Applied filters: Label=subsystems:bpf (drop)
Extra filters: [With Repro]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
WARNING in bpf_offload_dev_destroy bpf -1 C 3 10d 10d 1/29 never netdevsim: reject port addition and clean up ports after a failed reload
WARNING in pcpu_get_vm_areas prio:high bpf -1 1 65d 61d 26/29 never 499baaff382a mm/vmalloc: do not warn on -ENOMEM from va_clip() in pcpu_get_vm_areas()
WARNING in vmap_pages_range_noflush (2) bpf net -1 syz, C error 250 1537d 1539d 1/29 never mm/gup.c: Fix return value for __gup_longterm_locked()
possible deadlock in lock_timer_base trace bpf 4 syz, C 142 661d 2134d 1/29 never kfence: fix potential deadlock due to wake_up()
possible deadlock in xsk_diag_dump (3) prio:normal bpf net 4 6 68d 75d 27/29 never a8455260b2e9 ipvlan: unregister upper devices outside pnodes_lock
KCSAN: data-race in bpf_obj_memcpy / bpf_obj_memcpy prio:low bpf 6 36 17d 201d 26/29 never 5e289c5a4a52 bpf: Annotate bpf_obj_memcpy with data_race
KCSAN: data-race in __bpf_lru_list_rotate / bpf_lru_push_free (4) race:benign prio:high bpf 6 1 37d 37d 26/29 never f25f6319e248 bpf: Annotate data races on bpf_lru_node type
WARNING in bpf_clamp_scev_regs prio:low bpf -1 syz, C error 4 17d 17d 9/29 never 0c33d612bdd5 bpf: Do not intersect with current register range on clamp
BUG: using smp_processor_id() in preemptible code in bpf_mem_cache_free_rcu prio:normal bpf 4 syz, C error 2284 24d 130d 26/29 never de020dc8049b bpf: Fix missing migration protection in __rhtab_map_lookup_and_delete_batch()
UBSAN: array-index-out-of-bounds in print_bpf_insn (2) prio:normal bpf 17 syz, C 5821 48d 80d 27/29 never 37e5c4f4d285 bpf: Reject invalid LDSX instruction in disassembly
general protection fault in btf_type_show prio:low bpf 2 syz 3 77d 73d 27/29 never 0895a0c07347 bpf: Reject key-less BTF for hash maps
WARNING in bpf_mark_chain_precision prio:low bpf -1 syz, C error 74 59d 64d 27/29 never c3fd8e5fd100 bpf: Reject non-scalar bpf_loop iteration counts
general protection fault in xdp_master_redirect prio:low bpf net 2 1 159d 159d 29/29 115d net, bpf: check master for NULL in xdp_master_redirect()
inconsistent lock state in bpf_lru_push_free prio:low bpf 4 syz, C error 313 149d 320d 29/29 115d 89edbdfc5d03 bpf: Fix NMI/tracepoint re-entry deadlock on lru locks
possible deadlock in bpf_lru_push_free (2) prio:low bpf 4 syz, C error inconclusive 1 245d 359d 29/29 115d 89edbdfc5d03 bpf: Fix NMI/tracepoint re-entry deadlock on lru locks
KASAN: slab-use-after-free Read in sk_msg_recvmsg prio:normal bpf net 19 syz, C error error 3 270d 265d 29/29 115d c010995b29c8 sockmap: Fix use-after-free in udp_bpf_recvmsg()
WARNING in sock_map_destroy (3) bpf net -1 syz, C done error 5 198d 219d 29/29 169d 6451d58a3556 sockmap: Fix sk_psock_drop() race vs sock_map_{unhash,close,destroy}().
general protection fault in bq_flush_to_queue (2) bpf net 2 syz, C error error 6 253d 334d 29/29 170d 869c63d5975d bpf: Fix race in cpumap on PREEMPT_RT 7ef83bf1712b net: move promiscuity handling into netdev_rx_mode_work
WARNING in reg_bounds_sanity_check (2) bpf -1 syz, C done 20146 207d 428d 29/29 170d b254c6d816e5 bpf: Simulate branches to prune based on range violations
KASAN: slab-use-after-free Read in sk_psock_verdict_data_ready (4) prio:normal bpf net 19 1 222d 221d 29/29 170d ad8391d37f33 bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready().
KMSAN: uninit-value in bpf_prog_test_run_skb prio:high bpf 7 syz, C 4 231d 311d 29/29 170d 12bec2bd4b76 bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb
KASAN: slab-out-of-bounds Read in strnchr bpf 17 syz, C error 14 301d 306d 29/29 185d 9df5fad801c5 bpf: Reject BPF_MAP_TYPE_INSN_ARRAY in check_reg_const_str()
WARNING: refcount bug in __add_used_btf bpf 13 syz, C error 6 265d 277d 29/29 185d ccd2d799ed44 bpf: Fix a potential use-after-free of BTF object
KCSAN: data-race in sk_psock_drop / unix_stream_sendmsg bpf net 6 1 261d 255d 29/29 185d 2ef2b20cf4e0 net: annotate data-races around sk->sk_{data_ready,write_space}
KASAN: stack-out-of-bounds Write in dev_map_redirect_multi bpf net 21 2 258d 269d 29/29 185d b7bf516c3ecd bpf: Fix stack-out-of-bounds write in devmap
KASAN: stack-out-of-bounds Write in dev_map_enqueue_multi net bpf 21 1 249d 249d 29/29 185d b7bf516c3ecd bpf: Fix stack-out-of-bounds write in devmap
KASAN: invalid-access Write in do_bad_area bpf -1 syz, C 34838 313d 398d 29/29 285d 007f5da43b3d mm/kasan: fix incorrect unpoisoning in vrealloc for KASAN
KASAN: slab-use-after-free Write in defer_free bpf 22 syz, C 238 321d 334d 29/29 290d 53ca00a19d34 mm/slub: reset KASAN tag in defer_free() before accessing freed memory
KASAN: slab-out-of-bounds Write in __bpf_get_stackid bpf 21 syz, C error 170 372d 467d 29/29 304d 23f852daa4ba bpf: Fix stackmap overflow check in __bpf_get_stackid()
memory leak in map_create bpf 3 syz, C 1 360d 356d 29/29 304d 688b745401ab bpf: Fix exclusive map memory leak
WARNING in bpf_bprintf_prepare (3) bpf -1 syz, C done 6 358d 383d 29/29 304d c1da3df7191f bpf: Prevent nesting overflow in bpf_try_get_buffers
BUG: sleeping function called from invalid context in sock_map_delete_elem bpf net 5 syz, C error 58 385d 437d 29/29 354d 7c33e97a6ef5 bpf: Do not disable preemption in bpf_test_run().
