Extra filters: [With Repro]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
general protection fault in em_cmp_match 2 syz, C 1 1353d 1353d 0/1 never 9cd3fd2054c3 net_sched: reject TCF_EM_SIMPLE case for complex ematch module
KASAN: use-after-free Read in tc_chain_fill_node 19 syz, C 1031 1272d 2516d 0/1 never 6f99528e9797 net: core: netlink: add helper refcount dec and lock function 9d7e82cec35c net: sched: add helper function to take reference to Qdisc 3a7d0d07a386 net: sched: extend Qdisc with rcu 86bd446b5ceb net: sched: rename qdisc_destroy() to qdisc_put() e368fdb61d8e net: sched: use Qdisc rcu API instead of relying on rtnl lock
KASAN: use-after-free Read in skb_dequeue (2) 19 syz, C done 2 1808d 1838d 1/1 1778d bb2853a6a421 tty: Fix data race between tiocsti() and flush_to_ldisc()
KASAN: use-after-free Read in ext4_xattr_set_entry (2) 19 syz, C done 7 1811d 2269d 1/1 1780d a54c4613dac1 ext4: fix race writing to an inline_data file while its xattrs are changing
inconsistent lock state in sco_sock_timeout 4 syz, C done 19 1811d 2202d 1/1 1781d ba316be1b6a0 Bluetooth: schedule SCO timeouts with delayed_work
BUG: sleeping function called from invalid context in lock_sock_nested (2) 5 syz, C done 3909 1812d 1905d 1/1 1781d e04480920d1e Bluetooth: defer cleanup of resources in hci_unregister_dev()
KASAN: slab-out-of-bounds Write in ext4_write_inline_data 22 syz, C done 3 1817d 2023d 1/1 1787d a54c4613dac1 ext4: fix race writing to an inline_data file while its xattrs are changing
BUG: soft lockup in tx 1 syz, C done 1 1820d 1850d 1/1 1789d c7c5e6ff533f fq_codel: reject silly quantum parameters
BUG: corrupted list in kobject_add_internal 8 syz, C done 2 1824d 2071d 1/1 1793d 734bc5ff7831 Bluetooth: avoid circular locks in sco_sock_connect
kernel BUG in kvm_hv_set_msr_common -1 syz done 2 1824d 1855d 1/1 1794d 8750e72a79dd KVM: remember position in kvm->vcpus array
BUG: unable to handle kernel paging request in do_syscall_64 8 syz, C done 3 1830d 2348d 1/1 1797d a49145acfb97 fbmem: add margin check to fb_check_caps()
general protection fault in do_syscall_64 (2) 2 syz done 2 1829d 2162d 1/1 1797d a49145acfb97 fbmem: add margin check to fb_check_caps()
KASAN: use-after-free Read in ip_check_mc_rcu 19 syz done 7 1831d 1982d 1/1 1797d 23d2b94043ca igmp: Add ip_mc_list lock in ip_check_mc_rcu
KASAN: slab-out-of-bounds Write in decode_data 21 syz, C done 1 1832d 2378d 1/1 1801d 19d1532a1876 net: 6pack: fix slab-out-of-bounds in decode_data
INFO: task hung in do_fb_ioctl (2) 1 syz, C done 7 1832d 2247d 1/1 1802d a49145acfb97 fbmem: add margin check to fb_check_caps()
BUG: unable to handle kernel paging request in do_csum 8 syz, C done 1 1832d 2051d 1/1 1802d 1d011c4803c7 ip_gre: add validation for csum_start
BUG: unable to handle kernel NULL pointer dereference in __lookup_slow (2) 10 syz, C done 15 1842d 1966d 1/1 1810d 2acf15b94d5b reiserfs: add check for root_inode in reiserfs_fill_super
KASAN: use-after-free Read in search_by_entry_key (2) 19 syz, C done 2 1843d 1993d 1/1 1813d 2acf15b94d5b reiserfs: add check for root_inode in reiserfs_fill_super
KASAN: use-after-free Read in __queue_work 19 syz done 5 1844d 2216d 1/1 1813d e04480920d1e Bluetooth: defer cleanup of resources in hci_unregister_dev()
WARNING in close_fs_devices -1 syz, C done 105 1854d 2172d 1/1 1824d f267aeb6dea5 ocfs2: fix zero out valid data
possible deadlock in cleanup_net 4 syz, C done 5212 1855d 2117d 1/1 1824d e04480920d1e Bluetooth: defer cleanup of resources in hci_unregister_dev()
possible deadlock in __sock_release 4 syz, C done 57446 1855d 2117d 1/1 1824d 4694ae373dc2 PCI: Leave Apple Thunderbolt controllers on for s2idle or standby
KASAN: use-after-free Write in hci_sock_bind 22 syz, C done 12 1860d 2420d 1/1 1828d e04480920d1e Bluetooth: defer cleanup of resources in hci_unregister_dev()
kernel BUG at drivers/dma-buf/dma-buf.c:LINE! -1 syz done 1 1859d 2341d 1/1 1828d 3abab27c322e drm: Return -ENOTTY for non-drm ioctls
unexpected kernel reboot -1 syz, C done 684 1868d 2644d 1/1 1837d b97f07458373 KVM: x86: determine if an exception has an error code only when injecting it.
