops_get net 4 syz, C done 9 627d 634d 28/29 464d 9b234a97b10c rtnetlink: fix rtnl_dump_ifinfo() error path
WARNING in udf_rmdir (2) udf -1 syz, C inconclusive done 2 624d 625d 28/29 464d c5566903af56 udf: Skip parent dir link count update if corrupted
WARNING: lock held when returning to user space in nsim_pp_hold_write net 4 syz, C 4 603d 608d 28/29 464d b9b8301d369b net: netdevsim: fix nsim_pp_hold_write()
general protection fault in vsock_stream_has_data net virt 2 syz, C done done 6 581d 577d 28/29 464d df137da9d6d1 vsock/virtio: cancel close work in the destructor
possible deadlock in zswap_store mm 4 syz, C inconclusive 24203 536d 586d 28/29 464d 4dff389c9f1d Revert "mm: zswap: fix race between [de]compression and CPU hotunplug"
BUG: unable to handle kernel paging request in __hwasan_check_x0_ADDR kvmarm 8 3 611d 610d 28/29 464d d561491ba927 KVM: arm64: vgic-v3: Sanitise guest writes to GICR_INVLPIR
kernel BUG in bch2_evacuate_bucket fs -1 syz, C done 4 628d 627d 28/29 464d 9e92d6e9efb0 bcachefs: Kill bch2_get_next_backpointer()
KASAN: slab-use-after-free Read in binder_release_work kernel 19 syz, C done done 2151 611d 681d 28/29 464d 7e20434cbca8 binder: fix freeze UAF in binder_release_work()
KASAN: slab-use-after-free Write in zswap_store mm 22 8 585d 599d 28/29 464d 12dcb0ef5406 mm: zswap: properly synchronize freeing resources during CPU hotunplug
linux-next test error: general protection fault in of_pci_supply_present pci -1 1 631d 631d 28/29 464d 278dd091e95d PCI/pwrctl: Create pwrctl device only if at least one power supply is present
KASAN: slab-use-after-free Read in dev_get_flags rdma 19 7 630d 617d 28/29 465d 2ac5415022d1 RDMA/rxe: Remove the direct link to net_device 16b87037b488 RDMA/siw: Remove direct link to net_device
KASAN: use-after-free Read in ring_buffer_map trace 19 syz, C 15 602d 606d 28/29 465d c58a812c8e49 ring-buffer: Fix overflow in __rb_map_vma
WARNING in io_pin_pages io-uring -1 syz, C done 14 633d 630d 28/29 465d 0c0a4eae26ac io_uring: check for overflows in io_pin_pages
WARNING in nsim_udp_tunnel_set_port net -1 syz, C 15 562d 576d 28/29 465d 50bf398e1cea net: netdevsim: try to close UDP port harness races
BUG: sleeping function called from invalid context in static_key_slow_dec kernel 5 3 610d 625d 28/29 465d b04df3da1b5c netfilter: nf_tables: do not defer rule destruction via call_rcu
KMSAN: uninit-value in ocfs2_file_read_iter ocfs2 7 syz, C 3 659d 655d 28/29 465d adc77b19f62d ocfs2: fix uninitialized value in ocfs2_file_read_iter()
possible deadlock in fat_count_free_clusters exfat 4 4 622d 642d 28/29 465d b49125574cae loop: Fix ABBA locking race
KASAN: slab-use-after-free Read in sco_sock_connect bluetooth 19 syz 1 629d 627d 28/29 465d ed9588554943 Bluetooth: SCO: remove the redundant sco_conn_put
WARNING in copy_net_ns net -1 1 620d 620d 28/29 465d 50b94204446e ipmr: tune the ipmr_can_free_table() checks.
WARNING in nft_socket_init netfilter -1 syz, C done 14 559d 627d 28/29 465d b7529880cb96 netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level
BUG: unable to handle kernel paging request in try_to_wake_up (2) net 19 syz, C error 31 541d 626d 28/29 465d f10bef73fb35 btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
VFS: Busy inodes after unmount (use-after-free) fs 2 syz, C error 55684 466d 1297d 28/29 465d 965b5dd1894f ocfs2: free inode when ocfs2_get_init_inode() fails
general protection fault in exfat_init_ext_entry exfat 2 syz, C done 43 587d 621d 28/29 465d 70465acbb0ce exfat: fix exfat_find_empty_entry() not returning error on failure
general protection fault in qt2_read_bulk_callback usb 2 syz, C error 5 584d 581d 28/29 465d 575a5adf48b0 USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb()
general protection fault in put_page (4) net 2 syz, C done 170 588d 605d 28/29 465d cbb26f7d8451 mptcp: fix TCP options overflow.
WARNING in nilfs_rmdir nilfs -1 syz, C error 295 585d 632d 28/29 465d 901ce9705fbb nilfs2: prevent use of deleted inode
UBSAN: array-index-out-of-bounds in cake_enqueue (2) net 15 1 601d 599d 28/29 465d 737d4d91d35b sched: sch_cake: add bounds checks to host bulk flow fairness counts
general protection fault in account_kernel_stack (3) mm 2 syz, C 7 590d 605d 28/29 465d 4db3d750ac7e nvmet: Don't overflow subsysnqn
BUG: sleeping function called from invalid context in hci_le_create_big_complete_evt bluetooth 5 syz, C done 380 616d 859d 28/29 465d 4d94f0555827 Bluetooth: hci_core: Fix sleeping function called from invalid context
WARNING in nsim_dev_health_break_write net -1 syz, C 10 604d 609d 28/29 465d ee76746387f6 netdevsim: prevent bad user input in nsim_dev_health_break_write()
possible deadlock in ieee80211_remove_interfaces wireless 4 syz, C error 326122 524d 708d 28/29 465d e759e1e4a4bd net: revert RTNL changes in unregister_netdevice_many_notify()
WARNING in netlink_ack_tlv_fill net -1 syz, C error 3 643d 639d 28/29 465d 3bf39fa849ab netlink: fix false positive warning in extack during dumps
KASAN: use-after-free Read in nilfs_find_entry nilfs 19 syz, C inconclusive 8 619d 640d 28/29 465d 985ebec4ab0a nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
kernel BUG in __pskb_pull_tail tipc -1 syz, C done 13 603d 610d 28/29 465d 429fde2d81bc net: tun: fix tun_napi_alloc_frags()
KMSAN: uninit-value in nsim_get_ringparam net 7 syz, C 59 560d 568d 28/29 465d 6db9d3a536cd netdevsim: don't assume core pre-populates HDS params on GET
WARNING: lock held when returning to user space in afs_proc_addr_prefs_write afs 4 syz, C 5 589d 597d 28/29 465d 17a4fde81d3a afs: Fix merge preference rule failure condition
WARNING in lock_list_lru_of_memcg mm -1 syz 2 546d 608d 28/29 465d 62e72d2cf702 mm, madvise: fix potential workingset node list_lru leaks
kernel BUG in bch2_btree_path_traverse_one fs -1 syz, C done 9 613d 646d 28/29 465d f11ca2ab18e3 bcachefs: Guard against backpointers to unknown btrees
general protection fault in ocfs2_prepare_dir_for_insert ocfs2 8 syz, C inconclusive 1072 475d 724d 28/29 465d b0fce54b8c0d ocfs2: check dir i_size in ocfs2_find_entry
possible deadlock in xfs_dquot_detach_buf xfs 4 syz, C done 6864 557d 605d 28/29 465d 1aacd3fac248 xfs: release the dquot buf outside of qli_lock
kernel BUG in bch2_journal_pin_set fs -1 syz, C done 11 573d 627d 28/29 465d b3d82c2f2761 bcachefs: Guard against journal seq overflow
WARNING in get_mode_access lsm -1 syz, C inconclusive 12 579d 637d 28/29 465d 49440290a093 landlock: Handle weird files
general protection fault in pick_link ntfs3 2 syz, C 5 488d 638d 28/29 465d 2afd4d267e6d fs/ntfs3: Mark inode as bad as soon as error detected in mi_enum_attr()
WARNING in geneve_xmit (2) net -1 1 624d 619d 28/29 465d 8588c99c7d47 geneve: do not assume mac header is set in geneve_xmit_skb()
KASAN: vmalloc-out-of-bounds Read in acpi_nfit_ctl (2) acpi nvdimm 17 syz, C 23 605d 647d 28/29 465d 265e98f72bac acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
WARNING in bch2_journal_flush_seq_async fs -1 syz, C 27 571d 695d 28/29 465d 4746ee182a76 bcachefs: Check for inode journal seq in the future
bpf-next test error: possible deadlock in ieee80211_remove_interfaces wireless -1 4 562d 567d 28/29 465d e759e1e4a4bd net: revert RTNL changes in unregister_netdevice_many_notify()
general protection fault in proc_scheduler fs 2 syz 6 584d 589d 28/29 465d d38e26e36206 mptcp: sysctl: sched: avoid using current->nsproxy
UBSAN: shift-out-of-bounds in iova_bitmap_alloc iommu -1 syz, C done 6 573d 579d 28/29 465d e24c15510592 iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index()
KASAN: slab-use-after-free Read in chaoskey_disconnect usb 19 2 698d 686d 28/29 465d 422dc0a4d12d USB: chaoskey: fail open after removal
KASAN: slab-out-of-bounds Read in selinux_ip_output selinux 19 syz, C done 1490 616d 626d 28/29 465d eedcad2f2a37 selinux: use sk_to_full_sk() in selinux_ip_output()
KMSAN: uninit-value in ima_add_template_entry (2) exfat 7 syz, C 123 471d 681d 28/29 465d 98e2fb26d1a9 exfat: fix the new buffer was not zeroed before writing
general protection fault in modify_prefix_route net 2 syz, C done 11 625d 626d 28/29 465d a747e02430df ipv6: avoid possible NULL deref in modify_prefix_route()
KASAN: slab-use-after-free Read in z_erofs_decompress_queue erofs 19 6 599d 621d 28/29 465d b10a1e5643e5 erofs: fix rare pcluster memory leak after unmounting
WARNING in NUM net -1 1 619d 615d 28/29 465d 50b94204446e ipmr: tune the ipmr_can_free_table() checks.
general protection fault in do_migrate_pages mm 2 syz, C 2 615d 633d 28/29 465d 091c1dd2d4df mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
kernel BUG in bch2_rechecksum_bio fs -1 syz, C 4 634d 644d 28/29 465d 9bdb3b73e732 bcachefs: Check for extent crc uncompressed/compressed size mismatch
WARNING in iguanair_probe/usb_submit_urb (2) media -1 syz, C done 18 565d 687d 28/29 465d b98d5000c505 media: rc: iguanair: handle timeouts
WARNING in ip6mr_net_exit_batch net -1 1 618d 618d 28/29 465d 50b94204446e ipmr: tune the ipmr_can_free_table() checks.
kernel BUG in __bch2_journal_pin_put fs -1 syz, C 11 585d 627d 28/29 465d b3d82c2f2761 bcachefs: Guard against journal seq overflow
KASAN: slab-use-after-free Write in recv_work nbd 22 10 469d 609d 28/29 465d 844b8cdc6816 nbd: don't allow reconnect after disconnect
KMSAN: uninit-value in netdev_pick_tx net 7 3 622d 627d 28/29 465d 0a4cc4accf00 tcp: populate XPS related fields of timewait sockets
WARNING: refcount bug in sk_skb_reason_drop can 13 syz, C done 8107 613d 680d 28/29 465d a8c695005bfe can: j1939: j1939_session_new(): fix skb reference counting
KMSAN: uninit-value in inode_go_dump (5) gfs2 7 syz, C 6 628d 682d 28/29 465d f9417fcfca3c KMSAN: uninit-value in inode_go_dump (5)
possible deadlock in xfs_icwalk_ag (2) xfs 4 syz, C 1066 505d 850d 28/29 465d 45f69d091bab xfs: eliminate lockdep false positives in xfs_attr_shortform_list
KASAN: slab-use-after-free Read in btrfs_cow_block btrfs 19 2 615d 611d 28/29 465d 44f52bbe96df btrfs: fix use-after-free when COWing tree bock and tracing is enabled
kernel BUG in const_folio_flags (2) fs mm -1 syz 3 569d 629d 28/29 465d 3203b3ab0fcf mm/filemap: don't call folio_test_locked() without a reference in next_uptodate_folio()
KASAN: slab-use-after-free Read in __mmap_region mm 19 syz, C 7 578d 616d 28/29 465d 42c4e4b20d9c mm: correctly reference merged VMA
general protection fault in bpf_prog_array_delete_safe bpf 2 syz, C done 5 614d 616d 28/29 465d 978c4486cca5 bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog
INFO: task hung in lock_sock_nested (5) mptcp tipc 1 syz, C done 43 475d 596d 28/29 465d 06cc8786516f tls: skip setting sk_write_space on rekey
UBSAN: array-index-out-of-bounds in read_inline_xattr f2fs 15 syz, C done 25 561d 619d 28/29 465d 5c1768b67250 f2fs: fix to do sanity check correctly on i_inline_xattr_size
WARNING in __dev_queue_xmit (5) net -1 syz, C 41 607d 605d 28/29 465d 5eb70dbebf32 netdev-genl: avoid empty messages in queue dump
WARNING in free_netdev (2) net -1 syz 259 468d 574d 28/29 465d bff406bc0424 net: destroy dev->lock later in free_netdev()
possible deadlock in f2fs_evict_inode f2fs 4 syz 2 679d 675d 28/29 465d f10a890308a7 f2fs: fix to avoid potential deadlock in f2fs_record_stop_reason()
WARNING in bitmap_parse_user trace -1 syz, C 83 586d 607d 28/29 465d 98feccbf32cf tracing: Prevent bad count for tracing_cpumask_write
kernel BUG in __bch2_btree_node_write fs -1 syz, C 110 571d 680d 28/29 465d 75eabea6988e bcachefs: Fix dup/misordered check in btree node read
kernel BUG in bch2_btree_node_lock_write fs -1 syz, C done 8 619d 631d 28/29 465d f9e0a9be70c8 bcachefs: Issue a transaction restart after commit in repair
KMSAN: uninit-value in io_recv io-uring 7 syz, C 31 588d 589d 28/29 465d c6e60a0a68b7 io_uring/net: always initialize kmsg->msg.msg_inq upfront
KASAN: slab-use-after-free Read in __dev_get_by_index net 19 1 625d 619d 28/29 465d 750e51603395 net: avoid potential UAF in default_operstate()
BUG: stack guard page was hit in sys_open mm v9fs -1 syz, C 11 605d 641d 28/29 465d 4acb665cf4f3 netfs: Work around recursion by abandoning retry if nothing read
general protection fault in cleanup_bearer tipc 19 syz, C 13668 603d 618d 28/29 465d b04d86fff66b tipc: fix NULL deref in cleanup_bearer()
kernel BUG in f2fs_get_victim f2fs -1 1 603d 599d 28/29 465d 207764e5d6f1 f2fs: fix to avoid return invalid mtime from f2fs_get_section_mtime()
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_files_register (3) io-uring 6 1 641d 639d 28/29 465d e358e09a894d io_uring: protect register tracing
kernel BUG in send_hsr_supervision_frame net -1 2 631d 620d 28/29 465d af8edaeddbc5 net: hsr: must allocate more bytes for RedBox support
WARNING in rtl8150_open/usb_submit_urb usb -1 syz, C 5 558d 710d 28/29 465d 90b7f2961798 net: usb: rtl8150: enable basic endpoint checking
KMSAN: uninit-value in hsr_forward_skb (2) net 7 syz, C 22 619d 626d 28/29 465d b9653d19e556 net: hsr: avoid potential out-of-bound access in fill_frame_info()
kernel BUG in bch2_btree_pos_to_text (2) fs -1 syz, C 51 572d 630d 28/29 465d abf23afa36eb bcachefs: Fix btree node scan when unknown btree IDs are present
kernel BUG in bch2_bucket_alloc_trans (3) fs -1 syz, C error 711 571d 634d 28/29 465d 828552ca74a4 bcachefs: Kill bch2_bucket_alloc_new_fs()
kernel BUG in nr_header hams -1 2 631d 618d 28/29 465d a6d75ecee2bf net: lapb: increase LAPB_HEADER_LEN
possible deadlock in blk_unregister_queue block 4 29 573d 627d 28/29 465d b769a2f409e7 blktrace: move copy_[to|from]_user() out of ->debugfs_lock
general protection fault in vsscanf (2) mm 2 syz, C 11 601d 606d 28/29 465d d3ac65d274b3 mm: huge_memory: handle strsep not finding delimiter
WARNING in iommufd_device_unbind iommu -1 syz error 3 619d 630d 28/29 465d d9df72c6acd6 iommu: iommufd: fix WARNING in iommufd_device_unbind
kernel BUG in f2fs_invalidate_blocks f2fs -1 4 467d 696d 28/29 465d 6babe00ccd34 f2fs: fix to do sanity check on node blkaddr in truncate_node()
WARNING in ni_fiemap ntfs3 -1 syz, C 99 614d 728d 28/29 465d e2705dd3d16d fs/ntfs3: Fix warning in ni_fiemap
WARNING in nilfs_btree_propagate (2) nilfs -1 syz, C error inconclusive 2 625d 668d 28/29 465d ca76bb226bf4 nilfs2: do not force clear folio if buffer is referenced
WARNING in bitmap_parselist_user kernel -1 syz, C 35 586d 605d 28/29 465d dd2a5b5514ab mm/util: make memdup_user_nul() similar to memdup_user()
KASAN: slab-use-after-free Read in thread_group_cputime io-uring 19 3 506d 581d 28/29 465d 4b7cfa8b6c28 io_uring/sqpoll: zero sqd->thread on tctx errors
BUG: sleeping function called from invalid context in vfree sound 5 1 627d 627d 28/29 465d 20c0c49720dc ALSA: rawmidi: Fix kvfree() call in spinlock
WARNING in mptcp_pm_nl_set_flags (2) mptcp -1 syz done 2 582d 577d 28/29 465d 1bb0d1348546 mptcp: pm: only set fullmesh for subflow endp
kernel BUG in nilfs_delete_entry nilfs -1 syz, C done 22 574d 837d 28/29 465d ee70999a988b nilfs2: handle errors that nilfs_prepare_chunk() may return
WARNING in thrustmaster_probe/usb_submit_urb usb -1 syz, C 25 570d 671d 28/29 465d 50420d7c79c3 HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check
WARNING in tomoyo_write_control tomoyo -1 syz, C 301 568d 607d 28/29 465d 3df7546fc03b tomoyo: don't emit warning in tomoyo_write_control()
KASAN: slab-use-after-free Read in free_block_entry btrfs 19 1 641d 637d 28/29 465d 7c4e39f9d2af btrfs: ref-verify: fix use-after-free after invalid ref action
bpf test error: possible deadlock in ieee80211_remove_interfaces wireless -1 12 541d 568d 28/29 465d e759e1e4a4bd net: revert RTNL changes in unregister_netdevice_many_notify()
WARNING in handle_policy_update lsm -1 syz, C 61 586d 607d 28/29 465d f09ff307c729 safesetid: check size of policy writes
KASAN: slab-out-of-bounds Read in led_tg_check netfilter 17 syz, C done 5 621d 631d 28/29 465d 04317f4eb2aa netfilter: x_tables: fix LED ID check in led_tg_check()
KASAN: slab-use-after-free Read in ocfs2_lock_global_qf ocfs2 19 syz, C inconclusive 11 590d 641d 28/29 465d 5f3fd772d152 ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
kernel BUG in bch2_journal_noflush_seq fs -1 syz, C done done 841 571d 765d 28/29 465d 0eafe758ac44 bcachefs: Check for bucket journal seq in the future
KMSAN: uninit-value in __exfat_get_dentry_set exfat 7 syz, C 14 624d 678d 28/29 465d 02dffe9ab092 exfat: fix uninit-value in __exfat_get_dentry_set
UBSAN: array-index-out-of-bounds in mr_table_dump net 15 syz, C 4 570d 570d 28/29 465d 15a901361ec3 ipmr: do not call mr_mfc_uses_dev() for unres entries
KASAN: slab-use-after-free Read in set_powered_sync bluetooth 19 syz, C done 153 624d 760d 28/29 465d 0b882940665c Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync
WARNING in snd_ctl_led_register sound -1 1 617d 613d 28/29 465d b2e538a9827d ALSA: control: Avoid WARN() for symlink errors
WARNING in __io_uring_free io-uring -1 1 637d 633d 28/29 465d 7eb75ce75271 io_uring/tctx: work around xa_store() allocation error issue
divide error in drm_mode_vrefresh dri 2 syz, C done 15 605d 1150d 28/29 465d 9398332f23fa drm/modes: Avoid divide by zero harder in drm_mode_vrefresh()
KASAN: use-after-free Read in ocfs2_search_extent_list ocfs2 19 syz, C inconclusive 3 583d 613d 28/29 465d 34bb50c42335 ocfs2: check el->l_next_free_rec in ocfs2_get_clusters_nocache
KASAN: out-of-bounds Read in copy_from_kernel_nofault mm 17 syz, C done 1628 507d 683d 28/29 465d e4137f08816b mm, kasan, kmsan: instrument copy_from/to_kernel_nofault
UBSAN: array-index-out-of-bounds in inline_xattr_addr f2fs 15 syz, C 6 571d 603d 28/29 465d 5c1768b67250 f2fs: fix to do sanity check correctly on i_inline_xattr_size
INFO: task hung in process_measurement (2) integrity lsm 1 syz, C done 607 467d 1070d 28/29 465d a5324b3a488d exfat: fix the infinite loop in __exfat_free_cluster()
general protection fault in find_mergeable_anon_vma mm 2 1 618d 613d 28/29 465d 8ac662f5da19 fork: avoid inappropriate uprobe access to invalid mm
WARNING: suspicious RCU usage in __ethtool_get_ts_info net 4 syz, C done 41 585d 605d 28/29 465d 4c61d809cf60 net: ethtool: Fix suspicious rcu_dereference usage
general protection fault in bch2_checksum fs 19 syz, C done 34 466d 758d 28/29 465d f7f196170dcd bcachefs: cryptographic MACs on superblock are not (yet?) supported
WARNING in ovl_encode_real_fh overlayfs -1 syz, C 7 588d 655d 28/29 465d 974e3fe0ac61 fs: relax assertions on failure to encode file handles
KASAN: slab-use-after-free Read in sg_release scsi usb 19 syz 1 636d 646d 28/29 465d f10593ad9bc3 scsi: sg: Fix slab-use-after-free read in sg_release()
UBSAN: shift-out-of-bounds in flow_classify net -1 syz, C error 5 589d 588d 28/29 465d a039e54397c6 net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute
possible deadlock in __bch2_fsck_err fs 4 2 615d 615d 28/29 465d 49f2d182638a bcachefs: Kill unnecessary mark_lock usage
WARNING in rxrpc_send_data afs net -1 syz, C done 275 606d 612d 28/29 465d ae4f89989479 rxrpc: Fix ability to add more data to a call once MSG_MORE deasserted
WARNING in l2tp_exit_net net -1 syz done 219 616d 700d 28/29 465d 5d066766c5f1 net/l2tp: fix warning in l2tp_exit_net found by syzbot
KMSAN: uninit-value in hfs_read_inode hfs 7 syz, C 2 620d 630d 28/29 465d b905bafdea21 hfs: Sanity check the root record
KASAN: slab-out-of-bounds Read in f2fs_getxattr f2fs 17 syz, C done 9 529d 589d 28/29 465d 5c1768b67250 f2fs: fix to do sanity check correctly on i_inline_xattr_size
possible deadlock in team_port_change_check (2) net 4 syz, C done 16406 476d 897d 28/29 465d 3fff5da4ca21 team: prevent adding a device which is already a team device lower
BUG: unable to handle kernel paging request in crypto_skcipher_encrypt bcachefs 8 syz, C 433 557d 791d 28/29 465d dba8243f3b46 bcachefs: Don't try to en/decrypt when encryption not available
KASAN: slab-out-of-bounds Read in orangefs_debug_write orangefs 17 syz, C 6 565d 600d 28/29 465d f7c848431632 orangefs: fix a oob in orangefs_debug_write
WARNING: locking bug in __rmqueue_pcplist mm 4 syz, C 11148 556d 649d 28/29 465d d40797d6720e kasan: make kasan_record_aux_stack_noalloc() the default behaviour
general protection fault in vidtv_mux_stop_thread media 2 syz, C 9 566d 593d 28/29 465d 1221989555db media: vidtv: Fix a null-ptr-deref in vidtv_mux_stop_thread
KASAN: slab-use-after-free Read in ila_nf_input net 19 syz 38 589d 592d 28/29 465d 260466b576bc ila: serialize calls to nf_register_net_hooks()
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (12) io-uring 6 4 582d 613d 28/29 465d a13030fd194c io_uring: simplify the SQPOLL thread check when cancelling requests
WARNING in ieee80211_set_active_links wireless -1 syz, C 2 575d 592d 28/29 465d 7553477cbfd7 wifi: mac80211: prohibit deactivating all links
WARNING: locking bug in eventfd_signal_mask io-uring fs 4 syz, C done 6 589d 593d 28/29 465d a9c83a0ab66a io_uring/timeout: flush timeouts outside of the timeout lock
general protection fault in dev_prep_valid_name wireless 2 syz, C done 792 593d 636d 28/29 465d 48327566769a rtnetlink: fix double call of rtnl_link_get_net_ifla()
general protection fault in btrfs_search_slot btrfs 2 syz, C done 9 620d 659d 28/29 465d 3ed51857a50f btrfs: add a sanity check for btrfs root in btrfs_search_slot()
kernel BUG in ocfs2_truncate_log_append ocfs2 -1 syz, C 4 592d 646d 28/29 465d 01676ecd0b5c ocfs2: check tl->count of truncate log inode in ocfs2_get_truncate_log_info
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_sync bluetooth 19 syz 40 579d 751d 28/29 465d 26fbd3494a7d Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync
kernel BUG in iov_iter_revert (2) fuse netfs -1 syz, C done 61 581d 652d 28/29 465d 105549d09a53 netfs: Fix enomem handling in buffered reads
kernel BUG in vlan_get_tci net -1 syz, C done 5 592d 592d 28/29 465d 77ee7a6d16b6 af_packet: fix vlan_get_tci() vs MSG_PEEK
WARNING in ip6mr_free_table net -1 syz, C done 97859 614d 620d 28/29 465d 50b94204446e ipmr: tune the ipmr_can_free_table() checks.
general protection fault in __skb_frag_ref net 2 2 589d 600d 28/29 465d cbb26f7d8451 mptcp: fix TCP options overflow.
WARNING in __io_submit_flush_completions io-uring -1 syz, C 23 582d 602d 28/29 465d 60495b08cf7a io_uring: silence false positive warnings
net-next test error: possible deadlock in ieee80211_remove_interfaces wireless -1 9 569d 575d 28/29 465d e759e1e4a4bd net: revert RTNL changes in unregister_netdevice_many_notify()
possible deadlock in chaoskey_release usb 4 syz, C 90 669d 674d 28/29 465d d73dc7b182be USB: chaoskey: Fix possible deadlock chaoskey_list_lock
WARNING in wnd_add_free_ext (3) ntfs3 -1 syz, C done 19 494d 729d 28/29 465d 5fc982fe7eca fs/ntfs3: Fix case when unmarked clusters intersect with zone
KASAN: slab-out-of-bounds Read in xfrm_state_find net 17 10 472d 626d 28/29 465d e952837f3ddb xfrm: state: fix out-of-bounds read during lookup
possible deadlock in cleanup_net (3) wireless 4 6 562d 564d 28/29 465d e759e1e4a4bd net: revert RTNL changes in unregister_netdevice_many_notify()
WARNING in __mptcp_clean_una (2) mptcp -1 syz, C done 11 566d 606d 28/29 465d 619af16b3b57 mptcp: handle fastopen disconnect correctly
BUG: using smp_processor_id() in preemptible code in nft_inner_eval netfilter 4 2 631d 631d 28/29 465d 7b1d83da254b netfilter: nft_inner: incorrect percpu area handling under softirq
general protection fault in bch2_btree_path_traverse_one fs 8 syz, C done 564 557d 658d 28/29 465d 90f3683e8f7c bcachefs: Fix null ptr deref in btree_path_lock_root() c7e78f7b0178 bcachefs: Ignore empty btree root journal entries
possible deadlock in __bch2_trans_relock btrfs 4 syz, C 52 573d 660d 28/29 465d ff1dd05f8233 bcachefs: bch2_trans_relock() is trylock for lockdep
KMSAN: uninit-value in mptcp_incoming_options (2) mptcp 7 9 572d 577d 28/29 465d c86b000782da mptcp: consolidate suboption status
BUG: corrupted list in bch2_btree_and_journal_iter_exit fs 8 syz, C done 7 581d 627d 28/29 465d 0184dfa3b821 bcachefs: Fix journal_iter list corruption
WARNING: locking bug in get_random_u8 kernel 4 syz 70 564d 636d 28/29 465d d40797d6720e kasan: make kasan_record_aux_stack_noalloc() the default behaviour
WARNING in posixtimer_send_sigqueue (2) kernel -1 syz, C done 557 557d 605d 28/29 465d 8c4840277b6d signal/posixtimers: Handle ignore/blocked sequences correctly
KASAN: slab-use-after-free Read in bpf_trace_run2 (2) bpf trace 19 syz error 123 648d 665d 28/29 465d 2e8a12b82c40 tracing: Fix syscall tracepoint use-after-free
WARNING in mac80211_hwsim_config_mac_nl wireless -1 85 610d 642d 28/29 465d 52cebabb1264 wifi: mac80211: fix vif addr when switching from monitor to station
BUG: corrupted list in ieee802154_if_remove wpan 8 syz, C error 3 643d 646d 28/29 465d eb09fbeb4870 mac802154: check local interfaces before deleting sdata list
KMSAN: uninit-value in dib3000mb_attach (2) usb media 7 syz, C 4873 600d 2121d 28/29 465d 2dd59fe0e19e media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
KMSAN: uninit-value in io_nop io-uring 7 syz, C 39 621d 631d 28/29 465d ee116574de84 io_uring/nop: ensure nop->fd is always initialized
WARNING in mark_buffer_dirty (6) fs -1 syz, C error 11669 465d 1032d 28/29 465d ca76bb226bf4 nilfs2: do not force clear folio if buffer is referenced
KASAN: slab-out-of-bounds Read in nsim_dev_health_break_write net 17 syz, C 4 603d 608d 28/29 465d ee76746387f6 netdevsim: prevent bad user input in nsim_dev_health_break_write()
BUG: unable to handle kernel paging request in find_first_extent_item btrfs 8 syz, C 4 594d 590d 28/29 465d 6aecd91a5c5b btrfs: avoid NULL pointer dereference if no valid extent tree
kernel BUG in snd_pcm_mmap_data_fault sound -1 1 696d 692d 28/29 465d d2913a07d903 ALSA: pcm: Add sanity NULL check for the default mmap fault handler
WARNING in uvc_status_unregister usb media -1 syz, C done 61256 556d 663d 28/29 465d a67f75c2b5ec media: uvcvideo: Fix deadlock during uvc_probe
INFO: rcu detected stall in hub_event usb 1 syz, C done 1233 465d 2458d 28/29 465d 64f2657b5793 HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections
kernel BUG in bch2_bio_compress (2) fs -1 syz, C 5 513d 638d 28/29 465d 3d0b3b51c5ab bcachefs: Don't BUG_ON() when superblock feature wasn't set for compressed data
WARNING in page_pool_put_unrefed_netmem net -1 syz, C error 7 578d 718d 28/29 465d a126061c80d5 ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple()
INFO: task hung in _cfg80211_unregister_wdev (2) wireless 1 552 561d 569d 28/29 465d e759e1e4a4bd net: revert RTNL changes in unregister_netdevice_many_notify()
possible deadlock in chaoskey_open usb 4 syz, C 475 669d 674d 28/29 465d d73dc7b182be USB: chaoskey: Fix possible deadlock chaoskey_list_lock
WARNING in udf_rename (2) udf -1 syz, C error 8 618d 626d 28/29 465d 6756af923e06 udf: Verify inode link counts before performing rename
KMSAN: uninit-value in f2fs_new_node_page f2fs 7 syz, C 39 565d 619d 28/29 465d 76f01376df39 f2fs: ensure that node info flags are always initialized
WARNING: locking bug in __lock_task_sighand bpf trace 4 syz, C unreliable 89 568d 624d 28/29 465d 87c544108b61 bpf: Send signals asynchronously if !preemptible
kernel BUG in nilfs_set_link nilfs -1 1 585d 581d 28/29 465d ee70999a988b nilfs2: handle errors that nilfs_prepare_chunk() may return
KASAN: slab-out-of-bounds Read in ovl_inode_upper overlayfs 17 syz, C 4 627d 627d 28/29 465d 2957fa4931a3 fs/backing_file: fix wrong argument in callback
kernel BUG in bch2_btree_write_buffer_flush_locked fs -1 syz, C done 35 575d 655d 28/29 465d b3d82c2f2761 bcachefs: Guard against journal seq overflow
KASAN: null-ptr-deref Read in fuse_copy_do fuse 12 syz, C done 10 585d 625d 28/29 465d 78f2560fc9fa fuse: Set *nbytesp=0 in fuse_get_user_pages on allocation failure
WARNING in __proc_create (3) afs -1 syz, C 2 593d 589d 28/29 465d 8fd56ad6e7c9 afs: Fix the maximum cell name length
general protection fault in vsock_connectible_has_data net virt 2 syz, C done 7 584d 582d 28/29 465d f6abafcd32f9 vsock/bpf: return early if transport is not assigned
kernel BUG in vlan_get_protocol_dgram net -1 syz, C done 8 592d 592d 28/29 465d f91a5b808938 af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK
kernel BUG in bch2_btree_root_read fs -1 syz, C 9 556d 630d 28/29 465d 828552ca74a4 bcachefs: Kill bch2_bucket_alloc_new_fs()
WARNING in current_check_refer_path lsm -1 syz, C 90 579d 764d 28/29 465d 49440290a093 landlock: Handle weird files
INFO: task hung in exfat_sync_fs exfat 1 syz, C error 1859 596d 1112d 28/29 465d fee873761bd9 exfat: fix the infinite loop in exfat_readdir()
general protection fault in netfs_write_collection_worker netfs 2 14 571d 669d 28/29 465d 794d8cf3a87a netfs: Report on NULL folioq in netfs_writeback_unlock_folios()
KASAN: slab-out-of-bounds Write in __put_unused_fd fs 22 syz, C done 5 587d 591d 28/29 465d 0c0214df28f0 fanotify: Fix crash in fanotify_init(2)
possible deadlock in usb_deregister_dev (3) usb 4 syz, C 103 669d 674d 28/29 465d d73dc7b182be USB: chaoskey: Fix possible deadlock chaoskey_list_lock
possible deadlock in page_cache_ra_unbounded mm fs 4 syz, C error done 163 571d 1332d 28/29 527d 6f861765464f fs: Block writes to mounted block devices
WARNING in skb_checksum_help (3) net -1 syz, C done done 9460 639d 967d 28/29 564d 89add40066f9 net: drop bad gso csum_start and offset in virtio_net_hdr
KASAN: use-after-free Read in reiserfs_fill_super (3) fs 19 syz, C error done 47 634d 679d 28/29 578d fb6f20ecb121 reiserfs: The last commit
kernel BUG in bch2_fs_btree_write_buffer_exit fs -1 syz, C done 6138 634d 685d 28/29 594d ca43f73cd172 bcachefs: bch2_btree_write_buffer_flush_going_ro()
kernel BUG in bch2_journal_res_get (2) fs -1 syz, C 1710 634d 658d 28/29 594d ca43f73cd172 bcachefs: bch2_btree_write_buffer_flush_going_ro()
kernel BUG in bch2_fs_btree_cache_exit fs -1 syz, C done 2766 634d 665d 28/29 594d ca43f73cd172 bcachefs: bch2_btree_write_buffer_flush_going_ro()
WARNING in netlink_sock_destruct (2) net -1 1 652d 652d 28/29 604d 1904fb9ebf91 netlink: terminate outstanding dump on socket close
divide error in __tcp_select_window (3) net 2 syz, C 5 645d 650d 28/29 605d ce7356ae3594 mptcp: cope racing subflow creation in mptcp_rcv_space_adjust
BUG: using smp_processor_id() in preemptible code in bpf_mem_alloc bpf 4 syz, C done 12 637d 634d 28/29 605d 4ff04abf9d5b bpf: Add necessary migrate_disable to range_tree.
WARNING: suspicious RCU usage in phonet_route_del net 4 syz, C done 7 646d 650d 28/29 606d 38a1f50a5efb phonet: do not call synchronize_rcu() from phonet_route_del()
general protection fault in io_uring_show_fdinfo (2) io-uring 2 syz, C done 19 652d 651d 28/29 606d d50f94d761a5 io_uring/rsrc: get rid of the empty node and dummy_ubuf
general protection fault in io_sqe_buffer_register io-uring 2 syz, C done 55 649d 651d 28/29 606d d50f94d761a5 io_uring/rsrc: get rid of the empty node and dummy_ubuf
kernel BUG in __bch2_btree_node_hash_insert fs -1 syz, C done 396 635d 643d 28/29 606d 0b6ec0c5ac6c bcachefs: Fix assertion pop in topology repair
general protection fault in put_page (3) net 2 syz, C done 47 606d 651d 28/29 606d 341468e0ab4b lib/iov_iter: fix bvec iterator setup
WARNING in hrtimer_forward (3) kernel -1 3 646d 739d 28/29 606d 6ee0270943b5 wifi: mac80211_hwsim: use hrtimer_active()
net-next test error: WARNING in __sock_create net -1 41 655d 667d 28/29 606d ba4e469e42fe vsock: do not leave dangling sk pointer in vsock_create()
KASAN: slab-out-of-bounds Read in journal_entry_dev_usage_to_text fs 17 syz, C done 33 636d 746d 28/29 606d 657d4282d8c4 bcachefs: Fix journal_entry_dev_usage_to_text() overrun
WARNING in posixtimer_send_sigqueue kernel -1 syz, C error 196 606d 639d 28/29 606d cdc905d16b07 posix-timers: Fix spurious warning on double enqueue versus do_exit()
BUG: Bad page state in kvm_coalesced_mmio_init mm -1 1 648d 647d 28/29 606d 66edc3a5894c mm: page_alloc: move mlocked flag clearance into free_pages_prepare()
general protection fault in touch_buffer nilfs 2 syz, C 8 642d 653d 28/29 606d cd45e963e44b nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
UBSAN: array-index-out-of-bounds in jfs_readdir jfs 19 syz, C inconclusive 89 613d 865d 28/29 606d 839f102efb16 jfs: fix array-index-out-of-bounds in jfs_readdir
kernel BUG in __bkey_unpack_pos fs -1 syz, C 4 614d 653d 28/29 606d dc537189b5cf bcachefs: Fix validate_bset() repair path
kernel BUG in bch2_trans_node_iter_init fs -1 syz, C done 13 644d 658d 28/29 606d f8f1dde68681 bcachefs: Fix missing validation for bch_backpointer.level
kernel BUG in bch2_btree_path_level_init (2) fs -1 syz, C done 29 610d 660d 28/29 606d f8f1dde68681 bcachefs: Fix missing validation for bch_backpointer.level
KASAN: slab-out-of-bounds Read in bitmap_ip_add (2) netfilter 17 syz, C 3 644d 640d 28/29 606d 35f56c554eb1 netfilter: ipset: add missing range check in bitmap_ip_uadt
WARNING in sk_skb_reason_drop net -1 syz, C done 1447 607d 636d 28/29 606d 85c7975acd97 net: ip: fix unexpected return in fib_validate_source()
UBSAN: shift-out-of-bounds in ocfs2_fill_super (2) ocfs2 -1 syz, C 81 636d 657d 28/29 606d 23aab037106d ocfs2: fix UBSAN warning in ocfs2_verify_volume()
KCSAN: data-race in __ep_remove / __fput (5) fs 6 1 693d 693d 28/29 606d 6474353a5e3d epoll: annotate racy check
WARNING in media_create_pad_link usb media -1 syz, C done done 104 631d 2283d 28/29 606d 3dd075fe8ebb media: uvcvideo: Require entities to have a non-zero unique ID
UBSAN: shift-out-of-bounds in dbSplit (2) jfs -1 syz, C error 403 619d 865d 28/29 606d a5f5e4698f8a jfs: fix shift-out-of-bounds in dbSplit
kernel BUG in bch2_dev_btree_bitmap_mark fs -1 syz, C done 31 638d 662d 28/29 606d 27a036a0c3e7 bcachefs: Fix bch_member.btree_bitmap_shift validation
kernel BUG in ocfs2_set_new_buffer_uptodate ocfs2 -1 syz, C inconclusive 55 615d 726d 28/29 606d 737f34137844 ocfs2: uncache inode which has failed entering the group
UBSAN: array-index-out-of-bounds in dbAdjTree (2) jfs 15 syz, C inconclusive 77 633d 818d 28/29 606d a174706ba4da jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
kernel BUG in bch2_bkey_pack_pos_lossy fs -1 syz, C 7 645d 657d 28/29 606d dc537189b5cf bcachefs: Fix validate_bset() repair path
KASAN: use-after-free Read in netdev_unregister_kobject pm 19 syz, C error 6281 613d 844d 28/29 606d 27aabf27fd01 Bluetooth: fix use-after-free in device_for_each_child()
KMSAN: uninit-value in hci_rx_work bluetooth 7 syz, C 29 633d 752d 28/29 606d 3fe288a8214e Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet
WARNING: locking bug in ext4_move_extents ext4 4 syz, C done 12000 613d 1166d 28/29 606d d7fe143cb115 locking/lockdep: Avoid creating new name string literals in lockdep_set_subclass()
INFO: task hung in snd_card_free sound 1 syz, C error 24 635d 650d 28/29 606d dafb28f02be4 ALSA: usx2y: Use snd_card_free_when_closed() at disconnection
kernel BUG in bch2_run_recovery_pass fs -1 syz, C done 17 638d 659d 28/29 606d 2642084f26b5 bcachefs: Allow for unknown key types in backpointers fsck
WARNING in thermal_thresholds_flush pm -1 syz, C done 76 664d 665d 28/29 606d 54219ee4eaeb thermal: thresholds: Fix thermal lock annotation issue
general protection fault in swap_reclaim_full_clusters mm 2 syz, C 1530 639d 647d 28/29 606d dcf32ea7eced mm: swapfile: fix cluster reclaim work crash on rotational devices
UBSAN: array-index-out-of-bounds in dtReadFirst jfs 19 syz, C error 200 608d 835d 28/29 606d ca84a2c9be48 jfs: array-index-out-of-bounds fix in dtReadFirst
WARNING in hci_conn_timeout bluetooth -1 syz, C done 6022 606d 2204d 28/29 606d 2b0f2fc9ed62 Bluetooth: hci_conn: Use disable_delayed_work_sync
kernel BUG in bch2_ptr_swab fs -1 syz, C inconclusive 11 643d 660d 28/29 606d 840c2fbcc5cd bcachefs: Fix assertion pop in bch2_ptr_swab()
WARNING in __v4l2_ctrl_modify_dimensions media -1 syz, C 237 631d 711d 28/29 606d 9f070b1862f3 media: v4l2-core: v4l2-dv-timings: check cvt/gtf result
general protection fault in fuse_do_readpage fuse 8 syz, C 9 625d 649d 28/29 606d 3a23787ca875 erofs: fix file-backed mounts over FUSE
KCSAN: data-race in __mod_timer / kvfree_call_rcu rcu 6 5 634d 669d 28/29 606d a23da88c6c80 rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu
WARNING in iomap_iter (4) iomap erofs -1 syz, C done 1 641d 637d 28/29 606d 0bc8061ffc73 erofs: handle NONHEAD !delta[1] lclusters gracefully
general protection fault in ocfs2_xa_block_wipe_namevalue ocfs2 2 syz, C 4 660d 656d 28/29 611d 0b63c0e01fba ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
kernel BUG in __bch2_bkey_cmp_packed_format_checked fs -1 syz, C 4 658d 658d 28/29 611d d335bb3fd3a4 bcachefs: Ancient versions with bad bkey_formats are no longer supported
kernel BUG in bch2_bkey_cmp_packed fs -1 syz, C 8 645d 658d 28/29 611d d335bb3fd3a4 bcachefs: Ancient versions with bad bkey_formats are no longer supported
WARNING in __sock_create net -1 syz, C done 4 646d 646d 28/29 611d d293958a8595 net/smc: do not leave a dangling sk pointer in __smc_create()
KMSAN: uninit-value in sctp_sf_ootb sctp 7 syz, C 18 650d 718d 28/29 611d 0ead60804b64 sctp: properly validate chunk size in sctp_sf_ootb()
kernel BUG in bch2_inconsistent_error fs -1 syz, C 4 645d 656d 28/29 611d f9f0a5390dce bcachefs: Change OPT_STR max to be 1 less than the size of choices array
possible deadlock in ni_fiemap ntfs3 4 syz, C error done 4007 669d 1396d 28/29 622d 6f861765464f fs: Block writes to mounted block devices
KASAN: null-ptr-deref Write in dst_release (4) net 12 23 675d 862d 28/29 623d ac888d58869b net: do not delay dst_entries_add() in dst_release()
upstream test error: KASAN: invalid-access Write in setup_arch arm -1 1 715d 714d 28/29 626d 7aed6a2c51ff kasan: Disable Software Tag-Based KASAN with GCC 894b00a3350c kasan: Fix Software Tag-Based KASAN with GCC
KASAN: slab-use-after-free Write in sco_sock_timeout bluetooth 22 syz, C done 275 658d 1002d 28/29 626d 1bf4470a3939 Bluetooth: SCO: Fix UAF on sco_sock_timeout
kernel BUG in eth_header (3) net -1 1 659d 659d 28/29 637d 4ed234fe793f netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()
KASAN: slab-use-after-free Read in bch2_reconstruct_alloc fs 19 syz, C done 2 655d 660d 28/29 638d 8e910ca20e11 bcachefs: Fix UAF in bch2_reconstruct_alloc()
BUG: Bad page state in bpf_test_run_xdp_live net -1 syz, C done 17 652d 656d 28/29 638d c40dd8c47325 bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled
WARNING in folio_walk_start mm -1 1 670d 669d 28/29 638d 7c18d4811000 mm/pagewalk: fix usage of pmd_leaf()/pud_leaf() without present check
kernel BUG in bch2_bucket_alloc_trans (2) fs -1 syz, C done 103 638d 666d 28/29 638d 3fd27e9c57bf bcachefs: init freespace inited bits to 0 in bch2_fs_initialize
kernel BUG in ocfs2_truncate_inline ocfs2 -1 syz, C inconclusive 3 660d 674d 28/29 638d bc0a2f3a73fc ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
WARNING in fuse_write_file_get (2) fuse -1 6 665d 682d 28/29 638d 184429a17f8f Revert "fuse: move initialization of fuse_file to fuse_writepages() instead of in callback"
KASAN: null-ptr-deref Read in bch2_sb_set_upgrade_extra fs 11 syz, C 2 664d 660d 28/29 638d a25a83de45b4 bcachefs: fix null-ptr-deref in have_stripes()
possible deadlock in nilfs_dirty_inode (4) nilfs 4 syz, C 2 654d 664d 28/29 638d b3a033e3ecd3 nilfs2: fix potential deadlock with newly created symlinks
WARNING in push_jmp_history bpf -1 syz, C done 5 676d 676d 28/29 638d aa30eb3260b2 bpf: Force checkpoint when jmp history is too long
general protection fault in btree_node_iter_and_journal_peek fs 2 syz, C 3 661d 683d 28/29 638d 3726a1970bd7 bcachefs: Fix NULL ptr dereference in btree_node_iter_and_journal_peek
UBSAN: shift-out-of-bounds in bch2_alloc_to_text fs -1 syz, C 29 650d 662d 28/29 638d 5c41f75d1b92 bcachefs: fix shift oob in alloc_lru_idx_fragmentation
KASAN: slab-use-after-free Write in kvfree_call_rcu wireless 22 2 670d 666d 28/29 638d d5fee261dfd9 wifi: cfg80211: clear wdev->cqm_config pointer on free
KASAN: null-ptr-deref Write in xfs_filestream_select_ag (2) xfs 12 syz 3 665d 665d 28/29 638d dc60992ce76f xfs: fix finding a last resort AG in xfs_filestream_pick_ag
possible deadlock in process_measurement (4) integrity lsm 4 syz, C done 7976 648d 685d 28/29 638d 58a039e679fe mm: split critical region in remap_file_pages() and invoke LSMs in between
KCSAN: assert: race in dequeue_entities netfilter audit 14 2118 649d 686d 28/29 638d b55945c500c5 sched: Fix pick_next_task_fair() vs try_to_wake_up() race
UBSAN: shift-out-of-bounds in validate_sb_layout fs -1 syz, C done 7 651d 660d 28/29 638d 2045fc4295c4 bcachefs: Fix invalid shift in validate_sb_layout()
kernel BUG in __block_write_begin_int (3) nilfs -1 syz, C 4 667d 667d 28/29 638d 41e192ad2779 nilfs2: fix kernel bug due to missing clearing of checked flag
possible deadlock in lock_mm_and_find_vma (2) mm 4 syz, C 6626 642d 713d 28/29 638d 58a039e679fe mm: split critical region in remap_file_pages() and invoke LSMs in between
possible deadlock in bch2_replicas_entry_validate fs 4 syz, C done 9468 661d 680d 28/29 639d bf4baaa087e2 bcachefs: Fix lockdep splat in bch2_accounting_read
possible deadlock in ext4_xattr_inode_iget (3) ext4 4 syz, C error done 183 681d 863d 28/29 639d d1bc560e9a9c ext4: nested locking for xattr inode
KASAN: slab-use-after-free Read in rhashtable_walk_enter nfs 19 8 677d 695d 28/29 639d dc0d0f885aa4 NFSD: Mark filecache "down" if init fails
KASAN: slab-use-after-free Read in kvm_put_kvm kvm 19 1 661d 661d 28/29 639d ae8f8b376102 KVM: arm64: Unregister redistributor for failed vCPU creation
inconsistent lock state in ppp_input ppp 4 syz, C 15 668d 686d 28/29 640d aec7291003df ppp: do not assume bh is held in ppp_channel_bridge_input()
kernel BUG in bch2_btree_pos_to_text fs -1 syz, C 8 643d 692d 28/29 640d 0151d10a480d bcachefs: add check for btree id against max in try read node
possible deadlock in fsnotify_destroy_mark squashfs 4 syz, C 46 679d 722d 28/29 640d cad3f4a22cfa inotify: Fix possible deadlock in fsnotify_destroy_mark
INFO: task hung in vcs_open (8) nilfs serial 1 syz, C inconclusive 7 681d 687d 28/29 640d 08cfa12adf88 nilfs2: propagate directory read errors from nilfs_find_entry()
possible deadlock in sk_clone_lock (3) mptcp 4 syz, C 21 659d 708d 28/29 640d 3d041393ea8c mptcp: prevent MPC handshake on port-based signal endpoints
general protection fault in btrfs_update_reloc_root btrfs 2 3 694d 686d 28/29 640d c3b47f49e831 btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
WARNING in __mptcp_move_skbs_from_subflow mptcp -1 syz, C error 90 673d 760d 28/29 640d 4dabcdf58121 tcp: fix mptcp DSS corruption due to large pmtu xmit
INFO: task hung in usb_port_suspend usb 1 syz, C 12 662d 672d 28/29 640d 5189df7b8088 USB: gadget: dummy-hcd: Fix "task hung" problem
KCSAN: data-race in __fsnotify_parent / __fsnotify_recalc_mask (5) fs 6 15 684d 771d 28/29 640d 35ceae44742e fsnotify: Avoid data race between fsnotify_recalc_mask() and fsnotify_object_watched()
general protection fault in dev_map_enqueue (2) bpf net 19 syz, C error done 336 744d 810d 28/29 640d 09d88791c7cd bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
kernel BUG in submit_bh_wbc (3) nilfs fs -1 syz, C done 18 662d 669d 28/29 640d 6ed469df0bfb nilfs2: fix kernel bug due to missing clearing of buffer delay flag
KCSAN: data-race in __delete_from_swap_cache / __try_to_reclaim_swap mm 6 1 681d 681d 28/29 640d 818f916e3a07 mm: swap: prevent possible data-race in __try_to_reclaim_swap
general protection fault in prt_str fs 2 syz, C done 2 682d 697d 28/29 640d a30f32222df2 bcachefs: Fix NULL pointer dereference in bch2_opt_to_text
WARNING in kthread_unpark (2) wireguard gfs2 -1 syz done 35 678d 825d 28/29 640d 214e01ad4ed7 kthread: unpark only parked kthread
general protection fault in bch2_alloc_read fs 2 syz, C 7 680d 687d 28/29 640d a319aeaebb6c bcachefs: Fix missing bounds checks in bch2_alloc_read()
INFO: task hung in nsim_dev_hwstats_exit net 1 43 640d 679d 28/29 640d a1494d532e28 netdevsim: use cond_resched() in nsim_dev_trap_report_work()
general protection fault in run_is_mapped_full ntfs3 8 syz, C error 72 675d 762d 28/29 640d a33fb016e49e fs/ntfs3: Fix general protection fault in run_is_mapped_full
WARNING: kmalloc bug in wnd_init ntfs3 -1 syz, C done 3 745d 891d 28/29 640d c4a8ba334262 fs/ntfs3: Add rough attr alloc_size check
KASAN: slab-use-after-free Read in mptcp_pm_nl_rm_addr_or_subflow mptcp 19 1 670d 669d 28/29 640d 7decd1f5904a mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
WARNING: locking bug in try_to_wake_up kernel 19 syz, C error 157 640d 821d 28/29 640d 41fd1e94066a btrfs: wait for fixup workers before stopping cleaner kthread during umount
KASAN: slab-out-of-bounds Read in udf_get_filelongad (2) udf 17 syz, C 4 696d 710d 28/29 640d c226964ec786 udf: refactor inode_bmap() to handle error
INFO: trying to register non-static key in mark_as_free_ex ntfs3 -1 syz, C done 2 698d 710d 28/29 640d d178944db36b fs/ntfs3: Additional check in ni_clear()
UBSAN: shift-out-of-bounds in xfrm_selector_match (2) net -1 syz, C error 10 684d 697d 28/29 640d 3f0ab59e6537 xfrm: validate new SA's prefixlen using SA family when sel.family is unset
KMSAN: kernel-infoleak in con_font_op (2) serial 9 8 664d 673d 28/29 640d f956052e00de vt: prevent kernel-infoleak in con_font_get()
WARNING in p9_client_create (2) v9fs -1 syz, C done 26070 655d 691d 28/29 640d 79efebae4afc 9p: Avoid creating multiple slab caches with the same name
possible deadlock in ppp_do_recv ppp 4 8 675d 690d 28/29 640d aec7291003df ppp: do not assume bh is held in ppp_channel_bridge_input()
WARNING in xt_cluster_mt (2) netfilter -1 syz, C inconclusive 5 682d 680d 28/29 640d 0bfcb7b71e73 netfilter: xtables: avoid NFPROTO_UNSPEC where needed
KMSAN: uninit-value in ppp_async_push (4) ppp 7 syz, C 43 673d 674d 28/29 640d 40dddd4b8bd0 ppp: fix ppp_async_encode() illegal access
KMSAN: uninit-value in netfs_clear_buffer netfs 7 syz, C 46 684d 693d 28/29 640d f6023535b52f netfs: Fix a KMSAN uninit-value error in netfs_clear_buffer
UBSAN: shift-out-of-bounds in bch2_stripe_to_text fs -1 syz, C 3 691d 687d 28/29 640d 9f25dbe0bf91 bcachefs: Add missing validation for bch_stripe.csum_granularity_bits
BUG: using __this_cpu_write() in preemptible code in nf_dup_ipv4 netfilter 4 1 697d 697d 28/29 640d 92ceba94de6f netfilter: nf_tables: prevent nf_skb_duplicated corruption
INFO: task hung in devlink_pernet_pre_exit (2) net 1 32 644d 663d 28/29 640d a1494d532e28 netdevsim: use cond_resched() in nsim_dev_trap_report_work()
UBSAN: shift-out-of-bounds in member_to_text fs -1 syz, C 12 667d 711d 28/29 640d c1bd21bb6518 bcachefs: Fix invalid shift in member_to_text()
possible deadlock in rfcomm_sk_state_change bluetooth 4 syz, C done 22650 668d 1796d 28/29 640d 08d1914293da Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
KCSAN: data-race in virtqueue_disable_cb / vring_interrupt (4) virt 6 1 701d 701d 28/29 640d 83c334ed5216 virtio_ring: tag event_triggered as racy for KCSAN
general protection fault in write_all_supers btrfs 8 syz, C 21 660d 703d 28/29 640d 3c36a72c1d27 btrfs: reject ro->rw reconfiguration if there are hard ro requirements
KMSAN: uninit-value in from_kuid (2) ocfs2 7 syz, C 75 662d 693d 28/29 640d 15f343474816 fs: Fix uninitialized value issue in from_kuid and from_kgid
KASAN: slab-use-after-free Read in bch2_direct_write fs 19 11 684d 687d 28/29 640d 573ddcdc5607 bcachefs: fix uaf in bch2_dio_write_done()
BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio (3) erofs 10 syz, C 492 640d 696d 28/29 640d 416a8b2c02fe erofs: ensure regular inodes for file-backed mounts
KMSAN: uninit-value in vfat_rename2 exfat 7 syz, C 2 683d 680d 28/29 640d 963a7f4d3b90 fat: fix uninitialized variable
possible deadlock in ppp_input_error ppp 4 61 680d 692d 28/29 640d aec7291003df ppp: do not assume bh is held in ppp_channel_bridge_input()
possible deadlock in mi_read ntfs3 4 syz, C error 11141 640d 1413d 28/29 640d 03b097099eef fs/ntfs3: Fix possible deadlock in mi_read
INFO: task hung in ip_tunnel_init_net (3) netfilter 1 41 640d 672d 28/29 640d a1494d532e28 netdevsim: use cond_resched() in nsim_dev_trap_report_work()
kernel BUG in dma_alloc_attrs iommu -1 syz, C 4 663d 668d 28/29 640d 78b2770c935f dma-mapping: fix tracing dma_alloc/free with vmalloc'd memory
INFO: rcu detected stall in br_handle_frame (5) bridge 1 syz 24 643d 671d 28/29 640d a1494d532e28 netdevsim: use cond_resched() in nsim_dev_trap_report_work()
general protection fault in sctp_inet_listen sctp 2 1 700d 686d 28/29 640d 8beee4d8dee7 sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
BUG: sleeping function called from invalid context in ntfs_d_hash ntfs3 5 syz, C done 740 675d 712d 28/29 640d 589996bf8c45 ntfs3: Change to non-blocking allocation in ntfs_d_hash
KMSAN: uninit-value in udf_get_fileshortad udf 7 syz, C 3 684d 696d 28/29 640d 264db9d666ad udf: fix uninit-value use in udf_get_fileshortad
INFO: trying to register non-static key in ntfs_file_release ntfs3 -1 2 668d 710d 28/29 640d 031d6f608290 fs/ntfs3: Additional check in ntfs_file_release
KASAN: slab-use-after-free Read in advance_sched net 19 syz, C error 15 683d 970d 28/29 640d f504465970ae net: sched: fix use-after-free in taprio_change()
WARNING in copy_huge_pmd mm -1 syz, C done 361 673d 690d 28/29 640d 47fa30118f02 mm/huge_memory: check pmd_special() only after pmd_present()
possible deadlock in ntfs_set_state (2) ntfs3 4 syz, C error 943 672d 913d 28/29 640d 5b2db723455a fs/ntfs3: Fix warning possible deadlock in ntfs_set_state
KMSAN: uninit-value in slhc_remember net 7 4 674d 674d 28/29 640d 7d3fce8cbe3a slip: make slhc_remember() more robust against malicious packets
KASAN: slab-use-after-free Read in l2cap_connect (2) bluetooth 19 syz, C done 8 692d 781d 28/29 640d 333b4fd11e89 Bluetooth: L2CAP: Fix uaf in l2cap_connect
KASAN: stack-out-of-bounds Read in profile_pc kernel 17 syz, C error done 9302 776d 1901d 28/29 652d 093d9603b600 x86: stop playing stack games in profile_pc()
INFO: task hung in ext4_stop_mmpd ext4 1 syz, C done done 483 693d 765d 28/29 655d d3476f3dad4a ext4: don't set SB_RDONLY after filesystem errors
WARNING in io_sq_offload_create io-uring -1 syz, C 284 689d 693d 28/29 655d a09c17240bdf io_uring/sqpoll: retain test for whether the CPU is valid
riscv/fixes test error: kernel panic: Kernel stack overflow riscv -1 11 680d 698d 28/29 656d cfb10de18538 riscv: Fix kernel stack size when KASAN is enabled
general protection fault in ethnl_phy_doit net 2 syz, C done 6 702d 703d 28/29 658d fce1e9f86af1 net: ethtool: phy: Check the req_info.pdn field for GET commands
WARNING in __bch2_fsck_err (2) fs -1 syz, C 3 679d 675d 28/29 659d 5612daafb764 bcachefs: Fix fsck warnings from bkey validation
WARNING in fuse_request_end (2) fuse -1 677 689d 685d 28/29 659d fcd2d9e1fdcd fuse: clear FR_PENDING if abort is detected when sending request
general protection fault in rt6_disable_ip net 2 1 701d 701d 28/29 659d 04ccecfa959d UPSTREAM: ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
WARNING in gid_table_release_one (2) rdma -1 1 715d 711d 28/29 659d 1403c8b14765 IB/core: Fix ib_cache_setup_one error flow cleanup
KASAN: use-after-free Read in ila_nf_input (2) net 19 14 665d 713d 28/29 661d 031ae72825ce ila: call nf_unregister_net_hooks() sooner
BUG: unable to handle kernel NULL pointer dereference in attr_make_nonresident ntfs3 10 syz, C error done 110 753d 835d 28/29 661d 0f9579d9e033 fs/ntfs3: Add missing .dirty_folio in address_space_operations
UBSAN: array-index-out-of-bounds in dbNextAG (2) jfs 15 syz, C inconclusive 53 694d 764d 28/29 661d e63866a47556 jfs: fix out-of-bounds in dbNextAG() and diAlloc()
WARNING in kcov_remote_start (5) wireless -1 4243 661d 761d 28/29 661d 7d4df2dad312 kcov: properly check for softirq context 9313d139aa25 usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
kernel BUG in __page_table_check_zero usb -1 syz, C error done 213 693d 1181d 28/29 661d 79a61cc3fc04 mm: avoid leaving partial pfn mappings around in error case
WARNING: still has locks held in f2fs_ioc_start_atomic_write f2fs 4 1 732d 728d 28/29 661d b2c160f4f3cf f2fs: atomic: fix to forbid dio in atomic_file
WARNING: lock held when returning to user space in f2fs_ioc_start_atomic_write f2fs 4 syz, C done 34 729d 730d 28/29 661d b2c160f4f3cf f2fs: atomic: fix to forbid dio in atomic_file
general protection fault in ovl_llseek overlayfs 2 syz, C 5 687d 687d 28/29 661d 0c33037c825e ovl: fix file leak in ovl_real_fdget_meta()
riscv/fixes test error: can't ssh into the instance -1 48 710d 728d 28/29 661d 1ff95eb2bebd riscv: Fix RISCV_ALTERNATIVE_EARLY
WARNING in pppol2tp_release net -1 3 736d 739d 28/29 661d c1b2e36b8776 l2tp: flush workqueue before draining it
KMSAN: uninit-value in nf_reject_ip6_tcphdr_put netfilter 7 syz, C 136 687d 700d 28/29 661d 9c778fe48d20 UPSTREAM: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
WARNING in remove_proc_entry (6) can -1 syz, C done 377 680d 709d 28/29 661d 94b0818fa635 can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().
kernel BUG in btrfs_get_ordered_extents_for_logging btrfs -1 syz 3 718d 715d 28/29 661d cd9253c23aed btrfs: fix race between direct IO write and fsync when using same fd
kernel BUG in clear_inode btrfs -1 syz, C 12 663d 805d 28/29 661d 88b1afbf0f6b vfs: fix race between evice_inodes() and find_inode()&iput()
general protection fault in nilfs_btree_insert (2) nilfs 2 syz, C inconclusive 1 702d 712d 28/29 661d 9403001ad65a nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
general protection fault in bch2_fs_recovery fs 8 syz, C 10 684d 703d 28/29 661d 025c55a4c7f1 bcachefs: return err ptr instead of null in read sb clean
memory leak in clear_state_bit btrfs 3 syz, C 3 983d 994d 28/29 661d c346c629765a btrfs: qgroup: don't use extent changeset when not needed
WARNING in rcu_sync_dtor f2fs -1 syz, C done 749 685d 749d 28/29 661d 930c6ab93492 f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
KASAN: null-ptr-deref Write in jbd2_journal_update_sb_log_tail ext4 12 syz, C 4 688d 725d 28/29 661d 5784d9fcfd43 ocfs2: fix null-ptr-deref when journal load failed.
KASAN: slab-use-after-free Read in __uprobe_unregister perf trace 19 syz, C 9 696d 734d 28/29 661d 5fe6e308abae bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
KASAN: use-after-free Read in ext4_search_dir (2) ext4 19 syz, C 5 701d 725d 28/29 661d c6b72f5d82b1 ext4: avoid OOB when system.data xattr changes underneath the filesystem
WARNING: refcount bug in ethnl_phy_done net 13 syz, C done 4 703d 702d 28/29 661d 1ad84a151af7 net: ethtool: phy: Don't set the context dev pointer for unfiltered DUMP
WARNING: bad unlock balance in ocfs2_read_blocks ocfs2 4 syz, C 240 694d 726d 28/29 661d c03a82b4a0c9 ocfs2: remove unreasonable unlock in ocfs2_read_blocks
kernel BUG in f2fs_evict_inode (3) f2fs -1 syz, C error 33 679d 726d 28/29 661d 884ee6dc85b9 f2fs: get rid of online repaire on corrupted directory
kernel BUG in trace_dma_unmap_sg iommu -1 syz, C 5 685d 688d 28/29 661d bfc4a245a794 dma-mapping: fix DMA API tracing for chained scatterlists
INFO: rcu detected stall in schedule_timeout (6) usb 1 syz, C done 40 663d 820d 28/29 661d 9313d139aa25 usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
general protection fault in is_page_fault_stale kvm-x86 2 3 728d 753d 28/29 661d 28cec7f08b8b KVM: x86/mmu: Check that root is valid/loaded when pre-faulting SPTEs
general protection fault in __smc_diag_dump (2) smc 2 14 661d 715d 28/29 661d 98d4435efcbf net/smc: prevent NULL pointer dereference in txopt_get
divide error in ext4_mb_regular_allocator ext4 2 syz, C done 2 721d 731d 28/29 661d ee85e0938aa8 ext4: check stripe size compatibility on remount as well
linux-next test error: WARNING in rcu_core net virt -1 16 734d 742d 28/29 661d b8c8ba73c68b slub: Introduce CONFIG_SLUB_RCU_DEBUG
WARNING in __rate_control_send_low (2) wireless -1 syz, C done 3233 661d 813d 28/29 661d e7a7ef9a0742 wifi: mac80211: don't use rate mask for offchannel TX either
WARNING in l2tp_udp_encap_destroy net -1 3 735d 734d 28/29 661d c1b2e36b8776 l2tp: flush workqueue before draining it
kernel BUG in __sock_sendmsg net -1 syz, C 111 710d 727d 28/29 661d fe1910f9337b tcp_bpf: fix return value of tcp_bpf_sendmsg()
kernel BUG in vfs_get_tree fs -1 syz, C done 318 679d 723d 28/29 661d b29c30ab48e0 bcachefs: Fix incorrect IS_ERR_OR_NULL usage
general protection fault in ata_msense_control ide 2 syz, C 13 686d 693d 28/29 661d 03a9cfc1314b ata: libata-scsi: Fix ata_msense_control_spgt2()
KASAN: slab-use-after-free Read in __timer_delete_sync mptcp 19 syz error 1 713d 710d 28/29 661d b4cd80b03389 mptcp: pm: Fix uaf in __timer_delete_sync
UBSAN: array-index-out-of-bounds in dbSplit jfs 15 syz, C inconclusive 31 701d 749d 28/29 661d d64ff0d23067 jfs: check if leafidx greater than num leaves per dmap tree
UBSAN: shift-out-of-bounds in dbFindBits jfs -1 syz, C error 53 664d 767d 28/29 661d b0b2fc815e51 jfs: UBSAN: shift-out-of-bounds in dbFindBits
KMSAN: uninit-value in lzo1x_1_do_compress (3) mm 7 1 719d 715d 28/29 661d 2b59ffad47db jfs: Fix uninit-value access of new_ea in ea_buffer
KASAN: use-after-free Read in rtw_load_firmware_cb usb wireless 19 syz, C 848 687d 750d 28/29 661d 0e735a4c6137 wifi: rtw88: always wait for both firmware loading attempts
INFO: rcu detected stall in aoecmd_cfg (2) usb block 1 syz, C done 7 715d 828d 28/29 661d 9313d139aa25 usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
KCSAN: data-race in next_expiry_recalc / update_process_times (2) kernel 6 2 716d 731d 28/29 661d 79f8b28e85f8 timers: Annotate possible non critical data race of next_expiry
KMSAN: uninit-value in bch2_bkey_cmp_packed_inlined fs 7 syz, C 7 684d 704d 28/29 661d 0696a18a8cc3 bcachefs: memset bounce buffer portion to 0 after key_sort_fix_overlapping
WARNING in mptcp_pm_nl_set_flags mptcp -1 syz done 3 718d 718d 28/29 661d 9366922adc6a mptcp: pm: fix ID 0 endp usage after multiple re-creations
INFO: rcu detected stall in do_vmi_munmap (2) mm 1 40 708d 725d 28/29 661d f806de88d8f7 maple_tree: remove rcu_read_lock() from mt_validate()
INFO: task hung in z_erofs_runqueue erofs 1 syz, C 379 679d 748d 28/29 661d 9e2f9d34dd12 erofs: handle overlapped pclusters out of crafted images properly
WARNING in handle_std_frame net -1 3 707d 710d 28/29 661d 430d67bdcb04 net: hsr: Use the seqnr lock for frames received via interlink port.
KASAN: slab-use-after-free Read in hugetlb_fault (2) mm 19 2 701d 705d 28/29 661d 98b74bb4d7e9 mm/hugetlb.c: fix UAF of vma in hugetlb fault pathway 2a058ab3286d mm: change vmf_anon_prepare() to __vmf_anon_prepare()
possible deadlock in ocfs2_get_system_file_inode ocfs2 4 syz, C done 14785 679d 729d 28/29 661d 7bf1823e010e ocfs2: fix deadlock in ocfs2_get_system_file_inode
WARNING: ODEBUG bug in ocfs2_local_read_info ocfs2 -1 syz, C inconclusive 7 679d 711d 28/29 661d 35fccce29feb ocfs2: cancel dqi_sync_work before freeing oinfo
UBSAN: array-index-out-of-bounds in cake_enqueue net 15 1 726d 725d 28/29 661d 546ea84d07e3 sched: sch_cake: fix bulk flow accounting logic for host fairness
KASAN: slab-use-after-free Read in dbFreeBits jfs 19 syz, C done 6 698d 728d 28/29 661d d6c1b3599b2f jfs: Fix uaf in dbFreeBits
KMSAN: uninit-value in skb_trim (2) wireless 7 5 704d 734d 28/29 661d 94745807f3eb wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
KCSAN: data-race in mem_cgroup_iter / mem_cgroup_iter cgroups mm 6 59 692d 714d 28/29 661d ec0db74b4b1f mm: restart if multiple traversals raced
WARNING in __dev_queue_xmit (4) net -1 syz, C 387 663d 709d 28/29 661d 9d301de12da6 wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
BUG: corrupted list in gfs2_fill_super gfs2 22 syz, C done 8527 688d 803d 28/29 661d 6cb9df81a2c4 gfs2: fix double destroy_workqueue error
WARNING in hsr_fill_frame_info net -1 syz, C error 80 686d 715d 28/29 661d 430d67bdcb04 net: hsr: Use the seqnr lock for frames received via interlink port.
KMSAN: uninit-value in ocfs2_get_block ocfs2 7 syz, C 5 692d 689d 28/29 661d 2af148ef8549 ocfs2: fix uninit-value in ocfs2_get_block()
memory leak in corrupted (2) mm exfat 3 syz 432 698d 865d 28/29 661d c290fe508eee exfat: resolve memory leak from exfat_create_upcase_table()
general protection fault in hook_inode_free_security lsm 2 12 761d 828d 28/29 661d 63dff3e48871 lsm: add the inode_free_security_rcu() LSM implementation hook
KMSAN: kernel-infoleak in raw_ioctl (2) usb 9 syz, C 18201 686d 752d 28/29 661d 9313d139aa25 usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
WARNING in vmx_handle_exit kvm-x86 -1 syz, C error 5 691d 864d 28/29 661d 3f6821aa147b KVM: x86: Forcibly leave nested if RSM to L2 hits shutdown
WARNING in fscrypt_fname_siphash ext4 fscrypt -1 syz, C unreliable 32 713d 807d 28/29 661d 985b67cd8639 ext4: filesystems without casefold feature cannot be mounted with siphash
kernel BUG in new_curseg f2fs -1 syz, C 8 692d 704d 28/29 661d 65a6ce4726c2 f2fs: fix to don't panic system for no free segment fault injection
BUG: unable to handle kernel NULL pointer dereference in fbcon_putcs (3) fbdev btrfs 10 syz, C 4 690d 703d 28/29 661d 5b97eebcce1b fbcon: Fix a NULL pointer dereference issue in fbcon_putcs
general protection fault in hsr_proxy_announce net 2 2 709d 707d 28/29 661d a7789fd4caaf net: hsr: prevent NULL pointer dereference in hsr_proxy_announce()
general protection fault in smack_log_callback audit 10 syz, C done 12 689d 694d 28/29 661d 8a23c9e1ba46 selinux,smack: properly reference the LSM blob in security_watch_key()
WARNING in sock_map_close (2) bpf net -1 syz, C done 3 722d 722d 28/29 661d 1461f5a3d810 l2tp: avoid overriding sk->sk_user_data
WARNING in bond_xdp_get_xmit_slave (2) net -1 124 695d 795d 28/29 661d 0cbfd45fbcf0 bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
KCSAN: data-race in inode_doinit_with_dentry / selinux_file_open selinux 6 1 721d 721d 28/29 661d 2571bb9d553b selinux: annotate false positive data race to avoid KCSAN warnings
KASAN: null-ptr-deref Write in f2fs_stop_gc_thread f2fs 22 syz, C done 5 704d 751d 28/29 661d c7f114d864ac f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
KMSAN: kernel-usb-infoleak in usbtmc_write usb 9 syz, C 167 686d 750d 28/29 661d 625fa77151f0 USB: usbtmc: prevent kernel-usb-infoleak
INFO: task hung in uevent_show usb 1 syz, C done 9704 732d 793d 28/29 661d 9313d139aa25 usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
WARNING: suspicious RCU usage in bch2_snapshot_tree_oldest_subvol fs 4 syz, C 21 684d 696d 28/29 661d 39c3aad43f6f bcachefs: Hold read lock in bch2_snapshot_tree_oldest_subvol()
general protection fault in __copy_super fs 2 syz, C done 5 690d 692d 28/29 661d 40d40c6bea19 bcachefs: assign return error when iterating through layout
KASAN: slab-use-after-free Read in unix_stream_read_actor (2) net 19 syz, C inconclusive 4 713d 709d 28/29 661d 5aa57d9f2d53 af_unix: Don't return OOB skb in manage_oob().
KASAN: slab-use-after-free Read in lockref_get_not_dead (2) fs 19 syz error 1 711d 707d 28/29 661d 4e32c25b58b9 libfs: fix get_stashed_dentry()
INFO: rcu detected stall in sys_io_uring_enter (2) io-uring 1 37 673d 693d 28/29 661d eac2ca2d682f io_uring: check if we need to reschedule during overflow flush
UBSAN: shift-out-of-bounds in ocfs2_fill_super ocfs2 -1 syz, C 199 662d 729d 28/29 661d 7f86b2942791 ocfs2: fix shift-out-of-bounds UBSAN bug in ocfs2_verify_volume()
WARNING: lock held when returning to user space in ethnl_act_cable_test net 4 syz, C done 43 717d 718d 28/29 661d 3d6a0c4f4552 net: fix unreleased lock in cable test
BUG: unable to handle kernel paging request in bpf_prog_ADDR (3) bpf net 8 syz, C done 6 762d 762d 28/29 661d 92de36080c93 bpf: Fail verification for sign-extension of packet data/data_end/data_meta
WARNING in iopt_map_pages iommu -1 syz, C error 3 715d 796d 28/29 661d 8f6887349b2f iommufd: Protect against overflow of ALIGN() during iova allocation
KASAN: slab-use-after-free Read in btrfs_cleanup_defrag_inodes btrfs 19 syz, C 266 691d 697d 28/29 661d 7f1b63f981b8 btrfs: fix use-after-free on rbtree that tracks inodes for auto defrag
WARNING in ethnl_req_get_phydev net -1 syz, C done 73 717d 718d 28/29 661d cff69f72d333 ethtool: pse-pd: move pse validation into set
linux-next test error: general protection fault in fuse_get_req fuse -1 17 690d 701d 28/29 661d 3988a60d3aaa fs/fuse: fix null-ptr-deref when checking SB_I_NOIDMAP flag
possible deadlock in hfsplus_file_extend hfs 4 syz, C error done 31659 669d 1357d 28/29 662d be4edd1642ee hfsplus: fix to avoid false alarm of circular locking
WARNING: ODEBUG bug in ext4_fill_super (4) ext4 -1 syz, C 6 692d 785d 28/29 662d 0ce160c5bdb6 ext4: fix timer use-after-free on failed mount
WARNING in ext4_fileattr_get ext4 -1 120 773d 787d 28/29 662d be27cd64461c ext4: use memtostr_pad() for s_volume_name
WARNING in input_mt_init_slots input -1 syz, C inconclusive 14301 732d 2042d 28/29 662d 99d3bf5f7377 Input: MT - limit max slots 206f533a0a7c Input: uinput - reject requests with unreasonable number of slots
INFO: rcu detected stall in neigh_timer_handler (8) net 1 syz, C done done 72 733d 793d 28/29 662d 22f008128625 USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
INFO: rcu detected stall in __mod_timer (5) usb 1 syz, C error done 10 739d 803d 28/29 662d 22f008128625 USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
KASAN: slab-use-after-free Read in ip6_send_skb netfilter 19 1 727d 727d 28/29 674d faa389b2fbaa ipv6: prevent UAF in ip6_send_skb()
KMSAN: uninit-value in gtp_dev_xmit net 7 3 745d 745d 28/29 674d 3a3be7ff9224 gtp: pull network headers in gtp_dev_xmit()
possible deadlock in touch_wq_lockdep_map usb 4 syz, C 1208 685d 881d 28/29 680d ccbde4b128ef char: xillybus: Don't destroy workqueue from work item running on it
kernel BUG in bch2_lru_change (2) fs -1 syz, C 2 729d 728d 28/29 680d 9482f3b05332 bcachefs: avoid overflowing LRU_TIME_BITS for cached data lru
WARNING in bch2_fs_journal_stop fs -1 syz, C done 1463 727d 758d 28/29 680d 7f2de6947f92 bcachefs: Fix warning in bch2_fs_journal_stop()
BUG: workqueue leaked atomic, lock or RCU: kworker/u33:NUM[NUM] bluetooth -1 syz, C 13 736d 749d 28/29 680d c531e63871c0 Bluetooth: l2cap: always unlock channel in l2cap_conless_channel()
general protection fault in reuseport_add_sock (3) net 2 syz, C done 3 747d 746d 28/29 680d 9ab0faa7f9ff sctp: Fix null-ptr-deref in reuseport_add_sock().
KMSAN: uninit-value in line6_midibuf_read usb sound 7 syz, C 357 689d 752d 28/29 680d 15b7a03205b3 ALSA: line6: Fix racy access to midibuf
kernel BUG in bch2_journal_replay fs -1 syz, C done 3 723d 795d 28/29 680d cab18be6957b bcachefs: Fix replay_now_at() assert
WARNING in bch2_write_super fs -1 3 727d 724d 28/29 680d 6575b8c9877c bcachefs: Fix locking in bch2_ioc_setlabel()
BUG: stack guard page was hit in vsock_bpf_recvmsg net virt -1 syz, C done 6 735d 735d 28/29 680d 69139d2919dd vsock: fix recursive ->recvmsg calls
general protection fault in z_erofs_gbuf_growsize erofs 2 1 729d 724d 28/29 680d 0005e01e1e87 erofs: fix out-of-bound access when z_erofs_gbuf_growsize() partially fails
KMSAN: uninit-value in bch2_alloc_v4_validate fs 7 syz, C 5 724d 722d 28/29 680d 8ed823b19214 bcachefs: Fix compat issue with old alloc_v4 keys
KMSAN: uninit-value in pick_link squashfs 7 syz, C 9 740d 744d 28/29 680d 810ee43d9cd2 Squashfs: sanity check symbolic link size
KMSAN: uninit-value in nf_flow_offload_inet_hook netfilter 7 4 725d 735d 28/29 680d 6ea14ccb60c8 netfilter: flowtable: validate vlan header
KASAN: slab-use-after-free Read in br_multicast_port_group_expired bridge 19 1 778d 778d 28/29 680d 92c4ee25208d net: bridge: mcast: wait for previous gc cycles when removing port
WARNING in kvm_recalculate_apic_map kvm-x86 -1 syz, C done 23 731d 767d 28/29 680d 4b7c3f6d04bd KVM: x86: Make x2APIC ID 100% readonly
KASAN: slab-use-after-free Read in percpu_ref_put block 19 18 681d 752d 28/29 680d 0b50b7313ef2 bcachefs: Fix refcounting in discard path
KCSAN: data-race in __flush_work / __flush_work (2) kernel 6 6 726d 739d 28/29 680d 8bc35475ef1a workqueue: Fix spruious data race in __flush_work()
BUG: unable to handle kernel paging request in net_generic net 8 1 755d 750d 28/29 680d 86a41ea9fd79 l2tp: fix lockdep splat
WARNING: refcount bug in inet_twsk_kill net 13 5 734d 734d 28/29 680d 565d121b6998 tcp: prevent concurrent execution of tcp_sk_exit_batch
WARNING in try_queue_bulk_in/usb_submit_urb kernel -1 1 736d 732d 28/29 680d 2374bf7558de char: xillybus: Check USB endpoints when probing device
WARNING in __bch2_fsck_err fs -1 syz, C 200 681d 728d 28/29 680d 075cabf324c3 bcachefs: Fix forgetting to pass trans to fsck_err()
possible deadlock in __kernfs_remove kernfs 4 syz, C 438 738d 781d 28/29 680d 15fffc6a5624 driver core: Fix uevent_show() vs driver detach race
KASAN: slab-use-after-free Read in kcm_release net 19 syz, C 2 789d 829d 28/29 680d 807067bf014d kcm: Serialise kcm_sendmsg() for the same socket.
