Applied filters: WithRepro (drop)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
possible deadlock in br_multicast_rcv (3) bridge 4 syz, C done error 76 23d 1308d 2/29 never bridge: mcast: Fix a false positive lockdep splat
KASAN: wild-memory-access Read in md5_update prio:high crypto 17 syz, C done 8 344d 344d 2/29 never fixup: mm/gup: remove record_subpages()
WARNING in set_mm_walk prio:high mm -1 C 2 4d14h 6d02h 1/29 never memcg: make the v1 soft limit knob inert
UBSAN: array-index-out-of-bounds in snd_dummy_probe sound prio:normal 15 syz, C 14 12d 11d 1/29 never ALSA: dummy: Check card index validity at probe
KASAN: use-after-free Read in check_dirent fs 19 syz, C done 13 359d 541d 2/29 never bcachefs: Fix UAF in check_dirent()
KASAN: slab-use-after-free Write in bch2_do_discards prio:high fs 22 syz 137 321d 391d 2/29 never bcachefs: Fix UAF by journal write path
WARNING: suspicious RCU usage in mas_walk (3) mm 4 syz, C done 12 1027d 1041d 1/29 never mempolicy: migration attempt to match interleave nodes: fix
KASAN: null-ptr-deref Write in sys_io_uring_register mm 12 syz, C done 15 613d 620d 1/29 never xarray-extract-helper-from-__xa_insertcmpxchg-fix
kernel BUG in __journal_res_get (3) prio:high fs -1 syz, C inconclusive 175 300d 424d 2/29 never bcachefs: Fix __bch2_fs_read_write() error path
BUG: unable to handle kernel paging request in azx_probe_work sound prio:high 8 syz, C 66 2h21m 11d 1/29 never ALSA: hda/intel: Add sanity check for BAR0 size
possible deadlock in zd_chip_disable_rxtx usb wireless 4 syz, C 44 17d 2075d 2/29 never wifi: zd1211rw: reject secondary interfaces to prevent conflicts
WARNING in ieee80211_encrypt_tx_skb prio:low wireless -1 syz, C 4 16d 35d 2/29 never wifi: mac80211: don't encrypt pre-auth (ETH_P_PREAUTH) frames
KASAN: use-after-free Read in em28xx_close_extension (2) prio:high usb media 19 syz, C error 17 13d 696d 1/29 never media: em28xx: defer audio-only extension registration
KASAN: slab-out-of-bounds Read in ieee80211_ie_split_ric (3) prio:normal wireless 17 syz, C 2 19d 38d 27/29 never a2f5286ca4f3 wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie()
WARNING in virtio_transport_send_pkt_info (2) prio:high kvm net virt -1 syz, C error 4 18d 262d 1/29 never vsock/virtio: restore msg_iter on transmission failure
WARNING in bch2_dev_free (2) prio:low fs -1 syz, C done 5 390d 395d 2/29 never bcachefs: Fix __bch2_fs_read_write() error path
BUG: unable to handle kernel paging request in snd_hdac_bus_parse_capabilities prio:high sound 8 C 8 4d16h 6d02h 1/29 never ALSA: hda/intel: Add sanity check for BAR0 size
KMSAN: uninit-value in bch2_check_subvols prio:high fs 7 syz, C 53 322d 411d 2/29 never bcachefs: Fix missing compat code in check_subvol()
memory leak in vidtv_psi_registration_desc_init prio:high media 3 syz, C 2 27d 33d 1/29 never media: dvb-core: fix feed leak on failed DMX_ADD_PID
KASAN: slab-use-after-free Read in do_sync_mmap_readahead prio:high mm 19 syz, C done 3 421d 424d 2/29 never mm-filemap-allow-arch-to-request-folio-size-for-exec-memory-fix
WARNING in iomap_write_begin xfs iomap -1 syz, C error 6 719d 733d 1/29 never vfs: Fix implicit conversion problem when testing overflow case
KASAN: slab-use-after-free Read in finish_fault mm 19 syz, C done 8 792d 794d 1/29 never mm-memory-extend-finish_fault-to-support-large-folio-fix
memory leak in l2tp_tunnel_create (2) net prio:high 3 syz, C 1 10d 9d09h 20/29 never 9006c116dd11 l2tp: fix tunnel and session refcount leak on seq_file release
KASAN: slab-out-of-bounds Write in bch2_dirent_init_name prio:high fs 21 syz, C error 1496 300d 425d 2/29 never bcachefs: Fix padding zeroout when creating casefolded dirents
KASAN: slab-use-after-free Write in bch2_get_next_dev prio:high fs 22 syz, C 1331 300d 394d 2/29 never bcachefs: Fix UAF by journal write path
memory leak in inet_create (3) net prio:high 3 syz, C 1 8d04h 8d02h 20/29 never 9006c116dd11 l2tp: fix tunnel and session refcount leak on seq_file release
INFO: task hung in invalidate_inode_pages2_range (3) prio:high fs 1 syz, C done 57 68d 534d 2/29 never bcachefs: Fix readahead involved deadlock
INFO: task hung in bch2_readahead prio:high fs 1 syz, C done 375 337d 818d 2/29 never bcachefs: Fix readahead involved deadlock
possible deadlock in lock_timer_base trace bpf 4 syz, C 142 578d 2051d 1/29 never kfence: fix potential deadlock due to wake_up()
WARNING in folio_add_new_anon_rmap prio:high mm -1 syz, C error 14 155d 154d 2/29 never userfaultfd-introduce-struct-mfill_state-fix
general protection fault in usbtest_probe usb prio:low 8 syz, C 16 14d 19d 1/29 never usb: usbtest: disable dynamic ID support
INFO: task hung in bchfs_fallocate (2) fs 1 syz, C done inconclusive 6 364d 592d 2/29 never bcachefs: Fix readahead involved deadlock
INFO: task hung in bch2_page_fault prio:high ext4 exfat ntfs3 1 syz done 42 361d 611d 2/29 never bcachefs: Fix readahead involved deadlock
WARNING in bch2_fs_journal_start prio:high fs -1 syz, C done 14 422d 442d 2/29 never bcachefs: Don't allow mounting with crazy numbers of dirty journal entries
memory leak in try_get_usb_function_instance usb prio:low 3 syz, C 1 7d05h 17d 1/29 never usb: gadget: midi2: remove default configfs groups on teardown
INFO: task hung in bchfs_fpunch (2) prio:high fs mm 1 syz, C done 2 374d 418d 2/29 never bcachefs: Fix readahead involved deadlock
possible deadlock in configfs_rmdir prio:low fs 4 syz, C error 1414 7m 19d 1/29 never usb: gadget: f_tcm: fix deadlock in usbg_make_tpg()
general protection fault in dummy_timer (2) prio:high usb 19 syz, C 96 20d 630d 28/29 never d5e5cd3654d2 usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback
general protection fault in __bch2_err_trace prio:normal fs 2 syz, C done 25 320d 376d 2/29 never bcachefs: Delete faulty read_only/nochanges check in fs_open()
KASAN: slab-out-of-bounds Read in usbatm_usb_disconnect prio:high usb 17 syz, C 19 26d 30d 20/29 never usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect
INFO: task hung in pipe_release (6) prio:high kernfs 1 syz done 20 71d 535d 2/29 never bcachefs: Fix readahead involved deadlock
KMSAN: uninit-value in bch2_alloc_sectors_start_trans (2) prio:high fs 7 syz 875 321d 487d 2/29 never bcachefs: Add missing ei_last_dirtied update
WARNING in page_add_anon_rmap mm -1 syz, C done 1041 1062d 1063d 1/29 never mm-rmap-simplify-pageanonexclusive-sanity-checks-when-adding-anon-rmap-fix
UBSAN: array-index-out-of-bounds in uea_bind usb prio:high 15 syz, C 86 12h14m 16d 2/29 never usb: atm: ueagle-atm: fix array-index-out-of-bounds in uea_bind()
KASAN: invalid-free in hci_req_sync_complete bluetooth 24 syz 179 772d 846d 1/29 never Bluetooth: Fix double free in hci_req_sync_complete
general protection fault in vma_is_shmem mm io-uring 2 syz, C error 28 1455d 1456d 1/29 never mm/gup.c: Fix return value for __gup_longterm_locked()
WARNING in cxacru_cm/usb_submit_urb (3) usb prio:high -1 syz, C 86 3d06h 16d 17/29 never usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm()
WARNING in vmap_pages_range_noflush (2) net bpf -1 syz, C error 250 1454d 1456d 1/29 never mm/gup.c: Fix return value for __gup_longterm_locked()
KASAN: slab-use-after-free Read in cxacru_poll_status usb prio:high 19 syz 19 2d20h 16d 2/29 never usb: atm: cxacru: fix use-after-free in cxacru_poll_status
KMSAN: uninit-value in __bch2_alloc_v4_to_text prio:high fs 7 syz, C 3 420d 425d 2/29 never bcachefs: Fix refs to undefined fields in __bch2_alloc_v4_to_text()
WARNING in udf_free_blocks (3) prio:high udf -1 syz, C error 5 53d 57d 2/29 never udf: avoid recursive s_alloc_mutex deadlock when freeing AED blocks
general protection fault in shmem_mapping mm 2 syz, C done 17 546d 548d 1/29 never mm/huge_memory: do not drop the original folio during truncate
WARNING in __dev_queue_xmit (6) net prio:low -1 syz, C error 21 8d16h 6d11h 20/29 never 6bcd76c134c5 af_packet: Don't send zero-byte data in tpacket_snd().
WARNING in udf_open_lvid prio:low udf -1 syz, C 51 12h48m 90d 2/29 never udf: Mark LVID buffer as uptodate before marking it dirty
UBSAN: array-index-out-of-bounds in bch2_accounting_validate prio:high fs 15 syz, C done 23 310d 377d 2/29 never bcachefs: Ignore accounting key type larger than BCH_DISK_ACCOUNTING_TYPE_NR
WARNING in bchfs_truncate fs -1 syz, C done 366 324d 834d 2/29 never bcachefs: Increase BCH_MIN_NR_NBUCKETS
INFO: task hung in genl_rcv_msg (4) net 1 syz, C done 880 7h43m 683d 28/29 never 22f8aa35964e tipc: fix infinite loop in __tipc_nl_compat_dumpit
WARNING in rcu_note_context_switch (5) prio:low net -1 syz, C error 10 35d 233d 28/29 never 313a123e1fca ipv6: Change allocation flags to match rcu_read_lock section requirements
BUG: unable to handle kernel paging request in alloc_huge_page mm 8 syz, C unreliable 491 1829d 1828d 1/29 never mm/hugetlb: Initialize page to NULL in alloc_buddy_huge_page_with_mpol()
KASAN: null-ptr-deref Read in l2cap_chan_hold_unless_zero prio:high bluetooth 11 syz, C 8 9d06h 27d 1/29 never Bluetooth: L2CAP: fix race l2cap_sock_cleanup_listen() vs. put_chan
WARNING in spcp8x5_get_msr prio:low usb -1 syz, C 38 9h27m 11d 2/29 never USB: serial: spcp8x5: drop broken carrier detect support
KASAN: slab-use-after-free Read in ip6gre_tunnel_xmit prio:high net 19 syz, C error error 33 227d 635d 0/29 never ip6_gre: use skb_vlan_inet_prepare() instead of pskb_inet_may_pull()
INFO: task hung in __closure_sync prio:high fs 1 syz, C done 8591 308d 835d 2/29 never bcachefs: Increase BCH_MIN_NR_NBUCKETS
KASAN: slab-use-after-free Read in madvise_collapse mm 19 syz, C error 5 1120d 1120d 1/29 never mm/khugepaged: collapse_pte_mapped_thp() with mmap_read_lock(): fix
INFO: task hung in bch2_copygc_stop prio:high kernel 1 syz, C done 31386 308d 807d 2/29 never bcachefs: Increase BCH_MIN_NR_NBUCKETS
INFO: task hung in __bch2_fs_stop prio:high fs 1 syz, C done 1589 317d 792d 2/29 never bcachefs: Increase BCH_MIN_NR_NBUCKETS
possible deadlock in digi_set_modem_signals usb prio:high 4 syz, C error 6 7d13h 16d 2/29 never USB: serial: digi_acceleport: add port lock nesting annotation
memory leak in uss720_probe prio:high usb 3 syz, C 3 5d19h 31d 2/29 never USB: misc: uss720: Fix leak in get_1284_register
WARNING in __rt_mutex_slowlock_locked (3) prio:normal ocfs2 -1 syz, C error 3 56d 57d 2/29 never ocfs2: use inode_lock_nested() for orphan dir locking
KASAN: use-after-free Read in ocfs2_search_dirblock ocfs2 19 syz, C inconclusive 14 584d 730d 1/29 never ocfs2: fix directory entry check in ocfs2_search_dirblock()
kernel BUG in bch2_btree_repair_topology_recurse prio:high fs -1 syz, C done 7 321d 381d 2/29 never bcachefs: btree_check_root_boundaries()
kernel BUG in collapse_file (3) mm -1 syz, C done 14 1120d 1126d 1/29 never mm/khugepaged: collapse_pte_mapped_thp() with mmap_read_lock(): fix
UBSAN: shift-out-of-bounds in squashfs_xz_comp_opts prio:high squashfs -1 syz, C error 4 142d 180d 2/29 never Squashfs: check xz dictionary size isn't zero
kernel BUG in bch2_printbuf_exit prio:high fs -1 syz, C error 29 391d 395d 2/29 never bcachefs: convert str_hash.c to CLASS
possible deadlock in collapse_file mm 4 syz, C done 189 1260d 1261d 1/29 never mm/khugepaged: fix vm_lock/i_mmap_rwsem inversion in retract_page_tables
INFO: task hung in io_sq_thread_stop fs io-uring 1 syz, C done 211 2008d 2167d 1/29 never io_uring: don't sleep schedule in SQPOLL thread if we need to park
KASAN: use-after-free Read in __vma_adjust mm 19 syz, C done 10 1470d 1526d 1/29 never fs/userfaultfd: fix vma iteration in mas_for_each() loop
kernel BUG in btrfs_alloc_ordered_extent prio:high btrfs -1 syz, C error 280 2d13h 55d 1/29 never btrfs: always wait for ordered extents to avoid OE races
KASAN: null-ptr-deref Read in io_sqe_buffer_register prio:high io-uring 11 syz, C done 54 342d 346d 2/29 never fixup: mm/gup: remove record_subpages()
kernel BUG in do_bch2_trans_commit_to_journal_replay prio:normal fs -1 syz 22 389d 392d 2/29 never bcachefs: do_bch2_trans_commit_to_journal_replay handles accounting
kernel BUG in bch2_btree_path_peek_slot prio:low fs -1 syz, C error error 1546 447d 625d 2/29 never bcachefs: fix assert in bch2_btree_path_traverse_cached()
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb (2) prio:high bluetooth 19 syz error 135 7h00m 684d 1/29 never Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN
WARNING in res_to_rt rdma prio:low -1 syz 910 3d15h 8d06h 1/29 never RDMA/cma: Fix WARNING in res_to_rt
KASAN: use-after-free Read in check_extent_overbig prio:high fs 19 syz, C done done 18 337d 619d 2/29 never bcachefs: fix check_extent_overbig() call
BUG: sleeping function called from invalid context in procfs_procmap_ioctl fs 5 syz done 101 408d 410d 2/29 never mm/maps: move kmalloc() call location in do_procmap_query() out of RCU critical section
possible deadlock in ocfs2_init_acl prio:high ocfs2 4 syz, C inconclusive 31566 2h46m 724d 1/29 never ocfs2: fix circular locking dependency in ocfs2_init_acl()
WARNING in bch2_prt_printf prio:high fs -1 syz, C done error 103 323d 828d 2/29 never bcachefs: journal_entry_btree_keys_to_text() is more careful
general protection fault in bch2_prt_vprintf fs 2 syz, C error inconclusive 4 588d 625d 2/29 never bcachefs: journal_entry_btree_keys_to_text() is more careful
INFO: task hung in __writeback_inodes_sb_nr (6) prio:high jfs 1 syz, C done 4176 39d 1157d 1/29 never PM: hibernate: Fix block device handling in test_resume mode
INFO: rcu detected stall in kvm_vcpu_ioctl (4) prio:high kvm kvm-x86 1 syz, C error 8 9d23h 232d 1/29 never KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock
WARNING in super_dev_register prio:normal fuse -1 syz, C 10 42d 45d 2/29 never block: reject block device inodes with i_rdev == 0 in lookup_bdev()
KMSAN: uninit-value in erspan_build_header (2) net 7 syz, C 346 71d 877d 1/29 never bpf: Don't redirect too small packets
general protection fault in ar_context_release linux1394 prio:high 2 syz, C 8 12d 10d 20/29 never 42d217add8d8 firewire: ohci: fix NULL pointer dereference in ar_context_release
KMSAN: uninit-value in batadv_get_vid (2) batman 7 syz, C 1212 60d 957d 1/29 never bpf: Don't redirect too small packets
possible deadlock in ocfs2_acquire_dquot prio:high ocfs2 4 syz, C 71841 243d 686d 2/29 never ocfs2: fix circular locking dependency in ocfs2_acquire_dquot
WARNING in vcpu_run (2) prio:high kvm-x86 -1 syz, C error 5 27d 57d 1/29 never KVM: x86: Don't WARN if IRQ disappears because it was cleared from the PIC
kernel BUG in link_path_walk prio:high ocfs2 -1 syz, C error 21008 now 256d 2/29 never ocfs2: do not use make_bad_inode() in ocfs2_read_inode_block_full()
WARNING in vma_merge mm -1 syz, C done 18115 993d 1572d 1/29 never mm/mlock: use maple state in apply_mlockall_flags()
WARNING in nvmet_fc_register_targetport nvme prio:high -1 C 2 3d17h 5d02h 0/29 never nvmet-fc: fix invalid free in LS IOD error path
KMSAN: kernel-infoleak in filemap_read prio:high block 18 syz, C 9090 61d 946d 1/29 never ntfs3: fix info-leak in ntfs_rename()
INFO: task hung in exit_mmap (2) prio:low mm 1 syz, C done error 59 117d 478d 2/29 never bpf: Fix mmap_lock leak in irq_work path
WARNING in netfs_writepages (3) prio:high netfs -1 syz, C 12 20d 41d 26/29 never 1d78d56c43ef netfs: Fix folio_queue ENOMEM in writeback by adding a mempool
WARNING in nf_flow_offload_ip_hook netfilter prio:normal -1 syz, C done 9 13d 12d 25/29 never 8aecf0bbcc72 netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()
INFO: task hung in remove_one prio:low kernel 1 syz error 279 19h25m 587d 2/29 never netdevsim: drop the ability to change max_vfs via debugfs
INFO: trying to register non-static key in f2fs_exist_written_data prio:high f2fs -1 syz, C error 152 90d 100d 2/29 never f2fs: initialize ino_entry_info before checkpoint load
memory leak in udp_tunnel_nic_netdevice_event prio:high net 3 syz, C 6 23d 23d 27/29 never 080695e6f005 net: udp_tunnel: fix memory leak in udp_tunnel_nic_unregister()
general protection fault in vma_interval_tree_remove mm 10 syz, C done 14 809d 1567d 1/29 never mm/mmap: fix advanced maple tree API for mmap_region() mm/mmap: qvoid dereferencing next on null in BUG_ON()
kernel BUG in f2fs_abort_atomic_write f2fs -1 syz 2 1278d 1322d 1/29 never f2fs: fix to avoid race condition of f2fs_abort_atomic_write()
memory leak in vlan_vid_add prio:normal net 3 syz, C 1 26d 40d 28/29 never dcf15eaf5641 net: hsr: fix memory leak on slave unregistration by removing synced VLANs
KASAN: slab-use-after-free Read in mremap mm 19 syz, C done 122 362d 365d 2/29 never mm/mremap: do not incorrectly reference invalid VMA in VM_WARN_ON_ONCE()
WARNING in netdev_queue_get_dma_dev net prio:low -1 syz, C 279 5h00m 12d 20/29 never 92465f46f3c3 net: expect instance lock in netdev_queue_get_dma_dev()
KASAN: slab-out-of-bounds Read in copy_from_sockptr prio:high net 17 syz 25 6d12h 12d 25/29 never d0c80dbb9704 net/atm: fix slab-out-of-bounds read in vcc_setsockopt()
WARNING in hv_tlb_flush_enqueue prio:high kvm-x86 -1 syz, C 2 55d 55d 2/29 never KVM: x86/hyperv: Ensure vCPU's Hyper-V object is initialized on cross-vCPU accesses
kernel BUG in mfill_atomic_copy mm -1 syz, C error 3 1133d 1129d 1/29 never mm: userfaultfd: check for start + len overflow in validate_range: fix
KASAN: use-after-free Read in em28xx_init_extension (2) prio:high usb media 19 syz, C done 1461 11d 1600d 1/29 never media: em28xx: fix use-after-free of dev_next->devlist on disconnect
KASAN: slab-use-after-free Read in move_pages_pte mm 19 syz, C done 3 619d 617d 1/29 never mm: pgtable: make ptlock be freed by RCU
kernel BUG in swap_cgroup_record (2) prio:high mm cgroups -1 syz, C error 227 215d 219d 2/29 never mm/swap_cgroup: fix kernel BUG in swap_cgroup_record
WARNING: kmalloc bug in memslot_rmap_alloc kvm-x86 -1 syz, C unreliable 3 1776d 1806d 1/29 never KVM: replace large kvmalloc allocation with vmalloc
INFO: task hung in remove_inode_hugepages mm fs 1 syz, C done 52 677d 769d 1/29 never INFO: task hung in remove_inode_hugepages
WARNING in __page_table_check_ptes_set (3) prio:low mm -1 syz, C 13 45d 276d 2/29 never mm/userfaultfd: clear uffd-wp PTE state when re-registering without WP
kernel BUG in vma_replace_policy mm -1 syz, C done 6 1067d 1076d 1/29 never mm: lock VMAs skipped by a failed queue_pages_range()
WARNING in folio_memcg prio:low mm -1 syz, C done 3851 244d 727d 1/29 never mm: kmem: fix split_page_memcg()
general protection fault in follow_pfnmap_start kernel 2 syz, C 38 670d 684d 1/29 never mm: fix null pointer dereference in pfnmap_lockdep_assert
BUG: unable to handle kernel NULL pointer dereference in set_page_dirty f2fs 10 syz, C 317 737d 1452d 1/29 never f2fs: fix missing mapping caused by the mount/umount race
KASAN: use-after-free Read in bch2_check_dirents fs 19 syz, C done 769 320d 639d 2/29 never bcachefs: Fix UAF in check_dirent()
kernel BUG in free_bprm fs mm -1 syz, C done 445 648d 649d 1/29 never exec: NULL out bprm->argv0 when it is an ERR_PTR
possible deadlock in ext4_evict_inode (5) prio:high ext4 4 syz, C error 586 1d09h 284d 1/29 never ext4: fix circular lock dependency in ext4_ext_migrate
possible deadlock in wait_transaction_locked (3) prio:high ext4 4 syz, C error 883 3h35m 229d 1/29 never ext4: skip extra isize expansion during mount to prevent deadlock
INFO: task hung in do_rmdir (7) prio:high kernfs 1 syz, C error error 3 214d 225d 1/29 never ext4: stop retrying saturated xattr cache entries
WARNING in ext4_xattr_inode_update_ref (2) prio:low ext4 -1 syz, C error 15004 now 290d 1/29 never ext4: validate EA inode i_nlink in ext4_xattr_inode_iget
KASAN: slab-use-after-free Read in __ext4_check_dir_entry prio:high ext4 19 syz, C error error 7 10d 412d 1/29 never ext4: validate readdir offset before accessing dirent
WARNING in follow_pte kernel -1 syz, C 230 694d 774d 1/29 never mm: fix mmap_assert_locked() in follow_pte()
WARNING in handle_userfault mm -1 syz, C error 71 1131d 1138d 1/29 never mm: fix a lockdep issue in vma_assert_write_locked
KASAN: use-after-free Read in jfs_lazycommit prio:high jfs 19 syz, C error 4231 22h14m 1415d 0/29 never From 7e1a0b91e9efa8bec40fc5397ba6c4e683d72df0 Mon Sep 17 00:00:00 2001
KASAN: slab-use-after-free Read in handle_mm_fault mm 19 syz, C done 107 758d 761d 1/29 never mm: check for VM_DROPPABLE in vma prior to handling mm fault
KASAN: slab-use-after-free Read in hidraw_report_event prio:high input usb 19 syz, C error 4 111d 111d 1/29 never HID: core: quiesce input in hid_hw_stop() to prevent use-after-free hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop
KASAN: slab-out-of-bounds Read in shrink_folio_list mm 19 syz, C 683 1134d 1134d 1/29 never mm: call folio_mapping() inside folio_needs_release()
WARNING in asus_remove prio:low input usb -1 syz, C 273 8h49m 199d 2/29 never HID: asus: Add check for cancelling fn_lock_sync_work
WARNING in release_mtd_partition (2) mtd -1 syz, C 304 30d 418d 29/29 8d07h 9d4af746af8c mtd: fix double free and WARN_ON in add_mtd_device() error paths
WARNING in add_mtd_device mtd prio:low -1 syz, C 14 30d 57d 29/29 8d07h ae9d8058f132 mtd: mtdpart: fix uninitialized erasesize on MTDPART_OFS_RETAIN error path a74e31d0a2d5 mtd: mtdpart: validate partition bounds in mtd_add_partition()
kernel BUG in gfs2_jindex_free (2) prio:high gfs2 -1 syz, C error error 1398 124d 429d 29/29 13d bb47cce7a1ee gfs2: gfs2_log_flush withdraw fixes
WARNING in kernfs_new_node (3) prio:high kernfs -1 syz error error 54 62d 727d 29/29 19d e2674dfbed8a usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect()
KASAN: slab-use-after-free Read in debugfs_u32_get (2) prio:normal fs 19 syz 1 50d 60d 29/29 19d 2e996ca81f95 netdevsim: remove ethtool debugfs files before freeing netdev
general protection fault in mtree_load prio:low trace 2 syz, C 3 47d 55d 29/29 19d 169328645663 uprobes/x86: Use proper mm_struct in __in_uprobe_trampoline
KASAN: slab-use-after-free Read in netfs_unbuffered_write prio:high netfs 19 syz, C 8 47d 79d 29/29 19d 64f04f978923 netfs: Fix DIO write retry for filesystems without a ->prepare_write()
possible deadlock in ext4_xattr_inode_lookup_create prio:high ext4 4 syz, C done error 287 87d 687d 29/29 26d 7f473f971382 ext4: lockdep: handle i_data_sem subclassing for special inodes
KMSAN: uninit-value in hfsplus_bnode_find prio:high hfs 7 syz, C 24 60d 124d 29/29 32d d67aadee19ff hfs/hfsplus: zero-initialize buffer in hfs_bnode_read 3f95e2661574 hfsplus: Add a sanity check for btree node size
WARNING in dma_resv_add_fence prio:high media dri -1 syz, C 7 96d 101d 29/29 32d 9af1b6e175c8 drm/virtio: use uninterruptible resv lock for plane updates drm/virtio: use uninterruptible resv lock for plane updates
possible deadlock in assign_fw usb 4 syz, C done 185 66d 770d 29/29 32d d3ec78f8f8d4 firmware_loader: Fix recursive lock in device_cache_fw_images()
general protection fault in jbd2_journal_dirty_metadata (2) prio:high ext4 2 syz, C error 28 63d 104d 29/29 32d 8fc197cf366b jbd2: check for aborted handle in jbd2_journal_dirty_metadata()
INFO: task hung in btrfs_invalidate_folio (4) prio:high btrfs 1 syz, C error 7 82d 82d 29/29 32d 532085d00eb5 btrfs: fix deadlock cloning inline extent when using flushoncommit
kernel BUG in ext4_write_inline_data_end (2) ext4 -1 syz, C inconclusive error 174 58d 926d 29/29 32d ad09aa45965d ext4: fix kernel BUG in ext4_write_inline_data_end
WARNING in trace_suspend_resume/usb_submit_urb prio:low media -1 syz, C 11 90d 118d 29/29 32d 171022c7d594 media: rc: igorplugusb: fix control request setup packet
general protection fault in __hfsplus_setxattr prio:high hfs 2 syz, C error 153 71d 124d 29/29 32d 7a41fd2b32e5 hfsplus: Remove the duplicate attr inode dirty marking action
KASAN: slab-out-of-bounds Read in hfsplus_bnode_read prio:high hfs 21 syz, C error error 521 384d 1359d 29/29 32d 966cb76fb285 hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length
KMSAN: uninit-value in mptcp_established_options prio:high mptcp 7 syz 3191 72d 107d 29/29 32d 5e939544f9d2 mptcp: fix uninit-value in mptcp_established_options
INFO: task hung in nilfs_transaction_begin (2) prio:low nilfs 1 syz, C error 14 71d 111d 29/29 32d 0e7a690fe435 nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers
general protection fault in ovl_iterate prio:high overlayfs 8 syz, C 20 71d 236d 29/29 32d 1711b6ed6953 ovl: keep err zero after successful ovl_cache_get()
WARNING in io_pin_pages (2) io-uring prio:low -1 syz, C 22 55d 57d 29/29 32d 3996771b8f75 io_uring/memmap: bound io_pin_pages() by page array byte size
WARNING in page_counter_uncharge (2) prio:high cgroups mm -1 syz, C error 10 61d 141d 29/29 32d 15807d0ddde3 mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch
inconsistent lock state in bpf_lru_push_free prio:low bpf 4 syz, C error 313 66d 237d 29/29 32d 89edbdfc5d03 bpf: Fix NMI/tracepoint re-entry deadlock on lru locks
WARNING in ip_rt_bug (3) prio:high net -1 syz, C error 54 78d 89d 29/29 32d 7eb72c1e3984 ipv4: icmp: reject broadcast/multicast routes
KASAN: slab-use-after-free Read in current_time prio:high kernfs 19 syz, C 2 80d 76d 29/29 32d b93c55b4932d bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs
KMSAN: uninit-value in _find_next_bit prio:high ocfs2 7 syz, C 30 124d 513d 29/29 32d 93c8c6ea90be ocfs2: use kzalloc for quota recovery bitmap allocation
WARNING: ODEBUG bug in i2c_device_remove (2) prio:high i2c usb -1 syz, C 3 104d 118d 29/29 32d 680daf40a82d media: rtl2832: fix use-after-free in rtl2832_remove()
general protection fault in can_rx_unregister (2) prio:normal can 8 syz, C 3 85d 85d 29/29 32d 8ba68464e478 bonding: refuse to enslave CAN devices
KASAN: slab-use-after-free Write in gfs2_qd_dealloc (3) prio:high gfs2 22 syz, C error 146 188d 445d 29/29 32d f9c9ec2c319f gfs2: fix use-after-free in gfs2_qd_dealloc
possible deadlock in __sk_receive_skb prio:high net 4 syz, C error 80 86d 89d 29/29 32d dbc81608e3a6 phonet/pep: disable BH around forwarded sk_receive_skb()
KASAN: slab-out-of-bounds Read in cache_seq_start_rcu prio:high net nfs 17 syz, C 67 81d 117d 29/29 32d ea25e3c7915b sunrpc: prevent out-of-bounds read in __cache_seq_start()
memory leak in path_openat (3) prio:high io-uring 3 syz, C 1 65d 65d 29/29 32d 2564ca2e31bd io_uring/nop: fix file reference leak with IOSQE_FIXED_FILE
possible deadlock in ocfs2_evict_inode prio:high ocfs2 4 syz, C error 2694 62d 728d 29/29 32d ff6f26c58421 ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write
possible deadlock in bpf_lru_push_free (2) prio:low bpf 4 syz, C error inconclusive 1 162d 276d 29/29 32d 89edbdfc5d03 bpf: Fix NMI/tracepoint re-entry deadlock on lru locks
KMSAN: uninit-value in ni_seek_data_or_hole prio:high ntfs3 7 syz, C 6 85d 82d 29/29 32d 57ac2831c8e0 fs/ntfs3: prevent potential lcn remains uninitialized
KASAN: out-of-bounds Read in hfsplus_bnode_move hfs 17 syz, C inconclusive error 3 255d 937d 29/29 32d 966cb76fb285 hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length
general protection fault in remove_waiter prio:high kernel 2 syz 6 98d 110d 29/29 32d 40a25d59e85b locking/rtmutex: Skip remove_waiter() when waiter is not enqueued
WARNING in wiphy_register (5) prio:low wireless -1 syz, C error 6 102d 101d 29/29 32d 0bdfb1a4697f wifi: mac80211_hwsim: reject NAN on multi-radio wiphys
general protection fault in kernel_sock_shutdown (4) rdma prio:normal 19 syz, C 105 73d 115d 29/29 32d 0b28000b64f4 RDMA/nldev: Add mutual exclusion in nldev_dellink()
KMSAN: kernel-infoleak in move_addr_to_user (7) prio:high hams wpan 9 syz, C 46 106d 693d 29/29 32d 4db86f8ab11b ieee802154: fix kernel-infoleak in dgram_recvmsg()
WARNING in task_participate_group_stop (2) prio:low kernel -1 syz, C inconclusive unreliable 25 93d 3031d 29/29 32d 90918794a4e2 signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()
KASAN: slab-use-after-free Read in sk_msg_recvmsg prio:normal bpf net 19 syz, C error error 3 187d 182d 29/29 32d c010995b29c8 sockmap: Fix use-after-free in udp_bpf_recvmsg()
inconsistent lock state in __sk_receive_skb prio:high net 4 syz, C error 147 74d 163d 29/29 32d dbc81608e3a6 phonet/pep: disable BH around forwarded sk_receive_skb()
KASAN: slab-out-of-bounds Read in usbtmc_interrupt prio:high usb 17 syz, C 5 90d 365d 29/29 32d 52f2ad3f7e5e usb: usbtmc: check URB actual_length for interrupt-IN notifications
UBSAN: shift-out-of-bounds in ieee80211_parse_tx_radiotap prio:normal wireless -1 syz, C error 67 72d 78d 29/29 32d 6c0cf89f36ac wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap
possible deadlock in lock_two_nondirectories (2) prio:high ext4 overlayfs 4 syz, C error 17 51d 73d 29/29 32d c143957520c6 ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT
WARNING in kvm_read_guest_offset_cached kvm -1 syz, C 4 100d 396d 29/29 32d 923ca078f08c KVM: x86: Don't leave APF half-enabled on bad APF data GPA
BUG: sleeping function called from invalid context in lockref_get_not_dead prio:high gfs2 5 syz, C error 13 105d 123d 29/29 32d b99a1f0f18ee gfs2: fix quota init duplicate scan
WARNING in get_from_partial_node prio:low kernel -1 syz, C 133 88d 124d 29/29 32d 5f41161059fd debugobjects: Do not fill_pool() if pi_blocked_on
WARNING in __alloc_workqueue (2) prio:low wireless -1 syz, C 3731 54d 68d 29/29 32d 311c9ff097fd wifi: ath6kl: fix invalid workqueue flags in ath6kl_usb_create()
WARNING in nbd_add_socket nbd prio:low -1 syz, C error 78 52d 56d 29/29 32d 9280e6edf656 nbd: don't warn when reclassifying a busy socket lock
WARNING in ni_rename (2) prio:low ntfs3 -1 syz, C done 226 55d 290d 29/29 32d e8ed78f40eec fs/ntfs3: call _ntfs_bad_inode() when failing to rename
BUG: corrupted list in dev_deactivate_many (2) prio:high net 8 syz 8 68d 69d 29/29 32d 8eed5519e496 net: watchdog: fix refcount tracking races net: watchdog: fix refcount tracking races
KASAN: slab-use-after-free Read in reverse_path_check_proc prio:high fs 19 syz, C 113 69d 86d 29/29 32d a1e9718b406b eventpoll: restore EP_UNACTIVE_PTR sentinel for ctx->tfile_check_list
memory leak in init_srcu_struct_fields prio:low bluetooth 3 syz, C 11 76d 78d 29/29 32d 37b3009bf597 Bluetooth: fix memory leak in error path of hci_alloc_dev()
WARNING in do_notify_parent prio:low kernel -1 syz, C error 195082 55d 169d 29/29 32d 09e7827e7857 kernel/fork: validate exit_signal in kernel_clone()
UBSAN: array-index-out-of-bounds in decompress_lznt ntfs3 15 syz, C done error 2 703d 824d 29/29 32d 7160a57192fb ntfs3: fix out-of-bounds read in decompress_lznt
possible deadlock in keyring_clear (3) prio:high keyrings lsm 4 syz, C 81 50d 313d 29/29 32d 696c030e1e34 fscrypt: Replace mk_users keyring with simple list
general protection fault in h4_recv prio:normal bluetooth 2 syz, C error 4 133d 129d 29/29 54d 902fe40bce70 Bluetooth: hci_uart: Fix NULL deref in recv callbacks when priv is uninitialized
WARNING in drm_prime_destroy_file_private (3) dri prio:high -1 syz, C error 183 92d 96d 29/29 76d dc366607c41c drm: Replace old pointer to new idr
BUG: sleeping function called from invalid context in ip_vs_conn_new lvs prio:high 5 syz, C 2034 102d 125d 29/29 76d d493d9de1c21 ipvs: fix the spin_lock usage for RT build
memory leak in xfrm_policy_construct prio:normal net 3 syz, C 8 130d 130d 29/29 79d xfrm: fix refcount leak in xfrm_migrate_policy_find
KASAN: slab-use-after-free Read in pressure_write cgroups 19 syz, C error 3 132d 129d 29/29 86d a5b98009f16d sched/psi: fix race between file release and pressure write
WARNING in vma_mark_detached prio:high mm -1 syz, C error 8 95d 118d 29/29 86d 619eab23e1ce mm/vma: do not try to unmap a VMA if mmap_prepare() invoked from mmap()
kernel BUG in pn_socket_sendmsg net -1 syz, C 19 109d 117d 29/29 86d 5b0c911bcdbd net: phonet: do not BUG_ON() in pn_socket_autobind() on failed bind
memory leak in hub_event (4) usb 3 syz, C 1 114d 114d 29/29 86d 7a5f1cd22d47 ALSA: caiaq: fix usb_dev refcount leak on probe failure
WARNING in sock_map_destroy (3) bpf net -1 syz, C done error 5 115d 136d 29/29 86d 6451d58a3556 sockmap: Fix sk_psock_drop() race vs sock_map_{unhash,close,destroy}().
INFO: task hung in lbs_remove_card usb libertas prio:high 1 syz, C 14933 89d 367d 29/29 86d 4a142520d166 wifi: libertas: notify firmware load wait on disconnect
general protection fault in task_work_cancel lsm prio:high 2 syz error 15 143d 162d 29/29 87d 929553bbb4cd landlock: Fully release unused TSYNC work entries
general protection fault in bq_flush_to_queue (2) net bpf 2 syz, C error error 6 170d 251d 29/29 87d 869c63d5975d bpf: Fix race in cpumap on PREEMPT_RT 7ef83bf1712b net: move promiscuity handling into netdev_rx_mode_work
WARNING in hfsplus_bnode_create hfs -1 syz, C error 1338 124d 1353d 29/29 87d d8a73cc46c84 hfsplus: return error when node already exists in hfs_bnode_create 8ad2c6a36ac4 hfsplus: validate b-tree node 0 bitmap at mount time
WARNING in msdos_rmdir exfat -1 syz, C error error 1 202d 216d 29/29 87d 8cafcb881364 fat: avoid parent link count underflow in rmdir
KASAN: slab-use-after-free Read in xfs_buf_rele (4) xfs 19 syz, C 59 125d 348d 29/29 87d 497560b9ef42 xfs: switch (back) to a per-buftarg buffer hash
KASAN: slab-out-of-bounds Read in ext4_ext_correct_indexes ext4 19 syz, C error error 7 157d 447d 29/29 87d 2acb5c12ebd8 ext4: validate p_idx bounds in ext4_ext_correct_indexes
WARNING in nilfs_btree_mark nilfs -1 syz, C error 9 124d 150d 29/29 87d be3e5d10643d nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty()
general protection fault in blk_update_request jfs 19 syz, C error 230 122d 653d 29/29 87d b15e4310633f jfs: Set the lbmDone flag at the end of lbmIODone
possible deadlock in ocfs2_del_inode_from_orphan ocfs2 4 syz, C inconclusive 7741 87d 683d 29/29 87d 19aa667ace53 ocfs2: fix deadlock when creating quota file
WARNING in pt_iommu_amdv1_init iommu -1 syz, C 16 121d 146d 29/29 87d 8c4dc1a5025f iommufd/selftest: Remove MOCK_IOMMUPT_AMDV1 format
WARNING in nilfs_ioctl_prepare_clean_segments nilfs -1 syz, C error 3 132d 152d 29/29 87d be3e5d10643d nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty()
KMSAN: uninit-value in hfsplus_strcasecmp (2) hfs 7 syz, C 3 128d 209d 29/29 87d b6b592275aef hfsplus: fix uninit-value by validating catalog record size
KASAN: slab-out-of-bounds Read in af_alg_pull_tsgl crypto 19 syz, C error 3375 123d 135d 29/29 87d 31d00156e50e crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
general protection fault in bio_alloc_bioset block 2 syz error 5 146d 149d 29/29 87d 67807fbaf127 block: fix bio_alloc_bioset slowpath GFP handling
INFO: task hung in wg_netns_pre_exit (5) wireguard 1 syz, C done 397 124d 690d 29/29 87d 60a25ef8dacb wireguard: device: use exit_rtnl callback instead of manual rtnl_lock in pre_exit
kernel BUG in pfkey_send_migrate net -1 syz, C error 3 148d 155d 29/29 87d eb2d16a7d599 af_key: validate families in pfkey_send_migrate()
BUG: corrupted list in dbUpdatePMap jfs 8 syz, C error 141 124d 284d 29/29 87d 3c778ec88208 jfs: fix corrupted list in dbUpdatePMap
INFO: task hung in filename_rmdir jfs 1 syz, C error 5 119d 170d 29/29 87d 5422fe71d26d ext4: avoid infinite loops caused by residual data
BUG: unable to handle kernel NULL pointer dereference in netfs_unbuffered_write netfs 19 syz, C 494 100d 163d 29/29 87d e9075e420a1e netfs: Fix NULL pointer dereference in netfs_unbuffered_write() on retry
kernel BUG in netfs_limit_iter netfs -1 syz, C 371 141d 163d 29/29 87d 67e467a11f62 netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators
WARNING in wbt_init_enable_default block -1 syz, C error 491 123d 234d 29/29 87d e9b004ff8306 blk-wbt: remove WARN_ON_ONCE from wbt_init_enable_default()
INFO: task hung in filename_unlinkat jfs 1 syz, C error 14 150d 172d 29/29 87d 5422fe71d26d ext4: avoid infinite loops caused by residual data
INFO: task hung in restrict_one_thread_callback lsm kernel 1 syz, C 39 146d 177d 29/29 87d ff88df67dbf7 landlock: Serialize TSYNC thread restriction
KASAN: slab-use-after-free Write in le_read_features_complete bluetooth 22 syz, C error 505 146d 251d 29/29 87d 035c25007c9e Bluetooth: hci_sync: Fix UAF in le_read_features_complete
general protection fault in bond_header_create net 2 syz 10 145d 156d 29/29 87d 425000dbf173 team: fix header_ops type confusion with non-Ethernet ports
KASAN: slab-use-after-free Read in ocfs2_fault ocfs2 19 syz, C done 363 123d 703d 29/29 87d 7de554cabf16 ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY
WARNING in u32_change (2) net -1 syz, C error 760 123d 165d 29/29 87d 34bd3c6b0bd3 net: sched: cls_u32: Avoid memcpy() false-positive warning in u32_init_knode()
UBSAN: shift-out-of-bounds in dbSplit (3) jfs -1 syz, C 8 158d 473d 29/29 87d cce219b203c4 jfs: add dmapctl integrity check to prevent invalid operations
KASAN: slab-use-after-free Write in usb_anchor_suspend_wakeups (2) usb 22 syz, C error 27 157d 867d 29/29 87d 8a768552f7a8 usb: usbtmc: Flush anchored URBs in usbtmc_release
KASAN: slab-use-after-free Read in v4l2_release (2) media 19 syz, C error error 6 129d 357d 29/29 87d 3b7da2b4d0fe media: hackrf: fix to not free memory after the device is registered in hackrf_probe()
WARNING in deferred_split_folio mm -1 syz error 4 138d 137d 29/29 87d 3bac01168982 mm: fix deferred split queue races during migration
general protection fault in usb_gadget_udc_reset (4) usb 2 syz, C error 16 154d 295d 29/29 87d 616a63ff495d USB: dummy-hcd: Fix locking/synchronization error
KASAN: slab-use-after-free Read in l2cap_unregister_user bluetooth 22 syz, C done 46133 101d 653d 29/29 87d 752a6c9596dd Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user
general protection fault in vidtv_psi_desc_assign media 2 syz 160 131d 229d 29/29 87d f8e1fc918a9f media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections
WARNING in reg_bounds_sanity_check (2) bpf -1 syz, C done 20146 124d 345d 29/29 87d b254c6d816e5 bpf: Simulate branches to prune based on range violations
KASAN: slab-use-after-free Read in sock_def_readable (2) net 19 syz, C 123 120d 161d 29/29 87d 922814879542 atm: lec: fix use-after-free in sock_def_readable()
KASAN: slab-use-after-free Read in ext4_ext_remove_space ext4 19 syz, C error 73 145d 503d 29/29 87d 3822743dc203 ext4: reject mount if bigalloc with s_first_data_block != 0
general protection fault in aead_recvmsg crypto 2 syz, C error 165 123d 135d 29/29 87d 3d14bd48e3a7 crypto: algif_aead - Fix minimum RX size check for decryption
WARNING in ieee80211_tdls_oper (3) wireless -1 syz, C error 1 161d 160d 29/29 87d 7d73872d949c wifi: mac80211: check tdls flag in ieee80211_tdls_oper
WARNING in _cpu_down kernel prio:low -1 syz, C 37 147d 160d 29/29 87d c8c4a2972f83 padata: Put CPU offline callback in ONLINE section to allow failure
general protection fault in rose_transmit_link (4) hams 21 syz, C error 2058 142d 213d 29/29 87d e1f0a18c9564 net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect
KMSAN: uninit-value in fuse_dentry_revalidate (2) fuse prio:high 7 syz, C 261 123d 182d 29/29 87d 5a6baf204610 fuse: fix uninit-value in fuse_dentry_revalidate()
WARNING in attr_data_get_block_locked prio:high ntfs3 -1 syz, C 12 103d 174d 29/29 87d d7ea8495fd30 fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked()
WARNING in filename_mkdirat gfs2 prio:high -1 syz, C 84 97d 181d 29/29 87d 2ff7cf7e0640 gfs2: Call unlock_new_inode before d_instantiate
KMSAN: uninit-value in vidtv_ts_null_write_into media prio:low 7 syz, C 50 123d 182d 29/29 87d 5f8e73bde67e media: vidtv: fix pass-by-value structs causing MSAN warnings
KASAN: stack-out-of-bounds Read in l2cap_send_cmd bluetooth prio:high 17 syz, C 174 143d 155d 29/29 87d 9d87cb22195b Bluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_req
inconsistent lock state in igrab xfs prio:high 4 syz, C error 521 103d 183d 29/29 87d f621324dfb3d iomap: fix lockdep complaint when reads fail
BUG: sleeping function called from invalid context in usb_tx_block usb libertas prio:high 5 syz, C 780 118d 173d 29/29 87d 7c5c2b661bdb wifi: libertas: don't kill URBs in interrupt context
KASAN: null-ptr-deref Read in smc_tcp_syn_recv_sock smc 11 syz, C error inconclusive 24 159d 503d 29/29 87d 6d5e4538364b net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock()
memory leak in run_add_entry (2) prio:high ntfs3 3 syz, C 1 135d 149d 29/29 87d 87ac077d6ea8 ntfs3: fix memory leak in indx_create_allocate()
general protection fault in nilfs_mdt_save_to_shadow_map nilfs prio:normal 2 syz, C error 87 124d 152d 29/29 87d 4a4e0328edd9 nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map
KMSAN: uninit-value in ntfs_iomap_begin ntfs3 prio:high 7 syz, C 191 124d 175d 29/29 87d e98266e823a1 fs/ntfs3: prevent uninitialized lcn caused by zero len
KMSAN: uninit-value in bpf_prog_test_run_skb bpf prio:high 7 syz, C 4 148d 228d 29/29 87d 12bec2bd4b76 bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb
general protection fault in f2fs_in_warm_node_list prio:high f2fs 2 syz, C error 11247 116d 179d 29/29 87d 2d9c4a4ed4ee f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io()
INFO: task hung in btrfs_invalidate_folio (3) prio:high btrfs 1 syz, C error 9 137d 150d 29/29 87d b48c980b6a7e btrfs: fix deadlock between reflink and transaction commit when using flushoncommit
memory leak in do_cmd_ioctl comedi 3 syz, C 2 160d 244d 29/29 87d 29f644f14b89 comedi: runflags cannot determine whether to reclaim chanlist
WARNING in __folio_mark_dirty (3) ext4 -1 syz, C error 115 126d 269d 29/29 87d 9b25f381de6b ext4: unmap invalidated folios from page tables in mpage_release_unused_pages()
BUG: unable to handle kernel paging request in dt2815_attach comedi 8 syz, C 4 205d 204d 29/29 87d 93853512f565 comedi: dt2815: add hardware detection to prevent crash
KASAN: use-after-free Read in v4l2_fh_init usb media 19 syz, C error inconclusive 7824 119d 2676d 29/29 87d a66485a934c7 media: em28xx: fix use-after-free in em28xx_v4l2_open()
KASAN: global-out-of-bounds Read in ip6gre_header net 17 syz, C error 3 134d 137d 29/29 87d b120e4432f9f net: lapbether: handle NETDEV_PRE_TYPE_CHANGE
kernel BUG in ext4_write_inline_data (4) ext4 -1 syz, C error 13 101d 195d 29/29 87d ed9356a30e59 ext4: convert inline data to extents when truncate exceeds inline size
kernel BUG in resv_map_release (3) mm -1 syz, C inconclusive error 35 134d 642d 29/29 87d 0217c7fb4de4 mm/userfaultfd: fix hugetlb fault mutex hash calculation
WARNING in io_wq_put_and_exit io-uring -1 syz 74 92d 168d 29/29 87d 41859843f27d io_uring/tctx: mark io_wq as exiting before error path teardown
INFO: task hung in rpm_resume (2) usb pm 1 syz, C 17 182d 307d 29/29 87d 069c8f5aebe4 net: usb: aqc111: Do not perform PM inside suspend callback
KFENCE: invalid free in gid_table_release_one rdma 24 syz, C error 5478 125d 138d 29/29 87d 973403ca3553 RDMA/core: Fix memory free for GID table
memory leak in radix_tree_insert (2) arm-msm net 3 syz, C 1 201d 983d 29/29 87d 2428083101f6 net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak
BUG: sleeping function called from invalid context in vhost_get_avail_idx kvm net virt 5 syz, C 1 120d 118d 29/29 87d e08a9fac5cf8 vhost_net: fix sleeping with preempt-disabled in vhost_net_busy_poll()
memory leak in vidtv_psi_service_desc_init media 3 syz, C 13 105d 187d 29/29 87d a0e5a598fe9a media: vidtv: fix nfeeds state corruption on start_streaming failure
general protection fault in rwsem_mark_wake mm prio:high 2 syz, C error 9235 149d 152d 29/29 87d 68bcd8b6e0b1 locking/rwsem: Fix logic error in rwsem_del_waiter()
memory leak in fscrypt_setup_filename fscrypt f2fs 3 syz, C 1 166d 166d 29/29 87d 3cf11e6f36c1 f2fs: fix to avoid memory leak in f2fs_rename()
WARNING in drm_atomic_helper_wait_for_vblanks (5) dri -1 syz 464 98d 250d 29/29 87d 79ae8510b5b8 drm/atomic: Increase timeout in drm_atomic_helper_wait_for_vblanks()
KMSAN: uninit-value in netif_skb_features (4) net 7 syz, C 116 137d 313d 29/29 87d ddc748a391dd net: use skb_header_pointer() for TCPv4 GSO frag_off check
general protection fault in __umount_mnt fs 2 syz, C error 21 139d 149d 29/29 87d ad4999496e73 mount: always duplicate mount
general protection fault in lmLogSync (2) jfs 22 syz, C error 8238 91d 1417d 29/29 87d ca5848ae87d2 jfs: hold LOG_LOCK on umount to avoid null-ptr-deref
KASAN: slab-use-after-free Write in number media 22 syz, C 3 230d 227d 29/29 100d a260bd22a355 media: mc: fix potential use-after-free in media_request_alloc()
general protection fault in fn_enter serial 2 syz, C error 6 200d 201d 29/29 101d 0a15f43b92dd Revert "tty: tty_port: add workqueue to flip TTY buffer"
general protection fault in qt2_read_bulk_callback (2) usb 2 syz, C error 44 200d 201d 29/29 101d 0a15f43b92dd Revert "tty: tty_port: add workqueue to flip TTY buffer"
general protection fault in k_pad serial 2 syz, C error 20 200d 201d 29/29 101d 0a15f43b92dd Revert "tty: tty_port: add workqueue to flip TTY buffer"
general protection fault in to_utf8 serial 2 syz, C error 37 200d 201d 29/29 101d 0a15f43b92dd Revert "tty: tty_port: add workqueue to flip TTY buffer"
unregister_netdevice: waiting for DEV to become free (8) net 2 syz, C done 443850 102d 1164d 29/29 102d 9af0feae8016 RDMA/core: Fix stale RoCE GIDs during netdev events at registration fa3c411d21eb RDMA/core: always drop device refcount in ib_del_sub_device_and_put() f12b69d8f228 batman-adv: Release references to inactive interfaces ec69daabe452 bpf: Fix reference count leak in bpf_prog_test_run_xdp() 7fcbe5b2c6a4 can: j1939: implement NETDEV_UNREGISTER notification handler 5d5602236f5d can: j1939: make j1939_session_activate() fail if device is no longer registered ac782f4e3bfc ipv4: Fix reference count leak when using error routes with nexthop objects 1809c82aa073 net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts bb4c698633c0 team: avoid NETDEV_CHANGEMTU event when unregistering slave 4efa91a28576 xfrm: always flush state and policy upon NETDEV_UNREGISTER event
UBSAN: shift-out-of-bounds in minix_statfs fs -1 syz, C inconclusive error 75 202d 1707d 29/29 102d 8c97a6ddc956 minix: Add required sanity checking to minix_check_superblock()
BUG: unable to handle kernel paging request in ip_route_output_key_hash_rcu net 17 syz, C 910 164d 184d 29/29 102d 21ec92774d15 net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop
general protection fault in sigd_send net 11 syz, C error 10 193d 290d 29/29 102d ae88a5d2f29b net: atm: fix crash due to unvalidated vcc pointer in sigd_send()
KASAN: slab-out-of-bounds Read in strnchr bpf 17 syz, C error 14 218d 223d 29/29 102d 9df5fad801c5 bpf: Reject BPF_MAP_TYPE_INSN_ARRAY in check_reg_const_str()
INFO: task hung in ntfs_file_write_iter (2) ntfs3 1 syz, C error 6 151d 232d 29/29 102d 27b75ca4e51e fs/ntfs3: prevent infinite loops caused by the next valid being the same
memory leak in napi_skb_cache_get (2) net virt 3 syz, C 1 216d 213d 29/29 102d 21e4271e6509 Bluetooth: purge error queues in socket destructors
memory leak in l2tp_tunnel_create net 3 syz, C 9 211d 215d 29/29 102d 4d10edfd1475 l2tp: Fix memleak in l2tp_udp_encap_recv().
possible deadlock in blkdev_read_iter block 4 syz, C 11 196d 205d 29/29 102d b5cbacd7f86f procfs: avoid fetching build ID while holding VMA lock
kernel BUG in may_open (3) hfs -1 syz, C error 11 199d 216d 29/29 102d ed8889ca21b6 hfsplus: pretend special inodes as regular files
general protection fault in ife_tlv_meta_encode net 2 syz, C error 6 206d 207d 29/29 102d 27880b0b0d35 net/sched: act_ife: avoid possible NULL deref
WARNING in pvr2_send_request_ex pvrusb2 usb -1 syz, C 2 245d 254d 29/29 102d a8333c8262ae media: pvrusb2: fix URB leak in pvr2_send_request_ex
WARNING: refcount bug in __add_used_btf bpf 13 syz, C error 6 182d 194d 29/29 102d ccd2d799ed44 bpf: Fix a potential use-after-free of BTF object
WARNING in usb_tx_block usb libertas -1 syz, C 15 127d 244d 29/29 102d d66676e6ca96 wifi: libertas: fix WARNING in usb_tx_block
kernel BUG in f2fs_write_end_io f2fs -1 syz, C inconclusive 285 104d 502d 29/29 102d 50ac3ecd8e05 f2fs: fix to do sanity check on node footer in {read,write}_end_io
KASAN: slab-out-of-bounds Read in fib6_add_rt2node net 17 syz, C 38 178d 186d 29/29 102d 8244f959e2c1 ipv6: Fix out-of-bound access in fib6_add_rt2node().
kernel BUG in fib6_add_rt2node (2) net -1 syz, C error 18 202d 222d 29/29 102d bbf4a17ad9ff ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF
KASAN: use-after-free Read in nf_hook_entry_head netfilter 19 syz error 62 154d 178d 29/29 102d b7cdc5a97d02 netfilter: nf_tables: Fix for duplicate device in netdev hooks
WARNING in __mmdrop (2) kernel -1 syz, C 7 185d 187d 29/29 102d 61dc9f776705 procfs: fix possible double mmput() in do_procmap_query()
memory leak in prepare_creds (6) lsm 3 syz, C 2 182d 204d 29/29 102d 1cb968a2013f nfsd: Fix cred ref leak in nfsd_nl_threads_set_doit().
general protection fault in snd_scarlett2_controls_create sound 2 syz, C 5 165d 162d 29/29 102d df1d8abf36ca ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces
possible deadlock in gup_fast_fallback (2) mm 4 syz, C 21 104d 192d 29/29 102d b5cbacd7f86f procfs: avoid fetching build ID while holding VMA lock
general protection fault in squashfs_copy_data squashfs 2 syz, C error 4 184d 182d 29/29 102d fdb24a820a58 Squashfs: check metadata block offset is within range
possible deadlock in __configfs_open_file fs 4 syz, C 29 184d 602d 29/29 102d 14d4ac19d189 scsi: target: Fix recursive locking in __configfs_open_file()
KASAN: slab-out-of-bounds Write in copy_to_urb (2) usb sound 21 syz, C 5 217d 216d 29/29 102d ef5749ef8b30 ALSA: usb-audio: Prevent excessive number of frames
kernel BUG in ipgre_header (4) net -1 syz, C 9 211d 220d 29/29 102d e67c577d8989 ipv4: ip_gre: make ipgre_header() robust
KMSAN: uninit-value in __inet_bind net 7 syz, C 410 177d 183d 29/29 102d 7b821da55b3f rds: tcp: fix uninit-value in __inet_bind
KASAN: use-after-free Read in f2fs_write_end_io (2) f2fs 19 syz, C 14 188d 237d 29/29 102d ce2739e482bc f2fs: fix to avoid UAF in f2fs_write_end_io()
kernel BUG in ocfs2_move_extents ocfs2 -1 syz, C 163 185d 241d 29/29 102d c62e7e6444cd ocfs2: add check for free bits before allocation in ocfs2_move_extent()
WARNING in vcpu_run kvm-x86 -1 syz, C done 43 215d 660d 29/29 102d ead63640d4e7 KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block()
KASAN: use-after-free Read in ocfs2_check_dir_entry ocfs2 19 syz, C error 6 220d 248d 29/29 102d 1524af3685b3 ocfs2: validate inline data i_size during inode read
WARNING in nft_map_deactivate netfilter -1 syz, C error 5 167d 178d 29/29 102d fb7fb4016300 netfilter: nf_tables: clone set on flush only
memory leak in v4l2_ctrl_handler_init_class (2) usb media 3 syz, C 14 200d 264d 29/29 102d b8bf939d77c0 media: radio-keene: fix memory leak in error path
KMSAN: uninit-value in longest_match_std (2) ntfs3 7 syz, C 23820 179d 950d 29/29 102d f223ebffa185 fs/ntfs3: Initialize new folios before use
WARNING in skb_attempt_defer_free net -1 syz, C 16 199d 223d 29/29 102d e5c8eda39a9f udp: call skb_orphan() before skb_attempt_defer_free()
kernel BUG in ocfs2_remove_refcount_tree ocfs2 -1 syz, C error 6 252d 251d 29/29 102d 688dab01c3bb ocfs2: validate i_refcount_loc when refcount flag is set
kernel BUG in hfs_new_inode hfs -1 syz, C done error 4 226d 297d 29/29 102d b226804532a8 hfs: Replace BUG_ON with error handling for CNID count checks
memory leak in __build_skb (4) net 3 syz, C 1 219d 216d 29/29 102d 9a56796ad258 gue: Fix skb memleak with inner IP protocol 0.
BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio (4) fs 10 syz, C done 5746 208d 638d 29/29 102d 777a8560fd29 lib/buildid: use __kernel_read() for sleepable context
KASAN: use-after-free Read in __linkwatch_run_queue net 19 syz 108 193d 459d 29/29 102d 83b67cc9be92 linkwatch: use __dev_put() in callers to prevent UAF
KASAN: slab-use-after-free Read in nft_array_get_cmp netfilter 19 syz, C error 5 200d 200d 29/29 102d 35f83a75529a netfilter: nft_set_rbtree: don't gc elements on insert
memory leak in ntfs_init_fs_context (2) ntfs3 3 syz, C 350 179d 251d 29/29 102d f7edab0cee03 fs/ntfs3: fix ntfs_mount_options leak in ntfs_fill_super()
general protection fault in snd_scarlett2_init sound 2 syz, C 3 165d 161d 29/29 102d df1d8abf36ca ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces
WARNING in __dma_map_sg_attrs (2) trace -1 syz, C 4 199d 199d 29/29 102d daafcc0ef0b3 tracing/dma: Cap dma_map_sg tracepoint arrays to prevent buffer overflow
KMSAN: uninit-value in __inet6_bind (2) net 7 syz, C 78 178d 185d 29/29 102d 7b821da55b3f rds: tcp: fix uninit-value in __inet_bind
BUG: corrupted list in io_poll_remove_entries media 8 syz, C error 8 176d 188d 29/29 102d bfbc0b5b32a8 media: dvb-core: fix wrong reinitialization of ringbuffer on reopen
memory leak in __shmem_file_setup fs 3 syz, C 1 220d 216d 29/29 102d 605f6586ecf7 mm/vma: do not leak memory when .mmap_prepare swaps the file
BUG: sleeping function called from invalid context in __bpf_stream_push_str net virt 5 syz, C done 88 209d 251d 29/29 102d 99a3e3a1cfc9 slab: fix kmalloc_nolock() context check for PREEMPT_RT
WARNING in ip_rt_bug (2) net -1 syz, C done error 612 102d 1404d 29/29 102d 81b84de32bb2 xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path
memory leak in skb_clone (3) bluetooth batman 3 syz, C 4 105d 221d 29/29 102d 21e4271e6509 Bluetooth: purge error queues in socket destructors
UBSAN: array-index-out-of-bounds in ocfs2_xa_remove_entry ocfs2 15 syz, C 62 190d 248d 29/29 102d d3cd8de2e17e ocfs2: adjust ocfs2_xa_remove_entry() to match UBSAN boundary checks
kernel BUG in bio_chain gfs2 block -1 syz, C error 5696 208d 252d 29/29 102d 4a94f052e098 gfs2: Initialize bio->bi_opf early
general protection fault in create_empty_buffers (5) btrfs 2 syz, C 6 218d 220d 29/29 102d 3f29d661e568 btrfs: sync read disk super and set block size
KASAN: slab-out-of-bounds Read in ext4_search_dir ext4 19 syz, C 5 235d 319d 29/29 102d 08e136ebd193 loop: don't change loop device under exclusive opener in loop_set_status
memory leak in __kthread_create_on_node gfs2 3 syz, C 1 199d 198d 29/29 102d da6f5bbc2e79 gfs2: fix memory leaks in gfs2_fill_super error path
possible deadlock in sch_direct_xmit (5) net 4 syz, C unreliable 1245 102d 222d 29/29 102d 872ac785e768 ipv4: ip_tunnel: spread netdev_lockdep_set_classes()
INFO: task hung in usb_bulk_msg (2) usb 1 syz, C 8 160d 189d 29/29 102d 7784caa413a8 USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts
general protection fault in grab_requested_root fs 2 syz, C 21 172d 185d 29/29 102d 81f16c9778d7 statmount: Fix the null-ptr-deref in do_statmount()
general protection fault in lec_arp_clear_vccs net 19 syz, C error 84 130d 334d 29/29 102d 101bacb303e8 atm: lec: fix null-ptr-deref in lec_arp_clear_vccs
general protection fault in btrfs_evict_inode btrfs 2 syz, C 11 267d 300d 29/29 102d f157dd661339 btrfs: fix NULL dereference on root when tracing inode eviction
WARNING in tracing_buffers_mmap_close (3) trace -1 syz, C 2 173d 171d 29/29 102d e39bb9e02b68 tracing: Fix WARN_ON in tracing_buffers_mmap_close
BUG: unable to handle kernel paging request in kvm_vgic_destroy kvmarm 8 syz, C 7 157d 169d 29/29 102d ac6769c8f948 KVM: arm64: Eagerly init vgic dist/redist on vgic creation
KASAN: slab-use-after-free Read in handle_tx (2) net 19 syz, C 1086 185d 907d 29/29 102d 308e7e4d0a84 serial: caif: fix use-after-free in caif_serial ldisc_close()
memory leak in __skb_tstamp_tx bluetooth 3 syz, C 1 221d 221d 29/29 102d 21e4271e6509 Bluetooth: purge error queues in socket destructors
WARNING in folio_remove_rmap_ptes mm -1 syz, C 1 224d 236d 29/29 102d 61f67c230a5e mm/vma: fix anon_vma UAF on mremap() faulted, unfaulted merge
KMSAN: uninit-value in IP6_ECN_decapsulate (3) net 7 syz, C 4 221d 221d 29/29 102d 81c734dae203 ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()
UBSAN: array-index-out-of-bounds in __ocfs2_find_path ocfs2 15 syz, C inconclusive 12 185d 244d 29/29 102d e0b0f2834c9b ocfs2: fix oob in __ocfs2_find_path
KMSAN: uninit-value in pfn_reader_next iommu 7 syz, C 395 197d 204d 29/29 102d 2724138b2f7f iommufd: Initialize batch->kind in batch_clear()
WARNING in ntfs_extend_initialized_size (2) ntfs3 -1 syz, C error 7 182d 182d 29/29 102d 10d7c95af043 fs/ntfs3: add delayed-allocation (delalloc) support
WARNING in kvm_gmem_fault_user_mapping kvm -1 syz, C error 3 185d 198d 29/29 102d dd085fe9a8eb mm: thp: deny THP for files on anonymous inodes
kernel BUG in ocfs2_write_block ocfs2 -1 syz, C inconclusive 29 223d 697d 29/29 102d 4e9f69c06215 ocfs2: add validate function for slot map blocks
memory leak in percpu_ref_init nfs 3 syz, C 1 233d 243d 29/29 102d 0b88bfa42e54 NFSD: net ref data still needs to be freed even if net hasn't startup
WARNING in kvm_apic_accept_events (2) kvm-x86 -1 syz, C 72 190d 264d 29/29 102d c4a365cd4a4e KVM: x86: Drop WARN on INIT/SIPI being blocked when vCPU is in Wait-For-SIPI
INFO: task hung in nilfs_segctor_thread (6) nilfs 1 syz, C done 41 102d 243d 29/29 102d ed527ef0c264 nilfs2: Fix potential block overflow that cause system hang
BUG: unable to handle kernel paging request in sk_skb_reason_drop hams 22 syz, C 39 124d 213d 29/29 102d ba1096c31528 netrom: fix double-free in nr_route_frame()
WARNING in fpsimd_restore_current_state arm -1 syz, C 27 193d 285d 29/29 102d 128a7494a9f1 arm64/fpsimd: ptrace: Fix SVE writes on !SME systems
possible deadlock in inet6_getname net 4 syz, C error 122 171d 184d 29/29 102d 021fd0f87004 net/rds: fix recursive lock in rds_tcp_conn_slots_available
KASAN: slab-out-of-bounds Read in xlog_cksum xfs 17 syz, C error 15 214d 530d 29/29 102d 44b9553c3dd0 xfs: validate log record version against superblock log version
INFO: rcu detected stall in purge_vmap_node mm 1 syz, C error 2 220d 216d 29/29 102d 5747435e0fd4 mm/vmalloc: prevent RCU stalls in kasan_release_vmalloc_node
WARNING in jfs_rename jfs -1 syz, C inconclusive 13 233d 464d 29/29 102d 9218dc26fd92 jfs: nlink overflow in jfs_rename
WARNING in kcm_write_msgs net -1 syz, C done 622 184d 2341d 29/29 102d ca220141fa8e kcm: fix zero-frag skb in frag_list on partial sendmsg error
KMSAN: uninit-value in fuse_fileattr_get fuse 7 syz, C 19 178d 191d 29/29 102d cb184dd19154 fs: init flags_valid before calling vfs_fileattr_get
KASAN: use-after-free Read in z_erofs_transform_plain (2) erofs 19 syz, C error 5 177d 173d 29/29 102d 4a2d046e4b13 erofs: fix interlaced plain identification for encoded extents
memory leak in llcp_sock_create net nfc 3 syz, C 6 221d 204d 29/29 102d 165c34fb6068 nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame().
memory leak in hfs_init_fs_context hfs 3 syz, C 2 220d 276d 29/29 102d 05ce49a902be hfs: ensure sb->s_fs_info is always cleaned up
possible deadlock in ntfs_look_for_free_space ntfs3 4 syz, C error 4338 178d 646d 29/29 102d 08ce2fee1b86 ntfs3: fix circular locking dependency in run_unpack_ex
general protection fault in rebuild_sched_domains_locked cgroups 2 syz, C 7 166d 182d 29/29 102d 085f067389d1 cgroup/cpuset: fix null-ptr-deref in rebuild_sched_domains_cpuslocked
INFO: task hung in __rmap_walk_file mm 1 syz, C error 7 220d 310d 29/29 102d b7880cb166ab migrate: correct lock ordering for hugetlb file folios
memory leak in es58x_open usb 3 syz 1 227d 237d 29/29 102d b1979778e985 can: etas_es58x: allow partial RX URB allocation to succeed
INFO: task hung in io_wq_put_and_exit (6) io-uring 1 syz, C error 74 204d 363d 29/29 102d 10dc95939817 io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop 1f293098a313 io_uring/io-wq: don't trigger hung task for syzbot craziness
INFO: task hung in ni_readpage_cmpr (3) ntfs3 1 syz, C done 6 228d 243d 29/29 102d e37a75bb866c fs/ntfs3: fix deadlock in ni_read_folio_cmpr
KASAN: slab-use-after-free Read in snd_pcm_stop sound 19 syz, C error 29 109d 201d 29/29 102d 826af7fa62e3 ALSA: aloop: Fix racy access at PCM trigger
INFO: trying to register non-static key in bcm_can_tx can -1 syz, C error 5 169d 180d 29/29 102d c35636e91e39 can: bcm: fix locking for bcm_op runtime updates
kernel BUG in folio_set_bh (2) ntfs3 jfs -1 syz, C 46 115d 216d 29/29 102d ab7ad7abb366 romfs: check sb_set_blocksize() return value
general protection fault in rds_tcp_accept_one rds 19 syz, C 1334 177d 188d 29/29 102d 6bf45704a92a net/rds: Fix NULL pointer dereference in rds_tcp_accept_one
kernel BUG in ext4_swap_extents ext4 -1 syz, C 6 211d 251d 29/29 102d 0ef7ef422730 ext4: add missing down_write_data_sem in mext_move_extent().
BUG: corrupted list in dev_deactivate_many net 19 syz, C 22 110d 349d 29/29 102d 83b67cc9be92 linkwatch: use __dev_put() in callers to prevent UAF
general protection fault in bio_seg_gap block 2 syz, C done 231 277d 275d 29/29 194d fd9ecd005252 block: fix merging data-less bios
WARNING in mdiobus_get_phy net usb -1 syz 2 234d 244d 29/29 202d a1e077a3f76e net: usb: asix: validate PHY address before use
KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor wireless 19 syz, C 989 223d 273d 29/29 202d cbf0dc37bb4e wifi: mac80211: fix list iteration in ieee80211_add_virtual_monitor()
WARNING in ieee80211_determine_chan_mode wireless -1 syz, C 1 247d 257d 29/29 202d 99067b58a408 wifi: mac80211: don't WARN for connections on invalid channels
WARNING in nfc_dev_down net nfc -1 syz, C error 12 229d 244d 29/29 202d 1ab526d97a57 net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write
memory leak in rtl8150_set_multicast net usb 3 syz 1 247d 243d 29/29 202d 12cab1191d98 net: usb: rtl8150: fix memory leak on usb_submit_urb() failure
kernel BUG in ip6_pol_route (2) net -1 syz, C error 1134 229d 274d 29/29 202d 1adaea51c61b ipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RT
KMSAN: uninit-value in ib_nl_handle_ip_res_resp rdma 7 syz, C 8 269d 320d 29/29 202d a7b8e876e0ef RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly
WARNING in subflow_data_ready (4) mptcp -1 syz, C 556 224d 361d 29/29 202d 71154bbe4942 mptcp: fallback earlier on simult connection
WARNING in ieee80211_ocb_rx_no_sta (2) wireless -1 syz, C 7 250d 266d 29/29 202d ff4071c60018 wifi: mac80211: ocb: skip rx_no_sta when interface is not joined
WARNING in gid_table_release_one (3) rdma -1 syz, C done 455 225d 460d 29/29 202d 57f3cb6c8415 RDMA/cm: Fix leaking the multicast GID table reference
KASAN: invalid-access Write in do_bad_area bpf -1 syz, C 34838 230d 315d 29/29 202d 007f5da43b3d mm/kasan: fix incorrect unpoisoning in vrealloc for KASAN
kernel BUG in ip6gre_header (6) net -1 syz, C 127 230d 248d 29/29 202d db5b4e39c4e6 ip6_gre: make ip6gre_header() robust
kernel BUG in sctp_getsockopt_peeloff_common fs -1 syz, C done 6 257d 258d 29/29 203d afb9917d9b37 Revert "net/socket: convert sock_map_fd() to FD_ADD()"
kernel BUG in socket fs -1 syz, C 145 240d 235d 29/29 203d afb9917d9b37 Revert "net/socket: convert sock_map_fd() to FD_ADD()"
WARNING in kvm_set_vm_id_reg kvmarm -1 syz, C 23 271d 274d 29/29 207d 0f559cd91e37 KVM: arm64: Finalize ID registers only once per VM
possible deadlock in ipv6_sock_mc_close (4) net 4 syz, C done 7 253d 251d 29/29 207d b98f06f9a5d3 sctp: Fetch inet6_sk() after setting ->pinet6 in sctp_clone_sock().
WARNING in iopt_map_pages (3) iommu -1 syz, C 4 246d 251d 29/29 207d e6a973af1113 iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED
memory leak in btrfs_read_chunk_tree btrfs 3 syz, C 1 255d 251d 29/29 207d b57f2ddd2873 btrfs: fix memory leak of fs_devices in degraded seed device path
memory leak in debugfs_change_name fs 3 syz, C 1 255d 251d 29/29 207d d412ff9e26eb debugfs: Fix memleak in debugfs_change_name().
KASAN: invalid-free in inet_sock_destruct net 24 syz, C inconclusive 10 241d 251d 29/29 207d d7ff61e6f3ef sctp: Clear inet_opt in sctp_v6_copy_ip_options().
KMSAN: uninit-value in skb_clone batman 7 syz, C 3 266d 264d 29/29 207d 188e0fa5a679 net/hsr: fix NULL pointer dereference in prp_get_untagged_frame()
WARNING in minix_unlink fs -1 syz, C inconclusive done 458 250d 632d 29/29 207d 009a2ba40303 Fix a drop_nlink warning in minix_rename
kernel BUG in btrfs_qgroup_inherit btrfs -1 syz, C 4 247d 251d 29/29 207d 428e1b114c1a Revert "btrfs: add ASSERTs on prealloc in qgroup functions"
KASAN: slab-use-after-free Write in defer_free bpf 22 syz, C 238 238d 251d 29/29 207d 53ca00a19d34 mm/slub: reset KASAN tag in defer_free() before accessing freed memory
memory leak in getname_flags fs 3 syz, C 1 235d 235d 29/29 207d b14fad555302 io_uring: fix filename leak in __io_openat_prep()
memory leak in qgroup_reserve_data btrfs 3 syz, C 1 251d 248d 29/29 207d 37343524f000 btrfs: fix changeset leak on mmap write after failure to reserve metadata
memory leak in prepare_creds (5) lsm 3 syz, C 60 209d 282d 29/29 207d df8d829bba3a nfsd: fix memory leak in nfsd_create_serv error paths
WARNING in blkdev_common_ioctl mm -1 syz, C 5 250d 248d 29/29 207d a58383fa45c7 block: add allocation size check in blkdev_pr_read_keys()
memory leak in nr_sendmsg hams 3 syz, C 1 265d 261d 29/29 207d 613d12dd794e netrom: Fix memory leak in nr_sendmsg()
KASAN: slab-use-after-free Read in driver_remove_file fs 19 syz, C error done 296 254d 383d 29/29 208d 72262330f7b3 comedi: c6xdigio: Fix invalid PNP driver unregistration
INFO: trying to register non-static key in ntfs_setattr ntfs3 -1 syz, C done done 8 259d 307d 29/29 221d be99c62ac7e7 ntfs3: init run lock for extend inode
KASAN: slab-out-of-bounds Write in __bpf_get_stackid bpf 21 syz, C error 170 289d 384d 29/29 221d 23f852daa4ba bpf: Fix stackmap overflow check in __bpf_get_stackid()
INFO: task hung in comedi_open comedi 1 syz, C 24 238d 377d 29/29 221d f24c6e3a39fa comedi: multiq3: sanitize config options in multiq3_attach()
WARNING in get_next_unlocked_entry erofs -1 syz, C 8 257d 272d 29/29 221d ebe4f3f6eb0c erofs: correct FSDAX detection
KMSAN: uninit-value in hci_cmd_complete_evt bluetooth 7 syz, C 37 285d 638d 29/29 221d 5c5f1f64681c Bluetooth: hci_event: validate skb length for unknown CC opcode
WARNING in memory_failure mm -1 syz, C 4 305d 327d 29/29 221d 77008e1b2ef7 mm/huge_memory: do not change split_huge_page*() target order silently
INFO: trying to register non-static key in ntfs_set_size ntfs3 -1 syz, C done 235 244d 335d 29/29 221d be99c62ac7e7 ntfs3: init run lock for extend inode
kernel BUG in folio_set_bh ntfs3 -1 syz, C done 202 222d 410d 29/29 221d d1693a7d5a38 ntfs: set dummy blocksize to read boot_block when mounting
KASAN: slab-out-of-bounds Write in copy_to_urb usb sound 21 syz, C 33 224d 284d 29/29 221d 05a1fc5efdd8 ALSA: usb-audio: Fix potential overflow of PCM transfer buffer
memory leak in do_timer_create kernel 3 syz, C 1 277d 276d 29/29 221d e0fd4d42e27f posix-timers: Plug potential memory leak in do_timer_create()
general protection fault in fd_install fs 2 syz, C 64 254d 255d 29/29 221d 8cf01d0c4372 mqueue: correct the type of ro to int
WARNING in __rt_mutex_slowlock_locked (2) exfat -1 syz, C done 9 258d 283d 29/29 221d 866cba367541 exfat: validate the cluster bitmap bits of directory
WARNING in f2fs_rename2 (2) f2fs -1 syz, C 5 294d 307d 29/29 221d d33f89b34aa3 f2fs: invalidate dentry cache on failed whiteout creation
INFO: task hung in io_uring_del_tctx_node (5) io-uring 1 syz, C done 19 235d 293d 29/29 221d 101e596e7404 io_uring/fdinfo: cap SQ iteration at max SQ entries
WARNING in __blk_add_trace trace block -1 syz, C done 94 292d 296d 29/29 221d 4a0940bdcac2 blktrace: use debug print to report dropped events
WARNING in minix_rmdir fs -1 syz, C inconclusive 92 271d 585d 29/29 221d d3e0e8661ceb Fix a drop_nlink warning in minix_rmdir
WARNING in nsproxy_ns_active_get fs -1 syz, C 377 277d 284d 29/29 221d cefd55bd2159 nsproxy: fix free_nsproxy() and simplify create_new_namespaces()
kernel BUG in hfsplus_bnode_put hfs -1 syz, C error 180 259d 1306d 29/29 221d 152af1142878 hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create
KASAN: global-out-of-bounds Read in bit_putcs (3) fbdev 17 syz, C 58 294d 746d 29/29 221d 18c4ef4e765a fbdev: bitblit: bound-check glyph index in bit_putcs*
WARNING in em_nbyte_match net -1 syz, C done 7 253d 268d 29/29 221d 4fe5a00ec707 net: sched: fix TCF_LAYER_TRANSPORT handling in tcf_get_base_ptr()
WARNING: refcount bug in __vma_enter_locked mm 13 syz, C done 27 257d 264d 29/29 221d faf3c923523e mm: fix vma_start_write_killable() signal handling
KASAN: slab-use-after-free Write in kvm_gmem_release kvm 22 syz, C done 12 247d 297d 29/29 221d ae431059e75d KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying
kernel BUG in may_open (2) fs -1 syz, C done 17716 221d 404d 29/29 221d 34ab4c75588c bfs: Reconstruct file type when loading from disk 7f9d34b0a7cb cramfs: Verify inode mode when loading from disk 005d4b0d33f6 hfsplus: Verify inode mode when loading from disk 0a9e74051313 isofs: Verify inode mode when loading from disk 7a5aa54fba2b jfs: Verify inode mode when loading from disk 73861970938a minixfs: Verify inode mode when loading from disk 4aead50caf67 nilfs2: reject invalid file types when reading inodes 4e8011ffec79 ntfs3: pretend $Extend records as regular files bc107a619f02 squashfs: verify inode mode when loading from disk
memory leak in io_submit_sqes (5) io-uring 3 syz 3 258d 258d 29/29 221d 84230ad2d2af io_uring/poll: correctly handle io_poll_add() return value on update
KMSAN: kernel-infoleak in hugetlbfs_read_iter fs mm 9 syz, C 7 280d 279d 29/29 221d de8798965fd0 mm/memfd: fix information leak in hugetlb folios
WARNING in drm_wait_one_vblank (2) dri -1 syz, C error 3650 221d 745d 29/29 221d f050da08a4ed drm/vblank: Increase timeout in drm_wait_one_vblank()
divide error in __tcp_select_window (4) net 2 syz, C done 14 262d 264d 29/29 221d f07f4ea53e22 mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose().
memory leak in map_create bpf 3 syz, C 1 277d 273d 29/29 221d 688b745401ab bpf: Fix exclusive map memory leak
WARNING in xfrm_state_fini (4) net -1 syz, C done 89278 255d 308d 29/29 221d 10deb6986484 xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added
possible deadlock in dqget ocfs2 ext4 4 syz, C error 100357 230d 684d 29/29 221d 524c3853831c jbd2: use a per-journal lock_class_key for jbd2_trans_commit_key
KMSAN: uninit-value in bcmp (3) ntfs3 19 syz, C error 625 255d 735d 29/29 221d a8a3ca23bbd9 fs/ntfs3: Initialize allocated memory before use
WARNING in f2fs_delete_entry (2) f2fs -1 syz, C 4 309d 321d 29/29 221d f37981edcd06 f2fs: Add sanity checks before unlinking and loading inodes
KMSAN: uninit-value in ntfs_read_bh ntfs3 7 syz, C 202 261d 714d 29/29 221d 73e6b9dacf72 ntfs3: fix uninit memory after failed mi_read in mi_format_new
memory leak in smb3_fs_context_fullpath cifs 3 syz, C 1 278d 276d 29/29 221d 7e4d9120cfa4 cifs: fix memory leak in smb3_fs_context_parse_param error path
memory leak in __blkdev_issue_zero_pages block udf 3 syz 1 259d 255d 29/29 221d f7e3f852a42d block: fix memory leak in __blkdev_issue_zero_pages
INFO: task hung in io_uring_alloc_task_context (6) io-uring 1 syz 5 258d 288d 29/29 221d 101e596e7404 io_uring/fdinfo: cap SQ iteration at max SQ entries
general protection fault in ocfs2_prepare_dir_for_insert (2) ocfs2 8 syz, C error 20 253d 433d 29/29 221d aa5b6a72ccd9 ocfs2: add directory size check to ocfs2_find_dir_space_id()
KMSAN: uninit-value in ntfs_read_hdr (3) ntfs3 7 syz, C 6 226d 333d 29/29 221d a8a3ca23bbd9 fs/ntfs3: Initialize allocated memory before use 9948dcb2f7b5 ntfs3: Fix uninit buffer allocated by __getname()
KASAN: use-after-free Read in ocfs2_dir_foreach_blk ocfs2 19 syz, C error 115 247d 688d 29/29 221d 390ac56cf0f6 ocfs2: add boundary check to ocfs2_check_dir_entry()
WARNING in indx_insert_into_buffer (3) ntfs3 -1 syz, C done 11 296d 315d 29/29 221d c3856bb499ea ntfs3: avoid memcpy size warning
general protection fault in iomap_dio_bio_end_io ext4 iomap 2 syz, C error 16 263d 266d 29/29 221d 7fd8720dff2d iomap: allocate s_dio_done_wq for async reads as well
KASAN: use-after-free Read in ocfs2_claim_suballoc_bits ocfs2 19 syz, C inconclusive 326 251d 724d 29/29 221d e1c70505ee81 ocfs2: add extra consistency checks for chain allocator dinodes
WARNING in raw_ioctl usb mm -1 syz, C 664 252d 296d 29/29 221d a5160af78be7 usb: raw-gadget: cap raw_io transfer length to KMALLOC_MAX_SIZE
kernel BUG in ipgre_header (3) net -1 syz, C 99 222d 300d 29/29 221d 0ae9cfc454ea team: Move team device type change at the end of team_port_add
WARNING in shmem_unlink (2) overlayfs -1 syz, C done 3 262d 262d 29/29 221d e9c70084a64e ovl: fail ovl_lock_rename_workdir() if either target is unhashed
WARNING in driver_unregister (2) kernel -1 syz, C error 3214 252d 407d 29/29 221d 72262330f7b3 comedi: c6xdigio: Fix invalid PNP driver unregistration
kernel BUG in ocfs2_truncate_file ocfs2 -1 syz, C 179 248d 693d 29/29 221d 58b6fcd2ab34 ocfs2: mark inode bad upon validation failure during read
general protection fault in fsnotify_destroy_group fs 2 syz, C error 2 264d 262d 29/29 221d 7129098f4f7b fanotify: convert fanotify_init() to FD_PREPARE()
KASAN: slab-use-after-free Write in recv_work (3) nbd 22 syz, C 6 259d 287d 29/29 221d 9517b82d8d42 nbd: defer config put in recv_work
KASAN: slab-use-after-free Read in mgmt_pending_remove bluetooth 19 syz 2 277d 273d 29/29 221d 89bb613511cc Bluetooth: hci_sock: Prevent race in socket write iter and sock bind
KMSAN: uninit-value in sctp_inq_pop (3) sctp 7 syz, C 9 300d 300d 29/29 221d 51e5ad549c43 net: sctp: fix KMSAN uninit-value in sctp_inq_pop
UBSAN: array-index-out-of-bounds in ocfs2_block_group_fill ocfs2 15 syz, C done 6 304d 306d 29/29 221d e1c70505ee81 ocfs2: add extra consistency checks for chain allocator dinodes
WARNING in nsproxy_ns_active_put fs -1 syz, C done 38 278d 284d 29/29 221d cefd55bd2159 nsproxy: fix free_nsproxy() and simplify create_new_namespaces()
possible deadlock in padata_do_serial crypto 4 syz, C 40877 250d 413d 29/29 221d af3852cda347 padata: remove __padata_list_init()
kernel BUG in ext4_write_inline_data (3) ext4 -1 syz, C error 8 228d 337d 29/29 221d 892e1cf17555 ext4: refresh inline data size before write operations
general protection fault in gfs2_log_is_empty gfs2 19 syz, C done 92 296d 306d 29/29 221d 9c4a3de6cd5b gfs2: Asynchronous withdraw
WARNING in ntfs_put_super ntfs3 -1 syz, C done 40466 270d 292d 29/29 221d aee4d5a521e9 ntfs3: fix double free of sbi->options->nls and clarify ownership of fc->fs_private
WARNING in minix_rename fs -1 syz error 7 331d 418d 29/29 221d 009a2ba40303 Fix a drop_nlink warning in minix_rename
BUG: corrupted list in sctp_destroy_sock sctp 8 syz, C done 10 279d 283d 29/29 221d 73edb26b06ea sctp: Don't inherit do_auto_asconf in sctp_clone_sock().
KASAN: slab-use-after-free Read in btusb_disconnect usb bluetooth 19 syz, C 5 322d 408d 29/29 221d 23d22f2f7176 Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF
kernel BUG in __ocfs2_move_extent ocfs2 -1 syz, C 16 300d 313d 29/29 221d 8a7d58845fae ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent()
divide error in iova_bitmap_alloc iommu 2 syz, C 1 299d 313d 29/29 221d cb30dfa75d55 iommufd: Don't overflow during division for dirty tracking
KASAN: vmalloc-out-of-bounds Read in run_irq_workd kernel 17 syz, C error 225 288d 351d 29/29 221d 4e9077638301 bpf: Sync pending IRQ work before freeing ring buffer
WARNING in bpf_bprintf_prepare (3) bpf -1 syz, C done 6 275d 300d 29/29 221d c1da3df7191f bpf: Prevent nesting overflow in bpf_try_get_buffers
KASAN: global-out-of-bounds Read in io_uring_show_fdinfo io-uring 17 syz, C done 7 287d 290d 29/29 221d 8cd5a59e4d51 io_uring/fdinfo: validate opcode before checking if it's an 128b one
KMSAN: uninit-value in em_canid_match can net 7 syz, C 7 262d 264d 29/29 221d 0c922106d7a5 net/sched: em_canid: fix uninit-value in em_canid_match
WARNING in tracing_start_tr trace -1 syz, C 20 253d 487d 29/29 221d 02e7769e38c8 tracing: Fix enabling of tracing on file release
kernel BUG in ocfs2_commit_truncate ocfs2 -1 syz, C inconclusive 8 267d 609d 29/29 221d a2b1c419ff72 ocfs2: add inline inode consistency check to ocfs2_validate_inode_block()
KMSAN: kernel-infoleak in __skb_datagram_iter (4) net 18 syz, C 1050 221d 814d 29/29 221d 62b656e43eae net: sched: act_connmark: initialize struct tc_ife to fix kernel leak ce50039be49e net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak
KASAN: use-after-free Read in ocfs2_dx_dir_lookup_rec ocfs2 19 syz, C 14 265d 322d 29/29 221d 1b34743c31fe ocfs2: add extra consistency check to ocfs2_dx_dir_lookup_rec()
kernel BUG in ocfs2_remove_btree_range (2) ocfs2 -1 syz, C 5 257d 263d 29/29 221d 4ac577ae741e ocfs2: check tl_used after reading it from trancate log inode
WARNING in ocfs2_unlink ocfs2 -1 syz, C inconclusive 139 246d 579d 29/29 221d 7efb45f9685f ocfs2: invalidate inode if i_mode is zero after block read
memory leak in iovec_from_user (2) io-uring 3 syz, C 1 282d 279d 29/29 221d d3c9c213c0b8 io_uring/rw: ensure allocated iovec gets cleared for early failure
WARNING in destroy_super_work fs -1 syz done 107 277d 282d 29/29 221d f8d5a8970d2f ns: handle setns(pidfd, ...) cleanly
memory leak in ocfs2_new_path_from_path ocfs2 3 syz, C 5 247d 282d 29/29 221d 2214ec4bf89d ocfs2: fix memory leak in ocfs2_merge_rec_left()
memory leak in smb3_fs_context_parse_param cifs 3 syz, C 1 282d 282d 29/29 221d e8c73eb7db0a cifs: client: fix memory leak in smb3_fs_context_parse_param
general protection fault in pcl818_ai_cancel comedi 2 syz, C error 14192 252d 407d 29/29 221d a51f025b5038 comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel()
general protection fault in mntput fs 2 syz, C error 17 257d 262d 29/29 221d 05885f41658c namespace: convert fsmount() to FD_PREPARE()
WARNING: ODEBUG bug in gfs2_fill_super gfs2 -1 syz, C done 24 297d 300d 29/29 221d 9c4a3de6cd5b gfs2: Asynchronous withdraw
KMSAN: uninit-value in attr_set_size ntfs3 7 syz, C 3 301d 315d 29/29 221d 5f33da04e6ce fs/ntfs3: fix KMSAN uninit-value in ni_create_attr_list
WARNING: ODEBUG bug in nilfs_detach_log_writer (2) nilfs -1 syz, C 4 295d 293d 29/29 221d 9a6b60cb147d nilfs2: avoid having an active sc_timer before freeing sci
kernel BUG in ocfs2_claim_suballoc_bits ocfs2 -1 syz, C inconclusive 1706 244d 724d 29/29 221d 039bef30e320 ocfs2: fix kernel BUG in ocfs2_find_victim_chain
KASAN: use-after-free Read in ocfs2_listxattr ocfs2 19 syz, C 5 267d 279d 29/29 221d 2a4f33430e96 ocfs2: validate inline xattr size and entry count in ocfs2_xattr_ibody_list
divide error in ocfs2_block_group_fill (3) ocfs2 2 syz, C 3 295d 301d 29/29 221d 93ce0ff117b0 ocfs2: validate cl_bpc in allocator inodes to prevent divide-by-zero
memory leak in ni_add_subrecord ntfs3 3 syz, C 1 267d 279d 29/29 221d ccc4e86d1c24 fs/ntfs3: Prevent memory leaks in add sub record
WARNING in tracing_buffers_mmap_close (2) trace -1 syz, C 4 240d 278d 29/29 221d b042fdf18e89 tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs
BUG: sleeping function called from invalid context in hook_sb_delete fs 5 syz, C done 11887 239d 327d 29/29 221d 56325e8c68c0 landlock: fix splats from iput() after it started calling might_sleep()
WARNING in dax_iomap_rw fs -1 syz, C 5 305d 319d 29/29 258d 154d1e7ad9e5 dax: skip read lock assertion for read-only filesystems
INFO: task hung in v9fs_evict_inode v9fs 1 syz, C error done 2597 303d 619d 29/29 262d netfs: fix reference leak
kernel BUG in kvm_s2_put_page kvmarm -1 syz, C 88 291d 331d 29/29 268d fc670ad5966f Revert "KVM: arm64: Reschedule as needed when destroying the stage-2 page-tables"
WARNING in hugetlb_vma_assert_locked mm -1 syz, C 8 325d 327d 29/29 270d cec944dd329f hugetlbfs: move lock assertions after early returns in huge_pmd_unshare() dd83609b8898 hugetlbfs: skip VMAs without shareable locks in hugetlb_vmdelete_list
WARNING in invalidate_bh_lru fs -1 syz, C done done 5172 505d 1333d 29/29 271d 6f861765464f fs: Block writes to mounted block devices
KASAN: slab-use-after-free Read in hdm_disconnect usb 19 syz, C error 18706 291d 748d 29/29 271d 4b1270902609 most: usb: Fix use-after-free in hdm_disconnect
WARNING in xfs_init_fs_context mm -1 syz 21 309d 413d 29/29 271d 0f41997b1b2b xfs: don't use __GFP_NOFAIL in xfs_init_fs_context
BUG: sleeping function called from invalid context in sock_map_delete_elem net bpf 5 syz, C error 58 302d 354d 29/29 271d 7c33e97a6ef5 bpf: Do not disable preemption in bpf_test_run().
VFS: Busy inodes after unmount (use-after-free) (3) fs 2 syz, C error 85 290d 320d 29/29 271d 56094ad3eaa2 vfs: Don't leak disconnected dentries on umount
kernel BUG in qlist_free_all (2) fs -1 syz, C done 5 305d 336d 29/29 271d 25718fdcbdd2 net: gro_cells: Use nested-BH locking for gro_cell
KASAN: slab-out-of-bounds Read in __cpa_addr kernel 17 syz, C done 601 301d 315d 29/29 271d f25785f9b088 x86/mm: Fix overflow in __cpa_addr()
kernel BUG in ext4_es_cache_extent (3) ext4 -1 syz, C 4 333d 346d 29/29 271d 1d3ad183943b ext4: detect invalid INLINE_DATA + EXTENTS flag combination
kernel BUG in populate_free_space_tree (2) btrfs -1 syz error 3 320d 320d 29/29 271d a5a51bf4e9b7 btrfs: do not assert we found block group item when creating free space tree
WARNING in cgroup_freeze cgroups -1 syz, C done 847 299d 318d 29/29 271d 93a4b36ef3cf cgroup: Fix seqcount lockdep assertion in cgroup freezer
KASAN: stack-out-of-bounds Read in cp2112_xfer input 17 syz, C error 8 305d 335d 29/29 271d 362f21536966 HID: cp2112: Add parameter validation to data length
possible deadlock in vsock_linger virt net 4 syz, C 7 300d 300d 29/29 271d f7c877e75352 vsock: fix lock inversion in vsock_assign_transport()
kernel BUG in scrub_stripe_get_kaddr btrfs -1 syz, C error 293 303d 321d 29/29 271d 42d3a055d946 btrfs: do not use folio_test_partial_kmap() in ASSERT()s
KMSAN: uninit-value in poly1305_blocks crypto 7 syz, C 10 299d 300d 29/29 271d 1af424b15401 lib/crypto: poly1305: Restore dependency of arch code on !KMSAN
WARNING in nsfs_fh_to_dentry nfs -1 syz, C 77 292d 331d 29/29 271d 15623c860c93 nsfs: handle inode number mismatches gracefully in file handles
kernel BUG in ocfs2_refcount_cal_cow_clusters ocfs2 -1 syz, C 8 298d 316d 29/29 271d 78a63493f8e3 ocfs2: clear extent cache after moving/defragmenting extents
BUG: sleeping function called from invalid context in __set_page_owner net virt 5 syz, C done 79 297d 311d 29/29 271d c83aab85e181 mm: don't spin in add_stack_record when gfp flags don't allow
general protection fault in __smc_diag_dump (4) smc 2 syz, C done 6 297d 333d 29/29 271d f584239a9ed2 net/smc: fix general protection fault in __smc_diag_dump
KASAN: stack-out-of-bounds Read in exfat_nls_to_utf16 exfat 17 syz, C done 36 295d 315d 29/29 271d 2d8636119b92 exfat: fix out-of-bounds in exfat_nls_to_ucs2()
kernel BUG in dnotify_free_mark ntfs3 -1 syz, C error done 22993 370d 1388d 29/29 272d 55ad333de0f8 fs/ntfs3: Unify inode corruption marking with _ntfs_bad_inode()
WARNING in media_create_pad_link (2) usb media -1 syz, C error done 11 312d 515d 29/29 275d 0e2ee70291e6 media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID
INFO: rcu detected stall in watchdog bpf 1 syz, C error done 14 337d 1459d 29/29 275d eecd203ada43 media: imon: make send_packet() more robust
INFO: rcu detected stall in dummy_timer (4) usb 1 syz, C inconclusive done 25 338d 1499d 29/29 275d eecd203ada43 media: imon: make send_packet() more robust
INFO: task hung in bch2_direct_write (2) fs 1 syz, C unreliable done 15 357d 365d 29/29 277d f2c61db29f27 Remove bcachefs core code
general protection fault in hfs_find_init hfs 10 syz, C done done 1024 380d 3060d 29/29 286d 736a0516a162 hfs: fix general protection fault in hfs_find_init()
general protection fault in unpin_user_pages_dirty_lock mm 2 syz, C 4 343d 343d 29/29 290d e3c05b6e370c mm/gup: remove record_subpages()
WARNING in ext4_init_orphan_info ext4 mm -1 syz, C done 5 317d 342d 29/29 291d 0a6ce20c1564 ext4: verify orphan file size is not too big
KASAN: slab-use-after-free Read in io_waitid_wait io-uring 19 syz, C 3 314d 313d 29/29 291d 2f8229d53d98 io_uring/waitid: always prune wait queue entry in io_waitid_wait()
general protection fault in vc_deallocate serial 2 syz, C done 475 333d 342d 29/29 291d fc702e7df456 vt: move vc_saved_screen to within tty allocated judgment
KASAN: slab-use-after-free Write in iommufd_eventq_fops_release iommu 22 syz, C 5 337d 335d 29/29 291d 4e034bf045b1 iommufd: Fix race during abort for file descriptors
possible deadlock in __snd_pcm_lib_xfer (2) sound 4 syz, C done 9 330d 352d 29/29 291d 9fc4a3da9a02 ALSA: pcm: Disable bottom softirqs as part of spin_lock_irq() on PREEMPT_RT
KASAN: use-after-free Read in ocfs2_get_system_file_inode ocfs2 19 syz, C done 5 358d 356d 29/29 291d fe7a283b3916 ocfs2: add suballoc slot check in ocfs2_validate_inode_block()
WARNING in write_raw_marker_to_buffer trace -1 syz, C 29 308d 310d 29/29 291d bda745ee8fbb tracing: Fix tracing_mark_raw_write() to use buf and not ubuf 54b91e54b113 tracing: Stop fortify-string from warning in tracing_mark_raw_write()
KMSAN: uninit-value in hfs_find_set_zero_bits hfs 7 syz, C 4210 322d 1259d 29/29 291d 2048ec5b98db hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits()
general protection fault in bcsp_recv bluetooth 8 syz, C error 1003 299d 547d 29/29 291d ca94b2b036c2 Bluetooth: bcsp: receive data only if registered
INFO: task hung in __bread_gfp (7) udf jfs 1 syz, C done 6 325d 330d 29/29 291d ab073abf6d97 block: fix EOD return for device with nr_sectors == 0
WARNING in rtl8150_start_xmit/usb_submit_urb net usb -1 syz, C 5 332d 352d 29/29 291d 958baf5eaee3 net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast
KASAN: slab-use-after-free Read in media_devnode_unregister usb media 19 syz, C 2055 338d 341d 29/29 291d 8cfc8cec1b4d media: mc: Clear minor number before put device
general protection fault in snd_usbmidi_do_output usb sound 2 syz, C error 8 321d 328d 29/29 291d 9f2c0ac1423d ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free
KASAN: slab-out-of-bounds Write in fuse_dev_do_write fuse 21 syz, C 6 354d 359d 29/29 291d 9d81ba6d49a7 fuse: Block access to folio overlimit
WARNING in __rt_mutex_slowlock_locked exfat ext4 -1 syz, C done 10 301d 360d 29/29 291d 79c1587b6cda exfat: validate cluster allocation bits of the allocation bitmap
general protection fault in print_reg_state bpf 2 syz, C done 4 321d 327d 29/29 291d 34904582b502 bpf: Skip scalar adjustment for BPF_NEG if dst is a pointer
WARNING in ext4_xattr_inode_update_ref ext4 -1 syz, C error 1291 291d 340d 29/29 291d 57295e835408 ext4: guard against EA inode refcount underflow in xattr update
WARNING: bad unlock balance in copy_process mm 4 syz, C 304 317d 442d 29/29 291d 4ec3c15462b9 futex: Use correct exit on failure from futex_hash_allocate_default()
INFO: task hung in v9fs_file_fsync fs mm 1 syz, C done 14 323d 363d 29/29 291d e8fe3f07a357 9p/trans_fd: p9_fd_request: kick rx thread if EPOLLIN
KMSAN: uninit-value in __hfsplus_ext_cache_extent hfs 7 syz, C 2471 321d 962d 29/29 291d 4840ceadef42 hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent()
WARNING in ah6_output net -1 syz, C error 8 328d 449d 29/29 291d 2327a3d6f65c net: ipv6: fix field-spanning memcpy warning in AH output
WARNING in convert_ctx_accesses (2) bpf -1 syz, C 16 322d 337d 29/29 291d 6fabca2fc94d bpf: Explicitly check accesses to bpf_sock_addr
WARNING in maybe_exit_scc bpf -1 syz, C done 59 319d 335d 29/29 291d a3c73d629ea1 bpf: dont report verifier bug for missing bpf_scc_visit on speculative path
KMSAN: uninit-value in squashfs_get_parent squashfs 7 syz, C 2 332d 332d 29/29 291d 74058c0a9fc8 Squashfs: fix uninit-value in squashfs_get_parent
general protection fault in btrfs_root_node btrfs 8 syz, C done 670 315d 712d 29/29 291d ed4e6b5d644c btrfs: ref-verify: handle damaged extent root tree
general protection fault in ocfs2_evict_inode (2) ocfs2 2 syz, C error 68 355d 362d 29/29 291d f46e8ef8bb7b ocfs2: prevent release journal inode after journal shutdown
KASAN: global-out-of-bounds Read in z_erofs_decompress_queue erofs 17 syz, C done 6 359d 359d 29/29 291d 131897c65e2b erofs: fix invalid algorithm for encoded extents
WARNING in ovl_copy_up_file (2) squashfs -1 syz, C error 12 325d 325d 29/29 291d 9f1c14c1de1b Squashfs: reject negative file sizes in squashfs_read_inode()
WARNING in max_vclocks_store mm net -1 syz, C 3 351d 587d 29/29 291d e9f35294e18d ptp: Add a upper bound on max_vclocks
KMSAN: uninit-value in hfsplus_delete_cat hfs 7 syz, C 4901 321d 1350d 29/29 291d 9b3d15a75891 hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat()
INFO: task hung in ocfs2_page_mkwrite (2) ocfs2 1 syz, C error 4 361d 360d 29/29 291d 04100f775c2e ocfs2: fix recursive semaphore deadlock in fiemap call
possible deadlock in snd_pcm_drop sound 4 syz, C error 4 322d 321d 29/29 291d 9fc4a3da9a02 ALSA: pcm: Disable bottom softirqs as part of spin_lock_irq() on PREEMPT_RT
KMSAN: uninit-value in nci_dev_up (2) nfc net 7 syz, C 34 318d 374d 29/29 291d 9c328f54741b net: nfc: nci: Add parameter validation for packet data
kernel BUG in netfs_perform_write netfs -1 syz, C error 17 327d 346d 29/29 291d 66d938e89e94 netfs: Prevent duplicate unlocking
WARNING in __linkwatch_sync_dev (2) net -1 syz, C done 952 304d 431d 29/29 291d 23a6037ce76c bonding: Remove support for use_carrier
BUG: sleeping function called from invalid context in dummy_dequeue usb 5 syz, C error 6278 336d 356d 29/29 291d 8d63c83d8eb9 USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels
kernel BUG in clear_inode (4) f2fs -1 syz, C done 6 310d 341d 29/29 291d 9251a9e6e871 f2fs: fix to truncate first page in error path of f2fs_truncate()
general protection fault in blk_mq_free_tags_callback block 2 syz, C 3 328d 328d 29/29 291d 670bfe683850 blk-mq: fix null-ptr-deref in blk_mq_free_tags() from error path
WARNING in nfsd_file_cache_init mm -1 syz, C error 4 315d 313d 29/29 291d f7dfa0f31b13 slub: Don't call lockdep_unregister_key() for immature kmem_cache.
general protection fault in f2fs_check_opt_consistency f2fs 2 syz, C done 5 318d 365d 29/29 291d 930a9a6ee8e7 f2fs: fix to avoid NULL pointer dereference in f2fs_check_quota_consistency()
WARNING: locking bug in vgic_put_irq kvmarm 4 syz, C 7 349d 356d 29/29 291d d54594accf73 KVM: arm64: vgic-v3: Erase LPIs from xarray outside of raw spinlocks
WARNING in ni_rename ntfs3 -1 syz, C error 233 293d 413d 29/29 291d 0dc7117da8f9 fs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist
KASAN: slab-use-after-free Write in __xfrm_state_delete net 22 syz, C done 4863 300d 383d 29/29 291d cd8ae32e4e46 xfrm: xfrm_alloc_spi shouldn't use 0 as SPI
general protection fault in try_to_wake_up (3) kernel 2 syz 23 328d 348d 29/29 291d b549113738e8 futex: Prevent use-after-free during requeue-PI
KASAN: vmalloc-out-of-bounds Write in imageblit (5) fbdev 21 syz, C 1075 291d 342d 29/29 291d 3637d34b35b2 fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds
KASAN: slab-out-of-bounds Read in hfsplus_bmap_alloc hfs 17 syz, C 1 382d 538d 29/29 291d 738d5a51864e hfs: validate record offset in hfsplus_bmap_alloc
general protection fault in exfat_utf16_to_nls exfat 2 syz, C done 11 325d 326d 29/29 291d 29c063658d53 exfat: combine iocharset and utf8 option setup
INFO: task hung in erofs_bread erofs 1 syz, C 4 335d 335d 29/29 291d 334c0e493c2a erofs: avoid reading more for fragment maps
WARNING in sysfs_emit_at fs -1 syz, C 2 344d 340d 29/29 291d 9dfec4a51df9 USB: core: remove the move buf action
KASAN: use-after-free Read in udf_update_tag udf 19 syz, C 27 324d 725d 29/29 291d 3bd5e45c2ce3 fs: udf: fix OOB read in lengthAllocDescs handling
WARNING: possible circular locking dependency detected (5) -1 syz, C 1 335d 335d 29/29 291d 9f7c02e03157 nbd: restrict sockets to TCP and UDP
possible deadlock in serial8250_handle_irq hams 4 syz, C 180 321d 1122d 29/29 291d 38b04ed7072e 6pack: drop redundant locking and refcounting
INFO: trying to register non-static key in skb_dequeue (4) audit -1 syz, C done 20 346d 346d 29/29 291d 2aef21a6a603 audit: init ab->skb_list earlier in audit_buffer_alloc()
possible deadlock in inet_shutdown net 4 syz, C done 11 336d 345d 29/29 291d 9f7c02e03157 nbd: restrict sockets to TCP and UDP
WARNING in inet_sock_destruct (5) net -1 syz, C error 8 304d 341d 29/29 291d a3967baad4d5 tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.
WARNING in kvm_arch_vcpu_ioctl_run (6) kvm-x86 -1 syz, C 117 314d 395d 29/29 291d e750f8539128 KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O
KASAN: slab-use-after-free Read in napi_gro_frags (2) net 19 syz, C done 3 341d 334d 29/29 291d 1091860a16a8 net: tun: Update napi->skb after XDP process
WARNING in do_misc_fixups bpf -1 syz, C 7604 339d 377d 29/29 291d e4414b01c1cd bpf: Check the helper function is valid in get_helper_proto
possible deadlock in smc_diag_dump_proto smc 4 syz, C error 113 345d 348d 29/29 291d 5d6b58c932ec net: lockless sock_i_ino()
general protection fault in find_match (6) net 17 syz, C 102 328d 334d 29/29 291d 390b3a300d78 nexthop: Forbid FDB status change while nexthop is in a group
KMSAN: kernel-infoleak in rng_recvmsg crypto 9 syz, C 50 317d 373d 29/29 291d 9aa7e045f4af crypto: jitter - Mark intermediary memory as clean
WARNING in ext4_xattr_block_set (3) ext4 -1 syz, C error 73 303d 334d 29/29 291d 44d2a72f4d64 ext4: validate ea_ino and size in check_xattrs
WARNING in est_timer net -1 syz, C error 497 346d 355d 29/29 291d 9f74c0ea9b26 net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y
KMSAN: uninit-value in lan78xx_reset net usb 7 syz, C 14 312d 346d 29/29 291d 49bdb63ff644 net: usb: lan78xx: Fix lost EEPROM read timeout error(-ETIMEDOUT) in lan78xx_read_raw_eeprom
WARNING in tracing_buffers_mmap_close trace -1 syz, C 1378 311d 609d 29/29 291d de4cbd704731 ring buffer: Propagate __rb_map_vma return value to caller
KASAN: slab-use-after-free Read in cmp_bss wireless 19 syz, C 13 348d 370d 29/29 291d 26e84445f02c wifi: cfg80211: fix use-after-free in cmp_bss()
possible deadlock in __netdev_update_features net 4 syz, C done 227 293d 440d 29/29 291d 0f82c3ba66c6 macsec: sync features on RTM_NEWLINK
possible deadlock in task_fork_fair bpf trace 4 syz, C done done 9106 630d 1043d 29/29 305d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
UBSAN: shift-out-of-bounds in aio_iiro_16_attach comedi -1 syz, C 56 392d 405d 29/29 305d 66acb1586737 comedi: aio_iiro_16: Fix bit shift out of bounds
general protection fault in iter_file_splice_write fs 2 syz, C done done 2812 361d 818d 29/29 305d netfs: Fix unbuffered write error handling
WARNING in try_to_migrate_one (3) mm -1 syz, C done done 6 349d 372d 29/29 305d cf1b80dc31a1 mm: pass page directly instead of using folio_page
WARNING in kvm_apic_accept_events kvm-x86 -1 syz, C error done 27 339d 437d 29/29 305d 0fe3e8d804fd KVM: x86: Move INIT_RECEIVED vs. INIT/SIPI blocked check to KVM_RUN
WARNING in nf_reject_fill_skb_dst netfilter -1 syz, C done 214 347d 360d 29/29 307d netfilter: nf_reject: don't leak dst refcount for loopback packets
WARNING in nf_send_reset6 netfilter -1 syz, C 9 352d 360d 29/29 307d netfilter: nf_reject: don't leak dst refcount for loopback packets
KMSAN: uninit-value in sctp_inq_pop (2) sctp 7 syz, C 4089 368d 1681d 29/29 312d fd60d8a08619 sctp: linearize cloned gso packets in sctp_rcv
KMSAN: kernel-infoleak in do_insn_ioctl comedi 18 syz, C 164 358d 395d 29/29 312d 3cd212e895ca comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl()
general protection fault in rose_rt_ioctl hams 2 syz, C 64 353d 354d 29/29 312d 1cc8a5b534e5 net: rose: fix a typo in rose_clear_routes()
UBSAN: shift-out-of-bounds in pcl726_attach comedi -1 syz, C 318 358d 407d 29/29 312d 96cb948408b3 comedi: pcl726: Prevent invalid irq number
KASAN: slab-out-of-bounds Read in mcp2221_raw_event input usb 19 syz, C 1144 312d 618d 29/29 312d b56cc41a3ae7 hid: fix I2C read buffer overflow in raw_event() for mcp2221
possible deadlock in bch2_symlink exfat 4 syz, C error 1135 347d 686d 29/29 312d 5f1c8965e748 ovl: use I_MUTEX_PARENT when locking parent in ovl_create_temp()
general protection fault in atmtcp_c_send atm 2 syz, C done 7 355d 361d 29/29 312d ec79003c5f9d atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().
BUG: unable to handle kernel paging request in move_pages mm 8 syz, C 4 381d 395d 29/29 312d aba6faec0103 userfaultfd: fix a crash in UFFDIO_MOVE when PMD is a migration entry
UBSAN: shift-out-of-bounds in ax88772_bind usb -1 syz, C done 19 360d 365d 29/29 312d 24ef2f53c07f net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization
WARNING in xfrm_state_fini (3) net -1 syz, C done 122008 312d 383d 29/29 312d 42e42562c9cf xfrm: flush all states in xfrm_state_fini
WARNING: ODEBUG bug in __sk_destruct (3) net -1 syz, C error 12 357d 373d 29/29 312d 52565a935213 net: kcm: Fix race condition in kcm_unattach()
WARNING in shmem_unlink overlayfs -1 syz inconclusive 12 328d 365d 29/29 312d e8bd877fb76b ovl: fix possible double unlink
WARNING in css_rstat_exit cgroups -1 syz 39 360d 429d 29/29 312d eea51c6e3f66 cgroup: avoid null de-ref in css_rstat_exit()
WARNING in __ww_mutex_wound dri -1 syz, C 16832 351d 383d 29/29 312d 21924af67d69 locking: Fix __clear_task_blocked_on() warning from __ww_mutex_wound() path
KMSAN: uninit-value in sctp_assoc_bh_rcv sctp 7 syz, C 258 368d 498d 29/29 312d fd60d8a08619 sctp: linearize cloned gso packets in sctp_rcv
BUG: unable to handle kernel paging request in nsim_queue_free net 8 syz 49 347d 381d 29/29 312d b2cafefaf047 netdevsim: Fix wild pointer access in nsim_queue_free().
