Extra filters: [With Repro]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
general protection fault in em_cmp_match 2 syz, C 1 1349d 1349d 1/1 1319d 9cd3fd2054c3 net_sched: reject TCF_EM_SIMPLE case for complex ematch module
KASAN: use-after-free Read in bcm_can_tx 19 syz, C 2 1691d 2148d 1/1 1673d 632881680ba0 can: bcm: fix UAF of bcm op
general protection fault in ieee802154_llsec_parse_key_id 11 syz, C done 101 1961d 2016d 1/1 1930d 6f7f657f2440 net: ieee802154: nl-mac: fix check on panid
general protection fault in nl802154_del_llsec_devkey 2 syz, C done 171 1961d 2022d 1/1 1930d 27c746869e1a net: ieee802154: fix nl802154 del llsec devkey
general protection fault in nl802154_del_llsec_key 2 syz, C done 135 1961d 2017d 1/1 1930d 37feaaf5ceb2 net: ieee802154: fix nl802154 del llsec key
general protection fault in try_to_wake_up 2 syz, C done 707 1961d 1990d 1/1 1930d cca8ea3b05c9 net: tun: set tun->dev->addr_len during TUNSETLINK processing
general protection fault in nl802154_add_llsec_key 2 syz, C done 168 1961d 2021d 1/1 1930d 20d5fe2d7103 net: ieee802154: fix nl802154 add llsec key
general protection fault in nl802154_del_llsec_dev 2 syz, C done 136 1961d 2023d 1/1 1931d 3d1eac2f4558 net: ieee802154: fix nl802154 del llsec dev
INFO: trying to register non-static key in ieee802154_get_llsec_params -1 syz, C done 8 1964d 1988d 1/1 1934d 1534efc7bbc1 net: ieee802154: stop dump llsec params for monitors
WARNING in cfg80211_connect -1 syz, C done 101 1978d 2158d 1/1 1944d 1b5ab825d9ac cfg80211: remove WARN_ON() in cfg80211_sme_connect
BUG: unable to handle kernel NULL pointer dereference in __lookup_hash 10 syz, C done 31 1974d 2167d 1/1 1944d d24396c5290b reiserfs: add check for an invalid ih_entry_count
general protection fault in selinux_socket_sendmsg 2 syz, C done 3 1983d 2155d 1/1 1952d 363eaa3a450a usbip: synchronize event handler with sysfs code paths
KASAN: use-after-free Read in ieee80211_ibss_build_presp 19 syz, C done 2 1984d 2130d 1/1 1954d 3bd801b14e0c mac80211: fix double free in ibss_leave
possible deadlock in red_adaptative_timer 4 syz, C done 2 1986d 2077d 1/1 1956d e323d865b361 net: sched: validate stab values
BUG: unable to handle kernel NULL pointer dereference in vhci_shutdown_connection 10 syz done 1335 1990d 2081d 1/1 1958d 363eaa3a450a usbip: synchronize event handler with sysfs code paths
WARNING in ext4_xattr_set_entry -1 syz, C done 19 2002d 2158d 1/1 1970d 6b22489911b7 ext4: do not try to set xattr into ea_inode if value is empty
BUG: unable to handle kernel NULL pointer dereference in amp_read_loc_assoc_final_data 10 syz, C done 207 2003d 2220d 1/1 1970d e8bd76ede155 Bluetooth: Fix null pointer dereference in amp_read_loc_assoc_final_data
KASAN: use-after-free Read in ntfs_iget 19 syz, C done 2 2015d 2091d 1/1 1984d 4dfe6bd94959 ntfs: check for valid standard information attribute
KASAN: use-after-free Read in ntfs_read_locked_inode 19 syz, C done 2 2016d 2168d 1/1 1986d 4dfe6bd94959 ntfs: check for valid standard information attribute
KASAN: slab-out-of-bounds Read in squashfs_export_iget 17 syz, C done 4 2044d 2147d 1/1 2010d eabac19e40c0 squashfs: add more sanity checks in inode lookup
general protection fault in ieee80211_subif_start_xmit 2 syz done 1 2041d 2101d 1/1 2010d 054c9939b480 mac80211: pause TX while changing interface type
general protection fault in ioctl_standard_call 2 syz, C done 24 2042d 2138d 1/1 2010d 5122565188ba wext: fix NULL-ptr-dereference with cfg80211's lack of commit()
KASAN: slab-out-of-bounds Read in squashfs_get_id 17 syz, C 11 2013d 2167d 1/1 2012d f37aa4c7366e squashfs: add more sanity checks in id lookup