INFO: rcu detected stall in watchdog bpf 1 syz, C error done 14 420d 1542d 29/29 358d eecd203ada43 media: imon: make send_packet() more robust
general protection fault in print_reg_state bpf 2 syz, C done 4 404d 410d 29/29 374d 34904582b502 bpf: Skip scalar adjustment for BPF_NEG if dst is a pointer
WARNING in convert_ctx_accesses (2) bpf -1 syz, C 16 405d 420d 29/29 374d 6fabca2fc94d bpf: Explicitly check accesses to bpf_sock_addr
WARNING in maybe_exit_scc bpf -1 syz, C done 59 402d 418d 29/29 374d a3c73d629ea1 bpf: dont report verifier bug for missing bpf_scc_visit on speculative path
WARNING in do_misc_fixups bpf -1 syz, C 7604 422d 460d 29/29 374d e4414b01c1cd bpf: Check the helper function is valid in get_helper_proto
possible deadlock in task_fork_fair trace bpf 4 syz, C done done 9106 713d 1126d 29/29 388d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in xsk_diag_dump (2) net bpf 4 1 460d 460d 29/29 395d c64237960819 hamradio: ignore ops-locked netdevs
possible deadlock in xsk_notifier (3) bpf net 4 3 450d 501d 29/29 395d 53898ebabe84 net: lapbether: ignore ops-locked netdevs
WARNING in bpf_check (4) bpf -1 syz, C done 5241 429d 535d 29/29 429d e09299225d5b bpf: Reject narrower access to pointer ctx fields
KASAN: slab-use-after-free Read in do_check bpf 19 syz, C 15 512d 514d 29/29 429d 3d71b8b9abae bpf: Fix state use-after-free on push_stack() err
WARNING in reg_bounds_sanity_check bpf -1 syz, C done 6525 429d 494d 29/29 429d 6279846b9b25 bpf: Forget ranges when refining tnum after JSET
WARNING in do_check bpf -1 syz, C error 51 441d 512d 29/29 429d 3157f7e29996 bpf: handle jset (if a & b ...) as a jump in CFG computation
WARNING in check_helper_call bpf -1 syz, C done 7 452d 494d 29/29 429d 65fdafd6765f bpf: Avoid warning on multiple referenced args in call
WARNING in format_decode (3) trace bpf -1 syz, C done 2248 475d 1082d 29/29 429d f8242745871f bpf: Reject %p% format string in bprintf-like helpers
WARNING in record_func_key bpf -1 syz, C 90 491d 494d 29/29 429d 032547272eb0 bpf: Avoid warning on unexpected map for tail call
WARNING: kernel/bpf/verifier.c:LINE at do_check, CPU: syz.NUM.NUM/NUM bpf -1 syz done 5 509d 501d 29/29 429d dadb59104c64 bpf: Fix aux usage after do_check_insn()
WARNING in convert_ctx_accesses bpf -1 syz, C done 80 443d 464d 29/29 429d ead3d7b2b6af bpf: Check flow_dissector ctx accesses are aligned
WARNING in bpf_map_lookup_percpu_elem bpf -1 syz, C done 2116 538d 922d 29/29 488d d4965578267e bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem()
WARNING in get_bpf_raw_tp_regs bpf trace -1 syz, C 2 541d 544d 29/29 488d 3880cdbed1c4 bpf: Fix WARN() in get_bpf_raw_tp_regs
WARNING in __bpf_prog_ret0_warn bpf -1 syz, C 9 529d 552d 29/29 488d 86bc9c742426 bpf: Avoid __bpf_prog_ret0_warn when jit fails
possible deadlock in trie_delete_elem bpf 4 syz, C done done 21444 588d 962d 28/29 509d 47979314c0fe bpf: Convert lpm_trie.c to rqspinlock
possible deadlock in __bpf_ringbuf_reserve bpf 4 syz, C error 2490 565d 970d 28/29 515d a650d38915c1 bpf: Convert ringbuf map to rqspinlock
WARNING in dev_xdp_install bpf -1 syz, C 245 582d 589d 28/29 515d d996e412b2df bpf: add missing ops lock around dev_xdp_attach_link
KMSAN: uninit-value in ___bpf_prog_run (4) bpf 7 syz, C 322 633d 1047d 28/29 515d 4c2d14c40a68 ppp: Fix KMSAN uninit-value warning with bpf
possible deadlock in xsk_diag_dump net bpf 4 4 572d 578d 28/29 515d f0433eea4688 net: don't mix device locking in dev_close_many() calls
UBSAN: array-index-out-of-bounds in bpf_prog_select_runtime bpf 15 syz, C done 1160 587d 968d 28/29 515d 6ebc5030e0c5 bpf: Fix array bounds error with may_goto
KASAN: slab-out-of-bounds Read in atomic_ptr_type_ok bpf 17 syz, C done 4 608d 604d 28/29 515d 9aa8fe29f624 Merge branch 'bpf-fix-oob-read-and-add-tests-for-load-acquire-store-release' c03bb2fa327e bpf: Fix out-of-bounds read in check_atomic_load/store()
possible deadlock in queue_stack_map_push_elem bpf 4 syz, C error 78 581d 934d 28/29 515d 2f41503d6476 bpf: Convert queue_stack map to rqspinlock
possible deadlock in __queue_map_get bpf 4 syz, C error 180 580d 938d 28/29 515d 2f41503d6476 bpf: Convert queue_stack map to rqspinlock
general protection fault in bpf_map_offload_map_alloc bpf 2 494 609d 610d 28/29 515d 0a5c8b2c8ccb bpf: fix a possible NULL deref in bpf_map_offload_map_alloc()
possible deadlock in bpf_map_mmap bpf 4 1 660d 656d 28/29 515d bc27c52eea18 bpf: avoid holding freeze_mutex during mmap operation
KASAN: vmalloc-out-of-bounds Write in push_insn_history bpf 21 136 699d 712d 28/29 549d d699440f58ce mm: fix vrealloc()'s KASAN poisoning logic
KASAN: vmalloc-out-of-bounds Write in vrealloc_noprof bpf 21 syz, C done 440 549d 712d 28/29 549d d699440f58ce mm: fix vrealloc()'s KASAN poisoning logic
general protection fault in bpf_prog_array_delete_safe bpf 2 syz, C done 5 699d 701d 28/29 550d 978c4486cca5 bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog
KASAN: slab-use-after-free Read in bpf_trace_run2 (2) bpf trace 19 syz error 123 733d 750d 28/29 550d 2e8a12b82c40 tracing: Fix syscall tracepoint use-after-free
WARNING: locking bug in __lock_task_sighand bpf trace 4 syz, C unreliable 89 653d 709d 28/29 550d 87c544108b61 bpf: Send signals asynchronously if !preemptible
BUG: using smp_processor_id() in preemptible code in bpf_mem_alloc bpf 4 syz, C done 12 722d 719d 28/29 690d 4ff04abf9d5b bpf: Add necessary migrate_disable to range_tree.
WARNING in push_jmp_history bpf -1 syz, C done 5 761d 761d 28/29 723d aa30eb3260b2 bpf: Force checkpoint when jmp history is too long
general protection fault in dev_map_enqueue (2) bpf net 19 syz, C error done 336 829d 895d 28/29 725d 09d88791c7cd bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
WARNING in sock_map_close (2) bpf net -1 syz, C done 3 807d 807d 28/29 746d 1461f5a3d810 l2tp: avoid overriding sk->sk_user_data
BUG: unable to handle kernel paging request in bpf_prog_ADDR (3) bpf net 8 syz, C done 6 847d 847d 28/29 746d 92de36080c93 bpf: Fail verification for sign-extension of packet data/data_end/data_meta
KASAN: slab-use-after-free Read in htab_map_alloc (2) bpf 19 224 911d 917d 27/29 786d 86735b57c905 net/sched: unregister lockdep keys in qdisc_create/qdisc_alloc error path
KASAN: stack-out-of-bounds Read in xdp_do_check_flushed bpf net 17 syz, C done 127 827d 848d 27/29 806d 9da49aa80d68 tun: Add missing bpf_net_ctx_clear() in do_xdp_generic()
general protection fault in __dev_flush bpf net 19 syz, C 35 828d 841d 27/29 806d 9da49aa80d68 tun: Add missing bpf_net_ctx_clear() in do_xdp_generic()
general protection fault in bq_flush_to_queue bpf net 17 22 828d 837d 27/29 806d 9da49aa80d68 tun: Add missing bpf_net_ctx_clear() in do_xdp_generic()
KASAN: slab-use-after-free Read in bq_xmit_all bpf net 19 syz, C done 29 828d 841d 27/29 806d 9da49aa80d68 tun: Add missing bpf_net_ctx_clear() in do_xdp_generic()
general protection fault in __xsk_map_flush net bpf 19 syz, C done 26 828d 845d 27/29 806d 9da49aa80d68 tun: Add missing bpf_net_ctx_clear() in do_xdp_generic()
general protection fault in __cpu_map_flush bpf net 10 syz, C inconclusive 25 828d 842d 27/29 806d 9da49aa80d68 tun: Add missing bpf_net_ctx_clear() in do_xdp_generic()
general protection fault in xdp_do_generic_redirect bpf net 2 8 851d 855d 27/29 815d fecef4cd42c6 tun: Assign missing bpf_net_context.
general protection fault in dev_map_redirect bpf net 2 syz, C 362 851d 859d 27/29 815d fecef4cd42c6 tun: Assign missing bpf_net_context.
stack segment fault in dev_hash_map_redirect bpf net 2 syz, C done 29 851d 859d 27/29 815d fecef4cd42c6 tun: Assign missing bpf_net_context.
general protection fault in xdp_do_redirect net bpf 2 15 852d 859d 27/29 815d fecef4cd42c6 tun: Assign missing bpf_net_context.
stack segment fault in bpf_xdp_redirect net bpf 2 syz, C 181 851d 859d 27/29 815d fecef4cd42c6 tun: Assign missing bpf_net_context.
stack segment fault in cpu_map_redirect bpf net 2 syz, C done 11 852d 851d 27/29 815d fecef4cd42c6 tun: Assign missing bpf_net_context.