KMSAN: uninit-value in hsr_get_node (3) net 7 syz, C 30 361d 850d 29/29 312d 7af76e9d18a9 net, hsr: reject HSR frame if skb can't hold tag
WARNING in move_page_tables mm -1 syz, C 3 369d 369d 29/29 312d 772e5b4a5e83 mm/mremap: fix WARN with uffd that has remap events disabled
WARNING in nft_socket_init (2) netfilter -1 syz, C done 6 369d 387d 29/29 312d 1dee968d22ea netfilter: nft_socket: remove WARN_ON_ONCE with huge level value
WARNING in follow_page_pte input usb mm -1 syz, C done 6 375d 375d 29/29 312d cf1b80dc31a1 mm: pass page directly instead of using folio_page
WARNING in virtio_transport_send_pkt_info net virt kvm -1 syz, C 145 352d 370d 29/29 312d 7fb1291257ea vsock/virtio: Fix message iterator handling on transmit path
KMSAN: uninit-value in __sctp_v6_cmp_addr (2) sctp 7 syz, C 9 356d 355d 29/29 312d 2e8750469242 sctp: initialize more fields in sctp_v6_from_sk()
KMSAN: kernel-infoleak in do_insnlist_ioctl comedi 18 syz, C 10 360d 391d 29/29 312d 3cd212e895ca comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl()
WARNING in rxe_skb_tx_dtor rdma -1 syz, C 11 359d 472d 29/29 312d 3c3e9a9f2972 RDMA/rxe: Flush delayed SKBs while releasing RXE resources
WARNING in path_noexec mm fs -1 syz, C done 14318 320d 405d 29/29 320d secretmem: use SB_I_NOEXEC
kernel BUG in f2fs_sync_node_pages f2fs -1 syz, C done 4275 345d 427d 29/29 325d 6dea74e454c2 f2fs: Fix __write_node_folio() conversion
WARNING: suspicious RCU usage in corrupted (3) net 4 syz, C done done 1 386d 447d 29/29 333d 7f12c3385048 net, bpf: Fix RCU usage in task_cls_state() for BPF programs
WARNING in flush_delayed_work usb -1 syz, C 704 410d 415d 29/29 335d 9bd9c8026341 usb: hub: Fix flushing of delayed work used for post resume purposes
kernel BUG in bch2_journal_keys_peek_max fs -1 syz, C done 45 413d 550d 29/29 335d 425da82c63e3 bcachefs: btree_iter: fix updates, journal overlay
WARNING in osif_xfer/usb_submit_urb usb -1 syz, C error done 18 421d 468d 29/29 339d 56ad91c1aa9c i2c: robotfuzz-osif: disable zero-length read messages
KMSAN: kernel-infoleak in vmci_host_unlocked_ioctl (3) kernel 9 syz, C 20 394d 423d 29/29 341d 8282013b5605 vmci: Prevent the dispatching of uninitialized payloads vmci: Prevent the dispatching of uninitialized payloads
WARNING in move_to_new_folio (2) gfs2 mm -1 syz, C error 398 384d 404d 29/29 342d 5c8f12cf1e64 gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops
WARNING in __vmap_pages_range_noflush io-uring -1 syz, C done 14 374d 373d 29/29 346d 33503c083fda io_uring/memmap: cast nr_pages to size_t before shifting
WARNING in bpf_check (4) bpf -1 syz, C done 5241 346d 452d 29/29 346d e09299225d5b bpf: Reject narrower access to pointer ctx fields
WARNING in ip6_mr_output net -1 syz, C done 143 411d 415d 29/29 346d af232e7615e4 ipv6: guard ip6_mr_output() with rcu
KASAN: use-after-free Read in bch2_btree_node_read_done fs 19 syz, C done 64 420d 629d 29/29 346d d89a34b14df5 bcachefs: Move bset size check before csum check
WARNING in _ieee80211_sta_cur_vht_bw wireless -1 syz, C 52 403d 416d 29/29 346d 58fcb1b4287c wifi: mac80211: reject VHT opmode for unsupported channel widths
KASAN: slab-use-after-free Read in rose_get_neigh hams 19 syz, C error 1449 404d 796d 29/29 346d 34a500caf48c rose: fix dangling neighbour pointers in rose_rt_device_down()
KASAN: slab-out-of-bounds Read in mon_copy_to_buff usb 17 syz, C 7 398d 405d 29/29 346d 0d0777ccaa2d HID: core: ensure __hid_request reserves the report ID as the first byte
KASAN: slab-use-after-free Read in do_check bpf 19 syz, C 15 429d 431d 29/29 346d 3d71b8b9abae bpf: Fix state use-after-free on push_stack() err
WARNING in ieee80211_tdls_oper wireless -1 syz, C 6 437d 461d 29/29 346d 16ecdab5446f wifi: mac80211: reject TDLS operations when station is not associated
WARNING in ipv6_gso_segment net -1 syz, C 8 382d 382d 29/29 346d d45cf1e7d718 ipv6: reject malicious packets in ipv6_gso_segment()
kernel BUG in try_to_unmap_one (2) mm -1 syz, C 7 413d 437d 29/29 346d 9f1e8cd0b7c4 mm/vmscan: fix hwpoisoned large folio handling in shrink_folio_list
kernel BUG in bch2_btree_path_level_init (3) fs -1 syz, C done 489 346d 603d 29/29 346d 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
WARNING in perf_pending_task perf -1 syz, C 35773 393d 418d 29/29 346d 3da6bb419750 perf/core: Fix WARN in perf_sigtrap()
possible deadlock in team_del_slave (3) net 4 syz, C error 386707 358d 842d 29/29 346d bfb4fb77f9a8 team: replace team lock with rtnl lock
general protection fault in __smc_diag_dump (3) smc 2 syz, C error 102 353d 647d 29/29 346d 60ada4fe644e smc: Fix various oops due to inet_sock type confusion.
UBSAN: shift-out-of-bounds in das16m1_attach comedi -1 syz, C 92 392d 408d 29/29 346d ed93c6f68a3b comedi: das16m1: Fix bit shift out of bounds
WARNING in hashtab_init selinux -1 syz, C 992 382d 424d 29/29 346d 9ab71d9204c3 selinux: add __GFP_NOWARN to hashtab_init() allocations
kernel BUG in __bch2_bkey_compat fs -1 syz, C done done 5 429d 429d 29/29 346d 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
INFO: task hung in generic_file_write_iter (3) exfat 1 syz, C error 4 349d 389d 29/29 346d fb0e9db99eef fat: fix too many log in fat_chain_add()
WARNING in bdev_getblk udf -1 syz, C done 146 347d 406d 29/29 346d 7e49538288e5 loop: Avoid updating block size under exclusive owner
kernel BUG in bch2_trans_update_by_path fs -1 syz, C done 857 348d 423d 29/29 346d c72d628469b8 bcachefs: Fix btree for nonexistent tree depth
BUG: unable to handle kernel paging request in __bch2_bkey_unpack_key fs 8 syz, C 75 422d 446d 29/29 346d 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
WARNING in udf_process_sequence udf -1 syz, C error 1 402d 401d 29/29 346d 1a11201668e8 udf: Verify partition map count
WARNING in btrfs_rebuild_free_space_tree btrfs -1 syz, C 1 438d 434d 29/29 346d 1e6ed33cabba btrfs: fix failure to rebuild free space tree using multiple transactions
WARNING in reg_bounds_sanity_check bpf -1 syz, C done 6525 346d 411d 29/29 346d 6279846b9b25 bpf: Forget ranges when refining tnum after JSET
general protection fault in clip_push ext4 net 8 syz, C 5 415d 422d 29/29 346d b993ea46b3b6 atm: clip: prevent NULL deref in clip_push()
general protection fault in qfq_qlen_notify net 2 syz, C 18 402d 408d 29/29 346d ffdde7bf5a43 net/sched: Abort __tc_modify_qdisc if parent class does not exist
KASAN: slab-use-after-free Read in disk_add_events fuse block 19 syz, C 4 383d 383d 29/29 346d 1df1fc845d22 md: fix create on open mddev lifetime regression
WARNING in ip_mr_output netfilter -1 syz, C error 74 412d 415d 29/29 346d beead7eea896 net: ipv4: guard ip_mr_output() with rcu
kernel BUG in clear_inode (3) jfs -1 syz, C error 637 349d 430d 29/29 346d 2d91b3765cd0 jfs: truncate good inode pages when hard link is 0
general protection fault in drr_qlen_notify net 10 syz, C done 101 399d 408d 29/29 346d ffdde7bf5a43 net/sched: Abort __tc_modify_qdisc if parent class does not exist
general protection fault in qdisc_tree_reduce_backlog net 8 syz, C done 255 396d 408d 29/29 346d ffdde7bf5a43 net/sched: Abort __tc_modify_qdisc if parent class does not exist
WARNING: refcount bug in process_scheduled_works fuse 13 syz, C done 277 373d 383d 29/29 346d 1df1fc845d22 md: fix create on open mddev lifetime regression
kernel panic: trans should be locked, unlocked by bch2_btree_update_start fs 2 syz, C error error 361 428d 619d 29/29 346d 5c4acbc8ce90 bcachefs: Don't unlock the trans if ret doesn't match BCH_ERR_operation_blocked
WARNING in usbnet_status_start usb -1 syz, C 349 391d 404d 29/29 346d 4c4ca3c46167 usb: net: sierra: check for no status endpoint
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb (4) bluetooth 12 syz, C 8 405d 405d 29/29 346d a0075accbf0d Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb()
BUG: unable to handle kernel paging request in ocfs2_unlock_and_free_folios ocfs2 8 syz, C 141 370d 427d 29/29 346d 2ae826799932 ocfs2: reset folio to NULL when get folio fails
general protection fault in hfsc_qlen_notify net 10 syz, C 161 395d 409d 29/29 346d ffdde7bf5a43 net/sched: Abort __tc_modify_qdisc if parent class does not exist
KMSAN: uninit-value in pptp_xmit (3) net 7 syz, C 49 376d 383d 29/29 346d de9c4861fb42 pptp: ensure minimal skb length in pptp_xmit()
KASAN: use-after-free Read in crypto_poly1305_update bcachefs 19 syz, C done done 20 426d 545d 29/29 346d d89a34b14df5 bcachefs: Move bset size check before csum check
KASAN: slab-out-of-bounds Read in ntfs_utf16_to_nls ntfs3 17 syz, C error 5 434d 438d 29/29 346d e841ecb13933 fs/ntfs3: Add sanity check for file name
general protection fault in htb_qlen_notify net 10 syz, C done 166 399d 409d 29/29 346d ffdde7bf5a43 net/sched: Abort __tc_modify_qdisc if parent class does not exist
KASAN: slab-use-after-free Write in recv_work (2) nbd 22 syz, C 16 365d 461d 29/29 346d aa9552438ebf nbd: fix uaf in nbd_genl_connect() error path
WARNING in do_check bpf -1 syz, C error 51 358d 429d 29/29 346d 3157f7e29996 bpf: handle jset (if a & b ...) as a jump in CFG computation
KASAN: slab-out-of-bounds Read in poly1305_update_arch bcachefs 19 syz, C done done 29 441d 832d 29/29 346d d89a34b14df5 bcachefs: Move bset size check before csum check
kernel BUG in bch2_bkey_cmp_packed (2) fs -1 syz, C 7 430d 440d 29/29 346d 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
kernel BUG in bch2_reconstruct_snapshots fs -1 syz, C done done 7 454d 545d 29/29 346d b2e2bed11980 bcachefs: Add missing key type checks to check_snapshot_exists()
UBSAN: array-index-out-of-bounds in dbAllocAG jfs 15 syz, C 1 470d 480d 29/29 346d c214006856ff jfs: upper bound check of tree index in dbAllocAG
KASAN: slab-use-after-free Read in neon_poly1305_update bcachefs 19 syz, C 5 754d 821d 29/29 346d d89a34b14df5 bcachefs: Move bset size check before csum check
possible deadlock in __ocfs2_flush_truncate_log ocfs2 4 syz, C inconclusive 3410 370d 519d 29/29 346d 08eabe4b9e98 ocfs2: avoid potential ABBA deadlock by reordering tl_inode lock
UBSAN: shift-out-of-bounds in gfs2_dir_read (2) gfs2 -1 syz, C 13 394d 398d 29/29 346d 557c024ca725 gfs2: Validate i_depth for exhash directories
kernel BUG in sanity_check_pinned_pages mm -1 syz, C 3 421d 439d 29/29 346d 5afb4bf9fc62 io_uring/rsrc: fix folio unpinning
BUG: unable to handle kernel NULL pointer dereference in bch2_btree_update_start fs 10 syz, C 6 416d 429d 29/29 346d 56be92c63f02 bcachefs: Fix pool->alloc NULL pointer dereference
WARNING in check_helper_call bpf -1 syz, C done 7 369d 411d 29/29 346d 65fdafd6765f bpf: Avoid warning on multiple referenced args in call
KASAN: use-after-free Read in bch2_checksum fs 19 syz, C error done 8 450d 462d 29/29 346d d89a34b14df5 bcachefs: Move bset size check before csum check
kernel BUG in bch2_btree_node_iter_init (2) fs -1 syz, C done 3 403d 403d 29/29 346d 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
possible deadlock in upgrade_mmap_lock_carefully (2) ntfs3 mm 4 syz, C error 6 416d 434d 29/29 346d a49f0abd8959 Revert "fs/ntfs3: Replace inode_trylock with inode_lock"
KASAN: slab-out-of-bounds Read in pause_parse_request net 17 syz, C done 217 410d 416d 29/29 346d 99e3eb454cc4 net: ethtool: avoid OOB accesses in PAUSE_SET
WARNING in kvfree_call_rcu net lsm -1 syz, C 2 405d 404d 29/29 346d 60ada4fe644e smc: Fix various oops due to inet_sock type confusion.
WARNING in format_decode (3) bpf trace -1 syz, C done 2248 392d 999d 29/29 346d f8242745871f bpf: Reject %p% format string in bprintf-like helpers
KASAN: slab-out-of-bounds Read in nfacct_mt_checkentry netfilter 17 syz, C done 7 397d 395d 29/29 346d bf58e667af7d netfilter: xt_nfacct: don't assume acct name is null-terminated
KASAN: vmalloc-out-of-bounds Write in imageblit (4) fbdev 21 syz, C 3869 346d 725d 29/29 346d af0db3c1f898 fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
kernel BUG in __hfsplus_setxattr hfs -1 syz, C error 18903 370d 1359d 29/29 346d c7c6363ca186 hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
WARNING in record_func_key bpf -1 syz, C 90 408d 411d 29/29 346d 032547272eb0 bpf: Avoid warning on unexpected map for tail call
WARNING in hfsplus_free_extents hfs -1 syz, C error 402 390d 1350d 29/29 346d fcb96956c921 hfsplus: remove mutex_lock check in hfsplus_free_extents
KMSAN: uninit-value in nf_flow_offload_inet_hook (2) netfilter 7 syz, C 13 403d 405d 29/29 346d 18cdb3d982da netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
KASAN: slab-use-after-free Read in bch2_str_hash_repair_key fs 19 syz, C done 226 412d 432d 29/29 346d 9b54efe66c9b bcachefs: Fix alloc_req use after free
kernel BUG in __bch2_bkey_unpack_key fs -1 syz, C 43 425d 446d 29/29 346d 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
UBSAN: shift-out-of-bounds in __bch2_btree_node_hash_insert fs -1 syz, C done 434 408d 592d 29/29 346d 96de8f852031 bcachefs: mark invalid_btree_id autofix
KASAN: slab-out-of-bounds Read in ocfs2_dx_dir_lookup_rec ocfs2 19 syz, C 76 346d 626d 29/29 346d 44acc46d182f ocfs2: avoid NULL pointer dereference in dx_dir_lookup_rec()
kernel BUG in folio_unlock (3) f2fs netfs -1 syz, C done 2837 431d 542d 29/29 346d 6dea74e454c2 f2fs: Fix __write_node_folio() conversion
KASAN: slab-use-after-free Read in io_poll_remove_entries comedi 19 syz, C 12 384d 393d 29/29 346d 35b6fc51c666 comedi: fix race between polling and detaching
possible deadlock in rpc_close_pipes net nfs 4 syz, C 904 408d 410d 29/29 346d 2a8061ee5e41 better lockdep annotations for simple_recursive_removal()
WARNING: suspicious RCU usage in task_cls_state net 4 syz, C done 175 359d 447d 29/29 346d 7f12c3385048 net, bpf: Fix RCU usage in task_cls_state() for BPF programs
BUG: assuming non migratable context at ./include/linux/filter.h:LINE netfilter -1 syz, C done 1189 358d 395d 29/29 346d 17ce3e5949bc bpf: Disable migration in nf_hook_run_bpf().
WARNING in remove_proc_entry (8) net nfs -1 syz 76 380d 430d 29/29 346d e8d6f3ab5946 nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
KASAN: slab-use-after-free Read in bch2_bucket_alloc_trans fs 19 syz, C error 550 412d 430d 29/29 346d 9b54efe66c9b bcachefs: Fix alloc_req use after free
UBSAN: shift-out-of-bounds in __bch2_bkey_unpack_key fs -1 syz, C done 54 429d 445d 29/29 346d 03208bd06a61 bcachefs: don't return fsck_fix for unfixable node errors in __btree_err
KASAN: slab-out-of-bounds Read in afs_proc_addr_prefs_write afs 17 syz, C 659 387d 607d 29/29 346d 9aa64182952d afs: Fix check for NULL terminator
possible deadlock in team_device_event (3) net 4 syz, C error 38569 358d 829d 29/29 346d bfb4fb77f9a8 team: replace team lock with rtnl lock
UBSAN: shift-out-of-bounds in s32ton (2) input usb -1 syz, C 4 391d 398d 29/29 346d a6b87bfc2ab5 HID: core: Harden s32ton() against conversion to 0 bits
general protection fault in pick_link (2) ntfs3 2 syz, C error 7 411d 425d 29/29 346d d99208b91933 fs/ntfs3: cancle set bad inode after removing name fails
KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump bluetooth 17 syz, C 1512 382d 503d 29/29 346d 7af4d7b53502 Bluetooth: hci_devcd_dump: fix out-of-bounds via dev_coredumpv
VFS: Busy inodes after unmount (use-after-free) (2) btrfs 2 syz, C error 277 350d 462d 29/29 346d d0118d7d20bb ocfs2: update d_splice_alias() return code checking
KASAN: slab-use-after-free Read in tcp_prune_ofo_queue net 19 syz, C done 356 395d 397d 29/29 346d 7eeabfb23738 tcp: fix UaF in tcp_prune_ofo_queue()
WARNING: kernel/bpf/verifier.c:LINE at do_check, CPU: syz.NUM.NUM/NUM bpf -1 syz done 5 426d 418d 29/29 346d dadb59104c64 bpf: Fix aux usage after do_check_insn()
UBSAN: shift-out-of-bounds in pcl812_attach comedi -1 syz, C 288 391d 408d 29/29 346d b14b076ce593 comedi: pcl812: Fix bit shift out of bounds
kernel BUG in __btree_trans_update_by_path fs -1 syz, C done 20 404d 409d 29/29 346d c72d628469b8 bcachefs: Fix btree for nonexistent tree depth
BUG: unable to handle kernel paging request in afs_put_vlserverlist afs 8 syz, C 3 401d 490d 29/29 346d 8b3c655fa240 afs: Set vllist to NULL if addr parsing fails
kernel BUG in ext4_update_inline_data ext4 -1 syz, C 15 383d 405d 29/29 346d 099b847ccc6c ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
kernel BUG in populate_free_space_tree btrfs -1 syz, C 4 438d 437d 29/29 346d 1961d20f6fa8 btrfs: fix assertion when building free space tree
WARNING in inet_sock_destruct (4) net -1 syz, C done 6683 348d 1150d 29/29 346d d3a5f2871adc tcp: Correct signedness in skb remaining space calculation
WARNING: proc registration bug in atm_dev_register net -1 syz, C error 5 416d 424d 29/29 346d a433791aeaea atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
kernel BUG in alloc_hugetlb_folio_reserve mm -1 syz, C done 98 400d 589d 29/29 346d c39b87456411 mm/hugetlb: don't crash when allocating a folio if there are no resv
kernel BUG in __bkey_unpack_pos (2) fs -1 syz, C done 24 401d 598d 29/29 346d 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
KASAN: slab-use-after-free Read in __free_filter trace 19 syz, C 4 419d 419d 29/29 346d 6921d1e07cb5 tracing: Fix filter logic error
WARNING in convert_ctx_accesses bpf -1 syz, C done 80 360d 381d 29/29 346d ead3d7b2b6af bpf: Check flow_dissector ctx accesses are aligned
WARNING in comedi_unlocked_ioctl comedi mm -1 syz, C 262 392d 408d 29/29 346d 08ae4b20f5e8 comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
WARNING in iopt_map_pages (2) iommu -1 syz, C 4 405d 418d 29/29 346d b42497e3c0e7 iommufd: Prevent ALIGN() overflow
KASAN: use-after-free Read in poly1305_update fs 19 syz, C done 8 414d 429d 29/29 346d d89a34b14df5 bcachefs: Move bset size check before csum check
BUG: unable to handle kernel NULL pointer dereference in mempool_alloc_noprof (2) fs 10 syz, C done 8 425d 441d 29/29 346d 56be92c63f02 bcachefs: Fix pool->alloc NULL pointer dereference
KASAN: null-ptr-deref Write in rcuref_put (4) net 12 syz, C done 7 376d 494d 29/29 346d ae633388cae3 pptp: fix pptp_xmit() error path
KASAN: slab-use-after-free Read in bch2_copygc fs 19 syz, C done 25 346d 404d 29/29 346d c02b943f7d12 bcachefs: Fix reference to invalid bucket in copygc
kernel BUG in jfs_truncate_nolock jfs -1 syz, C error 5 426d 439d 29/29 346d 2d04df811642 jfs: Regular file corruption check
WARNING in pend_sync_exception kvmarm -1 syz, C 100 396d 400d 29/29 358d efa1368ba9f4 KVM: arm64: Commit exceptions from KVM_SET_VCPU_EVENTS immediately
WARNING in pend_serror_exception kvmarm -1 syz, C 49 396d 400d 29/29 358d efa1368ba9f4 KVM: arm64: Commit exceptions from KVM_SET_VCPU_EVENTS immediately
possible deadlock in trans_set_locked fs 4 syz, C 113 424d 625d 29/29 373d ff1dd05f8233 bcachefs: bch2_trans_relock() is trylock for lockdep
BUG: Bad rss-counter state (5) mm -1 syz, C done 2365 399d 825d 29/29 374d 43e027e41423 mm: memory: extend finish_fault() to support large folio
KASAN: wild-memory-access Read in get_futex_key kernel 17 syz, C 34 420d 446d 29/29 375d 8337204c5889 futex: Handle invalid node numbers supplied by user
WARNING in ath6kl_bmi_get_target_info (2) usb wireless -1 syz, C error 10349 407d 745d 29/29 375d e7417421d893 wifi: ath6kl: remove WARN on bad firmware input
WARNING in rhashtable_init_noprof fs -1 syz, C done 131 429d 447d 29/29 375d 757601ef8533 bcachefs: Don't put rhashtable on stack
WARNING in vma_modify mm -1 syz, C done 21 428d 436d 29/29 375d 0cf4b1687a18 mm/vma: reset VMA iterator on commit_merge() OOM failure
WARNING in bio_alloc_bioset bcachefs -1 syz, C done 22792 422d 491d 29/29 375d f946ce0be45e bcachefs: Make sure opts.read_only gets propagated back to VFS
INFO: task hung in __bch2_fsck_err kernel 1 syz 2 513d 509d 29/29 375d 0acb385ec19c bcachefs: Fix possible console lock involved deadlock
BUG: corrupted list in mgmt_pending_remove bluetooth 19 syz, C error 44 443d 714d 29/29 375d 6fe26f694c82 Bluetooth: MGMT: Protect mgmt_pending list with its own lock
KMSAN: uninit-value in atmtcp_c_send atm 7 syz, C 6 393d 430d 29/29 375d 2f370ae1fb63 atm: atmtcp: Free invalid length skb in atmtcp_c_send().
WARNING in sta_info_insert_rcu (4) wireless -1 syz, C 27 424d 636d 29/29 375d d1b1a5eb27c4 wifi: mac80211: drop invalid source address OCB frames
possible deadlock in blk_mq_freeze_queue_nomemsave block 4 syz, C done 7798 427d 503d 29/29 375d 4bb08cf974c5 loop: move lo_set_size() out of queue freeze
possible deadlock in rtnl_newlink net 4 syz, C 11 431d 444d 29/29 375d b4a8085ceefb e1000: Move cancel_work_sync to avoid deadlock
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_complete (3) bluetooth 19 syz, C 5 436d 459d 29/29 375d e6ed54e86aae Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete
UBSAN: array-index-out-of-bounds in cfg80211_inform_bss_frame_data wireless 15 syz, C done 4 431d 430d 29/29 375d a85b8544d463 wifi: remove zero-length arrays
WARNING in iomap_iter (5) erofs iomap -1 syz, C done 6 429d 429d 29/29 375d 7869738b6908 erofs: refuse crafted out-of-file-range encoded extents
WARNING in __ieee80211_beacon_get wireless -1 syz, C done 143787 412d 2141d 29/29 375d d19bac3d4edc wifi: mac80211: don't WARN for late channel/color switch
KASAN: slab-out-of-bounds Read in bch2_sb_members_v1_to_text fs 17 syz, C done 6 432d 432d 29/29 375d 205da7c02673 bcachefs: Don't trust sb->nr_devices in members_to_text()
possible deadlock in loop_set_status block 4 syz, C done 20143 422d 631d 29/29 375d 4bb08cf974c5 loop: move lo_set_size() out of queue freeze
KASAN: slab-use-after-free Read in hci_sock_get_channel bluetooth 19 syz 1 452d 448d 29/29 375d 6fe26f694c82 Bluetooth: MGMT: Protect mgmt_pending list with its own lock
possible deadlock in __bch2_fsck_err (2) fs 4 syz, C 4 459d 461d 29/29 375d 0acb385ec19c bcachefs: Fix possible console lock involved deadlock
possible deadlock in console_flush_all (3) kernel 4 syz, C error 52145 375d 764d 29/29 375d 0acb385ec19c bcachefs: Fix possible console lock involved deadlock
KASAN: slab-use-after-free Read in lane_ioctl net 19 syz 7 423d 424d 29/29 375d d13a3824bfd2 net: atm: add lec_mutex
KASAN: slab-out-of-bounds Read in bch2_sb_members_v2_to_text fs 17 syz, C done 34 431d 447d 29/29 375d 205da7c02673 bcachefs: Don't trust sb->nr_devices in members_to_text()
WARNING in __init_work (2) fs -1 syz, C 5971 422d 430d 29/29 375d 757601ef8533 bcachefs: Don't put rhashtable on stack
WARNING: ODEBUG bug in io_sq_offload_create io-uring -1 syz, C 8 424d 425d 29/29 375d f2320f1dd6f6 io_uring/sqpoll: don't put task_struct on tctx setup failure
WARNING in io_register_clone_buffers io-uring -1 syz, C 4 431d 427d 29/29 375d 1d27f11bf02b io_uring/rsrc: validate buffer count with offset for cloning
divide error in bch2_sb_members_v2_to_text fs 2 syz, C done 3 432d 432d 29/29 375d 205da7c02673 bcachefs: Don't trust sb->nr_devices in members_to_text()
UBSAN: array-index-out-of-bounds in bch2_sb_downgrade_update fs 15 syz, C 539 423d 475d 29/29 375d 082c74411491 bcachefs: Fix downgrade_table_extra()
KASAN: slab-out-of-bounds Read in hci_cmd_sync_alloc bluetooth 17 syz, C 4 459d 469d 29/29 381d 03f1700b9b4d Bluetooth: MGMT: reject malformed HCI_CMD_SYNC commands
WARNING in bch2_printbuf_make_room fs -1 syz, C error 2 433d 824d 29/29 383d dc5bfdf8eaed bcachefs: fix the memory leak in exception case
possible deadlock in deactivate_super (2) ocfs2 4 syz, C inconclusive done 8072 463d 560d 29/29 388d fcaf3b2683b0 ocfs2: stop quota recovery before disabling quotas
BUG: unable to handle kernel paging request in bch2_dirent_to_text fs 8 syz, C done error 3 449d 760d 29/29 390d f39055220f6f bcachefs: Add missing validation for superblock section clean
kernel BUG in zero_user_segments ntfs3 -1 syz, C inconclusive inconclusive 19179 626d 730d 29/29 395d 045fff619312 fs/ntfs3: Equivalent transition from page to folio
INFO: task hung in uevent_show (2) kernel 1 syz, C inconclusive 8325 407d 645d 29/29 395d dc1771f71854 Revert "drivers: core: synchronize really_probe() and dev_uevent()"
kernel BUG in vfs_get_tree (2) fs -1 syz, C done 22 438d 434d 29/29 396d 9c6185609947 bcachefs: Call bch2_fs_start before getting vfs superblock
WARNING in __folio_mark_dirty (2) gfs2 -1 syz, C error 790989 408d 1265d 29/29 396d ae9f3bd8259a gfs2: replace sd_aspace with sd_inode
KASAN: use-after-free Read in sysv_new_inode (2) fs 19 syz, C inconclusive error 21224 496d 829d 29/29 396d 448fa70158f9 sysv: Remove the filesystem
WARNING in get_pat_info kernel -1 syz, C done done 36 442d 708d 29/29 404d f8e97613fed2 mm: convert VM_PFNMAP tracking to pfnmap_track() + pfnmap_untrack()
BUG: corrupted list in ring_buffer_subbuf_order_set trace 8 syz, C 1 440d 436d 29/29 405d 40ee2afafc1d ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set()
KMSAN: uninit-value in mii_nway_restart (2) usb 7 syz, C 224 437d 545d 29/29 405d 9ad0452c0277 net: ch9200: fix uninitialised access during mii_nway_restart
WARNING in bpf_map_lookup_percpu_elem bpf -1 syz, C done 2116 455d 839d 29/29 405d d4965578267e bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem()
WARNING: refcount bug in tipc_crypto_xmit tipc 13 syz, C done 4968 436d 447d 29/29 405d f29ccaa07cf3 net: tipc: fix refcount warning in tipc_aead_encrypt
general protection fault in jbd2_journal_dirty_metadata ext4 2 syz 9 472d 476d 29/29 405d af98b0157adf jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
KASAN: slab-out-of-bounds Read in iov_iter_revert netfs 17 syz, C 30 439d 462d 29/29 405d 4481f7f2b3df netfs: Fix oops in write-retry from mis-resetting the subreq iterator
possible deadlock in __nilfs_error (3) nilfs 4 syz, C error 947 459d 474d 29/29 405d fb881cd76045 nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs()
BUG: unable to handle kernel NULL pointer dereference in lo_rw_aio block 10 syz, C 10 471d 479d 29/29 405d f5c84eff634b loop: Add sanity check for read/write_iter
BUG: unable to handle kernel NULL pointer dereference in io_buffer_select io-uring 10 syz, C 102 457d 463d 29/29 405d f446c6311e86 io_uring/memmap: don't use page_address() on a highmem page
BUG: sleeping function called from invalid context in team_change_rx_flags net 5 syz, C done 71 405d 453d 29/29 405d d8d85ef0a631 af_packet: move notifier's packet_dev_mc out of rcu critical section
divide error in mac80211_hwsim_set_tsf wireless 2 syz 1 495d 491d 29/29 405d c575f5374be7 wifi: mac80211_hwsim: Prevent tsf from setting if beacon is disabled
KMSAN: uninit-value in cxusb_i2c_xfer media 7 syz, C 556 446d 499d 29/29 405d 73fb3b92da84 media: cxusb: no longer judge rbuf when the write fails
kernel BUG in ext4_write_inline_data (2) ext4 -1 syz, C error 46 419d 633d 29/29 405d 227cb4ca5a65 ext4: inline: fix len overflow in ext4_prepare_inline_data
BUG: unable to handle kernel NULL pointer dereference in do_pagemap_scan fs 10 syz, C inconclusive done 45 463d 965d 29/29 405d 65c66047259f proc: fix the issue of proc_mem_open returning NULL
kernel BUG in may_open fs -1 syz, C error 137019 405d 501d 29/29 405d cfd86ef7e8e7 anon_inode: use a proper mode internally
WARNING in get_bpf_raw_tp_regs bpf trace -1 syz, C 2 458d 461d 29/29 405d 3880cdbed1c4 bpf: Fix WARN() in get_bpf_raw_tp_regs
BUG: unable to handle kernel NULL pointer dereference in generic_file_read_iter ntfs3 10 syz, C done 10 448d 493d 29/29 405d 8b26c8c376b2 fs/ntfs3: Add missing direct_IO in ntfs_aops_cmpr
KASAN: slab-use-after-free Write in binder_remove_device kernel 22 syz, C done 7 448d 449d 29/29 405d 9857af0fcff3 binder: fix yet another UAF in binder_devices
INFO: task hung in freeze_super (6) f2fs 1 syz, C done 3 455d 452d 29/29 405d c836d3b8d94e f2fs: fix to skip f2fs_balance_fs() if checkpoint is disabled
KASAN: vmalloc-out-of-bounds Write in tpg_fill_plane_buffer (3) media 21 syz, C 271 406d 760d 29/29 405d f83ac8d30c43 media: vivid: Change the siize of the composing
KASAN: use-after-free Write in __crypto_shash_import crypto 22 syz, C done 40 446d 447d 29/29 405d 0a84874c7e7d crypto: shash - Fix buffer overrun in import function
UBSAN: array-index-out-of-bounds in add_missing_indices jfs 15 syz, C 187 432d 628d 29/29 405d 5dff41a86377 jfs: fix array-index-out-of-bounds read in add_missing_indices
BUG: unable to handle kernel paging request in snd_pcm_format_set_silence (2) sound 8 syz, C 4 456d 470d 29/29 405d 93a81ca06577 ALSA: pcm: Fix race of buffer access at PCM OSS layer
general protection fault in dev_set_group net 2 syz, C error 3 438d 438d 29/29 405d feafc73f3e6a net: prevent a NULL deref in rtnl_create_link()
WARNING in __bpf_prog_ret0_warn bpf -1 syz, C 9 446d 469d 29/29 405d 86bc9c742426 bpf: Avoid __bpf_prog_ret0_warn when jit fails
UBSAN: array-index-out-of-bounds in ieee80211_request_ibss_scan wireless 15 syz, C error 29652 405d 475d 29/29 405d 82bbe02b2500 wifi: mac80211: Set n_channels after allocating struct cfg80211_scan_request
possible deadlock in nilfs_get_block nilfs 4 syz 30 463d 473d 29/29 405d fb881cd76045 nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs()
general protection fault in lookup_or_create_module_kobject bluetooth usb 2 syz, C 266 464d 468d 29/29 405d a6aeb739974e module: ensure that kobject_put() is safe for module type kobjects
BUG: sleeping function called from invalid context in pcpu_alloc_noprof net 5 syz, C done 4 455d 469d 29/29 405d 8e5f1bb81274 ipv6: Narrow down RCU critical section in inet6_rtm_newroute().
BUG: unable to handle kernel NULL pointer dereference in io_ring_buffers_peek io-uring 10 syz, C 68 458d 463d 29/29 405d f446c6311e86 io_uring/memmap: don't use page_address() on a highmem page
KCSAN: data-race in process_one_work / process_one_work kernel 6 syz 231 1080d 983d 29/29 405d 70e1683ca3a6 workqueue: Fix race condition in wq->stats incrementation
general protection fault in native_tss_update_io_bitmap kernel 2 syz, C error 7 453d 536d 29/29 405d 8b68e978718f x86/iopl: Cure TIF_IO_BITMAP inconsistencies
INFO: task hung in f2fs_grab_cache_page f2fs 1 syz, C 1 515d 511d 29/29 405d 061cf3a84bde f2fs: fix to do sanity check on ino and xnid
UBSAN: shift-out-of-bounds in __kfifo_alloc input usb -1 syz, C 33349 435d 504d 29/29 405d 6bf8ab7774a2 HID: wacom: fix shift OOB in kfifo allocation for zero pktlen
UBSAN: shift-out-of-bounds in dbAllocAG (2) jfs -1 syz, C done 5 476d 527d 29/29 405d 37bfb464ddca jfs: validate AG parameters in dbMount() to prevent crashes
WARNING in move_to_new_folio mm -1 syz, C done 1366 405d 491d 29/29 405d 906d7ce3b59d jfs: implement migrate_folio for jfs_metapage_aops
WARNING in ipv6_addr_prefix net -1 syz, C error 3056 423d 472d 29/29 405d 586ceac9acb7 ipv6: Restore fib6_config validation for SIOCADDRT.
WARNING in udp_tunnel_update_gro_rcv net -1 syz, C error 108 486d 516d 29/29 405d c26c192c3d48 udp: properly deal with xfrm encap and ADDRFORM
UBSAN: array-index-out-of-bounds in usbhid_parse usb 15 syz, C error 89 439d 1035d 29/29 405d fe7f7ac8e0c7 HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
KASAN: null-ptr-deref Read in gfs2_drop_inode gfs2 11 syz, C done 1050 439d 447d 29/29 405d 9126d2754c5e gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add
KASAN: slab-use-after-free Read in vidtv_mux_init media 19 syz 5 479d 524d 29/29 405d 1d5f88f05348 media: vidtv: Terminating the subsequent process of initialization failure
WARNING: ODEBUG bug in snd_rawmidi_free sound usb -1 syz, C error 1 469d 465d 29/29 405d 0718a78f6a9f ALSA: usb-audio: Kill timer properly at removal
KMSAN: uninit-value in usbnet_probe (3) usb 7 syz, C 159 446d 463d 29/29 405d 405b0d610745 net: usb: aqc111: fix error handling of usbnet read calls
WARNING in nla_get_range_unsigned (3) net -1 syz, C done 22 461d 465d 29/29 405d a96876057b9e netlink: fix policy dump for int with validation callback
kernel BUG in dec_valid_block_count f2fs -1 syz, C 13 447d 496d 29/29 405d 05872a167c2c f2fs: fix to do sanity check on sbi->total_valid_block_count
UBSAN: shift-out-of-bounds in squashfs_bio_read squashfs -1 syz, C 9 443d 498d 29/29 405d 734aa85390ea Squashfs: check return result of sb_min_blocksize
possible deadlock in smc_switch_to_fallback (2) smc 4 syz, C error done 27435 474d 783d 29/29 407d 752e2217d789 smc: Fix lockdep false-positive for IPPROTO_SMC.
WARNING in inode_set_cached_link ext4 -1 syz, C done unreliable 78396 496d 556d 29/29 408d 5f920d5d6083 ext4: verify fast symlink length
WARNING: locking bug in __set_page_owner mm 4 syz, C error inconclusive 179425 559d 651d 29/29 408d d40797d6720e kasan: make kasan_record_aux_stack_noalloc() the default behaviour
KASAN: use-after-free Write in ext4_insert_dentry ext4 22 syz, C done 117 492d 660d 28/29 426d 94824ac9a8aa ext4: fix off-by-one error in do_split
possible deadlock in trie_delete_elem bpf 4 syz, C done done 21444 505d 879d 28/29 426d 47979314c0fe bpf: Convert lpm_trie.c to rqspinlock
WARNING in bch2_dev_free fs -1 syz, C done 258 433d 495d 28/29 429d d62922ba3cfc bcachefs: Prevent granting write refs when filesystem is read-only
general protection fault in d_splice_alias udf 2 syz, C done done 15 559d 559d 28/29 429d 902e09c8acde fix braino in "9p: fix ->rename_sem exclusion"
general protection fault in __d_unalias udf nilfs 8 syz, C done 835 549d 559d 28/29 429d 902e09c8acde fix braino in "9p: fix ->rename_sem exclusion"
KMSAN: uninit-value in bch2_extent_crc_append (2) fs 7 syz, C 4 515d 525d 28/29 430d 53cf2a3daa4c bcachefs: Fix kmsan warnings in bch2_extent_crc_pack()
general protection fault in lock_vma_under_rcu mm 2 syz done 3 538d 537d 28/29 431d f35ab95ca0af mm: replace vm_lock and detached flag with a reference count
KMSAN: uninit-value in bch2_trans_start_alloc_update fs 7 syz, C 1051 506d 629d 28/29 431d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_btree_node_iter_init (2) fs 7 syz, C 309 506d 637d 28/29 431d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_inode_v3_validate fs 7 syz, C 5866 507d 635d 28/29 431d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_btree_node_get fs 7 syz, C 18 517d 623d 28/29 431d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_btree_node_check_topology fs 7 syz, C 19 533d 644d 28/29 431d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_dev_freespace_init fs 7 syz, C 432 506d 620d 28/29 431d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_checksum_update (2) fs 19 syz, C done 7 514d 609d 28/29 431d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_bucket_alloc_early fs 7 syz, C 219 510d 648d 28/29 431d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_btree_ptr_v2_validate fs 7 syz, C 55 507d 558d 28/29 431d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_xattr_validate fs 7 syz, C 22 529d 611d 28/29 431d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_alloc_v4_validate (2) fs 7 syz, C 514 510d 637d 28/29 431d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in __bch2_bkey_cmp_left_packed fs 7 syz 2 573d 600d 28/29 431d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in rw_aux_tree_set (2) fs 7 syz, C 2356 508d 632d 28/29 431d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
general protection fault in sys_mremap mm 2 syz, C 35 499d 502d 28/29 431d 36eed5400805 mm/mremap: do not set vrm->vma NULL immediately prior to checking it
KMSAN: uninit-value in bch2_bkey_val_validate fs 7 syz, C 17 513d 625d 28/29 431d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_bkey_ptrs_validate fs 7 syz, C 15 511d 623d 28/29 431d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_bucket_alloc_trans fs 7 syz, C 15 484d 616d 28/29 431d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
KMSAN: uninit-value in bch2_bkey_cmp_packed_inlined (2) fs 7 syz, C 309 507d 627d 28/29 431d 9c3a2c9b471a bcachefs: Disable asm memcpys when kmsan enabled
kernel BUG in bch2_fs_initialize fs -1 syz done 1004 486d 491d 28/29 432d 806776ad9c20 bcachefs: Add missing error handling
possible deadlock in __bpf_ringbuf_reserve bpf 4 syz, C error 2490 482d 887d 28/29 432d a650d38915c1 bpf: Convert ringbuf map to rqspinlock
WARNING in dev_xdp_install bpf -1 syz, C 245 499d 506d 28/29 432d d996e412b2df bpf: add missing ops lock around dev_xdp_attach_link
WARNING: locking bug in kernfs_path_from_node kernfs 4 syz, C done 1037 562d 653d 28/29 432d 741c10b096bc kernfs: Use RCU to access kernfs_node::name.
WARNING in __free_event perf -1 syz, C done 73 482d 499d 28/29 432d 10a77965760c batman-adv: Fix double-hold of meshif when getting enabled 0ba3a4ab76fd perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init
KMSAN: uninit-value in isofs_readdir isofs 7 syz, C 2 557d 553d 28/29 432d 81a82e8f3388 isofs: fix KMSAN uninit-value bug in do_isofs_readdir()
KMSAN: uninit-value in __request_module (6) modules 7 syz, C 4 548d 550d 28/29 432d 5bef3ac184b5 team: better TEAM_OPTION_TYPE_STRING validation
WARNING in release_mtd_partition mtd -1 syz, C 8 441d 562d 28/29 432d 6697dae1e2da mtd: capture device name setting failure when adding mtd
KASAN: slab-out-of-bounds Read in isofs_fh_to_parent isofs 17 syz, C 3 503d 500d 28/29 432d 0405d4b63d08 isofs: Prevent the use of too small fid
possible deadlock in lapbeth_device_event x25 4 syz, C error 121826 500d 525d 28/29 432d 7220e8f4d4ee net: lapbether: use netdev_lockdep_set_classes() helper
KMSAN: uninit-value in ___bpf_prog_run (4) bpf 7 syz, C 322 550d 964d 28/29 432d 4c2d14c40a68 ppp: Fix KMSAN uninit-value warning with bpf
possible deadlock in get_partial_node (2) kernel 4 syz, C done done 4 523d 546d 28/29 432d 3a04334d6282 bcachefs: Fix b->written overflow
WARNING in usbnet_start_xmit/usb_submit_urb (2) usb -1 syz, C error 10 543d 882d 28/29 432d 1cf9631d836b usbnet: gl620a: fix endpoint checking in genelink_bind()
general protection fault in ir_raw_event_store_with_filter usb media 22 syz, C error 879 552d 2349d 28/29 432d f656cfbc7a29 media: streamzap: fix race between device disconnection and urb callback
KASAN: slab-out-of-bounds Write in hfs_bnode_read_key (2) hfs 21 syz, C inconclusive 2056 517d 682d 28/29 432d bb5e07cb9277 hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
WARNING in tls_strp_msg_load net -1 syz, C done 4 513d 506d 28/29 432d 5071a1e606b3 net: tls: explicitly disallow disconnect
KASAN: slab-use-after-free Read in key_put lsm keyrings 19 syz, C done 9 538d 636d 28/29 432d 75845c6c1a64 keys: Fix UAF in key_put()
kernel BUG in qlist_free_all net fs -1 syz, C done done 12 484d 632d 28/29 432d 3a04334d6282 bcachefs: Fix b->written overflow
WARNING in __linkwatch_sync_dev net -1 syz, C done 1038 432d 495d 28/29 432d 10a77965760c batman-adv: Fix double-hold of meshif when getting enabled f7a11cba0ed7 bonding: hold ops lock around get_link
WARNING in free_ruleset lsm -1 syz, C 76 478d 504d 28/29 432d fe81536af397 landlock: Remove incorrect warning
WARNING: refcount bug in io_send_zc_cleanup (2) io-uring 13 syz, C done 6 513d 512d 28/29 432d 67c007d6c12d io_uring/net: fix sendzc double notif flush
WARNING in f2fs_unlink f2fs -1 syz, C done 215 507d 632d 28/29 432d 81edb983b3f5 f2fs: add check for deleted inode
WARNING in bch2_bkey_pick_read_device fs -1 syz, C error 89 502d 506d 28/29 432d 3c72d3eea97b bcachefs: Fix WARN() in bch2_bkey_pick_read_device()
WARNING: suspicious RCU usage in kernfs_node_dentry kernfs 4 syz, C done 476 536d 544d 28/29 432d 6ef5b6fae304 kernfs: Drop kernfs_rwsem while invoking lookup_positive_unlocked().
INFO: trying to register non-static key in cfg80211_dev_free wireless -1 syz, C 304 497d 517d 28/29 432d fc88dee89d7b wifi: cfg80211: init wiphy_work before allocating rfkill fails
KMSAN: uninit-value in validate_set (2) openvswitch 7 syz, C 6 495d 492d 28/29 432d 65d91192aa66 net: openvswitch: fix nested key length validation in the set() action
WARNING in cleanup_net (4) net -1 syz, C error 309 523d 542d 28/29 432d 5c70eb5c593d net: better track kernel sockets lifetime
general protection fault in bioset_exit (2) bcachefs 10 syz, C done done 23 520d 560d 28/29 432d 3a04334d6282 bcachefs: Fix b->written overflow
INFO: task hung in io_wq_put_and_exit (4) io-uring 1 syz, C unreliable 86 436d 666d 28/29 432d cf960726eb65 io_uring/kbuf: reject zero sized provided buffers
KASAN: slab-use-after-free Read in skb_queue_purge_reason (2) bluetooth 19 syz, C done 132 437d 821d 28/29 432d 5df5dafc171b Bluetooth: hci_uart: Fix another race during initialization
WARNING in net_free (4) net -1 syz 4 559d 629d 28/29 432d 5c70eb5c593d net: better track kernel sockets lifetime
WARNING in ntfs_extend_initialized_size ntfs3 -1 syz, C inconclusive inconclusive 4 635d 680d 28/29 432d ff3559264458 fs/ntfs3: Fix WARNING in ntfs_extend_initialized_size
general protection fault in ethnl_default_dumpit net 2 syz, C error 321 526d 527d 28/29 432d f36a9285828c net: ethtool: use correct device pointer in ethnl_default_dump_one()
WARNING: bad unlock balance in do_setlink net 4 syz, C done 401 489d 496d 28/29 432d 445e99bdf68d rtnetlink: Fix bad unlock balance in do_setlink().
UBSAN: array-index-out-of-bounds in bpf_prog_select_runtime bpf 15 syz, C done 1160 504d 885d 28/29 432d 6ebc5030e0c5 bpf: Fix array bounds error with may_goto
KASAN: slab-use-after-free Read in bchfs_read fs 19 syz, C done 34 491d 498d 28/29 432d 34b47e3d73a2 bcachefs: Fix UAF in bchfs_read()
general protection fault in rtnl_create_link net 8 syz, C done 49 479d 490d 28/29 432d 4798cfa2097f net: don't try to ops lock uninitialized devs
general protection fault in kernel_sock_shutdown (3) net 2 syz 5 504d 503d 28/29 432d 10206302af85 sctp: add mutual exclusion in proc_sctp_do_udp_port()
KASAN: slab-out-of-bounds Read in atomic_ptr_type_ok bpf 17 syz, C done 4 525d 521d 28/29 432d 9aa8fe29f624 Merge branch 'bpf-fix-oob-read-and-add-tests-for-load-acquire-store-release' c03bb2fa327e bpf: Fix out-of-bounds read in check_atomic_load/store()
kernel BUG in bch2_run_recovery_pass (2) fs -1 syz, C 70 499d 568d 28/29 432d 962322475bb5 bcachefs: Handle backpointers with unknown data types
general protection fault in relocate_file_extent_cluster btrfs 2 syz, C 24 481d 498d 28/29 432d 50fecb8cf069 btrfs: fix invalid inode pointer after failure to create reloc inode
WARNING in restore_regulatory_settings (3) wireless -1 syz, C inconclusive error 2 594d 677d 28/29 432d 59b348be7597 wifi: cfg80211: regulatory: improve invalid hints checking
KMSAN: uninit-value in __alloc_frozen_pages_noprof mm 7 syz, C 6 528d 541d 28/29 432d 8fe9ed44dc29 mm/page_alloc: fix uninitialized variable
WARNING in cxacru_cm/usb_submit_urb (2) usb -1 syz, C 8 546d 556d 28/29 432d c90aad369899 usb: atm: cxacru: fix a flaw in existing endpoint checks
BUG: sleeping function called from invalid context in bch2_printbuf_make_room (2) fs 5 syz, C error 59 499d 502d 28/29 432d b2ffadcc7f8f bcachefs: Fix scheduling while atomic from logging changes
KMSAN: uninit-value in diFree jfs 7 syz, C 2 543d 543d 28/29 432d 9629d7d66c62 jfs: Fix uninit-value access of imap allocated in the diMount() function
possible deadlock in pcpu_alloc_noprof block 4 syz, C 257 432d 686d 28/29 432d 677bdb7346b6 bcachefs: Fix deadlock
KASAN: slab-out-of-bounds Read in ea_get (4) jfs 17 syz, C 4 527d 550d 28/29 432d fdf480da5837 jfs: fix slab-out-of-bounds read in ea_get()
INFO: task hung in __blockdev_direct_IO (4) exfat 1 syz, C done 3 455d 518d 28/29 432d b0522303f672 exfat: fix the infinite loop in exfat_find_last_cluster()
possible deadlock in gtp_encap_enable_socket net 4 syz, C error done 24 491d 692d 28/29 432d 752e2217d789 smc: Fix lockdep false-positive for IPPROTO_SMC.
kernel BUG in bch2_btree_node_iter_init fs -1 syz, C done done 167 456d 560d 28/29 432d 3a04334d6282 bcachefs: Fix b->written overflow
general protection fault in clone_private_mount overlayfs 2 syz, C done 713 552d 556d 28/29 432d db04662e2f4f fs: allow detached mounts in clone_private_mount()
WARNING: refcount bug in ax25_release (3) hams 13 syz, C done 5256 507d 812d 28/29 432d bca0902e6173 ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt 2f6efbabceb6 ax25: Remove broken autobind
general protection fault in bch2_snapshot_tree_oldest_subvol fs 8 syz, C done 14 477d 500d 28/29 432d aa6a591f0fd7 bcachefs: Fix null ptr deref in bch2_snapshot_tree_oldest_subvol() 71f8e806a5e4 bcachefs: Stricter checks on "key allowed in this btree"
possible deadlock in queue_stack_map_push_elem bpf 4 syz, C error 78 498d 851d 28/29 432d 2f41503d6476 bpf: Convert queue_stack map to rqspinlock
KASAN: slab-out-of-bounds Read in validate_bset_keys fs 19 syz, C 5 532d 531d 28/29 432d 3a04334d6282 bcachefs: Fix b->written overflow
WARNING: suspicious RCU usage in kvm_vcpu_gfn_to_memslot kvm 4 syz, C 67 511d 570d 28/29 432d 3617c0ee7dec KVM: x86/xen: Only write Xen hypercall page for guest writes to MSR
BUG: soft lockup in rose_loopback_timer hams 1 syz, C 1 563d 559d 28/29 432d a1300691aed9 net: rose: lock the socket in rose_bind()
general protection fault in vxlan_vnigroup_uninit net 2 syz, C 9 550d 552d 28/29 432d 5805402dcc56 vxlan: check vxlan_vnigroup_init() return value
possible deadlock in __queue_map_get bpf 4 syz, C error 180 497d 855d 28/29 432d 2f41503d6476 bpf: Convert queue_stack map to rqspinlock
kernel BUG in new_curseg (2) f2fs -1 syz, C done 24 508d 611d 28/29 432d 48ea8b200414 f2fs: fix to avoid panic once fallocation fails for pinfile
general protection fault in add_wait_queue kvm net virt 10 syz, C done 676 546d 559d 28/29 432d 78dafe1cf3af vsock: Orphan socket after transport release
kernel BUG in write_all_supers btrfs -1 syz, C 20 487d 507d 28/29 432d 65f2a3b2323e btrfs: remove folio order ASSERT()s in super block writeback path
KMSAN: uninit-value in bch2_write_inode fs 7 syz, C 4476 520d 568d 28/29 432d 58517f4df842 bcachefs: Initialize from_inode members for bch_io_opts
BUG: sleeping function called from invalid context in ovl_cache_entry_new ntfs3 afs 5 syz, C done 52 475d 507d 28/29 432d a64e4d48a0b7 afs: Fix afs_dynroot_readdir() to not use the RCU read lock
WARNING in drv_remove_interface wireless -1 syz, C done inconclusive 29 538d 2134d 28/29 432d 49f27f29446a wifi: nl80211: reject cooked mode if it is set along with other flags
kernel BUG in skbprio_enqueue net -1 syz, C 7 507d 507d 28/29 432d ce8fe975fd99 net_sched: skbprio: Remove overly strict queue assertions
general protection fault in afs_atcell_get_link afs 2 syz, C 25 513d 516d 28/29 432d 0307d16f3610 afs: Fix afs_atcell_get_link() to check if ws_cell is unset first
WARNING in call_s_stream media -1 syz, C 83 513d 872d 28/29 432d 36cef585e2a3 media: vimc: skip .s_stream() for stopped entities
KMSAN: uninit-value in __ipv6_addr_type net 7 syz, C 3 542d 542d 28/29 432d 27843ce6ba3d ipvlan: ensure network headers are in skb linear part
BUG: sleeping function called from invalid context in crypto_put_default_null_skcipher crypto 5 syz, C error 5 594d 594d 28/29 432d dcc47a028c24 crypto: null - Use spin lock instead of mutex 5b0af621c3f6 net: restrict SO_REUSEPORT to inet sockets
KASAN: use-after-free Read in __ocfs2_find_path ocfs2 19 syz, C inconclusive 65 517d 676d 28/29 432d a406aff8c051 ocfs2: validate l_tree_depth to avoid out-of-bounds access
kernel BUG in bch2_stripe_validate fs -1 syz, C done done 6 510d 594d 28/29 432d 71f8e806a5e4 bcachefs: Stricter checks on "key allowed in this btree"
kernel BUG in __journal_res_get (2) fs -1 syz, C error done 1527 432d 640d 28/29 432d 4c0d2c67ac6d bcachefs: Fix early startup error path
KASAN: slab-use-after-free Read in steam_input_open input usb 19 syz, C done 5 527d 540d 28/29 432d e53fc232a65f HID: hid-steam: Fix use-after-free when detaching device
KASAN: slab-use-after-free Read in nf_tables_trans_destroy_work (2) netfilter 19 syz 1 533d 532d 28/29 432d fb8286562ecf netfilter: nf_tables: make destruction work queue pernet
KMSAN: uninit-value in ppp_sync_send (2) ppp 7 syz, C 3 539d 549d 28/29 432d aabc6596ffb3 net: ppp: Add bound checking for skb data on ppp_sync_txmung
BUG: unable to handle kernel paging request in txBeginAnon jfs 11 syz, C inconclusive 43 524d 814d 28/29 432d b5799dd77054 jfs: add check read-only before truncation in jfs_truncate_nolock() 0176e69743ec jfs: add check read-only before txBeginAnon() call
KASAN: slab-use-after-free Read in afs_dynroot_readdir afs 19 syz, C 2 490d 504d 28/29 432d a64e4d48a0b7 afs: Fix afs_dynroot_readdir() to not use the RCU read lock
WARNING in fsnotify_file_area_perm xfs -1 syz, C 9 519d 556d 28/29 432d 955fbe0ef19d Revert "fsnotify: generate pre-content permission event on page fault"
possible deadlock in diFree (2) jfs 4 syz, C 40 508d 633d 28/29 432d b61e69bb1c04 jfs: Prevent copying of nlink with value 0 from disk inode
KASAN: slab-use-after-free Read in software_node_notify_remove acpi 19 syz, C done 28 475d 497d 28/29 432d bc2c46426f2d software node: Prevent link creation failure from causing kobj reference count imbalance
kernel BUG in clear_inode (2) jfs -1 syz, C inconclusive 986 432d 657d 28/29 432d 8c3f9a70d2d4 jfs: reject on-disk inodes of an unsupported type
general protection fault in p9_client_walk v9fs 2 syz, C 3 508d 524d 28/29 432d 3f61ac7c65bd fs/9p: fix NULL pointer dereference on mkdir
possible deadlock in ipv6_sock_ac_close (4) net 4 syz, C error 5 499d 536d 28/29 432d 752e2217d789 smc: Fix lockdep false-positive for IPPROTO_SMC.
WARNING in __ceph_open_session ceph -1 syz, C done 321 494d 495d 28/29 432d 10a77965760c batman-adv: Fix double-hold of meshif when getting enabled
UBSAN: array-index-out-of-bounds in dtReadFirst (2) jfs 19 syz, C error 119 475d 603d 28/29 432d a8dfb2168906 jfs: add index corruption check to DT_GETPAGE()
kernel BUG in filemap_fault sound -1 syz, C done 138 437d 534d 28/29 432d 10a77965760c batman-adv: Fix double-hold of meshif when getting enabled
KASAN: slab-use-after-free Read in l2cap_send_cmd bluetooth 19 syz, C done 34 572d 902d 28/29 432d b4f82f9ed43a Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd
BUG: unable to handle kernel paging request in efivarfs_pm_notify fs efi 8 syz, C 1037 529d 539d 28/29 432d cb6ae457bc6a efivarfs: Defer PM notifier registration until .fill_super
WARNING: bad unlock balance in __rtnl_unlock net 4 syz, C done 18 528d 530d 28/29 432d f130a0cc1b4f inet: fix lwtunnel_valid_encap_type() lock imbalance
BUG: unable to handle kernel NULL pointer dereference in __generic_file_write_iter (2) ntfs3 10 syz, C 8 561d 595d 28/29 432d 285cec318bf5 fs/ntfs3: Keep write operations atomic
possible deadlock in lock_system_sleep pm 4 syz, C 3 543d 542d 28/29 432d 52323ed1444e PM: hibernate: Avoid deadlock in hibernate_compressor_param_set()
WARNING in file_seek_cur_needs_f_lock overlayfs ext4 -1 syz, C done 10 446d 496d 28/29 432d 10a77965760c batman-adv: Fix double-hold of meshif when getting enabled
BUG: sleeping function called from invalid context in __alloc_frozen_pages_noprof afs 5 syz, C done 61 489d 507d 28/29 432d a64e4d48a0b7 afs: Fix afs_dynroot_readdir() to not use the RCU read lock
possible deadlock in elv_iosched_store block 4 syz, C 56 447d 506d 28/29 432d 01b91bf14f6d block: don't grab elevator lock during queue initialization
possible deadlock in efivarfs_actor mm 4 syz, C 8 509d 525d 28/29 432d dec1277875a5 efivarfs: use I_MUTEX_CHILD nested lock to traverse variables on resume
INFO: task hung in _free_event perf 1 syz, C 2 613d 636d 28/29 432d 56799bc03565 perf: Fix hang while freeing sigtrap event
divide error in dbAllocAG jfs 2 syz, C done 172 506d 621d 28/29 432d ddf2846f22e8 jfs: add sanity check for agwidth in dbMount
WARNING in vmx_handle_exit (2) kvm-x86 -1 syz, C 3 533d 613d 28/29 432d 64c947a1cf35 KVM: VMX: Reject KVM_RUN if userspace forces emulation during nested VM-Enter
BUG: unable to handle kernel paging request in vma_merge_existing_range mm 8 syz, C done 8 487d 514d 28/29 432d 41e6ddcaa0f1 mm/vma: add give_up_on_oom option on modify/merge, use in uffd release
WARNING in ucan_probe can -1 syz, C done 143 514d 545d 28/29 432d 1d22a122ffb1 can: ucan: fix out of bound read in strscpy() source
KASAN: stack-out-of-bounds Read in usb_check_int_endpoints usb 17 syz, C 61 503d 566d 28/29 432d 0b43d98ff29b HID: hid-thrustmaster: fix stack-out-of-bounds read in usb_check_int_endpoints()
WARNING in remove_proc_entry (7) nfs -1 syz 682 433d 556d 28/29 432d 930b64ca0c51 nfsd: don't ignore the return code of svc_proc_register()
BUG: bad usercopy in vfs_readlink ext4 -1 syz, C done 5 529d 558d 28/29 432d 5f920d5d6083 ext4: verify fast symlink length
BUG: corrupted list in hci_chan_del (2) bluetooth 19 syz, C done 502 552d 556d 28/29 432d ab4eedb790ca Bluetooth: L2CAP: Fix corrupted list in hci_chan_del
BUG: sleeping function called from invalid context in folio_mc_copy mm 5 syz, C done 5415 475d 507d 28/29 432d 2d900efff915 mm/migrate: fix sleep in atomic for large folios and buffer heads
WARNING in to_nfit_bus_uuid acpi nvdimm -1 syz, C 4 536d 700d 28/29 432d 2ff0e408db36 acpi: nfit: fix narrowing conversion in acpi_nfit_ctl
kernel BUG in __bch2_trans_commit fs -1 syz, C unreliable 11858 640d 664d 28/29 463d 8b22abb4c840 bcachefs: -o norecovery now bails out of recovery earlier
WARNING in kvm_timer_update_irq kvmarm -1 syz, C 15 632d 664d 28/29 464d 38d7aacca092 KVM: arm64: Get rid of userspace_irqchip_in_use
WARNING in kvm_handle_mmio_return kvmarm -1 syz, C 5 633d 640d 28/29 465d e735a5da6442 KVM: arm64: Don't retire aborted MMIO instruction
possible deadlock in bch2_alloc_sectors_start_trans fs 4 syz, C inconclusive 64 621d 642d 28/29 465d 2cd85fea49d8 bcachefs: Don't recurse in check_discard_freespace_key
KASAN: vmalloc-out-of-bounds Write in vrealloc_noprof bpf 21 syz, C done 440 466d 629d 28/29 466d d699440f58ce mm: fix vrealloc()'s KASAN poisoning logic
kernel BUG in bch2_get_scanned_nodes fs -1 syz, C done 101 565d 626d 28/29 466d a6f4794fcd86 bcachefs: struct bkey_validate_context
WARNING: lock held when returning to user space in rtnl_link_ops_get net 4 syz, C done 9 629d 637d 28/29 466d 9b234a97b10c rtnetlink: fix rtnl_dump_ifinfo() error path
WARNING in udf_rmdir (2) udf -1 syz, C inconclusive done 2 626d 627d 28/29 466d c5566903af56 udf: Skip parent dir link count update if corrupted
WARNING: lock held when returning to user space in nsim_pp_hold_write net 4 syz, C 4 605d 610d 28/29 466d b9b8301d369b net: netdevsim: fix nsim_pp_hold_write()
general protection fault in vsock_stream_has_data net virt 2 syz, C done done 6 583d 579d 28/29 466d df137da9d6d1 vsock/virtio: cancel close work in the destructor
possible deadlock in zswap_store mm 4 syz, C inconclusive 24203 538d 588d 28/29 466d 4dff389c9f1d Revert "mm: zswap: fix race between [de]compression and CPU hotunplug"
kernel BUG in bch2_evacuate_bucket fs -1 syz, C done 4 630d 629d 28/29 466d 9e92d6e9efb0 bcachefs: Kill bch2_get_next_backpointer()
KASAN: slab-use-after-free Read in binder_release_work kernel 19 syz, C done done 2151 613d 683d 28/29 466d 7e20434cbca8 binder: fix freeze UAF in binder_release_work()
KASAN: use-after-free Read in ring_buffer_map trace 19 syz, C 15 604d 608d 28/29 467d c58a812c8e49 ring-buffer: Fix overflow in __rb_map_vma
WARNING in io_pin_pages io-uring -1 syz, C done 14 635d 632d 28/29 467d 0c0a4eae26ac io_uring: check for overflows in io_pin_pages
WARNING in nsim_udp_tunnel_set_port net -1 syz, C 15 564d 578d 28/29 467d 50bf398e1cea net: netdevsim: try to close UDP port harness races
KMSAN: uninit-value in ocfs2_file_read_iter ocfs2 7 syz, C 3 661d 657d 28/29 467d adc77b19f62d ocfs2: fix uninitialized value in ocfs2_file_read_iter()
KASAN: slab-use-after-free Read in sco_sock_connect bluetooth 19 syz 1 631d 629d 28/29 467d ed9588554943 Bluetooth: SCO: remove the redundant sco_conn_put
WARNING in nft_socket_init netfilter -1 syz, C done 14 561d 629d 28/29 467d b7529880cb96 netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level
BUG: unable to handle kernel paging request in try_to_wake_up (2) net 19 syz, C error 31 543d 628d 28/29 467d f10bef73fb35 btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
VFS: Busy inodes after unmount (use-after-free) fs 2 syz, C error 55684 468d 1299d 28/29 467d 965b5dd1894f ocfs2: free inode when ocfs2_get_init_inode() fails
general protection fault in exfat_init_ext_entry exfat 2 syz, C done 43 589d 623d 28/29 467d 70465acbb0ce exfat: fix exfat_find_empty_entry() not returning error on failure
general protection fault in qt2_read_bulk_callback usb 2 syz, C error 5 586d 583d 28/29 467d 575a5adf48b0 USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb()
general protection fault in put_page (4) net 2 syz, C done 170 590d 607d 28/29 467d cbb26f7d8451 mptcp: fix TCP options overflow.
WARNING in nilfs_rmdir nilfs -1 syz, C error 295 587d 634d 28/29 467d 901ce9705fbb nilfs2: prevent use of deleted inode
general protection fault in account_kernel_stack (3) mm 2 syz, C 7 592d 607d 28/29 467d 4db3d750ac7e nvmet: Don't overflow subsysnqn
BUG: sleeping function called from invalid context in hci_le_create_big_complete_evt bluetooth 5 syz, C done 380 618d 861d 28/29 467d 4d94f0555827 Bluetooth: hci_core: Fix sleeping function called from invalid context
WARNING in nsim_dev_health_break_write net -1 syz, C 10 606d 611d 28/29 467d ee76746387f6 netdevsim: prevent bad user input in nsim_dev_health_break_write()
possible deadlock in ieee80211_remove_interfaces wireless 4 syz, C error 326122 526d 710d 28/29 467d e759e1e4a4bd net: revert RTNL changes in unregister_netdevice_many_notify()
WARNING in netlink_ack_tlv_fill net -1 syz, C error 3 645d 641d 28/29 467d 3bf39fa849ab netlink: fix false positive warning in extack during dumps
KASAN: use-after-free Read in nilfs_find_entry nilfs 19 syz, C inconclusive 8 621d 642d 28/29 467d 985ebec4ab0a nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
kernel BUG in __pskb_pull_tail tipc -1 syz, C done 13 605d 612d 28/29 467d 429fde2d81bc net: tun: fix tun_napi_alloc_frags()
KMSAN: uninit-value in nsim_get_ringparam net 7 syz, C 59 562d 570d 28/29 467d 6db9d3a536cd netdevsim: don't assume core pre-populates HDS params on GET
WARNING: lock held when returning to user space in afs_proc_addr_prefs_write afs 4 syz, C 5 591d 599d 28/29 467d 17a4fde81d3a afs: Fix merge preference rule failure condition
WARNING in lock_list_lru_of_memcg mm -1 syz 2 548d 610d 28/29 467d 62e72d2cf702 mm, madvise: fix potential workingset node list_lru leaks
kernel BUG in bch2_btree_path_traverse_one fs -1 syz, C done 9 615d 648d 28/29 467d f11ca2ab18e3 bcachefs: Guard against backpointers to unknown btrees
general protection fault in ocfs2_prepare_dir_for_insert ocfs2 8 syz, C inconclusive 1072 477d 726d 28/29 467d b0fce54b8c0d ocfs2: check dir i_size in ocfs2_find_entry
possible deadlock in xfs_dquot_detach_buf xfs 4 syz, C done 6864 559d 607d 28/29 467d 1aacd3fac248 xfs: release the dquot buf outside of qli_lock
kernel BUG in bch2_journal_pin_set fs -1 syz, C done 11 576d 629d 28/29 467d b3d82c2f2761 bcachefs: Guard against journal seq overflow
WARNING in get_mode_access lsm -1 syz, C inconclusive 12 581d 639d 28/29 467d 49440290a093 landlock: Handle weird files
general protection fault in pick_link ntfs3 2 syz, C 5 490d 640d 28/29 467d 2afd4d267e6d fs/ntfs3: Mark inode as bad as soon as error detected in mi_enum_attr()
KASAN: vmalloc-out-of-bounds Read in acpi_nfit_ctl (2) acpi nvdimm 17 syz, C 23 607d 649d 28/29 467d 265e98f72bac acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
WARNING in bch2_journal_flush_seq_async fs -1 syz, C 27 573d 697d 28/29 467d 4746ee182a76 bcachefs: Check for inode journal seq in the future
general protection fault in proc_scheduler fs 2 syz 6 586d 591d 28/29 467d d38e26e36206 mptcp: sysctl: sched: avoid using current->nsproxy
UBSAN: shift-out-of-bounds in iova_bitmap_alloc iommu -1 syz, C done 6 575d 581d 28/29 467d e24c15510592 iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index()
KASAN: slab-out-of-bounds Read in selinux_ip_output selinux 19 syz, C done 1490 618d 628d 28/29 467d eedcad2f2a37 selinux: use sk_to_full_sk() in selinux_ip_output()
KMSAN: uninit-value in ima_add_template_entry (2) exfat 7 syz, C 123 473d 683d 28/29 467d 98e2fb26d1a9 exfat: fix the new buffer was not zeroed before writing
general protection fault in modify_prefix_route net 2 syz, C done 11 628d 628d 28/29 467d a747e02430df ipv6: avoid possible NULL deref in modify_prefix_route()
general protection fault in do_migrate_pages mm 2 syz, C 2 617d 635d 28/29 467d 091c1dd2d4df mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
kernel BUG in bch2_rechecksum_bio fs -1 syz, C 4 636d 646d 28/29 467d 9bdb3b73e732 bcachefs: Check for extent crc uncompressed/compressed size mismatch
WARNING in iguanair_probe/usb_submit_urb (2) media -1 syz, C done 18 567d 689d 28/29 467d b98d5000c505 media: rc: iguanair: handle timeouts
kernel BUG in __bch2_journal_pin_put fs -1 syz, C 11 587d 629d 28/29 467d b3d82c2f2761 bcachefs: Guard against journal seq overflow
WARNING: refcount bug in sk_skb_reason_drop can 13 syz, C done 8107 615d 682d 28/29 467d a8c695005bfe can: j1939: j1939_session_new(): fix skb reference counting
KMSAN: uninit-value in inode_go_dump (5) gfs2 7 syz, C 6 630d 684d 28/29 467d f9417fcfca3c KMSAN: uninit-value in inode_go_dump (5)
possible deadlock in xfs_icwalk_ag (2) xfs 4 syz, C 1066 507d 852d 28/29 467d 45f69d091bab xfs: eliminate lockdep false positives in xfs_attr_shortform_list
kernel BUG in const_folio_flags (2) fs mm -1 syz 3 571d 631d 28/29 467d 3203b3ab0fcf mm/filemap: don't call folio_test_locked() without a reference in next_uptodate_folio()
KASAN: slab-use-after-free Read in __mmap_region mm 19 syz, C 7 580d 618d 28/29 467d 42c4e4b20d9c mm: correctly reference merged VMA
general protection fault in bpf_prog_array_delete_safe bpf 2 syz, C done 5 616d 618d 28/29 467d 978c4486cca5 bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog
INFO: task hung in lock_sock_nested (5) mptcp tipc 1 syz, C done 43 477d 598d 28/29 467d 06cc8786516f tls: skip setting sk_write_space on rekey
UBSAN: array-index-out-of-bounds in read_inline_xattr f2fs 15 syz, C done 25 564d 621d 28/29 467d 5c1768b67250 f2fs: fix to do sanity check correctly on i_inline_xattr_size
WARNING in __dev_queue_xmit (5) net -1 syz, C 41 609d 607d 28/29 467d 5eb70dbebf32 netdev-genl: avoid empty messages in queue dump
WARNING in free_netdev (2) net -1 syz 259 471d 576d 28/29 467d bff406bc0424 net: destroy dev->lock later in free_netdev()
possible deadlock in f2fs_evict_inode f2fs 4 syz 2 681d 677d 28/29 467d f10a890308a7 f2fs: fix to avoid potential deadlock in f2fs_record_stop_reason()
WARNING in bitmap_parse_user trace -1 syz, C 83 588d 609d 28/29 467d 98feccbf32cf tracing: Prevent bad count for tracing_cpumask_write
kernel BUG in __bch2_btree_node_write fs -1 syz, C 110 573d 682d 28/29 467d 75eabea6988e bcachefs: Fix dup/misordered check in btree node read
kernel BUG in bch2_btree_node_lock_write fs -1 syz, C done 8 621d 633d 28/29 467d f9e0a9be70c8 bcachefs: Issue a transaction restart after commit in repair
KMSAN: uninit-value in io_recv io-uring 7 syz, C 31 590d 591d 28/29 467d c6e60a0a68b7 io_uring/net: always initialize kmsg->msg.msg_inq upfront
BUG: stack guard page was hit in sys_open mm v9fs -1 syz, C 11 607d 643d 28/29 467d 4acb665cf4f3 netfs: Work around recursion by abandoning retry if nothing read
general protection fault in cleanup_bearer tipc 19 syz, C 13668 605d 620d 28/29 467d b04d86fff66b tipc: fix NULL deref in cleanup_bearer()
WARNING in rtl8150_open/usb_submit_urb usb -1 syz, C 5 560d 712d 28/29 467d 90b7f2961798 net: usb: rtl8150: enable basic endpoint checking
KMSAN: uninit-value in hsr_forward_skb (2) net 7 syz, C 22 621d 628d 28/29 467d b9653d19e556 net: hsr: avoid potential out-of-bound access in fill_frame_info()
kernel BUG in bch2_btree_pos_to_text (2) fs -1 syz, C 51 574d 632d 28/29 467d abf23afa36eb bcachefs: Fix btree node scan when unknown btree IDs are present
kernel BUG in bch2_bucket_alloc_trans (3) fs -1 syz, C error 711 573d 636d 28/29 467d 828552ca74a4 bcachefs: Kill bch2_bucket_alloc_new_fs()
general protection fault in vsscanf (2) mm 2 syz, C 11 603d 608d 28/29 467d d3ac65d274b3 mm: huge_memory: handle strsep not finding delimiter
WARNING in iommufd_device_unbind iommu -1 syz error 3 621d 632d 28/29 467d d9df72c6acd6 iommu: iommufd: fix WARNING in iommufd_device_unbind
WARNING in ni_fiemap ntfs3 -1 syz, C 99 616d 730d 28/29 467d e2705dd3d16d fs/ntfs3: Fix warning in ni_fiemap
WARNING in nilfs_btree_propagate (2) nilfs -1 syz, C error inconclusive 2 627d 670d 28/29 467d ca76bb226bf4 nilfs2: do not force clear folio if buffer is referenced
WARNING in bitmap_parselist_user kernel -1 syz, C 35 588d 607d 28/29 467d dd2a5b5514ab mm/util: make memdup_user_nul() similar to memdup_user()
WARNING in mptcp_pm_nl_set_flags (2) mptcp -1 syz done 2 584d 579d 28/29 467d 1bb0d1348546 mptcp: pm: only set fullmesh for subflow endp
kernel BUG in nilfs_delete_entry nilfs -1 syz, C done 22 576d 839d 28/29 467d ee70999a988b nilfs2: handle errors that nilfs_prepare_chunk() may return
WARNING in thrustmaster_probe/usb_submit_urb usb -1 syz, C 25 572d 673d 28/29 467d 50420d7c79c3 HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check
WARNING in tomoyo_write_control tomoyo -1 syz, C 301 570d 609d 28/29 467d 3df7546fc03b tomoyo: don't emit warning in tomoyo_write_control()
WARNING in handle_policy_update lsm -1 syz, C 61 588d 609d 28/29 467d f09ff307c729 safesetid: check size of policy writes
KASAN: slab-out-of-bounds Read in led_tg_check netfilter 17 syz, C done 5 623d 633d 28/29 467d 04317f4eb2aa netfilter: x_tables: fix LED ID check in led_tg_check()
KASAN: slab-use-after-free Read in ocfs2_lock_global_qf ocfs2 19 syz, C inconclusive 11 592d 643d 28/29 467d 5f3fd772d152 ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
kernel BUG in bch2_journal_noflush_seq fs -1 syz, C done done 841 573d 767d 28/29 467d 0eafe758ac44 bcachefs: Check for bucket journal seq in the future
KMSAN: uninit-value in __exfat_get_dentry_set exfat 7 syz, C 14 626d 680d 28/29 467d 02dffe9ab092 exfat: fix uninit-value in __exfat_get_dentry_set
UBSAN: array-index-out-of-bounds in mr_table_dump net 15 syz, C 4 572d 572d 28/29 467d 15a901361ec3 ipmr: do not call mr_mfc_uses_dev() for unres entries
KASAN: slab-use-after-free Read in set_powered_sync bluetooth 19 syz, C done 153 626d 762d 28/29 467d 0b882940665c Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync
divide error in drm_mode_vrefresh dri 2 syz, C done 15 607d 1152d 28/29 467d 9398332f23fa drm/modes: Avoid divide by zero harder in drm_mode_vrefresh()
KASAN: use-after-free Read in ocfs2_search_extent_list ocfs2 19 syz, C inconclusive 3 585d 615d 28/29 467d 34bb50c42335 ocfs2: check el->l_next_free_rec in ocfs2_get_clusters_nocache
KASAN: out-of-bounds Read in copy_from_kernel_nofault mm 17 syz, C done 1628 509d 685d 28/29 467d e4137f08816b mm, kasan, kmsan: instrument copy_from/to_kernel_nofault
UBSAN: array-index-out-of-bounds in inline_xattr_addr f2fs 15 syz, C 6 573d 605d 28/29 467d 5c1768b67250 f2fs: fix to do sanity check correctly on i_inline_xattr_size
INFO: task hung in process_measurement (2) integrity lsm 1 syz, C done 607 469d 1072d 28/29 467d a5324b3a488d exfat: fix the infinite loop in __exfat_free_cluster()
WARNING: suspicious RCU usage in __ethtool_get_ts_info net 4 syz, C done 41 587d 607d 28/29 467d 4c61d809cf60 net: ethtool: Fix suspicious rcu_dereference usage
general protection fault in bch2_checksum fs 19 syz, C done 34 469d 760d 28/29 467d f7f196170dcd bcachefs: cryptographic MACs on superblock are not (yet?) supported
WARNING in ovl_encode_real_fh overlayfs -1 syz, C 7 590d 657d 28/29 467d 974e3fe0ac61 fs: relax assertions on failure to encode file handles
KASAN: slab-use-after-free Read in sg_release scsi usb 19 syz 1 638d 648d 28/29 467d f10593ad9bc3 scsi: sg: Fix slab-use-after-free read in sg_release()
UBSAN: shift-out-of-bounds in flow_classify net -1 syz, C error 5 591d 590d 28/29 467d a039e54397c6 net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute
WARNING in rxrpc_send_data afs net -1 syz, C done 275 608d 614d 28/29 467d ae4f89989479 rxrpc: Fix ability to add more data to a call once MSG_MORE deasserted
WARNING in l2tp_exit_net net -1 syz done 219 618d 702d 28/29 467d 5d066766c5f1 net/l2tp: fix warning in l2tp_exit_net found by syzbot
KMSAN: uninit-value in hfs_read_inode hfs 7 syz, C 2 622d 632d 28/29 467d b905bafdea21 hfs: Sanity check the root record
KASAN: slab-out-of-bounds Read in f2fs_getxattr f2fs 17 syz, C done 9 531d 591d 28/29 467d 5c1768b67250 f2fs: fix to do sanity check correctly on i_inline_xattr_size
possible deadlock in team_port_change_check (2) net 4 syz, C done 16406 478d 899d 28/29 467d 3fff5da4ca21 team: prevent adding a device which is already a team device lower
BUG: unable to handle kernel paging request in crypto_skcipher_encrypt bcachefs 8 syz, C 433 559d 793d 28/29 467d dba8243f3b46 bcachefs: Don't try to en/decrypt when encryption not available
KASAN: slab-out-of-bounds Read in orangefs_debug_write orangefs 17 syz, C 6 567d 602d 28/29 467d f7c848431632 orangefs: fix a oob in orangefs_debug_write
WARNING: locking bug in __rmqueue_pcplist mm 4 syz, C 11148 558d 651d 28/29 467d d40797d6720e kasan: make kasan_record_aux_stack_noalloc() the default behaviour
general protection fault in vidtv_mux_stop_thread media 2 syz, C 9 569d 595d 28/29 467d 1221989555db media: vidtv: Fix a null-ptr-deref in vidtv_mux_stop_thread
KASAN: slab-use-after-free Read in ila_nf_input net 19 syz 38 591d 594d 28/29 467d 260466b576bc ila: serialize calls to nf_register_net_hooks()
WARNING in ieee80211_set_active_links wireless -1 syz, C 2 577d 594d 28/29 467d 7553477cbfd7 wifi: mac80211: prohibit deactivating all links
WARNING: locking bug in eventfd_signal_mask io-uring fs 4 syz, C done 6 591d 595d 28/29 467d a9c83a0ab66a io_uring/timeout: flush timeouts outside of the timeout lock
general protection fault in dev_prep_valid_name wireless 2 syz, C done 792 595d 638d 28/29 467d 48327566769a rtnetlink: fix double call of rtnl_link_get_net_ifla()
general protection fault in btrfs_search_slot btrfs 2 syz, C done 9 622d 661d 28/29 467d 3ed51857a50f btrfs: add a sanity check for btrfs root in btrfs_search_slot()
kernel BUG in ocfs2_truncate_log_append ocfs2 -1 syz, C 4 594d 648d 28/29 467d 01676ecd0b5c ocfs2: check tl->count of truncate log inode in ocfs2_get_truncate_log_info
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_sync bluetooth 19 syz 40 581d 753d 28/29 467d 26fbd3494a7d Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync
kernel BUG in iov_iter_revert (2) fuse netfs -1 syz, C done 61 583d 654d 28/29 467d 105549d09a53 netfs: Fix enomem handling in buffered reads
kernel BUG in vlan_get_tci net -1 syz, C done 5 594d 594d 28/29 467d 77ee7a6d16b6 af_packet: fix vlan_get_tci() vs MSG_PEEK
WARNING in ip6mr_free_table net -1 syz, C done 97859 616d 622d 28/29 467d 50b94204446e ipmr: tune the ipmr_can_free_table() checks.
WARNING in __io_submit_flush_completions io-uring -1 syz, C 23 584d 604d 28/29 467d 60495b08cf7a io_uring: silence false positive warnings
possible deadlock in chaoskey_release usb 4 syz, C 90 671d 676d 28/29 467d d73dc7b182be USB: chaoskey: Fix possible deadlock chaoskey_list_lock
WARNING in wnd_add_free_ext (3) ntfs3 -1 syz, C done 19 496d 731d 28/29 467d 5fc982fe7eca fs/ntfs3: Fix case when unmarked clusters intersect with zone
WARNING in __mptcp_clean_una (2) mptcp -1 syz, C done 11 568d 608d 28/29 467d 619af16b3b57 mptcp: handle fastopen disconnect correctly
general protection fault in bch2_btree_path_traverse_one fs 8 syz, C done 564 559d 660d 28/29 467d 90f3683e8f7c bcachefs: Fix null ptr deref in btree_path_lock_root() c7e78f7b0178 bcachefs: Ignore empty btree root journal entries
possible deadlock in __bch2_trans_relock btrfs 4 syz, C 52 575d 662d 28/29 467d ff1dd05f8233 bcachefs: bch2_trans_relock() is trylock for lockdep
BUG: corrupted list in bch2_btree_and_journal_iter_exit fs 8 syz, C done 7 583d 629d 28/29 467d 0184dfa3b821 bcachefs: Fix journal_iter list corruption
WARNING: locking bug in get_random_u8 kernel 4 syz 70 566d 638d 28/29 467d d40797d6720e kasan: make kasan_record_aux_stack_noalloc() the default behaviour
WARNING in posixtimer_send_sigqueue (2) kernel -1 syz, C done 557 559d 607d 28/29 467d 8c4840277b6d signal/posixtimers: Handle ignore/blocked sequences correctly
KASAN: slab-use-after-free Read in bpf_trace_run2 (2) bpf trace 19 syz error 123 650d 667d 28/29 467d 2e8a12b82c40 tracing: Fix syscall tracepoint use-after-free
BUG: corrupted list in ieee802154_if_remove wpan 8 syz, C error 3 645d 648d 28/29 467d eb09fbeb4870 mac802154: check local interfaces before deleting sdata list
KMSAN: uninit-value in dib3000mb_attach (2) usb media 7 syz, C 4873 602d 2123d 28/29 467d 2dd59fe0e19e media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
KMSAN: uninit-value in io_nop io-uring 7 syz, C 39 623d 633d 28/29 467d ee116574de84 io_uring/nop: ensure nop->fd is always initialized
WARNING in mark_buffer_dirty (6) fs -1 syz, C error 11669 467d 1034d 28/29 467d ca76bb226bf4 nilfs2: do not force clear folio if buffer is referenced
KASAN: slab-out-of-bounds Read in nsim_dev_health_break_write net 17 syz, C 4 605d 610d 28/29 467d ee76746387f6 netdevsim: prevent bad user input in nsim_dev_health_break_write()
BUG: unable to handle kernel paging request in find_first_extent_item btrfs 8 syz, C 4 596d 592d 28/29 467d 6aecd91a5c5b btrfs: avoid NULL pointer dereference if no valid extent tree
WARNING in uvc_status_unregister usb media -1 syz, C done 61256 558d 665d 28/29 467d a67f75c2b5ec media: uvcvideo: Fix deadlock during uvc_probe
INFO: rcu detected stall in hub_event usb 1 syz, C done 1233 467d 2460d 28/29 467d 64f2657b5793 HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections
kernel BUG in bch2_bio_compress (2) fs -1 syz, C 5 515d 640d 28/29 467d 3d0b3b51c5ab bcachefs: Don't BUG_ON() when superblock feature wasn't set for compressed data
WARNING in page_pool_put_unrefed_netmem net -1 syz, C error 7 580d 720d 28/29 467d a126061c80d5 ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple()
possible deadlock in chaoskey_open usb 4 syz, C 475 671d 676d 28/29 467d d73dc7b182be USB: chaoskey: Fix possible deadlock chaoskey_list_lock
WARNING in udf_rename (2) udf -1 syz, C error 8 620d 628d 28/29 467d 6756af923e06 udf: Verify inode link counts before performing rename
KMSAN: uninit-value in f2fs_new_node_page f2fs 7 syz, C 39 567d 621d 28/29 467d 76f01376df39 f2fs: ensure that node info flags are always initialized
WARNING: locking bug in __lock_task_sighand bpf trace 4 syz, C unreliable 89 570d 626d 28/29 467d 87c544108b61 bpf: Send signals asynchronously if !preemptible
KASAN: slab-out-of-bounds Read in ovl_inode_upper overlayfs 17 syz, C 4 629d 629d 28/29 467d 2957fa4931a3 fs/backing_file: fix wrong argument in callback
kernel BUG in bch2_btree_write_buffer_flush_locked fs -1 syz, C done 35 577d 657d 28/29 467d b3d82c2f2761 bcachefs: Guard against journal seq overflow
KASAN: null-ptr-deref Read in fuse_copy_do fuse 12 syz, C done 10 587d 627d 28/29 467d 78f2560fc9fa fuse: Set *nbytesp=0 in fuse_get_user_pages on allocation failure
WARNING in __proc_create (3) afs -1 syz, C 2 595d 591d 28/29 467d 8fd56ad6e7c9 afs: Fix the maximum cell name length
general protection fault in vsock_connectible_has_data net virt 2 syz, C done 7 586d 584d 28/29 467d f6abafcd32f9 vsock/bpf: return early if transport is not assigned
kernel BUG in vlan_get_protocol_dgram net -1 syz, C done 8 594d 594d 28/29 467d f91a5b808938 af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK
kernel BUG in bch2_btree_root_read fs -1 syz, C 9 558d 632d 28/29 467d 828552ca74a4 bcachefs: Kill bch2_bucket_alloc_new_fs()
WARNING in current_check_refer_path lsm -1 syz, C 90 581d 766d 28/29 467d 49440290a093 landlock: Handle weird files
INFO: task hung in exfat_sync_fs exfat 1 syz, C error 1859 598d 1114d 28/29 467d fee873761bd9 exfat: fix the infinite loop in exfat_readdir()
KASAN: slab-out-of-bounds Write in __put_unused_fd fs 22 syz, C done 5 589d 593d 28/29 467d 0c0214df28f0 fanotify: Fix crash in fanotify_init(2)
possible deadlock in usb_deregister_dev (3) usb 4 syz, C 103 671d 676d 28/29 467d d73dc7b182be USB: chaoskey: Fix possible deadlock chaoskey_list_lock
possible deadlock in page_cache_ra_unbounded mm fs 4 syz, C error done 163 573d 1334d 28/29 529d 6f861765464f fs: Block writes to mounted block devices
WARNING in skb_checksum_help (3) net -1 syz, C done done 9460 641d 969d 28/29 566d 89add40066f9 net: drop bad gso csum_start and offset in virtio_net_hdr
KASAN: use-after-free Read in reiserfs_fill_super (3) fs 19 syz, C error done 47 636d 681d 28/29 580d fb6f20ecb121 reiserfs: The last commit
kernel BUG in bch2_fs_btree_write_buffer_exit fs -1 syz, C done 6138 636d 688d 28/29 596d ca43f73cd172 bcachefs: bch2_btree_write_buffer_flush_going_ro()
kernel BUG in bch2_journal_res_get (2) fs -1 syz, C 1710 636d 660d 28/29 596d ca43f73cd172 bcachefs: bch2_btree_write_buffer_flush_going_ro()
kernel BUG in bch2_fs_btree_cache_exit fs -1 syz, C done 2766 636d 667d 28/29 596d ca43f73cd172 bcachefs: bch2_btree_write_buffer_flush_going_ro()
divide error in __tcp_select_window (3) net 2 syz, C 5 647d 652d 28/29 607d ce7356ae3594 mptcp: cope racing subflow creation in mptcp_rcv_space_adjust
BUG: using smp_processor_id() in preemptible code in bpf_mem_alloc bpf 4 syz, C done 12 639d 636d 28/29 607d 4ff04abf9d5b bpf: Add necessary migrate_disable to range_tree.
WARNING: suspicious RCU usage in phonet_route_del net 4 syz, C done 7 648d 652d 28/29 608d 38a1f50a5efb phonet: do not call synchronize_rcu() from phonet_route_del()
general protection fault in io_uring_show_fdinfo (2) io-uring 2 syz, C done 19 654d 653d 28/29 608d d50f94d761a5 io_uring/rsrc: get rid of the empty node and dummy_ubuf
general protection fault in io_sqe_buffer_register io-uring 2 syz, C done 55 651d 653d 28/29 608d d50f94d761a5 io_uring/rsrc: get rid of the empty node and dummy_ubuf
kernel BUG in __bch2_btree_node_hash_insert fs -1 syz, C done 396 637d 645d 28/29 608d 0b6ec0c5ac6c bcachefs: Fix assertion pop in topology repair
general protection fault in put_page (3) net 2 syz, C done 47 609d 653d 28/29 608d 341468e0ab4b lib/iov_iter: fix bvec iterator setup
KASAN: slab-out-of-bounds Read in journal_entry_dev_usage_to_text fs 17 syz, C done 33 638d 748d 28/29 608d 657d4282d8c4 bcachefs: Fix journal_entry_dev_usage_to_text() overrun
WARNING in posixtimer_send_sigqueue kernel -1 syz, C error 196 608d 641d 28/29 608d cdc905d16b07 posix-timers: Fix spurious warning on double enqueue versus do_exit()
general protection fault in touch_buffer nilfs 2 syz, C 8 644d 655d 28/29 608d cd45e963e44b nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
UBSAN: array-index-out-of-bounds in jfs_readdir jfs 19 syz, C inconclusive 89 615d 867d 28/29 608d 839f102efb16 jfs: fix array-index-out-of-bounds in jfs_readdir
kernel BUG in __bkey_unpack_pos fs -1 syz, C 4 616d 655d 28/29 608d dc537189b5cf bcachefs: Fix validate_bset() repair path
kernel BUG in bch2_trans_node_iter_init fs -1 syz, C done 13 646d 660d 28/29 608d f8f1dde68681 bcachefs: Fix missing validation for bch_backpointer.level
kernel BUG in bch2_btree_path_level_init (2) fs -1 syz, C done 29 612d 662d 28/29 608d f8f1dde68681 bcachefs: Fix missing validation for bch_backpointer.level
KASAN: slab-out-of-bounds Read in bitmap_ip_add (2) netfilter 17 syz, C 3 646d 642d 28/29 608d 35f56c554eb1 netfilter: ipset: add missing range check in bitmap_ip_uadt
WARNING in sk_skb_reason_drop net -1 syz, C done 1447 609d 638d 28/29 608d 85c7975acd97 net: ip: fix unexpected return in fib_validate_source()
UBSAN: shift-out-of-bounds in ocfs2_fill_super (2) ocfs2 -1 syz, C 81 638d 659d 28/29 608d 23aab037106d ocfs2: fix UBSAN warning in ocfs2_verify_volume()
WARNING in media_create_pad_link usb media -1 syz, C done done 104 633d 2285d 28/29 608d 3dd075fe8ebb media: uvcvideo: Require entities to have a non-zero unique ID
UBSAN: shift-out-of-bounds in dbSplit (2) jfs -1 syz, C error 403 621d 867d 28/29 608d a5f5e4698f8a jfs: fix shift-out-of-bounds in dbSplit
kernel BUG in bch2_dev_btree_bitmap_mark fs -1 syz, C done 31 640d 664d 28/29 608d 27a036a0c3e7 bcachefs: Fix bch_member.btree_bitmap_shift validation
kernel BUG in ocfs2_set_new_buffer_uptodate ocfs2 -1 syz, C inconclusive 55 617d 728d 28/29 608d 737f34137844 ocfs2: uncache inode which has failed entering the group
UBSAN: array-index-out-of-bounds in dbAdjTree (2) jfs 15 syz, C inconclusive 77 635d 820d 28/29 608d a174706ba4da jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
kernel BUG in bch2_bkey_pack_pos_lossy fs -1 syz, C 7 647d 659d 28/29 608d dc537189b5cf bcachefs: Fix validate_bset() repair path
KASAN: use-after-free Read in netdev_unregister_kobject pm 19 syz, C error 6281 615d 846d 28/29 608d 27aabf27fd01 Bluetooth: fix use-after-free in device_for_each_child()
KMSAN: uninit-value in hci_rx_work bluetooth 7 syz, C 29 635d 754d 28/29 608d 3fe288a8214e Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet
WARNING: locking bug in ext4_move_extents ext4 4 syz, C done 12000 615d 1168d 28/29 608d d7fe143cb115 locking/lockdep: Avoid creating new name string literals in lockdep_set_subclass()
INFO: task hung in snd_card_free sound 1 syz, C error 24 637d 652d 28/29 608d dafb28f02be4 ALSA: usx2y: Use snd_card_free_when_closed() at disconnection
kernel BUG in bch2_run_recovery_pass fs -1 syz, C done 17 640d 661d 28/29 608d 2642084f26b5 bcachefs: Allow for unknown key types in backpointers fsck
WARNING in thermal_thresholds_flush pm -1 syz, C done 76 666d 667d 28/29 608d 54219ee4eaeb thermal: thresholds: Fix thermal lock annotation issue
general protection fault in swap_reclaim_full_clusters mm 2 syz, C 1530 641d 649d 28/29 608d dcf32ea7eced mm: swapfile: fix cluster reclaim work crash on rotational devices
UBSAN: array-index-out-of-bounds in dtReadFirst jfs 19 syz, C error 200 610d 837d 28/29 608d ca84a2c9be48 jfs: array-index-out-of-bounds fix in dtReadFirst
WARNING in hci_conn_timeout bluetooth -1 syz, C done 6022 608d 2206d 28/29 608d 2b0f2fc9ed62 Bluetooth: hci_conn: Use disable_delayed_work_sync
kernel BUG in bch2_ptr_swab fs -1 syz, C inconclusive 11 645d 662d 28/29 608d 840c2fbcc5cd bcachefs: Fix assertion pop in bch2_ptr_swab()
WARNING in __v4l2_ctrl_modify_dimensions media -1 syz, C 237 633d 713d 28/29 608d 9f070b1862f3 media: v4l2-core: v4l2-dv-timings: check cvt/gtf result
general protection fault in fuse_do_readpage fuse 8 syz, C 9 627d 651d 28/29 608d 3a23787ca875 erofs: fix file-backed mounts over FUSE
WARNING in iomap_iter (4) iomap erofs -1 syz, C done 1 643d 639d 28/29 608d 0bc8061ffc73 erofs: handle NONHEAD !delta[1] lclusters gracefully
general protection fault in ocfs2_xa_block_wipe_namevalue ocfs2 2 syz, C 4 662d 658d 28/29 613d 0b63c0e01fba ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
kernel BUG in __bch2_bkey_cmp_packed_format_checked fs -1 syz, C 4 660d 660d 28/29 613d d335bb3fd3a4 bcachefs: Ancient versions with bad bkey_formats are no longer supported
kernel BUG in bch2_bkey_cmp_packed fs -1 syz, C 8 647d 660d 28/29 613d d335bb3fd3a4 bcachefs: Ancient versions with bad bkey_formats are no longer supported
WARNING in __sock_create net -1 syz, C done 4 648d 648d 28/29 613d d293958a8595 net/smc: do not leave a dangling sk pointer in __smc_create()
KMSAN: uninit-value in sctp_sf_ootb sctp 7 syz, C 18 652d 720d 28/29 613d 0ead60804b64 sctp: properly validate chunk size in sctp_sf_ootb()
kernel BUG in bch2_inconsistent_error fs -1 syz, C 4 647d 658d 28/29 613d f9f0a5390dce bcachefs: Change OPT_STR max to be 1 less than the size of choices array
possible deadlock in ni_fiemap ntfs3 4 syz, C error done 4007 671d 1398d 28/29 624d 6f861765464f fs: Block writes to mounted block devices
KASAN: slab-use-after-free Write in sco_sock_timeout bluetooth 22 syz, C done 275 660d 1004d 28/29 628d 1bf4470a3939 Bluetooth: SCO: Fix UAF on sco_sock_timeout
KASAN: slab-use-after-free Read in bch2_reconstruct_alloc fs 19 syz, C done 2 657d 662d 28/29 640d 8e910ca20e11 bcachefs: Fix UAF in bch2_reconstruct_alloc()
BUG: Bad page state in bpf_test_run_xdp_live net -1 syz, C done 17 654d 658d 28/29 640d c40dd8c47325 bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled
kernel BUG in bch2_bucket_alloc_trans (2) fs -1 syz, C done 103 640d 668d 28/29 640d 3fd27e9c57bf bcachefs: init freespace inited bits to 0 in bch2_fs_initialize
kernel BUG in ocfs2_truncate_inline ocfs2 -1 syz, C inconclusive 3 662d 676d 28/29 640d bc0a2f3a73fc ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
KASAN: null-ptr-deref Read in bch2_sb_set_upgrade_extra fs 11 syz, C 2 666d 662d 28/29 640d a25a83de45b4 bcachefs: fix null-ptr-deref in have_stripes()
possible deadlock in nilfs_dirty_inode (4) nilfs 4 syz, C 2 656d 666d 28/29 640d b3a033e3ecd3 nilfs2: fix potential deadlock with newly created symlinks
WARNING in push_jmp_history bpf -1 syz, C done 5 678d 678d 28/29 640d aa30eb3260b2 bpf: Force checkpoint when jmp history is too long
general protection fault in btree_node_iter_and_journal_peek fs 2 syz, C 3 663d 685d 28/29 640d 3726a1970bd7 bcachefs: Fix NULL ptr dereference in btree_node_iter_and_journal_peek
UBSAN: shift-out-of-bounds in bch2_alloc_to_text fs -1 syz, C 29 652d 664d 28/29 640d 5c41f75d1b92 bcachefs: fix shift oob in alloc_lru_idx_fragmentation
KASAN: null-ptr-deref Write in xfs_filestream_select_ag (2) xfs 12 syz 3 667d 667d 28/29 640d dc60992ce76f xfs: fix finding a last resort AG in xfs_filestream_pick_ag
possible deadlock in process_measurement (4) integrity lsm 4 syz, C done 7976 650d 687d 28/29 640d 58a039e679fe mm: split critical region in remap_file_pages() and invoke LSMs in between
UBSAN: shift-out-of-bounds in validate_sb_layout fs -1 syz, C done 7 653d 662d 28/29 640d 2045fc4295c4 bcachefs: Fix invalid shift in validate_sb_layout()
kernel BUG in __block_write_begin_int (3) nilfs -1 syz, C 4 669d 669d 28/29 640d 41e192ad2779 nilfs2: fix kernel bug due to missing clearing of checked flag
possible deadlock in lock_mm_and_find_vma (2) mm 4 syz, C 6626 644d 715d 28/29 640d 58a039e679fe mm: split critical region in remap_file_pages() and invoke LSMs in between
possible deadlock in bch2_replicas_entry_validate fs 4 syz, C done 9468 663d 682d 28/29 641d bf4baaa087e2 bcachefs: Fix lockdep splat in bch2_accounting_read
possible deadlock in ext4_xattr_inode_iget (3) ext4 4 syz, C error done 183 683d 865d 28/29 641d d1bc560e9a9c ext4: nested locking for xattr inode
inconsistent lock state in ppp_input ppp 4 syz, C 15 670d 688d 28/29 642d aec7291003df ppp: do not assume bh is held in ppp_channel_bridge_input()
kernel BUG in bch2_btree_pos_to_text fs -1 syz, C 8 645d 694d 28/29 642d 0151d10a480d bcachefs: add check for btree id against max in try read node
possible deadlock in fsnotify_destroy_mark squashfs 4 syz, C 46 681d 724d 28/29 642d cad3f4a22cfa inotify: Fix possible deadlock in fsnotify_destroy_mark
INFO: task hung in vcs_open (8) nilfs serial 1 syz, C inconclusive 7 683d 689d 28/29 642d 08cfa12adf88 nilfs2: propagate directory read errors from nilfs_find_entry()
possible deadlock in sk_clone_lock (3) mptcp 4 syz, C 21 661d 710d 28/29 642d 3d041393ea8c mptcp: prevent MPC handshake on port-based signal endpoints
WARNING in __mptcp_move_skbs_from_subflow mptcp -1 syz, C error 90 675d 762d 28/29 642d 4dabcdf58121 tcp: fix mptcp DSS corruption due to large pmtu xmit
INFO: task hung in usb_port_suspend usb 1 syz, C 12 664d 674d 28/29 642d 5189df7b8088 USB: gadget: dummy-hcd: Fix "task hung" problem
general protection fault in dev_map_enqueue (2) bpf net 19 syz, C error done 336 746d 812d 28/29 642d 09d88791c7cd bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
kernel BUG in submit_bh_wbc (3) nilfs fs -1 syz, C done 18 664d 671d 28/29 642d 6ed469df0bfb nilfs2: fix kernel bug due to missing clearing of buffer delay flag
general protection fault in prt_str fs 2 syz, C done 2 684d 699d 28/29 642d a30f32222df2 bcachefs: Fix NULL pointer dereference in bch2_opt_to_text
WARNING in kthread_unpark (2) wireguard gfs2 -1 syz done 35 680d 827d 28/29 642d 214e01ad4ed7 kthread: unpark only parked kthread
general protection fault in bch2_alloc_read fs 2 syz, C 7 682d 689d 28/29 642d a319aeaebb6c bcachefs: Fix missing bounds checks in bch2_alloc_read()
general protection fault in run_is_mapped_full ntfs3 8 syz, C error 72 677d 764d 28/29 642d a33fb016e49e fs/ntfs3: Fix general protection fault in run_is_mapped_full
WARNING: kmalloc bug in wnd_init ntfs3 -1 syz, C done 3 747d 893d 28/29 642d c4a8ba334262 fs/ntfs3: Add rough attr alloc_size check
WARNING: locking bug in try_to_wake_up kernel 19 syz, C error 157 642d 823d 28/29 642d 41fd1e94066a btrfs: wait for fixup workers before stopping cleaner kthread during umount
KASAN: slab-out-of-bounds Read in udf_get_filelongad (2) udf 17 syz, C 4 698d 712d 28/29 642d c226964ec786 udf: refactor inode_bmap() to handle error
INFO: trying to register non-static key in mark_as_free_ex ntfs3 -1 syz, C done 2 700d 712d 28/29 642d d178944db36b fs/ntfs3: Additional check in ni_clear()
UBSAN: shift-out-of-bounds in xfrm_selector_match (2) net -1 syz, C error 10 686d 699d 28/29 642d 3f0ab59e6537 xfrm: validate new SA's prefixlen using SA family when sel.family is unset
WARNING in p9_client_create (2) v9fs -1 syz, C done 26070 657d 693d 28/29 642d 79efebae4afc 9p: Avoid creating multiple slab caches with the same name
WARNING in xt_cluster_mt (2) netfilter -1 syz, C inconclusive 5 684d 682d 28/29 642d 0bfcb7b71e73 netfilter: xtables: avoid NFPROTO_UNSPEC where needed
KMSAN: uninit-value in ppp_async_push (4) ppp 7 syz, C 43 675d 676d 28/29 642d 40dddd4b8bd0 ppp: fix ppp_async_encode() illegal access
KMSAN: uninit-value in netfs_clear_buffer netfs 7 syz, C 46 686d 695d 28/29 642d f6023535b52f netfs: Fix a KMSAN uninit-value error in netfs_clear_buffer
UBSAN: shift-out-of-bounds in bch2_stripe_to_text fs -1 syz, C 3 693d 689d 28/29 642d 9f25dbe0bf91 bcachefs: Add missing validation for bch_stripe.csum_granularity_bits
UBSAN: shift-out-of-bounds in member_to_text fs -1 syz, C 12 669d 713d 28/29 642d c1bd21bb6518 bcachefs: Fix invalid shift in member_to_text()
possible deadlock in rfcomm_sk_state_change bluetooth 4 syz, C done 22650 670d 1798d 28/29 642d 08d1914293da Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
general protection fault in write_all_supers btrfs 8 syz, C 21 662d 705d 28/29 642d 3c36a72c1d27 btrfs: reject ro->rw reconfiguration if there are hard ro requirements
KMSAN: uninit-value in from_kuid (2) ocfs2 7 syz, C 75 664d 695d 28/29 642d 15f343474816 fs: Fix uninitialized value issue in from_kuid and from_kgid
BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio (3) erofs 10 syz, C 492 642d 698d 28/29 642d 416a8b2c02fe erofs: ensure regular inodes for file-backed mounts
KMSAN: uninit-value in vfat_rename2 exfat 7 syz, C 2 685d 682d 28/29 642d 963a7f4d3b90 fat: fix uninitialized variable
possible deadlock in mi_read ntfs3 4 syz, C error 11141 642d 1415d 28/29 642d 03b097099eef fs/ntfs3: Fix possible deadlock in mi_read
kernel BUG in dma_alloc_attrs iommu -1 syz, C 4 665d 670d 28/29 642d 78b2770c935f dma-mapping: fix tracing dma_alloc/free with vmalloc'd memory
INFO: rcu detected stall in br_handle_frame (5) bridge 1 syz 24 645d 673d 28/29 642d a1494d532e28 netdevsim: use cond_resched() in nsim_dev_trap_report_work()
BUG: sleeping function called from invalid context in ntfs_d_hash ntfs3 5 syz, C done 740 677d 714d 28/29 642d 589996bf8c45 ntfs3: Change to non-blocking allocation in ntfs_d_hash
KMSAN: uninit-value in udf_get_fileshortad udf 7 syz, C 3 686d 698d 28/29 642d 264db9d666ad udf: fix uninit-value use in udf_get_fileshortad
KASAN: slab-use-after-free Read in advance_sched net 19 syz, C error 15 685d 972d 28/29 642d f504465970ae net: sched: fix use-after-free in taprio_change()
WARNING in copy_huge_pmd mm -1 syz, C done 361 675d 692d 28/29 642d 47fa30118f02 mm/huge_memory: check pmd_special() only after pmd_present()
possible deadlock in ntfs_set_state (2) ntfs3 4 syz, C error 943 674d 915d 28/29 642d 5b2db723455a fs/ntfs3: Fix warning possible deadlock in ntfs_set_state
KASAN: slab-use-after-free Read in l2cap_connect (2) bluetooth 19 syz, C done 8 694d 783d 28/29 642d 333b4fd11e89 Bluetooth: L2CAP: Fix uaf in l2cap_connect
KASAN: stack-out-of-bounds Read in profile_pc kernel 17 syz, C error done 9302 778d 1903d 28/29 654d 093d9603b600 x86: stop playing stack games in profile_pc()
INFO: task hung in ext4_stop_mmpd ext4 1 syz, C done done 483 695d 767d 28/29 657d d3476f3dad4a ext4: don't set SB_RDONLY after filesystem errors
WARNING in io_sq_offload_create io-uring -1 syz, C 284 691d 695d 28/29 657d a09c17240bdf io_uring/sqpoll: retain test for whether the CPU is valid
general protection fault in ethnl_phy_doit net 2 syz, C done 6 704d 705d 28/29 660d fce1e9f86af1 net: ethtool: phy: Check the req_info.pdn field for GET commands
WARNING in __bch2_fsck_err (2) fs -1 syz, C 3 681d 677d 28/29 661d 5612daafb764 bcachefs: Fix fsck warnings from bkey validation
BUG: unable to handle kernel NULL pointer dereference in attr_make_nonresident ntfs3 10 syz, C error done 110 755d 837d 28/29 663d 0f9579d9e033 fs/ntfs3: Add missing .dirty_folio in address_space_operations
UBSAN: array-index-out-of-bounds in dbNextAG (2) jfs 15 syz, C inconclusive 53 696d 766d 28/29 663d e63866a47556 jfs: fix out-of-bounds in dbNextAG() and diAlloc()
kernel BUG in __page_table_check_zero usb -1 syz, C error done 213 695d 1183d 28/29 663d 79a61cc3fc04 mm: avoid leaving partial pfn mappings around in error case
WARNING: lock held when returning to user space in f2fs_ioc_start_atomic_write f2fs 4 syz, C done 34 731d 732d 28/29 663d b2c160f4f3cf f2fs: atomic: fix to forbid dio in atomic_file
general protection fault in ovl_llseek overlayfs 2 syz, C 5 689d 689d 28/29 663d 0c33037c825e ovl: fix file leak in ovl_real_fdget_meta()
KMSAN: uninit-value in nf_reject_ip6_tcphdr_put netfilter 7 syz, C 136 689d 702d 28/29 663d 9c778fe48d20 UPSTREAM: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
WARNING in remove_proc_entry (6) can -1 syz, C done 377 682d 711d 28/29 663d 94b0818fa635 can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().
kernel BUG in btrfs_get_ordered_extents_for_logging btrfs -1 syz 3 720d 717d 28/29 663d cd9253c23aed btrfs: fix race between direct IO write and fsync when using same fd
kernel BUG in clear_inode btrfs -1 syz, C 12 665d 807d 28/29 663d 88b1afbf0f6b vfs: fix race between evice_inodes() and find_inode()&iput()
general protection fault in nilfs_btree_insert (2) nilfs 2 syz, C inconclusive 1 704d 714d 28/29 663d 9403001ad65a nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
general protection fault in bch2_fs_recovery fs 8 syz, C 10 686d 705d 28/29 663d 025c55a4c7f1 bcachefs: return err ptr instead of null in read sb clean
memory leak in clear_state_bit btrfs 3 syz, C 3 985d 996d 28/29 663d c346c629765a btrfs: qgroup: don't use extent changeset when not needed
WARNING in rcu_sync_dtor f2fs -1 syz, C done 749 687d 751d 28/29 663d 930c6ab93492 f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
KASAN: null-ptr-deref Write in jbd2_journal_update_sb_log_tail ext4 12 syz, C 4 690d 727d 28/29 663d 5784d9fcfd43 ocfs2: fix null-ptr-deref when journal load failed.
KASAN: slab-use-after-free Read in __uprobe_unregister perf trace 19 syz, C 9 698d 736d 28/29 663d 5fe6e308abae bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
KASAN: use-after-free Read in ext4_search_dir (2) ext4 19 syz, C 5 703d 727d 28/29 663d c6b72f5d82b1 ext4: avoid OOB when system.data xattr changes underneath the filesystem
WARNING: refcount bug in ethnl_phy_done net 13 syz, C done 4 705d 704d 28/29 663d 1ad84a151af7 net: ethtool: phy: Don't set the context dev pointer for unfiltered DUMP
WARNING: bad unlock balance in ocfs2_read_blocks ocfs2 4 syz, C 240 696d 728d 28/29 663d c03a82b4a0c9 ocfs2: remove unreasonable unlock in ocfs2_read_blocks
kernel BUG in f2fs_evict_inode (3) f2fs -1 syz, C error 33 681d 728d 28/29 663d 884ee6dc85b9 f2fs: get rid of online repaire on corrupted directory
kernel BUG in trace_dma_unmap_sg iommu -1 syz, C 5 687d 690d 28/29 663d bfc4a245a794 dma-mapping: fix DMA API tracing for chained scatterlists
INFO: rcu detected stall in schedule_timeout (6) usb 1 syz, C done 40 665d 822d 28/29 663d 9313d139aa25 usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
divide error in ext4_mb_regular_allocator ext4 2 syz, C done 2 723d 733d 28/29 663d ee85e0938aa8 ext4: check stripe size compatibility on remount as well
WARNING in __rate_control_send_low (2) wireless -1 syz, C done 3233 663d 815d 28/29 663d e7a7ef9a0742 wifi: mac80211: don't use rate mask for offchannel TX either
kernel BUG in __sock_sendmsg net -1 syz, C 111 712d 729d 28/29 663d fe1910f9337b tcp_bpf: fix return value of tcp_bpf_sendmsg()
kernel BUG in vfs_get_tree fs -1 syz, C done 318 681d 725d 28/29 663d b29c30ab48e0 bcachefs: Fix incorrect IS_ERR_OR_NULL usage
general protection fault in ata_msense_control ide 2 syz, C 13 688d 695d 28/29 663d 03a9cfc1314b ata: libata-scsi: Fix ata_msense_control_spgt2()
KASAN: slab-use-after-free Read in __timer_delete_sync mptcp 19 syz error 1 715d 712d 28/29 663d b4cd80b03389 mptcp: pm: Fix uaf in __timer_delete_sync
UBSAN: array-index-out-of-bounds in dbSplit jfs 15 syz, C inconclusive 31 703d 751d 28/29 663d d64ff0d23067 jfs: check if leafidx greater than num leaves per dmap tree
UBSAN: shift-out-of-bounds in dbFindBits jfs -1 syz, C error 53 666d 769d 28/29 663d b0b2fc815e51 jfs: UBSAN: shift-out-of-bounds in dbFindBits
KASAN: use-after-free Read in rtw_load_firmware_cb usb wireless 19 syz, C 848 689d 752d 28/29 663d 0e735a4c6137 wifi: rtw88: always wait for both firmware loading attempts
INFO: rcu detected stall in aoecmd_cfg (2) usb block 1 syz, C done 7 717d 830d 28/29 663d 9313d139aa25 usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
KMSAN: uninit-value in bch2_bkey_cmp_packed_inlined fs 7 syz, C 7 686d 706d 28/29 663d 0696a18a8cc3 bcachefs: memset bounce buffer portion to 0 after key_sort_fix_overlapping
WARNING in mptcp_pm_nl_set_flags mptcp -1 syz done 3 720d 720d 28/29 663d 9366922adc6a mptcp: pm: fix ID 0 endp usage after multiple re-creations
INFO: task hung in z_erofs_runqueue erofs 1 syz, C 379 681d 750d 28/29 663d 9e2f9d34dd12 erofs: handle overlapped pclusters out of crafted images properly
possible deadlock in ocfs2_get_system_file_inode ocfs2 4 syz, C done 14785 681d 731d 28/29 663d 7bf1823e010e ocfs2: fix deadlock in ocfs2_get_system_file_inode
WARNING: ODEBUG bug in ocfs2_local_read_info ocfs2 -1 syz, C inconclusive 7 681d 713d 28/29 663d 35fccce29feb ocfs2: cancel dqi_sync_work before freeing oinfo
KASAN: slab-use-after-free Read in dbFreeBits jfs 19 syz, C done 6 700d 730d 28/29 663d d6c1b3599b2f jfs: Fix uaf in dbFreeBits
WARNING in __dev_queue_xmit (4) net -1 syz, C 387 665d 711d 28/29 663d 9d301de12da6 wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
BUG: corrupted list in gfs2_fill_super gfs2 22 syz, C done 8527 690d 805d 28/29 663d 6cb9df81a2c4 gfs2: fix double destroy_workqueue error
WARNING in hsr_fill_frame_info net -1 syz, C error 80 688d 717d 28/29 663d 430d67bdcb04 net: hsr: Use the seqnr lock for frames received via interlink port.