KASAN: use-after-free Read in squashfs_get_id 19 syz, C 1 2013d 2109d 1/1 2012d f37aa4c7366e squashfs: add more sanity checks in id lookup
KASAN: use-after-free Read in reiserfs_fill_super 19 syz, C done 2 2061d 2061d 1/1 2014d d24396c5290b reiserfs: add check for an invalid ih_entry_count
divide error in do_journal_end 2 syz, C done 1 2058d 2118d 1/1 2014d d24396c5290b reiserfs: add check for an invalid ih_entry_count
KASAN: use-after-free Read in search_by_entry_key 19 syz, C done 3 2061d 2167d 1/1 2014d d24396c5290b reiserfs: add check for an invalid ih_entry_count
KASAN: use-after-free Read in reiserfs_read_locked_inode 19 syz, C done 5 2063d 2168d 1/1 2016d d24396c5290b reiserfs: add check for an invalid ih_entry_count
general protection fault in dqput 2 syz, C done 1 2070d 2070d 1/1 2040d 11c514a99bb9 quota: Sanity-check quota file headers on load
KASAN: use-after-free Read in leaf_paste_entries 19 syz, C done 6 2072d 2116d 1/1 2040d d24396c5290b reiserfs: add check for an invalid ih_entry_count
general protection fault in hci_phy_link_complete_evt 2 syz, C done 40 2071d 2218d 1/1 2040d 6dfccd13db2f Bluetooth: Fix null pointer dereference in hci_event_packet()
BUG: unable to handle kernel paging request in dquot_add_inodes 8 syz, C done 2 2073d 2095d 1/1 2043d 11c514a99bb9 quota: Sanity-check quota file headers on load
BUG: unable to handle kernel paging request in dqput 8 syz, C done 9 2076d 2165d 1/1 2044d 11c514a99bb9 quota: Sanity-check quota file headers on load
kernel BUG at net/core/dev.c:LINE! -1 syz, C inconclusive 3 2069d 2338d 1/1 2049d 54970a2fbb67 net: drop bogus skb with CHECKSUM_PARTIAL and offset beyond end of trimmed packet
kernel BUG at fs/reiserfs/prints.c:LINE! -1 syz, C done 3 2085d 2165d 1/1 2054d d24396c5290b reiserfs: add check for an invalid ih_entry_count
general protection fault in get_work_pool 2 syz, C done 1 2087d 2117d 1/1 2057d 905b2032fa42 mac80211: mesh: fix mesh_pathtbl_init() error path
BUG: corrupted list in dquot_disable 8 syz, C done 1 2089d 2089d 1/1 2058d 11c514a99bb9 quota: Sanity-check quota file headers on load
KASAN: use-after-free Read in sco_chan_del 19 syz, C done 10 2091d 2217d 1/1 2061d 6dfccd13db2f Bluetooth: Fix null pointer dereference in hci_event_packet()
INFO: trying to register non-static key in rhashtable_free_and_destroy -1 syz, C done 4 2095d 2109d 1/1 2062d 905b2032fa42 mac80211: mesh: fix mesh_pathtbl_init() error path
KASAN: slab-out-of-bounds Read in hci_le_meta_evt 17 syz, C done 15 2098d 2218d 1/1 2068d f7e0e8b2f1b0 Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt()
BUG: unable to handle kernel paging request in dquot_add_space 8 syz, C done 1 2098d 2159d 1/1 2068d 11c514a99bb9 quota: Sanity-check quota file headers on load
BUG: sleeping function called from invalid context in sta_info_move_state 5 syz, C done 1101 2104d 2106d 1/1 2073d 7bc40aedf24d mac80211: free sta in sta_info_insert_finish() on errors
general protection fault in qp_release_pages 2 syz, C done 2 2106d 2136d 1/1 2075d 90ca6333fd65 VMCI: check return value of get_user_pages_fast() for errors
WARNING in unlock_new_inode -1 syz, C done 55 2132d 2170d 1/1 2102d 8859bf2b1278 reiserfs: only call unlock_new_inode() if I_NEW
KASAN: slab-out-of-bounds Write in init_sb 21 syz, C done 3 2133d 2167d 1/1 2103d 0ddc5154b24c gfs2: add validation checks for size of superblock
KASAN: global-out-of-bounds Read in fbcon_resize 17 syz, C done 529 2138d 2186d 1/1 2107d ec0972adecb3 fbcon: Fix user font detection test at fbcon_resize().