WARNING in bpf_lwt_seg6_adjust_srh bpf net -1 syz, C done 30 851d 865d 27/29 815d c13fda93aca1 bpf: Remove tst_run from lwt_seg6local_prog_ops.
possible deadlock in console_flush_all (2) bpf trace 4 syz, C error 52996 851d 1126d 26/29 851d ae01e52da244 serial: drop debugging WARN_ON_ONCE() from uart_write()
WARNING in skb_ensure_writable net bpf -1 syz, C done 2893 852d 929d 26/29 851d 2bbe3e5a2f4e bpf: Avoid splat in pskb_pull_reason
INFO: task hung in bpf_prog_dev_bound_destroy bpf 1 94 870d 882d 26/29 851d d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
possible deadlock in __sock_map_delete bpf net 4 syz, C 14 893d 937d 26/29 859d 98e948fb60d4 bpf: Allow delete from sockmap/sockhash only if update is allowed
general protection fault in bpf_get_attach_cookie_tracing bpf trace 2 syz, C error 7 885d 916d 26/29 872d d0d1df8ba18a bpf: Set run context for rawtp test_run callback
KASAN: slab-use-after-free Read in bpf_link_free (2) bpf 19 syz 52 882d 894d 26/29 872d 2884dc7d08d9 bpf: Fix a potential use-after-free in bpf_link_free()
WARNING in sock_map_close bpf net -1 syz, C error 182 880d 943d 25/29 879d 4b4647add7d3 sock_map: avoid race between sock_map_close and sk_psock_put
possible deadlock in sock_hash_delete_elem (2) bpf net 4 syz, C 1127 880d 963d 25/29 879d 98e948fb60d4 bpf: Allow delete from sockmap/sockhash only if update is allowed
KMSAN: uninit-value in __bpf_strtoull bpf 7 syz, C 119 886d 963d 25/29 885d e8742081db7d bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
KMSAN: uninit-value in trie_delete_elem bpf 7 syz, C 52 886d 956d 25/29 885d e8742081db7d bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
KMSAN: uninit-value in dev_map_lookup_elem net bpf 7 syz, C 3 950d 957d 25/29 885d e8742081db7d bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
KMSAN: uninit-value in trie_lookup_elem bpf 7 syz, C 12 943d 961d 25/29 885d e8742081db7d bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
possible deadlock in kvfree_call_rcu bpf 4 syz, C 1431 887d 956d 25/29 885d 59f2f841179a bpf: Avoid kfree_rcu() under lock in bpf_lpm_trie.
BUG: unable to handle kernel paging request in bpf_prog_ADDR (2) bpf 8 syz, C 3 928d 942d 25/29 885d 543576ec15b1 bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
KMSAN: uninit-value in array_map_lookup_elem bpf 7 syz, C 10 940d 960d 25/29 885d e8742081db7d bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
KMSAN: uninit-value in sock_map_delete_elem bpf net 7 syz, C 44 886d 957d 25/29 885d e8742081db7d bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
WARNING in __mark_chain_precision (4) bpf -1 syz, C 8 930d 950d 25/29 885d 1f2a74b41ea8 bpf: prevent r10 register from being marked as precise
KASAN: stack-out-of-bounds Read in hash bpf 17 syz, C done 5 938d 945d 25/29 899d a8d89feba7e5 bpf: Check bloom filter map value size
possible deadlock in force_sig_info_to_task bpf trace 4 syz, C error 6 919d 926d 25/29 899d 02b670c1f88e x86/mm: Remove broken vsyscall emulation code from the page fault code
KCSAN: data-race in sk_psock_drop / sk_psock_skb_ingress_enqueue bpf net 6 1 967d 960d 25/29 899d 6648e613226e bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
possible deadlock in tty_port_tty_get (2) net bpf 4 3 942d 960d 25/29 899d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in put_pwq_unlocked bpf trace 4 3 936d 935d 25/29 899d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
WARNING in sock_map_delete_elem bpf net -1 syz, C 17183 925d 964d 25/29 899d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in scheduler_tick (3) bpf net 4 syz, C 1179 926d 962d 25/29 899d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in pit_timer_fn bpf net 4 7 936d 947d 25/29 899d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in rcu_exp_handler bpf net 4 syz, C 1 939d 935d 25/29 899d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in rcu_report_exp_cpu_mult net bpf 4 syz, C done 30 926d 964d 25/29 899d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in try_to_wake_up (4) bpf net 4 syz, C error 19 901d 964d 25/29 899d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in ahci_single_level_irq_intr bpf net 4 syz, C 10 947d 955d 25/29 899d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
WARNING in sock_map_unref bpf net -1 syz, C error 97 926d 940d 25/29 899d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in __lock_task_sighand (2) bpf 4 syz, C 1476 900d 964d 25/29 899d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
WARNING in sock_hash_delete_elem bpf net -1 syz, C done 16982 925d 964d 25/29 899d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in hrtimer_run_queues bpf net 4 syz, C error 592 926d 963d 25/29 899d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in swake_up_one bpf net 4 syz, C 4 937d 936d 25/29 899d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in pwq_dec_nr_in_flight bpf trace 4 1 941d 937d 25/29 899d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
WARNING in _prb_commit net bpf -1 4 936d 932d 25/29 899d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in posix_timer_fn (2) bpf net 4 1 940d 936d 25/29 899d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in drm_handle_vblank net bpf 4 30 937d 962d 25/29 899d ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
KASAN: slab-out-of-bounds Read in xsk_setsockopt bpf net 17 syz, C 17 938d 947d 25/29 899d 237f3cf13b20 xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
UBSAN: array-index-out-of-bounds in check_stack_range_initialized bpf 15 syz, C error 21 930d 963d 25/29 899d ecc6a2101840 bpf: Protect against int overflow for stack access size
general protection fault in dev_map_enqueue net bpf 19 syz, C 676 899d 956d 25/29 899d 5bcf0dcbf906 xdp: use flags field to disambiguate broadcast redirect
KASAN: slab-use-after-free Read in bpf_link_free bpf 19 syz 181 899d 947d 25/29 899d 1a80dbcb2dba bpf: support deferring bpf_link dealloc to after RCU grace period
KASAN: slab-use-after-free Read in bpf_trace_run4 trace bpf 19 syz, C error 169 943d 961d 25/29 899d 1a80dbcb2dba bpf: support deferring bpf_link dealloc to after RCU grace period
KASAN: slab-use-after-free Read in bpf_trace_run2 bpf trace 19 syz, C error 653 943d 961d 25/29 899d 1a80dbcb2dba bpf: support deferring bpf_link dealloc to after RCU grace period
KASAN: slab-use-after-free Read in bpf_trace_run1 bpf trace 19 syz, C error 78 943d 958d 25/29 899d 1a80dbcb2dba bpf: support deferring bpf_link dealloc to after RCU grace period
linux-next boot error: WARNING in register_btf_kfunc_id_set bpf -1 9 1009d 1010d 25/29 941d a05e90427ef6 bpf: btf: Add BTF_KFUNCS_START/END macro pair
general protection fault in bpf_struct_ops_find_value bpf 2 syz, C done 9 1014d 1017d 25/29 941d e6be8cd5d3cf bpf: Fix error checks against bpf_get_btf_vmlinux().
BUG: unable to handle kernel NULL pointer dereference in dev_map_hash_update_elem bpf net 10 syz, C 2 985d 993d 25/29 941d 281d464a34f5 bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
general protection fault in btf_is_module bpf 2 syz, C error 318 1013d 1017d 25/29 941d e6be8cd5d3cf bpf: Fix error checks against bpf_get_btf_vmlinux().