KMSAN: uninit-value in ocfs2_get_block ocfs2 7 syz, C 5 694d 691d 28/29 663d 2af148ef8549 ocfs2: fix uninit-value in ocfs2_get_block()
memory leak in corrupted (2) mm exfat 3 syz 432 701d 867d 28/29 663d c290fe508eee exfat: resolve memory leak from exfat_create_upcase_table()
KMSAN: kernel-infoleak in raw_ioctl (2) usb 9 syz, C 18201 688d 754d 28/29 663d 9313d139aa25 usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
WARNING in vmx_handle_exit kvm-x86 -1 syz, C error 5 693d 866d 28/29 663d 3f6821aa147b KVM: x86: Forcibly leave nested if RSM to L2 hits shutdown
WARNING in fscrypt_fname_siphash ext4 fscrypt -1 syz, C unreliable 32 715d 809d 28/29 663d 985b67cd8639 ext4: filesystems without casefold feature cannot be mounted with siphash
kernel BUG in new_curseg f2fs -1 syz, C 8 694d 706d 28/29 663d 65a6ce4726c2 f2fs: fix to don't panic system for no free segment fault injection
BUG: unable to handle kernel NULL pointer dereference in fbcon_putcs (3) fbdev btrfs 10 syz, C 4 692d 705d 28/29 663d 5b97eebcce1b fbcon: Fix a NULL pointer dereference issue in fbcon_putcs
general protection fault in smack_log_callback audit 10 syz, C done 12 691d 696d 28/29 663d 8a23c9e1ba46 selinux,smack: properly reference the LSM blob in security_watch_key()
WARNING in sock_map_close (2) bpf net -1 syz, C done 3 724d 724d 28/29 663d 1461f5a3d810 l2tp: avoid overriding sk->sk_user_data
KASAN: null-ptr-deref Write in f2fs_stop_gc_thread f2fs 22 syz, C done 5 706d 753d 28/29 663d c7f114d864ac f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
KMSAN: kernel-usb-infoleak in usbtmc_write usb 9 syz, C 167 688d 752d 28/29 663d 625fa77151f0 USB: usbtmc: prevent kernel-usb-infoleak
INFO: task hung in uevent_show usb 1 syz, C done 9704 734d 795d 28/29 663d 9313d139aa25 usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
WARNING: suspicious RCU usage in bch2_snapshot_tree_oldest_subvol fs 4 syz, C 21 686d 698d 28/29 663d 39c3aad43f6f bcachefs: Hold read lock in bch2_snapshot_tree_oldest_subvol()
general protection fault in __copy_super fs 2 syz, C done 5 692d 694d 28/29 663d 40d40c6bea19 bcachefs: assign return error when iterating through layout
KASAN: slab-use-after-free Read in unix_stream_read_actor (2) net 19 syz, C inconclusive 4 715d 711d 28/29 663d 5aa57d9f2d53 af_unix: Don't return OOB skb in manage_oob().
KASAN: slab-use-after-free Read in lockref_get_not_dead (2) fs 19 syz error 1 713d 709d 28/29 663d 4e32c25b58b9 libfs: fix get_stashed_dentry()
UBSAN: shift-out-of-bounds in ocfs2_fill_super ocfs2 -1 syz, C 199 664d 731d 28/29 663d 7f86b2942791 ocfs2: fix shift-out-of-bounds UBSAN bug in ocfs2_verify_volume()
WARNING: lock held when returning to user space in ethnl_act_cable_test net 4 syz, C done 43 719d 720d 28/29 663d 3d6a0c4f4552 net: fix unreleased lock in cable test
BUG: unable to handle kernel paging request in bpf_prog_ADDR (3) bpf net 8 syz, C done 6 764d 764d 28/29 663d 92de36080c93 bpf: Fail verification for sign-extension of packet data/data_end/data_meta
WARNING in iopt_map_pages iommu -1 syz, C error 3 717d 798d 28/29 663d 8f6887349b2f iommufd: Protect against overflow of ALIGN() during iova allocation
KASAN: slab-use-after-free Read in btrfs_cleanup_defrag_inodes btrfs 19 syz, C 266 693d 699d 28/29 663d 7f1b63f981b8 btrfs: fix use-after-free on rbtree that tracks inodes for auto defrag
WARNING in ethnl_req_get_phydev net -1 syz, C done 73 719d 720d 28/29 663d cff69f72d333 ethtool: pse-pd: move pse validation into set
possible deadlock in hfsplus_file_extend hfs 4 syz, C error done 31659 671d 1359d 28/29 664d be4edd1642ee hfsplus: fix to avoid false alarm of circular locking
WARNING: ODEBUG bug in ext4_fill_super (4) ext4 -1 syz, C 6 694d 787d 28/29 664d 0ce160c5bdb6 ext4: fix timer use-after-free on failed mount
WARNING in input_mt_init_slots input -1 syz, C inconclusive 14301 734d 2044d 28/29 664d 99d3bf5f7377 Input: MT - limit max slots 206f533a0a7c Input: uinput - reject requests with unreasonable number of slots
INFO: rcu detected stall in neigh_timer_handler (8) net 1 syz, C done done 72 735d 795d 28/29 664d 22f008128625 USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
INFO: rcu detected stall in __mod_timer (5) usb 1 syz, C error done 10 741d 805d 28/29 664d 22f008128625 USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
possible deadlock in touch_wq_lockdep_map usb 4 syz, C 1208 687d 883d 28/29 682d ccbde4b128ef char: xillybus: Don't destroy workqueue from work item running on it
kernel BUG in bch2_lru_change (2) fs -1 syz, C 2 731d 730d 28/29 682d 9482f3b05332 bcachefs: avoid overflowing LRU_TIME_BITS for cached data lru
WARNING in bch2_fs_journal_stop fs -1 syz, C done 1463 729d 760d 28/29 682d 7f2de6947f92 bcachefs: Fix warning in bch2_fs_journal_stop()
BUG: workqueue leaked atomic, lock or RCU: kworker/u33:NUM[NUM] bluetooth -1 syz, C 13 738d 751d 28/29 682d c531e63871c0 Bluetooth: l2cap: always unlock channel in l2cap_conless_channel()
general protection fault in reuseport_add_sock (3) net 2 syz, C done 3 749d 748d 28/29 682d 9ab0faa7f9ff sctp: Fix null-ptr-deref in reuseport_add_sock().
KMSAN: uninit-value in line6_midibuf_read usb sound 7 syz, C 357 691d 754d 28/29 682d 15b7a03205b3 ALSA: line6: Fix racy access to midibuf
kernel BUG in bch2_journal_replay fs -1 syz, C done 3 725d 797d 28/29 682d cab18be6957b bcachefs: Fix replay_now_at() assert
BUG: stack guard page was hit in vsock_bpf_recvmsg net virt -1 syz, C done 6 737d 737d 28/29 682d 69139d2919dd vsock: fix recursive ->recvmsg calls
KMSAN: uninit-value in bch2_alloc_v4_validate fs 7 syz, C 5 726d 724d 28/29 682d 8ed823b19214 bcachefs: Fix compat issue with old alloc_v4 keys
KMSAN: uninit-value in pick_link squashfs 7 syz, C 9 742d 746d 28/29 682d 810ee43d9cd2 Squashfs: sanity check symbolic link size
WARNING in kvm_recalculate_apic_map kvm-x86 -1 syz, C done 23 733d 769d 28/29 682d 4b7c3f6d04bd KVM: x86: Make x2APIC ID 100% readonly
WARNING in __bch2_fsck_err fs -1 syz, C 200 683d 730d 28/29 682d 075cabf324c3 bcachefs: Fix forgetting to pass trans to fsck_err()
possible deadlock in __kernfs_remove kernfs 4 syz, C 438 740d 783d 28/29 682d 15fffc6a5624 driver core: Fix uevent_show() vs driver detach race
KASAN: slab-use-after-free Read in kcm_release net 19 syz, C 2 791d 831d 28/29 682d 807067bf014d kcm: Serialise kcm_sendmsg() for the same socket.
KASAN: slab-out-of-bounds Write in bch2_dev_journal_init fs 21 syz, C 2 728d 728d 28/29 682d bdbdd4759f08 bcachefs: Fix missing validation in bch2_sb_journal_v2_validate()
kernel BUG in binder_inc_ref_for_node kernel -1 syz, C error 16721 735d 764d 28/29 682d 11512c197d38 binder: fix descriptor lookup for context manager
WARNING in skb_warn_bad_offload (5) net -1 syz, C done 18 728d 762d 28/29 682d 30b03f2a0592 udp: Fall back to software USO if IPv6 extension headers are present
KASAN: slab-out-of-bounds Read in cougar_report_fixup input usb 17 syz, C 31 713d 747d 28/29 682d a6e9c391d45b HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
WARNING: bad unlock balance in btrfs_direct_write btrfs 4 syz, C done 235 739d 744d 28/29 682d e0391e92f9ab btrfs: fix double inode unlock for direct IO sync writes
WARNING in discard_new_inode fs -1 syz, C 3 730d 730d 28/29 682d 99c87fe0f584 bcachefs: fix incorrect i_state usage
kernel BUG in bch2_sort_keys fs -1 syz, C error 3 809d 833d 27/29 709d 5dfd3746b6c4 bcachefs: Fix needs_whiteout BUG_ON() in bkey_sort()
possible deadlock in bch2_btree_roots_to_journal_entries exfat 4 syz, C done 29 770d 804d 27/29 717d 1841027c7de4 bcachefs: bch2_gc_btree() should not use btree_root_lock
possible deadlock in bch2_gc_mark_key fs 4 syz, C done 86 734d 811d 27/29 717d 1841027c7de4 bcachefs: bch2_gc_btree() should not use btree_root_lock
possible deadlock in __mmap_lock_do_trace_start_locking mm 4 syz, C done done 30 749d 843d 27/29 718d 7d6be67cfdd4 mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
BUG: unable to handle kernel paging request in list_lru_add mm 10 syz, C done done 11367 764d 1077d 27/29 718d aacd897d4d75 Revert "bcachefs: Mark bch_inode_info as SLAB_ACCOUNT"
WARNING in __replicas_deltas_realloc fs -1 syz, C 9 737d 760d 27/29 719d 1d16c605cc55 bcachefs: Disk space accounting rewrite
kernel BUG in bch2_fs_journal_stop fs -1 syz, C done 4370 733d 825d 27/29 719d 600b8be5e747 bcachefs: Change bch2_fs_journal_stop() BUG_ON() to warning
kernel BUG in __replicas_entry_idx fs -1 syz, C done unreliable 3 815d 818d 27/29 719d 8bb8d683a401 bcachefs: Delete journal-buf-sharded old style accounting
WARNING in bch2_fs_usage_read_one f2fs -1 syz, C done 18 831d 831d 27/29 719d 8bb8d683a401 bcachefs: Delete journal-buf-sharded old style accounting
WARNING: refcount bug in sk_common_release net 13 syz, C 9 745d 760d 27/29 720d 2fe5273f149c net/smc: prevent UAF in inet_create()
WARNING: refcount bug in inet_create net 13 syz, C done 10 747d 774d 27/29 720d 2fe5273f149c net/smc: prevent UAF in inet_create()
kernel panic: not locked: inodes NUM:NUM:NUM cached fs 2 syz, C 2 803d 814d 27/29 720d 385f0c05d670 bcachefs: kill key cache arg to bch2_assert_pos_locked()
BUG: MAX_LOCK_DEPTH too low! (4) fs -1 syz, C error 1364 734d 830d 27/29 721d 375476c41405 bcachefs: Add lockdep support for btree node locks
WARNING in bch2_fs_ioctl fs -1 syz, C done 36 734d 796d 27/29 723d d293ece10810 bcachefs: Fix shutdown ordering
kernel panic: bch_dev->ref underflow, last put: bch2_get_next_dev fs 2 syz, C done 21 814d 824d 27/29 723d 9667214b30ef bcachefs: Fix ref in trans_mark_dev_sbs() error path
kernel BUG in btrfs_folio_end_all_writers btrfs -1 syz, C done 102 743d 755d 27/29 723d 478574370bef btrfs: make cow_file_range_inline() honor locked_page on error
KMSAN: uninit-value in profile_hits (3) kernel 19 syz, C 1529 750d 964d 27/29 723d 7c51f7bbf057 profiling: remove prof_cpu_mask
KASAN: stack-out-of-bounds Read in xdp_do_check_flushed bpf net 17 syz, C done 127 744d 765d 27/29 723d 9da49aa80d68 tun: Add missing bpf_net_ctx_clear() in do_xdp_generic()
KMSAN: uninit-value in io_req_task_work_add_remote io-uring 7 syz, C 10 752d 753d 27/29 723d 0db4618e8fab io_uring/msg_ring: fix uninitialized use of target_req->flags
general protection fault in __dev_flush net bpf 19 syz, C 35 745d 758d 27/29 723d 9da49aa80d68 tun: Add missing bpf_net_ctx_clear() in do_xdp_generic()
KMSAN: uninit-value in tcf_ct_flow_table_get net 7 syz, C 603 745d 752d 27/29 723d 2191a54f6322 sched: act_ct: take care of padding in struct zones_ht_key
KASAN: slab-use-after-free Read in bq_xmit_all bpf net 19 syz, C done 29 745d 758d 27/29 723d 9da49aa80d68 tun: Add missing bpf_net_ctx_clear() in do_xdp_generic()
general protection fault in __xsk_map_flush net bpf 19 syz, C done 26 745d 762d 27/29 723d 9da49aa80d68 tun: Add missing bpf_net_ctx_clear() in do_xdp_generic()
general protection fault in __cpu_map_flush bpf net 10 syz, C inconclusive 25 745d 759d 27/29 723d 9da49aa80d68 tun: Add missing bpf_net_ctx_clear() in do_xdp_generic()
kernel BUG in ext4_write_inline_data ext4 -1 syz, C error 36 763d 1248d 27/29 725d 5c099c4fdc43 ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
kernel BUG in f2fs_vm_page_mkwrite f2fs -1 syz, C error done 12 774d 801d 27/29 725d a8eb3de28e7a f2fs: fix return value of f2fs_convert_inline_inode()
possible deadlock in __mmap_lock_do_trace_released mm 4 syz, C done done 5 758d 775d 27/29 727d 7d6be67cfdd4 mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
WARNING in __hci_cmd_sync_sk bluetooth -1 syz 36 753d 768d 27/29 729d f1a8f402f13f Bluetooth: L2CAP: Fix deadlock
WARNING in __btrfs_free_extent (2) btrfs -1 syz, C done 118 733d 784d 27/29 730d a776bf5f3c23 btrfs: slightly loosen the requirement for qgroup removal
divide error in tcp_rcv_space_adjust (3) net 2 syz, C done 3 837d 838d 27/29 732d 94062790aedb UPSTREAM: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
KASAN: slab-use-after-free Read in lru_add_fn nilfs mm 19 syz, C inconclusive 68 781d 829d 27/29 732d 49ae997f8f0d nilfs2: add missing check for inode numbers on directory entries nilfs2: add missing check for inode numbers on directory entries
BUG: MAX_LOCKDEP_CHAIN_HLOCKS too low! (5) btrfs -1 syz, C 931 733d 763d 27/29 732d 375476c41405 bcachefs: Add lockdep support for btree node locks
BUG: corrupted list in __folio_undo_large_rmappable mm 8 syz, C error 36 767d 767d 27/29 732d 1390a3334a48 mm/hugetlb: fix kernel NULL pointer dereference when migrating hugetlb folio
KMSAN: uninit-value in hfs_revalidate_dentry hfs 7 syz, C 11669 793d 1360d 27/29 732d 26a2ed107929 hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
WARNING: suspicious RCU usage in bch2_bucket_ref_update fs 4 syz, C done 5 769d 768d 27/29 732d 6f692b1672bd bcachefs: Fix RCU splat
inconsistent lock state in valid_state (3) mm 4 syz, C error 376 744d 793d 27/29 732d 7d6be67cfdd4 mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
kernel BUG in f2fs_evict_inode (2) f2fs -1 syz, C error 575 733d 1012d 27/29 732d 192b8fb8d1c8 f2fs: fix to don't dirty inode for readonly filesystem
general protection fault in dev_map_redirect bpf net 2 syz, C 362 768d 776d 27/29 732d fecef4cd42c6 tun: Assign missing bpf_net_context.
stack segment fault in dev_hash_map_redirect bpf net 2 syz, C done 29 768d 776d 27/29 732d fecef4cd42c6 tun: Assign missing bpf_net_context.
general protection fault in dtInsertEntry jfs 17 syz, C inconclusive 501 734d 859d 27/29 732d ce6dede912f0 jfs: fix null ptr deref in dtInsertEntry
WARNING in __fortify_report ext4 -1 syz, C 251 782d 815d 27/29 732d be27cd64461c ext4: use memtostr_pad() for s_volume_name
UBSAN: array-index-out-of-bounds in diFree jfs 15 syz, C inconclusive 226 734d 845d 27/29 732d f73f969b2eb3 jfs: Fix array-index-out-of-bounds in diFree
WARNING in __ip6_make_skb (2) net -1 syz, C done 104 797d 811d 27/29 732d 73451e9aaa24 net: validate SO_TXTIME clockid coming from userspace
KMSAN: uninit-value in ext4_inlinedir_to_tree ext4 7 syz, C 267 793d 839d 27/29 732d 8dc9c3da79c8 ext4: fix uninitialized variable in ext4_inlinedir_to_tree
KASAN: slab-use-after-free Read in l2tp_tunnel_del_work net 19 syz, C done 99 768d 782d 27/29 732d f8ad00f3fb2a l2tp: fix possible UAF when cleaning up tunnels
BUG: unable to handle kernel paging request in do_split ext4 8 syz, C inconclusive 17 765d 778d 27/29 732d 50ea741def58 ext4: check dot and dotdot of dx_root before making dir indexed f9ca51596bbf ext4: make sure the first directory block is not a hole
WARNING in __cfg80211_connect_result (2) wireless -1 syz, C error 232 746d 811d 27/29 732d b5d14b0c6716 wifi: virt_wifi: avoid reporting connection success with wrong SSID
KASAN: slab-use-after-free Read in sanity_check_extent_cache f2fs 19 syz, C done 5 796d 839d 27/29 732d d7409b05a64f f2fs: fix to cover read extent cache access with lock
possible deadlock in try_to_wake_up (5) mm 4 syz, C 88 735d 808d 27/29 732d 7d6be67cfdd4 mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
BUG: sleeping function called from invalid context in bch2_printbuf_make_room fs 5 syz, C done 27 757d 755d 27/29 732d 737759fc098f bcachefs: Fix printbuf usage while atomic
UBSAN: shift-out-of-bounds in dbDiscardAG jfs -1 syz, C unreliable 5 771d 786d 27/29 732d 7063b80268e2 jfs: Fix shift-out-of-bounds in dbDiscardAG
kernel BUG in __block_write_begin_int (2) nilfs -1 syz, C inconclusive 2 770d 834d 27/29 732d a9e1ddc09ca5 nilfs2: fix kernel bug on rename operation of broken directory
possible deadlock in hfsplus_file_truncate hfs 4 syz, C error 51400 733d 1359d 27/29 732d be4edd1642ee hfsplus: fix to avoid false alarm of circular locking
UBSAN: shift-out-of-bounds in bch2_bkey_format_invalid (2) fs -1 syz, C 117 733d 797d 27/29 732d a0bd30e4ea9d bcachefs: Fix shift greater than integer size
KMSAN: uninit-value in ppp_async_push (3) ppp 7 syz, C 4 816d 773d 27/29 732d f2aeb7306a89 ppp: reject claimed-as-LCP but actually malformed packets
memory leak in _r8712_init_xmit_priv (2) usb staging 3 syz, C 2 985d 1001d 27/29 732d 9ed3e0a0e1b1 staging: rtl8712: remove unnecessary alignment of pxmitpriv->pxmitbuf
KMSAN: uninit-value in hfsplus_listxattr (2) hfs 7 syz, C 6 835d 859d 27/29 732d 0570730c1630 hfsplus: fix uninit-value in copy_name
stack segment fault in bpf_xdp_redirect bpf net 2 syz, C 181 768d 776d 27/29 732d fecef4cd42c6 tun: Assign missing bpf_net_context.
general protection fault in __block_commit_write ext4 8 syz, C inconclusive 7 776d 923d 27/29 732d 83f4414b8f84 ext4: sanity check for NULL pointer after ext4_force_shutdown
general protection fault in tomoyo_socket_bind_permission io-uring 2 syz, C 4 764d 764d 27/29 732d ad00e629145b io_uring/net: check socket is valid in io_bind()/io_listen()
KMSAN: uninit-value in copy_name hfs 7 syz, C 300 793d 820d 27/29 732d 0570730c1630 hfsplus: fix uninit-value in copy_name
kernel BUG in btrfs_free_tree_block btrfs -1 syz, C error 150 734d 1420d 27/29 732d bb3868033a4c btrfs: do not BUG_ON() when freeing tree block after error
WARNING in __kvm_gpc_refresh (2) kvm -1 syz, C error 2 796d 810d 27/29 732d ebbdf37ce9ab KVM: Validate hva in kvm_gpc_activate_hva() to fix __kvm_gpc_refresh() WARN
stack segment fault in cpu_map_redirect bpf net 2 syz, C done 11 769d 768d 27/29 732d fecef4cd42c6 tun: Assign missing bpf_net_context.
KASAN: slab-use-after-free Write in l2tp_session_delete net 22 syz, C done 1286 763d 782d 27/29 732d f8ad00f3fb2a l2tp: fix possible UAF when cleaning up tunnels
KMSAN: uninit-value in vsock_assign_transport (2) net virt 7 syz, C 14 794d 849d 27/29 732d 1e1fdcbdde3b vhost/vsock: always initialize seqpacket_allow
WARNING in __ip_make_skb net -1 syz, C done 54 797d 811d 27/29 732d 73451e9aaa24 net: validate SO_TXTIME clockid coming from userspace
WARNING in btusb_submit_intr_urb/usb_submit_urb bluetooth usb -1 syz, C error 2 771d 782d 27/29 732d a368ecde8a50 USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
possible deadlock in attr_data_get_block ntfs3 4 syz, C error 3111 733d 1399d 27/29 732d d57431c6f511 fs/ntfs3: Do copy_to_user out of run_lock
general protection fault in __io_remove_buffers io-uring 2 syz, C done 3 761d 760d 27/29 732d bcc87d978b83 io_uring: fix error pbuf checking
UBSAN: shift-out-of-bounds in parse_audio_unit sound -1 syz, C error 3 764d 763d 27/29 732d 2f38cf730cae ALSA: usb: Fix UBSAN warning in parse_audio_unit()
KMSAN: uninit-value in udf_update_tag udf 7 syz, C 877 796d 962d 27/29 732d 27ab33854873 udf: Fix bogus checksum computation in udf_rename()
general protection fault in dequeue_hugetlb_folio_nodemask (2) mm 2 syz, C done 14 790d 796d 27/29 732d 09a533622842 mm/hugetlb: guard dequeue_hugetlb_folio_nodemask against NUMA_NO_NODE uses
WARNING: lock held when returning to user space in ns_ioctl fs 4 syz, C done 147 748d 760d 27/29 732d 280e36f0d5b9 nsfs: use cleanup guard
general protection fault in coalesce_fill_reply net 2 syz, C done 27 776d 781d 27/29 732d 74d6529b78f7 net: ethtool: Fix the panic caused by dev being null when dumping coalesce
kernel BUG in submit_bh_wbc (2) udf -1 syz, C done 123 738d 843d 27/29 732d a90d4471146d udf: Avoid using corrupted block bitmap buffer
WARNING in bpf_lwt_seg6_adjust_srh net bpf -1 syz, C done 30 768d 782d 27/29 732d c13fda93aca1 bpf: Remove tst_run from lwt_seg6local_prog_ops.
kernel BUG in f2fs_write_inline_data f2fs -1 syz, C inconclusive 41 785d 838d 27/29 732d a8eb3de28e7a f2fs: fix return value of f2fs_convert_inline_inode() fc01008c92f4 f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
BUG: sleeping function called from invalid context in vma_alloc_folio_noprof mm 5 syz, C done 1 763d 762d 27/29 732d 280e36f0d5b9 nsfs: use cleanup guard
UBSAN: shift-out-of-bounds in try_to_shrink_lruvec mm -1 syz, C done 4 808d 810d 27/29 732d 462966dc7d70 mm: vmscan: reset sc->priority on retry
BUG: unable to handle kernel NULL pointer dereference in path_from_stashed fs 10 syz, C 23 753d 757d 27/29 732d f60d38cb02d0 pidfs: when time ns disabled add check for ioctl
INFO: rcu detected stall in security_file_ioctl (8) tomoyo 1 syz, C error done 8 776d 815d 26/29 740d e63413418088 net/sched: taprio: make q->picos_per_byte available to fill_sched_entry()
KASAN: slab-use-after-free Read in nf_tables_trans_destroy_work netfilter 19 syz, C error 147 768d 776d 26/29 740d 9f6958ba2e90 netfilter: nf_tables: unconditionally flush pending work before notifier
KASAN: slab-out-of-bounds Read in btrfs_qgroup_inherit btrfs 17 syz, C done 2 803d 799d 26/29 740d 724d8042cef8 btrfs: always do the basic checks for btrfs_qgroup_inherit structure
general protection fault in l2cap_sock_recv_cb bluetooth 8 syz, C inconclusive 8 774d 800d 26/29 740d 89e856e124f9 bluetooth/l2cap: sync sock recv cb and release
WARNING in filemap_unaccount_folio nilfs -1 syz, C inconclusive 13 782d 816d 26/29 740d 49ae997f8f0d nilfs2: add missing check for inode numbers on directory entries
BUG: soft lockup in mld_ifc_work (2) wireless 1 syz, C 2 827d 839d 26/29 740d d1cba2ea8121 wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
WARNING in hci_conn_del bluetooth -1 syz, C done 10497 769d 900d 26/29 740d 015d79c96d62 Bluetooth: Ignore too large handle values in BIG 1cc18c2ab2e8 bluetooth/hci: disallow setting handle bigger than HCI_CONN_HANDLE_MAX
WARNING in __mptcp_clean_una mptcp -1 syz, C done done 248 787d 912d 26/29 744d fb7a0d334894 mptcp: ensure snd_nxt is properly initialized on connect
WARNING in implement input usb -1 syz, C error done 960 796d 2526d 26/29 746d 4aa2dcfbad53 HID: core: remove unnecessary WARN_ON() in implement()
INFO: rcu detected stall in __run_timer_base usb 1 syz, C done done 10 786d 855d 26/29 746d 22f008128625 USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
KMSAN: uninit-value in io_req_cqe_overflow (3) io-uring 7 syz, C 16 793d 794d 26/29 751d 18414a4a2eab io_uring/net: assign kmsg inq/flags before buffer selection
WARNING in unmap_page_range (3) mm -1 syz, C 169 871d 880d 26/29 757d f8572367eaff mm/memory: fix missing pte marker for !page on pte zaps
kernel BUG in bch2_ioctl_fsck_online fs -1 syz, C done 3 789d 785d 26/29 764d 9bd01500e4d8 bcachefs: Fix freeing of error pointers
WARNING in __virt_to_phys (4) fs -1 syz, C 2 777d 773d 26/29 764d 9bd01500e4d8 bcachefs: Fix freeing of error pointers
UBSAN: shift-out-of-bounds in bch2_btree_node_read_done fs -1 syz, C 3 792d 815d 26/29 765d 9e7cfb35e266 bcachefs: Check for invalid btree IDs
INFO: rcu detected stall in sys_wait4 (4) mm 1 syz, C done done 2 824d 857d 26/29 766d fb66df20a720 net/sched: taprio: extend minimum interval restriction to entire cycle too
INFO: task hung in journal_quiesce fs 1 syz 76 779d 807d 26/29 767d 89d21b69b4f8 bcachefs: Add missing bch2_journal_do_writes() call
INFO: task hung in nilfs_segctor_thread (2) nilfs 1 syz, C inconclusive 98 799d 909d 26/29 768d 7373a51e7998 nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
WARNING in bch2_fs_read_write_early fs -1 syz, C 35 785d 793d 26/29 768d 1ba44217f825 bcachefs: delete_dead_snapshots() doesn't need to go RW
WARNING in hid_output_report usb input -1 syz, C error 3 813d 833d 26/29 768d 4aa2dcfbad53 HID: core: remove unnecessary WARN_ON() in implement() fba383985354 net: usb: rtl8150 fix unintiatilzed variables in rtl8150_get_link_ksettings
INFO: task hung in rfkill_global_led_trigger_worker (2) net nfc 1 syz, C error 1362 768d 1370d 26/29 768d d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
KASAN: slab-out-of-bounds Read in ea_get (2) jfs 17 syz, C 33 770d 835d 26/29 768d 7c55b78818cf jfs: xattr: fix buffer overflow for invalid xattr
INFO: task hung in wdm_release usb 1 syz, C error 1 791d 787d 26/29 768d 22f008128625 USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
WARNING in rdev_scan wireless -1 syz, C done 3 791d 796d 26/29 768d 0941772342d5 wifi: cfg80211: wext: set ssids=NULL for passive scans
memory leak in nr_create (3) hams 3 syz, C 9 970d 1160d 26/29 768d 0b9130247f3b netrom: Fix a memory leak in nr_heartbeat_expiry()
INFO: rcu detected stall in raw_ioctl usb 1 syz, C 49 774d 1020d 26/29 768d 22f008128625 USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
KASAN: slab-use-after-free Read in bch2_sb_errors_from_cpu fs 19 syz, C 2 785d 782d 26/29 768d 211c581de28e bcachefs: slab-use-after-free Read in bch2_sb_errors_from_cpu
KMSAN: uninit-value in asus_report_fixup input usb 17 syz, C done 35 789d 814d 26/29 768d 89e1ee118d6f hid: asus: asus_report_fixup: fix potential read out of bounds
UBSAN: shift-out-of-bounds in bch2_blacklist_entries_gc fs -1 syz, C 45 782d 782d 26/29 768d 472237b69d07 bcachefs: Fix shift-out-of-bounds in bch2_blacklist_entries_gc
INFO: task hung in rtnetlink_rcv_msg net 1 syz, C inconclusive inconclusive 1970 768d 2732d 26/29 768d d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
kernel BUG in bch2_journal_res_get fs -1 syz, C 2 798d 794d 26/29 768d dbf4d79b7fc7 bcachefs: Fix early init error path in journal code
INFO: task hung in addrconf_verify_work (8) net 1 syz, C error 1294 768d 972d 26/29 768d d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
kernel BUG in bch2_lru_change fs -1 syz, C done 4 785d 801d 26/29 768d cff07e2739d8 bcachefs: Guard against overflowing LRU_TIME_BITS
INFO: task hung in switchdev_deferred_process_work (2) net 1 syz, C inconclusive 1226 768d 2211d 26/29 768d d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
possible deadlock in ovl_copy_up_flags overlayfs 4 syz, C done 7 794d 815d 26/29 768d db03d39053a9 ovl: fix copy-up in tmpfile
possible deadlock in console_flush_all (2) trace bpf 4 syz, C error 52996 768d 1043d 26/29 768d ae01e52da244 serial: drop debugging WARN_ON_ONCE() from uart_write()
kernel BUG in __vma_reservation_common mm -1 syz, C error 8 799d 832d 26/29 768d 8daf9c702ee7 mm/hugetlb: do not call vma_add_reservation upon ENOMEM
KMSAN: kernel-infoleak in raw_recvmsg can 9 syz, C 121 794d 842d 26/29 768d b7cdf1dd5d2a net: can: j1939: Initialize unused data in j1939_send_one()
INFO: task hung in reg_check_chans_work (6) wireless 1 syz, C error 129 771d 844d 26/29 768d d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
WARNING: kmalloc bug in __snapshot_t_mut fs -1 syz, C done 10 778d 809d 26/29 768d 64cd7de998f3 bcachefs: Fix kmalloc bug in __snapshot_t_mut
WARNING in skb_ensure_writable bpf net -1 syz, C done 2893 769d 846d 26/29 768d 2bbe3e5a2f4e bpf: Avoid splat in pskb_pull_reason
BUG: soft lockup in hci_cmd_timeout bluetooth usb 1 syz, C 1 799d 795d 26/29 768d 22f008128625 USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
WARNING in cxacru_cm/usb_submit_urb usb -1 syz, C error inconclusive 14 786d 2355d 26/29 768d 2eabb655a968 usb: atm: cxacru: fix endpoint checking in cxacru_bind()
kernel BUG in gc_bucket fs -1 syz, C done 221 801d 806d 26/29 768d 9432e90df1b8 bcachefs: Check for invalid bucket from bucket_gen(), gc_bucket()
KASAN: slab-out-of-bounds Read in cfg80211_wext_freq wireless 17 syz, C inconclusive 133 783d 809d 26/29 768d 6ef09cdc5ba0 wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
possible deadlock in __sock_map_delete net bpf 4 syz, C 14 810d 854d 26/29 776d 98e948fb60d4 bpf: Allow delete from sockmap/sockhash only if update is allowed
WARNING in geneve_xmit net -1 syz, C done 42 842d 849d 26/29 787d d8a6213d70ac geneve: fix header validation in geneve[6]_xmit_skb
possible deadlock in __hrtimer_run_queues (2) kernel 4 syz, C error done 16 843d 875d 26/29 787d 98e948fb60d4 bpf: Allow delete from sockmap/sockhash only if update is allowed
WARNING in ieee80211_link_info_change_notify (2) wireless -1 syz, C inconclusive 8918 797d 1265d 26/29 789d 02c665f048a4 wifi: mac80211: apply mcast rate only if interface is up
general protection fault in bpf_get_attach_cookie_tracing trace bpf 2 syz, C error 7 802d 833d 26/29 789d d0d1df8ba18a bpf: Set run context for rawtp test_run callback
KASAN: slab-use-after-free Read in bpf_link_free (2) bpf 19 syz 52 799d 811d 26/29 789d 2884dc7d08d9 bpf: Fix a potential use-after-free in bpf_link_free()
WARNING in ieee80211_rx_list wireless -1 syz, C inconclusive error 3489 800d 2152d 26/29 789d 177c6ae9725d wifi: mac80211: handle tasklet frames before stopping
WARNING in fuse_request_end fuse -1 syz, C error 3 817d 827d 26/29 793d 246014876d78 fuse: clear FR_SENT when re-adding requests into pending list
WARNING in packet_setsockopt net -1 syz, C 83 825d 864d 26/29 794d 86d43e2bf93c af_packet: avoid a false positive warning in packet_setsockopt()
kernel BUG in dev_gro_receive net -1 syz, C done 72 807d 823d 25/29 796d be008726d0ac net: gro: initialize network_offset in network layer
KMSAN: uninit-value in virtqueue_add (4) mm 7 syz, C 203184 796d 958d 25/29 796d 61b258b0d2f6 x86: call instrumentation hooks from copy_mc.c
KMSAN: uninit-value in nilfs_add_checksums_on_logs (2) nilfs 7 syz, C 171 796d 957d 25/29 796d 61b258b0d2f6 x86: call instrumentation hooks from copy_mc.c
KMSAN: uninit-value in nci_ntf_packet (2) net nfc 7 syz, C 13 799d 812d 25/29 796d 068648aab72c nfc/nci: Add the inconsistency check between the input data length and count
UBSAN: shift-out-of-bounds in bch2_sb_dev_has_data fs -1 syz, C done 15 826d 824d 25/29 796d bcfbaea8e547 bcachefs: Fix shift overflows in replicas.c
inconsistent lock state in valid_state (2) sound 4 syz, C inconclusive 57405 797d 922d 25/29 796d b79491896151 dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
kernel panic: not locked: inodes NUM:ADDR:NUM cached fs 2 syz, C 2 823d 819d 25/29 796d 6ce26ad376bd bcachefs: Fix missing parens in drop_locks_do()
kernel BUG in bch2_btree_iter_verify_entry_exit fs -1 syz, C done 3 816d 822d 25/29 796d 765b8cb8acab bcachefs: Check for subvolues with bogus snapshot/inode fields
kernel BUG in bch2_checksum fs -1 syz, C done 9 814d 824d 25/29 796d 6b74fdcc8e25 bcachefs: bch2_checksum() returns 0 for unknown checksum type
WARNING in sock_map_close bpf net -1 syz, C error 182 797d 860d 25/29 796d 4b4647add7d3 sock_map: avoid race between sock_map_close and sk_psock_put
possible deadlock in sock_hash_delete_elem (2) bpf net 4 syz, C 1127 797d 880d 25/29 796d 98e948fb60d4 bpf: Allow delete from sockmap/sockhash only if update is allowed
KASAN: slab-use-after-free Read in p9_fid_destroy v9fs 19 syz, C 13 811d 892d 25/29 796d f89ea63f1c65 netfs, 9p: Fix race between umount and async request completion
kernel BUG in cpu_replicas_add_entry fs -1 syz, C done 11 807d 826d 25/29 796d 5fa421448d1f bcachefs: Fix bogus verify_replicas_entry() assert
kernel BUG in __journal_res_get ext4 -1 syz, C done 7 805d 829d 25/29 796d cd3b31f9d417 bcachefs: Ensure we're RW before journalling
general protection fault in nf_tproxy_laddr4 netfilter 8 syz, C error 5 816d 825d 25/29 796d 21a673bddc8f netfilter: tproxy: bail out if IP has been disabled on the device
KASAN: stack-out-of-bounds Read in __bch2_encrypt_bio fs 17 syz, C done 2 827d 824d 25/29 796d 2ba24864d2f6 bcachefs: Fix stack oob in __bch2_encrypt_bio()
INFO: rcu detected stall in packet_release net 1 syz, C unreliable 1 889d 811d 25/29 796d fb66df20a720 net/sched: taprio: extend minimum interval restriction to entire cycle too
WARNING in collect_domain_accesses lsm -1 syz, C done 3 816d 828d 25/29 796d 88da52ccd66e landlock: Fix d_parent walk
UBSAN: shift-out-of-bounds in bch2_btree_lost_data fs -1 syz, C done 3 822d 821d 25/29 796d f108ddd467b5 bcachefs: Fix shift overflow in btree_lost_data()
KMSAN: uninit-value in p9_client_rpc (2) v9fs 7 syz, C 5 835d 869d 25/29 796d 25460d6f3902 net/9p: fix uninit-value in p9_client_rpc()
WARNING: lock held when returning to user space in srcu_lock_acquire rcu 4 syz, C 3 826d 825d 25/29 796d 70dd062e27e6 bcachefs: Fix btree_trans leak in bch2_readahead()
kernel panic: bch_dev->ref underflow, last put: bch2_trigger_alloc fs 2 syz, C done 6 814d 825d 25/29 796d 9667214b30ef bcachefs: Fix ref in trans_mark_dev_sbs() error path
general protection fault in __bch2_insert_snapshot_whiteouts fs 8 syz, C done 65 812d 824d 25/29 796d 6d48e61364ae bcachefs: Add missing guard in bch2_snapshot_has_children()
KASAN: slab-use-after-free Read in evict_inodes fs 19 syz, C done 2 829d 825d 25/29 796d d93ff5fa40b9 bcachefs: Fix race path in bch2_inode_insert()
INFO: task hung in nilfs_detach_log_writer nilfs 1 syz, C inconclusive 125 816d 1392d 25/29 796d eb85dace897c nilfs2: fix potential hang in nilfs_detach_log_writer()
general protection fault in crypto_skcipher_encrypt crypto 8 syz, C error 66 797d 824d 25/29 796d c06a8b75679d bcachefs: Fix bch2_alloc_ciphers()
INFO: rcu detected stall in snd_timer_user_release (3) sound 1 syz, C inconclusive 3 830d 839d 25/29 796d 4a63bd179fa8 ALSA: timer: Set lower bound of start tick time
KMSAN: uninit-value in bch2_dirent_invalid fs 7 syz, C 239 796d 825d 25/29 796d 2195b755ebd2 bcachefs: Fix unsafety in bch2_dirent_name_bytes()
kernel BUG in bch2_fs_recovery fs -1 syz, C done done 161 829d 835d 25/29 797d 7ffec9ccdc6a bcachefs: don't free error pointers
INFO: trying to register non-static key in __timer_delete_sync (2) net -1 syz, C 45524 824d 842d 25/29 800d 3c668cef61ad net: hsr: init prune_proxy_timer sooner
possible deadlock in nr_rt_ioctl hams 4 syz, C inconclusive 8 806d 834d 25/29 800d e03e7f20ebf7 netrom: fix possible dead-lock in nr_rt_ioctl()
WARNING in __inet_accept net -1 syz, C done 3 818d 818d 25/29 802d 26afda78cda3 UPSTREAM: net: relax socket state check at accept time.
KASAN: slab-out-of-bounds Read in f2fs_get_node_info f2fs 17 syz, C error 4 830d 843d 25/29 802d 20faaf30e555 f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
general protection fault in subflow_v6_route_req mptcp 2 syz, C done 2 832d 832d 25/29 802d 445c0b69c729 mptcp: fix possible NULL dereferences
WARNING in sg_remove_sfp_usercontext scsi -1 syz, C 36031 857d 871d 25/29 802d d4e655c49f47 scsi: sg: Avoid race in error handling & drop bogus warn
KMSAN: uninit-value in __bpf_strtoull bpf 7 syz, C 119 803d 880d 25/29 802d e8742081db7d bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
WARNING in iomap_iter (2) iomap -1 syz, C 4 840d 836d 25/29 802d 0c12028aec83 block: refine the EOF check in blkdev_iomap_begin
KMSAN: uninit-value in trie_delete_elem bpf 7 syz, C 52 803d 873d 25/29 802d e8742081db7d bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
UBSAN: shift-out-of-bounds in read_one_super fs -1 syz, C done 31 803d 832d 25/29 802d 71dac2482ad3 bcachefs: BCH_SB_LAYOUT_SIZE_BITS_MAX
KMSAN: uninit-value in nci_rx_work nfc net 7 syz, C 582 802d 958d 25/29 802d e4a87abf5885 nfc: nci: Fix uninit-value in nci_rx_work
KASAN: slab-use-after-free Read in unix_del_edges net 19 syz, C done 2 850d 849d 25/29 802d 1af2dface5d2 af_unix: Don't access successor in unix_del_edges() during GC.
INFO: task hung in ext4_quota_write ext4 1 syz, C inconclusive 22 853d 958d 25/29 802d 0a46ef234756 ext4: do not create EA inode under buffer lock
WARNING: kmalloc bug in bch2_dev_buckets_resize fs -1 syz, C 17 803d 834d 25/29 802d db42549d402c bcachefs: Add a better limit for maximum number of buckets
WARNING in mb_cache_destroy ext4 -1 syz, C done 738 820d 838d 25/29 802d 0c0b4a49d3e7 ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
WARNING in __virt_to_phys (3) fs -1 syz, C 447 802d 835d 25/29 802d 7ffec9ccdc6a bcachefs: don't free error pointers
KMSAN: uninit-value in br_dev_xmit (2) bridge 7 syz, C 2 830d 826d 25/29 802d 8bd67ebb50c0 net: bridge: xmit: make sure we have at least eth header len bytes
KMSAN: uninit-value in dev_map_lookup_elem bpf net 7 syz, C 3 867d 874d 25/29 802d e8742081db7d bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
BUG: sleeping function called from invalid context in console_lock (2) serial 5 syz, C inconclusive inconclusive 7447 802d 1896d 25/29 802d 6bd23e0c2bb6 tty: add the option to have a tty reject a new ldisc
KMSAN: uninit-value in trie_lookup_elem bpf 7 syz, C 12 860d 878d 25/29 802d e8742081db7d bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
possible deadlock in kvfree_call_rcu bpf 4 syz, C 1431 804d 873d 25/29 802d 59f2f841179a bpf: Avoid kfree_rcu() under lock in bpf_lpm_trie.
BUG: unable to handle kernel paging request in bch2_fs_btree_key_cache_exit fs 8 syz, C 1002 802d 835d 25/29 802d b30b70ad8bff bcachefs: Fix early error path in bch2_fs_btree_key_cache_exit()
WARNING: suspicious RCU usage in bch2_fs_quota_read ext4 4 syz, C done 24 803d 833d 25/29 802d 8060bf1d83f7 bcachefs: Fix snapshot_t() usage in bch2_fs_quota_read_inode()
KASAN: slab-out-of-bounds Write in do_handle_open nfs 21 syz, C 643 864d 866d 25/29 802d 68d6f4f3fbd9 fs: Annotate struct file_handle with __counted_by() and use struct_size()
UBSAN: shift-out-of-bounds in __bch2_bkey_invalid fs -1 syz, C done 6 807d 833d 25/29 802d 2bb9600d5d47 bcachefs: Guard against unknown k.k->type in __bkey_invalid()
BUG: unable to handle kernel paging request in bpf_prog_ADDR (2) bpf 8 syz, C 3 845d 859d 25/29 802d 543576ec15b1 bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
KASAN: slab-out-of-bounds Read in bch2_sb_downgrade_to_text fs 17 syz, C done 32 819d 832d 25/29 802d 692aa7a54b2b bcachefs: Fix sb_field_downgrade validation
KMSAN: uninit-value in array_map_lookup_elem bpf 7 syz, C 10 857d 877d 25/29 802d e8742081db7d bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
KMSAN: uninit-value in sock_map_delete_elem bpf net 7 syz, C 44 804d 874d 25/29 802d e8742081db7d bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
KASAN: slab-use-after-free Read in fsnotify ext4 19 syz, C error 3 851d 857d 25/29 802d 795bb82d12a1 fsnotify: fix UAF from FS_ERROR event on a shutting down filesystem
KASAN: slab-out-of-bounds Read in bch2_sb_clean_to_text fs 17 syz, C done 3 823d 833d 25/29 802d f39055220f6f bcachefs: Add missing validation for superblock section clean
WARNING in ar5523_cmd/usb_submit_urb usb wireless -1 syz, C error 39 835d 2391d 25/29 802d e120b6388d7d wifi: ar5523: enable proper endpoint verification
WARNING in qdisc_alloc net -1 syz, C error 1069 824d 838d 25/29 802d 86735b57c905 net/sched: unregister lockdep keys in qdisc_create/qdisc_alloc error path
WARNING in __mark_chain_precision (4) bpf -1 syz, C 8 847d 867d 25/29 802d 1f2a74b41ea8 bpf: prevent r10 register from being marked as precise
kernel BUG in bch2_alloc_v4_invalid fs -1 syz, C error 3 810d 833d 25/29 802d 6b8cbfc3db75 bcachefs: Fix assert in bch2_alloc_v4_invalid()
KASAN: slab-out-of-bounds Read in bch2_varint_decode_fast fs 17 syz, C 583 802d 835d 25/29 802d 4a8521b6bb81 bcachefs: Inodes need extra padding for varint_decode_fast()
WARNING in __page_table_check_ptes_set mm -1 syz, C 2 851d 847d 25/29 802d c88033efe9a3 mm/userfaultfd: reset ptes when close() for wr-protected ones
KASAN: global-out-of-bounds Read in __nla_validate_parse net 17 syz, C 5 860d 860d 25/29 802d 8750539ba317 net: team: fix incorrect maxattr
UBSAN: shift-out-of-bounds in bch2_bkey_format_invalid fs -1 syz, C 45 805d 830d 25/29 802d 61692c7812ab bcachefs: bch2_bkey_format_field_overflows()
WARNING in __mod_memcg_lruvec_state cgroups mm -1 syz, C 270 831d 866d 25/29 802d 4f687281012e mm: do not update memcg stats for NR_{FILE/SHMEM}_PMDMAPPED
WARNING in carl9170_usb_send_rx_irq_urb/usb_submit_urb usb wireless -1 syz, C error inconclusive 18 846d 1990d 25/29 802d b6dd09b3dac8 wifi: carl9170: add a proper sanity check for endpoints
UBSAN: shift-out-of-bounds in rewrite_old_nodes_pred fs -1 syz, C done 3 833d 833d 25/29 802d 0ec5b3b7ccfc bcachefs: Fix shift-by-64 in bformat_needs_redo()
kernel BUG in bch2_btree_node_read_done fs -1 syz, C error 5 832d 835d 25/29 802d a2ddaf965f6a bcachefs: bucket_pos_to_bp_noerror()
KASAN: slab-use-after-free Read in vhost_task_fn kvm net virt 19 syz, C done 2661 836d 838d 25/29 802d db5247d9bf5c vhost_task: Handle SIGKILL by flushing work and exiting
WARNING: zero-size vmalloc in ubi_read_volume_table mtd -1 syz, C 3 869d 867d 25/29 814d 68a24aba7c59 ubi: Check for too small LEB size in VTBL code
WARNING in emit_fiemap_extent btrfs -1 syz, C error done 14 897d 1153d 25/29 815d a1a4a9ca77f1 btrfs: fix race between ordered extent completion and fiemap
possible deadlock in move_pages mm 4 syz, C 206 871d 880d 25/29 816d 30af24facf0a userfaultfd: fix deadlock warning when locking src and dst VMAs
KASAN: stack-out-of-bounds Read in hash bpf 17 syz, C done 5 855d 862d 25/29 816d a8d89feba7e5 bpf: Check bloom filter map value size
possible deadlock in force_sig_info_to_task bpf trace 4 syz, C error 6 836d 843d 25/29 816d 02b670c1f88e x86/mm: Remove broken vsyscall emulation code from the page fault code
KMSAN: uninit-value in geneve_xmit (3) net 7 syz, C 14 857d 865d 25/29 816d d8a6213d70ac geneve: fix header validation in geneve[6]_xmit_skb
WARNING in mmu_free_root_page kvm-x86 -1 syz, C 104 848d 870d 25/29 816d 1bc26cb90902 KVM: x86/mmu: Precisely invalidate MMU root_role during CPUID update
KMSAN: kernel-infoleak in __skb_datagram_iter (3) net 9 syz, C 25 818d 872d 25/29 816d d313eb8b7755 net/sched: act_skbmod: prevent kernel-infoleak
KASAN: slab-use-after-free Read in ip_skb_dst_mtu netfilter 19 syz, C error 5 862d 893d 25/29 816d 18685451fc4e inet: inet_defrag: prevent sk release while still in use
KMSAN: uninit-value in gre_rcv (3) net 7 syz, C 3 870d 871d 25/29 816d 17af420545a7 erspan: make sure erspan_base_hdr is present in skb->head
KMSAN: uninit-value in line6_pod_process_message sound 7 syz, C 5 866d 867d 25/29 816d c4e51e424e2c ALSA: line6: Zero-initialize message buffers
WARNING: suspicious RCU usage in __do_softirq kernel 4 syz, C 199 839d 866d 25/29 816d 1dd1eff161bd softirq: Fix suspicious RCU usage in __do_softirq()
KASAN: slab-out-of-bounds Read in nfc_llcp_setsockopt net nfc 17 syz, C error 5 853d 862d 25/29 816d 7a87441c9651 nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
KASAN: slab-use-after-free Read in __vma_reservation_common mm 19 syz 13 842d 856d 25/29 816d 37641efaa3fa hugetlb: check for anon_vma prior to folio allocation
WARNING in vmk80xx_auto_attach/usb_submit_urb usb -1 syz, C unreliable inconclusive 2 890d 1892d 25/29 816d d1718530e3f6 comedi: vmk80xx: fix incomplete endpoint checking
WARNING: refcount bug in __reset_page_owner mm 13 syz, C 93128 849d 880d 25/29 816d f5c12105c15f mm,page_owner: fix refcount imbalance
KASAN: slab-out-of-bounds Read in update_counters netfilter bridge 17 syz, C 3 862d 862d 25/29 816d 0c83842df40f netfilter: validate user input for expected length
KMSAN: uninit-value in ieee80211_rx_handlers (2) wireless 7 syz, C 4 855d 873d 25/29 816d 7c1c73bf84c5 wifi: mac80211: check EHT/TTLM action frame length
KASAN: slab-out-of-bounds Read in do_ipt_set_ctl netfilter 17 syz, C 111 853d 864d 25/29 816d 0c83842df40f netfilter: validate user input for expected length
WARNING in sock_map_delete_elem bpf net -1 syz, C 17183 842d 881d 25/29 816d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in scheduler_tick (3) bpf net 4 syz, C 1179 843d 879d 25/29 816d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
BUG: soft lockup in sys_sendmsg tipc batman 1 syz, C 3 875d 916d 25/29 816d b1f532a3b1e6 batman-adv: Avoid infinite loop trying to resize local TT
possible deadlock in rcu_exp_handler net bpf 4 syz, C 1 856d 852d 25/29 816d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
KMSAN: uninit-value in v9fs_evict_inode v9fs 7 syz, C 5206 871d 883d 25/29 816d 6630036b7c22 fs/9p: fix uninitialized values during inode evict
possible deadlock in rcu_report_exp_cpu_mult net bpf 4 syz, C done 30 843d 881d 25/29 816d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in try_to_wake_up (4) bpf net 4 syz, C error 19 818d 881d 25/29 816d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in ahci_single_level_irq_intr bpf net 4 syz, C 10 864d 872d 25/29 816d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
WARNING in sock_map_unref bpf net -1 syz, C error 97 843d 857d 25/29 816d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
INFO: rcu detected stall in rtnl_newlink (4) sctp fs 1 syz, C error 9 823d 899d 25/29 816d b1f532a3b1e6 batman-adv: Avoid infinite loop trying to resize local TT
possible deadlock in __lock_task_sighand (2) bpf 4 syz, C 1476 817d 881d 25/29 816d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
WARNING in sock_hash_delete_elem bpf net -1 syz, C done 16982 842d 881d 25/29 816d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in hrtimer_run_queues bpf net 4 syz, C error 592 843d 880d 25/29 816d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in swake_up_one bpf net 4 syz, C 4 854d 853d 25/29 816d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
BUG: unable to handle kernel paging request in copy_from_kernel_nofault (2) mm 8 syz, C 2 856d 866d 25/29 816d c6f48506ba30 arm32, bpf: Reimplement sign-extension mov instruction
KASAN: slab-out-of-bounds Read in xsk_setsockopt bpf net 17 syz, C 17 855d 864d 25/29 816d 237f3cf13b20 xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
KMSAN: uninit-value in ipvlan_queue_xmit (2) net 7 syz, C 2 889d 850d 25/29 816d 4b911a9690d7 nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().
possible deadlock in __unix_gc net 4 syz, C done 5 843d 845d 25/29 816d 1971d13ffa84 af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
WARNING in gre_tap_xmit (2) net -1 syz, C done 67 824d 849d 25/29 816d 4b911a9690d7 nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().
UBSAN: array-index-out-of-bounds in check_stack_range_initialized bpf 15 syz, C error 21 847d 880d 25/29 816d ecc6a2101840 bpf: Protect against int overflow for stack access size
general protection fault in dev_map_enqueue net bpf 19 syz, C 676 816d 873d 25/29 816d 5bcf0dcbf906 xdp: use flags field to disambiguate broadcast redirect
KMSAN: uninit-value in nci_ntf_packet net nfc 7 syz, C 79 817d 958d 25/29 816d d24b03535e5e nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
KASAN: slab-use-after-free Read in v9fs_stat2inode_dotl v9fs 19 syz, C done 585 871d 926d 25/29 816d 11763a8598f8 fs/9p: fix uaf in in v9fs_stat2inode_dotl
possible deadlock in unix_del_edges net 4 syz, C 49 859d 864d 25/29 816d b46f4eaa4f0e af_unix: Clear stale u->oob_skb.
WARNING in __hugetlb_cgroup_uncharge_folio mm -1 syz 3 845d 854d 25/29 816d b76b46902c2d mm/hugetlb: fix missing hugetlb_lock for resv uncharge
KASAN: slab-use-after-free Read in bpf_link_free bpf 19 syz 181 816d 864d 25/29 816d 1a80dbcb2dba bpf: support deferring bpf_link dealloc to after RCU grace period
WARNING: refcount bug in ax25_release (2) hams 13 syz, C 240 816d 881d 25/29 816d 467324bcfe1a ax25: Fix netdev refcount issue
KASAN: slab-out-of-bounds Read in data_sock_setsockopt net 17 syz, C 2 860d 860d 25/29 816d 138b787804f4 mISDN: fix MISDN_TIME_STAMP handling
KASAN: slab-use-after-free Read in bpf_trace_run4 bpf trace 19 syz, C error 169 860d 878d 25/29 816d 1a80dbcb2dba bpf: support deferring bpf_link dealloc to after RCU grace period
KMSAN: uninit-value in nci_dev_up net nfc 7 syz, C 7 875d 934d 25/29 816d d24b03535e5e nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
UBSAN: array-index-out-of-bounds in nilfs_add_link nilfs 15 syz, C error 4 852d 853d 25/29 816d c4a7dc9523b5 nilfs2: fix OOB in nilfs_set_de_type
KASAN: slab-use-after-free Read in bpf_trace_run2 bpf trace 19 syz, C error 653 860d 878d 25/29 816d 1a80dbcb2dba bpf: support deferring bpf_link dealloc to after RCU grace period
KASAN: slab-use-after-free Read in __fput (2) fs 19 syz, C done 6 840d 845d 25/29 816d 4efaa5acf0a1 epoll: be better about file lifetimes
KASAN: slab-use-after-free Read in bpf_trace_run1 bpf trace 19 syz, C error 78 860d 875d 25/29 816d 1a80dbcb2dba bpf: support deferring bpf_link dealloc to after RCU grace period
possible deadlock in unix_notinflight net 4 syz, C 7 842d 858d 25/29 816d b46f4eaa4f0e af_unix: Clear stale u->oob_skb.
general protection fault in __ep_remove fs 2 syz, C 1 861d 860d 25/29 816d 4efaa5acf0a1 epoll: be better about file lifetimes
general protection fault in jbd2__journal_start ext4 2 syz, C error 3 879d 933d 25/29 816d f2e812c1522d xfs: don't use current->journal_info
kernel BUG in sg_init_one mm -1 syz, C 1032 871d 881d 25/29 816d 9c500835f279 mm: zswap: fix kernel BUG in sg_init_one
WARNING in __rate_control_send_low wireless -1 syz, C inconclusive 2759 816d 2132d 25/29 816d ab9177d83c04 wifi: mac80211: don't use rate mask for scanning
WARNING in clear_dirty_gfn_range kvm-x86 -1 syz, C 3 865d 887d 25/29 816d 2673dfb591a3 KVM: x86/mmu: Write-protect L2 SPTEs in TDP MMU when clearing dirty status
KMSAN: uninit-value in nf_flow_offload_ip_hook netfilter 7 syz, C 5 864d 864d 25/29 816d 87b3593bed18 netfilter: flowtable: validate pppoe header
WARNING: ODEBUG bug in bdev_super_lock (2) fs -1 syz, C done 3 853d 851d 25/29 816d 22650a99821d fs,block: yield devices early
WARNING in hugetlb_change_protection (2) mm -1 syz, C 631 836d 863d 25/29 816d c5977c95dff1 mm/userfaultfd: allow hugetlb change protection upon poison entry
WARNING in __kvm_gpc_refresh kvm -1 syz, C 178 817d 881d 25/29 816d 5c9ca4ed8908 KVM: Check validity of offset+length of gfn_to_pfn_cache prior to activation
WARNING in btrfs_sync_log btrfs -1 syz, C error inconclusive 6 889d 1400d 25/29 816d 8bb808c6ad91 btrfs: don't print stack trace when transaction is aborted due to ENOMEM
WARNING in btrfs_put_transaction btrfs -1 syz, C error inconclusive 83 833d 1355d 25/29 816d 8bb808c6ad91 btrfs: don't print stack trace when transaction is aborted due to ENOMEM
WARNING in __btrfs_free_extent btrfs -1 syz, C error 300 825d 1383d 25/29 816d 8bb808c6ad91 btrfs: don't print stack trace when transaction is aborted due to ENOMEM
WARNING in btrfs_get_root_ref btrfs -1 syz unreliable inconclusive 3 891d 906d 25/29 817d e2b54eaf28df btrfs: fix double free of anonymous device after snapshot creation failure
kernel BUG at fs/inode.c:LINE! (2) fs -1 syz, C done unreliable 322 831d 2179d 25/29 817d 319c15174757 epoll: take epitem list out of struct file
kernel BUG in create_pending_snapshot btrfs -1 syz, C error done 32 1056d 1361d 25/29 819d df9f27823904 btrfs: do not BUG_ON on failure to get dir index for new snapshot
WARNING in btrfs_free_reserved_data_space_noquota btrfs -1 syz, C done done 7 944d 1356d 25/29 819d 9e65bfca24cf btrfs: fix qgroup_free_reserved_data int overflow
WARNING in stashed_dentry_prune (2) fs -1 syz, C done 54 842d 851d 25/29 820d 9d9539db8638 pidfs: remove config option
kernel BUG in __extent_writepage_io btrfs -1 syz done inconclusive 8 897d 1015d 25/29 821d 5571e41ec6e5 btrfs: don't drop extent_map for free space inode on write error
BUG: sleeping function called from invalid context in gsm_send serial 5 syz, C error 16 904d 1418d 25/29 842d acdab4cb4ba7 Revert "tty: n_gsm: avoid call of sleeping functions from atomic context"
kernel BUG in submit_bh_wbc nilfs -1 syz, C done 10 844d 854d 25/29 844d 269cdf353b5b nilfs2: prevent kernel bug at submit_bh_wbc()
inconsistent lock state in snd_hrtimer_callback (2) sound 4 syz, C 2600 853d 854d 25/29 846d 587d67fd929a ALSA: timer: Fix missing irq-disable at closing
possible deadlock in snd_timer_close_locked (2) sound 4 syz, C done 3036 853d 854d 25/29 846d 587d67fd929a ALSA: timer: Fix missing irq-disable at closing
inconsistent lock state in snd_timer_interrupt (3) sound 4 syz, C 710 853d 857d 25/29 846d 587d67fd929a ALSA: timer: Fix missing irq-disable at closing
INFO: rcu detected stall in snd_timer_user_release (2) sound 1 syz, C 7 847d 860d 25/29 846d 587d67fd929a ALSA: timer: Fix missing irq-disable at closing
possible deadlock in _snd_pcm_stream_lock_irqsave (5) sound 4 syz, C 5210 853d 854d 25/29 846d 587d67fd929a ALSA: timer: Fix missing irq-disable at closing
INFO: task hung in xfs_inodegc_flush xfs 1 syz, C error 7 925d 921d 25/29 856d c70e1779b73a workqueue: Fix pwq->nr_in_flight corruption in try_to_grab_pending()
WARNING in cleanup_net (3) net -1 syz 240 857d 990d 25/29 856d 2a750d6a5b36 rds: tcp: Fix use-after-free of net in reqsk_timer_handler().
WARNING in net_free (2) net -1 syz 27 863d 909d 25/29 856d 2a750d6a5b36 rds: tcp: Fix use-after-free of net in reqsk_timer_handler().
inconsistent lock state in snd_timer_interrupt (2) sound 4 syz, C done 208 857d 858d 25/29 857d 587d67fd929a ALSA: timer: Fix missing irq-disable at closing
KMSAN: uninit-value in em_ret_far kvm-x86 7 syz, C 37 884d 950d 25/29 857d 6fd1e3963f20 KVM: x86: Clean up partially uninitialized integer in emulate_pop()
WARNING in stashed_dentry_prune fs -1 syz, C done 20 887d 886d 25/29 857d 9d9539db8638 pidfs: remove config option
BUG: bad usercopy in raw_getsockopt mm hardening -1 syz, C done 4 908d 908d 25/29 858d c8fba5d6df5e can: raw: fix getsockopt() for new CAN_RAW_XL_VCID_OPTS
WARNING: ODEBUG bug in bdev_super_lock fs -1 syz, C 3 861d 871d 25/29 858d 59a55a63c246 fs,block: get holder during claim
KMSAN: uninit-value in cookie_v4_check net 7 syz, C 9 880d 886d 25/29 858d 956c0d619107 tcp: Clear req->syncookie in reqsk_alloc().
KMSAN: uninit-value in bcmp (2) sound 7 syz, C 7 923d 945d 25/29 858d fde2497d2bc3 fat: fix uninitialized field in nostale filehandles
KASAN: slab-use-after-free Read in sys_io_cancel fs 19 syz, C done 894 858d 896d 25/29 858d 28468cbed92e Revert "fs/aio: Make io_cancel() generate completions again"
possible deadlock in _snd_pcm_stream_lock_irqsave (4) sound 4 syz, C 24677 858d 881d 25/29 858d 587d67fd929a ALSA: timer: Fix missing irq-disable at closing
divide error in isd200_ata_command usb-storage 2 syz, C done 10 898d 902d 25/29 858d 014bcf41d946 USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
UBSAN: shift-out-of-bounds in taprio_change net -1 syz, C done 4 888d 888d 25/29 858d 343041b59b78 net/sched: taprio: proper TCA_TAPRIO_TC_ENTRY_INDEX check
WARNING: suspicious RCU usage in in6_dump_addrs (2) net 4 syz, C done 3 901d 901d 25/29 858d 67ea41d19d2a inet6: expand rcu_read_lock() scope in inet6_dump_addr()
KASAN: slab-use-after-free Read in f2fs_filemap_fault f2fs 19 syz, C unreliable 40 863d 944d 25/29 858d eb70d5a6c932 f2fs: fix to avoid use-after-free issue in f2fs_filemap_fault
KMSAN: uninit-value in ieee80211_amsdu_to_8023s wireless 7 syz, C 4 895d 902d 25/29 858d 9ad797485692 wifi: cfg80211: check A-MSDU format more carefully
general protection fault in btintel_read_version bluetooth 2 syz, C error 5 931d 942d 25/29 858d b79e04091010 Bluetooth: btintel: Fix null ptr deref in btintel_read_version
KMSAN: uninit-value in hsr_get_node (2) net 7 syz, C 49 859d 945d 25/29 858d ddbec99f5857 hsr: Fix uninit-value access in hsr_get_node()
KMSAN: kernel-infoleak in sys_name_to_handle_at (4) nfs 9 syz, C 7 896d 945d 25/29 858d 3948abaa4e2b do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
KASAN: slab-use-after-free Write in __hci_acl_create_connection_sync bluetooth 22 syz, C done 87 909d 920d 25/29 858d 5f641f03abcc Bluetooth: hci_conn: Fix UAF Write in __hci_acl_create_connection_sync
WARNING in mpls_gso_segment net -1 syz, C done 20 904d 907d 25/29 858d 025f8ad20f2e net: mpls: error out if inner headers are not set
possible deadlock in snd_pcm_period_elapsed (4) sound 4 syz, C done 90659 858d 884d 25/29 858d 587d67fd929a ALSA: timer: Fix missing irq-disable at closing
inconsistent lock state in snd_timer_interrupt sound 4 syz, C 1927 858d 881d 25/29 858d 587d67fd929a ALSA: timer: Fix missing irq-disable at closing
WARNING in rds_conn_connect_if_down rds -1 syz, C error 17 892d 1223d 25/29 858d c055fc00c07b net/rds: fix WARNING in rds_conn_connect_if_down
general protection fault in bpf_struct_ops_find_value bpf 2 syz, C done 9 931d 934d 25/29 858d e6be8cd5d3cf bpf: Fix error checks against bpf_get_btf_vmlinux().
BUG: unable to handle kernel NULL pointer dereference in dev_map_hash_update_elem net bpf 10 syz, C 2 902d 910d 25/29 858d 281d464a34f5 bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
KMSAN: uninit-value in geneve_udp_encap_recv net 7 syz, C 2 903d 934d 25/29 858d 1ca1ba465e55 geneve: make sure to pull inner header in geneve_rx()
WARNING in ovl_copy_up_file overlayfs -1 syz, C 2 886d 886d 25/29 858d 77a28aa47687 ovl: relax WARN_ON in ovl_verify_area()
kernel BUG at fs/buffer.c:LINE! nilfs -1 syz, C done error 567 859d 3041d 25/29 858d f2f26b4a84a0 nilfs2: fix failure to detect DAT corruption in btree and direct mappings
kernel BUG in __nla_validate_parse net -1 syz, C done 13 887d 890d 25/29 858d d8a21070b6e1 nexthop: Fix out-of-bounds access during attribute validation
KASAN: slab-use-after-free Read in pvr2_context_set_notify (2) pvrusb2 19 syz, C 1069 858d 929d 25/29 858d 0a0b79ea55de media: pvrusb2: fix uaf in pvr2_context_set_notify
KMSAN: uninit-value in ima_add_template_entry erofs 7 syz, C 5 895d 908d 25/29 858d 893e5e9b7369 erofs: fix uninitialized page cache reported by KMSAN
BUG: sleeping function called from invalid context in __getblk_gfp fs 5 syz, C error done 3673 963d 1357d 25/29 858d f123dc86388c sysv: don't call sb_bread() with pointers_lock held
general protection fault in btf_is_module bpf 2 syz, C error 318 930d 934d 25/29 858d e6be8cd5d3cf bpf: Fix error checks against bpf_get_btf_vmlinux().
KMSAN: uninit-value in io_sendrecv_fail io-uring 7 syz, C 29 876d 884d 25/29 858d e21e1c45e1fe io_uring: clear opcode specific data for an early failure
INFO: task hung in deactivate_super (2) jfs 1 syz, C inconclusive done 121 896d 1236d 25/29 860d 6f861765464f fs: Block writes to mounted block devices
BUG: sleeping function called from invalid context in __lock_sock_fast (2) net 5 syz, C 6 898d 900d 25/29 866d d6a9608af9a7 mptcp: fix possible deadlock in subflow diag
possible deadlock in tcp_diag_get_aux net 4 syz, C 117 892d 909d 25/29 866d d6a9608af9a7 mptcp: fix possible deadlock in subflow diag
kernel BUG in eth_header (2) net -1 syz, C 2 942d 942d 25/29 866d dad555c816a5 llc: make llc_ui_sendmsg() more robust against bonding changes
BUG: unable to handle kernel NULL pointer dereference in unix_stream_sendmsg net bpf 10 syz, C 1 901d 901d 25/29 866d 4cd12c6065df bpf, sockmap: Fix NULL pointer dereference in sk_psock_verdict_data_ready()
BUG: unable to handle kernel NULL pointer dereference in sk_psock_verdict_data_ready bpf net 10 syz, C unreliable 15 897d 1017d 25/29 866d 4cd12c6065df bpf, sockmap: Fix NULL pointer dereference in sk_psock_verdict_data_ready()
WARNING in blk_rq_map_user_iov block -1 syz, C done 3546 931d 1073d 25/29 870d 13f3956eb568 block: Fix WARNING in _copy_from_iter
WARNING in copy_page_from_iter block -1 syz, C done 1987 939d 1250d 25/29 870d 13f3956eb568 block: Fix WARNING in _copy_from_iter
INFO: task hung in unix_stream_sendmsg net 1 syz, C done 4 907d 910d 25/29 871d aa82ac51d633 af_unix: Drop oob_skb ref before purging queue in GC.
WARNING in __alloc_skb (3) ppp -1 syz, C 2 923d 923d 25/29 871d cb88cb53badb ppp_async: limit MRU to 64K
BUG: unable to handle kernel paging request in copy_from_kernel_nofault mm 8 syz, C done 5 902d 1001d 25/29 871d 32019c659ecf x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()
KASAN: slab-out-of-bounds Read in getname_kernel (2) btrfs 17 syz, C done 5 925d 972d 25/29 871d 9845664b9ee4 btrfs: dev-replace: properly validate device names
kernel BUG in end_buffer_async_write nilfs -1 syz, C inconclusive 6 959d 1170d 25/29 871d 5bc09b397cbf nilfs2: fix potential bug in end_buffer_async_write
memory leak in pppoe_sendmsg net 3 syz, C 26 962d 2634d 25/29 871d dc34ebd5c018 pppoe: Fix memory leak in pppoe_sendmsg()
memory leak in corrupted bluetooth 3 syz 536 871d 943d 25/29 871d 0a186b49bba5 batman-adv: mcast: fix memory leak on deleting a batman-adv interface
WARNING in __unix_gc net -1 syz, C 49 920d 926d 25/29 871d 1279f9d9dec2 af_unix: Call kfree_skb() for dead unix_(sk)->oob_skb in GC.
kernel BUG in iov_iter_revert exfat -1 syz, C done 5 924d 943d 25/29 871d 0991abeddefa exfat: fix zero the unwritten part for dio read
WARNING: ODEBUG bug in ip_set_free netfilter -1 syz, C 42 912d 915d 25/29 872d 27c5a095e251 netfilter: ipset: Missing gc cancellations fixed
possible deadlock in rds_wake_sk_sleep (4) rds 4 syz, C error 16 922d 1550d 25/29 872d f1acf1ac84d2 net:rds: Fix possible deadlock in rds_message_put
possible deadlock in rds_message_put rds 4 syz, C done error 5 1009d 1321d 25/29 872d f1acf1ac84d2 net:rds: Fix possible deadlock in rds_message_put
KASAN: slab-use-after-free Read in sock_wfree (2) intel-wired-lan 19 syz, C 4 934d 942d 25/29 872d aa2b2eb39348 llc: call sock_orphan() at release time
WARNING: ODEBUG bug in hash_netiface4_destroy netfilter -1 syz, C done 80 912d 926d 25/29 872d 27c5a095e251 netfilter: ipset: Missing gc cancellations fixed
possible deadlock in j1939_sk_queue_drop_all can 4 syz, C error done 281 930d 1803d 25/29 873d 6cdedc18ba7b can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock
possible deadlock in j1939_sk_errqueue (2) can 4 syz, C done 24 913d 1139d 25/29 873d 6cdedc18ba7b can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock
memory leak in virtual_ncidev_write (2) net nfc 3 syz, C 2 971d 1131d 25/29 873d bfb007aebe6b nfc: nci: free rx_data_reassembly skb on NCI device cleanup
general protection fault in tipc_udp_is_known_peer tipc 2 syz, C error 1 959d 972d 25/29 873d 3871aa01e1a7 tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
KMSAN: uninit-value in IP6_ECN_decapsulate (2) net 7 syz, C 3 924d 939d 25/29 873d 8d975c15c0cd ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
INFO: task hung in rtnl_lock (3) net 1 syz, C 128 878d 1230d 25/29 873d 3871aa01e1a7 tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
possible deadlock in j1939_session_activate can 4 syz, C done done 67 924d 1759d 25/29 873d 6cdedc18ba7b can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock
WARNING in bcm5974_start_traffic/usb_submit_urb input -1 syz, C error 41 877d 2473d 25/29 873d 2b9c3eb32a69 Input: bcm5974 - check endpoint type before starting traffic
WARNING in ieee80211_bss_info_change_notify (2) wireless -1 syz, C done 1392 894d 1039d 25/29 873d f78c1375339a wifi: nl80211: reject iftype change with mesh ID change
WARNING in btrfs_issue_discard btrfs -1 syz, C done 9 931d 944d 25/29 873d a208b3f132b4 btrfs: don't warn if discard range is not aligned to sector
WARNING in __nf_unregister_net_hook (6) netfilter -1 syz, C error 2 917d 1034d 25/29 873d bccebf647017 netfilter: nf_tables: set dormant flag on hook register failure
memory leak in sctp_packet_transmit sctp 3 syz, C 14 998d 2216d 25/29 873d 4e45170d9acc net: sctp: fix skb leak in sctp_inq_free()
KMSAN: uninit-value in geneve_xmit (2) net 7 syz, C 12 878d 955d 25/29 874d 5ae1e9922bbd net: ip_tunnel: prevent perpetual headroom growth
WARNING in ip6gre_tunnel_xmit net -1 syz, C done 2 903d 903d 25/29 874d 5ae1e9922bbd net: ip_tunnel: prevent perpetual headroom growth
KASAN: use-after-free Read in __skb_flow_dissect (3) net 19 syz, C 1 948d 958d 25/29 874d 5ae1e9922bbd net: ip_tunnel: prevent perpetual headroom growth
memory leak in add_block_entry btrfs 3 syz, C 4 971d 1163d 25/29 874d f03e274a8b29 btrfs: ref-verify: free ref cache before clearing mount opt
INFO: task hung in addrconf_dad_work (3) net 1 syz, C 185 887d 929d 25/29 874d ba5e1272142d netdevsim: avoid potential loop in nsim_dev_trap_report_work()
KASAN: invalid-access Read in neon_aes_ctr_encrypt arm crypto 17 syz, C 3 901d 912d 25/29 874d 1c0cf6d19690 crypto: arm64/neonbs - fix out-of-bounds access on short input
memory leak in add_tree_block btrfs 3 syz, C 5 956d 1357d 25/29 874d f03e274a8b29 btrfs: ref-verify: free ref cache before clearing mount opt
KASAN: slab-out-of-bounds Read in ntfs_listxattr (2) ntfs3 17 syz, C error 15 922d 964d 25/29 874d 731ab1f98288 fs/ntfs3: Fix oob in ntfs_listxattr
KMSAN: kernel-infoleak in __skb_datagram_iter (2) net 19 syz, C 126 874d 926d 25/29 874d 661779e1fcaf netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
INFO: task hung in unix_dgram_sendmsg net 1 syz, C done 36 900d 919d 25/29 874d 25236c91b5ab af_unix: Fix task hung while purging oob_skb in GC.
KMSAN: uninit-value in __llc_lookup_established net 7 syz, C 46 942d 985d 25/29 874d e3f9bed9bee2 llc: Drop support for ETH_P_TR_802_2.
INFO: task hung in migrate_pages_batch nilfs 1 syz, C 22 919d 931d 25/29 874d 38296afe3c6e nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
BUG: unable to handle kernel NULL pointer dereference in crypto_arc4_crypt crypto 10 syz, C done 4 932d 930d 25/29 874d 69fba378edca crypto: cbc - Ensure statesize is zero
BUG: unable to handle kernel NULL pointer dereference in dtInsertEntry jfs 19 syz, C error done 29 927d 1420d 25/29 879d 6f861765464f fs: Block writes to mounted block devices
possible deadlock in reiserfs_dirty_inode fs 4 syz, C done done 519 929d 1357d 25/29 879d 6f861765464f fs: Block writes to mounted block devices
KASAN: use-after-free Read in ntfs_lookup_inode_by_name ntfs3 19 syz, C error done 17 890d 1325d 25/29 879d 6f861765464f fs: Block writes to mounted block devices
WARNING in do_open_execat ntfs3 -1 syz, C error done 12 934d 1094d 25/29 879d 6f861765464f fs: Block writes to mounted block devices
KASAN: use-after-free Read in udf_finalize_lvid udf 19 syz, C inconclusive done 39 951d 1154d 25/29 879d 6f861765464f fs: Block writes to mounted block devices
BUG: sleeping function called from invalid context in gfs2_withdraw gfs2 5 syz, C error done 182 951d 1071d 25/29 879d 6f861765464f fs: Block writes to mounted block devices
UBSAN: shift-out-of-bounds in ntfs_iget ntfs3 -1 syz, C error done 9 932d 1173d 25/29 879d 6f861765464f fs: Block writes to mounted block devices
KASAN: slab-out-of-bounds Read in ntfs_iget5 ntfs3 19 syz, C done done 3633 943d 1577d 25/29 879d 6f861765464f fs: Block writes to mounted block devices
KASAN: slab-use-after-free Read in udf_free_blocks udf 19 syz, C done done 2 953d 1163d 25/29 879d 6f861765464f fs: Block writes to mounted block devices
INFO: trying to register non-static key in txEnd jfs -1 syz, C inconclusive done 20 952d 1050d 25/29 879d 6f861765464f fs: Block writes to mounted block devices
KASAN: use-after-free Read in ntfs_read_folio ntfs3 19 syz, C error done 12 940d 1248d 25/29 879d 6f861765464f fs: Block writes to mounted block devices
INFO: task hung in hfs_mdb_commit hfs 1 syz, C error done 25 930d 1308d 25/29 879d 6f861765464f fs: Block writes to mounted block devices
possible deadlock in map_mft_record ntfs3 4 syz, C error done 845 928d 1397d 25/29 879d 6f861765464f fs: Block writes to mounted block devices
possible deadlock in ext4_xattr_inode_iget (2) ext4 4 syz, C done done 22 944d 1137d 25/29 879d 6f861765464f fs: Block writes to mounted block devices
KASAN: slab-out-of-bounds Write in hfs_bnode_read_key hfs 21 syz, C error done 4 942d 1165d 25/29 879d 6f861765464f fs: Block writes to mounted block devices
KASAN: slab-out-of-bounds Read in jfs_readdir jfs 19 syz, C error done 17 952d 1312d 25/29 879d 6f861765464f fs: Block writes to mounted block devices
BUG: sleeping function called from invalid context in __bread_gfp fs 5 syz, C error done 359 955d 1356d 25/29 879d 6f861765464f fs: Block writes to mounted block devices
kernel BUG in ntfs_iget ntfs3 -1 syz, C error done 73 892d 1270d 25/29 879d 6f861765464f fs: Block writes to mounted block devices
INFO: task hung in reiserfs_sync_fs fs 1 syz, C error done 22 955d 1334d 25/29 879d 6f861765464f fs: Block writes to mounted block devices
WARNING in kvm_mmu_notifier_invalidate_range_start (3) kvm -1 syz, C inconclusive done 44 943d 1003d 25/29 892d 4cccb6221cae fs/proc/task_mmu: move mmu notification mechanism inside mm lock
WARNING in gfs2_check_blk_type gfs2 -1 syz, C error done 67 940d 1343d 25/29 895d 6f861765464f fs: Block writes to mounted block devices
WARNING in perf_event_open perf -1 syz, C done done 43004 955d 970d 25/29 901d 7e2c1e4b34f0 perf: Fix perf_event_validate_size() lockdep splat
KASAN: slab-out-of-bounds Write in udf_adinicb_writepage udf 21 syz, C error done 5 953d 1241d 25/29 902d 6f861765464f fs: Block writes to mounted block devices
INFO: task hung in lmLogClose (2) jfs 1 syz, C inconclusive done 5 949d 1041d 25/29 905d 6f861765464f fs: Block writes to mounted block devices
kernel panic: stack is corrupted in run_unpack_ex ntfs3 2 syz, C done done 3 959d 1317d 25/29 905d 6f861765464f fs: Block writes to mounted block devices
general protection fault in common_perm_cond ext4 apparmor 2 syz, C error done 1 959d 1124d 25/29 906d 6f861765464f fs: Block writes to mounted block devices
UBSAN: array-index-out-of-bounds in udf_process_sequence udf 15 syz, C error done 6 953d 1112d 25/29 907d 6f861765464f fs: Block writes to mounted block devices
general protection fault in __fget_files (2) fs 2 syz, C done done 1 962d 958d 25/29 907d 6f861765464f fs: Block writes to mounted block devices
INFO: task hung in __generic_file_fsync (3) exfat 1 syz, C inconclusive done 8 960d 1467d 25/29 907d 6f861765464f fs: Block writes to mounted block devices
WARNING in ext4_discard_allocated_blocks ext4 -1 syz, C inconclusive done 4 953d 1070d 25/29 907d 6f861765464f fs: Block writes to mounted block devices
INFO: task hung in write_cache_pages (3) gfs2 1 syz, C done done 10 952d 1077d 25/29 907d 6f861765464f fs: Block writes to mounted block devices
INFO: task hung in __get_metapage jfs 1 syz, C error done 32 951d 1405d 25/29 907d 6f861765464f fs: Block writes to mounted block devices
KASAN: use-after-free Write in udf_close_lvid udf 22 syz, C done 144 952d 1546d 25/29 907d 6f861765464f fs: Block writes to mounted block devices
KASAN: use-after-free Read in ext4_search_dir prio:low ext4 19 syz, C error done 20 952d 1193d 25/29 907d 6f861765464f fs: Block writes to mounted block devices
BUG: unable to handle kernel paging request in reiserfs_readdir_inode fs 19 syz, C error done 11 953d 1319d 25/29 907d 6f861765464f fs: Block writes to mounted block devices
kernel BUG in entry_points_to_object fs -1 syz, C done done 21 953d 998d 25/29 907d 6f861765464f fs: Block writes to mounted block devices
kernel panic: stack is corrupted in __lock_acquire (5) ntfs3 2 syz, C error done 18 952d 1329d 25/29 907d 6f861765464f fs: Block writes to mounted block devices
kernel BUG in txLock jfs -1 syz, C inconclusive done 10 954d 1072d 25/29 912d 6f861765464f fs: Block writes to mounted block devices
WARNING in lock_two_nondirectories ext4 -1 syz, C 3 964d 975d 25/29 912d 6f861765464f fs: Block writes to mounted block devices
general protection fault in utf8nlookup exfat ext4 2 syz, C done done 3 954d 1061d 25/29 912d 6f861765464f fs: Block writes to mounted block devices
kernel BUG in ext4_enable_quotas ext4 -1 syz, C error done 16 956d 1137d 25/29 912d 6f861765464f fs: Block writes to mounted block devices
KASAN: out-of-bounds Read in ext4_ext_remove_space ext4 17 syz, C error done 8 955d 1129d 25/29 912d 6f861765464f fs: Block writes to mounted block devices
KASAN: vmalloc-out-of-bounds Read in cleanup_bitmap_list fs 17 syz, C error done 100 956d 1388d 25/29 912d 6f861765464f fs: Block writes to mounted block devices
KASAN: slab-use-after-free Read in hfsplus_read_wrapper hfs 19 syz, C inconclusive done 7 963d 1186d 25/29 913d 6f861765464f fs: Block writes to mounted block devices
KASAN: null-ptr-deref Read in ida_free (4) bluetooth 11 syz, C done done 29 967d 1006d 25/29 914d af73483f4e8b ida: Fix crash in ida_free when the bitmap is empty
KASAN: use-after-free Read in set_de_name_and_namelen fs 19 syz, C error done 15 959d 1360d 25/29 915d 6f861765464f fs: Block writes to mounted block devices
KASAN: slab-out-of-bounds Read in dtSearch jfs 19 syz, C error done 33 958d 1421d 25/29 915d 6f861765464f fs: Block writes to mounted block devices
UBSAN: shift-out-of-bounds in dbSplit jfs -1 syz, C error done 7 958d 1412d 25/29 919d 6f861765464f fs: Block writes to mounted block devices
possible deadlock in hci_rfkill_set_block bluetooth 4 syz, C done 3391 955d 1028d 25/29 923d 769bf60e17ee Bluetooth: Fix deadlock in vhci_send_frame
KASAN: use-after-free Read in udf_sync_fs udf 19 syz, C done done 37 962d 1100d 25/29 925d 6f861765464f fs: Block writes to mounted block devices
KASAN: slab-use-after-free Read in ext4_convert_inline_data_nolock ext4 19 syz, C error done 7 961d 1238d 25/29 925d 6f861765464f fs: Block writes to mounted block devices
WARNING: ODEBUG bug in netdev_run_todo batman -1 syz, C error error 5467 1149d 2203d 25/29 925d abac3ac97fe8 batman-adv: Broken sync while rescheduling delayed work
BUG: unable to handle kernel NULL pointer dereference in reiserfs_find_entry fs 19 syz, C error done 25 962d 1398d 25/29 926d 6f861765464f fs: Block writes to mounted block devices
UBSAN: shift-out-of-bounds in ext4_handle_clustersize (2) ext4 -1 syz, C error done 3 963d 967d 25/29 926d 6f861765464f fs: Block writes to mounted block devices
possible deadlock in seq_read_iter (2) overlayfs 4 syz, C done done 14 964d 1124d 25/29 926d da40448ce4eb fs: move file_start_write() into direct_splice_actor()
KMSAN: uninit-value in io_rw_fail io-uring 7 syz, C 25 929d 945d 25/29 926d 0a535eddbe0d io_uring/rw: ensure io->bytes_done is always initialized
KMSAN: uninit-value in ip6_tnl_parse_tlv_enc_lim (2) net 7 syz, C 17 929d 954d 25/29 927d d375b98e0248 ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
kernel BUG in ntfs_truncate ntfs3 -1 syz, C error done 4 964d 1322d 25/29 928d 6f861765464f fs: Block writes to mounted block devices
INFO: task hung in hfsplus_find_init hfs 1 syz, C error done 1 970d 1064d 25/29 928d 6f861765464f fs: Block writes to mounted block devices
KASAN: use-after-free Read in reiserfs_get_unused_objectid fs 19 syz, C inconclusive done 3 964d 1237d 25/29 928d 6f861765464f fs: Block writes to mounted block devices
general protection fault in timerqueue_del (2) kernel 2 syz, C done done 3 970d 1111d 25/29 928d 6f861765464f fs: Block writes to mounted block devices
WARNING in udf_new_block udf -1 syz, C inconclusive done 31 964d 1248d 25/29 928d 6f861765464f fs: Block writes to mounted block devices
WARNING in __mark_chain_precision (3) bpf -1 syz, C done 19 959d 980d 25/29 928d 482d548d40b0 bpf: handle fake register spill to stack with BPF_ST_MEM instruction
KMSAN: uninit-value in subflow_check_req mptcp 7 syz, C 63 954d 949d 25/29 928d 66ff70df1a91 mptcp: use OPTION_MPTCP_MPJ_SYN in subflow_check_req()
KASAN: use-after-free Read in ext4_find_extent (3) prio:low ext4 19 syz, C error done 31 964d 1146d 25/29 929d 6f861765464f fs: Block writes to mounted block devices
kernel BUG in ext4_write_inline_data_end ext4 -1 syz, C error done 32 965d 1263d 25/29 929d 6f861765464f fs: Block writes to mounted block devices
INFO: task hung in path_mount (2) jfs 1 syz, C error done 8 965d 1093d 25/29 929d 6f861765464f fs: Block writes to mounted block devices
KASAN: use-after-free Read in crc_itu_t udf 19 syz, C inconclusive done 50 964d 1415d 25/29 929d 6f861765464f fs: Block writes to mounted block devices
general protection fault in scatterwalk_copychunks (5) crypto 2 syz, C done 2920 957d 964d 25/29 929d 744e1885922a crypto: scomp - fix req->dst buffer overflow
KASAN: slab-out-of-bounds Write in squashfs_readahead (2) squashfs 21 syz, C done 2 1012d 1008d 25/29 929d 12427de9439d Squashfs: fix variable overflow triggered by sysbot
KASAN: slab-use-after-free Read in nla_find bpf net 19 syz, C done 4 973d 972d 25/29 929d 2130c519a401 bpf: Use nla_ok() instead of checking nla_len directly
KASAN: slab-use-after-free Read in nfc_alloc_send_skb net nfc 19 syz, C error 3 982d 1011d 25/29 929d c95f919567d6 nfc: llcp_core: Hold a ref to llcp_local->dev when holding a ref to llcp_local
KASAN: slab-use-after-free Read in jfs_evict_inode jfs 19 syz error 1 1028d 1024d 25/29 929d e0e1958f4c36 jfs: fix uaf in jfs_evict_inode
kernel BUG in move_pages mm -1 syz, C done 2 952d 948d 25/29 929d 5d4747a6cc8e userfaultfd: avoid huge_zero_page in UFFDIO_MOVE
general protection fault in bio_first_folio block 2 syz, C done 683 940d 974d 25/29 929d 7bed6f3d08b7 block: Fix iterating over an empty bio with bio_for_each_folio_all
general protection fault in bfs_get_block (2) bfs 2 syz, C error done 2 976d 995d 25/29 929d 6f861765464f fs: Block writes to mounted block devices
KASAN: slab-out-of-bounds Read in arc4_crypt crypto 17 syz, C done 6 961d 972d 25/29 929d 37c6fc323a81 crypto: skcipher - Pass statesize for simple lskcipher instances
WARNING in get_pte_pfn mm io-uring -1 syz, C error 2 958d 968d 25/29 929d c28ac3c7eb94 mm/mglru: skip special VMAs in lru_gen_look_around()
UBSAN: array-index-out-of-bounds in diNewExt jfs 15 syz, C inconclusive 31 929d 980d 25/29 929d 49f9637aafa6 jfs: fix array-index-out-of-bounds in diNewExt
INFO: task hung in gfs2_gl_hash_clear (3) gfs2 1 syz, C error done 80 968d 1356d 25/29 929d 6f861765464f fs: Block writes to mounted block devices
BUG: corrupted list in efivar_entry_remove efi 8 syz, C 104 930d 1451d 25/29 929d cdb46a8aefbf efivarfs: Move efivarfs list into superblock s_fs_info
general protection fault in dtSplitUp jfs 2 syz, C error done 2 979d 1415d 25/29 929d 6f861765464f fs: Block writes to mounted block devices
BUG: unable to handle kernel NULL pointer dereference in __bio_release_pages block 10 syz, C 6 945d 943d 25/29 929d 7bed6f3d08b7 block: Fix iterating over an empty bio with bio_for_each_folio_all
general protection fault in tomoyo_check_acl (3) hfs 2 syz, C inconclusive done 1 979d 1136d 25/29 929d 6f861765464f fs: Block writes to mounted block devices
general protection fault in hfsc_tcf_block net 2 syz, C done 1020 952d 959d 25/29 929d 94e2557d086a net: sched: move block device tracking into tcf_block_get/put_ext()
possible deadlock in chown_common fs 4 syz, C error done 22 937d 1406d 25/29 929d 6f861765464f fs: Block writes to mounted block devices
WARNING in __udf_add_aext (2) udf -1 syz error done 6 979d 1160d 25/29 929d 6f861765464f fs: Block writes to mounted block devices
BUG: sleeping function called from invalid context in glock_hash_walk gfs2 5 syz, C done done 31 975d 1076d 25/29 929d 6f861765464f fs: Block writes to mounted block devices
UBSAN: array-index-out-of-bounds in diWrite jfs 15 syz, C error done 13 976d 1395d 25/29 929d 6f861765464f fs: Block writes to mounted block devices
KASAN: slab-use-after-free Read in pvr2_context_set_notify usb pvrusb2 22 syz, C 3814 929d 1135d 25/29 929d ded85b0c0edd media: pvrusb2: fix use after free on context disconnection
BUG: sleeping function called from invalid context in gfs2_make_fs_ro gfs2 5 syz, C error done 1 975d 1118d 25/29 929d 6f861765464f fs: Block writes to mounted block devices
KASAN: slab-use-after-free Read in kill_f2fs_super f2fs 19 syz, C done 2331 942d 947d 25/29 929d c919330dd578 f2fs: fix double free of f2fs_sb_info
kernel BUG in balance_leaf fs -1 syz, C error done 16 969d 1320d 25/29 929d 6f861765464f fs: Block writes to mounted block devices
WARNING: locking bug in corrupted (2) bpf 4 syz, C done done 1 979d 1133d 25/29 929d 6f861765464f fs: Block writes to mounted block devices
WARNING in mptcp_check_listen_stop mptcp -1 syz, C done 47 929d 977d 25/29 929d 4c0288299fd0 mptcp: prevent tcp diag from closing listener subflows
WARNING in __sk_msg_free bpf net -1 syz, C done 4 955d 954d 25/29 929d dc9dfc8dc629 net: tls, fix WARNIING in __sk_msg_free
possible deadlock in pipe_write fs 4 syz, C inconclusive 181 931d 1610d 25/29 929d 055ca8355991 fs/pipe: Fix lockdep false-positive in watchqueue pipe_write()
KMSAN: uninit-value in z_erofs_lz4_decompress (2) erofs 7 syz, C 33 930d 963d 25/29 929d 496530c7c1df erofs: avoid debugging output for (de)compressed data
INFO: trying to register non-static key in do_mpage_readpage ntfs3 -1 syz, C error done 24 973d 1327d 25/29 929d 6f861765464f fs: Block writes to mounted block devices
kernel BUG in direntry_check_right fs -1 syz, C done done 2 967d 1011d 25/29 929d 6f861765464f fs: Block writes to mounted block devices
KASAN: slab-out-of-bounds Read in dsa_user_changeupper net 17 syz, C done 1303 936d 950d 25/29 929d 844f104790bd net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events
WARNING in __folio_rmap_sanity_checks mm -1 syz, C done 168 951d 956d 25/29 929d 9c5938694cd0 mm/rmap: silence VM_WARN_ON_FOLIO() in __folio_rmap_sanity_checks()
WARNING in ea_get jfs -1 syz, C error done 10 971d 1417d 25/29 929d 6f861765464f fs: Block writes to mounted block devices
INFO: task hung in find_inode_fast (2) ext4 1 syz, C unreliable done 10 976d 1130d 25/29 929d 6f861765464f fs: Block writes to mounted block devices
KASAN: slab-out-of-bounds Read in search_by_key (2) fs 17 syz, C 4435 951d 1382d 25/29 929d dd8f87f21dc3 reiserfs: fix uninit-value in comp_keys
UBSAN: array-index-out-of-bounds in dtSplitRoot jfs 15 syz, C error inconclusive 2 1073d 1401d 25/29 929d 27e56f59bab5 UBSAN: array-index-out-of-bounds in dtSplitRoot
possible deadlock in ntfs_set_state ntfs3 4 syz, C done done 1360 941d 1334d 25/29 929d 6f861765464f fs: Block writes to mounted block devices
kernel BUG in txEnd jfs -1 syz, C inconclusive done 6 939d 1153d 25/29 929d 6f861765464f fs: Block writes to mounted block devices
WARNING: suspicious RCU usage in __cfg80211_bss_update wireless 4 syz, C done 92 954d 956d 25/29 929d 1184950e341c wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
general protection fault in qdisc_create net 10 syz, C done 2821 951d 959d 25/29 929d 94e2557d086a net: sched: move block device tracking into tcf_block_get/put_ext()
BUG: unable to handle kernel paging request in lookup_open ntfs3 8 syz, C error done 1 978d 1123d 25/29 929d 6f861765464f fs: Block writes to mounted block devices
BUG: unable to handle kernel NULL pointer dereference in gfs2_rgrp_dump gfs2 10 syz, C done 9 985d 1329d 25/29 929d 8877243beafa gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
general protection fault in __hrtimer_run_queues (3) kernel 17 syz, C error done 2 980d 1145d 25/29 929d 6f861765464f fs: Block writes to mounted block devices
WARNING in dev_watchdog (2) net -1 syz, C inconclusive 6791 931d 2330d 25/29 929d e316dd1cf135 net: don't dump stack on queue timeout
WARNING in kvm_mmu_notifier_change_pte kvm -1 syz, C inconclusive 2 967d 977d 25/29 929d 4cccb6221cae fs/proc/task_mmu: move mmu notification mechanism inside mm lock
KMSAN: uninit-value in netif_skb_features (2) net 7 syz, C 9 973d 1061d 25/29 929d 9181d6f8a2bb net: add more sanity check in virtio_net_hdr_to_skb()
INFO: task hung in hwrng_fillfn crypto 1 syz, C error 27 931d 995d 25/29 929d 78aafb3884f6 hwrng: core - Fix page fault dead lock on mmap-ed hwrng
kernel BUG in ext4_split_extent_at (2) ext4 -1 syz, C error done 3 965d 1160d 25/29 929d 6f861765464f fs: Block writes to mounted block devices
BUG: unable to handle kernel NULL pointer dereference in gfs2_rindex_update gfs2 10 syz, C error done 4 974d 1333d 25/29 929d 6f861765464f fs: Block writes to mounted block devices
WARNING in ip6_route_info_create net -1 syz, C done 241 979d 983d 25/29 929d a3c205d0560f ipv6: do not check fib6_has_expires() in fib6_info_release()
general protection fault in page_pool_unlist net 2 syz, C done 648 989d 991d 25/29 929d f9893fdac319 net: page_pool: fix general protection fault in page_pool_unlist
KMSAN: uninit-value in shrinker_alloc mm 7 syz 2 979d 957d 25/29 929d 7fba9420b726 mm: shrinker: use kvzalloc_node() from expand_one_shrinker_info()
possible deadlock in __run_timers kernel 4 syz, C error done 1 977d 973d 25/29 929d 6f861765464f fs: Block writes to mounted block devices
UBSAN: shift-out-of-bounds in dbJoin jfs -1 syz, C error 3 1022d 1406d 25/29 929d cca974daeb6c jfs: fix shift-out-of-bounds in dbJoin
UBSAN: array-index-out-of-bounds in dbAdjTree jfs 15 syz, C error error 41 943d 1420d 25/29 929d 9862ec7ac1cb FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree 74ecdda68242 jfs: fix array-index-out-of-bounds in dbAdjTree
KASAN: slab-use-after-free Read in destroy_device_list f2fs 19 syz, C done 3597 942d 946d 25/29 929d c919330dd578 f2fs: fix double free of f2fs_sb_info
kernel BUG in gfs2_quota_cleanup gfs2 -1 syz, C done 4 971d 1071d 25/29 929d 71733b492200 gfs2: fix kernel BUG in gfs2_quota_cleanup
KMSAN: uninit-value in validate_xmit_skb net 7 syz, C 21 930d 948d 25/29 929d 9181d6f8a2bb net: add more sanity check in virtio_net_hdr_to_skb()
kernel BUG in flush_journal_list exfat -1 syz, C done done 3 973d 1161d 25/29 929d 6f861765464f fs: Block writes to mounted block devices
general protection fault in htb_tcf_block net 2 syz, C done 885 951d 959d 25/29 929d 94e2557d086a net: sched: move block device tracking into tcf_block_get/put_ext()
kernel BUG in prog_array_map_poke_run bpf -1 syz, C done done 35 972d 1013d 25/29 937d 4b7de801606e bpf: Fix prog_array_map_poke_run map poke update
general protection fault in skb_segment (4) net 8 syz, C error 4 973d 981d 25/29 938d 23d05d563b7e net: prevent mss overflow in skb_segment()
WARNING in fib6_add (5) net -1 syz, C done 6 983d 1146d 25/29 938d 75475bb51e78 ipv6: fix potential NULL deref in fib6_add()
KASAN: slab-use-after-free Read in btrfs_qgroup_account_extent btrfs 22 syz, C done 40 1007d 1018d 25/29 939d 6c8e69e4a702 btrfs: fix race between accounting qgroup extents and removing a qgroup
KASAN: slab-out-of-bounds Read in dns_resolver_preparse net 17 syz, C done 46 963d 976d 25/29 939d 1997b3cb4217 keys, dns: Fix missing size check of V1 server-list header
WARNING in rate_control_rate_init (2) wireless -1 syz, C done 9 969d 1141d 25/29 939d c1393c132b90 wifi: mac80211: check if the existing link config remains unchanged
general protection fault in dccp_write_xmit (2) net 8 syz, C done 32 971d 1026d 25/29 939d cac23b7d7627 net: Return error from sk_stream_wait_connect() if sk_wait_event() fails
WARNING in ieee80211_rfkill_poll wireless -1 syz, C 684 979d 1012d 25/29 939d 8e2f6f236621 wifi: cfg80211: lock wiphy mutex for rfkill poll
general protection fault in d_path integrity overlayfs 2 syz, C done 210 996d 1138d 25/29 939d 8a924db2d7b5 fs: Pass AT_GETATTR_NOSEC flag to getattr interface function
KASAN: null-ptr-deref Write in unix_stream_bpf_update_proto bpf net 12 syz, C done 54 960d 990d 25/29 939d 8d6650646ce4 bpf: syzkaller found null ptr deref in unix_bpf proto add
memory leak in skb_copy (2) nfc net 3 syz 3 1011d 1128d 25/29 939d 84d2db91f14a nfc: virtual_ncidev: Add variable to check if ndev is running
WARNING in squashfs_read_data squashfs -1 syz, C error 2 1009d 1005d 25/29 939d eb66b8abae98 squashfs: squashfs_read_data need to check if the length is 0
general protection fault in hugetlb_vma_lock_write mm 2 syz, C done 110 982d 1022d 25/29 939d 187da0f8250a hugetlb: fix null-ptr-deref in hugetlb_vma_lock_write
general protection fault in tls_merge_open_record net 2 syz unreliable 5 1021d 1021d 25/29 939d 53f2cb491b50 tls: fix NULL deref on tls_sw_splice_eof() with empty record
WARNING in pagemap_scan_pmd_entry fs -1 syz, C inconclusive 48 983d 1005d 25/29 939d 0dff1b407def mm/pagemap: fix ioctl(PAGEMAP_SCAN) on vma check
WARNING in __alloc_skb (2) ppp -1 syz, C done 2 994d 1008d 25/29 939d c0a2a1b0d631 ppp: limit MRU to 64K
WARNING in nilfs_sufile_set_segment_usage nilfs -1 syz, C inconclusive 341 998d 1416d 25/29 939d 675abf8df135 nilfs2: prevent WARNING in nilfs_sufile_set_segment_usage()
WARNING in unmap_page_range (2) mm -1 syz, C done 2112 979d 1005d 25/29 939d 4980e837cab7 mm/pagemap: fix wr-protect even if PM_SCAN_WP_MATCHING not set
memory leak in btrfs_ref_tree_mod btrfs 3 syz 1 1101d 1097d 25/29 939d f91192cd6859 btrfs: ref-verify: fix memory leaks in btrfs_ref_tree_mod()
general protection fault in autofs_fill_super autofs 2 syz done 7 998d 1007d 25/29 939d 66917f85db60 autofs: add: new_inode check in autofs_fill_super()
BUG: unable to handle kernel paging request in __pte_offset_map_lock mm 8 syz, C 2 1015d 1025d 25/29 939d 9aa1345d66b8 mm: fix oops when filemap_map_pmd() without prealloc_pte
memory leak in ovl_parse_param overlayfs 3 syz, C 1 1012d 1008d 25/29 939d 37f32f526438 ovl: fix memory leak in ovl_parse_param()
KMSAN: uninit-value in drm_mode_setcrtc dri 7 syz, C 41 980d 1156d 25/29 939d 3823119b9c2b drm/crtc: Fix uninit-value bug in drm_mode_setcrtc 6e455f5dcdd1 drm/crtc: fix uninitialized variable use
WARNING in blk_mq_start_request block -1 syz, C done 29 997d 1013d 25/29 939d 53f2bca26092 block/null_blk: Fix double blk_mq_start_request() warning
KASAN: slab-use-after-free Read in unix_stream_read_actor net 19 syz, C error 6 993d 1009d 25/29 939d 4b7b492615cf af_unix: fix use-after-free in unix_stream_read_actor()
WARNING in create_pending_snapshot btrfs -1 syz, C done 3 1006d 1011d 25/29 939d 8049ba5d0a28 btrfs: do not abort transaction if there is already an existing qgroup
general protection fault in ptp_ioctl net 2 syz, C done 8 1014d 1015d 25/29 939d 8a4f030dbced ptp: Fixes a null pointer dereference in ptp_ioctl
kernel BUG in ip6gre_header (2) net -1 syz, C 2 1038d 1052d 25/29 939d 3cffa2ddc4d3 bonding: stop the device in bond_setup_by_slave()
KMSAN: uninit-value in mptcp_incoming_options mptcp 7 syz, C 93 989d 998d 25/29 939d 237ff253f2d4 mptcp: fix uninit-value in mptcp_incoming_options
WARNING in __kernel_write_iter btrfs -1 syz, C inconclusive 1149 990d 1406d 25/29 939d 0ac1d13a55eb btrfs: send: ensure send_fd is writable
memory leak in btrfs_add_delayed_tree_ref btrfs 3 syz, C 6 1010d 1014d 25/29 939d 609d99379736 btrfs: fix qgroup record leaks when using simple quotas
WARNING in ext4_dio_write_end_io ext4 -1 syz, C done 2 999d 998d 25/29 939d 619f75dae2cf ext4: fix warning in ext4_dio_write_end_io()
KASAN: slab-use-after-free Read in iommufd_vfio_ioas iommu 19 syz, C done 4 1000d 1018d 25/29 939d 6f9c4d8c468c iommufd: Do not UAF during iommufd_put_object()
BUG: unable to handle kernel paging request in nsim_bpf net 8 syz, C 3 996d 1011d 25/29 939d c0c6bde586c7 netdevsim: Don't accept device bound programs
BUG: Dentry still in use in unmount f2fs -1 syz, C done 58 974d 1451d 25/29 939d 413ba91089c7 ovl: fix dentry reference leak after changes to underlying layers
kernel BUG in ipgre_header net -1 syz, C 4 988d 1003d 25/29 939d 3cffa2ddc4d3 bonding: stop the device in bond_setup_by_slave()
KASAN: use-after-free Read in j1939_session_get_by_addr 19 syz, C done error 66 2464d 2476d 25/29 947d d966635b384b can: j1939: transport: make sure the aborted session will be deactivated only once
KASAN: stack-out-of-bounds Read in tcp_inbound_hash net 17 syz, C done 28 1008d 1022d 25/29 949d 02f0717e9835 net/tcp: fix possible out-of-bounds reads in tcp_hash_fail()
WARNING in dev_index_reserve (2) net -1 syz, C done 68 1029d 1039d 25/29 949d cbfbfe3aee71 tun: prevent negative ifindex
possible deadlock in super_lock ext4 4 syz, C done done 52 997d 1078d 25/29 950d fd1464105cb3 fs: Avoid grabbing sb->s_umount under bdev->bd_holder_lock
KMSAN: uninit-value in dccp_v6_err net 7 syz, C 4 1064d 1069d 25/29 951d 6af289746a63 dccp: fix dccp_v4_err()/dccp_v6_err() again
UBSAN: array-index-out-of-bounds in xtSearch jfs 15 syz, C unreliable done 122 994d 1412d 25/29 951d a779ed754e52 jfs: define xtree root and page independently
UBSAN: array-index-out-of-bounds in txCommit jfs 15 syz, C error done 396 1018d 1399d 25/29 951d a779ed754e52 jfs: define xtree root and page independently
inconsistent lock state in nf_connlabels_put netfilter 4 syz, C done 4 1025d 1026d 25/29 956d 643d12603664 netfilter: conntrack: switch connlabels to atomic_t
KASAN: use-after-free Read in __media_entity_remove_links usb media 19 syz, C 7 2337d 2435d 25/29 956d 68035c80e129 media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors
KASAN: slab-out-of-bounds Read in ntfs_listxattr ntfs3 17 syz, C done 70 969d 1348d 25/29 968d 8e7e27b2ee1e fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea() 3c675ddffb17 ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
general protection fault in scatterwalk_copychunks (4) net crypto 19 syz, C done done 1341 968d 1979d 25/29 968d cfaa80c91f6f net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
WARNING in page_copy_sane fs mm -1 syz, C done 3 1067d 1063d 25/29 969d a08c7193e4f1 mm/filemap: remove hugetlb special casing in filemap.c
general protection fault in ovl_encode_real_fh overlayfs 2 syz, C done 3 1049d 1049d 25/29 969d c7242a45cb8c ovl: fix NULL pointer defer when encoding non-decodable lower fid
possible deadlock in __btrfs_release_delayed_node (3) btrfs 4 syz 2 1087d 1084d 25/29 969d e110f8911ddb btrfs: fix lockdep splat and potential deadlock after failure running delayed items
KMSAN: uninit-value in smsc95xx_reset usb 7 syz, C 425 1025d 2190d 25/29 969d 51a32e828109 net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg
general protection fault in lbmStartIO jfs 2 syz, C done 2 1036d 1044d 25/29 969d 6306ff39a7fc jfs: fix log->bdev_handle null ptr deref in lbmStartIO
general protection fault in usb_hub_create_port_device kernel 2 syz, C done done 4 1070d 1076d 25/29 969d fd6f7ad2fd4d driver core: return an error when dev_set_name() hasn't happened
KASAN: slab-out-of-bounds Read in create_monitor_event bluetooth 17 syz, C done 952 1028d 1042d 25/29 969d 18f547f3fc07 Bluetooth: hci_sock: fix slab oob read in create_monitor_event
WARNING: zero-size vmalloc in print_tainted bpf net -1 syz, C 79 1162d 1196d 25/29 969d a12bbb3cccf0 xdp: Fix zero-size allocation warning in xskq_create()
kernel BUG in __block_write_begin_int block -1 syz, C done 14 1058d 1077d 25/29 969d 4aa8cdd5e523 iomap: handle error conditions more gracefully in iomap_to_bh
WARNING in ext4_iomap_begin (2) ext4 -1 syz, C done 7 1042d 1156d 25/29 969d ce56d21355cd ext4: fix racy may inline data check in dio write
KASAN: use-after-free Read in bcmp ntfs3 19 syz, C done 289 973d 1131d 25/29 969d 34e6552a442f fs/ntfs3: Fix OOB read in ntfs_init_from_boot
general protection fault in serio_handle_event kernel 2 syz, C done done 6 1065d 1073d 25/29 969d fd6f7ad2fd4d driver core: return an error when dev_set_name() hasn't happened
KMSAN: uninit-value in IP6_ECN_decapsulate net 7 syz, C 981 971d 2887d 25/29 969d 484b4833c604 hsr: Fix uninit-value access in fill_frame_info()
UBSAN: array-index-out-of-bounds in diAlloc jfs 15 syz, C error inconclusive 37 1010d 1419d 25/29 969d 05d9ea1ceb62 jfs: fix array-index-out-of-bounds in diAlloc
KMSAN: uninit-value in __tipc_nl_bearer_enable (2) tipc 7 syz, C 21 1015d 1060d 25/29 969d 19b3f72a41a8 tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
memory leak in kcm_sendmsg (2) net 3 syz, C 1 1082d 1117d 25/29 969d c821a88bd720 kcm: Fix memory leak in error path of kcm_sendmsg()
INFO: task hung in clean_bdev_aliases block 1 syz, C done 201 1051d 1076d 25/29 969d 381c043233e6 iomap: add a workaround for racy i_size updates on block devices
KMSAN: uninit-value in virtio_transport_recv_pkt virt kvm net 7 syz, C 20713 1010d 1024d 25/29 969d 34c4effacfc3 virtio/vsock: Fix uninit-value in virtio_transport_recv_pkt()
WARNING in skb_warn_bad_offload (4) net -1 syz, C done 1763 1032d 1059d 25/29 969d fc8b2a619469 net: more strict VIRTIO_NET_HDR_GSO_UDP_L4 validation
UBSAN: array-index-out-of-bounds in io_setup_async_msg io-uring 15 syz, C done 3 1069d 1068d 25/29 969d c21a8027ad8a io_uring/net: fix iter retargeting for selected buf
WARNING in bpf_mprog_attach bpf -1 syz, C 3 1047d 1055d 25/29 969d f9b0e1088bbf bpf, mprog: Fix maximum program check on mprog attachment
WARNING in __ip6_append_data net -1 syz, C unreliable 5 1039d 1068d 25/29 969d 9d4c75800f61 ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
BUG: unable to handle kernel NULL pointer dereference in hdr_find_e (2) ntfs3 10 syz, C done 4 1037d 1109d 25/29 969d 1f9b94af923c fs/ntfs3: Fix possible null-pointer dereference in hdr_find_e()
BUG: corrupted list in ptp_open net 8 syz, C done 7 1015d 1025d 25/29 969d 1bea2c3e6df8 ptp: fix corrupted list in ptp_open b714ca2ccf6a ptp: ptp_read should not release queue
general protection fault in nfc_register_device kernel 11 syz, C done 190 971d 1084d 25/29 969d fd6f7ad2fd4d driver core: return an error when dev_set_name() hasn't happened
possible deadlock in rfkill_send_events wireless 4 syz, C done 22 1032d 1042d 25/29 969d f2ac54ebf856 net: rfkill: reduce data->mtx scope in rfkill_fop_open
general protection fault in wpan_phy_register kernel 2 syz, C done done 7 1062d 1069d 25/29 969d fd6f7ad2fd4d driver core: return an error when dev_set_name() hasn't happened
BUG: Bad page map (7) mm -1 syz, C done 19 1050d 1072d 25/29 969d ce60f27bb62d mm: abstract moving to the next PFN
KMSAN: uninit-value in mii_nway_restart usb 7 syz, C 2449 1039d 2630d 25/29 969d 8f8abb863fa5 net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read
WARNING in bpf_mprog_pos_before bpf -1 syz, C done 26 1047d 1055d 25/29 969d f9b0e1088bbf bpf, mprog: Fix maximum program check on mprog attachment
general protection fault in io_get_cqe_overflow io-uring 2 syz, C done 2 1051d 1049d 25/29 969d 1658633c0465 io_uring: ensure io_lockdep_assert_cq_locked() handles disabled rings
general protection fault in hci_register_dev kernel 2 syz, C unreliable done 4 1067d 1074d 25/29 969d fd6f7ad2fd4d driver core: return an error when dev_set_name() hasn't happened
WARNING in skb_checksum_help (2) net -1 syz, C done 3816 969d 1059d 25/29 969d fc8b2a619469 net: more strict VIRTIO_NET_HDR_GSO_UDP_L4 validation
divide error in iommufd_test iommu 2 syz, C done 4 1022d 1024d 25/29 969d 2e22aac3ea9c iommufd/selftest: Fix page-size check in iommufd_test_dirty()
KMSAN: uninit-value in tipc_nl_node_reset_link_stats tipc 7 syz, C 2 1051d 1060d 25/29 969d 19b3f72a41a8 tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
WARNING: suspicious RCU usage in gfs2_permission gfs2 4 syz, C done 263 1020d 1041d 25/29 969d 074d7306a4fe gfs2: Silence "suspicious RCU usage in gfs2_permission" warning
BUG: corrupted list in nfc_llcp_register_device net nfc 22 syz, C error 136 1046d 1334d 25/29 969d dfc7f7a988da net: nfc: llcp: Add lock when modifying device list
KASAN: slab-use-after-free Read in pwq_release_workfn kernel 19 syz, C unreliable 79 1032d 1082d 25/29 969d 643445531829 workqueue: Fix UAF report by KASAN in pwq_release_workfn()
UBSAN: array-index-out-of-bounds in dbFindLeaf jfs 15 syz, C error 6 1069d 1383d 25/29 969d 22cad8bc1d36 jfs: fix array-index-out-of-bounds in dbFindLeaf
KMSAN: uninit-value in smsc75xx_bind usb 7 syz, C 63 1067d 2564d 25/29 969d e9c65989920f net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
BUG: sleeping function called from invalid context in __hci_cmd_sync_sk bluetooth 5 syz, C done 34 1039d 1156d 25/29 969d acab8ff29a2a Bluetooth: ISO: Fix invalid context error
general protection fault in bpf_prog_offload_verifier_prep bpf 8 syz, C done 31 1059d 1078d 25/29 969d 1a49f4195d34 bpf: Avoid dummy bpf_offload_netdev in __bpf_prog_dev_bound_init
possible deadlock in btrfs_search_slot (2) btrfs 4 syz, C error 2 1091d 1087d 25/29 969d ee34a82e890a btrfs: release path before inode lookup during the ino lookup ioctl
KASAN: slab-out-of-bounds Read in imon_probe media usb 17 syz 2 1064d 1086d 25/29 969d a1766a4fd83b media: imon: fix access to invalid resource for the second interface
KASAN: slab-use-after-free Write in gfs2_qd_dealloc gfs2 22 syz, C inconclusive 27 999d 1052d 25/29 969d bdcb8aa434c6 gfs2: Fix slab-use-after-free in gfs2_qd_dealloc
memory leak in binder_transaction (2) kernel 3 syz, C 2 1070d 1365d 25/29 969d 1aa3aaf8953c binder: fix memory leaks of spam and pending work
general protection fault in inherit_task_group perf 2 syz, C done done 4 1022d 1020d 25/29 969d a71ef31485bb perf/core: Fix potential NULL deref
KMSAN: uninit-value in smsc95xx_eeprom_confirm_not_busy usb 7 syz, C 521 1025d 1138d 25/29 969d 51a32e828109 net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg
UBSAN: shift-out-of-bounds in nci_activate_target net nfc -1 syz, C done 6 1048d 1232d 25/29 969d 354a6e707e29 nfc: nci: assert requested protocol is valid
KASAN: use-after-free Read in powermate_config_complete (4) input 19 syz done unreliable 14 1073d 1445d 25/29 969d 5c15c60e7be6 Input: powermate - fix use-after-free in powermate_config_complete
UBSAN: shift-out-of-bounds in set_flicker usb media -1 syz 5 1015d 1095d 25/29 969d 099be1822d1f media: gspca: cpia1: shift-out-of-bounds in set_flicker
UBSAN: shift-out-of-bounds in ntfs_fill_super (2) ntfs3 -1 syz, C error 5716 995d 1265d 25/29 969d 91a4b1ee78cb fs/ntfs3: Fix shift-out-of-bounds in ntfs_fill_super
possible deadlock in mnt_want_write (2) integrity overlayfs 4 syz, C done 867 1020d 1888d 25/29 970d e044374a8a0a ima: annotate iint mutex to avoid lockdep false positive warnings
WARNING in inet_csk_get_port (2) net -1 syz, C done 88 1030d 1061d 25/29 970d 8702cf12e6ba tcp: Fix listen() warning with v4-mapped-v6 address.
