Extra filters: [With Repro]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
general protection fault in em_cmp_match 2 syz, C 1 1399d 1399d 0/1 never 9cd3fd2054c3 net_sched: reject TCF_EM_SIMPLE case for complex ematch module
KASAN: use-after-free Read in tc_chain_fill_node 19 syz, C 1031 1318d 2562d 0/1 never 6f99528e9797 net: core: netlink: add helper refcount dec and lock function 9d7e82cec35c net: sched: add helper function to take reference to Qdisc 3a7d0d07a386 net: sched: extend Qdisc with rcu 86bd446b5ceb net: sched: rename qdisc_destroy() to qdisc_put() e368fdb61d8e net: sched: use Qdisc rcu API instead of relying on rtnl lock
KASAN: use-after-free Read in skb_dequeue (2) 19 syz, C done 2 1854d 1884d 1/1 1824d bb2853a6a421 tty: Fix data race between tiocsti() and flush_to_ldisc()
KASAN: use-after-free Read in ext4_xattr_set_entry (2) 19 syz, C done 7 1857d 2315d 1/1 1826d a54c4613dac1 ext4: fix race writing to an inline_data file while its xattrs are changing
inconsistent lock state in sco_sock_timeout 4 syz, C done 19 1857d 2248d 1/1 1827d ba316be1b6a0 Bluetooth: schedule SCO timeouts with delayed_work
BUG: sleeping function called from invalid context in lock_sock_nested (2) 5 syz, C done 3909 1858d 1951d 1/1 1827d e04480920d1e Bluetooth: defer cleanup of resources in hci_unregister_dev()
KASAN: slab-out-of-bounds Write in ext4_write_inline_data 22 syz, C done 3 1863d 2069d 1/1 1833d a54c4613dac1 ext4: fix race writing to an inline_data file while its xattrs are changing
BUG: soft lockup in tx 1 syz, C done 1 1866d 1896d 1/1 1835d c7c5e6ff533f fq_codel: reject silly quantum parameters
BUG: corrupted list in kobject_add_internal 8 syz, C done 2 1870d 2117d 1/1 1839d 734bc5ff7831 Bluetooth: avoid circular locks in sco_sock_connect
kernel BUG in kvm_hv_set_msr_common -1 syz done 2 1870d 1900d 1/1 1840d 8750e72a79dd KVM: remember position in kvm->vcpus array
BUG: unable to handle kernel paging request in do_syscall_64 8 syz, C done 3 1876d 2394d 1/1 1843d a49145acfb97 fbmem: add margin check to fb_check_caps()
general protection fault in do_syscall_64 (2) 2 syz done 2 1875d 2208d 1/1 1843d a49145acfb97 fbmem: add margin check to fb_check_caps()
KASAN: use-after-free Read in ip_check_mc_rcu 19 syz done 7 1877d 2028d 1/1 1843d 23d2b94043ca igmp: Add ip_mc_list lock in ip_check_mc_rcu
KASAN: slab-out-of-bounds Write in decode_data 21 syz, C done 1 1878d 2424d 1/1 1847d 19d1532a1876 net: 6pack: fix slab-out-of-bounds in decode_data
INFO: task hung in do_fb_ioctl (2) 1 syz, C done 7 1878d 2293d 1/1 1848d a49145acfb97 fbmem: add margin check to fb_check_caps()
BUG: unable to handle kernel paging request in do_csum 8 syz, C done 1 1878d 2097d 1/1 1848d 1d011c4803c7 ip_gre: add validation for csum_start
BUG: unable to handle kernel NULL pointer dereference in __lookup_slow (2) 10 syz, C done 15 1888d 2011d 1/1 1856d 2acf15b94d5b reiserfs: add check for root_inode in reiserfs_fill_super
KASAN: use-after-free Read in search_by_entry_key (2) 19 syz, C done 2 1889d 2039d 1/1 1858d 2acf15b94d5b reiserfs: add check for root_inode in reiserfs_fill_super
KASAN: use-after-free Read in __queue_work 19 syz done 5 1890d 2262d 1/1 1859d e04480920d1e Bluetooth: defer cleanup of resources in hci_unregister_dev()
WARNING in close_fs_devices -1 syz, C done 105 1900d 2218d 1/1 1870d f267aeb6dea5 ocfs2: fix zero out valid data
possible deadlock in cleanup_net 4 syz, C done 5212 1901d 2163d 1/1 1870d e04480920d1e Bluetooth: defer cleanup of resources in hci_unregister_dev()
possible deadlock in __sock_release 4 syz, C done 57446 1901d 2163d 1/1 1870d 4694ae373dc2 PCI: Leave Apple Thunderbolt controllers on for s2idle or standby
KASAN: use-after-free Write in hci_sock_bind 22 syz, C done 12 1906d 2466d 1/1 1874d e04480920d1e Bluetooth: defer cleanup of resources in hci_unregister_dev()
kernel BUG at drivers/dma-buf/dma-buf.c:LINE! -1 syz done 1 1905d 2387d 1/1 1874d 3abab27c322e drm: Return -ENOTTY for non-drm ioctls
unexpected kernel reboot -1 syz, C done 684 1913d 2689d 1/1 1883d b97f07458373 KVM: x86: determine if an exception has an error code only when injecting it.