BUG: unable to handle kernel NULL pointer dereference in unix_stream_sendmsg net bpf 10 syz, C 1 984d 984d 25/29 949d 4cd12c6065df bpf, sockmap: Fix NULL pointer dereference in sk_psock_verdict_data_ready()
BUG: unable to handle kernel NULL pointer dereference in sk_psock_verdict_data_ready bpf net 10 syz, C unreliable 15 980d 1100d 25/29 949d 4cd12c6065df bpf, sockmap: Fix NULL pointer dereference in sk_psock_verdict_data_ready()
WARNING in __mark_chain_precision (3) bpf -1 syz, C done 19 1042d 1063d 25/29 1011d 482d548d40b0 bpf: handle fake register spill to stack with BPF_ST_MEM instruction
KASAN: slab-use-after-free Read in nla_find bpf net 19 syz, C done 4 1056d 1055d 25/29 1012d 2130c519a401 bpf: Use nla_ok() instead of checking nla_len directly
WARNING: locking bug in corrupted (2) bpf 4 syz, C done done 1 1062d 1216d 25/29 1012d 6f861765464f fs: Block writes to mounted block devices
WARNING in __sk_msg_free bpf net -1 syz, C done 4 1038d 1037d 25/29 1012d dc9dfc8dc629 net: tls, fix WARNIING in __sk_msg_free
kernel BUG in prog_array_map_poke_run bpf -1 syz, C done done 35 1055d 1096d 25/29 1020d 4b7de801606e bpf: Fix prog_array_map_poke_run map poke update
KASAN: null-ptr-deref Write in unix_stream_bpf_update_proto bpf net 12 syz, C done 54 1043d 1073d 25/29 1022d 8d6650646ce4 bpf: syzkaller found null ptr deref in unix_bpf proto add
WARNING in bpf_mprog_pos_after bpf -1 3 1138d 1146d 25/29 1052d f9b0e1088bbf bpf, mprog: Fix maximum program check on mprog attachment
WARNING: zero-size vmalloc in xskq_create net bpf -1 20 1122d 1130d 25/29 1052d a12bbb3cccf0 xdp: Fix zero-size allocation warning in xskq_create()
WARNING: zero-size vmalloc in print_tainted bpf net -1 syz, C 79 1245d 1279d 25/29 1052d a12bbb3cccf0 xdp: Fix zero-size allocation warning in xskq_create()
WARNING in bpf_mprog_attach bpf -1 syz, C 3 1130d 1138d 25/29 1052d f9b0e1088bbf bpf, mprog: Fix maximum program check on mprog attachment
WARNING in bpf_mprog_pos_before bpf -1 syz, C done 26 1130d 1138d 25/29 1052d f9b0e1088bbf bpf, mprog: Fix maximum program check on mprog attachment
general protection fault in bpf_prog_offload_verifier_prep bpf 8 syz, C done 31 1142d 1161d 25/29 1052d 1a49f4195d34 bpf: Avoid dummy bpf_offload_netdev in __bpf_prog_dev_bound_init
WARNING: refcount bug in xp_put_pool bpf net 13 syz, C done 2 1197d 1195d 23/29 1122d 85c2c79a0730 xsk: fix refcount underflow in error path
KASAN: slab-use-after-free Read in xsk_diag_dump bpf net 19 syz, C done 9 1157d 1166d 23/29 1122d 3e019d8a05a3 xsk: Fix xsk_diag use-after-free error during socket cleanup
UBSAN: array-index-out-of-bounds in bpf_mprog_detach bpf 15 3 1191d 1197d 23/29 1122d d210f9735e13 bpf: Fix mprog detachment for empty mprog entry
KCSAN: data-race in bpf_percpu_array_update / bpf_percpu_array_update (2) bpf 6 1 1167d 1166d 23/29 1122d 6a86b5b5cd76 bpf: Annotate bpf_long_memcpy with data_race
WARNING in tcx_uninstall net bpf -1 syz, C done 7 1196d 1200d 23/29 1122d 079082c60aff tcx: Fix splat during dev unregister
WARNING in bpf_xdp_adjust_tail (4) bpf -1 syz, C error 466 1188d 1398d 23/29 1122d d14eea09edf4 net: core: remove unnecessary frame_sz check in bpf_xdp_adjust_tail()
KMSAN: uninit-value in ieee802154_subif_start_xmit driver-core bpf 8 syz, C done 119 1193d 1189d 23/29 1122d db2baf82b098 bpf: Fix an incorrect verification success with movsx insn
WARNING: ODEBUG bug in tcx_uninstall bpf net -1 syz, C done 38 1202d 1206d 23/29 1122d dc644b540a2d tcx: Fix splat in ingress_destroy upon tcx_entry_free
INFO: rcu detected stall in ext4_file_write_iter (7) ext4 mm bpf 1 3 1164d 1206d 23/29 1122d 8c21ab1bae94 net/sched: fq_pie: avoid stalls in fq_pie_timer()
UBSAN: array-index-out-of-bounds in print_bpf_insn bpf 15 syz, C done 9 1194d 1195d 23/29 1122d e99688eba2e9 bpf: Fix an array-index-out-of-bounds issue in disasm.c
KCSAN: data-race in __bpf_lru_list_rotate / __htab_lru_percpu_map_update_elem (5) bpf 6 13 1230d 1292d 23/29 1136d ee9fd0ac3017 bpf: Address KCSAN report on bpf_lru_list
WARNING in btf_type_id_size (2) bpf -1 syz, C error 8 1232d 1263d 23/29 1136d e6c2f594ed96 bpf: Silence a warning in btf_type_id_size()
WARNING: bad unlock balance in bpf bpf 4 syz, C done 12 1261d 1261d 23/29 1136d 4266f41feaee bpf: Fix bad unlock balance on freeze_mutex
WARNING in bpf_verifier_vlog bpf -1 syz, C inconclusive 6 1284d 1520d 23/29 1136d cff36398bd4c bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log
BUG: unable to handle kernel NULL pointer dereference in __build_skb_around bpf net 10 syz, C done 29 1328d 1333d 22/29 1248d e5995bc7e2ba bpf, test_run: fix crashes due to XDP frame overwriting/corruption
KASAN: slab-out-of-bounds Write in copy_array (2) bpf 21 108 1248d 1277d 22/29 1248d 45435d8da71f bpf: Always use maximal size for copy_array()
riscv/fixes boot error: WARNING in __apply_to_page_range (2) riscv bpf -1 5 1355d 1417d 22/29 1248d 96f9d4daf745 riscv: Rework kasan population functions
general protection fault in bpf_struct_ops_link_create bpf 2 syz, C done 17 1322d 1324d 22/29 1248d 55fbae05476d bpf: Check IS_ERR for the bpf_map_get() return value
WARNING in sock_map_del_link bpf net -1 91 1304d 1304d 22/29 1248d 8c5c2a4898e3 bpf, sockmap: Revert buggy deadlock fix in the sockhash and sockmap
KASAN: slab-out-of-bounds Write in copy_verifier_state bpf 21 syz, C error done 825 1402d 1419d 22/29 1248d 45435d8da71f bpf: Always use maximal size for copy_array()
BUG: stack guard page was hit in inet6_release net bpf -1 syz, C done 4 1383d 1432d 22/29 1248d ddce1e091757 bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
possible deadlock in bpf_trace_printk bpf trace 4 syz, C done done 68 1357d 1612d 22/29 1325d 05b24ff9b2cf bpf: Prevent bpf program recursion for raw tracepoint probes
KASAN: vmalloc-out-of-bounds Read in bpf_jit_free bpf 17 syz, C 68 1551d 1727d 22/29 1352d 1d5f82d9dd47 bpf, x86: fix freeing of not-finalized bpf_prog_pack d24d2a2b0a81 bpf: bpf_prog_pack: Set proper size before freeing ro_header
WARNING: kmalloc bug in xdp_umem_create (2) bpf net -1 syz, C done 21 1731d 1797d 22/29 1352d 0708a0afe291 mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls
BUG: sleeping function called from invalid context in sk_psock_skb_ingress_self bpf net 5 syz, C done 151 1462d 1484d 22/29 1352d 2d1f274b95c6 skmsg: pass gfp argument to alloc_sk_msg()
WARNING in bpf_skb_load_helper_16_no_cache bpf -1 syz, C done 6 1559d 1589d 22/29 1352d 0326195f523a bpf: Make sure mac_header was set before using it
KASAN: vmalloc-out-of-bounds Write in ringbuf_map_alloc bpf 21 syz, C done 541 1737d 1740d 22/29 1352d b293dcc473d2 bpf: Use VM_MAP instead of VM_ALLOC for ringbuf
bpf-next boot error: WARNING in bpf_prog_pack_free bpf -1 12 1691d 1692d 22/29 1352d 96805674e562 bpf: Fix bpf_prog_pack for multi-node setup
KASAN: slab-out-of-bounds Write in bpf_prog_test_run_xdp bpf net 21 syz, C done 18 1728d 1745d 22/29 1352d a6763080856f bpf: test_run: Fix OOB access in bpf_prog_test_run_xdp
general protection fault in do_check_common bpf 2 syz, C done 5 1585d 1588d 22/29 1352d d1a6edecc1fd bpf: Check attach_func_proto more carefully in check_return_code
WARNING in bpf_test_finish bpf net -1 syz, C done 3 1714d 1714d 22/29 1352d 530e214c5b5a bpf, test_run: Fix overflow in XDP frags bpf_test_finish
KMSAN: uninit-value in ___bpf_prog_run (3) bpf 7 syz, C 5 1666d 1668d 22/29 1352d 99c07327ae11 netlink: reset network and mac headers in netlink_dump()
general protection fault in check_helper_call bpf 2 syz, C done 4 1571d 1576d 22/29 1352d d1a6edecc1fd bpf: Check attach_func_proto more carefully in check_return_code
general protection fault in btf_decl_tag_resolve bpf 2 syz, C done 6 1738d 1738d 22/29 1352d d7e7b42f4f95 bpf: Fix a btf decl_tag bug when tagging a function
BUG: missing reserved tailroom bpf net -1 syz, C done 2 1703d 1703d 22/29 1352d b6f1f780b393 bpf, test_run: Fix packet size check for live packet mode
KASAN: slab-out-of-bounds Write in __build_skb_around bpf net 21 syz, C error 2536 1425d 1440d 22/29 1352d ce098da1497c skbuff: Introduce slab_build_skb()
WARNING in btf_type_id_size bpf -1 syz, C done 10 1412d 1483d 22/29 1352d ea68376c8bed bpf: prevent decl_tag from being referenced in func_proto
WARNING: ODEBUG bug in htab_map_alloc bpf -1 syz, C 6456 1495d 1520d 22/29 1352d cf7de6a53600 bpf: add missing percpu_counter_destroy() in htab_map_alloc()
WARNING: kmalloc bug in bpf bpf -1 syz, C done done 562 1690d 1807d 22/29 1352d 0708a0afe291 mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls
WARNING in bpf_skb_load_helper_32 bpf -1 syz, C done 9 1553d 1584d 22/29 1352d 0326195f523a bpf: Make sure mac_header was set before using it
WARNING in bpf_bprintf_prepare (2) bpf -1 syz, C 2 1486d 1525d 22/29 1352d 05b24ff9b2cf bpf: Prevent bpf program recursion for raw tracepoint probes
WARNING in check_map_prog_compatibility bpf -1 syz, C inconclusive done 128 1504d 1667d 22/29 1352d 34dd3bad1a6f bpf: Relax the requirement to use preallocated hash maps in tracing progs.