WARNING in ieee80211_get_ringparam wireless -1 syz, C done 151 1056d 1062d 25/29 970d 6b348f6e34ce wifi: mac80211: ethtool: always hold wiphy mutex
KASAN: slab-use-after-free Read in ntfs_write_bh ntfs3 19 syz, C done 100 1046d 1070d 25/29 970d 493c71926c20 ntfs3: put resources during ntfs_fill_super()
KASAN: use-after-free Read in ntfs_test_inode ntfs3 19 syz, C done 402 983d 1917d 25/29 970d 493c71926c20 ntfs3: put resources during ntfs_fill_super()
UBSAN: array-index-out-of-bounds in dbNextAG jfs 15 syz, C inconclusive inconclusive 52 993d 1420d 25/29 970d 64933ab7b048 fs/jfs: Add validity check for db_maxag and db_agpref
KMSAN: uninit-value in fq_change net 7 syz, C 8 1011d 1013d 25/29 970d f1a3b283f852 UPSTREAM: net_sched: sch_fq: better validate TCA_FQ_WEIGHTS and TCA_FQ_PRIOMAP
KMSAN: uninit-value in llc_station_rcv net 7 syz, C 2 1025d 1034d 25/29 970d 7b3ba18703a6 llc: verify mac len before reading mac header
KASAN: invalid-free in ovl_copy_up_one overlayfs 24 syz, C done 2 1060d 1056d 25/29 970d 5b02bfc1e7e3 ovl: do not encode lower fh with upper sb_writers held
WARNING in try_grab_page xfs mm -1 syz, C 48 1054d 1140d 23/29 1039d f443fd5af5db crypto, cifs: fix error handling in extract_iter_to_sg()
kernel BUG in add_new_free_space btrfs -1 syz, C 3 1144d 1212d 23/29 1039d d8ccbd21918f btrfs: remove BUG_ON()'s in add_new_free_space()
INFO: rcu detected stall in sys_close (5) net 1 syz, C done 1 1083d 1083d 23/29 1039d 8c21ab1bae94 net/sched: fq_pie: avoid stalls in fq_pie_timer()
possible deadlock in shmem_uncharge (2) mm 4 syz, C done 29 1127d 1125d 23/29 1039d 509f006932de shmem: fix quota lock nesting in huge hole handling
WARNING in unregister_vlan_dev net -1 syz, C done 1310 1092d 1101d 23/29 1039d ace0ab3a4b54 Revert "vlan: Fix VLAN 0 memory leak"
general protection fault in __drop_extent_tree f2fs 2 syz, C error 3 1184d 1223d 23/29 1039d 458c15dfbce6 f2fs: don't reset unchangable mount option in f2fs_remount()
general protection fault in io_uring_show_fdinfo io-uring 2 syz, C done 17 1071d 1080d 23/29 1039d 32f5dea040ee io_uring/fdinfo: only print ->sq_array[] if it's there
KASAN: slab-out-of-bounds Read in read_descriptors (3) usb 17 syz, C error 7 1126d 1153d 23/29 1039d ff33299ec8bb USB: core: Fix race by not overwriting udev->descriptor in hub_port_init()
WARNING in do_chunk_alloc btrfs -1 syz, C error done 35 1146d 1362d 23/29 1039d cd361199ff23 btrfs: wait on uncached block groups on every allocation loop
general protection fault in generic_hwtstamp_ioctl_lower net 2 syz, C done 7 1106d 1108d 23/29 1039d c35e927cbe09 net: omit ndo_hwtstamp_get() call when possible in dev_set_hwtstamp_phylib()
INFO: rcu detected stall in unix_release net 1 syz, C done 1 1103d 1099d 23/29 1039d da71714e359b net/sched: fix a qdisc modification with ambiguous command request
UBSAN: array-index-out-of-bounds in f2fs_iget f2fs 15 syz, C done 6 1079d 1123d 23/29 1039d 958ccbbf1ce7 Revert "f2fs: fix to do sanity check on extent cache correctly"
WARNING in init_module_from_file modules -1 syz, C 98 1132d 1140d 23/29 1039d f1962207150c module: fix init_module_from_file() error handling
WARNING: refcount bug in xp_put_pool bpf net 13 syz, C done 2 1114d 1112d 23/29 1039d 85c2c79a0730 xsk: fix refcount underflow in error path
WARNING in ip6_tnl_exit_batch_net net -1 syz, C done 29 1094d 1101d 23/29 1039d ace0ab3a4b54 Revert "vlan: Fix VLAN 0 memory leak"
KASAN: invalid-free in dbUnmount jfs 24 syz error 119 1056d 1315d 23/29 1039d cade5397e546 fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount()
KASAN: stack-out-of-bounds Write in __nla_validate_parse net 21 syz, C done 4 1107d 1121d 23/29 1039d 4d50e50045aa net: flower: fix stack-out-of-bounds in fl_set_key_cfm()
KMSAN: uninit-value in af_alg_free_resources crypto 7 syz, C 156 1092d 1129d 23/29 1039d 080aa61e370b crypto: fix uninit-value in af_alg_free_resources
general protection fault in sco_conn_add bluetooth 2 syz, C done 4 1125d 1134d 23/29 1039d b4066eb04bb6 Bluetooth: hci_conn: return ERR_PTR instead of NULL when there is no link
KASAN: null-ptr-deref Read in txBegin jfs 11 syz, C error 30 1140d 1275d 23/29 1039d 47cfdc338d67 FS: JFS: Fix null-ptr-deref Read in txBegin
WARNING in ntfs_load_attr_list ntfs3 -1 syz, C 4 1205d 1322d 23/29 1039d ea303f72d70c fs/ntfs3: Use __GFP_NOWARN allocation at ntfs_load_attr_list()
WARNING in iommufd_access_destroy iommu -1 syz, C done 3 1128d 1129d 23/29 1039d 99f98a7c0d69 iommufd: IOMMUFD_DESTROY should not increase the refcount
BUG: unable to handle kernel paging request in handshake_nl_done_doit tls 8 syz, C 2 1085d 1085d 23/29 1039d 82ba0ff7bf04 net/handshake: fix null-ptr-deref in handshake_nl_done_doit()
WARNING: bad unlock balance in sockopt_release_sock net 4 syz, C done 2 1088d 1088d 23/29 1039d 8be6f88b9d3f inet: fix IP_TRANSPARENT error handling
KASAN: slab-use-after-free Read in xsk_diag_dump net bpf 19 syz, C done 9 1074d 1083d 23/29 1039d 3e019d8a05a3 xsk: Fix xsk_diag use-after-free error during socket cleanup
KMSAN: uninit-value in alauda_check_media usb usb-storage 7 syz, C 1059 1121d 2505d 23/29 1039d a6ff6e7a9dd6 usb-storage: alauda: Fix uninit-value in alauda_check_media()
UBSAN: array-index-out-of-bounds in xfs_attr3_leaf_add_work xfs 15 syz, C error done 1923 1116d 1156d 23/29 1039d a49bbce58ea9 xfs: convert flex-array declarations in xfs attr leaf blocks
KASAN: slab-use-after-free Read in input_dev_uevent input 19 syz, C done 7 1080d 1091d 23/29 1039d dd613a4e45f8 HID: uclogic: Correct devm device reference for hidinput input_dev name
BUG: unable to handle kernel paging request in ovs_vport_add openvswitch 8 syz, C done 2 1102d 1101d 23/29 1039d a552bfa16bab net: openvswitch: reject negative ifindex
KASAN: slab-use-after-free Read in nilfs_load_inode_block (2) nilfs 19 syz, C done 4 1106d 1121d 23/29 1039d f8654743a0e6 nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
memory leak in autofs_wait autofs 3 syz, C 4 1173d 1544d 23/29 1039d ccbe77f7e45d autofs: fix memory leak of waitqueues in autofs_catatonic_mode
general protection fault in f2fs_drop_extent_tree f2fs 2 syz, C error done 1 1149d 1145d 23/29 1039d 458c15dfbce6 f2fs: don't reset unchangable mount option in f2fs_remount()
WARNING in mark_buffer_dirty (5) nilfs -1 syz, C done 172 1042d 1161d 23/29 1039d cdaac8e7e5a0 nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse
WARNING in ieee80211_probe_client wireless -1 syz, C done error 124 1071d 2140d 23/29 1039d 67dfa589aa88 wifi: mac80211: check for station first in client probe
general protection fault in skb_segment (3) net 2 syz, C done 2 1099d 1099d 23/29 1039d b616be6b9768 net: do not allow gso_size to be set to GSO_BY_FRAGS
BUG: soft lockup in fq_pie_timer (4) net 1 syz 5 1069d 1120d 23/29 1039d 8c21ab1bae94 net/sched: fq_pie: avoid stalls in fq_pie_timer()
UBSAN: array-index-out-of-bounds in dbAllocDmapLev jfs 15 syz, C error 2 1159d 1332d 23/29 1039d 4e302336d5ca fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
INFO: rcu detected stall in nsim_dev_trap_report_work net 1 syz 4 1075d 1118d 23/29 1039d 8c21ab1bae94 net/sched: fq_pie: avoid stalls in fq_pie_timer()
WARNING in rtnl_dellink (3) net -1 syz, C done 492 1091d 1101d 23/29 1039d ace0ab3a4b54 Revert "vlan: Fix VLAN 0 memory leak"
KASAN: slab-use-after-free Read in team_device_event net 19 syz, C done 2 1075d 1074d 23/29 1039d 6afcf0fb9270 Revert "net: team: do not use dynamic lockdep key"
general protection fault in ext4_finish_bio ext4 2 syz, C done 1 1144d 1140d 23/29 1039d 0b7ec177b589 crypto: algif_hash - Fix race between MORE and non-MORE sends
WARNING in sta_info_insert_rcu (3) wireless -1 syz, C done 6 1087d 1128d 23/29 1039d 5d4e04bf3a0f wifi: cfg80211: reject auth/assoc to AP with our address
KASAN: slab-use-after-free Read in fuse_test_super fuse 19 syz, C done 6 1083d 1086d 23/29 1039d dc3216b14160 super: ensure valid info
KASAN: slab-use-after-free Read in iopt_unmap_iova_range iommu 19 syz, C error 7 1146d 1157d 23/29 1039d 804ca14d04df iommufd: Do not access the area pointer after unlocking
possible deadlock in inode_add_bytes fs 4 syz, C done 124 1126d 1125d 23/29 1039d 509f006932de shmem: fix quota lock nesting in huge hole handling
KASAN: slab-out-of-bounds Read in xlog_pack_data xfs 17 syz, C error done 4 1159d 1156d 23/29 1039d f1e1765aad7d xfs: journal geometry is not properly bounds checked
WARNING in tcx_uninstall net bpf -1 syz, C done 7 1113d 1117d 23/29 1039d 079082c60aff tcx: Fix splat during dev unregister
INFO: task hung in pipe_release (4) fs 1 syz, C done 51 1131d 1131d 23/29 1039d 0f71c9caf267 udp: Fix __ip_append_data()'s handling of MSG_SPLICE_PAGES
possible deadlock in do_user_addr_fault exfat 4 syz, C unreliable done 39 1146d 1237d 23/29 1039d ff84772fd45d exfat: release s_lock before calling dir_emit()
general protection fault in sys_finit_module modules 21 syz, C error done 84 1138d 1139d 23/29 1039d f1962207150c module: fix init_module_from_file() error handling
KASAN: slab-out-of-bounds Read in do_csum net 19 syz, C 160 1044d 1084d 23/29 1039d 8bd795fedb84 arm64: csum: Fix OoB access in IP checksum code for negative lengths
kernel BUG in btrfs_ioctl btrfs -1 syz, C error 1 1155d 1151d 23/29 1039d b19c98f237cd btrfs: fix race between balance and cancel/pause
KMSAN: uninit-value in hwsim_cloned_frame_received_nl wireless 7 syz, C 8315 1083d 2152d 23/29 1039d fba360a047d5 wifi: mac80211_hwsim: drop short frames
WARNING in dev_index_reserve bridge -1 syz, C done 7120 1041d 1096d 23/29 1039d f534f6581ec0 net: validate veth and vxcan peer ifindexes 30188bd7838c rtnetlink: Reject negative ifindexes in RTM_NEWLINK
memory leak in raw_open usb 3 syz, C 1 1134d 1130d 23/29 1039d 83e30f2bf86e USB: gadget: Fix the memory leak in raw_gadget driver
possible deadlock in lock_mm_and_find_vma exfat 4 syz, C error 2 1110d 1130d 23/29 1039d ff84772fd45d exfat: release s_lock before calling dir_emit()
KASAN: use-after-free Read in gsm_cleanup_mux serial 19 syz, C done done 16 1105d 1384d 23/29 1039d 3c4f8333b582 tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
UBSAN: shift-out-of-bounds in ext2_fill_super (2) ext4 -1 syz, C 571 1117d 1161d 23/29 1039d 404615d7f1dc ext2: Drop fragment support
WARNING in bpf_xdp_adjust_tail (4) bpf -1 syz, C error 466 1105d 1315d 23/29 1039d d14eea09edf4 net: core: remove unnecessary frame_sz check in bpf_xdp_adjust_tail()
KMSAN: uninit-value in ieee802154_subif_start_xmit bpf 8 syz, C done 119 1110d 1106d 23/29 1039d db2baf82b098 bpf: Fix an incorrect verification success with movsx insn
WARNING: ODEBUG bug in ingress_destroy net -1 syz, C done 16 1120d 1123d 23/29 1039d dc644b540a2d tcx: Fix splat in ingress_destroy upon tcx_entry_free
WARNING in ext4_file_write_iter ext4 -1 syz, C error 17314 1057d 1156d 23/29 1039d 194505b55dd7 ext4: drop dio overwrite only flag and associated warning
KASAN: slab-out-of-bounds Read in mt_validate_nulls mm 17 syz, C error done 15 1139d 1138d 23/29 1039d ae80b4041984 mm: validate the mm before dropping the mmap lock
general protection fault in prepare_to_wait (2) hams 8 syz inconclusive 4 1056d 1094d 23/29 1039d c2f8fd794960 netrom: Deny concurrent connect().
kernel BUG in validate_mm (2) mm -1 syz, C unreliable done 217 1139d 1138d 23/29 1039d ae80b4041984 mm: validate the mm before dropping the mmap lock
KASAN: invalid-free in init_file overlayfs 24 syz, C done 6 1141d 1142d 23/29 1039d dff745c1221a fs: move cleanup from init_file() into its callers
kernel BUG in prepare_to_merge btrfs -1 syz, C done 48 1102d 1142d 23/29 1039d 773e722a98e2 btrfs: avoid race between qgroup tree creation and relocation 05d7ce504545 btrfs: exit gracefully if reloc roots don't match 6ebcd021c92b btrfs: reject invalid reloc tree root keys with stack dump
KASAN: slab-out-of-bounds Read in bio_split_rw block 17 syz, C done 1 1144d 1140d 23/29 1039d 0b7ec177b589 crypto: algif_hash - Fix race between MORE and non-MORE sends
WARNING: ODEBUG bug in tcx_uninstall bpf net -1 syz, C done 38 1119d 1123d 23/29 1039d dc644b540a2d tcx: Fix splat in ingress_destroy upon tcx_entry_free
BUG: MAX_LOCKDEP_CHAIN_HLOCKS too low! (2) kernel -1 syz, C 2688 1040d 1996d 23/29 1039d 39285e124edb net: team: do not use dynamic lockdep key
KMSAN: uninit-value in ieee80211_rx_handlers wireless 7 syz, C 8 1084d 1140d 23/29 1039d 19e4a47ee747 wifi: mac80211: check S1G action frame size
WARNING in call_netdevice_notifiers_info batman -1 syz, C done 20 1089d 1091d 23/29 1039d 987aae75fc10 batman-adv: Hold rtnl lock during MTU update via netlink
KASAN: slab-use-after-free Read in test_bdev_super_fc fs 19 syz, C done 7 1106d 1109d 23/29 1039d aca740cecbe5 fs: open block device after superblock creation
KASAN: slab-use-after-free Read in afs_dynroot_test_super afs 19 syz, C done 4 1083d 1079d 23/29 1039d dc3216b14160 super: ensure valid info
general protection fault in folio_create_empty_buffers nilfs 2 syz, C error 6 1108d 1183d 23/29 1039d f83913f8c5b8 nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers()
WARNING in corrupted (3) usb -1 syz, C done 19 1134d 1182d 23/29 1039d 6f489a966fbe media: usb: siano: Fix warning due to null work_func_t function pointer
general protection fault in gfs2_lookup_simple gfs2 2 syz, C done 3 1110d 1107d 23/29 1039d 111c7d27a1b7 gfs2: Use mapping->gfp_mask for metadata inodes
KASAN: slab-use-after-free Write in sco_chan_del bluetooth 22 syz, C done 19 1055d 1189d 23/29 1039d 3344d318337d Bluetooth: hci_conn: fail SCO/ISO via hci_conn_failed if ACL gone early
WARNING in usbnet_start_xmit/usb_submit_urb usb -1 syz, C done 92 1153d 1735d 23/29 1039d 5e1627cb43dd net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
WARNING in ieee80211_bss_info_change_notify wireless -1 syz, C done 7725 1039d 2144d 23/29 1039d abc76cf552e1 wifi: cfg80211: ocb: don't leave if not joined
UBSAN: shift-out-of-bounds in dbFree jfs -1 syz, C error 3 1179d 1245d 23/29 1039d 11509910c599 jfs: jfs_dmap: Validate db_l2nbperpage while mounting
UBSAN: array-index-out-of-bounds in print_bpf_insn bpf 15 syz, C done 9 1111d 1112d 23/29 1039d e99688eba2e9 bpf: Fix an array-index-out-of-bounds issue in disasm.c
general protection fault in ext4_acquire_dquot ext4 8 syz, C 4 1153d 1192d 23/29 1039d 6a4e3363792e quota: Properly disable quotas when add_dquot_ref() fails
BUG: unable to handle kernel paging request in ext4_calculate_overhead ext4 8 syz, C done 31 1085d 1087d 23/29 1039d ee5c807137ce ext4: ext4_get_{dev}_journal return proper error value
KASAN: slab-use-after-free Read in f2fs_truncate_data_blocks_range f2fs 19 syz, C error 1 1152d 1148d 23/29 1039d a6ec83786ab9 f2fs: fix to do sanity check on direct node in truncate_dnode()
WARNING in diUnmount jfs -1 syz, C error 100 1066d 1359d 23/29 1039d 6e2bda2c192d jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount
KMSAN: uninit-value in __netif_receive_skb_core wireguard wireless 19 syz, C done 353 1079d 3048d 23/29 1039d dc644b540a2d tcx: Fix splat in ingress_destroy upon tcx_entry_free
memory leak in snd_seq_create_port sound 3 syz, C 1 1131d 1127d 23/29 1039d 057849ccc3d8 ALSA: seq: Fix memory leak at error path in snd_seq_create_port()
possible deadlock in f2fs_getxattr f2fs 4 syz, C done 4570 1056d 1136d 23/29 1039d 5c13e2388bf3 f2fs: avoid false alarm of circular locking
general protection fault in btrfs_finish_ordered_extent btrfs 2 syz, C done 8 1129d 1130d 23/29 1039d 7cad645ebf20 btrfs: fix ordered extent split error handling in btrfs_dio_submit_io
memory leak in _r8712_init_xmit_priv staging usb 3 syz, C 1 1135d 1131d 23/29 1039d ac83631230f7 staging: r8712: Fix memory leak in _r8712_init_xmit_priv()
kernel BUG in f2fs_evict_inode f2fs -1 syz, C error 135 1054d 1333d 23/29 1039d a3ab55746612 f2fs: flush inode if atomic file is aborted
KASAN: use-after-free Read in qd_unlock (2) gfs2 19 syz, C error done 5 1093d 1322d 23/29 1039d f66af88e3321 gfs2: Stop using gfs2_make_fs_ro for withdraw
WARNING in kvm_arch_vcpu_ioctl_run (5) kvm-x86 -1 syz, C error 343 1073d 1161d 23/29 1039d 26a0652cb453 KVM: x86: Disallow KVM_SET_SREGS{2} if incoming CR0 is invalid
UBSAN: shift-out-of-bounds in extAlloc jfs -1 syz, C error 6605 1060d 1420d 23/29 1039d 0225e10972fa jfs: validate max amount of blocks before allocation.
WARNING in __gup_longterm_locked mm -1 syz, C error 90 1138d 1139d 23/29 1039d 6cd06ab12d1a gup: make the stack expansion warning a bit more targeted
KASAN: slab-use-after-free Write in mini_qdisc_pair_swap net 22 syz, C error 76 1088d 1242d 23/29 1052d 84ad0af0bccd net/sched: qdisc_destroy() old ingress and clsact Qdiscs before grafting c7cfbd115001 net/sched: sch_ingress: Only create under TC_H_INGRESS
KASAN: slab-out-of-bounds Read in extract_iter_to_sg crypto 17 syz, C done 13 1156d 1161d 23/29 1052d 4380499218c6 crypto: Fix af_alg_sendmsg(MSG_SPLICE_PAGES) sglist limit b6d972f68983 crypto: af_alg/hash: Fix recvmsg() after sendmsg(MSG_MORE)
memory leak in htc_connect_service wireless 3 syz, C 1 1188d 1269d 23/29 1053d 061b0cb9327b wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes
general protection fault in shash_async_final crypto 2 syz, C done 13 1153d 1161d 23/29 1053d b6d972f68983 crypto: af_alg/hash: Fix recvmsg() after sendmsg(MSG_MORE)
WARNING in blkdev_put (3) block -1 syz, C done 377 1152d 1156d 23/29 1053d c576c4bf9ecf reiserfs: fix blkdev_put() warning from release_journal_dev()
WARNING in iommufd_test_check_pages iommu -1 syz, C error 4 1152d 1203d 23/29 1053d 9883c7f84053 mm/gup: do not return 0 from pin_user_pages_fast() for bad args
possible deadlock in static_key_slow_inc (3) cgroups 4 syz, C done 6387 1117d 1165d 23/29 1053d f0cc749254d1 cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex in freezer_css_{online,offline}()
WARNING in sock_i_ino net -1 syz, C error 22 1146d 1150d 23/29 1053d 25a9c8a4431c netlink: Add __sock_i_ino() for __netlink_diag_dump().
INFO: trying to register non-static key in skb_dequeue (2) rdma -1 syz error 123 1157d 1201d 23/29 1053d 2a62b6210ce8 RDMA/rxe: Fix the use-before-initialization error of resp_pkts
kernel BUG in assertfail (2) btrfs -1 syz, C done done 162 1158d 1420d 23/29 1053d 745806fb4554 btrfs: do not ASSERT() on duplicated global roots
general protection fault in crypto_shash_final crypto 2 syz, C done 2 1164d 1161d 23/29 1053d b6d972f68983 crypto: af_alg/hash: Fix recvmsg() after sendmsg(MSG_MORE)
general protection fault in shash_async_update crypto 2 syz, C done done 12 1153d 1150d 23/29 1053d b6d972f68983 crypto: af_alg/hash: Fix recvmsg() after sendmsg(MSG_MORE)
KASAN: stack-out-of-bounds Read in ip6mr_ioctl net 21 syz, C done 192 1151d 1157d 23/29 1053d 3a4f0edbb793 ipv6: fix a typo in ip6mr_sk_ioctl()
WARNING in btf_type_id_size (2) bpf -1 syz, C error 8 1149d 1180d 23/29 1053d e6c2f594ed96 bpf: Silence a warning in btf_type_id_size()
WARNING: bad unlock balance in bpf bpf 4 syz, C done 12 1178d 1178d 23/29 1053d 4266f41feaee bpf: Fix bad unlock balance on freeze_mutex
general protection fault in shash_ahash_update crypto 2 syz, C done done 5 1154d 1154d 23/29 1053d b6d972f68983 crypto: af_alg/hash: Fix recvmsg() after sendmsg(MSG_MORE)
WARNING in blkdev_get_by_dev block -1 syz, C done 45 1152d 1156d 23/29 1053d 985958b8584c block: fix wrong mode for blkdev_get_by_dev() from disk_scan_partitions()
inconsistent lock state in lru_gen_rotate_memcg mm 4 syz, C 61 1143d 1154d 23/29 1053d 814bc1de03ea mm/mglru: make memcg_lru->lock irq safe
INFO: trying to register non-static key in skb_queue_tail wireless -1 syz, C unreliable done 171 1144d 2246d 23/29 1053d 061b0cb9327b wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes
kernel BUG in ip6gre_header net -1 syz, C 5 1089d 1159d 23/29 1053d 9eed321cde22 net: lapbether: only support ethernet devices
WARNING in unreserve_psock net -1 syz, C done 2816 1152d 1160d 23/29 1053d 9f8d0dc0ec4a kcm: Fix unnecessary psock unreservation.
WARNING in btrfs_split_ordered_extent btrfs -1 syz, C done 5 1161d 1182d 23/29 1053d 7833b865953c btrfs: fix iomap_begin length for nocow writes
general protection fault in splice_to_socket fs 2 syz, C done 4 1158d 1161d 23/29 1053d ca2d49f77ce4 splice, net: Fix splice_to_socket() to handle pipe bufs larger than a page
KASAN: null-ptr-deref Write in get_block (2) fs 12 syz, C error 11 1148d 1182d 23/29 1053d ea2b62f30589 fs/sysv: Null check to prevent null-ptr-deref bug
WARNING: refcount bug in fib6_nh_init net 13 syz, C done 45 1152d 1158d 23/29 1053d 3515440df461 ipv6: also use netdev_hold() in ip6_route_check_nh()
WARNING in nilfs_btree_assign nilfs -1 syz, C error 799 1118d 1421d 23/29 1053d 679bd7ebdd31 nilfs2: fix buffer corruption due to concurrent device reads
general protection fault in shash_async_export crypto 2 syz, C done 25 1155d 1161d 23/29 1053d b6d972f68983 crypto: af_alg/hash: Fix recvmsg() after sendmsg(MSG_MORE)
KMSAN: uninit-value in ath9k_wmi_ctrl_rx wireless 7 syz, C 45 1137d 1259d 23/29 1053d f24292e82708 wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx
general protection fault in nilfs_clear_dirty_page nilfs 2 syz, C done 15 1160d 1394d 23/29 1053d 782e53d0c144 nilfs2: prevent general protection fault in nilfs_clear_dirty_page()
INFO: task hung in btrfs_sync_file (2) btrfs 1 syz, C error 5 1176d 1172d 23/29 1053d 745806fb4554 btrfs: do not ASSERT() on duplicated global roots
KASAN: stack-out-of-bounds Read in skb_splice_from_iter net 17 syz, C done 64 1153d 1161d 23/29 1053d 5a6f6873606e ip, ip6: Fix splice to raw and ping sockets
WARNING in bpf_verifier_vlog bpf -1 syz, C inconclusive 6 1201d 1437d 23/29 1053d cff36398bd4c bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log
general protection fault in skb_queue_tail (3) afs 19 syz, C inconclusive done 9 1171d 1404d 23/29 1053d 061b0cb9327b wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes
KASAN: slab-out-of-bounds Read in taprio_dequeue_from_txq net 17 syz error 4 1167d 1192d 23/29 1053d be3618d96510 net/sched: taprio: fix slab-out-of-bounds Read in taprio_dequeue_from_txq
possible deadlock in scheduler_tick (2) ntfs3 4 syz, C 10 1168d 1184d 23/29 1053d 726ccdba1521 kasan,kmsan: remove __GFP_KSWAPD_RECLAIM usage from kasan/kmsan
WARNING in scm_recv net -1 syz, C done 8 1139d 1143d 23/29 1053d 603fc57ab70c af_unix: Skip SCM_PIDFD if scm->pid is NULL.
general protection fault in cryptd_hash_export crypto 2 syz, C done done 12 1153d 1161d 23/29 1053d b6d972f68983 crypto: af_alg/hash: Fix recvmsg() after sendmsg(MSG_MORE)
KASAN: stack-out-of-bounds Read in ipmr_ioctl net 21 syz, C done 208 1151d 1157d 23/29 1053d 634236b34d7a net: remove sk_is_ipmr() and sk_is_icmpv6() helpers
general protection fault in crypto_shash_finup crypto 2 syz, C done 6 1154d 1161d 23/29 1053d b6d972f68983 crypto: af_alg/hash: Fix recvmsg() after sendmsg(MSG_MORE)
possible deadlock in quotactl_fd ext4 4 syz, C error done 141 1143d 1223d 23/29 1095d 949f95ff39bf ext4: fix lockdep warning when enabling MMP
possible deadlock in btrfs_search_slot btrfs 4 syz, C error done 188 1103d 1378d 23/29 1102d b740d8061669 btrfs: free btrfs_path before copying root refs to userspace
WARNING in class_register usb -1 syz, C done 10 1234d 1233d 23/29 1102d f326ea63ecc6 driver core: class: fix slab-use-after-free Read in class_register()
KASAN: use-after-free Write in j1939_sock_pending_del can 22 syz done error 17 2464d 2476d 23/29 1102d fd81ebfe7975 can: j1939: socket: rework socket locking for j1939_sk_release() and j1939_sk_sendmsg()
BUG: soft lockup in addrconf_rs_timer (2) net 1 syz, C 51 1152d 1173d 23/29 1139d cd2b8113c2e8 net/sched: fq_pie: ensure reasonable TCA_FQ_PIE_QUANTUM values
INFO: task hung in sync_inodes_sb (4) nilfs 1 syz, C done inconclusive 345 1140d 2094d 23/29 1139d 92c5d1b860e9 nilfs2: reject devices with insufficient block count
kernel BUG in nilfs_btnode_create_block nilfs -1 syz, C 8 1185d 1392d 23/29 1139d 2f012f2baca1 nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key()
WARNING in nilfs_segctor_do_construct (2) nilfs -1 syz, C error 3 1191d 1189d 23/29 1139d fee5eaecca86 nilfs2: fix possible out-of-bounds segment allocation in resize ioctl
WARNING in __ext4fs_dirhash ext4 -1 syz, C done 25 1193d 1194d 22/29 1142d 4b3cb1d108bf ext4: improve error handling from ext4_dirhash()
KASAN: user-memory-access Write in zram_slot_lock block 21 syz, C done 3 1182d 1182d 22/29 1142d 3eb96946f0be block: make bio_check_eod work for zero sized devices
kernel BUG in btrfs_exclop_balance (2) btrfs -1 syz, C error 8 1168d 1270d 22/29 1142d ac868bc9d136 btrfs: fix assertion of exclop condition when starting balance
WARNING: locking bug in ext4_xattr_inode_iget ext4 4 syz, C error 23 1165d 1196d 22/29 1142d 2bc7e7c1a3bc ext4: disallow ea_inodes with extended attributes
possible deadlock in ext4_xattr_get ext4 4 syz, C inconclusive 3 1197d 1470d 22/29 1142d b3e6bcb94590 ext4: add EA_INODE checking to ext4_iget()
WARNING in dlfb_submit_urb/usb_submit_urb (2) fbdev usb -1 syz, C 2 1190d 1186d 22/29 1142d ed9de4ed3987 fbdev: udlfb: Fix endpoint check
INFO: task hung in __sync_dirty_buffer ext4 1 syz, C inconclusive error 832 1161d 1810d 22/29 1142d f4ce24f54d9c ext4: fix deadlock when converting an inline directory in nojournal mode
possible deadlock in ext4_multi_mount_protect ext4 4 syz, C 584 1142d 1227d 22/29 1142d 949f95ff39bf ext4: fix lockdep warning when enabling MMP
general protection fault in __aria_aesni_avx_gfni_crypt_16way crypto 2 syz, C 49 1180d 1196d 22/29 1142d 6ab39f99927e crypto: x86/aria - Use 16 byte alignment for GFNI constant vectors
WARNING: locking bug in ext4_xattr_inode_update_ref ext4 4 syz, C error 4 1186d 1313d 22/29 1142d b928dfdcb27d ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find()
possible deadlock in ext4_setattr ext4 4 syz, C done 7 1191d 1310d 22/29 1142d b3e6bcb94590 ext4: add EA_INODE checking to ext4_iget()
general protection fault in gfs2_evict_inode (2) gfs2 10 syz, C error done 134 1191d 1511d 22/29 1142d 504a10d9e46b gfs2: Don't deref jdesc in evict
WARNING in usbtmc_ioctl/usb_submit_urb (2) usb -1 syz, C done 3 1203d 1215d 22/29 1142d 94d25e912898 USB: usbtmc: Fix direction for 0-length ioctl control messages
KASAN: slab-use-after-free Read in nilfs_load_inode_block nilfs 19 syz, C error 18 1144d 1197d 22/29 1142d 9b5a04ac3ad9 nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode()
KASAN: slab-out-of-bounds Read in get_max_inline_xattr_value_size ext4 19 syz, C 21 1197d 1235d 22/29 1142d 2220eaf90992 ext4: add bounds checking in get_max_inline_xattr_value_size()
KASAN: slab-out-of-bounds Read in ext4_group_desc_csum ext4 19 syz, C error 26 1190d 1291d 22/29 1142d 4f04351888a8 ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
kernel BUG in ext4_get_group_info ext4 -1 syz, C error 237 1190d 1823d 22/29 1142d 5354b2af3406 ext4: allow ext4_get_group_info() to fail 463808f237cf ext4: remove a BUG_ON in ext4_mb_release_group_pa()
WARNING in ext4_xattr_block_set (2) ext4 -1 syz, C error 32 1192d 1257d 22/29 1142d a44be64bbecb ext4: don't clear SB_RDONLY when remounting r/w until quota is re-enabled
WARNING in kvfree (2) ext4 -1 syz, C 47 1198d 1250d 22/29 1142d b87c7cdf2bed ext4: fix invalid free tracking in ext4_xattr_move_to_block()
possible deadlock in sco_conn_del bluetooth 4 syz, C done done 279 1188d 1592d 22/29 1142d a2ac591cb4d8 Bluetooth: Fix UAF in hci_conn_hash_flush again
KMSAN: uninit-value in xfrm_state_find net 17 syz, C error done 215 1185d 2984d 22/29 1142d 3d776e31c841 xfrm: Reject optional tunnel/BEET mode templates in outbound policies
kernel BUG in workingset_activation (2) kernel -1 syz, C inconclusive done 40 1178d 1370d 22/29 1142d 0143d148d1e8 usb: usbfs: Enforce page requirements for mmap
memory leak in class_create usb 3 syz, C 9 1185d 1203d 22/29 1142d ddaf098ea779 driver core: class: properly reference count class_dev_iter()
memory leak in ext4_expand_extra_isize_ea ext4 3 syz, C 2 1196d 1264d 22/29 1142d b87c7cdf2bed ext4: fix invalid free tracking in ext4_xattr_move_to_block()
possible deadlock in ext4_xattr_inode_iget ext4 4 syz, C done 351 1151d 1309d 22/29 1142d aff3bea95388 ext4: add lockdep annotations for i_data_sem for ea_inode's
general protection fault in soft_cursor fbdev 11 syz, C 3 1177d 1177d 22/29 1142d d78bd6cc6827 fbcon: Fix null-ptr-deref in soft_cursor
KASAN: slab-out-of-bounds Read in xfs_getbmap xfs 17 syz, C done 5 1202d 1203d 22/29 1142d 1bba82fe1afa xfs: fix negative array access in xfs_getbmap
kernel BUG in btrfs_csum_one_bio btrfs -1 syz, C done 4 1221d 1299d 22/29 1142d 806570c0bb7b btrfs: handle memory allocation failure in btrfs_csum_one_bio
kernel BUG in btrfs_ioctl_add_dev btrfs -1 syz, C error done 46 1197d 1273d 22/29 1142d ac868bc9d136 btrfs: fix assertion of exclop condition when starting balance
general protection fault in erofs_bread (2) erofs 2 syz, C done 7 1177d 1187d 22/29 1142d 0a17567b4a85 erofs: fix null-ptr-deref caused by erofs_xattr_prefixes_init erofs: fix null-ptr-deref caused by erofs_xattr_prefixes_init
possible deadlock in ext4_xattr_set_handle (3) ext4 4 syz, C 451 1142d 1300d 22/29 1142d b3e6bcb94590 ext4: add EA_INODE checking to ext4_iget()
KASAN: slab-use-after-free Read in hci_conn_hash_flush bluetooth 22 syz, C error 3511 1168d 1261d 22/29 1142d a2ac591cb4d8 Bluetooth: Fix UAF in hci_conn_hash_flush again ca1fd42e7dbf Bluetooth: Fix potential double free caused by hci_conn_unlink
kernel BUG in page_table_check_clear mm -1 syz, C error 17 1167d 1200d 22/29 1142d 44d0fb387b53 mm: page_table_check: Ensure user pages are not slab pages 0143d148d1e8 usb: usbfs: Enforce page requirements for mmap
memory leak in hwsim_new_radio_nl wireless 3 syz, C 1 1193d 1192d 22/29 1142d 098abbd48ec1 mac80211_hwsim: fix memory leak in hwsim_new_radio_nl
WARNING in mb_find_extent ext4 -1 syz, C error error 135 1284d 1325d 22/29 1142d fa08a7b61dff ext4: fix WARNING in mb_find_extent
kernel BUG in vmf_insert_pfn_prot -1 syz, C done done 1933 1190d 1794d 22/29 1159d a5b44c4adb16 drm/fbdev-generic: Always use shadow buffering
WARNING in __usbnet_read_cmd/usb_submit_urb usb -1 syz, C error 5 1287d 1318d 22/29 1161d 93fd565919cf net: USB: Fix wrong-direction WARNING in plusb.c net: USB: Fix wrong-direction WARNING in plusb.c
WARNING in iomap_iter iomap -1 syz, C inconclusive 141 1315d 1742d 22/29 1161d 6acd87d50998 erofs/zmap.c: Fix incorrect offset calculation c490a0b5a4f3 loop: Check for overflow while configuring loop
KASAN: slab-out-of-bounds Write in udf_find_entry udf 21 syz, C error 19 1375d 1406d 22/29 1161d c8af247de385 udf: Fix a slab-out-of-bounds write bug in udf_find_entry() 1c80afa04db3 udf: Implement searching for directory entry using new iteration code
memory leak in tcf_pedit_init net 3 syz, C 1 1205d 1205d 22/29 1165d 1b483d9f5805 net/sched: act_pedit: free pedit keys on bail from offset check
KMSAN: kernel-infoleak in iommufd_vfio_ioctl iommu 9 syz, C 15 1267d 1280d 22/29 1165d b3551ead6163 iommufd: Make sure to zero vfio_iommu_type1_info before copying to user
KASAN: wild-memory-access Write in v9fs_get_acl v9fs 21 syz, C 7 1224d 1258d 22/29 1165d 707823e7f22f 9P FS: Fix wild-memory-access write in v9fs_get_acl
WARNING in sisusb_send_bulk_msg/usb_submit_urb usb -1 syz, C unreliable 418 1216d 2602d 22/29 1165d df05a9b05e46 USB: sisusbvga: Add endpoint checks
general protection fault in pause_prepare_data net 2 syz, C error 34 1299d 1300d 22/29 1165d f5be9caf7bf0 net: ethtool: fix NULL pointer dereference in pause_prepare_data()
WARNING in udf_expand_dir_adinicb udf -1 syz, C done 2 1288d 1284d 22/29 1165d df97f64dfa31 udf: Avoid directory type conversion failure due to ENOMEM
memory leak in vfs_tmpfile_open overlayfs 3 syz, C 14 1302d 1403d 22/29 1165d baabaa505563 ovl: fix tmpfile leak
kernel BUG in find_mergeable_anon_vma mm -1 syz, C error 4 1261d 1257d 22/29 1165d 3dd443254941 mm: enable maple tree RCU mode by default
unregister_netdevice: waiting for DEV to become free (7) 2 syz, C inconclusive 20422 1165d 1367d 22/29 1165d 266e9b3475ba RDMA/siw: Remove namespace check from siw_netdev_event()
UBSAN: shift-out-of-bounds in fbcon_set_font fbdev -1 syz, C error 3 1295d 1295d 22/29 1165d 2b09d5d36498 fbcon: Check font dimension limits
KASAN: use-after-free Write in gadgetfs_kill_sb usb 22 syz, C error 5 1308d 1342d 22/29 1165d d18dcfe9860e USB: gadgetfs: Fix race between mounting and unmounting
possible deadlock in jbd2_log_wait_commit ext4 4 syz, C done 429 1241d 1265d 22/29 1165d 3c92792da850 ext4: Fix deadlock during directory rename
possible deadlock in static_key_slow_inc (2) cgroups 4 syz, C error 32622 1165d 1383d 22/29 1165d 57dcd64c7e03 cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex
INFO: task hung in rfcomm_process_sessions (2) bluetooth 1 syz, C error done 14 1327d 1601d 22/29 1165d 1d80d57ffcb5 Bluetooth: Fix possible deadlock in rfcomm_sk_state_change
WARNING: proc registration bug in clusterip_tg_check (3) netfilter -1 syz, C done inconclusive 9 1304d 1838d 22/29 1165d 9db5d918e2c0 netfilter: ip_tables: remove clusterip target
KASAN: use-after-free Write in nr_release hams 22 syz, C done error 1784 1179d 2452d 22/29 1165d 611792920925 netrom: Fix use-after-free caused by accept on already connected socket
KASAN: use-after-free Read in do_csum net 19 syz, C 72 1167d 1333d 22/29 1165d 1ac885574470 inet: control sockets should not use current thread task_frag
WARNING in ext4_update_inline_data ext4 -1 syz, C error 21 1261d 1325d 22/29 1165d 2b96b4a5d944 ext4: fix WARNING in ext4_update_inline_data
KMSAN: uninit-value in ethnl_set_linkmodes (2) net 7 syz, C 40 1198d 1504d 22/29 1165d 9ad685dbfe7e ethtool: Fix uninitialized number of lanes
KASAN: null-ptr-deref Read in ida_free (3) fs 11 syz, C error 4 1239d 1236d 22/29 1165d cb2239c198ad fs: drop peer group ids under namespace lock
possible deadlock in ext4_bmap ext4 4 syz, C error 78083 1165d 1469d 22/29 1165d 62913ae96de7 ext4, jbd2: add an optimized bmap for the journal inode
WARNING in put_pmu_ctx perf -1 syz, C error 66 1282d 1336d 22/29 1165d 4f64a6c9f6f1 perf: Fix perf_event_pmu_context serialization
WARNING in htb_destroy net -1 syz, C done 2 1283d 1283d 22/29 1165d 4fab64126891 net/sched: fix error recovery in qdisc_create()
KASAN: use-after-free Read in xfs_btree_lookup_get_block xfs 19 syz, C error done 7 1229d 1326d 22/29 1165d 22ed903eee23 xfs: verify buffer contents when we skip log replay
general protection fault in ethnl_set_plca_cfg net 2 syz, C done 37 1308d 1309d 22/29 1165d 28dbf774bc87 plca.c: fix obvious mistake in checking retval
memory leak in tcindex_set_parms (3) net 3 syz, C 1 1353d 1349d 22/29 1165d 8c710f75256b net/sched: Retire tcindex classifier
WARNING in hfsplus_cat_write_inode hfs -1 syz, C error 141 1193d 1359d 22/29 1165d 81b21c0f0138 fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()
INFO: rcu detected stall in ext4_file_write_iter (6) ext4 1 syz, C error 8 1222d 1285d 22/29 1165d d125d1349abe alarmtimer: Prevent starvation by small intervals and SIG_IGN
KASAN: null-ptr-deref Write in udf_write_fi udf 21 syz, C inconclusive done 51 1297d 1420d 22/29 1165d e9109a92d2a9 udf: Convert udf_rename() to new directory iteration code
WARNING in hfs_write_inode hfs -1 syz, C done 3 1322d 1320d 22/29 1165d cb7a95af78d2 hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling
INFO: task hung in tcindex_partial_destroy_work 1 syz, C done unreliable 84 2012d 2148d 22/29 1165d 8c710f75256b net/sched: Retire tcindex classifier
general protection fault in nl802154_trigger_scan wpan 8 syz, C error 31 1243d 1262d 22/29 1165d 02f18662f6c6 ieee802154: Prevent user from crashing the host
BUG: unable to handle kernel NULL pointer dereference in __build_skb_around bpf net 10 syz, C done 29 1245d 1250d 22/29 1165d e5995bc7e2ba bpf, test_run: fix crashes due to XDP frame overwriting/corruption
KASAN: null-ptr-deref Read in filemap_fault mm udf 11 syz, C done 112 1193d 1206d 22/29 1165d 38a55db9877c filemap: Handle error return from __filemap_get_folio()
WARNING in udf_free_inode udf -1 syz, C error 19 1276d 1410d 22/29 1165d 85a37983ec69 udf: Detect system inodes linked into directory hierarchy
INFO: task hung in do_user_addr_fault (3) ntfs3 1 syz, C 32 1248d 1323d 22/29 1165d 0226635c304c fs/ntfs3: don't hold ni_lock when calling truncate_setsize()
general protection fault in virtio_transport_purge_skbs net 2 syz, C done 3 1242d 1242d 22/29 1165d b465518dc27d vsock/loopback: use only sk_buff_head.lock to protect the packet queue
WARNING in do_symlinkat ntfs3 -1 syz, C error done 66 1169d 1333d 22/29 1165d 267a36ba30a7 fs/ntfs3: Remove noacsrules
KASAN: use-after-free Read in ext4_find_extent (2) ext4 19 syz, C error 2 1200d 1324d 22/29 1165d 835659598c67 ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline
general protection fault in nilfs_btree_insert nilfs 2 syz, C error 2 1330d 1327d 22/29 1165d 7633355e5c7f nilfs2: fix general protection fault in nilfs_btree_insert()
KMSAN: uninit-value in ondemand_readahead fs mm 7 syz, C 221 1263d 1426d 22/29 1165d 3e35102666f8 fs/cramfs/inode.c: initialize file_ra_state
WARNING in j1939_session_deactivate_activate_next can -1 syz, C error done 502 1230d 1636d 22/29 1165d d0553680f94c can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate
WARNING: fbcon: Driver 'vkmsdrmfb' missed to adjust virtual screen size (0x0 vs. 64x768) -1 syz, C unreliable error 24 1498d 1497d 22/29 1165d 1935f0deb611 drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
WARNING in cleanup_net (2) net -1 syz, C error 72 1200d 1227d 22/29 1165d 9744d2bf1976 smc: Fix use-after-free in tcp_write_timer_handler().
KASAN: use-after-free Read in cfusbl_device_notify net 19 syz, C done 341 1257d 1404d 22/29 1165d 9781e98a9711 net: caif: Fix use-after-free in cfusbl_device_notify()
KMSAN: uninit-value in kalmia_send_init_packet usb 7 syz, C 2 1294d 1293d 22/29 1165d c68f345b7c42 net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
WARNING in ip6erspan_tunnel_xmit (2) net -1 syz, C unreliable 5 1245d 1245d 22/29 1165d 8e50ed774554 erspan: do not use skb_mac_header() in ndo_start_xmit()
KMSAN: uninit-value in qrtr_tx_resume net arm-msm 7 syz, C 8 1238d 1299d 22/29 1165d 6417070918de net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume()
general protection fault in __d_add ntfs3 10 syz, C error 16 1351d 1406d 22/29 1165d 254e69f284d7 fs/ntfs3: Fix null-ptr-deref on inode->i_op in ntfs_lookup()
WARNING in pegasus_open/usb_submit_urb input usb -1 syz, C 7 1246d 2256d 22/29 1165d b3d80fd27a3c Input: pegasus-notetaker - check pipe type when probing
possible deadlock in j1939_sk_errqueue can 4 syz, C unreliable 227 1237d 1773d 22/29 1165d d1366b283d94 can: j1939: prevent deadlock by moving j1939_sk_errqueue()
KASAN: use-after-free Read in __update_extent_tree_range f2fs 19 syz, C done 9 1277d 1324d 22/29 1165d a46bebd502fe f2fs: synchronize atomic write aborts
WARNING in nla_get_range_unsigned (2) net -1 syz, C done 433 1241d 1276d 22/29 1165d b20b8aec6ffc devlink: Fix netdev notifier chain corruption
KASAN: slab-out-of-bounds Read in indx_insert_into_buffer ntfs3 17 syz, C error 2 1351d 1350d 22/29 1165d b8c44949044e fs/ntfs3: Fix OOB read in indx_insert_into_buffer
WARNING: kmalloc bug in btrfs_ioctl_send btrfs -1 syz, C done 53 1286d 1356d 22/29 1165d 33e17b3f5ab7 btrfs: send: limit number of clones and allocated memory size
WARNING in shark_write_reg/usb_submit_urb usb -1 syz, C error 63 1214d 2588d 22/29 1165d 76e31045ba03 media: radio-shark: Add endpoint checks
BUG: unable to handle kernel paging request in atm_tc_destroy net 8 syz, C error 3 1284d 1283d 22/29 1165d 4fab64126891 net/sched: fix error recovery in qdisc_create()
kernel BUG in ip_frag_next net -1 syz, C done 9 1299d 1306d 22/29 1165d f72ff8b81ebc net: fix kfree_skb_list use of skb_mark_not_on_list
WARNING in xfs_qm_dqget_cache_insert xfs -1 syz, C error 123 1191d 1363d 22/29 1165d 4b827b3f305d xfs: remove WARN when dquot cache insertion fails
KMSAN: kernel-infoleak in _copy_to_iter (8) mm 21 syz, C 21180 1165d 1259d 22/29 1165d 8222d5910dae xfrm: Zero padding when dumping algos and encap
WARNING in io_cqring_event_overflow io-uring -1 syz, C 7 1305d 1312d 22/29 1165d 544d163d659d io_uring: lock overflowing for IOPOLL
WARNING: locking bug in inet_autobind net 4 syz, C done error 103 1326d 2649d 22/29 1165d 0b2c59720e65 l2tp: close all race conditions in l2tp_tunnel_register()
WARNING in rmqueue erofs -1 syz, C error 2 1233d 1356d 22/29 1165d cc4efd3dd2ac erofs: stop parsing non-compact HEAD index if clusterofs is invalid
BUG: scheduling while atomic in msleep net 5 syz, C done 40 1298d 1307d 22/29 1165d ea4fdbaa2f77 net/sched: sch_taprio: do not schedule in taprio_reset()
WARNING in __dev_queue_xmit (2) net -1 syz, C 76 1197d 1269d 22/29 1165d 693aa2c0d9b6 ila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping()
memory leak in ath9k_hif_usb_rx_cb wireless 3 syz, C 1 1340d 1336d 22/29 1165d 0af54343a762 wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails
general protection fault in bpf_struct_ops_link_create bpf net 2 syz, C done 17 1239d 1241d 22/29 1165d 55fbae05476d bpf: Check IS_ERR for the bpf_map_get() return value
WARNING: can't access registers at entry_SYSCALL_64_after_hwframe -1 syz, C 15 1272d 1277d 22/29 1165d 00c8f01c4e84 objtool: Fix ORC 'signal' propagation
INFO: task hung in find_inode_fast ext4 1 syz, C error 28 1167d 1316d 22/29 1165d 0f7bfd6f8164 ext4: fix task hung in ext4_xattr_delete_inode
memory leak in io_submit_sqes (4) io-uring 3 syz, C 1 1316d 1315d 22/29 1165d febb985c06cb io_uring/poll: add hash if ready poll request can't complete inline
WARNING in hfsplus_cat_read_inode hfs -1 syz, C error 599 1189d 1354d 22/29 1165d 81b21c0f0138 fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()
KASAN: slab-out-of-bounds Read in udf_get_filelongad udf 17 syz, C 2 1344d 1343d 22/29 1165d 53cafe1d6d8e udf: Do not bother merging very long extents
BUG: unable to handle kernel NULL pointer dereference in ni_write_inode ntfs3 10 syz, C error 596 1191d 1423d 22/29 1165d 8dae4f6341e3 fs/ntfs3: Fix NULL dereference in ni_write_inode db2a3cc6a348 fs/ntfs3: Fix NULL pointer dereference in 'ni_write_inode'
KASAN: use-after-free Read in put_pmu_ctx perf 19 syz, C 51 1320d 1336d 22/29 1165d a551844e345b perf: Fix use-after-free in error path
KASAN: vmalloc-out-of-bounds Read in __ebt_unregister_table bridge netfilter 17 syz, C error 4 1276d 1276d 22/29 1165d e58a171d35e3 netfilter: ebtables: fix table blob use-after-free
WARNING: refcount bug in qrtr_recvmsg (2) arm-msm net 13 syz, C error 2 1249d 1243d 22/29 1165d 44d807320000 net: qrtr: Fix a refcount bug in qrtr_recvmsg()
WARNING in remove_proc_entry (5) scsi -1 syz, C 158 1248d 1290d 22/29 1165d 2172e84ea00b SUNRPC: Fix occasional warning when destroying gss_krb5_enctypes
possible deadlock in __jbd2_log_wait_for_space ext4 4 syz, C error 34993 1221d 1469d 22/29 1165d 62913ae96de7 ext4, jbd2: add an optimized bmap for the journal inode
WARNING in split_huge_page_to_list (2) mm -1 syz, C error 2334 1190d 1454d 22/29 1165d 4737edbbdd49 mm/huge_memory.c: warn with pr_warn_ratelimited instead of VM_WARN_ON_ONCE_FOLIO
KASAN: slab-use-after-free Read in mas_next_entry mm 19 syz error 3 1227d 1230d 22/29 1165d f4e9e0e69468 mm/mempolicy: fix use-after-free of VMA iterator
UBSAN: shift-out-of-bounds in blkstol2 jfs -1 syz, C error 2 1384d 1384d 22/29 1165d fad376fce0af fs/jfs: fix shift exponent db_agl2size negative
WARNING in nilfs_dat_prepare_end nilfs -1 syz, C error 288 1259d 1413d 22/29 1165d 5124a0a54985 nilfs2: replace WARN_ONs for invalid DAT metadata block requests
general protection fault in cache_first_page squashfs 10 syz, C error 4 1305d 1318d 22/29 1165d f65c4bbbd682 Squashfs: fix handling and sanity checking of xattr_ids count 72e544b1b283 squashfs: harden sanity check in squashfs_read_xattr_id_table
general protection fault in jhash wireless 2 syz, C done done 15 1214d 1233d 22/29 1165d 2bef4d1fb8b3 wifi: mac80211_hwsim: fix potential NULL deref in hwsim_pmsr_report_nl()
general protection fault in mark_buffer_dirty_inode (2) udf 2 syz, C 32 1198d 1356d 22/29 1165d e9109a92d2a9 udf: Convert udf_rename() to new directory iteration code
WARNING in blkdev_put (2) block -1 syz, C unreliable 250 1241d 1269d 22/29 1165d 428913bce1e6 block: fix wrong mode for blkdev_put() from disk_scan_partitions()
WARNING: refcount bug in nr_release (4) hams 13 syz, C 24 1280d 1584d 22/29 1165d 409db27e3a2e netrom: Fix use-after-free of a listening socket.
KASAN: use-after-free Read in hfsplus_release_folio hfs 19 syz, C error 23 1263d 1338d 22/29 1165d 07db5e247ab5 fs: hfsplus: fix UAF issue in hfsplus_put_super
memory leak in __proc_create scsi usb 3 syz 1 1258d 1258d 22/29 1165d be03df3d4bfe scsi: core: Fix a procfs host directory removal regression
general protection fault in pn533_out_complete nfc 2 syz, C error 15 1296d 1310d 22/29 1165d 484b7059796e nfc: pn533: initialize struct pn533_out_arg properly
general protection fault in __xfs_free_extent xfs 10 syz, C error done 17 1219d 1337d 22/29 1165d b2ccab3199aa xfs: pass per-ag references to xfs_free_extent
INFO: task hung in lock_mount nilfs 1 syz, C error error 1238 1215d 3030d 22/29 1165d a6a491c04888 nilfs2: fix infinite loop in nilfs_mdt_get_block()
kernel BUG in hpage_collapse_scan_file mm -1 syz, C unreliable 3 1217d 1255d 22/29 1165d 2ce0bdfebc74 mm: khugepaged: fix kernel BUG in hpage_collapse_scan_file()
INFO: task hung in nfnetlink_rcv_msg (3) netfilter 1 syz, C done 5 1346d 1357d 22/29 1165d 5e29dc36bd5e netfilter: ipset: Rework long task execution when adding/deleting entries
WARNING in io_sync_cancel io-uring -1 syz, C error 3 1338d 1334d 22/29 1165d 23fffb2f09ce io_uring/cancel: re-grab ctx mutex after finishing wait
WARNING in io_cqring_overflow_flush io-uring -1 syz, C 2 1338d 1334d 22/29 1165d 52ea806ad983 io_uring: finish waiting before flushing overflow entries
KASAN: slab-out-of-bounds Write in copy_verifier_state bpf 21 syz, C error done 825 1319d 1336d 22/29 1165d 45435d8da71f bpf: Always use maximal size for copy_array()
INFO: trying to register non-static key in net_free net -1 syz error 17982 1272d 1285d 22/29 1165d 6e77a5a4af05 net: initialize net->notrefcnt_tracker earlier
BUG: unable to handle kernel paging request in clear_user_rep_good iomap 8 syz error done 2 1234d 1290d 22/29 1165d d2c95f9d6802 x86: don't use REP_GOOD or ERMS for user memory clearing
WARNING: suspicious RCU usage in bond_mii_monitor net 4 syz, C 13 1319d 1338d 22/29 1165d 42c7ded0eeac bonding: fix lockdep splat in bond_miimon_commit()
general protection fault in start_transaction btrfs 2 syz, C error 3 1320d 1333d 22/29 1165d b7adbf9ada35 btrfs: fix race between quota rescan and disable leading to NULL pointer deref
WARNING in mbind_range mm -1 syz, C error 3 1315d 1315d 22/29 1165d 17dc622c7b0f maple_tree: fix mas_prev() and mas_find() state handling
BUG: stack guard page was hit in inet6_release bpf net -1 syz, C done 4 1300d 1349d 22/29 1165d ddce1e091757 bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
memory leak in copy_process (5) kernel 3 syz, C 1 1262d 1258d 22/29 1165d 2aab4b969002 af_unix: fix struct pid leaks in OOB support
possible deadlock in l2tp_tunnel_register (2) net 4 syz, C 153 1259d 1269d 22/29 1165d 0b2c59720e65 l2tp: close all race conditions in l2tp_tunnel_register()
KASAN: slab-use-after-free Read in tcf_action_destroy net 19 syz, C error 32 1192d 1267d 22/29 1165d dfd2f0eb2347 net/sched: flower: fix fl_change() error recovery path
possible deadlock in release_sock net 4 syz, C done 42 1305d 1307d 22/29 1165d b9fb10d131b8 l2tp: prevent lockdep issue in l2tp_tunnel_register()
possible deadlock in tty_port_tty_get serial 4 syz, C 22661 1214d 1416d 22/29 1165d 1007843a9190 mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock
WARNING in j1939_xtp_rx_abort_one -1 syz, C done 379 1301d 1838d 22/29 1165d d0553680f94c can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate
WARNING: suspicious RCU usage in mas_walk kernfs 4 syz, C error 234 1241d 1570d 22/29 1165d 6db504ce55bd mm/ksm: fix race with VMA iteration and mm_struct teardown
memory leak in nfc_genl_se_io net nfc 3 syz, C 1 1280d 1276d 22/29 1165d 25ff6f8a5a3b nfc: fix memory leak of se_io context in nfc_genl_se_io
BUG: bad usercopy in con_font_op hardening mm -1 syz, C done 1 1262d 1262d 22/29 1165d 18365ebf23f3 tty: vt: protect KD_FONT_OP_GET_TALL from unbound access
general protection fault in xpad_probe usb 2 syz, C done 24 1201d 1223d 22/29 1165d 53bea86b5712 Revert "Input: xpad - fix support for some third-party controllers"
BUG: bad usercopy in put_cmsg hardening mm -1 syz, C 3 1280d 1281d 22/29 1165d 2558b8039d05 net: use a bounce buffer for copying skb->mark
general protection fault in tcindex_set_parms net 2 syz, C done 2 1280d 1280d 22/29 1165d 42018a322bd4 net/sched: tcindex: search key must be 16 bits
UBSAN: shift-out-of-bounds in dbAllocBits jfs -1 syz, C error done 4 1273d 1406d 22/29 1165d fad376fce0af fs/jfs: fix shift exponent db_agl2size negative
kernel BUG in fou_build_udp net -1 syz, C 1 1200d 1200d 22/29 1165d c88f8d5cd95f UPSTREAM: sit: update dev->needed_headroom in ipip6_tunnel_bind_dev()
KASAN: use-after-free Read in io_worker_get io-uring 19 syz, C done done 5 1281d 1315d 22/29 1165d e6db6f9398da io_uring/io-wq: only free worker if it was allocated for creation
INFO: task hung in nilfs_segctor_thread nilfs 1 syz, C error 94 1202d 1376d 22/29 1165d 99b9402a36f0 nilfs2: fix underflow in second superblock position calculations
general protection fault in drm_crtc_next_vblank_start dri 2 syz, C done 4 1234d 1231d 22/29 1165d 6f1ccbf07453 drm/vblank: Fix for drivers that do not drm_vblank_init()
memory leak in nr_create (2) hams 3 syz, C 11 1235d 1295d 22/29 1165d 611792920925 netrom: Fix use-after-free caused by accept on already connected socket
kernel BUG in rxrpc_put_call afs net -1 syz, C done 9 1303d 1315d 22/29 1165d 01644a1f98ff rxrpc: Fix wrong error return in rxrpc_connect_call()
kernel BUG in rxrpc_put_peer net afs -1 syz, C 80 1306d 1349d 22/29 1165d 9d35d880e0e4 rxrpc: Move client call connection to the I/O thread 03fc55adf876 rxrpc: Only disconnect calls in the I/O thread
WARNING in nilfs_dat_commit_end nilfs -1 syz, C error 267 1259d 1416d 22/29 1165d 602ce7b8e134 nilfs2: prevent WARNING in nilfs_dat_commit_end()
possible deadlock in freeze_super (2) gfs2 4 syz, C error done 15 1190d 1406d 22/29 1165d b66f723bb552 gfs2: Improve gfs2_make_fs_rw error handling
INFO: task hung in write_cache_pages (2) mm fs 1 syz, C done 36 1193d 1264d 22/29 1165d fb3592c41a44 migrate_pages: fix deadlock in batched migration
KMSAN: uninit-value in vfs_write fs 7 syz, C 3 1288d 1258d 22/29 1165d 2b4c99f7d9a5 can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write
WARNING in _copy_from_iter block tipc -1 syz, C error 32057 1252d 1347d 22/29 1165d 11a4d6f67cf5 tipc: fix kernel warning when sending SYN message
UBSAN: shift-out-of-bounds in dbFindCtl jfs -1 syz, C inconclusive done 45 1265d 1407d 22/29 1165d fad376fce0af fs/jfs: fix shift exponent db_agl2size negative
INFO: rcu detected stall in devlink_nl_cmd_port_get_dumpit net 1 syz 7 1264d 1280d 22/29 1165d b20b8aec6ffc devlink: Fix netdev notifier chain corruption
KASAN: use-after-free Read in io_wq_worker_wake io-uring 19 syz, C done done 1 1282d 1315d 22/29 1165d e6db6f9398da io_uring/io-wq: only free worker if it was allocated for creation
UBSAN: array-index-out-of-bounds in __gfs2_iomap_get gfs2 15 syz, C error 26 1210d 1334d 22/29 1165d cfcdb5bad34f gfs2: Fix inode height consistency check
KASAN: slab-use-after-free Read in class_register usb 19 syz, C done 13 1235d 1233d 22/29 1165d f326ea63ecc6 driver core: class: fix slab-use-after-free Read in class_register()
memory leak in ath9k_hif_usb_firmware_cb wireless 3 syz, C 1591 1309d 2105d 22/29 1165d 9b25e3985477 wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function
WARNING in inet_sock_destruct (3) net -1 syz, C 87 1169d 1271d 22/29 1165d 880ce5f20033 net: avoid skb end_offset change in __skb_unclone_keeptruesize()
KMSAN: uninit-value in ipv6_find_tlv net 7 syz, C 271 1206d 2560d 22/29 1165d ea30388baebc ipv6: Fix an uninit variable access bug in __ip6_make_skb()
WARNING in mark_buffer_dirty (4) bfs nilfs -1 syz, C inconclusive 1152 1165d 1504d 22/29 1165d 28a65b49eb53 nilfs2: do not write dirty data after degenerating to read-only
WARNING in fscrypt_destroy_keyring ext4 fscrypt -1 syz, C 2 1254d 1252d 22/29 1165d ccb820dc7d22 fscrypt: destroy keyring after security_sb_delete()
WARNING in default_device_exit_batch (4) net -1 syz, C error 954 1241d 1367d 22/29 1165d e667d4690986 bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
memory leak in regulatory_hint_core wireless 3 syz, C 2 1364d 1392d 22/29 1165d 399ab7fe0fa0 net: sched: fix memory leak in tcindex_set_parms
WARNING in __udf_add_aext udf -1 syz, C error 170 1168d 1406d 22/29 1165d e9109a92d2a9 udf: Convert udf_rename() to new directory iteration code
BUG: unable to handle kernel NULL pointer dereference in __writepage udf 10 syz, C done 17 1274d 1338d 22/29 1165d 79d3c6dbada4 udf: Convert in-ICB files to use udf_writepages()
KMSAN: kernel-infoleak in copyout (2) net 17 syz, C 6723 1165d 2334d 22/29 1165d 8222d5910dae xfrm: Zero padding when dumping algos and encap
WARNING in ath6kl_htc_pipe_rx_complete usb wireless -1 syz, C error 2008 1204d 2474d 22/29 1165d 75c4a8154cb6 wifi: ath6kl: reduce WARN to dev_dbg() in callback
WARNING in udf_setsize udf -1 syz, C done 24 1168d 1338d 22/29 1165d 256fe4162f8b udf: Do not update file length for failed writes to inline files
kernel BUG in hfs_bnode_put hfs -1 syz, C error 5 1296d 1350d 22/29 1165d a9dc087fd3c4 hfs: fix missing hfs_bnode_get() in __hfs_bnode_create
KASAN: null-ptr-deref Read in __fl_put net 11 syz, C error 16 1247d 1266d 22/29 1165d dfd2f0eb2347 net/sched: flower: fix fl_change() error recovery path
general protection fault in udf_fiiter_write_fi udf 2 syz, C error 2 1312d 1315d 22/29 1165d f950fd052913 udf: Protect rename against modification of moved directory
general protection fault in sctp_outq_tail sctp 8 syz, C error 5 1231d 1243d 22/29 1165d 2584024b2355 sctp: check send stream number after wait_for_sndbuf
WARNING: CPU: NUM PID: NUM at mm/page_alloc.c:LINE get_page_from_freeli mm erofs -1 syz, C error 1 1337d 1333d 22/29 1165d 12724ba38992 erofs: fix kvcalloc() misuse with __GFP_NOFAIL
WARNING in kvm_arch_vcpu_ioctl_run (4) kvm-x86 -1 syz, C error 288 1165d 1249d 22/29 1165d 0dc902267cb3 KVM: x86: Suppress pending MMIO write exits if emulator detects exception
general protection fault in hrtimer_active (5) kernel 2 syz, C error 22 1280d 1284d 22/29 1165d 4fab64126891 net/sched: fix error recovery in qdisc_create()
WARNING in __kernel_read (2) fsverity -1 syz, C error 318 1209d 2150d 22/29 1165d 04839139213c fsverity: reject FS_IOC_ENABLE_VERITY on mode 3 fds
INFO: task hung in extent_write_cache_pages btrfs 1 syz, C error 5 1196d 1305d 22/29 1165d 519b7e13b5ae btrfs: lock the inode in shared mode before starting fiemap
kernel BUG in inet_sock_destruct net -1 syz, C error 3 1321d 1321d 22/29 1165d 1ac885574470 inet: control sockets should not use current thread task_frag
BUG: corrupted list in taprio_destroy net 8 syz, C done 2 1282d 1282d 22/29 1165d 4fab64126891 net/sched: fix error recovery in qdisc_create()
WARNING: suspicious RCU usage in mas_start kernfs 4 syz, C error done 23 1237d 1269d 22/29 1165d 6db504ce55bd mm/ksm: fix race with VMA iteration and mm_struct teardown
WARNING in shark_write_val/usb_submit_urb usb -1 syz, C error done 51 1222d 2582d 22/29 1165d 76e31045ba03 media: radio-shark: Add endpoint checks
memory leak in prctl mm 3 syz, C 1 1338d 1334d 22/29 1165d a1193de562f5 mm: fix vma->anon_name memory leak for anonymous shmem VMAs
WARNING in print_tainted ext4 -1 syz, C 162 1165d 1336d 22/29 1165d c6adf659a8ba can: isotp: check CAN address family in isotp_bind() 4f027cba8216 can: isotp: split tx timer into transmission and timeout
WARNING in vkms_get_vblank_timestamp dri -1 syz error 41 1168d 1228d 22/29 1165d f2c7ca890182 drm/atomic-helper: Don't set deadline for modesets
KASAN: invalid-free in skb_free_head (2) net 24 syz, C error 25 1206d 1272d 22/29 1165d 880ce5f20033 net: avoid skb end_offset change in __skb_unclone_keeptruesize()
general protection fault in skb_dequeue (3) wireless 2 syz, C done 6 1283d 1292d 22/29 1165d 33b3b041543e splice: Add a func to do a splice from an O_DIRECT file without ITER_PIPE
possible deadlock in jbd2_journal_lock_updates ext4 4 syz, C error 83148 1172d 1469d 22/29 1165d 62913ae96de7 ext4, jbd2: add an optimized bmap for the journal inode
memory leak in __build_skb (3) wireless 3 syz, C 2 1325d 1323d 22/29 1165d 9b25e3985477 wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function
INFO: task hung in freeze_super (3) gfs2 1 syz, C error 19 1185d 1346d 22/29 1165d b66f723bb552 gfs2: Improve gfs2_make_fs_rw error handling
KMSAN: uninit-value in qdisc_run kernel 7 syz, C 2 1377d 1313d 22/29 1165d 3a415d59c1db net/sched: sch_taprio: fix possible use-after-free
UBSAN: shift-out-of-bounds in ext2_fill_super ext4 -1 syz, C 2265 1165d 1269d 22/29 1165d 62aeb94433fc ext2: Check block size validity during mount
KASAN: wild-memory-access Read in io_wq_worker_running io-uring 19 syz, C 39 1311d 1317d 22/29 1165d e6db6f9398da io_uring/io-wq: only free worker if it was allocated for creation
KASAN: slab-out-of-bounds Read in hdr_delete_de ntfs3 17 syz, C error 2 1350d 1349d 22/29 1165d ab84eee4c7ab fs/ntfs3: Fix slab-out-of-bounds read in hdr_delete_de()
WARNING in submit_bio_checks -1 syz, C done unreliable 1851 1608d 2227d 22/29 1217d 57e95e4670d1 block: fix and cleanup bio_check_ro
general protection fault in dma_fence_array_first dri media 2 syz, C done 7 1601d 1601d 22/29 1222d 21d139d73f77 dma-buf/sync-file: fix logic error in new fence merge code
BUG: sleeping function called from invalid context in folio_copy mm 5 syz, C unreliable 271 1850d 1848d 22/29 1222d 715cbfd6c5c5 mm/migrate: Add folio_migrate_copy()
KASAN: use-after-free Read in hci_cmd_timeout 19 syz, C done error 371 1346d 2658d 22/29 1222d 97dfaf073f58 Bluetooth: hci_sync: cancel cmd_timer if hci_open failed
KASAN: slab-out-of-bounds Read in sk_psock_get net 17 syz, C done error 9 1482d 1817d 22/29 1222d 2a0133723f9e net: fix refcount bug in sk_psock_get (2)
KASAN: use-after-free Read in delete_partition (2) block 19 syz, C done 1 1965d 1965d 22/29 1222d b5cfbd35ecca block: check disk exist before trying to add partition
INFO: task hung in port100_probe usb nfc 1 syz, C error inconclusive 10 1623d 1881d 22/29 1222d f80cfe2f2658 NFC: port100: fix use-after-free in port100_send_complete
KASAN: slab-out-of-bounds Read in ntfs_get_ea ntfs3 17 syz, C error done 9 1372d 1440d 22/29 1222d 0e8235d28f3a fs/ntfs3: Check fields while reading
possible deadlock in nci_start_poll net nfc 4 syz, C error done 83 1270d 1371d 22/29 1223d b2e44aac91b2 NFC: nci: Allow to create multiple virtual nci devices
possible deadlock in bpf_trace_printk bpf trace 4 syz, C done done 68 1274d 1529d 22/29 1242d 05b24ff9b2cf bpf: Prevent bpf program recursion for raw tracepoint probes
WARNING in btrfs_run_delayed_refs btrfs -1 syz, C error done 15 1286d 1400d 22/29 1250d 8bb808c6ad91 btrfs: don't print stack trace when transaction is aborted due to ENOMEM
kernel BUG in pskb_expand_head net -1 syz, C done 1600 1284d 1735d 22/29 1268d 5f33a09e769a can: isotp: convert struct tpcon::{idx,len} to unsigned int 7c759040c1dd can: isotp: fix potential CAN frame reception race in isotp_rcv()
KMSAN: uninit-value in kvm_irq_delivery_to_apic_fast kvm-x86 7 syz, C 20 1477d 1510d 22/29 1269d 8a414f943f8b KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op() KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op()
kernel BUG in __text_poke kernel -1 syz, C 80 1469d 1644d 22/29 1269d 1d5f82d9dd47 bpf, x86: fix freeing of not-finalized bpf_prog_pack d24d2a2b0a81 bpf: bpf_prog_pack: Set proper size before freeing ro_header
KASAN: vmalloc-out-of-bounds Read in bpf_jit_free bpf 17 syz, C 68 1468d 1644d 22/29 1269d 1d5f82d9dd47 bpf, x86: fix freeing of not-finalized bpf_prog_pack d24d2a2b0a81 bpf: bpf_prog_pack: Set proper size before freeing ro_header
WARNING in __dev_queue_xmit -1 syz, C done 16774 1269d 1483d 22/29 1269d dc633700f00f net/af_packet: check len when min_header_len equals to 0 b12e924a2f5b net/ieee802154: don't warn zero-sized raw_sendmsg() 3a4d061c699b net/ieee802154: reject zero-sized raw_sendmsg()
INFO: trying to register non-static key in ieee80211_do_stop wireless -1 syz, C error 70591 1454d 1494d 22/29 1269d aa40d5a43526 wifi: mac80211: do not abuse fq.lock in ieee80211_do_stop() wifi: mac80211: do not abuse fq.lock in ieee80211_do_stop()
KASAN: use-after-free Read in mgmt_pending_remove bluetooth 19 syz, C unreliable 9 1440d 1460d 22/29 1269d 3cfbc6ac22d6 Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor()
WARNING in alloc_charge_hpage mm -1 syz, C error 112 1318d 1388d 22/29 1269d e031ff96b334 mm: khugepaged: allow page allocation fallback to eligible nodes dec1d352de5c mm: replace VM_WARN_ON to pr_warn if the node is offline with __GFP_THISNODE
WARNING in ipgre_xmit net -1 syz, C done 9916 1520d 1536d 22/29 1269d 8d21e9963bec ip_gre: test csum_start instead of transport header
inconsistent lock state in fs_reclaim_acquire (3) kernel 4 syz, C 2 1384d 1390d 22/29 1269d 2d1f274b95c6 skmsg: pass gfp argument to alloc_sk_msg()
KASAN: use-after-free Read in mas_next_nentry fs mm 19 syz, C error done 343 1378d 1572d 22/29 1269d 59f2f4b8a757 fs/userfaultfd: Fix maple tree iterator in userfaultfd_unregister()
KASAN: use-after-free Read in tty_release io-uring serial 19 syz, C done 23 1598d 1608d 22/29 1269d d89a4fac0fbc io_uring: fix assuming triggered poll waitqueue is the single poll
KMSAN: uninit-value in ax88178_reset usb 7 syz, C 284 1577d 1684d 22/29 1269d 920a9fa27e78 net: asix: add proper error handling of usb read errors
general protection fault in br_mst_info_size bridge 2 syz, C error 26 1606d 1609d 22/29 1269d cde3fc244b3d net: bridge: mst: prevent NULL deref in br_mst_info_size()
KASAN: wild-memory-access Read in skb_copy_bits net 17 syz, C 2 1437d 1437d 22/29 1269d 0d24148bd276 inet: ping: fix recent breakage
general protection fault in list_lru_add mm 8 syz, C done 1125 1318d 1607d 22/29 1269d ae085d7f9365 mm: kfence: fix missing objcg housekeeping for SLAB
KMSAN: uninit-value in tipc_nl_compat_name_table_dump (3) tipc 7 syz, C 65 1366d 1382d 22/29 1269d 1c075b192fe4 tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header
WARNING: kmalloc bug in xdp_umem_create (2) bpf net -1 syz, C done 21 1648d 1714d 22/29 1269d 0708a0afe291 mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls
general protection fault in sg_alloc_append_table_from_pages dri media 11 syz, C done 477 1301d 1768d 22/29 1269d 2b6dd600dd72 udmabuf: validate ubuf->pagecount
BUG: sleeping function called from invalid context in sk_psock_skb_ingress_self bpf net 5 syz, C done 151 1379d 1401d 22/29 1269d 2d1f274b95c6 skmsg: pass gfp argument to alloc_sk_msg()
INFO: task hung in addrconf_verify_work (6) 1 syz, C done 86 1273d 1510d 22/29 1269d ff1fa2081d17 net: tun: avoid disabling NAPI twice
KASAN: use-after-free Read in ipvlan_queue_xmit (3) net 19 syz, C error error 8 1473d 2071d 22/29 1269d 81225b2ea161 ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
WARNING in change_protection mm -1 syz, C unreliable 13 1411d 1416d 22/29 1269d 515778e2d790 mm/uffd: fix warning without PTE_MARKER_UFFD_WP compiled in
possible deadlock in dccp_v4_ctl_send_reset mptcp 4 syz, C done 26 1356d 1368d 22/29 1269d af295e854a4e l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
WARNING in exit_tasks_rcu_finish kernel -1 syz, C done 20 1523d 1526d 22/29 1269d 0356d4e66214 rcu-tasks: Track blocked RCU Tasks Trace readers
memory leak in kobject_set_name_vargs (5) nilfs 3 syz, C 4 1413d 1516d 22/29 1269d d0d51a97063d nilfs2: fix leak of nilfs_root in case of writer thread creation failure
BUG: unable to handle kernel NULL pointer dereference in ni_find_attr ntfs3 10 syz, C done done 81 1318d 1453d 22/29 1269d 2681631c2973 fs/ntfs3: Add null pointer check to attr_load_runs_vcn
possible deadlock in console_unlock (2) serial 4 syz, C error done 599 1286d 1736d 22/29 1269d 09c5ba0aa2fc printk: add kthread console printers
general protection fault in llc_build_and_send_xid_pkt net 2 syz, C done 2 1606d 1606d 22/29 1269d 2d327a79ee17 llc: only change llc->dev when bind() succeeds
KASAN: use-after-free Read in unregister_shrinker (2) mm 19 syz, C error 3799 1381d 1425d 22/29 1269d bd86c69dae65 NFSD: unregister shrinker when nfsd_init_net() fails
KMSAN: uninit-value in mpol_rebind_mm (2) mm 7 syz, C 11 1523d 1647d 22/29 1269d 018160ad314d mm/mempolicy: fix uninit-value in mpol_rebind_policy()
possible deadlock in snd_timer_interrupt (2) sound 4 syz, C error 29 1468d 1729d 22/29 1269d 95cc637c1afd ALSA: timer: Use deferred fasync helper
possible deadlock in display_open usb 4 syz, C inconclusive 48888 1537d 2564d 22/29 1269d db264d4c66c0 media: imon: reorganize serialization
kernel BUG in __clear_extent_bit btrfs -1 syz, C error 5 1345d 1360d 22/29 1269d 5a75034e71ef btrfs: do not panic if we can't allocate a prealloc extent state
KASAN: use-after-free Read in pty_close serial io-uring fuse 19 syz, C done 4 1474d 1501d 22/29 1269d 7a121ced6e64 io_uring: don't miss setting REQ_F_DOUBLE_POLL
KASAN: vmalloc-out-of-bounds Write in tpg_fill_plane_buffer (2) media 21 syz, C inconclusive done 14 1294d 1806d 22/29 1269d 94a7ad928346 media: vivid: fix compose size exceed boundary
general protection fault in pm_qos_update_target pm 2 syz inconclusive done 1 1609d 1917d 22/29 1269d 3c3201f8c7bb ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls
KMSAN: uninit-value in asix_mdio_read (3) usb 7 syz, C 1582 1552d 1617d 22/29 1269d 920a9fa27e78 net: asix: add proper error handling of usb read errors
INFO: rcu detected stall in sys_lsetxattr fs 1 syz, C done 2 1581d 1580d 22/29 1269d 0014edaedfd8 fs: unset MNT_WRITE_HOLD on failure
WARNING in ext4_da_release_space ext4 -1 syz, C error 9 1281d 1404d 22/29 1269d 1b8f787ef547 ext4: fix warning in 'ext4_da_release_space'
BUG: unable to handle kernel NULL pointer dereference in ntfs_sparse_cluster ntfs3 10 syz, C error done 11 1335d 1337d 22/29 1269d c380b52f6c57 fs/ntfs3: Change new sparse cluster processing
WARNING in cpuset_attach cgroups -1 syz, C error 20922 1452d 1453d 22/29 1269d 43626dade36f cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
WARNING in __skb_flow_dissect (4) net -1 syz, C error 6 1380d 1389d 22/29 1269d 9f225444467b ppp: associate skb with a device at tx
WARNING in inet_csk_get_port net -1 syz, C done 1166 1318d 1546d 22/29 1269d 593d1ebe00a4 Revert "net: Add a second bind table hashed by port and address"
memory leak in __insert_pending ext4 3 syz, C 1 1386d 1382d 22/29 1269d 1da18e38cb97 ext4: fix reserved cluster accounting in __es_remove_extent()
memory leak in crypto_create_tfm_node ext4 crypto 3 syz, C 3 1399d 1405d 22/29 1269d ccd30a476f8e fscrypt: fix keyring memory leak on mount failure
WARNING in vcpu_enter_guest (2) kvm-x86 -1 syz, C 42 1382d 1391d 22/29 1269d dea0d5a2fde6 KVM: x86: Exempt pending triple fault from event injection sanity check
KASAN: use-after-free Read in drm_gem_object_release_handle 19 syz, C done 362 1350d 1734d 22/29 1269d 24013314be6e drm/shmem-helper: Remove errant put in error path
WARNING in ext2_fill_super ext4 -1 syz, C 2 1455d 1451d 22/29 1269d d766f2d1e3e3 ext2: Add sanity checks for group and filesystem size e7c7fbb9a857 ext2: Use kvmalloc() for group descriptor array
KASAN: use-after-free Read in btrfs_scan_one_device (2) btrfs 19 syz, C 2 1631d 1627d 22/29 1269d 79c9234ba596 btrfs: don't access possibly stale fs_info data in device_list_add
KASAN: use-after-free Read in free_netdev (3) net 19 syz, C inconclusive 130 1361d 1517d 22/29 1269d 3b9bc84d3111 net: tun: unlink NAPI from device on destruction
WARNING in bpf_skb_load_helper_16_no_cache bpf -1 syz, C done 6 1476d 1506d 22/29 1269d 0326195f523a bpf: Make sure mac_header was set before using it
general protection fault in release_udmabuf dri media 8 syz, C inconclusive 31 1408d 1459d 22/29 1269d d9c04a1b7a15 udmabuf: Set ubuf->sg = NULL if the creation of sg table fails
KASAN: slab-out-of-bounds Read in cttimeout_net_exit netfilter 17 syz, C 1444 1514d 1552d 22/29 1269d aeed55a08d0b netfilter: cttimeout: fix slab-out-of-bounds read in cttimeout_net_exit 394e771684f7 netfilter: cttimeout: fix slab-out-of-bounds read typo in cttimeout_net_exit
WARNING in snd_usbmidi_output_open sound usb -1 syz, C done 37 1367d 1374d 22/29 1269d ad72c3c3f6eb ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open()
WARNING in send_packet/usb_submit_urb usb -1 syz, C inconclusive 847 1337d 1503d 22/29 1269d 813ceef062b5 media: imon: fix a race condition in send_packet()
KASAN: slab-out-of-bounds Read in io_uring_show_fdinfo io-uring 19 syz, C done 5 1401d 1406d 22/29 1269d 00927931cb63 io_uring: fix fdinfo sqe offsets calculation
KASAN: slab-out-of-bounds Read in thrustmaster_probe usb input 17 syz, C unreliable 92 1614d 1638d 22/29 1269d fc3ef2e3297b HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts
INFO: rcu detected stall in sys_setxattr (2) fs 1 syz, C done 3 1580d 1580d 22/29 1269d 0014edaedfd8 fs: unset MNT_WRITE_HOLD on failure
BUG: unable to handle kernel paging request in vmx_handle_exit_irqoff kvm-x86 8 syz, C error 7736 1361d 1383d 22/29 1269d 1cfaac2400c7 x86/kasan: Populate shadow for shared chunk of the CPU entry area
WARNING in skb_try_coalesce net -1 syz, C error 1521 1541d 1995d 22/29 1269d 763087dab975 net: add skb_set_end_offset() helper
INFO: task hung in misc_open (4) usb 1 syz, C error inconclusive 144 1297d 2010d 22/29 1269d 8386c414e27c PM: hibernate: defer device probing when resuming from hibernation
general protection fault in sock_reserve_memory net 2 syz, C done 2 1645d 1645d 22/29 1269d 25206111512d crypto: af_alg - get rid of alg_memory_allocated
general protection fault in __dentry_path (2) fs 8 syz, C error 174 1574d 1584d 22/29 1269d 5c697c367a66 KVM: Initialize debugfs_dentry when a VM is created to avoid NULL deref
WARNING in tcp_enter_loss (3) net -1 syz, C inconclusive 7 1386d 1683d 22/29 1269d 0c175da7b037 tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
divide error in dbNextAG jfs 2 syz error 2 1615d 1611d 22/29 1269d 2cc7cc01c15f jfs: fix divide error in dbNextAG
general protection fault in tls_sk_proto_close (3) net 2 syz, C done 276 1518d 1917d 22/29 1269d 69135c572d1f net/tls: fix tls_sk_proto_close executed repeatedly
KASAN: use-after-free Read in nilfs_mdt_destroy nilfs 19 syz, C error 20 1409d 1425d 22/29 1269d 2e488f13755f fs: fix UAF/GPF bug in nilfs_mdt_destroy
KASAN: slab-out-of-bounds Read in hfs_cat_keycmp hfs 17 syz, C error done 2 1272d 1338d 22/29 1269d c53ed55cb275 hfs: Fix OOB Write in hfs_asc2mac
possible deadlock in l2tp_tunnel_register net 4 syz, C error 9492 1269d 1368d 22/29 1269d af295e854a4e l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
general protection fault in em_cmp_match net 10 syz, C 4 1344d 1341d 22/29 1269d 9cd3fd2054c3 net_sched: reject TCF_EM_SIMPLE case for complex ematch module
kernel BUG in __filemap_get_folio mm -1 syz, C done 814 1408d 1579d 22/29 1269d 63b1898fffcd XArray: Disallow sibling entries of nodes
kernel BUG in commit_creds lsm io-uring -1 syz, C done 5 1580d 1585d 22/29 1269d 701521403cfb io_uring: abort file assignment prior to assigning creds
WARNING in mntput_no_expire (3) fs -1 syz, C inconclusive 29 1319d 1735d 22/29 1269d a91714312eb1 percpu_ref_init(): clean ->percpu_count_ref on failure
WARNING in nilfs_segctor_do_construct nilfs -1 syz, C 5 1295d 1419d 22/29 1269d 723ac751208f nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
KASAN: slab-out-of-bounds Read in vxlan_vnifilter_dump_dev 19 syz, C done 30 1599d 1600d 22/29 1269d 9d570741aec1 vxlan: do not feed vxlan_vnifilter_dump_dev with non vxlan devices
general protection fault in ip6_rcv_core net 8 syz, C done 275 1359d 1586d 22/29 1269d 0339d25a2807 ipv6: fix NULL deref in ip6_rcv_core()
BUG: unable to handle kernel paging request in ovl_set_acl overlayfs 8 syz, C error 4 1382d 1383d 22/29 1269d 5b52aebef895 ovl: call posix_acl_release() after error checking
KASAN: use-after-free Read in z_erofs_transform_plain erofs 19 syz, C done 4 1273d 1350d 22/29 1269d c505feba4c0d erofs: validate the extent length for uncompressed pclusters
KMSAN: uninit-value in mpol_rebind_task (2) mm 7 syz, C 7 1525d 1685d 22/29 1269d 018160ad314d mm/mempolicy: fix uninit-value in mpol_rebind_policy()
KASAN: use-after-free Read in rxrpc_lookup_local afs net 22 syz, C 3997 1319d 1349d 22/29 1269d 8fbcc83334a7 rxrpc: Fix I/O thread startup getting skipped eaa02390adb0 rxrpc: Fix NULL deref in rxrpc_unuse_local()
WARNING in kernfs_active kernfs -1 syz, C error 150 1283d 1406d 22/29 1269d 1edfe4ea16ca kernfs: Fix spurious lockdep warning in kernfs_find_and_get_node_by_id()
kernel BUG in warn_crc32c_csum_combine net exfat -1 syz, C error 17 1383d 1393d 22/29 1269d 7f57f8165cb6 af_key: Fix send_acquire race with pfkey_register
KASAN: use-after-free Read in dev_uevent kernel 19 syz 54 1276d 2249d 22/29 1269d 16b1941eac2b usb: gadget: Fix use-after-free bug by not setting udc->dev.driver
WARNING in u32_change net -1 syz, C 28 1324d 1421d 22/29 1269d 7cba18332e36 net: sched: cls_u32: Avoid memcpy() false-positive warning
general protection fault in metadata_dst_free net 2 syz, C 348 1400d 1439d 22/29 1269d c52add61c27e macsec: don't free NULL metadata_dst
memory leak in watch_queue_set_size kernel 3 syz, C 1 1611d 1604d 22/29 1269d b490207017ba watch_queue: Free the page array when watch_queue is dismantled
memory leak in virtual_ncidev_write net nfc 3 syz, C 1 1368d 1368d 22/29 1269d 53270fb0fd77 NFC: nci: fix memory leak in nci_rx_data_packet()
memory leak in __vsock_create net virt io-uring 3 syz, C 1 1593d 1589d 22/29 1269d 7e97cfed9929 vsock: Fix memory leak in vsock_connect()
WARNING: locking bug in hugetlb_no_page mm 4 syz, C 1 1373d 1373d 22/29 1269d 04ada095dcfc hugetlb: don't delete vma_lock in hugetlb MADV_DONTNEED processing
KASAN: slab-out-of-bounds Read in __fscache_acquire_volume fs mm 17 syz, C done done 1 1448d 1448d 22/29 1269d 9f0933ac026f fscache: fix OOB Read in __fscache_acquire_volume
general protection fault in blk_mq_update_nr_hw_queues block 2 syz, C error 16 1366d 1379d 22/29 1269d 90b0296ece4b block: fix crash in 'blk_mq_elv_switch_none'
WARNING in skb_tunnel_check_pmtu net -1 syz, C done 8 1511d 1517d 22/29 1269d 853a76148802 tunnels: do not assume mac header is set in skb_tunnel_check_pmtu()
general protection fault in nilfs_palloc_commit_free_entry nilfs 2 syz, C error 2 1385d 1393d 22/29 1269d f0a0ccda18d6 nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
BUG: sleeping function called from invalid context in smc_pnet_apply_ib rdma 5 syz, C inconclusive 92 1633d 1641d 22/29 1269d 7ff57e98fb78 net/smc: Use a mutex for locking "struct smc_pnettable"
KASAN: use-after-free Read in nf_hook_entries_grow netfilter 19 syz, C done done 5 1660d 1700d 22/29 1269d 6069da443bf6 netfilter: nf_tables: unregister flowtable hooks on netns exit
BUG: unable to handle kernel NULL pointer dereference in lock_page nilfs 10 syz, C error 4 1379d 1388d 22/29 1269d 512c5ca01a36 nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty
KMSAN: kernel-infoleak in vcs_read (2) serial 18 syz, C 1556 1292d 2447d 22/29 1269d af77c56aa353 tty: vt: initialize unicode screen buffer
memory leak in ipv6_renew_options net 3 syz, C 1 1495d 1491d 22/29 1269d e27326009a3d net: ping6: Fix memleak in ipv6_renew_options().
KASAN: vmalloc-out-of-bounds Write in imageblit (2) fbdev 21 syz, C done 701 1443d 1731d 22/29 1269d 566f9c9f8933 vt: Clear selection before changing the font
UBSAN: shift-out-of-bounds in ntfs_fill_super ntfs3 -1 syz, C done 3643 1269d 1578d 22/29 1269d a3b774342fa7 fs/ntfs3: validate BOOT sectors_per_clusters
possible deadlock in kcm_ioctl net 4 syz, C error 20 1455d 1456d 22/29 1269d 8fc29ff3910f kcm: fix strp_init() order and cleanup
KMSAN: uninit-value in can_send can 7 syz, C 630 1364d 1382d 22/29 1269d 3eb3d283e857 can: j1939: j1939_send_one(): fix missing CAN header initialization
memory leak in __tcp_send_ack net 3 syz, C 10 1407d 1938d 22/29 1269d 07d120aa33cc net: tun: call napi_schedule_prep() to ensure we own a napi
INFO: task hung in hub_port_init (2) usb 1 syz, C error 486 1272d 1734d 22/29 1269d 26fbe9772b8c USB: core: Fix hang in usb_kill_urb by adding memory barriers
KMSAN: uninit-value in __tipc_nl_bearer_enable tipc 7 syz, C 1288 1270d 2798d 22/29 1269d 7f36f798f89b tipc: check attribute length for bearer name
kernel BUG in __skb_gso_segment net -1 syz, C done 11 1536d 1535d 22/29 1269d e9d3f80935b6 net/af_packet: make sure to pull mac header
inconsistent lock state in kmem_cache_alloc io-uring 4 syz, C 4 1413d 1420d 22/29 1269d b000145e9907 io_uring/rw: defer fsnotify calls to task context
WARNING in vmx_queue_exception (2) kvm-x86 -1 syz, C 5 1568d 1567d 22/29 1269d 053d2290c030 KVM: VMX: Exit to userspace if vCPU has injected exception and invalid state
BUG: unable to handle kernel NULL pointer dereference in gsmld_receive_buf serial 10 syz, C error 324 1443d 1469d 22/29 1269d f16c6d2e58a4 tty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf()
KASAN: null-ptr-deref Write in io_file_get_normal io-uring fs 12 syz, C done 107 1514d 1599d 22/29 1269d d5361233e9ab io_uring: drop the old style inflight file tracking
general protection fault in i2c_setup_smbus_alert acpi usb 2 syz, C done 20 1636d 1654d 22/29 1269d 8302532f47bb i2c: smbus: Check for parent device before dereference
KASAN: use-after-free Write in sco_sock_timeout bluetooth 22 syz, C done 272 1544d 1816d 22/29 1269d 7aa1e7d15f8a Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout
general protection fault in tcp_create_openreq_child net 2 syz, C unreliable 83 1574d 1576d 22/29 1269d ba5a4fdd63ae tcp: make sure treq->af_specific is initialized
INFO: trying to register non-static key in rxe_cleanup_task rdma -1 syz 299 1270d 1546d 22/29 1269d fd5382c5805c RDMA/rxe: Fix error unwind in rxe_create_qp()
KASAN: out-of-bounds Read in ntfs_set_ea ntfs3 17 syz, C error done 4 1335d 1337d 22/29 1269d 0e8235d28f3a fs/ntfs3: Check fields while reading
UBSAN: array-index-out-of-bounds in nfnetlink_unbind netfilter 17 syz, C done 6621 1535d 1552d 22/29 1269d ffd219efd9ee netfilter: nfnetlink: fix warn in nfnetlink_unbind
INFO: trying to register non-static key in nilfs_bmap_lookup_at_level nilfs -1 syz, C error 124 1378d 1417d 22/29 1269d 21a87d88c225 nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level()
general protection fault in ovl_dentry_upper overlayfs 2 syz, C error 2 1365d 1361d 22/29 1269d 672e4268b286 ovl: fix use inode directly in rcu-walk mode
BUG: unable to handle kernel paging request in get_desc kernel 8 syz error 8 1369d 1381d 22/29 1269d 97650148a15e x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
general protection fault in ath9k_hif_usb_rx_cb (2) wireless 2 syz, C error 1678 1467d 2221d 22/29 1269d 0ac4827f78c7 ath9k: fix use-after-free in ath9k_hif_usb_rx_cb
UBSAN: shift-out-of-bounds in dbAllocAG jfs -1 syz, C error 10 1386d 1418d 22/29 1269d 898f70669568 fs: jfs: fix shift-out-of-bounds in dbAllocAG
KASAN: vmalloc-out-of-bounds Write in ringbuf_map_alloc bpf 21 syz, C done 541 1654d 1657d 22/29 1269d b293dcc473d2 bpf: Use VM_MAP instead of VM_ALLOC for ringbuf
BUG: sleeping function called from invalid context in break_ksm mm 5 syz, C 9 1396d 1396d 22/29 1269d d7c0e68dab98 mm/ksm: convert break_ksm() to use walk_page_range_vma()
KMSAN: uninit-value in ipvlan_queue_xmit net 7 syz, C 2 1447d 2030d 22/29 1269d 81225b2ea161 ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
possible deadlock in btrfs_commit_transaction btrfs 4 syz, C error done 6 1359d 1370d 22/29 1269d b740d8061669 btrfs: free btrfs_path before copying root refs to userspace
UBSAN: shift-out-of-bounds in __access_remote_vm ntfs3 -1 syz, C done 3 1457d 1454d 22/29 1269d caad9dd8792a fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
possible deadlock in nci_set_local_general_bytes net nfc 4 syz, C 32 1320d 1371d 22/29 1269d b2e44aac91b2 NFC: nci: Allow to create multiple virtual nci devices
KASAN: slab-out-of-bounds Read in run_unpack ntfs3 19 syz, C 97 1316d 1424d 22/29 1269d 887bfc546097 fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
KASAN: use-after-free Read in __snd_rawmidi_transmit_peek sound usb 19 syz error 48 1471d 1581d 22/29 1269d 0665886ad139 ALSA: usb-audio: Clear MIDI port active flag after draining
BUG: MAX_LOCK_DEPTH too low! (3) smc -1 syz, C done 18 1641d 1650d 22/29 1269d 1de9770d121e net/smc: Avoid overwriting the copies of clcsock callback functions
UBSAN: shift-out-of-bounds in hid_report_raw_event (2) input usb -1 syz, C error 1 1374d 1370d 22/29 1269d ec61b4191858 HID: core: fix shift-out-of-bounds in hid_report_raw_event
KASAN: use-after-free Read in port100_send_complete nfc usb 19 syz, C 1 1626d 1622d 22/29 1269d f80cfe2f2658 NFC: port100: fix use-after-free in port100_send_complete
KASAN: use-after-free Read in usb_udc_uevent usb 19 syz error 30 1480d 2266d 22/29 1269d 2191c00855b0 USB: gadget: Fix use-after-free Read in usb_udc_uevent()
general protection fault in skb_clone (5) net 10 syz, C done 7 1385d 1402d 22/29 1269d d8b57135fd9f net: hsr: avoid possible NULL deref in skb_clone()
KASAN: slab-out-of-bounds Write in dbgfs_rm_context_write damon 21 syz, C error 6 1380d 1386d 22/29 1269d 1de09a7281ed mm/damon/dbgfs: check if rm_contexts input is for a real context
KMSAN: kernel-infoleak in _copy_to_iter (7) net 21 syz, C 138977 1269d 1621d 22/29 1269d 633593a80898 sctp: fix kernel-infoleak for SCTP sockets
KASAN: use-after-free Read in bio_poll block 19 syz, C done 6 1560d 1560d 22/29 1269d 9650b453a3d4 block: ignore RWF_HIPRI hint for sync dio
possible deadlock in virtual_nci_close nfc net 4 syz, C done 939 1270d 1371d 22/29 1269d b2e44aac91b2 NFC: nci: Allow to create multiple virtual nci devices
KASAN: slab-out-of-bounds Read in mi_find_attr ntfs3 17 syz, C done done 1 1341d 1337d 22/29 1269d 4f1dc7d9756e fs/ntfs3: Validate attribute name offset
KASAN: use-after-free Read in do_garbage_collect f2fs 19 syz, C inconclusive 2 1372d 1372d 22/29 1269d d3b7b4afd6b2 f2fs: fix to do sanity check on i_extra_isize in is_alive()
BUG: sleeping function called from invalid context in smc_pnet_add net 5 syz, C done 45 1651d 1652d 22/29 1269d 94fdd7c02a56 net/smc: use GFP_ATOMIC allocation in smc_pnet_add_eth()
KASAN: slab-out-of-bounds Write in bpf_prog_test_run_xdp net bpf 21 syz, C done 18 1645d 1662d 22/29 1269d a6763080856f bpf: test_run: Fix OOB access in bpf_prog_test_run_xdp
KASAN: slab-out-of-bounds Read in smc_fback_error_report smc 19 syz, C error 72 1572d 1648d 22/29 1269d 0558226cebee net/smc: Fix slab-out-of-bounds issue in fallback
memory leak in iovec_from_user fs io-uring 3 syz, C 1 1587d 1583d 22/29 1269d 323b190ba2de io_uring: free iovec if file assignment fails
BUG: unable to handle kernel paging request in mi_enum_attr ntfs3 19 syz, C error done 18 1319d 1445d 22/29 1269d 0e8235d28f3a fs/ntfs3: Check fields while reading
WARNING: refcount bug in nldev_newlink rdma 13 syz, C 33 1342d 1348d 22/29 1269d e42f9c2e6aad RDMA: Add missed netdev_put() for the netdevice_tracker
KASAN: slab-out-of-bounds Read in __hfs_brec_find hfs 17 syz, C 5 1343d 1357d 22/29 1269d 8d824e69d9f3 hfs: fix OOB Read in __hfs_brec_find
WARNING in bpf_check (3) -1 syz, C done done 1736 1414d 2348d 22/29 1269d 34dd3bad1a6f bpf: Relax the requirement to use preallocated hash maps in tracing progs.
memory leak in usb_set_configuration (3) usb 3 syz, C 2 1507d 1533d 22/29 1269d 945a9a8e448b media: pvrusb2: fix memory leak in pvr_probe
KASAN: use-after-free Read in ar5523_cmd_tx_cb usb wireless 19 syz, C inconclusive 372 1365d 1420d 22/29 1269d b6702a942a06 wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out
possible deadlock in strp_work net 4 syz, C error 4 1455d 1456d 22/29 1269d 8fc29ff3910f kcm: fix strp_init() order and cleanup
WARNING in dlfb_submit_urb/usb_submit_urb usb fbdev -1 syz, C done 481 1342d 2603d 22/29 1269d aaf7dbe07385 video: fbdev: udlfb: properly check endpoint type
WARNING in devl_port_unregister net -1 syz, C 1690 1272d 1375d 22/29 1269d 1fb22ed67195 devlink: Fix warning when unregistering a port
WARNING: suspicious RCU usage in corrupted (2) net 4 syz, C unreliable 7 1513d 1525d 22/29 1269d 4e43e64d0f13 ipv6: fix lockdep splat in in6_dump_addrs()
kernel BUG in vhost_get_vq_desc virt kvm net -1 syz, C inconclusive 19 1633d 1646d 22/29 1269d a58da53ffd70 vhost/vsock: don't check owner in vhost_vsock_stop() while releasing
KASAN: use-after-free Read in snd_rawmidi_transmit sound usb 19 syz, C done done 7 1537d 1571d 22/29 1269d 0125de38122f ALSA: usb-audio: Cancel pending work at closing a MIDI substream
WARNING in skb_warn_bad_offload (3) net -1 syz, C done 115 1270d 1407d 22/29 1269d 87445f369cca ipv6: ping: fix wrong checksum for large frames
WARNING in arp_ioctl net -1 syz, C error done 17 1341d 1411d 22/29 1269d b5f0de6df6dc net: dev: Convert sa_data to flexible array in struct sockaddr
general protection fault in __pm_runtime_resume (2) pm 2 syz, C error 7 1608d 1617d 22/29 1269d 32cb08e95869 Bluetooth: hci_uart: add missing NULL check in h5_enqueue
KMSAN: kernel-usb-infoleak in hif_usb_send wireless 9 syz, C 18149 1577d 2196d 22/29 1269d d1e0df1c57bd ath9k_htc: fix uninit value bugs
WARNING in ipvlan_queue_xmit net -1 syz, C inconclusive 4 1447d 1447d 22/29 1269d 81225b2ea161 ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
KASAN: use-after-free Read in notifier_call_chain kernel 19 syz, C error 157 1361d 1367d 22/29 1269d 5daadc86f27e net: tun: Fix use-after-free in tun_detach()
WARNING in wnd_init ntfs3 -1 syz, C done 23 1335d 1417d 22/29 1269d 0d0f659bf713 fs/ntfs3: Use __GFP_NOWARN allocation at wnd_init() 019d22eb0eb7 fs/ntfs3: Validate attribute data and valid sizes
KASAN: use-after-free Read in si470x_int_in_callback (2) usb media 19 syz, C error 7303 1337d 2494d 22/29 1269d 7d21e0b1b41b media: si470x: Fix use-after-free in si470x_int_in_callback()
BUG: unable to handle kernel NULL pointer dereference in f2fs_stop_discard_thread f2fs 12 syz, C done 23 1337d 1403d 22/29 1269d 91586ce0d39a f2fs: fix to invalidate dcc->f2fs_issue_discard in error path
WARNING in __perf_event_overflow perf -1 syz, C done 9 1358d 1383d 22/29 1269d bb88f9695460 perf: Improve missing SIGTRAP checking
WARNING: still has locks held in tls_rx_reader_lock net 4 syz, C done 4 1487d 1488d 22/29 1269d dde06aaa89b7 tls: rx: release the sock lock on locking timeout
memory leak in gs_usb_probe can usb 3 syz, C 1 1605d 1601d 22/29 1269d 50d34a0d151d can: gs_usb: gs_make_candev(): fix memory leak for devices with extended bit timing configuration
memory leak in airspy_probe media usb 3 syz, C 1 1471d 1467d 22/29 1269d 23bc5eb55f8c media: airspy: fix memory leak in airspy probe
general protection fault in hugetlbfs_parse_param mm 2 syz, C 5 1385d 1396d 22/29 1269d 26215b7ee923 hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param()
possible deadlock in __snd_pcm_lib_xfer sound 4 syz, C unreliable 3 1602d 1601d 22/29 1269d bc55cfd5718c ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock
WARNING: suspicious RCU usage in in6_dump_addrs net 4 syz, C unreliable 613 1481d 1525d 22/29 1269d 4e43e64d0f13 ipv6: fix lockdep splat in in6_dump_addrs()
inconsistent lock state in smc_fback_state_change smc 4 syz, C error 7 1361d 1367d 22/29 1269d af295e854a4e l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
memory leak in blk_iolatency_init (2) block cgroups 3 syz, C 131 1411d 1618d 22/29 1269d daaca3522a8e block: release rq qos structures for queue without disk
KMSAN: uninit-value in idmouse_open usb 7 syz, C 5 1432d 1427d 22/29 1269d bce2b0539933 usb: idmouse: fix an uninit-value in idmouse_open
KASAN: use-after-free Read in tcp_retransmit_timer (5) net 19 syz, C unreliable 16000 1353d 2365d 22/29 1269d 3a58f13a881e net: rds: acquire refcount on TCP sockets
WARNING in inet_csk_destroy_sock (2) io-uring net -1 syz, C done 8 1318d 1405d 22/29 1269d e0833d1fedb0 dccp/tcp: Fixup bhash2 bucket when connect() fails.
WARNING in ovl_fh_to_dentry overlayfs -1 syz, C 169 1343d 1423d 22/29 1269d cf8aa9bf97ca ovl: Use "buf" flexible array for memcpy() destination
WARNING in notify_change (2) fuse -1 syz, C unreliable 2 1362d 1363d 22/29 1269d 44361e8cf9dd fuse: lock inode unconditionally in fuse_fallocate()
KASAN: null-ptr-deref Read in ida_free (2) usb 11 syz, C done 3 1513d 1514d 22/29 1269d 90bc2af24638 USB: gadget: Fix double-free bug in raw_gadget driver
KASAN: use-after-free Read in nf_confirm netfilter 19 syz, C done 605 1535d 1552d 22/29 1269d 56b14ecec97f netfilter: conntrack: re-fetch conntrack after insertion
WARNING in __vunmap net -1 syz, C error error 154 1418d 2738d 22/29 1269d 8a04d2fc700f xfrm: Update ipcomp_scratches with NULL when freed
memory leak in xas_nomem mm 3 syz, C 1 1545d 1541d 22/29 1269d 69a37a8ba1b4 mm/huge_memory: Fix xarray node memory leak
WARNING in io_req_complete_failed io-uring -1 syz, C error 2 1360d 1357d 22/29 1269d c06c6c5d2767 io_uring: always lock in io_apoll_task_func
memory leak in napi_get_frags net 3 syz, C 11 2018d 2039d 22/29 1269d 07d120aa33cc net: tun: call napi_schedule_prep() to ensure we own a napi
memory leak in netlink_policy_dump_add_policy net 3 syz, C 1 1469d 1465d 22/29 1269d 249801360db3 net: genl: fix error path memory leak in policy dumping
KASAN: use-after-free Read in nf_tables_trans_destroy_work netfilter 19 syz, C done 6 1399d 1406d 22/29 1269d d4bc8271db21 netfilter: nf_tables: netlink notifier might race to release objects 26b5934ff419 netfilter: nf_tables: release flow rule object from commit path
KASAN: use-after-free Read in jbd2_journal_wait_updates ext4 19 syz, C error 143 1606d 1650d 22/29 1269d cc16eecae687 jbd2: fix use-after-free of transaction_t race
general protection fault in llc_ui_connect net 2 syz, C done 17 1602d 1606d 22/29 1269d 2d327a79ee17 llc: only change llc->dev when bind() succeeds
memory leak in ndisc_send_rs net 3 syz, C 2 1766d 1813d 22/29 1269d 07d120aa33cc net: tun: call napi_schedule_prep() to ensure we own a napi
WARNING in find_vma mm -1 syz, C done 2616 1446d 1469d 22/29 1269d d6f35446d076 binder_alloc: Add missing mmap_lock calls when using the VMA 44e602b4e52f binder_alloc: add missing mmap_lock calls when using the VMA
BUG: unable to handle kernel paging request in kvm_arch_hardware_enable kvm-x86 8 syz, C error 28 1457d 1461d 22/29 1269d 4ba4f4194274 KVM: Properly unwind VM creation if creating debugfs fails
WARNING in __brelse udf -1 syz, C inconclusive 22 1276d 1418d 22/29 1269d c791730f2554 udf: Avoid double brelse() in udf_rename()
WARNING: ODEBUG bug in kvm_xen_vcpu_set_attr kvm kvm-x86 io-uring -1 syz, C done 4 1477d 1529d 22/29 1269d af735db31285 KVM: x86/xen: Initialize Xen timer only once c03689913635 KVM: x86/xen: Stop Xen timer before changing IRQ
WARNING in erofs_iget erofs mm -1 syz, C 6 1390d 1440d 22/29 1269d 1dd73601a1cb erofs: fix order >= MAX_ORDER warning due to crafted negative i_size
INFO: task hung in hci_dev_close_sync bluetooth 1 syz, C unreliable 2366 1410d 1566d 22/29 1269d e36bea6e78ab Bluetooth: core: Fix deadlock on hci_power_on_sync.