KCSAN: data-race in io_sq_thread / io_sq_thread_park (9) io-uring 6 1 736d 731d 28/29 680d e4956dc7a84d io_uring/sqpoll: annotate debug task == current with data_race()
KASAN: slab-out-of-bounds Write in bch2_dev_journal_init fs 21 syz, C 2 726d 726d 28/29 680d bdbdd4759f08 bcachefs: Fix missing validation in bch2_sb_journal_v2_validate()
kernel BUG in binder_inc_ref_for_node kernel -1 syz, C error 16721 733d 762d 28/29 680d 11512c197d38 binder: fix descriptor lookup for context manager
WARNING in tcp_sk_exit_batch net -1 3 730d 768d 28/29 680d 565d121b6998 tcp: prevent concurrent execution of tcp_sk_exit_batch
WARNING in skb_warn_bad_offload (5) net -1 syz, C done 18 726d 760d 28/29 680d 30b03f2a0592 udp: Fall back to software USO if IPv6 extension headers are present
KASAN: slab-out-of-bounds Read in cougar_report_fixup input usb 17 syz, C 31 711d 745d 28/29 680d a6e9c391d45b HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
WARNING: bad unlock balance in btrfs_direct_write btrfs 4 syz, C done 235 737d 742d 28/29 680d e0391e92f9ab btrfs: fix double inode unlock for direct IO sync writes
WARNING in discard_new_inode fs -1 syz, C 3 728d 728d 28/29 680d 99c87fe0f584 bcachefs: fix incorrect i_state usage
KASAN: slab-use-after-free Read in htab_map_alloc (2) bpf 19 224 826d 832d 27/29 701d 86735b57c905 net/sched: unregister lockdep keys in qdisc_create/qdisc_alloc error path
kernel BUG in bch2_sort_keys fs -1 syz, C error 3 807d 831d 27/29 707d 5dfd3746b6c4 bcachefs: Fix needs_whiteout BUG_ON() in bkey_sort()
WARNING in __virt_to_phys (5) fs -1 4 731d 727d 27/29 715d 9bd01500e4d8 bcachefs: Fix freeing of error pointers
possible deadlock in bch2_btree_roots_to_journal_entries exfat 4 syz, C done 29 768d 802d 27/29 715d 1841027c7de4 bcachefs: bch2_gc_btree() should not use btree_root_lock
possible deadlock in bch2_gc_mark_key fs 4 syz, C done 86 732d 809d 27/29 715d 1841027c7de4 bcachefs: bch2_gc_btree() should not use btree_root_lock
possible deadlock in __mmap_lock_do_trace_start_locking mm 4 syz, C done done 30 747d 840d 27/29 716d 7d6be67cfdd4 mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
BUG: unable to handle kernel paging request in list_lru_add mm 10 syz, C done done 11367 762d 1075d 27/29 716d aacd897d4d75 Revert "bcachefs: Mark bch_inode_info as SLAB_ACCOUNT"
WARNING in __replicas_deltas_realloc fs -1 syz, C 9 735d 758d 27/29 716d 1d16c605cc55 bcachefs: Disk space accounting rewrite
kernel BUG in bch2_bucket_alloc_freelist fs -1 1 786d 782d 27/29 717d 44ec5990357b bcachefs: Don't use the new_fs() bucket alloc path on an initialized fs
kernel BUG in bch2_fs_journal_stop fs -1 syz, C done 4370 731d 823d 27/29 717d 600b8be5e747 bcachefs: Change bch2_fs_journal_stop() BUG_ON() to warning
kernel BUG in __replicas_entry_idx fs -1 syz, C done unreliable 3 813d 816d 27/29 717d 8bb8d683a401 bcachefs: Delete journal-buf-sharded old style accounting
WARNING in bch2_fs_usage_read_one f2fs -1 syz, C done 18 829d 829d 27/29 717d 8bb8d683a401 bcachefs: Delete journal-buf-sharded old style accounting
kernel BUG in bch2_fs_release (2) fs -1 1 781d 777d 27/29 717d 759b2e800f16 bcachefs: Switch online_reserved shutdown assert to WARN()
WARNING: refcount bug in get_taint net 13 2 718d 743d 27/29 718d 2fe5273f149c net/smc: prevent UAF in inet_create()
WARNING: refcount bug in sk_common_release net 13 syz, C 9 743d 758d 27/29 718d 2fe5273f149c net/smc: prevent UAF in inet_create()
WARNING: refcount bug in inet_create net 13 syz, C done 10 745d 771d 27/29 718d 2fe5273f149c net/smc: prevent UAF in inet_create()
kernel panic: not locked: inodes NUM:NUM:NUM cached fs 2 syz, C 2 801d 812d 27/29 718d 385f0c05d670 bcachefs: kill key cache arg to bch2_assert_pos_locked()
BUG: MAX_LOCK_DEPTH too low! (4) fs -1 syz, C error 1364 732d 828d 27/29 719d 375476c41405 bcachefs: Add lockdep support for btree node locks
WARNING in bch2_fs_ioctl fs -1 syz, C done 36 732d 794d 27/29 721d d293ece10810 bcachefs: Fix shutdown ordering
KASAN: global-out-of-bounds Read in srcu_gp_start_if_needed fs 17 1 814d 809d 27/29 721d d293ece10810 bcachefs: Fix shutdown ordering
kernel panic: bch_dev->ref underflow, last put: bch2_get_next_dev fs 2 syz, C done 21 812d 822d 27/29 721d 9667214b30ef bcachefs: Fix ref in trans_mark_dev_sbs() error path
KASAN: wild-memory-access Read in __timer_delete_sync bcachefs 19 5 742d 809d 27/29 721d d293ece10810 bcachefs: Fix shutdown ordering
kernel BUG in btrfs_folio_end_all_writers btrfs -1 syz, C done 102 741d 753d 27/29 721d 478574370bef btrfs: make cow_file_range_inline() honor locked_page on error
KMSAN: uninit-value in profile_hits (3) kernel 19 syz, C 1529 748d 962d 27/29 721d 7c51f7bbf057 profiling: remove prof_cpu_mask
KASAN: stack-out-of-bounds Read in xdp_do_check_flushed bpf net 17 syz, C done 127 742d 763d 27/29 721d 9da49aa80d68 tun: Add missing bpf_net_ctx_clear() in do_xdp_generic()
KMSAN: uninit-value in io_req_task_work_add_remote io-uring 7 syz, C 10 749d 751d 27/29 721d 0db4618e8fab io_uring/msg_ring: fix uninitialized use of target_req->flags
general protection fault in __dev_flush net bpf 19 syz, C 35 743d 756d 27/29 721d 9da49aa80d68 tun: Add missing bpf_net_ctx_clear() in do_xdp_generic()
KMSAN: uninit-value in cfg80211_inform_bss_frame_data wireless 7 6 743d 751d 27/29 721d 6873cc441607 wifi: cfg80211: correct S1G beacon length calculation
KMSAN: uninit-value in tcf_ct_flow_table_get net 7 syz, C 603 743d 750d 27/29 721d 2191a54f6322 sched: act_ct: take care of padding in struct zones_ht_key
general protection fault in bq_flush_to_queue bpf net 17 22 743d 752d 27/29 721d 9da49aa80d68 tun: Add missing bpf_net_ctx_clear() in do_xdp_generic()
KASAN: slab-use-after-free Read in bq_xmit_all bpf net 19 syz, C done 29 743d 756d 27/29 721d 9da49aa80d68 tun: Add missing bpf_net_ctx_clear() in do_xdp_generic()
kernel BUG in nilfs_btnode_create_block (2) nilfs -1 1 794d 790d 27/29 721d 4811f7af6090 nilfs2: handle inconsistent state in nilfs_btnode_create_block()
general protection fault in __xsk_map_flush net bpf 19 syz, C done 26 743d 760d 27/29 721d 9da49aa80d68 tun: Add missing bpf_net_ctx_clear() in do_xdp_generic()
general protection fault in __cpu_map_flush bpf net 10 syz, C inconclusive 25 743d 757d 27/29 721d 9da49aa80d68 tun: Add missing bpf_net_ctx_clear() in do_xdp_generic()
kernel BUG in ext4_write_inline_data ext4 -1 syz, C error 36 761d 1246d 27/29 723d 5c099c4fdc43 ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
kernel BUG in f2fs_vm_page_mkwrite f2fs -1 syz, C error done 12 772d 799d 27/29 723d a8eb3de28e7a f2fs: fix return value of f2fs_convert_inline_inode()
possible deadlock in __mmap_lock_do_trace_released mm 4 syz, C done done 5 756d 773d 27/29 725d 7d6be67cfdd4 mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
WARNING in __hci_cmd_sync_sk bluetooth -1 syz 36 751d 766d 27/29 727d f1a8f402f13f Bluetooth: L2CAP: Fix deadlock
WARNING in __btrfs_free_extent (2) btrfs -1 syz, C done 118 731d 782d 27/29 728d a776bf5f3c23 btrfs: slightly loosen the requirement for qgroup removal
divide error in tcp_rcv_space_adjust (3) net 2 syz, C done 3 835d 836d 27/29 730d 94062790aedb UPSTREAM: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
KASAN: slab-use-after-free Read in lru_add_fn nilfs mm 19 syz, C inconclusive 68 779d 827d 27/29 730d 49ae997f8f0d nilfs2: add missing check for inode numbers on directory entries nilfs2: add missing check for inode numbers on directory entries
BUG: MAX_LOCKDEP_CHAIN_HLOCKS too low! (5) btrfs -1 syz, C 931 731d 761d 27/29 730d 375476c41405 bcachefs: Add lockdep support for btree node locks
upstream test error: KMSAN: uninit-value in receive_buf net virt -1 351 756d 811d 27/29 730d 840b2d39a2dc virtio_ring: fix KMSAN error for premapped mode
WARNING in __skb_flow_dissect (6) net -1 1 829d 829d 27/29 730d b975d3ee5962 net: add and use skb_get_hash_net
BUG: corrupted list in __folio_undo_large_rmappable mm 8 syz, C error 36 765d 765d 27/29 730d 1390a3334a48 mm/hugetlb: fix kernel NULL pointer dereference when migrating hugetlb folio
KMSAN: uninit-value in zswap_store mm 7 2 739d 797d 27/29 730d 65121eff3e4c ext4: avoid writing unitialized memory to disk in EA inodes
KMSAN: uninit-value in hfs_revalidate_dentry hfs 7 syz, C 11669 791d 1358d 27/29 730d 26a2ed107929 hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
general protection fault in xdp_do_generic_redirect net bpf 2 8 766d 770d 27/29 730d fecef4cd42c6 tun: Assign missing bpf_net_context.
possible deadlock in udf_setsize udf 4 23 797d 819d 27/29 730d 8832fc1e5026 udf: Fix lock ordering in udf_evict_inode()
WARNING: suspicious RCU usage in bch2_bucket_ref_update fs 4 syz, C done 5 767d 766d 27/29 730d 6f692b1672bd bcachefs: Fix RCU splat
inconsistent lock state in valid_state (3) mm 4 syz, C error 376 742d 791d 27/29 730d 7d6be67cfdd4 mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
kernel BUG in f2fs_evict_inode (2) f2fs -1 syz, C error 575 731d 1010d 27/29 730d 192b8fb8d1c8 f2fs: fix to don't dirty inode for readonly filesystem
general protection fault in dev_map_redirect bpf net 2 syz, C 362 766d 774d 27/29 730d fecef4cd42c6 tun: Assign missing bpf_net_context.
stack segment fault in dev_hash_map_redirect bpf net 2 syz, C done 29 766d 774d 27/29 730d fecef4cd42c6 tun: Assign missing bpf_net_context.
general protection fault in dtInsertEntry jfs 17 syz, C inconclusive 501 732d 857d 27/29 730d ce6dede912f0 jfs: fix null ptr deref in dtInsertEntry
BUG: sleeping function called from invalid context in cgroup_rstat_flush cgroups 5 6 766d 778d 27/29 730d 5a4d8944d6b1 cachestat: do not flush stats in recency check
WARNING in __fortify_report ext4 -1 syz, C 251 780d 813d 27/29 730d be27cd64461c ext4: use memtostr_pad() for s_volume_name
UBSAN: array-index-out-of-bounds in diFree jfs 15 syz, C inconclusive 226 732d 843d 27/29 730d f73f969b2eb3 jfs: Fix array-index-out-of-bounds in diFree
WARNING in _ieee80211_change_chanctx wireless -1 7 760d 837d 27/29 730d 23daf1b4c91d wifi: nl80211: disallow setting special AP channel widths
WARNING in __ip6_make_skb (2) net -1 syz, C done 104 794d 809d 27/29 730d 73451e9aaa24 net: validate SO_TXTIME clockid coming from userspace
general protection fault in xdp_do_redirect net bpf 2 15 767d 774d 27/29 730d fecef4cd42c6 tun: Assign missing bpf_net_context.
KMSAN: uninit-value in ext4_inlinedir_to_tree ext4 7 syz, C 267 791d 837d 27/29 730d 8dc9c3da79c8 ext4: fix uninitialized variable in ext4_inlinedir_to_tree
KASAN: slab-use-after-free Read in l2tp_tunnel_del_work net 19 syz, C done 99 766d 780d 27/29 730d f8ad00f3fb2a l2tp: fix possible UAF when cleaning up tunnels
kernel BUG in bch2_bucket_alloc_trans fs -1 18 756d 785d 27/29 730d 44ec5990357b bcachefs: Don't use the new_fs() bucket alloc path on an initialized fs
BUG: unable to handle kernel paging request in do_split ext4 8 syz, C inconclusive 17 763d 776d 27/29 730d 50ea741def58 ext4: check dot and dotdot of dx_root before making dir indexed f9ca51596bbf ext4: make sure the first directory block is not a hole
WARNING in __cfg80211_connect_result (2) wireless -1 syz, C error 232 744d 809d 27/29 730d b5d14b0c6716 wifi: virt_wifi: avoid reporting connection success with wrong SSID
KASAN: slab-use-after-free Read in sanity_check_extent_cache f2fs 19 syz, C done 5 794d 837d 27/29 730d d7409b05a64f f2fs: fix to cover read extent cache access with lock
possible deadlock in try_to_wake_up (5) mm 4 syz, C 88 733d 806d 27/29 730d 7d6be67cfdd4 mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
BUG: sleeping function called from invalid context in bch2_printbuf_make_room fs 5 syz, C done 27 755d 753d 27/29 730d 737759fc098f bcachefs: Fix printbuf usage while atomic
UBSAN: shift-out-of-bounds in dbDiscardAG jfs -1 syz, C unreliable 5 769d 784d 27/29 730d 7063b80268e2 jfs: Fix shift-out-of-bounds in dbDiscardAG
kernel BUG in __block_write_begin_int (2) nilfs -1 syz, C inconclusive 2 768d 832d 27/29 730d a9e1ddc09ca5 nilfs2: fix kernel bug on rename operation of broken directory
possible deadlock in hfsplus_file_truncate hfs 4 syz, C error 51400 731d 1357d 27/29 730d be4edd1642ee hfsplus: fix to avoid false alarm of circular locking
UBSAN: shift-out-of-bounds in bch2_bkey_format_invalid (2) fs -1 syz, C 117 731d 795d 27/29 730d a0bd30e4ea9d bcachefs: Fix shift greater than integer size
KMSAN: uninit-value in ppp_async_push (3) ppp 7 syz, C 4 814d 771d 27/29 730d f2aeb7306a89 ppp: reject claimed-as-LCP but actually malformed packets
KCSAN: data-race in __swap_writepage / scan_swap_map_slots (2) mm 6 2 767d 767d 27/29 730d 7b7aca6d7c0f mm: ignore data-race in __swap_writepage
memory leak in _r8712_init_xmit_priv (2) usb staging 3 syz, C 2 983d 999d 27/29 730d 9ed3e0a0e1b1 staging: rtl8712: remove unnecessary alignment of pxmitpriv->pxmitbuf
KMSAN: uninit-value in hfsplus_listxattr (2) hfs 7 syz, C 6 833d 857d 27/29 730d 0570730c1630 hfsplus: fix uninit-value in copy_name
stack segment fault in bpf_xdp_redirect bpf net 2 syz, C 181 766d 774d 27/29 730d fecef4cd42c6 tun: Assign missing bpf_net_context.
general protection fault in __block_commit_write ext4 8 syz, C inconclusive 7 774d 921d 27/29 730d 83f4414b8f84 ext4: sanity check for NULL pointer after ext4_force_shutdown
general protection fault in tomoyo_socket_bind_permission io-uring 2 syz, C 4 762d 762d 27/29 730d ad00e629145b io_uring/net: check socket is valid in io_bind()/io_listen()
KMSAN: uninit-value in copy_name hfs 7 syz, C 300 791d 818d 27/29 730d 0570730c1630 hfsplus: fix uninit-value in copy_name
kernel BUG in btrfs_free_tree_block btrfs -1 syz, C error 150 732d 1418d 27/29 730d bb3868033a4c btrfs: do not BUG_ON() when freeing tree block after error
KASAN: slab-use-after-free Read in add_ra_bio_pages (3) btrfs 19 1 783d 771d 27/29 730d 8e7860543a94 btrfs: fix extent map use-after-free when adding pages to compressed bio
WARNING in __kvm_gpc_refresh (2) kvm -1 syz, C error 2 794d 808d 27/29 730d ebbdf37ce9ab KVM: Validate hva in kvm_gpc_activate_hva() to fix __kvm_gpc_refresh() WARN
possible deadlock in exfat_evict_inode exfat 4 2 781d 818d 27/29 730d 89fc548767a2 exfat: fix potential deadlock on __exfat_get_dentry_set
stack segment fault in cpu_map_redirect bpf net 2 syz, C done 11 767d 766d 27/29 730d fecef4cd42c6 tun: Assign missing bpf_net_context.
KASAN: slab-use-after-free Write in l2tp_session_delete net 22 syz, C done 1286 760d 780d 27/29 730d f8ad00f3fb2a l2tp: fix possible UAF when cleaning up tunnels
KMSAN: uninit-value in vsock_assign_transport (2) net virt 7 syz, C 14 792d 847d 27/29 730d 1e1fdcbdde3b vhost/vsock: always initialize seqpacket_allow
WARNING in __ip_make_skb net -1 syz, C done 54 795d 809d 27/29 730d 73451e9aaa24 net: validate SO_TXTIME clockid coming from userspace
WARNING in btusb_submit_intr_urb/usb_submit_urb bluetooth usb -1 syz, C error 2 769d 780d 27/29 730d a368ecde8a50 USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
possible deadlock in attr_data_get_block ntfs3 4 syz, C error 3111 731d 1397d 27/29 730d d57431c6f511 fs/ntfs3: Do copy_to_user out of run_lock
possible deadlock in btrfs_commit_inode_delayed_inode btrfs 4 8 785d 799d 27/29 730d 68a3ebd18bc8 btrfs: use delayed iput during extent map shrinking
general protection fault in __io_remove_buffers io-uring 2 syz, C done 3 759d 758d 27/29 730d bcc87d978b83 io_uring: fix error pbuf checking
UBSAN: shift-out-of-bounds in parse_audio_unit sound -1 syz, C error 3 762d 761d 27/29 730d 2f38cf730cae ALSA: usb: Fix UBSAN warning in parse_audio_unit()
KMSAN: uninit-value in udf_update_tag udf 7 syz, C 877 794d 960d 27/29 730d 27ab33854873 udf: Fix bogus checksum computation in udf_rename()
general protection fault in dequeue_hugetlb_folio_nodemask (2) mm 2 syz, C done 14 788d 794d 27/29 730d 09a533622842 mm/hugetlb: guard dequeue_hugetlb_folio_nodemask against NUMA_NO_NODE uses
WARNING: lock held when returning to user space in ns_ioctl fs 4 syz, C done 147 746d 758d 27/29 730d 280e36f0d5b9 nsfs: use cleanup guard
general protection fault in coalesce_fill_reply net 2 syz, C done 27 774d 779d 27/29 730d 74d6529b78f7 net: ethtool: Fix the panic caused by dev being null when dumping coalesce
kernel BUG in submit_bh_wbc (2) udf -1 syz, C done 123 736d 841d 27/29 730d a90d4471146d udf: Avoid using corrupted block bitmap buffer
WARNING in io_cqring_event_overflow (2) io-uring -1 16 774d 774d 27/29 730d 3b7c16be30e3 io_uring/msg_ring: fix overflow posting
WARNING in bpf_lwt_seg6_adjust_srh net bpf -1 syz, C done 30 766d 780d 27/29 730d c13fda93aca1 bpf: Remove tst_run from lwt_seg6local_prog_ops.
kernel BUG in f2fs_write_inline_data f2fs -1 syz, C inconclusive 41 783d 836d 27/29 730d a8eb3de28e7a f2fs: fix return value of f2fs_convert_inline_inode() fc01008c92f4 f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
BUG: sleeping function called from invalid context in vma_alloc_folio_noprof mm 5 syz, C done 1 761d 760d 27/29 730d 280e36f0d5b9 nsfs: use cleanup guard
UBSAN: shift-out-of-bounds in try_to_shrink_lruvec mm -1 syz, C done 4 806d 808d 27/29 730d 462966dc7d70 mm: vmscan: reset sc->priority on retry
BUG: unable to handle kernel NULL pointer dereference in path_from_stashed fs 10 syz, C 23 751d 755d 27/29 730d f60d38cb02d0 pidfs: when time ns disabled add check for ioctl
INFO: rcu detected stall in security_file_ioctl (8) tomoyo 1 syz, C error done 8 774d 813d 26/29 738d e63413418088 net/sched: taprio: make q->picos_per_byte available to fill_sched_entry()
KASAN: slab-use-after-free Read in nf_tables_trans_destroy_work netfilter 19 syz, C error 147 766d 774d 26/29 738d 9f6958ba2e90 netfilter: nf_tables: unconditionally flush pending work before notifier
KASAN: slab-out-of-bounds Read in btrfs_qgroup_inherit btrfs 17 syz, C done 2 801d 797d 26/29 738d 724d8042cef8 btrfs: always do the basic checks for btrfs_qgroup_inherit structure
general protection fault in l2cap_sock_recv_cb bluetooth 8 syz, C inconclusive 8 772d 798d 26/29 738d 89e856e124f9 bluetooth/l2cap: sync sock recv cb and release
WARNING in filemap_unaccount_folio nilfs -1 syz, C inconclusive 13 780d 814d 26/29 738d 49ae997f8f0d nilfs2: add missing check for inode numbers on directory entries
BUG: soft lockup in mld_ifc_work (2) wireless 1 syz, C 2 825d 837d 26/29 738d d1cba2ea8121 wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
possible deadlock in __flush_workqueue bluetooth 4 1456 741d 940d 26/29 738d 0d151a103775 Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
WARNING in hci_conn_del bluetooth -1 syz, C done 10497 767d 898d 26/29 738d 015d79c96d62 Bluetooth: Ignore too large handle values in BIG 1cc18c2ab2e8 bluetooth/hci: disallow setting handle bigger than HCI_CONN_HANDLE_MAX
WARNING in ieee80211_rx_list (2) wireless -1 4 777d 779d 26/29 738d 321028bc45f0 wifi: mac80211: disable softirqs for queued frame handling
WARNING in __mptcp_clean_una mptcp -1 syz, C done done 248 785d 910d 26/29 742d fb7a0d334894 mptcp: ensure snd_nxt is properly initialized on connect
WARNING in implement input usb -1 syz, C error done 960 794d 2524d 26/29 744d 4aa2dcfbad53 HID: core: remove unnecessary WARN_ON() in implement()
INFO: rcu detected stall in __run_timer_base usb 1 syz, C done done 10 784d 852d 26/29 744d 22f008128625 USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
INFO: trying to register non-static key in btrfs_stop_all_workers btrfs -1 1 801d 797d 26/29 744d f3a5367c679d btrfs: protect folio::private when attaching extent buffer folios
kernel BUG in btrfs_free_fs_info btrfs -1 2 804d 807d 26/29 744d f3a5367c679d btrfs: protect folio::private when attaching extent buffer folios
KMSAN: uninit-value in btrfs_compress_heuristic btrfs 7 4 807d 807d 26/29 744d f3a5367c679d btrfs: protect folio::private when attaching extent buffer folios
general protection fault in btrfs_stop_all_workers (2) btrfs 8 307 779d 822d 26/29 744d f3a5367c679d btrfs: protect folio::private when attaching extent buffer folios
KMSAN: uninit-value in ZSTD_compressBlock_doubleFast btrfs 7 2 802d 798d 26/29 744d f3a5367c679d btrfs: protect folio::private when attaching extent buffer folios
BUG: spinlock bad magic in btrfs_stop_all_workers btrfs 4 5 787d 787d 26/29 744d f3a5367c679d btrfs: protect folio::private when attaching extent buffer folios
general protection fault in btrfs_simple_end_io btrfs 2 18 786d 811d 26/29 744d f3a5367c679d btrfs: protect folio::private when attaching extent buffer folios
KMSAN: uninit-value in deflate_fast btrfs 7 3 794d 798d 26/29 744d f3a5367c679d btrfs: protect folio::private when attaching extent buffer folios
general protection fault in put_pwq_unlocked btrfs 2 7 801d 815d 26/29 744d f3a5367c679d btrfs: protect folio::private when attaching extent buffer folios
general protection fault in apply_wqattrs_cleanup btrfs 2 10 780d 802d 26/29 744d f3a5367c679d btrfs: protect folio::private when attaching extent buffer folios
KMSAN: uninit-value in io_req_cqe_overflow (3) io-uring 7 syz, C 16 791d 792d 26/29 749d 18414a4a2eab io_uring/net: assign kmsg inq/flags before buffer selection
WARNING in unmap_page_range (3) mm -1 syz, C 169 869d 878d 26/29 755d f8572367eaff mm/memory: fix missing pte marker for !page on pte zaps
kernel BUG in bch2_ioctl_fsck_online fs -1 syz, C done 3 787d 783d 26/29 762d 9bd01500e4d8 bcachefs: Fix freeing of error pointers
WARNING in __virt_to_phys (4) fs -1 syz, C 2 775d 771d 26/29 762d 9bd01500e4d8 bcachefs: Fix freeing of error pointers
UBSAN: shift-out-of-bounds in bch2_btree_node_read_done fs -1 syz, C 3 790d 813d 26/29 763d 9e7cfb35e266 bcachefs: Check for invalid btree IDs
INFO: rcu detected stall in sys_wait4 (4) mm 1 syz, C done done 2 822d 855d 26/29 764d fb66df20a720 net/sched: taprio: extend minimum interval restriction to entire cycle too
general protection fault in find_match (5) net 2 2 795d 796d 26/29 765d b86762dbe19a ipv6: prevent possible NULL dereference in rt6_probe()
possible deadlock in br_forward_delay_timer_expired (2) net 4 1 786d 786d 26/29 765d 62e58ddb1465 net: add softirq safety to netdev_rename_lock
UBSAN: array-index-out-of-bounds in bch2_bkey_swab_key fs 15 2 798d 797d 26/29 765d d47df4f616d5 bcachefs: Fix array-index-out-of-bounds
general protection fault in xfrm6_get_saddr (2) net 2 1 796d 796d 26/29 765d d46401052c2d xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
INFO: task hung in journal_quiesce fs 1 syz 76 777d 805d 26/29 765d 89d21b69b4f8 bcachefs: Add missing bch2_journal_do_writes() call
WARNING in kcov_remote_start (4) usb -1 107983 765d 796d 26/29 765d f85d39dd7ed8 kcov, usb: disable interrupts in kcov_remote_start_usb_softirq
net-next test error: WARNING: suspicious RCU usage in _destroy_all_sets netfilter -1 128 785d 791d 26/29 766d 8ecd06277a76 netfilter: ipset: Fix suspicious rcu_dereference_protected()
INFO: task hung in nilfs_segctor_thread (2) nilfs 1 syz, C inconclusive 98 797d 907d 26/29 766d 7373a51e7998 nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
INFO: task hung in devinet_ioctl (5) net 1 59 766d 792d 26/29 766d d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
INFO: task hung in addrconf_dad_work (4) net 1 2632 766d 816d 26/29 766d d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
general protection fault in fib6_nh_init (2) net 2 2 787d 791d 26/29 766d 2eab4543a220 ipv6: prevent possible NULL deref in fib6_nh_init()
WARNING: suspicious RCU usage in br_mst_set_state (2) bridge 4 10 786d 797d 26/29 766d 546ceb1dfdac net: bridge: mst: fix suspicious rcu usage in br_mst_set_state 36c92936e868 net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state
WARNING in btrfs_put_transaction (2) btrfs -1 3 806d 802d 26/29 766d fb33eb2ef0d8 btrfs: fix leak of qgroup extent records after transaction abort
INFO: task hung in ieee80211_unregister_hw wireless 1 151 770d 806d 26/29 766d d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
UBSAN: array-index-out-of-bounds in lock_timer_base fs kvm 15 4 788d 802d 26/29 766d b79922009214 bcachefs: Add missing synchronize_srcu_expedited() call when shutting down
WARNING in bch2_fs_read_write_early fs -1 syz, C 35 783d 791d 26/29 766d 1ba44217f825 bcachefs: delete_dead_snapshots() doesn't need to go RW
INFO: task hung in linkwatch_event (3) net 1 1634 766d 1361d 26/29 766d d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
upstream test error: WARNING: suspicious RCU usage in _destroy_all_sets netfilter -1 293 785d 791d 26/29 766d 8ecd06277a76 netfilter: ipset: Fix suspicious rcu_dereference_protected()
INFO: task hung in wg_netns_pre_exit (4) wireguard 1 127 767d 806d 26/29 766d d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
WARNING in hid_output_report usb input -1 syz, C error 3 811d 831d 26/29 766d 4aa2dcfbad53 HID: core: remove unnecessary WARN_ON() in implement() fba383985354 net: usb: rtl8150 fix unintiatilzed variables in rtl8150_get_link_ksettings
INFO: task hung in register_nexthop_notifier (3) net 1 44 769d 879d 26/29 766d d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
INFO: task hung in rfkill_global_led_trigger_worker (2) net nfc 1 syz, C error 1362 766d 1368d 26/29 766d d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
UBSAN: shift-out-of-bounds in read_one_super (2) fs -1 4 792d 788d 26/29 766d d406545613b5 bcachefs: Fix shift overflow in read_one_super()
KASAN: slab-out-of-bounds Read in ea_get (2) jfs 17 syz, C 33 768d 833d 26/29 766d 7c55b78818cf jfs: xattr: fix buffer overflow for invalid xattr
INFO: task hung in wdm_release usb 1 syz, C error 1 789d 785d 26/29 766d 22f008128625 USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
WARNING in rdev_scan wireless -1 syz, C done 3 789d 794d 26/29 766d 0941772342d5 wifi: cfg80211: wext: set ssids=NULL for passive scans
INFO: task hung in cfg80211_dfs_channels_update_work (7) wireless 1 37 781d 785d 26/29 766d d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
memory leak in nr_create (3) hams 3 syz, C 9 968d 1158d 26/29 766d 0b9130247f3b netrom: Fix a memory leak in nr_heartbeat_expiry()
INFO: rcu detected stall in raw_ioctl usb 1 syz, C 49 772d 1018d 26/29 766d 22f008128625 USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
BUG: soft lockup in tcp_write_timer (4) mm 1 4 769d 794d 26/29 766d 22f008128625 USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
KASAN: slab-use-after-free Read in bch2_sb_errors_from_cpu fs 19 syz, C 2 783d 780d 26/29 766d 211c581de28e bcachefs: slab-use-after-free Read in bch2_sb_errors_from_cpu
KMSAN: uninit-value in asus_report_fixup input usb 17 syz, C done 35 787d 812d 26/29 766d 89e1ee118d6f hid: asus: asus_report_fixup: fix potential read out of bounds
general protection fault in detach_extent_buffer_folio btrfs 2 9 784d 800d 26/29 766d f3a5367c679d btrfs: protect folio::private when attaching extent buffer folios
INFO: task hung in cangw_pernet_exit_batch (3) can 1 33 767d 782d 26/29 766d d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
UBSAN: shift-out-of-bounds in bch2_blacklist_entries_gc fs -1 syz, C 45 780d 780d 26/29 766d 472237b69d07 bcachefs: Fix shift-out-of-bounds in bch2_blacklist_entries_gc
INFO: task hung in rtnetlink_rcv_msg net 1 syz, C inconclusive inconclusive 1970 766d 2730d 26/29 766d d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
kernel BUG in bch2_journal_res_get fs -1 syz, C 2 796d 792d 26/29 766d dbf4d79b7fc7 bcachefs: Fix early init error path in journal code
INFO: task hung in addrconf_verify_work (8) net 1 syz, C error 1294 766d 970d 26/29 766d d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
kernel BUG in bch2_lru_change fs -1 syz, C done 4 783d 799d 26/29 766d cff07e2739d8 bcachefs: Guard against overflowing LRU_TIME_BITS
INFO: task hung in mpls_net_exit (2) net 1 50 771d 792d 26/29 766d d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
INFO: task hung in switchdev_deferred_process_work (2) net 1 syz, C inconclusive 1226 766d 2209d 26/29 766d d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
possible deadlock in ovl_copy_up_flags overlayfs 4 syz, C done 7 792d 813d 26/29 766d db03d39053a9 ovl: fix copy-up in tmpfile
possible deadlock in console_flush_all (2) trace bpf 4 syz, C error 52996 766d 1041d 26/29 766d ae01e52da244 serial: drop debugging WARN_ON_ONCE() from uart_write()
kernel BUG in __vma_reservation_common mm -1 syz, C error 8 797d 830d 26/29 766d 8daf9c702ee7 mm/hugetlb: do not call vma_add_reservation upon ENOMEM
WARNING: locking bug in srcu_gp_start_if_needed kvm fs 4 2 793d 794d 26/29 766d f770a6e9a3d7 bcachefs: Fix initialization order for srcu barrier
INFO: task hung in crda_timeout_work (7) wireless 1 1084 768d 812d 26/29 766d d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
KMSAN: kernel-infoleak in raw_recvmsg can 9 syz, C 121 792d 840d 26/29 766d b7cdf1dd5d2a net: can: j1939: Initialize unused data in j1939_send_one()
BUG: soft lockup in inet6_rtm_newroute net 1 1 782d 782d 26/29 766d 22f008128625 USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
possible deadlock in btrfs_log_inode btrfs 4 1 797d 793d 26/29 766d d1825752e307 btrfs: use NOFS context when getting inodes during logging and log replay
INFO: task hung in reg_check_chans_work (6) wireless 1 syz, C error 129 769d 842d 26/29 766d d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
INFO: task hung in wg_destruct wireguard 1 207 769d 808d 26/29 766d d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
WARNING: kmalloc bug in __snapshot_t_mut fs -1 syz, C done 10 776d 807d 26/29 766d 64cd7de998f3 bcachefs: Fix kmalloc bug in __snapshot_t_mut
WARNING in skb_ensure_writable bpf net -1 syz, C done 2893 767d 844d 26/29 766d 2bbe3e5a2f4e bpf: Avoid splat in pskb_pull_reason
BUG: soft lockup in hci_cmd_timeout bluetooth usb 1 syz, C 1 797d 793d 26/29 766d 22f008128625 USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
KASAN: slab-use-after-free Read in bch2_fs_recovery fs 19 21 784d 785d 26/29 766d 2fe79ce7d1e8 bcachefs: Fix a UAF after write_super()
WARNING in cxacru_cm/usb_submit_urb usb -1 syz, C error inconclusive 14 784d 2353d 26/29 766d 2eabb655a968 usb: atm: cxacru: fix endpoint checking in cxacru_bind()
WARNING: locking bug in __timer_delete_sync fs kvm 4 6 780d 804d 26/29 766d b79922009214 bcachefs: Add missing synchronize_srcu_expedited() call when shutting down
INFO: task hung in bpf_prog_dev_bound_destroy bpf 1 94 785d 797d 26/29 766d d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
kernel BUG in gc_bucket fs -1 syz, C done 221 799d 804d 26/29 766d 9432e90df1b8 bcachefs: Check for invalid bucket from bucket_gen(), gc_bucket()
INFO: task hung in regdb_fw_cb wireless 1 596 770d 811d 26/29 766d d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
KASAN: slab-out-of-bounds Read in cfg80211_wext_freq wireless 17 syz, C inconclusive 133 781d 807d 26/29 766d 6ef09cdc5ba0 wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
possible deadlock in xfs_can_free_eofblocks xfs 4 4 801d 826d 26/29 772d 6fe60465e1d5 stackdepot: respect __GFP_NOLOCKDEP allocation flag
possible deadlock in __sock_map_delete net bpf 4 syz, C 14 808d 852d 26/29 774d 98e948fb60d4 bpf: Allow delete from sockmap/sockhash only if update is allowed
WARNING in geneve_xmit net -1 syz, C done 42 840d 847d 26/29 785d d8a6213d70ac geneve: fix header validation in geneve[6]_xmit_skb
general protection fault in bch2_fs_btree_key_cache_exit fs 2 6 792d 792d 26/29 785d b30b70ad8bff bcachefs: Fix early error path in bch2_fs_btree_key_cache_exit()
possible deadlock in __hrtimer_run_queues (2) kernel 4 syz, C error done 16 841d 873d 26/29 785d 98e948fb60d4 bpf: Allow delete from sockmap/sockhash only if update is allowed
general protection fault in ip6_pol_route net 8 73 787d 825d 26/29 787d b01e1c030770 ipv6: fix possible race in __fib6_drop_pcpu_from()
general protection fault in __fib6_drop_pcpu_from (5) net 8 467 787d 832d 26/29 787d b01e1c030770 ipv6: fix possible race in __fib6_drop_pcpu_from()
WARNING in ieee80211_link_info_change_notify (2) wireless -1 syz, C inconclusive 8918 795d 1263d 26/29 787d 02c665f048a4 wifi: mac80211: apply mcast rate only if interface is up
general protection fault in bpf_get_attach_cookie_tracing trace bpf 2 syz, C error 7 800d 831d 26/29 787d d0d1df8ba18a bpf: Set run context for rawtp test_run callback
KASAN: slab-use-after-free Read in bpf_link_free (2) bpf 19 syz 52 797d 809d 26/29 787d 2884dc7d08d9 bpf: Fix a potential use-after-free in bpf_link_free()
WARNING in ieee80211_rx_list wireless -1 syz, C inconclusive error 3489 798d 2150d 26/29 787d 177c6ae9725d wifi: mac80211: handle tasklet frames before stopping
WARNING in fuse_request_end fuse -1 syz, C error 3 815d 825d 26/29 791d 246014876d78 fuse: clear FR_SENT when re-adding requests into pending list
WARNING in packet_setsockopt net -1 syz, C 83 823d 862d 26/29 792d 86d43e2bf93c af_packet: avoid a false positive warning in packet_setsockopt()
kernel BUG in dev_gro_receive net -1 syz, C done 72 805d 821d 25/29 794d be008726d0ac net: gro: initialize network_offset in network layer
KMSAN: uninit-value in virtqueue_add (4) mm 7 syz, C 203184 794d 956d 25/29 794d 61b258b0d2f6 x86: call instrumentation hooks from copy_mc.c
KMSAN: uninit-value in nilfs_add_checksums_on_logs (2) nilfs 7 syz, C 171 794d 955d 25/29 794d 61b258b0d2f6 x86: call instrumentation hooks from copy_mc.c
KMSAN: uninit-value in nci_ntf_packet (2) net nfc 7 syz, C 13 797d 810d 25/29 794d 068648aab72c nfc/nci: Add the inconsistency check between the input data length and count
UBSAN: shift-out-of-bounds in bch2_sb_dev_has_data fs -1 syz, C done 15 824d 822d 25/29 794d bcfbaea8e547 bcachefs: Fix shift overflows in replicas.c
inconsistent lock state in valid_state (2) sound 4 syz, C inconclusive 57405 795d 920d 25/29 794d b79491896151 dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
kernel panic: not locked: inodes NUM:ADDR:NUM cached fs 2 syz, C 2 821d 817d 25/29 794d 6ce26ad376bd bcachefs: Fix missing parens in drop_locks_do()
kernel BUG in bch2_btree_iter_verify_entry_exit fs -1 syz, C done 3 814d 820d 25/29 794d 765b8cb8acab bcachefs: Check for subvolues with bogus snapshot/inode fields
kernel BUG in bch2_checksum fs -1 syz, C done 9 812d 822d 25/29 794d 6b74fdcc8e25 bcachefs: bch2_checksum() returns 0 for unknown checksum type
WARNING in sock_map_close bpf net -1 syz, C error 182 795d 858d 25/29 794d 4b4647add7d3 sock_map: avoid race between sock_map_close and sk_psock_put
possible deadlock in sock_hash_delete_elem (2) bpf net 4 syz, C 1127 795d 878d 25/29 794d 98e948fb60d4 bpf: Allow delete from sockmap/sockhash only if update is allowed
general protection fault in poll_state_synchronize_srcu fs 2 5 814d 814d 25/29 794d d293ece10810 bcachefs: Fix shutdown ordering
KASAN: slab-use-after-free Read in p9_fid_destroy v9fs 19 syz, C 13 809d 890d 25/29 794d f89ea63f1c65 netfs, 9p: Fix race between umount and async request completion
kernel BUG in cpu_replicas_add_entry fs -1 syz, C done 11 805d 824d 25/29 794d 5fa421448d1f bcachefs: Fix bogus verify_replicas_entry() assert
kernel BUG in __journal_res_get ext4 -1 syz, C done 7 803d 827d 25/29 794d cd3b31f9d417 bcachefs: Ensure we're RW before journalling
general protection fault in nf_tproxy_laddr4 netfilter 8 syz, C error 5 814d 823d 25/29 794d 21a673bddc8f netfilter: tproxy: bail out if IP has been disabled on the device
KASAN: slab-use-after-free Read in p9_client_destroy v9fs 19 7 813d 826d 25/29 794d f89ea63f1c65 netfs, 9p: Fix race between umount and async request completion
KASAN: stack-out-of-bounds Read in __bch2_encrypt_bio fs 17 syz, C done 2 825d 822d 25/29 794d 2ba24864d2f6 bcachefs: Fix stack oob in __bch2_encrypt_bio()
KASAN: slab-use-after-free Write in v9fs_free_request v9fs 22 9 809d 824d 25/29 794d f89ea63f1c65 netfs, 9p: Fix race between umount and async request completion
INFO: rcu detected stall in packet_release net 1 syz, C unreliable 1 887d 809d 25/29 794d fb66df20a720 net/sched: taprio: extend minimum interval restriction to entire cycle too
WARNING in collect_domain_accesses lsm -1 syz, C done 3 814d 826d 25/29 794d 88da52ccd66e landlock: Fix d_parent walk
WARNING: suspicious RCU usage in nfqnl_reinject netfilter 4 2 805d 822d 25/29 794d dc21c6cc3d69 netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
UBSAN: shift-out-of-bounds in bch2_btree_lost_data fs -1 syz, C done 3 820d 819d 25/29 794d f108ddd467b5 bcachefs: Fix shift overflow in btree_lost_data()
KMSAN: uninit-value in p9_client_rpc (2) v9fs 7 syz, C 5 833d 867d 25/29 794d 25460d6f3902 net/9p: fix uninit-value in p9_client_rpc()
WARNING: lock held when returning to user space in srcu_lock_acquire rcu 4 syz, C 3 824d 823d 25/29 794d 70dd062e27e6 bcachefs: Fix btree_trans leak in bch2_readahead()
kernel BUG in bch2_fs_release fs -1 3 807d 811d 25/29 794d d509cadc3a48 bcachefs: Fix debug assert
kernel panic: bch_dev->ref underflow, last put: bch2_trigger_alloc fs 2 syz, C done 6 812d 823d 25/29 794d 9667214b30ef bcachefs: Fix ref in trans_mark_dev_sbs() error path
KMSAN: uninit-value in io_issue_sqe io-uring 7 2 795d 809d 25/29 794d 18414a4a2eab io_uring/net: assign kmsg inq/flags before buffer selection
general protection fault in __bch2_insert_snapshot_whiteouts fs 8 syz, C done 65 810d 822d 25/29 794d 6d48e61364ae bcachefs: Add missing guard in bch2_snapshot_has_children()
KASAN: slab-use-after-free Read in evict_inodes fs 19 syz, C done 2 827d 823d 25/29 794d d93ff5fa40b9 bcachefs: Fix race path in bch2_inode_insert()
INFO: task hung in nilfs_detach_log_writer nilfs 1 syz, C inconclusive 125 814d 1390d 25/29 794d eb85dace897c nilfs2: fix potential hang in nilfs_detach_log_writer()
general protection fault in crypto_skcipher_encrypt crypto 8 syz, C error 66 794d 822d 25/29 794d c06a8b75679d bcachefs: Fix bch2_alloc_ciphers()
INFO: rcu detected stall in snd_timer_user_release (3) sound 1 syz, C inconclusive 3 828d 837d 25/29 794d 4a63bd179fa8 ALSA: timer: Set lower bound of start tick time
KMSAN: uninit-value in bch2_dirent_invalid fs 7 syz, C 239 794d 823d 25/29 794d 2195b755ebd2 bcachefs: Fix unsafety in bch2_dirent_name_bytes()
kernel BUG in bch2_fs_recovery fs -1 syz, C done done 161 827d 833d 25/29 795d 7ffec9ccdc6a bcachefs: don't free error pointers
INFO: trying to register non-static key in __timer_delete_sync (2) net -1 syz, C 45524 822d 840d 25/29 798d 3c668cef61ad net: hsr: init prune_proxy_timer sooner
possible deadlock in nr_rt_ioctl hams 4 syz, C inconclusive 8 804d 831d 25/29 798d e03e7f20ebf7 netrom: fix possible dead-lock in nr_rt_ioctl()
WARNING in __inet_accept net -1 syz, C done 3 816d 816d 25/29 800d 26afda78cda3 UPSTREAM: net: relax socket state check at accept time.
KASAN: slab-out-of-bounds Read in f2fs_get_node_info f2fs 17 syz, C error 4 828d 841d 25/29 800d 20faaf30e555 f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
BUG: soft lockup in batadv_purge_orig batman 1 1 868d 868d 25/29 800d 40dc8ab60589 batman-adv: bypass empty buckets in batadv_purge_orig_ref()
general protection fault in subflow_v6_route_req mptcp 2 syz, C done 2 830d 830d 25/29 800d 445c0b69c729 mptcp: fix possible NULL dereferences
general protection fault in ip6_output net 2 4 833d 853d 25/29 800d 4db783d68b9b ipv6: prevent NULL dereference in ip6_output()
WARNING in sg_remove_sfp_usercontext scsi -1 syz, C 36031 855d 869d 25/29 800d d4e655c49f47 scsi: sg: Avoid race in error handling & drop bogus warn
KMSAN: uninit-value in __bpf_strtoull bpf 7 syz, C 119 801d 878d 25/29 800d e8742081db7d bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
WARNING in iomap_iter (2) iomap -1 syz, C 4 838d 834d 25/29 800d 0c12028aec83 block: refine the EOF check in blkdev_iomap_begin
inconsistent lock state in padata_do_parallel (2) crypto 4 2 865d 865d 25/29 800d 58329c431203 padata: Disable BH when taking works lock on MT path
KMSAN: uninit-value in trie_delete_elem bpf 7 syz, C 52 801d 871d 25/29 800d e8742081db7d bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
UBSAN: shift-out-of-bounds in read_one_super fs -1 syz, C done 31 801d 830d 25/29 800d 71dac2482ad3 bcachefs: BCH_SB_LAYOUT_SIZE_BITS_MAX
KMSAN: uninit-value in nci_rx_work nfc net 7 syz, C 582 800d 956d 25/29 800d e4a87abf5885 nfc: nci: Fix uninit-value in nci_rx_work
KASAN: slab-use-after-free Read in unix_del_edges net 19 syz, C done 2 848d 847d 25/29 800d 1af2dface5d2 af_unix: Don't access successor in unix_del_edges() during GC.
INFO: task hung in ext4_quota_write ext4 1 syz, C inconclusive 22 851d 956d 25/29 800d 0a46ef234756 ext4: do not create EA inode under buffer lock
WARNING: kmalloc bug in bch2_dev_buckets_resize fs -1 syz, C 17 801d 832d 25/29 800d db42549d402c bcachefs: Add a better limit for maximum number of buckets
general protection fault in fib6_rule_action net 2 1 849d 849d 25/29 800d d101291b2681 ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
WARNING in mb_cache_destroy ext4 -1 syz, C done 738 818d 836d 25/29 800d 0c0b4a49d3e7 ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
WARNING in __virt_to_phys (3) fs -1 syz, C 447 800d 833d 25/29 800d 7ffec9ccdc6a bcachefs: don't free error pointers
KMSAN: uninit-value in br_dev_xmit (2) bridge 7 syz, C 2 828d 824d 25/29 800d 8bd67ebb50c0 net: bridge: xmit: make sure we have at least eth header len bytes
KMSAN: uninit-value in dev_map_lookup_elem bpf net 7 syz, C 3 865d 872d 25/29 800d e8742081db7d bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
KMSAN: uninit-value in __bch2_write_index fs 7 1 832d 832d 25/29 800d 1267df40acb2 bcachefs: Initialize bch_write_op->failed in inline data path
BUG: sleeping function called from invalid context in console_lock (2) serial 5 syz, C inconclusive inconclusive 7447 800d 1894d 25/29 800d 6bd23e0c2bb6 tty: add the option to have a tty reject a new ldisc
KMSAN: uninit-value in trie_lookup_elem bpf 7 syz, C 12 858d 876d 25/29 800d e8742081db7d bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
possible deadlock in kvfree_call_rcu bpf 4 syz, C 1431 801d 871d 25/29 800d 59f2f841179a bpf: Avoid kfree_rcu() under lock in bpf_lpm_trie.
BUG: unable to handle kernel paging request in bch2_fs_btree_key_cache_exit fs 8 syz, C 1002 800d 833d 25/29 800d b30b70ad8bff bcachefs: Fix early error path in bch2_fs_btree_key_cache_exit()
WARNING: suspicious RCU usage in bch2_fs_quota_read ext4 4 syz, C done 24 801d 831d 25/29 800d 8060bf1d83f7 bcachefs: Fix snapshot_t() usage in bch2_fs_quota_read_inode()
WARNING in kcov_remote_start (3) usb -1 265513 800d 869d 25/29 800d 19e35f24750d nfc: nci: Fix kcov check in nci_rx_work()
KASAN: slab-out-of-bounds Write in do_handle_open nfs 21 syz, C 643 862d 864d 25/29 800d 68d6f4f3fbd9 fs: Annotate struct file_handle with __counted_by() and use struct_size()
UBSAN: shift-out-of-bounds in __bch2_bkey_invalid fs -1 syz, C done 6 805d 831d 25/29 800d 2bb9600d5d47 bcachefs: Guard against unknown k.k->type in __bkey_invalid()
BUG: unable to handle kernel paging request in bpf_prog_ADDR (2) bpf 8 syz, C 3 843d 857d 25/29 800d 543576ec15b1 bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
KMSAN: uninit-value in unwind_dump net 7 1 851d 847d 25/29 800d 90d1f14cbb9d kmsan: compiler_types: declare __no_sanitize_or_inline
KASAN: slab-out-of-bounds Read in bch2_sb_downgrade_to_text fs 17 syz, C done 32 817d 830d 25/29 800d 692aa7a54b2b bcachefs: Fix sb_field_downgrade validation
KMSAN: uninit-value in array_map_lookup_elem bpf 7 syz, C 10 855d 875d 25/29 800d e8742081db7d bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
KMSAN: uninit-value in sock_map_delete_elem bpf net 7 syz, C 44 801d 872d 25/29 800d e8742081db7d bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
KASAN: slab-use-after-free Read in fsnotify ext4 19 syz, C error 3 849d 855d 25/29 800d 795bb82d12a1 fsnotify: fix UAF from FS_ERROR event on a shutting down filesystem
KASAN: slab-out-of-bounds Read in bch2_sb_clean_to_text fs 17 syz, C done 3 821d 831d 25/29 800d f39055220f6f bcachefs: Add missing validation for superblock section clean
WARNING in ar5523_cmd/usb_submit_urb usb wireless -1 syz, C error 39 833d 2389d 25/29 800d e120b6388d7d wifi: ar5523: enable proper endpoint verification
possible deadlock in sch_direct_xmit (4) net 4 1 839d 839d 25/29 800d 86735b57c905 net/sched: unregister lockdep keys in qdisc_create/qdisc_alloc error path
WARNING in qdisc_alloc net -1 syz, C error 1069 822d 836d 25/29 800d 86735b57c905 net/sched: unregister lockdep keys in qdisc_create/qdisc_alloc error path
WARNING in __mark_chain_precision (4) bpf -1 syz, C 8 845d 865d 25/29 800d 1f2a74b41ea8 bpf: prevent r10 register from being marked as precise
kernel BUG in bch2_alloc_v4_invalid fs -1 syz, C error 3 808d 831d 25/29 800d 6b8cbfc3db75 bcachefs: Fix assert in bch2_alloc_v4_invalid()
KASAN: slab-out-of-bounds Read in bch2_varint_decode_fast fs 17 syz, C 583 800d 833d 25/29 800d 4a8521b6bb81 bcachefs: Inodes need extra padding for varint_decode_fast()
WARNING in __page_table_check_ptes_set mm -1 syz, C 2 849d 845d 25/29 800d c88033efe9a3 mm/userfaultfd: reset ptes when close() for wr-protected ones
KASAN: global-out-of-bounds Read in __nla_validate_parse net 17 syz, C 5 858d 858d 25/29 800d 8750539ba317 net: team: fix incorrect maxattr
UBSAN: shift-out-of-bounds in bch2_bkey_format_invalid fs -1 syz, C 45 803d 828d 25/29 800d 61692c7812ab bcachefs: bch2_bkey_format_field_overflows()
WARNING in __mod_memcg_lruvec_state cgroups mm -1 syz, C 270 829d 864d 25/29 800d 4f687281012e mm: do not update memcg stats for NR_{FILE/SHMEM}_PMDMAPPED
WARNING in carl9170_usb_send_rx_irq_urb/usb_submit_urb usb wireless -1 syz, C error inconclusive 18 844d 1988d 25/29 800d b6dd09b3dac8 wifi: carl9170: add a proper sanity check for endpoints
UBSAN: shift-out-of-bounds in rewrite_old_nodes_pred fs -1 syz, C done 3 831d 831d 25/29 800d 0ec5b3b7ccfc bcachefs: Fix shift-by-64 in bformat_needs_redo()
kernel BUG in bch2_btree_node_read_done fs -1 syz, C error 5 830d 833d 25/29 800d a2ddaf965f6a bcachefs: bucket_pos_to_bp_noerror()
WARNING: suspicious RCU usage in br_mst_set_state bridge 4 45 800d 834d 25/29 800d 3a7c1661ae13 net: bridge: mst: fix vlan use-after-free
KASAN: slab-use-after-free Read in vhost_task_fn kvm net virt 19 syz, C done 2661 834d 836d 25/29 800d db5247d9bf5c vhost_task: Handle SIGKILL by flushing work and exiting
WARNING: zero-size vmalloc in ubi_read_volume_table mtd -1 syz, C 3 867d 865d 25/29 812d 68a24aba7c59 ubi: Check for too small LEB size in VTBL code
WARNING in emit_fiemap_extent btrfs -1 syz, C error done 14 895d 1151d 25/29 813d a1a4a9ca77f1 btrfs: fix race between ordered extent completion and fiemap
KASAN: slab-use-after-free Read in ovs_ct_exit openvswitch 19 6 844d 870d 25/29 813d 5ea7b72d4fac net: openvswitch: Fix Use-After-Free in ovs_ct_exit
possible deadlock in move_pages mm 4 syz, C 206 869d 878d 25/29 814d 30af24facf0a userfaultfd: fix deadlock warning when locking src and dst VMAs
KASAN: stack-out-of-bounds Read in hash bpf 17 syz, C done 5 853d 860d 25/29 814d a8d89feba7e5 bpf: Check bloom filter map value size
possible deadlock in force_sig_info_to_task bpf trace 4 syz, C error 6 834d 841d 25/29 814d 02b670c1f88e x86/mm: Remove broken vsyscall emulation code from the page fault code
KMSAN: kernel-infoleak in btrfs_ioctl_logical_to_ino (2) btrfs 9 1 850d 850d 25/29 814d 2f7ef5bb4a2f btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
possible deadlock in seq_read_iter (3) overlayfs 4 148 825d 914d 25/29 814d 16b52bbee482 kernfs: annotate different lockdep class for of->mutex of writable files
KMSAN: uninit-value in geneve_xmit (3) net 7 syz, C 14 855d 863d 25/29 814d d8a6213d70ac geneve: fix header validation in geneve[6]_xmit_skb
WARNING in mmu_free_root_page kvm-x86 -1 syz, C 104 846d 868d 25/29 814d 1bc26cb90902 KVM: x86/mmu: Precisely invalidate MMU root_role during CPUID update
KMSAN: kernel-infoleak in __skb_datagram_iter (3) net 9 syz, C 25 816d 870d 25/29 814d d313eb8b7755 net/sched: act_skbmod: prevent kernel-infoleak
KASAN: slab-use-after-free Read in ip_skb_dst_mtu netfilter 19 syz, C error 5 860d 891d 25/29 814d 18685451fc4e inet: inet_defrag: prevent sk release while still in use
KMSAN: uninit-value in gre_rcv (3) net 7 syz, C 3 868d 869d 25/29 814d 17af420545a7 erspan: make sure erspan_base_hdr is present in skb->head
KMSAN: uninit-value in line6_pod_process_message sound 7 syz, C 5 864d 865d 25/29 814d c4e51e424e2c ALSA: line6: Zero-initialize message buffers
KCSAN: data-race in sk_psock_drop / sk_psock_skb_ingress_enqueue bpf net 6 1 882d 875d 25/29 814d 6648e613226e bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
net-next boot error: WARNING: refcount bug in __free_pages_ok virt -1 799 841d 875d 25/29 814d f5c12105c15f mm,page_owner: fix refcount imbalance
WARNING: suspicious RCU usage in __do_softirq kernel 4 syz, C 199 837d 864d 25/29 814d 1dd1eff161bd softirq: Fix suspicious RCU usage in __do_softirq()
upstream boot error: WARNING: refcount bug in __reset_page_owner mm -1 555 847d 879d 25/29 814d f5c12105c15f mm,page_owner: fix refcount imbalance
KASAN: slab-out-of-bounds Read in nfc_llcp_setsockopt net nfc 17 syz, C error 5 851d 860d 25/29 814d 7a87441c9651 nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
KASAN: slab-use-after-free Read in __vma_reservation_common mm 19 syz 13 840d 854d 25/29 814d 37641efaa3fa hugetlb: check for anon_vma prior to folio allocation
linux-next boot error: WARNING: refcount bug in __free_pages_ok virt -1 177 870d 907d 25/29 814d f5c12105c15f mm,page_owner: fix refcount imbalance
riscv/fixes boot error: can't ssh into the instance (3) -1 210 815d 869d 25/29 814d f5c12105c15f mm,page_owner: fix refcount imbalance
upstream test error: WARNING: refcount bug in __reset_page_owner mm -1 13 856d 878d 25/29 814d f5c12105c15f mm,page_owner: fix refcount imbalance
net boot error: WARNING: refcount bug in __free_pages_ok virt -1 297 841d 871d 25/29 814d f5c12105c15f mm,page_owner: fix refcount imbalance
WARNING in vmk80xx_auto_attach/usb_submit_urb usb -1 syz, C unreliable inconclusive 2 888d 1890d 25/29 814d d1718530e3f6 comedi: vmk80xx: fix incomplete endpoint checking
WARNING: refcount bug in __reset_page_owner mm 13 syz, C 93128 847d 878d 25/29 814d f5c12105c15f mm,page_owner: fix refcount imbalance
upstream boot error: WARNING: refcount bug in __free_pages_ok virt -1 1463 848d 878d 25/29 814d f5c12105c15f mm,page_owner: fix refcount imbalance
KASAN: slab-out-of-bounds Read in update_counters netfilter bridge 17 syz, C 3 860d 860d 25/29 814d 0c83842df40f netfilter: validate user input for expected length
KMSAN: uninit-value in ieee80211_rx_handlers (2) wireless 7 syz, C 4 853d 871d 25/29 814d 7c1c73bf84c5 wifi: mac80211: check EHT/TTLM action frame length
KASAN: slab-out-of-bounds Read in do_ipt_set_ctl netfilter 17 syz, C 111 851d 862d 25/29 814d 0c83842df40f netfilter: validate user input for expected length
usb-testing boot error: WARNING: refcount bug in __reset_page_owner mm -1 126 843d 871d 25/29 814d f5c12105c15f mm,page_owner: fix refcount imbalance
bpf-next boot error: WARNING: refcount bug in __free_pages_ok virt -1 210 837d 866d 25/29 814d f5c12105c15f mm,page_owner: fix refcount imbalance
bpf boot error: WARNING: refcount bug in __free_pages_ok virt -1 132 840d 867d 25/29 814d f5c12105c15f mm,page_owner: fix refcount imbalance
possible deadlock in tty_port_tty_get (2) net bpf 4 3 857d 875d 25/29 814d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in put_pwq_unlocked trace bpf 4 3 851d 850d 25/29 814d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
WARNING in sock_map_delete_elem bpf net -1 syz, C 17183 840d 879d 25/29 814d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in scheduler_tick (3) bpf net 4 syz, C 1179 841d 877d 25/29 814d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in pit_timer_fn net bpf 4 7 851d 862d 25/29 814d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
BUG: soft lockup in sys_sendmsg tipc batman 1 syz, C 3 873d 914d 25/29 814d b1f532a3b1e6 batman-adv: Avoid infinite loop trying to resize local TT
possible deadlock in rcu_exp_handler net bpf 4 syz, C 1 854d 850d 25/29 814d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
KMSAN: uninit-value in v9fs_evict_inode v9fs 7 syz, C 5206 869d 881d 25/29 814d 6630036b7c22 fs/9p: fix uninitialized values during inode evict
possible deadlock in rcu_report_exp_cpu_mult net bpf 4 syz, C done 30 841d 879d 25/29 814d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in try_to_wake_up (4) bpf net 4 syz, C error 19 816d 879d 25/29 814d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in ahci_single_level_irq_intr bpf net 4 syz, C 10 862d 870d 25/29 814d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
WARNING in sock_map_unref bpf net -1 syz, C error 97 841d 855d 25/29 814d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
INFO: rcu detected stall in rtnl_newlink (4) sctp fs 1 syz, C error 9 821d 897d 25/29 814d b1f532a3b1e6 batman-adv: Avoid infinite loop trying to resize local TT
possible deadlock in __lock_task_sighand (2) bpf 4 syz, C 1476 815d 879d 25/29 814d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
WARNING in sock_hash_delete_elem bpf net -1 syz, C done 16982 840d 879d 25/29 814d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in hrtimer_run_queues bpf net 4 syz, C error 592 841d 878d 25/29 814d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in swake_up_one bpf net 4 syz, C 4 852d 851d 25/29 814d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
BUG: unable to handle kernel paging request in copy_from_kernel_nofault (2) mm 8 syz, C 2 854d 864d 25/29 814d c6f48506ba30 arm32, bpf: Reimplement sign-extension mov instruction
possible deadlock in pwq_dec_nr_in_flight trace bpf 4 1 856d 852d 25/29 814d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
WARNING in _prb_commit bpf net -1 4 851d 847d 25/29 814d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in posix_timer_fn (2) net bpf 4 1 855d 851d 25/29 814d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in drm_handle_vblank net bpf 4 30 852d 877d 25/29 814d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
KASAN: slab-out-of-bounds Read in xsk_setsockopt bpf net 17 syz, C 17 853d 862d 25/29 814d 237f3cf13b20 xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
KMSAN: uninit-value in ipvlan_queue_xmit (2) net 7 syz, C 2 887d 848d 25/29 814d 4b911a9690d7 nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().
possible deadlock in __unix_gc net 4 syz, C done 5 841d 843d 25/29 814d 1971d13ffa84 af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
WARNING in gre_tap_xmit (2) net -1 syz, C done 67 822d 847d 25/29 814d 4b911a9690d7 nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().
UBSAN: array-index-out-of-bounds in check_stack_range_initialized bpf 15 syz, C error 21 845d 878d 25/29 814d ecc6a2101840 bpf: Protect against int overflow for stack access size
general protection fault in dev_map_enqueue net bpf 19 syz, C 676 814d 871d 25/29 814d 5bcf0dcbf906 xdp: use flags field to disambiguate broadcast redirect
KMSAN: uninit-value in xt_check_entry_offsets netfilter 7 1 857d 857d 25/29 814d 65acf6e0501a netfilter: complete validation of user input
KMSAN: uninit-value in nci_ntf_packet net nfc 7 syz, C 79 815d 956d 25/29 814d d24b03535e5e nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
KASAN: slab-use-after-free Read in v9fs_stat2inode_dotl v9fs 19 syz, C done 585 869d 924d 25/29 814d 11763a8598f8 fs/9p: fix uaf in in v9fs_stat2inode_dotl
possible deadlock in unix_del_edges net 4 syz, C 49 857d 862d 25/29 814d b46f4eaa4f0e af_unix: Clear stale u->oob_skb.
WARNING in __hugetlb_cgroup_uncharge_folio mm -1 syz 3 843d 852d 25/29 814d b76b46902c2d mm/hugetlb: fix missing hugetlb_lock for resv uncharge
KASAN: slab-use-after-free Read in bpf_link_free bpf 19 syz 181 814d 862d 25/29 814d 1a80dbcb2dba bpf: support deferring bpf_link dealloc to after RCU grace period
WARNING: refcount bug in ax25_release (2) hams 13 syz, C 240 814d 879d 25/29 814d 467324bcfe1a ax25: Fix netdev refcount issue
KASAN: slab-out-of-bounds Read in data_sock_setsockopt net 17 syz, C 2 858d 858d 25/29 814d 138b787804f4 mISDN: fix MISDN_TIME_STAMP handling
KASAN: slab-use-after-free Read in bpf_trace_run4 bpf trace 19 syz, C error 169 858d 876d 25/29 814d 1a80dbcb2dba bpf: support deferring bpf_link dealloc to after RCU grace period
KMSAN: uninit-value in nci_dev_up net nfc 7 syz, C 7 873d 932d 25/29 814d d24b03535e5e nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
UBSAN: array-index-out-of-bounds in nilfs_add_link nilfs 15 syz, C error 4 850d 851d 25/29 814d c4a7dc9523b5 nilfs2: fix OOB in nilfs_set_de_type
KASAN: slab-use-after-free Read in bpf_trace_run2 bpf trace 19 syz, C error 653 858d 876d 25/29 814d 1a80dbcb2dba bpf: support deferring bpf_link dealloc to after RCU grace period
KASAN: slab-use-after-free Read in __fput (2) fs 19 syz, C done 6 838d 843d 25/29 814d 4efaa5acf0a1 epoll: be better about file lifetimes
KASAN: slab-use-after-free Read in bpf_trace_run1 bpf trace 19 syz, C error 78 858d 873d 25/29 814d 1a80dbcb2dba bpf: support deferring bpf_link dealloc to after RCU grace period
possible deadlock in unix_notinflight net 4 syz, C 7 840d 856d 25/29 814d b46f4eaa4f0e af_unix: Clear stale u->oob_skb.
general protection fault in __ep_remove fs 2 syz, C 1 859d 858d 25/29 814d 4efaa5acf0a1 epoll: be better about file lifetimes
general protection fault in jbd2__journal_start ext4 2 syz, C error 3 877d 931d 25/29 814d f2e812c1522d xfs: don't use current->journal_info
kernel BUG in sg_init_one mm -1 syz, C 1032 869d 879d 25/29 814d 9c500835f279 mm: zswap: fix kernel BUG in sg_init_one
WARNING in __rate_control_send_low wireless -1 syz, C inconclusive 2759 814d 2130d 25/29 814d ab9177d83c04 wifi: mac80211: don't use rate mask for scanning
kernel BUG in PageHuge mm -1 1 876d 872d 25/29 814d d99e3140a4d3 mm: turn folio_test_hugetlb into a PageType
WARNING in clear_dirty_gfn_range kvm-x86 -1 syz, C 3 863d 885d 25/29 814d 2673dfb591a3 KVM: x86/mmu: Write-protect L2 SPTEs in TDP MMU when clearing dirty status
KMSAN: uninit-value in nf_flow_offload_ip_hook netfilter 7 syz, C 5 862d 862d 25/29 814d 87b3593bed18 netfilter: flowtable: validate pppoe header
WARNING: ODEBUG bug in bdev_super_lock (2) fs -1 syz, C done 3 851d 849d 25/29 814d 22650a99821d fs,block: yield devices early
WARNING in hugetlb_change_protection (2) mm -1 syz, C 631 834d 861d 25/29 814d c5977c95dff1 mm/userfaultfd: allow hugetlb change protection upon poison entry
WARNING in __kvm_gpc_refresh kvm -1 syz, C 178 815d 879d 25/29 814d 5c9ca4ed8908 KVM: Check validity of offset+length of gfn_to_pfn_cache prior to activation
WARNING in btrfs_sync_log btrfs -1 syz, C error inconclusive 6 887d 1398d 25/29 814d 8bb808c6ad91 btrfs: don't print stack trace when transaction is aborted due to ENOMEM
WARNING in btrfs_put_transaction btrfs -1 syz, C error inconclusive 83 831d 1353d 25/29 814d 8bb808c6ad91 btrfs: don't print stack trace when transaction is aborted due to ENOMEM
WARNING in __btrfs_free_extent btrfs -1 syz, C error 300 822d 1381d 25/29 814d 8bb808c6ad91 btrfs: don't print stack trace when transaction is aborted due to ENOMEM
WARNING in btrfs_get_root_ref btrfs -1 syz unreliable inconclusive 3 889d 903d 25/29 815d e2b54eaf28df btrfs: fix double free of anonymous device after snapshot creation failure
kernel BUG at fs/inode.c:LINE! (2) fs -1 syz, C done unreliable 322 829d 2177d 25/29 815d 319c15174757 epoll: take epitem list out of struct file
kernel BUG in create_pending_snapshot btrfs -1 syz, C error done 32 1054d 1359d 25/29 817d df9f27823904 btrfs: do not BUG_ON on failure to get dir index for new snapshot
WARNING in btrfs_free_reserved_data_space_noquota btrfs -1 syz, C done done 7 942d 1354d 25/29 817d 9e65bfca24cf btrfs: fix qgroup_free_reserved_data int overflow
WARNING in stashed_dentry_prune (2) fs -1 syz, C done 54 840d 849d 25/29 818d 9d9539db8638 pidfs: remove config option
kernel BUG in __extent_writepage_io btrfs -1 syz done inconclusive 8 895d 1013d 25/29 819d 5571e41ec6e5 btrfs: don't drop extent_map for free space inode on write error
BUG: sleeping function called from invalid context in gsm_send serial 5 syz, C error 16 902d 1416d 25/29 840d acdab4cb4ba7 Revert "tty: n_gsm: avoid call of sleeping functions from atomic context"
kernel BUG in submit_bh_wbc nilfs -1 syz, C done 10 842d 852d 25/29 842d 269cdf353b5b nilfs2: prevent kernel bug at submit_bh_wbc()
inconsistent lock state in snd_hrtimer_callback (2) sound 4 syz, C 2600 851d 852d 25/29 844d 587d67fd929a ALSA: timer: Fix missing irq-disable at closing
possible deadlock in snd_timer_close_locked (2) sound 4 syz, C done 3036 851d 852d 25/29 844d 587d67fd929a ALSA: timer: Fix missing irq-disable at closing
inconsistent lock state in snd_timer_interrupt (3) sound 4 syz, C 710 851d 855d 25/29 844d 587d67fd929a ALSA: timer: Fix missing irq-disable at closing
INFO: rcu detected stall in snd_timer_user_release (2) sound 1 syz, C 7 845d 858d 25/29 844d 587d67fd929a ALSA: timer: Fix missing irq-disable at closing
possible deadlock in _snd_pcm_stream_lock_irqsave (5) sound 4 syz, C 5210 851d 852d 25/29 844d 587d67fd929a ALSA: timer: Fix missing irq-disable at closing
INFO: task hung in netlink_dump (4) net 1 72 858d 898d 25/29 854d 00af2aa93b76 net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
INFO: task hung in xfs_inodegc_flush xfs 1 syz, C error 7 923d 919d 25/29 854d c70e1779b73a workqueue: Fix pwq->nr_in_flight corruption in try_to_grab_pending()
INFO: task hung in devinet_ioctl (4) net 1 5 885d 885d 25/29 854d 00af2aa93b76 net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
WARNING in __sk_destruct batman fs -1 2 868d 901d 25/29 854d 2a750d6a5b36 rds: tcp: Fix use-after-free of net in reqsk_timer_handler().
WARNING in cleanup_net (3) net -1 syz 240 855d 988d 25/29 854d 2a750d6a5b36 rds: tcp: Fix use-after-free of net in reqsk_timer_handler().
WARNING in net_free (2) net -1 syz 27 861d 907d 25/29 854d 2a750d6a5b36 rds: tcp: Fix use-after-free of net in reqsk_timer_handler().
inconsistent lock state in snd_timer_interrupt (2) sound 4 syz, C done 208 855d 856d 25/29 855d 587d67fd929a ALSA: timer: Fix missing irq-disable at closing
KMSAN: uninit-value in em_ret_far kvm-x86 7 syz, C 37 882d 948d 25/29 855d 6fd1e3963f20 KVM: x86: Clean up partially uninitialized integer in emulate_pop()
KMSAN: uninit-value in em_ret_near_imm kvm-x86 7 2 893d 905d 25/29 855d 6fd1e3963f20 KVM: x86: Clean up partially uninitialized integer in emulate_pop()
KMSAN: uninit-value in em_ret kvm-x86 7 3 884d 905d 25/29 855d 6fd1e3963f20 KVM: x86: Clean up partially uninitialized integer in emulate_pop()
KMSAN: uninit-value in ip_tunnel_rcv (2) net 7 1 891d 891d 25/29 855d b0ec2abf9826 net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
WARNING in stashed_dentry_prune fs -1 syz, C done 20 885d 884d 25/29 855d 9d9539db8638 pidfs: remove config option
possible deadlock in sch_direct_xmit (3) net 4 1 914d 914d 25/29 856d 0bef512012b1 UPSTREAM: net: add netdev_lockdep_set_classes() to virtual drivers
BUG: bad usercopy in raw_getsockopt mm hardening -1 syz, C done 4 906d 906d 25/29 856d c8fba5d6df5e can: raw: fix getsockopt() for new CAN_RAW_XL_VCID_OPTS
WARNING: ODEBUG bug in bdev_super_lock fs -1 syz, C 3 859d 869d 25/29 856d 59a55a63c246 fs,block: get holder during claim
KMSAN: uninit-value in cookie_v4_check net 7 syz, C 9 878d 884d 25/29 856d 956c0d619107 tcp: Clear req->syncookie in reqsk_alloc().
linux-next boot error: WARNING in register_btf_kfunc_id_set bpf -1 9 924d 925d 25/29 856d a05e90427ef6 bpf: btf: Add BTF_KFUNCS_START/END macro pair
KMSAN: uninit-value in bcmp (2) sound 7 syz, C 7 921d 943d 25/29 856d fde2497d2bc3 fat: fix uninitialized field in nostale filehandles
KASAN: slab-use-after-free Read in sys_io_cancel fs 19 syz, C done 894 856d 894d 25/29 856d 28468cbed92e Revert "fs/aio: Make io_cancel() generate completions again"
possible deadlock in _snd_pcm_stream_lock_irqsave (4) sound 4 syz, C 24677 856d 879d 25/29 856d 587d67fd929a ALSA: timer: Fix missing irq-disable at closing
divide error in isd200_ata_command usb-storage 2 syz, C done 10 896d 900d 25/29 856d 014bcf41d946 USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
KASAN: slab-use-after-free Read in rt6_fill_node net 19 1 908d 908d 25/29 856d 685f7d531264 net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
KCSAN: data-race in dev_queue_xmit_nit / packet_setsockopt net 6 1 883d 883d 25/29 856d 6ebfad33161a packet: annotate data-races around ignore_outgoing
UBSAN: shift-out-of-bounds in taprio_change net -1 syz, C done 4 886d 886d 25/29 856d 343041b59b78 net/sched: taprio: proper TCA_TAPRIO_TC_ENTRY_INDEX check
WARNING: suspicious RCU usage in in6_dump_addrs (2) net 4 syz, C done 3 899d 899d 25/29 856d 67ea41d19d2a inet6: expand rcu_read_lock() scope in inet6_dump_addr()
KASAN: slab-use-after-free Read in f2fs_filemap_fault f2fs 19 syz, C unreliable 40 861d 942d 25/29 856d eb70d5a6c932 f2fs: fix to avoid use-after-free issue in f2fs_filemap_fault
KMSAN: uninit-value in ieee80211_amsdu_to_8023s wireless 7 syz, C 4 893d 900d 25/29 856d 9ad797485692 wifi: cfg80211: check A-MSDU format more carefully
general protection fault in btintel_read_version bluetooth 2 syz, C error 5 929d 940d 25/29 856d b79e04091010 Bluetooth: btintel: Fix null ptr deref in btintel_read_version
KMSAN: uninit-value in hsr_get_node (2) net 7 syz, C 49 857d 943d 25/29 856d ddbec99f5857 hsr: Fix uninit-value access in hsr_get_node()
KMSAN: kernel-infoleak in sys_name_to_handle_at (4) nfs 9 syz, C 7 894d 943d 25/29 856d 3948abaa4e2b do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
KASAN: slab-use-after-free Write in __hci_acl_create_connection_sync bluetooth 22 syz, C done 87 907d 918d 25/29 856d 5f641f03abcc Bluetooth: hci_conn: Fix UAF Write in __hci_acl_create_connection_sync
WARNING in mpls_gso_segment net -1 syz, C done 20 902d 905d 25/29 856d 025f8ad20f2e net: mpls: error out if inner headers are not set
possible deadlock in snd_pcm_period_elapsed (4) sound 4 syz, C done 90659 856d 882d 25/29 856d 587d67fd929a ALSA: timer: Fix missing irq-disable at closing
possible deadlock in xfs_ilock xfs 4 30 856d 883d 25/29 856d 0c6ca06aad84 xfs: quota radix tree allocations need to be NOFS on insert
inconsistent lock state in snd_timer_interrupt sound 4 syz, C 1927 856d 879d 25/29 856d 587d67fd929a ALSA: timer: Fix missing irq-disable at closing
WARNING in rds_conn_connect_if_down rds -1 syz, C error 17 890d 1221d 25/29 856d c055fc00c07b net/rds: fix WARNING in rds_conn_connect_if_down
general protection fault in bpf_struct_ops_find_value bpf 2 syz, C done 9 929d 932d 25/29 856d e6be8cd5d3cf bpf: Fix error checks against bpf_get_btf_vmlinux().
BUG: unable to handle kernel NULL pointer dereference in dev_map_hash_update_elem net bpf 10 syz, C 2 900d 908d 25/29 856d 281d464a34f5 bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
WARNING in sk_nulls_del_node_init_rcu net -1 1 890d 889d 25/29 856d 04d9d1fc428a tcp: Fix refcnt handling in __inet_hash_connect().
KCSAN: data-race in wg_packet_decrypt_worker / wg_packet_rx_poll (2) wireguard 6 721 876d 1648d 25/29 856d bba045dc4d99 wireguard: receive: annotate data-race around receiving_counter.counter
KMSAN: uninit-value in geneve_udp_encap_recv net 7 syz, C 2 901d 932d 25/29 856d 1ca1ba465e55 geneve: make sure to pull inner header in geneve_rx()
WARNING in ovl_copy_up_file overlayfs -1 syz, C 2 884d 884d 25/29 856d 77a28aa47687 ovl: relax WARN_ON in ovl_verify_area()
kernel BUG at fs/buffer.c:LINE! nilfs -1 syz, C done error 567 857d 3039d 25/29 856d f2f26b4a84a0 nilfs2: fix failure to detect DAT corruption in btree and direct mappings
kernel BUG in __nla_validate_parse net -1 syz, C done 13 885d 888d 25/29 856d d8a21070b6e1 nexthop: Fix out-of-bounds access during attribute validation
KASAN: slab-use-after-free Read in pvr2_context_set_notify (2) pvrusb2 19 syz, C 1069 856d 927d 25/29 856d 0a0b79ea55de media: pvrusb2: fix uaf in pvr2_context_set_notify
possible deadlock in xfs_qm_dqget_cache_insert xfs 4 8 882d 883d 25/29 856d 0c6ca06aad84 xfs: quota radix tree allocations need to be NOFS on insert
KMSAN: uninit-value in ima_add_template_entry erofs 7 syz, C 5 893d 906d 25/29 856d 893e5e9b7369 erofs: fix uninitialized page cache reported by KMSAN
BUG: sleeping function called from invalid context in __getblk_gfp fs 5 syz, C error done 3673 961d 1355d 25/29 856d f123dc86388c sysv: don't call sb_bread() with pointers_lock held
general protection fault in btf_is_module bpf 2 syz, C error 318 928d 932d 25/29 856d e6be8cd5d3cf bpf: Fix error checks against bpf_get_btf_vmlinux().
KMSAN: uninit-value in io_sendrecv_fail io-uring 7 syz, C 29 874d 882d 25/29 856d e21e1c45e1fe io_uring: clear opcode specific data for an early failure
INFO: task hung in deactivate_super (2) jfs 1 syz, C inconclusive done 121 894d 1234d 25/29 858d 6f861765464f fs: Block writes to mounted block devices
BUG: sleeping function called from invalid context in __lock_sock_fast (2) net 5 syz, C 6 896d 898d 25/29 864d d6a9608af9a7 mptcp: fix possible deadlock in subflow diag
possible deadlock in tcp_diag_get_aux net 4 syz, C 117 890d 907d 25/29 864d d6a9608af9a7 mptcp: fix possible deadlock in subflow diag
kernel BUG in eth_header (2) net -1 syz, C 2 940d 940d 25/29 864d dad555c816a5 llc: make llc_ui_sendmsg() more robust against bonding changes
BUG: unable to handle kernel NULL pointer dereference in unix_stream_sendmsg net bpf 10 syz, C 1 899d 899d 25/29 864d 4cd12c6065df bpf, sockmap: Fix NULL pointer dereference in sk_psock_verdict_data_ready()
BUG: unable to handle kernel NULL pointer dereference in sk_psock_verdict_data_ready bpf net 10 syz, C unreliable 15 895d 1015d 25/29 864d 4cd12c6065df bpf, sockmap: Fix NULL pointer dereference in sk_psock_verdict_data_ready()
WARNING in blk_rq_map_user_iov block -1 syz, C done 3546 929d 1071d 25/29 868d 13f3956eb568 block: Fix WARNING in _copy_from_iter
WARNING in copy_page_from_iter block -1 syz, C done 1987 937d 1248d 25/29 868d 13f3956eb568 block: Fix WARNING in _copy_from_iter
possible deadlock in unix_set_peek_off net 4 8 904d 910d 25/29 869d 56667da7399e net: implement lockless setsockopt(SO_PEEK_OFF)
INFO: task hung in unix_stream_sendmsg net 1 syz, C done 4 905d 908d 25/29 869d aa82ac51d633 af_unix: Drop oob_skb ref before purging queue in GC.
possible deadlock in __unix_dgram_recvmsg (2) net 4 3 907d 910d 25/29 869d 56667da7399e net: implement lockless setsockopt(SO_PEEK_OFF)
WARNING in __alloc_skb (3) ppp -1 syz, C 2 921d 921d 25/29 869d cb88cb53badb ppp_async: limit MRU to 64K
BUG: unable to handle kernel paging request in copy_from_kernel_nofault mm 8 syz, C done 5 900d 999d 25/29 869d 32019c659ecf x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()
WARNING in zswap_folio_swapin mm -1 1 927d 923d 25/29 869d 16e96ba5e92c mm/swap_state: update zswap LRU's protection range with the folio locked
KASAN: slab-out-of-bounds Read in getname_kernel (2) btrfs 17 syz, C done 5 923d 970d 25/29 869d 9845664b9ee4 btrfs: dev-replace: properly validate device names
kernel BUG in end_buffer_async_write nilfs -1 syz, C inconclusive 6 957d 1168d 25/29 869d 5bc09b397cbf nilfs2: fix potential bug in end_buffer_async_write
WARNING in send_hsr_supervision_frame (3) net -1 153 932d 1368d 25/29 869d 37e8c97e5390 net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
memory leak in pppoe_sendmsg net 3 syz, C 26 960d 2632d 25/29 869d dc34ebd5c018 pppoe: Fix memory leak in pppoe_sendmsg()
memory leak in corrupted bluetooth 3 syz 536 869d 941d 25/29 869d 0a186b49bba5 batman-adv: mcast: fix memory leak on deleting a batman-adv interface
WARNING in __unix_gc net -1 syz, C 49 918d 924d 25/29 869d 1279f9d9dec2 af_unix: Call kfree_skb() for dead unix_(sk)->oob_skb in GC.
KMSAN: uninit-value in des3_ede_decrypt crypto 7 1 910d 906d 25/29 869d 7cfc2ab3f025 crypto: lskcipher - Copy IV in lskcipher glue code always
kernel BUG in iov_iter_revert exfat -1 syz, C done 5 922d 941d 25/29 869d 0991abeddefa exfat: fix zero the unwritten part for dio read
WARNING: ODEBUG bug in ip_set_free netfilter -1 syz, C 42 910d 913d 25/29 870d 27c5a095e251 netfilter: ipset: Missing gc cancellations fixed
BUG: unable to handle kernel NULL pointer dereference in hrtimer_active kernel 10 1 916d 914d 25/29 870d fe9f801355f0 net: veth: clear GRO when clearing XDP even when down
possible deadlock in rds_wake_sk_sleep (4) rds 4 syz, C error 16 920d 1548d 25/29 870d f1acf1ac84d2 net:rds: Fix possible deadlock in rds_message_put
bpf test error: INFO: trying to register non-static key in inet_csk_listen_stop net -1 4 935d 935d 25/29 870d 435e202d645c ipv6: init the accept_queue's spinlocks in inet6_create
net test error: INFO: trying to register non-static key in inet_csk_listen_stop net -1 21 934d 937d 25/29 870d 435e202d645c ipv6: init the accept_queue's spinlocks in inet6_create
possible deadlock in rds_message_put rds 4 syz, C done error 5 1007d 1319d 25/29 870d f1acf1ac84d2 net:rds: Fix possible deadlock in rds_message_put
linux-next test error: INFO: trying to register non-static key in inet_csk_listen_stop net -1 12 934d 936d 25/29 870d 435e202d645c ipv6: init the accept_queue's spinlocks in inet6_create
possible deadlock in skb_queue_tail (6) net 4 1 929d 929d 25/29 870d 4d322dce82a1 UPSTREAM: af_unix: fix lockdep positive in sk_diag_dump_icons()
KASAN: slab-use-after-free Read in sock_wfree (2) intel-wired-lan 19 syz, C 4 932d 940d 25/29 870d aa2b2eb39348 llc: call sock_orphan() at release time
WARNING: ODEBUG bug in hash_netiface4_destroy netfilter -1 syz, C done 80 910d 924d 25/29 870d 27c5a095e251 netfilter: ipset: Missing gc cancellations fixed
KMSAN: uninit-value in __nla_validate_parse (3) netfilter 17 24 885d 906d 25/29 871d 9a0d18853c28 netlink: add nla be16/32 types to minlen array
possible deadlock in j1939_sk_queue_drop_all can 4 syz, C error done 281 928d 1801d 25/29 871d 6cdedc18ba7b can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock
possible deadlock in j1939_sk_errqueue (2) can 4 syz, C done 24 911d 1137d 25/29 871d 6cdedc18ba7b can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock
memory leak in virtual_ncidev_write (2) net nfc 3 syz, C 2 969d 1129d 25/29 871d bfb007aebe6b nfc: nci: free rx_data_reassembly skb on NCI device cleanup
general protection fault in tipc_udp_is_known_peer tipc 2 syz, C error 1 957d 970d 25/29 871d 3871aa01e1a7 tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
KMSAN: uninit-value in IP6_ECN_decapsulate (2) net 7 syz, C 3 922d 937d 25/29 871d 8d975c15c0cd ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
INFO: task hung in rtnl_lock (3) net 1 syz, C 128 876d 1228d 25/29 871d 3871aa01e1a7 tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
WARNING in inet_csk_destroy_sock (5) net -1 1 936d 936d 25/29 871d 66b60b0c8c4a dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished().
possible deadlock in j1939_session_activate can 4 syz, C done done 67 922d 1757d 25/29 871d 6cdedc18ba7b can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock
WARNING in bcm5974_start_traffic/usb_submit_urb input -1 syz, C error 41 875d 2471d 25/29 871d 2b9c3eb32a69 Input: bcm5974 - check endpoint type before starting traffic
WARNING in ieee80211_bss_info_change_notify (2) wireless -1 syz, C done 1392 892d 1037d 25/29 871d f78c1375339a wifi: nl80211: reject iftype change with mesh ID change
WARNING in btrfs_issue_discard btrfs -1 syz, C done 9 929d 942d 25/29 871d a208b3f132b4 btrfs: don't warn if discard range is not aligned to sector
WARNING in __nf_unregister_net_hook (6) netfilter -1 syz, C error 2 915d 1032d 25/29 871d bccebf647017 netfilter: nf_tables: set dormant flag on hook register failure
memory leak in sctp_packet_transmit sctp 3 syz, C 14 996d 2214d 25/29 871d 4e45170d9acc net: sctp: fix skb leak in sctp_inq_free()
KMSAN: uninit-value in geneve_xmit (2) net 7 syz, C 12 876d 953d 25/29 872d 5ae1e9922bbd net: ip_tunnel: prevent perpetual headroom growth
WARNING in ip6gre_tunnel_xmit net -1 syz, C done 2 901d 901d 25/29 872d 5ae1e9922bbd net: ip_tunnel: prevent perpetual headroom growth
KASAN: use-after-free Read in __skb_flow_dissect (3) net 19 syz, C 1 946d 956d 25/29 872d 5ae1e9922bbd net: ip_tunnel: prevent perpetual headroom growth
memory leak in add_block_entry btrfs 3 syz, C 4 969d 1161d 25/29 872d f03e274a8b29 btrfs: ref-verify: free ref cache before clearing mount opt
INFO: task hung in nsim_create net 1 1 920d 920d 25/29 872d ba5e1272142d netdevsim: avoid potential loop in nsim_dev_trap_report_work()
KMSAN: uninit-value in af_alg_free_sg (2) crypto 7 1 949d 943d 25/29 872d 24c890dd712f crypto: algif_hash - Remove bogus SGL free on zero-length error path
INFO: task hung in addrconf_dad_work (3) net 1 syz, C 185 885d 927d 25/29 872d ba5e1272142d netdevsim: avoid potential loop in nsim_dev_trap_report_work()
KASAN: invalid-access Read in neon_aes_ctr_encrypt arm crypto 17 syz, C 3 899d 910d 25/29 872d 1c0cf6d19690 crypto: arm64/neonbs - fix out-of-bounds access on short input
memory leak in add_tree_block btrfs 3 syz, C 5 954d 1355d 25/29 872d f03e274a8b29 btrfs: ref-verify: free ref cache before clearing mount opt
KASAN: slab-out-of-bounds Read in ntfs_listxattr (2) ntfs3 17 syz, C error 15 920d 962d 25/29 872d 731ab1f98288 fs/ntfs3: Fix oob in ntfs_listxattr
KMSAN: kernel-infoleak in __skb_datagram_iter (2) net 19 syz, C 126 872d 924d 25/29 872d 661779e1fcaf netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
INFO: task hung in unix_dgram_sendmsg net 1 syz, C done 36 898d 917d 25/29 872d 25236c91b5ab af_unix: Fix task hung while purging oob_skb in GC.
upstream boot error: can't ssh into the instance (16) -1 415 895d 948d 25/29 872d f6564fce256a mm, kmsan: fix infinite recursion due to RCU critical section
KMSAN: uninit-value in __llc_lookup_established net 7 syz, C 46 940d 983d 25/29 872d e3f9bed9bee2 llc: Drop support for ETH_P_TR_802_2.