INFO: task hung in ucma_close 1 syz, C done 421 2138d 2550d 1/1 2107d ef95a90ae6f4 RDMA/ucma: ucma_context reference leak in error path
KASAN: global-out-of-bounds Read in vga16fb_imageblit 17 syz, C done 723 2138d 2461d 1/1 2107d bd018a6a75ce video: fbdev: fix OOB read in vga_8planes_imageblit()
KASAN: slab-out-of-bounds Read in ntfs_attr_find 17 syz, C done 10 2138d 2166d 1/1 2107d 4f8c94022f0b ntfs: add check for mft record size in superblock
KASAN: global-out-of-bounds Read in fbcon_get_font 17 syz, C done 42 2145d 2461d 1/1 2114d 5af08640795b fbcon: Fix global-out-of-bounds read in fbcon_get_font()
KASAN: use-after-free Read in ntfs_attr_find 19 syz, C done 4 2146d 2166d 1/1 2116d 4f8c94022f0b ntfs: add check for mft record size in superblock
KASAN: global-out-of-bounds Read in get_unique_tuple 17 syz, C done 5 2159d 2331d 1/1 2129d 1cc5ef91d2ff netfilter: ctnetlink: add a range check for l3/l4 protonum
general protection fault in open_xa_dir 2 syz, C done 1 2167d 2167d 1/1 2136d c2bb80b8bdd0 reiserfs: Fix oops during mount
KASAN: use-after-free Read in rxrpc_see_skb 19 syz done 1 2188d 2188d 1/1 2138d 564c836fd945 MIPS: SNI: Fix MIPS_L1_CACHE_SHIFT
INFO: task hung in nbd_ioctl (2) 1 syz, C done 16 2184d 2429d 1/1 2138d a4b5cc9e1080 tipc: fix shutdown() of connection oriented socket
WARNING in restore_regulatory_settings -1 syz, C done 2264 2179d 2426d 1/1 2149d 47caf685a685 cfg80211: regulatory: reject invalid hints
general protection fault in __sock_release 2 syz done 12 2180d 2192d 1/1 2149d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
general protection fault in locks_remove_file 2 syz done 6 2180d 2191d 1/1 2150d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
general protection fault in tty_release 2 syz, C done 10 2181d 2191d 1/1 2151d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: use-after-free Read in seq_release_private 19 syz done 1 2182d 2182d 1/1 2151d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
WARNING: ODEBUG bug in corrupted -1 syz done 1 2183d 2183d 1/1 2151d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
WARNING: ODEBUG bug in exit_to_usermode_loop -1 syz done 2 2185d 2187d 1/1 2154d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: use-after-free Read in __sock_release 19 syz done 3 2185d 2193d 1/1 2154d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
WARNING in snd_pcm_drop -1 syz done 1 2184d 2184d 1/1 2154d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
BUG: corrupted list in fuse_dev_free 8 syz done 1 2186d 2186d 1/1 2155d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
general protection fault in kmem_cache_free 2 syz done 3 2187d 2187d 1/1 2156d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: use-after-free Read in snd_pcm_oss_release 19 syz done 1 2187d 2187d 1/1 2156d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: use-after-free Write in ex_handler_refcount 22 syz, C done 16 2187d 2396d 1/1 2156d f9c70bdc279b Bluetooth: add a mutex lock to avoid UAF in do_enale_set
KASAN: double-free or invalid-free in (null) 24 syz done 1 2188d 2188d 1/1 2157d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
BUG: corrupted list in mousedev_release 8 syz done 1 2189d 2189d 1/1 2159d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