KASAN: use-after-free Read in reservation_object_test_signaled_rcu 19 syz, C done 4 1867d 2102d 1/1 1837d 3abab27c322e drm: Return -ENOTTY for non-drm ioctls
BUG: unable to handle kernel paging request in diFree 8 syz, C done 18 1868d 2159d 1/1 1837d 9d574f985fe3 jfs: fix GPF in diFree
KASAN: use-after-free Read in hci_chan_del 19 syz, C done 24 1871d 2216d 1/1 1839d e2cb6b891ad2 bluetooth: eliminate the potential race condition when removing the HCI controller
WARNING in drm_prime_destroy_file_private -1 syz done 6 1869d 2061d 1/1 1839d 3abab27c322e drm: Return -ENOTTY for non-drm ioctls
divide error in do_journal_end (2) 2 syz, C done 4 1874d 1985d 1/1 1842d a149127be52f reiserfs: add check for invalid 1st journal block
general protection fault in mount_fs 2 syz, C done 12 1873d 2104d 1/1 1842d 8f6840c4fd1e ext4: return error code when ext4_fill_flex_info() fails
WARNING: suspicious RCU usage in vxlan_xmit 4 syz, C done 1 1878d 1878d 1/1 1848d 85e8b032d6eb vxlan: add missing rcu_read_lock() in neigh_reduce()
WARNING in batadv_iv_send_outstanding_bat_ogm_packet -1 syz, C done 373 1885d 2501d 1/1 1855d 9f460ae31c44 batman-adv: Avoid WARN_ON timing related checks
general protection fault in ieee802154_llsec_parse_dev_addr 2 syz, C done 32 1888d 2007d 1/1 1858d 25bdbfbb2d83 HID: quirks: Set INCREMENT_USAGE_ON_DUPLICATE for Saitek X65
KASAN: use-after-free Read in qfq_search_class 19 syz, C done 2 1892d 2378d 1/1 1861d 0cd58e5c53ba pkt_sched: sch_qfq: fix qfq_change_class() error path
KASAN: use-after-free Read in ntfs_iget (2) 19 syz, C done 1 1893d 1893d 1/1 1862d d98e4d95411b ntfs: fix validity check for file name attribute
WARNING in sta_apply_parameters -1 syz, C done 1 1893d 2120d 1/1 1863d 0ee4d55534f8 mac80211: remove warning in ieee80211_get_sband()
WARNING in sta_info_alloc -1 syz, C done 15 1896d 2153d 1/1 1866d 0ee4d55534f8 mac80211: remove warning in ieee80211_get_sband()
KASAN: null-ptr-deref Write in vhci_shutdown_connection 12 syz done 498 1899d 2080d 1/1 1866d 8d0caedb7596 can: bcm/raw/isotp: use per module netdevice notifier
WARNING in process_one_work -1 syz, C done 9 1901d 2467d 1/1 1871d 9f460ae31c44 batman-adv: Avoid WARN_ON timing related checks
general protection fault in try_to_wake_up 2 syz done 229 1902d 1989d 1/1 1871d 8d0caedb7596 can: bcm/raw/isotp: use per module netdevice notifier
WARNING: ODEBUG bug in slave_kobj_release -1 syz, C done 28 1907d 2083d 1/1 1877d 35d96e631860 bonding: init notify_work earlier to avoid uninitialized use
KASAN: use-after-free Read in drm_getunique 19 syz done 2 1920d 2088d 1/1 1889d b436acd1cf7f drm: Fix use-after-free read in drm_getunique()
BUG: unable to handle kernel NULL pointer dereference in corrupted 10 syz, C done 6 1921d 2503d 1/1 1891d 4ac06a1e013c nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect
KASAN: global-out-of-bounds Read in soft_cursor 17 syz, C done 22 1921d 2389d 1/1 1891d 860dafa90259 vt: Fix character height handling with VT_RESIZEX
KASAN: global-out-of-bounds Read in bit_putcs 19 syz, C done 214 1921d 2459d 1/1 1891d 860dafa90259 vt: Fix character height handling with VT_RESIZEX
WARNING: ODEBUG bug in cancel_delayed_work -1 syz, C done 1226 1924d 2220d 1/1 1892d 3a9d54b1947e Bluetooth: Set CONF_NOT_COMPLETE as l2cap_chan default
KASAN: use-after-free Read in hci_send_acl 19 syz, C done 3 1925d 2217d 1/1 1892d 5c4c8c954409 Bluetooth: verify AMP hci_chan before amp_destroy
KASAN: use-after-free Read in nfc_llcp_sock_unlink 19 syz, C done 22 1925d 1962d 1/1 1892d c61760e6940d net/nfc: fix use-after-free llcp_sock_bind/connect
WARNING in hsr_addr_subst_dest -1 syz, C done 3099 1925d 2693d 1/1 1892d 4b793acdca00 hsr: use netdev_err() instead of WARN_ONCE()
KASAN: slab-out-of-bounds Read in soft_cursor (2) 17 syz, C done 8 1924d 2046d 1/1 1892d 860dafa90259 vt: Fix character height handling with VT_RESIZEX
possible deadlock in tty_port_close_start 4 syz, C done 47 1930d 2395d 1/1 1900d c0070e1e6027 ttyprintk: Add TTY hangup callback.
KASAN: null-ptr-deref Read in llcp_sock_getname 11 syz, C 37 1933d 2493d 1/1 1905d 4ac06a1e013c nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect
kernel BUG in z_erofs_map_blocks_iter -1 syz done 10 1946d 2007d 1/1 1915d 24a806d849c0 erofs: add unsupported inode i_format check
kernel BUG at fs/inode.c:LINE! (2) -1 syz, C done 5 1949d 2088d 1/1 1917d 24a806d849c0 erofs: add unsupported inode i_format check
general protection fault in __queue_work 2 syz done 1 1949d 2197d 1/1 1917d e2cb6b891ad2 bluetooth: eliminate the potential race condition when removing the HCI controller
general protection fault in nl802154_del_llsec_devkey 2 syz, C done 110 1962d 2022d 1/1 1931d 27c746869e1a net: ieee802154: fix nl802154 del llsec devkey
general protection fault in nl802154_add_llsec_key 2 syz, C done 106 1962d 2018d 1/1 1931d 20d5fe2d7103 net: ieee802154: fix nl802154 add llsec key
general protection fault in nl802154_del_llsec_key 2 syz, C done 91 1962d 2015d 1/1 1931d 37feaaf5ceb2 net: ieee802154: fix nl802154 del llsec key
general protection fault in ieee802154_llsec_parse_key_id 11 syz, C done 64 1963d 2013d 1/1 1932d 6f7f657f2440 net: ieee802154: nl-mac: fix check on panid
WARNING in cfg80211_connect -1 syz, C done 336 1962d 2157d 1/1 1932d 1b5ab825d9ac cfg80211: remove WARN_ON() in cfg80211_sme_connect
general protection fault in nl802154_del_llsec_dev 2 syz, C done 70 1964d 2020d 1/1 1934d 3d1eac2f4558 net: ieee802154: fix nl802154 del llsec dev
general protection fault in crypto_destroy_tfm 2 syz done 12 1965d 2010d 1/1 1935d a0b96b4a6274 drivers: net: fix memory leak in peak_usb_create_dev
BUG: sleeping function called from invalid context in htb_destroy 5 syz, C done 2 1984d 2506d 1/1 1954d e323d865b361 net: sched: validate stab values
possible deadlock in red_change 4 syz, C done 10 1986d 2226d 1/1 1955d e323d865b361 net: sched: validate stab values
BUG: unable to handle kernel NULL pointer dereference in __lookup_slow 10 syz, C done 23 1999d 2157d 1/1 1966d d24396c5290b reiserfs: add check for an invalid ih_entry_count
WARNING in ext4_xattr_set_entry -1 syz, C done 12 1999d 2133d 1/1 1969d 6b22489911b7 ext4: do not try to set xattr into ea_inode if value is empty
BUG: unable to handle kernel NULL pointer dereference in amp_read_loc_assoc_final_data 10 syz, C done 114 2003d 2219d 1/1 1969d e8bd76ede155 Bluetooth: Fix null pointer dereference in amp_read_loc_assoc_final_data
KASAN: use-after-free Read in skb_dequeue 19 syz done 1 2011d 2215d 1/1 1978d c17af96554a8 btrfs: raid56: simplify tracking of Q stripe presence
KASAN: use-after-free Read in ntfs_iget 19 syz, C done 1 2010d 2071d 1/1 1978d 4dfe6bd94959 ntfs: check for valid standard information attribute