INFO: task hung in migrate_pages_batch nilfs 1 syz, C 22 917d 929d 25/29 872d 38296afe3c6e nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
BUG: unable to handle kernel NULL pointer dereference in crypto_arc4_crypt crypto 10 syz, C done 4 930d 928d 25/29 872d 69fba378edca crypto: cbc - Ensure statesize is zero
BUG: unable to handle kernel NULL pointer dereference in dtInsertEntry jfs 19 syz, C error done 29 924d 1418d 25/29 877d 6f861765464f fs: Block writes to mounted block devices
possible deadlock in reiserfs_dirty_inode fs 4 syz, C done done 519 927d 1355d 25/29 877d 6f861765464f fs: Block writes to mounted block devices
KASAN: use-after-free Read in ntfs_lookup_inode_by_name ntfs3 19 syz, C error done 17 888d 1323d 25/29 877d 6f861765464f fs: Block writes to mounted block devices
WARNING in do_open_execat ntfs3 -1 syz, C error done 12 932d 1092d 25/29 877d 6f861765464f fs: Block writes to mounted block devices
KASAN: use-after-free Read in udf_finalize_lvid udf 19 syz, C inconclusive done 39 949d 1152d 25/29 877d 6f861765464f fs: Block writes to mounted block devices
BUG: sleeping function called from invalid context in gfs2_withdraw gfs2 5 syz, C error done 182 949d 1069d 25/29 877d 6f861765464f fs: Block writes to mounted block devices
UBSAN: shift-out-of-bounds in ntfs_iget ntfs3 -1 syz, C error done 9 930d 1171d 25/29 877d 6f861765464f fs: Block writes to mounted block devices
KASAN: slab-out-of-bounds Read in ntfs_iget5 ntfs3 19 syz, C done done 3633 941d 1575d 25/29 877d 6f861765464f fs: Block writes to mounted block devices
KASAN: slab-use-after-free Read in udf_free_blocks udf 19 syz, C done done 2 951d 1161d 25/29 877d 6f861765464f fs: Block writes to mounted block devices
INFO: trying to register non-static key in txEnd jfs -1 syz, C inconclusive done 20 950d 1048d 25/29 877d 6f861765464f fs: Block writes to mounted block devices
KMSAN: uninit-value in __crc32c_le_base (3) xfs 7 15526 887d 1205d 25/29 877d 0573676fdde7 xfs: initialise di_crc in xfs_log_dinode
KASAN: use-after-free Read in ntfs_read_folio ntfs3 19 syz, C error done 12 938d 1246d 25/29 877d 6f861765464f fs: Block writes to mounted block devices
INFO: task hung in hfs_mdb_commit hfs 1 syz, C error done 25 928d 1306d 25/29 877d 6f861765464f fs: Block writes to mounted block devices
possible deadlock in map_mft_record ntfs3 4 syz, C error done 845 926d 1395d 25/29 877d 6f861765464f fs: Block writes to mounted block devices
possible deadlock in ext4_xattr_inode_iget (2) ext4 4 syz, C done done 22 942d 1135d 25/29 877d 6f861765464f fs: Block writes to mounted block devices
KASAN: slab-out-of-bounds Write in hfs_bnode_read_key hfs 21 syz, C error done 4 940d 1163d 25/29 877d 6f861765464f fs: Block writes to mounted block devices
KASAN: slab-out-of-bounds Read in jfs_readdir jfs 19 syz, C error done 17 950d 1310d 25/29 877d 6f861765464f fs: Block writes to mounted block devices
BUG: sleeping function called from invalid context in __bread_gfp fs 5 syz, C error done 359 953d 1354d 25/29 877d 6f861765464f fs: Block writes to mounted block devices
kernel BUG in ntfs_iget ntfs3 -1 syz, C error done 73 890d 1268d 25/29 877d 6f861765464f fs: Block writes to mounted block devices
INFO: task hung in reiserfs_sync_fs fs 1 syz, C error done 22 953d 1332d 25/29 877d 6f861765464f fs: Block writes to mounted block devices
WARNING in kvm_mmu_notifier_invalidate_range_start (3) kvm -1 syz, C inconclusive done 44 941d 1001d 25/29 890d 4cccb6221cae fs/proc/task_mmu: move mmu notification mechanism inside mm lock
WARNING in gfs2_check_blk_type gfs2 -1 syz, C error done 67 938d 1341d 25/29 893d 6f861765464f fs: Block writes to mounted block devices
WARNING in perf_event_open perf -1 syz, C done done 43004 953d 968d 25/29 899d 7e2c1e4b34f0 perf: Fix perf_event_validate_size() lockdep splat
KASAN: slab-out-of-bounds Write in udf_adinicb_writepage udf 21 syz, C error done 5 951d 1239d 25/29 900d 6f861765464f fs: Block writes to mounted block devices
INFO: task hung in lmLogClose (2) jfs 1 syz, C inconclusive done 5 947d 1039d 25/29 903d 6f861765464f fs: Block writes to mounted block devices
kernel panic: stack is corrupted in run_unpack_ex ntfs3 2 syz, C done done 3 957d 1315d 25/29 903d 6f861765464f fs: Block writes to mounted block devices
general protection fault in common_perm_cond ext4 apparmor 2 syz, C error done 1 957d 1122d 25/29 904d 6f861765464f fs: Block writes to mounted block devices
UBSAN: array-index-out-of-bounds in udf_process_sequence udf 15 syz, C error done 6 951d 1110d 25/29 905d 6f861765464f fs: Block writes to mounted block devices
general protection fault in __fget_files (2) fs 2 syz, C done done 1 960d 956d 25/29 905d 6f861765464f fs: Block writes to mounted block devices
INFO: task hung in __generic_file_fsync (3) exfat 1 syz, C inconclusive done 8 958d 1465d 25/29 905d 6f861765464f fs: Block writes to mounted block devices
WARNING in ext4_discard_allocated_blocks ext4 -1 syz, C inconclusive done 4 951d 1068d 25/29 905d 6f861765464f fs: Block writes to mounted block devices
INFO: task hung in write_cache_pages (3) gfs2 1 syz, C done done 10 950d 1075d 25/29 905d 6f861765464f fs: Block writes to mounted block devices
INFO: task hung in __get_metapage jfs 1 syz, C error done 32 949d 1403d 25/29 905d 6f861765464f fs: Block writes to mounted block devices
KASAN: use-after-free Write in udf_close_lvid udf 22 syz, C done 144 950d 1544d 25/29 905d 6f861765464f fs: Block writes to mounted block devices
KASAN: use-after-free Read in ext4_search_dir prio:low ext4 19 syz, C error done 20 950d 1191d 25/29 905d 6f861765464f fs: Block writes to mounted block devices
BUG: unable to handle kernel paging request in reiserfs_readdir_inode fs 19 syz, C error done 11 951d 1317d 25/29 905d 6f861765464f fs: Block writes to mounted block devices
kernel BUG in entry_points_to_object fs -1 syz, C done done 21 951d 996d 25/29 905d 6f861765464f fs: Block writes to mounted block devices
kernel panic: stack is corrupted in __lock_acquire (5) ntfs3 2 syz, C error done 18 950d 1327d 25/29 905d 6f861765464f fs: Block writes to mounted block devices
kernel BUG in txLock jfs -1 syz, C inconclusive done 10 952d 1070d 25/29 910d 6f861765464f fs: Block writes to mounted block devices
WARNING in lock_two_nondirectories ext4 -1 syz, C 3 962d 973d 25/29 910d 6f861765464f fs: Block writes to mounted block devices
general protection fault in utf8nlookup exfat ext4 2 syz, C done done 3 952d 1059d 25/29 910d 6f861765464f fs: Block writes to mounted block devices
kernel BUG in ext4_enable_quotas ext4 -1 syz, C error done 16 954d 1135d 25/29 910d 6f861765464f fs: Block writes to mounted block devices
KASAN: out-of-bounds Read in ext4_ext_remove_space ext4 17 syz, C error done 8 953d 1127d 25/29 910d 6f861765464f fs: Block writes to mounted block devices
KASAN: vmalloc-out-of-bounds Read in cleanup_bitmap_list fs 17 syz, C error done 100 954d 1386d 25/29 910d 6f861765464f fs: Block writes to mounted block devices
KASAN: slab-use-after-free Read in hfsplus_read_wrapper hfs 19 syz, C inconclusive done 7 961d 1184d 25/29 911d 6f861765464f fs: Block writes to mounted block devices
KMSAN: uninit-value in io_rw_fail (2) io-uring 7 1 921d 917d 25/29 912d 0a535eddbe0d io_uring/rw: ensure io->bytes_done is always initialized
KASAN: null-ptr-deref Read in ida_free (4) bluetooth 11 syz, C done done 29 965d 1004d 25/29 912d af73483f4e8b ida: Fix crash in ida_free when the bitmap is empty
KASAN: use-after-free Read in set_de_name_and_namelen fs 19 syz, C error done 15 957d 1358d 25/29 913d 6f861765464f fs: Block writes to mounted block devices
KASAN: slab-out-of-bounds Read in dtSearch jfs 19 syz, C error done 33 956d 1419d 25/29 913d 6f861765464f fs: Block writes to mounted block devices
KMSAN: uninit-value in tcp_recvmsg (3) net 7 1 958d 945d 25/29 917d 78fbb92af27d nbd: always initialize struct msghdr completely
UBSAN: shift-out-of-bounds in dbSplit jfs -1 syz, C error done 7 956d 1410d 25/29 917d 6f861765464f fs: Block writes to mounted block devices
possible deadlock in hci_rfkill_set_block bluetooth 4 syz, C done 3391 953d 1026d 25/29 921d 769bf60e17ee Bluetooth: Fix deadlock in vhci_send_frame
KASAN: use-after-free Read in udf_sync_fs udf 19 syz, C done done 37 960d 1098d 25/29 923d 6f861765464f fs: Block writes to mounted block devices
KASAN: slab-use-after-free Read in ext4_convert_inline_data_nolock ext4 19 syz, C error done 7 959d 1236d 25/29 923d 6f861765464f fs: Block writes to mounted block devices
WARNING: ODEBUG bug in netdev_run_todo batman -1 syz, C error error 5467 1147d 2201d 25/29 923d abac3ac97fe8 batman-adv: Broken sync while rescheduling delayed work
BUG: unable to handle kernel NULL pointer dereference in reiserfs_find_entry fs 19 syz, C error done 25 960d 1396d 25/29 924d 6f861765464f fs: Block writes to mounted block devices
UBSAN: shift-out-of-bounds in ext4_handle_clustersize (2) ext4 -1 syz, C error done 3 961d 965d 25/29 924d 6f861765464f fs: Block writes to mounted block devices
possible deadlock in seq_read_iter (2) overlayfs 4 syz, C done done 14 962d 1122d 25/29 924d da40448ce4eb fs: move file_start_write() into direct_splice_actor()
KMSAN: uninit-value in io_rw_fail io-uring 7 syz, C 25 927d 943d 25/29 924d 0a535eddbe0d io_uring/rw: ensure io->bytes_done is always initialized
KASAN: slab-use-after-free Write in fib6_purge_rt net 22 1 995d 995d 25/29 925d 5a08d0065a91 ipv6: add debug checks in fib6_info_release()
KMSAN: uninit-value in ip6_tnl_parse_tlv_enc_lim (2) net 7 syz, C 17 927d 952d 25/29 925d d375b98e0248 ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
riscv/fixes boot error: failed to read from qemu: EOF -1 54 981d 990d 25/29 925d 420370f3ae3d riscv: Check if the code to patch lies in the exit section
kernel BUG in ntfs_truncate ntfs3 -1 syz, C error done 4 962d 1320d 25/29 926d 6f861765464f fs: Block writes to mounted block devices
INFO: task hung in hfsplus_find_init hfs 1 syz, C error done 1 968d 1062d 25/29 926d 6f861765464f fs: Block writes to mounted block devices
KASAN: use-after-free Read in reiserfs_get_unused_objectid fs 19 syz, C inconclusive done 3 962d 1235d 25/29 926d 6f861765464f fs: Block writes to mounted block devices
general protection fault in timerqueue_del (2) kernel 2 syz, C done done 3 968d 1109d 25/29 926d 6f861765464f fs: Block writes to mounted block devices
WARNING in udf_new_block udf -1 syz, C inconclusive done 31 962d 1246d 25/29 926d 6f861765464f fs: Block writes to mounted block devices
WARNING in __mark_chain_precision (3) bpf -1 syz, C done 19 957d 978d 25/29 926d 482d548d40b0 bpf: handle fake register spill to stack with BPF_ST_MEM instruction
KMSAN: uninit-value in subflow_check_req mptcp 7 syz, C 63 952d 947d 25/29 926d 66ff70df1a91 mptcp: use OPTION_MPTCP_MPJ_SYN in subflow_check_req()
KASAN: use-after-free Read in ext4_find_extent (3) prio:low ext4 19 syz, C error done 31 962d 1144d 25/29 927d 6f861765464f fs: Block writes to mounted block devices
kernel BUG in ext4_write_inline_data_end ext4 -1 syz, C error done 32 963d 1261d 25/29 927d 6f861765464f fs: Block writes to mounted block devices
INFO: task hung in path_mount (2) jfs 1 syz, C error done 8 963d 1091d 25/29 927d 6f861765464f fs: Block writes to mounted block devices
KASAN: use-after-free Read in crc_itu_t udf 19 syz, C inconclusive done 50 962d 1413d 25/29 927d 6f861765464f fs: Block writes to mounted block devices
general protection fault in scatterwalk_copychunks (5) crypto 2 syz, C done 2920 955d 962d 25/29 927d 744e1885922a crypto: scomp - fix req->dst buffer overflow
KASAN: slab-out-of-bounds Write in squashfs_readahead (2) squashfs 21 syz, C done 2 1010d 1006d 25/29 927d 12427de9439d Squashfs: fix variable overflow triggered by sysbot
KASAN: slab-use-after-free Read in nla_find bpf net 19 syz, C done 4 971d 970d 25/29 927d 2130c519a401 bpf: Use nla_ok() instead of checking nla_len directly
KASAN: slab-use-after-free Read in nfc_alloc_send_skb net nfc 19 syz, C error 3 980d 1009d 25/29 927d c95f919567d6 nfc: llcp_core: Hold a ref to llcp_local->dev when holding a ref to llcp_local
KASAN: slab-use-after-free Read in jfs_evict_inode jfs 19 syz error 1 1026d 1022d 25/29 927d e0e1958f4c36 jfs: fix uaf in jfs_evict_inode
kernel BUG in move_pages mm -1 syz, C done 2 950d 946d 25/29 927d 5d4747a6cc8e userfaultfd: avoid huge_zero_page in UFFDIO_MOVE
general protection fault in bio_first_folio block 2 syz, C done 683 938d 972d 25/29 927d 7bed6f3d08b7 block: Fix iterating over an empty bio with bio_for_each_folio_all
general protection fault in bfs_get_block (2) bfs 2 syz, C error done 2 974d 993d 25/29 927d 6f861765464f fs: Block writes to mounted block devices
KASAN: slab-out-of-bounds Read in arc4_crypt crypto 17 syz, C done 6 959d 970d 25/29 927d 37c6fc323a81 crypto: skcipher - Pass statesize for simple lskcipher instances
WARNING in get_pte_pfn mm io-uring -1 syz, C error 2 956d 966d 25/29 927d c28ac3c7eb94 mm/mglru: skip special VMAs in lru_gen_look_around()
UBSAN: array-index-out-of-bounds in diNewExt jfs 15 syz, C inconclusive 31 927d 978d 25/29 927d 49f9637aafa6 jfs: fix array-index-out-of-bounds in diNewExt
INFO: task hung in gfs2_gl_hash_clear (3) gfs2 1 syz, C error done 80 966d 1354d 25/29 927d 6f861765464f fs: Block writes to mounted block devices
BUG: corrupted list in efivar_entry_remove efi 8 syz, C 104 928d 1449d 25/29 927d cdb46a8aefbf efivarfs: Move efivarfs list into superblock s_fs_info
KCSAN: data-race in udpv6_sendmsg / udpv6_sendmsg (6) net 6 1 949d 945d 25/29 927d 482521d8e0c6 udp: annotate data-races around up->pending
general protection fault in dtSplitUp jfs 2 syz, C error done 2 977d 1413d 25/29 927d 6f861765464f fs: Block writes to mounted block devices
WARNING in ip6_route_multipath_add net -1 1 977d 977d 25/29 927d a3c205d0560f ipv6: do not check fib6_has_expires() in fib6_info_release()
BUG: unable to handle kernel NULL pointer dereference in __bio_release_pages block 10 syz, C 6 943d 941d 25/29 927d 7bed6f3d08b7 block: Fix iterating over an empty bio with bio_for_each_folio_all
general protection fault in tomoyo_check_acl (3) hfs 2 syz, C inconclusive done 1 977d 1134d 25/29 927d 6f861765464f fs: Block writes to mounted block devices
general protection fault in hfsc_tcf_block net 2 syz, C done 1020 950d 957d 25/29 927d 94e2557d086a net: sched: move block device tracking into tcf_block_get/put_ext()
possible deadlock in chown_common fs 4 syz, C error done 22 935d 1404d 25/29 927d 6f861765464f fs: Block writes to mounted block devices
WARNING in __udf_add_aext (2) udf -1 syz error done 6 977d 1158d 25/29 927d 6f861765464f fs: Block writes to mounted block devices
BUG: sleeping function called from invalid context in glock_hash_walk gfs2 5 syz, C done done 31 973d 1074d 25/29 927d 6f861765464f fs: Block writes to mounted block devices
UBSAN: array-index-out-of-bounds in diWrite jfs 15 syz, C error done 13 974d 1393d 25/29 927d 6f861765464f fs: Block writes to mounted block devices
KASAN: slab-use-after-free Read in pvr2_context_set_notify usb pvrusb2 22 syz, C 3814 927d 1133d 25/29 927d ded85b0c0edd media: pvrusb2: fix use after free on context disconnection
BUG: sleeping function called from invalid context in gfs2_make_fs_ro gfs2 5 syz, C error done 1 973d 1116d 25/29 927d 6f861765464f fs: Block writes to mounted block devices
KASAN: slab-use-after-free Read in kill_f2fs_super f2fs 19 syz, C done 2331 940d 945d 25/29 927d c919330dd578 f2fs: fix double free of f2fs_sb_info
kernel BUG in balance_leaf fs -1 syz, C error done 16 967d 1318d 25/29 927d 6f861765464f fs: Block writes to mounted block devices
WARNING: locking bug in corrupted (2) bpf 4 syz, C done done 1 977d 1131d 25/29 927d 6f861765464f fs: Block writes to mounted block devices
WARNING in mptcp_check_listen_stop mptcp -1 syz, C done 47 927d 975d 25/29 927d 4c0288299fd0 mptcp: prevent tcp diag from closing listener subflows
WARNING in __sk_msg_free bpf net -1 syz, C done 4 953d 952d 25/29 927d dc9dfc8dc629 net: tls, fix WARNIING in __sk_msg_free
possible deadlock in pipe_write fs 4 syz, C inconclusive 181 929d 1607d 25/29 927d 055ca8355991 fs/pipe: Fix lockdep false-positive in watchqueue pipe_write()
KMSAN: uninit-value in z_erofs_lz4_decompress (2) erofs 7 syz, C 33 928d 961d 25/29 927d 496530c7c1df erofs: avoid debugging output for (de)compressed data
INFO: trying to register non-static key in do_mpage_readpage ntfs3 -1 syz, C error done 24 971d 1325d 25/29 927d 6f861765464f fs: Block writes to mounted block devices
kernel BUG in direntry_check_right fs -1 syz, C done done 2 965d 1009d 25/29 927d 6f861765464f fs: Block writes to mounted block devices
KASAN: slab-out-of-bounds Read in dsa_user_changeupper net 17 syz, C done 1303 934d 948d 25/29 927d 844f104790bd net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events
WARNING in __folio_rmap_sanity_checks mm -1 syz, C done 168 949d 954d 25/29 927d 9c5938694cd0 mm/rmap: silence VM_WARN_ON_FOLIO() in __folio_rmap_sanity_checks()
WARNING in ea_get jfs -1 syz, C error done 10 969d 1415d 25/29 927d 6f861765464f fs: Block writes to mounted block devices
riscv/fixes boot error: kernel BUG in __phys_addr_symbol riscv -1 24 968d 980d 25/29 927d c29fc621e1a4 riscv: Fix wrong usage of lm_alias() when splitting a huge linear mapping
INFO: task hung in find_inode_fast (2) ext4 1 syz, C unreliable done 10 974d 1128d 25/29 927d 6f861765464f fs: Block writes to mounted block devices
KASAN: slab-out-of-bounds Read in search_by_key (2) fs 17 syz, C 4435 949d 1380d 25/29 927d dd8f87f21dc3 reiserfs: fix uninit-value in comp_keys
UBSAN: array-index-out-of-bounds in dtSplitRoot jfs 15 syz, C error inconclusive 2 1071d 1399d 25/29 927d 27e56f59bab5 UBSAN: array-index-out-of-bounds in dtSplitRoot
possible deadlock in ntfs_set_state ntfs3 4 syz, C done done 1360 939d 1332d 25/29 927d 6f861765464f fs: Block writes to mounted block devices
kernel BUG in txEnd jfs -1 syz, C inconclusive done 6 937d 1151d 25/29 927d 6f861765464f fs: Block writes to mounted block devices
WARNING: suspicious RCU usage in __cfg80211_bss_update wireless 4 syz, C done 92 952d 954d 25/29 927d 1184950e341c wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
general protection fault in qdisc_create net 10 syz, C done 2821 949d 957d 25/29 927d 94e2557d086a net: sched: move block device tracking into tcf_block_get/put_ext()
BUG: unable to handle kernel paging request in lookup_open ntfs3 8 syz, C error done 1 976d 1121d 25/29 927d 6f861765464f fs: Block writes to mounted block devices
BUG: unable to handle kernel NULL pointer dereference in gfs2_rgrp_dump gfs2 10 syz, C done 9 983d 1327d 25/29 927d 8877243beafa gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
general protection fault in __hrtimer_run_queues (3) kernel 17 syz, C error done 2 978d 1143d 25/29 927d 6f861765464f fs: Block writes to mounted block devices
WARNING in dev_watchdog (2) net -1 syz, C inconclusive 6791 929d 2328d 25/29 927d e316dd1cf135 net: don't dump stack on queue timeout
WARNING in kvm_mmu_notifier_change_pte kvm -1 syz, C inconclusive 2 965d 975d 25/29 927d 4cccb6221cae fs/proc/task_mmu: move mmu notification mechanism inside mm lock
WARNING: refcount bug in tcp_sigpool_alloc_ahash net 13 1 968d 968d 25/29 927d b901a4e27694 net/tcp_sigpool: Use kref_get_unless_zero()
possible deadlock in stack_depot_put kasan 4 23 971d 993d 25/29 927d a414d4286f34 kasan: handle concurrent kasan_record_aux_stack calls
KMSAN: uninit-value in netif_skb_features (2) net 7 syz, C 9 971d 1059d 25/29 927d 9181d6f8a2bb net: add more sanity check in virtio_net_hdr_to_skb()
INFO: task hung in hwrng_fillfn crypto 1 syz, C error 27 929d 993d 25/29 927d 78aafb3884f6 hwrng: core - Fix page fault dead lock on mmap-ed hwrng
kernel BUG in ext4_split_extent_at (2) ext4 -1 syz, C error done 3 963d 1158d 25/29 927d 6f861765464f fs: Block writes to mounted block devices
BUG: unable to handle kernel NULL pointer dereference in gfs2_rindex_update gfs2 10 syz, C error done 4 972d 1331d 25/29 927d 6f861765464f fs: Block writes to mounted block devices
WARNING in ip6_route_info_create net -1 syz, C done 241 977d 981d 25/29 927d a3c205d0560f ipv6: do not check fib6_has_expires() in fib6_info_release()
general protection fault in page_pool_unlist net 2 syz, C done 648 987d 989d 25/29 927d f9893fdac319 net: page_pool: fix general protection fault in page_pool_unlist
KMSAN: uninit-value in shrinker_alloc mm 7 syz 2 977d 955d 25/29 927d 7fba9420b726 mm: shrinker: use kvzalloc_node() from expand_one_shrinker_info()
possible deadlock in __run_timers kernel 4 syz, C error done 1 975d 971d 25/29 927d 6f861765464f fs: Block writes to mounted block devices
UBSAN: shift-out-of-bounds in dbJoin jfs -1 syz, C error 3 1020d 1404d 25/29 927d cca974daeb6c jfs: fix shift-out-of-bounds in dbJoin
KCSAN: data-race in ipv6_mc_down / mld_ifc_work (2) net 6 2 939d 945d 25/29 927d 2e7ef287f07c ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work
UBSAN: array-index-out-of-bounds in dbAdjTree jfs 15 syz, C error error 41 941d 1418d 25/29 927d 9862ec7ac1cb FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree 74ecdda68242 jfs: fix array-index-out-of-bounds in dbAdjTree
KASAN: slab-use-after-free Read in destroy_device_list f2fs 19 syz, C done 3597 940d 944d 25/29 927d c919330dd578 f2fs: fix double free of f2fs_sb_info
kernel BUG in gfs2_quota_cleanup gfs2 -1 syz, C done 4 969d 1069d 25/29 927d 71733b492200 gfs2: fix kernel BUG in gfs2_quota_cleanup
KMSAN: uninit-value in validate_xmit_skb net 7 syz, C 21 928d 946d 25/29 927d 9181d6f8a2bb net: add more sanity check in virtio_net_hdr_to_skb()
kernel BUG in flush_journal_list exfat -1 syz, C done done 3 971d 1159d 25/29 927d 6f861765464f fs: Block writes to mounted block devices
general protection fault in htb_tcf_block net 2 syz, C done 885 949d 957d 25/29 927d 94e2557d086a net: sched: move block device tracking into tcf_block_get/put_ext()
KMSAN: uninit-value in ppp_sync_receive ppp 7 2 1004d 1003d 25/29 928d 719639853d88 tty: Fix uninit-value access in ppp_sync_receive()
INFO: trying to register non-static key in debugfs_file_get fs -1 289 967d 967d 25/29 934d 88ac06a9f938 Revert "debugfs: annotate debugfs handlers vs. removal with lockdep"
WARNING in debugfs_file_get fs -1 239 968d 985d 25/29 934d 88ac06a9f938 Revert "debugfs: annotate debugfs handlers vs. removal with lockdep"
kernel BUG in prog_array_map_poke_run bpf -1 syz, C done done 35 970d 1011d 25/29 935d 4b7de801606e bpf: Fix prog_array_map_poke_run map poke update
WARNING in rose_device_event hams -1 1 975d 975d 25/29 935d 64b8bc7d5f14 net/rose: fix races in rose_kill_by_device()
general protection fault in skb_segment (4) net 8 syz, C error 4 971d 979d 25/29 936d 23d05d563b7e net: prevent mss overflow in skb_segment()
Internal error in fib6_table_lookup net 2 2 1004d 1005d 25/29 936d 18f039428c7d ipvlan: add ipvlan_route_v6_outbound() helper
KCSAN: data-race in wg_xmit / wg_xmit (4) wireguard 6 1 1008d 1003d 25/29 936d 93da8d75a665 wireguard: use DEV_STATS_INC()
Internal error in fib6_rule_lookup net 2 2 1007d 1015d 25/29 936d 18f039428c7d ipvlan: add ipvlan_route_v6_outbound() helper
KASAN: slab-use-after-free Read in ife_tlv_meta_decode net 19 1 982d 980d 25/29 936d 19391a2ca98b net: sched: ife: fix potential use-after-free
WARNING in fib6_add (5) net -1 syz, C done 6 981d 1144d 25/29 936d 75475bb51e78 ipv6: fix potential NULL deref in fib6_add()
KASAN: slab-use-after-free Read in btrfs_qgroup_account_extent btrfs 22 syz, C done 40 1005d 1016d 25/29 937d 6c8e69e4a702 btrfs: fix race between accounting qgroup extents and removing a qgroup
KASAN: slab-out-of-bounds Read in dns_resolver_preparse net 17 syz, C done 46 961d 974d 25/29 937d 1997b3cb4217 keys, dns: Fix missing size check of V1 server-list header
WARNING in rate_control_rate_init (2) wireless -1 syz, C done 9 967d 1139d 25/29 937d c1393c132b90 wifi: mac80211: check if the existing link config remains unchanged
general protection fault in dccp_write_xmit (2) net 8 syz, C done 32 969d 1024d 25/29 937d cac23b7d7627 net: Return error from sk_stream_wait_connect() if sk_wait_event() fails
WARNING in ieee80211_rfkill_poll wireless -1 syz, C 684 977d 1010d 25/29 937d 8e2f6f236621 wifi: cfg80211: lock wiphy mutex for rfkill poll
general protection fault in d_path integrity overlayfs 2 syz, C done 210 994d 1136d 25/29 937d 8a924db2d7b5 fs: Pass AT_GETATTR_NOSEC flag to getattr interface function
KASAN: null-ptr-deref Write in unix_stream_bpf_update_proto bpf net 12 syz, C done 54 958d 988d 25/29 937d 8d6650646ce4 bpf: syzkaller found null ptr deref in unix_bpf proto add
memory leak in skb_copy (2) nfc net 3 syz 3 1009d 1126d 25/29 937d 84d2db91f14a nfc: virtual_ncidev: Add variable to check if ndev is running
WARNING in squashfs_read_data squashfs -1 syz, C error 2 1007d 1003d 25/29 937d eb66b8abae98 squashfs: squashfs_read_data need to check if the length is 0
general protection fault in hugetlb_vma_lock_write mm 2 syz, C done 110 980d 1020d 25/29 937d 187da0f8250a hugetlb: fix null-ptr-deref in hugetlb_vma_lock_write
general protection fault in tls_merge_open_record net 2 syz unreliable 5 1019d 1019d 25/29 937d 53f2cb491b50 tls: fix NULL deref on tls_sw_splice_eof() with empty record
WARNING in pagemap_scan_pmd_entry fs -1 syz, C inconclusive 48 981d 1003d 25/29 937d 0dff1b407def mm/pagemap: fix ioctl(PAGEMAP_SCAN) on vma check
WARNING in __alloc_skb (2) ppp -1 syz, C done 2 992d 1006d 25/29 937d c0a2a1b0d631 ppp: limit MRU to 64K
WARNING in nilfs_sufile_set_segment_usage nilfs -1 syz, C inconclusive 341 995d 1414d 25/29 937d 675abf8df135 nilfs2: prevent WARNING in nilfs_sufile_set_segment_usage()
WARNING in unmap_page_range (2) mm -1 syz, C done 2112 977d 1003d 25/29 937d 4980e837cab7 mm/pagemap: fix wr-protect even if PM_SCAN_WP_MATCHING not set
UBSAN: array-index-out-of-bounds in FSE_decompress_wksp_body_bmi2 btrfs 15 1 1084d 1080d 25/29 937d 77618db34645 zstd: Fix array-index-out-of-bounds UBSAN warning
memory leak in btrfs_ref_tree_mod btrfs 3 syz 1 1099d 1095d 25/29 937d f91192cd6859 btrfs: ref-verify: fix memory leaks in btrfs_ref_tree_mod()
general protection fault in autofs_fill_super autofs 2 syz done 7 996d 1005d 25/29 937d 66917f85db60 autofs: add: new_inode check in autofs_fill_super()
general protection fault in __mptcp_set_connected mptcp 2 2 1008d 1012d 25/29 937d d109a7767273 mptcp: fix possible NULL pointer dereference on close
BUG: unable to handle kernel paging request in __pte_offset_map_lock mm 8 syz, C 2 1013d 1023d 25/29 937d 9aa1345d66b8 mm: fix oops when filemap_map_pmd() without prealloc_pte
memory leak in ovl_parse_param overlayfs 3 syz, C 1 1010d 1006d 25/29 937d 37f32f526438 ovl: fix memory leak in ovl_parse_param()
KMSAN: uninit-value in drm_mode_setcrtc dri 7 syz, C 41 978d 1154d 25/29 937d 3823119b9c2b drm/crtc: Fix uninit-value bug in drm_mode_setcrtc 6e455f5dcdd1 drm/crtc: fix uninitialized variable use
WARNING in blk_mq_start_request block -1 syz, C done 29 995d 1011d 25/29 937d 53f2bca26092 block/null_blk: Fix double blk_mq_start_request() warning
KASAN: slab-use-after-free Read in unix_stream_read_actor net 19 syz, C error 6 991d 1007d 25/29 937d 4b7b492615cf af_unix: fix use-after-free in unix_stream_read_actor()
WARNING in create_pending_snapshot btrfs -1 syz, C done 3 1004d 1009d 25/29 937d 8049ba5d0a28 btrfs: do not abort transaction if there is already an existing qgroup
general protection fault in ptp_ioctl net 2 syz, C done 8 1012d 1013d 25/29 937d 8a4f030dbced ptp: Fixes a null pointer dereference in ptp_ioctl
kernel BUG in ip6gre_header (2) net -1 syz, C 2 1036d 1050d 25/29 937d 3cffa2ddc4d3 bonding: stop the device in bond_setup_by_slave()
KMSAN: uninit-value in mptcp_incoming_options mptcp 7 syz, C 93 987d 996d 25/29 937d 237ff253f2d4 mptcp: fix uninit-value in mptcp_incoming_options
WARNING in __kernel_write_iter btrfs -1 syz, C inconclusive 1149 988d 1404d 25/29 937d 0ac1d13a55eb btrfs: send: ensure send_fd is writable
memory leak in btrfs_add_delayed_tree_ref btrfs 3 syz, C 6 1008d 1012d 25/29 937d 609d99379736 btrfs: fix qgroup record leaks when using simple quotas
WARNING in ext4_dio_write_end_io ext4 -1 syz, C done 2 997d 996d 25/29 937d 619f75dae2cf ext4: fix warning in ext4_dio_write_end_io()
KASAN: slab-use-after-free Read in iommufd_vfio_ioas iommu 19 syz, C done 4 998d 1016d 25/29 937d 6f9c4d8c468c iommufd: Do not UAF during iommufd_put_object()
BUG: unable to handle kernel paging request in nsim_bpf net 8 syz, C 3 994d 1009d 25/29 937d c0c6bde586c7 netdevsim: Don't accept device bound programs
WARNING in subflow_data_ready mptcp -1 42 940d 1024d 25/29 937d 4fd19a307016 mptcp: fix inconsistent state on fastopen race
BUG: Dentry still in use in unmount f2fs -1 syz, C done 58 972d 1449d 25/29 937d 413ba91089c7 ovl: fix dentry reference leak after changes to underlying layers
kernel BUG in ipgre_header net -1 syz, C 4 986d 1001d 25/29 937d 3cffa2ddc4d3 bonding: stop the device in bond_setup_by_slave()
KCSAN: data-race in virtnet_poll / virtnet_stats (2) net virt 6 1 1056d 1054d 25/29 942d 61217d8f6360 virtio_net: use u64_stats_t infra to avoid data-races
KASAN: use-after-free Read in j1939_session_get_by_addr 19 syz, C done error 66 2462d 2474d 25/29 945d d966635b384b can: j1939: transport: make sure the aborted session will be deactivated only once
KASAN: stack-out-of-bounds Read in tcp_inbound_hash net 17 syz, C done 28 1006d 1020d 25/29 947d 02f0717e9835 net/tcp: fix possible out-of-bounds reads in tcp_hash_fail()
WARNING in dev_index_reserve (2) net -1 syz, C done 68 1027d 1037d 25/29 947d cbfbfe3aee71 tun: prevent negative ifindex
possible deadlock in super_lock ext4 4 syz, C done done 52 995d 1076d 25/29 948d fd1464105cb3 fs: Avoid grabbing sb->s_umount under bdev->bd_holder_lock
KMSAN: uninit-value in dccp_v6_err net 7 syz, C 4 1062d 1067d 25/29 949d 6af289746a63 dccp: fix dccp_v4_err()/dccp_v6_err() again
KCSAN: data-race in fib_select_path / fib_select_path net 6 1 1045d 1032d 25/29 949d 195374d89368 ipv4: fib: annotate races around nh->nh_saddr_genid and nh->nh_saddr
UBSAN: array-index-out-of-bounds in xtSearch jfs 15 syz, C unreliable done 122 992d 1410d 25/29 949d a779ed754e52 jfs: define xtree root and page independently
UBSAN: array-index-out-of-bounds in txCommit jfs 15 syz, C error done 396 1016d 1397d 25/29 949d a779ed754e52 jfs: define xtree root and page independently
inconsistent lock state in nf_connlabels_put netfilter 4 syz, C done 4 1023d 1024d 25/29 954d 643d12603664 netfilter: conntrack: switch connlabels to atomic_t
KCSAN: data-race in xfrm_sk_policy_insert / xfrm_sk_policy_insert (3) net 6 1 1098d 1071d 25/29 954d 3e4bc23926b8 xfrm: fix a data-race in xfrm_gen_index()
KASAN: use-after-free Read in __media_entity_remove_links usb media 19 syz, C 7 2335d 2433d 25/29 954d 68035c80e129 media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors
KASAN: slab-out-of-bounds Read in ntfs_listxattr ntfs3 17 syz, C done 70 967d 1346d 25/29 966d 8e7e27b2ee1e fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea() 3c675ddffb17 ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
KCSAN: data-race in netlink_recvmsg / netlink_recvmsg (7) net 6 1 1050d 1046d 25/29 966d d0f95894fda7 netlink: annotate data-races around sk->sk_err
general protection fault in scatterwalk_copychunks (4) net crypto 19 syz, C done done 1341 966d 1977d 25/29 966d cfaa80c91f6f net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
WARNING in bpf_mprog_pos_after bpf -1 3 1053d 1061d 25/29 967d f9b0e1088bbf bpf, mprog: Fix maximum program check on mprog attachment
WARNING in page_copy_sane fs mm -1 syz, C done 3 1065d 1061d 25/29 967d a08c7193e4f1 mm/filemap: remove hugetlb special casing in filemap.c
general protection fault in ovl_encode_real_fh overlayfs 2 syz, C done 3 1047d 1047d 25/29 967d c7242a45cb8c ovl: fix NULL pointer defer when encoding non-decodable lower fid
KASAN: slab-use-after-free Read in ptp_poll net 19 1 1011d 1011d 25/29 967d b714ca2ccf6a ptp: ptp_read should not release queue
possible deadlock in __btrfs_release_delayed_node (3) btrfs 4 syz 2 1085d 1082d 25/29 967d e110f8911ddb btrfs: fix lockdep splat and potential deadlock after failure running delayed items
kernel BUG in btrfs_insert_delayed_dir_index btrfs -1 3 1078d 1083d 25/29 967d 8e7f82deb0c0 btrfs: fix race between reading a directory and adding entries to it
KMSAN: uninit-value in smsc95xx_reset usb 7 syz, C 425 1023d 2188d 25/29 967d 51a32e828109 net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg
general protection fault in lbmStartIO jfs 2 syz, C done 2 1034d 1042d 25/29 967d 6306ff39a7fc jfs: fix log->bdev_handle null ptr deref in lbmStartIO
general protection fault in usb_hub_create_port_device kernel 2 syz, C done done 4 1068d 1074d 25/29 967d fd6f7ad2fd4d driver core: return an error when dev_set_name() hasn't happened
KASAN: slab-out-of-bounds Read in create_monitor_event bluetooth 17 syz, C done 952 1026d 1040d 25/29 967d 18f547f3fc07 Bluetooth: hci_sock: fix slab oob read in create_monitor_event
WARNING: zero-size vmalloc in xskq_create net bpf -1 20 1037d 1045d 25/29 967d a12bbb3cccf0 xdp: Fix zero-size allocation warning in xskq_create()
WARNING: zero-size vmalloc in print_tainted bpf net -1 syz, C 79 1160d 1194d 25/29 967d a12bbb3cccf0 xdp: Fix zero-size allocation warning in xskq_create()
BUG: unable to handle kernel NULL pointer dereference in __io_remove_buffers (2) io-uring 10 86 1042d 1047d 25/29 967d f8024f1f36a3 io_uring/kbuf: don't allow registered buffer rings on highmem pages
UBSAN: shift-out-of-bounds in dbAlloc (2) jfs -1 1 1065d 1061d 25/29 967d 525b861a0081 fs/jfs: Add check for negative db_l2nbperpage
kernel BUG in __block_write_begin_int block -1 syz, C done 14 1056d 1075d 25/29 967d 4aa8cdd5e523 iomap: handle error conditions more gracefully in iomap_to_bh
WARNING in ext4_iomap_begin (2) ext4 -1 syz, C done 7 1040d 1154d 25/29 967d ce56d21355cd ext4: fix racy may inline data check in dio write
KASAN: use-after-free Read in bcmp ntfs3 19 syz, C done 289 971d 1129d 25/29 967d 34e6552a442f fs/ntfs3: Fix OOB read in ntfs_init_from_boot
general protection fault in serio_handle_event kernel 2 syz, C done done 6 1063d 1071d 25/29 967d fd6f7ad2fd4d driver core: return an error when dev_set_name() hasn't happened
KMSAN: uninit-value in IP6_ECN_decapsulate net 7 syz, C 981 969d 2885d 25/29 967d 484b4833c604 hsr: Fix uninit-value access in fill_frame_info()
UBSAN: array-index-out-of-bounds in diAlloc jfs 15 syz, C error inconclusive 37 1008d 1417d 25/29 967d 05d9ea1ceb62 jfs: fix array-index-out-of-bounds in diAlloc
KMSAN: uninit-value in __tipc_nl_bearer_enable (2) tipc 7 syz, C 21 1013d 1058d 25/29 967d 19b3f72a41a8 tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
memory leak in kcm_sendmsg (2) net 3 syz, C 1 1080d 1115d 25/29 967d c821a88bd720 kcm: Fix memory leak in error path of kcm_sendmsg()
INFO: task hung in clean_bdev_aliases block 1 syz, C done 201 1049d 1074d 25/29 967d 381c043233e6 iomap: add a workaround for racy i_size updates on block devices
KMSAN: uninit-value in virtio_transport_recv_pkt virt kvm net 7 syz, C 20713 1008d 1022d 25/29 967d 34c4effacfc3 virtio/vsock: Fix uninit-value in virtio_transport_recv_pkt()
WARNING in skb_warn_bad_offload (4) net -1 syz, C done 1763 1030d 1057d 25/29 967d fc8b2a619469 net: more strict VIRTIO_NET_HDR_GSO_UDP_L4 validation
UBSAN: array-index-out-of-bounds in io_setup_async_msg io-uring 15 syz, C done 3 1067d 1066d 25/29 967d c21a8027ad8a io_uring/net: fix iter retargeting for selected buf
linux-next boot error: KASAN: slab-out-of-bounds Write in vhci_setup usb -1 34 1032d 1036d 25/29 967d 17d6b82d2d6d usb/usbip: fix wrong data added to platform device
WARNING in bpf_mprog_attach bpf -1 syz, C 3 1045d 1053d 25/29 967d f9b0e1088bbf bpf, mprog: Fix maximum program check on mprog attachment
WARNING in __ip6_append_data net -1 syz, C unreliable 5 1037d 1066d 25/29 967d 9d4c75800f61 ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
BUG: unable to handle kernel NULL pointer dereference in hdr_find_e (2) ntfs3 10 syz, C done 4 1035d 1107d 25/29 967d 1f9b94af923c fs/ntfs3: Fix possible null-pointer dereference in hdr_find_e()
BUG: corrupted list in ptp_open net 8 syz, C done 7 1013d 1023d 25/29 967d 1bea2c3e6df8 ptp: fix corrupted list in ptp_open b714ca2ccf6a ptp: ptp_read should not release queue
general protection fault in nfc_register_device kernel 11 syz, C done 190 969d 1082d 25/29 967d fd6f7ad2fd4d driver core: return an error when dev_set_name() hasn't happened
possible deadlock in rfkill_send_events wireless 4 syz, C done 22 1029d 1040d 25/29 967d f2ac54ebf856 net: rfkill: reduce data->mtx scope in rfkill_fop_open
general protection fault in wpan_phy_register kernel 2 syz, C done done 7 1060d 1067d 25/29 967d fd6f7ad2fd4d driver core: return an error when dev_set_name() hasn't happened
BUG: Bad page map (7) mm -1 syz, C done 19 1048d 1070d 25/29 967d ce60f27bb62d mm: abstract moving to the next PFN
KMSAN: uninit-value in mii_nway_restart usb 7 syz, C 2449 1037d 2628d 25/29 967d 8f8abb863fa5 net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read
WARNING in bpf_mprog_pos_before bpf -1 syz, C done 26 1045d 1053d 25/29 967d f9b0e1088bbf bpf, mprog: Fix maximum program check on mprog attachment
KCSAN: data-race in xfrmi_xmit / xfrmi_xmit (3) net 6 2 1053d 1077d 25/29 967d f7c4e3e5d4f6 xfrm: interface: use DEV_STATS_INC()
kernel BUG in f2fs_put_super f2fs -1 2 1044d 1074d 25/29 967d a4639380bbe6 f2fs: fix to drop meta_inode's page cache in f2fs_put_super()
general protection fault in io_get_cqe_overflow io-uring 2 syz, C done 2 1049d 1047d 25/29 967d 1658633c0465 io_uring: ensure io_lockdep_assert_cq_locked() handles disabled rings
general protection fault in hci_register_dev kernel 2 syz, C unreliable done 4 1065d 1072d 25/29 967d fd6f7ad2fd4d driver core: return an error when dev_set_name() hasn't happened
WARNING in skb_checksum_help (2) net -1 syz, C done 3816 967d 1057d 25/29 967d fc8b2a619469 net: more strict VIRTIO_NET_HDR_GSO_UDP_L4 validation
divide error in iommufd_test iommu 2 syz, C done 4 1020d 1022d 25/29 967d 2e22aac3ea9c iommufd/selftest: Fix page-size check in iommufd_test_dirty()
KMSAN: uninit-value in tipc_nl_node_reset_link_stats tipc 7 syz, C 2 1049d 1058d 25/29 967d 19b3f72a41a8 tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
WARNING: suspicious RCU usage in gfs2_permission gfs2 4 syz, C done 263 1018d 1039d 25/29 967d 074d7306a4fe gfs2: Silence "suspicious RCU usage in gfs2_permission" warning
BUG: corrupted list in nfc_llcp_register_device net nfc 22 syz, C error 136 1044d 1332d 25/29 967d dfc7f7a988da net: nfc: llcp: Add lock when modifying device list
KASAN: slab-use-after-free Read in pwq_release_workfn kernel 19 syz, C unreliable 79 1030d 1080d 25/29 967d 643445531829 workqueue: Fix UAF report by KASAN in pwq_release_workfn()
UBSAN: array-index-out-of-bounds in dbFindLeaf jfs 15 syz, C error 6 1067d 1381d 25/29 967d 22cad8bc1d36 jfs: fix array-index-out-of-bounds in dbFindLeaf
KMSAN: uninit-value in smsc75xx_bind usb 7 syz, C 63 1065d 2562d 25/29 967d e9c65989920f net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
BUG: sleeping function called from invalid context in __hci_cmd_sync_sk bluetooth 5 syz, C done 34 1037d 1154d 25/29 967d acab8ff29a2a Bluetooth: ISO: Fix invalid context error
general protection fault in bpf_prog_offload_verifier_prep bpf 8 syz, C done 31 1057d 1076d 25/29 967d 1a49f4195d34 bpf: Avoid dummy bpf_offload_netdev in __bpf_prog_dev_bound_init
possible deadlock in btrfs_search_slot (2) btrfs 4 syz, C error 2 1089d 1085d 25/29 967d ee34a82e890a btrfs: release path before inode lookup during the ino lookup ioctl
KASAN: slab-out-of-bounds Read in imon_probe media usb 17 syz 2 1062d 1084d 25/29 967d a1766a4fd83b media: imon: fix access to invalid resource for the second interface
KASAN: slab-use-after-free Write in gfs2_qd_dealloc gfs2 22 syz, C inconclusive 27 997d 1050d 25/29 967d bdcb8aa434c6 gfs2: Fix slab-use-after-free in gfs2_qd_dealloc
memory leak in binder_transaction (2) kernel 3 syz, C 2 1068d 1363d 25/29 967d 1aa3aaf8953c binder: fix memory leaks of spam and pending work
general protection fault in inherit_task_group perf 2 syz, C done done 4 1020d 1018d 25/29 967d a71ef31485bb perf/core: Fix potential NULL deref
KMSAN: uninit-value in smsc95xx_eeprom_confirm_not_busy usb 7 syz, C 521 1023d 1136d 25/29 967d 51a32e828109 net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg
UBSAN: shift-out-of-bounds in nci_activate_target net nfc -1 syz, C done 6 1046d 1230d 25/29 967d 354a6e707e29 nfc: nci: assert requested protocol is valid
KASAN: use-after-free Read in powermate_config_complete (4) input 19 syz done unreliable 14 1071d 1443d 25/29 967d 5c15c60e7be6 Input: powermate - fix use-after-free in powermate_config_complete
UBSAN: shift-out-of-bounds in set_flicker usb media -1 syz 5 1013d 1093d 25/29 967d 099be1822d1f media: gspca: cpia1: shift-out-of-bounds in set_flicker
UBSAN: shift-out-of-bounds in ntfs_fill_super (2) ntfs3 -1 syz, C error 5716 993d 1263d 25/29 967d 91a4b1ee78cb fs/ntfs3: Fix shift-out-of-bounds in ntfs_fill_super
possible deadlock in mnt_want_write (2) integrity overlayfs 4 syz, C done 867 1018d 1886d 25/29 968d e044374a8a0a ima: annotate iint mutex to avoid lockdep false positive warnings
WARNING in inet_csk_get_port (2) net -1 syz, C done 88 1028d 1059d 25/29 968d 8702cf12e6ba tcp: Fix listen() warning with v4-mapped-v6 address.
WARNING in ieee80211_get_ringparam wireless -1 syz, C done 151 1054d 1060d 25/29 968d 6b348f6e34ce wifi: mac80211: ethtool: always hold wiphy mutex
KASAN: slab-use-after-free Read in ntfs_write_bh ntfs3 19 syz, C done 100 1044d 1068d 25/29 968d 493c71926c20 ntfs3: put resources during ntfs_fill_super()
KCSAN: data-race in udp_lib_setsockopt / udp_lib_setsockopt net 6 2 1088d 1074d 25/29 968d 882af43a0fc3 udplite: fix various data-races
KASAN: use-after-free Read in ntfs_test_inode ntfs3 19 syz, C done 402 981d 1915d 25/29 968d 493c71926c20 ntfs3: put resources during ntfs_fill_super()
UBSAN: array-index-out-of-bounds in dbNextAG jfs 15 syz, C inconclusive inconclusive 52 991d 1418d 25/29 968d 64933ab7b048 fs/jfs: Add validity check for db_maxag and db_agpref
KMSAN: uninit-value in fq_change net 7 syz, C 8 1009d 1011d 25/29 968d f1a3b283f852 UPSTREAM: net_sched: sch_fq: better validate TCA_FQ_WEIGHTS and TCA_FQ_PRIOMAP
possible deadlock in ieee80211_change_mac wireless 4 1 1041d 1037d 25/29 968d 74a7c93f45ab wifi: mac80211: fix change_address deadlock during unregister
KCSAN: data-race in br_handle_frame_finish / br_handle_frame_finish (8) bridge 6 1 1062d 1061d 25/29 968d 44bdb313da57 net: bridge: use DEV_STATS_INC()
KCSAN: data-race in xfrm_lookup_with_ifid / xfrm_lookup_with_ifid (7) net 6 1 1045d 1045d 25/29 968d de5724ca38fd xfrm: fix a data-race in xfrm_lookup_with_ifid()
KMSAN: uninit-value in llc_station_rcv net 7 syz, C 2 1023d 1032d 25/29 968d 7b3ba18703a6 llc: verify mac len before reading mac header
KASAN: invalid-free in ovl_copy_up_one overlayfs 24 syz, C done 2 1057d 1054d 25/29 968d 5b02bfc1e7e3 ovl: do not encode lower fh with upper sb_writers held
WARNING in try_grab_page xfs mm -1 syz, C 48 1052d 1138d 23/29 1037d f443fd5af5db crypto, cifs: fix error handling in extract_iter_to_sg()
kernel BUG in add_new_free_space btrfs -1 syz, C 3 1142d 1210d 23/29 1037d d8ccbd21918f btrfs: remove BUG_ON()'s in add_new_free_space()
KCSAN: data-race in sctp_poll / sctp_wfree (3) sctp 6 1 1083d 1082d 23/29 1037d dc9511dd6f37 sctp: annotate data-races around sk->sk_wmem_queued
INFO: rcu detected stall in sys_close (5) net 1 syz, C done 1 1081d 1081d 23/29 1037d 8c21ab1bae94 net/sched: fq_pie: avoid stalls in fq_pie_timer()
general protection fault in io_sqpoll_wq_cpu_affinity io-uring 2 33 1071d 1082d 23/29 1037d bd6fc5da4c51 io_uring: Don't set affinity on a dying sqpoll thread
possible deadlock in shmem_uncharge (2) mm 4 syz, C done 29 1125d 1123d 23/29 1037d 509f006932de shmem: fix quota lock nesting in huge hole handling
WARNING in unregister_vlan_dev net -1 syz, C done 1310 1090d 1099d 23/29 1037d ace0ab3a4b54 Revert "vlan: Fix VLAN 0 memory leak"
general protection fault in __drop_extent_tree f2fs 2 syz, C error 3 1182d 1221d 23/29 1037d 458c15dfbce6 f2fs: don't reset unchangable mount option in f2fs_remount()
KCSAN: data-race in ____sys_sendmsg / do_ipv6_setsockopt net 6 1 1160d 1143d 23/29 1037d 1ded5e5a5931 net: annotate data-races around sock->ops
general protection fault in io_uring_show_fdinfo io-uring 2 syz, C done 17 1069d 1078d 23/29 1037d 32f5dea040ee io_uring/fdinfo: only print ->sq_array[] if it's there
KCSAN: data-race in random_recv_done / virtio_read (3) crypto 6 13 1147d 1211d 23/29 1037d ac52578d6e8d hwrng: virtio - Fix race on data_avail and actual data
KCSAN: data-race in netlink_setsockopt / netlink_setsockopt net 6 1 1100d 1100d 23/29 1037d 8fe08d70a2b6 netlink: convert nlk->flags to atomic flags
KASAN: slab-out-of-bounds Read in read_descriptors (3) usb 17 syz, C error 7 1124d 1151d 23/29 1037d ff33299ec8bb USB: core: Fix race by not overwriting udev->descriptor in hub_port_init()
WARNING in do_chunk_alloc btrfs -1 syz, C error done 35 1144d 1360d 23/29 1037d cd361199ff23 btrfs: wait on uncached block groups on every allocation loop
general protection fault in generic_hwtstamp_ioctl_lower net 2 syz, C done 7 1104d 1106d 23/29 1037d c35e927cbe09 net: omit ndo_hwtstamp_get() call when possible in dev_set_hwtstamp_phylib()
KASAN: use-after-free Read in raw_release can 19 1 1109d 1109d 23/29 1037d 11c9027c983e can: raw: fix lockdep issue in raw_release()
INFO: rcu detected stall in unix_release net 1 syz, C done 1 1101d 1097d 23/29 1037d da71714e359b net/sched: fix a qdisc modification with ambiguous command request
UBSAN: array-index-out-of-bounds in f2fs_iget f2fs 15 syz, C done 6 1077d 1121d 23/29 1037d 958ccbbf1ce7 Revert "f2fs: fix to do sanity check on extent cache correctly"
WARNING in init_module_from_file modules -1 syz, C 98 1130d 1138d 23/29 1037d f1962207150c module: fix init_module_from_file() error handling
WARNING: refcount bug in xp_put_pool bpf net 13 syz, C done 2 1112d 1110d 23/29 1037d 85c2c79a0730 xsk: fix refcount underflow in error path
WARNING in ip6_tnl_exit_batch_net net -1 syz, C done 29 1092d 1099d 23/29 1037d ace0ab3a4b54 Revert "vlan: Fix VLAN 0 memory leak"
KASAN: invalid-free in dbUnmount jfs 24 syz error 119 1054d 1313d 23/29 1037d cade5397e546 fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount()
KASAN: stack-out-of-bounds Write in __nla_validate_parse net 21 syz, C done 4 1105d 1119d 23/29 1037d 4d50e50045aa net: flower: fix stack-out-of-bounds in fl_set_key_cfm()
KMSAN: uninit-value in af_alg_free_resources crypto 7 syz, C 156 1090d 1127d 23/29 1037d 080aa61e370b crypto: fix uninit-value in af_alg_free_resources
general protection fault in sco_conn_add bluetooth 2 syz, C done 4 1123d 1132d 23/29 1037d b4066eb04bb6 Bluetooth: hci_conn: return ERR_PTR instead of NULL when there is no link
net-next test error: UBSAN: array-index-out-of-bounds in alloc_pid kernel -1 30 1136d 1138d 23/29 1037d b69f0aeb0689 pid: Replace struct pid 1-element array with flex-array
KASAN: null-ptr-deref Read in txBegin jfs 11 syz, C error 30 1138d 1273d 23/29 1037d 47cfdc338d67 FS: JFS: Fix null-ptr-deref Read in txBegin
WARNING in ntfs_load_attr_list ntfs3 -1 syz, C 4 1202d 1320d 23/29 1037d ea303f72d70c fs/ntfs3: Use __GFP_NOWARN allocation at ntfs_load_attr_list()
WARNING in iommufd_access_destroy iommu -1 syz, C done 3 1126d 1127d 23/29 1037d 99f98a7c0d69 iommufd: IOMMUFD_DESTROY should not increase the refcount
BUG: unable to handle kernel paging request in handshake_nl_done_doit tls 8 syz, C 2 1083d 1083d 23/29 1037d 82ba0ff7bf04 net/handshake: fix null-ptr-deref in handshake_nl_done_doit()
WARNING: bad unlock balance in sockopt_release_sock net 4 syz, C done 2 1085d 1085d 23/29 1037d 8be6f88b9d3f inet: fix IP_TRANSPARENT error handling
KASAN: slab-use-after-free Read in xsk_diag_dump net bpf 19 syz, C done 9 1072d 1081d 23/29 1037d 3e019d8a05a3 xsk: Fix xsk_diag use-after-free error during socket cleanup
linux-next test error: UBSAN: array-index-out-of-bounds in alloc_pid kernel -1 9 1185d 1185d 23/29 1037d b69f0aeb0689 pid: Replace struct pid 1-element array with flex-array
KMSAN: uninit-value in alauda_check_media usb usb-storage 7 syz, C 1059 1119d 2503d 23/29 1037d a6ff6e7a9dd6 usb-storage: alauda: Fix uninit-value in alauda_check_media()
INFO: rcu detected stall in tipc_sendmsg (2) tipc 1 1 1106d 1106d 23/29 1037d 8c21ab1bae94 net/sched: fq_pie: avoid stalls in fq_pie_timer()
UBSAN: array-index-out-of-bounds in xfs_attr3_leaf_add_work xfs 15 syz, C error done 1923 1114d 1154d 23/29 1037d a49bbce58ea9 xfs: convert flex-array declarations in xfs attr leaf blocks
UBSAN: array-index-out-of-bounds in bpf_mprog_detach bpf 15 3 1106d 1112d 23/29 1037d d210f9735e13 bpf: Fix mprog detachment for empty mprog entry
KASAN: slab-use-after-free Read in input_dev_uevent input 19 syz, C done 7 1078d 1089d 23/29 1037d dd613a4e45f8 HID: uclogic: Correct devm device reference for hidinput input_dev name
BUG: unable to handle kernel paging request in ovs_vport_add openvswitch 8 syz, C done 2 1100d 1099d 23/29 1037d a552bfa16bab net: openvswitch: reject negative ifindex
KASAN: slab-use-after-free Read in nilfs_load_inode_block (2) nilfs 19 syz, C done 4 1104d 1119d 23/29 1037d f8654743a0e6 nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
KCSAN: data-race in bpf_percpu_array_update / bpf_percpu_array_update (2) bpf 6 1 1082d 1081d 23/29 1037d 6a86b5b5cd76 bpf: Annotate bpf_long_memcpy with data_race
memory leak in autofs_wait autofs 3 syz, C 4 1171d 1542d 23/29 1037d ccbe77f7e45d autofs: fix memory leak of waitqueues in autofs_catatonic_mode
KCSAN: data-race in dccp_connect / dccp_sendmsg (3) net 6 1 1107d 1107d 23/29 1037d a47e598fbd86 dccp: fix data-race around dp->dccps_mss_cache
general protection fault in f2fs_drop_extent_tree f2fs 2 syz, C error done 1 1147d 1143d 23/29 1037d 458c15dfbce6 f2fs: don't reset unchangable mount option in f2fs_remount()
KCSAN: data-race in __ip4_datagram_connect / __ip_make_skb (5) net 6 3 1115d 1143d 23/29 1037d f866fbc842de ipv4: fix data-races around inet->inet_id
WARNING in mark_buffer_dirty (5) nilfs -1 syz, C done 172 1040d 1159d 23/29 1037d cdaac8e7e5a0 nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse
KMSAN: uninit-value in udf_name_from_CS0 udf 7 1 1150d 1150d 23/29 1037d 028f6055c912 udf: Fix uninitialized array access for some pathnames
INFO: rcu detected stall in statfs fs 1 1 1097d 1097d 23/29 1037d 8c21ab1bae94 net/sched: fq_pie: avoid stalls in fq_pie_timer()
WARNING in ieee80211_probe_client wireless -1 syz, C done error 124 1069d 2138d 23/29 1037d 67dfa589aa88 wifi: mac80211: check for station first in client probe
general protection fault in skb_segment (3) net 2 syz, C done 2 1097d 1097d 23/29 1037d b616be6b9768 net: do not allow gso_size to be set to GSO_BY_FRAGS
INFO: rcu detected stall in bond_3ad_state_machine_handler net 1 1 1114d 1114d 23/29 1037d 8c21ab1bae94 net/sched: fq_pie: avoid stalls in fq_pie_timer()
BUG: soft lockup in fq_pie_timer (4) net 1 syz 5 1067d 1118d 23/29 1037d 8c21ab1bae94 net/sched: fq_pie: avoid stalls in fq_pie_timer()
UBSAN: array-index-out-of-bounds in dbAllocDmapLev jfs 15 syz, C error 2 1157d 1330d 23/29 1037d 4e302336d5ca fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
INFO: rcu detected stall in nsim_dev_trap_report_work net 1 syz 4 1073d 1116d 23/29 1037d 8c21ab1bae94 net/sched: fq_pie: avoid stalls in fq_pie_timer()
WARNING in rtnl_dellink (3) net -1 syz, C done 492 1089d 1099d 23/29 1037d ace0ab3a4b54 Revert "vlan: Fix VLAN 0 memory leak"
INFO: rcu detected stall in shmem_fault (5) cgroups mm 1 3 1093d 1113d 23/29 1037d 8c21ab1bae94 net/sched: fq_pie: avoid stalls in fq_pie_timer()
KASAN: slab-use-after-free Read in team_device_event net 19 syz, C done 2 1073d 1072d 23/29 1037d 6afcf0fb9270 Revert "net: team: do not use dynamic lockdep key"
general protection fault in ext4_finish_bio ext4 2 syz, C done 1 1142d 1138d 23/29 1037d 0b7ec177b589 crypto: algif_hash - Fix race between MORE and non-MORE sends
WARNING in sta_info_insert_rcu (3) wireless -1 syz, C done 6 1085d 1126d 23/29 1037d 5d4e04bf3a0f wifi: cfg80211: reject auth/assoc to AP with our address
KCSAN: data-race in fib_release_info / fib_table_lookup net 6 1 1082d 1082d 23/29 1037d fce92af1c29d ipv4: annotate data-races around fi->fib_dead
KASAN: slab-use-after-free Read in fuse_test_super fuse 19 syz, C done 6 1081d 1084d 23/29 1037d dc3216b14160 super: ensure valid info
KASAN: slab-use-after-free Read in iopt_unmap_iova_range iommu 19 syz, C error 7 1144d 1155d 23/29 1037d 804ca14d04df iommufd: Do not access the area pointer after unlocking
possible deadlock in inode_add_bytes fs 4 syz, C done 124 1124d 1123d 23/29 1037d 509f006932de shmem: fix quota lock nesting in huge hole handling
general protection fault in ingress_destroy net 19 10 1117d 1121d 23/29 1037d 079082c60aff tcx: Fix splat during dev unregister
KCSAN: data-race in tcp_make_synack / tcp_rtx_synack net 6 1 1128d 1127d 23/29 1037d 5e5265522a9a tcp: annotate data-races around tcp_rsk(req)->txhash
KASAN: slab-out-of-bounds Read in xlog_pack_data xfs 17 syz, C error done 4 1157d 1154d 23/29 1037d f1e1765aad7d xfs: journal geometry is not properly bounds checked
WARNING in tcx_uninstall net bpf -1 syz, C done 7 1111d 1115d 23/29 1037d 079082c60aff tcx: Fix splat during dev unregister
INFO: task hung in pipe_release (4) fs 1 syz, C done 51 1129d 1129d 23/29 1037d 0f71c9caf267 udp: Fix __ip_append_data()'s handling of MSG_SPLICE_PAGES
possible deadlock in do_user_addr_fault exfat 4 syz, C unreliable done 39 1144d 1235d 23/29 1037d ff84772fd45d exfat: release s_lock before calling dir_emit()
KCSAN: data-race in tcp_check_req / tcp_check_req net 6 2 1145d 1143d 23/29 1037d eba20811f326 tcp: annotate data-races around tcp_rsk(req)->ts_recent
general protection fault in sys_finit_module modules 21 syz, C error done 84 1136d 1137d 23/29 1037d f1962207150c module: fix init_module_from_file() error handling
KASAN: slab-out-of-bounds Read in do_csum net 19 syz, C 160 1041d 1082d 23/29 1037d 8bd795fedb84 arm64: csum: Fix OoB access in IP checksum code for negative lengths
kernel BUG in btrfs_ioctl btrfs -1 syz, C error 1 1153d 1149d 23/29 1037d b19c98f237cd btrfs: fix race between balance and cancel/pause
KCSAN: data-race in iptunnel_xmit / iptunnel_xmit (5) net 6 1 1074d 1074d 23/29 1037d 9b271ebaf9a2 ip_tunnels: use DEV_STATS_INC()
KMSAN: uninit-value in hwsim_cloned_frame_received_nl wireless 7 syz, C 8315 1081d 2150d 23/29 1037d fba360a047d5 wifi: mac80211_hwsim: drop short frames
WARNING in dev_index_reserve bridge -1 syz, C done 7120 1039d 1094d 23/29 1037d f534f6581ec0 net: validate veth and vxcan peer ifindexes 30188bd7838c rtnetlink: Reject negative ifindexes in RTM_NEWLINK
memory leak in raw_open usb 3 syz, C 1 1132d 1128d 23/29 1037d 83e30f2bf86e USB: gadget: Fix the memory leak in raw_gadget driver
possible deadlock in lock_mm_and_find_vma exfat 4 syz, C error 2 1108d 1128d 23/29 1037d ff84772fd45d exfat: release s_lock before calling dir_emit()
possible deadlock in raw_bind can 4 4535 1110d 1122d 23/29 1037d 11c9027c983e can: raw: fix lockdep issue in raw_release()
KCSAN: data-race in __ip_make_skb / __ip_make_skb net 6 624 1085d 1655d 23/29 1037d f866fbc842de ipv4: fix data-races around inet->inet_id
WARNING in netdev_open staging -1 1 1115d 1111d 23/29 1037d 1422b526fba9 staging: rtl8712: fix race condition
KASAN: use-after-free Read in gsm_cleanup_mux serial 19 syz, C done done 16 1103d 1382d 23/29 1037d 3c4f8333b582 tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
inconsistent lock state in btrfs_run_delayed_iputs btrfs 4 1 1140d 1136d 23/29 1037d 866e98a4d95d btrfs: use irq safe locking when running and adding delayed iputs
UBSAN: shift-out-of-bounds in ext2_fill_super (2) ext4 -1 syz, C 571 1115d 1159d 23/29 1037d 404615d7f1dc ext2: Drop fragment support
WARNING in bpf_xdp_adjust_tail (4) bpf -1 syz, C error 466 1103d 1313d 23/29 1037d d14eea09edf4 net: core: remove unnecessary frame_sz check in bpf_xdp_adjust_tail()
KMSAN: uninit-value in ieee802154_subif_start_xmit bpf 8 syz, C done 119 1108d 1104d 23/29 1037d db2baf82b098 bpf: Fix an incorrect verification success with movsx insn
WARNING: ODEBUG bug in ingress_destroy net -1 syz, C done 16 1118d 1121d 23/29 1037d dc644b540a2d tcx: Fix splat in ingress_destroy upon tcx_entry_free
WARNING in ext4_file_write_iter ext4 -1 syz, C error 17314 1055d 1154d 23/29 1037d 194505b55dd7 ext4: drop dio overwrite only flag and associated warning
KASAN: slab-out-of-bounds Read in mt_validate_nulls mm 17 syz, C error done 15 1137d 1136d 23/29 1037d ae80b4041984 mm: validate the mm before dropping the mmap lock
general protection fault in rxe_completer rdma 2 281 1071d 1152d 23/29 1037d 5993b75d0bc7 RDMA/rxe: Fix unsafe drain work queue code
general protection fault in prepare_to_wait (2) hams 8 syz inconclusive 4 1054d 1092d 23/29 1037d c2f8fd794960 netrom: Deny concurrent connect().
kernel BUG in validate_mm (2) mm -1 syz, C unreliable done 217 1137d 1136d 23/29 1037d ae80b4041984 mm: validate the mm before dropping the mmap lock
KASAN: invalid-free in init_file overlayfs 24 syz, C done 6 1139d 1140d 23/29 1037d dff745c1221a fs: move cleanup from init_file() into its callers
kernel BUG in prepare_to_merge btrfs -1 syz, C done 48 1100d 1140d 23/29 1037d 773e722a98e2 btrfs: avoid race between qgroup tree creation and relocation 05d7ce504545 btrfs: exit gracefully if reloc roots don't match 6ebcd021c92b btrfs: reject invalid reloc tree root keys with stack dump
KASAN: slab-out-of-bounds Read in bio_split_rw block 17 syz, C done 1 1142d 1138d 23/29 1037d 0b7ec177b589 crypto: algif_hash - Fix race between MORE and non-MORE sends
WARNING: ODEBUG bug in tcx_uninstall bpf net -1 syz, C done 38 1117d 1121d 23/29 1037d dc644b540a2d tcx: Fix splat in ingress_destroy upon tcx_entry_free
INFO: rcu detected stall in ext4_file_write_iter (7) mm bpf ext4 1 3 1079d 1121d 23/29 1037d 8c21ab1bae94 net/sched: fq_pie: avoid stalls in fq_pie_timer()
BUG: MAX_LOCKDEP_CHAIN_HLOCKS too low! (2) kernel -1 syz, C 2688 1038d 1994d 23/29 1037d 39285e124edb net: team: do not use dynamic lockdep key
KMSAN: uninit-value in ieee80211_rx_handlers wireless 7 syz, C 8 1082d 1138d 23/29 1037d 19e4a47ee747 wifi: mac80211: check S1G action frame size
WARNING in call_netdevice_notifiers_info batman -1 syz, C done 20 1087d 1089d 23/29 1037d 987aae75fc10 batman-adv: Hold rtnl lock during MTU update via netlink
KASAN: slab-use-after-free Read in test_bdev_super_fc fs 19 syz, C done 7 1104d 1107d 23/29 1037d aca740cecbe5 fs: open block device after superblock creation
KASAN: slab-use-after-free Read in afs_dynroot_test_super afs 19 syz, C done 4 1081d 1077d 23/29 1037d dc3216b14160 super: ensure valid info
general protection fault in folio_create_empty_buffers nilfs 2 syz, C error 6 1106d 1181d 23/29 1037d f83913f8c5b8 nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers()
WARNING in corrupted (3) usb -1 syz, C done 19 1132d 1180d 23/29 1037d 6f489a966fbe media: usb: siano: Fix warning due to null work_func_t function pointer
KCSAN: data-race in macsec_handle_frame / macsec_handle_frame (3) net 6 2 1106d 1108d 23/29 1037d 32d0a49d36a2 macsec: use DEV_STATS_INC()
general protection fault in gfs2_lookup_simple gfs2 2 syz, C done 3 1108d 1105d 23/29 1037d 111c7d27a1b7 gfs2: Use mapping->gfp_mask for metadata inodes
KASAN: slab-use-after-free Write in sco_chan_del bluetooth 22 syz, C done 19 1053d 1187d 23/29 1037d 3344d318337d Bluetooth: hci_conn: fail SCO/ISO via hci_conn_failed if ACL gone early
WARNING in usbnet_start_xmit/usb_submit_urb usb -1 syz, C done 92 1151d 1733d 23/29 1037d 5e1627cb43dd net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
WARNING in ieee80211_bss_info_change_notify wireless -1 syz, C done 7725 1037d 2142d 23/29 1037d abc76cf552e1 wifi: cfg80211: ocb: don't leave if not joined
UBSAN: shift-out-of-bounds in dbFree jfs -1 syz, C error 3 1177d 1243d 23/29 1037d 11509910c599 jfs: jfs_dmap: Validate db_l2nbperpage while mounting
UBSAN: array-index-out-of-bounds in print_bpf_insn bpf 15 syz, C done 9 1109d 1110d 23/29 1037d e99688eba2e9 bpf: Fix an array-index-out-of-bounds issue in disasm.c
WARNING in macvlan_device_event net -1 3 1093d 1095d 23/29 1037d ace0ab3a4b54 Revert "vlan: Fix VLAN 0 memory leak"
general protection fault in ext4_acquire_dquot ext4 8 syz, C 4 1151d 1190d 23/29 1037d 6a4e3363792e quota: Properly disable quotas when add_dquot_ref() fails
BUG: unable to handle kernel paging request in ext4_calculate_overhead ext4 8 syz, C done 31 1083d 1085d 23/29 1037d ee5c807137ce ext4: ext4_get_{dev}_journal return proper error value
KASAN: slab-use-after-free Read in f2fs_truncate_data_blocks_range f2fs 19 syz, C error 1 1150d 1146d 23/29 1037d a6ec83786ab9 f2fs: fix to do sanity check on direct node in truncate_dnode()
WARNING in diUnmount jfs -1 syz, C error 100 1064d 1357d 23/29 1037d 6e2bda2c192d jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount
WARNING in vlan_device_event net -1 1 1095d 1095d 23/29 1037d ace0ab3a4b54 Revert "vlan: Fix VLAN 0 memory leak"
KMSAN: uninit-value in __netif_receive_skb_core wireguard wireless 19 syz, C done 353 1077d 3046d 23/29 1037d dc644b540a2d tcx: Fix splat in ingress_destroy upon tcx_entry_free
memory leak in snd_seq_create_port sound 3 syz, C 1 1129d 1125d 23/29 1037d 057849ccc3d8 ALSA: seq: Fix memory leak at error path in snd_seq_create_port()
INFO: rcu detected stall in uinput_write input 1 1 1117d 1117d 23/29 1037d 8c21ab1bae94 net/sched: fq_pie: avoid stalls in fq_pie_timer()
possible deadlock in f2fs_getxattr f2fs 4 syz, C done 4570 1054d 1134d 23/29 1037d 5c13e2388bf3 f2fs: avoid false alarm of circular locking
general protection fault in btrfs_finish_ordered_extent btrfs 2 syz, C done 8 1127d 1128d 23/29 1037d 7cad645ebf20 btrfs: fix ordered extent split error handling in btrfs_dio_submit_io
memory leak in _r8712_init_xmit_priv staging usb 3 syz, C 1 1133d 1129d 23/29 1037d ac83631230f7 staging: r8712: Fix memory leak in _r8712_init_xmit_priv()
kernel BUG in f2fs_evict_inode f2fs -1 syz, C error 135 1052d 1331d 23/29 1037d a3ab55746612 f2fs: flush inode if atomic file is aborted
INFO: rcu detected stall in hci_cmd_timeout bluetooth 1 1 1100d 1100d 23/29 1037d 8c21ab1bae94 net/sched: fq_pie: avoid stalls in fq_pie_timer()
KASAN: use-after-free Read in qd_unlock (2) gfs2 19 syz, C error done 5 1091d 1320d 23/29 1037d f66af88e3321 gfs2: Stop using gfs2_make_fs_ro for withdraw
WARNING in kvm_arch_vcpu_ioctl_run (5) kvm-x86 -1 syz, C error 343 1071d 1159d 23/29 1037d 26a0652cb453 KVM: x86: Disallow KVM_SET_SREGS{2} if incoming CR0 is invalid
UBSAN: shift-out-of-bounds in extAlloc jfs -1 syz, C error 6605 1058d 1418d 23/29 1037d 0225e10972fa jfs: validate max amount of blocks before allocation.
WARNING in __gup_longterm_locked mm -1 syz, C error 90 1136d 1137d 23/29 1037d 6cd06ab12d1a gup: make the stack expansion warning a bit more targeted
KASAN: slab-use-after-free Write in mini_qdisc_pair_swap net 22 syz, C error 76 1086d 1240d 23/29 1050d 84ad0af0bccd net/sched: qdisc_destroy() old ingress and clsact Qdiscs before grafting c7cfbd115001 net/sched: sch_ingress: Only create under TC_H_INGRESS
KASAN: slab-out-of-bounds Read in extract_iter_to_sg crypto 17 syz, C done 13 1154d 1159d 23/29 1050d 4380499218c6 crypto: Fix af_alg_sendmsg(MSG_SPLICE_PAGES) sglist limit b6d972f68983 crypto: af_alg/hash: Fix recvmsg() after sendmsg(MSG_MORE)
upstream build error (20) kernel -1 498 1100d 1139d 23/29 1051d 0a9567ac5e6a x86/mem_encrypt: Unbreak the AMD_MEM_ENCRYPT=n build
memory leak in htc_connect_service wireless 3 syz, C 1 1186d 1267d 23/29 1051d 061b0cb9327b wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes
general protection fault in shash_async_final crypto 2 syz, C done 13 1151d 1159d 23/29 1051d b6d972f68983 crypto: af_alg/hash: Fix recvmsg() after sendmsg(MSG_MORE)
WARNING in blkdev_put (3) block -1 syz, C done 377 1150d 1154d 23/29 1051d c576c4bf9ecf reiserfs: fix blkdev_put() warning from release_journal_dev()
WARNING in iommufd_test_check_pages iommu -1 syz, C error 4 1150d 1201d 23/29 1051d 9883c7f84053 mm/gup: do not return 0 from pin_user_pages_fast() for bad args
possible deadlock in static_key_slow_inc (3) cgroups 4 syz, C done 6387 1115d 1163d 23/29 1051d f0cc749254d1 cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex in freezer_css_{online,offline}()
KCSAN: data-race in drain_all_stock / drain_obj_stock (4) cgroups mm 6 3 1195d 1211d 23/29 1051d 3b8abb323953 mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required()
WARNING in sock_i_ino net -1 syz, C error 22 1144d 1148d 23/29 1051d 25a9c8a4431c netlink: Add __sock_i_ino() for __netlink_diag_dump().
INFO: trying to register non-static key in skb_dequeue (2) rdma -1 syz error 123 1155d 1199d 23/29 1051d 2a62b6210ce8 RDMA/rxe: Fix the use-before-initialization error of resp_pkts
KMSAN: kernel-infoleak in __skb_datagram_iter net 9 68 1053d 1158d 23/29 1051d aa5406950726 netlink: do not hard code device address lenth in fdb dumps
WARNING: ODEBUG bug in __mod_timer kernel -1 1 1211d 1173d 23/29 1051d 8b64d420fe24 debugobjects: Recheck debug_objects_enabled before reporting
kernel BUG in assertfail (2) btrfs -1 syz, C done done 162 1156d 1418d 23/29 1051d 745806fb4554 btrfs: do not ASSERT() on duplicated global roots
general protection fault in crypto_shash_final crypto 2 syz, C done 2 1162d 1159d 23/29 1051d b6d972f68983 crypto: af_alg/hash: Fix recvmsg() after sendmsg(MSG_MORE)
KCSAN: data-race in __bpf_lru_list_rotate / __htab_lru_percpu_map_update_elem (5) bpf 6 13 1145d 1207d 23/29 1051d ee9fd0ac3017 bpf: Address KCSAN report on bpf_lru_list
KMSAN: uninit-value in reiserfs_security_init fs 7 4169 1131d 1192d 23/29 1051d d031f4e8b493 reiserfs: Initialize sec->length in reiserfs_security_init().
WARNING in extract_iter_to_sg crypto -1 1 1136d 1136d 23/29 1051d 3fc40265ae2b iov_iter: Kill ITER_PIPE
general protection fault in shash_async_update crypto 2 syz, C done done 12 1151d 1148d 23/29 1051d b6d972f68983 crypto: af_alg/hash: Fix recvmsg() after sendmsg(MSG_MORE)
KASAN: stack-out-of-bounds Read in ip6mr_ioctl net 21 syz, C done 192 1149d 1155d 23/29 1051d 3a4f0edbb793 ipv6: fix a typo in ip6mr_sk_ioctl()
WARNING in btf_type_id_size (2) bpf -1 syz, C error 8 1147d 1178d 23/29 1051d e6c2f594ed96 bpf: Silence a warning in btf_type_id_size()
WARNING: bad unlock balance in bpf bpf 4 syz, C done 12 1176d 1176d 23/29 1051d 4266f41feaee bpf: Fix bad unlock balance on freeze_mutex
general protection fault in shash_ahash_update crypto 2 syz, C done done 5 1152d 1152d 23/29 1051d b6d972f68983 crypto: af_alg/hash: Fix recvmsg() after sendmsg(MSG_MORE)
WARNING in blkdev_get_by_dev block -1 syz, C done 45 1150d 1154d 23/29 1051d 985958b8584c block: fix wrong mode for blkdev_get_by_dev() from disk_scan_partitions()
BUG: sleeping function called from invalid context in ext4_update_super ext4 5 1 1165d 1161d 23/29 1051d f451fd97dd2b ext4: drop the call to ext4_error() from ext4_get_group_info()
BUG: sleeping function called from invalid context in __lock_sock_fast net 5 2 1149d 1148d 23/29 1051d 57fc0f1ceaa4 mptcp: ensure listener is unhashed before updating the sk status
inconsistent lock state in lru_gen_rotate_memcg mm 4 syz, C 61 1141d 1152d 23/29 1051d 814bc1de03ea mm/mglru: make memcg_lru->lock irq safe
INFO: trying to register non-static key in skb_queue_tail wireless -1 syz, C unreliable done 171 1141d 2244d 23/29 1051d 061b0cb9327b wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes
kernel BUG in ip6gre_header net -1 syz, C 5 1087d 1157d 23/29 1051d 9eed321cde22 net: lapbether: only support ethernet devices
WARNING in unreserve_psock net -1 syz, C done 2816 1150d 1158d 23/29 1051d 9f8d0dc0ec4a kcm: Fix unnecessary psock unreservation.