INFO: trying to register non-static key in uhid_char_release -1 syz, C done 2 2190d 2210d 1/1 2160d bce1305c0ece HID: core: Correctly handle ReportSize being zero
KASAN: slab-out-of-bounds Read in hci_event_packet 17 syz, C done 17 2202d 2676d 1/1 2172d 629b49c848ee Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_with_rssi_evt()
KASAN: slab-out-of-bounds Read in hci_inquiry_result_with_rssi_evt 17 syz, C done 6 2203d 2219d 1/1 2173d 629b49c848ee Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_with_rssi_evt()
KASAN: use-after-free Read in get_block 19 syz, C done 8 2208d 2333d 1/1 2177d 270ef41094e9 fs/minix: reject too-large maximum file size
WARNING in inc_nlink -1 syz, C done 21 2208d 2351d 1/1 2178d facb03dddec0 fs/minix: don't allow getting deleted inodes
KASAN: slab-out-of-bounds Read in get_block 17 syz, C done 2 2208d 2238d 1/1 2178d 270ef41094e9 fs/minix: reject too-large maximum file size
BUG: unable to handle kernel NULL pointer dereference in get_block 10 syz, C done 45 2209d 2356d 1/1 2179d da27e0a0e5f6 fs/minix: check return value of sb_getblk()
KASAN: slab-out-of-bounds Read in hci_extended_inquiry_result_evt 17 syz, C done 5 2212d 2218d 1/1 2180d 51c19bf3d5cf Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt()
KASAN: use-after-free Read in delete_and_unsubscribe_port 19 syz done 2 2221d 2221d 1/1 2187d 80982c7e834e ALSA: seq: oss: Serialize ioctls
KASAN: double-free or invalid-free in 0x2 24 syz done 1 2221d 2221d 1/1 2187d 80982c7e834e ALSA: seq: oss: Serialize ioctls
INFO: task hung in fb_release 1 syz, C done 48 2223d 2454d 1/1 2191d 033724d68642 fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins.
unregister_netdevice: waiting for DEV to become free 2 syz, C done 120 2249d 2688d 1/1 2218d 5db7c8b9f9fc ipvs: fix tinfo memory leak in start_sync_thread
general protection fault in batadv_iv_ogm_schedule_buff 2 1 2325d 2325d 1/1 2242d 8e8ce08198de batman-adv: Don't schedule OGM for disabled interface
KASAN: null-ptr-deref Write in choke_reset 12 syz, C done 283 2292d 2322d 1/1 2262d 8738c85c72b3 sch_choke: avoid potential panic in choke_reset()
KASAN: use-after-free Read in do_blk_trace_setup 19 syz, C done 342 2292d 2697d 1/1 2262d 1f2cac107c59 blktrace: fix unlocked access to init/start-stop/teardown
WARNING in xfrm_policy_insert -1 syz done 8 2296d 2555d 1/1 2266d ed17b8d377ea xfrm: fix a warning in xfrm_policy_insert_list
KASAN: slab-out-of-bounds Write in snd_rawmidi_kernel_write1 21 syz, C done 1 2297d 2327d 1/1 2267d c1f6e3c818dd ALSA: rawmidi: Fix racy buffer resize under concurrent accesses
WARNING: ODEBUG bug in route4_change -1 syz, C done 23 2340d 2368d 1/1 2309d ef299cc3fa1a net_sched: cls_route: remove the right filter from hashtable
KASAN: use-after-free Write in release_tty 22 syz, C done 124 2341d 2460d 1/1 2310d ca4463bf8438 vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console
WARNING: ODEBUG bug in rfcomm_dev_ioctl -1 syz, C done 2 2349d 2349d 1/1 2318d 71811cac8532 Bluetooth: RFCOMM: fix ODEBUG bug in rfcomm_dev_ioctl
KASAN: slab-out-of-bounds Read in selinux_xfrm_alloc_user 17 syz, C done 1 2350d 2350d 1/1 2320d a1a7e3a36e01 xfrm: add the missing verify_sec_ctx_len check in xfrm_add_acquire