KASAN: use-after-free Read in reservation_object_test_signaled_rcu 19 syz, C done 4 1913d 2148d 1/1 1883d 3abab27c322e drm: Return -ENOTTY for non-drm ioctls
BUG: unable to handle kernel paging request in diFree 8 syz, C done 18 1913d 2205d 1/1 1883d 9d574f985fe3 jfs: fix GPF in diFree
KASAN: use-after-free Read in hci_chan_del 19 syz, C done 24 1917d 2262d 1/1 1885d e2cb6b891ad2 bluetooth: eliminate the potential race condition when removing the HCI controller
WARNING in drm_prime_destroy_file_private -1 syz done 6 1915d 2106d 1/1 1885d 3abab27c322e drm: Return -ENOTTY for non-drm ioctls
divide error in do_journal_end (2) 2 syz, C done 4 1920d 2031d 1/1 1888d a149127be52f reiserfs: add check for invalid 1st journal block
general protection fault in mount_fs 2 syz, C done 12 1919d 2150d 1/1 1888d 8f6840c4fd1e ext4: return error code when ext4_fill_flex_info() fails
WARNING: suspicious RCU usage in vxlan_xmit 4 syz, C done 1 1924d 1924d 1/1 1894d 85e8b032d6eb vxlan: add missing rcu_read_lock() in neigh_reduce()
WARNING in batadv_iv_send_outstanding_bat_ogm_packet -1 syz, C done 373 1931d 2547d 1/1 1901d 9f460ae31c44 batman-adv: Avoid WARN_ON timing related checks
general protection fault in ieee802154_llsec_parse_dev_addr 2 syz, C done 32 1934d 2053d 1/1 1904d 25bdbfbb2d83 HID: quirks: Set INCREMENT_USAGE_ON_DUPLICATE for Saitek X65
KASAN: use-after-free Read in qfq_search_class 19 syz, C done 2 1937d 2424d 1/1 1907d 0cd58e5c53ba pkt_sched: sch_qfq: fix qfq_change_class() error path
KASAN: use-after-free Read in ntfs_iget (2) 19 syz, C done 1 1939d 1939d 1/1 1908d d98e4d95411b ntfs: fix validity check for file name attribute
WARNING in sta_apply_parameters -1 syz, C done 1 1939d 2166d 1/1 1909d 0ee4d55534f8 mac80211: remove warning in ieee80211_get_sband()
WARNING in sta_info_alloc -1 syz, C done 15 1942d 2198d 1/1 1911d 0ee4d55534f8 mac80211: remove warning in ieee80211_get_sband()
KASAN: null-ptr-deref Write in vhci_shutdown_connection 12 syz done 498 1945d 2126d 1/1 1912d 8d0caedb7596 can: bcm/raw/isotp: use per module netdevice notifier
WARNING in process_one_work -1 syz, C done 9 1947d 2513d 1/1 1917d 9f460ae31c44 batman-adv: Avoid WARN_ON timing related checks
general protection fault in try_to_wake_up 2 syz done 229 1948d 2035d 1/1 1917d 8d0caedb7596 can: bcm/raw/isotp: use per module netdevice notifier
WARNING: ODEBUG bug in slave_kobj_release -1 syz, C done 28 1953d 2129d 1/1 1923d 35d96e631860 bonding: init notify_work earlier to avoid uninitialized use
KASAN: use-after-free Read in drm_getunique 19 syz done 2 1966d 2134d 1/1 1935d b436acd1cf7f drm: Fix use-after-free read in drm_getunique()
BUG: unable to handle kernel NULL pointer dereference in corrupted 10 syz, C done 6 1967d 2549d 1/1 1936d 4ac06a1e013c nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect
KASAN: global-out-of-bounds Read in soft_cursor 17 syz, C done 22 1967d 2435d 1/1 1937d 860dafa90259 vt: Fix character height handling with VT_RESIZEX
KASAN: global-out-of-bounds Read in bit_putcs 19 syz, C done 214 1967d 2504d 1/1 1937d 860dafa90259 vt: Fix character height handling with VT_RESIZEX
WARNING: ODEBUG bug in cancel_delayed_work -1 syz, C done 1226 1970d 2266d 1/1 1938d 3a9d54b1947e Bluetooth: Set CONF_NOT_COMPLETE as l2cap_chan default
KASAN: use-after-free Read in hci_send_acl 19 syz, C done 3 1971d 2262d 1/1 1938d 5c4c8c954409 Bluetooth: verify AMP hci_chan before amp_destroy
KASAN: use-after-free Read in nfc_llcp_sock_unlink 19 syz, C done 22 1970d 2008d 1/1 1938d c61760e6940d net/nfc: fix use-after-free llcp_sock_bind/connect
WARNING in hsr_addr_subst_dest -1 syz, C done 3099 1970d 2739d 1/1 1938d 4b793acdca00 hsr: use netdev_err() instead of WARN_ONCE()
KASAN: slab-out-of-bounds Read in soft_cursor (2) 17 syz, C done 8 1970d 2092d 1/1 1938d 860dafa90259 vt: Fix character height handling with VT_RESIZEX
possible deadlock in tty_port_close_start 4 syz, C done 47 1976d 2441d 1/1 1945d c0070e1e6027 ttyprintk: Add TTY hangup callback.
KASAN: null-ptr-deref Read in llcp_sock_getname 11 syz, C 37 1979d 2539d 1/1 1951d 4ac06a1e013c nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect
kernel BUG in z_erofs_map_blocks_iter -1 syz done 10 1992d 2052d 1/1 1961d 24a806d849c0 erofs: add unsupported inode i_format check
kernel BUG at fs/inode.c:LINE! (2) -1 syz, C done 5 1995d 2134d 1/1 1963d 24a806d849c0 erofs: add unsupported inode i_format check
general protection fault in __queue_work 2 syz done 1 1995d 2243d 1/1 1963d e2cb6b891ad2 bluetooth: eliminate the potential race condition when removing the HCI controller
general protection fault in nl802154_del_llsec_devkey 2 syz, C done 110 2008d 2068d 1/1 1977d 27c746869e1a net: ieee802154: fix nl802154 del llsec devkey
general protection fault in nl802154_add_llsec_key 2 syz, C done 106 2008d 2064d 1/1 1977d 20d5fe2d7103 net: ieee802154: fix nl802154 add llsec key
general protection fault in nl802154_del_llsec_key 2 syz, C done 91 2008d 2061d 1/1 1977d 37feaaf5ceb2 net: ieee802154: fix nl802154 del llsec key
general protection fault in ieee802154_llsec_parse_key_id 11 syz, C done 64 2009d 2059d 1/1 1978d 6f7f657f2440 net: ieee802154: nl-mac: fix check on panid
WARNING in cfg80211_connect -1 syz, C done 336 2008d 2203d 1/1 1978d 1b5ab825d9ac cfg80211: remove WARN_ON() in cfg80211_sme_connect
general protection fault in nl802154_del_llsec_dev 2 syz, C done 70 2010d 2066d 1/1 1980d 3d1eac2f4558 net: ieee802154: fix nl802154 del llsec dev
general protection fault in crypto_destroy_tfm 2 syz done 12 2011d 2056d 1/1 1981d a0b96b4a6274 drivers: net: fix memory leak in peak_usb_create_dev
BUG: sleeping function called from invalid context in htb_destroy 5 syz, C done 2 2030d 2552d 1/1 2000d e323d865b361 net: sched: validate stab values
possible deadlock in red_change 4 syz, C done 10 2032d 2272d 1/1 2001d e323d865b361 net: sched: validate stab values
BUG: unable to handle kernel NULL pointer dereference in __lookup_slow 10 syz, C done 23 2044d 2202d 1/1 2012d d24396c5290b reiserfs: add check for an invalid ih_entry_count
WARNING in ext4_xattr_set_entry -1 syz, C done 12 2045d 2179d 1/1 2015d 6b22489911b7 ext4: do not try to set xattr into ea_inode if value is empty
BUG: unable to handle kernel NULL pointer dereference in amp_read_loc_assoc_final_data 10 syz, C done 114 2049d 2265d 1/1 2015d e8bd76ede155 Bluetooth: Fix null pointer dereference in amp_read_loc_assoc_final_data
KASAN: use-after-free Read in skb_dequeue 19 syz done 1 2057d 2261d 1/1 2024d c17af96554a8 btrfs: raid56: simplify tracking of Q stripe presence
KASAN: use-after-free Read in ntfs_iget 19 syz, C done 1 2056d 2116d 1/1 2024d 4dfe6bd94959 ntfs: check for valid standard information attribute