bpf-next boot error: KASAN: global-out-of-bounds Read in task_iter_init bpf -1 42 1821d 1825d 20/29 1705d 9e2ad638ae36 bpf: Extend BTF_ID_LIST_GLOBAL with parameter for number of IDs
general protection fault in bpf_skb_cgroup_id bpf net 2 syz, C inconclusive 107 1861d 1877d 20/29 1705d 435b08ec0094 bpf, test, cgroup: Use sk_{alloc,free} for test cases
general protection fault in bpf_skb_ancestor_cgroup_id bpf net 2 syz, C unreliable 232 1861d 1877d 20/29 1705d 435b08ec0094 bpf, test, cgroup: Use sk_{alloc,free} for test cases
general protection fault in dev_get_by_index_rcu (2) net bpf 2 syz, C error 18 1765d 1765d 20/29 1705d 382778edc826 xdp: check prog type before updating BPF link
WARNING: kmalloc bug in bpf_check bpf -1 syz, C done 34 1878d 1891d 20/29 1705d 0e6491b55970 bpf: Add oversize check before call kvcalloc()
KASAN: vmalloc-out-of-bounds Read in bpf_prog_put bpf 17 syz, C done 2 1785d 1783d 20/29 1705d 218d747a4142 bpf, sockmap: Fix double bpf_prog_put on error case in map_link
WARNING in bpf_bprintf_prepare bpf -1 syz, C unreliable 96 1969d 2007d 20/29 1824d e2d5b2bb769f bpf: Fix nested bpf_bprintf_prepare with more per-cpu buffers
UBSAN: shift-out-of-bounds in ___bpf_prog_run bpf -1 syz, C unreliable 38 1957d 2068d 20/29 1824d 28131e9d9333 bpf: Fix up register-based shifts in interpreter to silence KUBSAN
KASAN: use-after-free Write in sk_psock_stop bpf net 22 syz done 74 2022d 2041d 20/29 1824d aadb2bb83ff7 sock_map: Fix a potential use-after-free in sock_map_close()
memory leak in bpf (2) bpf 3 syz, C 3 1978d 2047d 20/29 1824d ccff81e1d028 bpf: Fix false positive kmemleak report in bpf_ringbuf_area_alloc()
general protection fault in btf_type_id_size bpf 2 syz, C unreliable 6 2074d 2071d 20/29 1824d 350a5c4dd245 bpf: Dont allow vmlinux BTF to be used in map_create and prog_load.
WARNING: suspicious RCU usage in tcp_bpf_update_proto net bpf 4 syz, C done 539 2022d 2042d 20/29 1824d 51e0158a5432 skmsg: Pass psock pointer to ->psock_update_sk_prot()
WARNING: suspicious RCU usage in bpf_get_current_cgroup_id bpf 4 syz, C done 764 1894d 1932d 20/29 1824d 2d3a1e3615c5 bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
WARNING in tracepoint_add_func trace bpf -1 syz, C done 20635 1939d 2323d 20/29 1824d 9913d5745bd7 tracepoint: Add tracepoint_probe_register_may_exist() for BPF tracing
KASAN: vmalloc-out-of-bounds Read in bpf_trace_run2 bpf trace 17 syz, C done done 5 2080d 2238d 20/29 2034d befe6d946551 tracepoint: Do not fail unregistering a probe due to memory failure
BUG: unable to handle kernel paging request in bpf_trace_run2 trace bpf 8 syz, C done done 10 2077d 2238d 20/29 2034d befe6d946551 tracepoint: Do not fail unregistering a probe due to memory failure
KMSAN: uninit-value in bpf_iter_prog_supported bpf 7 4479 2038d 2099d 20/29 2038d 17d8beda277a bpf: Fix an unitialized value in bpf_iter
KCSAN: data-race in bpf_lru_pop_free / bpf_lru_push_free bpf 6 237 2086d 2273d 20/29 2038d 6df8fb83301d bpf_lru_list: Read double-checked variable once without lock
KCSAN: data-race in __bpf_lru_list_rotate / bpf_lru_push_free (2) bpf 6 32 2092d 2161d 20/29 2038d 6df8fb83301d bpf_lru_list: Read double-checked variable once without lock
KASAN: vmalloc-out-of-bounds Read in bpf_trace_run3 bpf trace 17 syz, C done 6 2094d 2196d 20/29 2038d befe6d946551 tracepoint: Do not fail unregistering a probe due to memory failure
BUG: unable to handle kernel paging request in bpf_trace_run3 bpf trace 8 syz, C done 40 2085d 2207d 20/29 2038d befe6d946551 tracepoint: Do not fail unregistering a probe due to memory failure
memory leak in xskq_create bpf net 3 syz, C 7 2134d 2155d 19/29 2069d 8bee68338408 xsk: Fix memory leak for failed bind
BUG: unable to handle kernel paging request in htab_map_alloc (2) bpf 8 syz, C unreliable 8 2155d 2164d 19/29 2069d e1868b9e36d0 bpf: Avoid overflows involving hash elem_size
BUG: unable to handle kernel paging request in bpf_lru_populate bpf 8 syz, C done 12 2155d 2161d 19/29 2069d e1868b9e36d0 bpf: Avoid overflows involving hash elem_size
general protection fault in xsk_recvmsg net bpf 2 syz, C done unreliable 1800 2153d 2123d 19/29 2069d 3546b9b8eced xsk: Validate socket state in xsk_recvmsg, prior touching socket members
KASAN: vmalloc-out-of-bounds Write in pcpu_freelist_populate bpf 21 6 2157d 2161d 19/29 2069d e1868b9e36d0 bpf: Avoid overflows involving hash elem_size
KASAN: use-after-free Read in htab_map_alloc bpf 19 syz, C done 38 2196d 2199d 19/29 2069d 8aaeed81fcb9 bpf: Fix error path in htab_map_alloc()
BUG: unable to handle kernel paging request in htab_free_elems bpf 8 1 2162d 2162d 19/29 2069d e1868b9e36d0 bpf: Avoid overflows involving hash elem_size
KASAN: vmalloc-out-of-bounds Write in htab_map_alloc bpf 21 6 2156d 2164d 19/29 2069d e1868b9e36d0 bpf: Avoid overflows involving hash elem_size