WARNING: refcount bug in sock_wfree 13 syz, C done done 3 2351d 2472d 1/1 2321d 5c3e82fe1596 sctp: fix refcount bug in sctp_wfree
KASAN: use-after-free Write in tcindex_set_parms 22 syz, C done 3 2354d 2354d 1/1 2323d 0d1c3530e1bd net_sched: keep alloc_hash updated after hash allocation
KASAN: slab-out-of-bounds Write in tcindex_set_parms 21 syz, C done 2 2354d 2354d 1/1 2324d 0d1c3530e1bd net_sched: keep alloc_hash updated after hash allocation
WARNING: ODEBUG bug in rfcomm_dlc_free -1 syz, C done 16 2357d 2589d 1/1 2326d 71811cac8532 Bluetooth: RFCOMM: fix ODEBUG bug in rfcomm_dev_ioctl
KASAN: use-after-free Read in tty_open 19 syz, C done 5 2359d 2461d 1/1 2329d ca4463bf8438 vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console
KASAN: use-after-free Read in tty_buffer_cancel_work 19 syz, C done 2 2368d 2456d 1/1 2338d ca4463bf8438 vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console
KASAN: use-after-free Read in get_work_pool 19 syz, C done 1 2369d 2459d 1/1 2339d ca4463bf8438 vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console
KASAN: use-after-free Read in n_tty_receive_buf_common 19 syz, C done 25 2371d 2460d 1/1 2339d e8c75a30a23c vt: selection, push sel_lock up
WARNING: kernel stack frame pointer has bad value -1 syz, C done 65 2376d 2680d 1/1 2342d a288f105a03a fjes: fix missed check in fjes_acpi_add
INFO: task hung in paste_selection 1 syz, C done 8 2376d 2452d 1/1 2346d afe207d80a61 ipvlan: do not use cond_resched_rcu() in ipvlan_process_multicast()
INFO: task hung in drain_all_pages 1 syz, C done 1 2377d 2377d 1/1 2347d 8d0015a7ab76 netfilter: xt_hashlimit: limit the max size of hashtable
INFO: task hung in tty_ldisc_hangup 1 syz, C done 17 2384d 2455d 1/1 2354d e8c75a30a23c vt: selection, push sel_lock up
INFO: task hung in hashlimit_mt_check_common 1 syz, C done 6 2387d 2439d 1/1 2355d 8d0015a7ab76 netfilter: xt_hashlimit: limit the max size of hashtable
KASAN: stack-out-of-bounds Write in ax25_getname 21 syz, C done 4 2386d 2682d 1/1 2355d 42d84c8490f9 vhost: Check docket sk_family instead of call getname
KASAN: slab-out-of-bounds Read in tcf_exts_destroy 17 syz, C done 1 2391d 2504d 1/1 2361d 599be01ee567 net_sched: fix an OOB access in cls_tcindex
general protection fault in path_openat 2 syz, C done 40 2397d 2403d 1/1 2366d 6404674acd59 vfs: fix do_last() regression
BUG: sleeping function called from invalid context in tpk_write 5 syz, C done 10 2397d 2458d 1/1 2366d 9a655c77ff8f ttyprintk: fix a potential deadlock in interrupt context issue
BUG: sleeping function called from invalid context in lock_sock_nested (2) 5 syz done 1 2399d 2459d 1/1 2369d 37f96694cf73 crypto: af_alg - Use bh_lock_sock in sk_destruct
KASAN: use-after-free Read in ext4_xattr_set_entry 19 syz, C done 9 2401d 2493d 1/1 2371d 9803387c55f7 ext4: validate the debug_want_extra_isize mount option at parse time
KASAN: slab-out-of-bounds Read in __nla_put_nohdr 17 syz, C done 2 2405d 2405d 1/1 2375d cb626bf566eb net-sysfs: Fix reference count leak
KASAN: slab-out-of-bounds Write in setup_udp_tunnel_sock 21 syz, C done 1 2409d 2409d 1/1 2378d de19055564c8 Documentation: Document arm64 kpti control