KASAN: use-after-free Read in ntfs_read_locked_inode 19 syz, C done 2 2059d 2209d 1/1 2029d 4dfe6bd94959 ntfs: check for valid standard information attribute
kernel BUG in pfkey_send_acquire -1 syz, C done 56 2065d 2095d 1/1 2035d cecf5d87ff20 block: split .sysfs_lock into two locks
general protection fault in ioctl_standard_call 2 syz, C done 23 2069d 2183d 1/1 2039d 5122565188ba wext: fix NULL-ptr-dereference with cfg80211's lack of commit()
KASAN: slab-out-of-bounds Read in squashfs_export_iget 17 syz, C done 5 2081d 2181d 1/1 2050d eabac19e40c0 squashfs: add more sanity checks in inode lookup
general protection fault in ieee80211_subif_start_xmit 2 syz, C done 4 2085d 2127d 1/1 2052d 054c9939b480 mac80211: pause TX while changing interface type
UBSAN: undefined-behaviour in tcindex_set_parms -1 syz, C done 39 2097d 2212d 1/1 2059d bcd0cf19ef82 net_sched: avoid shift-out-of-bounds in tcindex_set_parms()
kernel BUG at fs/reiserfs/prints.c:LINE! -1 syz, C done 5 2107d 2199d 1/1 2060d d24396c5290b reiserfs: add check for an invalid ih_entry_count
KASAN: use-after-free Read in search_by_entry_key 19 syz, C done 1 2107d 2198d 1/1 2061d d24396c5290b reiserfs: add check for an invalid ih_entry_count
KASAN: slab-out-of-bounds Read in squashfs_get_id 17 syz, C 58 2066d 2210d 1/1 2062d f37aa4c7366e squashfs: add more sanity checks in id lookup
KASAN: use-after-free Read in squashfs_get_id 19 syz, C 3 2106d 2159d 1/1 2062d f37aa4c7366e squashfs: add more sanity checks in id lookup
KASAN: use-after-free Read in tls_write_space 19 syz, C done 25 2113d 2738d 1/1 2083d f45a4248ea4c net: usb: rtl8150: set random MAC address when set_ethernet_addr() fails
divide error in do_journal_end 2 syz, C done 2 2115d 2176d 1/1 2085d d24396c5290b reiserfs: add check for an invalid ih_entry_count
general protection fault in dqput 2 syz, C done 2 2116d 2130d 1/1 2086d 11c514a99bb9 quota: Sanity-check quota file headers on load
WARNING in md_ioctl -1 syz, C done 199 2116d 2733d 1/1 2086d c731b84b51bf md: fix a warning caused by a race between concurrent md_ioctl()s
general protection fault in hci_phy_link_complete_evt 2 syz, C done 28 2121d 2263d 1/1 2090d 6dfccd13db2f Bluetooth: Fix null pointer dereference in hci_event_packet()
KASAN: use-after-free Read in leaf_paste_entries 19 syz, C done 1 2124d 2124d 1/1 2093d d24396c5290b reiserfs: add check for an invalid ih_entry_count
general protection fault in hci_event_packet 2 syz, C done 3 2124d 2190d 1/1 2094d 6dfccd13db2f Bluetooth: Fix null pointer dereference in hci_event_packet()
KASAN: slab-out-of-bounds Read in hci_le_meta_evt 17 syz, C done 12 2124d 2265d 1/1 2094d f7e0e8b2f1b0 Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt()
KASAN: use-after-free Read in reiserfs_read_locked_inode 19 syz, C done 4 2127d 2210d 1/1 2097d d24396c5290b reiserfs: add check for an invalid ih_entry_count
INFO: task hung in rdma_destroy_id 1 syz, C done 2 2128d 2158d 1/1 2098d 96ebc9c871d8 usb: uas: Add PNY USB Portable SSD to unusual_uas
INFO: task hung in do_read_cache_page 1 syz, C done 2 2129d 2190d 1/1 2099d 8d1ddb5e7937 fcntl: Fix potential deadlock in send_sig{io, urg}()
BUG: unable to handle kernel paging request in dquot_add_space 8 syz, C done 1 2131d 2191d 1/1 2100d 11c514a99bb9 quota: Sanity-check quota file headers on load
BUG: unable to handle kernel paging request in dqput 8 syz, C done 8 2130d 2199d 1/1 2100d 11c514a99bb9 quota: Sanity-check quota file headers on load
general protection fault in gfs2_ri_update 2 syz, C done 28 2135d 2211d 1/1 2103d 778721510e84 gfs2: check for empty rgrp tree in gfs2_ri_update
KASAN: use-after-free Write in sco_chan_del 22 syz, C done 10 2138d 2262d 1/1 2107d 6dfccd13db2f Bluetooth: Fix null pointer dereference in hci_event_packet()
KASAN: use-after-free Read in btrfs_scan_one_device 19 syz, C done 43 2142d 2218d 1/1 2112d 0697d9a61099 btrfs: don't access possibly stale fs_info data for printing duplicate device
BUG: sleeping function called from invalid context in corrupted 5 syz, C done 2 2149d 2150d 1/1 2118d 7bc40aedf24d mac80211: free sta in sta_info_insert_finish() on errors
BUG: sleeping function called from invalid context in sta_info_move_state 5 syz, C done 760 2149d 2151d 1/1 2118d 7bc40aedf24d mac80211: free sta in sta_info_insert_finish() on errors
KASAN: slab-out-of-bounds Read in ntfs_attr_find 17 syz, C done 10 2150d 2207d 1/1 2120d 4f8c94022f0b ntfs: add check for mft record size in superblock
general protection fault in rose_send_frame 2 syz, C done 5 2154d 2732d 1/1 2120d 3b3fd068c56e rose: Fix Null pointer dereference in rose_send_frame()
KASAN: slab-out-of-bounds Read in soft_cursor 17 syz, C done 61 2168d 2506d 1/1 2138d 13774d81f385 ALSA: hda: fix a runtime pm issue in SOF when integrated GPU is disabled
KASAN: use-after-free Read in debugfs_remove 19 syz, C done 15 2172d 2669d 1/1 2142d bad8e64fb19d blktrace: fix debugfs use after free
UBSAN: undefined-behaviour in init_sb -1 syz, C done 2 2175d 2207d 1/1 2144d 0ddc5154b24c gfs2: add validation checks for size of superblock
WARNING in unlock_new_inode -1 syz, C done 66 2175d 2213d 1/1 2144d 8859bf2b1278 reiserfs: only call unlock_new_inode() if I_NEW
KASAN: use-after-free Read in tipc_mcast_xmit 19 syz, C done 3 2175d 2199d 1/1 2145d ed42989eab57 tipc: fix the skb_unshare() in tipc_buf_append()
KASAN: global-out-of-bounds Read in fb_pad_aligned_buffer 17 syz, C done 5 2176d 2501d 1/1 2145d 3c4e0dff2095 vt: Disable KD_FONT_OP_COPY
KASAN: use-after-free Read in ntfs_attr_find 19 syz, C done 13 2176d 2207d 1/1 2146d 4f8c94022f0b ntfs: add check for mft record size in superblock
divide error in tabledist 2 syz, C done 3 2186d 2543d 1/1 2156d eadd1befdd77 netem: fix zero division in tabledist
general protection fault in qp_release_pages 2 syz, C done 4 2187d 2189d 1/1 2156d 90ca6333fd65 VMCI: check return value of get_user_pages_fast() for errors
UBSAN: undefined-behaviour in tabledist -1 syz, C done 2 2195d 2195d 1/1 2163d eadd1befdd77 netem: fix zero division in tabledist
KASAN: global-out-of-bounds Read in fbcon_get_font 17 syz, C done 47 2194d 2506d 1/1 2163d 5af08640795b fbcon: Fix global-out-of-bounds read in fbcon_get_font()
KASAN: slab-out-of-bounds Read in fbcon_get_font 17 syz, C done 97 2198d 2506d 1/1 2168d bc5269ca7650 vt_ioctl: change VT_RESIZEX ioctl to check for error return from vc_resize()
general protection fault in get_unique_tuple 2 syz, C done 33 2199d 2461d 1/1 2168d 1cc5ef91d2ff netfilter: ctnetlink: add a range check for l3/l4 protonum
general protection fault in nf_nat_setup_info 2 syz, C done 22 2203d 2295d 1/1 2173d 1cc5ef91d2ff netfilter: ctnetlink: add a range check for l3/l4 protonum
KASAN: use-after-free Read in soft_cursor 19 syz, C done 16 2208d 2505d 1/1 2177d ec0972adecb3 fbcon: Fix user font detection test at fbcon_resize().