BUG: unable to handle kernel paging request in pcpu_freelist_populate bpf 8 syz, C unreliable 42 2154d 2165d 19/29 2069d e1868b9e36d0 bpf: Avoid overflows involving hash elem_size
KASAN: vmalloc-out-of-bounds Read in htab_free_elems bpf 17 syz, C unreliable 7 2161d 2163d 19/29 2069d e1868b9e36d0 bpf: Avoid overflows involving hash elem_size
KASAN: vmalloc-out-of-bounds Write in bpf_lru_populate bpf 21 syz, C unreliable 19 2155d 2165d 19/29 2069d e1868b9e36d0 bpf: Avoid overflows involving hash elem_size
general protection fault in xsk_release net bpf 2 syz, C done 2 2234d 2234d 15/29 2182d 1fd17c8cd0aa xsk: Fix possible crash in socket_release when out-of-memory
KASAN: use-after-free Write in xp_put_pool bpf net 22 syz, C done 50 2235d 2257d 15/29 2182d 83cf5c68d663 xsk: Fix use-after-free in failed shared_umem bind
general protection fault in xsk_is_setup_for_bpf_map net bpf 2 syz, C error 294 2235d 2257d 15/29 2182d 968be23ceaca xsk: Fix possible segfault at xskmap entry insertion
WARNING in bpf_raw_tp_link_fill_link_info bpf -1 syz, C error 56 2235d 2249d 15/29 2182d b474959d5afd bpf: Fix a buffer out-of-bound access when filling raw_tp link_info
memory leak in xdp_umem_create net bpf 3 syz, C 17 2186d 2206d 15/29 2182d e5e1a4bc916d xsk: Fix possible memory leak at socket close
general protection fault in xsk_diag_dump (2) net bpf 2 syz, C 354 2239d 2257d 15/29 2182d 53ea2076d851 xsk: Fix possible segfault in xsk umem diagnostics
general protection fault in __btf_resolve_helper_id bpf 2 syz, C 17 2307d 2316d 15/29 2243d 5b801dfb7feb bpf: Fix NULL pointer dereference in __btf_resolve_helper_id()
KASAN: use-after-free Write in bpf_link_put bpf 22 2 2380d 2382d 15/29 2304d 138c67677ff5 bpf: Fix use-after-free of bpf_link when priming half-fails
general protection fault in sock_hash_free bpf net 2 1 2349d 2349d 15/29 2304d 75e68e5bf2c7 bpf, sockhash: Synchronize delete from bucket list on map free
BUG: unable to handle kernel NULL pointer dereference in smp_call_function_many_cond (2) bpf 10 1 2327d 2327d 15/29 2304d 3021e69219e2 kcov: check kcov_softirq in kcov_remote_stop()
KMSAN: uninit-value in bpf_skb_load_helper_32_no_cache bpf net 7 2 2467d 2465d 15/29 2397d 457fed775c97 net/smc: fix leak of kernel memory to user space
possible deadlock in htab_lru_map_delete_node bpf 4 syz, C done 264 2450d 2455d 15/29 2397d b9aff38de2cb bpf: Fix a potential deadlock with bpf_map_do_batch
possible deadlock in bpf_lru_push_free bpf 4 syz, C done 609 2450d 2456d 15/29 2397d b9aff38de2cb bpf: Fix a potential deadlock with bpf_map_do_batch
BUG: sleeping function called from invalid context in lock_sock_nested net bpf 5 syz, C 1232 2454d 2529d 15/29 2454d 37f96694cf73 crypto: af_alg - Use bh_lock_sock in sk_destruct
WARNING in sk_psock_drop bpf net -1 157 2477d 2486d 15/29 2454d 58c8db929db1 net, sk_msg: Don't check if sock is locked when tearing down psock
general protection fault in free_verifier_state (3) bpf 2 syz, C 5 2482d 2488d 15/29 2454d f59bbfc2f609 bpf: Fix error path under memory pressure
KASAN: vmalloc-out-of-bounds Write in pcpu_alloc bpf 21 syz, C done 31 2506d 2530d 15/29 2459d 253a496d8e57 kasan: don't assume percpu shadow allocations will succeed
BUG: unable to handle kernel paging request in pcpu_alloc bpf 8 syz, C done 24 2512d 2530d 15/29 2459d 253a496d8e57 kasan: don't assume percpu shadow allocations will succeed
KASAN: slab-out-of-bounds Read in bpf_prog_create net bpf 17 syz, C done 447 2526d 2608d 15/29 2496d 0033b34a03ec ppp: fix out-of-bounds access in bpf_prog_create()
KASAN: use-after-free Read in bpf_prog_kallsyms_find (2) bpf 19 syz, C done 9 2571d 2581d 13/29 2541d cd7455f1013e bpf: Fix use after free in subprog's jited symbol removal
KASAN: use-after-free Read in is_bpf_text_address bpf 19 syz, C done 3 2572d 2573d 13/29 2541d cd7455f1013e bpf: Fix use after free in subprog's jited symbol removal
BUG: unable to handle kernel paging request in is_bpf_text_address bpf 8 syz, C done 2 2577d 2577d 13/29 2541d cd7455f1013e bpf: Fix use after free in subprog's jited symbol removal
BUG: unable to handle kernel NULL pointer dereference in xsk_poll bpf net 10 syz, C done 10 2577d 2595d 13/29 2560d df551058f7a3 xsk: Fix crash in poll when device does not support ndo_xsk_wakeup
general protection fault in bpf_tcp_close (2) bpf 2 syz, C done 26 2997d 3041d 13/29 2574d e06fa9c16ce4 bpf, sockmap: fix potential use after free in bpf_tcp_close
general protection fault in xsk_poll bpf net 2 syz, C done 430 2609d 2637d 13/29 2580d 42fddcc7c64b xsk: use state member for socket synchronization
general protection fault in xsk_map_update_elem bpf 2 syz, C done 12 2599d 2602d 13/29 2580d fcd30ae0665c bpf/xskmap: Return ERR_PTR for failure case instead of NULL.