KASAN: use-after-free Read in snd_timer_resolution 19 syz, C done 1 2411d 2411d 1/1 2381d 60adcfde92fa ALSA: seq: Fix racy access for queue timer in proc read
INFO: task hung in genl_rcv_msg 1 syz done 2 2415d 2415d 1/1 2385d c13c48c00a6b tcp: clear tp->total_retrans in tcp_disconnect()
WARNING in reconnect_path -1 syz, C done done 1 2417d 2477d 1/1 2386d 909e22e05353 exportfs: fix 'passing zero to ERR_PTR()' warning
KASAN: use-after-free Write in __alloc_skb 22 syz, C done 1 2421d 2451d 1/1 2387d d836f5c69d87 net: rtnetlink: validate IFLA_MTU attribute in rtnl_create_link()
KASAN: use-after-free Read in cdev_put 19 syz, C done 6 2421d 2464d 1/1 2390d fa2ac657f978 xen-blkback: prevent premature module unload
KASAN: slab-out-of-bounds Read in macvlan_broadcast 17 syz, C done 6 2422d 2426d 1/1 2391d 96cc4b69581d macvlan: do not assume mac_header is set in macvlan_broadcast()
KASAN: use-after-free Read in macvlan_broadcast 19 syz, C done 8 2423d 2426d 1/1 2393d 96cc4b69581d macvlan: do not assume mac_header is set in macvlan_broadcast()
WARNING: bad unlock balance in gtp_encap_enable_socket 4 syz, C done 2 2424d 2427d 1/1 2393d 90d72256addf gtp: fix bad unlock balance in gtp_encap_enable_socket
KASAN: slab-out-of-bounds Read in bpf_skb_change_tail 17 syz, C done 2 2429d 2576d 1/1 2397d 58990d1ff3f7 bpf: reject passing modified ctx to helper functions
KASAN: slab-out-of-bounds Read in bpf_skb_change_proto 17 syz, C done 2 2429d 2576d 1/1 2397d 58990d1ff3f7 bpf: reject passing modified ctx to helper functions
KASAN: slab-out-of-bounds Read in bpf_clone_redirect 17 syz, C done 11 2435d 2598d 1/1 2404d 58990d1ff3f7 bpf: reject passing modified ctx to helper functions
KASAN: slab-out-of-bounds Read in bpf_skb_change_head 17 syz, C done 2 2439d 2508d 1/1 2407d 58990d1ff3f7 bpf: reject passing modified ctx to helper functions
possible deadlock in refcount_dec_and_mutex_lock 4 syz, C done 10 2438d 2510d 1/1 2407d cf1b2326b734 nbd: verify socket is supported during setup
WARNING: refcount bug in cdev_get 13 syz, C done 21 2439d 2569d 1/1 2409d 38b4fe320119 net: usb: lan78xx: Connect PHY before registering MAC
INFO: rcu detected stall in br_handle_frame (2) 1 syz, C done 1 2444d 2444d 1/1 2413d d9e15a273306 pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM
WARNING in ovl_rename -1 syz done 2 2447d 2680d 1/1 2414d 6889ee5a53b8 ovl: relax WARN_ON() on rename to self
inconsistent lock state in sp_get 4 syz, C done 2 2452d 2452d 1/1 2421d 5c9934b6767b 6pack,mkiss: fix possible deadlock
KASAN: slab-out-of-bounds Read in linear_transfer 17 syz, C done 4 2453d 2460d 1/1 2422d 4cc8d6505ab8 ALSA: pcm: oss: Avoid potential buffer overflows
possible deadlock in __might_fault 4 syz, C done 295 2455d 2695d 1/1 2424d 19e6317d24c2 usb: mon: Fix a deadlock in usbmon between mmap and read
possible deadlock in mon_bin_vma_fault 4 syz, C done 282 2456d 2691d 1/1 2425d 19e6317d24c2 usb: mon: Fix a deadlock in usbmon between mmap and read
WARNING: refcount bug in kobject_get 13 syz, C done 20 2460d 2694d 1/1 2430d e95584a889e1 tipc: fix unlimited bundling of small messages
WARNING in refcount_error_report -1 syz done 1 2462d 2462d 1/1 2430d 501a90c94510 inet: protect against too small mtu values.