KMSAN: kernel-infoleak in vmci_host_unlocked_ioctl (2) kernel 9 syz, C 2 1418d 1418d 22/29 1269d e5b0d06d9b10 misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()
general protection fault in llc_ui_sendmsg net 2 syz, C done 365 1602d 1606d 22/29 1269d 2d327a79ee17 llc: only change llc->dev when bind() succeeds
WARNING in nf_tables_exit_net netfilter -1 syz, C error 3 1387d 1387d 22/29 1269d 03c1f1ef1584 netfilter: Cleanup nft_net->module_list from nf_tables_exit_net()
possible deadlock in console_lock_spinning_enable (2) serial 4 syz, C inconclusive done 117 1550d 1736d 22/29 1269d 09c5ba0aa2fc printk: add kthread console printers
WARNING in scsi_alloc_sgtables scsi fuse -1 syz, C 93 1509d 1855d 22/29 1269d d9a434fa0c12 scsi: core: Fix warning in scsi_alloc_sgtables()
UBSAN: shift-out-of-bounds in nilfs_load_super_block nilfs -1 syz, C error 3 1381d 1391d 22/29 1269d 610a2a3d7d8b nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset()
INFO: task hung in blk_freeze_queue (3) arm 1 syz, C 8 1366d 1446d 22/29 1269d 1de7c3cf48fc nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
UBSAN: shift-out-of-bounds in init_sb (3) gfs2 -1 syz, C 40 1398d 1464d 22/29 1269d 670f8ce56dd0 gfs2: Check sb_bsize_shift after reading superblock
memory leak in keyctl_watch_key keyrings lsm 3 syz, C 1 1614d 1610d 22/29 1269d 3d8dcf278b1e watch_queue: Actually free the watch
memory leak in fbcon_set_font (2) fbdev 3 syz, C 1 1351d 1350d 22/29 1269d 3c3bfb8586f8 fbdev: fbcon: release buffer when fbcon_do_set_font() failed
INFO: task hung in scsi_remove_host scsi usb 1 syz, C done 328 1420d 1456d 22/29 1269d 2b36209ca818 scsi: core: Revert "Call blk_mq_free_tag_set() earlier" d94b2d00f7bf scsi: core: Revert "Make sure that hosts outlive targets" f782201ebc2b scsi: core: Revert "Make sure that targets outlive devices" 70e8d057bef5 scsi: core: Revert "Simplify LLD module reference counting"
KASAN: slab-out-of-bounds Read in packet_recvmsg net 21 syz, C inconclusive 12 1618d 2019d 22/29 1269d c700525fcc06 net/packet: fix slab-out-of-bounds access in packet_recvmsg()
WARNING in binder_alloc_vma_close kernel -1 syz, C done 18 1421d 1511d 22/29 1269d b0cab80ecd54 android: binder: fix lockdep check on clearing vma
general protection fault in ext4_fill_super exfat ext4 12 syz, C done 5 1457d 1672d 22/29 1269d 7c268d4ce2d3 ext4: fix potential NULL pointer dereference in ext4_fill_super()
INFO: task hung in vhost_work_dev_flush virt kvm net 1 syz, C error 2 1649d 1640d 22/29 1269d e2ae38cf3d91 vhost: fix hung thread due to erroneous iotlb entries
stack segment fault in skb_clone net 2 syz, C unreliable inconclusive 3 1524d 1709d 22/29 1269d d8b57135fd9f net: hsr: avoid possible NULL deref in skb_clone()
WARNING: suspicious RCU usage in bond_ethtool_get_ts_info net 4 syz, C done 6 1555d 1557d 22/29 1269d 9b80ccda233f bonding: fix missed rcu protection
WARNING in nsim_map_alloc_elem mm -1 syz, C error 7 1464d 1484d 22/29 1269d d0b80a9edb1a netdevsim: Avoid allocation warnings triggered from user space
KASAN: use-after-free Read in nilfs_segctor_sync nilfs 19 syz, C error 3 1375d 1385d 22/29 1269d 8cccf05fe857 nilfs2: fix use-after-free bug of ns_writer on remount
KASAN: slab-out-of-bounds Write in watch_queue_set_filter kernel 21 syz, C inconclusive 7 1610d 1613d 22/29 1269d c993ee0f9f81 watch_queue: Fix filter limit check
UBSAN: array-index-out-of-bounds in pvr2_i2c_core_init pvrusb2 usb 15 syz, C inconclusive 4 1553d 1585d 22/29 1269d 471bec68457a media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init
WARNING in ext4_expand_extra_isize_ea ext4 -1 syz, C error done 3 1343d 1355d 22/29 1269d cc12a6f25e07 ext4: allocate extended attribute value in vmalloc area
general protection fault in do_check_common bpf 2 syz, C done 5 1502d 1505d 22/29 1269d d1a6edecc1fd bpf: Check attach_func_proto more carefully in check_return_code
general protection fault in rlb_req_update_slave_clients net 2 syz, C inconclusive 3 1533d 1533d 22/29 1269d ab84db251c04 net: bonding: fix possible NULL deref in rlb code
WARNING in usbtmc_ioctl/usb_submit_urb usb -1 syz, C inconclusive 8 1282d 1627d 22/29 1269d e9b667a82cdc usb: usbtmc: Fix bug in pipe direction for control transfers
BUG: unable to handle kernel paging request in evict exfat 19 syz, C error done 23 1377d 1422d 22/29 1269d 4e3c51f4e805 fs: do not update freeing inode i_io_list
BUG: unable to handle kernel paging request in truncate_inode_partial_folio fs mm 8 syz, C error 4 1470d 1510d 22/29 1269d 84ac013046cc secretmem: fix unhandled fault in truncate
WARNING in hugetlb_wp mm -1 syz, C error 3 1381d 1387d 22/29 1269d f347454d0341 mm/gup: disallow FOLL_FORCE|FOLL_WRITE on hugetlb mappings
KASAN: invalid-free in tcp_disconnect net 24 syz, C unreliable 74 1398d 1412d 22/29 1269d 72e560cb8c6f tcp: cdg: allow tcp_cdg_release() to be called multiple times
WARNING in wireless_send_event wireless -1 syz, C 210 1385d 1423d 22/29 1269d e3e6e1d16a4c wifi: wext: use flex array destination for memcpy()
WARNING in register_shrinker_prepared f2fs mm -1 syz, C error 64 1530d 1532d 22/29 1269d 5035ebc644ae mm: shrinkers: introduce debugfs interface for memory shrinkers
WARNING in __split_huge_page_tail arch mm io-uring -1 syz, C error 155 1318d 1390d 22/29 1269d 5aae9265ee1a mm: prep_compound_tail() clear page->private
WARNING in __folio_mark_dirty gfs2 -1 syz, C error 1791 1269d 1753d 22/29 1269d e897be17a441 nilfs2: fix lockdep warnings in page operations for btree nodes
BUG: sleeping function called from invalid context in static_key_slow_inc 5 syz, C done 82 1356d 1368d 22/29 1269d af295e854a4e l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
KASAN: use-after-free Read in ath9k_hif_usb_rx_cb (2) 19 syz, C done 48810 1466d 2099d 22/29 1269d 0ac4827f78c7 ath9k: fix use-after-free in ath9k_hif_usb_rx_cb
kernel BUG in btrfs_drop_extents btrfs -1 syz, C 4 1345d 1360d 22/29 1269d 162d053e15fe btrfs: do not BUG_ON() on ENOMEM when dropping extent items for a range
BUG: sleeping function called from invalid context in binder_ioctl kernel 5 syz, C done 30 1546d 1552d 22/29 1269d aed86f8add0e binder: fix atomic sleep when get extended error
KASAN: use-after-free Read in madvise_update_vma 19 syz, C done 38 1633d 1651d 22/29 1269d 942341dcc574 mm: fix use-after-free when anon vma name is used after vma is freed
WARNING in mcba_usb_probe/usb_submit_urb usb can -1 syz, C error 537 1599d 2594d 22/29 1269d 136bed0bfd3b can: mcba_usb: properly check endpoint type
KASAN: use-after-free Read in register_shrinker_prepared (2) mm 19 syz, C done 1145 1381d 1419d 22/29 1269d bd86c69dae65 NFSD: unregister shrinker when nfsd_init_net() fails
possible deadlock in rds_tcp_reset_callbacks rds 4 syz, C error 1458 1378d 1456d 22/29 1269d a91b750fd662 net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
BUG: unable to handle kernel NULL pointer dereference in smack_inode_permission lsm mm 10 syz, C 1 1376d 1372d 22/29 1269d 578b565b240a 9p/fd: Fix write overflow in p9_read_work
memory leak in nft_chain_parse_hook netfilter 3 syz, C 1 1451d 1448d 22/29 1269d 77972a36ecc4 netfilter: nf_tables: clean up hook list when offload flags check fails
memory leak in sctp_sched_prio_set sctp 3 syz, C 2 1362d 1367d 22/29 1269d 9ed7bfc79542 sctp: fix memory leak in sctp_stream_outq_migrate()
BUG: sleeping function called from invalid context in sk_psock_stop 5 syz, C done 232 1470d 1528d 22/29 1269d 697fb80a5364 bpf: Fix sockmap calling sleepable function in teardown path
general protection fault in btrfs_stop_all_workers btrfs 2 syz, C done 554 1567d 1572d 22/29 1269d 385de0ef387d btrfs: use a normal workqueue for rmw_workers
BUG: corrupted list in hci_conn_add_sysfs bluetooth 19 syz, C error done 9 1424d 1423d 22/29 1269d 448a496f7606 Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
kernel BUG in __set_page_owner_handle gfs2 -1 syz, C 37 1399d 1561d 22/29 1269d cd8c1fd8cdd1 mm/page_owner: use strscpy() instead of strlcpy()
KASAN: slab-out-of-bounds Write in hfs_asc2mac hfs 21 syz, C error 161 1342d 1360d 22/29 1269d c53ed55cb275 hfs: Fix OOB Write in hfs_asc2mac
WARNING in __dma_map_sg_attrs -1 syz, C inconclusive 65 1469d 1719d 22/29 1269d 9e9fa6a9198b udmabuf: Set the DMA mask for the udmabuf device (v2)
WARNING: ODEBUG bug in __cancel_work bluetooth -1 syz, C inconclusive 1 1463d 1458d 22/29 1269d 2d2cb3066f2c Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
INFO: trying to register non-static key in gsmld_write serial -1 syz, C error 803 1440d 1469d 22/29 1269d 4bb1a53be85f tty: n_gsm: initialize more members at gsm_alloc_mux()
KMSAN: uninit-value in ath9k_htc_rx_msg wireless 7 syz, C 17731 1279d 2198d 22/29 1269d b383e8abed41 wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
memory leak in vlan_dev_set_egress_priority (2) net 3 syz, C 1 1500d 1500d 22/29 1269d 72a0b329114b vlan: fix memory leak in vlan_newlink()
WARNING in ieee80211_link_info_change_notify wireless -1 syz, C inconclusive 1376 1269d 1512d 22/29 1269d 591e73ee3f73 wifi: mac80211: properly skip link info driver update
general protection fault in ieee80211_subif_start_xmit (2) wireless 2 syz, C error 5 1386d 1393d 22/29 1269d 780854186946 wifi: mac80211: fix general-protection-fault in ieee80211_subif_start_xmit()
kernel BUG in ext4_mb_use_inode_pa ext4 -1 syz, C error done 2 1413d 1412d 22/29 1269d 4bb26f2885ac ext4: avoid crash when inline data creation follows DIO write
INFO: task hung in __writeback_inodes_sb_nr (5) ext4 1 syz, C done 48 1276d 1646d 22/29 1269d 7d9b1b578d67 ip6mr: fix use-after-free in ip6mr_sk_done()
memory leak in z_erofs_do_read_page erofs 3 syz, C 1 1354d 1354d 22/29 1269d c42c0ffe8117 erofs: Fix pcluster memleak when its block address is zero
KASAN: use-after-free Write in io_sendrecv_fail io-uring 22 syz, C 75 1400d 1423d 22/29 1269d a75155faef4e io_uring/net: fix UAF in io_sendrecv_fail()
general protection fault in reweight_entity kernel 2 syz, C error done 10 1645d 1699d 22/29 1269d 13765de8148f sched/fair: Fix fault in reweight_entity
KASAN: use-after-free Read in __nf_register_net_hook netfilter 19 syz, C error 5 1631d 1631d 22/29 1269d 56763f12b0f0 netfilter: fix use-after-free in __nf_register_net_hook()
WARNING in bpf_test_finish bpf net -1 syz, C done 3 1631d 1631d 22/29 1269d 530e214c5b5a bpf, test_run: Fix overflow in XDP frags bpf_test_finish
general protection fault in gfs2_dump_glock gfs2 17 syz, C 25 1271d 1672d 22/29 1269d 428f651cb80b gfs2: assign rgrp glock before compute_bitstructs
BUG: corrupted list in p9_fd_cancel (2) v9fs fuse 8 syz, C error 8 1368d 1393d 22/29 1269d 11c10956515b 9p/fd: fix issue of list_del corruption in p9_fd_cancel()
KASAN: use-after-free Read in ntfs_attr_find ntfs3 19 syz, C done 74 1286d 1452d 22/29 1269d 36a4d82dddbb ntfs: fix out-of-bounds read in ntfs_attr_find()
KMSAN: uninit-value in ___bpf_prog_run (3) bpf 7 syz, C 5 1583d 1585d 22/29 1269d 99c07327ae11 netlink: reset network and mac headers in netlink_dump()
kernel BUG in __page_mapcount kernel -1 syz, C error 45 1669d 1904d 22/29 1269d 24d7275ce279 fs/proc: task_mmu.c: don't read mapcount for migration entry
general protection fault in check_helper_call bpf 2 syz, C done 4 1488d 1493d 22/29 1269d d1a6edecc1fd bpf: Check attach_func_proto more carefully in check_return_code
memory leak in do_replace bridge netfilter 3 syz, C 1 1431d 1427d 22/29 1269d 62ce44c4fff9 netfilter: ebtables: fix memory leak when blob is malformed
KASAN: null-ptr-deref Write in kcm_tx_work (3) net 12 syz, C inconclusive inconclusive 7 1416d 1517d 22/29 1269d ec7eede369fe kcm: avoid potential race in kcm_tx_work
KASAN: use-after-free Read in nilfs_segctor_confirm nilfs 19 syz, C inconclusive 19 1397d 1415d 22/29 1269d d325dc6eb763 nilfs2: fix use-after-free bug of struct nilfs_root
KASAN: invalid-free in free_prealloced_shrinker mm 24 syz, C done 3 1489d 1488d 22/29 1269d 14773bfa70e6 mm: shrinkers: fix double kfree on shrinker name
WARNING: refcount bug in sk_psock_get (2) net 13 syz, C done 4 1494d 1535d 22/29 1269d 2a0133723f9e net: fix refcount bug in sk_psock_get (2)
WARNING in free_loaded_vmcs (3) kvm-x86 -1 syz, C inconclusive 2 1665d 1665d 22/29 1269d f7e570780efc KVM: x86: Forcibly leave nested virt when SMM state is toggled
general protection fault in submit_bio_checks block btrfs 2 syz, C done 1258 1636d 1658d 22/29 1269d 78e3437450be block: call bio_associate_blkg from bio_reset
WARNING in nci_send_cmd net nfc -1 syz, C 13 1356d 1369d 22/29 1269d 0ad6bded175e nfc/nci: fix race with opening and closing
kernel BUG in binder_alloc_deferred_release kernel -1 syz, C done 4 1517d 1519d 22/29 1269d a43cfc87caaf android: binder: stop saving a pointer to the VMA
WARNING in nfnetlink_unbind netfilter -1 syz, C done 235 1535d 1552d 22/29 1269d ffd219efd9ee netfilter: nfnetlink: fix warn in nfnetlink_unbind
general protection fault in legacy_parse_param fs 21 syz, C done 20 1609d 1870d 22/29 1269d ecff30575b5a LSM: general protection fault in legacy_parse_param
INFO: trying to register non-static key in f2fs_handle_error f2fs -1 syz, C 523 1319d 1380d 22/29 1269d cc249e4cba9a f2fs: fix to avoid accessing uninitialized spinlock 92b4cf5b4895 f2fs: initialize locks earlier in f2fs_fill_super()
general protection fault in btf_decl_tag_resolve bpf 2 syz, C done 6 1655d 1655d 22/29 1269d d7e7b42f4f95 bpf: Fix a btf decl_tag bug when tagging a function
possible deadlock in p9_req_put 4 syz, C done 2815 1379d 1469d 22/29 1269d 52f1c45dde91 9p: trans_fd/p9_conn_cancel: drop client lock earlier
KASAN: use-after-free Write in null_skcipher_crypt crypto 22 syz, C done 3 1627d 1825d 22/29 1269d ebe48d368e97 esp: Fix possible buffer overflow in ESP transformation
memory leak in mld_newpack net 3 syz, C 2 1430d 1848d 22/29 1269d a43206156263 usbnet: Fix memory leak in usbnet_disconnect()
KASAN: use-after-free Read in io_rsrc_node_ref_zero fs 19 syz, C done 3 1637d 1637d 22/29 1269d 80912cef18f1 io_uring: disallow modification of rsrc_data during quiesce
WARNING in netif_napi_add_weight net -1 syz, C inconclusive done 45 1508d 1521d 22/29 1269d 3b9bc84d3111 net: tun: unlink NAPI from device on destruction
WARNING in isotp_tx_timer_handler (2) can -1 syz, C 1416 1295d 1618d 22/29 1269d 3ea566422cbd can: isotp: sanitize CAN ID checks in isotp_bind() d73497081710 can: isotp: stop timeout monitoring when no first frame was sent
WARNING in ext4_xattr_block_set ext4 -1 syz, C error 57 1275d 1381d 22/29 1269d fae381a3d79b ext4: init quota for 'old.inode' in 'ext4_rename'
general protection fault in shm_close kernel 2 syz, C done 48 1370d 1371d 22/29 1269d b6305049f306 ipc/shm: call underlying open/close vm_ops
KASAN: use-after-free Read in udl_get_urb_timeout dri usb 19 syz, C done 142 1425d 1455d 22/29 1269d ed9605a66b62 Revert "drm/udl: Kill pending URBs at suspend and disconnect"
WARNING in kvm_arch_vcpu_ioctl_run (3) kvm-x86 -1 syz, C done error 16157 1270d 3063d 22/29 1269d ec6e4d863258 KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks
WARNING in kvm_mmu_notifier_invalidate_range_start (2) kvm -1 syz, C done 14 1596d 1609d 22/29 1269d 01e67e04c281 mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0)
memory leak in dvb_usb_device_init media usb 3 syz 1 1375d 1545d 22/29 1269d 94d90fb06b94 media: dvb-usb: fix memory leak in dvb_usb_adapter_init()
BUG: using smp_processor_id() in preemptible code in tun_chr_write_iter net 4 syz, C done 1834 1608d 1618d 22/29 1269d fc93db153b01 net: disable preemption in dev_core_stats_XXX_inc() helpers
WARNING in cpuset_write_resmask cgroups -1 syz, C done done 127 1625d 1691d 22/29 1269d d068eebbd482 cgroup/cpuset: Make child cpusets restrict parents on v1 hierarchy
WARNING in f2fs_is_valid_blkaddr f2fs -1 syz, C done 2562 1537d 2155d 22/29 1269d dc2f78e2d4cc f2fs: remove WARN_ON in f2fs_is_valid_blkaddr
general protection fault in binder_alloc_new_buf kernel 12 syz, C error 315 1425d 1456d 22/29 1269d 1da52815d5f1 binder: fix alloc->vma_vm_mm null-ptr dereference
BUG: using smp_processor_id() in preemptible code in netdev_core_stats_alloc net 4 syz, C error 2210 1608d 1618d 22/29 1269d fc93db153b01 net: disable preemption in dev_core_stats_XXX_inc() helpers
KASAN: use-after-free Read in remove_wait_queue (3) kernfs 19 syz, C inconclusive 123 1308d 1734d 22/29 1269d a06247c6804f psi: Fix uaf issue when psi trigger is destroyed while being polled
KASAN: use-after-free Write in sctp_auth_shkey_hold (2) sctp 22 syz, C inconclusive 7 1421d 1420d 22/29 1269d 022152aaebe1 sctp: handle the error returned from sctp_auth_asoc_init_active_key
WARNING in ovs_dp_reset_user_features openvswitch -1 syz, C done 3 1388d 1404d 22/29 1269d fd954cc1919e openvswitch: switch from WARN to pr_warn
kernel BUG in ext4_ind_remove_space ext4 -1 syz, C error done 10 1594d 1645d 22/29 1269d 2da376228a24 ext4: limit length to bitmap_maxbytes - blocksize in punch_hole
kernel BUG in f2fs_init_xattr_caches f2fs -1 syz, C 24 1424d 1448d 22/29 1269d 7e9c323c52b3 mm/slub: fix to return errno if kmalloc() fails
KASAN: use-after-free Read in hugetlb_fault mm 22 syz, C 383 1297d 1393d 22/29 1269d 04ada095dcfc hugetlb: don't delete vma_lock in hugetlb MADV_DONTNEED processing
BUG: missing reserved tailroom bpf net -1 syz, C done 2 1620d 1620d 22/29 1269d b6f1f780b393 bpf, test_run: Fix packet size check for live packet mode
general protection fault in smc_pnet_add (2) smc 2 syz, C inconclusive 590 1584d 1600d 22/29 1269d d22f4f977236 net/smc: Fix NULL pointer dereference in smc_pnet_find_ib()
WARNING in ntfs_fill_super ntfs3 -1 syz, C error 20 1349d 1414d 22/29 1269d 59bfd7a483da fs/ntfs3: Use __GFP_NOWARN allocation at ntfs_fill_super()
possible deadlock in ___neigh_create net 4 syz, C error 24 1655d 1658d 22/29 1269d 4a81f6da9cb2 net, neigh: Do not trigger immediate probes on NUD_FAILED from neigh_managed_work
BUG: unable to handle kernel paging request in kernfs_put_active kernfs nilfs 8 syz, C 2 1429d 1429d 22/29 1269d 2e488f13755f fs: fix UAF/GPF bug in nilfs_mdt_destroy
KASAN: slab-out-of-bounds Read in ntfs_trim_fs ntfs3 19 syz, C done 204 1321d 1419d 22/29 1269d 557d19675a47 fs/ntfs3: Fix slab-out-of-bounds read in ntfs_trim_fs
WARNING in pskb_expand_head -1 syz, C done done 222 1383d 2030d 22/29 1269d dbae2b062824 net: skb: introduce and use a single page frag cache
general protection fault in llc_build_and_send_ui_pkt net 2 syz, C done 26 1603d 1606d 22/29 1269d 2d327a79ee17 llc: only change llc->dev when bind() succeeds
memory leak in kvm_vcpu_ioctl_set_cpuid2 kvm-x86 3 syz, C 1 1667d 1663d 22/29 1269d 811f95ff9527 KVM: x86: Free kvm_cpuid_entry2 array on post-KVM_RUN KVM_SET_CPUID{,2}
BUG: unable to handle kernel paging request in can_rcv_filter can 8 syz, C 5 1352d 1349d 22/29 1269d 0acc442309a0 can: af_can: fix NULL pointer dereference in can_rcv_filter
general protection fault in ntfs_update_mftmirr ntfs3 10 syz, C error 6680 1454d 1578d 22/29 1269d 321460ca3b55 fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
WARNING in tls_strp_done net -1 syz, C error 22 1458d 1463d 22/29 1269d 849f16bbfb68 tls: rx: react to strparser initialization errors
WARNING in __set_page_dirty nilfs -1 syz, C error 9 1628d 1853d 22/29 1269d e897be17a441 nilfs2: fix lockdep warnings in page operations for btree nodes
KASAN: use-after-free Read in __post_watch_notification kernel 19 syz, C inconclusive 1 1483d 1481d 22/29 1269d e64ab2dbd882 watch_queue: Fix missing locking in add_watch_to_object()
WARNING: locking bug in hfa384x_usbctlx_completion_task staging usb 4 syz, C 2 1516d 1512d 22/29 1269d ee6c6e734247 staging/wlan-ng: get the correct struct hfa384x in work callback
BUG: unable to handle kernel NULL pointer dereference in __rxe_do_task rdma 10 syz 120 1396d 1464d 22/29 1269d a625ca30eff8 RDMA/rxe: Fix "kernel NULL pointer dereference" error
KASAN: slab-out-of-bounds Write in __build_skb_around net bpf 21 syz, C error 2536 1342d 1357d 22/29 1269d ce098da1497c skbuff: Introduce slab_build_skb()
general protection fault in end_page_writeback mm nilfs 2 syz, C error done 2 1368d 1399d 22/29 1269d 512c5ca01a36 nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty
KASAN: use-after-free Read in add_wait_queue fs io-uring 19 syz, C done done 13 1602d 1608d 22/29 1269d d89a4fac0fbc io_uring: fix assuming triggered poll waitqueue is the single poll
WARNING in sk_stream_kill_queues (8) net -1 syz, C unreliable 4268 1273d 1509d 22/29 1269d e9c6e7976026 tcp: fix sock skb accounting in tcp_read_skb()
KMSAN: uninit-value in r871xu_drv_init usb 7 syz, C 7342 1517d 2628d 22/29 1269d 0458e5428e5e staging: rtl8712: fix uninit-value in r871xu_drv_init() d1b57669732d staging: rtl8712: fix uninit-value in usb_read8() and friends
WARNING in fuse_write_file_get fuse -1 syz, C done 85 1455d 1584d 22/29 1269d 035ff33cf4db fuse: write inode in fuse_release()
WARNING in mroute_clean_tables net -1 syz, C 10 1628d 1648d 22/29 1269d 5611a00697c8 ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path
general protection fault in pse_prepare_data net 10 syz, C inconclusive 6 1319d 1397d 22/29 1269d 46cdedf2a0fa ethtool: pse-pd: fix null-deref on genl_info in dump
BUG: unable to handle kernel NULL pointer dereference in io_do_iopoll fs io-uring 10 syz, C done 3 1553d 1552d 22/29 1269d aa184e8671f0 io_uring: don't attempt to IOPOLL for MSG_RING requests
WARNING in btf_type_id_size bpf -1 syz, C done 10 1329d 1400d 22/29 1269d ea68376c8bed bpf: prevent decl_tag from being referenced in func_proto
KMSAN: uninit-value in bcmp net 19 syz, C error done 907 1305d 2626d 22/29 1269d 4f1dc7d9756e fs/ntfs3: Validate attribute name offset
KASAN: use-after-free Read in move_expired_inodes (2) exfat 19 syz, C done 4 1365d 1405d 22/29 1269d 4e3c51f4e805 fs: do not update freeing inode i_io_list
UBSAN: shift-out-of-bounds in tcf_pedit_init net -1 syz, C done 59 1549d 1557d 22/29 1269d 4d42d54a7d6a net/sched: act_pedit: sanitize shift argument before usage
general protection fault in llc_build_and_send_test_pkt net 2 syz, C done 25 1601d 1606d 22/29 1269d 2d327a79ee17 llc: only change llc->dev when bind() succeeds
KASAN: null-ptr-deref Write in snd_pcm_format_set_silence sound 12 syz, C unreliable 8 1446d 1591d 22/29 1269d 2f7a26abb824 ALSA: pcm: Test for "silence" field in struct "pcm_format_data"
BUG: corrupted list in rdma_listen (2) rdma 19 syz, C inconclusive 5 1650d 1716d 22/29 1269d 22e9f71072fa RDMA/cma: Do not change route.addr.src_addr outside state checks
possible deadlock in snd_hrtimer_callback (2) fs 4 syz, C inconclusive 582 1474d 1740d 22/29 1269d 96b097091c66 ALSA: pcm: Use deferred fasync helper 95cc637c1afd ALSA: timer: Use deferred fasync helper
KASAN: use-after-free Read in __kernfs_remove 19 syz, C done 3985 1408d 1452d 22/29 1269d 4abc99652812 kernfs: fix use-after-free in __kernfs_remove
BUG: unable to handle kernel paging request in bitfill_aligned (3) fbdev 8 syz, C unreliable 11 1455d 1497d 22/29 1269d a5a923038d70 fbdev: fbcon: Properly revert changes when vc_resize() failed
BUG: unable to handle kernel NULL pointer dereference in em_u32_match net 10 syz, C 2 1324d 1381d 22/29 1269d 9cd3fd2054c3 net_sched: reject TCF_EM_SIMPLE case for complex ematch module
WARNING: ODEBUG bug in htab_map_alloc bpf -1 syz, C 6456 1412d 1437d 22/29 1269d cf7de6a53600 bpf: add missing percpu_counter_destroy() in htab_map_alloc()
memory leak in ntfs_init_fs_context ntfs3 3 syz, C 169 1333d 1454d 22/29 1269d 51e76a232f8c fs/ntfs3: Fix memory leak on ntfs_fill_super() error path
kernel BUG in ext4_es_cache_extent ext4 -1 syz, C inconclusive 6 1293d 1652d 22/29 1269d c878bea3c9d7 ext4: filter out EXT4_FC_REPLAY from on-disk superblock field s_state
BUG: sleeping function called from invalid context in vm_area_dup mm 5 syz, C 3 1396d 1396d 22/29 1269d d7c0e68dab98 mm/ksm: convert break_ksm() to use walk_page_range_vma()
BUG: sleeping function called from invalid context in kernfs_walk_and_get_ns kernfs 5 syz, C error 196 1398d 1404d 22/29 1269d 46307fd6e27a cgroup: Reorganize css_set_lock and kernfs path processing
KASAN: use-after-free Read in hugetlb_handle_userfault mm 19 syz, C 4 1414d 1438d 22/29 1269d 958f32ce832b mm: hugetlb: fix UAF in hugetlb_handle_userfault
WARNING in iomap_read_inline_data gfs2 iomap -1 syz, C 3 1338d 1356d 22/29 1269d 70376c7ff312 gfs2: Always check inode size of inline inodes
general protection fault in skb_unlink net 2 syz, C done error 8 1438d 2999d 22/29 1269d 5121197ecc5d kcm: close race conditions on sk_receive_queue
memory leak in kvm_set_memslot kvm 3 syz, C 1 1552d 1552d 22/29 1269d c87661f855c3 KVM: Free new dirty bitmap if creating a new memslot fails
WARNING in sk_destruct net -1 syz, C done 454 1545d 1672d 22/29 1269d ebdc1a030962 tcp: add a missing sk_defer_free_flush() in tcp_splice_read()
BUG: unable to handle kernel paging request in eventfd_ctx_put fs 8 syz, C done 7 1394d 1422d 22/29 1269d 7353633814f6 KVM: x86/xen: Fix eventfd error handling in kvm_xen_eventfd_assign()
KASAN: use-after-free Read in task_work_run (2) kernel 19 syz, C unreliable 18 1348d 1440d 22/29 1269d 517e6a301f34 perf: Fix perf_pending_task() UaF
KASAN: slab-out-of-bounds Read in ipvlan_queue_xmit net 17 syz, C error error 8 1632d 2109d 22/29 1269d 81225b2ea161 ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
memory leak in do_seccomp (2) kernel 3 syz, C 4 1452d 2001d 22/29 1269d a1140cb215fa seccomp: Move copy_seccomp() to no failure path.
KASAN: use-after-free Read in __io_remove_buffers io-uring 19 syz, C done 2 1472d 1468d 22/29 1269d ec8516f3b7c4 io_uring: fix free of unallocated buffer list
WARNING in cfg80211_ch_switch_notify wireless -1 syz, C done 744 1470d 1513d 22/29 1269d 77e7b6ba78ed wifi: cfg80211: handle IBSS in channel switch
WARNING in napi_complete_done net -1 syz, C error 104 1377d 1381d 22/29 1269d 07d120aa33cc net: tun: call napi_schedule_prep() to ensure we own a napi
INFO: task hung in add_early_randomness (2) usb crypto 1 syz, C done 182 1317d 1535d 22/29 1269d 228432551bd8 virtio-rng: make device ready before making request
WARNING: kmalloc bug in bpf bpf -1 syz, C done done 562 1607d 1724d 22/29 1269d 0708a0afe291 mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls
possible deadlock in f2fs_write_checkpoint f2fs 4 syz, C done 2208 1629d 1675d 22/29 1269d c7f91bd41029 f2fs: Restore rwsem lockdep support
KASAN: use-after-free Read in xfs_qm_dqfree_one xfs 19 syz 7 1341d 1350d 22/29 1269d 52f31ed22821 xfs: dquot shrinker doesn't check for XFS_DQFLAG_FREEING
KMSAN: uninit-value in tomoyo_path_chown fs 7 syz, C 13763 1426d 1427d 22/29 1269d f52d74b190f8 open: always initialize ownership fields
KMSAN: uninit-value in asix_check_host_enable usb 7 syz, C 109 1577d 1635d 22/29 1269d 920a9fa27e78 net: asix: add proper error handling of usb read errors
WARNING in bpf_skb_load_helper_32 bpf -1 syz, C done 9 1470d 1501d 22/29 1269d 0326195f523a bpf: Make sure mac_header was set before using it
KASAN: use-after-free Read in ip6mr_sk_done net 19 syz, C done 10988 1383d 1653d 22/29 1269d 7d9b1b578d67 ip6mr: fix use-after-free in ip6mr_sk_done()
WARNING in jfs_symlink jfs -1 syz, C 12 1390d 1401d 22/29 1269d ebe060369f8d jfs: Fix fortify moan in symlink
possible deadlock in btrfs_search_slot_get_root btrfs 4 syz, C 5 1359d 1379d 22/29 1269d b740d8061669 btrfs: free btrfs_path before copying root refs to userspace
WARNING in component_del dri -1 syz, C done 6 1650d 1672d 22/29 1269d c853685d11c0 usb: core: Unregister device on component_add() failure
WARNING: refcount bug in smc_pnet_add smc 13 syz, C done 98 1639d 1653d 22/29 1269d 28f922213886 net/smc: fix ref_tracker issue in smc_pnet_add()
KASAN: use-after-free Read in hdr_find_e ntfs3 19 syz, C done done 66 1277d 1419d 22/29 1269d 0e8235d28f3a fs/ntfs3: Check fields while reading
possible deadlock in blkdev_put (3) block exfat 4 syz, C 870 1545d 1618d 22/29 1269d d292dc80686a loop: don't destroy lo->workqueue in __loop_clr_fd
KASAN: use-after-free Read in filp_close io-uring fs 19 syz, C done 17 1311d 1539d 22/29 1269d 40a1926022d1 fix the breakage in close_fd_get_file() calling conventions change
KMSAN: uninit-value in tcp_recvmsg net 7 syz, C 25918 1391d 1516d 22/29 1269d 1228b34c8d0e net: clear msg_get_inq in __sys_recvfrom() and __copy_msghdr_from_user()
memory leak in smc_sysctl_net_init smc 3 syz, C 8 1601d 1605d 22/29 1269d 5ae6acf1d00b net/smc: fix a memory leak in smc_sysctl_net_exit()
general protection fault in binder_alloc_print_pages kernel 12 syz, C error 157 1425d 1456d 22/29 1269d 1da52815d5f1 binder: fix alloc->vma_vm_mm null-ptr dereference
KASAN: null-ptr-deref Read in __free_pages kernel 11 syz, C inconclusive 21 1348d 1610d 22/29 1269d a635415a064e watch_queue: Fix NULL dereference in error cleanup
KASAN: use-after-free Read in net_tx_action kernel 19 syz, C inconclusive 3 1404d 1449d 22/29 1269d ebda44da44f6 net: sched: fix race condition in qdisc_graft()
WARNING in blk_mq_release block -1 syz, C error 11 1450d 1468d 22/29 1269d aa0c680c3aa9 block: Do not call blk_put_queue() if gendisk allocation fails
WARNING in hif_usb_send/usb_submit_urb wireless -1 syz, C unreliable done 374 1350d 2141d 22/29 1269d 16ef02bad239 wifi: ath9k: verify the expected usb_endpoints are present
BUG: Bad page map (5) mm 19 syz, C 35 1310d 1568d 22/29 1269d 4d24de9425f7 mm: MADV_COLLAPSE: refetch vm_end after reacquiring mmap_lock
KASAN: use-after-free Read in mas_next_entry fs mm 19 syz, C error 16 1380d 1393d 22/29 1269d 59f2f4b8a757 fs/userfaultfd: Fix maple tree iterator in userfaultfd_unregister()
memory leak in hidraw_report_event input usb 3 syz, C 1 1544d 1544d 22/29 1269d a5623a203cff HID: hidraw: fix memory leak in hidraw_release()
KASAN: use-after-free Read in inet_bind2_bucket_find net io-uring 19 syz, C done 13 1524d 1531d 22/29 1269d 593d1ebe00a4 Revert "net: Add a second bind table hashed by port and address"
INFO: task hung in p9_fd_close v9fs 1 syz, C error error 484 1379d 2543d 22/29 1269d ef575281b21e 9p/trans_fd: always use O_NONBLOCK read/write
KASAN: use-after-free Read in post_one_notification kernel 19 syz, C inconclusive 19 1409d 1609d 22/29 1269d 353f7988dd84 watchqueue: make sure to serialize 'wqueue->defunct' properly
memory leak in smc_create (2) smc 3 syz, C 2 1606d 1602d 22/29 1269d 1a74e9932374 net/smc: Fix sock leak when release after smc_shutdown()
WARNING in bpf_bprintf_prepare (2) bpf -1 syz, C 2 1403d 1442d 22/29 1269d 05b24ff9b2cf bpf: Prevent bpf program recursion for raw tracepoint probes
KASAN: use-after-free Read in driver_register usb 19 syz, C 131 1512d 1563d 22/29 1269d 5f0b5f4d50fa usb: gadget: fix race when gadget driver register via ioctl
possible deadlock in __inet_inherit_port net 4 syz, C done 85 1307d 1368d 22/29 1269d af295e854a4e l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
WARNING: kobject bug in erofs_unregister_sysfs erofs -1 syz, C done 5 1610d 1612d 22/29 1269d a942da24abc5 fs: erofs: add sanity check for kobject in erofs_unregister_sysfs
KASAN: use-after-free Read in blk_mq_sched_free_rqs block 19 syz, C error 8 1517d 1566d 22/29 1269d 50e34d78815e block: disable the elevator int del_gendisk
WARNING in driver_unregister input usb -1 syz, C 1 1546d 1542d 22/29 1269d f2d8c2606825 usb: gadget: Fix non-unique driver names in raw-gadget driver
KASAN: use-after-free Read in LZ4_decompress_safe_partial erofs 19 syz, C done 13 1597d 1752d 22/29 1269d eafc0a02391b lz4: fix LZ4_decompress_safe_partial read out of bound
KASAN: null-ptr-deref Write in kill_f2fs_super f2fs 12 syz, C error 49 1382d 1403d 22/29 1269d 91586ce0d39a f2fs: fix to invalidate dcc->f2fs_issue_discard in error path
memory leak in setup_mq_sysctls kernel 3 syz, C 2 1347d 1518d 22/29 1269d db7cfc380900 ipc: Free mq_sysctls if ipc namespace creation failed
memory leak in vhci_write bluetooth 3 syz, C 1 1461d 1457d 22/29 1269d 7c9524d92964 Bluetooth: L2CAP: Fix memory leak in vhci_write
WARNING in btrfs_commit_transaction btrfs -1 syz, C inconclusive done 3 1289d 1383d 22/29 1269d 8bb808c6ad91 btrfs: don't print stack trace when transaction is aborted due to ENOMEM
general protection fault in kvm_arch_vcpu_ioctl kvm-x86 2 syz, C inconclusive 365 1469d 1507d 22/29 1269d f83894b24c2a KVM: x86: Fix handling of APIC LVT updates when userspace changes MCG_CAP
possible deadlock in nilfs_count_free_blocks nilfs 4 syz, C 60 1387d 1399d 22/29 1269d 8ac932a4921a nilfs2: fix deadlock in nilfs_count_free_blocks()
kernel BUG at fs/ext4/inline.c:LINE! ext4 -1 syz, C done done 76 1309d 2132d 22/29 1269d 5c099c4fdc43 ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
INFO: trying to register non-static key in hci_uart_flush (2) bluetooth -1 syz error error 37 1397d 2539d 22/29 1269d 3124d320c22f Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
WARNING: still has locks held in io_ring_submit_lock fs io-uring 4 syz, C done 3 1554d 1554d 22/29 1269d e7637a492b9f io_uring: fix locking state for empty buffer group
INFO: rcu detected stall in mld_ifc_work net 1 syz, C inconclusive 1 1645d 1645d 22/29 1269d 5740d0689096 net: sched: limit TC_ACT_REPEAT loops
WARNING in aiptek_open/usb_submit_urb usb input -1 syz, C error 2380 1605d 2627d 22/29 1269d 5600f6986628 Input: aiptek - properly check endpoint type
WARNING: kmalloc bug in snd_pcm_plugin_alloc (2) sound -1 syz, C done 2 1618d 1614d 22/29 1269d efb6402c3c4a ALSA: oss: Fix PCM OSS buffer allocation overflow
WARNING in __queue_work (3) kernel -1 syz error 953 1370d 2204d 22/29 1269d 877afadad2dc Bluetooth: When HCI work queue is drained, only queue chained work
general protection fault in fq_codel_enqueue (3) net 2 syz, C inconclusive 5 1506d 1752d 22/29 1269d fd1894224407 bpf: Don't redirect packets with invalid pkt_len
KASAN: invalid-free in io_clean_op io-uring 24 syz, C 13 1404d 1421d 22/29 1269d 4c17a496a7a0 io_uring/net: fix cleanup double free free_iov init
WARNING in check_map_prog_compatibility bpf -1 syz, C inconclusive done 128 1421d 1584d 22/29 1269d 34dd3bad1a6f bpf: Relax the requirement to use preallocated hash maps in tracing progs.
WARNING: bad unlock balance in rxrpc_do_sendmsg afs net 4 syz, C inconclusive 14 1474d 1679d 22/29 1269d b0f571ecd794 rxrpc: Fix locking in rxrpc's sendmsg
memory leak in tun_chr_open net 3 syz, C 1 1438d 1438d 22/29 1269d 1118b2049d77 net: tun: Fix memory leaks of napi_get_frags
possible deadlock in snd_pcm_period_elapsed (3) sound 4 syz, C inconclusive 23 1466d 1692d 22/29 1269d 96b097091c66 ALSA: pcm: Use deferred fasync helper
memory leak in blk_mq_init_tags block usb 3 syz, C 2 1596d 1603d 22/29 1269d 03252259e18e scsi: sd: Clean up gendisk if device_add_disk() failed
general protection fault in udpv6_sendmsg net 2 syz, C error 69 1365d 1375d 22/29 1269d 6423ac2eb31e rxrpc: Fix oops from calling udpv6_sendmsg() on AF_INET socket
general protection fault in erofs_bread erofs 2 syz, C error 3 1386d 1395d 22/29 1269d e5126de138ca erofs: fix general protection fault when reading fragment
WARNING in ieee80211_ibss_csa_beacon wireless -1 syz, C error 4997 1269d 2138d 22/29 1269d 15bc8966b6d3 wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
INFO: task hung in synchronize_rcu (3) 1 syz, C done done 374 1278d 2216d 22/29 1269d 2d08935682ac KVM: x86: Don't re-acquire SRCU lock in complete_emulated_io()
WARNING in static_key_slow_try_dec (3) kernel -1 syz, C 26 1280d 1440d 22/29 1269d 921ebde3c0d2 netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
KASAN: slab-out-of-bounds Read in decrypt_internal net 17 syz, C inconclusive done 4 1591d 1682d 22/29 1269d 9381fe8c849c net/tls: fix slab-out-of-bounds bug in decrypt_internal
INFO: task hung in __input_unregister_device (4) usb input 1 syz, C done 924 1441d 1506d 22/29 1269d 98e01215708b Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
general protection fault in __ext4_journal_get_write_access fuse ext4 2 syz, C done done 7 2105d 2154d 22/29 1370d 384d87ef2c95 block: Do not discard buffers under a mounted filesystem
WARNING in sco_sock_sendmsg mm -1 syz, C inconclusive 2 1810d 1810d 22/29 1403d 0771cbb3b97d Bluetooth: SCO: Replace use of memcpy_from_msg with bt_skb_sendmsg
WARNING in ipvlan_unregister_nf_hook net -1 syz, C done done 4151 1718d 2354d 22/29 1426d f123cffdd8fe net: netlink: af_netlink: Prevent empty skb by adding a check on len.
WARNING: ODEBUG bug in bt_host_release bluetooth -1 syz done done 7 1951d 2205d 22/29 1426d e2cb6b891ad2 bluetooth: eliminate the potential race condition when removing the HCI controller
WARNING: suspicious RCU usage (5) -1 syz, C done 1 1525d 1521d 20/29 1514d f4e61f0c9add x86/kvm: Fix broken irq restoration in kvm_wait
general protection fault in sock_close net 2 syz done unreliable 2 2179d 2176d 20/29 1544d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
WARNING in dev_change_net_namespace net -1 syz done done 8 1729d 2378d 20/29 1550d f123cffdd8fe net: netlink: af_netlink: Prevent empty skb by adding a check on len.
general protection fault in hci_inquiry_result_with_rssi_evt bluetooth 2 syz, C done 17 1682d 1707d 20/29 1550d 72279d17df54 Bluetooth: hci_event: Rework hci_inquiry_result_with_rssi_evt
general protection fault in __loop_clr_fd block 2 syz, C done 5702 2326d 2353d 20/29 1550d 87579e9b7d8d loop: use worker per cgroup instead of kworker
WARNING in rtnl_dellink net -1 syz, C done done 94 1677d 2188d 20/29 1556d f123cffdd8fe net: netlink: af_netlink: Prevent empty skb by adding a check on len.
INFO: task hung in linkwatch_event (2) net 1 syz, C done done 1033 1575d 2300d 20/29 1556d 563fbefed46a cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
BUG: unable to handle kernel paging request in bitfill_aligned (2) fbdev 21 syz, C inconclusive done 26 1690d 2098d 20/29 1556d 0499f419b76f video: vga16fb: Only probe for EGA and VGA 16 color graphic cards
WARNING in drm_gem_shmem_vm_open -1 syz done done 38 1688d 1823d 20/29 1556d 0499f419b76f video: vga16fb: Only probe for EGA and VGA 16 color graphic cards
INFO: task hung in usb_get_descriptor 1 syz, C done done 4149 1618d 2140d 20/29 1556d 363eaa3a450a usbip: synchronize event handler with sysfs code paths
general protection fault in ieee80211_chanctx_num_assigned wireless 2 syz, C inconclusive done 15 1706d 2140d 20/29 1556d 563fbefed46a cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
general protection fault in xfrm_user_rcv_msg_compat net 2 syz, C unreliable done 1543 1837d 2049d 20/29 1556d 4e9505064f58 net/xfrm/compat: Copy xfrm_spdattr_type_t atributes
KASAN: slab-out-of-bounds Read in add_adv_patterns_monitor bluetooth 17 syz, C error done 5 2005d 2026d 20/29 1557d b4a221ea8a1f Bluetooth: advmon offload MSFT add rssi support
KASAN: use-after-free Read in ext4_xattr_set_entry (4) ext4 22 syz, C error done 21 1637d 2024d 20/29 1602d 6e47a3cc68fc ext4: get rid of super block and sbi from handle_mount_ops()
KASAN: out-of-bounds Read in ath9k_hif_usb_rx_cb (3) wireless usb 17 syz, C unreliable done 7 1645d 2049d 20/29 1614d 6ce708f54cc8 ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream
KASAN: slab-out-of-bounds Write in betop_probe input usb 21 syz, C unreliable 9 1823d 2379d 20/29 1614d 689e453a9b9c HID: betop: fix slab-out-of-bounds Write in betop_probe HID: betop: fix slab-out-of-bounds Write in betop_probe
possible deadlock in scheduler_tick kvm-x86 4 syz, C error 99 1959d 1971d 20/29 1614d a83829f56c7c KVM: x86: disable interrupts while pvclock_gtod_sync_lock is taken 8228c77d8b56 KVM: x86: switch pvclock_gtod_sync_lock to a raw spinlock
WARNING in mptcp_sendmsg_frag mptcp -1 syz, C inconclusive 6 1790d 1796d 20/29 1614d efe686ffce01 mptcp: ensure tx skbs always have the MPTCP ext mptcp: ensure tx skbs always have the MPTCP ext
KMSAN: uninit-value in dvb_usb_adapter_dvb_init (2) media usb 7 syz, C 34 1882d 2098d 20/29 1614d c5453769f77c media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init 899a61a3305d media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
BUG: sleeping function called from invalid context in __might_resched serial 5 syz, C inconclusive 9 1737d 1740d 20/29 1622d 1ee33b1ca2b8 tty: n_hdlc: make n_hdlc_tty_wakeup() asynchronous
WARNING in cgroup_finalize_control -1 syz done done 9 1760d 2288d 20/29 1622d 7ee285395b21 cgroup: Make rebind_subsystems() disable v2 controllers all at once
KASAN: use-after-free Read in snd_mixer_oss_get_volume1 sound 19 syz, C inconclusive 1 1765d 1761d 20/29 1622d 411cef6adfb3 ALSA: mixer: oss: Fix racy access to slots
memory leak in blk_iolatency_init block cgroups 3 syz, C 833 1622d 1798d 20/29 1622d 6f5ddde41069 blkcg: fix memory leak in blk_iolatency_init
memory leak in __mdiobus_register usb 3 syz, C 1 1790d 1786d 20/29 1622d ab609f25d198 net: mdiobus: Fix memory leak in __mdiobus_register ca6e11c337da phy: mdio: fix memory leak
WARNING in ref_tracker_dir_exit -1 syz, C done 16271 1678d 1707d 20/29 1622d 34ac17ecbf57 ethtool: use ethnl_parse_header_dev_put()
WARNING in ovl_create_real overlayfs -1 syz, C unreliable 164 1743d 1811d 20/29 1622d 1f5573cfe7a7 ovl: fix warning in ovl_create_real()
WARNING: kmalloc bug in hash_ip_create netfilter -1 syz, C done 641 1780d 1808d 20/29 1622d 7bbc3d385bd8 netfilter: ipset: Fix oversized kvmalloc() calls
WARNING in __i2c_transfer (2) i2c -1 syz, C done 337 1686d 1735d 20/29 1622d bb436283e25a i2c: validate user data in compat ioctl
WARNING in sta_info_insert_rcu -1 syz, C done done 2533 1715d 2152d 20/29 1622d a6555f844549 mac80211: Drop frames from invalid MAC address in ad-hoc mode
KASAN: use-after-free Read in __crypto_xor crypto 19 syz, C done 9 1777d 1809d 20/29 1622d 68b6dea802ce crypto: pcrypt - Delay write to padata->info da353fac65fe net/tls: Fix flipped sign in tls_err_abort() calls
KMSAN: uninit-value in legacy_dvb_usb_read_remote_control media usb 7 syz, C 186 1732d 2073d 20/29 1622d afae4ef7d5ad media: dvb-usb: fix ununit-value in az6027_rc_query
KMSAN: kernel-infoleak in move_addr_to_user (6) tipc 9 syz, C 4 1662d 1700d 20/29 1622d d6d86830705f net ticp:fix a kernel-infoleak in __tipc_sendmsg()
memory leak in bsg_register_queue usb 3 syz, C 1 1805d 1801d 20/29 1622d 1a0db7744e45 scsi: bsg: Fix device unregistration
KASAN: use-after-free Read in nft_table_lookup (2) netfilter 19 syz done 1 1802d 1798d 20/29 1622d a499b03bf36b netfilter: nf_tables: unlink table before deleting it
memory leak in reg_copy_regd wireless 3 syz, C 1 1855d 1851d 20/29 1622d e53e9828a8d2 cfg80211: always free wiphy specific regdomain
divide error in usbnet_start_xmit usb 2 syz, C 760 1746d 1762d 20/29 1622d 397430b50a36 usbnet: sanity check for maxpacket
KASAN: use-after-free Read in srcu_invoke_callbacks block 19 syz error 4 1666d 1678d 20/29 1622d 850fd2abbe02 block: cleanup q->srcu
KMSAN: kernel-infoleak in _copy_to_iter (6) net 9 syz, C 748 1622d 1711d 20/29 1622d 71ddeac8cd1d inet_diag: fix kernel-infoleak for UDP sockets
WARNING: ODEBUG bug in qdisc_create net -1 syz, C done 6 1790d 1818d 20/29 1622d a56d447f196f net/sched: sch_taprio: properly cancel timer from taprio_destroy()
WARNING: suspicious RCU usage in xfrm_set_default net 4 syz, C done 20 1785d 1790d 20/29 1622d 93ec1320b017 xfrm: fix rcu lock in xfrm_notify_userpolicy()
KASAN: slab-out-of-bounds Write in usb_hcd_poll_rh_status (2) usb 21 syz, C inconclusive 116 1685d 2168d 20/29 1622d 1d7d4c07932e USB: Fix "slab-out-of-bounds Write" bug in usb_hcd_poll_rh_status
general protection fault in io_uring_register fs io-uring 2 syz done 1 1802d 1798d 20/29 1622d 41d3a6bd1d37 io_uring: pin SQPOLL data before unlocking ring lock
INFO: trying to register non-static key in mxl111sf_ctrl_msg usb media -1 syz, C 73 2577d 2681d 20/29 1622d 44870a9e7a3c media: mxl111sf: change mutex_init() location
KASAN: use-after-free Write in io_queue_worker_create fs io-uring 22 syz, C unreliable 132 1705d 1714d 20/29 1622d 71a85387546e io-wq: check for wq exit after adding new worker task_work e47498afeca9 io-wq: remove spurious bit clear on task_work addition
KASAN: null-ptr-deref Write in sock_setsockopt net 12 syz, C 45 1639d 1747d 20/29 1622d d00c8ee31729 net: fix possible NULL deref in sock_reserve_memory
general protection fault in rcu_segcblist_enqueue kvm-x86 2 syz, C done done 368 1805d 1869d 20/29 1622d eb7511bf9182 KVM: x86: Handle SRCU initialization failure during page track init
WARNING in atp_close (3) input -1 syz, C 125 1686d 1779d 20/29 1622d 9f3ccdc3f6ef Input: appletouch - initialize work before device registration
KASAN: use-after-free Read in netlbl_catmap_walk lsm net 19 syz, C inconclusive 1 1817d 1817d 20/29 1622d 0817534ff9ea smackfs: Fix use-after-free in netlbl_catmap_walk()
WARNING in page_counter_cancel (3) mm cgroups -1 syz, C done 22 1679d 1729d 20/29 1622d 269bda9e7da4 mptcp: Check reclaim amount before reducing allocation
KMSAN: uninit-value in ppp_send_frame ppp 7 syz, C 5 1665d 1686d 20/29 1622d 44073187990d ppp: ensure minimum packet size in ppp_write()
general protection fault in bpf_skb_cgroup_id net bpf 2 syz, C inconclusive 107 1778d 1794d 20/29 1622d 435b08ec0094 bpf, test, cgroup: Use sk_{alloc,free} for test cases
general protection fault in inet_csk_accept net 2 syz, C done 8 1711d 1710d 20/29 1622d b0cdc5dbcf2b mptcp: never allow the PM to close a listener subflow
KASAN: null-ptr-deref Write in rhashtable_free_and_destroy (2) wireless 12 syz, C unreliable 38 1686d 1951d 20/29 1622d 8b5cb7e41d9d mac80211: mesh: embedd mesh_paths and mpp_paths into ieee80211_if_mesh
general protection fault in set_task_ioprio block 2 syz, C done 19 1698d 1699d 20/29 1622d a957b61254a7 block: fix error in handling dead task for ioprio setting
INFO: task hung in disconnect_work wireless 1 syz, C inconclusive done 3 1732d 2007d 20/29 1622d 563fbefed46a cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
INFO: trying to register non-static key in ath9k_htc_rxep wireless -1 syz, C unreliable 9896 1676d 2250d 20/29 1622d b0ec7e55fce6 ath9k_htc: fix NULL pointer dereference at ath9k_htc_rxep()
WARNING in nested_vmx_vmexit kvm-x86 -1 syz, C done 101 1698d 1715d 20/29 1622d a80dfc025924 KVM: VMX: Always clear vmx->fail on emulation_required
KASAN: invalid-free in security_tun_dev_free_security selinux 24 syz error error 346 1697d 2039d 20/29 1622d 158b515f703e tun: avoid double free in tun_free_netdev
INFO: task hung in io_uring_del_tctx_node io-uring fs 1 syz, C unreliable 37 1624d 1788d 20/29 1622d 8bab4c09f24e io_uring: allow conditional reschedule for intensive iterators
KASAN: use-after-free Read in __isofs_iget isofs 19 syz, C inconclusive 2 1770d 1766d 20/29 1622d e96a1866b405 isofs: Fix out of bound access for corrupted isofs image
INFO: trying to register non-static key in l2cap_sock_teardown_cb bluetooth -1 syz, C done done 88 1750d 2053d 20/29 1622d 1bff51ea59a9 Bluetooth: fix use-after-free error in lock_sock_nested()
KASAN: invalid-free in packet_set_ring net 24 syz, C inconclusive 4 1708d 1708d 20/29 1622d ec6af094ea28 net/packet: rx_owner_map depends on pg_vec
KASAN: use-after-free Read in disk_release_events block fuse exfat 19 syz inconclusive 1 1710d 1706d 20/29 1622d 99d8690aae4b block: fix error unwinding in device_add_disk
WARNING: ODEBUG bug in corrupted (2) usb input -1 syz, C error 2 1692d 1903d 20/29 1622d 33812fc7c8d7 HID: magicmouse: Fix an error handling path in magicmouse_probe()
KASAN: use-after-free Read in rtl8712_dl_fw usb staging 19 syz, C 6961 1738d 1762d 20/29 1622d c052cc1a069c staging: rtl8712: fix use-after-free in rtl8712_dl_fw
general protection fault in cgroup_sk_free cgroups 2 syz, C error 2727 1780d 1794d 20/29 1622d 78cc316e9583 bpf, cgroup: Assign cgroup in cgroup_sk_alloc when called from interrupt
general protection fault in bpf_skb_ancestor_cgroup_id net bpf 2 syz, C unreliable 232 1778d 1794d 20/29 1622d 435b08ec0094 bpf, test, cgroup: Use sk_{alloc,free} for test cases
WARNING in loop_add -1 syz, C done error 64 1737d 2551d 20/29 1622d 278167fd2f8f block: add __must_check for *add_disk*() callers
INFO: rcu detected stall in fq_pie_timer net 1 syz, C error 35 1663d 1880d 20/29 1622d 61c2402665f1 net/sched: fq_pie: prevent dismantle issue
INFO: rcu detected stall in sys_recvmmsg mptcp 1 syz, C done 52 1658d 1790d 20/29 1622d 612f71d7328c mptcp: fix possible stall on recvmsg()
KASAN: use-after-free Write in io_submit_one fs 22 syz, C done 11 1709d 1747d 20/29 1622d 75feae73a280 block: fix single bio async DIO error handling
general protection fault in free_percpu net 2 syz unreliable done 80 1690d 1957d 20/29 1622d 158b515f703e tun: avoid double free in tun_free_netdev
WARNING: kmalloc bug in hash_net_create netfilter -1 syz, C done 283 1781d 1808d 20/29 1622d 7bbc3d385bd8 netfilter: ipset: Fix oversized kvmalloc() calls
possible deadlock in snd_mixer_oss_ioctl1 sound 4 syz, C done 149 1754d 1758d 20/29 1622d 3ab799201845 ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
WARNING in kvm_mmu_notifier_invalidate_range_start kvm -1 syz, C done 19 1631d 1692d 20/29 1622d d6aba4c8e20d hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
WARNING: lock held when returning to user space in tcp_setsockopt (2) net 4 syz, C done done 6 1695d 1701d 20/29 1622d b29fcfb54cd7 mptcp: full disconnect implementation
possible deadlock in dquot_commit ext4 4 syz, C unreliable 41 1713d 2013d 20/29 1622d 4013d47a5307 ext4: make sure to reset inode lockdep class when quota enabling fails
WARNING in tcf_chain0_head_change_cb_del (3) net -1 syz, C inconclusive 107 1706d 1841d 20/29 1622d ab443c539167 sch_cake: do not call cake_destroy() from cake_init()
WARNING in inc_nlink (2) fs -1 syz, C inconclusive done 21 1622d 1959d 20/29 1622d 97f044f690ba fuse: don't increment nlink in link()
possible deadlock in io_worker_cancel_cb io-uring fs 4 syz, C done 9 1703d 1707d 20/29 1622d d800c65c2d4e io-wq: drop wqe lock before creating new worker
WARNING: ODEBUG bug in batadv_v_ogm_free batman -1 syz, C done done 6 1756d 1774d 20/29 1622d 6f68cd634856 net: batman-adv: fix error handling
KMSAN: kernel-usb-infoleak in usbnet_write_cmd (3) usb 9 syz, C 256 1640d 1684d 20/29 1622d d668769eb9c5 net: mcs7830: handle usb read errors properly
KMSAN: uninit-value in ppp_async_push (2) ppp 7 syz, C 323 1641d 1713d 20/29 1622d 44073187990d ppp: ensure minimum packet size in ppp_write()
WARNING: suspicious RCU usage in __dev_queue_xmit batman 4 syz, C done 635 1678d 1679d 20/29 1622d 6316136ec6e3 netfilter: egress: avoid a lockdep splat
WARNING in nsim_dev_reload_destroy net -1 syz, C done 2895 1753d 1758d 20/29 1622d fb9d19c2d844 Revert "devlink: Remove not-executed trap group notifications"
KASAN: use-after-free Read in blk_mq_sched_tags_teardown block usb 19 syz, C done 6 1759d 1757d 20/29 1622d 8bdf7b3fe1f4 blk-mq-sched: Don't reference queue tagset in blk_mq_sched_tags_teardown()
KASAN: null-ptr-deref Write in l2cap_chan_put bluetooth 21 syz done done 7 1754d 2199d 20/29 1622d 1bff51ea59a9 Bluetooth: fix use-after-free error in lock_sock_nested()
INFO: trying to register non-static key in ath9k_wmi_event_tasklet wireless usb -1 syz, C unreliable 7 1712d 1889d 20/29 1622d 8b3046abc99e ath9k_htc: fix NULL pointer dereference at ath9k_htc_tx_get_packet()
KASAN: use-after-free Read in free_netdev (2) net 19 syz, C done done 1715 1720d 2354d 20/29 1622d f123cffdd8fe net: netlink: af_netlink: Prevent empty skb by adding a check on len.
INFO: task hung in set_current_rng crypto usb 1 syz, C unreliable done 1 1749d 1867d 20/29 1622d 2bb31abdbe55 hwrng: virtio - don't wait on cleanup
general protection fault in fuse_test_super fuse 19 syz, C error 32 1629d 1796d 20/29 1622d 80019f113832 fuse: always initialize sb->s_fs_info
memory leak in mgmt_cmd_complete bluetooth 3 syz, C 3 1818d 1917d 20/29 1622d 709fca500067 Bluetooth: hci_sock: purge socket queues in the destruct() callback
kernel BUG at net/core/dev.c:LINE! (4) -1 syz, C done done 432 1705d 2093d 20/29 1622d f123cffdd8fe net: netlink: af_netlink: Prevent empty skb by adding a check on len.
WARNING: refcount bug in sys_memfd_secret mm 13 syz, C done done 4217 1756d 1759d 20/29 1622d 87066fdd2e30 Revert "mm/secretmem: use refcount_t instead of atomic_t"
KMSAN: uninit-value in ax88772a_hw_reset usb 7 syz, C 94 1640d 1728d 20/29 1622d 8035b1a2a37a asix: fix uninit-value in asix_mdio_read()
WARNING: kmalloc bug in nf_tables_newset netfilter -1 syz, C done 95 1780d 1808d 20/29 1622d 45928afe94a0 netfilter: nf_tables: Fix oversized kvmalloc() calls
WARNING in static_key_slow_try_dec (2) kernel -1 syz, C unreliable 5417 1761d 1829d 20/29 1622d f7d8a19f9a05 Revert "KVM: x86: Open code necessary bits of kvm_lapic_set_base() at vCPU RESET"
UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len net -1 syz, C unreliable 5660 1780d 2078d 20/29 1622d b193e15ac69d net: prevent user from passing illegal stab size
WARNING in emulate_vsyscall kernel -1 syz, C done done 3890 1785d 1966d 20/29 1622d d4ffd5df9d18 x86/fault: Fix wrong signal when vsyscall fails with pkey
WARNING: kmalloc bug in hash_mac_create netfilter -1 syz, C done 11 1801d 1806d 20/29 1622d 7bbc3d385bd8 netfilter: ipset: Fix oversized kvmalloc() calls
BUG: unable to handle kernel paging request in __blk_mq_alloc_requests io-uring block 19 syz, C unreliable 107 1741d 1749d 20/29 1622d a22c00be90de block: assign correct tag before doing prefetch of request
WARNING in ieee80211_vif_release_channel (2) wireless -1 syz, C done 5 1697d 1700d 20/29 1622d 87a270625a89 mac80211: fix locking in ieee80211_start_ap error path
KASAN: use-after-free Read in unmap_page_range (2) mm 19 syz, C unreliable 4 1732d 1750d 20/29 1622d 337546e83fc7 mm/oom_kill.c: prevent a race between process_mrelease and exit_mmap
general protection fault in dev_get_by_index_rcu (2) bpf net 2 syz, C error 18 1682d 1682d 20/29 1622d 382778edc826 xdp: check prog type before updating BPF link
possible deadlock in fuse_reverse_inval_entry fuse 4 syz, C error 1 1804d 1830d 20/29 1622d bda9a71980e0 fuse: annotate lock in fuse_reverse_inval_entry()
INFO: rcu detected stall in snd_seq_write (2) sound 1 syz done 21 1738d 1750d 20/29 1622d 6fadb494a638 ALSA: seq: Set upper limit of processed events
possible deadlock in md_open raid 4 syz, C unreliable 2844 1785d 1818d 20/29 1622d 7df835a32a8b md: fix a lock order reversal in md_alloc
INFO: task hung in io_uring_try_cancel_requests fs io-uring 1 syz, C error 41 1711d 1753d 20/29 1622d f75d118349be io_uring: harder fdinfo sq/cq ring iterating
possible deadlock in blkdev_put (2) exfat block 4 syz, C done 502 1622d 1723d 20/29 1622d 322c4293ecc5 loop: make autoclear operation asynchronous
INFO: rcu detected stall in dummy_timer (3) usb 1 syz, C error 132 1636d 2224d 20/29 1622d 476db72e5219 media: mceusb: return without resubmitting URB in case of -EPROTO error.
WARNING in page_counter_uncharge cgroups mm -1 syz, C done done 2 1691d 1691d 20/29 1622d 269bda9e7da4 mptcp: Check reclaim amount before reducing allocation
KMSAN: uninit-value in asix_mdio_read (2) usb 7 syz, C 1075 1622d 1702d 20/29 1622d 8035b1a2a37a asix: fix uninit-value in asix_mdio_read()
WARNING in __dev_set_promiscuity net -1 syz, C done 11 1784d 1787d 20/29 1622d a5b8fd657881 net: dev_addr_list: handle first address in __hw_addr_add_ex
WARNING in signalfd_cleanup fs io-uring -1 syz, C done 201 1668d 1684d 20/29 1622d 791f3465c4af io_uring: fix UAF due to missing POLLFREE handling
BUG: sleeping function called from invalid context in hci_cmd_sync_cancel net usb 5 syz, C done 28 1698d 1712d 20/29 1622d 744451c162a5 Bluetooth: hci_sync: Push sync command cancellation to workqueue
general protection fault in percpu_ref_put cgroups 2 syz, C done 412 1781d 1790d 20/29 1622d 78cc316e9583 bpf, cgroup: Assign cgroup in cgroup_sk_alloc when called from interrupt
WARNING: refcount bug in j1939_netdev_start (2) can 13 syz error error 51 1761d 2407d 20/29 1622d d9d52a3ebd28 can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv
INFO: rcu detected stall in newstat fs usb 1 syz, C unreliable done 4 1716d 1839d 20/29 1622d 476db72e5219 media: mceusb: return without resubmitting URB in case of -EPROTO error.
BUG: spinlock bad magic in synchronize_srcu kvm-x86 4 syz, C done done 3254 1784d 2154d 20/29 1622d eb7511bf9182 KVM: x86: Handle SRCU initialization failure during page track init
INFO: task hung in do_proc_bulk usb 1 syz inconclusive 8 1749d 1814d 20/29 1622d ae8709b296d8 USB: core: Make do_proc_control() and do_proc_bulk() killable
BUG: sleeping function called from invalid context in tipc_crypto_start net 5 syz, C done done 6 1700d 1706d 20/29 1622d f845fe5819ef Revert "tipc: use consistent GFP flags"
general protection fault in ref_tracker_alloc net 2 syz, C done 679 1678d 1707d 20/29 1622d 0976b888a150 ethtool: fix null-ptr-deref on ref tracker
INFO: task hung in io_uring_cancel_generic (2) io-uring fs 1 syz, C done 97 1706d 1733d 20/29 1622d 78a780602075 io_uring: ensure task_work gets run as part of cancelations
WARNING in perf_pending_event perf -1 syz, C error 3 1745d 1741d 20/29 1622d 73743c3b0922 perf: Ignore sigtrap for tracepoints destined for other tasks
INFO: rcu detected stall in io_wqe_worker (2) fs io-uring 1 syz, C done 2 1754d 1754d 20/29 1622d c5e0321e43de Revert "devlink: Remove not-executed trap policer notifications"
WARNING: kmalloc bug in bpf_check bpf -1 syz, C done 34 1795d 1808d 20/29 1622d 0e6491b55970 bpf: Add oversize check before call kvcalloc()
WARNING in hrtimer_forward kernel -1 syz, C done done 217 1667d 2151d 20/29 1622d 313bbd1990b6 mac80211-hwsim: fix late beacon hrtimer handling
KMSAN: uninit-value in kvm_cpuid kvm-x86 7 syz, C 22 1756d 1780d 20/29 1622d e8a747d0884e KVM: x86: Swap order of CPUID entry "index" vs. "significant flag" checks
kernel panic: smack: Failed to initialize cipso DOI. lsm 2 syz, C done error 128 1749d 2330d 20/29 1622d f91488ee15bd smackfs: use __GFP_NOFAIL for smk_cipso_doi()
KMSAN: uninit-value in pneigh_fill_info net 7 syz, C 14 1709d 1714d 20/29 1622d e195e9b5dee6 net, neigh: clear whole pneigh_entry at alloc time
WARNING in z_erofs_lz4_decompress erofs -1 syz, C 2 1756d 1758d 20/29 1622d a0961f351d82 erofs: don't trigger WARN() when decompression fails
KASAN: use-after-free Read in sixpack_close hams 19 syz, C done 879 1731d 1736d 20/29 1622d 81b1d548d00b hamradio: remove needs_free_netdev to avoid UAF
INFO: rcu detected stall in ieee80211_tasklet_handler wireless 1 syz, C error done 74 1786d 2066d 20/29 1622d 313bbd1990b6 mac80211-hwsim: fix late beacon hrtimer handling
UBSAN: shift-out-of-bounds in nl802154_new_interface wpan -1 syz, C inconclusive done 879 1723d 2001d 20/29 1622d 451dc48c806a net: ieee802154: handle iftypes as u32
possible deadlock in wake_up_all_idle_cpus perf 4 syz, C done 14 1759d 1766d 20/29 1622d 96611c26dc35 sched: Improve wake_up_all_idle_cpus() take #2
KMSAN: uninit-value in snd_rawmidi_ioctl sound 7 syz, C 1506 1640d 1702d 20/29 1622d 39a8fc4971a0 ALSA: rawmidi - fix the uninitalized user_pversion
KASAN: slab-out-of-bounds Read in hci_le_meta_evt (2) bluetooth 17 syz, C inconclusive 2 1750d 1750d 20/29 1622d 3a56ef719f0b Bluetooth: stop proccessing malicious adv data
general protection fault in nfc_alloc_send_skb net nfc 2 syz, C done 2 1690d 1684d 20/29 1622d dded08927ca3 nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed bind()
BUG: corrupted list in em28xx_init_extension usb media 8 syz, C error 18 1853d 2397d 20/29 1622d 2c98b8a3458d media: em28xx: add missing em28xx_close_extension
possible deadlock in mptcp_close mptcp 4 syz, C done 931 1780d 1791d 20/29 1622d 49054556289e net: introduce and use lock_sock_fast_nested()
BUG: unable to handle kernel NULL pointer dereference in fifo_set_limit net 10 syz, C error 1 1781d 1781d 20/29 1622d 560ee196fe9e net_sched: fix NULL deref in fifo_set_limit()
general protection fault in ieee80211_assign_vif_chanctx wireless 2 syz, C inconclusive 4 1760d 2018d 20/29 1622d 563fbefed46a cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
WARNING in rtnl_stats_get net -1 syz, C unreliable 31 1749d 1938d 20/29 1622d 0854a0513321 net: bridge: fix under estimation in br_get_linkxstats_size()
kernel BUG at net/phonet/socket.c:LINE! net -1 syz, C inconclusive 168 1699d 2319d 20/29 1622d 75a2f3152009 phonet/pep: refuse to enable an unbound pipe
possible deadlock in io_poll_double_wake (3) io-uring fs 4 syz, C error done 703 1677d 1951d 20/29 1622d aa43477b0402 io_uring: poll rework
KASAN: use-after-free Read in nf_tables_dump_sets netfilter 19 syz done done 1 1804d 1833d 20/29 1622d a499b03bf36b netfilter: nf_tables: unlink table before deleting it
KASAN: use-after-free Read in __lock_sock sctp 19 syz done error 26 2014d 2829d 20/29 1622d 5ec7d18d1813 sctp: use call_rcu to free endpoint
KMSAN: uninit-value in fib_get_nhs net 7 syz, C 14 1640d 1711d 20/29 1622d 7a3429bace0e ipv4: Check attribute length for RTA_GATEWAY in multipath route
WARNING in sk_stream_kill_queues (7) net -1 syz, C 6689 1623d 1741d 20/29 1622d c4777efa751d net: add and use skb_unclone_keeptruesize() helper
WARNING in batadv_nc_mesh_free batman -1 syz, C inconclusive 1 1760d 1760d 20/29 1622d 6f68cd634856 net: batman-adv: fix error handling
KASAN: use-after-free Read in vlan_dev_real_dev (2) net 19 syz, C error 7 1759d 1770d 20/29 1622d 563bcbae3ba2 net: vlan: fix a UAF in vlan_dev_real_dev()
KASAN: null-ptr-deref Write in __pm_runtime_resume pm 12 syz, C done 108 1636d 1814d 20/29 1622d 2fc7acb69fa3 Bluetooth: hci_uart: fix GPF in h5_recv
UBSAN: shift-out-of-bounds in xfrm_get_default net -1 syz, C done 104 1773d 1812d 20/29 1622d 3c10ffddc61f net: xfrm: fix shift-out-of-bounds in xfrm_get_default
WARNING in new_slab mm -1 syz, C inconclusive 2 1669d 1700d 20/29 1622d c12837d1bb31 ref_tracker: use __GFP_NOFAIL more carefully
INFO: task hung in hwrng_register crypto usb 1 syz unreliable done 1 1769d 1825d 20/29 1622d 2bb31abdbe55 hwrng: virtio - don't wait on cleanup
WARNING in ref_tracker_free net -1 syz, C done 14831 1679d 1707d 20/29 1622d 123e495ecc25 net: linkwatch: be more careful about dev->linkwatch_dev_tracker
WARNING in bpf_warn_invalid_xdp_action -1 syz, C done done 8941 1678d 2398d 20/29 1622d 2cbad989033b bpf: Do not WARN in bpf_warn_invalid_xdp_action()
INFO: rcu detected stall in br_multicast_query_expired kernel 1 syz, C inconclusive 2 1699d 1699d 20/29 1622d f83a112bd91a net: bridge: mcast: add and enforce startup query interval minimum
unregister_netdevice: waiting for DEV to become free (6) 2 syz, C error 13128 1622d 1741d 20/29 1622d 34ac17ecbf57 ethtool: use ethnl_parse_header_dev_put()
WARNING in trc_read_check_handler kernel -1 syz, C unreliable done 40 1749d 1837d 20/29 1622d 96017bf90397 rcu-tasks: Simplify trc_read_check_handler() atomic operations
WARNING: held lock freed in spi_unregister_controller spi usb 4 syz, C inconclusive 251 1722d 1762d 20/29 1622d 6c53b45c71b4 spi: fix use-after-free of the add_lock mutex
kernel BUG in find_lock_entries mm -1 syz, C done 10 1670d 1833d 20/29 1622d d417b49fff3e mm/filemap.c: remove bogus VM_BUG_ON
WARNING in __nf_unregister_net_hook (4) netfilter -1 syz, C error 66 1624d 1954d 20/29 1622d 68a3765c659f netfilter: nf_tables: skip netdev events generated on netns removal
WARNING in gnet_stats_add_basic net -1 syz, C done 14 1762d 1763d 20/29 1622d e22db7bd552f net: sched: Allow statistics reads from softirq.
WARNING in isotp_tx_timer_handler can -1 syz, C error 1553 1622d 2065d 20/29 1622d 9acf636215a6 can: isotp: isotp_sendmsg(): add result check for wait_event_interruptible()
general protection fault in hrtimer_active (3) kernel 2 syz done error 34 1657d 1962d 20/29 1622d e28587cc491e sit: do not call ipip6_dev_free() from sit_init_net()
INFO: task hung in io_wqe_worker fs io-uring 1 syz, C unreliable 3 1764d 1760d 20/29 1622d 1d5f5ea7cb7d io-wq: remove worker to owner tw dependency
BUG: corrupted list in netif_napi_add net 8 syz unreliable done 17 1737d 1768d 20/29 1622d 0315a075f134 net: fix premature exit from NAPI state polling in napi_disable()
WARNING in fuse_evict_inode fuse -1 syz, C done 43 1759d 1764d 20/29 1622d 5c791fe1e2a4 fuse: make sure reclaim doesn't write the inode
KASAN: use-after-free Read in bdev_free_inode block 19 syz error 7 1772d 1792d 20/29 1622d 06cc978d3ff2 block: genhd: fix double kfree() in __alloc_disk_node()
general protection fault in scsi_queue_rq fuse scsi 2 syz, C done done 4000 1739d 2134d 20/29 1622d 20aaef52eb08 scsi: scsi_ioctl: Validate command size
INFO: task can't die in __cond_resched net 1 syz, C error 66 1737d 1791d 20/29 1622d e9edc188fc76 netfilter: conntrack: serialize hash resizes and cleanups
BUG: unable to handle kernel NULL pointer dereference in bpf 10 syz, C done 753 1679d 1751d 20/29 1622d ad10c381d133 bpf: Add missing map_delete_elem method to bloom filter map
KASAN: vmalloc-out-of-bounds Read in bpf_prog_put bpf 17 syz, C done 2 1702d 1700d 20/29 1622d 218d747a4142 bpf, sockmap: Fix double bpf_prog_put on error case in map_link
general protection fault in nf_tables_dump_tables netfilter 2 syz done done 4 1787d 1787d 20/29 1622d a499b03bf36b netfilter: nf_tables: unlink table before deleting it
BUG: unable to handle kernel NULL pointer dereference in unix_shutdown net 10 syz, C unreliable 413 1818d 1821d 20/29 1665d d359902d5c35 af_unix: Fix NULL pointer bug in unix_shutdown
kernel BUG at mm/vmalloc.c:LINE! (2) mm -1 syz, C done done 6605 1817d 2228d 20/29 1665d 537cf4e3cc2f xsk: Fix umem cleanup bug at socket destruct
memory leak in __pskb_copy_fclone wpan 3 syz, C 21 1859d 2001d 20/29 1682d 1090340f7ee5 net: Fix memory leak in ieee802154_raw_deliver
WARNING in rtl28xxu_ctrl_msg/usb_submit_urb usb -1 syz, C 50 1862d 1910d 20/29 1740d 76f22c93b209 media: rtl28xxu: fix zero-length control request media: rtl28xxu: fix zero-length control request
WARNING in hso_free_net_device usb -1 syz, C error 528 1858d 2539d 20/29 1740d 788e67f18d79 usb: hso: fix error handling code of hso_create_net_device usb: hso: fix error handling code of hso_create_net_device
KASAN: null-ptr-deref Read in filp_close (2) fs 19 syz, C 3 1860d 1969d 20/29 1740d 3b0462726e7e cgroup: verify that source is a string 9b5b872215fe file: fix close_range() for unshare+cloexec
BUG: sleeping function called from invalid context in lock_sock_nested (2) bluetooth 5 syz, C done error 19391 1831d 2367d 20/29 1740d e04480920d1e Bluetooth: defer cleanup of resources in hci_unregister_dev() Bluetooth: defer cleanup of resources in hci_unregister_dev()
KASAN: use-after-free Write in dec_rlimit_ucounts kernel 22 syz, C 4 1823d 1856d 20/29 1740d 345daff2e994 ucounts: Fix race condition between alloc_ucounts and put_ucounts bbb6d0f3e1fe ucounts: Increase ucounts reference counter before the security hook
KASAN: use-after-free Read in cipso_v4_genopt lsm net 19 syz, C inconclusive 5 1992d 1993d 20/29 1741d ad5d07f4a9cd cipso,calipso: resolve a number of problems with the DOI refcounts 1165affd4848 net: mac802154: Fix general protection fault
memory leak in kobject_set_name_vargs (4) kernel 3 syz, C 171 1808d 2095d 20/29 1741d 8fd0c1b0647a nilfs2: fix memory leak in nilfs_sysfs_delete_device_group
WARNING in destroy_conntrack netfilter -1 syz, C done 1 1835d 1833d 20/29 1741d e3245a7b7b34 netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with mutex
general protection fault in hwsim_del_edge_nl wpan 2 syz, C done 3 1886d 1886d 20/29 1741d 0303b30375df ieee802154: hwsim: avoid possible crash in hwsim_del_edge_nl()
KMSAN: uninit-value in number (3) media 7 syz, C 8575 1741d 1984d 20/29 1741d eaaea4681984 media: gspca/sq905.c: fix uninitialized variable
WARNING in idr_get_next arm-msm net -1 syz, C error done 21 1931d 2176d 20/29 1741d 3cbf7530a163 qrtr: Convert qrtr_ports from IDR to XArray
KASAN: null-ptr-deref Read in phy_disconnect net usb 11 syz, C 255 1807d 1811d 20/29 1741d 1406e8cb4b05 net: usb: asix: do not call phy_disconnect() for ax88178
WARNING in ex_handler_fprestore kernel -1 syz, C done 5 1903d 1910d 20/29 1741d 484cea4f362e x86/fpu: Prevent state corruption in __fpu__restore_sig()
KMSAN: uninit-value in hsr_fill_frame_info net 7 syz, C 249 1857d 2155d 20/29 1741d 2e9f60932a2c net: hsr: check skb can contain struct hsr_ethhdr in fill_frame_info
possible deadlock in snd_timer_interrupt sound 4 syz, C done 41 1748d 1848d 20/29 1741d f671a691e299 fcntl: fix potential deadlocks for &fown_struct.lock
WARNING: refcount bug in ip6_tnl_dev_uninit net 13 syz, C done 16 1963d 1968d 20/29 1741d 0d7a7b2014b1 ipv6: remove extra dev_hold() for fallback tunnels
WARNING in bpf_bprintf_prepare bpf -1 syz, C unreliable 96 1886d 1924d 20/29 1741d e2d5b2bb769f bpf: Fix nested bpf_bprintf_prepare with more per-cpu buffers
KASAN: use-after-free Read in snd_seq_timer_interrupt (2) sound 19 syz, C inconclusive 2 1898d 1896d 20/29 1741d 83e197a8414c ALSA: seq: Fix race of snd_seq_timer_open()
possible deadlock in hfs_find_init hfs 4 syz, C done error 1 2047d 3038d 20/29 1741d b3b2177a2d79 hfs: add lock nesting notation to hfs_find_init
KASAN: slab-out-of-bounds Read in add_del_if bridge 17 syz, C unreliable 970 1832d 1808d 20/29 1741d 9384eacd80f3 net: core: don't call SIOCBRADD/DELIF for non-bridge devices
memory leak in zr364xx_start_readpipe media usb 3 syz, C 2 1890d 1917d 20/29 1741d 0a045eac8d04 media: zr364xx: fix memory leak in zr364xx_start_readpipe
KASAN: use-after-free Write in alloc_ucounts exfat 22 syz 7 1839d 1856d 20/29 1741d 345daff2e994 ucounts: Fix race condition between alloc_ucounts and put_ucounts
UBSAN: shift-out-of-bounds in ___bpf_prog_run bpf -1 syz, C unreliable 38 1874d 1985d 20/29 1741d 28131e9d9333 bpf: Fix up register-based shifts in interpreter to silence KUBSAN
memory leak in garp_request_join net 3 syz, C 414 1870d 2393d 20/29 1741d 42ca63f98084 net/802/garp: fix memleak in garp_request_join()
memory leak in pcan_usb_fd_init usb can 3 syz, C 19 2004d 2074d 20/29 1741d a0b96b4a6274 drivers: net: fix memory leak in peak_usb_create_dev
unregister_netdevice: waiting for DEV to become free (5) 2 syz, C done 40035 1741d 1986d 20/29 1741d 0d7a7b2014b1 ipv6: remove extra dev_hold() for fallback tunnels
WARNING in dtv5100_probe/usb_submit_urb usb -1 syz, C 51 1862d 1908d 20/29 1741d 8c8b9a9be2af media: dtv5100: fix control-request directions
memory leak in io_sqe_buffers_register fs 3 syz, C 2 1934d 1934d 20/29 1741d bb6659cc0ad3 io_uring: Fix memory leak in io_sqe_buffers_register()
BUG: using smp_processor_id() in preemptible code in clock_was_set kernel 4 syz, C done 231 1829d 1830d 20/29 1741d 9482fd71dbb8 hrtimer: Use raw_cpu_ptr() in clock_was_set()
KMSAN: uninit-value in virtio_net_hdr_to_skb net 7 syz, C 325 1858d 1917d 20/29 1741d 61431a5907fc net: ensure mac header is set in virtio_net_hdr_to_skb()
memory leak in kvm_dev_ioctl kvm 3 syz, C 37 1858d 1870d 20/29 1741d 004d62eb4e57 kvm: debugfs: fix memory leak in kvm_create_vm_debugfs
WARNING in blk_rq_append_bio block usb -1 syz, C done 6 1952d 1917d 20/29 1741d cbb749cf377a block: remove an incorrect check from blk_rq_append_bio
INFO: task hung in ext4_put_super ext4 1 syz, C inconclusive done 1 1887d 1917d 20/29 1741d 618f003199c6 ext4: fix memory leak in ext4_fill_super
WARNING in io_link_timeout_fn fs io-uring -1 syz, C done 2 1922d 1922d 20/29 1741d 447c19f3b507 io_uring: fix ltout double free on completion race
KASAN: slab-out-of-bounds Write in ext4_write_inline_data_end ext4 21 syz, C done 1 1824d 1823d 20/29 1741d a54c4613dac1 ext4: fix race writing to an inline_data file while its xattrs are changing
general protection fault in nl802154_del_llsec_devkey wpan 8 syz, C inconclusive 229 1954d 2006d 20/29 1741d 27c746869e1a net: ieee802154: fix nl802154 del llsec devkey
WARNING in exception_type kvm-x86 -1 syz, C error 1 1813d 1812d 20/29 1741d e7177339d7b5 Revert "KVM: x86: mmu: Add guest physical address check in translate_gpa()"
memory leak in hwsim_add_one wpan 3 syz, C 1 1898d 1896d 20/29 1741d 28a5501c3383 ieee802154: hwsim: Fix memory leak in hwsim_add_one
WARNING in taprio_change -1 syz, C done 746 1926d 2162d 20/29 1741d ed8157f1ebf1 net: sched: tapr: prevent cycle_time == 0 in parse_taprio_schedule
KASAN: out-of-bounds Read in leaf_paste_entries fs 17 syz, C inconclusive 8 1772d 2003d 20/29 1741d 13d257503c09 reiserfs: check directory items on read from disk
kernel BUG in llc_sap_action_send_xid_c net -1 syz, C error 61 1741d 1955d 20/29 1741d c7c9d2102c9c net: llc: fix skb_over_panic
BUG: unable to handle kernel NULL pointer dereference in htb_select_queue net 10 syz done 8 1971d 1986d 20/29 1741d fb3a3e37de33 sch_htb: Fix offload cleanup in htb_destroy on htb_init failure 93bde210c434 sch_htb: Fix select_queue for non-offload mode
WARNING in netlbl_cipsov4_add -1 syz, C inconclusive 4433 1804d 2003d 20/29 1741d 8ca34a13f7f9 net: cipso: fix warnings in netlbl_cipsov4_add_std
general protection fault in io_commit_cqring (2) io-uring fs 12 syz, C done 82 1953d 1966d 20/29 1741d 51520426f4bc io_uring: handle setup-failed ctx in kill_timeouts
memory leak in __ieee80211_beacon_get wireless 3 syz 14 1895d 2016d 20/29 1741d bd18de517923 mac80211_hwsim: drop pending frames on stop
KASAN: use-after-free Write in sk_psock_stop bpf net 22 syz done 74 1939d 1958d 20/29 1741d aadb2bb83ff7 sock_map: Fix a potential use-after-free in sock_map_close()
INFO: task hung in io_sq_thread_park (2) fs io-uring 1 syz done 2 1862d 1858d 20/29 1741d 46fee9ab02cb io_uring: remove double poll entry on arm failure
INFO: rcu detected stall in wg_packet_tx_worker (3) net 1 syz, C inconclusive 5 1826d 1809d 20/29 1741d c7c5e6ff533f fq_codel: reject silly quantum parameters
WARNING: refcount bug in vti6_dev_uninit net 13 syz, C 26 1964d 1968d 20/29 1741d 0d7a7b2014b1 ipv6: remove extra dev_hold() for fallback tunnels
memory leak in smsc75xx_bind usb 3 syz 2 1909d 1910d 20/29 1741d 46a8b29c6306 net: usb: fix memory leak in smsc75xx_bind
memory leak in mcba_usb_probe usb 3 syz, C 34 1887d 2064d 20/29 1741d 91c02557174b can: mcba_usb: fix memory leak in mcba_usb
KMSAN: kernel-infoleak in i2cdev_read i2c 9 syz, C 592 1857d 1983d 20/29 1741d 86ff25ed6cd8 i2c: dev: zero out array used for i2c reads from userspace
general protection fault in unix_dgram_connect net 2 syz, C done 2 1815d 1815d 20/29 1741d dc56ad7028c5 af_unix: fix potential NULL deref in unix_dgram_connect()
WARNING in __percpu_ref_exit (2) fs -1 syz, C error done 31 1741d 1980d 20/29 1741d a298232ee6b9 io_uring: fix link timeout refs
WARNING in cfg80211_connect -1 syz, C done 2320 1954d 2145d 20/29 1741d 1b5ab825d9ac cfg80211: remove WARN_ON() in cfg80211_sme_connect
BUG: unable to handle kernel paging request in vga16fb_fillrect fbdev 8 syz, C inconclusive 14 1743d 1859d 20/29 1741d 8c28051cdcbe fbmem: don't allow too huge resolutions
BUG: unable to handle kernel paging request in csum_partial (3) kernel 8 syz, C done 1 1828d 1858d 20/29 1741d 9cf448c200ba ip6_gre: add validation for csum_start 1d011c4803c7 ip_gre: add validation for csum_start
WARNING in hid_submit_ctrl/usb_submit_urb input usb -1 syz, C done 38 1806d 1855d 20/29 1741d 0a824efdb724 HID: usbhid: Fix warning caused by 0-length input reports
WARNING in ext4_xattr_set_entry ext4 -1 syz, C unreliable 7 1990d 2073d 20/29 1741d 6b22489911b7 ext4: do not try to set xattr into ea_inode if value is empty
memory leak in nfcmrvl_nci_register_dev usb 3 syz, C 9 2007d 2052d 20/29 1741d e0652f8bb44d NFC: nci: fix memory leak in nci_allocate_device
WARNING in kvm_wait kvm -1 syz, C error 119882 1969d 1987d 20/29 1741d f4e61f0c9add x86/kvm: Fix broken irq restoration in kvm_wait
general protection fault in ieee802154_llsec_parse_key_id wpan 11 syz, C inconclusive 92 1901d 2001d 20/29 1741d 6f7f657f2440 net: ieee802154: nl-mac: fix check on panid
memory leak in xfrm_user_rcv_msg net 3 syz, C 1 1885d 1881d 20/29 1741d 7c1a80e80cde net: xfrm: fix memory leak in xfrm_user_rcv_msg
memory leak in bpf (2) bpf 3 syz, C 3 1895d 1964d 20/29 1741d ccff81e1d028 bpf: Fix false positive kmemleak report in bpf_ringbuf_area_alloc()
possible deadlock in __fs_reclaim_acquire mm 4 syz unreliable 672 1858d 1869d 20/29 1741d 187ad460b841 mm/page_alloc: avoid page allocator recursion with pagesets.lock held
general protection fault in btf_type_id_size bpf 2 syz, C unreliable 6 1991d 1988d 20/29 1741d 350a5c4dd245 bpf: Dont allow vmlinux BTF to be used in map_create and prog_load.
memory leak in tty_init_dev serial 3 syz, C 9 1900d 2544d 20/29 1741d 58af3d3d54e8 net: caif: fix memory leak in ldisc_open
INFO: task hung in __io_uring_cancel fs io-uring 1 syz, C done 5 1879d 1945d 20/29 1741d 28090c133869 io_uring: fix work_exit sqpoll cancellations
divide error in __tcp_select_window (2) net 2 syz, C done 4 1955d 1956d 20/29 1741d a7150e382267 Revert "tcp: Reset tcp connections in SYN-SENT state"
KASAN: use-after-free Read in tipc_recvmsg tipc 19 syz, C done 2198 1847d 1855d 20/29 1741d cc19862ffe45 tipc: fix an use-after-free issue in tipc_recvmsg
general protection fault in br_switchdev_fdb_notify bridge 2 syz, C error 82 1836d 1841d 20/29 1741d 0541a6293298 net: bridge: validate the NUD_PERMANENT bit when adding an extern_learn FDB entry
memory leak in create_io_worker io-uring fs 3 syz, C 5 1764d 1803d 20/29 1741d 66e70be72288 io-wq: fix memory leak in create_io_worker()
INFO: trying to register non-static key in l2cap_chan_del bluetooth -1 syz inconclusive 73 1983d 2202d 20/29 1741d 3af70b39fa2d Bluetooth: check for zapped sk before connecting
KMSAN: uninit-value in ip_rcv_core net 7 syz, C 141 1857d 2891d 20/29 1741d 6628ddfec758 net: geneve: check skb is large enough for IPv4/IPv6 header
memory leak in hdcs_probe_1020 usb media 3 syz, C 1 1968d 1964d 20/29 1741d 4f4e6644cd87 media: gscpa/stv06xx: fix memory leak
WARNING in ieee802154_get_llsec_params wpan -1 syz, C done 36 1954d 2000d 20/29 1741d 1534efc7bbc1 net: ieee802154: stop dump llsec params for monitors
WARNING in slave_kobj_release net -1 syz, C done 3 1918d 2007d 20/29 1741d 35d96e631860 bonding: init notify_work earlier to avoid uninitialized use
WARNING in io_wqe_enqueue io-uring fs -1 syz, C done 13 1899d 1899d 20/29 1741d e6ab8991c5d0 io_uring: fix false WARN_ONCE
KASAN: use-after-free Write in get_ucounts kernel 22 syz unreliable done 7 1838d 1865d 20/29 1741d 345daff2e994 ucounts: Fix race condition between alloc_ucounts and put_ucounts
divide error in nft_limit_init netfilter 2 syz, C done 4 1954d 1955d 20/29 1741d b895bdf5d643 netfilter: nft_limit: avoid possible divide error in nft_limit_init
BUG: unable to handle kernel paging request in cap_capable lsm 8 syz, C unreliable 4 1837d 1838d 20/29 1741d 9384eacd80f3 net: core: don't call SIOCBRADD/DELIF for non-bridge devices
KASAN: slab-out-of-bounds Write in xt_compat_target_from_user netfilter 21 syz, C error error 1 2191d 2190d 20/29 1741d b29c457a6511 netfilter: x_tables: fix compat match/target pad out-of-bound write
KASAN: use-after-free Read in eth_header_parse_protocol net 19 syz, C done 1453 1939d 1985d 20/29 1741d 61431a5907fc net: ensure mac header is set in virtio_net_hdr_to_skb()
KMSAN: uninit-value in pegasus_probe usb 7 syz, C 258 1839d 2509d 20/29 1741d af35fc37354c net: pegasus: fix uninit-value in get_interrupt_interval
general protection fault in magicmouse_remove usb input 2 syz, C 47 1891d 1917d 20/29 1741d 4b4f6cecca44 HID: magicmouse: fix NULL-deref on disconnect
KASAN: use-after-free Read in nbd_genl_connect (2) nbd 19 syz, C unreliable 6 1817d 1817d 20/29 1741d 7ee656c3ac3d nbd: remove nbd->destroy_complete
KASAN: use-after-free Read in ntfs_iget (2) ntfs3 19 syz, C inconclusive 2 1899d 1896d 20/29 1741d d98e4d95411b ntfs: fix validity check for file name attribute
UBSAN: shift-out-of-bounds in ext4_mb_init ext4 -1 syz, C done 5 2011d 2022d 20/29 1741d f91436d55a27 fs/ext4: fix integer overflow in s_log_groups_per_flex
memory leak in __send_signal kernel 3 syz 3 1883d 1897d 20/29 1741d 399f8dd9a866 signal: Prevent sigqueue caching after task got released
WARNING in ieee80211_free_ack_frame wireless -1 syz done 117 1745d 2139d 20/29 1741d bd18de517923 mac80211_hwsim: drop pending frames on stop
WARNING in batadv_iv_send_outstanding_bat_ogm_packet batman -1 syz, C done 12568 1873d 2499d 20/29 1741d 9f460ae31c44 batman-adv: Avoid WARN_ON timing related checks
WARNING in io_poll_double_wake fs io-uring -1 syz, C done done 1124 1842d 1944d 20/29 1741d a890d01e4ee0 io_uring: fix poll requests leaking second poll entries
WARNING: refcount bug in ip6gre_tunnel_uninit net 13 syz, C error 10 1965d 1968d 20/29 1741d 7f700334be9a ip6_gre: proper dev_{hold|put} in ndo_[un]init methods
memory leak in dvb_create_media_graph usb media 3 syz, C 26 1946d 2104d 20/29 1741d bf9a40ae8d72 media: dvbdev: Fix memory leak in dvb_media_device_free()
WARNING in vkms_vblank_simulate (2) dri -1 syz, C error 77748 1741d 2115d 20/29 1741d b4142fc4d52d drm/vkms: fix misuse of WARN_ON
memory leak in hdcs_probe_1x00 media usb 3 syz, C 1 1997d 1997d 20/29 1741d 4f4e6644cd87 media: gscpa/stv06xx: fix memory leak
WARNING in osif_probe/usb_submit_urb usb -1 syz, C 45 1866d 1910d 20/29 1741d 4ca070ef0dd8 i2c: robotfuzz-osif: fix control-request directions
general protection fault in cdev_del (2) fs 11 syz, C error 45 1874d 2152d 20/29 1741d 8a12f8836145 net: hso: fix null-ptr-deref during tty device unregistration 0a360e8b65d6 tty: n_gsm: check error while registering tty devices
general protection fault in nl802154_del_llsec_dev wpan 8 syz, C inconclusive 166 1954d 2005d 20/29 1741d 3d1eac2f4558 net: ieee802154: fix nl802154 del llsec dev
WARNING: ODEBUG bug in __sk_destruct (2) can -1 syz, C done done 62 1750d 1948d 20/29 1741d 14a4696bc311 can: isotp: isotp_release(): omit unintended hrtimer restart on socket release
INFO: task hung in io_wq_put_and_exit io-uring fs 1 syz, C unreliable 628 1742d 1803d 20/29 1741d 3b33e3f4a6c0 io-wq: fix silly logic error in io_task_work_match()
KASAN: use-after-free Read in bcm_rx_handler can 19 syz done 2 1892d 1922d 20/29 1741d d5f9023fa61e can: bcm: delay release of struct bcm_op after synchronize_rcu()
possible deadlock in do_fcntl usb fs 4 syz, C done 245 1817d 2148d 20/29 1741d f671a691e299 fcntl: fix potential deadlocks for &fown_struct.lock
WARNING in qt2_attach/usb_submit_urb usb -1 syz, C 171 1889d 1910d 20/29 1741d eb8dbe80326c USB: serial: quatech2: fix control-request directions
BUG: sleeping function called from invalid context in stack_depot_save mm 5 syz, C unreliable 8490 1840d 1869d 20/29 1741d 187ad460b841 mm/page_alloc: avoid page allocator recursion with pagesets.lock held
memory leak in hub_event (2) usb 3 syz, C 2 1978d 1980d 20/29 1741d dcb4b8ad6a44 misc/uss720: fix memory leak in uss720_probe
memory leak in usb_set_configuration (2) usb 3 syz, C 2 1835d 1943d 20/29 1741d be8656e62e9e media: cpia2: fix memory leak in cpia2_usb_probe
WARNING in usb_new_device/usb_submit_urb usb -1 syz, C 2 1905d 1901d 20/29 1741d 60dfe484cef4 USB: core: Avoid WARNings for 0-length descriptor requests
WARNING in rtl8152_probe usb -1 syz, C 23 1899d 1922d 20/29 1741d 1a44fb38cc65 r8152: check the informaton of the device
inconsistent lock state in sco_sock_timeout bluetooth 4 syz, C done 16 1846d 2190d 20/29 1741d ba316be1b6a0 Bluetooth: schedule SCO timeouts with delayed_work
WARNING in ieee80211_get_sband wireless -1 syz, C done 7 1909d 2134d 20/29 1741d 0ee4d55534f8 mac80211: remove warning in ieee80211_get_sband()
general protection fault in hci_release_dev bluetooth 2 syz, C done 41 1819d 1840d 20/29 1741d e04480920d1e Bluetooth: defer cleanup of resources in hci_unregister_dev()
WARNING in do_proc_control/usb_submit_urb usb -1 syz, C error 456 1849d 1863d 20/29 1741d b0863f192732 USB: core: Fix incorrect pipe calculation in do_proc_control()
memory leak in skb_clone wpan 3 syz, C 2 1849d 1954d 20/29 1741d 1090340f7ee5 net: Fix memory leak in ieee802154_raw_deliver
general protection fault in try_grab_compound_head io-uring mm 7 syz, C done 5 1842d 1870d 20/29 1741d d08af0a59684 mm/hugetlb: fix refs calculation from unaligned @vaddr
BUG: using smp_processor_id() in preemptible code in radix_tree_node_alloc net arm-msm 4 syz, C done done 544 1927d 2264d 20/29 1741d 3cbf7530a163 qrtr: Convert qrtr_ports from IDR to XArray
general protection fault in reiserfs_security_init reiserfs 2 syz, C done 26311 1963d 2155d 20/29 1741d 5e46d1b78a03 reiserfs: update reiserfs_xattrs_initialized() condition
KASAN: slab-out-of-bounds Read in do_wait_for_common staging usb 19 syz, C error 5 1835d 1854d 20/29 1741d e9e6aa51b273 staging: rtl8712: error handling refactoring
BUG: sleeping function called from invalid context in __alloc_skb netfilter 5 syz, C done 33 1788d 1930d 20/29 1741d 7072a355ba19 netfilter: nfnetlink: add a missing rcu_read_unlock()
WARNING in do_proc_bulk mm -1 syz, C inconclusive 3 1931d 1932d 20/29 1741d 4f2629ea67e7 USB: usbfs: Don't WARN about excessively large memory allocations
BUG: unable to handle kernel paging request in corrupted (3) 8 syz, C done 45 1749d 1917d 20/29 1741d 7a274727702c io_uring: don't modify req->poll for rw
BUG: unable to handle kernel NULL pointer dereference in kiocb_done fs io-uring 10 syz, C unreliable done 3 1808d 1808d 20/29 1741d b8ce1b9d25cc io_uring: don't submit half-prepared drain request
general protection fault in smc_tx_sendmsg smc 2 syz, C done 6369 1875d 1883d 20/29 1741d 17081633e22d net/smc: Ensure correct state of the socket in send path
UBSAN: array-index-out-of-bounds in ima_inode_setxattr lsm integrity 15 syz, C unreliable 6 1821d 1823d 20/29 1741d cb181da16196 IMA: reject unknown hash algorithms in ima_get_hash_algo
memory leak in em28xx_dvb_init media usb 3 syz, C 1 1979d 1979d 20/29 1741d 0ae10a7dc899 media: em28xx: fix memory leak
memory leak in qrtr_create arm-msm net 3 syz, C 3 1844d 2015d 20/29 1741d 52f3456a96c0 net: qrtr: fix memory leaks
memory leak in virtio_transport_send_pkt_info virt kvm net 3 syz, C 2 1952d 2015d 20/29 1741d 8432b8114957 vsock/virtio: free queued packets when closing socket
possible deadlock in loop_probe 4 syz, C done 20656 1862d 1887d 20/29 1741d 962bf783ef65 mtd: break circular locks in register_mtd_blktrans
possible deadlock in __loop_clr_fd (2) block ext4 4 syz, C unreliable 6977 1741d 1866d 20/29 1741d 1c500ad70638 loop: reduce the loop_ctl_mutex scope
memory leak in __usbhid_submit_report input usb 3 syz, C 129 1811d 2104d 20/29 1741d f7744fa16b96 HID: usbhid: free raw_report buffers in usbhid_stop
WARNING in io_try_cancel_userdata fs io-uring -1 syz unreliable 4 1815d 1819d 20/29 1741d dadebc350da2 io_uring: fix io_try_cancel_userdata race for iowq
WARNING in x86_emulate_instruction kvm-x86 -1 syz, C done 4 1916d 1912d 20/29 1741d da6393cdd8aa KVM: X86: Fix warning caused by stale emulation context
UBSAN: shift-out-of-bounds in choke_change (2) net -1 syz, C done 7 1955d 1971d 20/29 1741d 3a87571f0ffc sch_red: fix off-by-one checks in red_check_params()
KMSAN: kernel-infoleak in copy_page_to_iter (2) fs mm 9 syz, C 2099 1836d 2894d 20/29 1741d ce3aba43599f ext4: fix kernel infoleak via ext4_extent_header
BUG: scheduling while atomic: syz-executor/ADDR kernel -1 syz, C done 5 1816d 1873d 20/29 1741d 72ff2bf04db2 crypto: aesni - xts_crypt() return if walk.nbytes is 0
UBSAN: shift-out-of-bounds in xprt_calc_majortimeo net nfs -1 syz, C unreliable 149 1941d 2070d 20/29 1741d c09f11ef3595 NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds
INFO: rcu detected stall in tx net 1 syz, C error unreliable 3 1807d 1945d 20/29 1741d 30fad76ce4e9 USB: usbtmc: Fix RCU stall warning
KASAN: use-after-free Read in r871xu_dev_remove usb staging 19 syz, C unreliable 152 1834d 1860d 20/29 1741d e9e6aa51b273 staging: rtl8712: error handling refactoring
KMSAN: kernel-infoleak in fb_cmap_to_user fbdev 9 syz, C 439 1857d 2008d 20/29 1741d 19ab233989d0 fbdev: zero-fill colormap in fbcmap.c
KASAN: slab-out-of-bounds Read in snd_usbmidi_get_ms_info sound usb 17 syz, C 10 1919d 1924d 20/29 1741d e84749a78dc8 ALSA: usb-audio: Validate MS endpoint descriptors
WARNING in mntput_no_expire (2) fs -1 syz, C done 68 1748d 1963d 20/29 1741d 7d01ef7585c0 Make sure nd->path.mnt and nd->path.dentry are always valid pointers
WARNING in ieee802154_del_seclevel wpan -1 syz, C done 7 1965d 2001d 20/29 1741d 9dde130937e9 net: ieee802154: forbid monitor for del llsec seclevel
memory leak in snd_ctl_led_register usb 3 syz, C 1 1927d 1917d 20/29 1741d 3ae72f6ab9c1 ALSA: control led: fix memory leak in snd_ctl_led_register
KMSAN: kernel-usb-infoleak in hid_submit_ctrl input usb 9 syz, C 839 1915d 2523d 20/29 1741d 6be388f4a35d HID: usbhid: fix info leak in hid_submit_ctrl
BUG: unable to handle kernel paging request in diFree jfs 8 syz, C done 13 1877d 2148d 20/29 1741d 9d574f985fe3 jfs: fix GPF in diFree
KMSAN: uninit-value in asix_mdio_read usb 7 syz, C 915 1842d 2505d 20/29 1741d a786e3195d6a net: asix: fix uninit value bugs
general protection fault in kcm_sendmsg net 19 syz, C done 7957 1875d 1896d 20/29 1741d a47c397bb29f revert "net: kcm: fix memory leak in kcm_sendmsg"
WARNING in sk_stream_kill_queues (6) net -1 syz, C 11376 1741d 1955d 20/29 1741d 144748eb0c44 bpf, sockmap: Fix incorrect fwd_alloc accounting
BUG: MAX_LOCKDEP_CHAINS too low! (2) net -1 syz, C error 84838 1741d 2217d 20/29 1741d 5dc33592e955 lockdep: Allow tuning tracing capacity constants.
WARNING in input_register_device input usb -1 syz, C error done 11 1958d 2109d 20/29 1741d b4104180a2ef kobject_uevent: remove warning in init_uevent_argv()
KASAN: use-after-free Read in disk_part_iter_next (2) block 19 syz, C done 327 1963d 1981d 20/29 1741d e82fc7855749 block: don't create too many partitions
memory leak in cfserl_create net 3 syz, C 13 2460d 2629d 20/29 1741d b53558a950a8 net: caif: fix memory leak in caif_device_notify
memory leak in cinergyt2_fe_attach usb media 3 syz, C 3 2045d 2103d 20/29 1741d 9ad1efee086e media: dvd_usb: memory leak in cinergyt2_fe_attach
memory leak in radix_tree_insert arm-msm net 3 syz, C 1 1965d 1965d 20/29 1741d 8a03dd925786 net: qrtr: Fix memory leak on qrtr_tx_wait failure
KASAN: use-after-free Read in nfc_llcp_put_ssap net nfc 19 syz done 4 1926d 1933d 20/29 1741d c61760e6940d net/nfc: fix use-after-free llcp_sock_bind/connect
BUG: unable to handle kernel paging request in vga16fb_imageblit (2) fbdev 8 syz, C done 27 1923d 2291d 20/29 1741d ffb324e6f874 tty: vt: always invoke vc->vc_sw->con_resize callback
WARNING: suspicious RCU usage in tcp_bpf_update_proto bpf net 4 syz, C done 539 1939d 1959d 20/29 1741d 51e0158a5432 skmsg: Pass psock pointer to ->psock_update_sk_prot()
UBSAN: array-index-out-of-bounds in udf_statfs udf 15 syz, C error error 3 1848d 1934d 20/29 1741d 781d2a9a2fc7 udf: Check LVID earlier
WARNING: suspicious RCU usage in bpf_get_current_cgroup_id bpf 4 syz, C done 764 1811d 1849d 20/29 1741d 2d3a1e3615c5 bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
general protection fault in __io_file_supports_nowait fs io-uring 2 syz, C done done 13 1805d 1811d 20/29 1741d c6d3d9cbd659 io_uring: fix queueing half-created requests
possible deadlock in pipe_lock (5) overlayfs 4 syz, C done 5 1849d 1849d 20/29 1741d 9b91b6b019fd ovl: fix deadlock in splice write
INFO: task hung in usb_remote_wakeup (2) usb 1 syz inconclusive done 9 1822d 2021d 20/29 1741d 363eaa3a450a usbip: synchronize event handler with sysfs code paths
WARNING: suspicious RCU usage in bond_ipsec_add_sa (2) 4 syz, C done 540 1868d 2155d 20/29 1741d b648eba4c69e bonding: fix suspicious RCU usage in bond_ipsec_add_sa()
KASAN: use-after-free Read in bdev_evict_inode fs 19 syz, C unreliable 1305 1825d 1828d 20/29 1741d 889c05cc5834 block: ensure the bdi is freed after inode_detach_wb
WARNING in pvr2_i2c_core_done usb fs -1 syz, C error 5780 1862d 2517d 20/29 1741d f8194e5e63fd media: pvrusb2: fix warning in pvr2_i2c_core_done
general protection fault in nl802154_add_llsec_key wpan 8 syz, C inconclusive 340 1954d 2008d 20/29 1741d 20d5fe2d7103 net: ieee802154: fix nl802154 add llsec key
INFO: task hung in io_uring_cancel_generic io-uring fs 1 syz, C unreliable 151 1741d 1862d 20/29 1741d 1b48773f9fd0 io_uring: fix io_drain_req()
divide error in fill_meta_index squashfs 2 syz, C inconclusive 1 1930d 1929d 20/29 1741d d6e621de1fce squashfs: fix divide error in calculate_skip()
memory leak in copy_process (2) kernel 3 syz, C 2 1981d 1981d 20/29 1741d f60a85cad677 bpf: Fix umd memory leak in copy_process()
WARNING in __i2c_transfer i2c -1 syz, C done 2847 1741d 1983d 20/29 1741d 71581562ee36 i2c: bail out early when RDWR parameters are wrong
KASAN: slab-out-of-bounds Read in qrtr_endpoint_post (2) 17 syz, C done 41 1842d 2207d 20/29 1741d ad9d24c9429e net: qrtr: fix OOB Read in qrtr_endpoint_post
BUG: sleeping function called from invalid context in __ipv6_dev_mc_dec net 5 syz, C done 21 1874d 1931d 20/29 1741d a100243d95a6 rtnetlink: avoid RCU read lock when holding RTNL
INFO: task hung in del_gendisk block 1 syz, C done 5 1829d 1862d 20/29 1741d 68c9417b193d nbd: do del_gendisk() asynchronously for NBD_DESTROY_ON_DISCONNECT
INFO: trying to register non-static key in skb_dequeue bluetooth -1 syz, C error 28951 1926d 2207d 20/29 1741d be8597239379 Bluetooth: initialize skb_queue_head at l2cap_chan_create()
WARNING: refcount bug in in_dev_finish_destroy net 13 syz, C unreliable 463 1741d 1968d 20/29 1741d 0d7a7b2014b1 ipv6: remove extra dev_hold() for fallback tunnels
KASAN: use-after-free Read in __d_alloc (2) fs 19 syz, C unreliable 6774 1783d 1826d 20/29 1741d 0766ec82e5fb namei: Fix use after free in kern_path_locked
KMSAN: uninit-value in validate_beacon_head wireless 7 syz, C 284 1860d 2087d 20/29 1741d 9a6847ba1747 nl80211: fix beacon head validation
WARNING: suspicious RCU usage in vxlan_xmit net 4 syz, C error 1 1882d 1882d 20/29 1741d 85e8b032d6eb vxlan: add missing rcu_read_lock() in neigh_reduce()
general protection fault in udmabuf_create dri media 2 syz, C done 2 1835d 1832d 20/29 1741d b9770b0b6eac udmabuf: fix general protection fault in udmabuf_create
memory leak in new_inode ext4 3 syz, C 5 1787d 2095d 20/29 1741d a8867f4e3809 ext4: fix memory leak in ext4_mb_init_backend on error path.
WARNING: zero-size vmalloc in dvb_dmx_init media usb -1 syz, C 62 1863d 1927d 20/29 1741d c680ed46e418 media: dvb-usb: fix wrong definition
memory leak in ext4_multi_mount_protect ext4 3 syz, C 12 1884d 2061d 20/29 1741d 618f003199c6 ext4: fix memory leak in ext4_fill_super
WARNING in tracepoint_add_func trace bpf -1 syz, C done 20635 1856d 2240d 20/29 1741d 9913d5745bd7 tracepoint: Add tracepoint_probe_register_may_exist() for BPF tracing
UBSAN: shift-out-of-bounds in nft_hash_estimate netfilter -1 syz, C done 3 1929d 1929d 20/29 1741d a54754ec9891 netfilter: nftables: avoid overflows in nft_hash_buckets()
KASAN: use-after-free Read in blk_mq_exit_sched usb block 19 syz, C done 9 1880d 1894d 20/29 1741d f0c1c4d2864e blk-mq: fix use-after-free in blk_mq_exit_sched
divide error in do_journal_end (2) erofs 2 syz, C inconclusive 2 1923d 1922d 20/29 1741d a149127be52f reiserfs: add check for invalid 1st journal block
BUG: MAX_LOCKDEP_ENTRIES too low! -1 syz, C done 179076 1926d 2617d 20/29 1741d 5dc33592e955 lockdep: Allow tuning tracing capacity constants.