KASAN: global-out-of-bounds Read in get_unique_tuple 17 syz, C done 1 2208d 2449d 1/1 2178d 1cc5ef91d2ff netfilter: ctnetlink: add a range check for l3/l4 protonum
KASAN: global-out-of-bounds Read in fbcon_resize 17 syz, C done 286 2211d 2231d 1/1 2181d ec0972adecb3 fbcon: Fix user font detection test at fbcon_resize().
general protection fault in __sock_release 2 syz done 8 2225d 2238d 1/1 2195d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
WARNING in snd_pcm_plugin_build_mulaw -1 syz, C done 2 2227d 2237d 1/1 2196d 949a1ebe8cea ALSA: pcm: oss: Remove superfluous WARN_ON() for mulaw sanity check
KASAN: use-after-free Read in seq_release_private 19 syz done 1 2226d 2226d 1/1 2196d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
WARNING: ODEBUG bug in get_signal -1 syz done 3 2228d 2238d 1/1 2197d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
WARNING in snd_pcm_drop -1 syz done 1 2229d 2229d 1/1 2197d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
WARNING: ODEBUG bug in exit_to_usermode_loop -1 syz done 2 2228d 2230d 1/1 2197d 70e37988db94 nvmet-fc: Fix a missed _irqsave version of spin_lock in 'nvmet_fc_fod_op_done()'
general protection fault in tty_release 2 syz, C done 9 2230d 2236d 1/1 2199d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: use-after-free Write in __sock_release 22 syz done 1 2231d 2231d 1/1 2200d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: use-after-free Read in locks_remove_file 19 syz done 4 2230d 2238d 1/1 2200d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: use-after-free Read in cuse_channel_release 19 syz done 1 2232d 2232d 1/1 2201d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: use-after-free Read in __fput 19 syz done 1 2232d 2232d 1/1 2201d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: use-after-free Write in ex_handler_refcount 22 syz, C done 11 2232d 2441d 1/1 2202d f9c70bdc279b Bluetooth: add a mutex lock to avoid UAF in do_enale_set
kernel BUG at include/linux/fs.h:LINE! -1 syz done 1 2232d 2232d 1/1 2202d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: use-after-free Read in snd_pcm_oss_release 19 syz done 1 2232d 2232d 1/1 2202d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
kernel BUG at fs/inode.c:LINE! -1 syz done 2 2233d 2262d 1/1 2202d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: invalid-free in vcs_release 24 syz done 1 2233d 2233d 1/1 2203d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: use-after-free Read in fbcon_cursor 19 syz done 4 2234d 2494d 1/1 2204d 50145474f6ef fbcon: remove soft scrollback code
BUG: corrupted list in mousedev_release 8 syz done 1 2234d 2234d 1/1 2204d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: use-after-free Read in eventfd_release 19 syz done 1 2236d 2236d 1/1 2205d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
INFO: trying to register non-static key in uhid_char_release -1 syz, C done 3 2236d 2258d 1/1 2205d bce1305c0ece HID: core: Correctly handle ReportSize being zero
WARNING in corrupted (2) -1 syz, C done 1 2237d 2237d 1/1 2206d 949a1ebe8cea ALSA: pcm: oss: Remove superfluous WARN_ON() for mulaw sanity check
INFO: trying to register non-static key in uhid_dev_destroy -1 syz, C done 14 2245d 2412d 1/1 2214d bce1305c0ece HID: core: Correctly handle ReportSize being zero
KASAN: slab-out-of-bounds Read in vcs_scr_readw 17 syz, C inconclusive 80 2496d 2506d 1/1 2216d 0c9acb1af77a vcs: prevent write access to vcsu devices
WARNING in inc_nlink -1 syz, C done 8 2246d 2395d 1/1 2216d facb03dddec0 fs/minix: don't allow getting deleted inodes
BUG: unable to handle kernel NULL pointer dereference in get_block 10 syz, C done 60 2250d 2401d 1/1 2219d 270ef41094e9 fs/minix: reject too-large maximum file size
KASAN: slab-out-of-bounds Read in get_block 17 syz, C done 3 2253d 2369d 1/1 2222d 270ef41094e9 fs/minix: reject too-large maximum file size
KASAN: use-after-free Read in get_block 19 syz, C done 6 2253d 2385d 1/1 2223d 270ef41094e9 fs/minix: reject too-large maximum file size
KASAN: slab-out-of-bounds Read in hci_event_packet 17 syz, C done 15 2254d 2464d 1/1 2223d 51c19bf3d5cf Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt()
KASAN: slab-out-of-bounds Read in bacpy 17 syz, C done 3 2259d 2721d 1/1 2225d 51c19bf3d5cf Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt()
KASAN: slab-out-of-bounds Read in hci_extended_inquiry_result_evt 17 syz, C done 6 2258d 2292d 1/1 2225d 51c19bf3d5cf Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt()
KASAN: null-ptr-deref Read in drm_dp_aux_dev_get_by_minor 11 syz, C done 1 2258d 2318d 1/1 2225d 270ef41094e9 fs/minix: reject too-large maximum file size
KASAN: slab-out-of-bounds Read in hci_inquiry_result_with_rssi_evt 17 syz, C done 4 2257d 2286d 1/1 2225d 629b49c848ee Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_with_rssi_evt()
KASAN: use-after-free Read in l2cap_chan_close 19 syz, C done 8 2258d 2441d 1/1 2225d f9c70bdc279b Bluetooth: add a mutex lock to avoid UAF in do_enale_set
BUG: unable to handle kernel NULL pointer dereference in do_syscall_64 (2) 10 syz, C done 4 2262d 2275d 1/1 2231d 033724d68642 fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins.