BUG: corrupted list in p9_fd_cancelled 8 syz done 2 2461d 2507d 1/1 2430d 6e616864f211 arm64: Add MIDR encoding for Arm Cortex-A55 and Cortex-A35
BUG: unable to handle kernel paging request in slhc_free 8 syz, C done 4 2465d 2692d 1/1 2433d baf76f0c58ae slip: make slhc_free() silently accept an error pointer
WARNING in dio_complete -1 syz, C done 27 2465d 2694d 1/1 2433d 8962842ca5ab blk-mq: avoid sysfs buffer overflow with too many CPU cores
KASAN: use-after-free Read in slip_open 19 syz, C done done 2 2468d 2468d 1/1 2436d e58c19124189 slip: Fix use-after-free Read in slip_open
KASAN: use-after-free Read in kfree_skb 19 syz, C done 98 2466d 2594d 1/1 2436d cf94da6f502d Bluetooth: Fix invalid-free in bcsp_close()
INFO: task hung in nbd_ioctl 1 syz, C done 18 2437d 2511d 1/1 2436d cf1b2326b734 nbd: verify socket is supported during setup
WARNING: suspicious RCU usage in shmem_add_seals 4 syz, C done done 1435 2473d 2496d 1/1 2443d 988f701a805b memfd: Use radix_tree_deref_slot_protected to avoid the warning.
possible deadlock in flush_workqueue 4 syz, C done 15 2476d 2568d 1/1 2445d cf1b2326b734 nbd: verify socket is supported during setup
WARNING in bpf_jit_free -1 syz done 60 2518d 2691d 1/1 2446d c751798aa224 bpf: fix use after free in prog symbol exposure
INFO: task hung in lo_release 1 syz done 128 2584d 2696d 1/1 2447d 22f36db48781 Revert "block/loop: Use global lock for ioctl() operation."
BUG: unable to handle kernel NULL pointer dereference in inet_autobind 10 syz, C inconclusive done 3133 2488d 2496d 1/1 2448d 9b6c08878e23 sctp: not bind the socket in sctp_connect
BUG: unable to handle kernel NULL pointer dereference in blk_mq_map_swqueue 10 syz, C done 20 2449d 2687d 1/1 2448d e9e006f5fcf2 nbd: fix max number of supported devs
BUG: unable to handle kernel paging request in dummy_set_vf_vlan 8 syz, C done 5 2481d 2575d 1/1 2448d ff08ddba3a55 net: rtnetlink: prevent underflows in do_setvfinfo()
BUG: unable to handle kernel paging request in dummy_set_vf_spoofchk 8 syz, C done 6 2485d 2596d 1/1 2448d ff08ddba3a55 net: rtnetlink: prevent underflows in do_setvfinfo()
BUG: unable to handle kernel paging request in dummy_get_vf_config 8 syz, C done 4 2500d 2598d 1/1 2450d ff08ddba3a55 net: rtnetlink: prevent underflows in do_setvfinfo()
WARNING: suspicious RCU usage in netem_enqueue 4 syz, C done 3 2505d 2528d 1/1 2451d 62794fc4fbf5 net_sched: add max len check for TCA_KIND
BUG: unable to handle kernel paging request in dummy_set_vf_rss_query_en 8 syz, C done 5 2505d 2596d 1/1 2451d ff08ddba3a55 net: rtnetlink: prevent underflows in do_setvfinfo()
BUG: unable to handle kernel paging request in dummy_set_vf_mac 8 syz, C done 5 2514d 2586d 1/1 2451d ff08ddba3a55 net: rtnetlink: prevent underflows in do_setvfinfo()
BUG: unable to handle kernel NULL pointer dereference in tc_bind_tclass 10 syz, C done 14 2508d 2548d 1/1 2451d 8b142a00edcf net_sched: check cops->tcf_block in tc_bind_tclass()
KASAN: null-ptr-deref Write in kvm_write_guest_virt_system 12 syz, C done 53 2514d 2532d 1/1 2452d 144783a80cd2 watchdog: imx2_wdt: fix min() calculation in imx2_wdt_set_timeout
WARNING in tcp_send_loss_probe -1 syz, C done 22 2535d 2545d 1/1 2455d ba2ddb43f270 tcp: Don't dequeue SYN/FIN-segments from write-queue
general protection fault in tcp_push 2 syz, C done 55 2534d 2545d 1/1 2455d f1dcc5ed4bea tcp: Reset send_head when removing skb from write-queue
BUG: unable to handle kernel paging request in dummy_set_vf_rate 8 syz, C done 3 2534d 2549d 1/1 2455d ff08ddba3a55 net: rtnetlink: prevent underflows in do_setvfinfo()