BUG: corrupted list in kobject_add_internal (3) bluetooth 8 syz, C inconclusive 3 1776d 1881d 20/29 1741d 92fe24a7db75 Bluetooth: skip invalid hci_sync_conn_complete_evt
WARNING in nbd_dev_add block -1 syz, C inconclusive 131 1742d 2001d 20/29 1741d b1a811633f73 block: nbd: add sanity check for first_minor
possible deadlock in del_gendisk 4 syz, C done 158215 1804d 1951d 20/29 1741d 990e78116d38 block: loop: fix deadlock between open and remove
possible deadlock in br_ioctl_call net 4 syz, C unreliable 4161 1831d 1841d 20/29 1741d 893b19587534 net: bridge: fix ioctl locking
WARNING in __vmalloc_node_range media usb -1 syz, C 7 1927d 1928d 20/29 1741d c680ed46e418 media: dvb-usb: fix wrong definition
WARNING: ODEBUG bug in ext4_fill_super (3) ext4 -1 syz, C done 392 1743d 1981d 20/29 1741d 0ce160c5bdb6 ext4: fix timer use-after-free on failed mount
BUG: sleeping function called from invalid context in _copy_to_iter net 5 syz, C done 60 1826d 1834d 20/29 1741d 876c14ad014d af_unix: fix holding spinlock in oob handling
possible deadlock in f_getown fs 4 syz, C done done 164 1819d 2148d 20/29 1741d f671a691e299 fcntl: fix potential deadlocks for &fown_struct.lock
memory leak in rds_send_probe 3 syz, C done 27 2038d 2581d 20/29 1741d 49bfcbfd989a net: rds: fix memory leak in rds_recvmsg
general protection fault in blk_mq_run_hw_queues block 11 syz, C unreliable 305 1821d 1868d 20/29 1741d 16ad3db3b24c nbd: fix order of cleaning up the queue and freeing the tagset
INFO: task hung in fuse_launder_page fuse 1 syz, C unreliable 1 1833d 1829d 20/29 1741d 76224355db75 fuse: truncate pagecache on atomic_o_trunc
INFO: task hung in register_netdevice_notifier (2) can wireless 1 syz done 10555 1884d 2489d 20/29 1741d 8d0caedb7596 can: bcm/raw/isotp: use per module netdevice notifier
general protection fault in hwsim_set_edge_lqi wpan 2 syz, C done 4 1830d 1883d 20/29 1741d 0303b30375df ieee802154: hwsim: avoid possible crash in hwsim_del_edge_nl()
WARNING: still has locks held in io_sq_thread 4 syz, C done 8689 1953d 1966d 20/29 1741d 82734c5b1b24 io_uring: drop sqd lock before handling signals for SQPOLL
KASAN: use-after-free Write in nft_ct_tmpl_put_pcpu netfilter 22 syz, C done 3 1835d 1835d 20/29 1741d e3245a7b7b34 netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with mutex
memory leak in tcindex_set_parms net 3 syz, C 94 1900d 2385d 20/29 1741d f5051bcece50 net: sched: fix memory leak in tcindex_partial_destroy_work
general protection fault in sock_from_file net io-uring 2 syz, C inconclusive 78 1805d 1812d 20/29 1741d c6d3d9cbd659 io_uring: fix queueing half-created requests
memory leak in h4_recv_buf 3 syz, C done 21 1850d 2610d 20/29 1741d bb2853a6a421 tty: Fix data race between tiocsti() and flush_to_ldisc()
WARNING in sta_info_alloc -1 syz, C done done 145 1887d 2140d 20/29 1741d 0ee4d55534f8 mac80211: remove warning in ieee80211_get_sband()
possible deadlock in snd_hrtimer_callback fs 4 syz, C done 571 1742d 1849d 20/29 1741d f671a691e299 fcntl: fix potential deadlocks for &fown_struct.lock
general protection fault in gfn_to_rmap (2) kvm-x86 2 syz, C done 1 1896d 1895d 20/29 1741d 78fcb2c91adf KVM: x86: Immediately reset the MMU context when the SMM flag is cleared
UBSAN: shift-out-of-bounds in profile_init kernel -1 syz, C unreliable 23 1809d 1859d 20/29 1741d 2d186afd04d6 profiling: fix shift-out-of-bounds bugs
KASAN: use-after-free Read in hci_send_acl bluetooth 19 syz, C done 2 1994d 2205d 20/29 1741d 5c4c8c954409 Bluetooth: verify AMP hci_chan before amp_destroy
WARNING: ODEBUG bug in cancel_delayed_work -1 syz, C done 3384 1757d 2207d 20/29 1741d 3a9d54b1947e Bluetooth: Set CONF_NOT_COMPLETE as l2cap_chan default
memory leak in usb_urb_init media usb 3 syz, C 1 2053d 2049d 20/29 1741d b7cd0da982e3 media: dvb-usb: fix memory leak in dvb_usb_adapter_init
general protection fault in crypto_destroy_tfm crypto 2 syz unreliable 57 1955d 1996d 20/29 1741d 83681f2bebb3 crypto: api - check for ERR pointers in crypto_destroy_tfm()
possible deadlock in console_lock_spinning_enable 4 syz, C done 1693 1741d 2614d 20/29 1741d c0070e1e6027 ttyprintk: Add TTY hangup callback.
memory leak in ip_vs_add_service lvs 3 syz, C 1 1914d 1910d 20/29 1741d 56e4ee82e850 ipvs: ignore IP_VS_SVC_F_HASHED flag when adding service
possible deadlock in io_sq_thread_finish fs 4 syz, C unreliable done 4 1986d 1988d 20/29 1741d f4e61f0c9add x86/kvm: Fix broken irq restoration in kvm_wait
BUG: unable to handle kernel NULL pointer dereference in fbcon_cursor fbdev 10 syz, C done 21 1967d 2099d 20/29 1741d 01faae5193d6 drivers: video: fbcon: fix NULL dereference in fbcon_cursor()
memory leak in nr_create hams 3 syz, C 250 1852d 2638d 20/29 1741d 517a16b1a88b netrom: Decrease sock refcount when sock timers expire
general protection fault in ieee802154_llsec_parse_dev_addr wpan 2 syz, C inconclusive 80 1868d 1998d 20/29 1741d 88c17855ac42 net: ieee802154: forbid monitor for set llsec params
WARNING in smk_set_cipso (2) lsm -1 syz, C inconclusive 24 1875d 1952d 20/29 1741d 49ec114a6e62 smackfs: restrict bytes count in smk_set_cipso()
memory leak in atusb_probe usb wpan 3 syz, C 71 1957d 2102d 20/29 1741d 6b9fbe169551 drivers: net: fix memory leak in atusb_probe
WARNING: ODEBUG bug in net_dm_cmd_trace net -1 syz unreliable 2 1992d 1988d 20/29 1741d 9398e9c0b1d4 drop_monitor: Perform cleanup upon probe registration failure
general protection fault in nft_set_elem_expr_alloc netfilter 2 syz, C done 3 1904d 1901d 20/29 1741d ad9f151e560b netfilter: nf_tables: initialize set before expression setup
general protection fault in do_blk_trace_setup block trace 2 syz, C done 25 1816d 1818d 20/29 1741d 1d1cf156dc17 sg: pass the device name to blk_trace_setup
WARNING in xfrm_alloc_compat (2) net -1 syz, C done 47 1956d 1966d 20/29 1741d ef19e111337f xfrm/compat: Cleanup WARN()s that can be user-triggered
KASAN: use-after-free Write in sctp_auth_shkey_hold sctp 22 syz, C done 4 1853d 1861d 20/29 1741d 58acd1009226 sctp: update active_key for asoc when old key is being replaced
UBSAN: shift-out-of-bounds in load_balance kernel -1 syz 2167 1926d 2030d 20/29 1741d 39a2a6eb5c9b sched/fair: Fix shift-out-of-bounds in load_balance()
WARNING in io_rsrc_node_switch io-uring fs -1 syz, C done 174 1926d 1935d 20/29 1741d 47b228ce6f66 io_uring: fix unchecked error in switch_start()
KASAN: use-after-free Read in firmware_fallback_sysfs kernel 19 syz, C error 16514 1823d 2022d 20/29 1741d 75d95e2e39b2 firmware_loader: fix use-after-free in firmware_fallback_sysfs
WARNING in tcindex_alloc_perfect_hash mm -1 syz, C inconclusive 349 1870d 2045d 20/29 1741d 3f2db250099f net: sched: fix warning in tcindex_alloc_perfect_hash
KMSAN: uninit-value in caif_seqpkt_sendmsg net 7 syz, C 2365 1787d 2204d 20/29 1741d 991e634360f2 net: fix uninit-value in caif_seqpkt_sendmsg
KASAN: invalid-free in ieee80211_ibss_leave wireless 24 syz, C inconclusive 1 1985d 2013d 20/29 1741d 3bd801b14e0c mac80211: fix double free in ibss_leave
WARNING in io_wq_submit_work (2) io-uring fs -1 syz, C done done 52 1800d 1803d 20/29 1741d 713b9825a4c4 io-wq: fix cancellation on create-worker failure
memory leak in prepare_creds (2) lsm 3 syz, C 2 1879d 1974d 20/29 1741d f60a85cad677 bpf: Fix umd memory leak in copy_process()
WARNING in cfg80211_inform_single_bss_frame_data wireless -1 syz, C done 1 1930d 2022d 20/29 1741d e298aa358f0c mac80211: fix skb length check in ieee80211_scan_rx()
memory leak in mrp_request_join net 3 syz, C 215 1881d 2399d 20/29 1741d 996af62167d0 net/802/mrp: fix memleak in mrp_request_join()
INFO: task hung in unregister_netdevice_notifier (3) can 1 syz error error 184 2553d 2737d 20/29 1741d 8d0caedb7596 can: bcm/raw/isotp: use per module netdevice notifier
KASAN: slab-out-of-bounds Write in decode_data hams 21 syz, C done error 7 2291d 2446d 20/29 1741d 19d1532a1876 net: 6pack: fix slab-out-of-bounds in decode_data
memory leak in tcp_cdg_init net 3 syz 6 1905d 2045d 20/29 1741d be5d1b61a2ad tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized
KASAN: use-after-free Read in drm_getunique dri 19 syz inconclusive 2 1902d 1901d 20/29 1741d b436acd1cf7f drm: Fix use-after-free read in drm_getunique()
WARNING in hsr_forward_skb -1 syz, C done done 1310 1955d 2783d 20/29 1741d 9d6803921a16 net: hsr: Reset MAC header for Tx path
WARNING: refcount bug in sk_psock_get net 13 syz, C done 8 1928d 1955d 20/29 1741d 8621436671f3 smc: disallow TCP_ULP in smc_setsockopt()
WARNING in close_fs_devices (3) btrfs -1 syz, C done 98 1843d 2087d 20/29 1741d b2a616676839 btrfs: fix rw device counting in __btrfs_free_extra_devids
KASAN: use-after-free Read in check_all_holdout_tasks_trace mm 19 syz done 4 1843d 1913d 20/29 1741d 1d10bf55d85d rcu-tasks: Don't delete holdouts within trc_inspect_reader()
BUG: unable to handle kernel paging request in nl802154_del_llsec_key wpan 8 syz, C inconclusive 235 1954d 2005d 20/29 1741d 37feaaf5ceb2 net: ieee802154: fix nl802154 del llsec key
WARNING: refcount bug in ipip6_tunnel_uninit net 13 syz, C done 199 1963d 1968d 20/29 1741d 6289a98f0817 sit: proper dev_{hold|put} in ndo_[un]init methods
WARNING: refcount bug in register_netdevice net 13 syz, C unreliable 97 1962d 1968d 20/29 1741d 7f700334be9a ip6_gre: proper dev_{hold|put} in ndo_[un]init methods
possible deadlock in sctp_addr_wq_timeout_handler sctp 4 syz, C done 8 1933d 1934d 20/29 1741d 01bfe5e8e428 Revert "net/sctp: fix race condition in sctp_destroy_sock"
INFO: task hung in hci_req_sync bluetooth 1 syz, C inconclusive 1 1834d 1830d 20/29 1741d f41a4b2b5eb7 Bluetooth: add timeout sanity check to hci_inquiry
WARNING: refcount bug in ip6erspan_tunnel_uninit net 13 syz, C error 11 1965d 1968d 20/29 1741d 7f700334be9a ip6_gre: proper dev_{hold|put} in ndo_[un]init methods
UBSAN: shift-out-of-bounds in xfrm_set_default net -1 syz, C unreliable 79 1836d 1846d 20/29 1741d 5d8dbb7fb82b net: xfrm: fix shift-out-of-bounce
WARNING in fuse_get_tree fuse -1 syz, C unreliable 22 1836d 1843d 20/29 1741d 5d5b74aa9c76 fuse: allow sharing existing sb
INFO: task hung in hub_port_init 1 syz, C done 15888 1741d 2140d 20/29 1741d 258c81b341c8 usbip: give back URBs for unsent unlink requests during cleanup
general protection fault in wb_timer_fn block exfat 2 syz, C done 60 1818d 1828d 20/29 1741d d152c682f03c block: add an explicit ->disk backpointer to the request_queue
memory leak in con_do_clear_unimap serial 3 syz, C 13 1942d 2001d 20/29 1741d 211b4d42b70f tty: fix memory leak in vc_deallocate
KMSAN: kernel-infoleak in _copy_to_iter (5) net 9 syz, C 23883 1850d 2286d 20/29 1741d 08c27f3322fe batman-adv: initialize "struct batadv_tvlv_tt_vlan_data"->reserved field
KMSAN: uninit-value in __dev_mc_add net 7 syz, C 213 2685d 2881d 20/29 1741d cca8ea3b05c9 net: tun: set tun->dev->addr_len during TUNSETLINK processing
KASAN: vmalloc-out-of-bounds Write in imageblit fbdev 21 syz, C 104 1755d 2048d 20/29 1741d 3b0c40612471 tty: Fix out-of-bound vmalloc access in imageblit
WARNING in init_timer_key wireless -1 syz, C done 2 1911d 2017d 20/29 1741d a64b6a25dd9f cfg80211: call cfg80211_leave_ocb when switching away from OCB
KASAN: stack-out-of-bounds Read in iov_iter_revert fs io-uring 17 syz, C error 14 1813d 1830d 20/29 1741d 89c2b3b74918 io_uring: reexpand under-reexpanded iters
WARNING in futex_requeue kernel -1 syz 4 1806d 1810d 20/29 1741d 4f07ec0d76f2 futex: Prevent inconsistent state and exit race
WARNING in internal_create_group fs -1 syz, C inconclusive 20 1805d 1859d 20/29 1741d b1a811633f73 block: nbd: add sanity check for first_minor
UBSAN: shift-out-of-bounds in vhci_hub_control (2) usb -1 syz, C unreliable 5 1962d 1971d 20/29 1741d 1cc5ed25bdad usbip: vhci_hcd fix shift out-of-bounds in vhci_hub_control()
WARNING in __static_key_slow_dec kernel -1 syz, C unreliable 19 1804d 1808d 20/29 1741d 6d5f1ef83868 bonding: Fix negative jump label count on nested bonding
memory leak in kcm_sendmsg net 3 syz, C 2 2236d 2376d 20/29 1741d c47cc304990a net: kcm: fix memory leak in kcm_sendmsg
kernel BUG in remove_inode_hugepages fs mm -1 syz, C unreliable 3 1826d 1826d 20/29 1741d c7b1850dfb41 hugetlb: don't pass page cache pages to restore_reserve_on_error
WARNING in io_wq_put fs io-uring -1 syz, C unreliable 3 1975d 1986d 20/29 1741d f5d2d23bf0d9 io-wq: fix race around pending work on teardown
memory leak in v4l2_ctrl_handler_init_class usb media 3 syz, C 12 1945d 1998d 20/29 1741d 9c39be40c015 media: drivers/media/usb: fix memory leak in zr364xx_probe
KMSAN: uninit-value in ax88179_get_mac_addr usb 7 syz, C 149 1859d 2123d 20/29 1741d bd78980be1a6 net: usb: ax88179_178a: initialize local variables before use
WARNING in io_uring_setup (2) fs io-uring -1 syz, C done 40 1926d 1935d 20/29 1741d 47b228ce6f66 io_uring: fix unchecked error in switch_start()
general protection fault in drm_atomic_set_crtc_for_connector dri 2 syz, C unreliable 586 2098d 2095d 20/29 1766d 0003b687ee6d drm: fix oops in drm_atomic_set_crtc_for_connector
UBSAN: shift-out-of-bounds in qdisc_get_rtab net -1 syz, C unreliable done 521 2034d 2078d 20/29 1888d e4bedf48aaa5 net_sched: reject silly cell_log in qdisc_get_rtab()
KASAN: out-of-bounds Read in kfence_guarded_free kasan mm 17 syz, C error 20 2051d 2062d 20/29 1892d 2b8305260fb3 kfence, kasan: make KFENCE compatible with KASAN
KASAN: global-out-of-bounds Read in netlink_policy_dump_add_policy (2) kernel 17 syz, C done 2 2015d 2015d 20/29 1908d 33b347503f01 vdpa: Define vdpa mgmt device, ops and a netlink interface
KASAN: use-after-free Read in __cpuhp_state_remove_instance kernel 19 syz, C unreliable done 2726 1976d 1997d 20/29 1945d 470ec4ed8c91 io-wq: fix double put of 'wq' in error path
KASAN: use-after-free Read in idr_for_each (2) io-uring fs 19 syz, C error done 86 1979d 2141d 20/29 1945d 61cf93700fe6 io_uring: Convert personality_idr to XArray
KASAN: vmalloc-out-of-bounds Read in bpf_trace_run2 trace bpf 17 syz, C done done 5 1997d 2155d 20/29 1951d befe6d946551 tracepoint: Do not fail unregistering a probe due to memory failure
general protection fault in drm_client_buffer_vunmap usb dri 2 syz, C unreliable done 247 1984d 2085d 20/29 1951d 874a52f9b693 drm/fb-helper: only unmap if buffer not null
BUG: unable to handle kernel paging request in bpf_trace_run2 trace bpf 8 syz, C done done 10 1994d 2155d 20/29 1951d befe6d946551 tracepoint: Do not fail unregistering a probe due to memory failure
INFO: rcu detected stall in smp_call_function perf 1 syz, C 107 1954d 2209d 20/29 1951d c583bcb8f5ed rcu: Don't invoke try_invoke_on_locked_down_task() with irqs disabled 1b7af295541d sched/core: Allow try_invoke_on_locked_down_task() with irqs disabled
INFO: task hung in io_uring_cancel_task_requests fs io-uring 1 syz, C 305 1979d 2014d 20/29 1955d 34343786ecc5 io_uring: unpark SQPOLL thread for cancelation
general protection fault in usb_audio_probe sound usb 2 syz, C done 360 1985d 1987d 20/29 1955d 30dea07180de ALSA: usb-audio: fix NULL ptr dereference in usb_audio_probe
UBSAN: shift-out-of-bounds in erofs_fc_fill_super erofs -1 syz, C unreliable 11 2005d 2035d 20/29 1955d bde545295b71 erofs: fix shift-out-of-bounds of blkszbits
INFO: task hung in addrconf_verify_work (4) 1 syz, C done 132 2003d 2091d 20/29 1955d d349f9976868 net_sched: fix RTNL deadlock again caused by request_module()
possible deadlock in cfg80211_netdev_notifier_call wireless 4 syz done 13 1956d 2022d 20/29 1955d 40c575d1ec71 cfg80211: fix netdev registration deadlock
memory leak in qrtr_tun_open arm-msm net 3 syz, C 4 2046d 2091d 20/29 1955d fc0494ead639 net: qrtr: Fix memory leak in qrtr_tun_open
UBSAN: shift-out-of-bounds in mceusb_dev_printdata usb media -1 syz, C error 331 2001d 2069d 20/29 1955d 9dec0f48a75e media: mceusb: sanity check for prescaler value
memory leak in v2_read_file_info ext4 3 syz, C 71 2004d 2063d 20/29 1955d a4db1072e1a3 quota: Fix memory leak when handling corrupted quota file
KASAN: null-ptr-deref Read in tcf_idrinfo_destroy net 11 syz, C 115 1958d 2148d 20/29 1955d 396d7f23adf9 net: sched: fix police ext initialization
general protection fault in j1939_netdev_notify (2) can 2 syz, C done 19 2007d 2065d 20/29 1955d 4e096a18867a net: introduce CAN specific pointer in the struct net_device
INFO: task hung in tcf_action_init_1 net 1 syz, C done 30 2014d 2148d 20/29 1955d d349f9976868 net_sched: fix RTNL deadlock again caused by request_module()
general protection fault in kobject_cleanup gpio usb 2 syz, C unreliable 72 1985d 1998d 20/29 1955d a6112998ee45 gpio: fix NULL-deref-on-deregistration regression
KASAN: slab-out-of-bounds Read in skb_segment net 17 syz, C error 311 2033d 2037d 20/29 1955d 00b229f762b0 net: fix GSO for SG-enabled devices
UBSAN: shift-out-of-bounds in snto32 input usb -1 syz, C error 58 1999d 2072d 20/29 1955d a0312af1f94d HID: core: detect and skip invalid inputs to snto32()
UBSAN: shift-out-of-bounds in exfat_fill_super exfat -1 syz, C error 3 2012d 2029d 20/29 1955d 78c276f5495a exfat: fix shift-out-of-bounds in exfat_fill_super()
INFO: task hung in io_sq_thread_park fs io-uring 1 syz, C unreliable 263 1990d 1995d 20/29 1955d 3ebba796fa25 io_uring: ensure that SQPOLL thread is started for exit
KASAN: use-after-free Read in ntfs_iget ntfs3 19 syz, C error error 1 2092d 2088d 20/29 1955d 4dfe6bd94959 ntfs: check for valid standard information attribute
general protection fault in kvm_hv_irq_routing_update kvm kvm-x86 2 syz, C done 33 1991d 1997d 20/29 1955d 919f4ebc5987 KVM: x86: hyper-v: Fix Hyper-V context null-ptr-deref
WARNING in memdup_user_nul lsm -1 syz, C inconclusive 2 2040d 2040d 20/29 1955d 7ef4c19d245f smackfs: restrict bytes count in smackfs write functions
memory leak in io_submit_sqes (2) fs io-uring 3 syz, C 1 1993d 1992d 20/29 1955d f01272541d2c io-wq: ensure all pending work is canceled on exit
INFO: task can't die in connmark_exit_net net 1 syz error 1 2077d 2073d 20/29 1955d d349f9976868 net_sched: fix RTNL deadlock again caused by request_module()
memory leak in dlfb_usb_probe usb fbdev 3 syz, C 3 2069d 2071d 20/29 1955d 5c0e4110f751 udlfb: Fix memory leak in dlfb_usb_probe
UBSAN: shift-out-of-bounds in std_validate media -1 syz, C unreliable 2 2035d 2035d 20/29 1955d 048c96e28674 media: v4l2-ctrls.c: fix shift-out-of-bounds in std_validate
memory leak in zr364xx_probe usb media 3 syz, C 6 2009d 2062d 20/29 1955d ea354b6ddd6f media: zr364xx: fix memory leaks in probe()
KASAN: use-after-free Read in usb_audio_disconnect sound usb 19 syz, C done 15 1985d 1986d 20/29 1955d c5aa956eaeb0 ALSA: usb-audio: fix use after free in usb_audio_disconnect
UBSAN: shift-out-of-bounds in chkSuper jfs -1 syz, C unreliable 28 2003d 2069d 20/29 1955d 3bef198f1b17 JFS: more checks for invalid superblock
KASAN: vmalloc-out-of-bounds Read in bpf_trace_run3 bpf trace 17 syz, C done 6 2011d 2113d 20/29 1955d befe6d946551 tracepoint: Do not fail unregistering a probe due to memory failure
UBSAN: shift-out-of-bounds in mceusb_dev_recv media usb -1 syz, C 13 2002d 2066d 20/29 1955d 1b43bad31fb0 media: mceusb: Fix potential out-of-bounds shift
memory leak in video_usercopy media 3 syz, C 19 2003d 2066d 20/29 1955d fb18802a338b media: v4l: ioctl: Fix memory leak in video_usercopy
BUG: sleeping function called from invalid context in rxe_alloc_nl rdma 5 syz, C done 475 2021d 2035d 20/29 1955d c4369575b2bc RDMA/rxe: Fix bug in rxe_alloc()
WARNING in __alloc_skb arm-msm net -1 syz, C error 24 1986d 1998d 20/29 1955d 093b036aa94e net/qrtr: fix __netdev_alloc_skb call
WARNING in iov_iter_revert (2) serial -1 syz, C done 9 2006d 2007d 20/29 1955d 3342ff2698e9 tty: protect tty_write from odd low-level tty disciplines
WARNING in cfg80211_change_iface wireless -1 syz, C inconclusive 4 2021d 2026d 20/29 1955d bae173563cbf wext: call cfg80211_change_iface() with wiphy lock held
memory leak in edge_startup usb 3 syz, C 1 1998d 1994d 20/29 1955d cfdc67acc785 USB: serial: io_edgeport: fix memory leak in edge_startup
unexpected kernel reboot (3) input usb -1 syz, C error error 21132 1955d 2956d 20/29 1955d c8e2fe13d1d1 x86/perf: Use RET0 as default for guest_get_msrs to handle "no PMU" case
WARNING in qp_broker_alloc kernel -1 syz, C inconclusive 24 2000d 2036d 20/29 1955d 2fd10bcf0310 drivers/misc/vmw_vmci: restrict too big queue size in qp_host_alloc_queue
WARNING in sk_stream_kill_queues (5) net -1 syz, C done 4684 1955d 2085d 20/29 1955d 097b9146c0e2 net: fix up truesize of cloned skb in skb_prepare_for_shift()
BUG: unable to handle kernel paging request in bpf_trace_run3 bpf trace 8 syz, C done 40 2002d 2124d 20/29 1955d befe6d946551 tracepoint: Do not fail unregistering a probe due to memory failure
KASAN: null-ptr-deref Write in event_handler usb 12 syz, C done 2869 1994d 2141d 20/29 1955d 9380afd6df70 usbip: fix stub_dev usbip_sockfd_store() races leading to gpf 718ad9693e36 usbip: fix vhci_hcd attach_store() races leading to gpf 46613c9dfa96 usbip: fix vudc usbip_sockfd_store races leading to gpf
KASAN: use-after-free Read in nbd_genl_connect nbd 19 syz, C inconclusive 16 1986d 2001d 20/29 1955d c9a2f90f4d6b nbd: handle device refs for DESTROY_ON_DISCONNECT properly
WARNING in cfg80211_dev_rename wireless -1 syz, C inconclusive 22 2020d 2026d 20/29 1955d 0391a45c8007 nl80211: call cfg80211_dev_rename() under RTNL
general protection fault in gfs2_withdraw gfs2 8 syz, C done 81 2003d 2151d 20/29 1955d d5bf630f355d gfs2: bypass signal_our_withdraw if no journal
KASAN: null-ptr-deref Write in amp_read_loc_assoc_final_data bluetooth 12 syz, C done 185 2006d 2207d 20/29 1955d e8bd76ede155 Bluetooth: Fix null pointer dereference in amp_read_loc_assoc_final_data
possible deadlock in io_poll_double_wake (2) io-uring fs 4 syz, C error error 431 1955d 2148d 20/29 1955d 1c3b3e6527e5 io_uring: ignore double poll add on the same waitqueue head
WARNING in _cfg80211_unregister_wdev wireless -1 syz, C inconclusive 48 2020d 2026d 20/29 1955d 776a39b8196d cfg80211: call cfg80211_destroy_ifaces() with wiphy lock held
INFO: task can't die in io_sq_thread_finish ext4 1 syz 137 1966d 1998d 20/29 1955d eb85890b29e4 io_uring: ensure SQPOLL startup is triggered before error shutdown
WARNING in dst_release net -1 syz done 2 2007d 2006d 20/29 1955d e0be4931f3fe mptcp: reset last_snd on subflow close
BUG: sleeping function called from invalid context in mm_access mm 5 syz, C done 684 2039d 2042d 20/29 1955d 38e891849003 kbuild: lto: fix module versioning
KASAN: use-after-free Read in skb_segment net 19 syz, C error 55 2033d 2037d 20/29 1955d 00b229f762b0 net: fix GSO for SG-enabled devices
inconsistent lock state in io_dismantle_req fs io-uring 4 syz, C 2 2022d 2022d 20/29 1955d 9ae1f8dd372e io_uring: fix inconsistent lock state
BUG: unable to handle kernel paging request in __kvm_mmu_prepare_zap_page kvm-x86 8 syz error 2 2718d 2729d 20/29 1976d 47c42e6b4192 KVM: x86: fix handling of role.cr4_pae and rename it to 'gpte_size'
KASAN: slab-out-of-bounds Read in squashfs_get_id squashfs 17 syz, C error done 77 2015d 2151d 20/29 1984d e812cbbbbbb1 squashfs: avoid out of bounds writes in decompressors
UBSAN: shift-out-of-bounds in tcf_police_init net -1 syz, C unreliable 8 2035d 2071d 20/29 1984d e4bedf48aaa5 net_sched: reject silly cell_log in qdisc_get_rtab()
UBSAN: shift-out-of-bounds in est_timer net -1 syz, C unreliable 73 1994d 2068d 20/29 1984d dd5e073381f2 net_sched: gen_estimator: support large ewma log
memory leak in xskq_create bpf net 3 syz, C 7 2051d 2072d 19/29 1986d 8bee68338408 xsk: Fix memory leak for failed bind
BUG: sleeping function called from invalid context in corrupted wireless 5 syz done 18 2082d 2106d 19/29 1986d 7bc40aedf24d mac80211: free sta in sta_info_insert_finish() on errors
WARNING in md_ioctl raid -1 syz, C done error 684 2069d 3031d 19/29 1986d c731b84b51bf md: fix a warning caused by a race between concurrent md_ioctl()s
BUG: unable to handle kernel paging request in htab_map_alloc (2) bpf 8 syz, C unreliable 8 2072d 2081d 19/29 1986d e1868b9e36d0 bpf: Avoid overflows involving hash elem_size
UBSAN: shift-out-of-bounds in __detect_linklayer net -1 syz, C unreliable done 31 2034d 2040d 19/29 1986d e4bedf48aaa5 net_sched: reject silly cell_log in qdisc_get_rtab()
BUG: receive list entry not found for dev vxcan1, id 003, mask C00007FF can -1 syz, C unreliable 2 2090d 2090d 19/29 1986d d73ff9b7c4ea can: af_can: can_rx_unregister(): remove WARN() statement from list operation sanity check
UBSAN: shift-out-of-bounds in tcindex_set_parms net -1 syz, C unreliable done 45 2034d 2069d 19/29 1986d bcd0cf19ef82 net_sched: avoid shift-out-of-bounds in tcindex_set_parms()
WARNING in io_uring_flush fs io-uring -1 syz, C unreliable 10 2030d 2039d 19/29 1986d 4325cb498cb7 io_uring: fix uring_flush in exit_files() warning
general protection fault in rose_send_frame 2 syz, C done done 664 2096d 2775d 19/29 1986d 3b3fd068c56e rose: Fix Null pointer dereference in rose_send_frame()
general protection fault in taprio_dequeue_soft net 2 syz, C done 2 2070d 2070d 19/29 1986d 44d4775ca518 net/sched: sch_taprio: reset child qdiscs before freeing them
BUG: unable to handle kernel paging request in bpf_lru_populate bpf 8 syz, C done 12 2072d 2078d 19/29 1986d e1868b9e36d0 bpf: Avoid overflows involving hash elem_size
KASAN: slab-out-of-bounds Read in hci_le_meta_evt bluetooth 17 syz, C error error 45 2083d 2204d 19/29 1986d f7e0e8b2f1b0 Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt()
KASAN: use-after-free Read in disk_part_iter_next block 19 syz, C unreliable 243 1986d 2074d 19/29 1986d aebf5db91705 block: fix use-after-free in disk_part_iter_next
WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected (2) -1 syz, C done 640 2050d 2167d 19/29 1986d 8d1ddb5e7937 fcntl: Fix potential deadlock in send_sig{io, urg}()
kernel BUG at net/core/dev.c:NUM! net -1 syz, C done 35 2040d 2041d 19/29 1986d 47e4bb147a96 net: sit: unregister_netdevice on newlink's error path
KASAN: use-after-free Read in search_by_entry_key fs 19 syz, C done 3 2134d 2138d 19/29 1986d d24396c5290b reiserfs: add check for an invalid ih_entry_count
UBSAN: shift-out-of-bounds in f2fs_fill_super f2fs -1 syz, C 4 2077d 2076d 19/29 1986d e584bbe82122 f2fs: fix shift-out-of-bounds in sanity_check_raw_super()
KASAN: global-out-of-bounds Read in smc_nl_get_sys_info smc 17 syz, C error 27 2038d 2065d 19/29 1986d 25fe2c9c4cd2 smc: fix out of bound access in smc_nl_get_sys_info()
KASAN: use-after-free Read in btrfs_scan_one_device btrfs 19 syz, C error 70 2090d 2156d 19/29 1986d 0697d9a61099 btrfs: don't access possibly stale fs_info data for printing duplicate device
memory leak in prepare_creds lsm 3 syz, C 10 2005d 2180d 19/29 1986d f26c08b444df io_uring: fix file leak on error path of io ctx creation
WARNING in percpu_ref_kill_and_confirm (2) fs -1 syz, C done 71 2061d 2069d 19/29 1986d 9faadcc8abe4 io_uring: fix double io_uring free
WARNING: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anywa bfs -1 syz, C unreliable 1 2082d 2078d 19/29 1986d dc889b8d4a81 bfs: don't use WARNING: string when it's just info.
general protection fault in ieee80211_subif_start_xmit wireless 2 syz, C unreliable 29 2025d 2092d 19/29 1986d 054c9939b480 mac80211: pause TX while changing interface type
WARNING in rds_rdma_extra_size mm -1 syz, C done 165 2021d 2045d 19/29 1986d a11148e6fcce net/rds: restrict iovecs length for RDS_CMSG_RDMA_ARGS
KASAN: use-after-free Read in decode_session6 net 19 syz, C done 152 2032d 2239d 19/29 1986d 0356010d825e sctp: bring inet(6)_skb_parm back to sctp_input_cb
divide error in __tcp_select_window net 2 syz, C done 1119 2089d 2094d 19/29 1986d fd8976790a6c mptcp: be careful on MPTCP-level ack.
WARNING: suspicious RCU usage in kernfs_iop_permission kernfs 4 syz, C done 1 2022d 2022d 19/29 1986d b854cc659dcb ovl: avoid deadlock on directory ioctl
WARNING in io_ring_ctx_wait_and_kill fs -1 syz, C done 9 2040d 2041d 19/29 1986d 06585c497b55 io_uring: do sqo disable on install_fd error
INFO: task hung in lock_sock_nested (4) mptcp 1 syz, C done 6 2037d 2084d 19/29 1986d 05e3ecea4a63 mptcp: avoid potential infinite loop in mptcp_recvmsg()
UBSAN: shift-out-of-bounds in choke_enqueue net -1 syz, C inconclusive 3853 1986d 2078d 19/29 1986d bd1248f1ddbc net: sched: prevent invalid Scell_log shift count
WARNING: suspicious RCU usage in get_wiphy_regdom wireless 4 syz, C done 5031 2037d 2069d 19/29 1986d 51d62f2f2c50 cfg80211: Save the regulatory domain with a lock
WARNING: suspicious RCU usage in tcp_disconnect net 4 syz, C done 25 2040d 2041d 19/29 1986d 13a9499e8333 mptcp: fix locking in mptcp_disconnect()
WARNING in spi_register_controller usb spi -1 syz, C 1848 2069d 2683d 19/29 1986d 9c60cc797cf7 media: msi2500: assign SPI bus number dynamically
KMSAN: uninit-value in __nla_validate_parse (2) net 7 syz, C 2 2047d 2043d 19/29 1986d c96adff95619 cls_flower: call nla_ok() before nla_next()
INFO: task hung in __io_uring_files_cancel io-uring fs 1 syz, C done 30 2027d 2094d 19/29 1986d bee749b187ac io_uring: fix files cancellation
general protection fault in xsk_recvmsg bpf net 2 syz, C done unreliable 1800 2070d 2040d 19/29 1986d 3546b9b8eced xsk: Validate socket state in xsk_recvmsg, prior touching socket members
UBSAN: shift-out-of-bounds in sfq_init net -1 syz, C unreliable 8 2049d 2063d 19/29 1986d bd1248f1ddbc net: sched: prevent invalid Scell_log shift count
memory leak in h5_rx_pkt_start bluetooth 3 syz, C 5 2183d 2526d 19/29 1986d 70f259a3f427 Bluetooth: hci_h5: close serdev device and free hu in h5_close 855af2d74c87 Bluetooth: hci_h5: fix memory leak in h5_close
kernel BUG at lib/string.c:LINE! (6) netfilter -1 syz, C done 2 2067d 2063d 19/29 1986d 6cb56218ad9e netfilter: xt_RATEEST: reject non-null terminated string from userspace
kernel BUG at include/linux/highmem.h:LINE! mm -1 syz, C error 32 2089d 2094d 19/29 1986d 0060ef3b4e6d mm: support THPs in zero_user_segments
UBSAN: shift-out-of-bounds in dummy_hub_control usb -1 syz, C done 5 2062d 2060d 19/29 1986d c318840fb2a4 USB: Gadget: dummy-hcd: Fix shift-out-of-bounds bug
KASAN: use-after-free Read in reiserfs_fill_super fs 19 syz, C error done 2 2079d 2078d 19/29 1986d d24396c5290b reiserfs: add check for an invalid ih_entry_count
BUG: unable to handle kernel paging request in percpu_ref_exit fs 8 syz, C done 3 2047d 2045d 19/29 1986d 3e2224c5867f io_uring: Fix return value from alloc_fixed_file_ref_node
KMSAN: uninit-value in gre_parse_header net 7 syz, C 9283 2013d 2611d 19/29 1986d 085c7c4e1c0e erspan: fix version 1 check in gre_parse_header()
UBSAN: shift-out-of-bounds in red_adaptative_timer net -1 syz, C unreliable 260 1986d 2078d 19/29 1986d bd1248f1ddbc net: sched: prevent invalid Scell_log shift count
KASAN: slab-out-of-bounds Write in xfrm_attr_cpy32 net 21 syz, C done 106 2075d 2123d 19/29 1986d d1949d045fd6 xfrm/compat: memset(0) 64-bit padding at right place
WARNING in squashfs_read_table mm squashfs -1 syz, C inconclusive 50 2016d 2045d 19/29 1986d 506220d2ba21 squashfs: add more sanity checks in xattr id lookup
BUG: receive list entry not found for dev vcan0, id 002, mask C00007FF can -1 syz, C unreliable 5 2089d 2090d 19/29 1986d d73ff9b7c4ea can: af_can: can_rx_unregister(): remove WARN() statement from list operation sanity check
UBSAN: shift-out-of-bounds in parse_audio_format_i usb sound -1 syz, C error 19 2071d 2076d 19/29 1986d 175b8d89fe29 ALSA: pcm: oss: Fix potential out-of-bounds shift 43d5ca88dfcd ALSA: usb-audio: Fix potential out-of-bounds shift
UBSAN: array-index-out-of-bounds in dquot_resume ext4 15 syz, C done 1 2080d 2078d 19/29 1986d e51d68e76d60 fs: quota: fix array-index-out-of-bounds bug by passing correct argument to vfs_cleanup_quota_inode()
WARNING: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway bfs -1 syz, C done 11 2080d 2148d 19/29 1986d dc889b8d4a81 bfs: don't use WARNING: string when it's just info.
KASAN: use-after-free Read in htab_map_alloc bpf 19 syz, C done 38 2113d 2116d 19/29 1986d 8aaeed81fcb9 bpf: Fix error path in htab_map_alloc()
general protection fault in io_disable_sqo_submit fs io-uring 2 syz, C done 124 2037d 2041d 19/29 1986d b4411616c26f io_uring: fix null-deref in io_disable_sqo_submit
KASAN: null-ptr-deref Write in bdi_put 12 syz, C done done 601 2042d 2076d 19/29 1986d 2d2f6f1b4799 block: pre-initialize struct block_device in bdev_alloc_inode
general protection fault in rose_transmit_clear_request kernel 2 syz, C done 5 2114d 2580d 19/29 1986d 3b3fd068c56e rose: Fix Null pointer dereference in rose_send_frame()
kernel BUG at net/core/skbuff.c:LINE! (3) -1 syz, C done 4399 2001d 3118d 19/29 1986d afbc293add64 af_key: relax availability checks for skb size calculation
UBSAN: shift-out-of-bounds in __red_change net -1 syz, C unreliable 24 1989d 2077d 19/29 1986d bd1248f1ddbc net: sched: prevent invalid Scell_log shift count
WARNING in io_uring_cancel_task_requests io-uring fs -1 syz done 69 2022d 2026d 19/29 1986d 70b2c60d3797 io_uring: fix sqo ownership false positive warning
kernel BUG at fs/notify/dnotify/dnotify.c:LINE! (2) fuse -1 syz, C inconclusive 2 2087d 2092d 19/29 1986d 5d069dbe8aaf fuse: fix bad inode
BUG: receive list entry not found for dev vcan0, id 001, mask C00007FF can -1 syz, C unreliable 5 2093d 2092d 19/29 1986d d73ff9b7c4ea can: af_can: can_rx_unregister(): remove WARN() statement from list operation sanity check
inconsistent lock state in io_file_data_ref_zero fs 4 syz, C done 7152 2068d 2092d 19/29 1986d ac0648a56c1f io_uring: use bottom half safe lock for fixed file data
unregister_netdevice: waiting for DEV to become free (4) 2 syz, C done 50394 1986d 2188d 19/29 1986d 5399d52233c4 rxrpc: Fix deadlock around release of dst cached on udp tunnel
WARNING in bpf_prog_test_run_raw_tp mm -1 syz, C done 36 2034d 2045d 19/29 1986d 7ac6ad051150 bpf: Reject too big ctx_size_in for raw_tp test run
UBSAN: shift-out-of-bounds in gred_change net -1 syz, C unreliable 5 1999d 2054d 19/29 1986d bd1248f1ddbc net: sched: prevent invalid Scell_log shift count
BUG: corrupted list in io_file_get fs io-uring 8 syz, C done 3 2026d 2026d 19/29 1986d f609cbb8911e io_uring: fix list corruption for splice file_get
UBSAN: shift-out-of-bounds in option_probe usb -1 syz, C error 22 2075d 2076d 19/29 1986d a251963f76fa USB: serial: option: add interface-number sanity check to flag handling
KMSAN: kernel-infoleak in vmci_host_unlocked_ioctl kernel 9 syz, C 22 2014d 2098d 19/29 1986d 31dcb6c30a26 misc: vmw_vmci: fix kernel info-leak by initializing dbells in vmci_ctx_get_chkpt_doorbells()
general protection fault in jffs2_parse_param jffs2 2 syz, C error done 1632 2067d 2155d 19/29 1986d a61df3c413e4 jffs2: Fix NULL pointer dereference in rp_size fs option parsing
KMSAN: uninit-value in number (2) can 7 syz, C 168 1986d 2365d 19/29 1986d c8c958a58fc6 can: af_can: prevent potential access of uninitialized member in can_rcv() 9aa9379d8f86 can: af_can: prevent potential access of uninitialized member in canfd_rcv()
possible deadlock in send_sigio (2) fs 4 syz, C done done 40 2055d 2167d 19/29 1986d 8d1ddb5e7937 fcntl: Fix potential deadlock in send_sig{io, urg}()
kernel BUG at fs/reiserfs/prints.c:LINE! fs -1 syz, C done done 5 2076d 2155d 19/29 1986d d24396c5290b reiserfs: add check for an invalid ih_entry_count
KASAN: vmalloc-out-of-bounds Write in lzo_uncompress squashfs 21 syz, C done 8 2016d 2041d 19/29 1986d e812cbbbbbb1 squashfs: avoid out of bounds writes in decompressors
BUG: unable to handle kernel paging request in pcpu_freelist_populate bpf 8 syz, C unreliable 42 2071d 2082d 19/29 1986d e1868b9e36d0 bpf: Avoid overflows involving hash elem_size
UBSAN: array-index-out-of-bounds in alg_bind crypto 15 syz, C error 700 2071d 2130d 19/29 1986d 92eb6c3060eb crypto: af_alg - avoid undefined behavior accessing salg_name
memory leak in rxrpc_lookup_local net afs 3 syz, C 1415 2025d 2490d 19/29 1986d b8323f7288ab rxrpc: Fix memory leak in rxrpc_lookup_local
WARNING: suspicious RCU usage in wiphy_apply_custom_regulatory wireless 4 syz, C done 28 2069d 2066d 19/29 1986d 51d62f2f2c50 cfg80211: Save the regulatory domain with a lock
memory leak in generic_parse_monolithic fs 3 syz, C 11 2076d 2102d 19/29 1986d 4cb682964706 afs: Fix memory leak when mounting with multiple source parameters
WARNING in mptcp_reset_timer mptcp -1 syz, C unreliable 1307 2003d 2097d 19/29 1986d b680a214ec28 mptcp: update rtx timeout only if required.
KASAN: slab-out-of-bounds Write in record_print_text fs 21 syz, C done unreliable 17 2026d 2029d 19/29 1986d 08d60e599954 printk: fix string termination for record_print_text()
WARNING in xfrm_alloc_compat net -1 syz, C done 130 1998d 2120d 19/29 1986d dbd7ae5154d5 xfrm/compat: Translate by copying XFRMA_UNSPEC attribute
UBSAN: shift-out-of-bounds in red_enqueue net -1 syz, C unreliable 4906 1986d 2078d 19/29 1986d bd1248f1ddbc net: sched: prevent invalid Scell_log shift count
KMSAN: kernel-infoleak in move_addr_to_user (4) net 9 syz, C 59 1992d 2044d 19/29 1986d b42b3a2744b3 can: isotp: isotp_getname(): fix kernel information leak
general protection fault in ext4_commit_super ext4 2 syz, C done 4 2064d 2063d 19/29 1986d c92dc856848f ext4: defer saving error info from atomic context
UBSAN: array-index-out-of-bounds in arch_uprobe_analyze_insn trace 15 syz, C done 604 2079d 2156d 19/29 1986d 12cb908a11b2 x86/insn-eval: Use new for_each_insn_prefix() macro to loop over prefixes bytes 84da009f06e6 x86/sev-es: Use new for_each_insn_prefix() macro to loop over prefixes bytes 4e9a5ae8df5b x86/uprobes: Do not use prefixes.nbytes when looping over prefixes.bytes
BUG: unable to handle kernel NULL pointer dereference in call_rcu kernel 10 syz, C done 85 2056d 2059d 19/29 1986d 13384f6125ad kasan: fix null pointer dereference in kasan_record_aux_stack
KASAN: vmalloc-out-of-bounds Read in htab_free_elems bpf 17 syz, C unreliable 7 2078d 2080d 19/29 1986d e1868b9e36d0 bpf: Avoid overflows involving hash elem_size
BUG: receive list entry not found for dev vxcan1, id 002, mask C00007FF can -1 syz, C unreliable 3 2090d 2092d 19/29 1986d d73ff9b7c4ea can: af_can: can_rx_unregister(): remove WARN() statement from list operation sanity check
WARNING in rhashtable_free_and_destroy wireless -1 syz, C error 3 2082d 2174d 19/29 1986d 905b2032fa42 mac80211: mesh: fix mesh_pathtbl_init() error path
BUG: unable to handle kernel NULL pointer dereference in __lookup_slow fs 10 syz, C inconclusive done 3 2008d 2148d 19/29 1986d d24396c5290b reiserfs: add check for an invalid ih_entry_count
BUG: sleeping function called from invalid context in sta_info_move_state wireless 5 syz, C done 39248 2080d 2112d 19/29 1986d 7bc40aedf24d mac80211: free sta in sta_info_insert_finish() on errors
UBSAN: shift-out-of-bounds in strset_parse_request net -1 syz, C done 16 2049d 2072d 19/29 1986d efb796f5571f ethtool: fix string set id check
KASAN: slab-out-of-bounds Read in btrfs_scan_one_device btrfs 17 syz, C done done 1 2109d 2105d 19/29 1986d 0697d9a61099 btrfs: don't access possibly stale fs_info data for printing duplicate device
WARNING in qrtr_tun_write_iter mm -1 syz, C error 57 2013d 2044d 19/29 1986d 2a80c1581237 net/qrtr: restrict user-controlled length in qrtr_tun_write_iter()
memory leak in hub_event usb 3 syz, C 7 2006d 2095d 19/29 1986d e469d0b09a19 media: gspca: Fix memory leak in probe
possible deadlock in send_sigurg (2) fs 4 syz, C done 25 2072d 2123d 19/29 1986d 8d1ddb5e7937 fcntl: Fix potential deadlock in send_sig{io, urg}()
WARNING in yurex_write/usb_submit_urb usb -1 syz, C error 78 2044d 2073d 19/29 1986d 372c93131998 USB: yurex: fix control-URB timeout handling
kernel BUG at fs/ext4/inode.c:LINE! ext4 -1 syz, C done 9 2055d 2180d 19/29 1986d 073861ed77b6 mm: fix VM_BUG_ON(PageTail) and BUG_ON(PageWriteback)
UBSAN: shift-out-of-bounds in cbq_dequeue net -1 syz, C unreliable 27 2034d 2078d 19/29 1986d e4bedf48aaa5 net_sched: reject silly cell_log in qdisc_get_rtab()
KASAN: use-after-free Write in __sco_sock_close bluetooth 22 syz, C done done 10 2107d 2205d 19/29 1986d 6dfccd13db2f Bluetooth: Fix null pointer dereference in hci_event_packet()
BUG: unable to handle kernel paging request in dqput ext4 8 syz, C done 7 2080d 2150d 19/29 1986d 11c514a99bb9 quota: Sanity-check quota file headers on load
UBSAN: shift-out-of-bounds in intel_pmu_refresh kvm-x86 -1 syz, C unreliable 1237 2026d 2076d 19/29 1986d e61ab2a320c3 KVM: x86/pmu: Fix UBSAN shift-out-of-bounds warning in intel_pmu_refresh()
UBSAN: shift-out-of-bounds in snd_usbmidi_get_ms_info sound usb -1 syz, C error 9 2043d 2063d 19/29 1986d c06ccf3ebb75 ALSA: usb-audio: Fix UBSAN warnings for MIDI jacks
UBSAN: shift-out-of-bounds in snd_pcm_oss_change_params_locked sound -1 syz, C unreliable 225 2062d 2076d 19/29 1986d 11cb881bf075 ALSA: pcm: oss: Fix a few more UBSAN fixes
UBSAN: shift-out-of-bounds in ext4_fill_super ext4 -1 syz, C unreliable 88 2061d 2076d 19/29 1986d c9200760da8a ext4: check for invalid block size early when mounting a file system
INFO: rcu detected stall in tipc_release tipc 1 syz, C done done 4 2096d 2232d 19/29 1986d cc00bcaa5899 netfilter: x_tables: Switch synchronization to RCU
UBSAN: shift-out-of-bounds in vhci_hub_control usb -1 syz, C unreliable 4 2026d 2062d 19/29 1986d 718bf42b119d usb: usbip: vhci_hcd: protect shift size
general protection fault in tower_disconnect usb 2 syz, C 53 2069d 2077d 19/29 1986d b175d273d4e4 USB: legotower: fix logical error in recent commit
kernel BUG at drivers/dma-buf/dma-buf.c:LINE! dri media -1 syz error done 11 2103d 2353d 19/29 1986d e722a295cf49 staging: ion: remove from the tree
memory leak in wacom_probe input usb 3 syz, C 26 2049d 2103d 19/29 1986d 37309f47e2f5 HID: wacom: Fix memory leakage caused by kfifo_alloc
KASAN: use-after-free Read in service_outstanding_interrupt usb 19 syz, C 28 2045d 2200d 19/29 1986d 5e5ff0b4b6bc USB: cdc-wdm: Fix use after free in service_outstanding_interrupt().
general protection fault in call_commit_handler 2 syz, C done 428 2042d 2123d 19/29 1986d 5122565188ba wext: fix NULL-ptr-dereference with cfg80211's lack of commit()
BUG: unable to handle kernel paging request in smc_nl_handle_smcr_dev smc 8 syz, C 16 2055d 2077d 19/29 1986d 995433b795ce net/smc: fix access to parent of an ib device
KASAN: vmalloc-out-of-bounds Write in bpf_lru_populate bpf 21 syz, C unreliable 19 2072d 2082d 19/29 1986d e1868b9e36d0 bpf: Avoid overflows involving hash elem_size
memory leak in copy_process kernel 3 syz, C 23 2003d 2100d 19/29 1986d 450677dcb0cc mm/madvise: fix memory leak from process_madvise
KASAN: stack-out-of-bounds Write in bitmap_from_arr32 net 21 syz, C done 2 2089d 2085d 19/29 1986d a770bf515613 ethtool: fix stack overflow in ethnl_parse_bitset()
possible deadlock in hugetlb_cow mm 4 syz, C unreliable 341 2056d 2079d 19/29 1986d e7dd91c456a8 mm/hugetlb: fix deadlock in hugetlb_cow error path
KASAN: null-ptr-deref Write in start_transaction btrfs 12 syz, C done done 1 2078d 2105d 19/29 1986d ecfdc08b8cc6 btrfs: remove dio iomap DSYNC workaround
KASAN: slab-out-of-bounds Read in squashfs_export_iget squashfs 17 syz, C done error 3 2057d 2075d 19/29 1986d eabac19e40c0 squashfs: add more sanity checks in inode lookup
WARNING in io_disable_sqo_submit fs -1 syz, C done 9 2031d 2039d 19/29 1986d 6b393a1ff174 io_uring: fix false positive sqo warning on flush
KASAN: null-ptr-deref Read in filp_close fs 11 syz, C done 9 2066d 2068d 19/29 1986d fec8a6a69103 close_range: unshare all fds for CLOSE_RANGE_UNSHARE | CLOSE_RANGE_CLOEXEC 6abc20f8f879 selftests/core: add regression test for CLOSE_RANGE_UNSHARE | CLOSE_RANGE_CLOEXEC
possible deadlock in _destroy_id rdma 4 syz, C unreliable 28 2089d 2097d 19/29 1986d dd37d2f59eb8 RDMA/cma: Fix deadlock on &lock in rdma_cma_listen_on_all() error unwind
UBSAN: array-index-out-of-bounds in ieee80211_del_key (2) wireless 15 syz, C error 3 2076d 2085d 19/29 1986d 2d9463083ce9 nl80211: validate key indexes for cfg80211_registered_device
general protection fault in hci_event_packet bluetooth 2 syz, C done 25 2152d 2205d 19/29 1986d 6dfccd13db2f Bluetooth: Fix null pointer dereference in hci_event_packet()
KASAN: use-after-free Read in dump_schedule net 19 syz, C done done 7 2062d 2173d 19/29 1986d cc00bcaa5899 netfilter: x_tables: Switch synchronization to RCU
KASAN: invalid-free in p9_client_create (2) v9fs 24 syz, C done 3 2027d 2027d 19/29 1986d 757fed1d0898 Revert "mm/slub: fix a memory leak in sysfs_slab_add()"
general protection fault in wext_handle_ioctl wireless 2 syz, C inconclusive 9 2029d 2118d 19/29 1986d 5122565188ba wext: fix NULL-ptr-dereference with cfg80211's lack of commit()
INFO: rcu detected stall in sys_exit_group (6) mm 1 syz, C 4 2146d 2152d 19/29 1986d c583bcb8f5ed rcu: Don't invoke try_invoke_on_locked_down_task() with irqs disabled
WARNING in cm109_input_ev/usb_submit_urb input usb -1 syz, C unreliable 8 2074d 2095d 19/29 1986d 82e060904732 Input: cm109 - do not stomp on control URB
UBSAN: shift-out-of-bounds in hash_mac_create netfilter -1 syz, C unreliable 29 2052d 2072d 19/29 1986d 5c8193f568ae netfilter: ipset: fix shift-out-of-bounds in htable_bits()
possible deadlock in process_measurement (2) integrity lsm 4 syz, C done done 56 2082d 2449d 15/29 2049d 15a8d68e9dc2 mm/hugetlb: a page from buddy is not on any list
INFO: rcu detected stall in sys_open (2) crypto 1 syz, C done done 42 2105d 2456d 15/29 2062d 1d0e850a49a5 afs: Fix cell removal
BUG: unable to handle kernel paging request in cfb_imageblit fbdev 8 syz, C done done 30 2097d 2140d 15/29 2062d a49145acfb97 fbmem: add margin check to fb_check_caps()
KASAN: use-after-free Read in eth_type_trans net 19 syz, C done error 3 2286d 2428d 15/29 2062d 96aa1b22bd6b tun: correct header offsets in napi frags mode
BUG: MAX_LOCKDEP_KEYS too low! net -1 syz, C done error 3496 2241d 2485d 15/29 2076d 1a33e10e4a95 net: partially revert dynamic lockdep key changes
BUG: MAX_LOCKDEP_CHAIN_HLOCKS too low! -1 syz, C done error 25236 2280d 2720d 15/29 2076d 1a33e10e4a95 net: partially revert dynamic lockdep key changes
INFO: rcu detected stall in __se_sys_mount afs 1 syz, C done done 2 2108d 2232d 15/29 2077d 1d0e850a49a5 afs: Fix cell removal
KASAN: null-ptr-deref Write in kthread_use_mm io-uring fs 12 syz, C done 2 2113d 2113d 15/29 2095d 4b70cf9dea4c io_uring: ensure consistent view of original task ->mm from SQPOLL
WARNING in close_fs_devices (2) btrfs -1 syz, C 23 2097d 2158d 15/29 2095d cf89af146b7e btrfs: dev-replace: fail mount if we don't have replace item with target device
memory leak in gadget_setup usb 3 syz, C 49 2106d 2123d 15/29 2095d 129aa9734559 usb: raw-gadget: fix memory leak in gadget_setup
memory leak in gadget_bind usb 3 syz, C 62 2106d 2123d 15/29 2095d 129aa9734559 usb: raw-gadget: fix memory leak in gadget_setup
general protection fault in io_uring_show_cred fs 2 syz, C done 4 2110d 2110d 15/29 2095d 6b47ab81c9a9 io_uring: use correct pointer for io_uring_show_cred()
KASAN: use-after-free Write in io_submit_sqes fs io-uring 22 syz, C error 2 2113d 2112d 15/29 2095d cb8a8ae31074 io_uring: drop req/tctx io_identity separately
INFO: rcu detected stall in process_one_work (3) kernel 1 syz, C done done 1 2139d 2181d 15/29 2099d 1d0e850a49a5 afs: Fix cell removal
INFO: task can't die in corrupted fs 1 syz, C done 4 2113d 2139d 15/29 2099d 86f33603f8c5 f2fs: handle errors of f2fs_get_meta_page_nofail
BUG: corrupted list in kobject_add_internal bluetooth 8 syz, C done done 9 2137d 2200d 15/29 2099d a46b7ed4d52d Bluetooth: Fix auto-creation of hci_conn at Conn Complete event
WARNING in dma_map_page_attrs iommu -1 syz, C unreliable 304 2108d 2125d 15/29 2099d 683a9c7ed817 RDMA: Fix software RDMA drivers for dma mapping error
WARNING in unlock_new_inode fs -1 syz, C done 76 2136d 3041d 15/29 2099d 8859bf2b1278 reiserfs: only call unlock_new_inode() if I_NEW
memory leak in ieee80211_check_fast_xmit wireless 3 syz, C 983 2109d 2152d 15/29 2099d dcd479e10a05 mac80211: always wind down STA state
WARNING: suspicious RCU usage in ovs_flow_tbl_masks_cache_resize openvswitch 4 syz, C error 1 2118d 2118d 15/29 2099d fea07a487c6d net: openvswitch: silence suspicious RCU usage warning
general protection fault in xsk_release bpf net 2 syz, C done 2 2151d 2151d 15/29 2099d 1fd17c8cd0aa xsk: Fix possible crash in socket_release when out-of-memory
memory leak in reiserfs_parse_options fs 3 syz, C 4 2163d 2359d 15/29 2099d e9d4709fcc26 reiserfs: Fix memory leak in reiserfs_parse_options()
WARNING in binder_transaction_buffer_release (2) kernel -1 syz, C done done 442 2232d 2272d 15/29 2099d e8b8ae7ce32e binder: Remove bogus warning on failed same-process transaction
BUG: using __this_cpu_read() in preemptible code in trace_hardirqs_on 4 syz, C done 502745 2101d 2133d 15/29 2099d f8e48a3dca06 lockdep: Fix preemption WARN for spurious IRQ-enable
INFO: task hung in wdm_flush usb 1 syz, C 38294 2176d 2561d 15/29 2099d 37d2a36394d9 USB: cdc-wdm: Make wdm_flush() interruptible and add wdm_fsync().
INFO: trying to register non-static key in uhid_char_release -1 syz, C done done 26 2176d 2353d 15/29 2099d bce1305c0ece HID: core: Correctly handle ReportSize being zero
WARNING in ieee80211_s1g_channel_width wireless -1 syz, C done 3 2141d 2141d 15/29 2099d c1cd35c60601 cfg80211: only allow S1G channels on S1G band
KMSAN: uninit-value in ieee80211_skb_resize wireless 7 syz, C 5 2128d 2152d 15/29 2099d 14f46c1e5108 mac80211: fix use of skb payload instead of header
KASAN: global-out-of-bounds Read in precalculate_color media 17 syz, C done done 170 2160d 2453d 15/29 2099d e3158a5e7e66 media: vivid: Fix global-out-of-bounds read in precalculate_color()
general protection fault in percpu_ref_exit fs 2 syz, C done 3 2134d 2138d 15/29 2099d 7ea6bf2e6c40 percpu_ref: don't refer to ref->data if it isn't allocated
KASAN: use-after-free Write in tcindex_change net 22 syz, C done done 4 2342d 2343d 15/29 2099d 0d1c3530e1bd net_sched: keep alloc_hash updated after hash allocation
WARNING: refcount bug in do_enable_set bluetooth 13 syz, C inconclusive done 8 2201d 2311d 15/29 2099d b83764f9220a Bluetooth: Fix kernel oops triggered by hci_adv_monitors_clear()
possible deadlock in cleanup_net net 4 syz, C done 281 2168d 2176d 15/29 2099d d966ddcc3821 tipc: fix a deadlock when flushing scheduled work
general protection fault in utf8_casefold f2fs 2 syz, C done 1 2138d 2138d 15/29 2099d f6322f3f1212 f2fs: reject CASEFOLD inode flag without casefold feature
KASAN: use-after-free Read in sctp_auth_free sctp 19 syz, C done 4 2137d 2139d 15/29 2099d d42ee76ecb6c net-backports: sctp: fix sctp_auth_init_hmacs() error path
kernel panic: Fatal exception (3) 2 syz, C done 2 2133d 2132d 15/29 2099d eadd1befdd77 netem: fix zero division in tabledist
KASAN: use-after-free Read in ath9k_hif_usb_rx_cb wireless 19 syz, C 2849 2099d 2334d 15/29 2099d 03fb92a432ea ath9k: hif_usb: fix race condition between usb_get_urb() and usb_kill_anchored_urbs()
memory leak in udf_process_sequence udf 3 syz, C 4 2151d 2155d 15/29 2099d a7be300de800 udf: Fix memory leak when mounting
general protection fault in unlink_file_vma mm 2 syz, C done 1 2172d 2168d 15/29 2099d bc4fe4cdd602 mm: mmap: Fix general protection fault in unlink_file_vma()
KASAN: use-after-free Read in fscache_alloc_cookie fs 19 syz done 1 2151d 2151d 15/29 2099d 1d0e850a49a5 afs: Fix cell removal
KASAN: unknown-crash Read in do_exit kernel 17 syz, C inconclusive done 2 2157d 2162d 15/29 2099d a49145acfb97 fbmem: add margin check to fb_check_caps()
WARNING in handle_exception_nmi kvm-x86 -1 syz, C error done 2653 2140d 2145d 15/29 2099d f8e48a3dca06 lockdep: Fix preemption WARN for spurious IRQ-enable
KMSAN: uninit-value in ip_tunnel_xmit (2) net 7 syz, C 11778 2103d 2928d 15/29 2099d fdafed459998 ip_gre: set dev->hard_header_len and dev->needed_headroom properly
WARNING: refcount bug in p9_req_put v9fs 13 syz inconclusive done 6 2278d 2831d 15/29 2099d a39c46067c84 net/9p: validate fds in p9_fd_open
INFO: rcu detected stall in ip_list_rcv net 1 syz, C error done 3 2147d 2173d 15/29 2099d 1d0e850a49a5 afs: Fix cell removal
UBSAN: array-index-out-of-bounds in precalculate_color media 15 syz, C 153 2134d 2159d 15/29 2099d e3158a5e7e66 media: vivid: Fix global-out-of-bounds read in precalculate_color()
KMSAN: uninit-value in can_receive (2) can 7 syz, C 2060 2103d 2198d 15/29 2099d e009f95b1543 can: j1935: j1939_tp_tx_dat_new(): fix missing initialization of skbcnt
WARNING in syscall_exit_to_user_mode kernel -1 syz, C done done 1 2137d 2165d 15/29 2099d a49145acfb97 fbmem: add margin check to fb_check_caps()
general protection fault in tcf_generic_walker net 2 syz 9 2146d 2148d 15/29 2099d 580e4273d7a8 net_sched: check error pointer in tcf_dump_walker()
WARNING in print_bfs_bug -1 syz, C done 14759 2131d 2483d 15/29 2099d 6d1823ccc480 lockdep: Optimize the memory usage of circular queue
KASAN: use-after-free Read in io_wqe_worker fs io-uring 19 syz, C error 2 2149d 2150d 15/29 2099d c4068bf898dd io-wq: fix use-after-free in io_wq_worker_running
INFO: task hung in io_uring_setup 1 syz, C done 51 2168d 2173d 15/29 2099d 7e84e1c7566a io_uring: allow disabling rings during the creation
KMSAN: uninit-value in unix_find_other net 7 syz, C 57 2144d 2960d 15/29 2099d 7ca1db21ef8e net: 9p: initialize sun_server.sun_path to have addr's value only when addr is valid
KASAN: use-after-free Read in delete_partition block 19 syz, C done done 3 2175d 2172d 15/29 2099d 08fc1ab6d748 block: fix locking in bdev_del_partition
WARNING in get_signal kernel -1 syz, C done 2 2142d 2144d 15/29 2099d 7b3c36fc4c23 ptrace: fix task_join_group_stop() for the case when current is traced
KASAN: use-after-free Write in refcount_warn_saturate bluetooth 22 syz, C inconclusive done 2 2203d 2361d 15/29 2099d b83764f9220a Bluetooth: Fix kernel oops triggered by hci_adv_monitors_clear()
INFO: task hung in addrconf_verify_work (3) 1 syz, C done 75 2112d 2147d 15/29 2099d 0fedc63fadf0 net_sched: commit action insertions together
kernel panic: stack is corrupted in get_kernel_gp_address kernel 2 syz done done 1 2132d 2165d 15/29 2099d a49145acfb97 fbmem: add margin check to fb_check_caps()
WARNING: ODEBUG bug in exit_to_user_mode_prepare -1 syz, C done done 27 2173d 2179d 15/29 2099d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KMSAN: uninit-value in batadv_hard_if_event (2) batman usb 7 syz, C 162 2115d 2198d 15/29 2099d f45a4248ea4c net: usb: rtl8150: set random MAC address when set_ethernet_addr() fails
INFO: task hung in ctrl_getfamily net 1 syz done done 22 2192d 2805d 15/29 2099d 47733f9daf4f tipc: fix uninit skb->data in tipc_nl_compat_dumpit()
KASAN: out-of-bounds Read in __switch_to (2) kernel 17 syz done done 1 2147d 2143d 15/29 2099d a49145acfb97 fbmem: add margin check to fb_check_caps()
WARNING: suspicious RCU usage in qrtr_ns_worker arm-msm net 4 syz, C done 1 2180d 2243d 15/29 2099d a7809ff90ce6 net: qrtr: ns: Protect radix_tree_deref_slot() using rcu read locks
inconsistent lock state in xa_destroy io-uring fs 4 syz, C 755 2137d 2138d 15/29 2099d ca6484cd308a io_uring: no need to call xa_destroy() on empty xarray
KASAN: use-after-free Write in afs_manage_cell afs 22 syz, C done done 20 2131d 2200d 15/29 2099d 1d0e850a49a5 afs: Fix cell removal
possible deadlock in _snd_pcm_stream_lock_irqsave 4 syz, C done 997 2130d 2167d 15/29 2099d 6564d0ad67ef ALSA: ctl: Workaround for lockdep warning wrt card->ctl_files_rwlock
INFO: task hung in io_uring_flush io-uring fs 1 syz, C done done 11 2190d 2197d 15/29 2099d b7ddce3cbf01 io_uring: fix cancel of deferred reqs with ->files
memory leak in kobject_set_name_vargs (3) nilfs 3 syz, C 19 2099d 2155d 15/29 2099d cb8d53d2c973 ext4: fix leaking sysfs kobject after failed mount
WARNING in percpu_ref_exit (2) -1 syz, C done done 272 2135d 2430d 15/29 2099d c1e2148f8ecb io_uring: free fixed_file_data after RCU grace period
KASAN: slab-out-of-bounds Write in gfs2_fill_super gfs2 21 syz, C done 1 2147d 2146d 15/29 2099d 0ddc5154b24c gfs2: add validation checks for size of superblock
WARNING in rxrpc_recvmsg afs net -1 syz, C error done 5 2234d 2235d 15/29 2099d 65550098c1c4 rxrpc: Fix race between recvmsg and sendmsg on immediate call failure
general protection fault in open_xa_dir fs 2 syz, C done 3 2134d 2146d 15/29 2099d c2bb80b8bdd0 reiserfs: Fix oops during mount
KASAN: use-after-free Read in tcf_action_init net 19 syz, C done 1 2151d 2148d 15/29 2099d 0fedc63fadf0 net_sched: commit action insertions together
INFO: task hung in ubi_detach_mtd_dev mtd 1 syz error error 4 2279d 2365d 15/29 2099d d005f8c6588e ubi: check kthread_should_stop() after the setting of task state
INFO: rcu detected stall in exit_group mm 1 syz, C done done 1 2136d 2166d 15/29 2099d 1d0e850a49a5 afs: Fix cell removal
KASAN: slab-out-of-bounds Read in ntfs_attr_find ntfs3 17 syz, C done 9 2132d 3058d 15/29 2099d 4f8c94022f0b ntfs: add check for mft record size in superblock
KASAN: slab-out-of-bounds Read in strset_parse_request net 17 syz, C error 141 2138d 2138d 15/29 2099d db972e532518 ethtool: strset: allow ETHTOOL_A_STRSET_COUNTS_ONLY attr
WARNING in arch_install_hw_breakpoint kernel -1 syz, C inconclusive done 8 2586d 2702d 15/29 2099d e898e69d6b94 x86/hw_breakpoints: Make default case in hw_breakpoint_arch_parse() return an error
KASAN: use-after-free Read in tipc_mcast_xmit (2) tipc 19 syz, C done 37 2130d 2144d 15/29 2099d ed42989eab57 tipc: fix the skb_unshare() in tipc_buf_append()
INFO: task hung in flush_to_ldisc serial 1 syz, C inconclusive done 15 2375d 2445d 15/29 2099d e8c75a30a23c vt: selection, push sel_lock up
KASAN: use-after-free Write in io_wq_worker_running io-uring fs 22 syz, C error 14 2142d 2169d 15/29 2099d c4068bf898dd io-wq: fix use-after-free in io_wq_worker_running
KASAN: slab-out-of-bounds Read in soft_cursor fbdev 17 syz, C done 218 2138d 2447d 15/29 2099d 988d0763361b vt_ioctl: make VT_RESIZEX behave like VT_RESIZE
BUG: unable to handle kernel paging request in tcf_action_dump_terse net 8 syz, C done 15 2142d 2148d 15/29 2099d 580e4273d7a8 net_sched: check error pointer in tcf_dump_walker()
INFO: rcu detected stall in sys_mount (5) afs 1 syz, C done done 10 2146d 2167d 15/29 2099d 1d0e850a49a5 afs: Fix cell removal
general protection fault in qp_release_pages kernel 2 syz, C done 2 2135d 2134d 15/29 2099d 90ca6333fd65 VMCI: check return value of get_user_pages_fast() for errors
INFO: task hung in lock_sock_nested (3) net 1 syz, C done 5 2143d 2144d 15/29 2099d d9fb8c507d42 mptcp: fix infinite loop on recvmsg()/worker() race.
KMSAN: uninit-value in __fget_light (2) fs 7 syz, C 18 2116d 2125d 15/29 2099d d5e4d0a5e692 inet_diag: validate INET_DIAG_REQ_PROTOCOL attribute
WARNING in ati_remote_sendpacket/usb_submit_urb usb media -1 syz, C 22 2270d 2581d 15/29 2099d a8be80053ea7 media: ati_remote: sanity check for both endpoints
KASAN: stack-out-of-bounds Read in csd_lock_record kernel 17 syz, C 226 2230d 2235d 15/29 2099d 35feb60474bf kernel/smp: Provide CSD lock timeout diagnostics
KASAN: use-after-free Read in afs_deactivate_cell (2) afs 19 syz, C done 11 2137d 2155d 15/29 2099d 1d0e850a49a5 afs: Fix cell removal
possible deadlock in mnt_want_write fs 4 syz, C done done 662 2138d 2946d 15/29 2099d 146d62e5a586 ovl: detect overlapping layers
general protection fault in ieee80211_key_free wireless 2 syz, C done 3 2134d 2139d 15/29 2099d 3dc289f8f139 net: wireless: nl80211: fix out-of-bounds access in nl80211_del_key()
KASAN: use-after-free Write in vcs_read serial 22 syz, C done 11 2181d 2186d 15/29 2099d 52c3c3a59234 Revert "vc_screen: extract vcs_read_buf_header"
WARNING in irqentry_exit kernel -1 syz, C error done 2080 2134d 2201d 15/29 2099d 4d004099a668 lockdep: Fix lockdep recursion
INFO: rcu detected stall in sys_newlstat afs 1 syz, C error done 1 2153d 2152d 15/29 2099d 1d0e850a49a5 afs: Fix cell removal
kernel BUG at net/rxrpc/conn_object.c:LINE! net afs -1 syz, C done 855 2101d 2166d 15/29 2099d 546a42410bf7 rxrpc: Fix conn bundle leak in net-namespace exit
possible deadlock in dev_uc_sync net 4 syz, C done 3 2134d 2232d 15/29 2099d 0e8b8d6a2d85 net: core: use list_del_init() instead of list_del() in netdev_run_todo()
WARNING in wp_page_copy mm -1 syz done done 9 2372d 2449d 15/29 2099d c3e5ea6ee574 mm: avoid data corruption on CoW fault into PFN-mapped VMA
general protection fault in vmk80xx_write_packet usb staging 2 syz, C 82 2139d 2595d 15/29 2099d e1f13c879a7c staging: comedi: check validity of wMaxPacketSize of usb endpoints found
general protection fault in rt6_fill_node net 2 syz, C done done 3 2184d 2181d 15/29 2099d eeaac3634ee0 net: nexthop: don't allow empty NHA_GROUP
KMSAN: uninit-value in do_ip_vs_set_ctl lvs 7 syz, C 365 2104d 2893d 15/29 2099d c5a8a8498eed ipvs: Fix uninit-value in do_ip_vs_set_ctl()
memory leak in __team_options_register net 3 syz, C 1 2169d 2169d 15/29 2099d 9a9e77495958 net: team: fix memory leak in __team_options_register
general protection fault in nexthop_is_blackhole net 2 syz, C done done 1 2184d 2181d 15/29 2099d eeaac3634ee0 net: nexthop: don't allow empty NHA_GROUP
KASAN: use-after-free Read in ucma_close (2) rdma 19 syz done 1 2166d 2166d 15/29 2099d f5449e74802c RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy
UBSAN: array-index-out-of-bounds in ieee80211_del_key wireless 15 syz, C done 685 2108d 2152d 15/29 2099d 3dc289f8f139 net: wireless: nl80211: fix out-of-bounds access in nl80211_del_key()
INFO: task hung in htable_put 1 syz, C done done 29 2371d 2425d 15/29 2099d 99b79c3900d4 netfilter: xt_hashlimit: unregister proc file before releasing mutex
KASAN: use-after-free Write in xp_put_pool bpf net 22 syz, C done 50 2152d 2174d 15/29 2099d 83cf5c68d663 xsk: Fix use-after-free in failed shared_umem bind
KASAN: use-after-free Read in __cfg8NUM_wpan_dev_from_attrs (2) wpan 19 syz, C error done 5 2233d 2233d 15/29 2099d bf64ff4c2aac genetlink: get rid of family->attrbuf
kernel panic: System is deadlocked on memory mm 2 syz, C done 43 2225d 2223d 15/29 2099d 9066e5cfb73c mm, oom: make the calculation of oom badness more accurate
general protection fault in strncasecmp afs 2 syz, C done 1 2154d 2152d 15/29 2099d 92e3cc91d8f5 afs: Fix rapid cell addition/removal by not using RCU on cells tree
KASAN: slab-out-of-bounds Read in f2fs_build_segment_manager f2fs 17 syz, C error 2 2151d 2151d 15/29 2099d 3a22e9ac7158 f2fs: fix to do sanity check on segment/section count
WARNING: refcount bug in l2cap_chan_put 13 syz, C inconclusive done 13 2201d 2365d 15/29 2099d b83764f9220a Bluetooth: Fix kernel oops triggered by hci_adv_monitors_clear()
WARNING: proc registration bug in afs_manage_cell afs -1 syz, C done 1 2152d 2148d 15/29 2099d 1d0e850a49a5 afs: Fix cell removal
INFO: trying to register non-static key in exfat_cache_inval_inode exfat -1 syz, C done 4 2142d 2148d 15/29 2099d 8ff006e57ad3 exfat: fix use of uninitialized spinlock on error path
WARNING in nla_get_range_unsigned net -1 syz, C done 63 2174d 2176d 15/29 2099d c30a3c957c88 netlink: policy: correct validation type check
KASAN: use-after-free Read in bit_putcs fbdev 19 syz, C 12 2146d 2366d 15/29 2099d 988d0763361b vt_ioctl: make VT_RESIZEX behave like VT_RESIZE
BUG: using smp_processor_id() in preemptible code in tipc_crypto_xmit tipc 4 syz, C done done 468 2171d 2242d 15/29 2099d bb8872a1e6bc tipc: fix using smp_processor_id() in preemptible
general protection fault in xsk_is_setup_for_bpf_map net bpf 2 syz, C error 294 2152d 2174d 15/29 2099d 968be23ceaca xsk: Fix possible segfault at xskmap entry insertion
memory leak in read_adv_mon_features bluetooth 3 syz, C 2 2168d 2192d 15/29 2099d cafd472a10ff Bluetooth: Fix memory leak in read_adv_mon_features()
INFO: trying to register non-static key in del_timer_sync (2) wireless usb -1 syz, C 1206 2631d 2683d 15/29 2099d 621a3a8b1c0e mwifiex: don't call del_timer_sync() on uninitialized timer
inconsistent lock state in icmp_send net 4 syz done done 1 2307d 2804d 15/29 2099d 1378817486d6 tipc: block BH before using dst_cache
BUG: unable to handle kernel paging request in pvclock_gtod_notify kvm-x86 8 syz, C done done 8 2145d 2164d 15/29 2099d a49145acfb97 fbmem: add margin check to fb_check_caps()
INFO: trying to register non-static key in uhid_dev_destroy input -1 syz, C unreliable done 40 2181d 2354d 15/29 2099d bce1305c0ece HID: core: Correctly handle ReportSize being zero
WARNING in bpf_raw_tp_link_fill_link_info bpf -1 syz, C error 56 2152d 2166d 15/29 2099d b474959d5afd bpf: Fix a buffer out-of-bound access when filling raw_tp link_info
KASAN: use-after-free Write in rxrpc_put_bundle afs net 22 syz, C done 229 2137d 2160d 15/29 2099d f3af4ad1e08a rxrpc: Fix bundle counting for exclusive connections
KASAN: use-after-free Read in tcf_action_destroy net 19 syz, C done 8 2141d 2156d 15/29 2099d 0fedc63fadf0 net_sched: commit action insertions together
memory leak in xdp_umem_create bpf net 3 syz, C 17 2103d 2123d 15/29 2099d e5e1a4bc916d xsk: Fix possible memory leak at socket close
general protection fault in xsk_diag_dump (2) bpf net 2 syz, C 354 2156d 2174d 15/29 2099d 53ea2076d851 xsk: Fix possible segfault in xsk umem diagnostics
INFO: rcu detected stall in security_file_open (3) afs 1 syz, C done done 2 2147d 2146d 15/29 2099d 1d0e850a49a5 afs: Fix cell removal
general protection fault in tcf_action_destroy (2) net 2 syz, C done done 29 2137d 2350d 15/29 2099d 0d1c3530e1bd net_sched: keep alloc_hash updated after hash allocation
KASAN: global-out-of-bounds Read in fbcon_get_font fbdev 17 syz, C inconclusive inconclusive 41 2144d 2441d 15/29 2099d 5af08640795b fbcon: Fix global-out-of-bounds read in fbcon_get_font()
WARNING: suspicious RCU usage in ctrl_cmd_new_lookup net arm-msm 4 syz, C done done 10 2154d 2243d 15/29 2099d a7809ff90ce6 net: qrtr: ns: Protect radix_tree_deref_slot() using rcu read locks
general protection fault in io_poll_double_wake (2) fs io-uring 2 syz, C error 2 2149d 2148d 15/29 2125d 8706e04ed7d6 io_uring: always delete double poll wait entry on match
kernel BUG at lib/string.c:LINE! (5) btrfs -1 syz, C done 558 2152d 2161d 15/29 2131d 35be8851d172 btrfs: fix overflow when copying corrupt csums for a message
general protection fault in madvise_cold_or_pageout_pte_range mm 2 syz, C done 3 2152d 2162d 15/29 2133d ce2684254bd4 mm: validate pmd after splitting
KASAN: global-out-of-bounds Read in fbcon_resize fbdev 17 syz, C error 673 2155d 2187d 15/29 2137d ec0972adecb3 fbcon: Fix user font detection test at fbcon_resize().
memory leak in do_seccomp kernel 3 syz, C 6 2169d 2196d 15/29 2137d a566a9012acd seccomp: don't leak memory when filter install races
KMSAN: uninit-value in __inet_diag_dump net 7 syz, C 37 2138d 2155d 15/29 2137d d5e4d0a5e692 inet_diag: validate INET_DIAG_REQ_PROTOCOL attribute
memory leak in do_eventfd fs 3 syz, C 2 2183d 2279d 15/29 2137d f65886606c2d KVM: fix memory leak in kvm_io_bus_unregister_dev()
INFO: rcu detected stall in cleanup_net (4) kernel 1 syz, C done 5 2171d 2167d 15/29 2137d b5b73b26b3ca taprio: Fix allowing too small intervals
INFO: task hung in tcf_ife_init net 1 syz, C done 4 2169d 2173d 15/29 2137d cc8e58f8325c act_ife: load meta modules before tcf_idr_check_alloc()
KASAN: slab-out-of-bounds Read in prism2sta_probe_usb usb staging 17 syz, C 8 2177d 2208d 15/29 2137d fea22e159d51 staging: wlan-ng: fix out of bounds read in prism2sta_probe_usb()
KMSAN: uninit-value in inet_diag_cmd_exact net 7 syz, C 31 2138d 2149d 15/29 2137d d5e4d0a5e692 inet_diag: validate INET_DIAG_REQ_PROTOCOL attribute
KASAN: global-out-of-bounds Read in vga16fb_imageblit 17 syz, C done 1071 2163d 2448d 15/29 2137d bd018a6a75ce video: fbdev: fix OOB read in vga_8planes_imageblit()
memory leak in tipc_group_create_member tipc 3 syz, C 32 2164d 2572d 15/29 2137d bb3a420d47ab tipc: Fix memory leak in tipc_group_create_member()
general protection fault in free_netdev net 2 syz, C error done 3605 2212d 2247d 15/29 2145d 46ef5b89ec0e ip6_gre: fix null-ptr-deref in ip6gre_init_net()
KASAN: use-after-free Read in do_madvise io-uring mm 19 syz error 4 2184d 2186d 15/29 2145d 7867fd7cc44e mm: madvise: fix vma user-after-free
KMSAN: kernel-infoleak in move_addr_to_user (3) net 9 syz, C 79 2160d 2194d 15/29 2148d 38ba8b9241f5 can: j1939: fix kernel-infoleak in j1939_sk_sock2sockaddr_can()
KASAN: slab-out-of-bounds Write in hiddev_ioctl_usage input usb 21 syz, C 279 2179d 2522d 15/29 2152d 25a097f52046 HID: hiddev: Fix slab-out-of-bounds write in hiddev_ioctl_usage()
WARNING: refcount bug in red_destroy net 13 syz, C done 1 2182d 2181d 15/29 2152d 5438dd45831e net_sched: fix error path in red_init()
WARNING in slab_pre_alloc_hook usb -1 syz, C 210 2176d 2197d 15/29 2152d f176ede3a3bd USB: yurex: Fix bad gfp argument
INFO: rcu detected stall in ext4_file_write_iter 1 syz, C inconclusive done 93 2196d 2728d 15/29 2152d 7e24969022cb block: allow for_each_bvec to support zero len bvec
WARNING: refcount bug in qdisc_put (2) net 13 syz, C done 7 2182d 2181d 15/29 2152d 5438dd45831e net_sched: fix error path in red_init()
BUG: corrupted list in mousedev_release input 8 syz done 5 2175d 2177d 15/29 2152d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
possible deadlock in __lock_task_sighand io-uring 4 syz, C done 12 2176d 2178d 15/29 2152d fd7d6de22414 io_uring: don't recurse on tsk->sighand->siglock with signalfd
WARNING in snd_pcm_plugin_build_mulaw sound -1 syz, C done 4 2178d 2175d 15/29 2152d 949a1ebe8cea ALSA: pcm: oss: Remove superfluous WARN_ON() for mulaw sanity check
general protection fault in snd_ctl_release sound 2 syz done 4 2174d 2174d 15/29 2152d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: global-out-of-bounds Read in bit_putcs fbdev 17 syz, C done 262 2152d 2446d 15/29 2152d 39b3cffb8cf3 fbcon: prevent user font height or width change from causing potential out-of-bounds access bc5269ca7650 vt_ioctl: change VT_RESIZEX ioctl to check for error return from vc_resize()
KASAN: use-after-free Read in fbcon_cursor fbdev 19 syz done error 10 2191d 2436d 15/29 2152d f8d1653daec0 vt: defer kfree() of vc_screenbuf in vc_do_resize()
KMSAN: uninit-value in video_usercopy media 7 syz, C 28 2217d 2216d 15/29 2152d 4ffb879ea648 media: media/v4l2-core: Fix kernel-infoleak in video_put_user()
WARNING in restore_regulatory_settings -1 syz, C done 10414 2170d 2414d 15/29 2152d 47caf685a685 cfg80211: regulatory: reject invalid hints
INFO: task hung in pipe_release (2) ext4 1 syz done 3 2174d 2205d 15/29 2152d 7e24969022cb block: allow for_each_bvec to support zero len bvec
KMSAN: kernel-infoleak in raw_ioctl usb 9 syz, C 22 2174d 2198d 15/29 2152d a092b7233f0e net: usb: Fix uninit-was-stored issue in asix_read_phy_addr()
KASAN: use-after-free Read in bdev_del_partition block 19 syz, C done 1 2176d 2176d 15/29 2152d 08fc1ab6d748 block: fix locking in bdev_del_partition
KASAN: vmalloc-out-of-bounds Write in bitfill_aligned fbdev 21 syz, C 475 2212d 2446d 15/29 2155d 033724d68642 fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins.
BUG: unable to handle kernel paging request in vmx_vcpu_run kvm-x86 8 syz, C error error 194 2935d 3049d 15/29 2156d 0447378a4a79 kvm: vmx: Nested VM-entry prereqs for event inj.
possible deadlock in __io_queue_deferred fs io-uring 4 syz, C error 1 2198d 2197d 15/29 2160d 7271ef3a93a8 io_uring: fix recursive completion locking on oveflow flush
kernel BUG at mm/hugetlb.c:LINE! -1 syz, C done error 10 2210d 2323d 15/29 2160d 15568299b7d9 hugetlbfs: prevent filesystem stacking of hugetlbfs
WARNING in r871xu_dev_remove usb staging -1 syz, C 47375 2199d 2551d 15/29 2160d b4383c971bc5 staging: rtl8712: handle firmware load failure
WARNING in ptrace_stop -1 syz, C done 1413 2211d 2215d 15/29 2160d d136122f5845 sched: Fix race against ptrace_freeze_trace()
general protection fault in do_con_write 2 syz, C done 10703 2212d 2447d 15/29 2160d ce684552a266 vt: Reject zero-sized screen buffer size.
general protection fault in __btf_resolve_helper_id bpf 2 syz, C 17 2224d 2233d 15/29 2160d 5b801dfb7feb bpf: Fix NULL pointer dereference in __btf_resolve_helper_id()
memory leak in erase_aeb (2) mtd 3 syz 25 2219d 2288d 15/29 2160d 3b185255bb2f ubi: fastmap: Don't produce the initial next anchor PEB when fastmap is disabled
KASAN: use-after-free Write in __linkwatch_run_queue net 22 syz, C error 24 2215d 2216d 15/29 2160d c75d1d5248c0 bonding: check return value of register_netdevice() in bond_newlink()
general protection fault in x86_fsgsbase_read_task kernel 2 syz, C done 2 2194d 2194d 15/29 2160d 8ab49526b53d x86/fsgsbase/64: Fix NULL deref in 86_fsgsbase_read_task
WARNING in __kernel_read fs -1 syz, C done 60 2167d 2225d 15/29 2160d a39c46067c84 net/9p: validate fds in p9_fd_open
WARNING in inc_nlink -1 syz, C done 26 2226d 2329d 15/29 2160d facb03dddec0 fs/minix: don't allow getting deleted inodes
KASAN: use-after-free Read in delete_and_unsubscribe_port (2) sound 19 syz done 4 2204d 2229d 15/29 2160d 80982c7e834e ALSA: seq: oss: Serialize ioctls
general protection fault in cdev_del usb fs 2 syz, C 315 2169d 2637d 15/29 2160d e911e99a0770 usb: hso: check for return value in hso_serial_common_create()
KASAN: use-after-free Read in sock_def_write_space (2) arm-msm net 19 syz, C error 29 2160d 2217d 15/29 2160d af9f691f0f5b qrtr: orphan socket in qrtr_release()
kernel BUG at mm/khugepaged.c:LINE! mm -1 syz, C done 30 2187d 2198d 15/29 2160d f3f99d63a815 khugepaged: adjust VM_BUG_ON_MM() in __khugepaged_enter()
possible deadlock in shmem_fallocate (4) mm 4 syz, C done 81 2210d 2425d 15/29 2160d 3e338d3c95c7 staging: android: ashmem: Fix lockdep warning for write operation
BUG: unable to handle kernel NULL pointer dereference in loop_rw_iter io-uring fs 10 syz, C done 24 2185d 2197d 15/29 2160d 2dd2111d0d38 io_uring: Fix NULL pointer dereference in loop_rw_iter()
kernel BUG at net/rxrpc/recvmsg.c:LINE! afs net -1 syz, C error 10 2206d 2235d 15/29 2160d 65550098c1c4 rxrpc: Fix race between recvmsg and sendmsg on immediate call failure
KASAN: use-after-free Read in io_async_task_func io-uring fs 19 syz error 1 2196d 2196d 15/29 2160d 6d816e088c35 io_uring: hold 'ctx' reference around task_work queue + execute
WARNING in idr_alloc arm-msm net -1 syz, C done 65 2169d 2243d 15/29 2160d 8dfddfb79653 net: qrtr: fix usage of idr in port assignment to socket
WARNING in drop_nlink fs -1 syz, C done error 1 2307d 2303d 15/29 2160d facb03dddec0 fs/minix: don't allow getting deleted inodes
KASAN: slab-out-of-bounds Read in vc_do_resize serial 17 syz, C done 55 2197d 2432d 15/29 2160d d88ca7e1a27e fbmem: pull fbcon_update_vcs() out of fb_set_var()
general protection fault in fib_dump_info (2) net 2 syz, C done 16 2184d 2186d 15/29 2160d eeaac3634ee0 net: nexthop: don't allow empty NHA_GROUP
KASAN: slab-out-of-bounds Read in vsscanf (2) lsm 17 syz, C error 5 2202d 2216d 15/29 2160d a6bd4f6d9b07 Smack: fix another vsscanf out of bounds
KMSAN: uninit-value in netlink_policy_dump_start net 7 syz, C 31 2165d 2168d 15/29 2160d d1fb55592909 netlink: fix state reallocation in policy export
KASAN: null-ptr-deref Write in media_request_close media 12 syz, C done 17 2202d 2251d 15/29 2160d e30cc79cc80f media: media-request: Fix crash if memory allocation fails
KASAN: use-after-free Read in devlink_health_reporter_destroy net 19 syz, C error 1188 2224d 2225d 15/29 2160d 5d037b4d3df7 devlink: Fix use-after-free when destroying health reporters
kernel BUG at net/core/dev.c:LINE! (3) net -1 syz, C done 979 2174d 2318d 15/29 2160d 832707021666 bonding: fix a potential double-unregister
KASAN: use-after-free Read in path_init (2) fs 19 syz, C done 29 2194d 2195d 15/29 2160d 24fb33d40d60 fix breakage in do_rmdir()
WARNING in __kernel_write fs -1 syz, C done 522 2209d 2229d 15/29 2160d a39c46067c84 net/9p: validate fds in p9_fd_open
KMSAN: uninit-value in get_block fs 7 syz, C 13 2276d 2279d 15/29 2160d 270ef41094e9 fs/minix: reject too-large maximum file size
WARNING: suspicious RCU usage in ovs_flow_tbl_masks_cache_size openvswitch 4 syz, C done 4093 2201d 2203d 15/29 2160d fea07a487c6d net: openvswitch: silence suspicious RCU usage warning
WARNING in submit_rx_urb/usb_submit_urb usb staging -1 syz, C 397 2211d 2636d 15/29 2160d faaff9765664 staging: wlan-ng: properly check endpoint types
KASAN: use-after-free Read in get_block 19 syz, C done 23 2226d 2303d 15/29 2160d 270ef41094e9 fs/minix: reject too-large maximum file size
WARNING in idtentry_exit_cond_rcu kernel -1 syz 6 2233d 2230d 15/29 2160d bce9b042ec73 x86/traps: Disable interrupts in exc_aligment_check()
memory leak in nf_tables_addchain netfilter 3 syz, C 1 2198d 2196d 15/29 2160d 59136aa3b264 netfilter: nf_tables: free chain context when BINDING flag is missing
KASAN: null-ptr-deref Write in get_block fs 12 syz, C done 101 2226d 2339d 15/29 2160d da27e0a0e5f6 fs/minix: check return value of sb_getblk()
WARNING: suspicious RCU usage in tipc_l2_send_msg tipc 4 syz done 60 2184d 2242d 15/29 2160d f6db90964162 tipc: call rcu_read_lock() in tipc_aead_encrypt_done()
WARNING in compat_do_ebt_get_ctl bridge netfilter -1 syz, C done 15 2190d 2201d 15/29 2160d 5c04da55c754 netfilter: ebtables: reject bogus getopt len value
memory leak in io_submit_sqes fs io-uring 3 syz, C 2 2177d 2196d 15/29 2160d a36da65c4656 io_uring: fail poll arm on queue proc failure
WARNING in __nf_unregister_net_hook (2) netfilter -1 syz, C done 9 2226d 2224d 15/29 2160d 1e9451cbda45 netfilter: nf_tables: fix nat hook table deletion
KASAN: use-after-free Read in j1939_tp_txtimer can 19 syz, C done error 5 2226d 2425d 15/29 2160d cd3b3636c99f can: j1939: transport: j1939_session_tx_dat(): fix use-after-free read in j1939_tp_txtimer()
KASAN: use-after-free Write in get_block fs 22 syz, C inconclusive inconclusive 12 2242d 2292d 15/29 2160d 270ef41094e9 fs/minix: reject too-large maximum file size
KASAN: use-after-free Read in l2cap_chan_close 19 syz, C done 37 2201d 2382d 15/29 2160d f9c70bdc279b Bluetooth: add a mutex lock to avoid UAF in do_enale_set
KASAN: use-after-free Read in ax88172a_unbind usb 19 syz, C done 2723 2211d 2452d 15/29 2160d c28d9a285668 ax88172a: fix ax88172a_unbind() failures
general protection fault in vsock_poll net virt 2 syz done 15 2204d 2217d 15/29 2160d 1980c0584483 vsock: fix potential null pointer dereference in vsock_poll()
BUG: corrupted list in p9_read_work (2) v9fs 8 syz done error 38 2462d 2823d 15/29 2160d 74d6a5d56629 9p/trans_fd: Fix concurrency del of req_list in p9_fd_cancelled/p9_read_work
general protection fault in io_poll_double_wake io-uring fs 2 syz, C done 8 2164d 2192d 15/29 2160d d4e7cd36a90e io_uring: sanitize double poll handling
KMSAN: uninit-value in geneve_xmit net 7 syz, C 163 2163d 2216d 15/29 2160d 32818c075c54 geneve: fix an uninitialized value in geneve_changelink()
general protection fault in syscall_return_slowpath kernel 2 syz inconclusive done 1 2266d 2352d 15/29 2160d 033724d68642 fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins.
KMSAN: uninit-value in ax25_connect hams 7 syz, C 15 2168d 2301d 15/29 2160d 2f2a7ffad5c6 AX.25: Fix out-of-bounds read in ax25_connect()
general protection fault in j1939_netdev_start can 2 syz, C done 8 2212d 2364d 15/29 2160d af804b782635 can: j1939: socket: j1939_sk_bind(): make sure ml_priv is allocated
KASAN: slab-out-of-bounds Read in hci_extended_inquiry_result_evt bluetooth 17 syz, C 16 2203d 2231d 15/29 2160d 51c19bf3d5cf Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt()
KASAN: out-of-bounds Read in pebs_update_state perf 17 syz inconclusive done 1 2237d 2284d 15/29 2160d 033724d68642 fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins.
WARNING in submit_audio_out_urb/usb_submit_urb sound usb -1 syz 2 2229d 2229d 15/29 2160d 6e8a914ad619 ALSA: line6: Perform sanity check for each URB creation
KASAN: use-after-free Read in __xfrm6_tunnel_spi_lookup net 19 syz, C error 12 2218d 2223d 15/29 2160d 8b404f46dd6a xfrm: interface: not xfrmi_ipv6/ipip_handler twice
general protection fault in khugepaged mm 2 syz, C done 3 2217d 2229d 15/29 2160d 594cced14ad3 khugepaged: fix null-pointer dereference due to race
KASAN: invalid-free in snd_seq_port_disconnect sound 24 syz done 9 2203d 2208d 15/29 2160d 80982c7e834e ALSA: seq: oss: Serialize ioctls
KASAN: slab-out-of-bounds Write in sctp_setsockopt sctp 21 syz, C error 590 2211d 2216d 15/29 2160d dfd3d5266dc1 sctp: fix slab-out-of-bounds in SCTP_DELAYED_SACK processing
possible deadlock in io_timeout_fn io-uring fs 4 syz, C done 4 2194d 2197d 15/29 2160d 51a4cc112c7a io_uring: defer file table grabbing request cleanup for locked requests
KMSAN: uninit-value in ucma_connect rdma 7 syz, C 138 2165d 2216d 15/29 2160d 31142a4ba617 RDMA/cm: Add min length checks to user structure copies
WARNING in snd_usbmidi_submit_urb/usb_submit_urb usb sound -1 syz, C done 42 2243d 2267d 15/29 2160d 9b7e5208a941 ALSA: usb-audio: Fix race against the error recovery URB submission
WARNING in snd_info_get_line sound -1 syz, C done 36 2216d 2221d 15/29 2160d 60379ba08532 ALSA: info: Drop WARN_ON() from buffer NULL sanity check
WARNING: suspicious RCU usage in ovs_flow_tbl_destroy openvswitch 4 syz, C done 658 2201d 2203d 15/29 2160d fea07a487c6d net: openvswitch: silence suspicious RCU usage warning
INFO: trying to register non-static key in red_destroy net -1 syz, C error 318 2211d 2233d 15/29 2160d 608b4adab178 net_sched: initialize timer earlier in red_init()
general protection fault in go7007_usb_probe usb media 2 syz, C 2103 2199d 2308d 15/29 2160d 137641287eb4 go7007: add sanity checking for endpoints
KASAN: slab-out-of-bounds Read in hci_inquiry_result_with_rssi_evt bluetooth 17 syz, C error 9 2205d 2225d 15/29 2160d 629b49c848ee Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_with_rssi_evt()
KMSAN: uninit-value in __tipc_nl_compat_dumpit (3) tipc 7 syz, C 6181 2160d 2225d 15/29 2160d 47733f9daf4f tipc: fix uninit skb->data in tipc_nl_compat_dumpit()
KASAN: wild-memory-access Read in ip_setsockopt net 17 syz, C 2 2194d 2194d 15/29 2160d 519a8a6cf91d net: Revert "net: optimize the sockptr_t for unified kernel/user address spaces"
KASAN: wild-memory-access Read in sctp_setsockopt sctp 17 syz, C 2 2194d 2194d 15/29 2160d 519a8a6cf91d net: Revert "net: optimize the sockptr_t for unified kernel/user address spaces"
KMSAN: uninit-value in xa_load rdma 7 syz, C 208 2161d 2216d 15/29 2160d 31142a4ba617 RDMA/cm: Add min length checks to user structure copies
WARNING in vkms_vblank_simulate -1 syz, C done 12903 2166d 2743d 15/29 2160d 51f644b40b4b drm/atomic-helper: reset vblank on crtc reset
WARNING in snd_usbmidi_input_start/usb_submit_urb usb sound -1 syz, C done 231 2220d 2263d 15/29 2160d 9b7e5208a941 ALSA: usb-audio: Fix race against the error recovery URB submission
KASAN: use-after-free Read in smk_write_relabel_self lsm 19 syz, C done 2 2264d 2260d 15/29 2160d beb4ee6770a8 Smack: fix use-after-free in smk_write_relabel_self()
possible deadlock in pipe_lock (3) overlayfs 4 syz, C inconclusive done 4 2388d 2425d 15/29 2189d 1a980b8cbf00 ovl: add splice file read write helper
possible deadlock in dev_mc_unsync net 4 syz, C error done 78 2226d 2242d 15/29 2189d be74294ffa24 net: get rid of lockdep_set_class_and_subclass()
possible deadlock in lock_trace (3) fs 4 syz inconclusive done 69 2327d 2462d 15/29 2189d 2db9dbf71bf9 proc: Use new infrastructure to fix deadlocks in execve
possible deadlock in do_io_accounting (3) fs 4 syz, C inconclusive done 39 2334d 2425d 15/29 2189d 76518d379885 proc: io_accounting: Use new infrastructure to fix deadlocks in execve
possible deadlock in proc_pid_personality fs 4 syz inconclusive done 3 2344d 2354d 15/29 2189d 2db9dbf71bf9 proc: Use new infrastructure to fix deadlocks in execve
WARNING: bad unlock balance in rcu_lock_release fs 4 syz, C inconclusive done 1433 2330d 2611d 15/29 2189d 10476e630422 locking/lockdep: Fix bad recursion pattern
WARNING in hsr_addr_subst_dest -1 syz, C done done 8639 2326d 2783d 15/29 2189d 4b793acdca00 hsr: use netdev_err() instead of WARN_ONCE()
WARNING: locking bug in try_to_grab_pending net 4 syz error done 1 2278d 2741d 15/29 2189d 1378817486d6 tipc: block BH before using dst_cache
KASAN: stack-out-of-bounds Read in update_stack_state kernel 17 syz, C unreliable done 388 2403d 3098d 15/29 2189d 4ee7c60de83a init, tracing: Add initcall trace events
WARNING: bad unlock balance in rcu_core fs 4 syz, C inconclusive done 3578 2326d 2681d 15/29 2189d 10476e630422 locking/lockdep: Fix bad recursion pattern
general protection fault in qrtr_endpoint_post net arm-msm 2 syz, C done done 54 2227d 2244d 15/29 2196d 8ff41cc21714 net: qrtr: Fix an out of bounds read qrtr_endpoint_post()
PANIC: double fault in fixup_bad_iret kernel 2 syz, C error 11753 2230d 2270d 15/29 2207d 5144f8a8dfd7 compiler_types.h: Add __no_sanitize_{address,undefined} to noinstr
general protection fault in __apic_accept_irq (2) kvm-x86 2 syz, C done 9 2243d 2239d 15/29 2207d 9d3c447c72fb KVM: X86: Fix async pf caused null-ptr-deref
WARNING in enqueue_task_dl kernel -1 syz, C done 13 2251d 2828d 15/29 2207d 740797ce3a12 sched/core: Fix PI boosting between RT and DEADLINE tasks
PANIC: double fault in check_preemption_disabled kernel 2 syz, C 2181 2238d 2243d 15/29 2207d c7aadc09321d x86/entry: Increase entry_stack size to a full page
memory leak in nbd_add_socket nbd 3 syz, C 1 2329d 2329d 15/29 2207d 579dd91ab3a5 nbd: Fix memory leak in nbd_add_socket
WARNING in xfrm_policy_insert net -1 syz, C inconclusive done 6 2252d 3105d 15/29 2210d ed17b8d377ea xfrm: fix a warning in xfrm_policy_insert_list
BUG: unable to handle kernel paging request in netif_receive_generic_xdp 8 syz, C done done 160 2265d 2401d 15/29 2211d 96aa1b22bd6b tun: correct header offsets in napi frags mode
WARNING in iomap_apply iomap -1 syz, C done 25 2278d 2318d 15/29 2218d 175efa81feb8 ext4: fix EXT4_MAX_LOGICAL_BLOCK macro ext4: fix EXT4_MAX_LOGICAL_BLOCK macro
KASAN: use-after-free Read in sock_def_write_space arm-msm net 19 syz, C done 67 2219d 2584d 15/29 2218d a9b111016235 llc: make sure applications use ARPHRD_ETHER
KASAN: slab-out-of-bounds Read in qrtr_endpoint_post arm-msm net 17 syz, C 8 2241d 2241d 15/29 2218d 8ff41cc21714 net: qrtr: Fix an out of bounds read qrtr_endpoint_post()
memory leak in qdisc_create_dflt net 3 syz, C 1 2237d 2233d 15/29 2218d 306381aec7c2 net_sched: fix a memory leak in atm_tc_init()
WARNING in hsr_dev_finalize net -1 syz, C error 1546 2226d 2242d 15/29 2218d ccfc9df1352b hsr: fix interface leak in error path of hsr_dev_finalize()
kernel BUG at net/l2tp/l2tp_core.c:LINE! net -1 syz, C 10 2243d 2239d 15/29 2218d c9a368f1c0fb bpf: net: Avoid incorrect bpf_sk_reuseport_detach call
KASAN: vmalloc-out-of-bounds Read in tipc_nl_publ_dump tipc 17 syz, C 22 2224d 2242d 15/29 2218d bf64ff4c2aac genetlink: get rid of family->attrbuf
KASAN: use-after-free Read in netdev_name_node_lookup_rcu wireguard 19 syz, C error 17 2228d 2239d 15/29 2218d bf64ff4c2aac genetlink: get rid of family->attrbuf
KASAN: use-after-free Read in nl8NUM_dump_wpan_phy (2) wpan 19 syz, C 18 2228d 2242d 15/29 2218d bf64ff4c2aac genetlink: get rid of family->attrbuf
KASAN: use-after-free Read in tipc_nl_publ_dump (2) tipc 19 syz, C 14 2228d 2239d 15/29 2218d bf64ff4c2aac genetlink: get rid of family->attrbuf
KASAN: use-after-free Read in tipc_nl_node_dump_monitor_peer (2) tipc 19 syz, C 54 2226d 2241d 15/29 2218d bf64ff4c2aac genetlink: get rid of family->attrbuf
KASAN: use-after-free Read in tipc_udp_nl_dump_remoteip (2) tipc 19 syz, C 9 2227d 2246d 15/29 2218d bf64ff4c2aac genetlink: get rid of family->attrbuf
KASAN: use-after-free Read in devlink_get_from_attrs net 19 syz, C 25 2226d 2239d 15/29 2218d bf64ff4c2aac genetlink: get rid of family->attrbuf
KASAN: vmalloc-out-of-bounds Read in nl8NUM_dump_wpan_phy wpan 17 syz, C 145 2224d 2245d 15/29 2218d bf64ff4c2aac genetlink: get rid of family->attrbuf
KASAN: use-after-free Read in tipc_nl_node_dump_link tipc 19 syz, C error 10 2232d 2242d 15/29 2218d bf64ff4c2aac genetlink: get rid of family->attrbuf
KASAN: use-after-free Read in dev_get_by_name wireguard 19 syz, C 4 2233d 2239d 15/29 2218d bf64ff4c2aac genetlink: get rid of family->attrbuf
KASAN: vmalloc-out-of-bounds Read in tipc_nl_node_dump_monitor_peer tipc 17 syz, C error 9 2227d 2245d 15/29 2218d bf64ff4c2aac genetlink: get rid of family->attrbuf
general protection fault in unpin_user_pages mm 2 syz, C done 13 2279d 2279d 15/29 2221d f78cdbd75a57 rds: fix crash in rds_info_getsockopt()
KASAN: use-after-free Write in fsnotify_detach_connector_from_object fs 22 syz, C done 4 2252d 2256d 15/29 2221d ef1548adada5 proc: Use new_inode not new_inode_pseudo
KASAN: use-after-free Read in ip_icmp_error net 19 syz, C done 14 2272d 2273d 15/29 2221d 239174945dac tcp: tcp_v4_err() icmp skb is named icmp_skb
KASAN: use-after-free Write in ath9k_htc_rx_msg wireless 22 syz, C 93 2257d 2334d 15/29 2221d e4ff08a4d727 ath9k: Fix use-after-free Write in ath9k_htc_rx_msg
BUG: using smp_processor_id() in preemptible [ADDR] code: syz-executor 4 syz, C done 22297 2266d 2605d 15/29 2221d 1378817486d6 tipc: block BH before using dst_cache
KASAN: slab-out-of-bounds Read in vsscanf lsm 17 syz, C done 61 2231d 2334d 15/29 2221d 84e99e58e8d1 Smack: slab-out-of-bounds in vsscanf
KASAN: slab-out-of-bounds Read in ip_icmp_error net 17 syz, C done 13 2272d 2273d 15/29 2221d 239174945dac tcp: tcp_v4_err() icmp skb is named icmp_skb
WARNING: proc registration bug in snmp6_register_dev net -1 syz, C done 14 2248d 2314d 15/29 2221d de0083c7ed7d hsr: avoid to create proc file after unregister
KASAN: null-ptr-deref Write in choke_reset 12 syz, C done 1441 2277d 2310d 15/29 2221d 8738c85c72b3 sch_choke: avoid potential panic in choke_reset()
KASAN: slab-out-of-bounds Write in snd_usb_mixer_notify_id usb sound 21 syz, C done 39 2240d 2245d 15/29 2221d 220345e98f1c ALSA: usb-audio: Fix OOB access of mixer element list
KASAN: slab-out-of-bounds Write in snd_usb_mixer_interrupt sound usb 21 syz, C done 5 2243d 2245d 15/29 2221d 220345e98f1c ALSA: usb-audio: Fix OOB access of mixer element list
KASAN: use-after-free Read in vkms_dumb_create dri 19 syz done 2 2306d 2302d 15/29 2221d 0ea2ea42b31a drm/vkms: Hold gem object while still in-use
KASAN: use-after-free Read in inet_diag_bc_sk net 19 syz, C done 30 2296d 2298d 15/29 2221d ee1bd483cc06 inet_diag: bc: read cgroup id only for full sockets
memory leak in ctnetlink_del_conntrack netfilter 3 syz, C 1 2261d 2259d 15/29 2221d 6c2d2176a85e netfilter: ctnetlink: memleak in filter initialization error path
BUG: MAX_LOCKDEP_CHAINS too low! kernel -1 syz, C done 17240 2221d 2879d 15/29 2221d e7511f560f54 bonding: remove useless stats_lock_key 1a33e10e4a95 net: partially revert dynamic lockdep key changes
INFO: task hung in locks_remove_posix fs input usb 1 syz 2231 2256d 2279d 15/29 2221d 187b96db5ca7 x86/unwind/orc: Fix unwind_get_return_address_ptr() for inactive tasks
WARNING: refcount bug in crypto_mod_get crypto 13 syz, C done 2 2287d 2298d 15/29 2221d 6603523bf5e4 crypto: api - Fix use-after-free and race in crypto_spawn_alg
KASAN: stack-out-of-bounds Write in ath9k_hif_usb_rx_cb wireless 21 syz, C 57 2257d 2330d 15/29 2221d 19d6c375d671 ath9x: Fix stack-out-of-bounds Write in ath9k_hif_usb_rx_cb
KASAN: slab-out-of-bounds Read in ovl_check_fb_len overlayfs 17 syz done 3 2278d 2277d 15/29 2221d 522f6e6cba68 ovl: fix out of bounds access warning in ovl_check_fb_len()
KASAN: use-after-free Read in htc_connect_service wireless 19 syz, C 41041 2256d 2334d 15/29 2221d ced21a4c726b ath9k: Fix use-after-free Read in htc_connect_service
general protection fault in ima_free_template_entry lsm integrity 2 syz, C done 3 2244d 2264d 15/29 2221d 42413b49804b ima: Directly free *entry in ima_alloc_init_template() if digests is NULL
WARNING in kvm_inject_emulated_page_fault kvm-x86 -1 syz, C done 20 2245d 2264d 15/29 2221d 7a35e515a705 KVM: VMX: Properly handle kvm_read/write_guest_virt*() result
general protection fault in fq_codel_enqueue net 2 syz, C done 25 2226d 2310d 15/29 2221d 9274124f023b net: stricter validation of untrusted gso packets
memory leak in crypto_create_tfm crypto 3 syz, C 14 2249d 2265d 15/29 2221d 819966c06b75 crypto: drbg - always try to free Jitter RNG instance
WARNING in memtype_reserve -1 syz, C done 600 2282d 2290d 15/29 2221d a0e710a7def4 USB: usbfs: fix mmap dma mismatch
general protection fault in put_cmsg net 2 syz, C done 3 2286d 2287d 15/29 2221d 1b2f08df0a88 ipv6: set msg_control_is_user in do_ipv6_getsockopt
WARNING in usbhid_raw_request/usb_submit_urb (3) usb -1 syz 18 2300d 2406d 15/29 2221d ac854131d984 USB: core: Fix misleading driver bug report
memory leak in nf_tables_parse_netdev_hooks (3) netfilter 3 syz, C 1 2261d 2259d 15/29 2221d 3003055f5066 netfilter: nf_tables: hook list memleak in flowtable deletion
INFO: trying to register non-static key in io_cqring_ev_posted (3) fs -1 syz, C done 3 2280d 2282d 15/29 2221d 583863ed9181 io_uring: initialize ctx->sqo_wait earlier
BUG: unable to handle kernel paging request in do_xdp_generic 8 syz, C done done 7444 2295d 2401d 15/29 2221d 96aa1b22bd6b tun: correct header offsets in napi frags mode
KASAN: slab-out-of-bounds Read in inet_diag_bc_sk net 17 syz, C done 45 2296d 2298d 15/29 2221d ee1bd483cc06 inet_diag: bc: read cgroup id only for full sockets
INFO: task syz-executor can't die for more than 143 seconds. (2) -1 syz, C done 2512 2222d 2489d 15/29 2221d 566d136289dc pipe: Fix pipe_full() test in opipe_prep().
general protection fault in erspan_validate net 2 syz, C done 520 2287d 2294d 15/29 2221d 51fa960d3b51 erspan: Check IFLA_GRE_ERSPAN_VER is set.
kernel BUG at arch/x86/mm/physaddr.c:LINE! (5) serial -1 syz, C done 241 2225d 2298d 15/29 2221d 57d38f26d81e vt: fix unicode console freeing with a common interface
WARNING: refcount bug in crypto_destroy_tfm crypto 13 syz, C done 4 2300d 2323d 15/29 2221d 6603523bf5e4 crypto: api - Fix use-after-free and race in crypto_spawn_alg
general protection fault in inet_unhash net 2 syz, C done 40 2242d 2271d 15/29 2221d 02c71b144c81 l2tp: do not use inet_hash()/inet_unhash()
KASAN: use-after-free Read in rpc_net_ns net nfs 19 syz done 10 2286d 2292d 15/29 2221d 31e9a7f35352 SUNRPC: fix use-after-free in rpc_free_client_work()
WARNING in tipc_msg_append tipc -1 syz, C done 107 2248d 2262d 15/29 2221d c9aa81faf191 tipc: fix kernel WARNING in tipc_msg_append()
KASAN: slab-out-of-bounds Read in garmin_read_process usb 17 syz, C 1 2339d 2339d 15/29 2221d e9b3c610a05c USB: serial: garmin_gps: add sanity checking for data length
KASAN: use-after-free Read in usbhid_close (3) input usb 19 syz, C 6 2295d 2322d 15/29 2221d 0ed08faded1d HID: usbhid: Fix race between usbhid_close() and usbhid_stop()
kernel BUG at arch/x86/kvm/mmu/mmu.c:LINE! (2) kvm-x86 -1 syz, C done 46328 2241d 2273d 15/29 2221d 7d2e8748af62 KVM: x86: Initialize tdp_level during vCPU creation
memory leak in genl_rcv_msg net 3 syz, C 116 2257d 2446d 15/29 2221d c36f05559104 genetlink: fix memory leaks in genl_family_rcv_msg_dumpit()
KMSAN: uninit-value in __dev_get_by_name hams 7 syz, C 2 2283d 2283d 15/29 2221d 687775cec056 ax25: fix setsockopt(SO_BINDTODEVICE)
general protection fault in start_creating fs 2 syz, C done 106 2243d 2272d 15/29 2221d d56f5136b010 KVM: let kvm_destroy_vm_debugfs clean up vCPU debugfs directories
KASAN: slab-out-of-bounds Read in fl6_update_dst net 17 syz, C done 43 2242d 2288d 15/29 2221d bb986a50421a seg6: fix seg6_validate_srh() to avoid slab-out-of-bounds
general protection fault in __tipc_sendstream tipc 2 syz, C done 444 2241d 2272d 15/29 2221d 4c21daae3dbc tipc: Fix NULL pointer dereference in __tipc_sendstream() 5e9eeccc58f3 tipc: fix NULL pointer dereference in streaming
KASAN: use-after-free Read in ath9k_wmi_ctrl_rx wireless 19 syz, C 1 2334d 2333d 15/29 2221d abeaa85054ff ath9k: Fix use-after-free Read in ath9k_wmi_ctrl_rx
KASAN: slab-out-of-bounds Read in skb_gso_transport_seglen net 17 syz, C done 4 2291d 2310d 15/29 2221d 9274124f023b net: stricter validation of untrusted gso packets
BUG: unable to handle kernel NULL pointer dereference in generic_perform_write (2) ext4 10 syz, C done 3 2317d 2315d 15/29 2221d 829b37b8cddb ext4: avoid race conditions when remounting with options that change dax
WARNING: locking bug in dev_mc_seq_show net 4 syz, C done 3 2262d 2273d 15/29 2221d 845e0ebb4408 net: change addr_list_lock back to static key
general protection fault in selinux_socket_recvmsg selinux 2 syz, C done 4 2276d 2276d 15/29 2221d 0a82e230c688 mptcp: avoid NULL-ptr derefence on fallback
KMSAN: uninit-value in skbprio_enqueue net 7 syz 11 2235d 2299d 15/29 2221d 2761121af87d net_sched: sch_skbprio: add message validation to skbprio_change()
general protection fault in ath9k_hif_usb_rx_cb wireless 2 syz, C 913 2221d 2334d 15/29 2221d 2bbcaaee1fcb ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb
INFO: rcu detected stall in wg_packet_tx_worker net 1 syz, C done 24 2250d 2303d 15/29 2221d df4953e4e997 sch_sfq: validate silly quantum values
KASAN: slab-out-of-bounds Read in br_mrp_parse bridge 17 syz, C done 5 2278d 2279d 15/29 2221d 617504c67e01 bridge: mrp: Fix out-of-bounds read in br_mrp_parse
INFO: task hung in blkdev_issue_flush (2) block 1 syz, C done error 3 2443d 2602d 15/29 2238d 2b5c8f0063e4 nbd: replace kill_bdev() with __invalidate_device() again
KASAN: use-after-free Read in blkdev_direct_IO fs 19 syz, C done error 8 2566d 2571d 15/29 2238d 0eb6ddfb865c block: Fix __blkdev_direct_IO() for bio fragments
KASAN: use-after-free Read in blkdev_bio_end_io fs 19 syz, C done error 13 2556d 2568d 15/29 2238d 7b6620d7db56 block: remove REQ_NOWAIT_INLINE
memory leak in bio_clone_fast block 3 syz, C 1 2560d 2560d 15/29 2238d 7b6620d7db56 block: remove REQ_NOWAIT_INLINE
WARNING: refcount bug in blk_mq_free_request (2) block 13 syz, C done error 5 2568d 2568d 15/29 2238d de6346ecbc8f nbd: protect cmd->status with cmd->lock
memory leak in bio_copy_user_iov 3 syz, C done 34 2431d 2616d 15/29 2238d 3b7995a98ad7 block: fix memleak when __blk_rq_map_user_iov() is failed
WARNING in sk_stream_kill_queues (4) net -1 syz, C done done 6 2360d 2364d 15/29 2238d b6f6118901d1 ipv6: restrict IPV6_ADDRFORM operation
WARNING in __mmdrop mm -1 syz done 14 2576d 2585d 15/29 2240d 3d2c7d370475 Revert "vhost: access vq metadata through kernel virtual address"
WARNING in wa_nep_create/usb_submit_urb usb staging -1 syz, C 114 2310d 2594d 15/29 2240d caa6772db4c1 Staging: remove wusbcore and UWB from the kernel tree.