KASAN: use-after-free Read in ntfs_read_locked_inode 19 syz, C done 2 2013d 2163d 1/1 1983d 4dfe6bd94959 ntfs: check for valid standard information attribute
kernel BUG in pfkey_send_acquire -1 syz, C done 56 2020d 2049d 1/1 1989d cecf5d87ff20 block: split .sysfs_lock into two locks
general protection fault in ioctl_standard_call 2 syz, C done 23 2023d 2137d 1/1 1993d 5122565188ba wext: fix NULL-ptr-dereference with cfg80211's lack of commit()
KASAN: slab-out-of-bounds Read in squashfs_export_iget 17 syz, C done 5 2035d 2135d 1/1 2005d eabac19e40c0 squashfs: add more sanity checks in inode lookup
general protection fault in ieee80211_subif_start_xmit 2 syz, C done 4 2039d 2081d 1/1 2006d 054c9939b480 mac80211: pause TX while changing interface type
UBSAN: undefined-behaviour in tcindex_set_parms -1 syz, C done 39 2051d 2166d 1/1 2013d bcd0cf19ef82 net_sched: avoid shift-out-of-bounds in tcindex_set_parms()
kernel BUG at fs/reiserfs/prints.c:LINE! -1 syz, C done 5 2062d 2153d 1/1 2014d d24396c5290b reiserfs: add check for an invalid ih_entry_count
KASAN: use-after-free Read in search_by_entry_key 19 syz, C done 1 2062d 2152d 1/1 2015d d24396c5290b reiserfs: add check for an invalid ih_entry_count
KASAN: slab-out-of-bounds Read in squashfs_get_id 17 syz, C 58 2020d 2164d 1/1 2016d f37aa4c7366e squashfs: add more sanity checks in id lookup
KASAN: use-after-free Read in squashfs_get_id 19 syz, C 3 2060d 2113d 1/1 2016d f37aa4c7366e squashfs: add more sanity checks in id lookup
KASAN: use-after-free Read in tls_write_space 19 syz, C done 25 2067d 2693d 1/1 2037d f45a4248ea4c net: usb: rtl8150: set random MAC address when set_ethernet_addr() fails
divide error in do_journal_end 2 syz, C done 2 2070d 2130d 1/1 2039d d24396c5290b reiserfs: add check for an invalid ih_entry_count
general protection fault in dqput 2 syz, C done 2 2070d 2084d 1/1 2040d 11c514a99bb9 quota: Sanity-check quota file headers on load
WARNING in md_ioctl -1 syz, C done 199 2070d 2688d 1/1 2040d c731b84b51bf md: fix a warning caused by a race between concurrent md_ioctl()s
general protection fault in hci_phy_link_complete_evt 2 syz, C done 28 2075d 2217d 1/1 2044d 6dfccd13db2f Bluetooth: Fix null pointer dereference in hci_event_packet()
KASAN: use-after-free Read in leaf_paste_entries 19 syz, C done 1 2078d 2078d 1/1 2047d d24396c5290b reiserfs: add check for an invalid ih_entry_count
general protection fault in hci_event_packet 2 syz, C done 3 2078d 2144d 1/1 2048d 6dfccd13db2f Bluetooth: Fix null pointer dereference in hci_event_packet()
KASAN: slab-out-of-bounds Read in hci_le_meta_evt 17 syz, C done 12 2078d 2219d 1/1 2048d f7e0e8b2f1b0 Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt()
KASAN: use-after-free Read in reiserfs_read_locked_inode 19 syz, C done 4 2081d 2164d 1/1 2051d d24396c5290b reiserfs: add check for an invalid ih_entry_count
INFO: task hung in rdma_destroy_id 1 syz, C done 2 2082d 2112d 1/1 2052d 96ebc9c871d8 usb: uas: Add PNY USB Portable SSD to unusual_uas
INFO: task hung in do_read_cache_page 1 syz, C done 2 2084d 2144d 1/1 2053d 8d1ddb5e7937 fcntl: Fix potential deadlock in send_sig{io, urg}()
BUG: unable to handle kernel paging request in dquot_add_space 8 syz, C done 1 2085d 2145d 1/1 2054d 11c514a99bb9 quota: Sanity-check quota file headers on load
BUG: unable to handle kernel paging request in dqput 8 syz, C done 8 2084d 2153d 1/1 2054d 11c514a99bb9 quota: Sanity-check quota file headers on load
general protection fault in gfs2_ri_update 2 syz, C done 28 2089d 2165d 1/1 2057d 778721510e84 gfs2: check for empty rgrp tree in gfs2_ri_update
KASAN: use-after-free Write in sco_chan_del 22 syz, C done 10 2092d 2216d 1/1 2062d 6dfccd13db2f Bluetooth: Fix null pointer dereference in hci_event_packet()
KASAN: use-after-free Read in btrfs_scan_one_device 19 syz, C done 43 2097d 2172d 1/1 2066d 0697d9a61099 btrfs: don't access possibly stale fs_info data for printing duplicate device
BUG: sleeping function called from invalid context in corrupted 5 syz, C done 2 2103d 2104d 1/1 2072d 7bc40aedf24d mac80211: free sta in sta_info_insert_finish() on errors
BUG: sleeping function called from invalid context in sta_info_move_state 5 syz, C done 760 2103d 2105d 1/1 2072d 7bc40aedf24d mac80211: free sta in sta_info_insert_finish() on errors
KASAN: slab-out-of-bounds Read in ntfs_attr_find 17 syz, C done 10 2105d 2161d 1/1 2074d 4f8c94022f0b ntfs: add check for mft record size in superblock
general protection fault in rose_send_frame 2 syz, C done 5 2108d 2686d 1/1 2074d 3b3fd068c56e rose: Fix Null pointer dereference in rose_send_frame()
KASAN: slab-out-of-bounds Read in soft_cursor 17 syz, C done 61 2122d 2460d 1/1 2092d 13774d81f385 ALSA: hda: fix a runtime pm issue in SOF when integrated GPU is disabled
KASAN: use-after-free Read in debugfs_remove 19 syz, C done 15 2126d 2623d 1/1 2096d bad8e64fb19d blktrace: fix debugfs use after free
UBSAN: undefined-behaviour in init_sb -1 syz, C done 2 2129d 2161d 1/1 2098d 0ddc5154b24c gfs2: add validation checks for size of superblock
WARNING in unlock_new_inode -1 syz, C done 66 2129d 2167d 1/1 2098d 8859bf2b1278 reiserfs: only call unlock_new_inode() if I_NEW
KASAN: use-after-free Read in tipc_mcast_xmit 19 syz, C done 3 2130d 2153d 1/1 2099d ed42989eab57 tipc: fix the skb_unshare() in tipc_buf_append()
KASAN: global-out-of-bounds Read in fb_pad_aligned_buffer 17 syz, C done 5 2130d 2456d 1/1 2099d 3c4e0dff2095 vt: Disable KD_FONT_OP_COPY
KASAN: use-after-free Read in ntfs_attr_find 19 syz, C done 13 2130d 2161d 1/1 2100d 4f8c94022f0b ntfs: add check for mft record size in superblock
divide error in tabledist 2 syz, C done 3 2140d 2497d 1/1 2110d eadd1befdd77 netem: fix zero division in tabledist
general protection fault in qp_release_pages 2 syz, C done 4 2141d 2144d 1/1 2110d 90ca6333fd65 VMCI: check return value of get_user_pages_fast() for errors
UBSAN: undefined-behaviour in tabledist -1 syz, C done 2 2149d 2149d 1/1 2117d eadd1befdd77 netem: fix zero division in tabledist
KASAN: global-out-of-bounds Read in fbcon_get_font 17 syz, C done 47 2149d 2460d 1/1 2117d 5af08640795b fbcon: Fix global-out-of-bounds read in fbcon_get_font()
KASAN: slab-out-of-bounds Read in fbcon_get_font 17 syz, C done 97 2152d 2461d 1/1 2122d bc5269ca7650 vt_ioctl: change VT_RESIZEX ioctl to check for error return from vc_resize()
general protection fault in get_unique_tuple 2 syz, C done 33 2153d 2415d 1/1 2122d 1cc5ef91d2ff netfilter: ctnetlink: add a range check for l3/l4 protonum
general protection fault in nf_nat_setup_info 2 syz, C done 22 2157d 2249d 1/1 2127d 1cc5ef91d2ff netfilter: ctnetlink: add a range check for l3/l4 protonum
KASAN: use-after-free Read in soft_cursor 19 syz, C done 16 2162d 2459d 1/1 2132d ec0972adecb3 fbcon: Fix user font detection test at fbcon_resize().