WARNING in btrfs_split_ordered_extent btrfs -1 syz, C done 5 1159d 1180d 23/29 1051d 7833b865953c btrfs: fix iomap_begin length for nocow writes
general protection fault in splice_to_socket fs 2 syz, C done 4 1156d 1159d 23/29 1051d ca2d49f77ce4 splice, net: Fix splice_to_socket() to handle pipe bufs larger than a page
KASAN: null-ptr-deref Write in get_block (2) fs 12 syz, C error 11 1146d 1180d 23/29 1051d ea2b62f30589 fs/sysv: Null check to prevent null-ptr-deref bug
WARNING: refcount bug in fib6_nh_init net 13 syz, C done 45 1150d 1156d 23/29 1051d 3515440df461 ipv6: also use netdev_hold() in ip6_route_check_nh()
WARNING in nilfs_btree_assign nilfs -1 syz, C error 799 1115d 1419d 23/29 1051d 679bd7ebdd31 nilfs2: fix buffer corruption due to concurrent device reads
linux-next test error: WARNING in register_net_sysctl net -1 9 1186d 1186d 23/29 1051d e7480a44d7c4 Revert "net: Remove low_thresh in ip defrag"
general protection fault in shash_async_export crypto 2 syz, C done 25 1153d 1159d 23/29 1051d b6d972f68983 crypto: af_alg/hash: Fix recvmsg() after sendmsg(MSG_MORE)
KMSAN: uninit-value in ath9k_wmi_ctrl_rx wireless 7 syz, C 45 1135d 1257d 23/29 1051d f24292e82708 wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx
net-next test error: WARNING in register_net_sysctl net -1 21 1185d 1186d 23/29 1051d e7480a44d7c4 Revert "net: Remove low_thresh in ip defrag"
general protection fault in nilfs_clear_dirty_page nilfs 2 syz, C done 15 1158d 1392d 23/29 1051d 782e53d0c144 nilfs2: prevent general protection fault in nilfs_clear_dirty_page()
INFO: task hung in btrfs_sync_file (2) btrfs 1 syz, C error 5 1174d 1170d 23/29 1051d 745806fb4554 btrfs: do not ASSERT() on duplicated global roots
KASAN: stack-out-of-bounds Read in skb_splice_from_iter net 17 syz, C done 64 1151d 1159d 23/29 1051d 5a6f6873606e ip, ip6: Fix splice to raw and ping sockets
KCSAN: data-race in do_timer_create / do_timer_create (8) kernel 6 9 1180d 1211d 23/29 1051d 8ce8849dd1e7 posix-timers: Ensure timer ID search-loop limit is valid
possible deadlock in netlink_set_err net 4 1 1150d 1150d 23/29 1051d 8d61f926d420 netlink: fix potential deadlock in netlink_set_err()
possible deadlock in pie_timer (2) net 4 2 1148d 1149d 23/29 1051d 11b73313c124 sch_netem: fix issues in netem_change() vs get_dist_table()
WARNING in bpf_verifier_vlog bpf -1 syz, C inconclusive 6 1199d 1435d 23/29 1051d cff36398bd4c bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log
general protection fault in skb_queue_tail (3) afs 19 syz, C inconclusive done 9 1169d 1402d 23/29 1051d 061b0cb9327b wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes
KASAN: slab-out-of-bounds Read in taprio_dequeue_from_txq net 17 syz error 4 1165d 1190d 23/29 1051d be3618d96510 net/sched: taprio: fix slab-out-of-bounds Read in taprio_dequeue_from_txq
possible deadlock in scheduler_tick (2) ntfs3 4 syz, C 10 1166d 1182d 23/29 1051d 726ccdba1521 kasan,kmsan: remove __GFP_KSWAPD_RECLAIM usage from kasan/kmsan
WARNING in scm_recv net -1 syz, C done 8 1137d 1141d 23/29 1051d 603fc57ab70c af_unix: Skip SCM_PIDFD if scm->pid is NULL.
general protection fault in cryptd_hash_export crypto 2 syz, C done done 12 1151d 1159d 23/29 1051d b6d972f68983 crypto: af_alg/hash: Fix recvmsg() after sendmsg(MSG_MORE)
KASAN: stack-out-of-bounds Read in ipmr_ioctl net 21 syz, C done 208 1149d 1155d 23/29 1051d 634236b34d7a net: remove sk_is_ipmr() and sk_is_icmpv6() helpers
general protection fault in crypto_shash_finup crypto 2 syz, C done 6 1152d 1159d 23/29 1051d b6d972f68983 crypto: af_alg/hash: Fix recvmsg() after sendmsg(MSG_MORE)
possible deadlock in quotactl_fd ext4 4 syz, C error done 141 1141d 1221d 23/29 1093d 949f95ff39bf ext4: fix lockdep warning when enabling MMP
possible deadlock in btrfs_search_slot btrfs 4 syz, C error done 188 1101d 1376d 23/29 1100d b740d8061669 btrfs: free btrfs_path before copying root refs to userspace
WARNING in class_register usb -1 syz, C done 10 1232d 1231d 23/29 1100d f326ea63ecc6 driver core: class: fix slab-use-after-free Read in class_register()
KASAN: use-after-free Write in j1939_sock_pending_del can 22 syz done error 17 2462d 2474d 23/29 1100d fd81ebfe7975 can: j1939: socket: rework socket locking for j1939_sk_release() and j1939_sk_sendmsg()
BUG: soft lockup in addrconf_rs_timer (2) net 1 syz, C 51 1150d 1171d 23/29 1137d cd2b8113c2e8 net/sched: fq_pie: ensure reasonable TCA_FQ_PIE_QUANTUM values
INFO: task hung in sync_inodes_sb (4) nilfs 1 syz, C done inconclusive 345 1138d 2092d 23/29 1137d 92c5d1b860e9 nilfs2: reject devices with insufficient block count
riscv/fixes boot error: can't ssh into the instance (2) -1 109 1164d 1170d 23/29 1137d 25abe0db9243 riscv: Fix kfence now that the linear mapping can be backed by PUD/P4D/PGD
KCSAN: data-race in dev_graft_qdisc / qdisc_lookup_rcu net 6 1 1176d 1176d 23/29 1137d d636fc5dd692 net: sched: add rcu annotations around qdisc->qdisc_sleeping
kernel BUG in nilfs_btnode_create_block nilfs -1 syz, C 8 1183d 1390d 23/29 1137d 2f012f2baca1 nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key()
WARNING in nilfs_segctor_do_construct (2) nilfs -1 syz, C error 3 1189d 1187d 23/29 1137d fee5eaecca86 nilfs2: fix possible out-of-bounds segment allocation in resize ioctl
divide error in damon_set_attrs damon 2 2 1164d 1176d 23/29 1137d 5ff6e2fff88e mm/damon/core: fix divide error in damon_nr_accesses_to_accesses_bp()
general protection fault in vhost_work_queue net virt kvm 2 1 1177d 1172d 23/29 1137d a284f09effea vhost: Fix crash during early vhost_transport_send_pkt calls
KCSAN: data-race in inotify_handle_inode_event / inotify_remove_from_idr fs 6 363 1194d 1208d 22/29 1140d c915d8f5918b inotify: Avoid reporting event with invalid wd
WARNING in __ext4fs_dirhash ext4 -1 syz, C done 25 1191d 1192d 22/29 1140d 4b3cb1d108bf ext4: improve error handling from ext4_dirhash()
KCSAN: data-race in __es_find_extent_range / __es_find_extent_range (6) ext4 6 4 1218d 1208d 22/29 1140d 492888df0c7b ext4: fix data races when using cached status extents
WARNING in ext4_iomap_overwrite_begin ext4 -1 1 1217d 1213d 22/29 1140d fa83c34e3e56 ext4: check iomap type only if ext4_iomap_begin() does not fail
possible deadlock in __mod_timer (2) mm 4 1 1192d 1192d 22/29 1140d eb799279fb1f debugobjects: Don't wake up kswapd from fill_pool()
KASAN: user-memory-access Write in zram_slot_lock block 21 syz, C done 3 1180d 1180d 22/29 1140d 3eb96946f0be block: make bio_check_eod work for zero sized devices
kernel BUG in btrfs_exclop_balance (2) btrfs -1 syz, C error 8 1166d 1268d 22/29 1140d ac868bc9d136 btrfs: fix assertion of exclop condition when starting balance
KMSAN: uninit-value in htree_dirblock_to_tree ext4 7 204 1188d 1319d 22/29 1140d 4b3cb1d108bf ext4: improve error handling from ext4_dirhash()
WARNING: locking bug in ext4_xattr_inode_iget ext4 4 syz, C error 23 1163d 1194d 22/29 1140d 2bc7e7c1a3bc ext4: disallow ea_inodes with extended attributes
possible deadlock in ext4_xattr_get ext4 4 syz, C inconclusive 3 1195d 1468d 22/29 1140d b3e6bcb94590 ext4: add EA_INODE checking to ext4_iget()
WARNING in dlfb_submit_urb/usb_submit_urb (2) fbdev usb -1 syz, C 2 1188d 1184d 22/29 1140d ed9de4ed3987 fbdev: udlfb: Fix endpoint check
KASAN: slab-use-after-free Read in hci_conn_del bluetooth 19 7 1177d 1200d 22/29 1140d ca1fd42e7dbf Bluetooth: Fix potential double free caused by hci_conn_unlink
INFO: task hung in __sync_dirty_buffer ext4 1 syz, C inconclusive error 832 1159d 1808d 22/29 1140d f4ce24f54d9c ext4: fix deadlock when converting an inline directory in nojournal mode
KCSAN: data-race in do_recvmmsg / do_recvmmsg (2) net 6 1 1220d 1194d 22/29 1140d e05a5f510f26 net: annotate sk->sk_err write from do_recvmmsg()
upstream boot error: BUG: unable to handle kernel NULL pointer dereference in load_balance kernel -1 5 1191d 1197d 22/29 1140d 2b951b0efbaa ARM: 9297/1: vfp: avoid unbalanced stack on 'success' return path
possible deadlock in ext4_multi_mount_protect ext4 4 syz, C 584 1140d 1225d 22/29 1140d 949f95ff39bf ext4: fix lockdep warning when enabling MMP
general protection fault in __aria_aesni_avx_gfni_crypt_16way crypto 2 syz, C 49 1178d 1194d 22/29 1140d 6ab39f99927e crypto: x86/aria - Use 16 byte alignment for GFNI constant vectors
WARNING: locking bug in ext4_xattr_inode_update_ref ext4 4 syz, C error 4 1184d 1311d 22/29 1140d b928dfdcb27d ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find()
KCSAN: data-race in tcp_disconnect / tcp_poll (7) net 6 2 1216d 1194d 22/29 1140d e14cadfd80d7 tcp: add annotations around sk->sk_shutdown accesses
possible deadlock in ext4_setattr ext4 4 syz, C done 7 1189d 1308d 22/29 1140d b3e6bcb94590 ext4: add EA_INODE checking to ext4_iget()
general protection fault in gfs2_evict_inode (2) gfs2 10 syz, C error done 134 1189d 1509d 22/29 1140d 504a10d9e46b gfs2: Don't deref jdesc in evict
WARNING in usbtmc_ioctl/usb_submit_urb (2) usb -1 syz, C done 3 1201d 1213d 22/29 1140d 94d25e912898 USB: usbtmc: Fix direction for 0-length ioctl control messages
possible deadlock in do_writepages fs mm 4 15 1205d 1208d 22/29 1140d 00d873c17e29 ext4: avoid deadlock in fs reclaim with page writeback
KASAN: slab-use-after-free Write in nilfs_inode_sub_blocks nilfs 22 4 1187d 1191d 22/29 1140d 9b5a04ac3ad9 nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode()
KASAN: slab-use-after-free Read in nilfs_load_inode_block nilfs 19 syz, C error 18 1142d 1195d 22/29 1140d 9b5a04ac3ad9 nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode()
KASAN: slab-out-of-bounds Read in get_max_inline_xattr_value_size ext4 19 syz, C 21 1195d 1233d 22/29 1140d 2220eaf90992 ext4: add bounds checking in get_max_inline_xattr_value_size()
KASAN: slab-out-of-bounds Read in ext4_group_desc_csum ext4 19 syz, C error 26 1188d 1289d 22/29 1140d 4f04351888a8 ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
kernel BUG in ext4_get_group_info ext4 -1 syz, C error 237 1188d 1821d 22/29 1140d 5354b2af3406 ext4: allow ext4_get_group_info() to fail 463808f237cf ext4: remove a BUG_ON in ext4_mb_release_group_pa()
WARNING in ext4_xattr_block_set (2) ext4 -1 syz, C error 32 1190d 1255d 22/29 1140d a44be64bbecb ext4: don't clear SB_RDONLY when remounting r/w until quota is re-enabled
kernel BUG in nsh_gso_segment net -1 1 1206d 1192d 22/29 1140d c83b49383b59 net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
WARNING in kvfree (2) ext4 -1 syz, C 47 1196d 1248d 22/29 1140d b87c7cdf2bed ext4: fix invalid free tracking in ext4_xattr_move_to_block()
possible deadlock in sco_conn_del bluetooth 4 syz, C done done 279 1186d 1590d 22/29 1140d a2ac591cb4d8 Bluetooth: Fix UAF in hci_conn_hash_flush again
general protection fault in __sk_mem_raise_allocated net 2 1 1185d 1180d 22/29 1140d ad42a35bdfc6 udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated().
KMSAN: uninit-value in xfrm_state_find net 17 syz, C error done 215 1183d 2982d 22/29 1140d 3d776e31c841 xfrm: Reject optional tunnel/BEET mode templates in outbound policies
kernel BUG in workingset_activation (2) kernel -1 syz, C inconclusive done 40 1176d 1368d 22/29 1140d 0143d148d1e8 usb: usbfs: Enforce page requirements for mmap
KMSAN: uninit-value in vlan_dev_hard_start_xmit (2) net 7 1 1216d 1215d 22/29 1140d dacab578c7c6 vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit()
memory leak in class_create usb 3 syz, C 9 1183d 1201d 22/29 1140d ddaf098ea779 driver core: class: properly reference count class_dev_iter()
memory leak in ext4_expand_extra_isize_ea ext4 3 syz, C 2 1194d 1262d 22/29 1140d b87c7cdf2bed ext4: fix invalid free tracking in ext4_xattr_move_to_block()
divide error in tcp_rcv_space_adjust (2) net 2 1 1230d 1230d 22/29 1140d 4faeee0cf8a5 tcp: deny tcp_disconnect() when threads are waiting
possible deadlock in ext4_xattr_inode_iget ext4 4 syz, C done 351 1149d 1307d 22/29 1140d aff3bea95388 ext4: add lockdep annotations for i_data_sem for ea_inode's
general protection fault in soft_cursor fbdev 11 syz, C 3 1175d 1175d 22/29 1140d d78bd6cc6827 fbcon: Fix null-ptr-deref in soft_cursor
KASAN: slab-out-of-bounds Read in xfs_getbmap xfs 17 syz, C done 5 1200d 1201d 22/29 1140d 1bba82fe1afa xfs: fix negative array access in xfs_getbmap
KCSAN: data-race in sk_stream_wait_connect / tcp_disconnect (2) net 6 1 1225d 1194d 22/29 1140d d0ac89f6f987 net: deal with most data-races in sk_wait_event()
kernel BUG in btrfs_csum_one_bio btrfs -1 syz, C done 4 1219d 1297d 22/29 1140d 806570c0bb7b btrfs: handle memory allocation failure in btrfs_csum_one_bio
kernel BUG in btrfs_ioctl_add_dev btrfs -1 syz, C error done 46 1195d 1271d 22/29 1140d ac868bc9d136 btrfs: fix assertion of exclop condition when starting balance
general protection fault in erofs_bread (2) erofs 2 syz, C done 7 1175d 1185d 22/29 1140d 0a17567b4a85 erofs: fix null-ptr-deref caused by erofs_xattr_prefixes_init erofs: fix null-ptr-deref caused by erofs_xattr_prefixes_init
possible deadlock in ext4_xattr_set_handle (3) ext4 4 syz, C 451 1140d 1298d 22/29 1140d b3e6bcb94590 ext4: add EA_INODE checking to ext4_iget()
KCSAN: data-race in __netlink_dump_start / netlink_recvmsg (5) net 6 2 1223d 1194d 22/29 1140d a939d14919b7 netlink: annotate accesses to nlk->cb_running
KASAN: slab-use-after-free Read in hci_conn_hash_flush bluetooth 22 syz, C error 3511 1166d 1259d 22/29 1140d a2ac591cb4d8 Bluetooth: Fix UAF in hci_conn_hash_flush again ca1fd42e7dbf Bluetooth: Fix potential double free caused by hci_conn_unlink
kernel BUG in page_table_check_clear mm -1 syz, C error 17 1165d 1198d 22/29 1140d 44d0fb387b53 mm: page_table_check: Ensure user pages are not slab pages 0143d148d1e8 usb: usbfs: Enforce page requirements for mmap
memory leak in hwsim_new_radio_nl wireless 3 syz, C 1 1191d 1190d 22/29 1140d 098abbd48ec1 mac80211_hwsim: fix memory leak in hwsim_new_radio_nl
WARNING in mb_find_extent ext4 -1 syz, C error error 135 1282d 1323d 22/29 1140d fa08a7b61dff ext4: fix WARNING in mb_find_extent
kernel BUG in vmf_insert_pfn_prot -1 syz, C done done 1933 1188d 1792d 22/29 1157d a5b44c4adb16 drm/fbdev-generic: Always use shadow buffering
WARNING in __usbnet_read_cmd/usb_submit_urb usb -1 syz, C error 5 1285d 1316d 22/29 1159d 93fd565919cf net: USB: Fix wrong-direction WARNING in plusb.c net: USB: Fix wrong-direction WARNING in plusb.c
WARNING in iomap_iter iomap -1 syz, C inconclusive 141 1313d 1740d 22/29 1159d 6acd87d50998 erofs/zmap.c: Fix incorrect offset calculation c490a0b5a4f3 loop: Check for overflow while configuring loop
KASAN: slab-out-of-bounds Write in udf_find_entry udf 21 syz, C error 19 1373d 1404d 22/29 1159d c8af247de385 udf: Fix a slab-out-of-bounds write bug in udf_find_entry() 1c80afa04db3 udf: Implement searching for directory entry using new iteration code
memory leak in tcf_pedit_init net 3 syz, C 1 1203d 1203d 22/29 1163d 1b483d9f5805 net/sched: act_pedit: free pedit keys on bail from offset check
INFO: trying to register non-static key in rxe_cleanup_task (2) rdma -1 148 1197d 1263d 22/29 1163d b2b1ddc45745 RDMA/rxe: Fix the error "trying to register non-static key in rxe_cleanup_task"
KMSAN: kernel-infoleak in iommufd_vfio_ioctl iommu 9 syz, C 15 1265d 1278d 22/29 1163d b3551ead6163 iommufd: Make sure to zero vfio_iommu_type1_info before copying to user
KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit (12) net 6 3 1256d 1255d 22/29 1163d 4b397c06cb98 net: tunnels: annotate lockless accesses to dev->needed_headroom
KASAN: wild-memory-access Write in v9fs_get_acl v9fs 21 syz, C 7 1222d 1256d 22/29 1163d 707823e7f22f 9P FS: Fix wild-memory-access write in v9fs_get_acl
WARNING: stack going in the wrong direction? at do_syscall_64 kernel -1 193 1269d 1276d 22/29 1163d 00c8f01c4e84 objtool: Fix ORC 'signal' propagation
WARNING in sisusb_send_bulk_msg/usb_submit_urb usb -1 syz, C unreliable 418 1214d 2600d 22/29 1163d df05a9b05e46 USB: sisusbvga: Add endpoint checks
general protection fault in pause_prepare_data net 2 syz, C error 34 1297d 1298d 22/29 1163d f5be9caf7bf0 net: ethtool: fix NULL pointer dereference in pause_prepare_data()
KASAN: slab-use-after-free Read in nilfs_segctor_thread nilfs 19 1 1242d 1236d 22/29 1163d 6be49d100c22 nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread()
WARNING in udf_expand_dir_adinicb udf -1 syz, C done 2 1286d 1282d 22/29 1163d df97f64dfa31 udf: Avoid directory type conversion failure due to ENOMEM
memory leak in vfs_tmpfile_open overlayfs 3 syz, C 14 1300d 1401d 22/29 1163d baabaa505563 ovl: fix tmpfile leak
WARNING: stack going in the wrong direction? at finish_task_switch.isra.NUM kernel -1 2 1271d 1273d 22/29 1163d 00c8f01c4e84 objtool: Fix ORC 'signal' propagation
WARNING in io_get_cqe_overflow io-uring -1 1 1300d 1299d 22/29 1163d e12d7a46f65a io_uring/msg_ring: fix missing lock on overflow for IOPOLL
kernel BUG in find_mergeable_anon_vma mm -1 syz, C error 4 1259d 1255d 22/29 1163d 3dd443254941 mm: enable maple tree RCU mode by default
unregister_netdevice: waiting for DEV to become free (7) 2 syz, C inconclusive 20422 1163d 1365d 22/29 1163d 266e9b3475ba RDMA/siw: Remove namespace check from siw_netdev_event()
possible deadlock in nilfs_evict_inode nilfs 4 5 1243d 1261d 22/29 1163d 42560f9c92cc nilfs2: fix sysfs interface lifetime
UBSAN: shift-out-of-bounds in fbcon_set_font fbdev -1 syz, C error 3 1293d 1293d 22/29 1163d 2b09d5d36498 fbcon: Check font dimension limits
KASAN: use-after-free Write in gadgetfs_kill_sb usb 22 syz, C error 5 1306d 1340d 22/29 1163d d18dcfe9860e USB: gadgetfs: Fix race between mounting and unmounting
BUG: unable to handle kernel paging request in __alloc_skb net 8 1 1354d 1354d 22/29 1163d 031af50045ea arm64: cmpxchg_double*: hazard against entire exchange variable
possible deadlock in jbd2_log_wait_commit ext4 4 syz, C done 429 1239d 1263d 22/29 1163d 3c92792da850 ext4: Fix deadlock during directory rename
possible deadlock in static_key_slow_inc (2) cgroups 4 syz, C error 32622 1163d 1381d 22/29 1163d 57dcd64c7e03 cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex
INFO: task hung in rfcomm_process_sessions (2) bluetooth 1 syz, C error done 14 1325d 1599d 22/29 1163d 1d80d57ffcb5 Bluetooth: Fix possible deadlock in rfcomm_sk_state_change
WARNING: proc registration bug in clusterip_tg_check (3) netfilter -1 syz, C done inconclusive 9 1302d 1836d 22/29 1163d 9db5d918e2c0 netfilter: ip_tables: remove clusterip target
KASAN: use-after-free Write in nr_release hams 22 syz, C done error 1784 1177d 2450d 22/29 1163d 611792920925 netrom: Fix use-after-free caused by accept on already connected socket
KASAN: use-after-free Read in do_csum net 19 syz, C 72 1165d 1331d 22/29 1163d 1ac885574470 inet: control sockets should not use current thread task_frag
KCSAN: data-race in rxrpc_send_data / rxrpc_set_call_completion net afs 6 2 1229d 1208d 22/29 1163d 2b5fdc0f5caa rxrpc: Fix potential data race in rxrpc_wait_to_be_connected()
WARNING in ext4_update_inline_data ext4 -1 syz, C error 21 1259d 1323d 22/29 1163d 2b96b4a5d944 ext4: fix WARNING in ext4_update_inline_data
KMSAN: uninit-value in ethnl_set_linkmodes (2) net 7 syz, C 40 1196d 1502d 22/29 1163d 9ad685dbfe7e ethtool: Fix uninitialized number of lanes
KCSAN: data-race in __neigh_event_send / neigh_resolve_output (7) net 6 43 1221d 1194d 22/29 1163d b071af523579 neighbour: annotate lockless accesses to n->nud_state
general protection fault in free_percpu (2) wireless 2 1 1309d 1309d 22/29 1163d 80f8a66dede0 Revert "wifi: mac80211: fix memory leak in ieee80211_if_add()"
KASAN: null-ptr-deref Read in ida_free (3) fs 11 syz, C error 4 1237d 1234d 22/29 1163d cb2239c198ad fs: drop peer group ids under namespace lock
possible deadlock in ext4_bmap ext4 4 syz, C error 78083 1163d 1467d 22/29 1163d 62913ae96de7 ext4, jbd2: add an optimized bmap for the journal inode
WARNING in put_pmu_ctx perf -1 syz, C error 66 1280d 1334d 22/29 1163d 4f64a6c9f6f1 perf: Fix perf_event_pmu_context serialization
WARNING in htb_destroy net -1 syz, C done 2 1281d 1281d 22/29 1163d 4fab64126891 net/sched: fix error recovery in qdisc_create()
KASAN: use-after-free Read in xfs_btree_lookup_get_block xfs 19 syz, C error done 7 1227d 1324d 22/29 1163d 22ed903eee23 xfs: verify buffer contents when we skip log replay
general protection fault in ethnl_set_plca_cfg net 2 syz, C done 37 1306d 1307d 22/29 1163d 28dbf774bc87 plca.c: fix obvious mistake in checking retval
KMSAN: uninit-value in nilfs_add_checksums_on_logs nilfs 7 1079 1164d 1257d 22/29 1163d 7397031622e0 nilfs2: initialize "struct nilfs_binfo_dat"->bi_pad field ef832747a82d nilfs2: initialize unused bytes in segment summary blocks
memory leak in tcindex_set_parms (3) net 3 syz, C 1 1351d 1347d 22/29 1163d 8c710f75256b net/sched: Retire tcindex classifier
WARNING in hfsplus_cat_write_inode hfs -1 syz, C error 141 1191d 1357d 22/29 1163d 81b21c0f0138 fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()
INFO: rcu detected stall in ext4_file_write_iter (6) ext4 1 syz, C error 8 1220d 1283d 22/29 1163d d125d1349abe alarmtimer: Prevent starvation by small intervals and SIG_IGN
KASAN: null-ptr-deref Write in udf_write_fi udf 21 syz, C inconclusive done 51 1295d 1418d 22/29 1163d e9109a92d2a9 udf: Convert udf_rename() to new directory iteration code
WARNING in c_start (2) kernel -1 616173 1236d 1254d 22/29 1163d e7304080e0e5 cpumask: relax sanity checking constraints
KCSAN: data-race in __neigh_update / neigh_resolve_output net 6 1 1227d 1194d 22/29 1163d b071af523579 neighbour: annotate lockless accesses to n->nud_state
WARNING in hfs_write_inode hfs -1 syz, C done 3 1320d 1318d 22/29 1163d cb7a95af78d2 hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling
KASAN: slab-out-of-bounds Read in __xfs_xattr_put_listent xfs 17 12 1277d 1281d 22/29 1163d dd07bb8b6baf xfs: revert commit 8954c44ff477
INFO: task hung in tcindex_partial_destroy_work 1 syz, C done unreliable 84 2010d 2146d 22/29 1163d 8c710f75256b net/sched: Retire tcindex classifier
general protection fault in nl802154_trigger_scan wpan 8 syz, C error 31 1241d 1260d 22/29 1163d 02f18662f6c6 ieee802154: Prevent user from crashing the host
BUG: unable to handle kernel NULL pointer dereference in __build_skb_around bpf net 10 syz, C done 29 1243d 1248d 22/29 1163d e5995bc7e2ba bpf, test_run: fix crashes due to XDP frame overwriting/corruption
KASAN: null-ptr-deref Read in filemap_fault mm udf 11 syz, C done 112 1191d 1204d 22/29 1163d 38a55db9877c filemap: Handle error return from __filemap_get_folio()
WARNING in udf_free_inode udf -1 syz, C error 19 1274d 1408d 22/29 1163d 85a37983ec69 udf: Detect system inodes linked into directory hierarchy
INFO: task hung in do_user_addr_fault (3) ntfs3 1 syz, C 32 1246d 1321d 22/29 1163d 0226635c304c fs/ntfs3: don't hold ni_lock when calling truncate_setsize()
general protection fault in virtio_transport_purge_skbs net 2 syz, C done 3 1240d 1240d 22/29 1163d b465518dc27d vsock/loopback: use only sk_buff_head.lock to protect the packet queue
WARNING in do_symlinkat ntfs3 -1 syz, C error done 66 1167d 1331d 22/29 1163d 267a36ba30a7 fs/ntfs3: Remove noacsrules
KASAN: use-after-free Read in ext4_find_extent (2) ext4 19 syz, C error 2 1198d 1322d 22/29 1163d 835659598c67 ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline
general protection fault in nilfs_btree_insert nilfs 2 syz, C error 2 1328d 1325d 22/29 1163d 7633355e5c7f nilfs2: fix general protection fault in nilfs_btree_insert()
KASAN: slab-out-of-bounds Write in copy_array (2) bpf 21 108 1163d 1192d 22/29 1163d 45435d8da71f bpf: Always use maximal size for copy_array()
WARNING: stack going in the wrong direction? at __sys_setsockopt net -1 6 1270d 1275d 22/29 1163d 00c8f01c4e84 objtool: Fix ORC 'signal' propagation
KMSAN: uninit-value in ondemand_readahead fs mm 7 syz, C 221 1261d 1424d 22/29 1163d 3e35102666f8 fs/cramfs/inode.c: initialize file_ra_state
upstream test error: unregister_netdevice: waiting for DEV to become free net -1 204 1275d 1282d 22/29 1163d b20b8aec6ffc devlink: Fix netdev notifier chain corruption
KMSAN: uninit-value in longest_match btrfs 7 4 1339d 1344d 22/29 1163d eadd7deca0ad btrfs: zlib: zero-initialize zlib workspace
WARNING in j1939_session_deactivate_activate_next can -1 syz, C error done 502 1228d 1634d 22/29 1163d d0553680f94c can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate
WARNING in net_free net -1 1 1216d 1216d 22/29 1163d 9744d2bf1976 smc: Fix use-after-free in tcp_write_timer_handler().
WARNING: fbcon: Driver 'vkmsdrmfb' missed to adjust virtual screen size (0x0 vs. 64x768) -1 syz, C unreliable error 24 1496d 1495d 22/29 1163d 1935f0deb611 drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
WARNING in cleanup_net (2) net -1 syz, C error 72 1198d 1225d 22/29 1163d 9744d2bf1976 smc: Fix use-after-free in tcp_write_timer_handler().
KASAN: use-after-free Read in cfusbl_device_notify net 19 syz, C done 341 1255d 1402d 22/29 1163d 9781e98a9711 net: caif: Fix use-after-free in cfusbl_device_notify()
KMSAN: uninit-value in kalmia_send_init_packet usb 7 syz, C 2 1292d 1291d 22/29 1163d c68f345b7c42 net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
general protection fault in taprio_dequeue net 2 1 1322d 1322d 22/29 1163d 3a415d59c1db net/sched: sch_taprio: fix possible use-after-free
WARNING in ip6erspan_tunnel_xmit (2) net -1 syz, C unreliable 5 1243d 1243d 22/29 1163d 8e50ed774554 erspan: do not use skb_mac_header() in ndo_start_xmit()
KMSAN: uninit-value in qrtr_tx_resume net arm-msm 7 syz, C 8 1236d 1297d 22/29 1163d 6417070918de net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume()
general protection fault in __d_add ntfs3 10 syz, C error 16 1349d 1404d 22/29 1163d 254e69f284d7 fs/ntfs3: Fix null-ptr-deref on inode->i_op in ntfs_lookup()
INFO: task hung in tls_sw_sendpage (3) net 1 30 1267d 1264d 22/29 1163d f3221361dc85 net: tls: avoid hanging tasks on the tx_lock
WARNING in pegasus_open/usb_submit_urb input usb -1 syz, C 7 1244d 2254d 22/29 1163d b3d80fd27a3c Input: pegasus-notetaker - check pipe type when probing
WARNING: locking bug in umh_complete kernel 4 1 1300d 1296d 22/29 1163d eedeb787ebb5 freezer,umh: Fix call_usermode_helper_exec() vs SIGKILL
possible deadlock in j1939_sk_errqueue can 4 syz, C unreliable 227 1234d 1771d 22/29 1163d d1366b283d94 can: j1939: prevent deadlock by moving j1939_sk_errqueue()
KASAN: use-after-free Read in __update_extent_tree_range f2fs 19 syz, C done 9 1275d 1322d 22/29 1163d a46bebd502fe f2fs: synchronize atomic write aborts
WARNING in nla_get_range_unsigned (2) net -1 syz, C done 433 1239d 1274d 22/29 1163d b20b8aec6ffc devlink: Fix netdev notifier chain corruption
KASAN: slab-out-of-bounds Read in indx_insert_into_buffer ntfs3 17 syz, C error 2 1349d 1348d 22/29 1163d b8c44949044e fs/ntfs3: Fix OOB read in indx_insert_into_buffer
WARNING: kmalloc bug in btrfs_ioctl_send btrfs -1 syz, C done 53 1284d 1354d 22/29 1163d 33e17b3f5ab7 btrfs: send: limit number of clones and allocated memory size
WARNING in shark_write_reg/usb_submit_urb usb -1 syz, C error 63 1212d 2586d 22/29 1163d 76e31045ba03 media: radio-shark: Add endpoint checks
BUG: unable to handle kernel paging request in atm_tc_destroy net 8 syz, C error 3 1282d 1281d 22/29 1163d 4fab64126891 net/sched: fix error recovery in qdisc_create()
kernel BUG in ip_frag_next net -1 syz, C done 9 1297d 1304d 22/29 1163d f72ff8b81ebc net: fix kfree_skb_list use of skb_mark_not_on_list
WARNING in xfs_qm_dqget_cache_insert xfs -1 syz, C error 123 1189d 1361d 22/29 1163d 4b827b3f305d xfs: remove WARN when dquot cache insertion fails
KMSAN: kernel-infoleak in _copy_to_iter (8) mm 21 syz, C 21180 1163d 1257d 22/29 1163d 8222d5910dae xfrm: Zero padding when dumping algos and encap
WARNING in io_cqring_event_overflow io-uring -1 syz, C 7 1303d 1310d 22/29 1163d 544d163d659d io_uring: lock overflowing for IOPOLL
net test error: WARNING: suspicious RCU usage in veth_set_xdp_features net -1 24 1248d 1250d 22/29 1163d 5ce76fe1eead veth: rely on rtnl_dereference() instead of on rcu_dereference() in veth_set_xdp_features()
riscv/fixes boot error: WARNING in __apply_to_page_range (2) bpf riscv -1 5 1270d 1332d 22/29 1163d 96f9d4daf745 riscv: Rework kasan population functions
linux-next test error: WARNING: suspicious RCU usage in veth_set_xdp_features net -1 12 1248d 1249d 22/29 1163d 5ce76fe1eead veth: rely on rtnl_dereference() instead of on rcu_dereference() in veth_set_xdp_features()
KCSAN: data-race in netlink_getname / netlink_insert (4) net 6 2 1298d 1303d 22/29 1163d c1bb9484e3b0 netlink: annotate data races around nlk->portid
WARNING: locking bug in inet_autobind net 4 syz, C done error 103 1324d 2647d 22/29 1163d 0b2c59720e65 l2tp: close all race conditions in l2tp_tunnel_register()
UBSAN: array-index-out-of-bounds in qfq_update_agg (4) net 15 1 1214d 1214d 22/29 1163d 3037933448f6 net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
WARNING in rmqueue erofs -1 syz, C error 2 1231d 1354d 22/29 1163d cc4efd3dd2ac erofs: stop parsing non-compact HEAD index if clusterofs is invalid
KMSAN: kernel-infoleak in nilfs_ioctl_wrap_copy nilfs 9 4 1230d 1257d 22/29 1163d 003587000276 nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy()
KMSAN: uninit-value in raw_sock_get net 7 1 1223d 1221d 22/29 1163d 0a78cf7264d2 raw: Fix NULL deref in raw_get_next().
BUG: scheduling while atomic in msleep net 5 syz, C done 40 1296d 1305d 22/29 1163d ea4fdbaa2f77 net/sched: sch_taprio: do not schedule in taprio_reset()
WARNING in __dev_queue_xmit (2) net -1 syz, C 76 1195d 1267d 22/29 1163d 693aa2c0d9b6 ila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping()
memory leak in ath9k_hif_usb_rx_cb wireless 3 syz, C 1 1338d 1334d 22/29 1163d 0af54343a762 wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails
kernel BUG in icmp_glue_bits net -1 2 1169d 1233d 22/29 1163d 7d63b6712538 icmp: guard against too small mtu
general protection fault in bpf_struct_ops_link_create bpf net 2 syz, C done 17 1237d 1239d 22/29 1163d 55fbae05476d bpf: Check IS_ERR for the bpf_map_get() return value
WARNING: can't access registers at entry_SYSCALL_64_after_hwframe -1 syz, C 15 1270d 1275d 22/29 1163d 00c8f01c4e84 objtool: Fix ORC 'signal' propagation
INFO: task hung in find_inode_fast ext4 1 syz, C error 28 1165d 1314d 22/29 1163d 0f7bfd6f8164 ext4: fix task hung in ext4_xattr_delete_inode
memory leak in io_submit_sqes (4) io-uring 3 syz, C 1 1314d 1313d 22/29 1163d febb985c06cb io_uring/poll: add hash if ready poll request can't complete inline
WARNING in hfsplus_cat_read_inode hfs -1 syz, C error 599 1187d 1352d 22/29 1163d 81b21c0f0138 fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()
KASAN: slab-out-of-bounds Read in udf_get_filelongad udf 17 syz, C 2 1342d 1341d 22/29 1163d 53cafe1d6d8e udf: Do not bother merging very long extents
BUG: unable to handle kernel NULL pointer dereference in ni_write_inode ntfs3 10 syz, C error 596 1189d 1421d 22/29 1163d 8dae4f6341e3 fs/ntfs3: Fix NULL dereference in ni_write_inode db2a3cc6a348 fs/ntfs3: Fix NULL pointer dereference in 'ni_write_inode'
KASAN: use-after-free Read in put_pmu_ctx perf 19 syz, C 51 1317d 1334d 22/29 1163d a551844e345b perf: Fix use-after-free in error path
KASAN: stack-out-of-bounds Read in proc_pid_stack riscv 17 3 1166d 1200d 22/29 1163d 76950340cf03 riscv: Use READ_ONCE_NOCHECK in imprecise unwinding stack mode
KASAN: vmalloc-out-of-bounds Read in __ebt_unregister_table bridge netfilter 17 syz, C error 4 1274d 1274d 22/29 1163d e58a171d35e3 netfilter: ebtables: fix table blob use-after-free
WARNING: refcount bug in qrtr_recvmsg (2) arm-msm net 13 syz, C error 2 1247d 1241d 22/29 1163d 44d807320000 net: qrtr: Fix a refcount bug in qrtr_recvmsg()
WARNING in remove_proc_entry (5) scsi -1 syz, C 158 1246d 1288d 22/29 1163d 2172e84ea00b SUNRPC: Fix occasional warning when destroying gss_krb5_enctypes
possible deadlock in __jbd2_log_wait_for_space ext4 4 syz, C error 34993 1219d 1467d 22/29 1163d 62913ae96de7 ext4, jbd2: add an optimized bmap for the journal inode
WARNING in split_huge_page_to_list (2) mm -1 syz, C error 2334 1188d 1452d 22/29 1163d 4737edbbdd49 mm/huge_memory.c: warn with pr_warn_ratelimited instead of VM_WARN_ON_ONCE_FOLIO
KASAN: slab-use-after-free Read in mas_next_entry mm 19 syz error 3 1225d 1228d 22/29 1163d f4e9e0e69468 mm/mempolicy: fix use-after-free of VMA iterator
UBSAN: shift-out-of-bounds in blkstol2 jfs -1 syz, C error 2 1382d 1382d 22/29 1163d fad376fce0af fs/jfs: fix shift exponent db_agl2size negative
WARNING in sock_map_del_link bpf net -1 91 1219d 1219d 22/29 1163d 8c5c2a4898e3 bpf, sockmap: Revert buggy deadlock fix in the sockhash and sockmap
WARNING in nilfs_dat_prepare_end nilfs -1 syz, C error 288 1257d 1411d 22/29 1163d 5124a0a54985 nilfs2: replace WARN_ONs for invalid DAT metadata block requests
general protection fault in cache_first_page squashfs 10 syz, C error 4 1303d 1316d 22/29 1163d f65c4bbbd682 Squashfs: fix handling and sanity checking of xattr_ids count 72e544b1b283 squashfs: harden sanity check in squashfs_read_xattr_id_table
general protection fault in jhash wireless 2 syz, C done done 15 1212d 1231d 22/29 1163d 2bef4d1fb8b3 wifi: mac80211_hwsim: fix potential NULL deref in hwsim_pmsr_report_nl()
general protection fault in mark_buffer_dirty_inode (2) udf 2 syz, C 32 1196d 1354d 22/29 1163d e9109a92d2a9 udf: Convert udf_rename() to new directory iteration code
WARNING in blkdev_put (2) block -1 syz, C unreliable 250 1239d 1267d 22/29 1163d 428913bce1e6 block: fix wrong mode for blkdev_put() from disk_scan_partitions()
WARNING: refcount bug in nr_release (4) hams 13 syz, C 24 1278d 1582d 22/29 1163d 409db27e3a2e netrom: Fix use-after-free of a listening socket.
KASAN: use-after-free Read in hfsplus_release_folio hfs 19 syz, C error 23 1261d 1336d 22/29 1163d 07db5e247ab5 fs: hfsplus: fix UAF issue in hfsplus_put_super
net-next boot error: BUG: bad usercopy in qrtr_sendmsg hardening mm -1 30 1282d 1283d 22/29 1163d 0b34d68049b0 net: enable usercopy for skb_small_head_cache
memory leak in __proc_create scsi usb 3 syz 1 1256d 1256d 22/29 1163d be03df3d4bfe scsi: core: Fix a procfs host directory removal regression
KASAN: use-after-free Read in ovs_vport_locate openvswitch 19 1 1338d 1333d 22/29 1163d 95637d91fefd net: openvswitch: release vport resources on failure
general protection fault in pn533_out_complete nfc 2 syz, C error 15 1294d 1308d 22/29 1163d 484b7059796e nfc: pn533: initialize struct pn533_out_arg properly
general protection fault in __xfs_free_extent xfs 10 syz, C error done 17 1217d 1335d 22/29 1163d b2ccab3199aa xfs: pass per-ag references to xfs_free_extent
WARNING: bad unlock balance in ext4_rename2 ext4 4 105 1239d 1257d 22/29 1163d 70e42feab2e2 ext4: fix possible double unlock when moving a directory
INFO: task hung in lock_mount nilfs 1 syz, C error error 1238 1213d 3028d 22/29 1163d a6a491c04888 nilfs2: fix infinite loop in nilfs_mdt_get_block()
kernel BUG in hpage_collapse_scan_file mm -1 syz, C unreliable 3 1215d 1253d 22/29 1163d 2ce0bdfebc74 mm: khugepaged: fix kernel BUG in hpage_collapse_scan_file()
INFO: task hung in nfnetlink_rcv_msg (3) netfilter 1 syz, C done 5 1344d 1355d 22/29 1163d 5e29dc36bd5e netfilter: ipset: Rework long task execution when adding/deleting entries
WARNING in io_sync_cancel io-uring -1 syz, C error 3 1336d 1332d 22/29 1163d 23fffb2f09ce io_uring/cancel: re-grab ctx mutex after finishing wait
WARNING: refcount bug in consume_skb net 13 3 1282d 1291d 22/29 1163d b20b8aec6ffc devlink: Fix netdev notifier chain corruption
KMSAN: uninit-value in xfs_getfsmap_helper xfs 7 1 1287d 1281d 22/29 1163d 60b730a40c43 xfs: fix uninitialized variable access
WARNING in io_cqring_overflow_flush io-uring -1 syz, C 2 1336d 1332d 22/29 1163d 52ea806ad983 io_uring: finish waiting before flushing overflow entries
KASAN: slab-out-of-bounds Write in copy_verifier_state bpf 21 syz, C error done 825 1316d 1334d 22/29 1163d 45435d8da71f bpf: Always use maximal size for copy_array()
INFO: trying to register non-static key in net_free net -1 syz error 17982 1270d 1283d 22/29 1163d 6e77a5a4af05 net: initialize net->notrefcnt_tracker earlier
BUG: unable to handle kernel paging request in clear_user_rep_good iomap 8 syz error done 2 1232d 1288d 22/29 1163d d2c95f9d6802 x86: don't use REP_GOOD or ERMS for user memory clearing
WARNING: suspicious RCU usage in bond_mii_monitor net 4 syz, C 13 1317d 1336d 22/29 1163d 42c7ded0eeac bonding: fix lockdep splat in bond_miimon_commit()
general protection fault in start_transaction btrfs 2 syz, C error 3 1318d 1331d 22/29 1163d b7adbf9ada35 btrfs: fix race between quota rescan and disable leading to NULL pointer deref
WARNING in mbind_range mm -1 syz, C error 3 1313d 1313d 22/29 1163d 17dc622c7b0f maple_tree: fix mas_prev() and mas_find() state handling
BUG: stack guard page was hit in inet6_release bpf net -1 syz, C done 4 1298d 1347d 22/29 1163d ddce1e091757 bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
general protection fault in ext4_fill_super (2) ext4 2 1 1205d 1205d 22/29 1163d d5e72c4e3256 ext4: fix lost error code reporting in __ext4_fill_super()
memory leak in copy_process (5) kernel 3 syz, C 1 1260d 1256d 22/29 1163d 2aab4b969002 af_unix: fix struct pid leaks in OOB support
possible deadlock in l2tp_tunnel_register (2) net 4 syz, C 153 1257d 1267d 22/29 1163d 0b2c59720e65 l2tp: close all race conditions in l2tp_tunnel_register()
KASAN: slab-use-after-free Read in tcf_action_destroy net 19 syz, C error 32 1190d 1265d 22/29 1163d dfd2f0eb2347 net/sched: flower: fix fl_change() error recovery path
possible deadlock in release_sock net 4 syz, C done 42 1303d 1305d 22/29 1163d b9fb10d131b8 l2tp: prevent lockdep issue in l2tp_tunnel_register()
possible deadlock in tty_port_tty_get serial 4 syz, C 22661 1212d 1414d 22/29 1163d 1007843a9190 mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock
WARNING in j1939_xtp_rx_abort_one -1 syz, C done 379 1299d 1836d 22/29 1163d d0553680f94c can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate
WARNING: suspicious RCU usage in mas_walk kernfs 4 syz, C error 234 1239d 1568d 22/29 1163d 6db504ce55bd mm/ksm: fix race with VMA iteration and mm_struct teardown
memory leak in nfc_genl_se_io net nfc 3 syz, C 1 1278d 1274d 22/29 1163d 25ff6f8a5a3b nfc: fix memory leak of se_io context in nfc_genl_se_io
BUG: bad usercopy in con_font_op hardening mm -1 syz, C done 1 1260d 1260d 22/29 1163d 18365ebf23f3 tty: vt: protect KD_FONT_OP_GET_TALL from unbound access
general protection fault in xpad_probe usb 2 syz, C done 24 1199d 1221d 22/29 1163d 53bea86b5712 Revert "Input: xpad - fix support for some third-party controllers"
BUG: bad usercopy in put_cmsg hardening mm -1 syz, C 3 1278d 1279d 22/29 1163d 2558b8039d05 net: use a bounce buffer for copying skb->mark
general protection fault in tcindex_set_parms net 2 syz, C done 2 1278d 1278d 22/29 1163d 42018a322bd4 net/sched: tcindex: search key must be 16 bits
KCSAN: data-race in strscpy / strscpy (3) ext4 mm 6 3 1227d 1211d 22/29 1163d cf587db2ee02 kernel: Allow a kernel thread's name to be set in copy_process
UBSAN: shift-out-of-bounds in dbAllocBits jfs -1 syz, C error done 4 1271d 1404d 22/29 1163d fad376fce0af fs/jfs: fix shift exponent db_agl2size negative
kernel BUG in fou_build_udp net -1 syz, C 1 1198d 1198d 22/29 1163d c88f8d5cd95f UPSTREAM: sit: update dev->needed_headroom in ipip6_tunnel_bind_dev()
KASAN: use-after-free Read in io_worker_get io-uring 19 syz, C done done 5 1279d 1313d 22/29 1163d e6db6f9398da io_uring/io-wq: only free worker if it was allocated for creation
INFO: task hung in nilfs_segctor_thread nilfs 1 syz, C error 94 1200d 1374d 22/29 1163d 99b9402a36f0 nilfs2: fix underflow in second superblock position calculations
KASAN: use-after-free Read in do_accept hams 19 1 1309d 1304d 22/29 1163d 409db27e3a2e netrom: Fix use-after-free of a listening socket.
general protection fault in drm_crtc_next_vblank_start dri 2 syz, C done 4 1232d 1229d 22/29 1163d 6f1ccbf07453 drm/vblank: Fix for drivers that do not drm_vblank_init()
KCSAN: data-race in ip_finish_output2 / ip_tunnel_xmit net 6 1 1293d 1292d 22/29 1163d 4b397c06cb98 net: tunnels: annotate lockless accesses to dev->needed_headroom
memory leak in nr_create (2) hams 3 syz, C 11 1233d 1293d 22/29 1163d 611792920925 netrom: Fix use-after-free caused by accept on already connected socket
kernel BUG in rxrpc_put_call afs net -1 syz, C done 9 1301d 1313d 22/29 1163d 01644a1f98ff rxrpc: Fix wrong error return in rxrpc_connect_call()
kernel BUG in rxrpc_put_peer net afs -1 syz, C 80 1304d 1347d 22/29 1163d 9d35d880e0e4 rxrpc: Move client call connection to the I/O thread 03fc55adf876 rxrpc: Only disconnect calls in the I/O thread
WARNING in nilfs_dat_commit_end nilfs -1 syz, C error 267 1257d 1414d 22/29 1163d 602ce7b8e134 nilfs2: prevent WARNING in nilfs_dat_commit_end()
KASAN: slab-use-after-free Read in kvm_tdp_mmu_invalidate_all_roots kvm-x86 19 3 1210d 1208d 22/29 1163d edbdb43fc96b KVM: x86: Preserve TDP MMU roots until they are explicitly invalidated
WARNING: bad unlock balance in l2cap_recv_frame bluetooth 4 75 1206d 1217d 22/29 1163d 25e97f7b1866 Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp
possible deadlock in freeze_super (2) gfs2 4 syz, C error done 15 1188d 1404d 22/29 1163d b66f723bb552 gfs2: Improve gfs2_make_fs_rw error handling
INFO: task hung in write_cache_pages (2) mm fs 1 syz, C done 36 1191d 1262d 22/29 1163d fb3592c41a44 migrate_pages: fix deadlock in batched migration
KMSAN: uninit-value in vfs_write fs 7 syz, C 3 1286d 1256d 22/29 1163d 2b4c99f7d9a5 can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write
WARNING in _copy_from_iter block tipc -1 syz, C error 32057 1250d 1345d 22/29 1163d 11a4d6f67cf5 tipc: fix kernel warning when sending SYN message
UBSAN: shift-out-of-bounds in dbFindCtl jfs -1 syz, C inconclusive done 45 1263d 1405d 22/29 1163d fad376fce0af fs/jfs: fix shift exponent db_agl2size negative
INFO: rcu detected stall in devlink_nl_cmd_port_get_dumpit net 1 syz 7 1262d 1278d 22/29 1163d b20b8aec6ffc devlink: Fix netdev notifier chain corruption
KASAN: use-after-free Read in io_wq_worker_wake io-uring 19 syz, C done done 1 1280d 1313d 22/29 1163d e6db6f9398da io_uring/io-wq: only free worker if it was allocated for creation
UBSAN: array-index-out-of-bounds in __gfs2_iomap_get gfs2 15 syz, C error 26 1208d 1332d 22/29 1163d cfcdb5bad34f gfs2: Fix inode height consistency check
KASAN: slab-use-after-free Read in class_register usb 19 syz, C done 13 1233d 1231d 22/29 1163d f326ea63ecc6 driver core: class: fix slab-use-after-free Read in class_register()
memory leak in ath9k_hif_usb_firmware_cb wireless 3 syz, C 1591 1307d 2103d 22/29 1163d 9b25e3985477 wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function
WARNING in inet_sock_destruct (3) net -1 syz, C 87 1167d 1269d 22/29 1163d 880ce5f20033 net: avoid skb end_offset change in __skb_unclone_keeptruesize()
WARNING in devlink_free net -1 10 1298d 1311d 22/29 1163d 93e71edfd90c devlink: keep the instance mutex alive until references are gone
KMSAN: uninit-value in ipv6_find_tlv net 7 syz, C 271 1204d 2558d 22/29 1163d ea30388baebc ipv6: Fix an uninit variable access bug in __ip6_make_skb()
WARNING in mark_buffer_dirty (4) bfs nilfs -1 syz, C inconclusive 1152 1163d 1502d 22/29 1163d 28a65b49eb53 nilfs2: do not write dirty data after degenerating to read-only
possible deadlock in __nilfs_error (2) nilfs 4 1 1244d 1240d 22/29 1163d 42560f9c92cc nilfs2: fix sysfs interface lifetime
WARNING in fscrypt_destroy_keyring ext4 fscrypt -1 syz, C 2 1252d 1250d 22/29 1163d ccb820dc7d22 fscrypt: destroy keyring after security_sb_delete()
WARNING in default_device_exit_batch (4) net -1 syz, C error 954 1239d 1365d 22/29 1163d e667d4690986 bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
upstream-arm64 build error -1 11 1271d 1274d 22/29 1163d d54170812ef1 arm64: fix .idmap.text assertion for large kernels
WARNING: locking bug in __perf_event_task_sched_in (2) perf 4 79 1294d 1312d 22/29 1163d 93e71edfd90c devlink: keep the instance mutex alive until references are gone
memory leak in regulatory_hint_core wireless 3 syz, C 2 1362d 1390d 22/29 1163d 399ab7fe0fa0 net: sched: fix memory leak in tcindex_set_parms
WARNING in __udf_add_aext udf -1 syz, C error 170 1166d 1404d 22/29 1163d e9109a92d2a9 udf: Convert udf_rename() to new directory iteration code
BUG: unable to handle kernel NULL pointer dereference in __writepage udf 10 syz, C done 17 1272d 1336d 22/29 1163d 79d3c6dbada4 udf: Convert in-ICB files to use udf_writepages()
KMSAN: kernel-infoleak in copyout (2) net 17 syz, C 6723 1163d 2332d 22/29 1163d 8222d5910dae xfrm: Zero padding when dumping algos and encap
WARNING in ath6kl_htc_pipe_rx_complete usb wireless -1 syz, C error 2008 1202d 2472d 22/29 1163d 75c4a8154cb6 wifi: ath6kl: reduce WARN to dev_dbg() in callback
WARNING in udf_setsize udf -1 syz, C done 24 1166d 1336d 22/29 1163d 256fe4162f8b udf: Do not update file length for failed writes to inline files
kernel BUG in hfs_bnode_put hfs -1 syz, C error 5 1294d 1348d 22/29 1163d a9dc087fd3c4 hfs: fix missing hfs_bnode_get() in __hfs_bnode_create
KASAN: null-ptr-deref Read in __fl_put net 11 syz, C error 16 1245d 1264d 22/29 1163d dfd2f0eb2347 net/sched: flower: fix fl_change() error recovery path
general protection fault in udf_fiiter_write_fi udf 2 syz, C error 2 1310d 1313d 22/29 1163d f950fd052913 udf: Protect rename against modification of moved directory
general protection fault in sctp_outq_tail sctp 8 syz, C error 5 1229d 1241d 22/29 1163d 2584024b2355 sctp: check send stream number after wait_for_sndbuf
WARNING: CPU: NUM PID: NUM at mm/page_alloc.c:LINE get_page_from_freeli mm erofs -1 syz, C error 1 1335d 1331d 22/29 1163d 12724ba38992 erofs: fix kvcalloc() misuse with __GFP_NOFAIL
WARNING in kvm_tdp_mmu_invalidate_all_roots kvm-x86 -1 1658 1208d 1211d 22/29 1163d edbdb43fc96b KVM: x86: Preserve TDP MMU roots until they are explicitly invalidated
WARNING in kvm_arch_vcpu_ioctl_run (4) kvm-x86 -1 syz, C error 288 1163d 1247d 22/29 1163d 0dc902267cb3 KVM: x86: Suppress pending MMIO write exits if emulator detects exception
WARNING in __mod_timer keyrings lsm -1 2 1230d 1264d 22/29 1163d 63a759694eed debugobject: Prevent init race with static objects
general protection fault in hrtimer_active (5) kernel 2 syz, C error 22 1278d 1282d 22/29 1163d 4fab64126891 net/sched: fix error recovery in qdisc_create()
WARNING in __kernel_read (2) fsverity -1 syz, C error 318 1207d 2148d 22/29 1163d 04839139213c fsverity: reject FS_IOC_ENABLE_VERITY on mode 3 fds
INFO: task hung in extent_write_cache_pages btrfs 1 syz, C error 5 1194d 1303d 22/29 1163d 519b7e13b5ae btrfs: lock the inode in shared mode before starting fiemap
kernel BUG in inet_sock_destruct net -1 syz, C error 3 1319d 1319d 22/29 1163d 1ac885574470 inet: control sockets should not use current thread task_frag
possible deadlock in inet_put_port net 4 2 1304d 1304d 22/29 1163d b9fb10d131b8 l2tp: prevent lockdep issue in l2tp_tunnel_register()
BUG: corrupted list in taprio_destroy net 8 syz, C done 2 1280d 1280d 22/29 1163d 4fab64126891 net/sched: fix error recovery in qdisc_create()
WARNING: suspicious RCU usage in mas_start kernfs 4 syz, C error done 23 1235d 1267d 22/29 1163d 6db504ce55bd mm/ksm: fix race with VMA iteration and mm_struct teardown
WARNING in shark_write_val/usb_submit_urb usb -1 syz, C error done 51 1220d 2580d 22/29 1163d 76e31045ba03 media: radio-shark: Add endpoint checks
memory leak in prctl mm 3 syz, C 1 1336d 1332d 22/29 1163d a1193de562f5 mm: fix vma->anon_name memory leak for anonymous shmem VMAs
KCSAN: data-race in netlink_recvmsg / netlink_recvmsg (6) net 6 2 1231d 1229d 22/29 1163d a1865f2e7d10 netlink: annotate lockless accesses to nlk->max_recvmsg_len
WARNING in print_tainted ext4 -1 syz, C 162 1163d 1334d 22/29 1163d c6adf659a8ba can: isotp: check CAN address family in isotp_bind() 4f027cba8216 can: isotp: split tx timer into transmission and timeout
WARNING in vkms_get_vblank_timestamp dri -1 syz error 41 1166d 1226d 22/29 1163d f2c7ca890182 drm/atomic-helper: Don't set deadline for modesets
KASAN: invalid-free in skb_free_head (2) net 24 syz, C error 25 1204d 1269d 22/29 1163d 880ce5f20033 net: avoid skb end_offset change in __skb_unclone_keeptruesize()
riscv/fixes test error: BUG: soft lockup in corrupted (2) net virt -1 4 1402d 1479d 22/29 1163d 61fc1ee8be26 riscv: Bump COMMAND_LINE_SIZE value to 1024
general protection fault in skb_dequeue (3) wireless 2 syz, C done 6 1281d 1290d 22/29 1163d 33b3b041543e splice: Add a func to do a splice from an O_DIRECT file without ITER_PIPE
possible deadlock in jbd2_journal_lock_updates ext4 4 syz, C error 83148 1170d 1467d 22/29 1163d 62913ae96de7 ext4, jbd2: add an optimized bmap for the journal inode
memory leak in __build_skb (3) wireless 3 syz, C 2 1323d 1321d 22/29 1163d 9b25e3985477 wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function
INFO: task hung in freeze_super (3) gfs2 1 syz, C error 19 1183d 1344d 22/29 1163d b66f723bb552 gfs2: Improve gfs2_make_fs_rw error handling
KMSAN: uninit-value in qdisc_run kernel 7 syz, C 2 1375d 1311d 22/29 1163d 3a415d59c1db net/sched: sch_taprio: fix possible use-after-free
UBSAN: shift-out-of-bounds in ext2_fill_super ext4 -1 syz, C 2265 1163d 1267d 22/29 1163d 62aeb94433fc ext2: Check block size validity during mount
KASAN: wild-memory-access Read in io_wq_worker_running io-uring 19 syz, C 39 1309d 1315d 22/29 1163d e6db6f9398da io_uring/io-wq: only free worker if it was allocated for creation
KASAN: slab-out-of-bounds Read in hdr_delete_de ntfs3 17 syz, C error 2 1347d 1347d 22/29 1163d ab84eee4c7ab fs/ntfs3: Fix slab-out-of-bounds read in hdr_delete_de()
WARNING in inet_csk_destroy_sock (3) net -1 1 1177d 1177d 22/29 1176d e0833d1fedb0 dccp/tcp: Fixup bhash2 bucket when connect() fails.
WARNING in submit_bio_checks -1 syz, C done unreliable 1851 1606d 2225d 22/29 1215d 57e95e4670d1 block: fix and cleanup bio_check_ro
general protection fault in dma_fence_array_first dri media 2 syz, C done 7 1599d 1599d 22/29 1220d 21d139d73f77 dma-buf/sync-file: fix logic error in new fence merge code
BUG: sleeping function called from invalid context in folio_copy mm 5 syz, C unreliable 271 1848d 1846d 22/29 1220d 715cbfd6c5c5 mm/migrate: Add folio_migrate_copy()
KASAN: use-after-free Read in hci_cmd_timeout 19 syz, C done error 371 1344d 2656d 22/29 1220d 97dfaf073f58 Bluetooth: hci_sync: cancel cmd_timer if hci_open failed
KASAN: slab-out-of-bounds Read in sk_psock_get net 17 syz, C done error 9 1480d 1815d 22/29 1220d 2a0133723f9e net: fix refcount bug in sk_psock_get (2)
KASAN: use-after-free Read in delete_partition (2) block 19 syz, C done 1 1963d 1963d 22/29 1220d b5cfbd35ecca block: check disk exist before trying to add partition
INFO: task hung in port100_probe usb nfc 1 syz, C error inconclusive 10 1621d 1879d 22/29 1220d f80cfe2f2658 NFC: port100: fix use-after-free in port100_send_complete
KASAN: slab-out-of-bounds Read in ntfs_get_ea ntfs3 17 syz, C error done 9 1370d 1438d 22/29 1220d 0e8235d28f3a fs/ntfs3: Check fields while reading
possible deadlock in nci_start_poll net nfc 4 syz, C error done 83 1268d 1369d 22/29 1221d b2e44aac91b2 NFC: nci: Allow to create multiple virtual nci devices
possible deadlock in bpf_trace_printk bpf trace 4 syz, C done done 68 1272d 1527d 22/29 1240d 05b24ff9b2cf bpf: Prevent bpf program recursion for raw tracepoint probes
WARNING in btrfs_run_delayed_refs btrfs -1 syz, C error done 15 1284d 1397d 22/29 1248d 8bb808c6ad91 btrfs: don't print stack trace when transaction is aborted due to ENOMEM
kernel BUG in pskb_expand_head net -1 syz, C done 1600 1282d 1733d 22/29 1266d 5f33a09e769a can: isotp: convert struct tpcon::{idx,len} to unsigned int 7c759040c1dd can: isotp: fix potential CAN frame reception race in isotp_rcv()
KMSAN: uninit-value in kvm_irq_delivery_to_apic_fast kvm-x86 7 syz, C 20 1475d 1508d 22/29 1267d 8a414f943f8b KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op() KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op()
kernel BUG in __text_poke kernel -1 syz, C 80 1467d 1642d 22/29 1267d 1d5f82d9dd47 bpf, x86: fix freeing of not-finalized bpf_prog_pack d24d2a2b0a81 bpf: bpf_prog_pack: Set proper size before freeing ro_header
KASAN: vmalloc-out-of-bounds Read in bpf_jit_free bpf 17 syz, C 68 1466d 1642d 22/29 1267d 1d5f82d9dd47 bpf, x86: fix freeing of not-finalized bpf_prog_pack d24d2a2b0a81 bpf: bpf_prog_pack: Set proper size before freeing ro_header
WARNING in __dev_queue_xmit -1 syz, C done 16774 1267d 1481d 22/29 1267d dc633700f00f net/af_packet: check len when min_header_len equals to 0 b12e924a2f5b net/ieee802154: don't warn zero-sized raw_sendmsg() 3a4d061c699b net/ieee802154: reject zero-sized raw_sendmsg()
INFO: trying to register non-static key in ieee80211_do_stop wireless -1 syz, C error 70591 1452d 1492d 22/29 1267d aa40d5a43526 wifi: mac80211: do not abuse fq.lock in ieee80211_do_stop() wifi: mac80211: do not abuse fq.lock in ieee80211_do_stop()
KASAN: use-after-free Read in mgmt_pending_remove bluetooth 19 syz, C unreliable 9 1438d 1458d 22/29 1267d 3cfbc6ac22d6 Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor()
WARNING in alloc_charge_hpage mm -1 syz, C error 112 1316d 1386d 22/29 1267d e031ff96b334 mm: khugepaged: allow page allocation fallback to eligible nodes dec1d352de5c mm: replace VM_WARN_ON to pr_warn if the node is offline with __GFP_THISNODE
possible deadlock in worker_thread rdma 4 1 1650d 1646d 22/29 1267d 081bdc9fe05b RDMA/ib_srp: Fix a deadlock bf23747ee053 loop: revert "make autoclear operation asynchronous"
KMSAN: uninit-value in ext4_evict_inode ext4 7 2734 1313d 1367d 22/29 1267d 7ea71af94eaa ext4: fix uninititialized value in 'ext4_evict_inode'
WARNING in ipgre_xmit net -1 syz, C done 9916 1518d 1534d 22/29 1267d 8d21e9963bec ip_gre: test csum_start instead of transport header
kernel panic: corrupted stack end in vm_area_alloc mm 2 1 1501d 1501d 22/29 1267d b81d591386c3 riscv: Increase stack size under KASAN
kernel panic: corrupted stack end in vlan_ioctl_handler kernfs 2 1 1523d 1523d 22/29 1267d b81d591386c3 riscv: Increase stack size under KASAN
inconsistent lock state in fs_reclaim_acquire (3) kernel 4 syz, C 2 1382d 1388d 22/29 1267d 2d1f274b95c6 skmsg: pass gfp argument to alloc_sk_msg()
net boot error: INFO: task hung in add_early_randomness crypto -1 18 1520d 1526d 22/29 1267d 228432551bd8 virtio-rng: make device ready before making request
KASAN: use-after-free Read in mas_next_nentry fs mm 19 syz, C error done 343 1376d 1570d 22/29 1267d 59f2f4b8a757 fs/userfaultfd: Fix maple tree iterator in userfaultfd_unregister()
KASAN: use-after-free Read in tty_release io-uring serial 19 syz, C done 23 1596d 1606d 22/29 1267d d89a4fac0fbc io_uring: fix assuming triggered poll waitqueue is the single poll
linux-next boot error: kernel BUG in putname fs -1 1 1459d 1459d 22/29 1267d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
WARNING: ODEBUG bug in ops_free_list net -1 1 1595d 1595d 22/29 1267d 1946014ca3b1 rxrpc: fix a race in rxrpc_exit_net()
KMSAN: uninit-value in ax88178_reset usb 7 syz, C 284 1575d 1682d 22/29 1267d 920a9fa27e78 net: asix: add proper error handling of usb read errors
general protection fault in br_mst_info_size bridge 2 syz, C error 26 1604d 1607d 22/29 1267d cde3fc244b3d net: bridge: mst: prevent NULL deref in br_mst_info_size()
KASAN: wild-memory-access Read in skb_copy_bits net 17 syz, C 2 1435d 1435d 22/29 1267d 0d24148bd276 inet: ping: fix recent breakage
general protection fault in list_lru_add mm 8 syz, C done 1125 1316d 1605d 22/29 1267d ae085d7f9365 mm: kfence: fix missing objcg housekeeping for SLAB
KCSAN: data-race in __ip_append_data / __ip_append_data net 6 1 1652d 1648d 22/29 1267d a1cdec57e03a net-timestamp: convert sk->sk_tskey to atomic_t
kernel panic: corrupted stack end in tun_chr_close fs 2 1 1559d 1559d 22/29 1267d b81d591386c3 riscv: Increase stack size under KASAN
KMSAN: uninit-value in tipc_nl_compat_name_table_dump (3) tipc 7 syz, C 65 1364d 1380d 22/29 1267d 1c075b192fe4 tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header
WARNING: kmalloc bug in xdp_umem_create (2) bpf net -1 syz, C done 21 1646d 1712d 22/29 1267d 0708a0afe291 mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls
general protection fault in sg_alloc_append_table_from_pages dri media 11 syz, C done 477 1299d 1766d 22/29 1267d 2b6dd600dd72 udmabuf: validate ubuf->pagecount
WARNING in c_start kernel -1 75097 1398d 1400d 22/29 1267d 80493877d7d0 Revert "cpumask: fix checking valid cpu range".
KCSAN: data-race in tcp_send_challenge_ack / tcp_send_challenge_ack net 6 1 1445d 1445d 22/29 1267d 8c70521238b7 tcp: annotate data-race around challenge_timestamp
BUG: sleeping function called from invalid context in sk_psock_skb_ingress_self bpf net 5 syz, C done 151 1377d 1399d 22/29 1267d 2d1f274b95c6 skmsg: pass gfp argument to alloc_sk_msg()
INFO: task hung in addrconf_verify_work (6) 1 syz, C done 86 1271d 1508d 22/29 1267d ff1fa2081d17 net: tun: avoid disabling NAPI twice
KASAN: use-after-free Read in ipvlan_queue_xmit (3) net 19 syz, C error error 8 1471d 2069d 22/29 1267d 81225b2ea161 ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
WARNING in change_protection mm -1 syz, C unreliable 13 1409d 1414d 22/29 1267d 515778e2d790 mm/uffd: fix warning without PTE_MARKER_UFFD_WP compiled in
possible deadlock in dccp_v4_ctl_send_reset mptcp 4 syz, C done 26 1354d 1366d 22/29 1267d af295e854a4e l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
WARNING in exit_tasks_rcu_finish kernel -1 syz, C done 20 1521d 1524d 22/29 1267d 0356d4e66214 rcu-tasks: Track blocked RCU Tasks Trace readers
memory leak in kobject_set_name_vargs (5) nilfs 3 syz, C 4 1411d 1514d 22/29 1267d d0d51a97063d nilfs2: fix leak of nilfs_root in case of writer thread creation failure
BUG: unable to handle kernel NULL pointer dereference in ni_find_attr ntfs3 10 syz, C done done 81 1316d 1451d 22/29 1267d 2681631c2973 fs/ntfs3: Add null pointer check to attr_load_runs_vcn
possible deadlock in console_unlock (2) serial 4 syz, C error done 599 1284d 1734d 22/29 1267d 09c5ba0aa2fc printk: add kthread console printers
KASAN: use-after-free Read in ucma_destroy_private_ctx rdma 19 1 1690d 1684d 22/29 1267d 36e8169ec973 RDMA/ucma: Protect mc during concurrent multicast leaves
general protection fault in llc_build_and_send_xid_pkt net 2 syz, C done 2 1604d 1604d 22/29 1267d 2d327a79ee17 llc: only change llc->dev when bind() succeeds
KASAN: use-after-free Read in unregister_shrinker (2) mm 19 syz, C error 3799 1379d 1423d 22/29 1267d bd86c69dae65 NFSD: unregister shrinker when nfsd_init_net() fails
linux-next boot error: general protection fault in driver_bound kernel -1 1 1459d 1459d 22/29 1267d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
KMSAN: uninit-value in mpol_rebind_mm (2) mm 7 syz, C 11 1521d 1645d 22/29 1267d 018160ad314d mm/mempolicy: fix uninit-value in mpol_rebind_policy()
possible deadlock in snd_timer_interrupt (2) sound 4 syz, C error 29 1466d 1727d 22/29 1267d 95cc637c1afd ALSA: timer: Use deferred fasync helper
possible deadlock in display_open usb 4 syz, C inconclusive 48888 1535d 2562d 22/29 1267d db264d4c66c0 media: imon: reorganize serialization
kernel BUG in __clear_extent_bit btrfs -1 syz, C error 5 1343d 1358d 22/29 1267d 5a75034e71ef btrfs: do not panic if we can't allocate a prealloc extent state
KASAN: use-after-free Read in reqsk_queue_unlink net 19 4 1353d 1404d 22/29 1267d 740ea3c4a0b2 tcp: Clean up kernel listener's reqsk in inet_twsk_purge()
kernel BUG in dev_args_match_device btrfs -1 1 1381d 1381d 22/29 1267d 0fca385d6ebc btrfs: fix match incorrectly in dev_args_match_device
KASAN: use-after-free Read in pty_close serial io-uring fuse 19 syz, C done 4 1472d 1499d 22/29 1267d 7a121ced6e64 io_uring: don't miss setting REQ_F_DOUBLE_POLL
KASAN: vmalloc-out-of-bounds Write in tpg_fill_plane_buffer (2) media 21 syz, C inconclusive done 14 1292d 1804d 22/29 1267d 94a7ad928346 media: vivid: fix compose size exceed boundary
general protection fault in pm_qos_update_target pm 2 syz inconclusive done 1 1607d 1915d 22/29 1267d 3c3201f8c7bb ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls
KMSAN: uninit-value in asix_mdio_read (3) usb 7 syz, C 1582 1550d 1615d 22/29 1267d 920a9fa27e78 net: asix: add proper error handling of usb read errors
WARNING: refcount bug in tcp_release_cb net 13 2 1342d 1352d 22/29 1267d 0a182f8d6074 bpf, sockmap: fix race in sock_map_free()
INFO: rcu detected stall in sys_lsetxattr fs 1 syz, C done 2 1578d 1578d 22/29 1267d 0014edaedfd8 fs: unset MNT_WRITE_HOLD on failure
WARNING in ext4_da_release_space ext4 -1 syz, C error 9 1279d 1402d 22/29 1267d 1b8f787ef547 ext4: fix warning in 'ext4_da_release_space'
BUG: unable to handle kernel NULL pointer dereference in ntfs_sparse_cluster ntfs3 10 syz, C error done 11 1333d 1335d 22/29 1267d c380b52f6c57 fs/ntfs3: Change new sparse cluster processing
WARNING in cpuset_attach cgroups -1 syz, C error 20922 1450d 1451d 22/29 1267d 43626dade36f cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
net boot error: WARNING in genl_register_family net -1 3 1386d 1386d 22/29 1267d e4ba4554209f net: openvswitch: add missing .resv_start_op
WARNING in __skb_flow_dissect (4) net -1 syz, C error 6 1378d 1387d 22/29 1267d 9f225444467b ppp: associate skb with a device at tx
WARNING in inet_csk_get_port net -1 syz, C done 1166 1316d 1544d 22/29 1267d 593d1ebe00a4 Revert "net: Add a second bind table hashed by port and address"
upstream boot error: general protection fault in __proc_create fs -1 1 1461d 1461d 22/29 1267d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
panic: runtime error: floating point error kernel 2 2 1279d 1558d 22/29 1267d 59f5ede3bc0f x86/fpu: Prevent FPU state corruption
inconsistent lock state in kmem_cache_alloc_trace (2) kernel 4 2 1396d 1397d 22/29 1267d 2d1f274b95c6 skmsg: pass gfp argument to alloc_sk_msg()
memory leak in __insert_pending ext4 3 syz, C 1 1384d 1380d 22/29 1267d 1da18e38cb97 ext4: fix reserved cluster accounting in __es_remove_extent()
memory leak in crypto_create_tfm_node ext4 crypto 3 syz, C 3 1397d 1403d 22/29 1267d ccd30a476f8e fscrypt: fix keyring memory leak on mount failure
WARNING in vcpu_enter_guest (2) kvm-x86 -1 syz, C 42 1380d 1388d 22/29 1267d dea0d5a2fde6 KVM: x86: Exempt pending triple fault from event injection sanity check
KASAN: use-after-free Read in drm_gem_object_release_handle 19 syz, C done 362 1348d 1732d 22/29 1267d 24013314be6e drm/shmem-helper: Remove errant put in error path
KMSAN: uninit-value in btrfs_clean_tree_block (2) btrfs nilfs 7 15960 1267d 1728d 22/29 1267d cbddcc4fa344 btrfs: set generation before calling btrfs_clean_tree_block in btrfs_init_new_buffer
KASAN: use-after-free Read in do_shrink_slab (2) mm 19 105 1393d 1417d 22/29 1267d bd86c69dae65 NFSD: unregister shrinker when nfsd_init_net() fails
WARNING in ext2_fill_super ext4 -1 syz, C 2 1453d 1449d 22/29 1267d d766f2d1e3e3 ext2: Add sanity checks for group and filesystem size e7c7fbb9a857 ext2: Use kvmalloc() for group descriptor array
KASAN: use-after-free Read in btrfs_scan_one_device (2) btrfs 19 syz, C 2 1629d 1625d 22/29 1267d 79c9234ba596 btrfs: don't access possibly stale fs_info data in device_list_add
KASAN: use-after-free Read in free_netdev (3) net 19 syz, C inconclusive 130 1359d 1515d 22/29 1267d 3b9bc84d3111 net: tun: unlink NAPI from device on destruction
WARNING in bpf_skb_load_helper_16_no_cache bpf -1 syz, C done 6 1474d 1504d 22/29 1267d 0326195f523a bpf: Make sure mac_header was set before using it
general protection fault in release_udmabuf dri media 8 syz, C inconclusive 31 1406d 1457d 22/29 1267d d9c04a1b7a15 udmabuf: Set ubuf->sg = NULL if the creation of sg table fails
KASAN: slab-out-of-bounds Read in cttimeout_net_exit netfilter 17 syz, C 1444 1512d 1550d 22/29 1267d aeed55a08d0b netfilter: cttimeout: fix slab-out-of-bounds read in cttimeout_net_exit 394e771684f7 netfilter: cttimeout: fix slab-out-of-bounds read typo in cttimeout_net_exit
WARNING in snd_usbmidi_output_open sound usb -1 syz, C done 37 1365d 1372d 22/29 1267d ad72c3c3f6eb ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open()
WARNING in send_packet/usb_submit_urb usb -1 syz, C inconclusive 847 1335d 1501d 22/29 1267d 813ceef062b5 media: imon: fix a race condition in send_packet()
KASAN: slab-out-of-bounds Read in io_uring_show_fdinfo io-uring 19 syz, C done 5 1399d 1404d 22/29 1267d 00927931cb63 io_uring: fix fdinfo sqe offsets calculation
KCSAN: data-race in dev_activate / qdisc_lookup_rcu net 6 1 1645d 1645d 22/29 1267d 5891cd5ec46c net_sched: add __rcu annotation to netdev->qdisc
KASAN: slab-out-of-bounds Read in thrustmaster_probe usb input 17 syz, C unreliable 92 1612d 1636d 22/29 1267d fc3ef2e3297b HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts
INFO: rcu detected stall in sys_setxattr (2) fs 1 syz, C done 3 1578d 1578d 22/29 1267d 0014edaedfd8 fs: unset MNT_WRITE_HOLD on failure
BUG: unable to handle kernel paging request in vmx_handle_exit_irqoff kvm-x86 8 syz, C error 7736 1359d 1381d 22/29 1267d 1cfaac2400c7 x86/kasan: Populate shadow for shared chunk of the CPU entry area
WARNING in skb_try_coalesce net -1 syz, C error 1521 1539d 1993d 22/29 1267d 763087dab975 net: add skb_set_end_offset() helper
INFO: task hung in misc_open (4) usb 1 syz, C error inconclusive 144 1295d 2008d 22/29 1267d 8386c414e27c PM: hibernate: defer device probing when resuming from hibernation
kernel panic: corrupted stack end in netdev_run_todo net 2 1 1511d 1511d 22/29 1267d b81d591386c3 riscv: Increase stack size under KASAN
general protection fault in sock_reserve_memory net 2 syz, C done 2 1643d 1643d 22/29 1267d 25206111512d crypto: af_alg - get rid of alg_memory_allocated
general protection fault in __dentry_path (2) fs 8 syz, C error 174 1572d 1582d 22/29 1267d 5c697c367a66 KVM: Initialize debugfs_dentry when a VM is created to avoid NULL deref
WARNING in tcp_enter_loss (3) net -1 syz, C inconclusive 7 1384d 1681d 22/29 1267d 0c175da7b037 tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
divide error in dbNextAG jfs 2 syz error 2 1613d 1609d 22/29 1267d 2cc7cc01c15f jfs: fix divide error in dbNextAG
usb-testing boot error: BUG: unable to handle kernel paging request in dequeue_task_fair acpi -1 1 1446d 1446d 22/29 1267d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
general protection fault in tls_sk_proto_close (3) net 2 syz, C done 276 1516d 1915d 22/29 1267d 69135c572d1f net/tls: fix tls_sk_proto_close executed repeatedly
KCSAN: data-race in lru_add_fn / skb_append_pagefrags mm 6 1 1392d 1388d 22/29 1267d 228ebc41dfab net: do not sense pfmemalloc status in skb_append_pagefrags()
possible deadlock in hugetlb_fault mm 4 2 1371d 1379d 22/29 1267d 04ada095dcfc hugetlb: don't delete vma_lock in hugetlb MADV_DONTNEED processing
KASAN: use-after-free Read in nilfs_mdt_destroy nilfs 19 syz, C error 20 1407d 1423d 22/29 1267d 2e488f13755f fs: fix UAF/GPF bug in nilfs_mdt_destroy
KASAN: slab-out-of-bounds Read in hfs_cat_keycmp hfs 17 syz, C error done 2 1270d 1336d 22/29 1267d c53ed55cb275 hfs: Fix OOB Write in hfs_asc2mac
possible deadlock in l2tp_tunnel_register net 4 syz, C error 9492 1267d 1366d 22/29 1267d af295e854a4e l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
general protection fault in em_cmp_match net 10 syz, C 4 1342d 1339d 22/29 1267d 9cd3fd2054c3 net_sched: reject TCF_EM_SIMPLE case for complex ematch module
kernel BUG in __filemap_get_folio mm -1 syz, C done 814 1406d 1577d 22/29 1267d 63b1898fffcd XArray: Disallow sibling entries of nodes
kernel BUG in commit_creds lsm io-uring -1 syz, C done 5 1578d 1583d 22/29 1267d 701521403cfb io_uring: abort file assignment prior to assigning creds
WARNING in mntput_no_expire (3) fs -1 syz, C inconclusive 29 1317d 1733d 22/29 1267d a91714312eb1 percpu_ref_init(): clean ->percpu_count_ref on failure
WARNING in nilfs_segctor_do_construct nilfs -1 syz, C 5 1293d 1416d 22/29 1267d 723ac751208f nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
KASAN: slab-out-of-bounds Read in vxlan_vnifilter_dump_dev 19 syz, C done 30 1597d 1598d 22/29 1267d 9d570741aec1 vxlan: do not feed vxlan_vnifilter_dump_dev with non vxlan devices
general protection fault in ip6_rcv_core net 8 syz, C done 275 1357d 1584d 22/29 1267d 0339d25a2807 ipv6: fix NULL deref in ip6_rcv_core()
BUG: unable to handle kernel paging request in ovl_set_acl overlayfs 8 syz, C error 4 1379d 1381d 22/29 1267d 5b52aebef895 ovl: call posix_acl_release() after error checking
KASAN: use-after-free Read in z_erofs_transform_plain erofs 19 syz, C done 4 1271d 1348d 22/29 1267d c505feba4c0d erofs: validate the extent length for uncompressed pclusters
KMSAN: uninit-value in mpol_rebind_task (2) mm 7 syz, C 7 1523d 1683d 22/29 1267d 018160ad314d mm/mempolicy: fix uninit-value in mpol_rebind_policy()
KASAN: use-after-free Read in nh_netdev_event net 19 3 1367d 1444d 22/29 1267d 5daadc86f27e net: tun: Fix use-after-free in tun_detach()
KASAN: use-after-free Read in rxrpc_lookup_local afs net 22 syz, C 3997 1317d 1347d 22/29 1267d 8fbcc83334a7 rxrpc: Fix I/O thread startup getting skipped eaa02390adb0 rxrpc: Fix NULL deref in rxrpc_unuse_local()
WARNING in kernfs_active kernfs -1 syz, C error 150 1281d 1404d 22/29 1267d 1edfe4ea16ca kernfs: Fix spurious lockdep warning in kernfs_find_and_get_node_by_id()
kernel BUG in warn_crc32c_csum_combine net exfat -1 syz, C error 17 1381d 1390d 22/29 1267d 7f57f8165cb6 af_key: Fix send_acquire race with pfkey_register
kernel panic: corrupted stack end in nf_tables_getset net 2 1 1376d 1376d 22/29 1267d b81d591386c3 riscv: Increase stack size under KASAN
net-next test error: WARNING in devl_port_unregister net -1 52 1373d 1375d 22/29 1267d 1fb22ed67195 devlink: Fix warning when unregistering a port
KMSAN: kernel-infoleak in v4l2_compat_put_array_args media 17 8 1365d 1669d 22/29 1267d 4e768c8e34e6 media: v4l2-compat-ioctl32.c: zero buffer passed to v4l2_compat_get_array_args()
kernel panic: stack is corrupted in ksys_write fs 2 1 1440d 1436d 22/29 1267d b81d591386c3 riscv: Increase stack size under KASAN
KASAN: use-after-free Read in dev_uevent kernel 19 syz 54 1274d 2247d 22/29 1267d 16b1941eac2b usb: gadget: Fix use-after-free bug by not setting udc->dev.driver
WARNING in u32_change net -1 syz, C 28 1322d 1419d 22/29 1267d 7cba18332e36 net: sched: cls_u32: Avoid memcpy() false-positive warning
general protection fault in metadata_dst_free net 2 syz, C 348 1398d 1437d 22/29 1267d c52add61c27e macsec: don't free NULL metadata_dst
memory leak in watch_queue_set_size kernel 3 syz, C 1 1609d 1602d 22/29 1267d b490207017ba watch_queue: Free the page array when watch_queue is dismantled
memory leak in virtual_ncidev_write net nfc 3 syz, C 1 1366d 1366d 22/29 1267d 53270fb0fd77 NFC: nci: fix memory leak in nci_rx_data_packet()
memory leak in __vsock_create net virt io-uring 3 syz, C 1 1591d 1587d 22/29 1267d 7e97cfed9929 vsock: Fix memory leak in vsock_connect()
kernel panic: corrupted stack end in inet6_sendmsg netfilter 2 1 1415d 1415d 22/29 1267d b81d591386c3 riscv: Increase stack size under KASAN
WARNING: locking bug in hugetlb_no_page mm 4 syz, C 1 1371d 1371d 22/29 1267d 04ada095dcfc hugetlb: don't delete vma_lock in hugetlb MADV_DONTNEED processing
KASAN: slab-out-of-bounds Read in __fscache_acquire_volume fs mm 17 syz, C done done 1 1446d 1446d 22/29 1267d 9f0933ac026f fscache: fix OOB Read in __fscache_acquire_volume
usb-testing boot error: BUG: unable to handle kernel paging request in __handle_mm_fault mm -1 1 1460d 1460d 22/29 1267d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
general protection fault in blk_mq_update_nr_hw_queues block 2 syz, C error 16 1364d 1377d 22/29 1267d 90b0296ece4b block: fix crash in 'blk_mq_elv_switch_none'
KCSAN: data-race in netlink_recvmsg / netlink_recvmsg (5) net 6 12 1309d 1562d 22/29 1267d d5076fe4049c netlink: do not reset transport header in netlink_recvmsg()
general protection fault in __inet_hash_connect net 10 5 1375d 1521d 22/29 1267d 593d1ebe00a4 Revert "net: Add a second bind table hashed by port and address"
kernel panic: corrupted stack end in tc_ctl_action net 2 2 1399d 1453d 22/29 1267d b81d591386c3 riscv: Increase stack size under KASAN
WARNING in skb_checksum_help net -1 15 1272d 1445d 22/29 1267d 0d24148bd276 inet: ping: fix recent breakage
WARNING in skb_tunnel_check_pmtu net -1 syz, C done 8 1509d 1515d 22/29 1267d 853a76148802 tunnels: do not assume mac header is set in skb_tunnel_check_pmtu()
general protection fault in nilfs_palloc_commit_free_entry nilfs 2 syz, C error 2 1383d 1391d 22/29 1267d f0a0ccda18d6 nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
BUG: sleeping function called from invalid context in smc_pnet_apply_ib rdma 5 syz, C inconclusive 92 1631d 1639d 22/29 1267d 7ff57e98fb78 net/smc: Use a mutex for locking "struct smc_pnettable"
KASAN: use-after-free Read in nf_hook_entries_grow netfilter 19 syz, C done done 5 1658d 1698d 22/29 1267d 6069da443bf6 netfilter: nf_tables: unregister flowtable hooks on netns exit
BUG: unable to handle kernel NULL pointer dereference in lock_page nilfs 10 syz, C error 4 1377d 1386d 22/29 1267d 512c5ca01a36 nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty
WARNING: lock held when returning to user space in ieee80211_change_mac wireless 4 1 1417d 1413d 22/29 1267d ceb3d688f922 wifi: mac80211: unlock on error in ieee80211_can_powered_addr_change()
KASAN: use-after-free Read in do_sync_mmap_readahead mm fs 19 1 1546d 1542d 22/29 1267d dcfa24ba6899 filemap: Cache the value of vm_flags
KMSAN: kernel-infoleak in vcs_read (2) serial 18 syz, C 1556 1290d 2445d 22/29 1267d af77c56aa353 tty: vt: initialize unicode screen buffer
usb-testing boot error: general protection fault in rcu_core fs mm -1 23 1441d 1460d 22/29 1267d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
memory leak in ipv6_renew_options net 3 syz, C 1 1493d 1489d 22/29 1267d e27326009a3d net: ping6: Fix memleak in ipv6_renew_options().