WARNING in kfree (2) net -1 syz done done 1 2351d 2350d 15/29 2240d 0d1c3530e1bd net_sched: keep alloc_hash updated after hash allocation
WARNING in hwarc_neep_init/usb_submit_urb staging usb -1 syz, C 1 2344d 2344d 15/29 2240d caa6772db4c1 Staging: remove wusbcore and UWB from the kernel tree.
BUG: corrupted list in __uwb_rc_neh_rm staging usb 8 syz, C 9 2316d 2351d 15/29 2240d caa6772db4c1 Staging: remove wusbcore and UWB from the kernel tree.
KASAN: null-ptr-deref Write in blk_mq_map_swqueue block 12 syz, C done 3 2334d 2334d 15/29 2243d d0930bb8f46b blk-mq: Fix a recently introduced regression in blk_mq_realloc_hw_ctxs()
KASAN: use-after-free Read in chaoskey_disconnect crypto usb 19 syz, C 44 2454d 2482d 15/29 2250d 93ddb1f56ae1 USB: chaoskey: fix use-after-free on release
KMSAN: uninit-value in audit_log_vformat (2) audit 7 syz, C 104 2290d 2309d 15/29 2250d 763dafc520ad audit: check the length of userspace generated audit records
WARNING in __vm_enough_memory (2) mm -1 syz done 6 2311d 2314d 15/29 2250d dadbd85f2afc mm: Fix MREMAP_DONTUNMAP accounting on VMA merge
WARNING in hwsim_new_radio_nl wireless -1 syz, C done 3 2316d 2319d 15/29 2250d 7ea862048317 mac80211_hwsim: Use kstrndup() in place of kasprintf()
KASAN: invalid-free in nf_tables_newset netfilter 24 syz, C done 21 2313d 2328d 15/29 2250d 7fb6f78df700 netfilter: nf_tables: do not leave dangling pointer in nf_tables_set_alloc_name
WARNING: bad unlock balance in mptcp_poll mptcp 4 syz, C done 10 2315d 2318d 15/29 2250d e154659ba39a mptcp: fix double-unlock in mptcp_poll
KASAN: use-after-free Read in dput (2) fs 19 syz done 4 2314d 2314d 15/29 2250d 4fa3b1c41737 proc: Handle umounts cleanly
possible deadlock in shmem_mfill_atomic_pte mm 4 syz, C done 82 2278d 2329d 15/29 2250d 94b7cc01da5a mm: shmem: disable interrupt when acquiring info->lock in userfaultfd_copy path
KASAN: slab-out-of-bounds Read in __kvm_gfn_to_hva_cache_init kvm 17 syz, C done 1537 2277d 2322d 15/29 2250d b6467ab142b7 KVM: Check validity of resolved slot when searching memslots
WARNING in set_precision (2) wireless -1 syz, C done 117 2312d 2410d 15/29 2250d 7ea862048317 mac80211_hwsim: Use kstrndup() in place of kasprintf()
INFO: rcu detected stall in io_uring_release fs 1 syz 15 2270d 2311d 15/29 2250d 3fd44c86711f io_uring: use cond_resched() in io_ring_ctx_wait_and_kill()
possible deadlock in shmem_uncharge mm 4 syz, C done 101 2279d 2317d 15/29 2250d ea0dfeb4209b shmem: fix possible deadlocks on shmlock_user_lock
possible deadlock in ext4_evict_inode ext4 4 syz error error 38 2862d 2901d 15/29 2277d e5bfad3d7acc smack: use GFP_NOFS while holding inode_smack::smk_lock
KASAN: use-after-free Write in tcindex_set_parms net 22 syz, C done 13 2330d 2350d 15/29 2289d 0d1c3530e1bd net_sched: keep alloc_hash updated after hash allocation
possible deadlock in io_submit_one (3) fs 4 syz done 45 2319d 2326d 15/29 2289d 63f818f46af9 proc: Use a dedicated lock in struct pid
INFO: task hung in io_queue_file_removal fs 1 syz, C done 16 2332d 2339d 15/29 2289d 4afdb733b160 io-uring: drop completion when removing file
KASAN: slab-out-of-bounds Write in tcindex_set_parms 21 syz, C done 10 2331d 2352d 15/29 2289d 0d1c3530e1bd net_sched: keep alloc_hash updated after hash allocation
KASAN: use-after-free Read in tcindex_dump net 19 syz 1 2352d 2350d 15/29 2289d b1be2e8cd290 net_sched: hold rtnl lock in tcindex_partial_destroy_work()
KMSAN: uninit-value in simple_attr_read fs 7 syz, C 6 2292d 2362d 15/29 2289d a65cab7d7f05 libfs: fix infoleak in simple_attr_read()
general protection fault in macsec_upd_offload net 2 syz, C done 5 2328d 2327d 15/29 2289d aa81700cf232 macsec: fix NULL dereference in macsec_upd_offload()
memory leak in erase_aeb mtd 3 syz, C 109 2290d 2443d 15/29 2289d c16f39d14a7e ubi: fastmap: Free unused fastmap anchor peb during detach
BUG: unable to handle kernel NULL pointer dereference in handle_external_interrupt_irqoff kvm-x86 10 syz, C done 6404 2333d 2338d 15/29 2289d 428b8f1d9f92 KVM: VMX: don't allow memory operands for inline asm that modifies SP
possible deadlock in send_sigurg fs 4 syz, C done 65 2313d 2326d 15/29 2289d 63f818f46af9 proc: Use a dedicated lock in struct pid
WARNING: bad unlock balance in ucma_event_handler 4 syz, C done 143 2322d 2986d 15/29 2289d 7c11910783a1 RDMA/ucma: Put a lock around every call to the rdma_cm layer
WARNING in geneve_exit_batch_net (2) net -1 syz, C done 9 2337d 2360d 15/29 2289d 0fda7600c2e1 geneve: move debug check after netdev unregister
KASAN: invalid-free in tcf_exts_destroy net 24 syz, C done 1 2352d 2352d 15/29 2289d 0d1c3530e1bd net_sched: keep alloc_hash updated after hash allocation
KASAN: use-after-free Read in __hrtimer_run_queues kernel 19 syz, C done 299 2322d 2329d 15/29 2289d 73d20564e0dc hrtimer: Don't dereference the hrtimer pointer after the callback
WARNING: bad unlock balance in ucma_destroy_id 4 syz done 44 2356d 2910d 15/29 2289d 7c11910783a1 RDMA/ucma: Put a lock around every call to the rdma_cm layer
WARNING: bad unlock balance in __get_user_pages_remote mm 4 syz, C done 15 2322d 2322d 15/29 2289d c7b6a566b985 mm/gup: Mark lock taken only after a successful retake
INFO: trying to register non-static key in __io_uring_register fs -1 syz, C done 39 2321d 2322d 15/29 2289d f7fe9346869a io_uring: initialize fixed_file_data lock
KASAN: slab-out-of-bounds Read in selinux_xfrm_alloc_user selinux 17 syz, C done 1 2331d 2330d 15/29 2289d a1a7e3a36e01 xfrm: add the missing verify_sec_ctx_len check in xfrm_add_acquire
KASAN: stack-out-of-bounds Write in mpol_to_str mm 21 syz, C done 23 2331d 2335d 15/29 2289d aa9f7d5172fa mm: mempolicy: require at least one nodeid for MPOL_PREFERRED
general protection fault in do_tcp_getsockopt (2) net 2 syz, C done 1 2342d 2342d 15/29 2289d 6cd6cbf593bf net-backports: tcp: repair: fix TCP_QUEUE_SEQ implementation
KASAN: use-after-free Read in addr_handler rdma 19 syz done 12 2321d 2803d 15/29 2289d 7c11910783a1 RDMA/ucma: Put a lock around every call to the rdma_cm layer
INFO: trying to register non-static key in io_cqring_ev_posted (2) fs -1 syz, C done 42 2292d 2329d 15/29 2289d 10bea96dcc13 io_uring: add missing finish_wait() in io_sq_thread()
KASAN: use-after-free Read in cma_cancel_operation rdma 19 syz, C done 617 2377d 3057d 15/29 2289d 7c11910783a1 RDMA/ucma: Put a lock around every call to the rdma_cm layer
BUG: unable to handle kernel paging request in kernel_get_mempolicy mm 8 syz, C done 1 2326d 2323d 15/29 2289d ba841078cd05 mm/mempolicy: Allow lookup_node() to handle fatal signal
KASAN: slab-out-of-bounds Read in cgroup_file_notify cgroups 17 syz, C done 1 2354d 2350d 15/29 2289d 726b7bbeafd4 hugetlb_cgroup: fix illegal access to memory
WARNING: refcount bug in __tcf_action_put net 13 syz 1 2351d 2350d 15/29 2289d 0d1c3530e1bd net_sched: keep alloc_hash updated after hash allocation
KASAN: use-after-free Read in rdma_listen (2) rdma 19 syz, C done 354 2327d 2696d 15/29 2289d 7c11910783a1 RDMA/ucma: Put a lock around every call to the rdma_cm layer
WARNING: kobject bug in ib_register_device kernel -1 syz, C done 14 2327d 2365d 15/29 2289d 7aefa6237cfe RDMA/nl: Do not permit empty devices names during RDMA_NLDEV_CMD_NEWLINK/SET
general protection fault in ethnl_parse_header net 2 syz, C done 9 2336d 2341d 15/29 2289d 55b474c41e58 netlink: check for null extack in cookie helpers
WARNING in vcpu_enter_guest kvm-x86 -1 syz done 19 2339d 2452d 15/29 2289d d33294541889 KVM: x86: remove bogus user-triggerable WARN_ON
possible deadlock in send_sigio fs 4 syz, C done 7 2317d 2325d 15/29 2289d 63f818f46af9 proc: Use a dedicated lock in struct pid
WARNING: ODEBUG bug in __init_work net -1 syz done 1 2338d 2337d 15/29 2289d ef299cc3fa1a net_sched: cls_route: remove the right filter from hashtable
WARNING in call_rcu net -1 syz, C done 8 2343d 2350d 15/29 2289d ef299cc3fa1a net_sched: cls_route: remove the right filter from hashtable
WARNING: ODEBUG bug in tcf_queue_work net -1 syz, C done 30 2355d 2355d 15/29 2289d ef299cc3fa1a net_sched: cls_route: remove the right filter from hashtable
WARNING in __blk_mq_delay_run_hw_queue block -1 syz, C done error 6 2402d 2507d 15/29 2289d 6e66b4939241 blk-mq: Keep set->nr_hw_queues and set->map[].nr_queues in sync
general protection fault in qdisc_hash_add net 2 syz, C done 47 2348d 2348d 15/29 2289d 7c4046b1c53b Revert "net: sched: make newly activated qdiscs visible"
WARNING: refcount bug in tcindex_data_put net 13 syz, C done 27 2326d 2327d 15/29 2289d a8eab6d35e22 net_sched: fix a missing refcnt in tcindex_init()
KASAN: use-after-free Read in route4_get net 19 syz, C 8 2318d 2347d 15/29 2289d ef299cc3fa1a net_sched: cls_route: remove the right filter from hashtable
KASAN: use-after-free Read in __list_del_entry_valid (4) rdma 19 syz, C done 16 2378d 3066d 15/29 2289d 7c11910783a1 RDMA/ucma: Put a lock around every call to the rdma_cm layer
general protection fault in erspan_netlink_parms net 2 syz, C done 5 2344d 2345d 15/29 2289d 32ca98feab8c net: ip_gre: Accept IFLA_INFO_DATA-less configuration
WARNING in kernfs_create_dir_ns kernfs -1 syz, C done done 3 2344d 2605d 15/29 2289d 810507fe6fd5 locking/lockdep: Reuse freed chain_hlocks entries
WARNING in af_alg_make_sg crypto -1 syz, C done 13 2321d 2321d 15/29 2289d ae46d2aa6a7f mm/gup: Let __get_user_pages_locked() return -EINTR for fatal signal
general protection fault in rdma_listen (2) rdma 2 syz done 104 2328d 2839d 15/29 2289d 7c11910783a1 RDMA/ucma: Put a lock around every call to the rdma_cm layer
WARNING in kernfs_new_node kernfs -1 syz, C done done 2 2344d 2568d 15/29 2289d 810507fe6fd5 locking/lockdep: Reuse freed chain_hlocks entries
possible deadlock in cma_netdev_callback rdma 4 syz, C done 1399 2322d 2363d 15/29 2289d 33fb27fd5446 RDMA/siw: Fix passive connection establishment
WARNING: refcount bug in sctp_wfree sctp 13 syz, C done 20 2330d 2351d 15/29 2289d 5c3e82fe1596 sctp: fix refcount bug in sctp_wfree
BUG: corrupted list in rdma_listen rdma 8 syz, C 202 2462d 3041d 15/29 2289d 7c11910783a1 RDMA/ucma: Put a lock around every call to the rdma_cm layer
possible deadlock in free_ioctx_users (2) 4 syz, C done 44 2319d 2326d 15/29 2289d 63f818f46af9 proc: Use a dedicated lock in struct pid
WARNING: ODEBUG bug in route4_change -1 syz, C done 68 2326d 2350d 15/29 2289d ef299cc3fa1a net_sched: cls_route: remove the right filter from hashtable
KASAN: use-after-free Read in tty_open serial 19 syz, C done done 8 2336d 2448d 15/29 2289d ca4463bf8438 vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console
KASAN: slab-out-of-bounds Read in edge_interrupt_callback usb 17 syz, C 1 2338d 2337d 15/29 2289d 57aa9f294b09 USB: serial: io_edgeport: fix slab-out-of-bounds read in edge_interrupt_callback
KMSAN: uninit-value in tcf_exts_change net 7 syz, C 5 2340d 2350d 15/29 2289d 0d1c3530e1bd net_sched: keep alloc_hash updated after hash allocation
BUG: sleeping function called from invalid context in kmem_cache_alloc_node_trace net 5 syz, C done 364 2351d 2353d 15/29 2289d 138470a9b2cc net/sched: act_ct: fix lockdep splat in tcf_ct_flow_table_get
KASAN: use-after-free Write in release_tty 22 syz, C done 591 2326d 2448d 15/29 2289d ca4463bf8438 vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console
WARNING: ODEBUG bug in tcindex_destroy_work (3) net -1 syz done 13 2328d 2364d 15/29 2289d 304e024216a8 net_sched: add a temporary refcnt for struct tcindex_data
KASAN: slab-out-of-bounds Read in hfa384x_usbin_callback staging usb 17 syz, C 1 2340d 2340d 15/29 2289d 1165dd73e811 staging: wlan-ng: fix use-after-free Read in hfa384x_usbin_callback
WARNING: refcount bug in igmp_start_timer net 13 syz done done 19 2554d 2920d 15/29 2312d 323ebb61e32b net: use listified RX for handling GRO_NORMAL skbs
possible deadlock in sch_direct_xmit net 4 syz, C done done 1548 2455d 3134d 15/29 2312d 323ebb61e32b net: use listified RX for handling GRO_NORMAL skbs
KMSAN: uninit-value in __iptunnel_pull_header net 7 syz, C 12 2345d 2354d 15/29 2314d 17c25cafd4d3 gre: fix uninit-value in __iptunnel_pull_header
INFO: task hung in hashlimit_mt_check_common 1 syz, C done 20 2370d 2410d 15/29 2314d 8d0015a7ab76 netfilter: xt_hashlimit: limit the max size of hashtable c4a3922d2d20 netfilter: xt_hashlimit: reduce hashlimit_mutex scope for htable_put()
divide error in wg_packet_encrypt_worker wireguard 2 syz, C done 12 2368d 2375d 15/29 2314d 175f1ca9a9ed wireguard: send: account for mtu=0 devices
WARNING in idr_destroy dri -1 syz, C done 5 2342d 2357d 15/29 2314d b216a8e7908c drm/lease: fix WARNING in idr_destroy
BUG: soft lockup in sys_exit_group usb 1 syz, C 6 2339d 2362d 15/29 2314d d683469b3c93 ALSA: line6: Fix endless MIDI read loop
KMSAN: uninit-value in audit_receive audit 7 syz, C 4 2365d 2365d 15/29 2314d 756125289285 audit: always check the netlink payload length in audit_receive_msg()
WARNING: lock held when returning to user space in ovl_write_iter overlayfs 4 syz, C done 6 2344d 2359d 15/29 2314d c853680453ac ovl: fix lockdep warning for async write
INFO: task hung in hashlimit_net_exit netfilter 1 syz done 53 2368d 2376d 15/29 2314d 8d0015a7ab76 netfilter: xt_hashlimit: limit the max size of hashtable
kernel BUG at arch/x86/mm/physaddr.c:LINE! (4) audit -1 syz, C 18 2333d 2368d 15/29 2314d 2ad3e17ebf94 audit: fix error handling in audit_data_to_entry()
KMSAN: uninit-value in slhc_compress net 7 syz, C 3 2357d 2356d 15/29 2314d 110a40dfb708 slip: make slhc_compress() more robust against malicious packets
WARNING: proc registration bug in hashlimit_mt_check_common netfilter -1 syz, C done 320 2354d 2379d 15/29 2314d 99b79c3900d4 netfilter: xt_hashlimit: unregister proc file before releasing mutex
memory leak in dma_buf_ioctl 3 syz, C done 129 2364d 2580d 15/29 2314d d1f37226431f dma-buf: free dmabuf->name in dma_buf_release()
INFO: trying to register non-static key in xa_destroy rdma -1 syz, C done 46 2337d 2365d 15/29 2314d 12e5eef0f4d8 RDMA/siw: Fix failure handling during device creation
BUG: unable to handle kernel NULL pointer dereference in inet_release net 10 syz 3 2363d 2364d 15/29 2314d b6f6118901d1 ipv6: restrict IPV6_ADDRFORM operation
INFO: rcu detected stall in ip_set_uadd netfilter 1 syz, C done 11 2359d 2396d 15/29 2314d f66ee0410b1c netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports
INFO: task hung in paste_selection serial 1 syz, C inconclusive done 8 2380d 2445d 15/29 2314d e8c75a30a23c vt: selection, push sel_lock up
BUG: unable to handle kernel paging request in ethnl_update_bitset32 net 8 syz, C 168 2354d 2365d 15/29 2314d e34f1753eebc ethtool: limit bitset size
KMSAN: use-after-free in find_match net 18 syz, C 52 2344d 2373d 15/29 2314d e08ad80551b4 net-backports: net: add strict checks in netdev_name_node_alt_destroy()
KASAN: use-after-free Read in vgem_gem_dumb_create dri 19 syz, C done 15 2377d 2389d 15/29 2314d 4b848f20eda5 drm/vgem: Close use-after-free race in vgem_gem_create
memory leak in nf_tables_parse_netdev_hooks (2) netfilter 3 syz, C 2 2353d 2358d 15/29 2314d 2d285f26ecd0 netfilter: nf_tables: free flowtable hooks on hook register error
KMSAN: uninit-value in bond_alb_xmit net 7 syz 3 2355d 2356d 15/29 2314d b7469e83d2ad bonding/alb: make sure arp header is pulled before accessing it
divide error in encrypt_packet wireguard 2 syz, C done 89 2367d 2376d 15/29 2314d 175f1ca9a9ed wireguard: send: account for mtu=0 devices
general protection fault in smc_ib_remove_dev smc 2 syz, C done 98 2354d 2365d 15/29 2314d a2f2ef4a54c0 net/smc: check for valid ib_client_data
possible deadlock in htab_lru_map_delete_node bpf 4 syz, C done 264 2367d 2372d 15/29 2314d b9aff38de2cb bpf: Fix a potential deadlock with bpf_map_do_batch
KMSAN: use-after-free in ip6_dst_destroy net 18 syz, C 2 2347d 2359d 15/29 2314d 44bfa9c5e5f0 net: rtnetlink: fix bugs in rtnl_alt_ifname()
memory leak in fasync_helper fs 3 syz, C 14 2383d 2443d 15/29 2314d 67f562e3e147 net/smc: transfer fasync_list in case of fallback
possible deadlock in inet_csk_accept net 4 syz, C done 992 2348d 2350d 15/29 2314d 06669ea346e4 net: memcg: fix lockdep splat in inet_csk_accept()
KASAN: slab-out-of-bounds Read in ethnl_update_bitset32 net 17 syz 2 2360d 2365d 15/29 2314d e34f1753eebc ethtool: limit bitset size
KMSAN: uninit-value in audit_log_vformat audit 7 syz, C 220 2314d 2365d 15/29 2314d 756125289285 audit: always check the netlink payload length in audit_receive_msg()
INFO: rcu detected stall in hash_ip4_gc kernel 1 syz, C done 1 2395d 2394d 15/29 2314d f66ee0410b1c netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports
KMSAN: kernel-infoleak in tty_compat_ioctl serial 9 syz, C 162 2336d 2365d 15/29 2314d 17329563a97d tty: fix compat TIOCGSERIAL leaking uninitialized memory
BUG: sleeping function called from invalid context in __kmalloc ceph fs 5 syz, C done 5 2375d 2382d 15/29 2314d b27a939e8376 ceph: canonicalize server path in place
INFO: rcu detected stall in ip_set_udel netfilter 1 syz, C done 12 2373d 2396d 15/29 2314d f66ee0410b1c netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports
general protection fault in ip_set_comment_free netfilter 2 syz, C done 19 2357d 2394d 15/29 2314d 8af1c6fbd923 netfilter: ipset: Fix forceadd evaluation path
possible deadlock in bond_get_stats (3) net 4 syz done 2 2368d 2368d 15/29 2314d b3e80d44f5b1 bonding: fix lockdep warning in bond_get_stats()
KMSAN: uninit-value in kstrdup net 7 syz, C 8 2350d 2377d 15/29 2314d 44bfa9c5e5f0 net: rtnetlink: fix bugs in rtnl_alt_ifname()
possible deadlock in sidtab_sid2str_put selinux 4 syz, C done 1382 2376d 2392d 15/29 2314d 39a706fbcf26 selinux: fix sidtab string cache locking
KASAN: use-after-free Read in n_tty_receive_buf_common 19 syz, C done 68 2369d 2445d 15/29 2314d 07e6124a1a46 vt: selection, close sel_buffer race
KASAN: use-after-free Read in ethnl_update_bitset32 net 19 syz, C done 6 2358d 2365d 15/29 2314d e34f1753eebc ethtool: limit bitset size
general protection fault in nf_flow_table_offload_setup 2 syz, C done done 835 2368d 2401d 15/29 2314d a7da92c2c8a1 netfilter: flowtable: skip offload setup if disabled
memory leak in nfs_fs_context_parse_monolithic nfs 3 syz, C 18 2348d 2375d 15/29 2314d 75a9b9176157 NFS: Fix leak of ctx->nfs_server.hostname
KASAN: use-after-free Read in find_match 19 syz, C done 142 2367d 2374d 15/29 2314d 44bfa9c5e5f0 net: rtnetlink: fix bugs in rtnl_alt_ifname()
KMSAN: uninit-value in fat_evict_inode exfat 7 syz, C 256 2344d 2368d 15/29 2314d bc87302a093f fat: fix uninit-memory access for partial initialized inode
KASAN: use-after-free Read in ip6_dst_destroy net 19 syz, C done 1 2374d 2374d 15/29 2314d 44bfa9c5e5f0 net: rtnetlink: fix bugs in rtnl_alt_ifname()
WARNING: bad unlock balance in ovl_llseek overlayfs 4 syz, C done 4 2346d 2359d 15/29 2314d 531d3040bc5c ovl: fix lock in ovl_llseek()
KASAN: use-after-free Read in l3mdev_master_ifindex_rcu net 19 syz, C done done 13 2370d 2376d 15/29 2314d e08ad80551b4 net: add strict checks in netdev_name_node_alt_destroy()
KASAN: slab-out-of-bounds Read in resample_shrink sound 17 syz, C done 5 2336d 2354d 15/29 2314d f2ecf903ef06 ALSA: pcm: oss: Avoid plugin buffer overflow
general protection fault in nldev_stat_set_doit rdma 2 syz, C done 8 2348d 2365d 15/29 2314d 78f34a16c286 RDMA/nldev: Fix crash when set a QP to a new counter but QPN is missing
kernel panic: stack is corrupted in vhost_net_ioctl kvm net virt 2 syz, C done 2 2374d 2461d 15/29 2314d 42d84c8490f9 vhost: Check docket sk_family instead of call getname
BUG: unable to handle kernel NULL pointer dereference in cipso_v4_sock_setattr lsm net 10 syz, C done 8 2354d 2364d 15/29 2314d dc24f8b4ecd3 mptcp: add dummy icsk_sync_mss()
INFO: task hung in lock_sock_nested (2) net virt kvm 1 syz, C done 418 2354d 2367d 15/29 2314d 3f74957fcbea vsock: fix potential deadlock in transport->release()
KMSAN: use-after-free in l3mdev_master_ifindex_rcu net 18 syz, C 5 2344d 2368d 15/29 2314d e08ad80551b4 net: add strict checks in netdev_name_node_alt_destroy()
unregister_netdevice: waiting for DEV to become free (3) 2 syz, C 1864 2314d 2375d 15/29 2314d e34f1753eebc ethtool: limit bitset size
KASAN: use-after-free Read in mld_in_v1_mode net 19 syz, C done 3 2373d 2375d 15/29 2314d e08ad80551b4 net-backports: net: add strict checks in netdev_name_node_alt_destroy()
possible deadlock in bpf_lru_push_free bpf 4 syz, C done 609 2367d 2373d 15/29 2314d b9aff38de2cb bpf: Fix a potential deadlock with bpf_map_do_batch
WARNING in switch_fpu_return kernel -1 syz done done 11 2385d 2419d 15/29 2335d 2620fe268e80 KVM: x86: Revert "KVM: X86: Fix fpu state crash in kvm guest"
KMSAN: use-after-free in rdma_listen rdma 18 syz, C 26 2355d 2501d 15/29 2335d 5fc01fb846bc RDMA/cma: Rollback source IP address if failing to acquire device
KMSAN: uninit-value in rdma_listen rdma 7 syz, C 28 2512d 2877d 15/29 2335d 5fc01fb846bc RDMA/cma: Rollback source IP address if failing to acquire device
KASAN: slab-out-of-bounds Read in bitmap_ip_add netfilter 17 syz done done 7 2390d 2402d 15/29 2335d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: slab-out-of-bounds Read in bitmap_ip_ext_cleanup netfilter 17 syz, C done done 8 2385d 2401d 15/29 2343d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: slab-out-of-bounds Read in bitmap_port_ext_cleanup netfilter 17 syz, C done done 10 2393d 2401d 15/29 2343d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
BUG: corrupted list in __nf_tables_abort 8 syz, C done done 29 2395d 2402d 15/29 2343d eb014de4fd41 netfilter: nf_tables: autoload modules from the abort path
KASAN: slab-out-of-bounds Read in bitmap_ipmac_destroy netfilter 17 syz, C done done 2 2396d 2396d 15/29 2343d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: slab-out-of-bounds Read in bitmap_ipmac_gc 17 syz, C done done 70 2384d 2400d 15/29 2343d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: slab-out-of-bounds Read in bitmap_ipmac_ext_cleanup netfilter 17 syz, C unreliable done 15 2385d 2400d 15/29 2343d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: slab-out-of-bounds Read in bitmap_port_destroy netfilter 17 syz, C done done 2 2397d 2397d 15/29 2343d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
general protection fault in gcmaes_crypt_by_sg (2) crypto 2 syz, C error done 28 2400d 2447d 15/29 2349d db885e66d268 net/tls: fix async operation
possible deadlock in wg_noise_handshake_create_initiation wireguard 4 syz, C done 11 2382d 2386d 15/29 2349d ec31c2676a10 wireguard: noise: reject peers with low order public keys
KASAN: use-after-free Read in slcan_open can 19 syz, C done 2 2450d 2449d 15/29 2349d 9ebd796e2400 can: slcan: Fix use-after-free Read in slcan_open
BUG: unable to handle kernel paging request in slhc_free net 8 syz, C done done 177 2670d 2787d 15/29 2349d baf76f0c58ae slip: make slhc_free() silently accept an error pointer
WARNING in _chaoskey_fill/usb_submit_urb usb -1 syz, C 15 2466d 2519d 15/29 2349d 92aa5986f4f7 USB: chaoskey: fix error case of a timeout
KASAN: slab-out-of-bounds Read in iov_iter_alignment iomap 17 syz, C error error 79 2449d 2446d 15/29 2349d e0ff126ee7ad pipe: Fix bogus dereference in iov_iter_alignment()
possible deadlock in wg_set_device 4 syz, C done 33 2381d 2386d 15/29 2349d ec31c2676a10 wireguard: noise: reject peers with low order public keys
WARNING: ODEBUG bug in io_sqe_files_unregister fs -1 syz, C done 964 2383d 2430d 15/29 2349d 2faf852d1be8 io_uring: cleanup fixed file data table references
WARNING in flexcop_usb_probe/usb_submit_urb usb media -1 syz, C 4 2515d 2552d 15/29 2349d 1b976fc6d684 media: b2c2-flexcop-usb: add sanity checking
BUG: unable to handle kernel paging request in ion_heap_clear_pages staging 8 syz, C 4378 2432d 2451d 15/29 2354d d98c9e83b5e7 kasan: fix crashes on access to memory mapped by vm_map_ram()
KASAN: use-after-free Read in bitmap_ip_ext_cleanup netfilter 19 syz, C done done 2 2401d 2401d 15/29 2367d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: use-after-free Read in bitmap_ipmac_ext_cleanup netfilter 19 syz, C done done 2 2400d 2401d 15/29 2367d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: slab-out-of-bounds Write in bitmap_ip_del netfilter 21 syz, C done done 7 2398d 2400d 15/29 2367d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: use-after-free Read in bitmap_ip_destroy netfilter 19 syz, C done done 1 2401d 2401d 15/29 2370d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KMSAN: uninit-value in setup_udp_tunnel_sock net 7 syz, C 1 2399d 2399d 15/29 2371d 940ba1498665 net-backports: gtp: make sure only SOCK_DGRAM UDP sockets are accepted
WARNING in nft_request_module netfilter -1 syz, C done 7 2404d 2405d 15/29 2371d 9332d27d7918 netfilter: nf_tables: remove WARN and add NLA_STRING upper limits
memory leak in reiserfs_fill_super fs 3 syz, C 20 2390d 2440d 15/29 2371d 5474ca7da6f3 reiserfs: Fix memory leak of journal device string
memory leak in kobject_set_name_vargs (2) 3 syz, C done 47 2396d 2581d 15/29 2371d cb626bf566eb net-sysfs: Fix reference count leak
KASAN: slab-out-of-bounds Read in bitmap_port_gc 17 syz, C done 197 2385d 2402d 15/29 2371d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KMSAN: uninit-value in can_receive can 7 syz, C 14 2374d 2463d 15/29 2371d e7153bf70c34 can: can_dropped_invalid_skb(): ensure an initialized headroom in outgoing CAN sk_buffs
memory leak in _sctp_make_chunk sctp 3 syz, C 1 2435d 2435d 15/29 2371d be7a77292077 sctp: free cmd->obj.chunk for the unprocessed SCTP_CMD_REPLY
KASAN: slab-out-of-bounds Read in bitmap_ip_list netfilter 17 syz, C 85 2386d 2402d 15/29 2371d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: use-after-free Read in bitmap_port_ext_cleanup netfilter 19 syz, C done 11 2401d 2410d 15/29 2371d c120959387ef netfilter: fix a use-after-free in mtype_destroy()
KMSAN: uninit-value in sd_init (2) media usb 7 syz, C 94 2477d 2473d 15/29 2371d de89d0864f66 media: gspca: zero usb_buf
KMSAN: uninit-value in __request_module (3) kernel 7 syz, C 58 2372d 2400d 15/29 2371d 36d79af7fb59 net-backports: net_sched: use validated TCA_KIND attribute in tc_new_tfilter()
KMSAN: uninit-value in rsvp_change net 7 syz, C 4 2391d 2392d 15/29 2371d cb3c0e6bdf64 cls_rsvp: fix rsvp_policy
KASAN: use-after-free Read in __nf_tables_abort netfilter 19 syz, C done 3 2398d 2400d 15/29 2371d eb014de4fd41 netfilter: nf_tables: autoload modules from the abort path
WARNING: suspicious RCU usage in find_set_and_id netfilter 4 syz done 6 2396d 2399d 15/29 2371d 5038517119d5 netfilter: ipset: fix suspicious RCU usage in find_set_and_id
BUG: corrupted list in nft_obj_del netfilter 8 syz, C done 7 2402d 2405d 15/29 2371d 335178d5429c netfilter: nf_tables: fix flowtable list del corruption
BUG: corrupted list in nf_tables_commit netfilter 8 syz, C done 8 2404d 2405d 15/29 2371d 335178d5429c netfilter: nf_tables: fix flowtable list del corruption
kernel panic: stack is corrupted in __lock_acquire (4) kernel 2 syz error error 75 2467d 2624d 15/29 2371d 4da6a196f93b bpf: Sockmap/tls, during free we may call tcp_bpf_unhash() in loop
INFO: rcu detected stall in addrconf_rs_timer (3) net 1 syz, C inconclusive done 81 2432d 2428d 15/29 2371d d9e15a273306 pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM
KASAN: slab-out-of-bounds Read in bitmap_ipmac_list 17 syz, C done 108 2387d 2402d 15/29 2371d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
BUG: corrupted list in __dentry_kill (2) fs 8 syz, C done 4945 2439d 2439d 15/29 2371d a3d1e7eb5abe simple_recursive_removal(): kernel-side rm -rf for ramfs-style filesystems
KASAN: slab-out-of-bounds Write in setup_udp_tunnel_sock (2) net 21 syz, C done 8 2397d 2399d 15/29 2371d 940ba1498665 net-backports: gtp: make sure only SOCK_DGRAM UDP sockets are accepted
BUG: sleeping function called from invalid context in lock_sock_nested net bpf 5 syz, C 1232 2371d 2446d 15/29 2371d 37f96694cf73 crypto: af_alg - Use bh_lock_sock in sk_destruct
general protection fault in dccp_timeout_nlattr_to_obj netfilter 2 syz, C done 7 2411d 2414d 15/29 2371d 1d9a7acd3d1e netfilter: conntrack: dccp, sctp: handle null timeout argument
memory leak in vlan_dev_set_egress_priority net 3 syz, C 1 2414d 2414d 15/29 2371d 9bbd917e0bec vlan: fix memory leak in vlan_dev_set_egress_priority
KMSAN: uninit-value in macvlan_broadcast net 7 syz, C 2 2414d 2414d 15/29 2371d 96cc4b69581d macvlan: do not assume mac_header is set in macvlan_broadcast()
general protection fault in xt_rateest_tg_checkentry netfilter 2 syz, C done 12 2414d 2425d 15/29 2371d 1b789577f655 netfilter: arp_tables: init netns pointer in xt_tgchk_param struct
WARNING in tcp_ack net -1 syz, C done 3 2412d 2412d 15/29 2371d 90d72256addf gtp: fix bad unlock balance in gtp_encap_enable_socket
memory leak in em_nbyte_change net 3 syz, C 1 2396d 2396d 15/29 2371d 55cd9f67f1e4 net_sched: ematch: reject invalid TCF_EM_SIMPLE
KMSAN: uninit-value in digitv_rc_query media usb 7 syz, C 4 2490d 2473d 15/29 2371d eecc70d22ae5 media: digitv: don't continue if remote control state can't be read 569bc8d6a6a5 media: dvb-usb/dvb-usb-urb.c: initialize actlen to 0
general protection fault in xt_rateest_put netfilter 2 syz, C done 97 2402d 2409d 15/29 2371d 212e7f56605e netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct
BUG: sleeping function called from invalid context in tpk_write kernel 5 syz, C done 12 2403d 2444d 15/29 2371d 9a655c77ff8f ttyprintk: fix a potential deadlock in interrupt context issue
memory leak in snd_pcm_hw_params sound 3 syz, C 25 2383d 2391d 15/29 2371d 66f2d19f8116 ALSA: pcm: Fix memory leak at closing a stream without hw_free
KASAN: slab-out-of-bounds Read in macvlan_broadcast net 17 syz, C done 10 2411d 2414d 15/29 2371d 96cc4b69581d macvlan: do not assume mac_header is set in macvlan_broadcast()
KMSAN: uninit-value in number media usb 7 syz, C 190 2375d 2473d 15/29 2371d 51d0c99b391f media: af9005: uninitialized variable printked
KMSAN: uninit-value in __tipc_nl_compat_dumpit tipc 7 syz, C 4428 2371d 2440d 15/29 2371d a7869e5f9174 tipc: eliminate KMSAN: uninit-value in __tipc_nl_compat_dumpit error
KASAN: slab-out-of-bounds Read in nla_put_nohdr net 17 syz, C done 1 2399d 2398d 15/29 2371d 61678d28d4a4 net_sched: fix datalen for ematch
general protection fault in path_openat ext4 2 syz, C done 7 2388d 2388d 15/29 2371d 6404674acd59 vfs: fix do_last() regression
general protection fault in free_verifier_state (3) bpf 2 syz, C 5 2399d 2405d 15/29 2371d f59bbfc2f609 bpf: Fix error path under memory pressure
KASAN: use-after-free Read in tcp_fastretrans_alert net 19 syz, C done 1 2402d 2402d 15/29 2371d 2bec445f9bf3 net-backports: tcp: do not leave dangling pointers in tp->highest_sack
KASAN: use-after-free Read in root_remove_peer_lists wireguard 19 syz, C done 2 2388d 2388d 15/29 2371d 9981159fc3b6 wireguard: allowedips: fix use-after-free in root_remove_peer_lists
KASAN: use-after-free Read in snd_timer_resolution sound 19 syz, C 5 2387d 2405d 15/29 2371d 60adcfde92fa ALSA: seq: Fix racy access for queue timer in proc read
KMSAN: uninit-value in i2c_w (2) media usb 7 syz, C 3 2484d 2473d 15/29 2371d de89d0864f66 media: gspca: zero usb_buf
BUG: unable to handle kernel paging request in rhashtable_jhash2 net 8 syz, C done 6 2404d 2405d 15/29 2371d 41cdc741048b netdevsim: fix nsim_fib6_rt_create() error path
memory leak in tcf_ctinfo_init net 3 syz, C 2 2401d 2402d 15/29 2371d 09d4f10a5e78 net: sched: act_ctinfo: fix memory leak
WARNING in do_dentry_open (2) fs -1 syz, C done 17 2391d 2388d 15/29 2371d a37f4958f7b6 debugfs: Return -EPERM when locked down
KASAN: slab-out-of-bounds Read in __nla_put_nohdr net 17 syz, C done 4 2399d 2399d 15/29 2371d 61678d28d4a4 net_sched: fix datalen for ematch
INFO: rcu detected stall in br_handle_frame (2) net 1 syz, C done 2 2431d 2427d 15/29 2371d d9e15a273306 pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM
memory leak in nf_tables_parse_netdev_hooks netfilter 3 syz, C 6 2375d 2404d 15/29 2371d cd77e75b5e46 netfilter: nf_tables: fix memory leak in nf_tables_parse_netdev_hooks()
WARNING in __proc_create (2) afs -1 syz, C done 4 2398d 2399d 15/29 2371d a45ea48e2bcd afs: Fix characters allowed into cell names
INFO: rcu detected stall in netlink_sendmsg (3) net 1 syz, C done 6 2378d 2432d 15/29 2371d d9e15a273306 pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM
general protection fault in timer_is_static_object input 2 syz, C 2 2455d 2452d 15/29 2371d cb222aed03d7 Input: add safety guards to input_set_keycode()
KASAN: null-ptr-deref Write in queue_work_on can 12 syz, C done error 5 2555d 2552d 15/29 2371d 0ace17d56824 can, slip: Protect tty->disc_data in write_wakeup and close with RCU
WARNING in cbq_destroy_class net -1 syz, C done 7 2376d 2399d 15/29 2371d 2e24cd755552 net_sched: fix ops->bind_class() implementations
WARNING in tracepoint_probe_register_prio (3) trace -1 syz done 979 2374d 3012d 15/29 2371d 64ae572bc7d0 tracing: Fix sched switch start/stop refcount racy updates
kernel BUG at arch/x86/kvm/mmu/mmu.c:LINE! kvm-x86 -1 syz, C done 6 2427d 2435d 15/29 2371d 005ba37cb89b mm: thp: KVM: Explicitly check for THP when populating secondary MMU
BUG: spinlock already unlocked in input_set_keycode input 4 syz, C 2 2465d 2463d 15/29 2371d cb222aed03d7 Input: add safety guards to input_set_keycode()
WARNING: refcount bug in cdev_get 13 syz, C done 105 2413d 2553d 15/29 2371d 68faa679b8be chardev: Avoid potential use-after-free in 'chrdev_open()'
KMSAN: uninit-value in read_sensor_register (2) media usb 7 syz, C 44 2478d 2496d 15/29 2371d de89d0864f66 media: gspca: zero usb_buf
inconsistent lock state in rxrpc_put_client_conn 4 syz, C done 18198 2380d 2386d 15/29 2371d 963485d436cc rxrpc: Fix call RCU cleanup using non-bh-safe locks
WARNING in cbq_destroy net -1 syz, C done 1 2398d 2398d 15/29 2371d 2e24cd755552 net_sched: fix ops->bind_class() implementations
WARNING in dln2_start_rx_urbs/usb_submit_urb usb -1 syz, C 44 2386d 2475d 15/29 2371d 2b8bd606b1e6 mfd: dln2: More sanity checking for endpoints
KASAN: use-after-free Read in tcp_check_sack_reordering net 19 syz, C done 2 2393d 2402d 15/29 2371d 2bec445f9bf3 net-backports: tcp: do not leave dangling pointers in tp->highest_sack
BUG: unable to handle kernel NULL pointer dereference in cfg80211_wext_siwfrag wireless 10 syz, C done 8 2401d 2413d 15/29 2371d 24953de0a5e3 cfg80211: check for set_wiphy_params
WARNING in cgroup_apply_control_enable cgroups -1 syz, C done 178 2407d 2960d 15/29 2371d 3bc0bb36fa30 cgroup: Prevent double killing of css when enabling threaded cgroup
KASAN: slab-out-of-bounds Read in hid_field_extract input usb 17 syz, C 6 2412d 2445d 15/29 2371d 8ec321e96e05 HID: Fix slab-out-of-bounds read in hid_field_extract
general protection fault in nft_chain_parse_hook netfilter 2 syz, C done 48 2390d 2405d 15/29 2371d 826035498ec1 netfilter: nf_tables: add __nft_chain_type_get()
WARNING in nf_tables_table_destroy netfilter -1 syz, C done done 1 2403d 2402d 15/29 2371d eb014de4fd41 netfilter: nf_tables: autoload modules from the abort path
KASAN: slab-out-of-bounds Write in mpol_parse_str mm 21 syz, C done 3 2409d 2406d 15/29 2371d c7a91bc7c2e1 mm/mempolicy.c: fix out of bounds write in mpol_parse_str()
KASAN: slab-out-of-bounds Read in bitmap_ip_gc netfilter 17 syz, C done 15 2384d 2402d 15/29 2371d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
WARNING: ODEBUG bug in rsi_probe usb wireless -1 syz, C 10487 2385d 2681d 15/29 2371d 92aafe77123a rsi: fix use-after-free on probe errors
KASAN: use-after-free Read in macvlan_broadcast net 19 syz, C done 12 2412d 2414d 15/29 2371d 96cc4b69581d macvlan: do not assume mac_header is set in macvlan_broadcast()
general protection fault in nft_tunnel_get_init netfilter 2 syz, C done 7 2404d 2405d 15/29 2371d 1c702bf902bd netfilter: nft_tunnel: fix null-attribute check
KASAN: slab-out-of-bounds Read in bitmap_port_add netfilter 17 syz done 9 2396d 2402d 15/29 2371d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
WARNING: bad unlock balance in gtp_encap_enable_socket net 4 syz, C done 8 2410d 2414d 15/29 2371d 90d72256addf net-backports: gtp: fix bad unlock balance in gtp_encap_enable_socket
WARNING: bad unlock balance in sch_direct_xmit net 4 syz, C done 35 2401d 2448d 15/29 2371d 53d374979ef1 net: avoid updating qdisc_xmit_lock_key in netdev_update_lockdep_key()
general protection fault in inet6_set_link_af net 2 syz, C done 8 2380d 2384d 15/29 2371d db3fa271022d ipv6/addrconf: fix potential NULL deref in inet6_set_link_af()
general protection fault in tcf_ife_cleanup net 2 syz, C done 111 2385d 2409d 15/29 2371d 44c23d71599f net/sched: act_ife: initalize ife->metalist earlier
BUG: unable to handle kernel paging request in do_csum (2) kernel 8 syz, C done 6 2394d 2396d 15/29 2371d 6cd021a58c18 udp: segment looped gso packets correctly
KASAN: use-after-free Write in __alloc_skb (2) net 22 syz, C done 7 2422d 2438d 15/29 2371d d836f5c69d87 net-backports: net: rtnetlink: validate IFLA_MTU attribute in rtnl_create_link()
KASAN: slab-out-of-bounds Read in bitmap_ip_test netfilter 17 syz 10 2391d 2402d 15/29 2371d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: slab-out-of-bounds Read in tcf_exts_destroy net 17 syz, C done error 8 2494d 2397d 15/29 2371d 599be01ee567 net_sched: fix an OOB access in cls_tcindex
general protection fault in hash_ipportnet4_uadt netfilter 2 syz, C done 13 2411d 2413d 15/29 2371d 22dad713b8a5 netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present
KASAN: slab-out-of-bounds Read in bitmap_port_list netfilter 17 syz, C 152 2394d 2402d 15/29 2371d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
WARNING in uvc_scan_chain_forward usb media -1 syz, C 6 2411d 2435d 15/29 2371d 68035c80e129 media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors
inconsistent lock state in rxrpc_put_client_connection_id afs net 4 syz, C done 473 2380d 2385d 15/29 2371d 963485d436cc rxrpc: Fix call RCU cleanup using non-bh-safe locks
INFO: task hung in aead_recvmsg crypto 1 syz, C done 11991 2397d 3171d 15/29 2371d bbefa1dd6a6d crypto: pcrypt - Avoid deadlock by using per-instance padata queues
KASAN: use-after-free Read in bitmap_port_destroy netfilter 19 syz, C 1 2402d 2402d 15/29 2371d c120959387ef netfilter: fix a use-after-free in mtype_destroy()
KASAN: null-ptr-deref Read in tcf_generic_walker net 11 syz, C done 6 2375d 2393d 15/29 2371d 760d228e322e net_sched: walk through all child classes in tc_bind_tclass()
WARNING: refcount bug in chrdev_open fs 13 syz, C inconclusive done 15 2451d 2553d 15/29 2371d 68faa679b8be chardev: Avoid potential use-after-free in 'chrdev_open()'
INFO: task hung in __generic_file_fsync (2) exfat 1 syz, C done done 28 2417d 2419d 15/29 2371d 85a8ce62c2ea block: add bio_truncate to fix guard_bio_eod
WARNING in tcp_enter_loss (2) net -1 syz, C done unreliable 4 3029d 3079d 15/29 2371d 16ae6aa17052 tcp: ignore Fast Open on repair mode
KASAN: null-ptr-deref Read in refcount_sub_and_test_checked (2) media 11 syz, C inconclusive done 916 2631d 2832d 15/29 2371d 62dcb4f41836 media: vb2: check memory model for VIDIOC_CREATE_BUFS
BUG: unable to handle kernel paging request in xfs_sb_quiet_read_verify xfs 8 syz, C done 6 2432d 2432d 15/29 2376d d98c9e83b5e7 kasan: fix crashes on access to memory mapped by vm_map_ram()
KASAN: vmalloc-out-of-bounds Write in pcpu_alloc bpf 21 syz, C done 31 2423d 2447d 15/29 2376d 253a496d8e57 kasan: don't assume percpu shadow allocations will succeed
KASAN: use-after-free Read in iov_iter_alignment iomap 19 syz, C error 3 2449d 2449d 15/29 2376d e0ff126ee7ad pipe: Fix bogus dereference in iov_iter_alignment()
memory leak in sctp_stream_init sctp 3 syz, C 1 2437d 2436d 15/29 2376d 951c6db954a1 sctp: fix memleak on err handling of stream initialization
general protection fault in gigaset_probe staging usb 2 syz, C 6 2460d 2579d 15/29 2376d 53f35a39c386 staging: gigaset: fix general protection fault on probe
KASAN: use-after-free Read in ext4_xattr_set_entry (2) ext4 19 syz, C done 19 2435d 2844d 15/29 2376d 9803387c55f7 ext4: validate the debug_want_extra_isize mount option at parse time
KMSAN: uninit-value in __crc32c_le_base crypto 7 syz 567 2412d 2458d 15/29 2376d b6f3320b1d52 sctp: fully initialize v4 addr in some functions
unregister_netdevice: waiting for DEV to become free (2) 2 syz, C done 385621 2376d 2923d 15/29 2376d ddd9b5e3e765 net-sysfs: Call dev_hold always in rx_queue_add_kobject
INFO: task hung in sync_inodes_sb (3) exfat 1 syz, C done 6 2416d 2425d 15/29 2376d 85a8ce62c2ea block: add bio_truncate to fix guard_bio_eod
KASAN: use-after-free Read in tomoyo_realpath_from_path tomoyo 19 syz error error 7 2435d 2629d 15/29 2376d 6f7c41374b62 tomoyo: Don't use nifty names on sockets.
KASAN: slab-out-of-bounds Read in hsr_debugfs_rename net 17 syz, C done 18 2414d 2424d 15/29 2376d 04b69426d846 hsr: fix slab-out-of-bounds Read in hsr_debugfs_rename()
general protection fault in j1939_sk_bind 2 syz done done 22 2450d 2476d 15/29 2376d 00d4e14d2e4c can: j1939: j1939_sk_bind(): take priv after lock is held
BUG: unable to handle kernel paging request in pcpu_alloc bpf 8 syz, C done 24 2429d 2447d 15/29 2376d 253a496d8e57 kasan: don't assume percpu shadow allocations will succeed
general protection fault in sctp_stream_free (2) sctp 2 syz, C done 25 2421d 2431d 15/29 2376d 61d5d4062876 sctp: fix err handling of stream initialization
inconsistent lock state in sp_get ppp 4 syz, C done 2 2439d 2439d 15/29 2376d 5c9934b6767b 6pack,mkiss: fix possible deadlock
general protection fault in j1939_jsk_del (2) can 2 syz 21 2435d 2451d 15/29 2376d 00d4e14d2e4c can: j1939: j1939_sk_bind(): take priv after lock is held
KASAN: vmalloc-out-of-bounds Read in compat_copy_entries netfilter bridge 17 syz, C done 3 2437d 2437d 15/29 2376d e608f631f0ba netfilter: ebtables: compat: reject all padding in matches/watchers
WARNING in ovl_rename overlayfs -1 syz, C done done 5 2667d 2664d 15/29 2376d 6889ee5a53b8 ovl: relax WARN_ON() on rename to self
possible deadlock in mon_bin_vma_fault 4 syz, C done 11427 2437d 2904d 15/29 2376d 19e6317d24c2 usb: mon: Fix a deadlock in usbmon between mmap and read
WARNING: refcount bug in smc_release (2) smc 13 syz, C done 9 2433d 2456d 15/29 2376d 86434744fedf net/smc: add fallback check to connect()
BUG: Bad rss-counter state (3) -1 syz, C unreliable done 438 2575d 3041d 15/29 2389d 173d9d9fd3dd mm/huge_memory: splitting set mapping+index before unfreeze
possible deadlock in flush_workqueue (2) 4 syz, C done done 256 2424d 2857d 15/29 2389d e7c58097793e hugetlbfs: revert "Use i_mmap_rwsem to fix page fault/truncate race"
KASAN: slab-out-of-bounds Read in build_audio_procunit (2) sound usb 17 syz, C 1 2475d 2474d 15/29 2397d 976a68f06b2e ALSA: usb-audio: Fix incorrect size check for processing/extension units
KASAN: use-after-free Read in j1939_xtp_rx_abort_one can 19 syz, C done done 11 2469d 2476d 15/29 2402d ddeeb7d4822e can: j1939: j1939_can_recv(): add priv refcounting
memory leak in fdb_create (2) bridge 3 syz, C 1 2449d 2449d 15/29 2413d c4b4c421857d net: bridge: deny dev_set_mac_address() when unregistering
KASAN: vmalloc-out-of-bounds Write in kvm_dev_ioctl_get_cpuid kvm-x86 21 syz, C 41 2447d 2447d 15/29 2413d 433f4ba19041 KVM: x86: fix out-of-bounds write in KVM_GET_EMULATED_CPUID (CVE-2019-19332)
kernel BUG at include/linux/mm.h:LINE! (5) net -1 syz, C done done 129 2652d 2722d 15/29 2413d 9354544cbccf net/tls: fix page double free on TX cleanup
KASAN: use-after-free Read in __queue_work (2) 19 syz, C done done 577 2607d 2960d 15/29 2413d 430ac66eb4c5 net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree()
KASAN: slab-out-of-bounds Read in bpf_prog_create net bpf 17 syz, C done 447 2443d 2525d 15/29 2413d 0033b34a03ec ppp: fix out-of-bounds access in bpf_prog_create()
memory leak in register_netdevice net 3 syz, C 19 2444d 2449d 15/29 2413d 42c17fa69f98 net: fix a leak in register_netdevice()
KASAN: slab-out-of-bounds Read in vcs_scr_readw serial 17 syz, C done done 16 2447d 2448d 15/29 2413d 0c9acb1af77a vcs: prevent write access to vcsu devices
kernel BUG at fs/pipe.c:LINE! fs -1 syz, C done 693 2443d 2449d 15/29 2413d 8c7b8c34ae95 pipe: Remove assertion from pipe_poll()
KMSAN: uninit-value in usbnet_probe usb 7 syz, C 1 2629d 2629d 15/29 2413d 78226f6eaac8 net: usb: asix: init MAC address buffers
KMSAN: uninit-value in nf_conntrack_tcp_packet netfilter 7 syz 3 2446d 2449d 15/29 2413d 9424e2e7ad93 net-backports: tcp: md5: fix potential overestimation of TCP option space
KASAN: slab-out-of-bounds Read in linear_transfer (3) sound 17 syz, C done 5 2446d 2447d 15/29 2413d 4cc8d6505ab8 ALSA: pcm: oss: Avoid potential buffer overflows
KASAN: slab-out-of-bounds Write in pipe_write 21 syz, C done 40 2444d 2449d 15/29 2413d 8f868d68d335 pipe: Fix missing mask update after pipe_wait()
WARNING in tty_set_termios -1 syz, C done done 1997 2572d 2772d 15/29 2413d b36a1552d731 Bluetooth: hci_uart: check for missing tty operations
general protection fault in override_creds lsm 2 syz, C done 6 2446d 2449d 15/29 2413d 0b8c0ec7eedc io_uring: use current task creds instead of allocating a new one
WARNING in drm_mode_createblob_ioctl dri -1 syz, C done 7 2475d 2498d 15/29 2413d 5bf8bec3f4ce drm: limit to INT_MAX in create_blob ioctl
WARNING: refcount bug in skb_set_owner_w net 13 syz, C done 2 2449d 2449d 15/29 2413d 501a90c94510 net-backports: inet: protect against too small mtu values.
KMSAN: use-after-free in netlink_recvmsg net 18 syz, C 1 2468d 2468d 15/29 2439d cf94da6f502d Bluetooth: Fix invalid-free in bcsp_close()
KMSAN: use-after-free in kfree_skb bluetooth 18 syz 34 2456d 2504d 15/29 2439d cf94da6f502d Bluetooth: Fix invalid-free in bcsp_close()
general protection fault in io_commit_cqring fs 2 syz, C done 3 2467d 2468d 15/29 2439d 15dff286d0e0 io_uring: check for validity of ->rings in teardown
general protection fault in ext4_writepages ext4 2 syz, C done 18 2462d 2471d 15/29 2439d 4d06bfb97ecb ext4: Add error handling for io_end_vec struct allocation
KMSAN: use-after-free in __skb_try_recv_from_queue net 18 syz, C 4 2467d 2491d 15/29 2439d cf94da6f502d Bluetooth: Fix invalid-free in bcsp_close()
general protection fault in ip_sublist_rcv net 2 syz, C done 287 2481d 2491d 15/29 2439d 51210ad5a558 inet: do not call sublist_rcv on empty list
kernel BUG at include/linux/scatterlist.h:LINE! net -1 syz, C done 307 2449d 2643d 15/29 2439d d10523d0b3d7 net/tls: free the record on encryption error
KASAN: use-after-free Read in snd_timer_open sound 19 syz, C done 87 2469d 2470d 15/29 2439d 0c4f09ceec3d ALSA: timer: Fix the breakage of slave link open
INFO: task hung in io_wq_destroy fs 1 syz, C done 20 2453d 2484d 15/29 2439d b60fda6000a9 io-wq: wait for io_wq_create() to setup necessary workers
INFO: trying to register non-static key in io_cqring_ev_posted fs -1 syz, C done 6 2454d 2466d 15/29 2439d eb065d301e8c io_uring: io_allocate_scq_urings() should return a sane state
KASAN: global-out-of-bounds Write in kbd_event usb serial input 21 syz, C 6 2453d 2475d 15/29 2439d b2b2dd71e085 tty: vt: keyboard: reject invalid keycodes
KASAN: use-after-free Read in tipc_nl_node_dump_monitor_peer tipc 19 syz, C done 3 2503d 2503d 15/29 2439d ab5b526da048 net: genetlink: always allocate separate attrs for dumpit ops
general protection fault in tss_update_io_bitmap kernel 2 syz, C done 65 2455d 2461d 15/29 2439d e3cb0c7102f0 x86/ioperm: Fix use of deprecated config option
general protection fault in ip6_sublist_rcv net 2 syz, C done 327 2481d 2484d 15/29 2439d 51210ad5a558 inet: do not call sublist_rcv on empty list
general protection fault in flexcop_usb_probe usb media 2 syz, C 403 2453d 2683d 15/29 2439d 1b976fc6d684 media: b2c2-flexcop-usb: add sanity checking
WARNING in iov_iter_pipe fs -1 syz, C done 1117 2456d 2474d 15/29 2439d 419e9c38aa07 iomap: Fix pipe page leakage during splicing
kernel BUG at kernel/time/timer.c:LINE! (4) media usb -1 syz 1 2508d 2505d 15/29 2439d f3f5ba42c58d media: imon: invalid dereference in imon_touch_event
general protection fault in devlink_get_from_attrs net 2 syz, C 7 2506d 2505d 15/29 2439d 82a843de41d4 net: devlink: fix reporter dump dumpit
KASAN: use-after-free Read in appledisplay_bl_get_brightness usb 19 syz, C 1 2521d 2519d 15/29 2439d 91feb01596e5 appledisplay: fix error handling in the scheduled work
INFO: trying to register non-static key in ida_destroy usb media -1 syz, C 4272 2452d 2575d 15/29 2439d 8c279e9394ca media: uvcvideo: Fix error path in control parsing failure
KMSAN: use-after-free in skb_dequeue bluetooth 18 syz, C 1 2498d 2498d 15/29 2439d cf94da6f502d Bluetooth: Fix invalid-free in bcsp_close()
KASAN: use-after-free Read in tipc_nl_publ_dump tipc 19 syz, C 2 2506d 2505d 15/29 2439d ab5b526da048 net: genetlink: always allocate separate attrs for dumpit ops
general protection fault in snd_usb_create_mixer usb sound 2 syz, C 1 2461d 2460d 15/29 2439d 9435f2bb6687 ALSA: usb-audio: Fix NULL dereference at parsing BADD
general protection fault in tipc_nl_publ_dump tipc 2 syz, C 135 2502d 2505d 15/29 2439d 6ea67769ff33 net: tipc: prepare attrs in __tipc_nl_compat_dumpit()
KASAN: use-after-free Read in nf_ct_deliver_cached_events netfilter 19 syz, C done 169 2484d 2490d 15/29 2439d ad88b7a6aa3e netfilter: ecache: don't look for ecache extension on dying/unconfirmed conntracks
general protection fault in veth_get_stats64 net 2 syz, C done 2 2510d 2510d 15/29 2439d 9077f052abd5 net: propagate errors correctly in register_netdevice()
general protection fault in usb_set_interface usb 2 syz, C 3 2523d 2526d 15/29 2439d c7a191464078 media: usbvision: Fix invalid accesses after device disconnect
KASAN: use-after-free Read in slip_open net 19 syz, C done 3 2457d 2458d 15/29 2439d e58c19124189 slip: Fix use-after-free Read in slip_open
WARNING in __rtnl_newlink net -1 syz, C done 2 2509d 2509d 15/29 2439d 9077f052abd5 net: propagate errors correctly in register_netdevice()
BUG: unable to handle kernel paging request in io_wq_cancel_all fs 8 syz, C done 2 2482d 2482d 15/29 2439d 975c99a57096 io_uring: io_wq_create() returns an error pointer, not NULL
KASAN: invalid-free in io_sqe_files_unregister fs 24 syz, C done 3 2471d 2471d 15/29 2439d 46568e9be70f io_uring: fix error clear of ->file_table in io_sqe_files_register()
KASAN: invalid-free in skb_free_head bluetooth 24 syz, C done 1 2480d 2480d 15/29 2439d cf94da6f502d Bluetooth: Fix invalid-free in bcsp_close()
general protection fault in ovs_vport_add openvswitch 2 syz, C done 5 2500d 2509d 15/29 2439d 9077f052abd5 net: propagate errors correctly in register_netdevice()
KASAN: use-after-free Read in nl8NUM_dump_wpan_phy wpan 19 syz, C done 6 2503d 2505d 15/29 2439d ab5b526da048 net: genetlink: always allocate separate attrs for dumpit ops
KASAN: use-after-free Read in tipc_udp_nl_dump_remoteip tipc 19 syz, C done 3 2504d 2505d 15/29 2439d ab5b526da048 net: genetlink: always allocate separate attrs for dumpit ops
KASAN: use-after-free Read in __cfg8NUM_wpan_dev_from_attrs wpan 19 syz, C done 3 2506d 2505d 15/29 2439d ab5b526da048 net: genetlink: always allocate separate attrs for dumpit ops
WARNING: ODEBUG bug in free_netdev net -1 syz, C done 2 2507d 2507d 15/29 2439d 11fc7d5a0a2d tun: fix memory leak in error path
general protection fault in ip6_tnl_ioctl net 2 syz, C done 7 2498d 2509d 15/29 2439d 9077f052abd5 net: propagate errors correctly in register_netdevice()
KMSAN: use-after-free in copyout net 18 syz, C 1 2504d 2504d 15/29 2439d cf94da6f502d Bluetooth: Fix invalid-free in bcsp_close()
general protection fault in virtio_transport_release kvm net virt 2 syz, C done 7 2461d 2462d 15/29 2439d 039fcccaed33 vsock: avoid to assign transport if its initialization fails
BUG: workqueue lockup (4) block -1 syz, C 47 2464d 2870d 15/29 2439d 7e7c005b4b1f rtc: disable uie before setting time and enable after
WARNING in port100_send_cmd_async/usb_submit_urb usb nfc -1 syz, C 83 2453d 2594d 15/29 2441d 5f9f0b11f081 nfc: port100: handle command failure cleanly
general protection fault in kvm_coalesced_mmio_init kvm 2 syz done 48 2468d 2477d 14/29 2452d 8a44119a98be KVM: Fix NULL-ptr deref after kvm_create_vm fails
general protection fault in j1939_netdev_notify can 2 syz done 11 2465d 2476d 14/29 2452d c48c8c1e2e81 can: j1939: main: j1939_ndev_to_priv(): avoid crash if can_ml_priv is NULL
KASAN: use-after-free Read in j1939_sk_recv can 19 syz, C done 2 2471d 2471d 14/29 2452d ddeeb7d4822e can: j1939: j1939_can_recv(): add priv refcounting
KASAN: use-after-free Read in j1939_session_deactivate can 19 syz done 1 2473d 2473d 14/29 2452d ddeeb7d4822e can: j1939: j1939_can_recv(): add priv refcounting
WARNING in smc_unhash_sk (3) smc -1 syz, C done 362 2455d 2545d 14/29 2452d 8204df72bea1 net/smc: fix fastopen for non-blocking connect()
KASAN: use-after-free Read in do_mount fs 19 syz done 6 2497d 2505d 14/29 2452d 0ecee6699064 fs/namespace.c: fix use-after-free of mount in mnt_warn_timestamp_expiry()
general protection fault in j1939_jsk_del 2 syz done 132 2452d 2476d 14/29 2452d fd81ebfe7975 can: j1939: socket: rework socket locking for j1939_sk_release() and j1939_sk_sendmsg()
memory leak in smc_create smc 3 syz, C 19 2465d 2478d 14/29 2452d 6d6dd528d5af net/smc: fix refcount non-blocking connect() -part 2
KASAN: use-after-free Read in j1939_session_get_by_addr_locked can 19 syz, C done 1 2471d 2471d 14/29 2452d ddeeb7d4822e can: j1939: j1939_can_recv(): add priv refcounting
INFO: task hung in synchronize_rcu 1 syz done 1206 2452d 2478d 14/29 2452d 8a44119a98be KVM: Fix NULL-ptr deref after kvm_create_vm fails
KMSAN: uninit-value in ax88172a_bind usb 7 syz, C 5 2484d 2497d 14/29 2452d a9a51bd727d1 ax88172a: fix information leak on short answers
KMSAN: uninit-value in gf128mul_4k_lle (3) crypto 7 syz, C 2958 2458d 2823d 14/29 2452d 683916f6a840 net/tls: fix sk_msg trim on fallback to copy mode
KMSAN: uninit-value in aesti_encrypt crypto 7 syz, C 54 2506d 2607d 14/29 2452d 683916f6a840 net/tls: fix sk_msg trim on fallback to copy mode
WARNING: suspicious RCU usage in kvm_dev_ioctl 4 syz, C done 333 2468d 2479d 14/29 2452d e2d3fcaf939d KVM: fix placement of refcount initialization
KMSAN: use-after-free in build_audio_procunit sound usb 18 syz, C 2 2490d 2490d 14/29 2452d 976a68f06b2e ALSA: usb-audio: Fix incorrect size check for processing/extension units
WARNING: refcount bug in j1939_netdev_start can 13 syz done 6 2454d 2475d 14/29 2452d fd81ebfe7975 can: j1939: socket: rework socket locking for j1939_sk_release() and j1939_sk_sendmsg()
KMSAN: uninit-value in get_min_max_with_quirks sound usb 7 syz, C 11 2485d 2473d 14/29 2452d 167beb175679 ALSA: usb-audio: Fix missing error check at mixer resolution test
WARNING: ODEBUG bug in input_ff_destroy input usb -1 syz, C 6 2460d 2468d 14/29 2452d fa3a5a1880c9 Input: ff-memless - kill timer in destroy()
general protection fault in memcg_flush_percpu_vmstats mm cgroups 2 syz, C error 19 2481d 2544d 14/29 2452d 7961eee39784 mm: memcontrol: fix NULL-ptr deref in percpu stats flush
INFO: task hung in mpage_prepare_extent_to_map 1 syz done 18606 2476d 2484d 14/29 2452d 4655e5e5f387 mm,thp: recheck each page before collapsing file THP
KMSAN: uninit-value in cdc_ncm_set_dgram_size usb 7 syz, C 4 2483d 2482d 14/29 2452d 332f989a3b00 CDC-NCM: handle incomplete transfer of MTU
KASAN: use-after-free Read in mcba_usb_disconnect usb can 19 syz, C 2 2479d 2512d 14/29 2452d 4d6636498c41 can: mcba_usb: fix use-after-free on disconnect
KMSAN: kernel-usb-infoleak in pcan_usb_wait_rsp usb 9 syz, C 2 2496d 2496d 14/29 2452d f7a1337f0d29 can: peak_usb: fix slab info leak
KASAN: invalid-free in rsi_91x_deinit usb wireless 24 syz, C 109 2525d 2672d 13/29 2453d 8b51dc729147 rsi: fix a double free bug in rsi_91x_deinit()
WARNING in generic_make_request_checks -1 syz, C done 7760 2453d 2929d 13/29 2453d 8b2ded1c94c0 block: don't warn when doing fsync on read-only devices
BUG: spinlock recursion in release_sock net 4 syz, C done 116 2579d 2580d 13/29 2454d 5d92e631b8be net/tls: partially revert fix transition through disconnect with close
KMSAN: use-after-free in adu_disconnect usb 18 syz, C 16 2498d 2504d 13/29 2454d 44efc269db79 USB: adutux: fix use-after-free on disconnect
KMSAN: use-after-free in mutex_spin_on_owner usb 18 syz, C 1 2503d 2503d 13/29 2454d bc0e4f16c44e USB: iowarrior: fix use-after-free on disconnect
KMSAN: use-after-free in iowarrior_disconnect usb 18 syz, C 21 2498d 2504d 13/29 2454d bc0e4f16c44e USB: iowarrior: fix use-after-free on disconnect
KMSAN: use-after-free in usb_autopm_put_interface usb 18 syz, C 63 2484d 2498d 13/29 2454d 7a7591979748 USB: usblp: fix use-after-free on disconnect
KMSAN: uninit-value in lg4ff_set_autocenter_default input usb 7 syz, C 1 2484d 2484d 13/29 2455d d9d4b1e46d95 HID: Fix assumption that devices have inputs
WARNING in sk_stream_kill_queues (3) net -1 syz, C done 622 2626d 2985d 13/29 2455d 9354544cbccf net/tls: fix page double free on TX cleanup
WARNING: refcount bug in smc_release smc 13 syz, C done 8 2465d 2489d 13/29 2458d 301428ea3708 net/smc: fix refcounting for non-blocking connect()
INFO: trying to register non-static key in bond_3ad_update_lacp_rate net -1 syz, C done 26 2482d 2484d 13/29 2458d ad9bd8daf2f9 bonding: fix using uninitialized mode_lock
KASAN: use-after-free Read in fuse_request_end fuse 19 syz done 6 2489d 2493d 13/29 2458d 2b319d1f6f92 fuse: don't dereference req->args on finished request
memory leak in internal_dev_create openvswitch 3 syz, C 88 2481d 2567d 13/29 2458d 9464cc37f367 net: openvswitch: free vport unless register_netdevice() succeeds
divide error in dummy_timer usb 2 syz, C 3 2483d 2488d 13/29 2458d 54f83b8c8ea9 USB: gadget: Reject endpoints with 0 maxpacket value
memory leak in copy_net_ns 3 syz, C done 422 2480d 2518d 13/29 2458d 82ecff655e79 keys: Fix memory leak in copy_net_ns
INFO: trying to register non-static key in bond_3ad_update_ad_actor_settings net -1 syz, C done 69 2481d 2484d 13/29 2458d ad9bd8daf2f9 bonding: fix using uninitialized mode_lock
KASAN: use-after-free Read in bpf_prog_kallsyms_find (2) bpf 19 syz, C done 9 2488d 2498d 13/29 2458d cd7455f1013e bpf: Fix use after free in subprog's jited symbol removal
KASAN: use-after-free Read in is_bpf_text_address bpf 19 syz, C done 3 2489d 2490d 13/29 2458d cd7455f1013e bpf: Fix use after free in subprog's jited symbol removal
KASAN: use-after-free Read in io_uring_setup fs 19 syz error 1 2485d 2484d 13/29 2458d 044c1ab399af io_uring: don't touch ctx in setup after ring fd install
BUG: unable to handle kernel paging request in is_bpf_text_address bpf 8 syz, C done 2 2494d 2494d 13/29 2458d cd7455f1013e bpf: Fix use after free in subprog's jited symbol removal
INFO: task hung in ld_usb_write usb 1 syz, C 831 2477d 2490d 13/29 2458d 52403cfbc635 USB: ldusb: fix control-message timeout
general protection fault in kernfs_add_one 2 syz, C done 98 2567d 2891d 13/29 2459d ac43432cb1f5 driver core: Fix use-after-free and double free on glue directory
KASAN: use-after-free Read in ep_scan_ready_list fs 19 syz, C done 39 2923d 2958d 13/29 2461d 430ac66eb4c5 net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree()
KASAN: use-after-free Read in iowarrior_disconnect usb 19 syz, C 3056 2498d 2554d 13/29 2461d bc0e4f16c44e USB: iowarrior: fix use-after-free on disconnect
WARNING in kernfs_get -1 syz, C done 316 2569d 2897d 13/29 2461d ac43432cb1f5 driver core: Fix use-after-free and double free on glue directory
KASAN: use-after-free Read in __schedule (2) kvm-x86 19 syz, C done 961 2718d 2936d 13/29 2461d 26b471c7e2f7 KVM: nVMX: Fix bad cleanup on error of get/set nested state IOCTLs
divide error in usbtmc_generic_read usb 2 syz, C 2 2559d 2559d 13/29 2461d de7b9aa633b6 usbtmc: more sanity checking for packet size
KASAN: use-after-free Read in p9_fd_poll v9fs 19 syz, C done 8 2926d 2958d 13/29 2461d 430ac66eb4c5 net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree()
KASAN: use-after-free Read in vhci_hub_control usb 19 syz, C done 41 2859d 2904d 13/29 2461d 81f7567c51ad usb: usbip: Fix BUG: KASAN: slab-out-of-bounds in vhci_hub_control()
INFO: task hung in vivid_stop_generating_vid_cap 1 syz, C done done 81 2845d 2848d 13/29 2470d d65842f7126a media: vb2: add waiting_in_dqbuf flag
WARNING in event_function_local perf -1 syz, C unreliable 15451 2867d 3123d 13/29 2470d 214ff83d4473 KVM: x86: hyperv: implement PV IPI send hypercalls
BUG: MAX_LOCK_DEPTH too low! (2) net -1 syz, C done 5 2956d 2987d 13/29 2470d bab2c80e5a6c nsh: set mac len based on inner packet
inconsistent lock state in ila_xlat_nl_cmd_del_mapping net 4 syz, C unreliable 2496 2919d 2924d 13/29 2470d 7494de0454af mfd: da9063: Replace regmap_add_irq_chip with devm counterpart
INFO: task hung in fuse_reverse_inval_entry fuse 1 syz, C done 23 2934d 2946d 13/29 2470d c59fd85e4fd0 fuse: change interrupt requests allocation algorithm
BUG: corrupted list in p9_conn_cancel v9fs 8 syz, C done 18 2859d 2960d 13/29 2470d 9f476d7c540c net/9p/trans_fd.c: fix race by holding the lock
general protection fault in p9_conn_cancel v9fs 2 syz, C done 2 2940d 2958d 13/29 2470d 9f476d7c540c net/9p/trans_fd.c: fix race by holding the lock
WARNING: ODEBUG bug in p9_fd_close v9fs -1 syz, C done 82 2921d 2960d 13/29 2470d 430ac66eb4c5 net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree()
general protection fault in vb2_mmap media 2 syz, C inconclusive done 21 2791d 2836d 13/29 2470d cd26d1c4d1bc media: vb2: vb2_mmap: move lock up
KASAN: stack-out-of-bounds Read in xfrm_state_find (5) net 17 syz, C done 654 2756d 3058d 13/29 2470d 32bf94fb5c2e xfrm: validate template mode
KASAN: slab-out-of-bounds Write in end_requests fuse 21 syz, C done 2 2935d 2939d 13/29 2470d 45ff350bbd9d fuse: fix unlocked access to processing queue
KASAN: use-after-free Read in uprobe_perf_close trace 19 syz, C done 54 2739d 3057d 13/29 2470d 621b6d2ea297 perf/core: Fix use-after-free in uprobe_perf_close()
KASAN: use-after-free Read in _decode_session4 net 19 syz, C done 3 3061d 3061d 13/29 2470d c6741fbed6dc vti6: Properly adjust vti6 MTU from MTU of lower device
general protection fault in tcp_cleanup_ulp net 2 syz done done 6 2886d 2901d 13/29 2470d 5607fff30363 bpf: sockmap only allow ESTABLISHED sock state
WARNING in request_end fuse -1 syz, C done done 14 2846d 2883d 13/29 2470d 4c316f2f3ff3 fuse: set FR_SENT while locked
WARNING in dma_buf_vunmap dri media -1 syz, C done done 17 2795d 2834d 13/29 2470d 62dcb4f41836 media: vb2: check memory model for VIDIOC_CREATE_BUFS
BUG: corrupted list in p9_write_work v9fs 8 syz, C done 5 2883d 2928d 13/29 2470d 728356dedeff 9p: Add refcount to p9_req_t
KASAN: use-after-free Read in tick_sched_handle (3) kernel 19 syz, C done 12 2771d 2827d 13/29 2472d bc6e019b6ee6 fou: Prevent unbounded recursion in GUE error handler also with UDP-Lite
general protection fault in qca_setup arm-msm bluetooth 2 syz, C done done 6 2743d 2743d 13/29 2472d b36a1552d731 Bluetooth: hci_uart: check for missing tty operations
general protection fault in tcp_splice_read net 2 syz, C done done 23 2687d 2796d 13/29 2472d 07603b230895 net/smc: propagate file from SMC to TCP socket
KASAN: use-after-free Read in crypto_gcm_init_common crypto 19 syz, C done done 14 2774d 2840d 13/29 2473d 9354544cbccf net/tls: fix page double free on TX cleanup
KASAN: slab-out-of-bounds Read in find_first_zero_bit bfs 17 syz, C done 1 3060d 3060d 13/29 2473d d18771558910 bfs: extra sanity checking and static inode bitmap
kernel BUG at net/ipv4/ip_output.c:LINE! net -1 syz, C done 28225 2765d 2956d 13/29 2473d e7c87bd6cc4e bpf: in __bpf_redirect_no_mac pull mac only if present
general protection fault in put_pid kernel 2 syz done done 3 2795d 2805d 13/29 2473d a8e911d13540 x86_64: increase stack size for KASAN_EXTRA
suspicious RCU usage at ./include/net/inet_sock.h:LINE net -1 syz, C done 171 3116d 3206d 13/29 2473d 3f32d0be6c16 tipc: lock wakeup & inputq at tipc_link_reset()
KASAN: use-after-free Read in _decode_session6 net 19 syz, C done 4 2833d 2901d 13/29 2474d e7c87bd6cc4e bpf: in __bpf_redirect_no_mac pull mac only if present
general protection fault in propagate_entity_cfs_rq kernel 2 syz, C done 1 2957d 2956d 13/29 2474d bab2c80e5a6c nsh: set mac len based on inner packet
KASAN: use-after-free Write in __vb2_cleanup_fileio media 22 syz, C done inconclusive 2 2845d 2848d 13/29 2474d d65842f7126a media: vb2: add waiting_in_dqbuf flag
KASAN: slab-out-of-bounds Read in ld_usb_read (3) usb 17 syz, C 74 2485d 2496d 13/29 2475d 7a6f22d7479b USB: ldusb: fix read info leaks
KASAN: slab-out-of-bounds Read in build_audio_procunit usb sound 17 syz, C 6 2481d 2490d 13/29 2475d ba8bf0967a15 ALSA: usb-audio: Fix copy&paste error in the validator
KASAN: slab-out-of-bounds Write in ga_probe input 21 syz, C 5 2504d 2526d 13/29 2475d d9d4b1e46d95 HID: Fix assumption that devices have inputs
INFO: task hung in nbd_ioctl nbd 1 syz, C done 71 2476d 2512d 13/29 2475d cf1b2326b734 nbd: verify socket is supported during setup
KASAN: use-after-free Read in usb_autopm_put_interface usb 19 syz, C 2373 2484d 2497d 13/29 2475d 7a7591979748 USB: usblp: fix use-after-free on disconnect
memory leak in gfs2_init_fs_context gfs2 3 syz, C 13 2487d 2510d 13/29 2475d 30aecae86e91 gfs2: Fix memory leak when gfs2meta's fs_context is freed
KMSAN: uninit-value in sr9800_bind usb 7 syz, C 27 2486d 2509d 13/29 2477d 77b6d09f4ae6 net: usb: sr9800: fix uninitialized local variable
memory leak in llc_ui_create (2) 3 syz, C done 19 2493d 2613d 13/29 2477d c6ee11c39fcc llc: fix sk_buff leak in llc_sap_state_process()
BUG: unable to handle kernel NULL pointer dereference in xsk_poll bpf net 10 syz, C done 10 2495d 2512d 13/29 2477d df551058f7a3 xsk: Fix crash in poll when device does not support ndo_xsk_wakeup
KASAN: use-after-free Read in rxrpc_release_call afs net 19 syz done 13 2495d 2550d 13/29 2477d 91fcfbe8852e rxrpc: Fix call crypto state cleanup
KASAN: use-after-free Read in rxrpc_send_keepalive afs net 19 syz, C error 694 2492d 2564d 13/29 2477d c48fc11b69e9 rxrpc: Fix call ref leak
memory leak in sctp_get_port_local (3) sctp 3 syz, C 4 2492d 2498d 13/29 2477d 63dfb7938b13 sctp: change sctp_prot .no_autobind with true
memory leak in llc_ui_sendmsg net 3 syz, C 125 2493d 2644d 13/29 2477d c6ee11c39fcc llc: fix sk_buff leak in llc_sap_state_process()
INFO: task hung in addrconf_verify_work (2) net 1 syz, C 22 2498d 2498d 13/29 2477d 39f13ea2f61b net: avoid potential infinite loop in tc_ctl_action()
KASAN: use-after-free Read in pn533_send_complete nfc usb 19 syz, C 4 2484d 2505d 13/29 2477d 6af3aa57a098 NFC: pn533: fix use-after-free and memleaks
KASAN: use-after-free Read in rxrpc_put_peer afs net 19 syz, C error 38 2493d 2545d 13/29 2477d 55f6c98e3674 rxrpc: Fix trace-after-put looking at the put peer record 9ebeddef58c4 rxrpc: rxrpc_peer needs to hold a ref on the rxrpc_local record
memory leak in llc_conn_ac_send_sabme_cmd_p_set_x net 3 syz, C 225 2493d 2644d 13/29 2477d b74555de21ac llc: fix sk_buff leak in llc_conn_service()
general protection fault in rxrpc_error_report net afs 2 syz, C done 6 2493d 2505d 13/29 2477d f0308fb07080 rxrpc: Fix possible NULL pointer access in ICMP handling
WARNING: suspicious RCU usage in xfrm_alloc_userspi net 4 syz, C done error 86 2706d 2707d 13/29 2478d f10e0010fae8 net: xfrm: Add '_rcu' tag for rcu protected pointer in netns_xfrm
general protection fault in get_work_pool net 2 syz, C done 24 2685d 3088d 13/29 2478d 07bf7908950a xfrm: Validate address prefix lengths in the xfrm selector.
general protection fault in xfrm_init_replay net 2 syz inconclusive done 2 3075d 3075d 13/29 2478d d97ca5d714a5 xfrm_user: uncoditionally validate esn replay attribute struct
WARNING: suspicious RCU usage in xfrm_get_spdinfo net 4 syz, C done error 46 2705d 2707d 13/29 2478d f10e0010fae8 net: xfrm: Add '_rcu' tag for rcu protected pointer in netns_xfrm
WARNING: suspicious RCU usage in xfrm_get_sadinfo net 4 syz, C done error 28 2706d 2707d 13/29 2478d f10e0010fae8 net: xfrm: Add '_rcu' tag for rcu protected pointer in netns_xfrm
WARNING: suspicious RCU usage in xfrm_get_policy net 4 syz done error 8 2707d 2707d 13/29 2478d f10e0010fae8 net: xfrm: Add '_rcu' tag for rcu protected pointer in netns_xfrm
memory leak in sctp_stream_init_ext sctp 3 syz, C 34 2499d 2634d 13/29 2484d 3c52b0af059e lib/generic-radix-tree.c: add kmemleak annotations
possible deadlock in usb_deregister_dev (2) usb 4 syz, C 956 2498d 2526d 13/29 2485d 33a7813219f2 USB: legousbtower: fix deadlock on disconnect
KMSAN: uninit-value in mts_usb_probe usb 7 syz, C 29 2504d 2510d 13/29 2485d 177238c3d47d USB: microtek: fix info-leak at probe
KMSAN: uninit-value in iowarrior_disconnect usb 7 syz, C 18 2502d 2509d 13/29 2485d bc0e4f16c44e USB: iowarrior: fix use-after-free on disconnect
KASAN: use-after-free Read in adu_disconnect usb 19 syz, C 5304 2498d 2568d 13/29 2485d 44efc269db79 USB: adutux: fix use-after-free on disconnect
INFO: rcu detected stall in dummy_timer usb 1 syz, C 16 2499d 2564d 13/29 2485d 32a0721c6620 USB: yurex: Don't retry on unexpected errors
KASAN: invalid-free in disconnect_rio (2) usb 24 syz, C 51 2502d 2523d 13/29 2485d 015664d15270 USB: rio500: Remove Rio 500 kernel driver
INFO: trying to register non-static key in finish_writeback_work fs -1 syz error 1 2520d 2517d 13/29 2485d 8e00c4e9dd85 writeback: fix use-after-free in finish_writeback_work()
general protection fault in bpf_tcp_close (2) bpf 2 syz, C done 26 2914d 2958d 13/29 2491d e06fa9c16ce4 bpf, sockmap: fix potential use after free in bpf_tcp_close
BUG: unable to handle kernel NULL pointer dereference in rds_bind rds 10 syz, C done 51 2515d 2526d 13/29 2497d 05733434ee9a net/rds: Check laddr_check before calling it
WARNING: lock held when returning to user space in rcu_lock_acquire kernel 4 syz, C done 3 2510d 2510d 13/29 2497d 73956fc07dd7 membarrier: Fix RCU locking bug caused by faulty merge
memory leak in v9fs_cache_session_get_cookie v9fs 3 syz, C 242 2497d 2644d 13/29 2497d 962a991c5de1 9p/cache.c: Fix memory leak in v9fs_cache_session_get_cookie
WARNING in em28xx_usb_disconnect usb media -1 syz, C 8 2531d 2564d 13/29 2497d 46e4a26615cc media: em28xx: modules workqueue not inited for 2nd device
KASAN: use-after-free Read in si470x_int_in_callback usb media 19 syz, C 25 2506d 2595d 13/29 2497d 0d616f2a3fdb media: radio/si470x: kill urb on error
kernel BUG at include/linux/skbuff.h:LINE! (2) sctp -1 syz, C done 58 2547d 2557d 13/29 2497d c7a42eb49212 net: ipv6: fix listify ip6_rcv_finish in case of forwarding
general protection fault in make_kuid kernel 2 syz, C done 4 2557d 2582d 13/29 2497d 1dd9bc08cf14 vfs: set fs_context::user_ns for reconfigure
general protection fault in ath6kl_usb_alloc_urb_from_pipe usb wireless 2 syz, C 1160 2523d 2683d 13/29 2497d 39d170b3cb62 ath6kl: fix a NULL-ptr-deref bug in ath6kl_usb_alloc_urb_from_pipe()
KMSAN: uninit-value in read_sensor_register media usb 7 syz, C 25 2497d 2627d 13/29 2497d 4843a543fad3 media: gspca: zero usb_buf on error
WARNING in rcu_note_context_switch kernel -1 syz, C done 1 2511d 2511d 13/29 2497d 73956fc07dd7 membarrier: Fix RCU locking bug caused by faulty merge
KMSAN: kernel-usb-infoleak in ttusb_dec_send_command usb 9 syz, C 2 2564d 2574d 13/29 2497d a10feaf8c464 media: ttusb-dec: Fix info-leak in ttusb_dec_send_command()
KASAN: use-after-free Read in atusb_disconnect usb wpan 19 syz, C 112 2498d 2539d 13/29 2497d 7fd25e6fc035 ieee802154: atusb: fix use-after-free at disconnect
KMSAN: uninit-value in inet_ehash_insert net 7 syz, C 7 2505d 2512d 13/29 2497d 6af1799aaf3f net-backports: ipv6: drop incoming packets having a v4mapped source address
KASAN: slab-out-of-bounds Read in hdpvr_probe usb media 17 syz, C 10 2533d 2609d 13/29 2497d 8b8900b729e4 media: hdpvr: add terminating 0 at end of string
BUG: assuming atomic context at net/kcm/kcmsock.c:LINE -1 syz, C done 178 2513d 2519d 13/29 2497d 0355d6c1d591 net-backports: kcm: disable preemption in kcm_parse_func_strparser()
WARNING: suspicious RCU usage in netem_enqueue 4 syz, C done 16 2515d 2529d 13/29 2497d 159d2c7d8106 net-backports: sch_netem: fix rcu splat in netem_enqueue()
general protection fault in xsk_poll net bpf 2 syz, C done 430 2526d 2554d 13/29 2497d 42fddcc7c64b xsk: use state member for socket synchronization
INFO: task syz-executor can't die for more than 143 seconds. fs -1 syz, C done 61 2514d 2622d 13/29 2497d 8619e5bdeee8 /dev/mem: Bail out upon SIGKILL. 7c3a6aedcd6a kexec: bail out upon SIGKILL when allocating memory. 8f9e86ee7959 staging: android: ion: Bail out upon SIGKILL when allocating memory.
BUG: sleeping function called from invalid context in tcf_chain0_head_change_cb_del net 5 syz, C done 187 2512d 2526d 13/29 2497d e3ae1f96accd net: sched: sch_sfb: don't call qdisc_put() while holding tree lock
KASAN: global-out-of-bounds Read in load_next_firmware_from_table usb libertas 17 syz, C 5 2545d 2595d 13/29 2497d 764f3f1ecffc libertas: Add missing sentinel at end of if_usb.c fw_table
WARNING in handle_desc kvm-x86 -1 syz, C done 6 2522d 2531d 13/29 2497d 3ca94192278c KVM: X86: Fix userspace set invalid CR4
general protection fault in kstrtouint (2) fuse 2 syz, C done 40 2543d 2586d 13/29 2497d 74983ac20aea vfs: Make fs_parse() handle fs_param_is_fd-type params better
divide error in usbnet_update_max_qlen usb 2 syz, C 17 2514d 2526d 13/29 2497d 280ceaed79f1 usbnet: sanity checking of packet sizes and device mtu
KASAN: slab-out-of-bounds Read in technisat_usb2_rc_query usb media 17 syz, C 2236 2543d 2681d 13/29 2497d 0c4df39e504b media: technisat-usb2: break out of loop at end of buffer
general protection fault in __apic_accept_irq 2 syz, C done 69 2525d 2537d 13/29 2497d a073d7e3ad68 KVM: hyperv: Fix Direct Synthetic timers assert an interrupt w/o lapic_in_kernel
INFO: rcu detected stall in pie_timer net 1 syz, C 19 2497d 2533d 13/29 2497d 4ce70b4aed57 net-backports: net: sched: sch_htb: don't call qdisc_put() while holding tree lock
KASAN: global-out-of-bounds Read in dvb_pll_attach media usb 17 syz, C 2 2534d 2594d 13/29 2497d c268e7adea52 media: dvb-frontends: use ida for pll number
general protection fault in pk_probe input usb 2 syz, C 2 2543d 2539d 13/29 2497d 98375b86c791 HID: prodikeys: Fix general protection fault during probe
possible deadlock in free_ioctx_users fuse 4 syz, C 509 2517d 2898d 13/29 2497d 76e43c8ccaa3 fuse: fix deadlock with aio poll and fuse_iqueue::waitq.lock
KASAN: use-after-free Read in cbq_enqueue net 19 syz, C done 4 2505d 2506d 13/29 2497d e9789c7cc182 sch_cbq: validate TCA_CBQ_WRROPT to avoid crash
general protection fault in dsmark_init net 2 syz, C done 3 2506d 2508d 13/29 2497d 474f0813a300 sch_dsmark: fix potential NULL deref in dsmark_init()
KASAN: global-out-of-bounds Read in hdpvr_probe usb media 17 syz, C 15 2550d 2663d 13/29 2497d d4a6a9537bc3 media: hdpvr: Add device num check and handling
WARNING: lock held when returning to user space in membarrier_private_expedited kernel 4 syz, C done 7 2510d 2511d 13/29 2497d 73956fc07dd7 membarrier: Fix RCU locking bug caused by faulty merge
WARNING: ODEBUG bug in usbhid_disconnect (2) input usb -1 syz, C 48 2517d 2539d 13/29 2497d 2bcdacb70327 HID: sony: Fix memory corruption issue on cleanup.
KASAN: slab-out-of-bounds Read in usb_reset_and_verify_device usb 17 syz 1 2547d 2539d 13/29 2497d 3dd550a2d365 USB: usbcore: Fix slab-out-of-bounds bug during device reset
KMSAN: uninit-value in i2c_w media usb 7 syz, C 2 2630d 2630d 13/29 2497d 4843a543fad3 media: gspca: zero usb_buf on error
BUG: MAX_STACK_TRACE_ENTRIES too low! (2) -1 syz, C done 5045 2529d 2697d 13/29 2497d 12593b7467f9 locking/lockdep: Reduce space occupied by stack traces
possible deadlock in open_rio (3) usb 4 syz, C 169 2523d 2525d 13/29 2497d 9472aff16ca0 USB: rio500: Fix lockdep violation
WARNING in kfree fs -1 syz, C done 2 2544d 2543d 13/29 2497d 43ce4c1feadb vfs: Add a single-or-reconfig keying to vfs_get_super()
KMSAN: uninit-value in __request_module kernel 7 syz, C 13 2506d 2526d 13/29 2497d 62794fc4fbf5 net_sched: add max len check for TCA_KIND
WARNING in zd_mac_clear usb wireless -1 syz, C 13194 2523d 2683d 13/29 2497d 7a2eb7367fde zd1211rw: remove false assertion from zd_mac_clear()
general protection fault in xsk_map_update_elem bpf 2 syz, C done 12 2516d 2519d 13/29 2497d fcd30ae0665c bpf/xskmap: Return ERR_PTR for failure case instead of NULL.
possible deadlock in pie_timer net 4 syz, C done 2 2514d 2515d 13/29 2497d e3ae1f96accd net: sched: sch_sfb: don't call qdisc_put() while holding tree lock
KMSAN: uninit-value in sd_init media usb 7 syz, C 122 2497d 2630d 13/29 2497d 4843a543fad3 media: gspca: zero usb_buf on error
WARNING in iguanair_probe/usb_submit_urb usb media -1 syz, C 3 2528d 2578d 13/29 2497d ab1cbdf159be media: iguanair: add sanity checks
memory leak in llcp_sock_bind kernel 3 syz, C done 2 2519d 2583d 13/29 2497d a0c2dc1fe63e nfc: fix memory leak in llcp_sock_bind()
general protection fault in __pm_runtime_resume input usb pm 2 syz, C 197 2517d 2580d 13/29 2497d 5f9242775bb6 HID: logitech: Fix general protection fault caused by Logitech driver
BUG: unable to handle kernel paging request in coalesced_mmio_write kvm 8 syz, C done 10 2604d 2609d 13/29 2497d b60fe990c6b0 KVM: coalesced_mmio: add bounds checking
divide error in cdc_ncm_update_rxtx_max usb 2 syz, C 5 2512d 2526d 13/29 2497d 3fe4b3351301 cdc_ncm: fix divide-by-zero caused by invalid wMaxPacketSize
general protection fault in trace_probe_unlink trace 2 syz, C done 7 2522d 2526d 13/29 2497d d59fae6fea39 tracing/kprobe: Fix NULL pointer access in trace_porbe_unlink()
memory leak in ppp_write ppp 3 syz, C 5 2524d 2568d 13/29 2497d 4c247de564f1 ppp: Fix memory leak in ppp_write
general protection fault in qdisc_put 2 syz, C done 60 2524d 2534d 13/29 2497d 6efb971ba8ed net_sched: let qdisc_put() accept NULL pointer
general protection fault in dev_map_hash_update_elem net bpf 2 syz, C done 4 2530d 2537d 13/29 2497d af58e7ee6a8d xdp: Fix race in dev_map_hash_update_elem() when replacing element
KASAN: slab-out-of-bounds Read in hidraw_ioctl input 17 syz, C 104 2524d 2574d 13/29 2497d 416dacb819f5 HID: hidraw: Fix invalid read in hidraw_ioctl
INFO: rcu detected stall in sys_exit_group kernel 1 syz, C done 1 2528d 2524d 13/29 2503d d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
general protection fault in rds_recv_rcvbuf_delta rds 2 syz, C done 35 2607d 2834d 13/29 2503d c5c1a030a7db net/rds: An rds_sock is added too early to the hash table
INFO: rcu detected stall in sys_sendmsg net 1 syz, C done 2 2528d 2529d 13/29 2503d d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
INFO: rcu detected stall in addrconf_dad_work 1 syz, C done 126 2527d 2532d 13/29 2503d d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
general protection fault in addrconf_f6i_alloc net 2 syz, C 305 2526d 2537d 13/29 2503d 8652f17c658d ipv6: addrconf_f6i_alloc - fix non-null pointer check to !IS_ERR()
WARNING in __mark_chain_precision (2) bpf -1 syz, C done 18 2526d 2544d 13/29 2503d 2339cd6cd0b5 bpf: fix precision tracking of stack slots
INFO: rcu detected stall in br_handle_frame 1 syz, C done 341 2526d 2532d 13/29 2503d d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
general protection fault in tls_sk_proto_close (2) net 2 syz error 246 2527d 2545d 13/29 2503d 44580a0118d3 net: sock_map, fix missing ulp check in sock hash case
INFO: rcu detected stall in mld_ifc_timer_expire 1 syz, C done 152 2527d 2534d 13/29 2503d d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
BUG: soft lockup in addrconf_dad_work net 1 syz, C done 1 2531d 2531d 13/29 2503d d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
INFO: rcu detected stall in igmp_ifc_timer_expire net 1 syz, C 57 2527d 2785d 13/29 2503d d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
memory leak in sctp_get_port_local (2) sctp 3 syz, C 34 2507d 2565d 13/29 2503d 29b99f54a8e6 sctp: destroy bucket if failed to bind addr
BUG: unable to handle kernel NULL pointer dereference in tc_bind_tclass net 10 syz, C done 61 2527d 2534d 13/29 2503d 8b142a00edcf net_sched: check cops->tcf_block in tc_bind_tclass()
INFO: rcu detected stall in netlink_sendmsg (2) 1 syz, C done 11 2527d 2533d 13/29 2503d d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
KMSAN: uninit-value in capi_write net 7 syz, C 445 2503d 2743d 13/29 2503d fe163e534e5e isdn/capi: check message length in capi_write()
memory leak in sctp_send_reset_streams sctp 3 syz, C 7 2557d 2634d 13/29 2508d 6d5afe20397b sctp: fix memleak in sctp_send_reset_streams
general protection fault in requeue_rx_msgs net 2 syz done inconclusive 1 3000d 2999d 13/29 2508d eb7f54b90bd8 kcm: Fix use-after-free caused by clonned sockets
WARNING: suspicious RCU usage (4) bpf trace -1 syz, C done 1 2906d 2904d 13/29 2508d 865e63b04e9b tracing: Add back in rcu_irq_enter/exit_irqson() for rcuidle tracepoints
WARNING: suspicious RCU usage in trace_call_bpf bpf trace 4 syz, C done 327 2887d 2904d 13/29 2508d 865e63b04e9b tracing: Add back in rcu_irq_enter/exit_irqson() for rcuidle tracepoints
KASAN: use-after-free Read in psock_map_pop bpf 19 syz, C done 204 2854d 2897d 13/29 2508d 5607fff30363 bpf: sockmap only allow ESTABLISHED sock state
WARNING: refcount bug in nr_insert_socket 13 syz, C done 55 2570d 2595d 13/29 2508d 4638faac0327 netrom: hold sock when setting skb->destructor
KASAN: slab-out-of-bounds Read in sock_hash_ctx_update_elem bpf 17 syz, C done 5 2939d 2939d 13/29 2508d b845c898b2f1 bpf, sockmap: fix sock_hash_alloc and reject zero-sized keys
general protection fault in smap_list_hash_remove bpf 2 syz, C done 52 2946d 2965d 13/29 2508d 99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
WARNING in cbs_dequeue_soft net -1 syz, C done 13 2527d 2534d 12/29 2526d 1c6c09a0ae62 net/sched: cbs: Set default link speed to 10 Mbps in cbs_set_port_rate
KMSAN: uninit-value in batadv_iv_send_outstanding_bat_ogm_packet batman 7 syz, C 9 2552d 2552d 12/29 2526d a15d56a60760 batman-adv: Only read OGM tvlv_len after buffer len check
possible deadlock in usb_deregister_dev usb 4 syz, C 82 2561d 2568d 12/29 2536d c468a8aa790e usb: iowarrior: fix deadlock on disconnect
general protection fault in packet_lookup_frame net 2 syz, C done 7 2560d 2560d 12/29 2536d 32d3182cd2cd net/packet: fix race in tpacket_snd()
WARNING in bpf_jit_free bpf -1 syz, C done 21697 2536d 2953d 12/29 2536d c751798aa224 bpf: fix use after free in prog symbol exposure
memory leak in ip6_mc_add_src net 3 syz, C 1 2546d 2546d 12/29 2536d a84d01647989 mld: fix memory leak in mld_del_delrec()
WARNING in bpf_prog_kallsyms_add bpf -1 syz done done 2 2578d 2781d 12/29 2536d c751798aa224 bpf: fix use after free in prog symbol exposure
WARNING in __iforce_usb_xmit/usb_submit_urb input usb -1 syz, C 3 2564d 2568d 12/29 2536d 849f5ae3a513 Input: iforce - add sanity checks
WARNING in kbtab_open/usb_submit_urb usb -1 syz, C 5 2563d 2581d 12/29 2536d c88090dfc842 Input: kbtab - sanity check for endpoint type
BUG: unable to handle kernel paging request in bpf_prog_kallsyms_find bpf 8 syz done inconclusive 3 2753d 2828d 12/29 2536d c751798aa224 bpf: fix use after free in prog symbol exposure
KASAN: use-after-free Read in rxrpc_queue_local afs net 19 syz, C done 1 2561d 2561d 12/29 2536d 06d9532fa6b3 rxrpc: Fix read-after-free in rxrpc_queue_local()
BUG: unable to handle kernel paging request in bpf_prog_kallsyms_add bpf 8 syz error 234 2537d 2897d 12/29 2536d c751798aa224 bpf: fix use after free in prog symbol exposure
general protection fault in tls_write_space net 2 syz 33 2554d 2564d 12/29 2536d 57c722e932cf net/tls: swap sk_write_space on close
WARNING in usbtouch_open input usb -1 syz, C 768 2561d 2575d 12/29 2536d b55d996f057b Input: usbtouchscreen - initialize PM mutex before using it
KMSAN: uninit-value in rtm_new_nexthop net 7 syz, C 8 2552d 2552d 12/29 2536d d00ee64e1dcf netlink: Fix nlmsg_parse as a wrapper for strict message parsing
KASAN: slab-out-of-bounds Read in bpf_int_jit_compile kernel 17 syz, C done 1 2583d 2580d 12/29 2536d 7c2e988f400e bpf: fix x64 JIT code generation for jmp to 1st insn
KASAN: use-after-free Read in bpf_prog_kallsyms_del bpf 19 syz done inconclusive 3 2784d 2862d 12/29 2536d c751798aa224 bpf: fix use after free in prog symbol exposure
kernel BUG at net/rxrpc/local_object.c:LINE! net afs -1 syz, C done 11167 2539d 2606d 12/29 2536d 730c5fd42c1e rxrpc: Fix local endpoint refcounting
KASAN: null-ptr-deref Write in rxrpc_unuse_local 12 syz, C done 4422 2560d 2564d 12/29 2536d 68553f1a6f74 rxrpc: Fix local refcounting
KMSAN: uninit-value in batadv_netlink_dump_hardif batman 7 syz, C 58 2547d 2582d 12/29 2536d 3ee1bb7aae97 batman-adv: fix uninit-value in batadv_netlink_get_ifindex()
WARNING in bpf_prog_kallsyms_find bpf -1 syz, C error 5632 2536d 2657d 12/29 2536d c751798aa224 bpf: fix use after free in prog symbol exposure
KASAN: slab-out-of-bounds Read in do_jit kernel 17 syz, C done 16 2536d 2581d 12/29 2536d 7c2e988f400e bpf: fix x64 JIT code generation for jmp to 1st insn
KASAN: use-after-free Read in ld_usb_release usb 19 syz, C 14 2555d 2564d 12/29 2536d 303911cfc5b9 USB: core: Fix races in character device registration and deregistraion
KMSAN: uninit-value in rtm_dump_nexthop net 7 syz, C 6 2546d 2562d 12/29 2536d d00ee64e1dcf netlink: Fix nlmsg_parse as a wrapper for strict message parsing
WARNING in is_bpf_text_address bpf -1 syz, C done 104 2546d 2613d 12/29 2536d c751798aa224 bpf: fix use after free in prog symbol exposure
KASAN: slab-out-of-bounds Read in usbnet_generic_cdc_bind net usb 17 syz, C 2 2559d 2561d 12/29 2536d 54364278fb3c USB: CDC: fix sanity checks in CDC union parser
WARNING in __blkdev_put (2) fs -1 syz 3082 2561d 2568d 12/29 2536d e91455bad5cf bdev: Fixup error handling in blkdev_get()
KASAN: use-after-free Read in device_release_driver_internal usb 19 syz, C 5 2557d 2581d 12/29 2536d c52873e5a1ef usb: cdc-acm: make sure a refcount is taken early enough
KASAN: use-after-free Read in bpf_prog_kallsyms_add bpf 19 syz error inconclusive 120 2663d 2897d 12/29 2536d c751798aa224 bpf: fix use after free in prog symbol exposure
WARNING in wdm_write/usb_submit_urb usb -1 syz, C 15 2540d 2554d 12/29 2536d 1426bd2c9f7e USB: cdc-wdm: fix race between write and disconnect due to flag abuse
BUG: corrupted list in rxrpc_local_processor net afs 8 syz, C done 1679 2556d 2564d 12/29 2536d b00df840fb40 rxrpc: Fix local endpoint replacement
BUG: unable to handle kernel paging request in hrtimer_interrupt kernel 8 syz done 2 2578d 2615d 12/29 2546d 95fa145479fb bpf: sockmap/tls, close can race with map free
WARNING in smc_unhash_sk (2) -1 syz, C done 1047 2546d 2682d 12/29 2546d cd2063604ea6 net/smc: avoid fallback in case of non-blocking connect
general protection fault in rcu_core kernel 2 syz done 1 2595d 2594d 12/29 2546d 95fa145479fb bpf: sockmap/tls, close can race with map free
general protection fault in mm_update_next_owner kernel 2 syz done done 1 2626d 2626d 12/29 2546d 95fa145479fb bpf: sockmap/tls, close can race with map free
KMSAN: kernel-usb-infoleak in pcan_usb_pro_send_req usb 9 syz, C 16 2549d 2574d 12/29 2546d 30a8beeb3042 can: peak_usb: pcan_usb_fd: Fix info-leaks to USB devices
KASAN: use-after-free Write in validate_chain kernel 22 syz done 3 2603d 2613d 12/29 2546d 95fa145479fb bpf: sockmap/tls, close can race with map free
WARNING: held lock freed! (2) hams -1 syz, C done 1 2599d 2596d 12/29 2546d 4638faac0327 netrom: hold sock when setting skb->destructor
general protection fault in tls_trim_both_msgs net 2 syz, C done 36 2568d 2579d 12/29 2546d 5d92e631b8be net/tls: partially revert fix transition through disconnect with close
KASAN: use-after-free Read in psi_task_change kernel 19 syz done 1 2579d 2578d 12/29 2546d 95fa145479fb bpf: sockmap/tls, close can race with map free
KASAN: slab-out-of-bounds Read in class_equal 17 syz done 45 2567d 2640d 12/29 2546d 95fa145479fb bpf: sockmap/tls, close can race with map free
KASAN: slab-out-of-bounds Write in check_noncircular kernel 21 syz done 1 2586d 2585d 12/29 2546d 95fa145479fb bpf: sockmap/tls, close can race with map free
WARNING in mark_lock kernel -1 syz done 2 2555d 2610d 12/29 2546d 95fa145479fb bpf: sockmap/tls, close can race with map free
general protection fault in holtek_kbd_input_event input 2 syz, C 67 2567d 2579d 12/29 2546d 01ec0a5f19c8 HID: holtek: test for sanity of intfdata
KASAN: use-after-free Read in release_sock hams 19 syz, C done 10 2569d 2578d 12/29 2546d 4638faac0327 netrom: hold sock when setting skb->destructor
KASAN: slab-out-of-bounds Write in validate_chain hardening mm 21 syz done 6 2598d 2613d 12/29 2546d 95fa145479fb bpf: sockmap/tls, close can race with map free
general protection fault in tcf_ife_init 2 syz, C done 72 2568d 2582d 12/29 2546d c8ec4632c6ac ife: error out when nla attributes are empty
BUG: unable to handle kernel paging request in __do_softirq bpf 8 syz done done 1 2616d 2615d 12/29 2546d 95fa145479fb bpf: sockmap/tls, close can race with map free
kernel panic: stack is corrupted in validate_chain kernel 2 syz done 1 2609d 2609d 12/29 2546d 95fa145479fb bpf: sockmap/tls, close can race with map free
KASAN: slab-out-of-bounds Read in corrupted (2) hardening mm 17 syz done 3 2578d 2628d 12/29 2546d 95fa145479fb bpf: sockmap/tls, close can race with map free
BUG: unable to handle kernel paging request in tls_prots net bpf 8 syz done 1 2608d 2608d 12/29 2546d 95fa145479fb bpf: sockmap/tls, close can race with map free
kernel panic: corrupted stack end in dput fs 2 syz done 1 2603d 2603d 12/29 2546d 95fa145479fb bpf: sockmap/tls, close can race with map free
general protection fault in tls_sk_proto_close 2 syz done 260 2546d 2578d 12/29 2546d 5d92e631b8be net/tls: partially revert fix transition through disconnect with close
WARNING in debug_check_no_obj_freed -1 syz, C done 47 2546d 2614d 12/29 2546d f9cedf1a9b1c net/smc: do not schedule tx_work in SMC_CLOSED state
BUG: unable to handle kernel paging request in cpuacct_account_field kernel 8 syz done done 1 2614d 2613d 12/29 2546d 95fa145479fb bpf: sockmap/tls, close can race with map free
memory leak in fdb_create bridge 3 syz, C done 4 2571d 2610d 12/29 2546d d7bae09fa008 net: bridge: delete local fdb on device init failure
BUG: unable to handle kernel NULL pointer dereference in corrupted (4) 10 syz done done 1 2609d 2609d 12/29 2546d 95fa145479fb bpf: sockmap/tls, close can race with map free
WARNING: held lock freed in nr_release kernel 4 syz, C done 344 2566d 2587d 12/29 2546d 4638faac0327 netrom: hold sock when setting skb->destructor
KASAN: use-after-free Read in corrupted (3) mm 19 syz done 1 2608d 2608d 12/29 2546d 95fa145479fb bpf: sockmap/tls, close can race with map free
WARNING: ODEBUG bug in __sk_destruct smc -1 syz, C 2855 2566d 3031d 12/29 2546d f9cedf1a9b1c net/smc: do not schedule tx_work in SMC_CLOSED state
WARNING in cgroup_rstat_updated cgroups mm -1 syz done 1 2567d 2566d 12/29 2546d 95fa145479fb bpf: sockmap/tls, close can race with map free
general protection fault in rb_erase (2) kernel 2 syz done 4 2575d 2782d 12/29 2546d 95fa145479fb bpf: sockmap/tls, close can race with map free
KASAN: slab-out-of-bounds Read in usage_accumulate kernel 17 syz done 3 2609d 2628d 12/29 2546d 95fa145479fb bpf: sockmap/tls, close can race with map free
KASAN: use-after-free Read in nr_release hams 19 syz, C done 25 2547d 2626d 12/29 2546d 4638faac0327 netrom: hold sock when setting skb->destructor
WARNING: refcount bug in nr_rx_frame kernel 13 syz, C done 15 2570d 2586d 12/29 2546d 4638faac0327 netrom: hold sock when setting skb->destructor
KASAN: use-after-free Read in hiddev_release input usb 19 syz, C 11 2557d 2572d 12/29 2546d 9c09b214f30e HID: hiddev: avoid opening a disconnected device 6d4472d7bec3 HID: hiddev: do cleanup in failure of opening a device
KASAN: use-after-free Read in nr_insert_socket hams 19 syz, C done 22 2570d 2586d 12/29 2546d 4638faac0327 netrom: hold sock when setting skb->destructor
BUG: unable to handle kernel paging request in bpf_prog_ADDR kernel 8 syz, C done 13 2569d 2585d 12/29 2546d 06a22d897d82 bpf: fix access to skb_shared_info->gso_segs
KASAN: use-after-free Read in nr_rx_frame (2) hams 19 syz, C done 3 2573d 2581d 12/29 2546d 4638faac0327 netrom: hold sock when setting skb->destructor
memory leak in create_ctx net 3 syz 1 2626d 2626d 12/29 2546d 95fa145479fb bpf: sockmap/tls, close can race with map free
WARNING in xt_compat_add_offset netfilter -1 syz, C done 18 2568d 2732d 12/29 2546d 3b48300d5cc7 netfilter: ebtables: also count base chain policies
KMSAN: kernel-usb-infoleak in pcan_usb_pro_init usb 9 syz, C 13 2550d 2574d 12/29 2546d ead16e53c2f0 can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices
kernel panic: corrupted stack end in corrupted 2 syz done 17 2567d 2614d 12/29 2546d 95fa145479fb bpf: sockmap/tls, close can race with map free
WARNING in gpio_to_desc usb gpio -1 syz, C 3 2564d 2594d 12/29 2546d c3953a3c2d31 NFC: nfcmrvl: fix gpio-handling regression
general protection fault in rb_next (3) kernel 2 syz done done 1 2619d 2617d 12/29 2546d 95fa145479fb bpf: sockmap/tls, close can race with map free
general protection fault in tls_setsockopt net 2 syz done 7 2574d 2588d 12/29 2546d 5d92e631b8be net/tls: partially revert fix transition through disconnect with close
KMSAN: uninit-value in read_eprom_word usb 7 syz, C 31 2548d 2574d 12/29 2546d 224c04973db1 net: usb: pegasus: fix improper read if get_registers() fail
general protection fault in finish_task_switch (2) kernel 2 syz, C done 1538 2883d 2928d 12/29 2550d 26b471c7e2f7 KVM: nVMX: Fix bad cleanup on error of get/set nested state IOCTLs
possible deadlock in xsk_notifier net bpf 4 syz, C done 495 2585d 2596d 12/29 2560d 5464c3a0e9a0 xdp: fix potential deadlock on socket mutex
KASAN: use-after-free Write in _free_event perf 22 syz, C 112 2723d 2960d 12/29 2560d 1cf8dfe8a661 perf/core: Fix race between close() and fork()
WARNING in __mark_chain_precision -1 syz, C done 105 2560d 2596d 12/29 2560d b3b50f05dc50 bpf: fix precision bit propagation for BPF_ST instructions
memory leak in nfs_get_client nfs 3 syz, C 12 2596d 2623d 12/29 2560d 9f7761cf0409 NFS: Cleanup if nfs_match_client is interrupted
memory leak in policydb_read kernel 3 syz, C done 1 2583d 2581d 12/29 2560d 45385237f65a selinux: fix memory leak in policydb_init()
WARNING in binder_transaction_buffer_release kernel -1 syz error 38 2602d 2645d 12/29 2560d 49ed96943a8e binder: prevent transactions to context manager from its own process.
general protection fault in snd_usb_pipe_sanity_check usb sound 2 syz, C 72 2561d 2575d 12/29 2560d 5d78e1c2b7f4 ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
INFO: rcu detected stall in snd_seq_write sound 1 syz error 18 2580d 2911d 12/29 2560d ede34f397ddb ALSA: seq: Break too long mutex context in the write loop
KASAN: stack-out-of-bounds Read in hfcsusb_probe usb net 17 syz, C 634 2575d 2681d 12/29 2560d f384e62a82ba ISDN: hfcsusb: checking idx of ep configuration
BUG: unable to handle kernel NULL pointer dereference in hci_uart_set_flow_control bluetooth 10 syz, C done 7 2705d 2705d 12/29 2560d b36a1552d731 Bluetooth: hci_uart: check for missing tty operations
kernel BUG at drivers/usb/wusbcore/wusbhc.c:LINE! usb -1 syz, C 1 2581d 2581d 12/29 2560d f90bf1ece48a usb: wusbcore: fix unbalanced get/put cluster_id
memory leak in sctp_get_port_local sctp 3 syz, C 28 2570d 2637d 12/29 2568d 9b6c08878e23 sctp: not bind the socket in sctp_connect
WARNING: Support for this device (Terratec Grabster AV400) is experimental. usb -1 syz, C 371 2575d 2665d 12/29 2568d 1753c7c4367a media: pvrusb2: use a different format for warnings
general protection fault in send_hsr_supervision_frame net 2 syz, C done 1395 2589d 2596d 12/29 2568d 311633b60406 hsr: switch ->dellink() to ->ndo_uninit()
memory leak in ip_mc_add_src (2) net 3 syz, C 7 2579d 2607d 12/29 2568d e5b1c6c6277d igmp: fix memory leak in igmpv3_del_delrec()
general protection fault in btf_array_resolve bpf 2 syz, C error 109 2593d 2615d 12/29 2568d e4f07120210a bpf: fix NULL deref in btf_type_is_resolve_source_only
general protection fault in sctp_sched_prio_sched sctp 2 syz, C done 3 2605d 2619d 12/29 2568d 4d1415811e49 sctp: fix error handling on stream scheduler initialization
general protection fault in ip6_datagram_dst_update net 2 syz, C done 12 2592d 2594d 12/29 2568d 8975a3abc303 ipv6: fix potential crash in ip6_datagram_dst_update()
KMSAN: uninit-value in ax88772_bind usb 7 syz, C 80 2570d 2631d 12/29 2568d 78226f6eaac8 net: usb: asix: init MAC address buffers
kernel BUG at drivers/android/binder_alloc.c:LINE! (4) -1 syz, C done 26 2608d 2616d 12/29 2568d bb4a2e48d510 binder: return errors from buffer copy functions
KASAN: use-after-free Read in cpia2_usb_disconnect usb media 19 syz, C 3 2595d 2679d 12/29 2568d eff73de2b160 media: cpia2_usb: first wake up, then free in disconnect
general protection fault in ovs_ct_exit 2 syz, C done 9888 2610d 2615d 12/29 2568d b272a0ad7301 netns: restore ops before calling ops_exit_list
memory leak in binder_transaction kernel 3 syz, C 3 2609d 2621d 12/29 2568d 1909a671dbc3 binder: fix memory leak in error path
KMSAN: uninit-value in bond_start_xmit (2) net 7 syz, C 2309 2568d 2892d 12/29 2568d 9d1bc24b52fb bonding: validate ip header before check IPPROTO_IGMP
WARNING in __flush_work (3) usb -1 syz, C 1251 2571d 2681d 12/29 2568d 11a087f484bf media: uvcvideo: Fix access to uninitialized fields on probe error
memory leak in pfkey_xfrm_policy2msg_prep net 3 syz, C 4 2609d 2640d 12/29 2568d 7c80eb1c7e2b af_key: fix leaks in key_pol_get_resp and dump_sp.