KASAN: global-out-of-bounds Read in get_unique_tuple 17 syz, C done 1 2163d 2403d 1/1 2132d 1cc5ef91d2ff netfilter: ctnetlink: add a range check for l3/l4 protonum
KASAN: global-out-of-bounds Read in fbcon_resize 17 syz, C done 286 2165d 2185d 1/1 2135d ec0972adecb3 fbcon: Fix user font detection test at fbcon_resize().
general protection fault in __sock_release 2 syz done 8 2179d 2192d 1/1 2149d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
WARNING in snd_pcm_plugin_build_mulaw -1 syz, C done 2 2181d 2191d 1/1 2150d 949a1ebe8cea ALSA: pcm: oss: Remove superfluous WARN_ON() for mulaw sanity check
KASAN: use-after-free Read in seq_release_private 19 syz done 1 2180d 2180d 1/1 2150d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
WARNING: ODEBUG bug in get_signal -1 syz done 3 2182d 2192d 1/1 2151d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
WARNING in snd_pcm_drop -1 syz done 1 2183d 2183d 1/1 2151d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
WARNING: ODEBUG bug in exit_to_usermode_loop -1 syz done 2 2182d 2184d 1/1 2151d 70e37988db94 nvmet-fc: Fix a missed _irqsave version of spin_lock in 'nvmet_fc_fod_op_done()'
general protection fault in tty_release 2 syz, C done 9 2184d 2190d 1/1 2153d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: use-after-free Write in __sock_release 22 syz done 1 2185d 2185d 1/1 2154d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: use-after-free Read in locks_remove_file 19 syz done 4 2184d 2192d 1/1 2154d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: use-after-free Read in cuse_channel_release 19 syz done 1 2186d 2186d 1/1 2155d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: use-after-free Read in __fput 19 syz done 1 2186d 2186d 1/1 2155d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: use-after-free Write in ex_handler_refcount 22 syz, C done 11 2186d 2395d 1/1 2156d f9c70bdc279b Bluetooth: add a mutex lock to avoid UAF in do_enale_set
kernel BUG at include/linux/fs.h:LINE! -1 syz done 1 2186d 2186d 1/1 2156d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: use-after-free Read in snd_pcm_oss_release 19 syz done 1 2186d 2186d 1/1 2156d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
kernel BUG at fs/inode.c:LINE! -1 syz done 2 2187d 2216d 1/1 2157d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: invalid-free in vcs_release 24 syz done 1 2187d 2187d 1/1 2157d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: use-after-free Read in fbcon_cursor 19 syz done 4 2189d 2448d 1/1 2158d 50145474f6ef fbcon: remove soft scrollback code
BUG: corrupted list in mousedev_release 8 syz done 1 2189d 2189d 1/1 2158d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: use-after-free Read in eventfd_release 19 syz done 1 2190d 2190d 1/1 2159d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
INFO: trying to register non-static key in uhid_char_release -1 syz, C done 3 2190d 2212d 1/1 2159d bce1305c0ece HID: core: Correctly handle ReportSize being zero
WARNING in corrupted (2) -1 syz, C done 1 2191d 2191d 1/1 2160d 949a1ebe8cea ALSA: pcm: oss: Remove superfluous WARN_ON() for mulaw sanity check
INFO: trying to register non-static key in uhid_dev_destroy -1 syz, C done 14 2199d 2366d 1/1 2168d bce1305c0ece HID: core: Correctly handle ReportSize being zero
KASAN: slab-out-of-bounds Read in vcs_scr_readw 17 syz, C inconclusive 80 2451d 2460d 1/1 2170d 0c9acb1af77a vcs: prevent write access to vcsu devices
WARNING in inc_nlink -1 syz, C done 8 2200d 2349d 1/1 2170d facb03dddec0 fs/minix: don't allow getting deleted inodes
BUG: unable to handle kernel NULL pointer dereference in get_block 10 syz, C done 60 2204d 2355d 1/1 2173d 270ef41094e9 fs/minix: reject too-large maximum file size
KASAN: slab-out-of-bounds Read in get_block 17 syz, C done 3 2208d 2323d 1/1 2177d 270ef41094e9 fs/minix: reject too-large maximum file size
KASAN: use-after-free Read in get_block 19 syz, C done 6 2208d 2339d 1/1 2177d 270ef41094e9 fs/minix: reject too-large maximum file size
KASAN: slab-out-of-bounds Read in hci_event_packet 17 syz, C done 15 2208d 2418d 1/1 2177d 51c19bf3d5cf Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt()
KASAN: slab-out-of-bounds Read in bacpy 17 syz, C done 3 2213d 2675d 1/1 2179d 51c19bf3d5cf Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt()
KASAN: slab-out-of-bounds Read in hci_extended_inquiry_result_evt 17 syz, C done 6 2212d 2246d 1/1 2179d 51c19bf3d5cf Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt()
KASAN: null-ptr-deref Read in drm_dp_aux_dev_get_by_minor 11 syz, C done 1 2212d 2272d 1/1 2179d 270ef41094e9 fs/minix: reject too-large maximum file size
KASAN: slab-out-of-bounds Read in hci_inquiry_result_with_rssi_evt 17 syz, C done 4 2211d 2240d 1/1 2179d 629b49c848ee Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_with_rssi_evt()
KASAN: use-after-free Read in l2cap_chan_close 19 syz, C done 8 2212d 2395d 1/1 2179d f9c70bdc279b Bluetooth: add a mutex lock to avoid UAF in do_enale_set
BUG: unable to handle kernel NULL pointer dereference in do_syscall_64 (2) 10 syz, C done 4 2216d 2229d 1/1 2185d 033724d68642 fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins.