divide error in fbcon_switch 2 syz, C done 259 2267d 2506d 1/1 2233d ce684552a266 vt: Reject zero-sized screen buffer size.
general protection fault in do_con_write 2 syz, C done 3008 2267d 2506d 1/1 2233d ce684552a266 vt: Reject zero-sized screen buffer size.
kernel BUG at fs/buffer.c:LINE! -1 syz done 23 2263d 2717d 1/1 2233d 270ef41094e9 fs/minix: reject too-large maximum file size
general protection fault in free_netdev 2 syz, C done 99 2265d 2295d 1/1 2233d 46ef5b89ec0e ip6_gre: fix null-ptr-deref in ip6gre_init_net()
BUG: unable to handle kernel paging request in do_con_trol 8 syz, C done 36 2267d 2500d 1/1 2237d ce684552a266 vt: Reject zero-sized screen buffer size.
WARNING in snd_info_get_line -1 syz, C done 23 2267d 2280d 1/1 2237d 60379ba08532 ALSA: info: Drop WARN_ON() from buffer NULL sanity check
BUG: unable to handle kernel paging request in insert_char 8 syz, C done 46 2281d 2501d 1/1 2251d ce684552a266 vt: Reject zero-sized screen buffer size.
INFO: task hung in __flush_work 1 syz done 6 2283d 2732d 1/1 2252d a39c46067c84 net/9p: validate fds in p9_fd_open
KASAN: null-ptr-deref Read in do_con_trol 11 syz, C done 1 2283d 2433d 1/1 2252d ce684552a266 vt: Reject zero-sized screen buffer size.
KASAN: null-ptr-deref Read in insert_char 11 syz, C done 3 2284d 2479d 1/1 2253d ce684552a266 vt: Reject zero-sized screen buffer size.
KASAN: user-memory-access Read in insert_char 17 syz, C done 2 2286d 2499d 1/1 2255d ce684552a266 vt: Reject zero-sized screen buffer size.
BUG: unable to handle kernel paging request in csi_J 8 syz, C done 3 2294d 2462d 1/1 2263d ce684552a266 vt: Reject zero-sized screen buffer size.
BUG: unable to handle kernel NULL pointer dereference in generic_perform_write (2) 10 syz, C done 1 2305d 2396d 1/1 2275d 829b37b8cddb ext4: avoid race conditions when remounting with options that change dax
WARNING in enqueue_task_dl -1 syz done 1 2313d 2642d 1/1 2282d ce9bc3b27f2a sched/deadline: Initialize ->dl_boosted
general protection fault in batadv_iv_ogm_schedule_buff 2 6 2401d 2457d 1/1 2288d 8e8ce08198de batman-adv: Don't schedule OGM for disabled interface
general protection fault in fq_codel_enqueue 2 syz, C done 5 2335d 2363d 1/1 2305d 6dd912f82680 net: check untrusted gso_size at kernel entry
kernel BUG at arch/x86/mm/physaddr.c:LINE! (2) -1 syz, C done 82 2336d 2476d 1/1 2305d 57d38f26d81e vt: fix unicode console freeing with a common interface
INFO: trying to register non-static key in hci_uart_flush -1 syz done 4 2340d 2584d 1/1 2310d 4946ea5c1237 netfilter: nf_conntrack_pptp: fix compilation warning with W=1 build
KASAN: use-after-free Write in snd_rawmidi_kernel_write1 22 syz, C done 1 2342d 2372d 1/1 2311d c1f6e3c818dd ALSA: rawmidi: Fix racy buffer resize under concurrent accesses
KASAN: null-ptr-deref Write in choke_reset 12 syz, C done 236 2343d 2368d 1/1 2313d e9b3c610a05c USB: serial: garmin_gps: add sanity checking for data length
KASAN: use-after-free Read in rdma_listen 19 syz done 143 2374d 2686d 1/1 2344d 7c11910783a1 RDMA/ucma: Put a lock around every call to the rdma_cm layer
KASAN: use-after-free Read in cma_cancel_operation 19 syz, C done 6 2386d 2537d 1/1 2356d 7c11910783a1 RDMA/ucma: Put a lock around every call to the rdma_cm layer
WARNING in geneve_exit_batch_net -1 syz, C done 2 2389d 2433d 1/1 2358d 0fda7600c2e1 geneve: move debug check after netdev unregister
WARNING: ODEBUG bug in rfcomm_dev_ioctl -1 syz, C done 1 2390d 2390d 1/1 2359d 71811cac8532 Bluetooth: RFCOMM: fix ODEBUG bug in rfcomm_dev_ioctl
KASAN: use-after-free Write in release_tty 22 syz, C done 148 2389d 2506d 1/1 2359d ca4463bf8438 vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console
WARNING: ODEBUG bug in route4_change -1 syz, C done 28 2394d 2413d 1/1 2363d ef299cc3fa1a net_sched: cls_route: remove the right filter from hashtable
WARNING: refcount bug in sock_wfree 13 syz, C done done 1 2397d 2517d 1/1 2366d 5c3e82fe1596 sctp: fix refcount bug in sctp_wfree
KASAN: use-after-free Read in tty_open 19 syz, C done 2 2400d 2506d 1/1 2370d ca4463bf8438 vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console
BUG: unable to handle kernel paging request in init_srcu_struct_fields 8 syz done 3 2401d 2599d 1/1 2370d 28df0642abbf usbip: tools: Fix read_usb_vudc_device() error path handling
KASAN: slab-out-of-bounds Read in selinux_xfrm_alloc_user 17 syz, C done 3 2403d 2407d 1/1 2371d a1a7e3a36e01 xfrm: add the missing verify_sec_ctx_len check in xfrm_add_acquire
WARNING: ODEBUG bug in rfcomm_dlc_free -1 syz, C done 21 2403d 2634d 1/1 2373d 71811cac8532 Bluetooth: RFCOMM: fix ODEBUG bug in rfcomm_dev_ioctl
KASAN: slab-out-of-bounds Write in tcindex_set_parms 21 syz, C done 2 2407d 2407d 1/1 2375d 0d1c3530e1bd net_sched: keep alloc_hash updated after hash allocation
KASAN: use-after-free Write in tcindex_set_parms 22 syz, C done 3 2406d 2410d 1/1 2375d 0d1c3530e1bd net_sched: keep alloc_hash updated after hash allocation
possible deadlock in ovl_write_iter (2) 4 syz done 2 2409d 2409d 1/1 2378d b63e48fb50e1 USB: Disable LPM on WD19's Realtek Hub
KASAN: use-after-free Read in n_tty_receive_buf_common 19 syz, C done 40 2410d 2505d 1/1 2380d e8c75a30a23c vt: selection, push sel_lock up
inconsistent lock state in rxrpc_put_client_connection_id 4 syz, C done 89 2419d 2436d 1/1 2388d 963485d436cc rxrpc: Fix call RCU cleanup using non-bh-safe locks