general protection fault in dev_map_hash_update_elem bpf net 2 syz, C done 4 2613d 2620d 13/29 2580d af58e7ee6a8d xdp: Fix race in dev_map_hash_update_elem() when replacing element
WARNING in __mark_chain_precision (2) bpf -1 syz, C done 18 2609d 2627d 13/29 2586d 2339cd6cd0b5 bpf: fix precision tracking of stack slots
WARNING: suspicious RCU usage (4) bpf trace -1 syz, C done 1 2989d 2987d 13/29 2591d 865e63b04e9b tracing: Add back in rcu_irq_enter/exit_irqson() for rcuidle tracepoints
WARNING: suspicious RCU usage in trace_call_bpf bpf trace 4 syz, C done 327 2970d 2987d 13/29 2591d 865e63b04e9b tracing: Add back in rcu_irq_enter/exit_irqson() for rcuidle tracepoints
KASAN: use-after-free Read in psock_map_pop bpf 19 syz, C done 204 2937d 2980d 13/29 2591d 5607fff30363 bpf: sockmap only allow ESTABLISHED sock state
KASAN: slab-out-of-bounds Read in sock_hash_ctx_update_elem bpf 17 syz, C done 5 3022d 3022d 13/29 2591d b845c898b2f1 bpf, sockmap: fix sock_hash_alloc and reject zero-sized keys
general protection fault in smap_list_hash_remove bpf 2 syz, C done 52 3029d 3048d 13/29 2591d 99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
WARNING in bpf_jit_free bpf -1 syz, C done 21697 2619d 3036d 12/29 2619d c751798aa224 bpf: fix use after free in prog symbol exposure
WARNING in bpf_prog_kallsyms_add bpf -1 syz done done 2 2661d 2864d 12/29 2619d c751798aa224 bpf: fix use after free in prog symbol exposure
BUG: unable to handle kernel paging request in bpf_prog_kallsyms_find bpf 8 syz done inconclusive 3 2836d 2911d 12/29 2619d c751798aa224 bpf: fix use after free in prog symbol exposure
BUG: unable to handle kernel paging request in bpf_prog_kallsyms_add bpf 8 syz error 234 2620d 2980d 12/29 2619d c751798aa224 bpf: fix use after free in prog symbol exposure
KASAN: use-after-free Read in bpf_prog_kallsyms_del bpf 19 syz done inconclusive 3 2867d 2945d 12/29 2619d c751798aa224 bpf: fix use after free in prog symbol exposure
KASAN: use-after-free Read in bpf_get_prog_name bpf 19 1 2662d 2661d 12/29 2619d c751798aa224 bpf: fix use after free in prog symbol exposure
WARNING in bpf_prog_kallsyms_find bpf -1 syz, C error 5632 2619d 2740d 12/29 2619d c751798aa224 bpf: fix use after free in prog symbol exposure
WARNING in is_bpf_text_address bpf -1 syz, C done 104 2629d 2696d 12/29 2619d c751798aa224 bpf: fix use after free in prog symbol exposure
KASAN: use-after-free Read in bpf_prog_kallsyms_add bpf 19 syz error inconclusive 120 2746d 2980d 12/29 2619d c751798aa224 bpf: fix use after free in prog symbol exposure
BUG: unable to handle kernel paging request in __do_softirq bpf 8 syz done done 1 2699d 2698d 12/29 2629d 95fa145479fb bpf: sockmap/tls, close can race with map free
BUG: unable to handle kernel paging request in tls_prots net bpf 8 syz done 1 2691d 2691d 12/29 2629d 95fa145479fb bpf: sockmap/tls, close can race with map free
possible deadlock in xsk_notifier bpf net 4 syz, C done 495 2668d 2679d 12/29 2643d 5464c3a0e9a0 xdp: fix potential deadlock on socket mutex
general protection fault in btf_array_resolve bpf 2 syz, C error 109 2676d 2698d 12/29 2651d e4f07120210a bpf: fix NULL deref in btf_type_is_resolve_source_only
general protection fault in btf_struct_resolve bpf 2 syz, C error 49 2676d 2698d 12/29 2651d e4f07120210a bpf: fix NULL deref in btf_type_is_resolve_source_only
KASAN: use-after-free Read in __dev_map_entry_free bpf net 19 syz, C 473 2781d 3062d 12/29 2699d 2baae3545327 bpf: devmap: fix use-after-free Read in __dev_map_entry_free
general protection fault in xsk_diag_dump net bpf 2 syz, C 5 2799d 2804d 11/29 2781d 915905f8b1d4 xsk: fix potential crash in xsk_diag_put_umem()
KASAN: use-after-free Read in bpf_cgroup_storage_release bpf 19 syz, C 2 3019d 3019d 11/29 2820d 82c018d734a7 Merge branch 'bpf-cgroup-local-storage'
WARNING in __debug_object_init (3) net bpf -1 syz, C 1557 2931d 2932d 11/29 2847d 2cb494a36c98 bpf: add tests for direct packet access from CGROUP_SKB
KASAN: slab-out-of-bounds Write in queue_stack_map_push_elem bpf 21 syz, C 30 2902d 2904d 11/29 2892d 813961de3ee6 bpf: fix integer overflow in queue_stack_map
WARNING in bpf_check (2) bpf -1 syz, C 9 2915d 2914d 11/29 2892d afd594240806 bpf: fix off-by-one error in adjust_subprog_starts
KASAN: slab-out-of-bounds Read in refcount_inc_not_zero_checked bpf net 17 2 2942d 2943d 11/29 2917d 5032d079909d bpf: skmsg, fix psock create on existing kcm/tls port
BUG: sleeping function called from invalid context at net/core/dev.c:LINE bpf -1 syz 8 2943d 2952d 11/29 2931d cee271678d0e xsk: do not call synchronize_net() under RCU read lock
WARNING in pcpu_alloc bpf -1 syz, C 4 2950d 2959d 11/29 2949d b0584ea66d73 bpf: don't accept cgroup local storage with zero value size
WARNING: suspicious RCU usage in bpf_prog_array_copy_core bpf 4 syz, C 22873 2993d 3007d 8/29 2993d 965931e3a803 bpf: fix a rcu usage warning in bpf_prog_array_copy_core()
KASAN: out-of-bounds Read in bpf_test_finish net bpf 17 9 3037d 3043d 8/29 3014d 6e6fddc78323 bpf: fix panic due to oob in bpf_prog_test_run_skb
WARNING: refcount bug in smap_release_sock bpf 13 syz, C 55 3030d 3069d 8/29 3014d 7ebc14d507b4 bpf: sockmap, consume_skb in close path 547b3aa451ae bpf: sockmap, error path can not release psock in multi-map case
KASAN: stack-out-of-bounds Read in bpf_tcp_close bpf 17 syz, C 1 3034d 3034d 8/29 3014d 99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
WARNING in bpf_check bpf -1 3 3034d 3040d 8/29 3014d c7a897843224 bpf: don't leave partial mangled prog in jit_subprogs error path
WARNING in do_debug (2) bpf -1 1 3035d 3034d 8/29 3014d 99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
KASAN: use-after-free Read in bpf_test_finish net bpf 19 syz, C 1211 3029d 3043d 8/29 3014d 6e6fddc78323 bpf: fix panic due to oob in bpf_prog_test_run_skb
WARNING in bpf_int_jit_compile bpf -1 syz 11 3051d 3087d 8/29 3043d 9facc336876f bpf: reject any prog that failed read-only lock
possible deadlock in sock_hash_free bpf 4 syz, C 45 3085d 3085d 8/29 3043d e9db4ef6bf4c bpf: sockhash fix omitted bucket lock in sock_close
WARNING: ODEBUG bug in sock_hash_free bpf -1 1 3057d 3056d 8/29 3043d e9db4ef6bf4c bpf: sockhash fix omitted bucket lock in sock_close
KASAN: slab-out-of-bounds Read in bpf_csum_update bpf net 17 syz, C 2 3081d 3079d 8/29 3043d 58990d1ff3f7 bpf: reject passing modified ctx to helper functions
INFO: rcu detected stall in is_bpf_text_address bpf 1 syz, C 1 3094d 3094d 8/29 3043d 1d88ba1ebb27 sctp: not allow transport timeout value less than HZ/5 for hb_timer
KASAN: use-after-free Read in bpf_skb_change_proto bpf net 19 1 3073d 3072d 8/29 3043d 58990d1ff3f7 bpf: reject passing modified ctx to helper functions
WARNING in bpf_prog_select_runtime bpf -1 syz 45 3067d 3068d 8/29 3043d 9facc336876f bpf: reject any prog that failed read-only lock
KASAN: slab-out-of-bounds Read in bpf_skb_vlan_push bpf net 17 syz 2 3069d 3069d 8/29 3043d 58990d1ff3f7 bpf: reject passing modified ctx to helper functions
KASAN: use-after-free Read in skb_ensure_writable net bpf 19 syz, C 4 3072d 3079d 8/29 3043d 58990d1ff3f7 bpf: reject passing modified ctx to helper functions
KASAN: use-after-free Read in bpf_tcp_close bpf 19 syz, C 1748 3048d 3087d 8/29 3043d e9db4ef6bf4c bpf: sockhash fix omitted bucket lock in sock_close
BUG: unable to handle kernel paging request in bpf_prog_select_runtime bpf 8 1 3059d 3058d 8/29 3043d 85782e037f8a bpf: undo prog rejection on read-only lock failure