divide error in fbcon_switch 2 syz, C done 259 2221d 2461d 1/1 2187d ce684552a266 vt: Reject zero-sized screen buffer size.
general protection fault in do_con_write 2 syz, C done 3008 2221d 2460d 1/1 2187d ce684552a266 vt: Reject zero-sized screen buffer size.
kernel BUG at fs/buffer.c:LINE! -1 syz done 23 2217d 2671d 1/1 2187d 270ef41094e9 fs/minix: reject too-large maximum file size
general protection fault in free_netdev 2 syz, C done 99 2219d 2249d 1/1 2187d 46ef5b89ec0e ip6_gre: fix null-ptr-deref in ip6gre_init_net()
BUG: unable to handle kernel paging request in do_con_trol 8 syz, C done 36 2222d 2454d 1/1 2191d ce684552a266 vt: Reject zero-sized screen buffer size.
WARNING in snd_info_get_line -1 syz, C done 23 2221d 2234d 1/1 2191d 60379ba08532 ALSA: info: Drop WARN_ON() from buffer NULL sanity check
BUG: unable to handle kernel paging request in insert_char 8 syz, C done 46 2235d 2456d 1/1 2205d ce684552a266 vt: Reject zero-sized screen buffer size.
INFO: task hung in __flush_work 1 syz done 6 2237d 2686d 1/1 2206d a39c46067c84 net/9p: validate fds in p9_fd_open
KASAN: null-ptr-deref Read in do_con_trol 11 syz, C done 1 2237d 2387d 1/1 2206d ce684552a266 vt: Reject zero-sized screen buffer size.
KASAN: null-ptr-deref Read in insert_char 11 syz, C done 3 2238d 2433d 1/1 2207d ce684552a266 vt: Reject zero-sized screen buffer size.
KASAN: user-memory-access Read in insert_char 17 syz, C done 2 2240d 2453d 1/1 2209d ce684552a266 vt: Reject zero-sized screen buffer size.
BUG: unable to handle kernel paging request in csi_J 8 syz, C done 3 2248d 2417d 1/1 2217d ce684552a266 vt: Reject zero-sized screen buffer size.
BUG: unable to handle kernel NULL pointer dereference in generic_perform_write (2) 10 syz, C done 1 2260d 2350d 1/1 2229d 829b37b8cddb ext4: avoid race conditions when remounting with options that change dax
WARNING in enqueue_task_dl -1 syz done 1 2267d 2596d 1/1 2237d ce9bc3b27f2a sched/deadline: Initialize ->dl_boosted
general protection fault in batadv_iv_ogm_schedule_buff 2 6 2355d 2411d 1/1 2242d 8e8ce08198de batman-adv: Don't schedule OGM for disabled interface
general protection fault in fq_codel_enqueue 2 syz, C done 5 2289d 2317d 1/1 2259d 6dd912f82680 net: check untrusted gso_size at kernel entry
kernel BUG at arch/x86/mm/physaddr.c:LINE! (2) -1 syz, C done 82 2290d 2430d 1/1 2259d 57d38f26d81e vt: fix unicode console freeing with a common interface
INFO: trying to register non-static key in hci_uart_flush -1 syz done 4 2295d 2539d 1/1 2264d 4946ea5c1237 netfilter: nf_conntrack_pptp: fix compilation warning with W=1 build
KASAN: use-after-free Write in snd_rawmidi_kernel_write1 22 syz, C done 1 2296d 2326d 1/1 2265d c1f6e3c818dd ALSA: rawmidi: Fix racy buffer resize under concurrent accesses
KASAN: null-ptr-deref Write in choke_reset 12 syz, C done 236 2297d 2322d 1/1 2267d e9b3c610a05c USB: serial: garmin_gps: add sanity checking for data length
KASAN: use-after-free Read in rdma_listen 19 syz done 143 2328d 2641d 1/1 2298d 7c11910783a1 RDMA/ucma: Put a lock around every call to the rdma_cm layer
KASAN: use-after-free Read in cma_cancel_operation 19 syz, C done 6 2340d 2491d 1/1 2310d 7c11910783a1 RDMA/ucma: Put a lock around every call to the rdma_cm layer
WARNING in geneve_exit_batch_net -1 syz, C done 2 2343d 2387d 1/1 2312d 0fda7600c2e1 geneve: move debug check after netdev unregister
WARNING: ODEBUG bug in rfcomm_dev_ioctl -1 syz, C done 1 2344d 2344d 1/1 2313d 71811cac8532 Bluetooth: RFCOMM: fix ODEBUG bug in rfcomm_dev_ioctl
KASAN: use-after-free Write in release_tty 22 syz, C done 148 2343d 2460d 1/1 2313d ca4463bf8438 vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console
WARNING: ODEBUG bug in route4_change -1 syz, C done 28 2348d 2367d 1/1 2317d ef299cc3fa1a net_sched: cls_route: remove the right filter from hashtable
WARNING: refcount bug in sock_wfree 13 syz, C done done 1 2351d 2471d 1/1 2320d 5c3e82fe1596 sctp: fix refcount bug in sctp_wfree
KASAN: use-after-free Read in tty_open 19 syz, C done 2 2354d 2460d 1/1 2324d ca4463bf8438 vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console
BUG: unable to handle kernel paging request in init_srcu_struct_fields 8 syz done 3 2355d 2553d 1/1 2324d 28df0642abbf usbip: tools: Fix read_usb_vudc_device() error path handling
KASAN: slab-out-of-bounds Read in selinux_xfrm_alloc_user 17 syz, C done 3 2357d 2361d 1/1 2325d a1a7e3a36e01 xfrm: add the missing verify_sec_ctx_len check in xfrm_add_acquire
WARNING: ODEBUG bug in rfcomm_dlc_free -1 syz, C done 21 2357d 2588d 1/1 2327d 71811cac8532 Bluetooth: RFCOMM: fix ODEBUG bug in rfcomm_dev_ioctl
KASAN: slab-out-of-bounds Write in tcindex_set_parms 21 syz, C done 2 2361d 2361d 1/1 2329d 0d1c3530e1bd net_sched: keep alloc_hash updated after hash allocation
KASAN: use-after-free Write in tcindex_set_parms 22 syz, C done 3 2360d 2364d 1/1 2329d 0d1c3530e1bd net_sched: keep alloc_hash updated after hash allocation
possible deadlock in ovl_write_iter (2) 4 syz done 2 2363d 2363d 1/1 2332d b63e48fb50e1 USB: Disable LPM on WD19's Realtek Hub
KASAN: use-after-free Read in n_tty_receive_buf_common 19 syz, C done 40 2364d 2459d 1/1 2334d e8c75a30a23c vt: selection, push sel_lock up
inconsistent lock state in rxrpc_put_client_connection_id 4 syz, C done 89 2373d 2390d 1/1 2342d 963485d436cc rxrpc: Fix call RCU cleanup using non-bh-safe locks