KASAN: use-after-free Read in ext4_xattr_set_entry 19 syz done 10 2418d 2666d 1/1 2388d 9803387c55f7 ext4: validate the debug_want_extra_isize mount option at parse time
inconsistent lock state in rxrpc_put_client_conn 4 syz, C done 6584 2419d 2436d 1/1 2388d 963485d436cc rxrpc: Fix call RCU cleanup using non-bh-safe locks
kernel BUG at net/rxrpc/local_object.c:LINE! -1 syz, C done 13912 2421d 2631d 1/1 2390d d12040b6933f rxrpc: Fix lack of conn cleanup when local endpoint is cleaned up [ver #2]
general protection fault in selinux_socket_sendmsg 2 syz, C done 36 2421d 2602d 1/1 2391d 963485d436cc rxrpc: Fix call RCU cleanup using non-bh-safe locks
INFO: task hung in paste_selection 1 syz, C done 10 2422d 2497d 1/1 2392d e8c75a30a23c vt: selection, push sel_lock up
INFO: task hung in htable_put 1 syz, C done 8 2424d 2470d 1/1 2394d 8d0015a7ab76 netfilter: xt_hashlimit: limit the max size of hashtable
kernel BUG at fs/reiserfs/lock.c:LINE! (2) -1 syz, C done 2 2427d 2427d 1/1 2397d 4d5c1adaf893 reiserfs: Fix spurious unlock in reiserfs_fill_super() error handling
INFO: task hung in drain_all_pages 1 syz, C done 1 2427d 2457d 1/1 2397d 380324734956 s390/mm: Explicitly compare PAGE_DEFAULT_KEY against zero in storage_key_init_range
KASAN: stack-out-of-bounds Write in ax25_getname 21 syz, C done 4 2431d 2727d 1/1 2400d 42d84c8490f9 vhost: Check docket sk_family instead of call getname
INFO: task hung in hashlimit_mt_check_common 1 syz, C done 3 2434d 2449d 1/1 2402d 8d0015a7ab76 netfilter: xt_hashlimit: limit the max size of hashtable
INFO: task hung in tty_ldisc_hangup 1 syz, C done 10 2433d 2501d 1/1 2402d e8c75a30a23c vt: selection, push sel_lock up
general protection fault in padata_reorder 2 syz, C done 90 2433d 2436d 1/1 2402d cad926f70b5a padata: fix null pointer deref of pd->pinst
KASAN: slab-out-of-bounds Read in tcf_exts_destroy 17 syz, C done 1 2437d 2553d 1/1 2406d 599be01ee567 net_sched: fix an OOB access in cls_tcindex
BUG: sleeping function called from invalid context in tpk_write 5 syz, C done 30 2442d 2504d 1/1 2411d 9a655c77ff8f ttyprintk: fix a potential deadlock in interrupt context issue
general protection fault in path_openat 2 syz, C done 13 2442d 2448d 1/1 2412d 6404674acd59 vfs: fix do_last() regression
KASAN: slab-out-of-bounds Read in __nla_put_nohdr 17 syz, C done 1 2449d 2449d 1/1 2419d 61678d28d4a4 net_sched: fix datalen for ematch
general protection fault in nft_chain_parse_hook 2 syz, C done 5 2449d 2462d 1/1 2419d 826035498ec1 netfilter: nf_tables: add __nft_chain_type_get()
WARNING in cbq_destroy_class -1 syz, C done 1 2454d 2454d 1/1 2423d 2e24cd755552 net_sched: fix ops->bind_class() implementations
KASAN: slab-out-of-bounds Write in setup_udp_tunnel_sock 21 syz, C done 1 2455d 2455d 1/1 2425d 940ba1498665 gtp: make sure only SOCK_DGRAM UDP sockets are accepted
KASAN: use-after-free Read in snd_timer_resolution 19 syz, C done 2 2459d 2459d 1/1 2428d 60adcfde92fa ALSA: seq: Fix racy access for queue timer in proc read
KASAN: use-after-free Read in tcp_check_sack_reordering 19 syz, C done 1 2459d 2459d 1/1 2428d 9a655c77ff8f ttyprintk: fix a potential deadlock in interrupt context issue
general protection fault in xt_rateest_put 2 syz, C done 10 2460d 2462d 1/1 2429d 212e7f56605e netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct
BUG: corrupted list in nf_tables_commit 8 syz, C done 2 2462d 2462d 1/1 2431d 335178d5429c netfilter: nf_tables: fix flowtable list del corruption
WARNING in nft_request_module -1 syz, C done 1 2462d 2462d 1/1 2431d 9332d27d7918 netfilter: nf_tables: remove WARN and add NLA_STRING upper limits
general protection fault in nft_tunnel_get_init 2 syz, C done 1 2462d 2462d 1/1 2431d 1c702bf902bd netfilter: nft_tunnel: fix null-attribute check
general protection fault in nf_ct_netns_do_get 2 syz, C done 11 2467d 2481d 1/1 2433d 1b789577f655 netfilter: arp_tables: init netns pointer in xt_tgchk_param struct
KASAN: use-after-free Write in __alloc_skb 22 syz, C done 2 2466d 2534d 1/1 2436d d836f5c69d87 net: rtnetlink: validate IFLA_MTU attribute in rtnl_create_link()
general protection fault in xt_rateest_tg_checkentry 2 syz, C done 12 2466d 2483d 1/1 2436d 212e7f56605e netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct
KASAN: slab-out-of-bounds Read in macvlan_broadcast 17 syz, C done 10 2467d 2472d 1/1 2437d 96cc4b69581d macvlan: do not assume mac_header is set in macvlan_broadcast()
KASAN: use-after-free Read in macvlan_broadcast 19 syz, C done 7 2469d 2472d 1/1 2438d 96cc4b69581d macvlan: do not assume mac_header is set in macvlan_broadcast()
WARNING: bad unlock balance in gtp_encap_enable_socket 4 syz, C done 2 2470d 2472d 1/1 2440d 90d72256addf gtp: fix bad unlock balance in gtp_encap_enable_socket
BUG: sleeping function called from invalid context in lock_sock_nested 5 syz done 1 2474d 2504d 1/1 2442d 37f96694cf73 crypto: af_alg - Use bh_lock_sock in sk_destruct
general protection fault in rxrpc_connect_call 2 syz, C done 285 2477d 2641d 1/1 2447d d12040b6933f rxrpc: Fix lack of conn cleanup when local endpoint is cleaned up [ver #2]
possible deadlock in refcount_dec_and_mutex_lock 4 syz, C done done 5 2480d 2536d 1/1 2450d 1c05839aa973 nbd: fix shutdown and recv work deadlock v2
INFO: rcu detected stall in addrconf_dad_work (2) 1 syz, C done 1 2489d 2489d 1/1 2459d d9e15a273306 pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM
WARNING: refcount bug in cdev_get 13 syz, C done 12 2489d 2614d 1/1 2459d 94a72b3f024f bridge/mdb: remove wrong use of NLM_F_MULTI
possible deadlock in __might_fault 4 syz, C done 385 2490d 2741d 1/1 2459d 19e6317d24c2 usb: mon: Fix a deadlock in usbmon between mmap and read
INFO: task hung in fsnotify_mark_destroy_workfn 1 syz done 3 2493d 2680d 1/1 2462d 7e7c005b4b1f rtc: disable uie before setting time and enable after
possible deadlock in mon_bin_vma_fault 4 syz, C done 375 2493d 2742d 1/1 2463d 19e6317d24c2 usb: mon: Fix a deadlock in usbmon between mmap and read
WARNING in xfrm6_tunnel_net_exit -1 syz done 34 2494d 2743d 1/1 2464d f75a2804da39 xfrm: destroy xfrm_state synchronously on net exit path
inconsistent lock state in sp_get 4 syz, C done 1 2497d 2497d 1/1 2466d 5c9934b6767b 6pack,mkiss: fix possible deadlock
KASAN: slab-out-of-bounds Read in linear_transfer 17 syz, C done 2 2505d 2505d 1/1 2474d 4cc8d6505ab8 ALSA: pcm: oss: Avoid potential buffer overflows
WARNING: refcount bug in kobject_get 13 syz, C done 21 2505d 2735d 1/1 2475d ac43432cb1f5 driver core: Fix use-after-free and double free on glue directory
KASAN: use-after-free Read in slip_open 19 syz, C done done 7 2506d 2517d 1/1 2475d e58c19124189 slip: Fix use-after-free Read in slip_open
INFO: task hung in vivid_stop_generating_vid_cap 1 syz, C done 291 2508d 2742d 1/1 2478d 6dcd5d7a7a29 media: vivid: Fix wrong locking that causes race conditions on streaming stop
INFO: task hung in sdr_cap_stop_streaming 1 syz, C done 152 2508d 2742d 1/1 2478d 6dcd5d7a7a29 media: vivid: Fix wrong locking that causes race conditions on streaming stop
KASAN: use-after-free Read in __vb2_perform_fileio 19 syz, C done 13 2509d 2739d 1/1 2479d 6dcd5d7a7a29 media: vivid: Fix wrong locking that causes race conditions on streaming stop
KASAN: use-after-free Read in kfree_skb 19 syz, C done 95 2513d 2633d 1/1 2481d cf94da6f502d Bluetooth: Fix invalid-free in bcsp_close()
WARNING in __vb2_queue_cancel -1 syz, C done 11 2516d 2728d 1/1 2486d 6dcd5d7a7a29 media: vivid: Fix wrong locking that causes race conditions on streaming stop
WARNING: suspicious RCU usage in memfd_fcntl 4 syz, C done done 1879 2519d 2541d 1/1 2488d e4cc9c81e230 memfd: Use radix_tree_deref_slot_protected to avoid the warning.
possible deadlock in ovl_write_iter 4 syz done 84 2526d 2735d 1/1 2490d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
KASAN: use-after-free Read in rxrpc_send_keepalive 19 syz done 6 2540d 2614d 1/1 2491d c48fc11b69e9 rxrpc: Fix call ref leak
BUG: corrupted list in p9_fd_cancelled 8 syz done 2 2526d 2589d 1/1 2491d 697d877849d4 perf/core: Consistently fail fork on allocation failures
KASAN: use-after-free Read in __lock_sock 19 syz done 2 2542d 2543d 1/1 2491d 09d6ac8dc51a libata/ahci: Fix PCS quirk application
WARNING in corrupted -1 syz done 25 2563d 2715d 1/1 2491d c751798aa224 bpf: fix use after free in prog symbol exposure
possible deadlock in io_submit_one 4 syz done 406 2565d 2743d 1/1 2492d cbcfa130a911 fs/userfaultfd.c: disable irqs for fault_pending and event locks
WARNING in bpf_jit_free -1 syz done 293 2565d 2743d 1/1 2492d c751798aa224 bpf: fix use after free in prog symbol exposure
KASAN: use-after-free Read in pneigh_get_next 19 syz done 1 2677d 2677d 1/1 2493d f3e92cb8e2eb neigh: fix use-after-free read in pneigh_get_next
WARNING in ovl_rename -1 syz done 1 2725d 2725d 1/1 2493d 146d62e5a586 ovl: detect overlapping layers
kernel BUG at arch/x86/mm/physaddr.c:LINE! -1 syz done 1 2663d 2663d 1/1 2493d 5684abf7020d ip_tunnel: allow not to count pkts on tstats by setting skb's dev to NULL
WARNING in ovl_instantiate -1 syz done 5 2733d 2737d 1/1 2493d 146d62e5a586 ovl: detect overlapping layers
WARNING: suspicious RCU usage in llc_sap_close 4 syz, C done 10 2532d 2688d 1/1 2493d 9708d2b5b7c6 llc: avoid blocking in llc_sap_close()
BUG: unable to handle kernel NULL pointer dereference in blk_mq_map_swqueue 10 syz, C done 12 2542d 2726d 1/1 2495d e9e006f5fcf2 nbd: fix max number of supported devs
KASAN: null-ptr-deref Write in kvm_write_guest_virt_system 12 syz, C done 50 2559d 2577d 1/1 2497d c552ffb5c93d crypto: cavium/zip - Add missing single_release()
possible deadlock in free_ioctx_users 4 syz, C done 77 2565d 2687d 1/1 2497d 76e43c8ccaa3 fuse: fix deadlock with aio poll and fuse_iqueue::waitq.lock
KASAN: use-after-free Read in wait_consider_task 19 syz, C done 58 2569d 2579d 1/1 2498d fe9bc1644918 RDMA/restrack: Protect from reentry to resource return path
WARNING: ODEBUG bug in free_task -1 syz, C done 165 2569d 2579d 1/1 2498d fe9bc1644918 RDMA/restrack: Protect from reentry to resource return path
general protection fault in tcf_action_destroy 2 syz, C done 15 2567d 2589d 1/1 2498d b91ee4aa2a21 mISDN: enforce CAP_NET_RAW for raw sockets
WARNING: suspicious RCU usage in netem_enqueue 4 syz, C done 2 2571d 2576d 1/1 2498d 62794fc4fbf5 net_sched: add max len check for TCA_KIND
KASAN: use-after-free Read in __change_pid 19 syz, C done 4 2571d 2579d 1/1 2498d fe9bc1644918 RDMA/restrack: Protect from reentry to resource return path
possible deadlock in do_io_accounting 4 syz, C done 4 2570d 2682d 1/1 2498d 146d62e5a586 ovl: detect overlapping layers
KASAN: use-after-free Read in pids_release 19 syz, C done 7 2571d 2578d 1/1 2498d fe9bc1644918 RDMA/restrack: Protect from reentry to resource return path
general protection fault in release_task 2 syz, C done 3 2572d 2579d 1/1 2499d fe9bc1644918 RDMA/restrack: Protect from reentry to resource return path