WARNING in tcp_retransmit_timer -1 syz, C done 215 2534d 2545d 1/1 2455d ba2ddb43f270 tcp: Don't dequeue SYN/FIN-segments from write-queue
general protection fault in qdisc_destroy 2 syz, C done 4 2534d 2539d 1/1 2455d 6efb971ba8ed net_sched: let qdisc_put() accept NULL pointer
INFO: rcu detected stall in mld_dad_timer_expire 1 syz, C done 1 2540d 2540d 1/1 2455d d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
INFO: rcu detected stall in br_handle_frame 1 syz, C done 15 2536d 2548d 1/1 2456d d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
WARNING in kernfs_get -1 syz, C done 17 2566d 2686d 1/1 2456d ac43432cb1f5 driver core: Fix use-after-free and double free on glue directory
INFO: rcu detected stall in mld_ifc_timer_expire 1 syz, C done 9 2538d 2548d 1/1 2457d d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
WARNING in xfrm_state_fini -1 syz, C done 193 2541d 2695d 1/1 2458d dbb2483b2a46 xfrm: clean up xfrm protocol checks
INFO: rcu detected stall in addrconf_dad_work 1 syz, C done 18 2541d 2548d 1/1 2458d d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
INFO: rcu detected stall in corrupted 1 syz, C done 3 2542d 2564d 1/1 2458d d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
BUG: unable to handle kernel paging request in dummy_set_vf_trust 8 syz, C done 2 2550d 2583d 1/1 2459d ff08ddba3a55 net: rtnetlink: prevent underflows in do_setvfinfo()
WARNING in map_lookup_elem -1 syz, C done 2 2556d 2556d 1/1 2459d 335e192a3fa4 KVM: x86: add tracepoints around __direct_map and FNAME(fetch)
WARNING: refcount bug in hci_register_dev 13 syz, C done 3 2554d 2569d 1/1 2459d ac43432cb1f5 driver core: Fix use-after-free and double free on glue directory
kernel BUG at ./include/linux/skbuff.h:LINE! -1 syz, C done 16 2550d 2576d 1/1 2459d e5df4baea324 tcp: fix tcp_rtx_queue_tail in case of empty retransmit queue
general protection fault in packet_lookup_frame 2 syz, C done 1 2572d 2572d 1/1 2459d 32d3182cd2cd net/packet: fix race in tpacket_snd()
WARNING: refcount bug in kobject_put 13 syz, C done 3 2576d 2683d 1/1 2459d ac43432cb1f5 driver core: Fix use-after-free and double free on glue directory
general protection fault in tcf_ife_init 2 syz, C done 12 2587d 2597d 1/1 2460d c8ec4632c6ac ife: error out when nla attributes are empty
general protection fault in kernfs_add_one 2 syz, C done 5 2584d 2653d 1/1 2460d ac43432cb1f5 driver core: Fix use-after-free and double free on glue directory
WARNING in sysfs_remove_group -1 syz, C done 1 2600d 2600d 1/1 2461d ac43432cb1f5 driver core: Fix use-after-free and double free on glue directory
BUG: unable to handle kernel paging request in coalesced_mmio_write 8 syz, C done 4 2618d 2624d 1/1 2462d b60fe990c6b0 KVM: coalesced_mmio: add bounds checking
WARNING in kernfs_put -1 syz, C done 2 2616d 2683d 1/1 2462d ac43432cb1f5 driver core: Fix use-after-free and double free on glue directory
KASAN: use-after-free Read in erspan_build_header 19 syz, C done 18 2662d 2697d 1/1 2463d b423d13c08a6 net: erspan: fix use-after-free
KASAN: slab-out-of-bounds Read in erspan_build_header 17 syz, C done 8 2661d 2697d 1/1 2463d 526f5b851a96 tipc: fix modprobe tipc failed after switch order of device registration
WARNING in notify_change -1 syz, C done 14 2626d 2691d 1/1 2463d f69e749a4935 Abort file_remove_privs() for non-reg. files
KASAN: use-after-free Read in tcp_init_tso_segs 19 syz, C 1424 2534d 2545d 1/1 2521d f1dcc5ed4bea tcp: Reset send_head when removing skb from write-queue