KASAN: use-after-free Read in ext4_xattr_set_entry 19 syz done 10 2372d 2621d 1/1 2342d 9803387c55f7 ext4: validate the debug_want_extra_isize mount option at parse time
inconsistent lock state in rxrpc_put_client_conn 4 syz, C done 6584 2373d 2390d 1/1 2342d 963485d436cc rxrpc: Fix call RCU cleanup using non-bh-safe locks
kernel BUG at net/rxrpc/local_object.c:LINE! -1 syz, C done 13912 2375d 2585d 1/1 2344d d12040b6933f rxrpc: Fix lack of conn cleanup when local endpoint is cleaned up [ver #2]
general protection fault in selinux_socket_sendmsg 2 syz, C done 36 2375d 2556d 1/1 2345d 963485d436cc rxrpc: Fix call RCU cleanup using non-bh-safe locks
INFO: task hung in paste_selection 1 syz, C done 10 2376d 2452d 1/1 2346d e8c75a30a23c vt: selection, push sel_lock up
INFO: task hung in htable_put 1 syz, C done 8 2378d 2424d 1/1 2348d 8d0015a7ab76 netfilter: xt_hashlimit: limit the max size of hashtable
kernel BUG at fs/reiserfs/lock.c:LINE! (2) -1 syz, C done 2 2381d 2381d 1/1 2351d 4d5c1adaf893 reiserfs: Fix spurious unlock in reiserfs_fill_super() error handling
INFO: task hung in drain_all_pages 1 syz, C done 1 2382d 2412d 1/1 2351d 380324734956 s390/mm: Explicitly compare PAGE_DEFAULT_KEY against zero in storage_key_init_range
KASAN: stack-out-of-bounds Write in ax25_getname 21 syz, C done 4 2385d 2681d 1/1 2355d 42d84c8490f9 vhost: Check docket sk_family instead of call getname
INFO: task hung in hashlimit_mt_check_common 1 syz, C done 3 2388d 2403d 1/1 2356d 8d0015a7ab76 netfilter: xt_hashlimit: limit the max size of hashtable
INFO: task hung in tty_ldisc_hangup 1 syz, C done 10 2387d 2455d 1/1 2356d e8c75a30a23c vt: selection, push sel_lock up
general protection fault in padata_reorder 2 syz, C done 90 2387d 2390d 1/1 2356d cad926f70b5a padata: fix null pointer deref of pd->pinst
KASAN: slab-out-of-bounds Read in tcf_exts_destroy 17 syz, C done 1 2391d 2507d 1/1 2360d 599be01ee567 net_sched: fix an OOB access in cls_tcindex
BUG: sleeping function called from invalid context in tpk_write 5 syz, C done 30 2396d 2458d 1/1 2366d 9a655c77ff8f ttyprintk: fix a potential deadlock in interrupt context issue
general protection fault in path_openat 2 syz, C done 13 2396d 2402d 1/1 2366d 6404674acd59 vfs: fix do_last() regression
KASAN: slab-out-of-bounds Read in __nla_put_nohdr 17 syz, C done 1 2403d 2403d 1/1 2373d 61678d28d4a4 net_sched: fix datalen for ematch
general protection fault in nft_chain_parse_hook 2 syz, C done 5 2403d 2416d 1/1 2373d 826035498ec1 netfilter: nf_tables: add __nft_chain_type_get()
WARNING in cbq_destroy_class -1 syz, C done 1 2408d 2408d 1/1 2378d 2e24cd755552 net_sched: fix ops->bind_class() implementations
KASAN: slab-out-of-bounds Write in setup_udp_tunnel_sock 21 syz, C done 1 2409d 2409d 1/1 2379d 940ba1498665 gtp: make sure only SOCK_DGRAM UDP sockets are accepted
KASAN: use-after-free Read in snd_timer_resolution 19 syz, C done 2 2413d 2413d 1/1 2382d 60adcfde92fa ALSA: seq: Fix racy access for queue timer in proc read
KASAN: use-after-free Read in tcp_check_sack_reordering 19 syz, C done 1 2413d 2413d 1/1 2382d 9a655c77ff8f ttyprintk: fix a potential deadlock in interrupt context issue
general protection fault in xt_rateest_put 2 syz, C done 10 2414d 2416d 1/1 2383d 212e7f56605e netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct
BUG: corrupted list in nf_tables_commit 8 syz, C done 2 2416d 2416d 1/1 2385d 335178d5429c netfilter: nf_tables: fix flowtable list del corruption
WARNING in nft_request_module -1 syz, C done 1 2416d 2416d 1/1 2385d 9332d27d7918 netfilter: nf_tables: remove WARN and add NLA_STRING upper limits
general protection fault in nft_tunnel_get_init 2 syz, C done 1 2416d 2416d 1/1 2385d 1c702bf902bd netfilter: nft_tunnel: fix null-attribute check
general protection fault in nf_ct_netns_do_get 2 syz, C done 11 2421d 2435d 1/1 2387d 1b789577f655 netfilter: arp_tables: init netns pointer in xt_tgchk_param struct
KASAN: use-after-free Write in __alloc_skb 22 syz, C done 2 2420d 2488d 1/1 2390d d836f5c69d87 net: rtnetlink: validate IFLA_MTU attribute in rtnl_create_link()
general protection fault in xt_rateest_tg_checkentry 2 syz, C done 12 2420d 2437d 1/1 2390d 212e7f56605e netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct
KASAN: slab-out-of-bounds Read in macvlan_broadcast 17 syz, C done 10 2421d 2426d 1/1 2391d 96cc4b69581d macvlan: do not assume mac_header is set in macvlan_broadcast()
KASAN: use-after-free Read in macvlan_broadcast 19 syz, C done 7 2423d 2426d 1/1 2392d 96cc4b69581d macvlan: do not assume mac_header is set in macvlan_broadcast()
WARNING: bad unlock balance in gtp_encap_enable_socket 4 syz, C done 2 2424d 2427d 1/1 2394d 90d72256addf gtp: fix bad unlock balance in gtp_encap_enable_socket
BUG: sleeping function called from invalid context in lock_sock_nested 5 syz done 1 2428d 2458d 1/1 2396d 37f96694cf73 crypto: af_alg - Use bh_lock_sock in sk_destruct
general protection fault in rxrpc_connect_call 2 syz, C done 285 2431d 2595d 1/1 2401d d12040b6933f rxrpc: Fix lack of conn cleanup when local endpoint is cleaned up [ver #2]
possible deadlock in refcount_dec_and_mutex_lock 4 syz, C done done 5 2434d 2490d 1/1 2404d 1c05839aa973 nbd: fix shutdown and recv work deadlock v2
INFO: rcu detected stall in addrconf_dad_work (2) 1 syz, C done 1 2443d 2443d 1/1 2413d d9e15a273306 pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM
WARNING: refcount bug in cdev_get 13 syz, C done 12 2443d 2569d 1/1 2413d 94a72b3f024f bridge/mdb: remove wrong use of NLM_F_MULTI
possible deadlock in __might_fault 4 syz, C done 385 2444d 2695d 1/1 2414d 19e6317d24c2 usb: mon: Fix a deadlock in usbmon between mmap and read
INFO: task hung in fsnotify_mark_destroy_workfn 1 syz done 3 2447d 2634d 1/1 2416d 7e7c005b4b1f rtc: disable uie before setting time and enable after
possible deadlock in mon_bin_vma_fault 4 syz, C done 375 2447d 2696d 1/1 2417d 19e6317d24c2 usb: mon: Fix a deadlock in usbmon between mmap and read
WARNING in xfrm6_tunnel_net_exit -1 syz done 34 2448d 2697d 1/1 2418d f75a2804da39 xfrm: destroy xfrm_state synchronously on net exit path
inconsistent lock state in sp_get 4 syz, C done 1 2451d 2451d 1/1 2420d 5c9934b6767b 6pack,mkiss: fix possible deadlock
KASAN: slab-out-of-bounds Read in linear_transfer 17 syz, C done 2 2459d 2459d 1/1 2429d 4cc8d6505ab8 ALSA: pcm: oss: Avoid potential buffer overflows
WARNING: refcount bug in kobject_get 13 syz, C done 21 2459d 2689d 1/1 2429d ac43432cb1f5 driver core: Fix use-after-free and double free on glue directory
KASAN: use-after-free Read in slip_open 19 syz, C done done 7 2460d 2472d 1/1 2429d e58c19124189 slip: Fix use-after-free Read in slip_open
INFO: task hung in vivid_stop_generating_vid_cap 1 syz, C done 291 2463d 2696d 1/1 2432d 6dcd5d7a7a29 media: vivid: Fix wrong locking that causes race conditions on streaming stop
INFO: task hung in sdr_cap_stop_streaming 1 syz, C done 152 2463d 2696d 1/1 2432d 6dcd5d7a7a29 media: vivid: Fix wrong locking that causes race conditions on streaming stop
KASAN: use-after-free Read in __vb2_perform_fileio 19 syz, C done 13 2463d 2693d 1/1 2433d 6dcd5d7a7a29 media: vivid: Fix wrong locking that causes race conditions on streaming stop
KASAN: use-after-free Read in kfree_skb 19 syz, C done 95 2467d 2587d 1/1 2435d cf94da6f502d Bluetooth: Fix invalid-free in bcsp_close()
WARNING in __vb2_queue_cancel -1 syz, C done 11 2471d 2682d 1/1 2440d 6dcd5d7a7a29 media: vivid: Fix wrong locking that causes race conditions on streaming stop
WARNING: suspicious RCU usage in memfd_fcntl 4 syz, C done done 1879 2473d 2495d 1/1 2442d e4cc9c81e230 memfd: Use radix_tree_deref_slot_protected to avoid the warning.
possible deadlock in ovl_write_iter 4 syz done 84 2480d 2689d 1/1 2444d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
KASAN: use-after-free Read in rxrpc_send_keepalive 19 syz done 6 2494d 2568d 1/1 2445d c48fc11b69e9 rxrpc: Fix call ref leak
BUG: corrupted list in p9_fd_cancelled 8 syz done 2 2480d 2543d 1/1 2445d 697d877849d4 perf/core: Consistently fail fork on allocation failures
KASAN: use-after-free Read in __lock_sock 19 syz done 2 2496d 2497d 1/1 2445d 09d6ac8dc51a libata/ahci: Fix PCS quirk application
WARNING in corrupted -1 syz done 25 2517d 2669d 1/1 2446d c751798aa224 bpf: fix use after free in prog symbol exposure
possible deadlock in io_submit_one 4 syz done 406 2519d 2697d 1/1 2446d cbcfa130a911 fs/userfaultfd.c: disable irqs for fault_pending and event locks
WARNING in bpf_jit_free -1 syz done 293 2519d 2697d 1/1 2446d c751798aa224 bpf: fix use after free in prog symbol exposure
KASAN: use-after-free Read in pneigh_get_next 19 syz done 1 2631d 2631d 1/1 2447d f3e92cb8e2eb neigh: fix use-after-free read in pneigh_get_next
WARNING in ovl_rename -1 syz done 1 2679d 2679d 1/1 2447d 146d62e5a586 ovl: detect overlapping layers
kernel BUG at arch/x86/mm/physaddr.c:LINE! -1 syz done 1 2617d 2617d 1/1 2447d 5684abf7020d ip_tunnel: allow not to count pkts on tstats by setting skb's dev to NULL
WARNING in ovl_instantiate -1 syz done 5 2687d 2691d 1/1 2447d 146d62e5a586 ovl: detect overlapping layers
WARNING: suspicious RCU usage in llc_sap_close 4 syz, C done 10 2486d 2642d 1/1 2447d 9708d2b5b7c6 llc: avoid blocking in llc_sap_close()
BUG: unable to handle kernel NULL pointer dereference in blk_mq_map_swqueue 10 syz, C done 12 2496d 2681d 1/1 2449d e9e006f5fcf2 nbd: fix max number of supported devs
KASAN: null-ptr-deref Write in kvm_write_guest_virt_system 12 syz, C done 50 2513d 2531d 1/1 2451d c552ffb5c93d crypto: cavium/zip - Add missing single_release()
possible deadlock in free_ioctx_users 4 syz, C done 77 2519d 2642d 1/1 2451d 76e43c8ccaa3 fuse: fix deadlock with aio poll and fuse_iqueue::waitq.lock
KASAN: use-after-free Read in wait_consider_task 19 syz, C done 58 2523d 2533d 1/1 2452d fe9bc1644918 RDMA/restrack: Protect from reentry to resource return path
WARNING: ODEBUG bug in free_task -1 syz, C done 165 2523d 2533d 1/1 2452d fe9bc1644918 RDMA/restrack: Protect from reentry to resource return path
general protection fault in tcf_action_destroy 2 syz, C done 15 2521d 2543d 1/1 2452d b91ee4aa2a21 mISDN: enforce CAP_NET_RAW for raw sockets
WARNING: suspicious RCU usage in netem_enqueue 4 syz, C done 2 2525d 2530d 1/1 2453d 62794fc4fbf5 net_sched: add max len check for TCA_KIND
KASAN: use-after-free Read in __change_pid 19 syz, C done 4 2525d 2533d 1/1 2453d fe9bc1644918 RDMA/restrack: Protect from reentry to resource return path
possible deadlock in do_io_accounting 4 syz, C done 4 2524d 2636d 1/1 2453d 146d62e5a586 ovl: detect overlapping layers
KASAN: use-after-free Read in pids_release 19 syz, C done 7 2525d 2532d 1/1 2453d fe9bc1644918 RDMA/restrack: Protect from reentry to resource return path
general protection fault in release_task 2 syz, C done 3 2526d 2533d 1/1 2453d fe9bc1644918 RDMA/restrack: Protect from reentry to resource return path