general protection fault in wait_consider_task 2 syz, C done 5 2571d 2577d 1/1 2499d fe9bc1644918 RDMA/restrack: Protect from reentry to resource return path
INFO: rcu detected stall in netlink_sendmsg 1 syz, C done 3 2583d 2588d 1/1 2499d d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
KASAN: use-after-free Read in release_task 19 syz, C done 2 2574d 2576d 1/1 2500d fe9bc1644918 RDMA/restrack: Protect from reentry to resource return path
WARNING in handle_desc -1 syz, C done 1 2580d 2580d 1/1 2500d 3ca94192278c KVM: X86: Fix userspace set invalid CR4
BUG: unable to handle kernel NULL pointer dereference in tc_bind_tclass 10 syz, C done 18 2575d 2593d 1/1 2500d 8b142a00edcf net_sched: check cops->tcf_block in tc_bind_tclass()
general protection fault in qdisc_destroy 2 syz, C done 9 2579d 2589d 1/1 2500d 6efb971ba8ed net_sched: let qdisc_put() accept NULL pointer
INFO: rcu detected stall in addrconf_dad_work 1 syz, C done 19 2581d 2593d 1/1 2502d d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
INFO: rcu detected stall in mld_ifc_timer_expire 1 syz, C done 33 2581d 2593d 1/1 2502d d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
INFO: rcu detected stall in br_handle_frame 1 syz, C done 41 2581d 2594d 1/1 2502d d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
INFO: task hung in __x64_sys_io_destroy 1 syz, C done 1 2582d 2582d 1/1 2502d 2d29bcc8c237 media: tvp5150: fix switch exit in set control handler
WARNING: refcount bug in hci_register_dev 13 syz, C done 3 2588d 2599d 1/1 2503d ac43432cb1f5 driver core: Fix use-after-free and double free on glue directory
WARNING in kernfs_get -1 syz, C done 14 2588d 2727d 1/1 2503d ac43432cb1f5 driver core: Fix use-after-free and double free on glue directory
general protection fault in kernfs_add_one 2 syz, C done 8 2596d 2736d 1/1 2504d ac43432cb1f5 driver core: Fix use-after-free and double free on glue directory
general protection fault in packet_lookup_frame 2 syz, C done 1 2617d 2617d 1/1 2505d 32d3182cd2cd net/packet: fix race in tpacket_snd()
WARNING in tty_set_termios -1 syz, C done 151 2627d 2737d 1/1 2506d b36a1552d731 Bluetooth: hci_uart: check for missing tty operations
general protection fault in tcf_ife_init 2 syz, C done 15 2625d 2642d 1/1 2506d c8ec4632c6ac ife: error out when nla attributes are empty
KASAN: null-ptr-deref Write in kthread_stop 12 syz, C done 12 2625d 2730d 1/1 2506d 6dcd5d7a7a29 media: vivid: Fix wrong locking that causes race conditions on streaming stop
general protection fault in rds_recv_rcvbuf_delta 2 syz, C done 7 2633d 2680d 1/1 2507d c5c1a030a7db net/rds: An rds_sock is added too early to the hash table
INFO: task hung in blkdev_issue_flush 1 syz, C done 2 2660d 2660d 1/1 2507d 6e4d91aa0718 hwmon: (acpi_power_meter) Change log level for 'unsafe software power cap'
general protection fault in iptunnel_xmit 2 syz, C done 2 2634d 2634d 1/1 2507d 5684abf7020d ip_tunnel: allow not to count pkts on tstats by setting skb's dev to NULL
WARNING in kernfs_put -1 syz, C done 1 2665d 2665d 1/1 2507d ac43432cb1f5 driver core: Fix use-after-free and double free on glue directory
WARNING in notify_change -1 syz, C done 12 2670d 2727d 1/1 2508d f69e749a4935 Abort file_remove_privs() for non-reg. files
BUG: unable to handle kernel paging request in coalesced_mmio_write 8 syz, C done 2 2669d 2669d 1/1 2508d b60fe990c6b0 KVM: coalesced_mmio: add bounds checking
possible deadlock in userfaultfd_release 4 syz, C done 4 2671d 2675d 1/1 2508d cbcfa130a911 fs/userfaultfd.c: disable irqs for fault_pending and event locks
possible deadlock in acct_pin_kill 4 syz, C done 125 2701d 2735d 1/1 2508d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
WARNING in xfrm_state_fini -1 syz, C done 78 2718d 2742d 1/1 2509d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
WARNING in __flush_work -1 syz, C done 135 2715d 2721d 1/1 2509d ac3b35f11a06 drm/udl: Replace drm_dev_unref with drm_dev_put
KASAN: use-after-free Read in get_mem_cgroup_from_mm 19 syz, C done 6 2724d 2737d 1/1 2509d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
general protection fault in ip6erspan_set_version 2 syz, C done 7 2733d 2742d 1/1 2510d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
possible deadlock in pipe_lock 4 syz, C done 2 2725d 2728d 1/1 2510d 146d62e5a586 ovl: detect overlapping layers
general protection fault in sctp_timeout_obj_to_nlattr 2 syz, C done 7 2737d 2741d 1/1 2510d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
general protection fault in generic_timeout_obj_to_nlattr 2 syz, C done 11 2738d 2742d 1/1 2510d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
general protection fault in gre_timeout_obj_to_nlattr 2 syz, C done 13 2737d 2743d 1/1 2510d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
general protection fault in tcp_timeout_obj_to_nlattr 2 syz, C done 7 2738d 2740d 1/1 2511d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
general protection fault in icmp_timeout_obj_to_nlattr 2 syz, C done 3 2740d 2743d 1/1 2511d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
general protection fault in udp_timeout_obj_to_nlattr 2 syz, C done 8 2738d 2743d 1/1 2511d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
general protection fault in dccp_timeout_obj_to_nlattr 2 syz, C done 7 2738d 2743d 1/1 2511d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"