KMSAN: uninit-value in pagecache_write ext4 7 5 1393d 1376d 22/29 1267d 956510c0c743 fs: ext4: initialize fsdata in pagecache_write()
KASAN: vmalloc-out-of-bounds Write in imageblit (2) fbdev 21 syz, C done 701 1441d 1729d 22/29 1267d 566f9c9f8933 vt: Clear selection before changing the font
UBSAN: shift-out-of-bounds in ntfs_fill_super ntfs3 -1 syz, C done 3643 1267d 1576d 22/29 1267d a3b774342fa7 fs/ntfs3: validate BOOT sectors_per_clusters
possible deadlock in kcm_ioctl net 4 syz, C error 20 1453d 1454d 22/29 1267d 8fc29ff3910f kcm: fix strp_init() order and cleanup
KMSAN: uninit-value in can_send can 7 syz, C 630 1362d 1380d 22/29 1267d 3eb3d283e857 can: j1939: j1939_send_one(): fix missing CAN header initialization
KASAN: invalid-access Read in copy_page arm 17 302 1403d 1470d 22/29 1267d a8e5e5146ad0 arm64: mte: Avoid setting PG_mte_tagged if no tags cleared or restored
memory leak in __tcp_send_ack net 3 syz, C 10 1405d 1936d 22/29 1267d 07d120aa33cc net: tun: call napi_schedule_prep() to ensure we own a napi
INFO: task hung in hub_port_init (2) usb 1 syz, C error 486 1270d 1732d 22/29 1267d 26fbe9772b8c USB: core: Fix hang in usb_kill_urb by adding memory barriers
usb-testing boot error: WARNING in anon_vma_clone mm -1 1 1460d 1460d 22/29 1267d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
KMSAN: uninit-value in __tipc_nl_bearer_enable tipc 7 syz, C 1288 1268d 2796d 22/29 1267d 7f36f798f89b tipc: check attribute length for bearer name
kernel BUG in __skb_gso_segment net -1 syz, C done 11 1534d 1533d 22/29 1267d e9d3f80935b6 net/af_packet: make sure to pull mac header
inconsistent lock state in kmem_cache_alloc io-uring 4 syz, C 4 1411d 1418d 22/29 1267d b000145e9907 io_uring/rw: defer fsnotify calls to task context
general protection fault in rlb_clear_slave net 2 1 1510d 1510d 22/29 1267d ab84db251c04 net: bonding: fix possible NULL deref in rlb code
WARNING: ODEBUG bug in mgmt_index_removed bluetooth -1 1 1441d 1436d 22/29 1267d f74ca25d6d66 Bluetooth: avoid hci_dev_test_and_set_flag() in mgmt_init_hdev()
inconsistent lock state in padata_do_serial (2) crypto 4 1 1430d 1426d 22/29 1267d 34c3a47d20ae padata: Always leave BHs disabled when running ->parallel()
WARNING in vmx_queue_exception (2) kvm-x86 -1 syz, C 5 1566d 1565d 22/29 1267d 053d2290c030 KVM: VMX: Exit to userspace if vCPU has injected exception and invalid state
usb-testing boot error: INFO: task hung in add_early_randomness crypto -1 7 1523d 1529d 22/29 1267d 228432551bd8 virtio-rng: make device ready before making request
BUG: unable to handle kernel NULL pointer dereference in gsmld_receive_buf serial 10 syz, C error 324 1440d 1467d 22/29 1267d f16c6d2e58a4 tty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf()
KASAN: null-ptr-deref Write in io_file_get_normal io-uring fs 12 syz, C done 107 1512d 1597d 22/29 1267d d5361233e9ab io_uring: drop the old style inflight file tracking
general protection fault in i2c_setup_smbus_alert acpi usb 2 syz, C done 20 1634d 1652d 22/29 1267d 8302532f47bb i2c: smbus: Check for parent device before dereference
KASAN: use-after-free Write in sco_sock_timeout bluetooth 22 syz, C done 272 1542d 1814d 22/29 1267d 7aa1e7d15f8a Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout
general protection fault in tcp_create_openreq_child net 2 syz, C unreliable 83 1572d 1574d 22/29 1267d ba5a4fdd63ae tcp: make sure treq->af_specific is initialized
INFO: trying to register non-static key in rxe_cleanup_task rdma -1 syz 299 1268d 1544d 22/29 1267d fd5382c5805c RDMA/rxe: Fix error unwind in rxe_create_qp()
WARNING in netif_rx can -1 2 1633d 1633d 22/29 1267d 167053f8dd0e net: Correct wrong BH disable in hard-interrupt.
KASAN: out-of-bounds Read in ntfs_set_ea ntfs3 17 syz, C error done 4 1333d 1335d 22/29 1267d 0e8235d28f3a fs/ntfs3: Check fields while reading
UBSAN: array-index-out-of-bounds in nfnetlink_unbind netfilter 17 syz, C done 6621 1533d 1550d 22/29 1267d ffd219efd9ee netfilter: nfnetlink: fix warn in nfnetlink_unbind
INFO: trying to register non-static key in nilfs_bmap_lookup_at_level nilfs -1 syz, C error 124 1376d 1415d 22/29 1267d 21a87d88c225 nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level()
general protection fault in ovl_dentry_upper overlayfs 2 syz, C error 2 1363d 1359d 22/29 1267d 672e4268b286 ovl: fix use inode directly in rcu-walk mode
net-next test error: WARNING in __napi_schedule wireguard -1 110 1607d 1610d 22/29 1267d 351bdbb6419c net: Revert the softirq will run annotation in ____napi_schedule().
BUG: unable to handle kernel paging request in get_desc kernel 8 syz error 8 1367d 1379d 22/29 1267d 97650148a15e x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
general protection fault in ath9k_hif_usb_rx_cb (2) wireless 2 syz, C error 1678 1465d 2219d 22/29 1267d 0ac4827f78c7 ath9k: fix use-after-free in ath9k_hif_usb_rx_cb
upstream test error: WARNING in __queue_work kernel -1 1 1450d 1445d 22/29 1267d deee93d13d38 Bluetooth: use hdev->workqueue when queuing hdev->{cmd,ncmd}_timer works
UBSAN: shift-out-of-bounds in dbAllocAG jfs -1 syz, C error 10 1384d 1416d 22/29 1267d 898f70669568 fs: jfs: fix shift-out-of-bounds in dbAllocAG
kernel panic: corrupted stack end in tun_chr_ioctl kernfs 2 1 1514d 1514d 22/29 1267d b81d591386c3 riscv: Increase stack size under KASAN
KCSAN: data-race in veth_xmit / veth_xmit net 6 1 1652d 1648d 22/29 1267d 68468d8c4cd4 veth: fix races around rq->rx_notify_masked
KASAN: vmalloc-out-of-bounds Write in ringbuf_map_alloc bpf 21 syz, C done 541 1652d 1655d 22/29 1267d b293dcc473d2 bpf: Use VM_MAP instead of VM_ALLOC for ringbuf
kernel BUG in mld_newpack net -1 1 1399d 1399d 22/29 1267d d89d7ff01235 ipv6: ensure sane device mtu in tunnels
BUG: sleeping function called from invalid context in break_ksm mm 5 syz, C 9 1394d 1394d 22/29 1267d d7c0e68dab98 mm/ksm: convert break_ksm() to use walk_page_range_vma()
KMSAN: uninit-value in ipvlan_queue_xmit net 7 syz, C 2 1445d 2028d 22/29 1267d 81225b2ea161 ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
possible deadlock in btrfs_commit_transaction btrfs 4 syz, C error done 6 1357d 1368d 22/29 1267d b740d8061669 btrfs: free btrfs_path before copying root refs to userspace
net-next boot error: INFO: task hung in add_early_randomness crypto -1 23 1520d 1526d 22/29 1267d 228432551bd8 virtio-rng: make device ready before making request
UBSAN: shift-out-of-bounds in __access_remote_vm ntfs3 -1 syz, C done 3 1455d 1452d 22/29 1267d caad9dd8792a fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
WARNING in kcov_mmap mm -1 14 1544d 1599d 22/29 1267d ecc04463d1a3 kcov: don't generate a warning on vm_insert_page()'s failure
WARNING: suspicious RCU usage in ipmr_rtm_dumplink net 4 11 1508d 1512d 22/29 1267d 0fcae3c8b1b3 ipmr: fix a lockdep splat in ipmr_rtm_dumplink()
possible deadlock in nci_set_local_general_bytes net nfc 4 syz, C 32 1318d 1369d 22/29 1267d b2e44aac91b2 NFC: nci: Allow to create multiple virtual nci devices
KASAN: slab-out-of-bounds Read in run_unpack ntfs3 19 syz, C 97 1314d 1422d 22/29 1267d 887bfc546097 fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
upstream boot error: BUG: corrupted list in copy_process mm -1 1 1461d 1461d 22/29 1267d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
KASAN: use-after-free Read in __snd_rawmidi_transmit_peek sound usb 19 syz error 48 1469d 1579d 22/29 1267d 0665886ad139 ALSA: usb-audio: Clear MIDI port active flag after draining
BUG: MAX_LOCK_DEPTH too low! (3) smc -1 syz, C done 18 1639d 1648d 22/29 1267d 1de9770d121e net/smc: Avoid overwriting the copies of clcsock callback functions
UBSAN: shift-out-of-bounds in hid_report_raw_event (2) input usb -1 syz, C error 1 1372d 1368d 22/29 1267d ec61b4191858 HID: core: fix shift-out-of-bounds in hid_report_raw_event
KASAN: use-after-free Read in port100_send_complete nfc usb 19 syz, C 1 1624d 1620d 22/29 1267d f80cfe2f2658 NFC: port100: fix use-after-free in port100_send_complete
KMSAN: uninit-value in iforce_init_device (2) input 7 3 1403d 1376d 22/29 1267d b8ebf250997c Input: iforce - invert valid length check when fetching device IDs
KASAN: use-after-free Read in usb_udc_uevent usb 19 syz error 30 1478d 2264d 22/29 1267d 2191c00855b0 USB: gadget: Fix use-after-free Read in usb_udc_uevent()
bpf-next boot error: WARNING in bpf_prog_pack_free bpf -1 12 1606d 1607d 22/29 1267d 96805674e562 bpf: Fix bpf_prog_pack for multi-node setup
general protection fault in skb_clone (5) net 10 syz, C done 7 1383d 1400d 22/29 1267d d8b57135fd9f net: hsr: avoid possible NULL deref in skb_clone()
KCSAN: data-race in fib6_info_hw_flags_set / fib6_purge_rt net 6 1 1672d 1670d 22/29 1267d d95d6320ba7a ipv6: fix data-race in fib6_info_hw_flags_set / fib6_purge_rt
KASAN: use-after-free Read in macsec_get_iflink net 19 1 1544d 1540d 22/29 1267d 196a888ca657 macsec: fix UAF bug for real_dev
KASAN: slab-out-of-bounds Write in dbgfs_rm_context_write damon 21 syz, C error 6 1378d 1384d 22/29 1267d 1de09a7281ed mm/damon/dbgfs: check if rm_contexts input is for a real context
KMSAN: kernel-infoleak in _copy_to_iter (7) net 21 syz, C 138977 1267d 1619d 22/29 1267d 633593a80898 sctp: fix kernel-infoleak for SCTP sockets
KASAN: use-after-free Write in inet_put_port net 22 1 1524d 1520d 22/29 1267d 593d1ebe00a4 Revert "net: Add a second bind table hashed by port and address"
upstream boot error: general protection fault in ieee80211_register_hw wireless -1 1 1460d 1460d 22/29 1267d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
KASAN: use-after-free Read in bio_poll block 19 syz, C done 6 1558d 1558d 22/29 1267d 9650b453a3d4 block: ignore RWF_HIPRI hint for sync dio
WARNING in tcp_disconnect net -1 2 1395d 1399d 22/29 1267d 72e560cb8c6f tcp: cdg: allow tcp_cdg_release() to be called multiple times
possible deadlock in virtual_nci_close nfc net 4 syz, C done 939 1268d 1369d 22/29 1267d b2e44aac91b2 NFC: nci: Allow to create multiple virtual nci devices
WARNING in tcp_mtup_probe_success net -1 3 1535d 1541d 22/29 1267d 11825765291a tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd
usb-testing boot error: BUG: unable to handle kernel paging request in insert_header fs -1 1 1445d 1445d 22/29 1267d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
KASAN: slab-out-of-bounds Read in mi_find_attr ntfs3 17 syz, C done done 1 1339d 1335d 22/29 1267d 4f1dc7d9756e fs/ntfs3: Validate attribute name offset
KASAN: use-after-free Read in do_garbage_collect f2fs 19 syz, C inconclusive 2 1370d 1370d 22/29 1267d d3b7b4afd6b2 f2fs: fix to do sanity check on i_extra_isize in is_alive()
BUG: sleeping function called from invalid context in smc_pnet_add net 5 syz, C done 45 1649d 1650d 22/29 1267d 94fdd7c02a56 net/smc: use GFP_ATOMIC allocation in smc_pnet_add_eth()
KASAN: slab-out-of-bounds Write in bpf_prog_test_run_xdp net bpf 21 syz, C done 18 1643d 1660d 22/29 1267d a6763080856f bpf: test_run: Fix OOB access in bpf_prog_test_run_xdp
usb-testing boot error: general protection fault in __handle_irq_event_percpu kernel -1 1 1446d 1446d 22/29 1267d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
KASAN: slab-out-of-bounds Read in smc_fback_error_report smc 19 syz, C error 72 1570d 1646d 22/29 1267d 0558226cebee net/smc: Fix slab-out-of-bounds issue in fallback
memory leak in iovec_from_user fs io-uring 3 syz, C 1 1585d 1581d 22/29 1267d 323b190ba2de io_uring: free iovec if file assignment fails
BUG: unable to handle kernel paging request in mi_enum_attr ntfs3 19 syz, C error done 18 1317d 1443d 22/29 1267d 0e8235d28f3a fs/ntfs3: Check fields while reading
WARNING: refcount bug in nldev_newlink rdma 13 syz, C 33 1340d 1346d 22/29 1267d e42f9c2e6aad RDMA: Add missed netdev_put() for the netdevice_tracker
KASAN: slab-out-of-bounds Read in __hfs_brec_find hfs 17 syz, C 5 1341d 1355d 22/29 1267d 8d824e69d9f3 hfs: fix OOB Read in __hfs_brec_find
WARNING in bpf_check (3) -1 syz, C done done 1736 1412d 2346d 22/29 1267d 34dd3bad1a6f bpf: Relax the requirement to use preallocated hash maps in tracing progs.
KASAN: use-after-free Read in raw_notifier_call_chain kernel 19 68 1354d 1592d 22/29 1267d 5daadc86f27e net: tun: Fix use-after-free in tun_detach()
KCSAN: data-race in packet_setsockopt / packet_setsockopt net 6 1 1674d 1662d 22/29 1267d e42e70ad6ae2 af_packet: fix data-race in packet_setsockopt / packet_setsockopt
memory leak in usb_set_configuration (3) usb 3 syz, C 2 1505d 1531d 22/29 1267d 945a9a8e448b media: pvrusb2: fix memory leak in pvr_probe
KASAN: use-after-free Read in ar5523_cmd_tx_cb usb wireless 19 syz, C inconclusive 372 1363d 1418d 22/29 1267d b6702a942a06 wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out
kernel panic: corrupted stack end in shmem_fault cgroups mm 2 5 1274d 1405d 22/29 1267d b81d591386c3 riscv: Increase stack size under KASAN
possible deadlock in strp_work net 4 syz, C error 4 1453d 1454d 22/29 1267d 8fc29ff3910f kcm: fix strp_init() order and cleanup
KASAN: use-after-free Read in __fib6_clean_all net 19 30 1357d 1610d 22/29 1267d 5daadc86f27e net: tun: Fix use-after-free in tun_detach()
KCSAN: data-race in do_epoll_wait / do_epoll_wait fs 6 83 1542d 1751d 22/29 1267d d679ae94fdd5 list: fix a data-race around ep->rdllist
KMSAN: uninit-value in asix_mdio_write_nopm net usb 7 2 1592d 1613d 22/29 1267d 920a9fa27e78 net: asix: add proper error handling of usb read errors
WARNING in dlfb_submit_urb/usb_submit_urb usb fbdev -1 syz, C done 481 1340d 2601d 22/29 1267d aaf7dbe07385 video: fbdev: udlfb: properly check endpoint type
KCSAN: data-race in kcm_rcv_strparser / kcm_rfree (7) net 6 1 1396d 1396d 22/29 1267d 0c745b5141a4 kcm: annotate data-races around kcm->rx_wait
linux-next test error: WARNING in set_peer wireguard -1 39 1424d 1431d 22/29 1267d 26c013108c12 wireguard: netlink: avoid variable-sized memcpy on sockaddr
BUG: sleeping function called from invalid context in blk_mq_release block 5 1 1597d 1597d 22/29 1267d d578c770c852 block: avoid calling blkg_free() in atomic context
WARNING in devl_port_unregister net -1 syz, C 1690 1270d 1373d 22/29 1267d 1fb22ed67195 devlink: Fix warning when unregistering a port
WARNING: suspicious RCU usage in corrupted (2) net 4 syz, C unreliable 7 1511d 1523d 22/29 1267d 4e43e64d0f13 ipv6: fix lockdep splat in in6_dump_addrs()
possible deadlock in __btrfs_release_delayed_node btrfs 4 1 1365d 1365d 22/29 1267d 796787c978ef btrfs: do not modify log tree while holding a leaf from fs tree locked
usb-testing boot error: BUG: unable to handle kernel paging request in enqueue_task_fair mm -1 1 1445d 1445d 22/29 1267d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
kernel BUG in vhost_get_vq_desc virt kvm net -1 syz, C inconclusive 19 1631d 1644d 22/29 1267d a58da53ffd70 vhost/vsock: don't check owner in vhost_vsock_stop() while releasing
kernel panic: corrupted stack end in hub_event kernfs 2 93 1275d 1620d 22/29 1267d b81d591386c3 riscv: Increase stack size under KASAN
KASAN: use-after-free Read in snd_rawmidi_transmit sound usb 19 syz, C done done 7 1535d 1569d 22/29 1267d 0125de38122f ALSA: usb-audio: Cancel pending work at closing a MIDI substream
kernel panic: corrupted stack end in dput (2) ext4 2 1 1366d 1366d 22/29 1267d b81d591386c3 riscv: Increase stack size under KASAN
WARNING in skb_warn_bad_offload (3) net -1 syz, C done 115 1268d 1405d 22/29 1267d 87445f369cca ipv6: ping: fix wrong checksum for large frames
WARNING in arp_ioctl net -1 syz, C error done 17 1339d 1409d 22/29 1267d b5f0de6df6dc net: dev: Convert sa_data to flexible array in struct sockaddr
kernel panic: corrupted stack end in tcp_setsockopt netfilter 2 3 1372d 1521d 22/29 1267d b81d591386c3 riscv: Increase stack size under KASAN
general protection fault in __pm_runtime_resume (2) pm 2 syz, C error 7 1606d 1615d 22/29 1267d 32cb08e95869 Bluetooth: hci_uart: add missing NULL check in h5_enqueue
KMSAN: kernel-usb-infoleak in hif_usb_send wireless 9 syz, C 18149 1575d 2194d 22/29 1267d d1e0df1c57bd ath9k_htc: fix uninit value bugs
WARNING in ipvlan_queue_xmit net -1 syz, C inconclusive 4 1445d 1445d 22/29 1267d 81225b2ea161 ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
kernel panic: corrupted stack end in loop_workfn ext4 2 1 1575d 1575d 22/29 1267d b81d591386c3 riscv: Increase stack size under KASAN
KASAN: use-after-free Read in notifier_call_chain kernel 19 syz, C error 157 1359d 1365d 22/29 1267d 5daadc86f27e net: tun: Fix use-after-free in tun_detach()
WARNING in wnd_init ntfs3 -1 syz, C done 23 1333d 1415d 22/29 1267d 0d0f659bf713 fs/ntfs3: Use __GFP_NOWARN allocation at wnd_init() 019d22eb0eb7 fs/ntfs3: Validate attribute data and valid sizes
upstream build error (18) kernel -1 20 1269d 1540d 22/29 1267d e68b823ab0ba arm64/hugetlb: Fix building errors in huge_ptep_clear_flush()
usb-testing boot error: general protection fault in __register_sysctl_table (2) fs -1 1 1445d 1445d 22/29 1267d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
KASAN: use-after-free Read in si470x_int_in_callback (2) usb media 19 syz, C error 7303 1335d 2492d 22/29 1267d 7d21e0b1b41b media: si470x: Fix use-after-free in si470x_int_in_callback()
BUG: unable to handle kernel NULL pointer dereference in f2fs_stop_discard_thread f2fs 12 syz, C done 23 1335d 1401d 22/29 1267d 91586ce0d39a f2fs: fix to invalidate dcc->f2fs_issue_discard in error path
WARNING in __perf_event_overflow perf -1 syz, C done 9 1356d 1381d 22/29 1267d bb88f9695460 perf: Improve missing SIGTRAP checking
WARNING: still has locks held in tls_rx_reader_lock net 4 syz, C done 4 1485d 1486d 22/29 1267d dde06aaa89b7 tls: rx: release the sock lock on locking timeout
KASAN: use-after-free Read in setup_rw_floppy block 19 3 1638d 1654d 22/29 1267d 233087ca0636 floppy: disable FDRAWCMD by default
memory leak in gs_usb_probe can usb 3 syz, C 1 1603d 1599d 22/29 1267d 50d34a0d151d can: gs_usb: gs_make_candev(): fix memory leak for devices with extended bit timing configuration
memory leak in airspy_probe media usb 3 syz, C 1 1468d 1464d 22/29 1267d 23bc5eb55f8c media: airspy: fix memory leak in airspy probe
general protection fault in hugetlbfs_parse_param mm 2 syz, C 5 1383d 1394d 22/29 1267d 26215b7ee923 hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param()
possible deadlock in __snd_pcm_lib_xfer sound 4 syz, C unreliable 3 1600d 1599d 22/29 1267d bc55cfd5718c ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock
WARNING: suspicious RCU usage in in6_dump_addrs net 4 syz, C unreliable 613 1479d 1523d 22/29 1267d 4e43e64d0f13 ipv6: fix lockdep splat in in6_dump_addrs()
upstream boot error: INFO: task hung in hwrng_register crypto -1 23 1525d 1532d 22/29 1267d 228432551bd8 virtio-rng: make device ready before making request
kernel panic: corrupted stack end in inet_rtm_newaddr net 2 23 1270d 1607d 22/29 1267d b81d591386c3 riscv: Increase stack size under KASAN
KASAN: use-after-free Read in __oom_reap_task_mm mm 19 1 1648d 1642d 22/29 1267d f798a1d4f94d mm: fix use-after-free bug when mm->mmap is reused after being freed
inconsistent lock state in smc_fback_state_change smc 4 syz, C error 7 1359d 1365d 22/29 1267d af295e854a4e l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
memory leak in blk_iolatency_init (2) block cgroups 3 syz, C 131 1409d 1616d 22/29 1267d daaca3522a8e block: release rq qos structures for queue without disk
linux-next test error: WARNING in devl_port_unregister net -1 23 1373d 1376d 22/29 1267d 1fb22ed67195 devlink: Fix warning when unregistering a port
KMSAN: uninit-value in idmouse_open usb 7 syz, C 5 1430d 1425d 22/29 1267d bce2b0539933 usb: idmouse: fix an uninit-value in idmouse_open
KASAN: use-after-free Read in tcp_retransmit_timer (5) net 19 syz, C unreliable 16000 1351d 2363d 22/29 1267d 3a58f13a881e net: rds: acquire refcount on TCP sockets
WARNING in inet_csk_destroy_sock (2) io-uring net -1 syz, C done 8 1316d 1402d 22/29 1267d e0833d1fedb0 dccp/tcp: Fixup bhash2 bucket when connect() fails.
WARNING in ovl_fh_to_dentry overlayfs -1 syz, C 169 1341d 1421d 22/29 1267d cf8aa9bf97ca ovl: Use "buf" flexible array for memcpy() destination
WARNING in notify_change (2) fuse -1 syz, C unreliable 2 1360d 1361d 22/29 1267d 44361e8cf9dd fuse: lock inode unconditionally in fuse_fallocate()
KASAN: null-ptr-deref Read in ida_free (2) usb 11 syz, C done 3 1511d 1512d 22/29 1267d 90bc2af24638 USB: gadget: Fix double-free bug in raw_gadget driver
KASAN: use-after-free Read in nf_confirm netfilter 19 syz, C done 605 1533d 1550d 22/29 1267d 56b14ecec97f netfilter: conntrack: re-fetch conntrack after insertion
WARNING in __vunmap net -1 syz, C error error 154 1416d 2736d 22/29 1267d 8a04d2fc700f xfrm: Update ipcomp_scratches with NULL when freed
memory leak in xas_nomem mm 3 syz, C 1 1543d 1539d 22/29 1267d 69a37a8ba1b4 mm/huge_memory: Fix xarray node memory leak
WARNING in io_req_complete_failed io-uring -1 syz, C error 2 1358d 1355d 22/29 1267d c06c6c5d2767 io_uring: always lock in io_apoll_task_func
memory leak in napi_get_frags net 3 syz, C 11 2016d 2037d 22/29 1267d 07d120aa33cc net: tun: call napi_schedule_prep() to ensure we own a napi
kernel panic: corrupted stack end in mld_dad_work mm 2 1 1439d 1439d 22/29 1267d b81d591386c3 riscv: Increase stack size under KASAN
memory leak in netlink_policy_dump_add_policy net 3 syz, C 1 1467d 1463d 22/29 1267d 249801360db3 net: genl: fix error path memory leak in policy dumping
KCSAN: data-race in fib6_clean_node / inet6_csk_route_socket net 6 1 1667d 1667d 22/29 1267d aafc2e3285c2 ipv6: annotate accesses to fn->fn_sernum
KCSAN: data-race in lru_add_fn / tcp_build_frag mm 6 4 1437d 1446d 22/29 1267d 84ce071e38a6 net: introduce __skb_fill_page_desc_noacc
KASAN: use-after-free Read in nf_tables_trans_destroy_work netfilter 19 syz, C done 6 1397d 1404d 22/29 1267d d4bc8271db21 netfilter: nf_tables: netlink notifier might race to release objects 26b5934ff419 netfilter: nf_tables: release flow rule object from commit path
linux-next boot error: WARNING in kfence_protect kasan mm -1 12 1365d 1366d 22/29 1267d 3e844d842d49 x86/mm: Ensure forced page table splitting
KASAN: use-after-free Read in jbd2_journal_wait_updates ext4 19 syz, C error 143 1604d 1648d 22/29 1267d cc16eecae687 jbd2: fix use-after-free of transaction_t race
BUG: unable to handle kernel paging request in inet_unhash net 8 3 1363d 1444d 22/29 1267d d1e96cc4fbe0 mptcp: fix tracking issue in mptcp_subflow_create_socket()
bpf boot error: INFO: task hung in add_early_randomness crypto -1 13 1518d 1526d 22/29 1267d 228432551bd8 virtio-rng: make device ready before making request
KASAN: vmalloc-out-of-bounds Read in __text_poke kernel 17 5 1570d 1642d 22/29 1267d d24d2a2b0a81 bpf: bpf_prog_pack: Set proper size before freeing ro_header
usb-testing boot error: BUG: unable to handle kernel paging request in follow_page_mask mm -1 1 1442d 1438d 22/29 1267d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
general protection fault in llc_ui_connect net 2 syz, C done 17 1600d 1603d 22/29 1267d 2d327a79ee17 llc: only change llc->dev when bind() succeeds
memory leak in ndisc_send_rs net 3 syz, C 2 1764d 1811d 22/29 1267d 07d120aa33cc net: tun: call napi_schedule_prep() to ensure we own a napi
WARNING in find_vma mm -1 syz, C done 2616 1444d 1467d 22/29 1267d d6f35446d076 binder_alloc: Add missing mmap_lock calls when using the VMA 44e602b4e52f binder_alloc: add missing mmap_lock calls when using the VMA
BUG: unable to handle kernel paging request in kvm_arch_hardware_enable kvm-x86 8 syz, C error 28 1455d 1459d 22/29 1267d 4ba4f4194274 KVM: Properly unwind VM creation if creating debugfs fails
WARNING in __brelse udf -1 syz, C inconclusive 22 1274d 1416d 22/29 1267d c791730f2554 udf: Avoid double brelse() in udf_rename()
WARNING: ODEBUG bug in kvm_xen_vcpu_set_attr kvm kvm-x86 io-uring -1 syz, C done 4 1475d 1527d 22/29 1267d af735db31285 KVM: x86/xen: Initialize Xen timer only once c03689913635 KVM: x86/xen: Stop Xen timer before changing IRQ
WARNING in erofs_iget erofs mm -1 syz, C 6 1388d 1438d 22/29 1267d 1dd73601a1cb erofs: fix order >= MAX_ORDER warning due to crafted negative i_size
KCSAN: data-race in bond_3ad_initiate_agg_selection / bond_3ad_state_machine_handler (2) net 6 1 1642d 1642d 22/29 1267d 9ceaf6f76b20 bonding: fix data-races around agg_select_timer
INFO: task hung in hci_dev_close_sync bluetooth 1 syz, C unreliable 2366 1408d 1564d 22/29 1267d e36bea6e78ab Bluetooth: core: Fix deadlock on hci_power_on_sync.
KMSAN: kernel-infoleak in vmci_host_unlocked_ioctl (2) kernel 9 syz, C 2 1416d 1416d 22/29 1267d e5b0d06d9b10 misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()
general protection fault in llc_ui_sendmsg net 2 syz, C done 365 1600d 1604d 22/29 1267d 2d327a79ee17 llc: only change llc->dev when bind() succeeds
WARNING in nf_tables_exit_net netfilter -1 syz, C error 3 1385d 1385d 22/29 1267d 03c1f1ef1584 netfilter: Cleanup nft_net->module_list from nf_tables_exit_net()
upstream boot error: general protection fault in __get_vm_area_node mm -1 1 1459d 1459d 22/29 1267d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
possible deadlock in console_lock_spinning_enable (2) serial 4 syz, C inconclusive done 117 1548d 1734d 22/29 1267d 09c5ba0aa2fc printk: add kthread console printers
WARNING in scsi_alloc_sgtables scsi fuse -1 syz, C 93 1507d 1853d 22/29 1267d d9a434fa0c12 scsi: core: Fix warning in scsi_alloc_sgtables()
UBSAN: shift-out-of-bounds in nilfs_load_super_block nilfs -1 syz, C error 3 1379d 1389d 22/29 1267d 610a2a3d7d8b nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset()
INFO: task hung in blk_freeze_queue (3) arm 1 syz, C 8 1364d 1444d 22/29 1267d 1de7c3cf48fc nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
UBSAN: shift-out-of-bounds in init_sb (3) gfs2 -1 syz, C 40 1396d 1462d 22/29 1267d 670f8ce56dd0 gfs2: Check sb_bsize_shift after reading superblock
memory leak in keyctl_watch_key keyrings lsm 3 syz, C 1 1612d 1608d 22/29 1267d 3d8dcf278b1e watch_queue: Actually free the watch
memory leak in fbcon_set_font (2) fbdev 3 syz, C 1 1349d 1348d 22/29 1267d 3c3bfb8586f8 fbdev: fbcon: release buffer when fbcon_do_set_font() failed
KASAN: use-after-free Read in inet_twsk_kill net 19 86 1659d 1662d 22/29 1267d fbb8295248e1 tcp: allocate tcp_death_row outside of struct netns_ipv4
INFO: task hung in scsi_remove_host scsi usb 1 syz, C done 328 1418d 1454d 22/29 1267d 2b36209ca818 scsi: core: Revert "Call blk_mq_free_tag_set() earlier" d94b2d00f7bf scsi: core: Revert "Make sure that hosts outlive targets" f782201ebc2b scsi: core: Revert "Make sure that targets outlive devices" 70e8d057bef5 scsi: core: Revert "Simplify LLD module reference counting"
KASAN: slab-out-of-bounds Read in packet_recvmsg net 21 syz, C inconclusive 12 1616d 2017d 22/29 1267d c700525fcc06 net/packet: fix slab-out-of-bounds access in packet_recvmsg()
WARNING in binder_alloc_vma_close kernel -1 syz, C done 18 1419d 1509d 22/29 1267d b0cab80ecd54 android: binder: fix lockdep check on clearing vma
general protection fault in ext4_fill_super exfat ext4 12 syz, C done 5 1455d 1670d 22/29 1267d 7c268d4ce2d3 ext4: fix potential NULL pointer dereference in ext4_fill_super()
INFO: task hung in vhost_work_dev_flush virt kvm net 1 syz, C error 2 1647d 1638d 22/29 1267d e2ae38cf3d91 vhost: fix hung thread due to erroneous iotlb entries
stack segment fault in skb_clone net 2 syz, C unreliable inconclusive 3 1522d 1707d 22/29 1267d d8b57135fd9f net: hsr: avoid possible NULL deref in skb_clone()
WARNING: suspicious RCU usage in bond_ethtool_get_ts_info net 4 syz, C done 6 1553d 1555d 22/29 1267d 9b80ccda233f bonding: fix missed rcu protection
WARNING in nsim_map_alloc_elem mm -1 syz, C error 7 1462d 1482d 22/29 1267d d0b80a9edb1a netdevsim: Avoid allocation warnings triggered from user space
KASAN: use-after-free Read in nilfs_segctor_sync nilfs 19 syz, C error 3 1373d 1383d 22/29 1267d 8cccf05fe857 nilfs2: fix use-after-free bug of ns_writer on remount
KASAN: slab-out-of-bounds Write in watch_queue_set_filter kernel 21 syz, C inconclusive 7 1608d 1611d 22/29 1267d c993ee0f9f81 watch_queue: Fix filter limit check
UBSAN: array-index-out-of-bounds in pvr2_i2c_core_init pvrusb2 usb 15 syz, C inconclusive 4 1551d 1583d 22/29 1267d 471bec68457a media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init
upstream boot error: BUG: unable to handle kernel paging request in copy_thread kernel -1 1 1459d 1459d 22/29 1267d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
WARNING in ext4_expand_extra_isize_ea ext4 -1 syz, C error done 3 1341d 1353d 22/29 1267d cc12a6f25e07 ext4: allocate extended attribute value in vmalloc area
general protection fault in do_check_common bpf 2 syz, C done 5 1499d 1503d 22/29 1267d d1a6edecc1fd bpf: Check attach_func_proto more carefully in check_return_code
usb-testing boot error: BUG: unable to handle kernel paging request in copy_namespaces kernel -1 1 1444d 1444d 22/29 1267d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
general protection fault in rlb_req_update_slave_clients net 2 syz, C inconclusive 3 1531d 1531d 22/29 1267d ab84db251c04 net: bonding: fix possible NULL deref in rlb code
WARNING in usbtmc_ioctl/usb_submit_urb usb -1 syz, C inconclusive 8 1280d 1625d 22/29 1267d e9b667a82cdc usb: usbtmc: Fix bug in pipe direction for control transfers
BUG: unable to handle kernel paging request in evict exfat 19 syz, C error done 23 1375d 1420d 22/29 1267d 4e3c51f4e805 fs: do not update freeing inode i_io_list
BUG: unable to handle kernel paging request in truncate_inode_partial_folio fs mm 8 syz, C error 4 1468d 1508d 22/29 1267d 84ac013046cc secretmem: fix unhandled fault in truncate
WARNING in hugetlb_wp mm -1 syz, C error 3 1379d 1385d 22/29 1267d f347454d0341 mm/gup: disallow FOLL_FORCE|FOLL_WRITE on hugetlb mappings
inconsistent lock state in l2tp_tunnel_register net 4 5599 1353d 1366d 22/29 1267d af295e854a4e l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
KASAN: invalid-free in tcp_disconnect net 24 syz, C unreliable 74 1396d 1410d 22/29 1267d 72e560cb8c6f tcp: cdg: allow tcp_cdg_release() to be called multiple times
riscv/fixes boot error: INFO: task hung in add_early_randomness crypto -1 8 1469d 1520d 22/29 1267d 228432551bd8 virtio-rng: make device ready before making request
WARNING in wireless_send_event wireless -1 syz, C 210 1383d 1421d 22/29 1267d e3e6e1d16a4c wifi: wext: use flex array destination for memcpy()
WARNING in register_shrinker_prepared f2fs mm -1 syz, C error 64 1528d 1530d 22/29 1267d 5035ebc644ae mm: shrinkers: introduce debugfs interface for memory shrinkers
WARNING in __split_huge_page_tail arch mm io-uring -1 syz, C error 155 1316d 1388d 22/29 1267d 5aae9265ee1a mm: prep_compound_tail() clear page->private
WARNING in __folio_mark_dirty gfs2 -1 syz, C error 1791 1267d 1751d 22/29 1267d e897be17a441 nilfs2: fix lockdep warnings in page operations for btree nodes
BUG: sleeping function called from invalid context in static_key_slow_inc 5 syz, C done 82 1354d 1366d 22/29 1267d af295e854a4e l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
KCSAN: data-race in ip6_dst_gc / ip6_dst_gc (3) net 6 2 1583d 1585d 22/29 1267d 9cb7c013420f ipv6: make ip6_rt_gc_expire an atomic_t
KASAN: use-after-free Read in ath9k_hif_usb_rx_cb (2) 19 syz, C done 48810 1464d 2097d 22/29 1267d 0ac4827f78c7 ath9k: fix use-after-free in ath9k_hif_usb_rx_cb
kernel BUG in ntfs_read_inode_mount fs -1 1 1671d 1670d 22/29 1267d 714fbf2647b1 ntfs: add sanity check on allocation size
kernel BUG in btrfs_drop_extents btrfs -1 syz, C 4 1343d 1358d 22/29 1267d 162d053e15fe btrfs: do not BUG_ON() on ENOMEM when dropping extent items for a range
BUG: sleeping function called from invalid context in binder_ioctl kernel 5 syz, C done 30 1544d 1550d 22/29 1267d aed86f8add0e binder: fix atomic sleep when get extended error
KASAN: use-after-free Read in madvise_update_vma 19 syz, C done 38 1631d 1649d 22/29 1267d 942341dcc574 mm: fix use-after-free when anon vma name is used after vma is freed
WARNING in mcba_usb_probe/usb_submit_urb usb can -1 syz, C error 537 1597d 2592d 22/29 1267d 136bed0bfd3b can: mcba_usb: properly check endpoint type
KASAN: use-after-free Read in register_shrinker_prepared (2) mm 19 syz, C done 1145 1379d 1417d 22/29 1267d bd86c69dae65 NFSD: unregister shrinker when nfsd_init_net() fails
possible deadlock in rds_tcp_reset_callbacks rds 4 syz, C error 1458 1376d 1454d 22/29 1267d a91b750fd662 net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
BUG: unable to handle kernel NULL pointer dereference in smack_inode_permission lsm mm 10 syz, C 1 1374d 1370d 22/29 1267d 578b565b240a 9p/fd: Fix write overflow in p9_read_work
possible deadlock in nci_close_device net nfc 4 2 1347d 1361d 22/29 1267d b2e44aac91b2 NFC: nci: Allow to create multiple virtual nci devices
memory leak in nft_chain_parse_hook netfilter 3 syz, C 1 1449d 1446d 22/29 1267d 77972a36ecc4 netfilter: nf_tables: clean up hook list when offload flags check fails
memory leak in sctp_sched_prio_set sctp 3 syz, C 2 1360d 1365d 22/29 1267d 9ed7bfc79542 sctp: fix memory leak in sctp_stream_outq_migrate()
BUG: sleeping function called from invalid context in sk_psock_stop 5 syz, C done 232 1468d 1526d 22/29 1267d 697fb80a5364 bpf: Fix sockmap calling sleepable function in teardown path
KCSAN: data-race in dropmon_net_event / trace_napi_poll_hit net 6 1 1663d 1646d 22/29 1267d dcd54265c8bc drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit
linux-next boot error: BUG: unable to handle kernel paging request in copy_namespaces kernel -1 1 1459d 1459d 22/29 1267d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
upstream boot error: general protection fault in enqueue_entity block -1 1 1459d 1459d 22/29 1267d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
general protection fault in btrfs_stop_all_workers btrfs 2 syz, C done 554 1565d 1570d 22/29 1267d 385de0ef387d btrfs: use a normal workqueue for rmw_workers
BUG: corrupted list in hci_conn_add_sysfs bluetooth 19 syz, C error done 9 1422d 1421d 22/29 1267d 448a496f7606 Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
kernel BUG in __set_page_owner_handle gfs2 -1 syz, C 37 1397d 1559d 22/29 1267d cd8c1fd8cdd1 mm/page_owner: use strscpy() instead of strlcpy()
kernel BUG in netem_enqueue net -1 9 1338d 1563d 22/29 1267d eeee4b77dc52 net: add more debug info in skb_checksum_help()
KASAN: slab-out-of-bounds Write in hfs_asc2mac hfs 21 syz, C error 161 1340d 1358d 22/29 1267d c53ed55cb275 hfs: Fix OOB Write in hfs_asc2mac
WARNING in __dma_map_sg_attrs -1 syz, C inconclusive 65 1467d 1717d 22/29 1267d 9e9fa6a9198b udmabuf: Set the DMA mask for the udmabuf device (v2)
WARNING: ODEBUG bug in __cancel_work bluetooth -1 syz, C inconclusive 1 1460d 1456d 22/29 1267d 2d2cb3066f2c Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
kernel panic: corrupted stack end in ext4_file_mmap ext4 2 2 1272d 1417d 22/29 1267d b81d591386c3 riscv: Increase stack size under KASAN
INFO: trying to register non-static key in gsmld_write serial -1 syz, C error 803 1438d 1467d 22/29 1267d 4bb1a53be85f tty: n_gsm: initialize more members at gsm_alloc_mux()
linux-next boot error: WARNING in kthread_should_stop crypto -1 6 1375d 1375d 22/29 1267d db516da95ce4 hw_random: use add_hwgenerator_randomness() for early entropy
KMSAN: uninit-value in ath9k_htc_rx_msg wireless 7 syz, C 17731 1277d 2196d 22/29 1267d b383e8abed41 wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
memory leak in vlan_dev_set_egress_priority (2) net 3 syz, C 1 1498d 1498d 22/29 1267d 72a0b329114b vlan: fix memory leak in vlan_newlink()
WARNING in ieee80211_link_info_change_notify wireless -1 syz, C inconclusive 1376 1267d 1510d 22/29 1267d 591e73ee3f73 wifi: mac80211: properly skip link info driver update
general protection fault in ieee80211_subif_start_xmit (2) wireless 2 syz, C error 5 1384d 1391d 22/29 1267d 780854186946 wifi: mac80211: fix general-protection-fault in ieee80211_subif_start_xmit()
kernel BUG in ext4_mb_use_inode_pa ext4 -1 syz, C error done 2 1411d 1410d 22/29 1267d 4bb26f2885ac ext4: avoid crash when inline data creation follows DIO write
kernel BUG in hugepage_add_anon_rmap mm -1 2 1631d 1627d 22/29 1267d 4eecb8b9163d mm/migrate: Convert remove_migration_ptes() to folios
INFO: task hung in __writeback_inodes_sb_nr (5) ext4 1 syz, C done 48 1274d 1644d 22/29 1267d 7d9b1b578d67 ip6mr: fix use-after-free in ip6mr_sk_done()
kernel BUG in mcopy_continue mm -1 4 1526d 1523d 22/29 1267d 73f37dbcfe17 mm: userfaultfd: fix UFFDIO_CONTINUE on fallocated shmem pages
memory leak in z_erofs_do_read_page erofs 3 syz, C 1 1352d 1352d 22/29 1267d c42c0ffe8117 erofs: Fix pcluster memleak when its block address is zero
possible deadlock in fscrypt_initialize fscrypt 4 10 1267d 1577d 22/29 1267d 4c0d5778385c ext4: don't set up encryption key during jbd2 transaction
linux-next boot error: general protection fault in rcu_core kernel -1 1 1460d 1460d 22/29 1267d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
upstream boot error: WARNING in genl_register_family net -1 468 1380d 1386d 22/29 1267d e4ba4554209f net: openvswitch: add missing .resv_start_op
upstream boot error: WARNING in copy_process mm -1 5 1459d 1461d 22/29 1267d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
KASAN: use-after-free Write in io_sendrecv_fail io-uring 22 syz, C 75 1398d 1421d 22/29 1267d a75155faef4e io_uring/net: fix UAF in io_sendrecv_fail()
general protection fault in reweight_entity kernel 2 syz, C error done 10 1643d 1697d 22/29 1267d 13765de8148f sched/fair: Fix fault in reweight_entity
KASAN: use-after-free Read in __nf_register_net_hook netfilter 19 syz, C error 5 1629d 1629d 22/29 1267d 56763f12b0f0 netfilter: fix use-after-free in __nf_register_net_hook()
WARNING in bpf_test_finish bpf net -1 syz, C done 3 1629d 1629d 22/29 1267d 530e214c5b5a bpf, test_run: Fix overflow in XDP frags bpf_test_finish
general protection fault in gfs2_dump_glock gfs2 17 syz, C 25 1269d 1670d 22/29 1267d 428f651cb80b gfs2: assign rgrp glock before compute_bitstructs
upstream test error: WARNING: ODEBUG bug in mgmt_index_removed bluetooth -1 551 1464d 1471d 22/29 1267d 3f2893d3c142 Bluetooth: don't try to cancel uninitialized works at mgmt_index_removed()
BUG: corrupted list in p9_fd_cancel (2) v9fs fuse 8 syz, C error 8 1366d 1391d 22/29 1267d 11c10956515b 9p/fd: fix issue of list_del corruption in p9_fd_cancel()
KASAN: use-after-free Read in ntfs_attr_find ntfs3 19 syz, C done 74 1284d 1450d 22/29 1267d 36a4d82dddbb ntfs: fix out-of-bounds read in ntfs_attr_find()
upstream boot error: BUG: unable to handle kernel paging request in sched_change_group cgroups -1 1 1461d 1461d 22/29 1267d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
KASAN: use-after-free Write in enqueue_timer net 22 1 1368d 1368d 22/29 1267d ab0377803daf mrp: introduce active flags to prevent UAF when applicant uninit
KMSAN: uninit-value in ___bpf_prog_run (3) bpf 7 syz, C 5 1581d 1583d 22/29 1267d 99c07327ae11 netlink: reset network and mac headers in netlink_dump()
kernel BUG in __page_mapcount kernel -1 syz, C error 45 1667d 1902d 22/29 1267d 24d7275ce279 fs/proc: task_mmu.c: don't read mapcount for migration entry
general protection fault in check_helper_call bpf 2 syz, C done 4 1486d 1491d 22/29 1267d d1a6edecc1fd bpf: Check attach_func_proto more carefully in check_return_code
memory leak in do_replace bridge netfilter 3 syz, C 1 1429d 1425d 22/29 1267d 62ce44c4fff9 netfilter: ebtables: fix memory leak when blob is malformed
KASAN: null-ptr-deref Write in kcm_tx_work (3) net 12 syz, C inconclusive inconclusive 7 1414d 1515d 22/29 1267d ec7eede369fe kcm: avoid potential race in kcm_tx_work
general protection fault in ax25_send_frame (2) hams 10 13 1378d 1365d 22/29 1267d e97c089d7a49 rose: Fix NULL pointer dereference in rose_send_frame()
general protection fault in xas_create_range mm 2 1 1611d 1607d 22/29 1267d 3e3c658055c0 XArray: Fix xas_create_range() when multi-order entry present
KASAN: use-after-free Read in nilfs_segctor_confirm nilfs 19 syz, C inconclusive 19 1395d 1413d 22/29 1267d d325dc6eb763 nilfs2: fix use-after-free bug of struct nilfs_root
KASAN: invalid-free in free_prealloced_shrinker mm 24 syz, C done 3 1487d 1486d 22/29 1267d 14773bfa70e6 mm: shrinkers: fix double kfree on shrinker name
kernel panic: corrupted stack end in lo_ioctl mm fs 2 4 1273d 1395d 22/29 1267d b81d591386c3 riscv: Increase stack size under KASAN
kernel panic: corrupted stack end in vfs_fallocate ext4 2 1 1393d 1389d 22/29 1267d b81d591386c3 riscv: Increase stack size under KASAN
kernel panic: corrupted stack end in rtnl_newlink kernfs net 2 3489 1267d 1614d 22/29 1267d b81d591386c3 riscv: Increase stack size under KASAN
WARNING: refcount bug in sk_psock_get (2) net 13 syz, C done 4 1492d 1533d 22/29 1267d 2a0133723f9e net: fix refcount bug in sk_psock_get (2)
linux-next test error: WARNING in __napi_schedule wireguard -1 15 1610d 1609d 22/29 1267d 351bdbb6419c net: Revert the softirq will run annotation in ____napi_schedule().
WARNING in free_loaded_vmcs (3) kvm-x86 -1 syz, C inconclusive 2 1663d 1663d 22/29 1267d f7e570780efc KVM: x86: Forcibly leave nested virt when SMM state is toggled
upstream boot error: general protection fault in copy_signal mm -1 1 1460d 1460d 22/29 1267d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
general protection fault in submit_bio_checks block btrfs 2 syz, C done 1258 1634d 1656d 22/29 1267d 78e3437450be block: call bio_associate_blkg from bio_reset
WARNING in nci_send_cmd net nfc -1 syz, C 13 1354d 1367d 22/29 1267d 0ad6bded175e nfc/nci: fix race with opening and closing
WARNING in ext2_get_group_desc ext4 -1 1 1489d 1485d 22/29 1267d fa78f3369372 ext2: Add more validity checks for inode counts
kernel BUG in binder_alloc_deferred_release kernel -1 syz, C done 4 1515d 1517d 22/29 1267d a43cfc87caaf android: binder: stop saving a pointer to the VMA
WARNING in nfnetlink_unbind netfilter -1 syz, C done 235 1533d 1550d 22/29 1267d ffd219efd9ee netfilter: nfnetlink: fix warn in nfnetlink_unbind
general protection fault in legacy_parse_param fs 21 syz, C done 20 1607d 1868d 22/29 1267d ecff30575b5a LSM: general protection fault in legacy_parse_param
KCSAN: data-race in kcm_rfree / unreserve_rx_kcm (3) net 6 4 1392d 1397d 22/29 1267d 15e4dabda11b kcm: annotate data-races around kcm->rx_psock
INFO: trying to register non-static key in f2fs_handle_error f2fs -1 syz, C 523 1317d 1378d 22/29 1267d cc249e4cba9a f2fs: fix to avoid accessing uninitialized spinlock 92b4cf5b4895 f2fs: initialize locks earlier in f2fs_fill_super()
general protection fault in btf_decl_tag_resolve bpf 2 syz, C done 6 1653d 1653d 22/29 1267d d7e7b42f4f95 bpf: Fix a btf decl_tag bug when tagging a function
possible deadlock in p9_req_put 4 syz, C done 2815 1377d 1467d 22/29 1267d 52f1c45dde91 9p: trans_fd/p9_conn_cancel: drop client lock earlier
KASAN: use-after-free Write in null_skcipher_crypt crypto 22 syz, C done 3 1625d 1823d 22/29 1267d ebe48d368e97 esp: Fix possible buffer overflow in ESP transformation
WARNING in nci_add_new_protocol net nfc -1 1 1360d 1356d 22/29 1267d e329e71013c9 NFC: nci: Bounds check struct nfc_target arrays
memory leak in mld_newpack net 3 syz, C 2 1428d 1846d 22/29 1267d a43206156263 usbnet: Fix memory leak in usbnet_disconnect()
KASAN: use-after-free Read in io_rsrc_node_ref_zero fs 19 syz, C done 3 1635d 1635d 22/29 1267d 80912cef18f1 io_uring: disallow modification of rsrc_data during quiesce
kernel panic: corrupted stack end in cleanup_net wireguard 2 2 1325d 1544d 22/29 1267d b81d591386c3 riscv: Increase stack size under KASAN
WARNING in netif_napi_add_weight net -1 syz, C inconclusive done 45 1506d 1519d 22/29 1267d 3b9bc84d3111 net: tun: unlink NAPI from device on destruction
WARNING in isotp_tx_timer_handler (2) can -1 syz, C 1416 1293d 1616d 22/29 1267d 3ea566422cbd can: isotp: sanitize CAN ID checks in isotp_bind() d73497081710 can: isotp: stop timeout monitoring when no first frame was sent
WARNING in ext4_xattr_block_set ext4 -1 syz, C error 57 1273d 1379d 22/29 1267d fae381a3d79b ext4: init quota for 'old.inode' in 'ext4_rename'
general protection fault in shm_close kernel 2 syz, C done 48 1368d 1369d 22/29 1267d b6305049f306 ipc/shm: call underlying open/close vm_ops
linux-next boot error: WARNING: suspicious RCU usage in cpuacct_charge cgroups -1 21 1613d 1624d 22/29 1267d f2aa197e4794 cgroup: Fix suspicious rcu_dereference_check() usage warning
KASAN: use-after-free Read in udl_get_urb_timeout dri usb 19 syz, C done 142 1423d 1453d 22/29 1267d ed9605a66b62 Revert "drm/udl: Kill pending URBs at suspend and disconnect"
WARNING in kvm_arch_vcpu_ioctl_run (3) kvm-x86 -1 syz, C done error 16157 1268d 3061d 22/29 1267d ec6e4d863258 KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks
WARNING in kvm_mmu_notifier_invalidate_range_start (2) kvm -1 syz, C done 14 1594d 1607d 22/29 1267d 01e67e04c281 mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0)
memory leak in dvb_usb_device_init media usb 3 syz 1 1373d 1543d 22/29 1267d 94d90fb06b94 media: dvb-usb: fix memory leak in dvb_usb_adapter_init()
BUG: using smp_processor_id() in preemptible code in tun_chr_write_iter net 4 syz, C done 1834 1606d 1616d 22/29 1267d fc93db153b01 net: disable preemption in dev_core_stats_XXX_inc() helpers
upstream boot error: BUG: corrupted list in find_and_remove_object mm -1 1 1461d 1461d 22/29 1267d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
WARNING in cpuset_write_resmask cgroups -1 syz, C done done 127 1623d 1689d 22/29 1267d d068eebbd482 cgroup/cpuset: Make child cpusets restrict parents on v1 hierarchy
WARNING in f2fs_is_valid_blkaddr f2fs -1 syz, C done 2562 1535d 2153d 22/29 1267d dc2f78e2d4cc f2fs: remove WARN_ON in f2fs_is_valid_blkaddr
general protection fault in binder_alloc_new_buf kernel 12 syz, C error 315 1423d 1454d 22/29 1267d 1da52815d5f1 binder: fix alloc->vma_vm_mm null-ptr dereference
BUG: using smp_processor_id() in preemptible code in netdev_core_stats_alloc net 4 syz, C error 2210 1606d 1616d 22/29 1267d fc93db153b01 net: disable preemption in dev_core_stats_XXX_inc() helpers
KASAN: use-after-free Read in remove_wait_queue (3) kernfs 19 syz, C inconclusive 123 1306d 1732d 22/29 1267d a06247c6804f psi: Fix uaf issue when psi trigger is destroyed while being polled
KASAN: use-after-free Write in sctp_auth_shkey_hold (2) sctp 22 syz, C inconclusive 7 1419d 1418d 22/29 1267d 022152aaebe1 sctp: handle the error returned from sctp_auth_asoc_init_active_key
WARNING in ovs_dp_reset_user_features openvswitch -1 syz, C done 3 1386d 1402d 22/29 1267d fd954cc1919e openvswitch: switch from WARN to pr_warn
kernel BUG in ext4_ind_remove_space ext4 -1 syz, C error done 10 1592d 1643d 22/29 1267d 2da376228a24 ext4: limit length to bitmap_maxbytes - blocksize in punch_hole
linux-next boot error: WARNING: refcount bug in dvb_register_device media -1 42 1347d 1355d 22/29 1267d 3a664569b71b media: dvbdev: fix refcnt bug
kernel BUG in f2fs_init_xattr_caches f2fs -1 syz, C 24 1422d 1446d 22/29 1267d 7e9c323c52b3 mm/slub: fix to return errno if kmalloc() fails
KASAN: use-after-free Read in hugetlb_fault mm 22 syz, C 383 1295d 1391d 22/29 1267d 04ada095dcfc hugetlb: don't delete vma_lock in hugetlb MADV_DONTNEED processing
BUG: missing reserved tailroom bpf net -1 syz, C done 2 1618d 1618d 22/29 1267d b6f1f780b393 bpf, test_run: Fix packet size check for live packet mode
upstream boot error: stack segment fault in kvmalloc_node wireless -1 1 1461d 1461d 22/29 1267d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
general protection fault in smc_pnet_add (2) smc 2 syz, C inconclusive 590 1582d 1598d 22/29 1267d d22f4f977236 net/smc: Fix NULL pointer dereference in smc_pnet_find_ib()
WARNING in ntfs_fill_super ntfs3 -1 syz, C error 20 1347d 1412d 22/29 1267d 59bfd7a483da fs/ntfs3: Use __GFP_NOWARN allocation at ntfs_fill_super()
WARNING: refcount bug in free_netdevs rdma 13 3 1341d 1344d 22/29 1267d e42f9c2e6aad RDMA: Add missed netdev_put() for the netdevice_tracker
possible deadlock in ___neigh_create net 4 syz, C error 24 1652d 1656d 22/29 1267d 4a81f6da9cb2 net, neigh: Do not trigger immediate probes on NUD_FAILED from neigh_managed_work
BUG: unable to handle kernel paging request in kernfs_put_active kernfs nilfs 8 syz, C 2 1427d 1427d 22/29 1267d 2e488f13755f fs: fix UAF/GPF bug in nilfs_mdt_destroy
KASAN: slab-out-of-bounds Read in ntfs_trim_fs ntfs3 19 syz, C done 204 1319d 1417d 22/29 1267d 557d19675a47 fs/ntfs3: Fix slab-out-of-bounds read in ntfs_trim_fs
BUG: unable to handle kernel paging request in percpu_counter_add_batch mm 8 140 1291d 1393d 22/29 1267d 64b4c411a6c7 ipc/msg.c: fix percpu_counter use after free
WARNING in pskb_expand_head -1 syz, C done done 222 1381d 2028d 22/29 1267d dbae2b062824 net: skb: introduce and use a single page frag cache
KASAN: use-after-free Read in __tcf_qdisc_find net 19 1 1440d 1440d 22/29 1267d ebda44da44f6 net: sched: fix race condition in qdisc_graft()
KCSAN: data-race in __ip4_datagram_connect / raw_bind (2) net 6 1 1662d 1662d 22/29 1267d 153a0d187e76 ipv4: raw: lock the socket in raw_bind()
general protection fault in llc_build_and_send_ui_pkt net 2 syz, C done 26 1600d 1604d 22/29 1267d 2d327a79ee17 llc: only change llc->dev when bind() succeeds
net-next test error: WARNING: suspicious RCU usage in hsr_node_get_first net -1 189 1637d 1646d 22/29 1267d e7f27420681f net: hsr: fix suspicious RCU usage warning in hsr_node_get_first()
KFENCE: memory corruption in p9_req_put v9fs 20 2 1364d 1367d 22/29 1267d 26273ade77f5 9p: set req refcount to zero to avoid uninitialized usage
general protection fault in llc_alloc_frame net 2 1 1602d 1602d 22/29 1267d 2d327a79ee17 llc: only change llc->dev when bind() succeeds
memory leak in kvm_vcpu_ioctl_set_cpuid2 kvm-x86 3 syz, C 1 1665d 1661d 22/29 1267d 811f95ff9527 KVM: x86: Free kvm_cpuid_entry2 array on post-KVM_RUN KVM_SET_CPUID{,2}
BUG: unable to handle kernel paging request in can_rcv_filter can 8 syz, C 5 1350d 1347d 22/29 1267d 0acc442309a0 can: af_can: fix NULL pointer dereference in can_rcv_filter
general protection fault in ntfs_update_mftmirr ntfs3 10 syz, C error 6680 1452d 1576d 22/29 1267d 321460ca3b55 fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
WARNING in tls_strp_done net -1 syz, C error 22 1456d 1461d 22/29 1267d 849f16bbfb68 tls: rx: react to strparser initialization errors
linux-next test error: general protection fault in xfrm_policy_lookup_bytype net -1 15 1360d 1362d 22/29 1267d b97df039a68b xfrm: Fix oops in __xfrm_state_delete()
WARNING in __set_page_dirty nilfs -1 syz, C error 9 1626d 1850d 22/29 1267d e897be17a441 nilfs2: fix lockdep warnings in page operations for btree nodes
KASAN: use-after-free Read in __post_watch_notification kernel 19 syz, C inconclusive 1 1481d 1479d 22/29 1267d e64ab2dbd882 watch_queue: Fix missing locking in add_watch_to_object()
WARNING: locking bug in hfa384x_usbctlx_completion_task staging usb 4 syz, C 2 1514d 1510d 22/29 1267d ee6c6e734247 staging/wlan-ng: get the correct struct hfa384x in work callback
BUG: unable to handle kernel NULL pointer dereference in __rxe_do_task rdma 10 syz 120 1394d 1462d 22/29 1267d a625ca30eff8 RDMA/rxe: Fix "kernel NULL pointer dereference" error
KASAN: slab-out-of-bounds Write in __build_skb_around net bpf 21 syz, C error 2536 1340d 1355d 22/29 1267d ce098da1497c skbuff: Introduce slab_build_skb()
general protection fault in end_page_writeback mm nilfs 2 syz, C error done 2 1366d 1397d 22/29 1267d 512c5ca01a36 nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty
KASAN: use-after-free Read in add_wait_queue fs io-uring 19 syz, C done done 13 1600d 1606d 22/29 1267d d89a4fac0fbc io_uring: fix assuming triggered poll waitqueue is the single poll
WARNING in sk_stream_kill_queues (8) net -1 syz, C unreliable 4268 1271d 1507d 22/29 1267d e9c6e7976026 tcp: fix sock skb accounting in tcp_read_skb()
KMSAN: uninit-value in r871xu_drv_init usb 7 syz, C 7342 1515d 2626d 22/29 1267d 0458e5428e5e staging: rtl8712: fix uninit-value in r871xu_drv_init() d1b57669732d staging: rtl8712: fix uninit-value in usb_read8() and friends
KCSAN: data-race in register_netdevice / type_show (2) x25 6 2 1518d 1521d 22/29 1267d cc26c2661fef net: fix data-race in dev_isalive()
WARNING in fuse_write_file_get fuse -1 syz, C done 85 1453d 1582d 22/29 1267d 035ff33cf4db fuse: write inode in fuse_release()
general protection fault in rose_send_frame (2) hams 2 7 1381d 1405d 22/29 1267d e97c089d7a49 rose: Fix NULL pointer dereference in rose_send_frame()
WARNING in mroute_clean_tables net -1 syz, C 10 1626d 1646d 22/29 1267d 5611a00697c8 ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path
general protection fault in pse_prepare_data net 10 syz, C inconclusive 6 1317d 1395d 22/29 1267d 46cdedf2a0fa ethtool: pse-pd: fix null-deref on genl_info in dump
BUG: unable to handle kernel NULL pointer dereference in io_do_iopoll fs io-uring 10 syz, C done 3 1551d 1550d 22/29 1267d aa184e8671f0 io_uring: don't attempt to IOPOLL for MSG_RING requests
WARNING in btf_type_id_size bpf -1 syz, C done 10 1327d 1398d 22/29 1267d ea68376c8bed bpf: prevent decl_tag from being referenced in func_proto
KMSAN: uninit-value in bcmp net 19 syz, C error done 907 1303d 2624d 22/29 1267d 4f1dc7d9756e fs/ntfs3: Validate attribute name offset
KASAN: use-after-free Read in move_expired_inodes (2) exfat 19 syz, C done 4 1363d 1403d 22/29 1267d 4e3c51f4e805 fs: do not update freeing inode i_io_list
UBSAN: shift-out-of-bounds in tcf_pedit_init net -1 syz, C done 59 1547d 1555d 22/29 1267d 4d42d54a7d6a net/sched: act_pedit: sanitize shift argument before usage
KASAN: use-after-free Read in ip6_fragment (2) net 19 1 1360d 1355d 22/29 1267d 803e84867de5 ipv6: avoid use-after-free in ip6_fragment()
general protection fault in llc_build_and_send_test_pkt net 2 syz, C done 25 1599d 1604d 22/29 1267d 2d327a79ee17 llc: only change llc->dev when bind() succeeds
KASAN: null-ptr-deref Write in snd_pcm_format_set_silence sound 12 syz, C unreliable 8 1444d 1589d 22/29 1267d 2f7a26abb824 ALSA: pcm: Test for "silence" field in struct "pcm_format_data"
BUG: corrupted list in rdma_listen (2) rdma 19 syz, C inconclusive 5 1648d 1714d 22/29 1267d 22e9f71072fa RDMA/cma: Do not change route.addr.src_addr outside state checks
linux-next boot error: INFO: task hung in add_early_randomness (2) crypto -1 14 1528d 1534d 22/29 1267d 228432551bd8 virtio-rng: make device ready before making request
WARNING in vhost_dev_cleanup (2) net virt kvm -1 79 1631d 1640d 22/29 1267d a58da53ffd70 vhost/vsock: don't check owner in vhost_vsock_stop() while releasing
possible deadlock in snd_hrtimer_callback (2) fs 4 syz, C inconclusive 582 1472d 1738d 22/29 1267d 96b097091c66 ALSA: pcm: Use deferred fasync helper 95cc637c1afd ALSA: timer: Use deferred fasync helper
KASAN: use-after-free Read in __kernfs_remove 19 syz, C done 3985 1406d 1450d 22/29 1267d 4abc99652812 kernfs: fix use-after-free in __kernfs_remove
BUG: unable to handle kernel paging request in bitfill_aligned (3) fbdev 8 syz, C unreliable 11 1453d 1495d 22/29 1267d a5a923038d70 fbdev: fbcon: Properly revert changes when vc_resize() failed
BUG: unable to handle kernel NULL pointer dereference in em_u32_match net 10 syz, C 2 1322d 1379d 22/29 1267d 9cd3fd2054c3 net_sched: reject TCF_EM_SIMPLE case for complex ematch module
WARNING: ODEBUG bug in htab_map_alloc bpf -1 syz, C 6456 1410d 1435d 22/29 1267d cf7de6a53600 bpf: add missing percpu_counter_destroy() in htab_map_alloc()
memory leak in ntfs_init_fs_context ntfs3 3 syz, C 169 1331d 1452d 22/29 1267d 51e76a232f8c fs/ntfs3: Fix memory leak on ntfs_fill_super() error path
inconsistent lock state in p9_req_put v9fs 4 181 1409d 1460d 22/29 1267d 296ab4a81384 net/9p: use a dedicated spinlock for trans_fd
KCSAN: data-race in sit_tunnel_xmit / sit_tunnel_xmit net 6 702 1340d 2438d 22/29 1267d cb34b7cf17ec ipv6/sit: use DEV_STATS_INC() to avoid data-races
KASAN: use-after-free Read in tipc_named_reinit (2) tipc 19 1 1568d 1564d 22/29 1267d 911600bf5a5e tipc: fix use-after-free Read in tipc_named_reinit
kernel BUG in ext4_es_cache_extent ext4 -1 syz, C inconclusive 6 1291d 1650d 22/29 1267d c878bea3c9d7 ext4: filter out EXT4_FC_REPLAY from on-disk superblock field s_state
WARNING in ip6erspan_tunnel_xmit net -1 23 1274d 1519d 22/29 1267d 301bd140ed0b erspan: do not assume transport header is always set
BUG: sleeping function called from invalid context in vm_area_dup mm 5 syz, C 3 1394d 1394d 22/29 1267d d7c0e68dab98 mm/ksm: convert break_ksm() to use walk_page_range_vma()
BUG: sleeping function called from invalid context in kernfs_walk_and_get_ns kernfs 5 syz, C error 196 1396d 1402d 22/29 1267d 46307fd6e27a cgroup: Reorganize css_set_lock and kernfs path processing
WARNING: refcount bug in rds_tcp_tune rds 13 166 1555d 1564d 22/29 1267d 6997fbd7a3da net: rds: use maybe_get_net() when acquiring refcount on TCP sockets
KASAN: use-after-free Read in hugetlb_handle_userfault mm 19 syz, C 4 1412d 1436d 22/29 1267d 958f32ce832b mm: hugetlb: fix UAF in hugetlb_handle_userfault
WARNING in iomap_read_inline_data gfs2 iomap -1 syz, C 3 1336d 1354d 22/29 1267d 70376c7ff312 gfs2: Always check inode size of inline inodes
general protection fault in skb_unlink net 2 syz, C done error 8 1436d 2997d 22/29 1267d 5121197ecc5d kcm: close race conditions on sk_receive_queue
memory leak in kvm_set_memslot kvm 3 syz, C 1 1550d 1550d 22/29 1267d c87661f855c3 KVM: Free new dirty bitmap if creating a new memslot fails
upstream boot error: WARNING in wiphy_register wireless -1 1 1460d 1460d 22/29 1267d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
WARNING in sk_destruct net -1 syz, C done 454 1543d 1670d 22/29 1267d ebdc1a030962 tcp: add a missing sk_defer_free_flush() in tcp_splice_read()
BUG: unable to handle kernel paging request in eventfd_ctx_put fs 8 syz, C done 7 1392d 1420d 22/29 1267d 7353633814f6 KVM: x86/xen: Fix eventfd error handling in kvm_xen_eventfd_assign()
KASAN: use-after-free Read in task_work_run (2) kernel 19 syz, C unreliable 18 1346d 1438d 22/29 1267d 517e6a301f34 perf: Fix perf_pending_task() UaF
KASAN: slab-out-of-bounds Read in ipvlan_queue_xmit net 17 syz, C error error 8 1630d 2107d 22/29 1267d 81225b2ea161 ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
memory leak in do_seccomp (2) kernel 3 syz, C 4 1450d 1999d 22/29 1267d a1140cb215fa seccomp: Move copy_seccomp() to no failure path.
WARNING in wdev_chandef wireless -1 12 1469d 1511d 22/29 1267d 206bbcf76121 wifi: nl80211: hold wdev mutex for tid config
KASAN: use-after-free Read in __io_remove_buffers io-uring 19 syz, C done 2 1469d 1466d 22/29 1267d ec8516f3b7c4 io_uring: fix free of unallocated buffer list
kernel panic: corrupted stack end in packet_sendmsg net 2 1 1438d 1438d 22/29 1267d b81d591386c3 riscv: Increase stack size under KASAN
general protection fault in virtio_gpu_array_put_free dri virt 2 4 1677d 1714d 22/29 1267d 6b79f96f4a23 drm/virtio: Ensure that objs is not NULL in virtio_gpu_array_put_free()
BUG: bad usercopy in bpf_prog_get_info_by_fd hardening mm -1 1 1539d 1539d 22/29 1267d 10f3b29c65bb bpf, arm64: Clear prog->jited_len along prog->jited
WARNING in tcp_ack (3) net -1 16 1534d 1592d 22/29 1267d 40570375356c tcp: add accessors to read/set tp->snd_cwnd
WARNING in cfg80211_ch_switch_notify wireless -1 syz, C done 744 1468d 1511d 22/29 1267d 77e7b6ba78ed wifi: cfg80211: handle IBSS in channel switch
WARNING in napi_complete_done net -1 syz, C error 104 1375d 1379d 22/29 1267d 07d120aa33cc net: tun: call napi_schedule_prep() to ensure we own a napi
KCSAN: data-race in inet6_recvmsg / ipv6_setsockopt net 6 1 1651d 1648d 22/29 1267d 086d49058cd8 ipv6: annotate some data-races around sk->sk_prot
INFO: task hung in add_early_randomness (2) usb crypto 1 syz, C done 182 1315d 1533d 22/29 1267d 228432551bd8 virtio-rng: make device ready before making request
WARNING: kmalloc bug in bpf bpf -1 syz, C done done 562 1605d 1722d 22/29 1267d 0708a0afe291 mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls
possible deadlock in f2fs_write_checkpoint f2fs 4 syz, C done 2208 1627d 1673d 22/29 1267d c7f91bd41029 f2fs: Restore rwsem lockdep support
KASAN: use-after-free Read in xfs_qm_dqfree_one xfs 19 syz 7 1339d 1348d 22/29 1267d 52f31ed22821 xfs: dquot shrinker doesn't check for XFS_DQFLAG_FREEING
KMSAN: uninit-value in tomoyo_path_chown fs 7 syz, C 13763 1424d 1425d 22/29 1267d f52d74b190f8 open: always initialize ownership fields
KMSAN: uninit-value in asix_check_host_enable usb 7 syz, C 109 1575d 1633d 22/29 1267d 920a9fa27e78 net: asix: add proper error handling of usb read errors
WARNING in bpf_skb_load_helper_32 bpf -1 syz, C done 9 1468d 1499d 22/29 1267d 0326195f523a bpf: Make sure mac_header was set before using it
KASAN: use-after-free Read in ip6mr_sk_done net 19 syz, C done 10988 1381d 1651d 22/29 1267d 7d9b1b578d67 ip6mr: fix use-after-free in ip6mr_sk_done()
WARNING in jfs_symlink jfs -1 syz, C 12 1388d 1399d 22/29 1267d ebe060369f8d jfs: Fix fortify moan in symlink
possible deadlock in btrfs_search_slot_get_root btrfs 4 syz, C 5 1357d 1377d 22/29 1267d b740d8061669 btrfs: free btrfs_path before copying root refs to userspace
WARNING in component_del dri -1 syz, C done 6 1648d 1670d 22/29 1267d c853685d11c0 usb: core: Unregister device on component_add() failure
WARNING: refcount bug in smc_pnet_add smc 13 syz, C done 98 1637d 1651d 22/29 1267d 28f922213886 net/smc: fix ref_tracker issue in smc_pnet_add()
KASAN: use-after-free Write in mini_qdisc_pair_swap (2) net 22 24 1276d 1656d 22/29 1267d 04c2a47ffb13 net: sched: fix use-after-free in tc_new_tfilter()
KASAN: use-after-free Read in hdr_find_e ntfs3 19 syz, C done done 66 1275d 1417d 22/29 1267d 0e8235d28f3a fs/ntfs3: Check fields while reading
possible deadlock in blkdev_put (3) block exfat 4 syz, C 870 1543d 1616d 22/29 1267d d292dc80686a loop: don't destroy lo->workqueue in __loop_clr_fd
KASAN: use-after-free Read in filp_close io-uring fs 19 syz, C done 17 1309d 1537d 22/29 1267d 40a1926022d1 fix the breakage in close_fd_get_file() calling conventions change
KMSAN: uninit-value in tcp_recvmsg net 7 syz, C 25918 1389d 1514d 22/29 1267d 1228b34c8d0e net: clear msg_get_inq in __sys_recvfrom() and __copy_msghdr_from_user()
memory leak in smc_sysctl_net_init smc 3 syz, C 8 1599d 1603d 22/29 1267d 5ae6acf1d00b net/smc: fix a memory leak in smc_sysctl_net_exit()
upstream boot error: BUG: unable to handle kernel paging request in blk_mq_get_tag block -1 1 1461d 1461d 22/29 1267d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
general protection fault in binder_alloc_print_pages kernel 12 syz, C error 157 1423d 1454d 22/29 1267d 1da52815d5f1 binder: fix alloc->vma_vm_mm null-ptr dereference
WARNING: refcount bug in put_gid_ndev rdma 13 3 1344d 1344d 22/29 1267d e42f9c2e6aad RDMA: Add missed netdev_put() for the netdevice_tracker
KASAN: null-ptr-deref Read in __free_pages kernel 11 syz, C inconclusive 21 1346d 1608d 22/29 1267d a635415a064e watch_queue: Fix NULL dereference in error cleanup
upstream boot error: INFO: task hung in add_early_randomness crypto -1 125 1525d 1532d 22/29 1267d 228432551bd8 virtio-rng: make device ready before making request
KASAN: use-after-free Read in net_tx_action kernel 19 syz, C inconclusive 3 1402d 1447d 22/29 1267d ebda44da44f6 net: sched: fix race condition in qdisc_graft()
usb-testing boot error: kernel BUG in putname fs -1 1 1445d 1445d 22/29 1267d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
kernel panic: stack is corrupted in __kmalloc integrity lsm sctp 2 4 1272d 1526d 22/29 1267d b81d591386c3 riscv: Increase stack size under KASAN
WARNING in blk_mq_release block -1 syz, C error 11 1448d 1466d 22/29 1267d aa0c680c3aa9 block: Do not call blk_put_queue() if gendisk allocation fails
WARNING in hif_usb_send/usb_submit_urb wireless -1 syz, C unreliable done 374 1348d 2139d 22/29 1267d 16ef02bad239 wifi: ath9k: verify the expected usb_endpoints are present
BUG: Bad page map (5) mm 19 syz, C 35 1308d 1566d 22/29 1267d 4d24de9425f7 mm: MADV_COLLAPSE: refetch vm_end after reacquiring mmap_lock
KASAN: use-after-free Read in mas_next_entry fs mm 19 syz, C error 16 1378d 1391d 22/29 1267d 59f2f4b8a757 fs/userfaultfd: Fix maple tree iterator in userfaultfd_unregister()
linux-next boot error: general protection fault in add_mtd_device mtd -1 117 1473d 1506d 22/29 1267d 7ec4cdb32173 mtd: core: check partition before dereference
memory leak in hidraw_report_event input usb 3 syz, C 1 1542d 1542d 22/29 1267d a5623a203cff HID: hidraw: fix memory leak in hidraw_release()
upstream boot error: WARNING in alloc_workqueue net rdma -1 1 1461d 1461d 22/29 1267d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
usb-testing boot error: WARNING in __netif_set_xps_queue virt net -1 57 1385d 1397d 22/29 1267d fc8695eb11f0 Revert "net: fix cpu_max_bits_warn() usage in netif_attrmask_next{,_and}"
KASAN: use-after-free Read in inet_bind2_bucket_find net io-uring 19 syz, C done 13 1522d 1529d 22/29 1267d 593d1ebe00a4 Revert "net: Add a second bind table hashed by port and address"
INFO: task hung in p9_fd_close v9fs 1 syz, C error error 484 1377d 2541d 22/29 1267d ef575281b21e 9p/trans_fd: always use O_NONBLOCK read/write
KASAN: use-after-free Read in post_one_notification kernel 19 syz, C inconclusive 19 1407d 1607d 22/29 1267d 353f7988dd84 watchqueue: make sure to serialize 'wqueue->defunct' properly
memory leak in smc_create (2) smc 3 syz, C 2 1604d 1600d 22/29 1267d 1a74e9932374 net/smc: Fix sock leak when release after smc_shutdown()
general protection fault in kernel_accept (5) tipc 2 1 1421d 1417d 22/29 1267d 82cb4e4612c6 tipc: fix a null-ptr-deref in tipc_topsrv_accept
WARNING in bpf_bprintf_prepare (2) bpf -1 syz, C 2 1401d 1440d 22/29 1267d 05b24ff9b2cf bpf: Prevent bpf program recursion for raw tracepoint probes
KASAN: use-after-free Read in driver_register usb 19 syz, C 131 1510d 1561d 22/29 1267d 5f0b5f4d50fa usb: gadget: fix race when gadget driver register via ioctl
possible deadlock in __inet_inherit_port net 4 syz, C done 85 1305d 1366d 22/29 1267d af295e854a4e l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
WARNING: suspicious RCU usage in nft_do_chain netfilter 4 1 1629d 1629d 22/29 1267d 17a8f31bba7b netfilter: egress: silence egress hook lockdep splats
WARNING: kobject bug in erofs_unregister_sysfs erofs -1 syz, C done 5 1608d 1610d 22/29 1267d a942da24abc5 fs: erofs: add sanity check for kobject in erofs_unregister_sysfs
KASAN: use-after-free Read in blk_mq_sched_free_rqs block 19 syz, C error 8 1515d 1564d 22/29 1267d 50e34d78815e block: disable the elevator int del_gendisk
WARNING in cleanup_net net -1 613 1267d 1389d 22/29 1267d d1e96cc4fbe0 mptcp: fix tracking issue in mptcp_subflow_create_socket()
general protection fault in ip6_tnl_xmit net 2 1 1648d 1648d 22/29 1267d 3a5f238f2b36 ip6_tunnel: fix possible NULL deref in ip6_tnl_xmit
KASAN: use-after-free Read in __snd_rawmidi_transmit_ack sound 19 1 1546d 1542d 22/29 1267d 0125de38122f ALSA: usb-audio: Cancel pending work at closing a MIDI substream
WARNING in driver_unregister input usb -1 syz, C 1 1544d 1540d 22/29 1267d f2d8c2606825 usb: gadget: Fix non-unique driver names in raw-gadget driver
possible deadlock in sk_common_release net 4 5 1354d 1365d 22/29 1267d af295e854a4e l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
KASAN: use-after-free Read in ieee80211_scan_rx (3) wireless 19 10 1464d 1571d 22/29 1267d 60deb9f10eec wifi: mac80211: Fix UAF in ieee80211_scan_rx()
KASAN: use-after-free Read in LZ4_decompress_safe_partial erofs 19 syz, C done 13 1595d 1750d 22/29 1267d eafc0a02391b lz4: fix LZ4_decompress_safe_partial read out of bound
KASAN: null-ptr-deref Write in kill_f2fs_super f2fs 12 syz, C error 49 1380d 1401d 22/29 1267d 91586ce0d39a f2fs: fix to invalidate dcc->f2fs_issue_discard in error path
memory leak in setup_mq_sysctls kernel 3 syz, C 2 1345d 1516d 22/29 1267d db7cfc380900 ipc: Free mq_sysctls if ipc namespace creation failed
UBSAN: array-index-out-of-bounds in io_submit_sqes fs 15 4 1536d 1536d 22/29 1267d fcde59feb1af io_uring: add io_op_defs 'def' pointer in req init and issue
kernel panic: stack is corrupted in sys_clock_nanosleep kernel 2 2 1445d 1526d 22/29 1267d b81d591386c3 riscv: Increase stack size under KASAN
kernel panic: corrupted stack end in inet6_ioctl net 2 1 1359d 1358d 22/29 1267d b81d591386c3 riscv: Increase stack size under KASAN
memory leak in vhci_write bluetooth 3 syz, C 1 1459d 1455d 22/29 1267d 7c9524d92964 Bluetooth: L2CAP: Fix memory leak in vhci_write
WARNING in btrfs_commit_transaction btrfs -1 syz, C inconclusive done 3 1287d 1381d 22/29 1267d 8bb808c6ad91 btrfs: don't print stack trace when transaction is aborted due to ENOMEM
general protection fault in kvm_arch_vcpu_ioctl kvm-x86 2 syz, C inconclusive 365 1467d 1505d 22/29 1267d f83894b24c2a KVM: x86: Fix handling of APIC LVT updates when userspace changes MCG_CAP
kernel panic: corrupted stack end in loop_control_ioctl fs 2 2 1389d 1474d 22/29 1267d b81d591386c3 riscv: Increase stack size under KASAN
INFO: task hung in ath6kl_usb_power_off wireless 1 7454 1464d 2230d 22/29 1267d 62ebaf2f9261 ath6kl: avoid flush_scheduled_work() usage
possible deadlock in nilfs_count_free_blocks nilfs 4 syz, C 60 1385d 1397d 22/29 1267d 8ac932a4921a nilfs2: fix deadlock in nilfs_count_free_blocks()
kernel BUG at fs/ext4/inline.c:LINE! ext4 -1 syz, C done done 76 1307d 2130d 22/29 1267d 5c099c4fdc43 ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
INFO: trying to register non-static key in hci_uart_flush (2) bluetooth -1 syz error error 37 1395d 2537d 22/29 1267d 3124d320c22f Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
possible deadlock in snd_timer_notify (2) fs 4 151 1472d 1736d 22/29 1267d 95cc637c1afd ALSA: timer: Use deferred fasync helper
WARNING: still has locks held in io_ring_submit_lock fs io-uring 4 syz, C done 3 1552d 1552d 22/29 1267d e7637a492b9f io_uring: fix locking state for empty buffer group
INFO: rcu detected stall in mld_ifc_work net 1 syz, C inconclusive 1 1643d 1643d 22/29 1267d 5740d0689096 net: sched: limit TC_ACT_REPEAT loops
WARNING in aiptek_open/usb_submit_urb usb input -1 syz, C error 2380 1603d 2625d 22/29 1267d 5600f6986628 Input: aiptek - properly check endpoint type
WARNING: refcount bug in u32_destroy_key net 13 1 1585d 1585d 22/29 1267d 3db09e762dc7 net/sched: cls_u32: fix netns refcount changes in u32_change()
KASAN: use-after-free Read in ip_mc_sf_allow net 19 1 1569d 1569d 22/29 1267d dba5bdd57bea net: igmp: respect RCU rules in ip_mc_source() and ip_mc_msfilter()
WARNING: kmalloc bug in snd_pcm_plugin_alloc (2) sound -1 syz, C done 2 1616d 1612d 22/29 1267d efb6402c3c4a ALSA: oss: Fix PCM OSS buffer allocation overflow
WARNING in __queue_work (3) kernel -1 syz error 953 1368d 2202d 22/29 1267d 877afadad2dc Bluetooth: When HCI work queue is drained, only queue chained work
general protection fault in fq_codel_enqueue (3) net 2 syz, C inconclusive 5 1504d 1750d 22/29 1267d fd1894224407 bpf: Don't redirect packets with invalid pkt_len
KCSAN: data-race in fib_alias_hw_flags_set / fib_alias_hw_flags_set net 6 1 1645d 1642d 22/29 1267d 9fcf986cc4bc ipv4: fix data races in fib_alias_hw_flags_set
KASAN: invalid-free in io_clean_op io-uring 24 syz, C 13 1402d 1419d 22/29 1267d 4c17a496a7a0 io_uring/net: fix cleanup double free free_iov init
WARNING in check_map_prog_compatibility bpf -1 syz, C inconclusive done 128 1419d 1582d 22/29 1267d 34dd3bad1a6f bpf: Relax the requirement to use preallocated hash maps in tracing progs.