general protection fault in wait_consider_task 2 syz, C done 5 2526d 2531d 1/1 2453d fe9bc1644918 RDMA/restrack: Protect from reentry to resource return path
INFO: rcu detected stall in netlink_sendmsg 1 syz, C done 3 2537d 2542d 1/1 2453d d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
KASAN: use-after-free Read in release_task 19 syz, C done 2 2528d 2530d 1/1 2454d fe9bc1644918 RDMA/restrack: Protect from reentry to resource return path
WARNING in handle_desc -1 syz, C done 1 2534d 2534d 1/1 2454d 3ca94192278c KVM: X86: Fix userspace set invalid CR4
BUG: unable to handle kernel NULL pointer dereference in tc_bind_tclass 10 syz, C done 18 2529d 2548d 1/1 2454d 8b142a00edcf net_sched: check cops->tcf_block in tc_bind_tclass()
general protection fault in qdisc_destroy 2 syz, C done 9 2533d 2543d 1/1 2454d 6efb971ba8ed net_sched: let qdisc_put() accept NULL pointer
INFO: rcu detected stall in addrconf_dad_work 1 syz, C done 19 2535d 2547d 1/1 2456d d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
INFO: rcu detected stall in mld_ifc_timer_expire 1 syz, C done 33 2535d 2547d 1/1 2456d d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
INFO: rcu detected stall in br_handle_frame 1 syz, C done 41 2535d 2548d 1/1 2456d d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
INFO: task hung in __x64_sys_io_destroy 1 syz, C done 1 2536d 2536d 1/1 2456d 2d29bcc8c237 media: tvp5150: fix switch exit in set control handler
WARNING: refcount bug in hci_register_dev 13 syz, C done 3 2542d 2553d 1/1 2457d ac43432cb1f5 driver core: Fix use-after-free and double free on glue directory
WARNING in kernfs_get -1 syz, C done 14 2542d 2681d 1/1 2457d ac43432cb1f5 driver core: Fix use-after-free and double free on glue directory
general protection fault in kernfs_add_one 2 syz, C done 8 2551d 2690d 1/1 2458d ac43432cb1f5 driver core: Fix use-after-free and double free on glue directory
general protection fault in packet_lookup_frame 2 syz, C done 1 2571d 2571d 1/1 2459d 32d3182cd2cd net/packet: fix race in tpacket_snd()
WARNING in tty_set_termios -1 syz, C done 151 2581d 2691d 1/1 2460d b36a1552d731 Bluetooth: hci_uart: check for missing tty operations
general protection fault in tcf_ife_init 2 syz, C done 15 2580d 2596d 1/1 2460d c8ec4632c6ac ife: error out when nla attributes are empty
KASAN: null-ptr-deref Write in kthread_stop 12 syz, C done 12 2580d 2685d 1/1 2460d 6dcd5d7a7a29 media: vivid: Fix wrong locking that causes race conditions on streaming stop
general protection fault in rds_recv_rcvbuf_delta 2 syz, C done 7 2587d 2634d 1/1 2461d c5c1a030a7db net/rds: An rds_sock is added too early to the hash table
INFO: task hung in blkdev_issue_flush 1 syz, C done 2 2614d 2614d 1/1 2461d 6e4d91aa0718 hwmon: (acpi_power_meter) Change log level for 'unsafe software power cap'
general protection fault in iptunnel_xmit 2 syz, C done 2 2588d 2588d 1/1 2461d 5684abf7020d ip_tunnel: allow not to count pkts on tstats by setting skb's dev to NULL
WARNING in kernfs_put -1 syz, C done 1 2619d 2619d 1/1 2462d ac43432cb1f5 driver core: Fix use-after-free and double free on glue directory
WARNING in notify_change -1 syz, C done 12 2625d 2681d 1/1 2462d f69e749a4935 Abort file_remove_privs() for non-reg. files
BUG: unable to handle kernel paging request in coalesced_mmio_write 8 syz, C done 2 2623d 2623d 1/1 2462d b60fe990c6b0 KVM: coalesced_mmio: add bounds checking
possible deadlock in userfaultfd_release 4 syz, C done 4 2625d 2630d 1/1 2462d cbcfa130a911 fs/userfaultfd.c: disable irqs for fault_pending and event locks
possible deadlock in acct_pin_kill 4 syz, C done 125 2655d 2690d 1/1 2463d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
WARNING in xfrm_state_fini -1 syz, C done 78 2672d 2696d 1/1 2463d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
WARNING in __flush_work -1 syz, C done 135 2669d 2675d 1/1 2463d ac3b35f11a06 drm/udl: Replace drm_dev_unref with drm_dev_put
KASAN: use-after-free Read in get_mem_cgroup_from_mm 19 syz, C done 6 2678d 2691d 1/1 2463d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
general protection fault in ip6erspan_set_version 2 syz, C done 7 2687d 2696d 1/1 2464d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
possible deadlock in pipe_lock 4 syz, C done 2 2679d 2682d 1/1 2464d 146d62e5a586 ovl: detect overlapping layers
general protection fault in sctp_timeout_obj_to_nlattr 2 syz, C done 7 2691d 2695d 1/1 2465d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
general protection fault in generic_timeout_obj_to_nlattr 2 syz, C done 11 2692d 2697d 1/1 2465d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
general protection fault in gre_timeout_obj_to_nlattr 2 syz, C done 13 2691d 2697d 1/1 2465d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
general protection fault in tcp_timeout_obj_to_nlattr 2 syz, C done 7 2692d 2694d 1/1 2465d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
general protection fault in icmp_timeout_obj_to_nlattr 2 syz, C done 3 2694d 2697d 1/1 2465d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
general protection fault in udp_timeout_obj_to_nlattr 2 syz, C done 8 2692d 2697d 1/1 2465d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
general protection fault in dccp_timeout_obj_to_nlattr 2 syz, C done 7 2692d 2697d 1/1 2465d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"