KASAN: use-after-free Read in dvb_usb_device_exit usb 19 syz, C 825 2568d 2683d 12/29 2568d 6cf97230cd5f media: dvb: usb: fix use after free in dvb_usb_device_exit
INFO: trying to register non-static key in rtl_c2hcmd_launcher usb wireless -1 syz, C 48950 2575d 2683d 12/29 2568d 6c0ed66f1a5b rtlwifi: rtl8192cu: fix error handle when usb probe failed
KASAN: use-after-free Read in kfree_skb_list net 19 syz, C done 383 2614d 2633d 12/29 2568d b7034146756b net: fix use-after-free in kfree_skb_list
KASAN: null-ptr-deref Read in zr364xx_vidioc_querycap usb media 11 syz, C 76 2575d 2666d 12/29 2568d 5d2e73a5f80a media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap
memory leak in __ip6_append_data net 3 syz, C 10 2611d 2637d 12/29 2568d dc93f46bc4e0 inet: frags: fix use-after-free read in inet_frag_destroy_rcu
WARNING: ath10k USB support is incomplete, don't expect anything to work! usb -1 syz, C 347 2576d 2656d 12/29 2568d 265df32eae58 ath10k: Change the warning message string
KASAN: use-after-free Write in xfrm_hash_rebuild net 22 syz done 8 2601d 2649d 12/29 2568d fd709721352d xfrm: policy: fix bydst hlist corruption on hash rebuild
memory leak in bcsp_recv bluetooth 3 syz, C 3 2613d 2640d 12/29 2568d 4ce9146e0370 Bluetooth: hci_bcsp: Fix memory leak in rx_skb
memory leak in start_sync_thread lvs 3 syz, C 7 2605d 2637d 12/29 2568d 5db7c8b9f9fc ipvs: fix tinfo memory leak in start_sync_thread
KASAN: use-after-free Read in v4l2_release usb media 19 syz, C 275 2576d 2680d 12/29 2568d c666355e60dd media: radio-raremono: change devm_k*alloc to k*alloc
KASAN: use-after-free Read in brnf_exit_net bridge netfilter 19 syz done 3 2612d 2615d 12/29 2568d 7e6daf50e1f4 netfilter: bridge: prevent UAF in brnf_exit_net()
WARNING in static_key_slow_try_dec kernel -1 syz, C done 58 2591d 2595d 12/29 2568d d44e3fa5d7e6 ipv6: fix static key imbalance in fl_create()
WARNING: suspicious RCU usage in in_dev_dump_addr net 4 syz, C done 107 2629d 2631d 12/29 2568d d3e6e285fff3 net: ipv4: fix rcu lockdep splat due to wrong annotation
memory leak in nf_hook_entries_grow lvs 3 syz, C 99 2595d 2631d 12/29 2568d cf47a0b882a4 ipvs: defer hook registration to avoid leaks
general protection fault in tcp_v6_send_reset net 2 syz, C done 353 2623d 2628d 12/29 2568d 392096736a06 ipv6: tcp: fix potential NULL deref in tcp_v6_send_reset()
KASAN: use-after-free Read in inet_frag_destroy_rcu net 19 syz, C done 61 2635d 2638d 12/29 2568d dc93f46bc4e0 inet: frags: fix use-after-free read in inet_frag_destroy_rcu
general protection fault in btf_struct_resolve bpf 2 syz, C error 49 2593d 2615d 12/29 2568d e4f07120210a bpf: fix NULL deref in btf_type_is_resolve_source_only
KASAN: use-after-free Read in unregister_shrinker mm 19 syz done 3 2624d 2629d 12/29 2568d 689d7ba4895b nfsd: fix cleanup of nfsd_reply_cache_init on failure
general protection fault in rxrpc_connect_call afs net 2 syz, C done 15 2617d 2762d 12/29 2568d e835ada07091 rxrpc: Fix send on a connected, but unbound socket
WARNING: Detected a wedged cx25840 chip; the device will not work. usb -1 syz, C 62 2576d 2665d 12/29 2568d 1753c7c4367a media: pvrusb2: use a different format for warnings
WARNING: suspicious RCU usage in fib_dump_info_fnhe net 4 syz, C done 7 2608d 2608d 12/29 2568d 3b525691529b ipv6: fix suspicious RCU usage in rt6_dump_route()
memory leak in hsr_create_self_node net 3 syz, C 5 2607d 2638d 12/29 2568d b9a1e627405d hsr: implement dellink to clean up resources
general protection fault in call_fib6_multipath_entry_notifiers net 2 syz, C done 94 2610d 2615d 12/29 2568d 9eee3b4913d7 ipv6: Error when route does not have any valid nexthops
WARNING in snd_usb_motu_microbookii_communicate/usb_submit_urb usb -1 syz, C 3 2585d 2623d 12/29 2568d 801ebf1043ae ALSA: usb-audio: Sanity checks for each pipe and EP types
memory leak in nr_rx_frame hams 3 syz, C 5 2574d 2638d 12/29 2568d c8c8218ec5af netrom: fix a memory leak in nr_rx_frame()
KASAN: use-after-free Read in p54u_load_firmware_cb wireless usb 19 syz 40 2576d 2659d 12/29 2568d 6e41e2257f10 p54usb: Fix race between disconnect and firmware loading
memory leak in batadv_tvlv_handler_register batman 3 syz, C 313 2593d 2644d 12/29 2568d 17f78dd1bd62 batman-adv: fix for leaked TVLV handler.
general protection fault in get_task_pid kernel 2 syz, C done 24 2601d 2603d 12/29 2575d 28dd29c06d0d fork: return proper negative error code
general protection fault in do_move_mount (2) fs 2 syz done 7 2608d 2616d 12/29 2575d 570d7a98e7d6 vfs: move_mount: reject moving kernel internal mounts
memory leak in packet_set_ring net 3 syz, C 2 2607d 2612d 12/29 2575d 55655e3d1197 net/packet: fix memory leak in packet_set_ring()
possible deadlock in io_submit_one fs 4 syz, C done 1779 2579d 2750d 12/29 2575d cbcfa130a911 fs/userfaultfd.c: disable irqs for fault_pending and event locks
KMSAN: uninit-value in tipc_nl_compat_bearer_disable tipc 7 syz, C 19 2602d 2615d 12/29 2575d 4f07b80c9733 tipc: check msg->req data len in tipc_nl_compat_bearer_disable
memory leak in sctp_v6_create_accept_sk sctp 3 syz, C 1 2632d 2632d 12/29 2575d 25bff6d5478b sctp: change to hold sk after auth shkey is created successfully
memory leak in sctp_v4_create_accept_sk sctp 3 syz, C 1 2612d 2610d 12/29 2575d 25bff6d5478b sctp: change to hold sk after auth shkey is created successfully
possible deadlock in userfaultfd_release 4 syz, C done 137 2607d 2850d 12/29 2575d cbcfa130a911 fs/userfaultfd.c: disable irqs for fault_pending and event locks
memory leak in mpihelp_mul_karatsuba_case crypto 3 syz, C 2 2610d 2610d 12/29 2575d c8ea9fce2baf lib/mpi: Fix karactx leak in mpi_powm
KASAN: global-out-of-bounds Read in qmi_wwan_probe usb 17 syz, C 2 2598d 2610d 12/29 2575d 904d88d743b0 qmi_wwan: Fix out-of-bounds read
KASAN: null-ptr-deref Write in submit_audio_out_urb (2) usb 12 syz, C 3423 2575d 2607d 12/29 2575d 3450121997ce ALSA: line6: Fix write on zero-sized buffer
WARNING in kvm_set_tsc_khz kvm-x86 -1 syz, C 5 2930d 2927d 12/29 2575d 3f16a5c31839 KVM: x86: degrade WARN to pr_warn_ratelimited
WARNING in notify_change fs -1 syz, C 566 2662d 3051d 12/29 2580d f69e749a4935 Abort file_remove_privs() for non-reg. files
WARNING in cgroup_exit cgroups -1 syz, C done 64 2655d 2657d 12/29 2580d f2b31bb59824 cgroup: never call do_group_exit() with task->frozen bit set
WARNING: syz-executor still has locks held! -1 syz, C done 233 2811d 2822d 12/29 2580d a72173ecfc67 Revert "exec: make de_thread() freezable"
general protection fault in inet_accept net 2 syz, C 131 2796d 2958d 12/29 2593d 07603b230895 net/smc: propagate file from SMC to TCP socket
memory leak in sctp_process_init sctp 3 syz, C 10 2618d 2638d 12/29 2594d 0a8dd9f67cd0 Fix memory leak in sctp_process_init ce950f1050ce sctp: Free cookie before we memdup a new one
memory leak in __memcg_init_list_lru_node mm 3 syz, C 3 2624d 2638d 12/29 2594d 3510955b3271 mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node
KMSAN: uninit-value in tcp_create_openreq_child net 7 syz, C 4000 2594d 2615d 12/29 2594d 85f9aa7565bd inet: clear num_timeout reqsk_alloc()
WARNING in fanotify_handle_event fs -1 syz, C done 5 2617d 2616d 12/29 2594d c285a2f01d69 fanotify: update connector fsid cache on add mark
KASAN: use-after-free Read in pneigh_get_next net 19 syz done 2 2619d 2619d 12/29 2594d f3e92cb8e2eb neigh: fix use-after-free read in pneigh_get_next
memory leak in raw_sendmsg can 3 syz, C 2 2619d 2631d 12/29 2594d fd704bd5ee74 can: purge socket error queue on sock destruct
KASAN: slab-out-of-bounds Read in css_task_iter_advance cgroups 17 syz, C done 19 2624d 2630d 12/29 2594d c596687a008b cgroup: Fix css_task_iter_advance_css_set() cset skip condition
memory leak in tipc_buf_acquire tipc 3 syz, C 15 2617d 2641d 12/29 2594d 5cf02612b33f tipc: purge deferredq list for each grp member in tipc_group_delete
general protection fault in __smc_diag_dump 2 syz done 309 2770d 2783d 12/29 2594d b03faa1fafc8 net/smc: postpone release of clcsock
memory leak in inet6_create net 3 syz, C 2 2625d 2628d 12/29 2594d 522924b58308 net: correct udp zerocopy refcnt also when zerocopy only on append
memory leak in kobject_set_name_vargs kernel 3 syz, C 12 2602d 2636d 12/29 2594d 4f488fbca2a8 cfg80211: fix memory leak of wiphy device name
KASAN: use-after-free Read in sprintf net 19 syz done 2 2619d 2619d 12/29 2594d f3e92cb8e2eb neigh: fix use-after-free read in pneigh_get_next
BUG: Dentry still in use [unmount of sysfs sysfs] kernfs -1 syz, C done 6 2618d 2619d 12/29 2594d 1b0b9cc8d379 vfs: fsmount: add missing mntget()
general protection fault in dst_dev_put (2) net 2 syz, C done 442 2615d 2805d 12/29 2594d c3bcde026684 tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb
BUG: Dentry still in use [unmount of hugetlbfs hugetlbfs] fs -1 syz, C done 3 2616d 2616d 12/29 2594d 1b0b9cc8d379 vfs: fsmount: add missing mntget()
KMSAN: kernel-infoleak in copy_siginfo_to_user (2) kernel 9 syz, C 15 2623d 2653d 12/29 2594d f6e2aa91a46d signal/ptrace: Don't leak unitialized kernel memory with PTRACE_PEEK_SIGINFO
WARNING in blk_mq_sched_free_requests block -1 syz, C done 4 2621d 2623d 12/29 2594d c326f846ebc2 blk-mq: remove WARN_ON(!q->elevator) from blk_mq_sched_free_requests
KASAN: use-after-free Read in rt_cache_valid net 19 syz done 5 2626d 2742d 12/29 2594d c3bcde026684 tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb
memory leak in new_inode_pseudo smc 3 syz, C 136 2594d 2643d 12/29 2594d 355e8d26f719 io_uring: fix memory leak of UNIX domain socket inode
memory leak in lapb_register x25 3 syz, C 16 2617d 2644d 12/29 2594d 6be8e297f9bc lapb: fixed leak of control-blocks.
KASAN: use-after-free Read in blk_mq_free_rqs block 19 syz, C error 3481 2623d 2628d 12/29 2601d c3e2219216c9 block: free sched's request pool in blk_cleanup_queue
possible deadlock in aio_poll fs 4 syz, C 5041 2753d 2897d 12/29 2605d ae62c16e105a userfaultfd: disable irqs when taking the waitqueue lock
KASAN: slab-out-of-bounds Read in rhashtable_walk_enter 17 syz, C done 48 2643d 2647d 12/29 2610d 526f5b851a96 tipc: fix modprobe tipc failed after switch order of device registration
BUG: spinlock bad magic in rhashtable_walk_enter tipc 4 syz, C done 8 2643d 2647d 12/29 2610d 526f5b851a96 tipc: fix modprobe tipc failed after switch order of device registration
WARNING: proc registration bug in snd_info_card_register usb sound -1 syz, C 453 2639d 2683d 12/29 2610d 0b074ab7fc0d ALSA: line6: Assure canceling delayed work at disconnection
KASAN: slab-out-of-bounds Write in default_read_copy_kernel sound 21 syz, C done 3 2730d 2806d 12/29 2610d ca0214ee2802 ALSA: pcm: Fix possible OOB access in PCM oss plugins
general protection fault in sctp_sched_dequeue_common (2) sctp 2 syz, C done 3 2712d 2712d 12/29 2611d 2e990dfd1397 sctp: remove sched init from sctp_stream_init
WARNING in ovl_instantiate overlayfs -1 syz done 75 2668d 2836d 12/29 2611d 146d62e5a586 ovl: detect overlapping layers acf3062a7e1c ovl: relax WARN_ON() for overlapping layers use case
general protection fault in sisusb_probe usb 2 syz, C 3 2653d 2656d 12/29 2614d 9a5729f68d3a USB: sisusbvga: fix oops in error path of sisusb_probe
INFO: task hung in __get_super fs 1 syz, C 80 2614d 3059d 12/29 2614d 33ec3e53e7b1 loop: Don't change loop device under exclusive opener
KASAN: slab-out-of-bounds Write in usb_get_bos_descriptor usb 21 syz 3 2642d 2655d 12/29 2614d a03ff5446081 USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor
KASAN: invalid-free in disconnect_rio usb 24 syz, C 180 2638d 2683d 12/29 2614d 3864d33943b4 USB: rio500: refuse more than one device at a time
general protection fault in smsusb_init_device media usb 2 syz, C 23 2638d 2677d 12/29 2614d 31e0456de5be media: usb: siano: Fix general protection fault in smsusb
memory leak in packet_setsockopt net 3 syz, C 10 2627d 2644d 12/29 2614d afa0925c6fcc packet: unconditionally free po->rollover
KASAN: use-after-free Read in napi_gro_frags 19 syz, C done 16 2634d 2636d 12/29 2616d a4270d6795b0 net-gro: fix use-after-free read in napi_gro_frags()
memory leak in ip_mc_add_src net 3 syz, C 14 2620d 2644d 12/29 2616d 3580d04aa674 ipv4/igmp: fix another memory leak in igmpv3_del_delrec()
memory leak in process_preds trace 3 syz, C 1 2638d 2638d 12/29 2616d dfb4a6f2191a tracing: Avoid memory leak in predicate_parse()
memory leak in llc_ui_create net 3 syz, C 4 2626d 2638d 12/29 2616d 8fb44d60d414 llc: fix skb leak in llc_build_and_send_ui_pkt()
memory leak in inet_create net 3 syz, C 2 2630d 2644d 12/29 2616d 100f6d8e0990 net: correct zerocopy refcnt with udp MSG_MORE
INFO: trying to register non-static key in rhashtable_walk_enter tipc -1 syz, C 16 2643d 2647d 12/29 2616d 526f5b851a96 tipc: fix modprobe tipc failed after switch order of device registration
KASAN: use-after-free Read in __dev_map_entry_free bpf net 19 syz, C 473 2698d 2979d 12/29 2616d 2baae3545327 bpf: devmap: fix use-after-free Read in __dev_map_entry_free
KASAN: null-ptr-deref Write in submit_audio_out_urb sound usb 12 syz, C 185 2623d 2638d 12/29 2616d 0b074ab7fc0d ALSA: line6: Assure canceling delayed work at disconnection
INFO: task hung in usb_kill_urb usb 1 syz, C 1515 2678d 2683d 12/29 2620d 50896c410354 USB: dummy-hcd: Fix failure to give back unlinked URBs USB: dummy-hcd: Fix failure to give back unlinked URBs
KASAN: use-after-free Read in tipc_sk_filter_rcv tipc 19 syz, C done 3439 2699d 2706d 12/29 2620d 77d5ad4048fb tipc: fix use-after-free in tipc_sk_filter_rcv
BUG: assuming atomic context at net/core/flow_dissector.c:LINE net -1 syz 19 2650d 2655d 12/29 2620d b1c17a9a3538 flow_dissector: disable preemption around BPF calls
general protection fault in load_elf_binary fs mm 2 syz, C done 15 2693d 2697d 12/29 2620d cc338010a233 fs/binfmt_elf.c: free PT_INTERP filename ASAP
INFO: task hung in snd_seq_kernel_client_ctl sound 1 syz, C done 554 2683d 2684d 12/29 2620d f0654ba94e33 Revert "ALSA: seq: Protect in-kernel ioctl calls with mutex"
KASAN: use-after-free Read in snd_timer_process_callbacks sound 19 syz, C done 4 2685d 2686d 12/29 2620d df55531b8b0e ALSA: timer: Revert active callback sync check at close
BUG: using __this_cpu_read() in preemptible code in ip6_finish_output 4 syz, C done 18807 2687d 2693d 12/29 2620d 28b05b928868 net: use correct this_cpu primitive in dev_recursion_level
WARNING: ODEBUG bug in netdev_freemem -1 syz done 1042 2620d 2785d 12/29 2620d a3c7cd0cdf11 batman-adv: mcast: fix multicast tt/tvlv worker locking
WARNING: locking bug in nfs_get_client nfs 4 syz, C done 13 2656d 2657d 12/29 2620d c260121a97a3 NFS: Fix a double unlock from nfs_match,get_client
WARNING: locking bug in copy_process mm 4 syz, C done 3 2653d 2656d 12/29 2620d c3b7112df86b fork: do not release lock that wasn't taken
KASAN: use-after-free Read in string input 19 syz, C 247 2664d 2904d 12/29 2620d c03a0fd0b609 kobject: Don't trigger kobject_uevent(KOBJ_REMOVE) twice.
KASAN: use-after-free Read in get_mem_cgroup_from_mm mm cgroups 19 syz, C done 375 2666d 2840d 12/29 2620d c3f3ce049f7d userfaultfd: use RCU to free the task struct when fork fails
KASAN: use-after-free Read in __vb2_perform_fileio 19 syz, C done 786 2657d 2848d 12/29 2620d d65842f7126a media: vb2: add waiting_in_dqbuf flag
kernel BUG at drivers/android/binder_alloc.c:LINE! (3) kernel -1 syz, C done 24 2629d 2698d 12/29 2620d a3c7cd0cdf11 batman-adv: mcast: fix multicast tt/tvlv worker locking
WARNING in batadv_mcast_mla_tt_retract batman -1 syz done 190 2651d 2785d 12/29 2620d a3c7cd0cdf11 batman-adv: mcast: fix multicast tt/tvlv worker locking
KASAN: use-after-free Write in __ext4_expand_extra_isize ext4 22 syz, C 95 2667d 3058d 12/29 2620d 7bc04c5c2cc4 ext4: fix use-after-free race with debug_want_extra_isize
general protection fault in tipc_mcast_filter_msg tipc 2 syz, C done 3889 2684d 2706d 12/29 2620d 08e046c8966a tipc: fix a null pointer deref
WARNING in port_delete sound -1 syz done 22 2743d 2958d 12/29 2620d 7c32ae35fbf9 ALSA: seq: Cover unsubscribe_port() in list_mutex feb689025fbb ALSA: seq: Protect in-kernel ioctl calls with mutex
possible deadlock in acct_pin_kill 4 syz, C done 273 2663d 2880d 12/29 2620d 9419a3191dcb acct_on(): don't mess with freeze protection
kernel BUG at arch/x86/mm/physaddr.c:LINE! (2) media -1 syz, C done 522 2620d 2830d 12/29 2620d dad7e270ba71 media: vivid: use vfree() instead of kfree() for dev->bitmap_cap
general protection fault in __handle_mm_fault net 2 syz, C error 17 2862d 2872d 12/29 2623d ff09d7ec9786 mm/memory.c: recheck page table entry with page table lock held
KMSAN: uninit-value in aa_fqlookupn_profile apparmor 7 syz, C 39 2834d 2879d 12/29 2623d 250f2da49cb8 apparmor: Fix uninitialized value in aa_split_fqname
BUG: bad usercopy in __check_heap_object (3) mm hardening -1 syz, C 287 2892d 2963d 12/29 2623d 1f4aace60b0e fs/seq_file.c: simplify seq_file iteration code and interface
general protection fault in put_fs_context fs 2 syz, C 9 2847d 2847d 12/29 2623d 8d0347f6c3a9 convert do_remount_sb() to fs_context
kernel panic: MAC Initialization failed. (3) tomoyo 2 syz, C done 799 2652d 2726d 9/29 2623d e80b18599a39 tomoyo: Add a kernel config option for fuzzing testing.
WARNING in xfrm_state_fini (2) net -1 syz, C 37510 2662d 3115d 12/29 2638d dbb2483b2a46 xfrm: clean up xfrm protocol checks
KMSAN: uninit-value in rds_connect rds 7 syz, C 952 2666d 2908d 12/29 2638d dd3ac9a68435 net/rds: Check address length before reading address family
general protection fault in __dev_printk usb 2 syz, C 300 2665d 2678d 12/29 2638d ef61eb43ada6 USB: yurex: Fix protection fault after device removal
INFO: trying to register non-static key in vmk80xx_detach staging usb -1 syz, C 1528 2638d 2683d 12/29 2638d 08b7c2f9208f staging: comedi: vmk80xx: Fix use of uninitialized semaphore
KMSAN: uninit-value in rtnl_stats_dump net 7 syz 14 2668d 2683d 12/29 2638d 69f23a09daf9 rtnetlink: fix rtnl_valid_stats_req() nlmsg_len check
BUG: unable to handle page fault for address = ADDR kernel -1 syz, C done 3 2670d 2670d 12/29 2638d baf76f0c58ae slip: make slhc_free() silently accept an error pointer
KASAN: use-after-free Read in seccomp_notify_release (2) kernel 19 syz, C done 9 2701d 2701d 12/29 2638d 7a0df7fbc145 seccomp: Make NEW_LISTENER and TSYNC flags exclusive
WARNING in compat_copy_entries (2) -1 syz done 19416 2651d 3085d 12/29 2638d 7caa56f006e9 netfilter: ebtables: CONFIG_COMPAT: drop a bogus WARN_ON
KMSAN: uninit-value in rds_bind rds 7 syz, C 6202 2666d 2908d 12/29 2638d dd3ac9a68435 net/rds: Check address length before reading address family
INFO: trying to register non-static key in ni6501_detach staging usb -1 syz, C 127 2638d 2681d 12/29 2638d 660cf4ce9d0f staging: comedi: ni_usb6501: Fix use of uninitialized mutex
KASAN: slab-out-of-bounds Read in skb_gro_receive (2) net 17 syz, C done 5 2664d 2664d 12/29 2638d 4dd2b82d5adf udp: fix GRO packet of death
KASAN: stack-out-of-bounds Write in __ip_options_echo net 21 syz done 8 2672d 2675d 12/29 2638d 20ff83f10f11 ipv4: add sanity checks in ipv4_link_failure()
general protection fault in vcpu_enter_guest (2) kvm-x86 2 syz, C done 11286 2664d 2670d 12/29 2638d b904cb8dff82 KVM: lapic: Check for in-kernel LAPIC before deferencing apic pointer
KASAN: use-after-free Read in snd_info_free_entry usb sound 19 syz, C 47 2650d 2681d 12/29 2638d 2a3f7221acdd ALSA: core: Fix card races between register and disconnect 8c2f870890fd ALSA: info: Fix racy addition/deletion of nodes
WARNING in percpu_ref_kill_and_confirm -1 syz, C done 443 2666d 2673d 12/29 2638d 35fa71a030ca io_uring: fail io_uring_register(2) on a dying io_uring instance
general protection fault in skb_queue_tail 2 syz, C done 35 2671d 2672d 12/29 2638d 032be5f19a94 rxrpc: fix race condition in rxrpc_input_packet()
WARNING in wiphy_register (4) wireless -1 syz error 3 2682d 2711d 12/29 2638d 45fcef8b727b mac80211_hwsim: calculate if_combination.max_interfaces
INFO: task hung in __io_uring_register fs 1 syz, C done 51 2674d 2682d 12/29 2638d b19062a56726 io_uring: fix possible deadlock between io_uring_{enter,register}
WARNING in __kthread_bind_mask -1 syz, C done 2929 2672d 2682d 12/29 2638d 060586324648 io_uring: park SQPOLL thread if it's percpu
KASAN: slab-out-of-bounds Read in ds_probe usb 17 syz, C 5 2640d 2678d 12/29 2638d c114944d7d67 USB: w1 ds2490: Fix bug caused by improper use of altsetting array
KMSAN: uninit-value in rtnl_stats_get net 7 syz, C 5 2675d 2683d 12/29 2638d 69f23a09daf9 rtnetlink: fix rtnl_valid_stats_req() nlmsg_len check
kernel BUG at net/core/net-sysfs.c:LINE! net -1 syz, C done 890 2667d 2703d 12/29 2638d 8ed633b9baf9 Revert "net-sysfs: Fix memory leak in netdev_register_kobject"
WARNING in io_uring_setup -1 syz, C done 3601 2662d 2682d 12/29 2638d 917257daa0fe io_uring: only test SQPOLL cpu after we've verified it
general protection fault in xfrmi_decode_session 2 syz, C done 16694 2662d 2734d 12/29 2638d 6ed69184ed9c xfrm: Reset secpath in xfrm failure
INFO: task hung in vhost_net_stop_vq net virt kvm 1 syz, C done 136 2678d 2816d 12/29 2638d 813dbeb656d6 vhost: reject zero size iova range
general protection fault in fanotify_handle_event fs 2 syz done 5 2677d 2677d 12/29 2638d b1da6a51871c fsnotify: Fix NULL ptr deref in fanotify_get_fsid()
BUG: unable to handle kernel paging request in do_mount fs 8 syz, C 194 2848d 2886d 12/29 2645d 3e1aeb00e6d1 vfs: Implement a filesystem superblock creation/configuration context
KASAN: stack-out-of-bounds Read in string usb 17 syz, C 46 2672d 2683d 12/29 2650d c01c348ecdc6 USB: core: Fix unterminated string returned by usb_string()
WARNING in usb_submit_urb (4) usb -1 syz done 46 2651d 2840d 12/29 2650d c2b71462d294 USB: core: Fix bug caused by duplicate interface PM usage counter
WARNING: locking bug in icmp_send net 4 syz done 1 2735d 2735d 12/29 2655d 9926cb5f8b0f tipc: change to check tipc_own_id to return in tipc_net_stop
KMSAN: uninit-value in ip6_compressed_string nfs net 7 syz, C 9024 2666d 2818d 12/29 2666d 7c2bd9a39845 NFS: Forbid setting AF_INET6 to "struct sockaddr_in"->sin_family.
kernel BUG at fs/inode.c:LINE! autofs -1 syz, C done 2 2800d 2799d 12/29 2683d 9bf964c9cee4 autofs: simplify parse_options() function call
KMSAN: uninit-value in tipc_nl_compat_name_table_dump (2) tipc 7 syz, C 6 2713d 2698d 12/29 2683d 2ac695d1d602 tipc: handle the err returned from cmd header function
BUG: corrupted list in rhashtable_walk_enter net 8 syz error 3 2702d 2701d 12/29 2683d b5f9bd15b885 ila: Fix rhashtable walker list corruption
possible deadlock in seq_read fs 4 syz, C 19074 2690d 3180d 12/29 2683d 73601ea5b7b1 fs/open.c: allow opening only regular files during execve()
KASAN: use-after-free Read in link_path_walk fs 19 syz done 5 2802d 2818d 12/29 2683d 1da6c4d9140c bpf: fix use after free in bpf_evict_inode
KASAN: slab-out-of-bounds Read in default_write_copy_kernel sound 17 syz, C done 366 2699d 2822d 12/29 2683d ca0214ee2802 ALSA: pcm: Fix possible OOB access in PCM oss plugins
KASAN: use-after-free Read in trailing_symlink fs 19 syz done 2 2803d 2818d 12/29 2683d 1da6c4d9140c bpf: fix use after free in bpf_evict_inode
KMSAN: kernel-infoleak in sctp_getsockopt (3) sctp 9 syz 11 2686d 2698d 12/29 2683d 09279e615c81 sctp: initialize _pad of sockaddr_in before copying to user memory
KMSAN: uninit-value in tipc_nl_compat_link_set (3) tipc 7 syz, C 15 2689d 2699d 12/29 2683d 8c63bf9ab4be tipc: check link name with right length in tipc_nl_compat_link_set
KASAN: use-after-free Read in path_lookupat fs 19 syz done 1 2818d 2818d 12/29 2683d 1da6c4d9140c bpf: fix use after free in bpf_evict_inode
KMSAN: uninit-value in tipc_nl_compat_bearer_enable (2) tipc 7 syz, C 51 2686d 2699d 12/29 2683d 6f07e5f06c87 tipc: check bearer name with right length in tipc_nl_compat_bearer_enable
KASAN: use-after-free Read in drm_gem_object_release dri 19 syz, C 480 2699d 2852d 12/29 2683d 21d2b1227323 drm/vgem: fix use-after-free when drm_gem_handle_create() fails
WARNING: lock held when returning to user space in tun_get_user net 4 syz, C done 55 2710d 2710d 12/29 2685d 9180bb4f0460 tun: add a missing rcu_read_unlock() in error path
kernel panic: corrupted stack end in wb_workfn mm 2 syz, C done 14 2785d 2785d 12/29 2685d ef82bcfa671b sctp: use memdup_user instead of vmemdup_user
general protection fault in fib6_purge_rt net 2 syz, C done 60 2687d 2804d 12/29 2685d 9926cb5f8b0f tipc: change to check tipc_own_id to return in tipc_net_stop
general protection fault in sctp_assoc_rwnd_increase sctp 2 syz, C done 28 2699d 2714d 12/29 2685d 636d25d557d1 sctp: not copy sctp_sock pd_lobby in sctp_copy_descendant
WARNING in free_loaded_vmcs (2) kvm-x86 -1 syz done 5 2903d 2924d 11/29 2693d 5bea5123cbf0 KVM: VMX: check nested state and CR4.VMXE against SMM
general protection fault in kvm_lapic_hv_timer_in_use kvm-x86 2 syz done 205 2885d 2927d 11/29 2693d 26b471c7e2f7 KVM: nVMX: Fix bad cleanup on error of get/set nested state IOCTLs
WARNING in enter_vmx_operation kvm-x86 -1 syz done 8 2896d 2908d 11/29 2693d 5bea5123cbf0 KVM: VMX: check nested state and CR4.VMXE against SMM
WARNING in lockdep_unregister_key bluetooth -1 syz, C done 214 2701d 2715d 11/29 2694d 82efcab3b9f3 workqueue: Only unregister a registered lockdep key
WARNING: bad usercopy in fanotify_read hardening mm -1 syz, C done 5 2714d 2715d 11/29 2694d b2d22b6bb33a fanotify: Allow copying of file handle to userspace
KASAN: use-after-free Read in filemap_fault mm fs 19 syz, C 277 2777d 2788d 11/29 2694d 6b4c9f446981 filemap: drop the mmap_sem for all blocking operations
general protection fault in ebitmap_destroy (2) selinux 2 syz, C done 36 2704d 2712d 11/29 2694d 6a1afffb08ce selinux: fix NULL dereference in policydb_destroy()
WARNING in __flush_work (2) dri -1 syz, C 38 2718d 2719d 11/29 2698d b30b61ff6b1d drm/vkms: Fix flush_work() without INIT_WORK().
general protection fault in sctp_sched_rr_dequeue sctp 2 syz, C done 11 2711d 2721d 11/29 2698d 2e990dfd1397 sctp: remove sched init from sctp_stream_init
possible deadlock in shmem_fallocate (2) mm 4 syz, C 1325 2720d 2928d 11/29 2698d fb4415a12632 staging: android: ashmem: Don't call fallocate() with ashmem_mutex held.
BUG: MAX_STACK_TRACE_ENTRIES too low! -1 syz, C done 1725 2698d 2724d 11/29 2698d 009bb421b6ce workqueue, lockdep: Fix an alloc_workqueue() error path
general protection fault in tc_ctl_chain net 2 syz, C 21 2733d 2741d 11/29 2698d af736bf071e8 net: sched: potential NULL dereference in tcf_block_find()
KASAN: use-after-free Read in unix_dgram_poll net 19 syz 2 2727d 2723d 11/29 2698d 84c4e1f89fef aio: simplify - and fix - fget/fput for io_submit()
general protection fault in hci_uart_write_work bluetooth 2 syz, C 84 2722d 2771d 11/29 2698d 32a7b4cbe93b Bluetooth: hci_ldisc: Initialize hci_dev before open()
KASAN: use-after-free Read in rdma_listen rdma 19 syz, C 1548 2699d 3058d 11/29 2698d 5fc01fb846bc RDMA/cma: Rollback source IP address if failing to acquire device
kernel BUG at drivers/android/binder_alloc.c:LINE! (2) kernel -1 syz, C 1257 2698d 2740d 11/29 2698d 26528be6720b binder: fix handling of misaligned binder object
INFO: trying to register non-static key in __flush_work dri -1 syz, C 5255 2719d 2787d 11/29 2698d b30b61ff6b1d drm/vkms: Fix flush_work() without INIT_WORK().
KASAN: use-after-free Read in alloc_workqueue rdma 19 syz, C 37 2711d 2723d 11/29 2698d 009bb421b6ce workqueue, lockdep: Fix an alloc_workqueue() error path
general protection fault in cgroup_reconfigure cgroups 2 syz, C 7 2934d 2962d 11/29 2698d 23bf1b6be9c2 kernfs, sysfs, cgroup, intel_rdt: Support fs_context
KASAN: use-after-free Read in x25_device_event x25 19 syz, C 548 2712d 2787d 11/29 2698d 95d6ebd53c79 net/x25: fix use-after-free in x25_device_event()
possible deadlock in __do_page_fault fs mm 4 syz, C 820 2720d 2887d 11/29 2698d fb4415a12632 staging: android: ashmem: Don't call fallocate() with ashmem_mutex held.
possible deadlock in vfs_fallocate fs 4 syz, C 3981 2920d 3031d 11/29 2698d fb4415a12632 staging: android: ashmem: Don't call fallocate() with ashmem_mutex held.
WARNING in get_q_data media -1 syz, C 649 2746d 2756d 11/29 2698d db9a01b32ca9 media: vicodec: check type in g/s_selection
KMSAN: kernel-infoleak in video_usercopy media 9 syz, C 410 2699d 2798d 11/29 2698d f45f3f753b0a media: v4l2-ctrls.c/uvc: zero v4l2_event
KMSAN: uninit-value in gue6_err (2) net 7 syz, C 2826 2698d 2720d 11/29 2698d 5355ed6388e2 fou, fou6: avoid uninit-value in gue_err() and gue6_err()
KMSAN: kernel-infoleak in move_addr_to_user (2) net 9 syz, C 8 2699d 2714d 11/29 2698d 163d1c3d6f17 l2tp: fix infoleak in l2tp_ip6_recvmsg()
general protection fault in nf_ct_gre_keymap_flush netfilter 2 syz, C 22 2757d 2763d 11/29 2698d ac088a88b5d5 netfilter: conntrack: fix error path in nf_conntrack_pernet_init()
general protection fault in xsk_diag_dump net bpf 2 syz, C 5 2716d 2721d 11/29 2698d 915905f8b1d4 xsk: fix potential crash in xsk_diag_put_umem()
BUG: unable to handle kernel paging request in h4_recv_buf bluetooth 8 syz, C 203 2722d 2783d 11/29 2698d 1dc2d785156c Bluetooth: hci_uart: Check if socket buffer is ERR_PTR in h4_recv_buf()
KMSAN: uninit-value in gue_err (2) net 7 syz, C 1617 2698d 2720d 11/29 2698d 5355ed6388e2 fou, fou6: avoid uninit-value in gue_err() and gue6_err()
KASAN: use-after-free Read in kobject_put kernel 19 syz, C 12 2727d 2858d 11/29 2698d e20a2e9c42c9 Bluetooth: Fix decrementing reference count twice in releasing socket
BUG: assuming atomic context at kernel/seccomp.c:LINE kernel -1 syz, C 709 2733d 2734d 11/29 2698d e80d02dd7630 seccomp, bpf: disable preemption before calling into bpf prog
general protection fault in delayed_uprobe_remove perf trace 2 syz, C done 2 2843d 2845d 11/29 2704d 1aed58e67a6e Uprobes: Fix kernel oops with delayed_uprobe_remove()
general protection fault in __x86_indirect_thunk_rbx 2 syz, C done 16 2839d 2839d 11/29 2705d d6367d624137 fs/locks: use properly initialized file_lock when unlocking.
KASAN: use-after-free Read in update_blocked_averages kernel 19 syz, C done 3 2821d 2835d 11/29 2705d bc6e019b6ee6 fou: Prevent unbounded recursion in GUE error handler also with UDP-Lite
kernel BUG at mm/slab.c:LINE! (3) mm -1 syz, C done 14 2705d 2832d 11/29 2705d bc6e019b6ee6 fou: Prevent unbounded recursion in GUE error handler also with UDP-Lite
WARNING in update_load_avg kernel -1 syz, C done 1 2828d 2827d 11/29 2706d bc6e019b6ee6 fou: Prevent unbounded recursion in GUE error handler also with UDP-Lite
WARNING: bad usercopy in corrupted (2) -1 syz, C done 12 2774d 2821d 11/29 2706d bc6e019b6ee6 fou: Prevent unbounded recursion in GUE error handler also with UDP-Lite
KASAN: slab-out-of-bounds Read in tick_sched_handle kernel 17 syz, C done 7 2772d 2799d 11/29 2709d bc6e019b6ee6 fou: Prevent unbounded recursion in GUE error handler also with UDP-Lite
WARNING: lock held when returning to user space in set_property_atomic dri 4 syz, C 145 2773d 2786d 11/29 2719d 4089e272ac61 gpu/drm: Fix lock held when returning to user space.
general protection fault in ax25cmp hams 2 syz, C 2294 2755d 2788d 11/29 2720d b0cf029234f9 net/rose: fix NULL ax25_cb kernel panic
KMSAN: uninit-value in batadv_interface_tx batman 7 syz, C 98 2721d 2743d 11/29 2720d 4ffcbfac6064 batman-adv: fix uninit-value in batadv_interface_tx()
kernel BUG at security/keys/keyring.c:LINE! keyrings lsm -1 syz, C 12 2772d 2872d 11/29 2720d ede0fa98a900 KEYS: always initialize keyring_index_key::desc_len
KMSAN: uninit-value in tipc_subscrb_rcv_cb tipc 7 syz, C 13 3031d 3052d 11/29 2720d a88289f4ddee tipc: fix uninit-value in in tipc_conn_rcv_sub
KASAN: use-after-free Write in __xfrm_policy_unlink net 22 syz, C 254 2723d 2951d 11/29 2720d 1548bc4e0512 xfrm: policy: delete inexact policies from inexact list on hash rebuild
KMSAN: kernel-infoleak in kvm_vcpu_write_guest_page kvm 9 syz, C 25 2811d 2840d 11/29 2720d 3a33d030daaa kvm: x86/vmx: Use kzalloc for cached_vmcs12
KASAN: use-after-free Read in task_is_descendant lsm 19 syz, C 27 2769d 2856d 11/29 2720d 9474f4e7cd71 Yama: Check for pid death before checking ancestry
INFO: rcu detected stall in netlink_sendmsg netfilter 1 syz 83 2737d 2792d 11/29 2720d 12750abad517 xfrm: policy: fix infinite loop when merging src-nodes
WARNING in __flush_work block -1 syz, C 402 2749d 2756d 11/29 2720d 2e3c18d0ada1 block: pass no-op callback to INIT_WORK().
KASAN: use-after-free Read in __smc_diag_dump smc 19 syz 34 2771d 2783d 11/29 2720d 26d92e951fe0 smc: move unhash as early as possible in smc_release()
KMSAN: uninit-value in tipc_nl_compat_doit tipc 7 syz, C 153 2735d 2887d 11/29 2720d 2753ca5d9009 tipc: fix uninit-value in tipc_nl_compat_doit
general protection fault in watchdog kernel 2 syz, C 1 2803d 2802d 11/29 2720d e2c8d550a973 netfilter: ebtables: account ebt_table_info to kmemcg
KASAN: use-after-free Read in kernel_accept smc 19 syz, C 19 2803d 2953d 11/29 2720d 78abe3d0dfad net/smc: fix TCP fallback socket release 26d92e951fe0 smc: move unhash as early as possible in smc_release()
WARNING in __skb_flow_dissect (3) net -1 syz 224 2770d 2860d 11/29 2720d 0b7959b62573 tun: publish tfile after it's fully initialized
general protection fault in fuse_dev_do_write fuse 2 syz, C 134 2748d 2875d 11/29 2720d 97e1532ef81a fuse: handle zero sized retrieve correctly
KMSAN: uninit-value in tipc_nl_compat_name_table_dump tipc 7 syz, C 51 2806d 2847d 11/29 2720d 974cb0e3e7c9 tipc: fix uninit-value in tipc_nl_compat_name_table_dump
INFO: rcu detected stall in snd_pcm_oss_read sound 1 syz, C 2 2792d 2792d 11/29 2720d e190161f96b8 ALSA: pcm: Fix tight loop of OSS capture stream
BUG: unable to handle kernel paging request in dput (2) fs 8 syz, C 4 2754d 2755d 11/29 2720d 36991ca68db9 blk-mq: protect debugfs_create_files() from failures 37ea7b630ae5 debugfs: debugfs_lookup() should return NULL if not found
KASAN: slab-out-of-bounds Read in batadv_interface_tx batman 17 syz, C 41 2746d 2785d 11/29 2720d 9114daa825fc batman-adv: Force mac header to start of data on xmit
general protection fault in kernel_accept smc 2 syz, C 280 2797d 2958d 11/29 2720d 78abe3d0dfad net/smc: fix TCP fallback socket release 26d92e951fe0 smc: move unhash as early as possible in smc_release()
KASAN: stack-out-of-bounds in do_raw_spin_lock hardening mm 17 syz, C 1 2780d 2780d 11/29 2720d 44039e00171b fou6: Prevent unbounded recursion in GUE error handler
KASAN: use-after-free Read in refcount_inc_not_zero_checked hams 19 syz 24 2724d 2783d 11/29 2720d 63346650c1a9 netrom: switch to sock timer API
KMSAN: uninit-value in tipc_nl_compat_link_set (2) tipc 7 syz, C 13 2757d 2798d 11/29 2720d edf5ff04a457 tipc: fix uninit-value in tipc_nl_compat_link_set
KMSAN: uninit-value in tipc_nl_compat_bearer_enable tipc 7 syz, C 144 2722d 2847d 11/29 2720d 0762216c0ad2 tipc: fix uninit-value in tipc_nl_compat_bearer_enable
KMSAN: uninit-value in tipc_nl_compat_link_reset_stats tipc 7 syz 16 2725d 2778d 11/29 2720d 8b66fee7f8ee tipc: fix uninit-value in tipc_nl_compat_link_reset_stats
BUG: unable to handle kernel paging request in depot_save_stack net 8 syz, C 1 2781d 2781d 11/29 2720d 44039e00171b fou6: Prevent unbounded recursion in GUE error handler
KASAN: global-out-of-bounds Read in validate_nla wireless 17 syz, C 14 2756d 2761d 11/29 2720d a8b5c6d69261 nl80211: fix NLA_POLICY_NESTED() arguments
KASAN: invalid-free in sctp_stream_free sctp 24 syz, C 5 2742d 2750d 11/29 2720d af98c5a78517 sctp: set stream ext to NULL after freeing it in sctp_stream_outq_migrate
BUG: unable to handle kernel NULL pointer dereference in corrupted (3) 10 syz, C 1 2778d 2778d 11/29 2720d 44039e00171b fou6: Prevent unbounded recursion in GUE error handler
KASAN: slab-out-of-bounds Read in kvm_clear_dirty_log_protect kvm 17 syz, C 54 2772d 2783d 11/29 2720d 98938aa8edd6 KVM: validate userspace input in kvm_clear_dirty_log_protect()
general protection fault in __dentry_path fs 2 syz, C 2082 2722d 2755d 11/29 2720d 8ed0579c12b2 kvm: properly check debugfs dentry before using it
WARNING in tcp_send_loss_probe net -1 syz, C 9 2731d 2782d 11/29 2720d bf50b606cfd8 tcp: repaired skbs must init their tso_segs
BUG: unable to handle kernel paging request in do_csum kernel 8 syz, C 11 2813d 2814d 11/29 2720d d5be7f632bad net-backports: net: validate untrusted gso packets without csum offload
KASAN: stack-out-of-bounds Read in pick_next_task_fair net 17 syz, C 1 2781d 2781d 11/29 2720d 44039e00171b fou6: Prevent unbounded recursion in GUE error handler
general protection fault in icmp6_send net 2 syz 2 2781d 2781d 11/29 2720d 8d9336704521 ipv6: make icmp6_send() robust against null skb->dev
WARNING in batadv_is_on_batman_iface batman -1 syz 10 2761d 2786d 11/29 2720d 955d3411a17f batman-adv: Avoid WARN on net_device without parent in netns
WARNING in clear_standby ceph -1 syz, C 3522 2761d 2886d 11/29 2720d 4aac9228d164 libceph: avoid KEEPALIVE_PENDING races in ceph_con_keepalive()
WARNING in apparmor_cred_free apparmor -1 syz, C 109 2768d 2774d 11/29 2720d a5795fd38ee8 LSM: Check for NULL cred-security on free
KASAN: out-of-bounds Read in update_curr hardening mm 17 syz 1 2780d 2780d 11/29 2720d 44039e00171b fou6: Prevent unbounded recursion in GUE error handler
general protection fault in team_nl_cmd_options_set net 2 syz, C 7 2790d 2748d 11/29 2720d 2fdeee254923 team: avoid complex list operations in team_nl_cmd_options_set()
WARNING in wiphy_register (3) wireless -1 syz 31 2756d 2786d 11/29 2720d 9c5d3afac436 mac80211_hwsim: check that n_limits makes sense
kernel panic: stack is corrupted in printk kernel 2 syz, C 1 2781d 2781d 11/29 2720d 44039e00171b fou6: Prevent unbounded recursion in GUE error handler
KMSAN: kernel-infoleak in vmx_get_nested_state kvm-x86 9 syz, C 6 2721d 2832d 11/29 2720d 3a33d030daaa kvm: x86/vmx: Use kzalloc for cached_vmcs12
general protection fault in rb_erase_cached kernel 2 syz, C 1 2781d 2781d 11/29 2720d 44039e00171b fou6: Prevent unbounded recursion in GUE error handler
KASAN: stack-out-of-bounds Read in gue_err_proto_handler net 17 syz, C 1 2778d 2778d 11/29 2720d 44039e00171b fou6: Prevent unbounded recursion in GUE error handler
KASAN: out-of-bounds Read in __switch_to kernel 17 syz, C 1 2781d 2781d 11/29 2720d 44039e00171b fou6: Prevent unbounded recursion in GUE error handler
KMSAN: uninit-value in tipc_nl_compat_dumpit tipc 7 syz, C 209 2736d 2886d 11/29 2720d 2753ca5d9009 tipc: fix uninit-value in tipc_nl_compat_doit
general protection fault in corrupted (2) trace perf 2 syz, C 2 2778d 2781d 11/29 2720d 44039e00171b fou6: Prevent unbounded recursion in GUE error handler
WARNING: locking bug in corrupted kernel 4 syz, C 1 2770d 2770d 11/29 2720d 44039e00171b fou6: Prevent unbounded recursion in GUE error handler
WARNING: refcount bug in kvm_vm_ioctl kvm 13 syz 13 2754d 2867d 11/29 2720d cfa39381173d kvm: fix kvm_ioctl_create_device() reference counting (CVE-2019-6974)
KMSAN: uninit-value in gue_err net 7 syz, C 4686 2720d 2774d 11/29 2720d 26fc181e6cac fou, fou6: do not assume linear skbs
KASAN: use-after-free Read in seccomp_notify_release kernel 19 syz, C 27 2725d 2774d 11/29 2720d a811dc61559e seccomp: fix UAF in user-trap code
KASAN: use-after-free Read in batadv_interface_tx batman 19 syz, C 54 2747d 2785d 11/29 2720d 9114daa825fc batman-adv: Force mac header to start of data on xmit
general protection fault in ip6erspan_set_version net 2 syz, C 39 2729d 2735d 11/29 2720d efcc9bcaf77c net: ip6_gre: fix possible NULL pointer dereference in ip6erspan_set_version
WARNING in __might_sleep (2) serial -1 syz, C 36 2760d 2788d 11/29 2720d fc01d8c61ce0 tty/n_hdlc: fix __might_sleep warning
WARNING in xfrm6_tunnel_net_exit (2) net -1 syz, C 48816 2730d 3011d 11/29 2720d f75a2804da39 xfrm: destroy xfrm_state synchronously on net exit path
KMSAN: uninit-value in tipc_conn_rcv_sub tipc 7 syz, C 557 2722d 3017d 11/29 2720d a88289f4ddee tipc: fix uninit-value in in tipc_conn_rcv_sub
WARNING: bad unlock balance in rxrpc_recvmsg afs net 4 syz, C 9 2746d 2750d 11/29 2720d 6dce3c20ac42 rxrpc: bad unlock balance in rxrpc_recvmsg
KMSAN: kernel-infoleak in sctp_getsockopt (2) sctp 9 syz, C 16 2720d 2771d 11/29 2720d 400b8b9a2a17 sctp: allocate sctp_sockaddr_entry with kzalloc
general protection fault in relay_open_buf trace block 2 syz, C 287 2753d 2755d 11/29 2720d 2c1cf00eeacb relay: check return of create_buf_file() properly
KMSAN: uninit-value in gue6_err net 7 syz, C 8359 2720d 2774d 11/29 2720d 26fc181e6cac fou, fou6: do not assume linear skbs
general protection fault in ebitmap_destroy selinux 2 syz 1 2776d 2776d 11/29 2720d 5b0e7310a2a3 selinux: fix GPF on invalid policy
general protection fault in debugfs_create_files block 2 syz, C 111 2753d 2755d 11/29 2720d 36991ca68db9 blk-mq: protect debugfs_create_files() from failures
general protection fault in kvm_ioapic_scan_entry kvm-x86 2 syz, C 148 2814d 2924d 11/29 2727d dcbd3e49c2f0 KVM: X86: Fix NULL deref in vcpu_scan_ioapic
general protection fault in finish_wait net 2 syz, C 22 2745d 2960d 11/29 2727d 78abe3d0dfad net/smc: fix TCP fallback socket release
KASAN: slab-out-of-bounds Write in fpstate_init kernel 21 syz, C 15088 2792d 2793d 11/29 2727d ed8e48122728 KVM: x86: fix size of x86_fpu_cache objects
KASAN: out-of-bounds Write in tls_push_record net 21 syz, C 10 2861d 2962d 11/29 2728d d829e9c4112b tls: convert to generic sk_msg interface
kernel BUG at include/linux/mm.h:LINE! (2) net -1 syz, C 1009 2728d 2991d 11/29 2728d d829e9c4112b tls: convert to generic sk_msg interface
KASAN: use-after-free Write in tls_push_record (2) net 22 syz, C 64 2855d 2958d 11/29 2728d d829e9c4112b tls: convert to generic sk_msg interface
KASAN: use-after-free Read in __list_add_valid (5) rdma 19 syz, C 16 3059d 3066d 11/29 2733d 5fe23f262e05 ucma: fix a use-after-free in ucma_resolve_ip()
KASAN: use-after-free Read in bpf_cgroup_storage_release bpf 19 syz, C 2 2936d 2936d 11/29 2737d 82c018d734a7 Merge branch 'bpf-cgroup-local-storage'
general protection fault in list_lru_count_one mm 2 syz, C 12 2953d 2952d 11/29 2760d 8e04944f0ea8 mm,vmscan: Allow preallocating memory for register_shrinker().
WARNING in __debug_object_init (3) bpf net -1 syz, C 1557 2848d 2849d 11/29 2764d 2cb494a36c98 bpf: add tests for direct packet access from CGROUP_SKB
general protection fault in keyctl_pkey_params_get keyrings lsm 2 syz, C 85 2783d 2843d 11/29 2769d 57b0e3145320 KEYS: fix parsing invalid pkey info string 94c13f66e13c security: don't use a negative Opt_err token index
general protection fault in encode_rpcb_string net nfs 2 syz, C 6 2947d 3043d 11/29 2770d 81c88b18de1f sunrpc: handle ENOMEM in rpcb_getport_async
KMSAN: uninit-value in vti6_tnl_xmit net 7 syz 60 2775d 2798d 11/29 2770d cb9f1b783850 ip: validate header length on virtual device xmit
general protection fault in lo_ioctl (2) block 2 syz 2 3029d 3028d 11/29 2770d 310ca162d779 block/loop: Use global lock for ioctl() operation.
inconsistent lock state in nr_find_socket hams 4 syz, C 19 2772d 2787d 11/29 2770d 7314f5480f3e netrom: fix locking in nr_find_socket()
KASAN: invalid-free in x25_asy_free net 24 syz, C 67 2781d 2788d 11/29 2770d d5c7c745f254 net/wan: fix a double free in x25_asy_open_tty()
WARNING in kmem_cache_create_usercopy v9fs -1 syz, C 10 2785d 2844d 11/29 2770d 574d356b7a02 9p/net: put a lower bound on msize
possible deadlock in blkdev_reread_part block 4 syz, C 5736 2789d 3210d 11/29 2770d 0da03cab87e6 loop: Fix deadlock when calling blkdev_reread_part() 85b0a54a82e4 loop: Move loop_reread_partitions() out of loop_ctl_mutex
KMSAN: uninit-value in check_6rd net 7 syz, C 81 2776d 2798d 11/29 2770d cb9f1b783850 ip: validate header length on virtual device xmit
WARNING: locking bug in loop_control_ioctl block 4 syz, C 4018 2809d 2837d 11/29 2770d 628bd8594709 loop: Fix double mutex_unlock(&loop_ctl_mutex) in loop_control_ioctl()
WARNING: ODEBUG bug in tipc_enable_bearer tipc -1 syz, C 3 2790d 2793d 11/29 2770d dc4501ff2875 tipc: fix a double free in tipc_enable_bearer()
kernel BUG at kernel/time/timer.c:LINE! (2) hams -1 syz, C 5 2782d 2784d 11/29 2770d 202700e30740 net/hamradio/6pack: use mod_timer() to rearm timers
KASAN: slab-out-of-bounds Read in tun_net_xmit (2) net 17 syz, C 10 2786d 2953d 11/29 2770d aff6db454599 ptr_ring: wrap back ->producer in __ptr_ring_swap_queue()
KASAN: use-after-free Read in nr_rx_frame hams 19 syz 2 2777d 2783d 11/29 2770d 7314f5480f3e netrom: fix locking in nr_find_socket()
possible deadlock in nr_destroy_socket hams 4 syz 20 2773d 2783d 11/29 2770d 7314f5480f3e netrom: fix locking in nr_find_socket()
KASAN: use-after-free Read in posix_lock_inode fs 19 syz 5 2783d 2783d 11/29 2770d bf77ae4c98d7 locks: fix error in locks_move_blocks()
general protection fault in transparent_hugepage_enabled mm 2 syz, C 626 2783d 2792d 11/29 2770d 7635d9cbe832 mm, thp, proc: report THP eligibility for each vma
KMSAN: kernel-infoleak in capi_unlocked_ioctl net 9 syz, C 109 2775d 2785d 11/29 2770d d63967e475ae isdn: fix kernel-infoleak in capi_unlocked_ioctl
KASAN: user-memory-access Write in n_tty_set_termios serial 21 syz, C 85 2788d 3059d 11/29 2770d 83d817f41070 tty: Hold tty_ldisc_lock() during tty_reopen()
KASAN: use-after-free Read in ax25_fillin_cb hams 19 syz 4 2791d 2788d 11/29 2770d c433570458e4 ax25: fix a use-after-free in ax25_fillin_cb()
KASAN: use-after-free Read in locks_delete_block fs 19 syz 4 2811d 2834d 11/29 2770d 16306a61d3b7 fs/locks: always delete_block after waiting.
general protection fault in fdb_find_rcu bridge 2 syz, C 3 2790d 2786d 11/29 2770d f989d03ef25d net: rtnetlink: address is mandatory for rtnl_fdb_get
general protection fault in kvm_arch_vcpu_ioctl_run kvm-x86 2 syz, C 12 2796d 2812d 11/29 2775d dcbd3e49c2f0 KVM: X86: Fix NULL deref in vcpu_scan_ioapic
general protection fault in __vb2_queue_free media 2 syz, C 38 2791d 2847d 11/29 2775d 62dcb4f41836 media: vb2: check memory model for VIDIOC_CREATE_BUFS
WARNING in static_key_disable_cpuslocked kernel -1 syz 5 2811d 2829d 11/29 2775d 9c48060141bd udp: fix jump label misuse
BUG: corrupted list in ___neigh_create net 8 syz, C 706 2803d 2806d 11/29 2775d 8cc196d6ef86 neighbor: gc_list changes should be protected by table lock
WARNING in __rcu_read_unlock kernel -1 syz, C 2 2793d 2801d 11/29 2775d 11789039da53 fou: Prevent unbounded recursion in GUE error handler
BUG: corrupted list in neigh_mark_dead net 8 syz, C 4117 2803d 2806d 11/29 2775d 8cc196d6ef86 neighbor: gc_list changes should be protected by table lock
KMSAN: kernel-infoleak in sctp_getsockopt sctp 9 syz 147 2775d 2811d 11/29 2775d 4a2eb0c37b47 sctp: initialize sin6_flowinfo for ipv6 addrs in sctp_inet6addr_event
KASAN: use-after-free Read in tipc_group_bc_cong tipc 19 syz, C 280 2796d 2806d 11/29 2775d 143ece654f9f tipc: check tsk->group in tipc_wait_for_cond()
KASAN: use-after-free Read in tipc_mcast_xmit tipc 19 syz 7 2792d 2799d 11/29 2775d 3c6306d44082 tipc: check group dests after tipc_wait_for_cond()
KMSAN: uninit-value in __inet6_bind net 7 syz, C 56 2776d 2806d 11/29 2775d fb2427454631 ipv6: explicitly initialize udp6_addr in udp_sock_create6()
INFO: task hung in flush_workqueue media 1 syz, C 293 2794d 2845d 11/29 2775d 52117be68b82 media: vim2m: use cancel_delayed_work_sync instead of flush_schedule_work
KASAN: null-ptr-deref Write in kthread_stop media 12 syz, C 2527 2791d 2848d 11/29 2775d 701f49bc028e media: vivid: fix error handling of kthread_run
KASAN: use-after-free Read in kfree_skb (2) tipc 19 syz, C 66 2796d 2806d 11/29 2775d acb4a33e9856 tipc: fix a double kfree_skb()
BUG: sleeping function called from invalid context at mm/slab.h:LINE (4) crypto -1 syz, C 36 2799d 2960d 11/29 2775d f9c9bdb5131e crypto: x86/chacha - avoid sleeping under kernel_fpu_begin()
general protection fault in inet_lhash2_lookup net 2 syz, C 1137 2798d 2801d 11/29 2775d eedbbb0d98b2 net: dccp: initialize (addr,port) listening hashtable
KASAN: use-after-free Read in kvm_put_kvm kvm 19 syz, C 143 2797d 2857d 11/29 2775d 987d1149be7d KVM: fix unregistering coalesced mmio zone from wrong bus
general protection fault in inet6_lhash2_lookup net 2 syz, C 718 2798d 2801d 11/29 2775d eedbbb0d98b2 net: dccp: initialize (addr,port) listening hashtable
KASAN: use-after-free Read in neigh_mark_dead net 19 syz, C 858 2803d 2806d 11/29 2775d 8cc196d6ef86 neighbor: gc_list changes should be protected by table lock
WARNING in rds_message_alloc_sgs rds -1 syz, C 6 2813d 2847d 11/29 2775d ea010070d0a7 net/rds: fix warn in rds_message_alloc_sgs
WARNING in vkms_plane_duplicate_state dri -1 syz, C 108 2791d 2824d 11/29 2775d 7cdf33ab02e0 drm/vkms: Fix plane duplicate_state
divide error in vivid_vid_cap_s_dv_timings media 2 syz, C 108 2791d 2848d 11/29 2775d 9729d6d282a6 media: vivid: set min width/height to a value > 0
KASAN: use-after-free Read in vb2_mmap media 19 syz, C 276 2791d 2847d 11/29 2775d cd26d1c4d1bc media: vb2: vb2_mmap: move lock up
general protection fault in __ipv6_sock_mc_join net 2 syz, C 9 2802d 2806d 11/29 2775d fb83ed496b9a tipc: compare remote and local protocols in tipc_udp_enable()
BUG: pagefault on kernel address ADDR in non-whitelisted uaccess media -1 syz, C 17 2799d 2845d 11/29 2775d 560ccb75c2ca media: vivid: free bitmap_cap when updating std/timings/etc.
KASAN: global-out-of-bounds Read in tpg_print_str_4 media 17 syz, C 52 2813d 2838d 11/29 2775d e5f71a27fa12 media: v4l2-tpg: array index could become negative
KASAN: use-after-free Read in ___neigh_create net 19 syz, C 164 2803d 2806d 11/29 2775d 8cc196d6ef86 neighbor: gc_list changes should be protected by table lock
WARNING in fuse_destroy_inode fuse -1 syz, C 7 2829d 2830d 11/29 2789d 4fc4bb796b0c fuse: Add bad inode check in fuse_destroy_inode()
WARNING in userfaultfd_ioctl mm fs -1 syz, C 11 2803d 2813d 11/29 2789d 01e881f5a1fc userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered
KASAN: use-after-free Read in vhost_transport_send_pkt kvm net virt 19 syz 36 2812d 2939d 11/29 2798d 834e772c8db0 vhost/vsock: fix use-after-free in network stack callers
KASAN: use-after-free Read in delayed_uprobe_remove perf trace 19 syz, C 2 2842d 2845d 11/29 2798d 1aed58e67a6e Uprobes: Fix kernel oops with delayed_uprobe_remove()
KMSAN: kernel-infoleak in _copy_to_iter (4) net 9 syz, C 56 2813d 2817d 11/29 2798d 688838934c23 rtnetlink: ndo_dflt_fdb_dump() only work for ARPHRD_ETHER devices
KASAN: use-after-free Read in sctp_epaddr_lookup_transport sctp 19 syz 5 2829d 2830d 11/29 2798d fb6df5a6234c sctp: kfree_rcu asoc
KASAN: use-after-free Read in vhost_work_queue kvm net virt 19 syz 30 2810d 2910d 11/29 2798d 834e772c8db0 vhost/vsock: fix use-after-free in network stack callers
KASAN: use-after-free Read in vhost_transport_cancel_pkt kvm net virt 19 syz 17 2837d 2881d 11/29 2798d 834e772c8db0 vhost/vsock: fix use-after-free in network stack callers
WARNING in alloc_pages_vma mm -1 syz, C 98 2807d 2810d 11/29 2798d 356ff8a9a78f Revert "mm, thp: consolidate THP gfp handling into alloc_hugepage_direct_gfpmask"
WARNING in cttimeout_default_get netfilter -1 syz, C 44 2810d 2830d 11/29 2809d 89259088c1b7 netfilter: nfnetlink_cttimeout: fetch timeouts for udplite and gre, too
WARNING in format_decode (2) trace -1 syz, C 16 2829d 2911d 11/29 2809d 1efb6ee3edea bpf: fix check of allowed specifiers in bpf_trace_printk
KMSAN: uninit-value in linear_transfer (2) sound 7 syz, C 7 2815d 2838d 11/29 2809d 65766ee0bf7f ALSA: oss: Use kvzalloc() for local buffer allocations
KMSAN: kernel-infoleak in kvm_write_guest_page kvm 9 syz, C 36 2812d 2839d 11/29 2809d bcbfbd8ec210 KVM: x86: Fix kernel info-leak in KVM_HC_CLOCK_PAIRING hypercall
BUG: GPF in non-whitelisted uaccess (non-canonical address?) input -1 syz, C 10 2828d 2835d 11/29 2809d 8c01db7619f0 HID: uhid: forbid UHID_CREATE under KERNEL_DS or elevated privileges
KASAN: slab-out-of-bounds Write in queue_stack_map_push_elem bpf 21 syz, C 30 2819d 2821d 11/29 2809d 813961de3ee6 bpf: fix integer overflow in queue_stack_map
WARNING in bpf_check (2) bpf -1 syz, C 9 2832d 2831d 11/29 2809d afd594240806 bpf: fix off-by-one error in adjust_subprog_starts
INFO: task hung in fuse_sb_destroy fuse 1 syz, C 2 2845d 2845d 11/29 2809d 7fabaf303458 fuse: fix leaked notify reply
KMSAN: kernel-infoleak in kvm_arch_vcpu_ioctl kvm-x86 9 syz, C 31 2815d 2830d 11/29 2809d 7f9ad1dfa3c7 KVM: nVMX: Fix kernel info-leak when enabling KVM_CAP_HYPERV_ENLIGHTENED_VMCS more than once
general protection fault in icmp_timeout_obj_to_nlattr netfilter 2 syz, C 13 2842d 2846d 11/29 2834d 8866df9264a3 netfilter: nfnetlink_cttimeout: pass default timeout policy to obj_to_nlattr
general protection fault in addr_resolve rdma 2 syz, C 32 2870d 2886d 11/29 2834d fe33507ec38a RDMA/core: Check error status of rdma_find_ndev_for_src_ip_rcu
KMSAN: uninit-value in synaptics_detect input 7 syz, C 137 2834d 2887d 11/29 2834d f39f8688888a Input: synaptics - avoid using uninitialized variable when probing
KMSAN: uninit-value in dev_mc_add_excl net 7 syz, C 13 2839d 2851d 11/29 2834d da71577545a5 rtnetlink: Disallow FDB configuration for non-Ethernet device
KASAN: stack-out-of-bounds Read in __aa_lookupn_ns apparmor 17 syz, C 52 2850d 2881d 11/29 2834d 250f2da49cb8 apparmor: Fix uninitialized value in aa_split_fqname
KASAN: slab-out-of-bounds Read in sctp_getsockopt sctp 17 syz, C 9 2852d 2851d 11/29 2834d 713358369382 sctp: check policy more carefully when getting pr status
WARNING in __put_task_struct (2) mm -1 syz, C 17 2860d 2869d 11/29 2834d fe9bc1644918 RDMA/restrack: Protect from reentry to resource return path
KASAN: invalid-free in p9stat_free v9fs 24 syz, C 3 2912d 2912d 11/29 2834d 62e3941776fe 9p: clear dangling pointers in p9stat_free 81c99089bce6 v9fs_dir_readdir: fix double-free on p9stat_read error
BUG: corrupted list in cpu_stop_queue_work kernel 8 syz, C 24 2953d 2962d 11/29 2834d 552446a41661 shmem: Convert shmem_add_to_page_cache to XArray
KMSAN: uninit-value in dev_uc_add_excl net 7 syz, C 20 2845d 2887d 11/29 2834d da71577545a5 rtnetlink: Disallow FDB configuration for non-Ethernet device
general protection fault in rb_erase integrity lsm 2 syz, C 79836 2841d 2882d 11/29 2834d 18aded174920 ext4: fix EXT4_IOC_SWAP_BOOT
KASAN: use-after-free Read in tcf_block_find net 19 syz, C 27 2875d 2881d 11/29 2834d 460b360104d5 net_sched: fix a crash in tc_new_tfilter()
KASAN: use-after-free Read in _copy_from_iter v9fs 19 syz, C 12 2938d 2950d 11/29 2834d 728356dedeff 9p: Add refcount to p9_req_t
KASAN: use-after-free Read in gfs2_log_flush gfs2 19 syz 14 2855d 2895d 11/29 2834d 4c62bd9cea7b gfs2: Don't leave s_fs_info pointing to freed memory in init_sbd
general protection fault in getname_kernel gfs2 2 syz, C 10 2861d 2870d 11/29 2834d 3df629d873f8 gfs2_meta: ->mount() can get NULL dev_name
kernel BUG at arch/x86/mm/physaddr.c:LINE! overlayfs -1 syz, C 10 2835d 2867d 11/29 2834d babf4770be0a ovl: fix error handling in ovl_verify_set_fh()
general protection fault in __skb_flow_dissect (2) net 2 syz, C 11 2882d 2889d 11/29 2834d d0e13a1488ad flow_dissector: lookup netns by skb->sk if skb->dev is NULL
general protection fault in ctnetlink_alloc_filter netfilter 2 syz, C 80 2883d 2887d 11/29 2834d 9306425b70bf netfilter: ctnetlink: must check mark attributes vs NULL
WARNING: kmalloc bug in krealloc fs -1 syz, C 2 2954d 2953d 11/29 2834d 61448479a9f2 mm: don't warn about large allocations for slab
WARNING: kmalloc bug in __v9fs_get_acl v9fs -1 syz, C 212 2852d 2959d 11/29 2834d 61448479a9f2 mm: don't warn about large allocations for slab
BUG: unable to handle kernel NULL pointer dereference in blk_mq_map_swqueue block 10 syz, C 8 2861d 2881d 11/29 2834d e01ad46d53b5 blk-mq: fallback to previous nr_hw_queues when updating fails
WARNING: kmalloc bug in str_read selinux -1 syz, C 11 2856d 2900d 11/29 2834d 4458bba09788 selinux: Add __GFP_NOWARN to allocation at str_read()
KMSAN: uninit-value in ip_tunnel_lookup (2) net 7 syz, C 2 2852d 2852d 11/29 2834d b0350d51f001 ip_gre: fix parsing gre header in ipgre_err
KASAN: use-after-free Read in sha512_ctx_mgr_resubmit crypto 19 syz, C 4 2873d 2923d 11/29 2834d ab8085c130ed crypto: x86 - remove SHA multibuffer routines and mcryptd
kernel BUG at mm/shmem.c:LINE! mm -1 syz, C 30 2961d 2963d 11/29 2834d 552446a41661 shmem: Convert shmem_add_to_page_cache to XArray
KASAN: null-ptr-deref Read in refcount_sub_and_test_checked media 11 syz, C 31 2841d 2872d 11/29 2834d fda21d46cce2 ipv6: do not leave garbage in rt->fib6_metrics
WARNING in tcp_cleanup_ulp net -1 syz 16 2860d 2861d 11/29 2834d aadd4355918f tcp, ulp: remove socket lock assertion on ULP cleanup
WARNING: kmalloc bug in input_mt_init_slots input -1 syz, C 54 2852d 2886d 11/29 2834d 61448479a9f2 mm: don't warn about large allocations for slab
general protection fault in dev_gro_receive (2) net 2 syz 4 2859d 2866d 11/29 2834d ece23711dd95 net: Properly unlink GRO packets on overflow.
WARNING: kmalloc bug in get_valid_checkpoint f2fs -1 syz 2 3020d 3020d 11/29 2834d 61448479a9f2 mm: don't warn about large allocations for slab
WARNING in tcp_close net -1 syz 284 2855d 2955d 11/29 2834d 8873c064d1de tcp: do not release socket ownership in tcp_close()
BUG: corrupted list in p9_read_work v9fs 8 syz 23 2842d 2953d 11/29 2834d e4ca13f7d075 9p/trans_fd: abort p9_read_work if req status changed
KASAN: use-after-free Read in fuse_dev_do_read fuse 19 syz 19 2846d 2894d 11/29 2834d bc78abbd55dd fuse: Fix use-after-free in fuse_dev_do_read()
WARNING: kmalloc bug in vfs_getxattr_alloc fs -1 syz, C 9 2909d 2951d 11/29 2834d 61448479a9f2 mm: don't warn about large allocations for slab
WARNING: kmalloc bug in bfs_fill_super bfs -1 syz, C 147 3016d 3061d 11/29 2834d 9f2df09a33aa bfs: add sanity check at bfs_fill_super()
INFO: task hung in ext4_fallocate ext4 1 syz, C 1 2877d 2876d 11/29 2834d f18b2b83a727 ext4: fix argument checking in EXT4_IOC_MOVE_EXT
KMSAN: uninit-value in vcs_read serial 7 syz, C 2343 2991d 3015d 11/29 2837d 21eff69aaaa0 vt: prevent leaking uninitialized data to userspace via /dev/vcs*
WARNING in usb_submit_urb (3) usb -1 syz, C 58 2849d 2865d 11/29 2848d 665c365a77fb USB: fix the usbfs flag sanitization for control transfers
KMSAN: kernel-infoleak in _copy_to_iter (3) net 9 syz, C 36 2848d 2859d 11/29 2848d b06f9d9f1a90 tipc: fix info leak from kernel tipc_event
KASAN: slab-out-of-bounds Read in fscache_alloc_cookie fs 17 syz, C 1936 2859d 2960d 11/29 2848d 1ff22883b0b2 fscache: Fix incomplete initialisation of inline key space fa520c47eaa1 fscache: Fix out of bound read in long cookie keys
KASAN: slab-out-of-bounds Read in vhci_hub_control usb 17 syz, C 43 2858d 2903d 11/29 2848d 81f7567c51ad usb: usbip: Fix BUG: KASAN: slab-out-of-bounds in vhci_hub_control()
BUG: sleeping function called from invalid context at net/core/dev.c:LINE bpf -1 syz 8 2860d 2869d 11/29 2848d cee271678d0e xsk: do not call synchronize_net() under RCU read lock
KASAN: slab-out-of-bounds Read in _decode_session6 net 17 syz, C 35 2848d 2905d 11/29 2848d 9f7e43da6ae4 net/xfrm: fix out-of-bounds packet access
kernel BUG at net/core/dev.c:LINE! (2) net -1 syz 2 2867d 2867d 11/29 2859d 52b5d6f5dcf0 net: make skb_partial_csum_set() more robust against overflows
KASAN: use-after-free Read in finish_task_switch kernel 19 syz, C 3047 2883d 2928d 11/29 2862d 26b471c7e2f7 KVM: nVMX: Fix bad cleanup on error of get/set nested state IOCTLs
WARNING in __skb_flow_dissect net -1 syz 3 2867d 2868d 11/29 2866d af3fb24eecb2 tun: napi flags belong to tfile
general protection fault in dev_gro_receive net 2 syz 8 2868d 2880d 11/29 2866d af3fb24eecb2 tun: napi flags belong to tfile
possible deadlock in flush_workqueue net 4 syz, C 73762 2873d 2915d 11/29 2866d d4859d749aa7 net-backports: bonding: avoid possible dead-lock
KASAN: use-after-free Read in rawv6_sendmsg net 19 syz, C 84 2868d 2899d 11/29 2866d a688caa34beb net-backports: ipv6: take rcu lock in rawv6_send_hdrinc()
WARNING in pcpu_alloc bpf -1 syz, C 4 2867d 2876d 11/29 2866d b0584ea66d73 bpf: don't accept cgroup local storage with zero value size
KASAN: use-after-free Write in ucma_put_ctx rdma 22 syz 11 2882d 2900d 11/29 2866d 5fe23f262e05 ucma: fix a use-after-free in ucma_resolve_ip()
general protection fault in usb_find_alt_setting (2) usb 2 syz, C 53 2882d 2904d 11/29 2866d c9a4cb204e9e USB: handle NULL config in usb_find_alt_setting()
KASAN: use-after-free Read in ip_cmsg_recv_offset net 19 syz, C 9 2876d 2878d 11/29 2866d 64199fc0a46b net-backports: ipv4: fix use-after-free in ip_cmsg_recv_dstaddr()
possible deadlock in team_vlan_rx_add_vid net 4 syz 5 2896d 2930d 11/29 2866d 471b83bd8bbe team: Forbid enslaving team device to itself
general protection fault in ubifs_mount fs mtd 2 syz, C 216 2887d 2904d 11/29 2866d 37f31b6ca431 ubifs: Check for name being NULL while mounting
KMSAN: uninit-value in ip6_tnl_start_xmit net 7 syz, C 69 2880d 2890d 11/29 2866d 76c0ddd8c3a6 ip6_tunnel: be careful when accessing the inner header
KASAN: use-after-free Read in destroy_async_on_interface usb 19 syz, C 134 2882d 2904d 11/29 2866d bd729f9d67aa USB: fix error handling in usb_driver_claim_interface()
WARNING in usb_submit_urb (2) usb -1 syz, C 259 2866d 2904d 11/29 2866d 7a68d9fb8510 USB: usbdevfs: sanitize flags more
KASAN: use-after-free Read in cma_bind_port rdma 19 syz 2 2896d 2900d 11/29 2866d 5fe23f262e05 ucma: fix a use-after-free in ucma_resolve_ip()
KMSAN: uninit-value in pppoe_rcv net 7 syz, C 2 3025d 2895d 11/29 2866d 8540827ebac6 pppoe: fix reception of frames with no mac header
WARNING: suspicious RCU usage in inet_csk_route_req net 4 syz, C 43 2873d 3108d 11/29 2866d 1ad98e9d1bdf tcp/dccp: fix lockdep issue when SYN is backlogged
KMSAN: kernel-infoleak in _copy_to_iter (2) net 9 syz, C 7 2874d 2902d 11/29 2869d 45c180bc29ba xfrm_user: prevent leaking 2 bytes of kernel memory
general protection fault in rhashtable_walk_start_check tipc 2 syz, C 112 2894d 2905d 10/29 2881d 8f5c5fcf3533 tipc: call start and done ops directly in __tipc_nl_compat_dumpit()
WARNING in try_charge xfs cgroups mm -1 syz 649 2881d 2934d 10/29 2881d 3100dab2aa09 mm: memcontrol: print proper OOM header when no eligible victim left
divide error in nbd_ioctl nbd 2 syz, C 50 2896d 2903d 10/29 2881d bc811f05d77f nbd: don't allow invalid blocksize settings
WARNING in apparmor_secid_to_secctx apparmor -1 syz, C 3344 2894d 2909d 10/29 2881d edf4e7b7b910 apparmor: fix bad debug check in apparmor_secid_to_secctx()
general protection fault in ovl_free_fs overlayfs exfat 2 syz, C 4 2898d 2900d 10/29 2881d 8c25741aaad8 ovl: fix oopses in ovl_fill_super() failure paths
KMSAN: uninit-value in snd_midi_event_encode_byte sound 7 syz, C 3 2905d 2905d 10/29 2881d 5a7b44a8df82 ALSA: rawmidi: Initialize allocated buffers
KASAN: use-after-free Read in __rhashtable_lookup (2) rds 19 syz, C 22 2895d 2915d 10/29 2881d cc4dfb7f70a3 rds: fix two RCU related problems
general protection fault in rhashtable_walk_exit tipc 2 syz, C 8 2895d 2897d 10/29 2881d 12a78b026f87 tipc: check return value of __tipc_dump_start()
KASAN: use-after-free Read in sock_i_ino tipc 19 syz 127 2894d 2904d 10/29 2881d 0a3b8b2b215f tipc: orphan sock in tipc_release()
BUG: unable to handle kernel paging request in kfree (2) mm 8 syz, C 297 2909d 2960d 10/29 2883d 7913690dcc5e net/9p/client.c: version pointer uninitialized
KMSAN: uninit-value in memcmp (2) net 7 syz, C 131 2895d 2886d 10/29 2884d 77d36398d99f net: fix uninit-value in __hw_addr_add_ex()
WARNING in wiphy_register (2) wireless -1 syz, C 8 2921d 2923d 10/29 2896d 484004339d45 mac80211_hwsim: require at least one channel
KASAN: use-after-free Read in tipc_group_fill_sock_diag tipc 19 syz 35 2902d 2920d 10/29 2896d 9a07efa9aea2 tipc: switch to rhashtable iterator
WARNING in __fsnotify_recalc_mask fs -1 syz 9 2918d 2920d 10/29 2896d d3bc0fa8411c fsnotify: fix false positive warning on inode delete
KASAN: use-after-free Read in sctp_transport_get_next sctp 19 syz, C 6 2912d 2914d 10/29 2896d bab1be79a516 sctp: hold transport before accessing its asoc in sctp_transport_get_next
KASAN: stack-out-of-bounds Read in __schedule ext4 17 syz 4 2908d 2910d 10/29 2896d b845c898b2f1 bpf, sockmap: fix sock_hash_alloc and reject zero-sized keys
INFO: task hung in fsnotify_mark_destroy_workfn fs 1 syz 13 2929d 3043d 10/29 2899d 128f38041035 android: binder: Rate-limit debug and userspace triggered err msgs
WARNING in up_write ext4 -1 syz, C 725 3010d 3058d 8/29 2902d d7d760efad70 locking/rwsem: Add a new RWSEM_ANONYMOUSLY_OWNED flag
BUG: soft lockup in d_walk fs 1 syz, C 163 2988d 3034d 8/29 2902d 4fb48871409e restore cond_resched() in shrink_dcache_parent()
general protection fault in vsscanf v9fs 2 syz, C 7 2929d 2959d 8/29 2904d 10aa14527f45 9p: fix multiple NULL-pointer-dereferences
WARNING in input_alloc_absinfo input -1 syz, C 318 2912d 2985d 8/29 2910d 100294cee9a9 Input: do not use WARN() in input_alloc_absinfo()
KASAN: use-after-free Read in ip6_hold_safe net 19 syz, C 1 2936d 2936d 8/29 2910d 6d37fa49da1e l2tp: use sk_dst_check() to avoid race on sk->sk_dst_cache
general protection fault in process_init_reply fuse 2 syz, C 24 2917d 2952d 8/29 2910d e8f3bd773d22 fuse: Fix oops at process_init_reply()
WARNING: suspicious RCU usage in bpf_prog_array_copy_core bpf 4 syz, C 22873 2910d 2924d 8/29 2910d 965931e3a803 bpf: fix a rcu usage warning in bpf_prog_array_copy_core()
WARNING: lock held when returning to user space in fuse_lock_inode fuse 4 syz, C 1439 2916d 2957d 8/29 2910d 63576c13bd17 fuse: fix initial parallel dirops
WARNING: refcount bug in llc_sap_find net 13 syz, C 18 2929d 2931d 8/29 2910d 0dcb82254d65 llc: use refcount_inc_not_zero() for llc_sap_find()
possible deadlock in rhashtable_lookup_insert_fast net 4 syz, C 28 2921d 2924d 8/29 2910d ff93bca76992 ila: make lockdep happy again
KASAN: slab-out-of-bounds Write in crypto_dh_encode_key crypto 21 syz, C 1401 2932d 2960d 8/29 2910d 35f7d5225ffc crypto: dh - fix calculating encoded key size
KASAN: slab-out-of-bounds Read in _autofs_dev_ioctl autofs 17 syz, C 5 2922d 2923d 8/29 2910d 0633da48f079 autofs: fix autofs_sbi() does not check super block type
KASAN: use-after-free Write in ip6_hold_safe net 22 syz, C 25 2933d 2944d 8/29 2910d 6d37fa49da1e l2tp: use sk_dst_check() to avoid race on sk->sk_dst_cache
general protection fault in send_sigurg_to_task fs 2 syz, C 6 2922d 2925d 8/29 2910d 84fe4cc09abc signal: Don't send signals to tasks that don't exist
KASAN: slab-out-of-bounds Write in eth_header_parse net 21 syz, C 7 2928d 2942d 8/29 2910d 4576cd469d98 packet: refine ring v3 block size test to hold one frame
WARNING in __snd_rawmidi_transmit_ack (2) sound -1 syz, C 6 2916d 2924d 8/29 2910d 82fd4b05d704 ALSA: seq: virmidi: Fix discarding the unsubscribed output
general protection fault in send_sigio_to_task fs 2 syz, C 176 2921d 2925d 8/29 2910d 84fe4cc09abc signal: Don't send signals to tasks that don't exist
KMSAN: uninit-value in do_msgrcv kernel 7 syz, C 8 2910d 2987d 8/29 2910d 39cfffd774a2 ipc/util.c: use ipc_rcu_putref() for failues in ipc_addid() 615c999cd8a0 ipc: compute kern_ipc_perm.id under the ipc lock e2652ae6bd74 ipc: reorganize initialization of kern_ipc_perm.seq
WARNING: ODEBUG bug in vsock_stream_connect net virt -1 syz, C 42 2930d 2939d 8/29 2910d 455f05ecd2b2 vsock: split dwork to avoid reinitializations
KASAN: slab-out-of-bounds Read in pdu_read v9fs 17 syz, C 267 2926d 2960d 8/29 2910d f984579a01d8 9p: validate PDU length 7913690dcc5e net/9p/client.c: version pointer uninitialized
WARNING in close_fs_devices btrfs -1 syz, C 137 2951d 2994d 8/29 2910d 81ffd56b5745 btrfs: fix mount and ioctl device scan ioctl race
general protection fault in p9_fd_create_unix v9fs 2 syz, C 4 2956d 2959d 8/29 2910d 10aa14527f45 9p: fix multiple NULL-pointer-dereferences
general protection fault in mount_fs hfs 2 syz, C 1 3056d 3056d 8/29 2910d 7464726cb599 hfsplus: don't return 0 when fill_super() failed
general protection fault in open_fs_devices btrfs 2 syz, C 8 2961d 2993d 8/29 2910d 81ffd56b5745 btrfs: fix mount and ioctl device scan ioctl race
general protection fault in smc_ioctl (3) smc 2 syz, C 15 2929d 2930d 8/29 2910d 7311d665ca68 net/smc: move sock lock in smc_ioctl()
KASAN: slab-out-of-bounds Write in vmac_final crypto 21 syz, C 2 2987d 2983d 8/29 2910d bb2964810233 crypto: vmac - separate tfm and request context
BUG: corrupted list in p9_fd_cancel v9fs 8 syz, C 34 2946d 2960d 8/29 2910d 9f476d7c540c net/9p/trans_fd.c: fix race by holding the lock
general protection fault in smc_tx_prepared_sends smc 2 syz, C 7 2935d 2936d 8/29 2910d 7311d665ca68 net/smc: move sock lock in smc_ioctl()
KASAN: use-after-free Read in p9_poll_workfn v9fs 19 syz, C 148 2921d 2960d 8/29 2910d 430ac66eb4c5 net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree()
WARNING: bad usercopy in __kvm_write_guest_page hardening mm -1 syz, C 4 3011d 3004d 8/29 2914d 0a06d4256674 KVM: vmx: use local variable for current_vmptr when emulating VMPTRST
WARNING in refcount_inc (3) net -1 syz, C 7 3059d 3060d 8/29 2914d 8e04944f0ea8 mm,vmscan: Allow preallocating memory for register_shrinker().
KASAN: use-after-free Write in irq_bypass_register_consumer kvm 22 syz, C 1632 2951d 3212d 8/29 2914d b5020a8e6b54 KVM/Eventfd: Avoid crash when assign and deassign specific eventfd in parallel.
KASAN: slab-out-of-bounds Write in process_preds trace 21 syz, C 6020 2973d 3049d 8/29 2914d 70303420b572 tracing: Check for no filter when processing event filters
kernel BUG at net/ipv6/route.c:LINE! net -1 syz, C 197 2932d 2954d 8/29 2930d e873e4b9cc7e ipv6: use fib6_info_hold_safe() when necessary
possible deadlock in bond_get_stats net 4 syz, C 11 2936d 2940d 8/29 2930d 7e2556e40026 bonding: avoid lockdep confusion in bond_get_stats()
WARNING in __ip6_make_skb net -1 syz, C 1 2954d 2954d 8/29 2930d e873e4b9cc7e ipv6: use fib6_info_hold_safe() when necessary
WARNING in ip6_sk_dst_lookup_flow net -1 syz, C 2 2935d 2953d 8/29 2930d e873e4b9cc7e ipv6: use fib6_info_hold_safe() when necessary
KMSAN: uninit-value in __nf_conntrack_find_get netfilter 7 syz, C 67 2945d 2952d 8/29 2930d 6613b6173dee netfilter: conntrack: dccp: treat SYNC/SYNCACK as invalid if no prior state
WARNING in ip6_setup_cork net -1 syz, C 4 2935d 2954d 8/29 2930d e873e4b9cc7e ipv6: use fib6_info_hold_safe() when necessary
KMSAN: kernel-infoleak in put_cmsg net 9 syz, C 3 2962d 2952d 8/29 2930d 2efd4fca703a ip: in cmsg IP(V6)_ORIGDSTADDR call pskb_may_pull
kernel BUG at fs/userfaultfd.c:LINE! (2) fs mm -1 syz, C 8 2935d 2954d 8/29 2930d 31e810aa1033 userfaultfd: remove uffd flags from vma->vm_flags if UFFD_EVENT_FORK fails
KASAN: use-after-free Write in dst_release (2) net 22 syz, C 3 2935d 2937d 8/29 2930d e6aed040eafb Revert "net/ipv6: fix metrics leak"
KMSAN: kernel-infoleak in _copy_to_iter net 9 syz, C 285 2945d 2981d 8/29 2930d 45c180bc29ba xfrm_user: prevent leaking 2 bytes of kernel memory
general protection fault in __delayacct_blkio_end kernel 2 syz, C 50 2945d 3041d 8/29 2930d b512719f771a delayacct: fix crash in delayacct_blkio_end() after delayacct init failure
unregister_netdevice: waiting for DEV to become free 2 syz, C 170521 2930d 3041d 8/29 2930d 8cc88773855f xfrm: fix missing dst_release() after policy blocking lbcast and multicast
general protection fault in rds_ib_get_mr rds 2 syz, C 9 2971d 3070d 8/29 2930d 9e630bcb7701 RDS: RDMA: Fix the NULL-ptr deref in rds_ib_get_mr
KASAN: slab-out-of-bounds Read in ipv6_gso_pull_exthdrs net 17 syz, C 4 2969d 2985d 8/29 2931d bab2c80e5a6c nsh: set mac len based on inner packet
WARNING: refcount bug in smap_release_sock bpf 13 syz, C 55 2947d 2986d 8/29 2931d 7ebc14d507b4 bpf: sockmap, consume_skb in close path 547b3aa451ae bpf: sockmap, error path can not release psock in multi-map case
KASAN: stack-out-of-bounds Read in __handle_mm_fault (2) kernel 17 syz, C 3 2949d 2951d 8/29 2931d 99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
WARNING in __snd_rawmidi_transmit_ack sound -1 syz 2 2954d 2954d 8/29 2931d 39675f7a7c7e ALSA: rawmidi: Change resized buffers atomically
general protection fault in scheduler_tick kernel 2 syz, C 1 2961d 2960d 8/29 2931d 99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
BUG: unable to handle kernel NULL pointer dereference in corrupted (2) kernel 10 syz, C 1 2952d 2951d 8/29 2931d 99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
KASAN: slab-out-of-bounds Read in corrupted kernel 17 syz, C 1 2952d 2951d 8/29 2931d 99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
KASAN: stack-out-of-bounds Read in bpf_tcp_close bpf 17 syz, C 1 2951d 2951d 8/29 2931d 99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
KMSAN: uninit-value in af_alg_free_areq_sgls crypto 7 syz, C 640 2945d 3052d 8/29 2931d 2546da99212f crypto: af_alg - Initialize sg_num_bytes in error code path
KASAN: stack-out-of-bounds Read in account_system_index_time kernel 17 syz, C 2 2953d 2960d 8/29 2931d 99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
kernel BUG at mm/slab.c:LINE! (2) hardening mm -1 syz, C 701 2946d 2960d 8/29 2931d 6e6fddc78323 bpf: fix panic due to oob in bpf_prog_test_run_skb
KASAN: stack-out-of-bounds Read in locks_remove_posix fs 17 syz, C 1 2948d 2948d 8/29 2931d 99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
KASAN: stack-out-of-bounds Read in add_wait_queue kernel 17 syz, C 1 2961d 2960d 8/29 2931d 99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
INFO: rcu detected stall in vprintk_emit net nfc 1 syz 2 2968d 2974d 8/29 2931d 3bc53be9db21 net/nfc: Avoid stalls when nfc_alloc_send_skb() returned NULL.
WARNING in set_precision net -1 syz, C 140 2950d 2991d 8/29 2931d c604cb767049 KEYS: DNS: fix parsing multiple options
BUG: unable to handle kernel paging request in cpuacct_charge kernel 8 syz 2 2952d 2952d 8/29 2931d 99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
KASAN: use-after-free Read in ipv6_gso_pull_exthdrs net 19 syz, C 5 2949d 2981d 8/29 2931d bab2c80e5a6c nsh: set mac len based on inner packet
KASAN: stack-out-of-bounds Read in timerqueue_add kernel 17 syz, C 4 2949d 2965d 8/29 2931d 99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
WARNING in iov_iter_revert net -1 syz, C 74 2951d 3017d 8/29 2931d 32da12216e46 tls: Stricter error checking in zerocopy sendmsg path
general protection fault in smc_ioctl (2) smc 2 syz, C 43 2931d 2954d 8/29 2931d 1992d99882af net/smc: take sock lock in smc_ioctl()
general protection fault in do_tcp_getsockopt net 2 syz, C 9 2950d 2962d 8/29 2931d 6508b6781be0 tcp: cleanup copied_seq and urg_data in tcp_disconnect
KASAN: use-after-free Read in bpf_test_finish bpf net 19 syz, C 1211 2946d 2960d 8/29 2931d 6e6fddc78323 bpf: fix panic due to oob in bpf_prog_test_run_skb
KASAN: use-after-free Write in skb_release_data net 22 syz, C 1903 3005d 3058d 8/29 2931d 993675a3100b packet: reset network header if packet shorter than ll reserved space
KASAN: stack-out-of-bounds Read in rcu_process_callbacks kernel 17 syz, C 1 2954d 2954d 8/29 2931d 99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
WARNING in smc_unhash_sk smc -1 syz, C 155731 2934d 3096d 8/29 2931d e1bbdd570474 net/smc: reduce sock_put() for fallback sockets
kernel BUG at net/packet/af_packet.c:LINE! (3) net -1 syz 5 3081d 3128d 8/29 2940d a6361f0ca4b2 packet: fix bitfield update race
KASAN: slab-out-of-bounds Read in getname_kernel fs 17 syz, C 8 2955d 3055d 8/29 2945d 02f51d45937f autofs: fix slab out of bounds read in getname_kernel()
kernel BUG at mm/gup.c:LINE! mm -1 syz 4 2968d 2965d 8/29 2945d 24962af7e104 fs, elf: make sure to page align bss in load_elf_library bb177a732c43 mm: do not bug_on on incorrect length in __mm_populate()
KASAN: global-out-of-bounds Write in string fs 21 syz, C 7 3000d 3057d 8/29 2945d fe10e398e860 reiserfs: fix buffer overflow with long warning messages
KMSAN: uninit-value in ip_tunnel_xmit net 7 syz, C 2594 2952d 3039d 8/29 2952d b84bbaf7a6c8 packet: in packet_snd start writing at link layer allocation
KMSAN: kernel-infoleak in vcs_read serial 9 syz, C 531 2981d 2991d 8/29 2956d 21eff69aaaa0 vt: prevent leaking uninitialized data to userspace via /dev/vcs*
WARNING: suspicious RCU usage in fib6_info_alloc net 4 syz 2 3042d 3042d 8/29 2960d 27b10608a2fe net/ipv6: Fix gfp_flags arg to addrconf_prefix_route
WARNING in kernfs_add_one kernfs -1 syz, C 174 2960d 3025d 8/29 2960d 84d0c27d6233 driver core: Don't ignore class_dir_create_and_add() failure.
BUG: unable to handle kernel paging request in dput fs 8 syz, C 26 2991d 2994d 8/29 2960d d85b399b64e8 fix proc_fill_cache() in case of d_alloc_parallel() failure
general protection fault in fuse_ctl_remove_conn fuse 2 syz, C 16 2994d 3033d 8/29 2960d 6becdb601bae fuse: fix control dir setup and teardown
WARNING in bpf_int_jit_compile bpf net -1 syz 11 2968d 3004d 8/29 2960d 9facc336876f bpf: reject any prog that failed read-only lock
possible deadlock in sock_hash_free bpf 4 syz, C 45 3002d 3002d 8/29 2960d e9db4ef6bf4c bpf: sockhash fix omitted bucket lock in sock_close
possible deadlock in __might_fault (2) net 4 syz, C 20 3030d 3033d 8/29 2960d 05255b823a61 tcp: add TCP_ZEROCOPY_RECEIVE support for zerocopy receive
KMSAN: uninit-value in _copy_to_iter (2) kvm net virt 7 syz, C 226 2992d 3037d 8/29 2960d 670ae9caaca4 vhost: fix info leak due to uninitialized memory
kernel BUG at fs/f2fs/inode.c:LINE! f2fs -1 syz, C 1 3040d 3039d 8/29 2960d 5d64600d4f33 f2fs: avoid bug_on on corrupted inode
KASAN: slab-out-of-bounds Write in sha512_final crypto 21 syz, C 21 2972d 2990d 8/29 2960d 3619dec5103d dh key: fix rounding up KDF output length
KASAN: slab-out-of-bounds Write in rmd320_final crypto 21 syz, C 44 2972d 2992d 8/29 2960d 3619dec5103d dh key: fix rounding up KDF output length
KASAN: slab-out-of-bounds Read in bpf_csum_update bpf net 17 syz, C 2 2998d 2996d 8/29 2960d 58990d1ff3f7 bpf: reject passing modified ctx to helper functions
INFO: rcu detected stall in is_bpf_text_address bpf 1 syz, C 1 3011d 3011d 8/29 2960d 1d88ba1ebb27 sctp: not allow transport timeout value less than HZ/5 for hb_timer
KASAN: use-after-free Read in __vfs_write fs 19 syz 14 2989d 2992d 8/29 2960d 66e58e0ef80a bpfilter: fix race in pipe access
general protection fault in pipe_write fs 2 syz 1 2991d 2991d 8/29 2960d 66e58e0ef80a bpfilter: fix race in pipe access
possible deadlock in tcp_mmap net 4 syz, C 1908 3030d 3033d 8/29 2960d 05255b823a61 tcp: add TCP_ZEROCOPY_RECEIVE support for zerocopy receive
KASAN: use-after-free Write in prb_fill_curr_block net 22 syz, C 2 2998d 2998d 8/29 2960d eb73190f4fbe net/packet: refine check for priv area size
kernel BUG at fs/f2fs/node.c:LINE! f2fs -1 syz, C 1 3039d 3039d 8/29 2960d a4f843bd004d f2fs: give message and set need_fsck given broken node id
WARNING in skb_warn_bad_offload (2) net -1 syz, C 6 3032d 3032d 8/29 2960d a8c744a8b437 udp: disable gso with no_check_tx
BUG: unable to handle kernel NULL pointer dereference in ep_item_poll fs 10 syz, C 15 2970d 2970d 8/29 2960d e88958e6369a net: handle NULL ->poll gracefully
WARNING in bpf_prog_select_runtime bpf -1 syz 45 2984d 2985d 8/29 2960d 9facc336876f bpf: reject any prog that failed read-only lock
KASAN: slab-out-of-bounds Read in bpf_skb_vlan_push bpf net 17 syz 2 2986d 2986d 8/29 2960d 58990d1ff3f7 bpf: reject passing modified ctx to helper functions
WARNING: kernel stack regs has bad 'bp' value (3) -1 syz, C 7971 2962d 3117d 8/29 2960d b7b73cd5d746 crypto: x86/salsa20 - remove x86 salsa20 implementations
general protection fault in __vfs_write fs 2 syz 25 2988d 2992d 8/29 2960d 66e58e0ef80a bpfilter: fix race in pipe access
KASAN: use-after-free Read in skb_ensure_writable net bpf 19 syz, C 4 2989d 2996d 8/29 2960d 58990d1ff3f7 bpf: reject passing modified ctx to helper functions
KASAN: use-after-free Read in build_segment_manager f2fs 19 syz, C 5 3039d 3040d 8/29 2960d 8a29c1260e24 f2fs: sanity check for total valid node blocks
KASAN: use-after-free Read in bpf_tcp_close bpf 19 syz, C 1748 2965d 3004d 8/29 2960d e9db4ef6bf4c bpf: sockhash fix omitted bucket lock in sock_close
KMSAN: uninit-value in nfqnl_recv_config (2) netfilter 7 syz, C 10 2973d 2988d 8/29 2960d ba062ebb2cd5 netfilter: nf_queue: augment nfqa_cfg_policy
KASAN: use-after-free Read in pipe_read fs 19 syz, C 3 2990d 2992d 8/29 2960d 66e58e0ef80a bpfilter: fix race in pipe access
KASAN: slab-out-of-bounds Read in crypto_morus640_decrypt_chunk crypto 17 syz, C 8 2979d 2986d 8/29 2960d a81ae8095712 crypto: morus640 - Fix out-of-bounds access
WARNING in perf_trace_buf_alloc (2) trace -1 syz, C 22 3100d 3205d 8/29 2960d 4d220ed0f814 bpf: remove tracepoints from bpf core
WARNING: kmalloc bug in xdp_umem_create net bpf -1 syz, C 7 2984d 2990d 8/29 2960d a343993c518c xsk: silence warning on memory allocation failure
KASAN: use-after-free Write in tls_push_record net 22 syz, C 24 2960d 3005d 8/29 2960d a447da7d0041 tls: fix use-after-free in tls_push_record
KASAN: use-after-free Read in __kernel_write fs 19 syz 7 2989d 2992d 8/29 2960d 66e58e0ef80a bpfilter: fix race in pipe access
WARNING in ion_dma_buf_begin_cpu_access staging -1 syz, C 62 2968d 2989d 8/29 2960d 0a2bc00341dc staging: android: ion: Return an ERR_PTR in ion_map_kernel
WARNING: lock held when returning to user space! (2) net 4 syz, C 9 3020d 3021d 8/29 2960d 9e5750106630 net/ipv6: fix lock imbalance in ip6_route_del()
INFO: rcu detected stall in corrupted net 1 syz 1 3009d 3009d 8/29 2960d 1d88ba1ebb27 sctp: not allow transport timeout value less than HZ/5 for hb_timer
KMSAN: uninit-value in ebt_stp_mt_check (2) bridge netfilter 7 syz, C 222 2960d 2992d 8/29 2960d c568503ef020 netfilter: x_tables: initialise match/target check parameter struct
kernel BUG at fs/f2fs/segment.c:LINE! f2fs -1 syz 1 3039d 3039d 8/29 2960d 8a29c1260e24 f2fs: sanity check for total valid node blocks
BUG: unable to handle kernel NULL pointer dereference in corrupted net 10 syz, C 5 2991d 2991d 8/29 2960d c0129a061442 smc: convert to ->poll_mask
KASAN: slab-out-of-bounds Write in tgr192_final crypto 21 syz, C 30 2972d 2991d 8/29 2960d 3619dec5103d dh key: fix rounding up KDF output length
KASAN: slab-out-of-bounds Write in wp384_final crypto 21 syz, C 27 2972d 2991d 8/29 2960d 3619dec5103d dh key: fix rounding up KDF output length
KASAN: slab-out-of-bounds Write in crypto_sha3_final crypto 21 syz, C 68 2972d 2991d 8/29 2960d 3619dec5103d dh key: fix rounding up KDF output length
KASAN: slab-out-of-bounds Read in bpf_skb_change_proto net bpf 17 syz, C 2 2989d 2989d 8/29 2960d 58990d1ff3f7 bpf: reject passing modified ctx to helper functions
BUG: unable to handle kernel paging request in build_segment_manager f2fs 8 syz, C 1 3040d 3040d 8/29 2960d b2ca374f33bd f2fs: sanity check on sit entry
KASAN: null-ptr-deref Write in simple_write_to_buffer fs 12 syz, C 5 3000d 3025d 8/29 2960d fc14eebfc208 PM / hibernate: Fix oops at snapshot_write()
general protection fault in touch_atime fs 2 syz 6 2988d 2992d 8/29 2960d 66e58e0ef80a bpfilter: fix race in pipe access
WARNING: possible circular locking dependency detected (4) net -1 syz, C 27 3033d 3041d 8/29 2960d 05255b823a61 tcp: add TCP_ZEROCOPY_RECEIVE support for zerocopy receive
KASAN: slab-out-of-bounds Read in ip6_xmit (3) net 17 syz, C 69 2965d 3008d 8/29 2960d 9901c5d77e96 bpf: sockmap, fix crash when ipv6 sock is added
KASAN: slab-out-of-bounds Read in skb_ensure_writable bpf net 17 syz, C 9 2986d 2996d 8/29 2960d 58990d1ff3f7 bpf: reject passing modified ctx to helper functions
KASAN: use-after-free Read in bpf_csum_update bpf net 19 syz, C 1 2998d 2996d 8/29 2960d 58990d1ff3f7 bpf: reject passing modified ctx to helper functions
BUG: unable to handle kernel paging request in bpf_int_jit_compile bpf net 8 syz 2 2972d 2975d 8/29 2960d 85782e037f8a bpf: undo prog rejection on read-only lock failure
KASAN: use-after-free Write in bpf_tcp_close bpf 22 syz, C 67 2967d 3003d 8/29 2960d e9db4ef6bf4c bpf: sockhash fix omitted bucket lock in sock_close
general protection fault in bpf_tcp_close bpf 2 syz, C 421 2961d 3004d 8/29 2960d e9db4ef6bf4c bpf: sockhash fix omitted bucket lock in sock_close 54fedb42c653 bpf: sockmap, fix smap_list_map_remove when psock is in many maps
general protection fault in smc_ioctl smc 2 syz, C 5214 2982d 3012d 8/29 2960d 2351abe6f873 net/smc: return 0 for ioctl calls in states INIT and CLOSED
WARNING in do_dentry_open fs -1 syz, C 26 2984d 2991d 8/29 2960d b16558579576 bpf: implement dummy fops for bpf objects
KASAN: slab-out-of-bounds Write in prb_fill_curr_block net 21 syz, C 2 2999d 2998d 8/29 2960d eb73190f4fbe net/packet: refine check for priv area size
KASAN: slab-out-of-bounds Read in build_segment_manager f2fs 17 syz, C 1 3040d 3040d 8/29 2960d 8a29c1260e24 f2fs: sanity check for total valid node blocks
KASAN: use-after-free Read in xfs_inobt_init_key_from_rec xfs 19 syz, C 1 3057d 3057d 8/29 2960d 2e050e648ad6 xfs: fix inobt magic number check
KMSAN: uninit-value in rtnetlink_put_metrics net 7 syz 3 2994d 2995d 8/29 2960d 5b5e7a0de2bb net: metrics: add proper netlink validation
KASAN: slab-out-of-bounds Read in bpf_skb_change_head net bpf 17 syz, C 2 2986d 2986d 8/29 2960d 58990d1ff3f7 bpf: reject passing modified ctx to helper functions
KASAN: slab-out-of-bounds Write in sha1_finup crypto 21 syz, C 119 2972d 2992d 8/29 2960d 3619dec5103d dh key: fix rounding up KDF output length
WARNING: kmalloc bug in map_get_next_key bpf -1 syz, C 5 3013d 3014d 8/29 2960d 683d2ac3904c bpf: fix sock hashmap kmalloc warning
unexpected kernel reboot (2) kernel -1 syz, C 2073 2960d 3050d 8/29 2960d 0447378a4a79 kvm: vmx: Nested VM-entry prereqs for event inj.
BUG: workqueue lockup (3) -1 syz, C 1215 2964d 3017d 8/29 2960d 4fb48871409e restore cond_resched() in shrink_dcache_parent()
WARNING: kernel stack frame pointer has bad value -1 syz, C 1108 2962d 3041d 8/29 2960d f044a84e040b crypto: don't optimize keccakf()
general protection fault in vfs_read fs 2 syz 2 2990d 2992d 8/29 2960d 66e58e0ef80a bpfilter: fix race in pipe access
KASAN: use-after-free Read in ip6_route_mpath_notify net 19 syz, C 25 2993d 2998d 8/29 2960d f7225172f25a net/ipv6: prevent use after free in ip6_route_mpath_notify
BUG: unable to handle kernel NULL pointer dereference in do_sys_poll fs 10 syz, C 297 2970d 2970d 8/29 2960d e88958e6369a net: handle NULL ->poll gracefully
WARNING in ebt_do_table bridge netfilter -1 syz, C 13 2969d 2993d 8/29 2960d 11ff7288beb2 netfilter: ebtables: reject non-bridge targets
WARNING in sysfs_remove_group fs -1 syz, C 11125 2961d 3215d 8/29 2960d d3349b6b3c37 loop: remember whether sysfs_create_group() was done
KASAN: null-ptr-deref Write in xdp_umem_unaccount_pages bpf net 12 syz, C 25 2988d 2992d 8/29 2960d c09290c56376 bpf, xdp: fix crash in xdp_umem_unaccount_pages
WARNING: kernel stack regs at (ptrval) in syzkaller has bad 'bp' value (ptrval) kernel -1 syz, C 3 3037d 3037d 8/29 2960d f044a84e040b crypto: don't optimize keccakf()
WARNING: suspicious RCU usage in rt6_remove_exception_rt net 4 syz 1761 3035d 3036d 8/29 2960d 091311debcf0 net/ipv6: fix LOCKDEP issue in rt6_remove_exception_rt()
INFO: task hung in blk_queue_enter block 1 syz, C 1595 2960d 3032d 8/29 2960d cd4a4ae4683d block: don't use blocking queue entered for recursive bio submits
KASAN: use-after-free Read in skb_dequeue net 19 syz, C 4 2978d 2978d 8/29 2960d 945d015ee0c3 net/packet: fix use-after-free
KASAN: slab-out-of-bounds Write in sha1_final crypto 21 syz, C 201 2972d 2992d 8/29 2960d 3619dec5103d dh key: fix rounding up KDF output length
KASAN: use-after-free Read in corrupted mm 19 syz, C 2 3015d 3017d 8/29 2960d 543b8f8662fe fuse: don't keep dead fuse_conn at fuse_fill_super().
WARNING in ion_buffer_destroy staging -1 syz, C 7901 2990d 3141d 8/29 2960d 45ad559a2962 staging: android: ion: Switch to pr_warn_once in ion_buffer_destroy
KASAN: slab-out-of-bounds Write in tgr160_final crypto 21 syz, C 55 2972d 2991d 8/29 2960d 3619dec5103d dh key: fix rounding up KDF output length
KASAN: use-after-free Read in crypto_morus640_decrypt_chunk crypto 19 syz, C 3 2986d 2986d 8/29 2960d a81ae8095712 crypto: morus640 - Fix out-of-bounds access
WARNING: ODEBUG bug in del_timer (2) smc -1 syz, C 6 3013d 3014d 8/29 2960d be7f3e59997b net/smc: init conn.tx_work & conn.send_lock sooner
INFO: rcu detected stall in n_tty_receive_char_special serial 1 syz, C 3 3032d 3054d 8/29 2960d 3d63b7e4ae0d n_tty: Fix stall at n_tty_receive_char_special().
KMSAN: uninit-value in ip_vs_lblc_check_expire lvs 7 syz, C 1431 2960d 3037d 8/29 2960d 8b2ebb6cf064 ipvs: initialize tbl->entries in ip_vs_lblc_init_svc()
KASAN: null-ptr-deref Read in refcount_sub_and_test net 11 syz, C 4 3040d 3041d 8/29 2960d 263243d6c257 net/ipv6: Fix ip6_convert_metrics() bug
INFO: rcu detected stall in blkdev_ioctl block 1 syz, C 249 2991d 3165d 8/29 2960d d2ac838e4cd7 loop: add recursion validation to LOOP_CHANGE_FD
WARNING: kmalloc bug in memdup_user (3) bpf -1 syz, C 137 3013d 3014d 8/29 2960d 683d2ac3904c bpf: fix sock hashmap kmalloc warning
KASAN: slab-out-of-bounds Write in sha512_finup crypto 21 syz, C 25 2973d 2989d 8/29 2960d 3619dec5103d dh key: fix rounding up KDF output length
INFO: rcu detected stall in d_walk fs 1 syz, C 25680 2986d 3048d 8/29 2960d 4fb48871409e restore cond_resched() in shrink_dcache_parent()
INFO: rcu detected stall in save_stack_trace sctp 1 syz, C 1 3011d 3009d 8/29 2960d 1d88ba1ebb27 sctp: not allow transport timeout value less than HZ/5 for hb_timer
INFO: rcu detected stall in __process_echoes serial 1 syz, C 326 2968d 3063d 8/29 2960d ebec3f8f5271 n_tty: Access echo_* variables carefully.
INFO: task hung in blk_freeze_queue block 1 syz, C 188 2962d 3112d 8/29 2960d d2ac838e4cd7 loop: add recursion validation to LOOP_CHANGE_FD
possible deadlock in bpf_tcp_close bpf 4 syz, C 152 3002d 3002d 8/29 2960d e9db4ef6bf4c bpf: sockhash fix omitted bucket lock in sock_close
WARNING in arch_uprobe_analyze_insn trace -1 syz, C 2 3016d 3016d 8/29 2960d 90718e32e1dc uprobes/x86: Remove incorrect WARN_ON() in uprobe_init_insn()
KASAN: use-after-free Read in rds_cong_queue_updates rds 19 syz, C 18168 2965d 3097d 8/29 2960d f1693c63ab13 rds: avoid unenecessary cong_update in loop transport c809195f5523 rds: clean up loopback rds_connections on netns deletion
KASAN: use-after-free Read in iput fuse 19 syz, C 2 3043d 3043d 8/29 2961d 0c92c7a3c5d4 tracing: Fix bad use of igrab in trace_uprobe.c
INFO: task hung in ucma_destroy_id rdma 1 syz, C 46 3042d 3078d 5/29 2964d ef95a90ae6f4 RDMA/ucma: ucma_context reference leak in error path
BUG: corrupted list in tipc_nametbl_unsubscribe tipc 8 syz, C 40 3022d 3082d 5/29 2964d c3317f4db831 tipc: fix unbalanced reference counter
general protection fault in kernel_sock_shutdown smc 2 syz, C 3329 3038d 3096d 5/29 2964d 1255fcb2a655 net/smc: fix shutdown in state SMC_LISTEN
INFO: trying to register non-static key in tun_do_read net -1 syz, C 28 3016d 3022d 5/29 2981d 7063efd33bb1 tuntap: fix use after free during release
KASAN: use-after-free Read in iptunnel_handle_offloads net 19 syz, C 133 3006d 3052d 5/29 2981d 9aad13b087ab packet: fix reserve calculation
WARNING: suspicious RCU usage in rds_loop_conn_alloc rds 4 syz, C 34303 3099d 3107d 5/29 2987d d4014d8cc6df rds: do not call ->conn_alloc with GFP_KERNEL
general protection fault in kernfs_kill_sb (2) kernfs 2 syz, C 22 3006d 3018d 5/29 2992d 82382acec0c9 kernfs: deal with kernfs_fill_super() failures
KMSAN: uninit-value in ebt_stp_mt_check netfilter bridge 7 syz, C 211 2992d 3037d 5/29 2992d a4995684a949