INFO: trying to register non-static key in __fib6_clean_all (2) net -1 3 1404d 1428d 22/29 1267d 5daadc86f27e net: tun: Fix use-after-free in tun_detach()
upstream boot error: BUG: unable to handle kernel paging request in tomoyo_encode tomoyo -1 1 1459d 1459d 22/29 1267d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
WARNING: bad unlock balance in rxrpc_do_sendmsg afs net 4 syz, C inconclusive 14 1472d 1677d 22/29 1267d b0f571ecd794 rxrpc: Fix locking in rxrpc's sendmsg
memory leak in tun_chr_open net 3 syz, C 1 1436d 1436d 22/29 1267d 1118b2049d77 net: tun: Fix memory leaks of napi_get_frags
possible deadlock in snd_pcm_period_elapsed (3) sound 4 syz, C inconclusive 23 1464d 1690d 22/29 1267d 96b097091c66 ALSA: pcm: Use deferred fasync helper
upstream boot error: general protection fault in blk_mq_alloc_and_init_hctx block -1 1 1461d 1461d 22/29 1267d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
memory leak in blk_mq_init_tags block usb 3 syz, C 2 1594d 1601d 22/29 1267d 03252259e18e scsi: sd: Clean up gendisk if device_add_disk() failed
general protection fault in udpv6_sendmsg net 2 syz, C error 69 1363d 1373d 22/29 1267d 6423ac2eb31e rxrpc: Fix oops from calling udpv6_sendmsg() on AF_INET socket
general protection fault in erofs_bread erofs 2 syz, C error 3 1384d 1393d 22/29 1267d e5126de138ca erofs: fix general protection fault when reading fragment
kernel panic: corrupted stack end in handle_mm_fault riscv 2 1 1528d 1528d 22/29 1267d b81d591386c3 riscv: Increase stack size under KASAN
WARNING in ieee80211_ibss_csa_beacon wireless -1 syz, C error 4997 1267d 2136d 22/29 1267d 15bc8966b6d3 wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
INFO: task hung in synchronize_rcu (3) 1 syz, C done done 374 1276d 2214d 22/29 1267d 2d08935682ac KVM: x86: Don't re-acquire SRCU lock in complete_emulated_io()
possible deadlock in start_this_handle (3) ext4 4 8 1304d 1492d 22/29 1267d 68aaee147e59 mm: memcontrol: fix potential oom_lock recursion deadlock
WARNING in static_key_slow_try_dec (3) kernel -1 syz, C 26 1278d 1438d 22/29 1267d 921ebde3c0d2 netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
upstream boot error: BUG: unable to handle kernel paging request in __init_work pm -1 1 1461d 1461d 22/29 1267d 9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
KASAN: slab-out-of-bounds Read in decrypt_internal net 17 syz, C inconclusive done 4 1589d 1680d 22/29 1267d 9381fe8c849c net/tls: fix slab-out-of-bounds bug in decrypt_internal
INFO: task hung in __input_unregister_device (4) usb input 1 syz, C done 924 1439d 1504d 22/29 1267d 98e01215708b Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
possible deadlock in __f2fs_ioctl f2fs 4 17 1312d 1344d 22/29 1311d ca8b201f2854 f2fs: fix to avoid potential deadlock
general protection fault in __ext4_journal_get_write_access fuse ext4 2 syz, C done done 7 2103d 2152d 22/29 1368d 384d87ef2c95 block: Do not discard buffers under a mounted filesystem
WARNING in sco_sock_sendmsg mm -1 syz, C inconclusive 2 1808d 1808d 22/29 1401d 0771cbb3b97d Bluetooth: SCO: Replace use of memcpy_from_msg with bt_skb_sendmsg
WARNING in ipvlan_unregister_nf_hook net -1 syz, C done done 4151 1716d 2352d 22/29 1424d f123cffdd8fe net: netlink: af_netlink: Prevent empty skb by adding a check on len.
WARNING: ODEBUG bug in bt_host_release bluetooth -1 syz done done 7 1949d 2203d 22/29 1424d e2cb6b891ad2 bluetooth: eliminate the potential race condition when removing the HCI controller
WARNING: suspicious RCU usage (5) -1 syz, C done 1 1523d 1519d 20/29 1512d f4e61f0c9add x86/kvm: Fix broken irq restoration in kvm_wait
general protection fault in sock_close net 2 syz done unreliable 2 2177d 2174d 20/29 1542d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
WARNING in dev_change_net_namespace net -1 syz done done 8 1727d 2376d 20/29 1548d f123cffdd8fe net: netlink: af_netlink: Prevent empty skb by adding a check on len.
general protection fault in hci_inquiry_result_with_rssi_evt bluetooth 2 syz, C done 17 1680d 1705d 20/29 1548d 72279d17df54 Bluetooth: hci_event: Rework hci_inquiry_result_with_rssi_evt
general protection fault in __loop_clr_fd block 2 syz, C done 5702 2324d 2351d 20/29 1548d 87579e9b7d8d loop: use worker per cgroup instead of kworker
WARNING in rtnl_dellink net -1 syz, C done done 94 1675d 2186d 20/29 1554d f123cffdd8fe net: netlink: af_netlink: Prevent empty skb by adding a check on len.
INFO: task hung in linkwatch_event (2) net 1 syz, C done done 1033 1573d 2298d 20/29 1554d 563fbefed46a cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
BUG: unable to handle kernel paging request in bitfill_aligned (2) fbdev 21 syz, C inconclusive done 26 1688d 2096d 20/29 1554d 0499f419b76f video: vga16fb: Only probe for EGA and VGA 16 color graphic cards
WARNING in drm_gem_shmem_vm_open -1 syz done done 38 1686d 1821d 20/29 1554d 0499f419b76f video: vga16fb: Only probe for EGA and VGA 16 color graphic cards
INFO: task hung in usb_get_descriptor 1 syz, C done done 4149 1616d 2138d 20/29 1554d 363eaa3a450a usbip: synchronize event handler with sysfs code paths
general protection fault in ieee80211_chanctx_num_assigned wireless 2 syz, C inconclusive done 15 1704d 2138d 20/29 1554d 563fbefed46a cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
general protection fault in xfrm_user_rcv_msg_compat net 2 syz, C unreliable done 1543 1835d 2047d 20/29 1554d 4e9505064f58 net/xfrm/compat: Copy xfrm_spdattr_type_t atributes
KASAN: slab-out-of-bounds Read in add_adv_patterns_monitor bluetooth 17 syz, C error done 5 2003d 2024d 20/29 1555d b4a221ea8a1f Bluetooth: advmon offload MSFT add rssi support
KASAN: use-after-free Read in ext4_xattr_set_entry (4) ext4 22 syz, C error done 21 1635d 2022d 20/29 1600d 6e47a3cc68fc ext4: get rid of super block and sbi from handle_mount_ops()
KASAN: out-of-bounds Read in ath9k_hif_usb_rx_cb (3) wireless usb 17 syz, C unreliable done 7 1643d 2047d 20/29 1612d 6ce708f54cc8 ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream
KASAN: slab-out-of-bounds Write in betop_probe input usb 21 syz, C unreliable 9 1821d 2377d 20/29 1612d 689e453a9b9c HID: betop: fix slab-out-of-bounds Write in betop_probe HID: betop: fix slab-out-of-bounds Write in betop_probe
possible deadlock in scheduler_tick kvm-x86 4 syz, C error 99 1957d 1969d 20/29 1612d a83829f56c7c KVM: x86: disable interrupts while pvclock_gtod_sync_lock is taken 8228c77d8b56 KVM: x86: switch pvclock_gtod_sync_lock to a raw spinlock
WARNING in mptcp_sendmsg_frag mptcp -1 syz, C inconclusive 6 1788d 1794d 20/29 1612d efe686ffce01 mptcp: ensure tx skbs always have the MPTCP ext mptcp: ensure tx skbs always have the MPTCP ext
KMSAN: uninit-value in dvb_usb_adapter_dvb_init (2) media usb 7 syz, C 34 1880d 2096d 20/29 1612d c5453769f77c media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init 899a61a3305d media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
possible deadlock in cgroup_rstat_updated cgroups 4 1 1772d 1768d 20/29 1612d 3c08b0931eed blk-cgroup: blk_cgroup_bio_start() should use irq-safe operations on blkg->iostat_cpu blk-cgroup: blk_cgroup_bio_start() should use irq-safe operations on blkg->iostat_cpu
BUG: sleeping function called from invalid context in __might_resched serial 5 syz, C inconclusive 9 1735d 1738d 20/29 1620d 1ee33b1ca2b8 tty: n_hdlc: make n_hdlc_tty_wakeup() asynchronous
WARNING in cgroup_finalize_control -1 syz done done 9 1758d 2286d 20/29 1620d 7ee285395b21 cgroup: Make rebind_subsystems() disable v2 controllers all at once
KASAN: use-after-free Read in snd_mixer_oss_get_volume1 sound 19 syz, C inconclusive 1 1763d 1759d 20/29 1620d 411cef6adfb3 ALSA: mixer: oss: Fix racy access to slots
memory leak in blk_iolatency_init block cgroups 3 syz, C 833 1620d 1796d 20/29 1620d 6f5ddde41069 blkcg: fix memory leak in blk_iolatency_init
possible deadlock in ktime_get_coarse_ts64 kernel 4 1 1745d 1744d 20/29 1620d 5e0bc3082e2e bpf: Forbid bpf_ktime_get_coarse_ns and bpf_timer_* in tracing progs
memory leak in __mdiobus_register usb 3 syz, C 1 1788d 1784d 20/29 1620d ab609f25d198 net: mdiobus: Fix memory leak in __mdiobus_register ca6e11c337da phy: mdio: fix memory leak
WARNING in dst_release (3) net -1 3 1623d 1703d 20/29 1620d e28587cc491e sit: do not call ipip6_dev_free() from sit_init_net()
WARNING in ref_tracker_dir_exit -1 syz, C done 16271 1676d 1705d 20/29 1620d 34ac17ecbf57 ethtool: use ethnl_parse_header_dev_put()
WARNING in ovl_create_real overlayfs -1 syz, C unreliable 164 1741d 1809d 20/29 1620d 1f5573cfe7a7 ovl: fix warning in ovl_create_real()
KCSAN: data-race in call_rcu / rcu_gp_kthread fs 6 1 1859d 1859d 20/29 1620d 2431774f04d1 rcu: Mark accesses to rcu_state.n_force_qs
WARNING: kmalloc bug in hash_ip_create netfilter -1 syz, C done 641 1778d 1806d 20/29 1620d 7bbc3d385bd8 netfilter: ipset: Fix oversized kvmalloc() calls
KCSAN: data-race in __neigh_event_send / ip_finish_output2 (3) net 6 1 1757d 1754d 20/29 1620d d18785e21386 net: annotate data-race in neigh_output()
general protection fault in unregister_vlan_dev net 2 1 1718d 1718d 20/29 1620d 34ac17ecbf57 ethtool: use ethnl_parse_header_dev_put()
possible deadlock in __loop_clr_fd (3) block 4 2972 1675d 1738d 20/29 1620d 6050fa4c84cc loop: don't hold lo_mutex during __loop_clr_fd()
WARNING in __i2c_transfer (2) i2c -1 syz, C done 337 1684d 1733d 20/29 1620d bb436283e25a i2c: validate user data in compat ioctl
KCSAN: data-race in flush_tlb_batched_pending / try_to_unmap_one mm 6 2 1675d 1730d 20/29 1620d 5ee2fa2f0636 mm/rmap: fix potential batched TLB flush race
WARNING in sta_info_insert_rcu -1 syz, C done done 2533 1713d 2150d 20/29 1620d a6555f844549 mac80211: Drop frames from invalid MAC address in ad-hoc mode
KASAN: use-after-free Read in __crypto_xor crypto 19 syz, C done 9 1775d 1807d 20/29 1620d 68b6dea802ce crypto: pcrypt - Delay write to padata->info da353fac65fe net/tls: Fix flipped sign in tls_err_abort() calls
KMSAN: uninit-value in legacy_dvb_usb_read_remote_control media usb 7 syz, C 186 1730d 2071d 20/29 1620d afae4ef7d5ad media: dvb-usb: fix ununit-value in az6027_rc_query
KMSAN: kernel-infoleak in move_addr_to_user (6) tipc 9 syz, C 4 1660d 1698d 20/29 1620d d6d86830705f net ticp:fix a kernel-infoleak in __tipc_sendmsg()
memory leak in bsg_register_queue usb 3 syz, C 1 1803d 1799d 20/29 1620d 1a0db7744e45 scsi: bsg: Fix device unregistration
KASAN: use-after-free Read in nft_table_lookup (2) netfilter 19 syz done 1 1800d 1796d 20/29 1620d a499b03bf36b netfilter: nf_tables: unlink table before deleting it
memory leak in reg_copy_regd wireless 3 syz, C 1 1853d 1849d 20/29 1620d e53e9828a8d2 cfg80211: always free wiphy specific regdomain
divide error in usbnet_start_xmit usb 2 syz, C 760 1744d 1760d 20/29 1620d 397430b50a36 usbnet: sanity check for maxpacket
KASAN: null-ptr-deref Write in dst_release (3) net 21 2 1702d 1702d 20/29 1620d e28587cc491e sit: do not call ipip6_dev_free() from sit_init_net()
KASAN: use-after-free Read in srcu_invoke_callbacks block 19 syz error 4 1664d 1676d 20/29 1620d 850fd2abbe02 block: cleanup q->srcu
KCSAN: data-race in bond_alb_init_slave / bond_alb_monitor net 6 1 1718d 1718d 20/29 1620d dac8e00fb640 bonding: make tx_rebalance_counter an atomic
KMSAN: kernel-infoleak in _copy_to_iter (6) net 9 syz, C 748 1620d 1709d 20/29 1620d 71ddeac8cd1d inet_diag: fix kernel-infoleak for UDP sockets
KMSAN: kernel-infoleak in ucma_init_qp_attr rdma 9 1 1693d 1683d 20/29 1620d b35a0f4dd544 RDMA/core: Don't infoleak GRH fields
WARNING: ODEBUG bug in qdisc_create net -1 syz, C done 6 1788d 1816d 20/29 1620d a56d447f196f net/sched: sch_taprio: properly cancel timer from taprio_destroy()
WARNING: suspicious RCU usage in xfrm_set_default net 4 syz, C done 20 1783d 1788d 20/29 1620d 93ec1320b017 xfrm: fix rcu lock in xfrm_notify_userpolicy()
WARNING: refcount bug in rx_queue_release net 13 12 1722d 1736d 20/29 1620d 34ac17ecbf57 ethtool: use ethnl_parse_header_dev_put()
KASAN: slab-out-of-bounds Write in usb_hcd_poll_rh_status (2) usb 21 syz, C inconclusive 116 1683d 2166d 20/29 1620d 1d7d4c07932e USB: Fix "slab-out-of-bounds Write" bug in usb_hcd_poll_rh_status
general protection fault in io_uring_register fs io-uring 2 syz done 1 1800d 1796d 20/29 1620d 41d3a6bd1d37 io_uring: pin SQPOLL data before unlocking ring lock
kmsan boot error: KMSAN: uninit-value in tcp_child_process net -1 48 1705d 1716d 20/29 1620d 03cfda4fa6ea tcp: fix another uninit-value (sk_rx_queue_mapping)
bpf-next test error: WARNING: refcount bug in ref_tracker_free mptcp -1 110 1687d 1705d 20/29 1620d 1d2f3d3c6268 mptcp: adjust to use netns refcount tracker
kmsan boot error: KMSAN: uninit-value in tcp_conn_request net -1 27 1718d 1718d 20/29 1620d a37a0ee4d25c net: avoid uninit-value from tcp_conn_request
bpf-next boot error: KASAN: global-out-of-bounds Read in task_iter_init bpf -1 42 1736d 1740d 20/29 1620d 9e2ad638ae36 bpf: Extend BTF_ID_LIST_GLOBAL with parameter for number of IDs
KCSAN: data-race in netlink_insert / netlink_sendmsg (4) net 6 88 1772d 1853d 20/29 1620d 7707a4d01a64 netlink: annotate data races around nlk->bound
INFO: trying to register non-static key in mxl111sf_ctrl_msg usb media -1 syz, C 73 2575d 2679d 20/29 1620d 44870a9e7a3c media: mxl111sf: change mutex_init() location
KMSAN: uninit-value in __mpol_equal (3) mm 7 13 1758d 1782d 20/29 1620d 6d2aec9e123b mm/mempolicy: do not allow illegal MPOL_F_NUMA_BALANCING | MPOL_LOCAL in mbind()
KASAN: use-after-free Write in io_queue_worker_create fs io-uring 22 syz, C unreliable 132 1703d 1712d 20/29 1620d 71a85387546e io-wq: check for wq exit after adding new worker task_work e47498afeca9 io-wq: remove spurious bit clear on task_work addition
BUG: sleeping function called from invalid context in ref_tracker_alloc net 5 1 1703d 1703d 20/29 1620d 8b40a9d53d4f ipv6: use GFP_ATOMIC in rt6_probe()
general protection fault in gro_cells_destroy (2) net 2 2 1673d 1689d 20/29 1620d e28587cc491e sit: do not call ipip6_dev_free() from sit_init_net()
KASAN: null-ptr-deref Write in sock_setsockopt net 12 syz, C 45 1637d 1745d 20/29 1620d d00c8ee31729 net: fix possible NULL deref in sock_reserve_memory
possible deadlock in io_flush_timeouts fs 4 5 1721d 1722d 20/29 1620d 6af3f48bf615 io_uring: fix link traversal locking
general protection fault in rcu_segcblist_enqueue kvm-x86 2 syz, C done done 368 1803d 1867d 20/29 1620d eb7511bf9182 KVM: x86: Handle SRCU initialization failure during page track init
WARNING in atp_close (3) input -1 syz, C 125 1684d 1777d 20/29 1620d 9f3ccdc3f6ef Input: appletouch - initialize work before device registration
WARNING: refcount bug in ip6gre_exit_batch_net net 13 2 1731d 1733d 20/29 1620d 34ac17ecbf57 ethtool: use ethnl_parse_header_dev_put()
KASAN: use-after-free Read in netlbl_catmap_walk lsm net 19 syz, C inconclusive 1 1815d 1815d 20/29 1620d 0817534ff9ea smackfs: Fix use-after-free in netlbl_catmap_walk()
WARNING in page_counter_cancel (3) mm cgroups -1 syz, C done 22 1677d 1727d 20/29 1620d 269bda9e7da4 mptcp: Check reclaim amount before reducing allocation
KCSAN: data-race in __nf_conntrack_alloc / __nf_conntrack_find_get (3) netfilter 6 2 1711d 1711d 20/29 1620d 802a7dc5cf1b netfilter: conntrack: annotate data-races around ct->timeout
KMSAN: uninit-value in ppp_send_frame ppp 7 syz, C 5 1663d 1684d 20/29 1620d 44073187990d ppp: ensure minimum packet size in ppp_write()
KASAN: out-of-bounds Write in virtio_gpu_cmd_set_scanout dri virt 21 1 1745d 1745d 20/29 1620d 5bd4f20de8ac virtio-gpu: fix possible memory allocation failure
general protection fault in bpf_skb_cgroup_id net bpf 2 syz, C inconclusive 107 1776d 1792d 20/29 1620d 435b08ec0094 bpf, test, cgroup: Use sk_{alloc,free} for test cases
general protection fault in inet_csk_accept net 2 syz, C done 8 1709d 1708d 20/29 1620d b0cdc5dbcf2b mptcp: never allow the PM to close a listener subflow
KCSAN: data-race in sbitmap_queue_clear / sbitmap_queue_clear (3) block 6 5 1748d 1754d 20/29 1620d 9f8b93a7df4d sbitmap: silence data race warning
KASAN: null-ptr-deref Write in rhashtable_free_and_destroy (2) wireless 12 syz, C unreliable 38 1684d 1949d 20/29 1620d 8b5cb7e41d9d mac80211: mesh: embedd mesh_paths and mpp_paths into ieee80211_if_mesh
KASAN: use-after-free Read in tcp_v4_early_demux net 19 1 1701d 1701d 20/29 1620d 8f905c0e7354 inet: fully convert sk->sk_rx_dst to RCU rules
WARNING: kmalloc bug in snd_pcm_plugin_alloc sound -1 4 1640d 1723d 20/29 1620d 9d2479c96087 ALSA: pcm: oss: Fix negative period/buffer sizes 8839c8c0f77a ALSA: pcm: oss: Limit the period size to 16MB
general protection fault in set_task_ioprio block 2 syz, C done 19 1696d 1697d 20/29 1620d a957b61254a7 block: fix error in handling dead task for ioprio setting
INFO: task hung in disconnect_work wireless 1 syz, C inconclusive done 3 1730d 2005d 20/29 1620d 563fbefed46a cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
INFO: trying to register non-static key in ath9k_htc_rxep wireless -1 syz, C unreliable 9896 1674d 2248d 20/29 1620d b0ec7e55fce6 ath9k_htc: fix NULL pointer dereference at ath9k_htc_rxep()
WARNING in nested_vmx_vmexit kvm-x86 -1 syz, C done 101 1696d 1713d 20/29 1620d a80dfc025924 KVM: VMX: Always clear vmx->fail on emulation_required
WARNING in __get_free_pages mm -1 21 1676d 1734d 20/29 1620d 545a32498c53 floppy: Add max size check for user space request
KASAN: invalid-free in security_tun_dev_free_security selinux 24 syz error error 346 1695d 2037d 20/29 1620d 158b515f703e tun: avoid double free in tun_free_netdev
KCSAN: data-race in unix_inflight / wait_for_unix_gc (3) net 6 1 1687d 1673d 20/29 1620d 9d6d7f1cb67c af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress
INFO: task hung in io_uring_del_tctx_node io-uring fs 1 syz, C unreliable 37 1622d 1786d 20/29 1620d 8bab4c09f24e io_uring: allow conditional reschedule for intensive iterators
KASAN: use-after-free Read in __isofs_iget isofs 19 syz, C inconclusive 2 1768d 1764d 20/29 1620d e96a1866b405 isofs: Fix out of bound access for corrupted isofs image
linux-next boot error: general protection fault in blk_mq_free_request block -1 6 1760d 1760d 20/29 1620d e0d78afeb8d1 block: fix too broad elevator check in blk_mq_free_request()
WARNING: ODEBUG bug in really_probe kernel -1 1 1690d 1684d 20/29 1620d 33812fc7c8d7 HID: magicmouse: Fix an error handling path in magicmouse_probe()
INFO: trying to register non-static key in l2cap_sock_teardown_cb bluetooth -1 syz, C done done 88 1748d 2051d 20/29 1620d 1bff51ea59a9 Bluetooth: fix use-after-free error in lock_sock_nested()
KASAN: use-after-free Read in cipso_v4_doi_add lsm net 19 1 1764d 1760d 20/29 1620d 0934ad42bb2c smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
KASAN: invalid-free in packet_set_ring net 24 syz, C inconclusive 4 1706d 1706d 20/29 1620d ec6af094ea28 net/packet: rx_owner_map depends on pg_vec
KASAN: use-after-free Read in disk_release_events block fuse exfat 19 syz inconclusive 1 1708d 1704d 20/29 1620d 99d8690aae4b block: fix error unwinding in device_add_disk
WARNING: ODEBUG bug in corrupted (2) usb input -1 syz, C error 2 1690d 1901d 20/29 1620d 33812fc7c8d7 HID: magicmouse: Fix an error handling path in magicmouse_probe()
KASAN: use-after-free Read in rtl8712_dl_fw usb staging 19 syz, C 6961 1736d 1760d 20/29 1620d c052cc1a069c staging: rtl8712: fix use-after-free in rtl8712_dl_fw
general protection fault in cgroup_sk_free cgroups 2 syz, C error 2727 1778d 1792d 20/29 1620d 78cc316e9583 bpf, cgroup: Assign cgroup in cgroup_sk_alloc when called from interrupt
general protection fault in bpf_skb_ancestor_cgroup_id net bpf 2 syz, C unreliable 232 1776d 1792d 20/29 1620d 435b08ec0094 bpf, test, cgroup: Use sk_{alloc,free} for test cases
WARNING in loop_add -1 syz, C done error 64 1735d 2548d 20/29 1620d 278167fd2f8f block: add __must_check for *add_disk*() callers
kernel BUG in kvm_read_guest_offset_cached kvm -1 11 1719d 1726d 20/29 1620d 8503fea6761d KVM: VMX: do not use uninitialized gfn_to_hva_cache
linux-next test error: WARNING: refcount bug in ref_tracker_free mptcp -1 12 1703d 1704d 20/29 1620d 1d2f3d3c6268 mptcp: adjust to use netns refcount tracker
INFO: rcu detected stall in fq_pie_timer net 1 syz, C error 35 1661d 1878d 20/29 1620d 61c2402665f1 net/sched: fq_pie: prevent dismantle issue
INFO: rcu detected stall in sys_recvmmsg mptcp 1 syz, C done 52 1656d 1788d 20/29 1620d 612f71d7328c mptcp: fix possible stall on recvmsg()
general protection fault in nldev_stat_set_doit (2) rdma 2 12 1725d 1734d 20/29 1620d d821f7c13ca0 RDMA/nldev: Check stat attribute before accessing it
WARNING in vmx_queue_exception kvm-x86 -1 8 1631d 1693d 20/29 1620d fc4fad79fc3d KVM: VMX: Reject KVM_RUN if emulation is required with pending exception
WARNING: refcount bug in netdev_run_todo net 13 5 1722d 1732d 20/29 1620d 34ac17ecbf57 ethtool: use ethnl_parse_header_dev_put()
KASAN: use-after-free Write in io_submit_one fs 22 syz, C done 11 1707d 1745d 20/29 1620d 75feae73a280 block: fix single bio async DIO error handling
general protection fault in free_percpu net 2 syz unreliable done 80 1688d 1955d 20/29 1620d 158b515f703e tun: avoid double free in tun_free_netdev
WARNING: kmalloc bug in hash_net_create netfilter -1 syz, C done 283 1779d 1806d 20/29 1620d 7bbc3d385bd8 netfilter: ipset: Fix oversized kvmalloc() calls
possible deadlock in snd_mixer_oss_ioctl1 sound 4 syz, C done 149 1752d 1756d 20/29 1620d 3ab799201845 ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
WARNING in kvm_mmu_notifier_invalidate_range_start kvm -1 syz, C done 19 1629d 1690d 20/29 1620d d6aba4c8e20d hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
KCSAN: data-race in call_rcu / rcu_gp_fqs_loop fs 6 1 1756d 1754d 20/29 1620d 2431774f04d1 rcu: Mark accesses to rcu_state.n_force_qs
inconsistent lock state in io_poll_remove_all fs 4 63 1720d 1722d 20/29 1620d 6af3f48bf615 io_uring: fix link traversal locking
WARNING: lock held when returning to user space in tcp_setsockopt (2) net 4 syz, C done done 6 1693d 1699d 20/29 1620d b29fcfb54cd7 mptcp: full disconnect implementation
general protection fault in sctp_rcv sctp 2 2 1785d 1788d 20/29 1620d f7e745f8e944 sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb
possible deadlock in dquot_commit ext4 4 syz, C unreliable 41 1711d 2011d 20/29 1620d 4013d47a5307 ext4: make sure to reset inode lockdep class when quota enabling fails
WARNING in tcf_chain0_head_change_cb_del (3) net -1 syz, C inconclusive 107 1704d 1839d 20/29 1620d ab443c539167 sch_cake: do not call cake_destroy() from cake_init()
WARNING in inc_nlink (2) fs -1 syz, C inconclusive done 21 1620d 1957d 20/29 1620d 97f044f690ba fuse: don't increment nlink in link()
WARNING in rtl92cu_hw_init wireless -1 1 1720d 1716d 20/29 1620d 8b144dedb928 rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with interrupts enabled
possible deadlock in io_worker_cancel_cb io-uring fs 4 syz, C done 9 1701d 1705d 20/29 1620d d800c65c2d4e io-wq: drop wqe lock before creating new worker
WARNING: ODEBUG bug in batadv_v_ogm_free batman -1 syz, C done done 6 1754d 1772d 20/29 1620d 6f68cd634856 net: batman-adv: fix error handling
general protection fault in sock_release (2) net 2 1 1707d 1707d 20/29 1620d 34ac17ecbf57 ethtool: use ethnl_parse_header_dev_put()
WARNING in ieee80211_parse_tx_radiotap wireless -1 2 1796d 1795d 20/29 1620d 13cb6d826e0a mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap
WARNING in nbd_dev_add (2) block -1 4 1737d 1734d 20/29 1620d 278167fd2f8f block: add __must_check for *add_disk*() callers
KMSAN: kernel-usb-infoleak in usbnet_write_cmd (3) usb 9 syz, C 256 1638d 1682d 20/29 1620d d668769eb9c5 net: mcs7830: handle usb read errors properly
KMSAN: uninit-value in ppp_async_push (2) ppp 7 syz, C 323 1639d 1711d 20/29 1620d 44073187990d ppp: ensure minimum packet size in ppp_write()
BUG: unable to handle kernel paging request in dev_fetch_sw_netstats net 8 1 1700d 1700d 20/29 1620d 158b515f703e tun: avoid double free in tun_free_netdev
WARNING in free_netdev net -1 4080 1634d 1676d 20/29 1620d fcfb894d5952 net: bridge: fix net device refcount tracking issue in error path
WARNING: suspicious RCU usage in __dev_queue_xmit batman 4 syz, C done 635 1676d 1677d 20/29 1620d 6316136ec6e3 netfilter: egress: avoid a lockdep splat
WARNING in nsim_dev_reload_destroy net -1 syz, C done 2895 1751d 1756d 20/29 1620d fb9d19c2d844 Revert "devlink: Remove not-executed trap group notifications"
KASAN: use-after-free Read in blk_mq_sched_tags_teardown block usb 19 syz, C done 6 1757d 1755d 20/29 1620d 8bdf7b3fe1f4 blk-mq-sched: Don't reference queue tagset in blk_mq_sched_tags_teardown()
net-next test error: WARNING: refcount bug in ref_tracker_free mptcp -1 12 1703d 1704d 20/29 1620d 1d2f3d3c6268 mptcp: adjust to use netns refcount tracker
KASAN: null-ptr-deref Write in l2cap_chan_put bluetooth 21 syz done done 7 1752d 2197d 20/29 1620d 1bff51ea59a9 Bluetooth: fix use-after-free error in lock_sock_nested()
INFO: trying to register non-static key in ath9k_wmi_event_tasklet wireless usb -1 syz, C unreliable 7 1710d 1887d 20/29 1620d 8b3046abc99e ath9k_htc: fix NULL pointer dereference at ath9k_htc_tx_get_packet()
KASAN: use-after-free Read in free_netdev (2) net 19 syz, C done done 1715 1718d 2352d 20/29 1620d f123cffdd8fe net: netlink: af_netlink: Prevent empty skb by adding a check on len.
INFO: task hung in set_current_rng crypto usb 1 syz, C unreliable done 1 1747d 1865d 20/29 1620d 2bb31abdbe55 hwrng: virtio - don't wait on cleanup
general protection fault in fuse_test_super fuse 19 syz, C error 32 1627d 1794d 20/29 1620d 80019f113832 fuse: always initialize sb->s_fs_info
memory leak in mgmt_cmd_complete bluetooth 3 syz, C 3 1816d 1915d 20/29 1620d 709fca500067 Bluetooth: hci_sock: purge socket queues in the destruct() callback
WARNING: refcount bug in linkwatch_do_dev net 13 74 1714d 1740d 20/29 1620d 123e495ecc25 net: linkwatch: be more careful about dev->linkwatch_dev_tracker
general protection fault in tls_init net 2 1 1720d 1714d 20/29 1620d 404cd9a22150 mptcp: remove tcp ulp setsockopt support
KMSAN: uninit-value in ieee80211_sta_tx_notify (2) wireless 7 283 1638d 1728d 20/29 1620d d5e568c3a4ec mac80211: track only QoS data frames for admission control
kernel BUG at net/core/dev.c:LINE! (4) -1 syz, C done done 432 1703d 2091d 20/29 1620d f123cffdd8fe net: netlink: af_netlink: Prevent empty skb by adding a check on len.
WARNING: refcount bug in sys_memfd_secret mm 13 syz, C done done 4217 1754d 1757d 20/29 1620d 87066fdd2e30 Revert "mm/secretmem: use refcount_t instead of atomic_t"
WARNING: refcount bug in in_dev_finish_destroy (2) net 13 42 1722d 1736d 20/29 1620d 34ac17ecbf57 ethtool: use ethnl_parse_header_dev_put()
KMSAN: uninit-value in ax88772a_hw_reset usb 7 syz, C 94 1638d 1726d 20/29 1620d 8035b1a2a37a asix: fix uninit-value in asix_mdio_read()
general protection fault in smc_pnet_add smc 2 578 1620d 1676d 20/29 1620d 7b9b1d449a7c net/smc: fix possible NULL deref in smc_pnet_add_eth()
WARNING in __put_net net -1 5215 1663d 1676d 20/29 1620d cb963a19d99f net: sched: do not allocate a tracker in tcf_exts_init()
WARNING: kmalloc bug in nf_tables_newset netfilter -1 syz, C done 95 1778d 1806d 20/29 1620d 45928afe94a0 netfilter: nf_tables: Fix oversized kvmalloc() calls
WARNING in kvm_mmu_uninit_tdp_mmu kvm-x86 -1 3 1655d 1738d 20/29 1620d 3a0f64de479c KVM: x86/mmu: Don't advance iterator after restart due to yielding
KCSAN: data-race in skb_queue_tail / unix_dgram_poll (4) net 6 2 1797d 1803d 20/29 1620d 04f08eb44b50 net/af_unix: fix a data-race in unix_dgram_poll
WARNING in static_key_slow_try_dec (2) kernel -1 syz, C unreliable 5417 1759d 1827d 20/29 1620d f7d8a19f9a05 Revert "KVM: x86: Open code necessary bits of kvm_lapic_set_base() at vCPU RESET"
UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len net -1 syz, C unreliable 5660 1778d 2076d 20/29 1620d b193e15ac69d net: prevent user from passing illegal stab size
WARNING in emulate_vsyscall kernel -1 syz, C done done 3890 1783d 1964d 20/29 1620d d4ffd5df9d18 x86/fault: Fix wrong signal when vsyscall fails with pkey
WARNING: kmalloc bug in hash_mac_create netfilter -1 syz, C done 11 1799d 1804d 20/29 1620d 7bbc3d385bd8 netfilter: ipset: Fix oversized kvmalloc() calls
KASAN: use-after-free Read in nft_set_destroy netfilter 19 1 1705d 1705d 20/29 1620d 0f7d9b31ce7a netfilter: nf_tables: fix use-after-free in nft_set_catchall_destroy()
BUG: unable to handle kernel paging request in __blk_mq_alloc_requests io-uring block 19 syz, C unreliable 107 1739d 1747d 20/29 1620d a22c00be90de block: assign correct tag before doing prefetch of request
WARNING in ieee80211_vif_release_channel (2) wireless -1 syz, C done 5 1695d 1698d 20/29 1620d 87a270625a89 mac80211: fix locking in ieee80211_start_ap error path
KASAN: use-after-free Read in unmap_page_range (2) mm 19 syz, C unreliable 4 1730d 1748d 20/29 1620d 337546e83fc7 mm/oom_kill.c: prevent a race between process_mrelease and exit_mmap
general protection fault in dev_get_by_index_rcu (2) bpf net 2 syz, C error 18 1680d 1680d 20/29 1620d 382778edc826 xdp: check prog type before updating BPF link
possible deadlock in fuse_reverse_inval_entry fuse 4 syz, C error 1 1802d 1828d 20/29 1620d bda9a71980e0 fuse: annotate lock in fuse_reverse_inval_entry()
BUG: sleeping function called from invalid context in copy_huge_page mm 5 1 1771d 1767d 20/29 1620d a4aeaa06d45e mm: khugepaged: skip huge page collapse for special files
INFO: rcu detected stall in snd_seq_write (2) sound 1 syz done 21 1736d 1748d 20/29 1620d 6fadb494a638 ALSA: seq: Set upper limit of processed events
possible deadlock in md_open raid 4 syz, C unreliable 2844 1783d 1816d 20/29 1620d 7df835a32a8b md: fix a lock order reversal in md_alloc
INFO: task hung in io_uring_try_cancel_requests fs io-uring 1 syz, C error 41 1709d 1751d 20/29 1620d f75d118349be io_uring: harder fdinfo sq/cq ring iterating
WARNING in io_try_cancel_userdata (2) fs -1 1 1726d 1722d 20/29 1620d 617a89484deb io_uring: fail cancellation for EXITING tasks
possible deadlock in blkdev_put (2) exfat block 4 syz, C done 502 1620d 1721d 20/29 1620d 322c4293ecc5 loop: make autoclear operation asynchronous
INFO: rcu detected stall in dummy_timer (3) usb 1 syz, C error 132 1634d 2222d 20/29 1620d 476db72e5219 media: mceusb: return without resubmitting URB in case of -EPROTO error.
WARNING in page_counter_uncharge cgroups mm -1 syz, C done done 2 1689d 1689d 20/29 1620d 269bda9e7da4 mptcp: Check reclaim amount before reducing allocation
KMSAN: uninit-value in asix_mdio_read (2) usb 7 syz, C 1075 1620d 1700d 20/29 1620d 8035b1a2a37a asix: fix uninit-value in asix_mdio_read()
WARNING in __dev_set_promiscuity net -1 syz, C done 11 1781d 1785d 20/29 1620d a5b8fd657881 net: dev_addr_list: handle first address in __hw_addr_add_ex
WARNING in signalfd_cleanup fs io-uring -1 syz, C done 201 1666d 1682d 20/29 1620d 791f3465c4af io_uring: fix UAF due to missing POLLFREE handling
inconsistent lock state in kmem_cache_alloc_trace kernel 4 36 1703d 1705d 20/29 1620d 8b40a9d53d4f ipv6: use GFP_ATOMIC in rt6_probe()
INFO: task can't die in blk_mq_freeze_queue_wait block 1 221 1725d 1733d 20/29 1620d 95febeb61bf8 block: fix missing queue put in error path
BUG: sleeping function called from invalid context in hci_cmd_sync_cancel net usb 5 syz, C done 28 1696d 1710d 20/29 1620d 744451c162a5 Bluetooth: hci_sync: Push sync command cancellation to workqueue
general protection fault in percpu_ref_put cgroups 2 syz, C done 412 1778d 1788d 20/29 1620d 78cc316e9583 bpf, cgroup: Assign cgroup in cgroup_sk_alloc when called from interrupt
UBSAN: array-index-out-of-bounds in llc_sap_add_socket net 15 1 1745d 1745d 20/29 1620d 8ac9dfd58b13 llc: fix out-of-bound array index in llc_sk_dev_hash()
KMSAN: uninit-value in fat_subdirs exfat 7 1 1697d 1680d 20/29 1620d 3ee859e384d4 block: Fix wrong offset in bio_truncate()
WARNING: refcount bug in j1939_netdev_start (2) can 13 syz error error 51 1759d 2405d 20/29 1620d d9d52a3ebd28 can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv
net-next test error: WARNING in devlink_nl_region_notify net -1 24 1780d 1778d 20/29 1620d ef91abfb20c7 devlink: Add missed notifications iterators
INFO: rcu detected stall in newstat fs usb 1 syz, C unreliable done 4 1714d 1837d 20/29 1620d 476db72e5219 media: mceusb: return without resubmitting URB in case of -EPROTO error.
KCSAN: data-race in fib_create_info / free_fib_info net 6 1 1693d 1673d 20/29 1620d 0a6e6b3c7db6 ipv4: update fib_info_cnt under spinlock protection
BUG: spinlock bad magic in synchronize_srcu kvm-x86 4 syz, C done done 3254 1782d 2152d 20/29 1620d eb7511bf9182 KVM: x86: Handle SRCU initialization failure during page track init
INFO: task hung in do_proc_bulk usb 1 syz inconclusive 8 1747d 1812d 20/29 1620d ae8709b296d8 USB: core: Make do_proc_control() and do_proc_bulk() killable
BUG: sleeping function called from invalid context in tipc_crypto_start net 5 syz, C done done 6 1698d 1704d 20/29 1620d f845fe5819ef Revert "tipc: use consistent GFP flags"
INFO: task can't die in __bio_queue_enter block 1 185 1726d 1733d 20/29 1620d 10f7335e3627 blk-mq: don't grab ->q_usage_counter in blk_mq_sched_bio_merge
general protection fault in ref_tracker_alloc net 2 syz, C done 679 1676d 1705d 20/29 1620d 0976b888a150 ethtool: fix null-ptr-deref on ref tracker
WARNING: suspicious RCU usage in ref_tracker_alloc net 4 17 1703d 1705d 20/29 1620d 8b40a9d53d4f ipv6: use GFP_ATOMIC in rt6_probe()
INFO: task hung in io_uring_cancel_generic (2) io-uring fs 1 syz, C done 97 1704d 1731d 20/29 1620d 78a780602075 io_uring: ensure task_work gets run as part of cancelations
WARNING in perf_pending_event perf -1 syz, C error 3 1743d 1739d 20/29 1620d 73743c3b0922 perf: Ignore sigtrap for tracepoints destined for other tasks
INFO: rcu detected stall in io_wqe_worker (2) fs io-uring 1 syz, C done 2 1752d 1752d 20/29 1620d c5e0321e43de Revert "devlink: Remove not-executed trap policer notifications"
WARNING: kmalloc bug in bpf_check bpf -1 syz, C done 34 1793d 1806d 20/29 1620d 0e6491b55970 bpf: Add oversize check before call kvcalloc()
INFO: task can't die in nf_ct_iterate_cleanup (2) netfilter 1 1 1793d 1793d 20/29 1620d e9edc188fc76 netfilter: conntrack: serialize hash resizes and cleanups
general protection fault in cgroup_file_write cgroups 2 15 1689d 1743d 20/29 1620d e57457641613 cgroup: Use open-time cgroup namespace for process migration perm checks
WARNING in hrtimer_forward kernel -1 syz, C done done 217 1665d 2149d 20/29 1620d 313bbd1990b6 mac80211-hwsim: fix late beacon hrtimer handling
KMSAN: uninit-value in kvm_cpuid kvm-x86 7 syz, C 22 1754d 1778d 20/29 1620d e8a747d0884e KVM: x86: Swap order of CPUID entry "index" vs. "significant flag" checks
kernel panic: smack: Failed to initialize cipso DOI. lsm 2 syz, C done error 128 1747d 2328d 20/29 1620d f91488ee15bd smackfs: use __GFP_NOFAIL for smk_cipso_doi()
KMSAN: uninit-value in p9pdu_readf v9fs 7 14 1655d 1769d 20/29 1620d 27eb4c3144f7 9p/net: fix missing error check in p9_check_errors
UBSAN: shift-out-of-bounds in qfq_init_qdisc net -1 1 1686d 1686d 20/29 1620d 7d18a07897d0 sch_qfq: prevent shift-out-of-bounds in qfq_init_qdisc
KMSAN: uninit-value in pneigh_fill_info net 7 syz, C 14 1707d 1712d 20/29 1620d e195e9b5dee6 net, neigh: clear whole pneigh_entry at alloc time
KCSAN: data-race in __dev_queue_xmit / __dev_queue_xmit (5) net 6 1 1727d 1725d 20/29 1620d 7a10d8c810cf net: annotate data-races on txq->xmit_lock_owner
WARNING in z_erofs_lz4_decompress erofs -1 syz, C 2 1754d 1755d 20/29 1620d a0961f351d82 erofs: don't trigger WARN() when decompression fails
KASAN: use-after-free Read in sixpack_close hams 19 syz, C done 879 1729d 1734d 20/29 1620d 81b1d548d00b hamradio: remove needs_free_netdev to avoid UAF
KMSAN: uninit-value in from_kuid kernel 7 10 1644d 1721d 20/29 1620d 3cb6ee991496 9p: only copy valid iattrs in 9P2000.L setattr implementation
WARNING in chnl_net_uninit (2) net -1 1 1797d 1797d 20/29 1620d 550ac9c1aaaa net-caif: avoid user-triggerable WARN_ON(1)
INFO: rcu detected stall in ieee80211_tasklet_handler wireless 1 syz, C error done 74 1784d 2064d 20/29 1620d 313bbd1990b6 mac80211-hwsim: fix late beacon hrtimer handling
UBSAN: shift-out-of-bounds in nl802154_new_interface wpan -1 syz, C inconclusive done 879 1721d 1999d 20/29 1620d 451dc48c806a net: ieee802154: handle iftypes as u32
WARNING in batadv_v_ogm_free batman -1 1 1758d 1758d 20/29 1620d 6f68cd634856 net: batman-adv: fix error handling
possible deadlock in wake_up_all_idle_cpus perf 4 syz, C done 14 1757d 1764d 20/29 1620d 96611c26dc35 sched: Improve wake_up_all_idle_cpus() take #2
KMSAN: uninit-value in snd_rawmidi_ioctl sound 7 syz, C 1506 1638d 1700d 20/29 1620d 39a8fc4971a0 ALSA: rawmidi - fix the uninitalized user_pversion
KASAN: slab-out-of-bounds Read in hci_le_meta_evt (2) bluetooth 17 syz, C inconclusive 2 1748d 1748d 20/29 1620d 3a56ef719f0b Bluetooth: stop proccessing malicious adv data
general protection fault in nfc_alloc_send_skb net nfc 2 syz, C done 2 1688d 1682d 20/29 1620d dded08927ca3 nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed bind()
BUG: corrupted list in em28xx_init_extension usb media 8 syz, C error 18 1851d 2395d 20/29 1620d 2c98b8a3458d media: em28xx: add missing em28xx_close_extension
possible deadlock in mptcp_close mptcp 4 syz, C done 931 1778d 1789d 20/29 1620d 49054556289e net: introduce and use lock_sock_fast_nested()
INFO: rcu detected stall in syscall_exit_to_user_mode cgroups mm 1 78 1632d 1812d 20/29 1620d 313bbd1990b6 mac80211-hwsim: fix late beacon hrtimer handling
BUG: unable to handle kernel NULL pointer dereference in fifo_set_limit net 10 syz, C error 1 1779d 1779d 20/29 1620d 560ee196fe9e net_sched: fix NULL deref in fifo_set_limit()
possible deadlock in smc_switch_to_fallback smc 4 43575 1709d 1728d 20/29 1620d 7a61432dc813 net/smc: Avoid warning of possible recursive locking
general protection fault in ieee80211_assign_vif_chanctx wireless 2 syz, C inconclusive 4 1758d 2016d 20/29 1620d 563fbefed46a cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
WARNING in rtnl_stats_get net -1 syz, C unreliable 31 1747d 1936d 20/29 1620d 0854a0513321 net: bridge: fix under estimation in br_get_linkxstats_size()
KASAN: use-after-free Read in rxe_queue_cleanup rdma 19 65 1702d 1729d 20/29 1620d 84b01721e804 RDMA: Fix use-after-free in rxe_queue_cleanup
kernel BUG at net/phonet/socket.c:LINE! net -1 syz, C inconclusive 168 1697d 2317d 20/29 1620d 75a2f3152009 phonet/pep: refuse to enable an unbound pipe
possible deadlock in io_poll_double_wake (3) io-uring fs 4 syz, C error done 703 1675d 1949d 20/29 1620d aa43477b0402 io_uring: poll rework
KASAN: use-after-free Read in nf_tables_dump_sets netfilter 19 syz done done 1 1802d 1831d 20/29 1620d a499b03bf36b netfilter: nf_tables: unlink table before deleting it
KASAN: use-after-free Read in __lock_sock sctp 19 syz done error 26 2012d 2827d 20/29 1620d 5ec7d18d1813 sctp: use call_rcu to free endpoint
KCSAN: data-race in __inet_hash_connect / inet_getname net 6 1 1779d 1753d 20/29 1620d 9dfc685e0262 inet: remove races in inet{6}_getname()
UBSAN: array-index-out-of-bounds in ktime_mono_to_any kernel 15 4 1739d 1740d 20/29 1620d 6dc25401cba4 net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any
KMSAN: uninit-value in fib_get_nhs net 7 syz, C 14 1638d 1709d 20/29 1620d 7a3429bace0e ipv4: Check attribute length for RTA_GATEWAY in multipath route
WARNING in sk_stream_kill_queues (7) net -1 syz, C 6689 1621d 1739d 20/29 1620d c4777efa751d net: add and use skb_unclone_keeptruesize() helper
WARNING in batadv_nc_mesh_free batman -1 syz, C inconclusive 1 1758d 1758d 20/29 1620d 6f68cd634856 net: batman-adv: fix error handling
KASAN: use-after-free Read in vlan_dev_real_dev (2) net 19 syz, C error 7 1757d 1768d 20/29 1620d 563bcbae3ba2 net: vlan: fix a UAF in vlan_dev_real_dev()
WARNING in cache_grow_begin net -1 2 1667d 1667d 20/29 1620d c12837d1bb31 ref_tracker: use __GFP_NOFAIL more carefully
KASAN: null-ptr-deref Write in __pm_runtime_resume pm 12 syz, C done 108 1634d 1812d 20/29 1620d 2fc7acb69fa3 Bluetooth: hci_uart: fix GPF in h5_recv
UBSAN: shift-out-of-bounds in xfrm_get_default net -1 syz, C done 104 1771d 1810d 20/29 1620d 3c10ffddc61f net: xfrm: fix shift-out-of-bounds in xfrm_get_default
WARNING in new_slab mm -1 syz, C inconclusive 2 1667d 1698d 20/29 1620d c12837d1bb31 ref_tracker: use __GFP_NOFAIL more carefully
INFO: task hung in hwrng_register crypto usb 1 syz unreliable done 1 1766d 1823d 20/29 1620d 2bb31abdbe55 hwrng: virtio - don't wait on cleanup
WARNING in ref_tracker_free net -1 syz, C done 14831 1677d 1705d 20/29 1620d 123e495ecc25 net: linkwatch: be more careful about dev->linkwatch_dev_tracker
WARNING in bpf_warn_invalid_xdp_action -1 syz, C done done 8941 1676d 2396d 20/29 1620d 2cbad989033b bpf: Do not WARN in bpf_warn_invalid_xdp_action()
INFO: rcu detected stall in br_multicast_query_expired kernel 1 syz, C inconclusive 2 1697d 1697d 20/29 1620d f83a112bd91a net: bridge: mcast: add and enforce startup query interval minimum
unregister_netdevice: waiting for DEV to become free (6) 2 syz, C error 13128 1620d 1739d 20/29 1620d 34ac17ecbf57 ethtool: use ethnl_parse_header_dev_put()
KMSAN: uninit-value in udf_evict_inode (2) udf 7 13 1652d 1705d 20/29 1620d f05f2429eec6 udf: Fix error handling in udf_new_inode()
KMSAN: uninit-value in _ieee802_11_parse_elems_crc wireless 7 1 1715d 1708d 20/29 1620d 768c0b19b506 mac80211: validate extended element ID is present
WARNING in trc_read_check_handler kernel -1 syz, C unreliable done 40 1747d 1835d 20/29 1620d 96017bf90397 rcu-tasks: Simplify trc_read_check_handler() atomic operations
WARNING: held lock freed in spi_unregister_controller spi usb 4 syz, C inconclusive 251 1720d 1760d 20/29 1620d 6c53b45c71b4 spi: fix use-after-free of the add_lock mutex
kernel BUG in find_lock_entries mm -1 syz, C done 10 1668d 1831d 20/29 1620d d417b49fff3e mm/filemap.c: remove bogus VM_BUG_ON
inconsistent lock state in netlink_broadcast_filtered net 4 1 1753d 1753d 20/29 1620d f941eadd8d6d bpf: Avoid races in __bpf_prog_run() for 32bit arches
WARNING in __nf_unregister_net_hook (4) netfilter -1 syz, C error 66 1622d 1952d 20/29 1620d 68a3765c659f netfilter: nf_tables: skip netdev events generated on netns removal
WARNING in gnet_stats_add_basic net -1 syz, C done 14 1760d 1761d 20/29 1620d e22db7bd552f net: sched: Allow statistics reads from softirq.
WARNING in isotp_tx_timer_handler can -1 syz, C error 1553 1620d 2063d 20/29 1620d 9acf636215a6 can: isotp: isotp_sendmsg(): add result check for wait_event_interruptible()
general protection fault in hrtimer_active (3) kernel 2 syz done error 34 1655d 1960d 20/29 1620d e28587cc491e sit: do not call ipip6_dev_free() from sit_init_net()
INFO: task hung in io_wqe_worker fs io-uring 1 syz, C unreliable 3 1762d 1758d 20/29 1620d 1d5f5ea7cb7d io-wq: remove worker to owner tw dependency
BUG: corrupted list in netif_napi_add net 8 syz unreliable done 17 1735d 1766d 20/29 1620d 0315a075f134 net: fix premature exit from NAPI state polling in napi_disable()
WARNING in fuse_evict_inode fuse -1 syz, C done 43 1757d 1762d 20/29 1620d 5c791fe1e2a4 fuse: make sure reclaim doesn't write the inode
KASAN: use-after-free Read in bdev_free_inode block 19 syz error 7 1770d 1790d 20/29 1620d 06cc978d3ff2 block: genhd: fix double kfree() in __alloc_disk_node()
general protection fault in scsi_queue_rq fuse scsi 2 syz, C done done 4000 1737d 2132d 20/29 1620d 20aaef52eb08 scsi: scsi_ioctl: Validate command size
INFO: task can't die in __cond_resched net 1 syz, C error 66 1735d 1789d 20/29 1620d e9edc188fc76 netfilter: conntrack: serialize hash resizes and cleanups
BUG: unable to handle kernel NULL pointer dereference in bpf 10 syz, C done 753 1677d 1749d 20/29 1620d ad10c381d133 bpf: Add missing map_delete_elem method to bloom filter map
general protection fault in ref_tracker_free net 19 21 1679d 1703d 20/29 1620d 123e495ecc25 net: linkwatch: be more careful about dev->linkwatch_dev_tracker
KASAN: vmalloc-out-of-bounds Read in bpf_prog_put bpf 17 syz, C done 2 1700d 1698d 20/29 1620d 218d747a4142 bpf, sockmap: Fix double bpf_prog_put on error case in map_link
general protection fault in nf_tables_dump_tables netfilter 2 syz done done 4 1785d 1785d 20/29 1620d a499b03bf36b netfilter: nf_tables: unlink table before deleting it
BUG: unable to handle kernel NULL pointer dereference in unix_shutdown net 10 syz, C unreliable 413 1816d 1819d 20/29 1663d d359902d5c35 af_unix: Fix NULL pointer bug in unix_shutdown
kernel BUG at mm/vmalloc.c:LINE! (2) mm -1 syz, C done done 6605 1815d 2226d 20/29 1663d 537cf4e3cc2f xsk: Fix umem cleanup bug at socket destruct
memory leak in __pskb_copy_fclone wpan 3 syz, C 21 1857d 1999d 20/29 1680d 1090340f7ee5 net: Fix memory leak in ieee802154_raw_deliver
WARNING in rtl28xxu_ctrl_msg/usb_submit_urb usb -1 syz, C 50 1860d 1908d 20/29 1738d 76f22c93b209 media: rtl28xxu: fix zero-length control request media: rtl28xxu: fix zero-length control request
WARNING in hso_free_net_device usb -1 syz, C error 528 1856d 2537d 20/29 1738d 788e67f18d79 usb: hso: fix error handling code of hso_create_net_device usb: hso: fix error handling code of hso_create_net_device
KASAN: null-ptr-deref Read in filp_close (2) fs 19 syz, C 3 1858d 1967d 20/29 1738d 3b0462726e7e cgroup: verify that source is a string 9b5b872215fe file: fix close_range() for unshare+cloexec
BUG: sleeping function called from invalid context in lock_sock_nested (2) bluetooth 5 syz, C done error 19391 1829d 2365d 20/29 1738d e04480920d1e Bluetooth: defer cleanup of resources in hci_unregister_dev() Bluetooth: defer cleanup of resources in hci_unregister_dev()
KASAN: use-after-free Write in dec_rlimit_ucounts kernel 22 syz, C 4 1821d 1854d 20/29 1738d 345daff2e994 ucounts: Fix race condition between alloc_ucounts and put_ucounts bbb6d0f3e1fe ucounts: Increase ucounts reference counter before the security hook
KMSAN: kernel-infoleak in compat_drm_wait_vblank dri 9 37 1955d 1999d 20/29 1738d de066e116306 drm/compat: Clear bounce structures drm/compat: Clear bounce structures
KASAN: use-after-free Read in cipso_v4_genopt lsm net 19 syz, C inconclusive 5 1990d 1991d 20/29 1738d ad5d07f4a9cd cipso,calipso: resolve a number of problems with the DOI refcounts 1165affd4848 net: mac802154: Fix general protection fault
net-next build error (4) kernel -1 4 1806d 1807d 20/29 1739d ea7b4244b365 x86/setup: Explicitly include acpi.h
memory leak in kobject_set_name_vargs (4) kernel 3 syz, C 171 1806d 2093d 20/29 1739d 8fd0c1b0647a nilfs2: fix memory leak in nilfs_sysfs_delete_device_group
WARNING in io_sq_thread_park fs -1 1 1970d 1970d 20/29 1739d a185f1db59f1 io_uring: do ctx sqd ejection in a clear context
WARNING in destroy_conntrack netfilter -1 syz, C done 1 1833d 1831d 20/29 1739d e3245a7b7b34 netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with mutex
upstream boot error: WARNING in kvm_wait kvm -1 233 1974d 1988d 20/29 1739d f4e61f0c9add x86/kvm: Fix broken irq restoration in kvm_wait
general protection fault in hwsim_del_edge_nl wpan 2 syz, C done 3 1884d 1884d 20/29 1739d 0303b30375df ieee802154: hwsim: avoid possible crash in hwsim_del_edge_nl()
KMSAN: uninit-value in number (3) media 7 syz, C 8575 1739d 1982d 20/29 1739d eaaea4681984 media: gspca/sq905.c: fix uninitialized variable
WARNING: suspicious RCU usage in kernfs_fop_read_iter kernfs 4 1 1961d 1961d 20/29 1739d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
WARNING in idr_get_next arm-msm net -1 syz, C error done 21 1929d 2174d 20/29 1739d 3cbf7530a163 qrtr: Convert qrtr_ports from IDR to XArray
KASAN: null-ptr-deref Read in phy_disconnect net usb 11 syz, C 255 1805d 1809d 20/29 1739d 1406e8cb4b05 net: usb: asix: do not call phy_disconnect() for ax88178
WARNING in ex_handler_fprestore kernel -1 syz, C done 5 1901d 1908d 20/29 1739d 484cea4f362e x86/fpu: Prevent state corruption in __fpu__restore_sig()
KMSAN: uninit-value in hsr_fill_frame_info net 7 syz, C 249 1855d 2153d 20/29 1739d 2e9f60932a2c net: hsr: check skb can contain struct hsr_ethhdr in fill_frame_info
possible deadlock in snd_timer_interrupt sound 4 syz, C done 41 1746d 1846d 20/29 1739d f671a691e299 fcntl: fix potential deadlocks for &fown_struct.lock
WARNING: refcount bug in ip6_tnl_dev_uninit net 13 syz, C done 16 1961d 1966d 20/29 1739d 0d7a7b2014b1 ipv6: remove extra dev_hold() for fallback tunnels
WARNING in bpf_bprintf_prepare bpf -1 syz, C unreliable 96 1884d 1922d 20/29 1739d e2d5b2bb769f bpf: Fix nested bpf_bprintf_prepare with more per-cpu buffers
KASAN: use-after-free Read in snd_seq_timer_interrupt (2) sound 19 syz, C inconclusive 2 1896d 1894d 20/29 1739d 83e197a8414c ALSA: seq: Fix race of snd_seq_timer_open()
bpf-next build error (3) kernel -1 10 1795d 1965d 20/29 1739d 7e32a09fdcb3 bpf: tcp: Remove comma which is causing build error
WARNING: suspicious RCU usage in tomoyo_encode2 rcu 4 1 1924d 1924d 20/29 1739d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
KASAN: use-after-free Read in sctp_do_8_2_transport_strike sctp 19 1 1943d 1942d 20/29 1739d 35b4f24415c8 sctp: do asoc update earlier in sctp_sf_do_dupcook_a
KASAN: use-after-free Read in gfs2_glock_shrink_scan gfs2 19 1 1918d 1914d 20/29 1739d 1ab19c5de4c5 gfs2: Fix use-after-free in gfs2_glock_shrink_scan
possible deadlock in hfs_find_init hfs 4 syz, C done error 1 2045d 3036d 20/29 1739d b3b2177a2d79 hfs: add lock nesting notation to hfs_find_init
KASAN: slab-out-of-bounds Read in add_del_if bridge 17 syz, C unreliable 970 1830d 1806d 20/29 1739d 9384eacd80f3 net: core: don't call SIOCBRADD/DELIF for non-bridge devices
memory leak in zr364xx_start_readpipe media usb 3 syz, C 2 1888d 1915d 20/29 1739d 0a045eac8d04 media: zr364xx: fix memory leak in zr364xx_start_readpipe
KASAN: use-after-free Write in alloc_ucounts exfat 22 syz 7 1837d 1854d 20/29 1739d 345daff2e994 ucounts: Fix race condition between alloc_ucounts and put_ucounts
UBSAN: shift-out-of-bounds in ___bpf_prog_run bpf -1 syz, C unreliable 38 1872d 1983d 20/29 1739d 28131e9d9333 bpf: Fix up register-based shifts in interpreter to silence KUBSAN
KASAN: slab-out-of-bounds Read in fq_pie_qdisc_enqueue net 17 1 1878d 1878d 20/29 1739d e70f7a11876a net/sched: fq_pie: fix OOB access in the traffic path
KMSAN: uninit-value in video_usercopy (2) media 7 13058 1785d 1977d 20/29 1739d c344f07aa1b4 media: v4l2-core: ignore native time32 ioctls on 64-bit
WARNING: suspicious RCU usage in do_ipv6_setsockopt net 4 1 1964d 1964d 20/29 1739d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
memory leak in garp_request_join net 3 syz, C 414 1868d 2391d 20/29 1739d 42ca63f98084 net/802/garp: fix memleak in garp_request_join()
memory leak in pcan_usb_fd_init usb can 3 syz, C 19 2002d 2072d 20/29 1739d a0b96b4a6274 drivers: net: fix memory leak in peak_usb_create_dev
unregister_netdevice: waiting for DEV to become free (5) 2 syz, C done 40035 1739d 1984d 20/29 1739d 0d7a7b2014b1 ipv6: remove extra dev_hold() for fallback tunnels
possible deadlock in snd_timer_notify fs 4 119 1740d 1847d 20/29 1739d f671a691e299 fcntl: fix potential deadlocks for &fown_struct.lock
WARNING in dtv5100_probe/usb_submit_urb usb -1 syz, C 51 1860d 1906d 20/29 1739d 8c8b9a9be2af media: dtv5100: fix control-request directions
memory leak in io_sqe_buffers_register fs 3 syz, C 2 1932d 1932d 20/29 1739d bb6659cc0ad3 io_uring: Fix memory leak in io_sqe_buffers_register()
BUG: using smp_processor_id() in preemptible code in clock_was_set kernel 4 syz, C done 231 1827d 1828d 20/29 1739d 9482fd71dbb8 hrtimer: Use raw_cpu_ptr() in clock_was_set()
possible deadlock in __queue_work serial 4 2 1877d 1935d 20/29 1739d 3f804f6d201c KVM: x86: Prevent deadlock against tk_core.seq
KMSAN: uninit-value in virtio_net_hdr_to_skb net 7 syz, C 325 1856d 1915d 20/29 1739d 61431a5907fc net: ensure mac header is set in virtio_net_hdr_to_skb()
memory leak in kvm_dev_ioctl kvm 3 syz, C 37 1856d 1868d 20/29 1739d 004d62eb4e57 kvm: debugfs: fix memory leak in kvm_create_vm_debugfs
WARNING in blk_rq_append_bio block usb -1 syz, C done 6 1950d 1915d 20/29 1739d cbb749cf377a block: remove an incorrect check from blk_rq_append_bio
WARNING: suspicious RCU usage in validate_mm mm 4 1 1894d 1894d 20/29 1739d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
INFO: task hung in ext4_put_super ext4 1 syz, C inconclusive done 1 1885d 1915d 20/29 1739d 618f003199c6 ext4: fix memory leak in ext4_fill_super
WARNING in io_link_timeout_fn fs io-uring -1 syz, C done 2 1920d 1920d 20/29 1739d 447c19f3b507 io_uring: fix ltout double free on completion race
kernel BUG in put_ucounts kernel -1 3 1765d 1851d 20/29 1739d 345daff2e994 ucounts: Fix race condition between alloc_ucounts and put_ucounts
KASAN: slab-out-of-bounds Write in ext4_write_inline_data_end ext4 21 syz, C done 1 1822d 1821d 20/29 1739d a54c4613dac1 ext4: fix race writing to an inline_data file while its xattrs are changing
KASAN: use-after-free Write in put_ucounts kernel 22 3 1852d 1854d 20/29 1739d 345daff2e994 ucounts: Fix race condition between alloc_ucounts and put_ucounts
general protection fault in nl802154_del_llsec_devkey wpan 8 syz, C inconclusive 229 1952d 2004d 20/29 1739d 27c746869e1a net: ieee802154: fix nl802154 del llsec devkey
WARNING in exception_type kvm-x86 -1 syz, C error 1 1811d 1810d 20/29 1739d e7177339d7b5 Revert "KVM: x86: mmu: Add guest physical address check in translate_gpa()"
WARNING in e2i_init/usb_submit_urb usb -1 4 1879d 1908d 20/29 1739d 41e81022a04a Input: usbtouchscreen - fix control-request directions
WARNING in ethnl_default_doit net -1 202 1882d 1890d 20/29 1739d e175aef90269 ethtool: strset: fix message length calculation
memory leak in hwsim_add_one wpan 3 syz, C 1 1896d 1894d 20/29 1739d 28a5501c3383 ieee802154: hwsim: Fix memory leak in hwsim_add_one
WARNING in taprio_change -1 syz, C done 746 1924d 2160d 20/29 1739d ed8157f1ebf1 net: sched: tapr: prevent cycle_time == 0 in parse_taprio_schedule
KASAN: out-of-bounds Read in leaf_paste_entries fs 17 syz, C inconclusive 8 1770d 2001d 20/29 1739d 13d257503c09 reiserfs: check directory items on read from disk
upstream boot error: kernel panic: VFS: Unable to mount root fs on unknown-block(0,0) fs -1 235 1860d 1868d 20/29 1739d c43ddbf97f46 scsi: virtio_scsi: Do not overwrite SCSI status
KASAN: use-after-free Write in qdisc_class_hash_insert (2) net 22 1 1882d 1882d 20/29 1739d 0cd58e5c53ba pkt_sched: sch_qfq: fix qfq_change_class() error path
WARNING: suspicious RCU usage in count (2) fs mm 4 1 1911d 1911d 20/29 1739d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
KCSAN: data-race in igmp_ifc_event / igmp_ifc_timer_expire net 6 1 1832d 1831d 20/29 1739d 4a2b285e7e10 net: igmp: fix data-race in igmp_ifc_timer_expire()
kernel BUG in llc_sap_action_send_xid_c net -1 syz, C error 61 1739d 1953d 20/29 1739d c7c9d2102c9c net: llc: fix skb_over_panic
BUG: unable to handle kernel NULL pointer dereference in htb_select_queue net 10 syz done 8 1969d 1984d 20/29 1739d fb3a3e37de33 sch_htb: Fix offload cleanup in htb_destroy on htb_init failure 93bde210c434 sch_htb: Fix select_queue for non-offload mode
usb-testing boot error: WARNING in kvm_wait kvm -1 3 1982d 1984d 20/29 1739d f4e61f0c9add  x86/kvm: Fix broken irq restoration in kvm_wait
WARNING in netlbl_cipsov4_add -1 syz, C inconclusive 4433 1802d 2001d 20/29 1739d 8ca34a13f7f9 net: cipso: fix warnings in netlbl_cipsov4_add_std
general protection fault in io_commit_cqring (2) io-uring fs 12 syz, C done 82 1951d 1964d 20/29 1739d 51520426f4bc io_uring: handle setup-failed ctx in kill_timeouts
KCSAN: data-race in packet_do_bind / packet_sendmsg (3) net 6 1 1898d 1894d 20/29 1739d c7d2ef5dd4b0 net/packet: annotate accesses to po->bind
WARNING: suspicious RCU usage in do_recvmmsg net 4 8 1891d 1917d 20/29 1739d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
memory leak in __ieee80211_beacon_get wireless 3 syz 14 1893d 2014d 20/29 1739d bd18de517923 mac80211_hwsim: drop pending frames on stop
KASAN: use-after-free Write in sk_psock_stop bpf net 22 syz done 74 1937d 1956d 20/29 1739d aadb2bb83ff7 sock_map: Fix a potential use-after-free in sock_map_close()
INFO: task hung in io_sq_thread_park (2) fs io-uring 1 syz done 2 1860d 1856d 20/29 1739d 46fee9ab02cb io_uring: remove double poll entry on arm failure
KCSAN: data-race in unix_dgram_sendmsg / unix_release_sock net 6 1 1888d 1887d 20/29 1739d a494bd642d91 net/af_unix: fix a data-race in unix_dgram_sendmsg / unix_release_sock
INFO: rcu detected stall in wg_packet_tx_worker (3) net 1 syz, C inconclusive 5 1824d 1807d 20/29 1739d c7c5e6ff533f fq_codel: reject silly quantum parameters
KCSAN: data-race in inet_dgram_connect / udp_lib_get_port (5) net 6 6 1904d 1891d 20/29 1739d dcd01eeac144 inet: annotate data race in inet_send_prepare() and inet_dgram_connect()
WARNING: refcount bug in vti6_dev_uninit net 13 syz, C 26 1962d 1966d 20/29 1739d 0d7a7b2014b1 ipv6: remove extra dev_hold() for fallback tunnels
KCSAN: data-race in __io_uring_cancel / io_uring_try_cancel_requests fs 6 3 1904d 1906d 20/29 1739d b16ef427adf3 io_uring: fix data race to avoid potential NULL-deref
memory leak in smsc75xx_bind usb 3 syz 2 1907d 1908d 20/29 1739d 46a8b29c6306 net: usb: fix memory leak in smsc75xx_bind
memory leak in mcba_usb_probe usb 3 syz, C 34 1885d 2062d 20/29 1739d 91c02557174b can: mcba_usb: fix memory leak in mcba_usb
KMSAN: kernel-infoleak in i2cdev_read i2c 9 syz, C 592 1855d 1981d 20/29 1739d 86ff25ed6cd8 i2c: dev: zero out array used for i2c reads from userspace
WARNING: suspicious RCU usage in get_counters (2) netfilter 4 1 1874d 1874d 20/29 1739d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
general protection fault in unix_dgram_connect net 2 syz, C done 2 1813d 1813d 20/29 1739d dc56ad7028c5 af_unix: fix potential NULL deref in unix_dgram_connect()
WARNING in __percpu_ref_exit (2) fs -1 syz, C error done 31 1739d 1978d 20/29 1739d a298232ee6b9 io_uring: fix link timeout refs
WARNING in cfg80211_connect -1 syz, C done 2320 1952d 2143d 20/29 1739d 1b5ab825d9ac cfg80211: remove WARN_ON() in cfg80211_sme_connect
WARNING: suspicious RCU usage in gc_worker netfilter 4 3 1893d 1919d 20/29 1739d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
BUG: unable to handle kernel paging request in vga16fb_fillrect fbdev 8 syz, C inconclusive 14 1741d 1857d 20/29 1739d 8c28051cdcbe fbmem: don't allow too huge resolutions
BUG: unable to handle kernel paging request in csum_partial (3) kernel 8 syz, C done 1 1826d 1856d 20/29 1739d 9cf448c200ba ip6_gre: add validation for csum_start 1d011c4803c7 ip_gre: add validation for csum_start
WARNING in hid_submit_ctrl/usb_submit_urb input usb -1 syz, C done 38 1804d 1853d 20/29 1739d 0a824efdb724 HID: usbhid: Fix warning caused by 0-length input reports
WARNING in ext4_xattr_set_entry ext4 -1 syz, C unreliable 7 1988d 2071d 20/29 1739d 6b22489911b7 ext4: do not try to set xattr into ea_inode if value is empty
WARNING: suspicious RCU usage in wg_ratelimiter_gc_entries wireguard 4 5 1889d 1964d 20/29 1739d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
net build error (3) kernel -1 29 1802d 1807d 20/29 1739d ea7b4244b365 x86/setup: Explicitly include acpi.h
memory leak in nfcmrvl_nci_register_dev usb 3 syz, C 9 2005d 2050d 20/29 1739d e0652f8bb44d NFC: nci: fix memory leak in nci_allocate_device
WARNING in kvm_wait kvm -1 syz, C error 119882 1967d 1985d 20/29 1739d f4e61f0c9add x86/kvm: Fix broken irq restoration in kvm_wait
general protection fault in ieee802154_llsec_parse_key_id wpan 11 syz, C inconclusive 92 1899d 1999d 20/29 1739d 6f7f657f2440 net: ieee802154: nl-mac: fix check on panid
WARNING: suspicious RCU usage in rmap_walk_file mm 4 1 1919d 1919d 20/29 1739d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
memory leak in xfrm_user_rcv_msg net 3 syz, C 1 1883d 1879d 20/29 1739d 7c1a80e80cde net: xfrm: fix memory leak in xfrm_user_rcv_msg
KMSAN: uninit-value in INET_ECN_decapsulate (2) net 7 2 1893d 1963d 20/29 1739d 6628ddfec758 net: geneve: check skb is large enough for IPv4/IPv6 header
memory leak in bpf (2) bpf 3 syz, C 3 1893d 1962d 20/29 1739d ccff81e1d028 bpf: Fix false positive kmemleak report in bpf_ringbuf_area_alloc()
WARNING: refcount bug in rxe_qp_do_cleanup rdma 13 1 1924d 1922d 20/29 1739d 67f29896fdc8 RDMA/rxe: Clear all QP fields if creation failed
KCSAN: data-race in sock_alloc_send_pskb / unix_release_sock (5) net 6 47 1739d 1891d 20/29 1739d f13ef10059cc net: annotate data race in sock_error()
possible deadlock in __fs_reclaim_acquire mm 4 syz unreliable 672 1856d 1867d 20/29 1739d 187ad460b841 mm/page_alloc: avoid page allocator recursion with pagesets.lock held
general protection fault in btf_type_id_size bpf 2 syz, C unreliable 6 1989d 1986d 20/29 1739d 350a5c4dd245 bpf: Dont allow vmlinux BTF to be used in map_create and prog_load.