WARNING: kmalloc bug in xdp_umem_create bpf net -1 syz, C 7 3067d 3073d 8/29 3043d a343993c518c xsk: silence warning on memory allocation failure
KASAN: slab-out-of-bounds Read in bpf_skb_change_proto bpf net 17 syz, C 2 3072d 3072d 8/29 3043d 58990d1ff3f7 bpf: reject passing modified ctx to helper functions
KASAN: slab-out-of-bounds Read in skb_ensure_writable bpf net 17 syz, C 9 3069d 3079d 8/29 3043d 58990d1ff3f7 bpf: reject passing modified ctx to helper functions
KASAN: use-after-free Read in bpf_csum_update bpf net 19 syz, C 1 3081d 3079d 8/29 3043d 58990d1ff3f7 bpf: reject passing modified ctx to helper functions
BUG: unable to handle kernel paging request in bpf_int_jit_compile bpf 8 syz 2 3055d 3058d 8/29 3043d 85782e037f8a bpf: undo prog rejection on read-only lock failure
KASAN: use-after-free Write in bpf_tcp_close bpf 22 syz, C 67 3050d 3086d 8/29 3043d e9db4ef6bf4c bpf: sockhash fix omitted bucket lock in sock_close
general protection fault in bpf_tcp_close bpf 2 syz, C 421 3044d 3087d 8/29 3043d e9db4ef6bf4c bpf: sockhash fix omitted bucket lock in sock_close 54fedb42c653 bpf: sockmap, fix smap_list_map_remove when psock is in many maps
KASAN: slab-out-of-bounds Read in bpf_skb_change_head net bpf 17 syz, C 2 3069d 3069d 8/29 3043d 58990d1ff3f7 bpf: reject passing modified ctx to helper functions
WARNING: kmalloc bug in map_get_next_key bpf -1 syz, C 5 3096d 3097d 8/29 3043d 683d2ac3904c bpf: fix sock hashmap kmalloc warning
KASAN: null-ptr-deref Write in xdp_umem_unaccount_pages bpf net 12 syz, C 25 3071d 3075d 8/29 3043d c09290c56376 bpf, xdp: fix crash in xdp_umem_unaccount_pages
WARNING: kmalloc bug in memdup_user (3) bpf -1 syz, C 137 3096d 3097d 8/29 3043d 683d2ac3904c bpf: fix sock hashmap kmalloc warning
possible deadlock in bpf_tcp_close bpf 4 syz, C 152 3085d 3085d 8/29 3043d e9db4ef6bf4c bpf: sockhash fix omitted bucket lock in sock_close
possible deadlock in perf_event_detach_bpf_prog trace bpf 4 1 3146d 3145d 5/29 3105d 3a38bb98d9ab bpf/tracing: fix a deadlock in perf_event_detach_bpf_prog
WARNING in kvmalloc_node bpf net -1 syz, C 513 3183d 3189d 4/29 3176d 7fc17e909edf bpf: cpumap: use GFP_KERNEL instead of GFP_ATOMIC in __cpu_map_entry_alloc()
WARNING: kmalloc bug in bpf_prog_array_copy_info bpf -1 syz, C 4424 3176d 3189d 4/29 3176d 9c481b908b01 bpf: fix bpf_prog_array_copy_to_user warning from perf event prog query
WARNING: kmalloc bug in cpu_map_update_elem bpf net -1 syz, C 2677 3176d 3187d 4/29 3176d 7fc17e909edf bpf: cpumap: use GFP_KERNEL instead of GFP_ATOMIC in __cpu_map_entry_alloc()
general protection fault in SyS_bpf (2) bpf 2 syz, C 1065 3176d 3190d 4/29 3176d 952fad8e3239 bpf: fix sock_map_alloc() error path
general protection fault in ___bpf_prog_run bpf 2 syz, C 8 3196d 3203d 4/29 3190d 65073a67331d bpf: fix null pointer deref in bpf_prog_test_run_xdp
general protection fault in trie_get_next_key bpf 2 syz, C 3 3207d 3208d 4/29 3200d 6dd1ec6c7a2c bpf: fix kernel page fault in lpm map trie_get_next_key
KASAN: use-after-free Read in __bpf_prog_put bpf 19 1 3222d 3222d 4/29 3201d bbeb6e4323da bpf, array: fix overflow in max_entries and undefined behavior in index_mask
BUG: unable to handle kernel paging request in check_memory_region bpf 8 syz, C 10 3218d 3221d 4/29 3201d bbeb6e4323da bpf, array: fix overflow in max_entries and undefined behavior in index_mask
KASAN: use-after-free Read in map_lookup_elem bpf 19 syz, C 6 3217d 3221d 4/29 3201d bbeb6e4323da bpf, array: fix overflow in max_entries and undefined behavior in index_mask
general protection fault in copy_verifier_state bpf 2 syz, C 2 3235d 3231d 4/29 3201d 5896351ea936 bpf: fix verifier GPF in kmalloc failure path
WARNING in xdp_rxq_info_unreg bpf net -1 syz, C 198 3210d 3211d 4/29 3201d c13da21cdb80 tun: avoid calling xdp_rxq_info_unreg() twice
suspicious RCU usage at ./include/linux/rcupdate.h:LINE (3) bpf -1 syz, C 5087 3202d 3211d 4/29 3201d 2310035fa03f bpf: fix incorrect kmalloc usage in lpm_trie MAP_GET_NEXT_KEY rcu region
suspicious RCU usage at mm/slab.h:LINE bpf -1 1 3210d 3210d 4/29 3201d 2310035fa03f bpf: fix incorrect kmalloc usage in lpm_trie MAP_GET_NEXT_KEY rcu region
BUG: sleeping function called from invalid context at mm/slab.h:LINE (2) bpf -1 2 3210d 3210d 4/29 3201d 2310035fa03f bpf: fix incorrect kmalloc usage in lpm_trie MAP_GET_NEXT_KEY rcu region
general protection fault in free_verifier_state (2) bpf 2 syz, C 2 3225d 3225d 4/29 3201d 5896351ea936 bpf: fix verifier GPF in kmalloc failure path
KASAN: slab-out-of-bounds Read in map_lookup_elem bpf 17 syz, C 6 3218d 3221d 4/29 3210d bbeb6e4323da bpf, array: fix overflow in max_entries and undefined behavior in index_mask
KASAN: slab-out-of-bounds Write in array_map_update_elem bpf 21 syz, C 6 3219d 3218d 4/29 3211d bbeb6e4323da bpf, array: fix overflow in max_entries and undefined behavior in index_mask
general protection fault in cgroup_fd_array_put_ptr bpf 2 syz, C 219 3216d 3223d 4/29 3211d bbeb6e4323da bpf, array: fix overflow in max_entries and undefined behavior in index_mask
KASAN: slab-out-of-bounds Read in bpf_fd_array_map_lookup_elem bpf 17 7 3218d 3222d 4/29 3211d bbeb6e4323da bpf, array: fix overflow in max_entries and undefined behavior in index_mask
BUG: unable to handle kernel paging request in fd_array_map_delete_elem bpf 8 11 3217d 3223d 4/29 3211d bbeb6e4323da bpf, array: fix overflow in max_entries and undefined behavior in index_mask
KASAN: use-after-free Write in array_map_update_elem bpf 22 syz, C 11 3216d 3218d 4/29 3211d bbeb6e4323da bpf, array: fix overflow in max_entries and undefined behavior in index_mask
KASAN: slab-out-of-bounds Read in perf_event_fd_array_release bpf 17 syz, C 96 3216d 3223d 4/29 3211d bbeb6e4323da bpf, array: fix overflow in max_entries and undefined behavior in index_mask
KASAN: use-after-free Read in bpf_fd_array_map_lookup_elem bpf 19 21 3217d 3223d 4/29 3211d bbeb6e4323da bpf, array: fix overflow in max_entries and undefined behavior in index_mask
general protection fault in __bpf_map_put bpf 2 syz, C 331 3216d 3223d 4/29 3211d bbeb6e4323da bpf, array: fix overflow in max_entries and undefined behavior in index_mask
BUG: unable to handle kernel paging request in __bpf_map_put bpf 8 1 3220d 3220d 4/29 3211d bbeb6e4323da bpf, array: fix overflow in max_entries and undefined behavior in index_mask
BUG: unable to handle kernel paging request in bpf_fd_array_map_lookup_elem bpf 8 5 3217d 3221d 4/29 3211d bbeb6e4323da bpf, array: fix overflow in max_entries and undefined behavior in index_mask
general protection fault in __bpf_prog_put bpf 2 syz, C 212 3216d 3223d 4/29 3211d bbeb6e4323da bpf, array: fix overflow in max_entries and undefined behavior in index_mask
WARNING in adjust_ptr_min_max_vals bpf -1 syz, C 252 3213d 3230d 4/29 3211d 6f16101e6a8b bpf: mark dst unknown on inconsistent {s, u}bounds adjustments
divide error in ___bpf_prog_run bpf 2 syz, C 28 3213d 3221d 4/29 3211d 68fda450a7df bpf: fix 32-bit divide by zero
WARNING in ___bpf_prog_run bpf -1 syz, C 28 3216d 3223d 4/29 3211d 7891a87efc71 bpf: arsh is not supported in 32 bit alu thus reject it
general protection fault in free_verifier_state bpf 2 syz, C 2 3243d 3243d 3/29 3237d 8c01c4f896aa bpf: fix verifier NULL pointer dereference
general protection fault in bpf_check bpf 2 3 3287d 3292d 3/29 3266d 8c01c4f896aa bpf: fix verifier NULL pointer dereference