WARNING: suspicious RCU usage in __get_free_pages mm 4 1 1928d 1928d 20/29 1739d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
memory leak in tty_init_dev serial 3 syz, C 9 1898d 2542d 20/29 1739d 58af3d3d54e8 net: caif: fix memory leak in ldisc_open
INFO: task hung in __io_uring_cancel fs io-uring 1 syz, C done 5 1877d 1943d 20/29 1739d 28090c133869 io_uring: fix work_exit sqpoll cancellations
divide error in __tcp_select_window (2) net 2 syz, C done 4 1953d 1954d 20/29 1739d a7150e382267 Revert "tcp: Reset tcp connections in SYN-SENT state"
KASAN: out-of-bounds Read in i801_isr i2c 21 16 1881d 1921d 20/29 1739d e4d8716c3dce i2c: i801: Don't generate an interrupt on bus reset
riscv/fixes boot error: WARNING in vkms_vblank_simulate dri -1 13 1939d 1963d 20/29 1739d b4142fc4d52d drm/vkms: fix misuse of WARN_ON
WARNING: suspicious RCU usage in __ext4_mark_inode_dirty kernel 4 1 1897d 1896d 20/29 1739d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
KCSAN: data-race in start_this_handle / start_this_handle ext4 6 54 1981d 1982d 20/29 1739d 3b1833e92bab ext4: annotate data race in start_this_handle()
WARNING: suspicious RCU usage in shrink_page_list mm 4 1 1922d 1922d 20/29 1739d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
KASAN: use-after-free Read in tipc_recvmsg tipc 19 syz, C done 2198 1845d 1853d 20/29 1739d cc19862ffe45 tipc: fix an use-after-free issue in tipc_recvmsg
possible deadlock in _snd_pcm_stream_lock_irqsave (2) fs 4 120 1740d 1847d 20/29 1739d f671a691e299 fcntl: fix potential deadlocks for &fown_struct.lock
general protection fault in br_switchdev_fdb_notify bridge 2 syz, C error 82 1834d 1839d 20/29 1739d 0541a6293298 net: bridge: validate the NUD_PERMANENT bit when adding an extern_learn FDB entry
memory leak in create_io_worker io-uring fs 3 syz, C 5 1762d 1801d 20/29 1739d 66e70be72288 io-wq: fix memory leak in create_io_worker()
INFO: trying to register non-static key in l2cap_chan_del bluetooth -1 syz inconclusive 73 1981d 2200d 20/29 1739d 3af70b39fa2d Bluetooth: check for zapped sk before connecting
KMSAN: uninit-value in ip_rcv_core net 7 syz, C 141 1855d 2889d 20/29 1739d 6628ddfec758 net: geneve: check skb is large enough for IPv4/IPv6 header
memory leak in hdcs_probe_1020 usb media 3 syz, C 1 1966d 1962d 20/29 1739d 4f4e6644cd87 media: gscpa/stv06xx: fix memory leak
WARNING in ieee802154_get_llsec_params wpan -1 syz, C done 36 1952d 1998d 20/29 1739d 1534efc7bbc1 net: ieee802154: stop dump llsec params for monitors
WARNING in slave_kobj_release net -1 syz, C done 3 1916d 2005d 20/29 1739d 35d96e631860 bonding: init notify_work earlier to avoid uninitialized use
WARNING in io_wqe_enqueue io-uring fs -1 syz, C done 13 1897d 1897d 20/29 1739d e6ab8991c5d0 io_uring: fix false WARN_ONCE
KASAN: use-after-free Write in get_ucounts kernel 22 syz unreliable done 7 1836d 1863d 20/29 1739d 345daff2e994 ucounts: Fix race condition between alloc_ucounts and put_ucounts
usb-testing boot error: kernel panic: VFS: Unable to mount root fs on unknown-block(0,0) fs -1 27 1859d 1864d 20/29 1739d c43ddbf97f46 scsi: virtio_scsi: Do not overwrite SCSI status
divide error in nft_limit_init netfilter 2 syz, C done 4 1952d 1953d 20/29 1739d b895bdf5d643 netfilter: nft_limit: avoid possible divide error in nft_limit_init
WARNING: suspicious RCU usage in exit_mmap mm 4 1 1918d 1918d 20/29 1739d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
BUG: unable to handle kernel paging request in cap_capable lsm 8 syz, C unreliable 4 1835d 1836d 20/29 1739d 9384eacd80f3 net: core: don't call SIOCBRADD/DELIF for non-bridge devices
KASAN: slab-out-of-bounds Write in xt_compat_target_from_user netfilter 21 syz, C error error 1 2189d 2188d 20/29 1739d b29c457a6511 netfilter: x_tables: fix compat match/target pad out-of-bound write
linux-next boot error: KASAN: use-after-free Read in page_to_skb net virt -1 7 1941d 1943d 20/29 1739d af39c8f72301 virtio-net: fix use-after-free in page_to_skb()
KASAN: use-after-free Read in eth_header_parse_protocol net 19 syz, C done 1453 1937d 1983d 20/29 1739d 61431a5907fc net: ensure mac header is set in virtio_net_hdr_to_skb()
possible deadlock in snd_pcm_period_elapsed (2) fs 4 52 1740d 1847d 20/29 1739d f671a691e299 fcntl: fix potential deadlocks for &fown_struct.lock
KMSAN: uninit-value in pegasus_probe usb 7 syz, C 258 1837d 2507d 20/29 1739d af35fc37354c net: pegasus: fix uninit-value in get_interrupt_interval
general protection fault in magicmouse_remove usb input 2 syz, C 47 1889d 1915d 20/29 1739d 4b4f6cecca44 HID: magicmouse: fix NULL-deref on disconnect
KASAN: use-after-free Read in nbd_genl_connect (2) nbd 19 syz, C unreliable 6 1815d 1815d 20/29 1739d 7ee656c3ac3d nbd: remove nbd->destroy_complete
KCSAN: data-race in udp_lib_setsockopt / udpv6_sendmsg net 6 1 1873d 1872d 20/29 1739d 18a419bad63b udp: annotate data races around unix_sk(sk)->gso_size
KASAN: use-after-free Read in ntfs_iget (2) ntfs3 19 syz, C inconclusive 2 1897d 1894d 20/29 1739d d98e4d95411b ntfs: fix validity check for file name attribute
UBSAN: shift-out-of-bounds in ext4_mb_init ext4 -1 syz, C done 5 2009d 2020d 20/29 1739d f91436d55a27 fs/ext4: fix integer overflow in s_log_groups_per_flex
memory leak in __send_signal kernel 3 syz 3 1881d 1895d 20/29 1739d 399f8dd9a866 signal: Prevent sigqueue caching after task got released
WARNING: suspicious RCU usage in nf_ct_iterate_cleanup (2) net 4 4 1868d 1927d 20/29 1739d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
WARNING in ieee80211_free_ack_frame wireless -1 syz done 117 1743d 2137d 20/29 1739d bd18de517923 mac80211_hwsim: drop pending frames on stop
BUG: unable to handle kernel access to user memory in schedule_tail kernel -1 21843 1960d 1983d 20/29 1739d 285a76bb2cf5 riscv: evaluate put_user() arg before enabling user access
WARNING in batadv_iv_send_outstanding_bat_ogm_packet batman -1 syz, C done 12568 1871d 2497d 20/29 1739d 9f460ae31c44 batman-adv: Avoid WARN_ON timing related checks
WARNING in io_poll_double_wake fs io-uring -1 syz, C done done 1124 1840d 1942d 20/29 1739d a890d01e4ee0 io_uring: fix poll requests leaking second poll entries
KMSAN: kernel-infoleak in move_addr_to_user (5) tipc 9 3 1839d 1981d 20/29 1739d 50535249f624 net: qrtr: fix a kernel-infoleak in qrtr_recvmsg()
WARNING: suspicious RCU usage in console_conditional_schedule serial 4 1 1917d 1917d 20/29 1739d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
WARNING: refcount bug in ip6gre_tunnel_uninit net 13 syz, C error 10 1963d 1966d 20/29 1739d 7f700334be9a ip6_gre: proper dev_{hold|put} in ndo_[un]init methods
memory leak in dvb_create_media_graph usb media 3 syz, C 26 1944d 2102d 20/29 1739d bf9a40ae8d72 media: dvbdev: Fix memory leak in dvb_media_device_free()
WARNING in vkms_vblank_simulate (2) dri -1 syz, C error 77748 1739d 2113d 20/29 1739d b4142fc4d52d drm/vkms: fix misuse of WARN_ON
memory leak in hdcs_probe_1x00 media usb 3 syz, C 1 1995d 1995d 20/29 1739d 4f4e6644cd87 media: gscpa/stv06xx: fix memory leak
WARNING in osif_probe/usb_submit_urb usb -1 syz, C 45 1863d 1908d 20/29 1739d 4ca070ef0dd8 i2c: robotfuzz-osif: fix control-request directions
KCSAN: data-race in inet_send_prepare / udp_lib_get_port (3) net 6 4 1891d 1894d 20/29 1739d dcd01eeac144 inet: annotate data race in inet_send_prepare() and inet_dgram_connect()
general protection fault in cdev_del (2) fs 11 syz, C error 45 1872d 2150d 20/29 1739d 8a12f8836145 net: hso: fix null-ptr-deref during tty device unregistration 0a360e8b65d6 tty: n_gsm: check error while registering tty devices
WARNING: suspicious RCU usage in shmem_alloc_page mm 4 1 1932d 1932d 20/29 1739d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
general protection fault in nl802154_del_llsec_dev wpan 8 syz, C inconclusive 166 1952d 2003d 20/29 1739d 3d1eac2f4558 net: ieee802154: fix nl802154 del llsec dev
KASAN: slab-out-of-bounds Read in fib6_nh_flush_exceptions net 17 2 1916d 1936d 20/29 1739d 821bbf79fe46 ipv6: Fix KASAN: slab-out-of-bounds Read in fib6_nh_flush_exceptions
WARNING: ODEBUG bug in __sk_destruct (2) can -1 syz, C done done 62 1748d 1946d 20/29 1739d 14a4696bc311 can: isotp: isotp_release(): omit unintended hrtimer restart on socket release
INFO: task hung in io_wq_put_and_exit io-uring fs 1 syz, C unreliable 628 1739d 1801d 20/29 1739d 3b33e3f4a6c0 io-wq: fix silly logic error in io_task_work_match()
upstream build error (16) mm -1 243 1747d 1869d 20/29 1739d 498cc50b3fa9 clk: hisilicon: hi3559a: Drop __init markings everywhere
KASAN: use-after-free Read in bcm_rx_handler can 19 syz done 2 1890d 1920d 20/29 1739d d5f9023fa61e can: bcm: delay release of struct bcm_op after synchronize_rcu()
possible deadlock in do_fcntl usb fs 4 syz, C done 245 1815d 2146d 20/29 1739d f671a691e299 fcntl: fix potential deadlocks for &fown_struct.lock
WARNING in qt2_attach/usb_submit_urb usb -1 syz, C 171 1887d 1908d 20/29 1739d eb8dbe80326c USB: serial: quatech2: fix control-request directions
BUG: sleeping function called from invalid context in stack_depot_save mm 5 syz, C unreliable 8490 1838d 1867d 20/29 1739d 187ad460b841 mm/page_alloc: avoid page allocator recursion with pagesets.lock held
memory leak in hub_event (2) usb 3 syz, C 2 1975d 1978d 20/29 1739d dcb4b8ad6a44 misc/uss720: fix memory leak in uss720_probe
WARNING: suspicious RCU usage in vfree netfilter 4 1 1913d 1913d 20/29 1739d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
memory leak in usb_set_configuration (2) usb 3 syz, C 2 1833d 1941d 20/29 1739d be8656e62e9e media: cpia2: fix memory leak in cpia2_usb_probe
WARNING in usb_new_device/usb_submit_urb usb -1 syz, C 2 1903d 1899d 20/29 1739d 60dfe484cef4 USB: core: Avoid WARNings for 0-length descriptor requests
WARNING in rtl8152_probe usb -1 syz, C 23 1897d 1920d 20/29 1739d 1a44fb38cc65 r8152: check the informaton of the device
inconsistent lock state in sco_sock_timeout bluetooth 4 syz, C done 16 1844d 2188d 20/29 1739d ba316be1b6a0 Bluetooth: schedule SCO timeouts with delayed_work
WARNING in ieee80211_get_sband wireless -1 syz, C done 7 1907d 2132d 20/29 1739d 0ee4d55534f8 mac80211: remove warning in ieee80211_get_sband()
KASAN: use-after-free Write in j1939_can_recv can 22 2 1968d 2001d 20/29 1739d 22c696fed25c can: j1939: j1939_sk_init(): set SOCK_RCU_FREE to call sk_destruct() after RCU is done
general protection fault in hci_release_dev bluetooth 2 syz, C done 41 1817d 1838d 20/29 1739d e04480920d1e Bluetooth: defer cleanup of resources in hci_unregister_dev()
WARNING in do_proc_control/usb_submit_urb usb -1 syz, C error 456 1847d 1861d 20/29 1739d b0863f192732 USB: core: Fix incorrect pipe calculation in do_proc_control()
memory leak in skb_clone wpan 3 syz, C 2 1847d 1952d 20/29 1739d 1090340f7ee5 net: Fix memory leak in ieee802154_raw_deliver
general protection fault in gadget_setup usb 2 1 1965d 1949d 20/29 1739d 4a5d797a9f9c usb: gadget: dummy_hcd: fix gpf in gadget_setup
general protection fault in try_grab_compound_head io-uring mm 7 syz, C done 5 1840d 1868d 20/29 1739d d08af0a59684 mm/hugetlb: fix refs calculation from unaligned @vaddr
BUG: using smp_processor_id() in preemptible code in radix_tree_node_alloc net arm-msm 4 syz, C done done 544 1925d 2262d 20/29 1739d 3cbf7530a163 qrtr: Convert qrtr_ports from IDR to XArray
general protection fault in reiserfs_security_init reiserfs 2 syz, C done 26311 1961d 2153d 20/29 1739d 5e46d1b78a03 reiserfs: update reiserfs_xattrs_initialized() condition
KASAN: slab-out-of-bounds Read in do_wait_for_common staging usb 19 syz, C error 5 1833d 1852d 20/29 1739d e9e6aa51b273 staging: rtl8712: error handling refactoring
BUG: sleeping function called from invalid context in __alloc_skb netfilter 5 syz, C done 33 1786d 1928d 20/29 1739d 7072a355ba19 netfilter: nfnetlink: add a missing rcu_read_unlock()
WARNING: suspicious RCU usage in kernel_execve fs mm 4 1 1875d 1875d 20/29 1739d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
WARNING: suspicious RCU usage in do_nanosleep kernel 4 1 1925d 1925d 20/29 1739d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
WARNING: refcount bug in __io_queue_sqe fs 13 1 1941d 1931d 20/29 1739d a298232ee6b9 io_uring: fix link timeout refs
bpf-next test error: WARNING in kvm_wait kvm -1 1 1977d 1977d 20/29 1739d f4e61f0c9add x86/kvm: Fix broken irq restoration in kvm_wait
WARNING in do_proc_bulk mm -1 syz, C inconclusive 3 1929d 1930d 20/29 1739d 4f2629ea67e7 USB: usbfs: Don't WARN about excessively large memory allocations
BUG: unable to handle kernel paging request in corrupted (3) 8 syz, C done 45 1747d 1915d 20/29 1739d 7a274727702c io_uring: don't modify req->poll for rw
BUG: unable to handle kernel NULL pointer dereference in kiocb_done fs io-uring 10 syz, C unreliable done 3 1806d 1806d 20/29 1739d b8ce1b9d25cc io_uring: don't submit half-prepared drain request
general protection fault in smc_tx_sendmsg smc 2 syz, C done 6369 1873d 1881d 20/29 1739d 17081633e22d net/smc: Ensure correct state of the socket in send path
KCSAN: data-race in __se_sys_perf_event_open / find_get_context perf 6 7 1894d 1905d 20/29 1739d 6c605f837115 perf: Fix data race between pin_count increment/decrement
WARNING: suspicious RCU usage in kernfs_iop_getattr kernfs 4 1 1933d 1929d 20/29 1739d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
WARNING: suspicious RCU usage in dup_mmap mm 4 1 1905d 1905d 20/29 1739d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
UBSAN: array-index-out-of-bounds in ima_inode_setxattr lsm integrity 15 syz, C unreliable 6 1819d 1821d 20/29 1739d cb181da16196 IMA: reject unknown hash algorithms in ima_get_hash_algo
possible deadlock in io_uring_register fs 4 16 1798d 1801d 20/29 1739d 009ad9f0c6ee io_uring: drop ctx->uring_lock before acquiring sqd->lock
KCSAN: data-race in packet_do_bind / packet_getname (5) net 6 4 1886d 1886d 20/29 1739d e032f7c9c7ce net/packet: annotate accesses to po->ifindex
memory leak in em28xx_dvb_init media usb 3 syz, C 1 1977d 1977d 20/29 1739d 0ae10a7dc899 media: em28xx: fix memory leak
memory leak in qrtr_create arm-msm net 3 syz, C 3 1842d 2013d 20/29 1739d 52f3456a96c0 net: qrtr: fix memory leaks
memory leak in virtio_transport_send_pkt_info virt kvm net 3 syz, C 2 1950d 2013d 20/29 1739d 8432b8114957 vsock/virtio: free queued packets when closing socket
possible deadlock in loop_probe 4 syz, C done 20656 1860d 1885d 20/29 1739d 962bf783ef65 mtd: break circular locks in register_mtd_blktrans
possible deadlock in ieee80211_tx_frags net 4 1 1939d 1932d 20/29 1739d 1d482e666b8e netlink: disable IRQs for netlink_lock_table()
linux-next test error: KASAN: null-ptr-deref Read in fuse_conn_put fuse -1 18 1803d 1803d 20/29 1739d 660585b56e63 fuse: wait for writepages in syncfs
possible deadlock in __loop_clr_fd (2) block ext4 4 syz, C unreliable 6977 1739d 1864d 20/29 1739d 1c500ad70638 loop: reduce the loop_ctl_mutex scope
memory leak in __usbhid_submit_report input usb 3 syz, C 129 1809d 2102d 20/29 1739d f7744fa16b96 HID: usbhid: free raw_report buffers in usbhid_stop
WARNING in io_try_cancel_userdata fs io-uring -1 syz unreliable 4 1813d 1817d 20/29 1739d dadebc350da2 io_uring: fix io_try_cancel_userdata race for iowq
WARNING in x86_emulate_instruction kvm-x86 -1 syz, C done 4 1914d 1910d 20/29 1739d da6393cdd8aa KVM: X86: Fix warning caused by stale emulation context
KCSAN: data-race in __inet_hash_connect / inet_send_prepare (4) net 6 7 1888d 1891d 20/29 1739d dcd01eeac144 inet: annotate data race in inet_send_prepare() and inet_dgram_connect()
UBSAN: shift-out-of-bounds in choke_change (2) net -1 syz, C done 7 1953d 1969d 20/29 1739d 3a87571f0ffc sch_red: fix off-by-one checks in red_check_params()
KMSAN: kernel-infoleak in copy_page_to_iter (2) fs mm 9 syz, C 2099 1834d 2892d 20/29 1739d ce3aba43599f ext4: fix kernel infoleak via ext4_extent_header
UBSAN: shift-out-of-bounds in snd_timer_user_ccallback sound -1 1 1904d 1900d 20/29 1739d 9c1fe96bded9 ALSA: timer: Fix master timer notification
BUG: scheduling while atomic: syz-executor/ADDR kernel -1 syz, C done 5 1814d 1871d 20/29 1739d 72ff2bf04db2 crypto: aesni - xts_crypt() return if walk.nbytes is 0
UBSAN: shift-out-of-bounds in xprt_calc_majortimeo net nfs -1 syz, C unreliable 149 1939d 2068d 20/29 1739d c09f11ef3595 NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds
INFO: rcu detected stall in tx net 1 syz, C error unreliable 3 1805d 1943d 20/29 1739d 30fad76ce4e9 USB: usbtmc: Fix RCU stall warning
KASAN: use-after-free Read in r871xu_dev_remove usb staging 19 syz, C unreliable 152 1832d 1858d 20/29 1739d e9e6aa51b273 staging: rtl8712: error handling refactoring
KASAN: use-after-free Read in io_worker_handle_work fs 19 2 1883d 1913d 20/29 1739d 3743c1723bfc io-wq: Fix UAF when wakeup wqe in hash waitqueue
WARNING: suspicious RCU usage in proc_alloc_inode fs 4 1 1881d 1881d 20/29 1739d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
net test error: WARNING in kvm_wait kvm -1 1 1980d 1980d 20/29 1739d f4e61f0c9add x86/kvm: Fix broken irq restoration in kvm_wait
KMSAN: kernel-infoleak in fb_cmap_to_user fbdev 9 syz, C 439 1855d 2006d 20/29 1739d 19ab233989d0 fbdev: zero-fill colormap in fbcmap.c
KASAN: slab-out-of-bounds Read in snd_usbmidi_get_ms_info sound usb 17 syz, C 10 1917d 1922d 20/29 1739d e84749a78dc8 ALSA: usb-audio: Validate MS endpoint descriptors
WARNING: lock held when returning to user space in sock_setsockopt net 4 1 1865d 1865d 20/29 1739d 271dbc318432 sock: unlock on error in sock_setsockopt()
WARNING in mntput_no_expire (2) fs -1 syz, C done 68 1746d 1961d 20/29 1739d 7d01ef7585c0 Make sure nd->path.mnt and nd->path.dentry are always valid pointers
WARNING: suspicious RCU usage in __fput fs 4 1 1906d 1906d 20/29 1739d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
WARNING in ieee802154_del_seclevel wpan -1 syz, C done 7 1963d 1999d 20/29 1739d 9dde130937e9 net: ieee802154: forbid monitor for del llsec seclevel
memory leak in snd_ctl_led_register usb 3 syz, C 1 1925d 1915d 20/29 1739d 3ae72f6ab9c1 ALSA: control led: fix memory leak in snd_ctl_led_register
KMSAN: kernel-usb-infoleak in hid_submit_ctrl input usb 9 syz, C 839 1913d 2521d 20/29 1739d 6be388f4a35d HID: usbhid: fix info leak in hid_submit_ctrl
linux-next build error (12) -1 63 1865d 1964d 20/29 1739d 7aae231ac93b bpf: tcp: Limit calling some tcp cc functions to CONFIG_DYNAMIC_FTRACE
BUG: unable to handle kernel paging request in diFree jfs 8 syz, C done 13 1875d 2146d 20/29 1739d 9d574f985fe3 jfs: fix GPF in diFree
WARNING: suspicious RCU usage in inet_twsk_purge net 4 10 1862d 1964d 20/29 1739d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
net-next test error: WARNING in __nf_unregister_net_hook netfilter -1 42 1925d 1935d 20/29 1739d 43016d02cf6e netfilter: arptables: use pernet ops struct during unregister
KMSAN: uninit-value in asix_mdio_read usb 7 syz, C 915 1840d 2503d 20/29 1739d a786e3195d6a net: asix: fix uninit value bugs
WARNING: suspicious RCU usage in populate_vma_page_range mm 4 1 1902d 1902d 20/29 1739d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
general protection fault in kcm_sendmsg net 19 syz, C done 7957 1873d 1894d 20/29 1739d a47c397bb29f revert "net: kcm: fix memory leak in kcm_sendmsg"
WARNING in sk_stream_kill_queues (6) net -1 syz, C 11376 1739d 1953d 20/29 1739d 144748eb0c44 bpf, sockmap: Fix incorrect fwd_alloc accounting
linux-next boot error: KASAN: slab-out-of-bounds Read in page_to_skb virt net -1 5 1941d 1943d 20/29 1739d af39c8f72301 virtio-net: fix use-after-free in page_to_skb()
WARNING: suspicious RCU usage in schedule_debug mm 4 1 1931d 1931d 20/29 1739d 7072a355ba19 netfilter: nfnetlink: add a missing rcu_read_unlock()
BUG: MAX_LOCKDEP_CHAINS too low! (2) net -1 syz, C error 84838 1739d 2215d 20/29 1739d 5dc33592e955 lockdep: Allow tuning tracing capacity constants.
WARNING in input_register_device input usb -1 syz, C error done 11 1956d 2107d 20/29 1739d b4104180a2ef kobject_uevent: remove warning in init_uevent_argv()
KASAN: use-after-free Read in disk_part_iter_next (2) block 19 syz, C done 327 1961d 1979d 20/29 1739d e82fc7855749 block: don't create too many partitions
memory leak in cfserl_create net 3 syz, C 13 2458d 2627d 20/29 1739d b53558a950a8 net: caif: fix memory leak in caif_device_notify
memory leak in cinergyt2_fe_attach usb media 3 syz, C 3 2043d 2101d 20/29 1739d 9ad1efee086e media: dvd_usb: memory leak in cinergyt2_fe_attach
UBSAN: shift-out-of-bounds in red_adaptative_timer (2) net -1 28 1968d 1983d 20/29 1739d e323d865b361 net: sched: validate stab values
upstream test error: WARNING in corrupted netfilter -1 1 1925d 1925d 20/29 1739d 43016d02cf6e netfilter: arptables: use pernet ops struct during unregister
memory leak in radix_tree_insert arm-msm net 3 syz, C 1 1963d 1963d 20/29 1739d 8a03dd925786 net: qrtr: Fix memory leak on qrtr_tx_wait failure
KASAN: use-after-free Read in nfc_llcp_put_ssap net nfc 19 syz done 4 1924d 1931d 20/29 1739d c61760e6940d net/nfc: fix use-after-free llcp_sock_bind/connect
BUG: unable to handle kernel paging request in vga16fb_imageblit (2) fbdev 8 syz, C done 27 1921d 2289d 20/29 1739d ffb324e6f874 tty: vt: always invoke vc->vc_sw->con_resize callback
WARNING: suspicious RCU usage in kernfs_iop_get_link kernfs 4 1 1894d 1890d 20/29 1739d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
WARNING: suspicious RCU usage in tcp_bpf_update_proto bpf net 4 syz, C done 539 1937d 1957d 20/29 1739d 51e0158a5432 skmsg: Pass psock pointer to ->psock_update_sk_prot()
UBSAN: array-index-out-of-bounds in udf_statfs udf 15 syz, C error error 3 1846d 1932d 20/29 1739d 781d2a9a2fc7 udf: Check LVID earlier
linux-next boot error: WARNING in kvm_wait kvm -1 9 1973d 1984d 20/29 1739d f4e61f0c9add x86/kvm: Fix broken irq restoration in kvm_wait
WARNING: suspicious RCU usage in bpf_get_current_cgroup_id bpf 4 syz, C done 764 1809d 1847d 20/29 1739d 2d3a1e3615c5 bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
general protection fault in __io_file_supports_nowait fs io-uring 2 syz, C done done 13 1803d 1809d 20/29 1739d c6d3d9cbd659 io_uring: fix queueing half-created requests
possible deadlock in pipe_lock (5) overlayfs 4 syz, C done 5 1847d 1847d 20/29 1739d 9b91b6b019fd ovl: fix deadlock in splice write
upstream test error: WARNING in kvm_wait kvm -1 2 1980d 1981d 20/29 1739d f4e61f0c9add x86/kvm: Fix broken irq restoration in kvm_wait
upstream boot error: KASAN: invalid-access Read in tomoyo_memory_ok tomoyo -1 3 1970d 1983d 20/29 1739d cf10bd4c4aff kasan: fix per-page tags for non-page_alloc pages
INFO: task hung in usb_remote_wakeup (2) usb 1 syz inconclusive done 9 1820d 2019d 20/29 1739d 363eaa3a450a usbip: synchronize event handler with sysfs code paths
WARNING: suspicious RCU usage in bond_ipsec_add_sa (2) 4 syz, C done 540 1866d 2153d 20/29 1739d b648eba4c69e bonding: fix suspicious RCU usage in bond_ipsec_add_sa()
KCSAN: data-race in __ip4_datagram_connect / skb_set_owner_w (2) net 6 1 1903d 1891d 20/29 1739d b71eaed8c04f inet: annotate date races around sk->sk_txhash
WARNING: suspicious RCU usage in __copy_msghdr_from_user net 4 1 1904d 1904d 20/29 1739d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
KASAN: use-after-free Read in bdev_evict_inode fs 19 syz, C unreliable 1305 1823d 1826d 20/29 1739d 889c05cc5834 block: ensure the bdi is freed after inode_detach_wb
WARNING in pvr2_i2c_core_done usb fs -1 syz, C error 5780 1860d 2515d 20/29 1739d f8194e5e63fd media: pvrusb2: fix warning in pvr2_i2c_core_done
BUG: sleeping function called from invalid context in __fdget_pos kernel 5 4 1811d 1873d 20/29 1739d 821720b9f34e crypto: x86/aes-ni - add missing error checks in XTS code
linux-next test error: unregister_netdevice: waiting for DEV to become free -1 2 1962d 1962d 20/29 1739d 0d7a7b2014b1 ipv6: remove extra dev_hold() for fallback tunnels
upstream test error: BUG: sleeping function called from invalid context in stack_depot_save mm -1 4 1858d 1870d 20/29 1739d 187ad460b841 mm/page_alloc: avoid page allocator recursion with pagesets.lock held
general protection fault in nl802154_add_llsec_key wpan 8 syz, C inconclusive 340 1952d 2006d 20/29 1739d 20d5fe2d7103 net: ieee802154: fix nl802154 add llsec key
INFO: task hung in io_uring_cancel_generic io-uring fs 1 syz, C unreliable 151 1739d 1860d 20/29 1739d 1b48773f9fd0 io_uring: fix io_drain_req()
BUG: MAX_STACK_TRACE_ENTRIES too low! (3) net -1 2 1941d 1942d 20/29 1739d 5dc33592e955 lockdep: Allow tuning tracing capacity constants.
divide error in fill_meta_index squashfs 2 syz, C inconclusive 1 1928d 1927d 20/29 1739d d6e621de1fce squashfs: fix divide error in calculate_skip()
memory leak in copy_process (2) kernel 3 syz, C 2 1979d 1979d 20/29 1739d f60a85cad677 bpf: Fix umd memory leak in copy_process()
WARNING in handle_mm_fault kernel -1 5 1978d 1982d 20/29 1739d f4e61f0c9add x86/kvm: Fix broken irq restoration in kvm_wait
WARNING in __i2c_transfer i2c -1 syz, C done 2847 1739d 1981d 20/29 1739d 71581562ee36 i2c: bail out early when RDWR parameters are wrong
KASAN: slab-out-of-bounds Read in qrtr_endpoint_post (2) 17 syz, C done 41 1840d 2205d 20/29 1739d ad9d24c9429e net: qrtr: fix OOB Read in qrtr_endpoint_post
BUG: sleeping function called from invalid context in __ipv6_dev_mc_dec net 5 syz, C done 21 1872d 1929d 20/29 1739d a100243d95a6 rtnetlink: avoid RCU read lock when holding RTNL
INFO: task hung in del_gendisk block 1 syz, C done 5 1827d 1860d 20/29 1739d 68c9417b193d nbd: do del_gendisk() asynchronously for NBD_DESTROY_ON_DISCONNECT
INFO: trying to register non-static key in skb_dequeue bluetooth -1 syz, C error 28951 1924d 2205d 20/29 1739d be8597239379 Bluetooth: initialize skb_queue_head at l2cap_chan_create()
net-next test error: unregister_netdevice: waiting for DEV to become free -1 18 1962d 1963d 20/29 1739d 0d7a7b2014b1 ipv6: remove extra dev_hold() for fallback tunnels
WARNING: suspicious RCU usage in getname_flags fs 4 2 1867d 1958d 20/29 1739d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
WARNING: refcount bug in in_dev_finish_destroy net 13 syz, C unreliable 463 1739d 1966d 20/29 1739d 0d7a7b2014b1 ipv6: remove extra dev_hold() for fallback tunnels
KASAN: use-after-free Read in j1939_xtp_rx_dat_one (2) can 19 3 1852d 1915d 20/29 1739d 2030043e616c can: j1939: fix Use-after-Free, hold skb ref while in use
WARNING: suspicious RCU usage in vm_mmap_pgoff mm 4 1 1904d 1904d 20/29 1739d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
KASAN: use-after-free Read in __d_alloc (2) fs 19 syz, C unreliable 6774 1780d 1824d 20/29 1739d 0766ec82e5fb namei: Fix use after free in kern_path_locked
WARNING: suspicious RCU usage in get_timespec64 kernel 4 3 1909d 1958d 20/29 1739d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
KMSAN: uninit-value in validate_beacon_head wireless 7 syz, C 284 1858d 2085d 20/29 1739d 9a6847ba1747 nl80211: fix beacon head validation
WARNING in macvlan_process_broadcast net -1 32053 1739d 1984d 20/29 1739d dd4fa1dae9f4 macvlan: macvlan_count_rx() needs to be aware of preemption
WARNING: suspicious RCU usage in vxlan_xmit net 4 syz, C error 1 1880d 1880d 20/29 1739d 85e8b032d6eb vxlan: add missing rcu_read_lock() in neigh_reduce()
general protection fault in udmabuf_create dri media 2 syz, C done 2 1833d 1830d 20/29 1739d b9770b0b6eac udmabuf: fix general protection fault in udmabuf_create
memory leak in new_inode ext4 3 syz, C 5 1785d 2093d 20/29 1739d a8867f4e3809 ext4: fix memory leak in ext4_mb_init_backend on error path.
linux-next boot error: WARNING: refcount bug in fib_create_info net -1 3 1838d 1838d 20/29 1739d 28814cd18cd7 ipv4: Fix refcount warning for new fib_info
WARNING: zero-size vmalloc in dvb_dmx_init media usb -1 syz, C 62 1861d 1924d 20/29 1739d c680ed46e418 media: dvb-usb: fix wrong definition
memory leak in ext4_multi_mount_protect ext4 3 syz, C 12 1882d 2059d 20/29 1739d 618f003199c6 ext4: fix memory leak in ext4_fill_super
WARNING in tracepoint_add_func trace bpf -1 syz, C done 20635 1854d 2238d 20/29 1739d 9913d5745bd7 tracepoint: Add tracepoint_probe_register_may_exist() for BPF tracing
UBSAN: shift-out-of-bounds in nft_hash_estimate netfilter -1 syz, C done 3 1927d 1927d 20/29 1739d a54754ec9891 netfilter: nftables: avoid overflows in nft_hash_buckets()
BUG: sleeping function called from invalid context in munlock_vma_pages_range mm 5 1 1860d 1856d 20/29 1739d 023e1a8dd502 mm/rmap: fix new bug: premature return from page_mlock_one()
KASAN: use-after-free Read in blk_mq_exit_sched usb block 19 syz, C done 9 1878d 1892d 20/29 1739d f0c1c4d2864e blk-mq: fix use-after-free in blk_mq_exit_sched
divide error in do_journal_end (2) erofs 2 syz, C inconclusive 2 1921d 1920d 20/29 1739d a149127be52f reiserfs: add check for invalid 1st journal block
BUG: MAX_LOCKDEP_ENTRIES too low! -1 syz, C done 179076 1924d 2615d 20/29 1739d 5dc33592e955 lockdep: Allow tuning tracing capacity constants.
BUG: corrupted list in kobject_add_internal (3) bluetooth 8 syz, C inconclusive 3 1774d 1879d 20/29 1739d 92fe24a7db75 Bluetooth: skip invalid hci_sync_conn_complete_evt
WARNING in nbd_dev_add block -1 syz, C inconclusive 131 1740d 1999d 20/29 1739d b1a811633f73 block: nbd: add sanity check for first_minor
possible deadlock in del_gendisk 4 syz, C done 158215 1802d 1949d 20/29 1739d 990e78116d38 block: loop: fix deadlock between open and remove
possible deadlock in br_ioctl_call net 4 syz, C unreliable 4161 1829d 1839d 20/29 1739d 893b19587534 net: bridge: fix ioctl locking
WARNING in __vmalloc_node_range media usb -1 syz, C 7 1925d 1926d 20/29 1739d c680ed46e418 media: dvb-usb: fix wrong definition
WARNING: ODEBUG bug in ext4_fill_super (3) ext4 -1 syz, C done 392 1741d 1979d 20/29 1739d 0ce160c5bdb6 ext4: fix timer use-after-free on failed mount
linux-next test error: WARNING in __nf_unregister_net_hook netfilter -1 21 1929d 1931d 20/29 1739d 43016d02cf6e netfilter: arptables: use pernet ops struct during unregister
BUG: sleeping function called from invalid context in _copy_to_iter net 5 syz, C done 60 1824d 1832d 20/29 1739d 876c14ad014d af_unix: fix holding spinlock in oob handling
possible deadlock in f_getown fs 4 syz, C done done 164 1817d 2146d 20/29 1739d f671a691e299 fcntl: fix potential deadlocks for &fown_struct.lock
UBSAN: array-index-out-of-bounds in taprio_change net 15 2 1822d 1830d 20/29 1739d efe487fce306 fix array-index-out-of-bounds in taprio_change
memory leak in rds_send_probe 3 syz, C done 27 2036d 2579d 20/29 1739d 49bfcbfd989a net: rds: fix memory leak in rds_recvmsg
general protection fault in blk_mq_run_hw_queues block 11 syz, C unreliable 305 1819d 1866d 20/29 1739d 16ad3db3b24c nbd: fix order of cleaning up the queue and freeing the tagset
INFO: task hung in fuse_launder_page fuse 1 syz, C unreliable 1 1831d 1827d 20/29 1739d 76224355db75 fuse: truncate pagecache on atomic_o_trunc
INFO: task hung in register_netdevice_notifier (2) can wireless 1 syz done 10555 1882d 2487d 20/29 1739d 8d0caedb7596 can: bcm/raw/isotp: use per module netdevice notifier
general protection fault in hwsim_set_edge_lqi wpan 2 syz, C done 4 1828d 1881d 20/29 1739d 0303b30375df ieee802154: hwsim: avoid possible crash in hwsim_del_edge_nl()
KCSAN: data-race in expire_timers / try_to_del_timer_sync mm 6 1029 1832d 2237d 20/29 1739d bb7262b29547 timers: Move clearing of base::timer_running under base:: Lock
WARNING: suspicious RCU usage in kernfs_find_and_get_ns block 4 1 1886d 1886d 20/29 1739d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
WARNING: still has locks held in io_sq_thread 4 syz, C done 8689 1951d 1964d 20/29 1739d 82734c5b1b24 io_uring: drop sqd lock before handling signals for SQPOLL
KASAN: use-after-free Write in nft_ct_tmpl_put_pcpu netfilter 22 syz, C done 3 1833d 1833d 20/29 1739d e3245a7b7b34 netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with mutex
memory leak in tcindex_set_parms net 3 syz, C 94 1898d 2383d 20/29 1739d f5051bcece50 net: sched: fix memory leak in tcindex_partial_destroy_work
general protection fault in sock_from_file net io-uring 2 syz, C inconclusive 78 1803d 1810d 20/29 1739d c6d3d9cbd659 io_uring: fix queueing half-created requests
memory leak in h4_recv_buf 3 syz, C done 21 1848d 2608d 20/29 1739d bb2853a6a421 tty: Fix data race between tiocsti() and flush_to_ldisc()
KCSAN: data-race in __skb_try_recv_datagram / sock_setsockopt net 6 1 1873d 1873d 20/29 1739d 0dbffbb5335a net: annotate data race around sk_ll_usec
WARNING in sta_info_alloc -1 syz, C done done 145 1885d 2138d 20/29 1739d 0ee4d55534f8 mac80211: remove warning in ieee80211_get_sband()
possible deadlock in snd_hrtimer_callback fs 4 syz, C done 571 1740d 1847d 20/29 1739d f671a691e299 fcntl: fix potential deadlocks for &fown_struct.lock
general protection fault in gfn_to_rmap (2) kvm-x86 2 syz, C done 1 1894d 1893d 20/29 1739d 78fcb2c91adf KVM: x86: Immediately reset the MMU context when the SMM flag is cleared
UBSAN: shift-out-of-bounds in profile_init kernel -1 syz, C unreliable 23 1807d 1857d 20/29 1739d 2d186afd04d6 profiling: fix shift-out-of-bounds bugs
KASAN: use-after-free Read in hci_send_acl bluetooth 19 syz, C done 2 1992d 2203d 20/29 1739d 5c4c8c954409 Bluetooth: verify AMP hci_chan before amp_destroy
WARNING: ODEBUG bug in cancel_delayed_work -1 syz, C done 3384 1755d 2205d 20/29 1739d 3a9d54b1947e Bluetooth: Set CONF_NOT_COMPLETE as l2cap_chan default
KFENCE: use-after-free in kmem_cache_destroy f2fs -1 1 1931d 1929d 20/29 1739d cad83c968c2e f2fs: fix to avoid racing on fsync_entry_slab by multi filesystem instances
bpf build error (3) kernel -1 15 1795d 1807d 20/29 1739d ea7b4244b365 x86/setup: Explicitly include acpi.h
memory leak in usb_urb_init media usb 3 syz, C 1 2051d 2047d 20/29 1739d b7cd0da982e3 media: dvb-usb: fix memory leak in dvb_usb_adapter_init
general protection fault in crypto_destroy_tfm crypto 2 syz unreliable 57 1953d 1994d 20/29 1739d 83681f2bebb3 crypto: api - check for ERR pointers in crypto_destroy_tfm()
possible deadlock in console_lock_spinning_enable 4 syz, C done 1693 1739d 2612d 20/29 1739d c0070e1e6027 ttyprintk: Add TTY hangup callback.
memory leak in ip_vs_add_service lvs 3 syz, C 1 1912d 1908d 20/29 1739d 56e4ee82e850 ipvs: ignore IP_VS_SVC_F_HASHED flag when adding service
possible deadlock in io_sq_thread_finish fs 4 syz, C unreliable done 4 1984d 1986d 20/29 1739d f4e61f0c9add x86/kvm: Fix broken irq restoration in kvm_wait
BUG: unable to handle kernel NULL pointer dereference in fbcon_cursor fbdev 10 syz, C done 21 1965d 2097d 20/29 1739d 01faae5193d6 drivers: video: fbcon: fix NULL dereference in fbcon_cursor()
memory leak in nr_create hams 3 syz, C 250 1850d 2636d 20/29 1739d 517a16b1a88b netrom: Decrease sock refcount when sock timers expire
general protection fault in ieee802154_llsec_parse_dev_addr wpan 2 syz, C inconclusive 80 1866d 1996d 20/29 1739d 88c17855ac42 net: ieee802154: forbid monitor for set llsec params
WARNING in smk_set_cipso (2) lsm -1 syz, C inconclusive 24 1872d 1950d 20/29 1739d 49ec114a6e62 smackfs: restrict bytes count in smk_set_cipso()
memory leak in atusb_probe usb wpan 3 syz, C 71 1955d 2100d 20/29 1739d 6b9fbe169551 drivers: net: fix memory leak in atusb_probe
WARNING: ODEBUG bug in net_dm_cmd_trace net -1 syz unreliable 2 1989d 1985d 20/29 1739d 9398e9c0b1d4 drop_monitor: Perform cleanup upon probe registration failure
WARNING: suspicious RCU usage in __alloc_file fs 4 1 1926d 1926d 20/29 1739d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
general protection fault in nft_set_elem_expr_alloc netfilter 2 syz, C done 3 1902d 1899d 20/29 1739d ad9f151e560b netfilter: nf_tables: initialize set before expression setup
net-next boot error: WARNING: refcount bug in fib_create_info net -1 39 1838d 1837d 20/29 1739d 28814cd18cd7 ipv4: Fix refcount warning for new fib_info
general protection fault in do_blk_trace_setup block trace 2 syz, C done 25 1814d 1816d 20/29 1739d 1d1cf156dc17 sg: pass the device name to blk_trace_setup
UBSAN: shift-out-of-bounds in gred_enqueue net -1 1 1976d 1976d 20/29 1739d e323d865b361 net: sched: validate stab values
WARNING in xfrm_alloc_compat (2) net -1 syz, C done 47 1954d 1964d 20/29 1739d ef19e111337f xfrm/compat: Cleanup WARN()s that can be user-triggered
possible deadlock in bd_register_pending_holders block 4 3 1745d 1799d 20/29 1739d dfbb3409b27f block: genhd: don't call blkdev_show() with major_names_lock held
KASAN: use-after-free Write in sctp_auth_shkey_hold sctp 22 syz, C done 4 1851d 1859d 20/29 1739d 58acd1009226 sctp: update active_key for asoc when old key is being replaced
KMSAN: uninit-value in tipc_nl_node_set_key tipc 7 1 1979d 1979d 20/29 1739d 0217ed2848e8 tipc: better validate user input in tipc_nl_retrieve_key()
UBSAN: shift-out-of-bounds in load_balance kernel -1 syz 2167 1924d 2028d 20/29 1739d 39a2a6eb5c9b sched/fair: Fix shift-out-of-bounds in load_balance()
WARNING in io_rsrc_node_switch io-uring fs -1 syz, C done 174 1924d 1933d 20/29 1739d 47b228ce6f66 io_uring: fix unchecked error in switch_start()
KASAN: use-after-free Read in firmware_fallback_sysfs kernel 19 syz, C error 16514 1821d 2020d 20/29 1739d 75d95e2e39b2 firmware_loader: fix use-after-free in firmware_fallback_sysfs
WARNING in tcindex_alloc_perfect_hash mm -1 syz, C inconclusive 349 1868d 2043d 20/29 1739d 3f2db250099f net: sched: fix warning in tcindex_alloc_perfect_hash
KMSAN: uninit-value in caif_seqpkt_sendmsg net 7 syz, C 2365 1785d 2202d 20/29 1739d 991e634360f2 net: fix uninit-value in caif_seqpkt_sendmsg
KASAN: invalid-free in ieee80211_ibss_leave wireless 24 syz, C inconclusive 1 1983d 2011d 20/29 1739d 3bd801b14e0c mac80211: fix double free in ibss_leave
WARNING in io_wq_submit_work (2) io-uring fs -1 syz, C done done 52 1798d 1801d 20/29 1739d 713b9825a4c4 io-wq: fix cancellation on create-worker failure
memory leak in prepare_creds (2) lsm 3 syz, C 2 1877d 1972d 20/29 1739d f60a85cad677 bpf: Fix umd memory leak in copy_process()
WARNING: suspicious RCU usage in __clear_user netfilter 4 1 1907d 1907d 20/29 1739d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
KASAN: null-ptr-deref Write in io_uring_cancel_sqpoll fs 12 170 1740d 1995d 20/29 1739d 6d042ffb598e io_uring: Check current->io_uring in io_uring_cancel_sqpoll
WARNING in cfg80211_inform_single_bss_frame_data wireless -1 syz, C done 1 1928d 2020d 20/29 1739d e298aa358f0c mac80211: fix skb length check in ieee80211_scan_rx()
memory leak in mrp_request_join net 3 syz, C 215 1879d 2397d 20/29 1739d 996af62167d0 net/802/mrp: fix memleak in mrp_request_join()
INFO: task hung in unregister_netdevice_notifier (3) can 1 syz error error 184 2551d 2735d 20/29 1739d 8d0caedb7596 can: bcm/raw/isotp: use per module netdevice notifier
KASAN: slab-out-of-bounds Write in decode_data hams 21 syz, C done error 7 2289d 2444d 20/29 1739d 19d1532a1876 net: 6pack: fix slab-out-of-bounds in decode_data
net-next boot error: KASAN: slab-out-of-bounds Read in page_to_skb net virt -1 15 1942d 1945d 20/29 1739d af39c8f72301 virtio-net: fix use-after-free in page_to_skb()
general protection fault in bond_ipsec_add_sa (2) net 2 1 1866d 1866d 20/29 1739d 105cd17a8660 bonding: fix null dereference in bond_ipsec_add_sa()
memory leak in tcp_cdg_init net 3 syz 6 1903d 2043d 20/29 1739d be5d1b61a2ad tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized
WARNING: suspicious RCU usage in get_signal kernel 4 1 1930d 1926d 20/29 1739d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
KASAN: use-after-free Read in drm_getunique dri 19 syz inconclusive 2 1900d 1899d 20/29 1739d b436acd1cf7f drm: Fix use-after-free read in drm_getunique()
WARNING in hsr_forward_skb -1 syz, C done done 1310 1953d 2781d 20/29 1739d 9d6803921a16 net: hsr: Reset MAC header for Tx path
WARNING: refcount bug in sk_psock_get net 13 syz, C done 8 1926d 1953d 20/29 1739d 8621436671f3 smc: disallow TCP_ULP in smc_setsockopt()
WARNING in close_fs_devices (3) btrfs -1 syz, C done 98 1841d 2085d 20/29 1739d b2a616676839 btrfs: fix rw device counting in __btrfs_free_extra_devids
KASAN: use-after-free Read in check_all_holdout_tasks_trace mm 19 syz done 4 1841d 1911d 20/29 1739d 1d10bf55d85d rcu-tasks: Don't delete holdouts within trc_inspect_reader()
kernel BUG in assertfail btrfs -1 1 1907d 1901d 20/29 1739d aefd7f706556 btrfs: promote debugging asserts to full-fledged checks in validate_super
net-next boot error: KASAN: use-after-free Read in page_to_skb net virt -1 11 1942d 1945d 20/29 1739d af39c8f72301 virtio-net: fix use-after-free in page_to_skb()
BUG: unable to handle kernel paging request in nl802154_del_llsec_key wpan 8 syz, C inconclusive 235 1952d 2003d 20/29 1739d 37feaaf5ceb2 net: ieee802154: fix nl802154 del llsec key
WARNING: refcount bug in ipip6_tunnel_uninit net 13 syz, C done 199 1961d 1966d 20/29 1739d 6289a98f0817 sit: proper dev_{hold|put} in ndo_[un]init methods
WARNING: suspicious RCU usage in tomoyo_update_domain tomoyo 4 1 1880d 1880d 20/29 1739d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
WARNING: refcount bug in register_netdevice net 13 syz, C unreliable 97 1960d 1966d 20/29 1739d 7f700334be9a ip6_gre: proper dev_{hold|put} in ndo_[un]init methods
possible deadlock in sctp_addr_wq_timeout_handler sctp 4 syz, C done 8 1931d 1932d 20/29 1739d 01bfe5e8e428 Revert "net/sctp: fix race condition in sctp_destroy_sock"
INFO: task hung in hci_req_sync bluetooth 1 syz, C inconclusive 1 1832d 1828d 20/29 1739d f41a4b2b5eb7 Bluetooth: add timeout sanity check to hci_inquiry
WARNING: refcount bug in ip6erspan_tunnel_uninit net 13 syz, C error 11 1963d 1966d 20/29 1739d 7f700334be9a ip6_gre: proper dev_{hold|put} in ndo_[un]init methods
UBSAN: shift-out-of-bounds in xfrm_set_default net -1 syz, C unreliable 79 1834d 1844d 20/29 1739d 5d8dbb7fb82b net: xfrm: fix shift-out-of-bounce
possible deadlock in cfg80211_netdev_notifier_call (2) wireless 4 2 1911d 1922d 20/29 1739d d5befb224edb mac80211: fix deadlock in AP/VLAN handling
WARNING in fuse_get_tree fuse -1 syz, C unreliable 22 1834d 1841d 20/29 1739d 5d5b74aa9c76 fuse: allow sharing existing sb
INFO: task hung in hub_port_init 1 syz, C done 15888 1739d 2138d 20/29 1739d 258c81b341c8 usbip: give back URBs for unsent unlink requests during cleanup
general protection fault in wb_timer_fn block exfat 2 syz, C done 60 1816d 1826d 20/29 1739d d152c682f03c block: add an explicit ->disk backpointer to the request_queue
memory leak in con_do_clear_unimap serial 3 syz, C 13 1940d 1999d 20/29 1739d 211b4d42b70f tty: fix memory leak in vc_deallocate
KMSAN: kernel-infoleak in _copy_to_iter (5) net 9 syz, C 23883 1848d 2284d 20/29 1739d 08c27f3322fe batman-adv: initialize "struct batadv_tvlv_tt_vlan_data"->reserved field
WARNING: locking bug in l2tp_xmit_skb net 4 1 1928d 1928d 20/29 1739d 69e16d01d1de net: fix a concurrency bug in l2tp_tunnel_register()
KMSAN: uninit-value in __dev_mc_add net 7 syz, C 213 2683d 2879d 20/29 1739d cca8ea3b05c9 net: tun: set tun->dev->addr_len during TUNSETLINK processing
KASAN: vmalloc-out-of-bounds Write in imageblit fbdev 21 syz, C 104 1753d 2046d 20/29 1739d 3b0c40612471 tty: Fix out-of-bound vmalloc access in imageblit
WARNING in init_timer_key wireless -1 syz, C done 2 1909d 2015d 20/29 1739d a64b6a25dd9f cfg80211: call cfg80211_leave_ocb when switching away from OCB
KASAN: stack-out-of-bounds Read in iov_iter_revert fs io-uring 17 syz, C error 14 1811d 1828d 20/29 1739d 89c2b3b74918 io_uring: reexpand under-reexpanded iters
WARNING in futex_requeue kernel -1 syz 4 1804d 1808d 20/29 1739d 4f07ec0d76f2 futex: Prevent inconsistent state and exit race
WARNING in internal_create_group fs -1 syz, C inconclusive 20 1803d 1857d 20/29 1739d b1a811633f73 block: nbd: add sanity check for first_minor
UBSAN: shift-out-of-bounds in vhci_hub_control (2) usb -1 syz, C unreliable 5 1960d 1969d 20/29 1739d 1cc5ed25bdad usbip: vhci_hcd fix shift out-of-bounds in vhci_hub_control()
WARNING in __static_key_slow_dec kernel -1 syz, C unreliable 19 1802d 1806d 20/29 1739d 6d5f1ef83868 bonding: Fix negative jump label count on nested bonding
memory leak in kcm_sendmsg net 3 syz, C 2 2234d 2374d 20/29 1739d c47cc304990a net: kcm: fix memory leak in kcm_sendmsg
kernel BUG in remove_inode_hugepages fs mm -1 syz, C unreliable 3 1823d 1823d 20/29 1739d c7b1850dfb41 hugetlb: don't pass page cache pages to restore_reserve_on_error
WARNING in io_wq_put fs io-uring -1 syz, C unreliable 3 1973d 1984d 20/29 1739d f5d2d23bf0d9 io-wq: fix race around pending work on teardown
memory leak in v4l2_ctrl_handler_init_class usb media 3 syz, C 12 1943d 1996d 20/29 1739d 9c39be40c015 media: drivers/media/usb: fix memory leak in zr364xx_probe
KMSAN: uninit-value in ax88179_get_mac_addr usb 7 syz, C 149 1857d 2121d 20/29 1739d bd78980be1a6 net: usb: ax88179_178a: initialize local variables before use
WARNING in io_uring_setup (2) fs io-uring -1 syz, C done 40 1924d 1933d 20/29 1739d 47b228ce6f66 io_uring: fix unchecked error in switch_start()
general protection fault in drm_atomic_set_crtc_for_connector dri 2 syz, C unreliable 586 2096d 2093d 20/29 1764d 0003b687ee6d drm: fix oops in drm_atomic_set_crtc_for_connector
UBSAN: shift-out-of-bounds in qdisc_get_rtab net -1 syz, C unreliable done 521 2032d 2076d 20/29 1886d e4bedf48aaa5 net_sched: reject silly cell_log in qdisc_get_rtab()
KASAN: out-of-bounds Read in kfence_guarded_free kasan mm 17 syz, C error 20 2049d 2060d 20/29 1890d 2b8305260fb3 kfence, kasan: make KFENCE compatible with KASAN
INFO: task can't die in d_alloc_parallel fs 1 2 2048d 2064d 20/29 1901d 0ce20dd84089 mm: add Kernel Electric-Fence infrastructure
KASAN: global-out-of-bounds Read in netlink_policy_dump_add_policy (2) kernel 17 syz, C done 2 2013d 2013d 20/29 1906d 33b347503f01 vdpa: Define vdpa mgmt device, ops and a netlink interface
KASAN: use-after-free Read in __cpuhp_state_remove_instance kernel 19 syz, C unreliable done 2726 1974d 1995d 20/29 1943d 470ec4ed8c91 io-wq: fix double put of 'wq' in error path
KASAN: use-after-free Read in idr_for_each (2) io-uring fs 19 syz, C error done 86 1977d 2139d 20/29 1943d 61cf93700fe6 io_uring: Convert personality_idr to XArray
KASAN: vmalloc-out-of-bounds Read in bpf_trace_run2 trace bpf 17 syz, C done done 5 1995d 2153d 20/29 1949d befe6d946551 tracepoint: Do not fail unregistering a probe due to memory failure
general protection fault in drm_client_buffer_vunmap usb dri 2 syz, C unreliable done 247 1982d 2083d 20/29 1949d 874a52f9b693 drm/fb-helper: only unmap if buffer not null
BUG: unable to handle kernel paging request in bpf_trace_run2 trace bpf 8 syz, C done done 10 1992d 2153d 20/29 1949d befe6d946551 tracepoint: Do not fail unregistering a probe due to memory failure
INFO: rcu detected stall in smp_call_function perf 1 syz, C 107 1952d 2207d 20/29 1949d c583bcb8f5ed rcu: Don't invoke try_invoke_on_locked_down_task() with irqs disabled 1b7af295541d sched/core: Allow try_invoke_on_locked_down_task() with irqs disabled
INFO: task hung in io_uring_cancel_task_requests fs io-uring 1 syz, C 305 1977d 2012d 20/29 1953d 34343786ecc5 io_uring: unpark SQPOLL thread for cancelation
general protection fault in usb_audio_probe sound usb 2 syz, C done 360 1983d 1985d 20/29 1953d 30dea07180de ALSA: usb-audio: fix NULL ptr dereference in usb_audio_probe
UBSAN: shift-out-of-bounds in erofs_fc_fill_super erofs -1 syz, C unreliable 11 2003d 2033d 20/29 1953d bde545295b71 erofs: fix shift-out-of-bounds of blkszbits
net-next build error (3) -1 7 2017d 2013d 20/29 1953d 9c97921a51a0 net: fix building errors on powerpc when CONFIG_RETPOLINE is not set
KASAN: use-after-free Read in tctx_task_work fs 19 2 1996d 1993d 20/29 1953d 2c32395d8111 io_uring: fix __tctx_task_work() ctx race
INFO: task hung in addrconf_verify_work (4) 1 syz, C done 132 2001d 2089d 20/29 1953d d349f9976868 net_sched: fix RTNL deadlock again caused by request_module()
possible deadlock in cfg80211_netdev_notifier_call wireless 4 syz done 13 1954d 2020d 20/29 1953d 40c575d1ec71 cfg80211: fix netdev registration deadlock
memory leak in qrtr_tun_open arm-msm net 3 syz, C 4 2044d 2088d 20/29 1953d fc0494ead639 net: qrtr: Fix memory leak in qrtr_tun_open
UBSAN: shift-out-of-bounds in mceusb_dev_printdata usb media -1 syz, C error 331 1999d 2067d 20/29 1953d 9dec0f48a75e media: mceusb: sanity check for prescaler value
KMSAN: uninit-value in bpf_iter_prog_supported bpf 7 4479 1953d 2014d 20/29 1953d 17d8beda277a bpf: Fix an unitialized value in bpf_iter
KASAN: invalid-free in io_req_caches_free fs 24 5 1996d 1999d 20/29 1953d 8e5c66c485a8 io_uring: clear request count when freeing caches
memory leak in v2_read_file_info ext4 3 syz, C 71 2002d 2061d 20/29 1953d a4db1072e1a3 quota: Fix memory leak when handling corrupted quota file
KASAN: null-ptr-deref Read in tcf_idrinfo_destroy net 11 syz, C 115 1956d 2146d 20/29 1953d 396d7f23adf9 net: sched: fix police ext initialization
general protection fault in j1939_netdev_notify (2) can 2 syz, C done 19 2005d 2063d 20/29 1953d 4e096a18867a net: introduce CAN specific pointer in the struct net_device
INFO: task hung in tcf_action_init_1 net 1 syz, C done 30 2012d 2146d 20/29 1953d d349f9976868 net_sched: fix RTNL deadlock again caused by request_module()
general protection fault in kobject_cleanup gpio usb 2 syz, C unreliable 72 1983d 1996d 20/29 1953d a6112998ee45 gpio: fix NULL-deref-on-deregistration regression
KASAN: slab-out-of-bounds Read in skb_segment net 17 syz, C error 311 2031d 2035d 20/29 1953d 00b229f762b0 net: fix GSO for SG-enabled devices
upstream test error: INFO: trying to register non-static key in nsim_get_stats64 net -1 381 1984d 2026d 20/29 1953d 863a42b289c2 netdevsim: init u64 stats for 32bit hardware
UBSAN: shift-out-of-bounds in snto32 input usb -1 syz, C error 58 1997d 2070d 20/29 1953d a0312af1f94d HID: core: detect and skip invalid inputs to snto32()
UBSAN: shift-out-of-bounds in exfat_fill_super exfat -1 syz, C error 3 2010d 2027d 20/29 1953d 78c276f5495a exfat: fix shift-out-of-bounds in exfat_fill_super()
INFO: task hung in io_sq_thread_park fs io-uring 1 syz, C unreliable 263 1988d 1993d 20/29 1953d 3ebba796fa25 io_uring: ensure that SQPOLL thread is started for exit
KCSAN: data-race in tomoyo_domain_quota_is_ok / tomoyo_merge_path_acl (4) tomoyo 6 12 2009d 2076d 20/29 1953d 5797e861e402 tomoyo: ignore data race while checking quota
INFO: task hung in walk_component (2) fuse 1 31 1981d 1981d 20/29 1953d 775c5033a0d1 fuse: fix live lock in fuse_iget()
KCSAN: data-race in bpf_lru_pop_free / bpf_lru_push_free bpf 6 237 2001d 2188d 20/29 1953d 6df8fb83301d bpf_lru_list: Read double-checked variable once without lock
KASAN: use-after-free Read in ntfs_iget ntfs3 19 syz, C error error 1 2090d 2086d 20/29 1953d 4dfe6bd94959 ntfs: check for valid standard information attribute
general protection fault in kvm_hv_irq_routing_update kvm kvm-x86 2 syz, C done 33 1989d 1995d 20/29 1953d 919f4ebc5987 KVM: x86: hyper-v: Fix Hyper-V context null-ptr-deref
WARNING in memdup_user_nul lsm -1 syz, C inconclusive 2 2038d 2038d 20/29 1953d 7ef4c19d245f smackfs: restrict bytes count in smackfs write functions
memory leak in io_submit_sqes (2) fs io-uring 3 syz, C 1 1991d 1990d 20/29 1953d f01272541d2c io-wq: ensure all pending work is canceled on exit
INFO: task can't die in connmark_exit_net net 1 syz error 1 2075d 2071d 20/29 1953d d349f9976868 net_sched: fix RTNL deadlock again caused by request_module()
memory leak in dlfb_usb_probe usb fbdev 3 syz, C 3 2067d 2069d 20/29 1953d 5c0e4110f751 udlfb: Fix memory leak in dlfb_usb_probe
INFO: task can't die in iget5_locked fuse 1 7 1997d 2021d 20/29 1953d 775c5033a0d1 fuse: fix live lock in fuse_iget()
UBSAN: shift-out-of-bounds in std_validate media -1 syz, C unreliable 2 2033d 2033d 20/29 1953d 048c96e28674 media: v4l2-ctrls.c: fix shift-out-of-bounds in std_validate
memory leak in zr364xx_probe usb media 3 syz, C 6 2007d 2060d 20/29 1953d ea354b6ddd6f media: zr364xx: fix memory leaks in probe()
linux-next test error: possible deadlock in cfg80211_netdev_notifier_call wireless -1 6 2025d 2025d 20/29 1953d 38ec7c6b6bd6 virt_wifi: fix deadlock on RTNL
KASAN: use-after-free Read in usb_audio_disconnect sound usb 19 syz, C done 15 1983d 1984d 20/29 1953d c5aa956eaeb0 ALSA: usb-audio: fix use after free in usb_audio_disconnect
WARNING in pstore_kill_sb arm -1 1 2012d 2008d 20/29 1953d 9c7d83ae6ba6 pstore: Fix warning in pstore_kill_sb()
UBSAN: shift-out-of-bounds in chkSuper jfs -1 syz, C unreliable 28 2001d 2067d 20/29 1953d 3bef198f1b17 JFS: more checks for invalid superblock
KCSAN: data-race in __bpf_lru_list_rotate / bpf_lru_push_free (2) bpf 6 32 2007d 2076d 20/29 1953d 6df8fb83301d bpf_lru_list: Read double-checked variable once without lock
KASAN: vmalloc-out-of-bounds Read in bpf_trace_run3 bpf trace 17 syz, C done 6 2009d 2111d 20/29 1953d befe6d946551 tracepoint: Do not fail unregistering a probe due to memory failure
UBSAN: shift-out-of-bounds in mceusb_dev_recv media usb -1 syz, C 13 1999d 2064d 20/29 1953d 1b43bad31fb0 media: mceusb: Fix potential out-of-bounds shift
memory leak in video_usercopy media 3 syz, C 19 2001d 2064d 20/29 1953d fb18802a338b media: v4l: ioctl: Fix memory leak in video_usercopy
BUG: sleeping function called from invalid context in rxe_alloc_nl rdma 5 syz, C done 475 2019d 2033d 20/29 1953d c4369575b2bc RDMA/rxe: Fix bug in rxe_alloc()
WARNING in __alloc_skb arm-msm net -1 syz, C error 24 1984d 1996d 20/29 1953d 093b036aa94e net/qrtr: fix __netdev_alloc_skb call
WARNING in iov_iter_revert (2) serial -1 syz, C done 9 2004d 2005d 20/29 1953d 3342ff2698e9 tty: protect tty_write from odd low-level tty disciplines
WARNING in cfg80211_change_iface wireless -1 syz, C inconclusive 4 2019d 2024d 20/29 1953d bae173563cbf wext: call cfg80211_change_iface() with wiphy lock held
general protection fault in tomoyo_socket_sendmsg_permission usb 8 17 2010d 2100d 20/29 1953d 9380afd6df70 usbip: fix stub_dev usbip_sockfd_store() races leading to gpf 718ad9693e36 usbip: fix vhci_hcd attach_store() races leading to gpf 46613c9dfa96 usbip: fix vudc usbip_sockfd_store races leading to gpf
memory leak in edge_startup usb 3 syz, C 1 1996d 1992d 20/29 1953d cfdc67acc785 USB: serial: io_edgeport: fix memory leak in edge_startup
unexpected kernel reboot (3) input usb -1 syz, C error error 21132 1953d 2954d 20/29 1953d c8e2fe13d1d1 x86/perf: Use RET0 as default for guest_get_msrs to handle "no PMU" case
WARNING in qp_broker_alloc kernel -1 syz, C inconclusive 24 1998d 2034d 20/29 1953d 2fd10bcf0310 drivers/misc/vmw_vmci: restrict too big queue size in qp_host_alloc_queue
WARNING in sk_stream_kill_queues (5) net -1 syz, C done 4684 1953d 2083d 20/29 1953d 097b9146c0e2 net: fix up truesize of cloned skb in skb_prepare_for_shift()
BUG: unable to handle kernel paging request in bpf_trace_run3 bpf trace 8 syz, C done 40 2000d 2122d 20/29 1953d befe6d946551 tracepoint: Do not fail unregistering a probe due to memory failure
KASAN: null-ptr-deref Write in event_handler usb 12 syz, C done 2869 1992d 2139d 20/29 1953d 9380afd6df70 usbip: fix stub_dev usbip_sockfd_store() races leading to gpf 718ad9693e36 usbip: fix vhci_hcd attach_store() races leading to gpf 46613c9dfa96 usbip: fix vudc usbip_sockfd_store races leading to gpf
KASAN: use-after-free Read in nbd_genl_connect nbd 19 syz, C inconclusive 16 1984d 1999d 20/29 1953d c9a2f90f4d6b nbd: handle device refs for DESTROY_ON_DISCONNECT properly
WARNING in cfg80211_dev_rename wireless -1 syz, C inconclusive 22 2018d 2024d 20/29 1953d 0391a45c8007 nl80211: call cfg80211_dev_rename() under RTNL
general protection fault in gfs2_withdraw gfs2 8 syz, C done 81 2001d 2149d 20/29 1953d d5bf630f355d gfs2: bypass signal_our_withdraw if no journal
KASAN: null-ptr-deref Write in amp_read_loc_assoc_final_data bluetooth 12 syz, C done 185 2004d 2205d 20/29 1953d e8bd76ede155 Bluetooth: Fix null pointer dereference in amp_read_loc_assoc_final_data
possible deadlock in io_poll_double_wake (2) io-uring fs 4 syz, C error error 431 1953d 2145d 20/29 1953d 1c3b3e6527e5 io_uring: ignore double poll add on the same waitqueue head
WARNING in _cfg80211_unregister_wdev wireless -1 syz, C inconclusive 48 2018d 2024d 20/29 1953d 776a39b8196d cfg80211: call cfg80211_destroy_ifaces() with wiphy lock held
INFO: task can't die in io_sq_thread_finish ext4 1 syz 137 1964d 1996d 20/29 1953d eb85890b29e4 io_uring: ensure SQPOLL startup is triggered before error shutdown
WARNING in dst_release net -1 syz done 2 2005d 2004d 20/29 1953d e0be4931f3fe mptcp: reset last_snd on subflow close
BUG: sleeping function called from invalid context in mm_access mm 5 syz, C done 684 2037d 2040d 20/29 1953d 38e891849003 kbuild: lto: fix module versioning
KASAN: use-after-free Read in skb_segment net 19 syz, C error 55 2031d 2035d 20/29 1953d 00b229f762b0 net: fix GSO for SG-enabled devices
inconsistent lock state in io_dismantle_req fs io-uring 4 syz, C 2 2020d 2020d 20/29 1953d 9ae1f8dd372e io_uring: fix inconsistent lock state
BUG: unable to handle kernel paging request in __kvm_mmu_prepare_zap_page kvm-x86 8 syz error 2 2716d 2727d 20/29 1974d 47c42e6b4192 KVM: x86: fix handling of role.cr4_pae and rename it to 'gpte_size'
kernel BUG in memory_bm_free pm -1 72 2018d 2018d 20/29 1978d 91cb2c8b072e arm64: Do not pass tagged addresses to __is_lm_address()
KASAN: slab-out-of-bounds Read in squashfs_get_id squashfs 17 syz, C error done 77 2013d 2149d 20/29 1982d e812cbbbbbb1 squashfs: avoid out of bounds writes in decompressors
UBSAN: shift-out-of-bounds in tcf_police_init net -1 syz, C unreliable 8 2033d 2069d 20/29 1982d e4bedf48aaa5 net_sched: reject silly cell_log in qdisc_get_rtab()
UBSAN: shift-out-of-bounds in est_timer net -1 syz, C unreliable 73 1992d 2066d 20/29 1982d dd5e073381f2 net_sched: gen_estimator: support large ewma log
memory leak in xskq_create bpf net 3 syz, C 7 2049d 2070d 19/29 1984d 8bee68338408 xsk: Fix memory leak for failed bind
BUG: sleeping function called from invalid context in corrupted wireless 5 syz done 18 2080d 2104d 19/29 1984d 7bc40aedf24d mac80211: free sta in sta_info_insert_finish() on errors
WARNING in md_ioctl raid -1 syz, C done error 684 2067d 3029d 19/29 1984d c731b84b51bf md: fix a warning caused by a race between concurrent md_ioctl()s
BUG: unable to handle kernel paging request in htab_map_alloc (2) bpf 8 syz, C unreliable 8 2070d 2079d 19/29 1984d e1868b9e36d0 bpf: Avoid overflows involving hash elem_size
general protection fault in io_sqe_files_unregister fs 2 2 2045d 2043d 19/29 1984d 3e2224c5867f io_uring: Fix return value from alloc_fixed_file_ref_node
UBSAN: shift-out-of-bounds in __detect_linklayer net -1 syz, C unreliable done 31 2032d 2038d 19/29 1984d e4bedf48aaa5 net_sched: reject silly cell_log in qdisc_get_rtab()
BUG: receive list entry not found for dev vxcan1, id 003, mask C00007FF can -1 syz, C unreliable 2 2088d 2088d 19/29 1984d d73ff9b7c4ea can: af_can: can_rx_unregister(): remove WARN() statement from list operation sanity check
UBSAN: shift-out-of-bounds in tcindex_set_parms net -1 syz, C unreliable done 45 2032d 2067d 19/29 1984d bcd0cf19ef82 net_sched: avoid shift-out-of-bounds in tcindex_set_parms()
kernel BUG at mm/page-writeback.c:LINE! fs mm -1 1 2053d 2049d 19/29 1984d c2407cf7d22d mm: make wait_on_page_writeback() wait for multiple pending writebacks
WARNING in io_uring_flush fs io-uring -1 syz, C unreliable 10 2028d 2037d 19/29 1984d 4325cb498cb7 io_uring: fix uring_flush in exit_files() warning
general protection fault in rose_send_frame 2 syz, C done done 664 2093d 2773d 19/29 1984d 3b3fd068c56e rose: Fix Null pointer dereference in rose_send_frame()
general protection fault in taprio_dequeue_soft net 2 syz, C done 2 2068d 2068d 19/29 1984d 44d4775ca518 net/sched: sch_taprio: reset child qdiscs before freeing them
BUG: unable to handle kernel paging request in bpf_lru_populate bpf 8 syz, C done 12 2070d 2076d 19/29 1984d e1868b9e36d0 bpf: Avoid overflows involving hash elem_size
bpf test error: BUG: sleeping function called from invalid context in sta_info_move_state wireless -1 6 2093d 2099d 19/29 1984d 7bc40aedf24d mac80211: free sta in sta_info_insert_finish() on errors
KASAN: slab-out-of-bounds Read in hci_le_meta_evt bluetooth 17 syz, C error error 45 2081d 2202d 19/29 1984d f7e0e8b2f1b0 Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt()
KASAN: null-ptr-deref Write in rhashtable_free_and_destroy wireless 12 11 2003d 2080d 19/29 1984d 905b2032fa42 mac80211: mesh: fix mesh_pathtbl_init() error path
KASAN: use-after-free Read in disk_part_iter_next block 19 syz, C unreliable 243 1984d 2072d 19/29 1984d aebf5db91705 block: fix use-after-free in disk_part_iter_next
WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected (2) -1 syz, C done 640 2048d 2165d 19/29 1984d 8d1ddb5e7937 fcntl: Fix potential deadlock in send_sig{io, urg}()
kernel BUG at net/core/dev.c:NUM! net -1 syz, C done 35 2038d 2039d 19/29 1984d 47e4bb147a96 net: sit: unregister_netdevice on newlink's error path
KASAN: use-after-free Read in search_by_entry_key fs 19 syz, C done 3 2132d 2136d 19/29 1984d d24396c5290b reiserfs: add check for an invalid ih_entry_count
KCSAN: data-race in snd_rawmidi_transmit / snd_rawmidi_write sound 6 232 2017d 2193d 19/29 1984d 88a06d6fd6b3 ALSA: rawmidi: Access runtime->avail always in spinlock
UBSAN: shift-out-of-bounds in f2fs_fill_super f2fs -1 syz, C 4 2075d 2074d 19/29 1984d e584bbe82122 f2fs: fix shift-out-of-bounds in sanity_check_raw_super()
KASAN: global-out-of-bounds Read in smc_nl_get_sys_info smc 17 syz, C error 27 2036d 2063d 19/29 1984d 25fe2c9c4cd2 smc: fix out of bound access in smc_nl_get_sys_info()
KASAN: use-after-free Read in btrfs_scan_one_device btrfs 19 syz, C error 70 2088d 2154d 19/29 1984d 0697d9a61099 btrfs: don't access possibly stale fs_info data for printing duplicate device
memory leak in prepare_creds lsm 3 syz, C 10 2003d 2178d 19/29 1984d f26c08b444df io_uring: fix file leak on error path of io ctx creation
WARNING in percpu_ref_kill_and_confirm (2) fs -1 syz, C done 71 2059d 2067d 19/29 1984d 9faadcc8abe4 io_uring: fix double io_uring free
WARNING: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anywa bfs -1 syz, C unreliable 1 2080d 2076d 19/29 1984d dc889b8d4a81 bfs: don't use WARNING: string when it's just info.
general protection fault in ieee80211_subif_start_xmit wireless 2 syz, C unreliable 29 2023d 2090d 19/29 1984d 054c9939b480 mac80211: pause TX while changing interface type
WARNING in rds_rdma_extra_size mm -1 syz, C done 165 2018d 2043d 19/29 1984d a11148e6fcce net/rds: restrict iovecs length for RDS_CMSG_RDMA_ARGS
KASAN: use-after-free Read in decode_session6 net 19 syz, C done 152 2030d 2237d 19/29 1984d 0356010d825e sctp: bring inet(6)_skb_parm back to sctp_input_cb
WARNING: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway -1 2 2097d 2092d 19/29 1984d dc889b8d4a81 bfs: don't use WARNING: string when it's just info.
divide error in __tcp_select_window net 2 syz, C done 1119 2087d 2092d 19/29 1984d fd8976790a6c mptcp: be careful on MPTCP-level ack.
WARNING: suspicious RCU usage in kernfs_iop_permission kernfs 4 syz, C done 1 2020d 2020d 19/29 1984d b854cc659dcb ovl: avoid deadlock on directory ioctl
KMSAN: uninit-value in INET_ECN_decapsulate net 7 3 2050d 2083d 19/29 1984d 4179b00c04d1 geneve: pull IP header before ECN decapsulation
WARNING in io_ring_ctx_wait_and_kill fs -1 syz, C done 9 2038d 2039d 19/29 1984d 06585c497b55 io_uring: do sqo disable on install_fd error
WARNING in mc1NUM_get_time rtc -1 13 2015d 2016d 19/29 1984d ebb22a059436 rtc: mc146818: Dont test for bit 0-5 in Register D
INFO: task hung in lock_sock_nested (4) mptcp 1 syz, C done 6 2035d 2082d 19/29 1984d 05e3ecea4a63 mptcp: avoid potential infinite loop in mptcp_recvmsg()
UBSAN: shift-out-of-bounds in choke_enqueue net -1 syz, C inconclusive 3853 1984d 2076d 19/29 1984d bd1248f1ddbc net: sched: prevent invalid Scell_log shift count
WARNING: suspicious RCU usage in get_wiphy_regdom wireless 4 syz, C done 5031 2035d 2067d 19/29 1984d 51d62f2f2c50 cfg80211: Save the regulatory domain with a lock
WARNING: suspicious RCU usage in tcp_disconnect net 4 syz, C done 25 2038d 2039d 19/29 1984d 13a9499e8333 mptcp: fix locking in mptcp_disconnect()
WARNING in spi_register_controller usb spi -1 syz, C 1848 2067d 2681d 19/29 1984d 9c60cc797cf7 media: msi2500: assign SPI bus number dynamically
KMSAN: uninit-value in __nla_validate_parse (2) net 7 syz, C 2 2045d 2041d 19/29 1984d c96adff95619 cls_flower: call nla_ok() before nla_next()
INFO: task hung in __io_uring_files_cancel io-uring fs 1 syz, C done 30 2025d 2092d 19/29 1984d bee749b187ac io_uring: fix files cancellation
general protection fault in xsk_recvmsg bpf net 2 syz, C done unreliable 1800 2068d 2038d 19/29 1984d 3546b9b8eced xsk: Validate socket state in xsk_recvmsg, prior touching socket members
KASAN: use-after-free Write in rtl_fw_do_work (2) wireless 22 4 2068d 2074d 19/29 1984d 4dfde294b979 rtlwifi: rise completion at the last step of firmware callback
UBSAN: shift-out-of-bounds in sfq_init net -1 syz, C unreliable 8 2047d 2061d 19/29 1984d bd1248f1ddbc net: sched: prevent invalid Scell_log shift count
memory leak in h5_rx_pkt_start bluetooth 3 syz, C 5 2181d 2524d 19/29 1984d 70f259a3f427 Bluetooth: hci_h5: close serdev device and free hu in h5_close 855af2d74c87 Bluetooth: hci_h5: fix memory leak in h5_close
kernel BUG at lib/string.c:LINE! (6) netfilter -1 syz, C done 2 2065d 2061d 19/29 1984d 6cb56218ad9e netfilter: xt_RATEEST: reject non-null terminated string from userspace
kernel BUG at include/linux/highmem.h:LINE! mm -1 syz, C error 32 2087d 2092d 19/29 1984d 0060ef3b4e6d mm: support THPs in zero_user_segments
UBSAN: shift-out-of-bounds in dummy_hub_control usb -1 syz, C done 5 2060d 2058d 19/29 1984d c318840fb2a4 USB: Gadget: dummy-hcd: Fix shift-out-of-bounds bug
KASAN: use-after-free Read in reiserfs_fill_super fs 19 syz, C error done 2 2077d 2076d 19/29 1984d d24396c5290b reiserfs: add check for an invalid ih_entry_count
KASAN: vmalloc-out-of-bounds Write in pcpu_freelist_populate bpf 21 6 2072d 2076d 19/29 1984d e1868b9e36d0 bpf: Avoid overflows involving hash elem_size
BUG: unable to handle kernel NULL pointer dereference in kcsan_setup_watchpoint kasan 10 128 2114d 2122d 19/29 1984d 55a2346c7ac4 kcsan: Never set up watchpoints on NULL pointers
BUG: unable to handle kernel paging request in percpu_ref_exit fs 8 syz, C done 3 2045d 2043d 19/29 1984d 3e2224c5867f io_uring: Fix return value from alloc_fixed_file_ref_node
KMSAN: uninit-value in gre_parse_header net 7 syz, C 9283 2011d 2609d 19/29 1984d 085c7c4e1c0e erspan: fix version 1 check in gre_parse_header()
UBSAN: shift-out-of-bounds in red_adaptative_timer net -1 syz, C unreliable 260 1984d 2076d 19/29 1984d bd1248f1ddbc net: sched: prevent invalid Scell_log shift count
KASAN: slab-out-of-bounds Write in xfrm_attr_cpy32 net 21 syz, C done 106 2073d 2121d 19/29 1984d d1949d045fd6 xfrm/compat: memset(0) 64-bit padding at right place
WARNING in squashfs_read_table mm squashfs -1 syz, C inconclusive 50 2014d 2043d 19/29 1984d 506220d2ba21 squashfs: add more sanity checks in xattr id lookup
BUG: receive list entry not found for dev vcan0, id 002, mask C00007FF can -1 syz, C unreliable 5 2087d 2088d 19/29 1984d d73ff9b7c4ea can: af_can: can_rx_unregister(): remove WARN() statement from list operation sanity check
UBSAN: shift-out-of-bounds in parse_audio_format_i usb sound -1 syz, C error 19 2069d 2074d 19/29 1984d 175b8d89fe29 ALSA: pcm: oss: Fix potential out-of-bounds shift 43d5ca88dfcd ALSA: usb-audio: Fix potential out-of-bounds shift
INFO: task can't die in io_sq_thread_stop fs 1 1 2102d 2098d 19/29 1984d 65b2b213484a io_uring: check kthread stopped flag when sq thread is unparked
UBSAN: array-index-out-of-bounds in dquot_resume ext4 15 syz, C done 1 2078d 2076d 19/29 1984d e51d68e76d60 fs: quota: fix array-index-out-of-bounds bug by passing correct argument to vfs_cleanup_quota_inode()
WARNING: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway bfs -1 syz, C done 11 2078d 2146d 19/29 1984d dc889b8d4a81 bfs: don't use WARNING: string when it's just info.
KASAN: use-after-free Read in htab_map_alloc bpf 19 syz, C done 38 2111d 2114d 19/29 1984d 8aaeed81fcb9 bpf: Fix error path in htab_map_alloc()
general protection fault in io_disable_sqo_submit fs io-uring 2 syz, C done 124 2035d 2039d 19/29 1984d b4411616c26f io_uring: fix null-deref in io_disable_sqo_submit
BUG: unable to handle kernel paging request in htab_free_elems bpf 8 1 2077d 2077d 19/29 1984d e1868b9e36d0 bpf: Avoid overflows involving hash elem_size
KASAN: null-ptr-deref Write in bdi_put 12 syz, C done done 601 2040d 2074d 19/29 1984d 2d2f6f1b4799 block: pre-initialize struct block_device in bdev_alloc_inode
general protection fault in rose_transmit_clear_request kernel 2 syz, C done 5 2112d 2578d 19/29 1984d 3b3fd068c56e rose: Fix Null pointer dereference in rose_send_frame()
kernel BUG at net/core/skbuff.c:LINE! (3) -1 syz, C done 4399 1999d 3116d 19/29 1984d afbc293add64 af_key: relax availability checks for skb size calculation
UBSAN: shift-out-of-bounds in __red_change net -1 syz, C unreliable 24 1987d 2075d 19/29 1984d bd1248f1ddbc net: sched: prevent invalid Scell_log shift count
KASAN: vmalloc-out-of-bounds Write in htab_map_alloc bpf 21 6 2070d 2079d 19/29 1984d e1868b9e36d0 bpf: Avoid overflows involving hash elem_size
KASAN: use-after-free Read in rxrpc_get_skb afs net 19 1 2031d 2027d 19/29 1984d 7b5eab57cac4 rxrpc: Fix clearance of Tx/Rx ring when releasing a call
WARNING in io_uring_cancel_task_requests io-uring fs -1 syz done 69 2020d 2024d 19/29 1984d 70b2c60d3797 io_uring: fix sqo ownership false positive warning
upstream test error: BUG: sleeping function called from invalid context in sta_info_move_state wireless -1 53 2094d 2103d 19/29 1984d 7bc40aedf24d mac80211: free sta in sta_info_insert_finish() on errors
kernel BUG at fs/notify/dnotify/dnotify.c:LINE! (2) fuse -1 syz, C inconclusive 2 2085d 2090d 19/29 1984d 5d069dbe8aaf fuse: fix bad inode
BUG: receive list entry not found for dev vcan0, id 001, mask C00007FF can -1 syz, C unreliable 5 2091d 2090d 19/29 1984d d73ff9b7c4ea can: af_can: can_rx_unregister(): remove WARN() statement from list operation sanity check
inconsistent lock state in io_file_data_ref_zero fs 4 syz, C done 7152 2066d 2090d 19/29 1984d ac0648a56c1f io_uring: use bottom half safe lock for fixed file data
unregister_netdevice: waiting for DEV to become free (4) 2 syz, C done 50394 1984d 2186d 19/29 1984d 5399d52233c4 rxrpc: Fix deadlock around release of dst cached on udp tunnel
WARNING in bpf_prog_test_run_raw_tp mm -1 syz, C done 36 2032d 2043d 19/29 1984d 7ac6ad051150 bpf: Reject too big ctx_size_in for raw_tp test run
UBSAN: shift-out-of-bounds in gred_change net -1 syz, C unreliable 5 1997d 2052d 19/29 1984d bd1248f1ddbc net: sched: prevent invalid Scell_log shift count
BUG: corrupted list in io_file_get fs io-uring 8 syz, C done 3 2024d 2024d 19/29 1984d f609cbb8911e io_uring: fix list corruption for splice file_get
linux-next test error: BUG: sleeping function called from invalid context in sta_info_move_state wireless -1 3 2104d 2108d 19/29 1984d 7bc40aedf24d mac80211: free sta in sta_info_insert_finish() on errors
WARNING in io_wq_submit_work fs -1 4 2031d 2035d 19/29 1984d ca70f00bed6c io_uring: fix cancellation taking mutex while TASK_UNINTERRUPTIBLE
UBSAN: shift-out-of-bounds in option_probe usb -1 syz, C error 22 2073d 2074d 19/29 1984d a251963f76fa USB: serial: option: add interface-number sanity check to flag handling
KMSAN: kernel-infoleak in vmci_host_unlocked_ioctl kernel 9 syz, C 22 2012d 2096d 19/29 1984d 31dcb6c30a26 misc: vmw_vmci: fix kernel info-leak by initializing dbells in vmci_ctx_get_chkpt_doorbells()
general protection fault in jffs2_parse_param jffs2 2 syz, C error done 1632 2065d 2153d 19/29 1984d a61df3c413e4 jffs2: Fix NULL pointer dereference in rp_size fs option parsing
KMSAN: uninit-value in number (2) can 7 syz, C 168 1984d 2363d 19/29 1984d c8c958a58fc6 can: af_can: prevent potential access of uninitialized member in can_rcv() 9aa9379d8f86 can: af_can: prevent potential access of uninitialized member in canfd_rcv()
net test error: BUG: sleeping function called from invalid context in sta_info_move_state wireless -1 4 2101d 2108d 19/29 1984d 7bc40aedf24d mac80211: free sta in sta_info_insert_finish() on errors
possible deadlock in send_sigio (2) fs 4 syz, C done done 40 2053d 2165d 19/29 1984d 8d1ddb5e7937 fcntl: Fix potential deadlock in send_sig{io, urg}()
kernel BUG at fs/reiserfs/prints.c:LINE! fs -1 syz, C done done 5 2074d 2153d 19/29 1984d d24396c5290b reiserfs: add check for an invalid ih_entry_count
KASAN: vmalloc-out-of-bounds Write in lzo_uncompress squashfs 21 syz, C done 8 2014d 2039d 19/29 1984d e812cbbbbbb1 squashfs: avoid out of bounds writes in decompressors
KASAN: slab-out-of-bounds Read in smc_nl_handle_smcr_dev smc 17 1 2066d 2062d 19/29 1984d 995433b795ce net/smc: fix access to parent of an ib device
BUG: unable to handle kernel paging request in pcpu_freelist_populate bpf 8 syz, C unreliable 42 2069d 2080d 19/29 1984d e1868b9e36d0 bpf: Avoid overflows involving hash elem_size
UBSAN: array-index-out-of-bounds in alg_bind crypto 15 syz, C error 700 2069d 2128d 19/29 1984d 92eb6c3060eb crypto: af_alg - avoid undefined behavior accessing salg_name
net-next test error: BUG: sleeping function called from invalid context in sta_info_move_state wireless -1 12 2094d 2103d 19/29 1984d 7bc40aedf24d mac80211: free sta in sta_info_insert_finish() on errors
general protection fault in gfs2_ri_update gfs2 2 1 2097d 2093d 19/29 1984d 778721510e84 gfs2: check for empty rgrp tree in gfs2_ri_update
memory leak in rxrpc_lookup_local net afs 3 syz, C 1415 2023d 2488d 19/29 1984d b8323f7288ab rxrpc: Fix memory leak in rxrpc_lookup_local
WARNING: suspicious RCU usage in wiphy_apply_custom_regulatory wireless 4 syz, C done 28 2067d 2063d 19/29 1984d 51d62f2f2c50 cfg80211: Save the regulatory domain with a lock
memory leak in generic_parse_monolithic fs 3 syz, C 11 2074d 2100d 19/29 1984d 4cb682964706 afs: Fix memory leak when mounting with multiple source parameters
WARNING in mptcp_reset_timer mptcp -1 syz, C unreliable 1307 2001d 2095d 19/29 1984d b680a214ec28 mptcp: update rtx timeout only if required.
KASAN: slab-out-of-bounds Write in record_print_text fs 21 syz, C done unreliable 17 2024d 2027d 19/29 1984d 08d60e599954 printk: fix string termination for record_print_text()
WARNING in xfrm_alloc_compat net -1 syz, C done 130 1996d 2118d 19/29 1984d dbd7ae5154d5 xfrm/compat: Translate by copying XFRMA_UNSPEC attribute
UBSAN: shift-out-of-bounds in red_enqueue net -1 syz, C unreliable 4906 1984d 2076d 19/29 1984d bd1248f1ddbc net: sched: prevent invalid Scell_log shift count
KMSAN: kernel-infoleak in move_addr_to_user (4) net 9 syz, C 59 1990d 2042d 19/29 1984d b42b3a2744b3 can: isotp: isotp_getname(): fix kernel information leak
general protection fault in ext4_commit_super ext4 2 syz, C done 4 2062d 2061d 19/29 1984d c92dc856848f ext4: defer saving error info from atomic context
UBSAN: array-index-out-of-bounds in arch_uprobe_analyze_insn trace 15 syz, C done 604 2077d 2154d 19/29 1984d 12cb908a11b2 x86/insn-eval: Use new for_each_insn_prefix() macro to loop over prefixes bytes 84da009f06e6 x86/sev-es: Use new for_each_insn_prefix() macro to loop over prefixes bytes 4e9a5ae8df5b x86/uprobes: Do not use prefixes.nbytes when looping over prefixes.bytes
BUG: unable to handle kernel NULL pointer dereference in call_rcu kernel 10 syz, C done 85 2054d 2057d 19/29 1984d 13384f6125ad kasan: fix null pointer dereference in kasan_record_aux_stack
KASAN: vmalloc-out-of-bounds Read in htab_free_elems bpf 17 syz, C unreliable 7 2076d 2078d 19/29 1984d e1868b9e36d0 bpf: Avoid overflows involving hash elem_size
BUG: receive list entry not found for dev vxcan1, id 002, mask C00007FF can -1 syz, C unreliable 3 2088d 2090d 19/29 1984d d73ff9b7c4ea can: af_can: can_rx_unregister(): remove WARN() statement from list operation sanity check
WARNING in rhashtable_free_and_destroy wireless -1 syz, C error 3 2080d 2172d 19/29 1984d 905b2032fa42 mac80211: mesh: fix mesh_pathtbl_init() error path
BUG: unable to handle kernel NULL pointer dereference in __lookup_slow fs 10 syz, C inconclusive done 3 2006d 2146d 19/29 1984d d24396c5290b reiserfs: add check for an invalid ih_entry_count
BUG: sleeping function called from invalid context in sta_info_move_state wireless 5 syz, C done 39248 2078d 2110d 19/29 1984d 7bc40aedf24d mac80211: free sta in sta_info_insert_finish() on errors
UBSAN: shift-out-of-bounds in strset_parse_request net -1 syz, C done 16 2047d 2070d 19/29 1984d efb796f5571f ethtool: fix string set id check
KASAN: slab-out-of-bounds Read in btrfs_scan_one_device btrfs 17 syz, C done done 1 2107d 2103d 19/29 1984d 0697d9a61099 btrfs: don't access possibly stale fs_info data for printing duplicate device
WARNING in qrtr_tun_write_iter mm -1 syz, C error 57 2011d 2042d 19/29 1984d 2a80c1581237 net/qrtr: restrict user-controlled length in qrtr_tun_write_iter()
memory leak in hub_event usb 3 syz, C 7 2004d 2093d 19/29 1984d e469d0b09a19 media: gspca: Fix memory leak in probe
KASAN: invalid-access Read in kmem_cache_destroy f2fs 17 2 2021d 2025d 19/29 1984d 757fed1d0898 Revert "mm/slub: fix a memory leak in sysfs_slab_add()"
possible deadlock in send_sigurg (2) fs 4 syz, C done 25 2070d 2121d 19/29 1984d 8d1ddb5e7937 fcntl: Fix potential deadlock in send_sig{io, urg}()
possible deadlock in ovl_dir_real_file overlayfs 4 1 2020d 2020d 19/29 1984d b854cc659dcb ovl: avoid deadlock on directory ioctl
WARNING in yurex_write/usb_submit_urb usb -1 syz, C error 78 2042d 2071d 19/29 1984d 372c93131998 USB: yurex: fix control-URB timeout handling
kernel BUG at fs/ext4/inode.c:LINE! ext4 -1 syz, C done 9 2053d 2178d 19/29 1984d 073861ed77b6 mm: fix VM_BUG_ON(PageTail) and BUG_ON(PageWriteback)
KCSAN: data-race in snd_rawmidi_poll / snd_rawmidi_proceed sound 6 378 2068d 2194d 19/29 1984d 88a06d6fd6b3 ALSA: rawmidi: Access runtime->avail always in spinlock
UBSAN: shift-out-of-bounds in cbq_dequeue net -1 syz, C unreliable 27 2032d 2076d 19/29 1984d e4bedf48aaa5 net_sched: reject silly cell_log in qdisc_get_rtab()
bpf-next test error: BUG: sleeping function called from invalid context in sta_info_move_state wireless -1 13 2079d 2099d 19/29 1984d 7bc40aedf24d mac80211: free sta in sta_info_insert_finish() on errors
KASAN: use-after-free Write in __sco_sock_close bluetooth 22 syz, C done done 10 2105d 2203d 19/29 1984d 6dfccd13db2f Bluetooth: Fix null pointer dereference in hci_event_packet()
BUG: unable to handle kernel paging request in dqput ext4 8 syz, C done 7 2078d 2148d 19/29 1984d 11c514a99bb9 quota: Sanity-check quota file headers on load
KMSAN: uninit-value in snd_seq_oss_synth_make_info (2) sound 7 1 2042d 2037d 19/29 1984d 217bfbb8b0bf ALSA: seq: oss: Fix missing error check in snd_seq_oss_synth_make_info()
UBSAN: shift-out-of-bounds in intel_pmu_refresh kvm-x86 -1 syz, C unreliable 1237 2024d 2074d 19/29 1984d e61ab2a320c3 KVM: x86/pmu: Fix UBSAN shift-out-of-bounds warning in intel_pmu_refresh()
UBSAN: shift-out-of-bounds in snd_usbmidi_get_ms_info sound usb -1 syz, C error 9 2041d 2061d 19/29 1984d c06ccf3ebb75 ALSA: usb-audio: Fix UBSAN warnings for MIDI jacks
UBSAN: shift-out-of-bounds in snd_pcm_oss_change_params_locked sound -1 syz, C unreliable 225 2060d 2074d 19/29 1984d 11cb881bf075 ALSA: pcm: oss: Fix a few more UBSAN fixes
UBSAN: shift-out-of-bounds in ext4_fill_super ext4 -1 syz, C unreliable 88 2059d 2074d 19/29 1984d c9200760da8a ext4: check for invalid block size early when mounting a file system
INFO: rcu detected stall in tipc_release tipc 1 syz, C done done 4 2094d 2230d 19/29 1984d cc00bcaa5899 netfilter: x_tables: Switch synchronization to RCU
UBSAN: shift-out-of-bounds in vhci_hub_control usb -1 syz, C unreliable 4 2024d 2060d 19/29 1984d 718bf42b119d usb: usbip: vhci_hcd: protect shift size
WARNING: filesystem loop5 was created with 512 inodes, the real maximum is 511, mounting anyway -1 2 2090d 2086d 19/29 1984d dc889b8d4a81 bfs: don't use WARNING: string when it's just info.
general protection fault in tower_disconnect usb 2 syz, C 53 2067d 2075d 19/29 1984d b175d273d4e4 USB: legotower: fix logical error in recent commit
kernel BUG at drivers/dma-buf/dma-buf.c:LINE! dri media -1 syz error done 11 2101d 2351d 19/29 1984d e722a295cf49 staging: ion: remove from the tree
WARNING: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway -1 4 2097d 2146d 19/29 1984d dc889b8d4a81 bfs: don't use WARNING: string when it's just info.
KCSAN: data-race in snd_seq_check_queue / snd_seq_control_queue (3) sound 6 111 2068d 2214d 19/29 1984d 4ebd47037027 ALSA: seq: Use bool for snd_seq_queue internal flags
KMSAN: uninit-value in x25_bind x25 7 2 2045d 2067d 19/29 1984d 6ee50c8e262a net/x25: prevent a couple of overflows
memory leak in wacom_probe input usb 3 syz, C 26 2047d 2101d 19/29 1984d 37309f47e2f5 HID: wacom: Fix memory leakage caused by kfifo_alloc
KASAN: use-after-free Read in service_outstanding_interrupt usb 19 syz, C 28 2043d 2198d 19/29 1984d 5e5ff0b4b6bc USB: cdc-wdm: Fix use after free in service_outstanding_interrupt().
general protection fault in call_commit_handler 2 syz, C done 428 2040d 2121d 19/29 1984d 5122565188ba wext: fix NULL-ptr-dereference with cfg80211's lack of commit()
BUG: unable to handle kernel paging request in smc_nl_handle_smcr_dev smc 8 syz, C 16 2053d 2075d 19/29 1984d 995433b795ce net/smc: fix access to parent of an ib device
KASAN: vmalloc-out-of-bounds Write in bpf_lru_populate bpf 21 syz, C unreliable 19 2070d 2080d 19/29 1984d e1868b9e36d0 bpf: Avoid overflows involving hash elem_size
memory leak in copy_process kernel 3 syz, C 23 2001d 2098d 19/29 1984d 450677dcb0cc mm/madvise: fix memory leak from process_madvise
UBSAN: shift-out-of-bounds in kvm_vcpu_after_set_cpuid kvm-x86 -1 2 2067d 2061d 19/29 1984d 2f80d502d627 KVM: x86: fix shift out of bounds reported by UBSAN
KASAN: stack-out-of-bounds Write in bitmap_from_arr32 net 21 syz, C done 2 2087d 2083d 19/29 1984d a770bf515613 ethtool: fix stack overflow in ethnl_parse_bitset()
WARNING: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway -1 3 2082d 2150d 19/29 1984d dc889b8d4a81 bfs: don't use WARNING: string when it's just info.
possible deadlock in hugetlb_cow mm 4 syz, C unreliable 341 2054d 2077d 19/29 1984d e7dd91c456a8 mm/hugetlb: fix deadlock in hugetlb_cow error path
KASAN: null-ptr-deref Write in start_transaction btrfs 12 syz, C done done 1 2076d 2103d 19/29 1984d ecfdc08b8cc6 btrfs: remove dio iomap DSYNC workaround
possible deadlock in proc_pid_syscall (2) fs 4 2 2168d 2177d 19/29 1984d f7cfd871ae0c exec: Transform exec_update_mutex into a rw_semaphore 78af4dc949da perf: Break deadlock involving exec_update_mutex
KASAN: slab-out-of-bounds Read in squashfs_export_iget squashfs 17 syz, C done error 3 2055d 2073d 19/29 1984d eabac19e40c0 squashfs: add more sanity checks in inode lookup
WARNING in io_disable_sqo_submit fs -1 syz, C done 9 2029d 2037d 19/29 1984d 6b393a1ff174 io_uring: fix false positive sqo warning on flush
KASAN: null-ptr-deref Read in filp_close fs 11 syz, C done 9 2064d 2066d 19/29 1984d fec8a6a69103 close_range: unshare all fds for CLOSE_RANGE_UNSHARE | CLOSE_RANGE_CLOEXEC 6abc20f8f879 selftests/core: add regression test for CLOSE_RANGE_UNSHARE | CLOSE_RANGE_CLOEXEC
possible deadlock in _destroy_id rdma 4 syz, C unreliable 28 2087d 2095d 19/29 1984d dd37d2f59eb8 RDMA/cma: Fix deadlock on &lock in rdma_cma_listen_on_all() error unwind
UBSAN: array-index-out-of-bounds in ieee80211_del_key (2) wireless 15 syz, C error 3 2074d 2083d 19/29 1984d 2d9463083ce9 nl80211: validate key indexes for cfg80211_registered_device
KASAN: use-after-free Read in rxrpc_send_data_packet net afs 19 1 2026d 2020d 19/29 1984d 7b5eab57cac4 rxrpc: Fix clearance of Tx/Rx ring when releasing a call
general protection fault in hci_event_packet bluetooth 2 syz, C done 25 2150d 2203d 19/29 1984d 6dfccd13db2f Bluetooth: Fix null pointer dereference in hci_event_packet()
KASAN: use-after-free Read in dump_schedule net 19 syz, C done done 7 2060d 2171d 19/29 1984d cc00bcaa5899 netfilter: x_tables: Switch synchronization to RCU
KASAN: invalid-free in p9_client_create (2) v9fs 24 syz, C done 3 2025d 2025d 19/29 1984d 757fed1d0898 Revert "mm/slub: fix a memory leak in sysfs_slab_add()"
possible deadlock in io_timeout_fn (2) fs 4 4 2045d 2052d 19/29 1984d 4aa84f2ffa81 io_uring: dont kill fasync under completion_lock
WARNING: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway -1 3 2097d 2092d 19/29 1984d dc889b8d4a81 bfs: don't use WARNING: string when it's just info.
general protection fault in wext_handle_ioctl wireless 2 syz, C inconclusive 9 2027d 2116d 19/29 1984d 5122565188ba wext: fix NULL-ptr-dereference with cfg80211's lack of commit()
INFO: rcu detected stall in sys_exit_group (6) mm 1 syz, C 4 2144d 2150d 19/29 1984d c583bcb8f5ed rcu: Don't invoke try_invoke_on_locked_down_task() with irqs disabled
WARNING in cm109_input_ev/usb_submit_urb input usb -1 syz, C unreliable 8 2072d 2093d 19/29 1984d 82e060904732 Input: cm109 - do not stomp on control URB
UBSAN: shift-out-of-bounds in hash_mac_create netfilter -1 syz, C unreliable 29 2050d 2070d 19/29 1984d 5c8193f568ae netfilter: ipset: fix shift-out-of-bounds in htable_bits()
upstream build error (11) -1 25 2040d 2116d 15/29 2040d f78f63da916e mm/process_vm_access: Add missing #include <linux/compat.h>
possible deadlock in process_measurement (2) integrity lsm 4 syz, C done done 56 2080d 2447d 15/29 2047d 15a8d68e9dc2 mm/hugetlb: a page from buddy is not on any list
INFO: rcu detected stall in sys_open (2) crypto 1 syz, C done done 42 2103d 2454d 15/29 2060d 1d0e850a49a5 afs: Fix cell removal
BUG: unable to handle kernel paging request in cfb_imageblit fbdev 8 syz, C done done 30 2095d 2138d 15/29 2060d a49145acfb97 fbmem: add margin check to fb_check_caps()
KASAN: use-after-free Read in eth_type_trans net 19 syz, C done error 3 2283d 2426d 15/29 2060d 96aa1b22bd6b tun: correct header offsets in napi frags mode
BUG: MAX_LOCKDEP_KEYS too low! net -1 syz, C done error 3496 2239d 2483d 15/29 2074d 1a33e10e4a95 net: partially revert dynamic lockdep key changes
BUG: MAX_LOCKDEP_CHAIN_HLOCKS too low! -1 syz, C done error 25236 2278d 2718d 15/29 2074d 1a33e10e4a95 net: partially revert dynamic lockdep key changes
INFO: rcu detected stall in __se_sys_mount afs 1 syz, C done done 2 2106d 2230d 15/29 2075d 1d0e850a49a5 afs: Fix cell removal
BUG: sleeping function called from invalid context in ext4_superblock_csum_set ext4 5 2 2106d 2112d 15/29 2078d d196e229a80c Revert "ext4: fix superblock checksum calculation race"
KASAN: null-ptr-deref Write in kthread_use_mm io-uring fs 12 syz, C done 2 2111d 2111d 15/29 2093d 4b70cf9dea4c io_uring: ensure consistent view of original task ->mm from SQPOLL
WARNING in close_fs_devices (2) btrfs -1 syz, C 23 2095d 2156d 15/29 2093d cf89af146b7e btrfs: dev-replace: fail mount if we don't have replace item with target device
memory leak in gadget_setup usb 3 syz, C 49 2104d 2121d 15/29 2093d 129aa9734559 usb: raw-gadget: fix memory leak in gadget_setup
memory leak in gadget_bind usb 3 syz, C 62 2104d 2121d 15/29 2093d 129aa9734559 usb: raw-gadget: fix memory leak in gadget_setup
general protection fault in io_uring_show_cred fs 2 syz, C done 4 2108d 2108d 15/29 2093d 6b47ab81c9a9 io_uring: use correct pointer for io_uring_show_cred()
KASAN: use-after-free Write in io_submit_sqes fs io-uring 22 syz, C error 2 2111d 2110d 15/29 2093d cb8a8ae31074 io_uring: drop req/tctx io_identity separately
KASAN: use-after-free Read in __proc_create afs 19 1 2148d 2146d 15/29 2097d 1d0e850a49a5 afs: Fix cell removal
INFO: rcu detected stall in process_one_work (3) kernel 1 syz, C done done 1 2137d 2179d 15/29 2097d 1d0e850a49a5 afs: Fix cell removal
INFO: task can't die in corrupted fs 1 syz, C done 4 2111d 2137d 15/29 2097d 86f33603f8c5 f2fs: handle errors of f2fs_get_meta_page_nofail
BUG: corrupted list in kobject_add_internal bluetooth 8 syz, C done done 9 2135d 2198d 15/29 2097d a46b7ed4d52d Bluetooth: Fix auto-creation of hci_conn at Conn Complete event
WARNING in dma_map_page_attrs iommu -1 syz, C unreliable 304 2106d 2123d 15/29 2097d 683a9c7ed817 RDMA: Fix software RDMA drivers for dma mapping error
WARNING in unlock_new_inode fs -1 syz, C done 76 2134d 3039d 15/29 2097d 8859bf2b1278 reiserfs: only call unlock_new_inode() if I_NEW
memory leak in ieee80211_check_fast_xmit wireless 3 syz, C 983 2107d 2150d 15/29 2097d dcd479e10a05 mac80211: always wind down STA state
WARNING: suspicious RCU usage in ovs_flow_tbl_masks_cache_resize openvswitch 4 syz, C error 1 2116d 2116d 15/29 2097d fea07a487c6d net: openvswitch: silence suspicious RCU usage warning
general protection fault in xsk_release bpf net 2 syz, C done 2 2149d 2149d 15/29 2097d 1fd17c8cd0aa xsk: Fix possible crash in socket_release when out-of-memory
memory leak in reiserfs_parse_options fs 3 syz, C 4 2161d 2357d 15/29 2097d e9d4709fcc26 reiserfs: Fix memory leak in reiserfs_parse_options()
KMSAN: kernel-infoleak in scsi_cmd_ioctl block 9 131 2101d 2174d 15/29 2097d 6d53a9fe5a19 block/scsi-ioctl: Fix kernel-infoleak in scsi_put_cdrom_generic_arg()
WARNING in binder_transaction_buffer_release (2) kernel -1 syz, C done done 442 2230d 2270d 15/29 2097d e8b8ae7ce32e binder: Remove bogus warning on failed same-process transaction
BUG: using __this_cpu_read() in preemptible code in trace_hardirqs_on 4 syz, C done 502745 2099d 2131d 15/29 2097d f8e48a3dca06 lockdep: Fix preemption WARN for spurious IRQ-enable
INFO: task hung in wdm_flush usb 1 syz, C 38294 2174d 2559d 15/29 2097d 37d2a36394d9 USB: cdc-wdm: Make wdm_flush() interruptible and add wdm_fsync().
INFO: trying to register non-static key in uhid_char_release -1 syz, C done done 26 2174d 2351d 15/29 2097d bce1305c0ece HID: core: Correctly handle ReportSize being zero
WARNING in ieee80211_s1g_channel_width wireless -1 syz, C done 3 2139d 2139d 15/29 2097d c1cd35c60601 cfg80211: only allow S1G channels on S1G band
KMSAN: uninit-value in ieee80211_skb_resize wireless 7 syz, C 5 2126d 2150d 15/29 2097d 14f46c1e5108 mac80211: fix use of skb payload instead of header
KASAN: global-out-of-bounds Read in precalculate_color media 17 syz, C done done 170 2158d 2451d 15/29 2097d e3158a5e7e66 media: vivid: Fix global-out-of-bounds read in precalculate_color()
general protection fault in percpu_ref_exit fs 2 syz, C done 3 2132d 2136d 15/29 2097d 7ea6bf2e6c40 percpu_ref: don't refer to ref->data if it isn't allocated
KASAN: use-after-free Write in tcindex_change net 22 syz, C done done 4 2340d 2341d 15/29 2097d 0d1c3530e1bd net_sched: keep alloc_hash updated after hash allocation
general protection fault in gfs2_rgrp_dump gfs2 2 1 2138d 2138d 15/29 2097d 0e539ca1bbbe gfs2: Fix NULL pointer dereference in gfs2_rgrp_dump
WARNING: refcount bug in do_enable_set bluetooth 13 syz, C inconclusive done 8 2199d 2309d 15/29 2097d b83764f9220a Bluetooth: Fix kernel oops triggered by hci_adv_monitors_clear()
possible deadlock in cleanup_net net 4 syz, C done 281 2166d 2174d 15/29 2097d d966ddcc3821 tipc: fix a deadlock when flushing scheduled work
general protection fault in utf8_casefold f2fs 2 syz, C done 1 2136d 2136d 15/29 2097d f6322f3f1212 f2fs: reject CASEFOLD inode flag without casefold feature
KASAN: use-after-free Read in sctp_auth_free sctp 19 syz, C done 4 2135d 2137d 15/29 2097d d42ee76ecb6c net-backports: sctp: fix sctp_auth_init_hmacs() error path
kernel panic: Fatal exception (3) 2 syz, C done 2 2131d 2130d 15/29 2097d eadd1befdd77 netem: fix zero division in tabledist
KASAN: use-after-free Read in ath9k_hif_usb_rx_cb wireless 19 syz, C 2849 2097d 2332d 15/29 2097d 03fb92a432ea ath9k: hif_usb: fix race condition between usb_get_urb() and usb_kill_anchored_urbs()
memory leak in udf_process_sequence udf 3 syz, C 4 2149d 2153d 15/29 2097d a7be300de800 udf: Fix memory leak when mounting
general protection fault in unlink_file_vma mm 2 syz, C done 1 2170d 2166d 15/29 2097d bc4fe4cdd602 mm: mmap: Fix general protection fault in unlink_file_vma()
KASAN: use-after-free Read in fscache_alloc_cookie fs 19 syz done 1 2149d 2149d 15/29 2097d 1d0e850a49a5 afs: Fix cell removal
KASAN: unknown-crash Read in do_exit kernel 17 syz, C inconclusive done 2 2155d 2160d 15/29 2097d a49145acfb97 fbmem: add margin check to fb_check_caps()
WARNING in handle_exception_nmi kvm-x86 -1 syz, C error done 2653 2138d 2143d 15/29 2097d f8e48a3dca06 lockdep: Fix preemption WARN for spurious IRQ-enable
KASAN: use-after-free Read in tipc_named_reinit tipc 19 6 2202d 2256d 15/29 2097d fdeba99b1e58 tipc: fix use-after-free in tipc_bcast_get_mode
kernel BUG at fs/f2fs/segment.h:LINE! f2fs -1 9 2143d 2154d 15/29 2097d 6a257471fa42 f2fs: fix to check segment boundary during SIT page readahead
KMSAN: uninit-value in ip_tunnel_xmit (2) net 7 syz, C 11778 2101d 2926d 15/29 2097d fdafed459998 ip_gre: set dev->hard_header_len and dev->needed_headroom properly
WARNING: refcount bug in p9_req_put v9fs 13 syz inconclusive done 6 2276d 2829d 15/29 2097d a39c46067c84 net/9p: validate fds in p9_fd_open
INFO: rcu detected stall in ip_list_rcv net 1 syz, C error done 3 2145d 2171d 15/29 2097d 1d0e850a49a5 afs: Fix cell removal
UBSAN: array-index-out-of-bounds in precalculate_color media 15 syz, C 153 2132d 2157d 15/29 2097d e3158a5e7e66 media: vivid: Fix global-out-of-bounds read in precalculate_color()
KMSAN: uninit-value in can_receive (2) can 7 syz, C 2060 2101d 2196d 15/29 2097d e009f95b1543 can: j1935: j1939_tp_tx_dat_new(): fix missing initialization of skbcnt
WARNING in syscall_exit_to_user_mode kernel -1 syz, C done done 1 2135d 2163d 15/29 2097d a49145acfb97 fbmem: add margin check to fb_check_caps()
general protection fault in tcf_generic_walker net 2 syz 9 2144d 2146d 15/29 2097d 580e4273d7a8 net_sched: check error pointer in tcf_dump_walker()
WARNING in print_bfs_bug -1 syz, C done 14759 2129d 2481d 15/29 2097d 6d1823ccc480 lockdep: Optimize the memory usage of circular queue
KASAN: use-after-free Read in io_wqe_worker fs io-uring 19 syz, C error 2 2147d 2148d 15/29 2097d c4068bf898dd io-wq: fix use-after-free in io_wq_worker_running
INFO: task hung in io_uring_setup 1 syz, C done 51 2166d 2171d 15/29 2097d 7e84e1c7566a io_uring: allow disabling rings during the creation
KMSAN: uninit-value in unix_find_other net 7 syz, C 57 2142d 2958d 15/29 2097d 7ca1db21ef8e net: 9p: initialize sun_server.sun_path to have addr's value only when addr is valid
KASAN: use-after-free Read in delete_partition block 19 syz, C done done 3 2173d 2170d 15/29 2097d 08fc1ab6d748 block: fix locking in bdev_del_partition
WARNING in get_signal kernel -1 syz, C done 2 2140d 2142d 15/29 2097d 7b3c36fc4c23 ptrace: fix task_join_group_stop() for the case when current is traced
KASAN: use-after-free Write in refcount_warn_saturate bluetooth 22 syz, C inconclusive done 2 2201d 2359d 15/29 2097d b83764f9220a Bluetooth: Fix kernel oops triggered by hci_adv_monitors_clear()
INFO: task hung in addrconf_verify_work (3) 1 syz, C done 75 2110d 2144d 15/29 2097d 0fedc63fadf0 net_sched: commit action insertions together
kernel panic: stack is corrupted in get_kernel_gp_address kernel 2 syz done done 1 2130d 2163d 15/29 2097d a49145acfb97 fbmem: add margin check to fb_check_caps()
WARNING: ODEBUG bug in exit_to_user_mode_prepare -1 syz, C done done 27 2171d 2177d 15/29 2097d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KMSAN: uninit-value in batadv_hard_if_event (2) batman usb 7 syz, C 162 2113d 2196d 15/29 2097d f45a4248ea4c net: usb: rtl8150: set random MAC address when set_ethernet_addr() fails
INFO: task hung in ctrl_getfamily net 1 syz done done 22 2190d 2803d 15/29 2097d 47733f9daf4f tipc: fix uninit skb->data in tipc_nl_compat_dumpit()
WARNING: suspicious RCU usage in io_init_identity fs 4 1536 2123d 2128d 15/29 2097d 1e6fa5216a0e io_uring: COW io_identity on mismatch
KASAN: out-of-bounds Read in __switch_to (2) kernel 17 syz done done 1 2145d 2141d 15/29 2097d a49145acfb97 fbmem: add margin check to fb_check_caps()
WARNING: suspicious RCU usage in qrtr_ns_worker arm-msm net 4 syz, C done 1 2178d 2241d 15/29 2097d a7809ff90ce6 net: qrtr: ns: Protect radix_tree_deref_slot() using rcu read locks
inconsistent lock state in xa_destroy io-uring fs 4 syz, C 755 2135d 2136d 15/29 2097d ca6484cd308a io_uring: no need to call xa_destroy() on empty xarray
KASAN: use-after-free Write in afs_manage_cell afs 22 syz, C done done 20 2129d 2198d 15/29 2097d 1d0e850a49a5 afs: Fix cell removal
possible deadlock in _snd_pcm_stream_lock_irqsave 4 syz, C done 997 2128d 2165d 15/29 2097d 6564d0ad67ef ALSA: ctl: Workaround for lockdep warning wrt card->ctl_files_rwlock
INFO: task hung in io_uring_flush io-uring fs 1 syz, C done done 11 2188d 2195d 15/29 2097d b7ddce3cbf01 io_uring: fix cancel of deferred reqs with ->files
memory leak in kobject_set_name_vargs (3) nilfs 3 syz, C 19 2097d 2153d 15/29 2097d cb8d53d2c973 ext4: fix leaking sysfs kobject after failed mount
WARNING in percpu_ref_exit (2) -1 syz, C done done 272 2133d 2428d 15/29 2097d c1e2148f8ecb io_uring: free fixed_file_data after RCU grace period
KASAN: slab-out-of-bounds Write in gfs2_fill_super gfs2 21 syz, C done 1 2145d 2144d 15/29 2097d 0ddc5154b24c gfs2: add validation checks for size of superblock
WARNING in rxrpc_recvmsg afs net -1 syz, C error done 5 2232d 2233d 15/29 2097d 65550098c1c4 rxrpc: Fix race between recvmsg and sendmsg on immediate call failure
general protection fault in open_xa_dir fs 2 syz, C done 3 2132d 2144d 15/29 2097d c2bb80b8bdd0 reiserfs: Fix oops during mount
KASAN: use-after-free Read in tcf_action_init net 19 syz, C done 1 2149d 2146d 15/29 2097d 0fedc63fadf0 net_sched: commit action insertions together
KMSAN: uninit-value in search_by_key fs 7 1549 2102d 2153d 15/29 2097d 4443390e08d3 reiserfs: Initialize inode keys properly
INFO: task hung in ubi_detach_mtd_dev mtd 1 syz error error 4 2277d 2363d 15/29 2097d d005f8c6588e ubi: check kthread_should_stop() after the setting of task state
bpf-next test error: BUG: program execution failed: executor 0: exit status 67 -1 12 2129d 2129d 15/29 2097d d25e2e9388ed netfilter: restore NF_INET_NUMHOOKS
KMSAN: uninit-value in f2fs_lookup f2fs 7 17 2109d 2149d 15/29 2097d 6d7ab88a98c1 f2fs: fix uninit-value in f2fs_lookup
INFO: rcu detected stall in exit_group mm 1 syz, C done done 1 2134d 2164d 15/29 2097d 1d0e850a49a5 afs: Fix cell removal
KASAN: slab-out-of-bounds Read in ntfs_attr_find ntfs3 17 syz, C done 9 2130d 3056d 15/29 2097d 4f8c94022f0b ntfs: add check for mft record size in superblock
KASAN: slab-out-of-bounds Read in strset_parse_request net 17 syz, C error 141 2136d 2136d 15/29 2097d db972e532518 ethtool: strset: allow ETHTOOL_A_STRSET_COUNTS_ONLY attr
WARNING in arch_install_hw_breakpoint kernel -1 syz, C inconclusive done 8 2584d 2700d 15/29 2097d e898e69d6b94 x86/hw_breakpoints: Make default case in hw_breakpoint_arch_parse() return an error
KASAN: stack-out-of-bounds Read in xfrm_selector_match (2) net 17 1 2155d 2153d 15/29 2097d e94ee171349d xfrm: Use correct address family in xfrm_state_find
KASAN: use-after-free Read in tipc_mcast_xmit (2) tipc 19 syz, C done 37 2128d 2142d 15/29 2097d ed42989eab57 tipc: fix the skb_unshare() in tipc_buf_append()
KASAN: use-after-free Read in tipc_bcast_get_mode tipc 19 1 2202d 2202d 15/29 2097d fdeba99b1e58 tipc: fix use-after-free in tipc_bcast_get_mode
INFO: task hung in flush_to_ldisc serial 1 syz, C inconclusive done 15 2373d 2443d 15/29 2097d e8c75a30a23c vt: selection, push sel_lock up
KASAN: use-after-free Write in io_wq_worker_running io-uring fs 22 syz, C error 14 2140d 2167d 15/29 2097d c4068bf898dd io-wq: fix use-after-free in io_wq_worker_running
KASAN: slab-out-of-bounds Read in soft_cursor fbdev 17 syz, C done 218 2136d 2445d 15/29 2097d 988d0763361b vt_ioctl: make VT_RESIZEX behave like VT_RESIZE
BUG: unable to handle kernel paging request in tcf_action_dump_terse net 8 syz, C done 15 2140d 2146d 15/29 2097d 580e4273d7a8 net_sched: check error pointer in tcf_dump_walker()
INFO: rcu detected stall in sys_mount (5) afs 1 syz, C done done 10 2144d 2165d 15/29 2097d 1d0e850a49a5 afs: Fix cell removal
general protection fault in qp_release_pages kernel 2 syz, C done 2 2133d 2132d 15/29 2097d 90ca6333fd65 VMCI: check return value of get_user_pages_fast() for errors
INFO: task hung in lock_sock_nested (3) net 1 syz, C done 5 2141d 2142d 15/29 2097d d9fb8c507d42 mptcp: fix infinite loop on recvmsg()/worker() race.
KMSAN: uninit-value in __fget_light (2) fs 7 syz, C 18 2114d 2123d 15/29 2097d d5e4d0a5e692 inet_diag: validate INET_DIAG_REQ_PROTOCOL attribute
WARNING in ati_remote_sendpacket/usb_submit_urb usb media -1 syz, C 22 2268d 2579d 15/29 2097d a8be80053ea7 media: ati_remote: sanity check for both endpoints
KASAN: stack-out-of-bounds Read in csd_lock_record kernel 17 syz, C 226 2228d 2233d 15/29 2097d 35feb60474bf kernel/smp: Provide CSD lock timeout diagnostics
KASAN: use-after-free Read in afs_deactivate_cell (2) afs 19 syz, C done 11 2135d 2153d 15/29 2097d 1d0e850a49a5 afs: Fix cell removal
possible deadlock in mnt_want_write fs 4 syz, C done done 662 2136d 2944d 15/29 2097d 146d62e5a586 ovl: detect overlapping layers
general protection fault in ieee80211_key_free wireless 2 syz, C done 3 2132d 2137d 15/29 2097d 3dc289f8f139 net: wireless: nl80211: fix out-of-bounds access in nl80211_del_key()
general protection fault in __do_sys_io_uring_register fs 2 80 2124d 2130d 15/29 2097d 55cbc2564ab2 io_uring: fix error path cleanup in io_sqe_files_register()
KASAN: use-after-free Write in vcs_read serial 22 syz, C done 11 2179d 2184d 15/29 2097d 52c3c3a59234 Revert "vc_screen: extract vcs_read_buf_header"
WARNING in irqentry_exit kernel -1 syz, C error done 2080 2132d 2198d 15/29 2097d 4d004099a668 lockdep: Fix lockdep recursion
INFO: rcu detected stall in sys_newlstat afs 1 syz, C error done 1 2151d 2150d 15/29 2097d 1d0e850a49a5 afs: Fix cell removal
kernel BUG at net/rxrpc/conn_object.c:LINE! net afs -1 syz, C done 855 2099d 2164d 15/29 2097d 546a42410bf7 rxrpc: Fix conn bundle leak in net-namespace exit
possible deadlock in dev_uc_sync net 4 syz, C done 3 2132d 2230d 15/29 2097d 0e8b8d6a2d85 net: core: use list_del_init() instead of list_del() in netdev_run_todo()
WARNING in wp_page_copy mm -1 syz done done 9 2370d 2447d 15/29 2097d c3e5ea6ee574 mm: avoid data corruption on CoW fault into PFN-mapped VMA
general protection fault in vmk80xx_write_packet usb staging 2 syz, C 82 2137d 2593d 15/29 2097d e1f13c879a7c staging: comedi: check validity of wMaxPacketSize of usb endpoints found
general protection fault in rt6_fill_node net 2 syz, C done done 3 2182d 2179d 15/29 2097d eeaac3634ee0 net: nexthop: don't allow empty NHA_GROUP
KASAN: use-after-free Read in afs_manage_cell afs 19 5 2138d 2153d 15/29 2097d 1d0e850a49a5 afs: Fix cell removal
KMSAN: uninit-value in do_ip_vs_set_ctl lvs 7 syz, C 365 2102d 2891d 15/29 2097d c5a8a8498eed ipvs: Fix uninit-value in do_ip_vs_set_ctl()
memory leak in __team_options_register net 3 syz, C 1 2167d 2167d 15/29 2097d 9a9e77495958 net: team: fix memory leak in __team_options_register
general protection fault in nexthop_is_blackhole net 2 syz, C done done 1 2182d 2179d 15/29 2097d eeaac3634ee0 net: nexthop: don't allow empty NHA_GROUP
KASAN: use-after-free Read in ucma_close (2) rdma 19 syz done 1 2164d 2164d 15/29 2097d f5449e74802c RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy
UBSAN: array-index-out-of-bounds in ieee80211_del_key wireless 15 syz, C done 685 2106d 2150d 15/29 2097d 3dc289f8f139 net: wireless: nl80211: fix out-of-bounds access in nl80211_del_key()
INFO: task hung in htable_put 1 syz, C done done 29 2369d 2423d 15/29 2097d 99b79c3900d4 netfilter: xt_hashlimit: unregister proc file before releasing mutex
KASAN: use-after-free Write in xp_put_pool bpf net 22 syz, C done 50 2150d 2172d 15/29 2097d 83cf5c68d663 xsk: Fix use-after-free in failed shared_umem bind
KASAN: use-after-free Read in __cfg8NUM_wpan_dev_from_attrs (2) wpan 19 syz, C error done 5 2231d 2231d 15/29 2097d bf64ff4c2aac genetlink: get rid of family->attrbuf
kernel panic: System is deadlocked on memory mm 2 syz, C done 43 2223d 2221d 15/29 2097d 9066e5cfb73c mm, oom: make the calculation of oom badness more accurate
general protection fault in strncasecmp afs 2 syz, C done 1 2152d 2150d 15/29 2097d 92e3cc91d8f5 afs: Fix rapid cell addition/removal by not using RCU on cells tree
KASAN: slab-out-of-bounds Read in f2fs_build_segment_manager f2fs 17 syz, C error 2 2149d 2149d 15/29 2097d 3a22e9ac7158 f2fs: fix to do sanity check on segment/section count
KMSAN: uninit-value in udf_get_pblock_spar15 udf 7 1 2153d 2150d 15/29 2097d 44ac6b829c4e udf: Limit sparing table size
WARNING: refcount bug in l2cap_chan_put 13 syz, C inconclusive done 13 2199d 2363d 15/29 2097d b83764f9220a Bluetooth: Fix kernel oops triggered by hci_adv_monitors_clear()
KASAN: use-after-free Write in afs_deactivate_cell afs 22 4 2130d 2150d 15/29 2097d 1d0e850a49a5 afs: Fix cell removal
WARNING: proc registration bug in afs_manage_cell afs -1 syz, C done 1 2150d 2146d 15/29 2097d 1d0e850a49a5 afs: Fix cell removal
INFO: trying to register non-static key in exfat_cache_inval_inode exfat -1 syz, C done 4 2140d 2146d 15/29 2097d 8ff006e57ad3 exfat: fix use of uninitialized spinlock on error path
WARNING in nla_get_range_unsigned net -1 syz, C done 63 2172d 2174d 15/29 2097d c30a3c957c88 netlink: policy: correct validation type check
KASAN: use-after-free Read in bit_putcs fbdev 19 syz, C 12 2144d 2364d 15/29 2097d 988d0763361b vt_ioctl: make VT_RESIZEX behave like VT_RESIZE
BUG: using smp_processor_id() in preemptible code in tipc_crypto_xmit tipc 4 syz, C done done 468 2169d 2240d 15/29 2097d bb8872a1e6bc tipc: fix using smp_processor_id() in preemptible
general protection fault in xsk_is_setup_for_bpf_map net bpf 2 syz, C error 294 2150d 2172d 15/29 2097d 968be23ceaca xsk: Fix possible segfault at xskmap entry insertion
KMSAN: uninit-value in udf_evict_inode udf 7 159 2102d 2149d 15/29 2097d 044e2e26f214 udf: Avoid accessing uninitialized data on failed inode read
inconsistent lock state in io_uring_add_task_file fs 4 1 2136d 2135d 15/29 2097d ce765372bc44 io_uring: Fix use of XArray in __io_uring_files_cancel
memory leak in read_adv_mon_features bluetooth 3 syz, C 2 2166d 2190d 15/29 2097d cafd472a10ff Bluetooth: Fix memory leak in read_adv_mon_features()
INFO: trying to register non-static key in del_timer_sync (2) wireless usb -1 syz, C 1206 2629d 2681d 15/29 2097d 621a3a8b1c0e mwifiex: don't call del_timer_sync() on uninitialized timer
inconsistent lock state in icmp_send net 4 syz done done 1 2305d 2802d 15/29 2097d 1378817486d6 tipc: block BH before using dst_cache
INFO: task can't die in rtnetlink_rcv_msg net 1 5 2137d 2146d 15/29 2097d 0fedc63fadf0 net_sched: commit action insertions together
BUG: unable to handle kernel paging request in pvclock_gtod_notify kvm-x86 8 syz, C done done 8 2143d 2162d 15/29 2097d a49145acfb97 fbmem: add margin check to fb_check_caps()
INFO: trying to register non-static key in uhid_dev_destroy input -1 syz, C unreliable done 40 2179d 2352d 15/29 2097d bce1305c0ece HID: core: Correctly handle ReportSize being zero
WARNING in bpf_raw_tp_link_fill_link_info bpf -1 syz, C error 56 2150d 2164d 15/29 2097d b474959d5afd bpf: Fix a buffer out-of-bound access when filling raw_tp link_info
KMSAN: uninit-value in qtree_entry_unused fs 7 396 2102d 2153d 15/29 2097d 3d3dc274ce73 quota: clear padding in v2r1_mem2diskdqb()
KASAN: use-after-free Write in rxrpc_put_bundle afs net 22 syz, C done 229 2135d 2158d 15/29 2097d f3af4ad1e08a rxrpc: Fix bundle counting for exclusive connections
KASAN: use-after-free Read in tcf_action_destroy net 19 syz, C done 8 2139d 2154d 15/29 2097d 0fedc63fadf0 net_sched: commit action insertions together
memory leak in xdp_umem_create bpf net 3 syz, C 17 2101d 2121d 15/29 2097d e5e1a4bc916d xsk: Fix possible memory leak at socket close
general protection fault in xsk_diag_dump (2) bpf net 2 syz, C 354 2154d 2172d 15/29 2097d 53ea2076d851 xsk: Fix possible segfault in xsk umem diagnostics
INFO: rcu detected stall in security_file_open (3) afs 1 syz, C done done 2 2145d 2144d 15/29 2097d 1d0e850a49a5 afs: Fix cell removal
general protection fault in tcf_action_destroy (2) net 2 syz, C done done 29 2135d 2348d 15/29 2097d 0d1c3530e1bd net_sched: keep alloc_hash updated after hash allocation
KASAN: global-out-of-bounds Read in fbcon_get_font fbdev 17 syz, C inconclusive inconclusive 41 2142d 2439d 15/29 2097d 5af08640795b fbcon: Fix global-out-of-bounds read in fbcon_get_font()
WARNING: suspicious RCU usage in ctrl_cmd_new_lookup net arm-msm 4 syz, C done done 10 2152d 2241d 15/29 2097d a7809ff90ce6 net: qrtr: ns: Protect radix_tree_deref_slot() using rcu read locks
general protection fault in io_poll_double_wake (2) fs io-uring 2 syz, C error 2 2147d 2146d 15/29 2123d 8706e04ed7d6 io_uring: always delete double poll wait entry on match
possible deadlock in io_write fs 4 2 2144d 2146d 15/29 2123d fad8e0de4426 io_uring: fix potential ABBA deadlock in ->show_fdinfo()
kernel BUG at lib/string.c:LINE! (5) btrfs -1 syz, C done 558 2150d 2159d 15/29 2129d 35be8851d172 btrfs: fix overflow when copying corrupt csums for a message
general protection fault in madvise_cold_or_pageout_pte_range mm 2 syz, C done 3 2150d 2160d 15/29 2131d ce2684254bd4 mm: validate pmd after splitting
KASAN: global-out-of-bounds Read in fbcon_resize fbdev 17 syz, C error 673 2153d 2185d 15/29 2135d ec0972adecb3 fbcon: Fix user font detection test at fbcon_resize().
WARNING: suspicious RCU usage in fib6_del (2) net 4 1 2167d 2167d 15/29 2135d 843d926b003e ipv6: avoid lockdep issue in fib6_del()
KASAN: use-after-free Read in ieee8NUM_tx wpan 19 1 2168d 2168d 15/29 2135d 0ff4628f4c6c mac802154: tx: fix use-after-free
general protection fault in wg_index_hashtable_replace wireguard 2 2 2156d 2167d 15/29 2135d 9179ba31367b wireguard: noise: take lock when removing handshake entry from table
memory leak in do_seccomp kernel 3 syz, C 6 2167d 2194d 15/29 2135d a566a9012acd seccomp: don't leak memory when filter install races
inconsistent lock state in padata_do_parallel crypto 4 9 2153d 2173d 15/29 2135d 1b0df11fde0f padata: fix possible padata_works_lock deadlock
KASAN: use-after-free Write in skb_queue_tail arm-msm net 22 1 2166d 2166d 15/29 2135d 3ca1a42a52ca net: qrtr: check skb_put_padto() return value
possible deadlock in peernet2id_alloc net 4 12 2165d 2337d 15/29 2135d e1f469cd5866 Revert "netns: don't disable BHs when locking "nsid_lock""
KMSAN: uninit-value in __inet_diag_dump net 7 syz, C 37 2136d 2153d 15/29 2135d d5e4d0a5e692 inet_diag: validate INET_DIAG_REQ_PROTOCOL attribute
memory leak in do_eventfd fs 3 syz, C 2 2181d 2277d 15/29 2135d f65886606c2d KVM: fix memory leak in kvm_io_bus_unregister_dev()
KASAN: slab-out-of-bounds Read in read_descriptors (2) usb 17 1 2184d 2180d 15/29 2135d a18cd6c9b6bc usb: core: fix slab-out-of-bounds Read in read_descriptors
INFO: rcu detected stall in cleanup_net (4) kernel 1 syz, C done 5 2169d 2165d 15/29 2135d b5b73b26b3ca taprio: Fix allowing too small intervals
KASAN: slab-out-of-bounds Read in fbcon_scrolldelta fbdev 17 1 2161d 2160d 15/29 2135d 50145474f6ef fbcon: remove soft scrollback code
INFO: task hung in tcf_ife_init net 1 syz, C done 4 2167d 2171d 15/29 2135d cc8e58f8325c act_ife: load meta modules before tcf_idr_check_alloc()
KASAN: slab-out-of-bounds Read in prism2sta_probe_usb usb staging 17 syz, C 8 2175d 2206d 15/29 2135d fea22e159d51 staging: wlan-ng: fix out of bounds read in prism2sta_probe_usb()
KMSAN: uninit-value in inet_diag_cmd_exact net 7 syz, C 31 2136d 2147d 15/29 2135d d5e4d0a5e692 inet_diag: validate INET_DIAG_REQ_PROTOCOL attribute
KASAN: global-out-of-bounds Read in vga16fb_imageblit 17 syz, C done 1071 2161d 2446d 15/29 2135d bd018a6a75ce video: fbdev: fix OOB read in vga_8planes_imageblit()
memory leak in tipc_group_create_member tipc 3 syz, C 32 2162d 2569d 15/29 2135d bb3a420d47ab tipc: Fix memory leak in tipc_group_create_member()
general protection fault in free_netdev net 2 syz, C error done 3605 2210d 2245d 15/29 2143d 46ef5b89ec0e ip6_gre: fix null-ptr-deref in ip6gre_init_net()
KASAN: use-after-free Write in page_counter_uncharge cgroups mm 22 2 2182d 2187d 15/29 2143d f1796544a0ca memcg: fix use-after-free in uncharge_batch
KASAN: use-after-free Write in page_counter_cancel cgroups mm 22 1 2191d 2187d 15/29 2143d f1796544a0ca memcg: fix use-after-free in uncharge_batch
KASAN: use-after-free Read in do_madvise io-uring mm 19 syz error 4 2182d 2184d 15/29 2143d 7867fd7cc44e mm: madvise: fix vma user-after-free
KMSAN: kernel-infoleak in move_addr_to_user (3) net 9 syz, C 79 2158d 2192d 15/29 2146d 38ba8b9241f5 can: j1939: fix kernel-infoleak in j1939_sk_sock2sockaddr_can()
KASAN: slab-out-of-bounds Write in hiddev_ioctl_usage input usb 21 syz, C 279 2177d 2520d 15/29 2150d 25a097f52046 HID: hiddev: Fix slab-out-of-bounds write in hiddev_ioctl_usage()
WARNING: refcount bug in red_destroy net 13 syz, C done 1 2180d 2179d 15/29 2150d 5438dd45831e net_sched: fix error path in red_init()
WARNING in slab_pre_alloc_hook usb -1 syz, C 210 2174d 2195d 15/29 2150d f176ede3a3bd USB: yurex: Fix bad gfp argument
WARNING: refcount bug in smc_release (3) smc 13 1 2177d 2166d 15/29 2150d 5fb8642a17aa net/smc: fix sock refcounting in case of termination
INFO: rcu detected stall in ext4_file_write_iter 1 syz, C inconclusive done 93 2194d 2726d 15/29 2150d 7e24969022cb block: allow for_each_bvec to support zero len bvec
WARNING: refcount bug in qdisc_put (2) net 13 syz, C done 7 2180d 2179d 15/29 2150d 5438dd45831e net_sched: fix error path in red_init()
BUG: corrupted list in mousedev_release input 8 syz done 5 2173d 2175d 15/29 2150d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: use-after-free Read in snd_pcm_oss_release sound 19 1 2178d 2178d 15/29 2150d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
possible deadlock in __lock_task_sighand io-uring 4 syz, C done 12 2174d 2176d 15/29 2150d fd7d6de22414 io_uring: don't recurse on tsk->sighand->siglock with signalfd
WARNING in snd_pcm_plugin_build_mulaw sound -1 syz, C done 4 2176d 2173d 15/29 2150d 949a1ebe8cea ALSA: pcm: oss: Remove superfluous WARN_ON() for mulaw sanity check
general protection fault in snd_ctl_release sound 2 syz done 4 2172d 2172d 15/29 2150d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KMSAN: uninit-value in batadv_tt_hash_find batman 7 11 2165d 2222d 15/29 2150d 303216e76dca batman-adv: Avoid uninitialized chaddr when handling DHCP
KASAN: global-out-of-bounds Read in bit_putcs fbdev 17 syz, C done 262 2150d 2444d 15/29 2150d 39b3cffb8cf3 fbcon: prevent user font height or width change from causing potential out-of-bounds access bc5269ca7650 vt_ioctl: change VT_RESIZEX ioctl to check for error return from vc_resize()
KASAN: use-after-free Read in fbcon_cursor fbdev 19 syz done error 10 2189d 2434d 15/29 2150d f8d1653daec0 vt: defer kfree() of vc_screenbuf in vc_do_resize()
KASAN: use-after-free Read in rc_dev_uevent media 19 1 2198d 2198d 15/29 2150d 4f0835d6677d media: rc: uevent sysfs file races with rc_unregister_device()
upstream boot error: KASAN: global-out-of-bounds Read in internal_create_group fs -1 273 2181d 2193d 15/29 2150d 62c789270c0b libnvdimm: KASAN: global-out-of-bounds Read in internal_create_group
KMSAN: uninit-value in video_usercopy media 7 syz, C 28 2215d 2214d 15/29 2150d 4ffb879ea648 media: media/v4l2-core: Fix kernel-infoleak in video_put_user()
INFO: task hung in nbd_ioctl (2) nbd 1 37 2177d 2230d 15/29 2150d 2a63866c8b51 tipc: fix shutdown() of connectionless socket
WARNING in restore_regulatory_settings -1 syz, C done 10414 2168d 2412d 15/29 2150d 47caf685a685 cfg80211: regulatory: reject invalid hints
INFO: task hung in pipe_release (2) ext4 1 syz done 3 2172d 2203d 15/29 2150d 7e24969022cb block: allow for_each_bvec to support zero len bvec
KMSAN: kernel-infoleak in raw_ioctl usb 9 syz, C 22 2172d 2196d 15/29 2150d a092b7233f0e net: usb: Fix uninit-was-stored issue in asix_read_phy_addr()
KASAN: use-after-free Read in bdev_del_partition block 19 syz, C done 1 2174d 2174d 15/29 2150d 08fc1ab6d748 block: fix locking in bdev_del_partition
KASAN: vmalloc-out-of-bounds Write in bitfill_aligned fbdev 21 syz, C 475 2210d 2444d 15/29 2153d 033724d68642 fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins.
BUG: unable to handle kernel paging request in vmx_vcpu_run kvm-x86 8 syz, C error error 194 2932d 3047d 15/29 2154d 0447378a4a79 kvm: vmx: Nested VM-entry prereqs for event inj.
possible deadlock in __io_queue_deferred fs io-uring 4 syz, C error 1 2196d 2195d 15/29 2158d 7271ef3a93a8 io_uring: fix recursive completion locking on oveflow flush
kernel BUG at mm/hugetlb.c:LINE! -1 syz, C done error 10 2208d 2321d 15/29 2158d 15568299b7d9 hugetlbfs: prevent filesystem stacking of hugetlbfs
WARNING in r871xu_dev_remove usb staging -1 syz, C 47375 2197d 2549d 15/29 2158d b4383c971bc5 staging: rtl8712: handle firmware load failure
WARNING in ptrace_stop -1 syz, C done 1413 2209d 2213d 15/29 2158d d136122f5845 sched: Fix race against ptrace_freeze_trace()
general protection fault in do_con_write 2 syz, C done 10703 2210d 2445d 15/29 2158d ce684552a266 vt: Reject zero-sized screen buffer size.
general protection fault in __btf_resolve_helper_id bpf 2 syz, C 17 2222d 2231d 15/29 2158d 5b801dfb7feb bpf: Fix NULL pointer dereference in __btf_resolve_helper_id()
KASAN: use-after-free Read in line6_submit_audio_in_all_urbs sound 19 2 2226d 2240d 15/29 2158d 68359a1ad844 ALSA: line6: Sync the pending work cancel at disconnection
INFO: task hung in ovs_exit_net openvswitch 1 65 2210d 2213d 15/29 2158d a65878d6f00b net: openvswitch: fixes potential deadlock in dp cleanup code
memory leak in erase_aeb (2) mtd 3 syz 25 2217d 2286d 15/29 2158d 3b185255bb2f ubi: fastmap: Don't produce the initial next anchor PEB when fastmap is disabled
KASAN: use-after-free Write in __linkwatch_run_queue net 22 syz, C error 24 2213d 2214d 15/29 2158d c75d1d5248c0 bonding: check return value of register_netdevice() in bond_newlink()
WARNING in fat12_ent_blocknr exfat -1 2 2201d 2226d 15/29 2158d a090a5a7d73f fat: fix fat_ra_init() for data clusters == 0
general protection fault in x86_fsgsbase_read_task kernel 2 syz, C done 2 2192d 2192d 15/29 2158d 8ab49526b53d x86/fsgsbase/64: Fix NULL deref in 86_fsgsbase_read_task
WARNING in __kernel_read fs -1 syz, C done 60 2165d 2223d 15/29 2158d a39c46067c84 net/9p: validate fds in p9_fd_open
WARNING in inc_nlink -1 syz, C done 26 2224d 2327d 15/29 2158d facb03dddec0 fs/minix: don't allow getting deleted inodes
KASAN: use-after-free Read in delete_and_unsubscribe_port (2) sound 19 syz done 4 2202d 2227d 15/29 2158d 80982c7e834e ALSA: seq: oss: Serialize ioctls
KASAN: use-after-free Write in addr_resolve rdma 22 1 2259d 2256d 15/29 2158d f6a9d47ae685 RDMA/cma: Execute rdma_cm destruction from a handler properly
general protection fault in cdev_del usb fs 2 syz, C 315 2167d 2635d 15/29 2158d e911e99a0770 usb: hso: check for return value in hso_serial_common_create()
general protection fault in afs_dynroot_depopulate afs 2 1 2186d 2184d 15/29 2158d 5e0b17b026eb afs: Fix NULL deref in afs_dynroot_depopulate()
KASAN: use-after-free Read in sock_def_write_space (2) arm-msm net 19 syz, C error 29 2158d 2215d 15/29 2158d af9f691f0f5b qrtr: orphan socket in qrtr_release()
kernel BUG at mm/khugepaged.c:LINE! mm -1 syz, C done 30 2185d 2196d 15/29 2158d f3f99d63a815 khugepaged: adjust VM_BUG_ON_MM() in __khugepaged_enter()
possible deadlock in shmem_fallocate (4) mm 4 syz, C done 81 2208d 2423d 15/29 2158d 3e338d3c95c7 staging: android: ashmem: Fix lockdep warning for write operation
BUG: unable to handle kernel NULL pointer dereference in loop_rw_iter io-uring fs 10 syz, C done 24 2183d 2195d 15/29 2158d 2dd2111d0d38 io_uring: Fix NULL pointer dereference in loop_rw_iter()
kernel BUG at net/rxrpc/recvmsg.c:LINE! afs net -1 syz, C error 10 2204d 2233d 15/29 2158d 65550098c1c4 rxrpc: Fix race between recvmsg and sendmsg on immediate call failure
KASAN: use-after-free Read in addr_handler (2) rdma 19 2 2213d 2256d 15/29 2158d f6a9d47ae685 RDMA/cma: Execute rdma_cm destruction from a handler properly
KASAN: use-after-free Read in io_async_task_func io-uring fs 19 syz error 1 2194d 2194d 15/29 2158d 6d816e088c35 io_uring: hold 'ctx' reference around task_work queue + execute
WARNING in idr_alloc arm-msm net -1 syz, C done 65 2167d 2241d 15/29 2158d 8dfddfb79653 net: qrtr: fix usage of idr in port assignment to socket
WARNING in drop_nlink fs -1 syz, C done error 1 2305d 2301d 15/29 2158d facb03dddec0 fs/minix: don't allow getting deleted inodes
KASAN: slab-out-of-bounds Read in vc_do_resize serial 17 syz, C done 55 2195d 2430d 15/29 2158d d88ca7e1a27e fbmem: pull fbcon_update_vcs() out of fb_set_var()
general protection fault in fib_dump_info (2) net 2 syz, C done 16 2182d 2184d 15/29 2158d eeaac3634ee0 net: nexthop: don't allow empty NHA_GROUP
KASAN: slab-out-of-bounds Read in vsscanf (2) lsm 17 syz, C error 5 2200d 2214d 15/29 2158d a6bd4f6d9b07 Smack: fix another vsscanf out of bounds
KMSAN: uninit-value in netlink_policy_dump_start net 7 syz, C 31 2163d 2166d 15/29 2158d d1fb55592909 netlink: fix state reallocation in policy export
possible deadlock in uprobe_clear_state (2) perf trace 4 1 2225d 2221d 15/29 2158d f867c771f988 binder: Don't use mmput() from shrinker function.
KASAN: null-ptr-deref Write in media_request_close media 12 syz, C done 17 2200d 2249d 15/29 2158d e30cc79cc80f media: media-request: Fix crash if memory allocation fails
KASAN: use-after-free Read in devlink_health_reporter_destroy net 19 syz, C error 1188 2222d 2223d 15/29 2158d 5d037b4d3df7 devlink: Fix use-after-free when destroying health reporters
kernel BUG at net/core/dev.c:LINE! (3) net -1 syz, C done 979 2172d 2316d 15/29 2158d 832707021666 bonding: fix a potential double-unregister
KASAN: use-after-free Read in ceph_mdsc_destroy ceph fs 19 4 2197d 2213d 15/29 2158d a7caa88f8b72 ceph: fix use-after-free for fsc->mdsc
KASAN: use-after-free Read in path_init (2) fs 19 syz, C done 29 2192d 2193d 15/29 2158d 24fb33d40d60 fix breakage in do_rmdir()
WARNING in __kernel_write fs -1 syz, C done 522 2207d 2227d 15/29 2158d a39c46067c84 net/9p: validate fds in p9_fd_open
KMSAN: uninit-value in get_block fs 7 syz, C 13 2274d 2277d 15/29 2158d 270ef41094e9 fs/minix: reject too-large maximum file size
WARNING: suspicious RCU usage in ovs_flow_tbl_masks_cache_size openvswitch 4 syz, C done 4093 2199d 2201d 15/29 2158d fea07a487c6d net: openvswitch: silence suspicious RCU usage warning
WARNING in submit_rx_urb/usb_submit_urb usb staging -1 syz, C 397 2209d 2634d 15/29 2158d faaff9765664 staging: wlan-ng: properly check endpoint types
WARNING in ib_unregister_device_queued rdma -1 2 2290d 2301d 15/29 2158d 0cb42c026583 RDMA/core: Fix bogus WARN_ON during ib_unregister_device_queued()
KASAN: use-after-free Read in get_block 19 syz, C done 23 2224d 2301d 15/29 2158d 270ef41094e9 fs/minix: reject too-large maximum file size
WARNING in idtentry_exit_cond_rcu kernel -1 syz 6 2231d 2228d 15/29 2158d bce9b042ec73 x86/traps: Disable interrupts in exc_aligment_check()
INFO: task hung in ovs_dp_masks_rebalance openvswitch 1 771 2171d 2214d 15/29 2158d a65878d6f00b net: openvswitch: fixes potential deadlock in dp cleanup code
memory leak in nf_tables_addchain netfilter 3 syz, C 1 2196d 2194d 15/29 2158d 59136aa3b264 netfilter: nf_tables: free chain context when BINDING flag is missing
KASAN: null-ptr-deref Write in get_block fs 12 syz, C done 101 2224d 2337d 15/29 2158d da27e0a0e5f6 fs/minix: check return value of sb_getblk()
WARNING: suspicious RCU usage in tipc_l2_send_msg tipc 4 syz done 60 2182d 2240d 15/29 2158d f6db90964162 tipc: call rcu_read_lock() in tipc_aead_encrypt_done()
WARNING in compat_do_ebt_get_ctl bridge netfilter -1 syz, C done 15 2188d 2198d 15/29 2158d 5c04da55c754 netfilter: ebtables: reject bogus getopt len value
memory leak in io_submit_sqes fs io-uring 3 syz, C 2 2175d 2194d 15/29 2158d a36da65c4656 io_uring: fail poll arm on queue proc failure
WARNING in __nf_unregister_net_hook (2) netfilter -1 syz, C done 9 2224d 2222d 15/29 2158d 1e9451cbda45 netfilter: nf_tables: fix nat hook table deletion
KCSAN: data-race in page_counter_try_charge / page_counter_try_charge (2) mm cgroups 6 148 2193d 2436d 15/29 2158d 6e4bd50f3888 mm/page_counter: fix various data races at memsw
KASAN: use-after-free Read in j1939_tp_txtimer can 19 syz, C done error 5 2224d 2423d 15/29 2158d cd3b3636c99f can: j1939: transport: j1939_session_tx_dat(): fix use-after-free read in j1939_tp_txtimer()
KASAN: use-after-free Write in get_block fs 22 syz, C inconclusive inconclusive 12 2240d 2290d 15/29 2158d 270ef41094e9 fs/minix: reject too-large maximum file size
KASAN: use-after-free Read in l2cap_chan_close 19 syz, C done 37 2199d 2380d 15/29 2158d f9c70bdc279b Bluetooth: add a mutex lock to avoid UAF in do_enale_set
KASAN: use-after-free Read in ax88172a_unbind usb 19 syz, C done 2723 2209d 2450d 15/29 2158d c28d9a285668 ax88172a: fix ax88172a_unbind() failures
linux-next boot error: WARNING in mem_cgroup_css_alloc kernel -1 6 2192d 2192d 15/29 2158d 9f457179244a mm: memcontrol: fix warning when allocating the root cgroup
KCSAN: data-race in vm_area_dup / vma_interval_tree_remove (2) mm 6 70 2252d 2366d 15/29 2158d cda099b37d71 fork: Annotate a data race in vm_area_dup()
general protection fault in vsock_poll net virt 2 syz done 15 2202d 2215d 15/29 2158d 1980c0584483 vsock: fix potential null pointer dereference in vsock_poll()
BUG: corrupted list in p9_read_work (2) v9fs 8 syz done error 38 2460d 2821d 15/29 2158d 74d6a5d56629 9p/trans_fd: Fix concurrency del of req_list in p9_fd_cancelled/p9_read_work
general protection fault in io_poll_double_wake io-uring fs 2 syz, C done 8 2162d 2190d 15/29 2158d d4e7cd36a90e io_uring: sanitize double poll handling
KMSAN: uninit-value in geneve_xmit net 7 syz, C 163 2161d 2214d 15/29 2158d 32818c075c54 geneve: fix an uninitialized value in geneve_changelink()
general protection fault in syscall_return_slowpath kernel 2 syz inconclusive done 1 2264d 2350d 15/29 2158d 033724d68642 fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins.
KMSAN: uninit-value in ax25_connect hams 7 syz, C 15 2166d 2299d 15/29 2158d 2f2a7ffad5c6 AX.25: Fix out-of-bounds read in ax25_connect()
general protection fault in j1939_netdev_start can 2 syz, C done 8 2210d 2362d 15/29 2158d af804b782635 can: j1939: socket: j1939_sk_bind(): make sure ml_priv is allocated
KASAN: slab-out-of-bounds Read in hci_extended_inquiry_result_evt bluetooth 17 syz, C 16 2201d 2229d 15/29 2158d 51c19bf3d5cf Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt()
KASAN: wild-memory-access Read in rawv6_setsockopt net 17 2 2199d 2199d 15/29 2158d 519a8a6cf91d net: Revert "net: optimize the sockptr_t for unified kernel/user address spaces"
KASAN: out-of-bounds Read in pebs_update_state perf 17 syz inconclusive done 1 2235d 2282d 15/29 2158d 033724d68642 fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins.
WARNING in submit_audio_out_urb/usb_submit_urb sound usb -1 syz 2 2227d 2227d 15/29 2158d 6e8a914ad619 ALSA: line6: Perform sanity check for each URB creation
KASAN: use-after-free Read in lockref_get fs 19 7 2262d 2361d 15/29 2158d bad8e64fb19d blktrace: fix debugfs use after free
KASAN: use-after-free Read in io_uring_setup (2) fs 19 1 2206d 2206d 15/29 2158d d1719f70d0a5 io_uring: don't touch 'ctx' after installing file descriptor
KASAN: use-after-free Read in __xfrm6_tunnel_spi_lookup net 19 syz, C error 12 2216d 2221d 15/29 2158d 8b404f46dd6a xfrm: interface: not xfrmi_ipv6/ipip_handler twice
general protection fault in khugepaged mm 2 syz, C done 3 2215d 2227d 15/29 2158d 594cced14ad3 khugepaged: fix null-pointer dereference due to race
KASAN: invalid-free in snd_seq_port_disconnect sound 24 syz done 9 2201d 2206d 15/29 2158d 80982c7e834e ALSA: seq: oss: Serialize ioctls
KASAN: slab-out-of-bounds Write in sctp_setsockopt sctp 21 syz, C error 590 2209d 2214d 15/29 2158d dfd3d5266dc1 sctp: fix slab-out-of-bounds in SCTP_DELAYED_SACK processing
possible deadlock in io_timeout_fn io-uring fs 4 syz, C done 4 2192d 2195d 15/29 2158d 51a4cc112c7a io_uring: defer file table grabbing request cleanup for locked requests
KMSAN: uninit-value in ucma_connect rdma 7 syz, C 138 2163d 2214d 15/29 2158d 31142a4ba617 RDMA/cm: Add min length checks to user structure copies
WARNING in snd_usbmidi_submit_urb/usb_submit_urb usb sound -1 syz, C done 42 2241d 2265d 15/29 2158d 9b7e5208a941 ALSA: usb-audio: Fix race against the error recovery URB submission
WARNING in snd_info_get_line sound -1 syz, C done 36 2214d 2219d 15/29 2158d 60379ba08532 ALSA: info: Drop WARN_ON() from buffer NULL sanity check
WARNING: suspicious RCU usage in ovs_flow_tbl_destroy openvswitch 4 syz, C done 658 2199d 2201d 15/29 2158d fea07a487c6d net: openvswitch: silence suspicious RCU usage warning
INFO: task hung in __do_sys_reboot kernel 1 1554 2174d 2230d 15/29 2158d b292b50b0efc driver core: Fix probe_count imbalance in really_probe()
INFO: trying to register non-static key in red_destroy net -1 syz, C error 318 2209d 2231d 15/29 2158d 608b4adab178 net_sched: initialize timer earlier in red_init()
general protection fault in go7007_usb_probe usb media 2 syz, C 2103 2197d 2306d 15/29 2158d 137641287eb4 go7007: add sanity checking for endpoints
KASAN: slab-out-of-bounds Read in hci_inquiry_result_with_rssi_evt bluetooth 17 syz, C error 9 2203d 2223d 15/29 2158d 629b49c848ee Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_with_rssi_evt()
KMSAN: uninit-value in __tipc_nl_compat_dumpit (3) tipc 7 syz, C 6181 2158d 2223d 15/29 2158d 47733f9daf4f tipc: fix uninit skb->data in tipc_nl_compat_dumpit()
KASAN: wild-memory-access Read in ip_setsockopt net 17 syz, C 2 2192d 2192d 15/29 2158d 519a8a6cf91d net: Revert "net: optimize the sockptr_t for unified kernel/user address spaces"
WARNING: suspicious RCU usage in bond_ipsec_add_sa net 4 214 2159d 2230d 15/29 2158d f548a476268d bonding: don't need RTNL for ipsec helpers
KASAN: wild-memory-access Read in sctp_setsockopt sctp 17 syz, C 2 2192d 2192d 15/29 2158d 519a8a6cf91d net: Revert "net: optimize the sockptr_t for unified kernel/user address spaces"
KMSAN: uninit-value in xa_load rdma 7 syz, C 208 2159d 2214d 15/29 2158d 31142a4ba617 RDMA/cm: Add min length checks to user structure copies
WARNING in vkms_vblank_simulate -1 syz, C done 12903 2164d 2741d 15/29 2158d 51f644b40b4b drm/atomic-helper: reset vblank on crtc reset
WARNING in snd_usbmidi_input_start/usb_submit_urb usb sound -1 syz, C done 231 2218d 2261d 15/29 2158d 9b7e5208a941 ALSA: usb-audio: Fix race against the error recovery URB submission
KASAN: use-after-free Read in smk_write_relabel_self lsm 19 syz, C done 2 2262d 2258d 15/29 2158d beb4ee6770a8 Smack: fix use-after-free in smk_write_relabel_self()
possible deadlock in pipe_lock (3) overlayfs 4 syz, C inconclusive done 4 2386d 2423d 15/29 2187d 1a980b8cbf00 ovl: add splice file read write helper
possible deadlock in dev_mc_unsync net 4 syz, C error done 78 2224d 2240d 15/29 2187d be74294ffa24 net: get rid of lockdep_set_class_and_subclass()
possible deadlock in lock_trace (3) fs 4 syz inconclusive done 69 2325d 2460d 15/29 2187d 2db9dbf71bf9 proc: Use new infrastructure to fix deadlocks in execve
possible deadlock in do_io_accounting (3) fs 4 syz, C inconclusive done 39 2332d 2423d 15/29 2187d 76518d379885 proc: io_accounting: Use new infrastructure to fix deadlocks in execve
possible deadlock in proc_pid_personality fs 4 syz inconclusive done 3 2342d 2352d 15/29 2187d 2db9dbf71bf9 proc: Use new infrastructure to fix deadlocks in execve
WARNING: bad unlock balance in rcu_lock_release fs 4 syz, C inconclusive done 1433 2328d 2609d 15/29 2187d 10476e630422 locking/lockdep: Fix bad recursion pattern
WARNING in hsr_addr_subst_dest -1 syz, C done done 8639 2324d 2781d 15/29 2187d 4b793acdca00 hsr: use netdev_err() instead of WARN_ONCE()
WARNING: locking bug in try_to_grab_pending net 4 syz error done 1 2276d 2739d 15/29 2187d 1378817486d6 tipc: block BH before using dst_cache
KASAN: stack-out-of-bounds Read in update_stack_state kernel 17 syz, C unreliable done 388 2401d 3096d 15/29 2187d 4ee7c60de83a init, tracing: Add initcall trace events
WARNING: bad unlock balance in rcu_core fs 4 syz, C inconclusive done 3578 2324d 2679d 15/29 2187d 10476e630422 locking/lockdep: Fix bad recursion pattern
general protection fault in qrtr_endpoint_post net arm-msm 2 syz, C done done 54 2224d 2242d 15/29 2194d 8ff41cc21714 net: qrtr: Fix an out of bounds read qrtr_endpoint_post()
invalid opcode in __phys_addr (2) netfilter 2 1 2237d 2237d 15/29 2201d c4e8fa9074ad netfilter: ipset: call ip_set_free() instead of kfree()
PANIC: double fault in fixup_bad_iret kernel 2 syz, C error 11753 2227d 2268d 15/29 2205d 5144f8a8dfd7 compiler_types.h: Add __no_sanitize_{address,undefined} to noinstr
general protection fault in __apic_accept_irq (2) kvm-x86 2 syz, C done 9 2241d 2237d 15/29 2205d 9d3c447c72fb KVM: X86: Fix async pf caused null-ptr-deref
KCSAN: data-race in copy_process / release_task kernel 6 154 2234d 2362d 15/29 2205d c17d1a3a8ee4 fork: annotate data race in copy_process()
KASAN: use-after-free Read in dmabuffs_dname media dri 19 1 2355d 2351d 15/29 2205d 4ab59c3c638c dma-buf: Move dma_buf_release() from fops to dentry_ops
WARNING in enqueue_task_dl kernel -1 syz, C done 13 2249d 2826d 15/29 2205d 740797ce3a12 sched/core: Fix PI boosting between RT and DEADLINE tasks
KCSAN: data-race in copy_process / copy_process (2) mm 6 294 2234d 2412d 15/29 2205d c17d1a3a8ee4 fork: annotate data race in copy_process()
PANIC: double fault in check_preemption_disabled kernel 2 syz, C 2181 2236d 2240d 15/29 2205d c7aadc09321d x86/entry: Increase entry_stack size to a full page
memory leak in nbd_add_socket nbd 3 syz, C 1 2327d 2327d 15/29 2205d 579dd91ab3a5 nbd: Fix memory leak in nbd_add_socket
WARNING in xfrm_policy_insert net -1 syz, C inconclusive done 6 2250d 3103d 15/29 2208d ed17b8d377ea xfrm: fix a warning in xfrm_policy_insert_list
BUG: unable to handle kernel paging request in netif_receive_generic_xdp 8 syz, C done done 160 2263d 2399d 15/29 2209d 96aa1b22bd6b tun: correct header offsets in napi frags mode
WARNING in iomap_apply iomap -1 syz, C done 25 2276d 2316d 15/29 2216d 175efa81feb8 ext4: fix EXT4_MAX_LOGICAL_BLOCK macro ext4: fix EXT4_MAX_LOGICAL_BLOCK macro
KASAN: use-after-free Read in sock_def_write_space arm-msm net 19 syz, C done 67 2217d 2582d 15/29 2216d a9b111016235 llc: make sure applications use ARPHRD_ETHER
KASAN: slab-out-of-bounds Read in qrtr_endpoint_post arm-msm net 17 syz, C 8 2239d 2239d 15/29 2216d 8ff41cc21714 net: qrtr: Fix an out of bounds read qrtr_endpoint_post()
memory leak in qdisc_create_dflt net 3 syz, C 1 2235d 2231d 15/29 2216d 306381aec7c2 net_sched: fix a memory leak in atm_tc_init()
KASAN: vmalloc-out-of-bounds Read in netdev_name_node_lookup_rcu wireguard 17 1 2237d 2237d 15/29 2216d bf64ff4c2aac genetlink: get rid of family->attrbuf
WARNING in hsr_dev_finalize net -1 syz, C error 1546 2224d 2240d 15/29 2216d ccfc9df1352b hsr: fix interface leak in error path of hsr_dev_finalize()
kernel BUG at net/l2tp/l2tp_core.c:LINE! net -1 syz, C 10 2241d 2237d 15/29 2216d c9a368f1c0fb bpf: net: Avoid incorrect bpf_sk_reuseport_detach call
KASAN: vmalloc-out-of-bounds Read in tipc_nl_publ_dump tipc 17 syz, C 22 2222d 2240d 15/29 2216d bf64ff4c2aac genetlink: get rid of family->attrbuf
KASAN: use-after-free Read in netdev_name_node_lookup_rcu wireguard 19 syz, C error 17 2226d 2237d 15/29 2216d bf64ff4c2aac genetlink: get rid of family->attrbuf
KASAN: use-after-free Read in nl8NUM_dump_wpan_phy (2) wpan 19 syz, C 18 2226d 2240d 15/29 2216d bf64ff4c2aac genetlink: get rid of family->attrbuf
possible deadlock in dev_uc_sync_multiple (2) net 4 26 2227d 2237d 15/29 2216d be74294ffa24 net: get rid of lockdep_set_class_and_subclass()
KASAN: vmalloc-out-of-bounds Read in __nla_validate_parse tipc 17 7 2223d 2239d 15/29 2216d bf64ff4c2aac genetlink: get rid of family->attrbuf
KASAN: use-after-free Read in tipc_nl_publ_dump (2) tipc 19 syz, C 14 2225d 2237d 15/29 2216d bf64ff4c2aac genetlink: get rid of family->attrbuf
KASAN: use-after-free Read in tipc_nl_node_dump_monitor_peer (2) tipc 19 syz, C 54 2224d 2239d 15/29 2216d bf64ff4c2aac genetlink: get rid of family->attrbuf
KASAN: use-after-free Read in tipc_udp_nl_dump_remoteip (2) tipc 19 syz, C 9 2224d 2244d 15/29 2216d bf64ff4c2aac genetlink: get rid of family->attrbuf
KASAN: use-after-free Read in devlink_get_from_attrs net 19 syz, C 25 2224d 2237d 15/29 2216d bf64ff4c2aac genetlink: get rid of family->attrbuf
WARNING in warn_bad_map mptcp -1 1 2248d 2244d 15/29 2216d 9c29e3615274 mptcp: fix DSS map generation on fin retransmission
KASAN: vmalloc-out-of-bounds Read in nl8NUM_dump_wpan_phy wpan 17 syz, C 145 2222d 2243d 15/29 2216d bf64ff4c2aac genetlink: get rid of family->attrbuf
KASAN: vmalloc-out-of-bounds Read in __cfg8NUM_wpan_dev_from_attrs wpan 17 4 2225d 2239d 15/29 2216d bf64ff4c2aac genetlink: get rid of family->attrbuf
KASAN: use-after-free Read in tipc_nl_node_dump_link tipc 19 syz, C error 10 2230d 2240d 15/29 2216d bf64ff4c2aac genetlink: get rid of family->attrbuf
KASAN: use-after-free Read in dev_get_by_name wireguard 19 syz, C 4 2231d 2237d 15/29 2216d bf64ff4c2aac genetlink: get rid of family->attrbuf
KASAN: vmalloc-out-of-bounds Read in tipc_nl_node_dump_monitor_peer tipc 17 syz, C error 9 2225d 2243d 15/29 2216d bf64ff4c2aac genetlink: get rid of family->attrbuf
BUG: unable to handle kernel NULL pointer dereference in tomoyo_domain_quota_is_ok (2) tomoyo 10 7 2240d 2255d 15/29 2219d 3021e69219e2 kcov: check kcov_softirq in kcov_remote_stop()
general protection fault in unpin_user_pages mm 2 syz, C done 13 2277d 2277d 15/29 2219d f78cdbd75a57 rds: fix crash in rds_info_getsockopt()
KASAN: use-after-free Write in bpf_link_put bpf 22 2 2295d 2297d 15/29 2219d 138c67677ff5 bpf: Fix use-after-free of bpf_link when priming half-fails
KASAN: use-after-free Write in fsnotify_detach_connector_from_object fs 22 syz, C done 4 2250d 2254d 15/29 2219d ef1548adada5 proc: Use new_inode not new_inode_pseudo
KASAN: use-after-free Read in ip_icmp_error net 19 syz, C done 14 2270d 2271d 15/29 2219d 239174945dac tcp: tcp_v4_err() icmp skb is named icmp_skb
BUG: unable to handle kernel NULL pointer dereference in schedule_timeout usb 10 1 2240d 2240d 15/29 2219d 3021e69219e2 kcov: check kcov_softirq in kcov_remote_stop()
KASAN: use-after-free Write in ath9k_htc_rx_msg wireless 22 syz, C 93 2255d 2332d 15/29 2219d e4ff08a4d727 ath9k: Fix use-after-free Write in ath9k_htc_rx_msg
BUG: using smp_processor_id() in preemptible [ADDR] code: syz-executor 4 syz, C done 22297 2264d 2603d 15/29 2219d 1378817486d6 tipc: block BH before using dst_cache
KASAN: slab-out-of-bounds Read in vsscanf lsm 17 syz, C done 61 2229d 2332d 15/29 2219d 84e99e58e8d1 Smack: slab-out-of-bounds in vsscanf
KASAN: slab-out-of-bounds Read in ip_icmp_error net 17 syz, C done 13 2270d 2271d 15/29 2219d 239174945dac tcp: tcp_v4_err() icmp skb is named icmp_skb
WARNING: proc registration bug in snmp6_register_dev net -1 syz, C done 14 2246d 2312d 15/29 2219d de0083c7ed7d hsr: avoid to create proc file after unregister
KASAN: null-ptr-deref Write in choke_reset 12 syz, C done 1441 2275d 2308d 15/29 2219d 8738c85c72b3 sch_choke: avoid potential panic in choke_reset()
KASAN: slab-out-of-bounds Write in snd_usb_mixer_notify_id usb sound 21 syz, C done 39 2238d 2243d 15/29 2219d 220345e98f1c ALSA: usb-audio: Fix OOB access of mixer element list
BUG: unable to handle kernel NULL pointer dereference in number fs 10 1 2249d 2245d 15/29 2219d 3021e69219e2 kcov: check kcov_softirq in kcov_remote_stop()
KASAN: slab-out-of-bounds Write in snd_usb_mixer_interrupt sound usb 21 syz, C done 5 2241d 2243d 15/29 2219d 220345e98f1c ALSA: usb-audio: Fix OOB access of mixer element list
KASAN: use-after-free Read in vkms_dumb_create dri 19 syz done 2 2304d 2300d 15/29 2219d 0ea2ea42b31a drm/vkms: Hold gem object while still in-use
BUG: unable to handle kernel NULL pointer dereference in check_preemption_disabled (3) ext4 10 3 2249d 2249d 15/29 2219d 3021e69219e2 kcov: check kcov_softirq in kcov_remote_stop()
KASAN: use-after-free Read in inet_diag_bc_sk net 19 syz, C done 30 2294d 2296d 15/29 2219d ee1bd483cc06 inet_diag: bc: read cgroup id only for full sockets
memory leak in ctnetlink_del_conntrack netfilter 3 syz, C 1 2259d 2257d 15/29 2219d 6c2d2176a85e netfilter: ctnetlink: memleak in filter initialization error path
INFO: rcu detected stall in inet_sendmsg (2) perf 1 13 2220d 2304d 15/29 2219d df4953e4e997 sch_sfq: validate silly quantum values
linux-next boot error: WARNING: suspicious RCU usage in ipmr_get_table net -1 60 2291d 2299d 15/29 2219d 7013908c2db2 ipmr: Add lockdep expression to ipmr_for_each_table macro
BUG: unable to handle kernel NULL pointer dereference in dev_ifconf net 10 1 2249d 2249d 15/29 2219d 3021e69219e2 kcov: check kcov_softirq in kcov_remote_stop()
BUG: using smp_processor_id() in preemptible [ADDR] code: /NUM net 4 1 2276d 2276d 15/29 2219d 1378817486d6 tipc: block BH before using dst_cache
BUG: MAX_LOCKDEP_CHAINS too low! kernel -1 syz, C done 17240 2219d 2877d 15/29 2219d e7511f560f54 bonding: remove useless stats_lock_key 1a33e10e4a95 net: partially revert dynamic lockdep key changes
INFO: task hung in locks_remove_posix fs input usb 1 syz 2231 2254d 2277d 15/29 2219d 187b96db5ca7 x86/unwind/orc: Fix unwind_get_return_address_ptr() for inactive tasks
WARNING: refcount bug in crypto_mod_get crypto 13 syz, C done 2 2285d 2296d 15/29 2219d 6603523bf5e4 crypto: api - Fix use-after-free and race in crypto_spawn_alg
BUG: unable to handle kernel NULL pointer dereference in mpihelp_addmul_1 crypto 10 1 2249d 2249d 15/29 2219d 3021e69219e2 kcov: check kcov_softirq in kcov_remote_stop()
KASAN: slab-out-of-bounds Write in setup_udp_tunnel_sock (3) net 21 1 2269d 2269d 15/29 2219d d9a81a225277 l2tp: add sk_family checks to l2tp_validate_socket
linux-next test error: BUG: using smp_processor_id() in preemptible [ADDR] code: syz-fuzzer/6792 ext4 -1 1 2264d 2264d 15/29 2219d 811985365378 ext4: mballoc: Use this_cpu_read instead of this_cpu_ptr
KCSAN: data-race in __fat_write_inode / fat12_ent_get exfat 6 2 2330d 2324d 15/29 2219d b1b65750b8db fat: don't allow to mount if the FAT length == 0
KASAN: stack-out-of-bounds Write in ath9k_hif_usb_rx_cb wireless 21 syz, C 57 2255d 2328d 15/29 2219d 19d6c375d671 ath9x: Fix stack-out-of-bounds Write in ath9k_hif_usb_rx_cb
KASAN: slab-out-of-bounds Read in ovl_check_fb_len overlayfs 17 syz done 3 2276d 2275d 15/29 2219d 522f6e6cba68 ovl: fix out of bounds access warning in ovl_check_fb_len()
KASAN: use-after-free Read in usblp_bulk_read usb 19 7 2228d 2306d 15/29 2219d 296a193b0612 usblp: poison URBs upon disconnect
BUG: unable to handle kernel NULL pointer dereference in alloc_pages_vma mm 10 1 2249d 2245d 15/29 2219d 3021e69219e2 kcov: check kcov_softirq in kcov_remote_stop()
linux-next boot error: general protection fault in tomoyo_get_local_path fs -1 18 2276d 2282d 15/29 2219d 9d78edeaec75 proc: proc_pid_ns takes super_block as an argument
KASAN: use-after-free Read in htc_connect_service wireless 19 syz, C 41041 2254d 2332d 15/29 2219d ced21a4c726b ath9k: Fix use-after-free Read in htc_connect_service
KMSAN: uninit-value in tbf_enqueue net 7 21 2219d 2306d 15/29 2219d 9274124f023b net: stricter validation of untrusted gso packets
general protection fault in ima_free_template_entry lsm integrity 2 syz, C done 3 2242d 2262d 15/29 2219d 42413b49804b ima: Directly free *entry in ima_alloc_init_template() if digests is NULL
WARNING in kvm_inject_emulated_page_fault kvm-x86 -1 syz, C done 20 2243d 2262d 15/29 2219d 7a35e515a705 KVM: VMX: Properly handle kvm_read/write_guest_virt*() result
general protection fault in kobject_get (2) kernel 2 2 2248d 2277d 15/29 2219d 11a0ae4c4bff RDMA: Allow ib_client's to fail when add() is called
general protection fault in fq_codel_enqueue net 2 syz, C done 25 2224d 2308d 15/29 2219d 9274124f023b net: stricter validation of untrusted gso packets
BUG: unable to handle kernel NULL pointer dereference in create_empty_buffers ext4 10 1 2260d 2256d 15/29 2219d 3021e69219e2 kcov: check kcov_softirq in kcov_remote_stop()
memory leak in crypto_create_tfm crypto 3 syz, C 14 2247d 2263d 15/29 2219d 819966c06b75 crypto: drbg - always try to free Jitter RNG instance
WARNING in memtype_reserve -1 syz, C done 600 2280d 2288d 15/29 2219d a0e710a7def4 USB: usbfs: fix mmap dma mismatch
general protection fault in put_cmsg net 2 syz, C done 3 2284d 2285d 15/29 2219d 1b2f08df0a88 ipv6: set msg_control_is_user in do_ipv6_getsockopt
WARNING in usbhid_raw_request/usb_submit_urb (3) usb -1 syz 18 2298d 2404d 15/29 2219d ac854131d984 USB: core: Fix misleading driver bug report
memory leak in nf_tables_parse_netdev_hooks (3) netfilter 3 syz, C 1 2259d 2257d 15/29 2219d 3003055f5066 netfilter: nf_tables: hook list memleak in flowtable deletion
general protection fault in proc_kill_sb fs 2 8 2244d 2256d 15/29 2219d 058f2e4da79b proc: s_fs_info may be NULL when proc_kill_sb is called
INFO: trying to register non-static key in io_cqring_ev_posted (3) fs -1 syz, C done 3 2278d 2280d 15/29 2219d 583863ed9181 io_uring: initialize ctx->sqo_wait earlier
BUG: unable to handle kernel paging request in do_xdp_generic 8 syz, C done done 7444 2293d 2399d 15/29 2219d 96aa1b22bd6b tun: correct header offsets in napi frags mode
KASAN: slab-out-of-bounds Read in inet_diag_bc_sk net 17 syz, C done 45 2294d 2296d 15/29 2219d ee1bd483cc06 inet_diag: bc: read cgroup id only for full sockets
BUG: stack guard page was hit in deref_stack_reg kernel -1 2 2284d 2344d 15/29 2219d dd912306ff00 net: fix a potential recursive NETDEV_FEAT_CHANGE
INFO: task syz-executor can't die for more than 143 seconds. (2) -1 syz, C done 2512 2220d 2487d 15/29 2219d 566d136289dc pipe: Fix pipe_full() test in opipe_prep().
BUG: unable to handle kernel NULL pointer dereference in debug_smp_processor_id (2) net 10 3 2241d 2248d 15/29 2219d 3021e69219e2 kcov: check kcov_softirq in kcov_remote_stop()
net-next test error: KASAN: use-after-free Write in afs_wake_up_async_call afs -1 60 2241d 2249d 15/29 2219d 0041cd5a5044 rxrpc: Fix notification call on completion of discarded calls
BUG: unable to handle kernel NULL pointer dereference in net_rx_queue_update_kobjects net 10 1 2249d 2249d 15/29 2219d 3021e69219e2 kcov: check kcov_softirq in kcov_remote_stop()
general protection fault in erspan_validate net 2 syz, C done 520 2285d 2292d 15/29 2219d 51fa960d3b51 erspan: Check IFLA_GRE_ERSPAN_VER is set.
bpf test error: BUG: using smp_processor_id() in preemptible code in ext4_mb_new_blocks ext4 -1 48 2248d 2251d 15/29 2219d 811985365378 ext4: mballoc: Use this_cpu_read instead of this_cpu_ptr
kernel BUG at arch/x86/mm/physaddr.c:LINE! (5) serial -1 syz, C done 241 2223d 2296d 15/29 2219d 57d38f26d81e vt: fix unicode console freeing with a common interface
WARNING: refcount bug in crypto_destroy_tfm crypto 13 syz, C done 4 2298d 2321d 15/29 2219d 6603523bf5e4 crypto: api - Fix use-after-free and race in crypto_spawn_alg
general protection fault in inet_unhash net 2 syz, C done 40 2240d 2269d 15/29 2219d 02c71b144c81 l2tp: do not use inet_hash()/inet_unhash()
BUG: unable to handle kernel NULL pointer dereference in direct_page_fault kvm-x86 10 1 2249d 2245d 15/29 2219d 3021e69219e2 kcov: check kcov_softirq in kcov_remote_stop()
linux-next boot error: WARNING: suspicious RCU usage in bpq_device_event net -1 6 2282d 2283d 15/29 2219d 95f59bf88bb7 drivers: net: hamradio: Fix suspicious RCU usage warning in bpqether.c
BUG: unable to handle kernel NULL pointer dereference in try_async_pf kvm-x86 10 1 2249d 2245d 15/29 2219d 3021e69219e2 kcov: check kcov_softirq in kcov_remote_stop()
BUG: unable to handle kernel NULL pointer dereference in unlock_page fs mm 10 1 2251d 2251d 15/29 2219d 3021e69219e2 kcov: check kcov_softirq in kcov_remote_stop()
KASAN: use-after-free Read in rpc_net_ns net nfs 19 syz done 10 2284d 2290d 15/29 2219d 31e9a7f35352 SUNRPC: fix use-after-free in rpc_free_client_work()
WARNING in tipc_msg_append tipc -1 syz, C done 107 2246d 2260d