Applied filters: Label=subsystems:netfilter (drop)
Extra filters: [With Repro]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
KASAN: invalid-free in rcu_free_sheaf prio:high fs netfilter 24 47 22m 97d 16/29 never 979d5b8de8ed ieee802154: hwsim: serialize pib updates to fix double-free
WARNING in nf_flow_offload_ip_hook prio:normal netfilter -1 syz, C done 9 45d 44d 29/29 3d19h 8aecf0bbcc72 netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()
KCSAN: data-race in hash_ip4_add / hash_ip4_head prio:normal netfilter 6 1 177d 176d 29/29 64d 2358f7427ccd netfilter: ipset: Fix data race between add and dump in all hash types
BUG: using smp_processor_id() in preemptible code in cpu_mt prio:normal netfilter 4 4 95d 121d 29/29 64d c376f07e16c0 netfilter: xt_cpu: prefer raw_smp_processor_id
KASAN: use-after-free Read in nf_hook_entry_head netfilter 19 syz error 62 186d 210d 29/29 134d b7cdc5a97d02 netfilter: nf_tables: Fix for duplicate device in netdev hooks
possible deadlock in nf_tables_dumpreset_obj netfilter 4 1 276d 272d 29/29 134d 7f261bb906bf netfilter: nf_tables: revert commit_mutex usage in reset path
WARNING in nft_map_deactivate netfilter -1 syz, C error 5 199d 210d 29/29 134d fb7fb4016300 netfilter: nf_tables: clone set on flush only
KASAN: slab-use-after-free Read in nft_array_get_cmp netfilter 19 syz, C error 5 232d 232d 29/29 134d 35f83a75529a netfilter: nft_set_rbtree: don't gc elements on insert
WARNING in nf_conntrack_cleanup_net_list netfilter -1 765 145d 280d 29/29 134d 2ef02ac38d3c inet: frags: drop fraglist conntrack references
WARNING in br_nf_local_in bridge netfilter -1 1 378d 374d 29/29 318d netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm
WARNING in nf_reject_fill_skb_dst netfilter -1 syz, C done 214 380d 392d 29/29 339d netfilter: nf_reject: don't leak dst refcount for loopback packets
WARNING in nf_send_reset6 netfilter -1 syz, C 9 384d 392d 29/29 339d netfilter: nf_reject: don't leak dst refcount for loopback packets
WARNING in nf_send_unreach6 netfilter -1 508 380d 393d 29/29 339d netfilter: nf_reject: don't leak dst refcount for loopback packets
WARNING in nft_socket_init (2) netfilter -1 syz, C done 6 402d 419d 29/29 344d 1dee968d22ea netfilter: nft_socket: remove WARN_ON_ONCE with huge level value
WARNING in ip_mr_output netfilter -1 syz, C error 74 445d 447d 29/29 378d beead7eea896 net: ipv4: guard ip_mr_output() with rcu
KASAN: slab-out-of-bounds Read in nfacct_mt_checkentry netfilter 17 syz, C done 7 429d 427d 29/29 378d bf58e667af7d netfilter: xt_nfacct: don't assume acct name is null-terminated
KMSAN: uninit-value in nf_flow_offload_inet_hook (2) netfilter 7 syz, C 13 435d 437d 29/29 378d 18cdb3d982da netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
BUG: assuming non migratable context at ./include/linux/filter.h:LINE netfilter -1 syz, C done 1189 390d 427d 29/29 378d 17ce3e5949bc bpf: Disable migration in nf_hook_run_bpf().
WARNING in dev_setup_tc netfilter -1 38 554d 559d 28/29 464d 0a13c1e0a449 net: revert to lockless TC_SETUP_BLOCK and TC_SETUP_FT
KASAN: slab-use-after-free Read in nf_tables_trans_destroy_work (2) netfilter 19 syz 1 565d 564d 28/29 464d fb8286562ecf netfilter: nf_tables: make destruction work queue pernet
KMSAN: uninit-value in __nf_conncount_add netfilter 7 1 562d 558d 28/29 464d d653bfeb07eb netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree()
WARNING in __nf_unregister_net_hook (8) netfilter -1 2 523d 535d 28/29 464d 688c15017d5c netfilter: nf_tables: don't unregister hook when table is dormant
WARNING in nft_socket_init netfilter -1 syz, C done 14 594d 661d 28/29 499d b7529880cb96 netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level
KASAN: slab-out-of-bounds Read in led_tg_check netfilter 17 syz, C done 5 656d 666d 28/29 499d 04317f4eb2aa netfilter: x_tables: fix LED ID check in led_tg_check()
BUG: using smp_processor_id() in preemptible code in nft_inner_eval netfilter 4 2 665d 665d 28/29 499d 7b1d83da254b netfilter: nft_inner: incorrect percpu area handling under softirq
KASAN: slab-out-of-bounds Read in bitmap_ip_add (2) netfilter 17 syz, C 3 679d 675d 28/29 640d 35f56c554eb1 netfilter: ipset: add missing range check in bitmap_ip_uadt
KCSAN: assert: race in dequeue_entities netfilter audit 14 2118 683d 720d 28/29 672d b55945c500c5 sched: Fix pick_next_task_fair() vs try_to_wake_up() race
WARNING in xt_cluster_mt (2) netfilter -1 syz, C inconclusive 5 716d 714d 28/29 674d 0bfcb7b71e73 netfilter: xtables: avoid NFPROTO_UNSPEC where needed
BUG: using __this_cpu_write() in preemptible code in nf_dup_ipv4 netfilter 4 1 732d 732d 28/29 674d 92ceba94de6f netfilter: nf_tables: prevent nf_skb_duplicated corruption
INFO: task hung in ip_tunnel_init_net (3) netfilter 1 41 675d 706d 28/29 674d a1494d532e28 netdevsim: use cond_resched() in nsim_dev_trap_report_work()
KMSAN: uninit-value in nf_reject_ip6_tcphdr_put netfilter 7 syz, C 136 721d 734d 28/29 695d 9c778fe48d20 UPSTREAM: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
KASAN: slab-use-after-free Read in ip6_send_skb netfilter 19 1 761d 761d 28/29 708d faa389b2fbaa ipv6: prevent UAF in ip6_send_skb()
KMSAN: uninit-value in nf_flow_offload_inet_hook netfilter 7 4 760d 769d 28/29 714d 6ea14ccb60c8 netfilter: flowtable: validate vlan header
KASAN: slab-use-after-free Read in nf_tables_trans_destroy_work netfilter 19 syz, C error 147 801d 808d 26/29 772d 9f6958ba2e90 netfilter: nf_tables: unconditionally flush pending work before notifier
net-next test error: WARNING: suspicious RCU usage in _destroy_all_sets netfilter -1 128 819d 825d 26/29 800d 8ecd06277a76 netfilter: ipset: Fix suspicious rcu_dereference_protected()
upstream test error: WARNING: suspicious RCU usage in _destroy_all_sets netfilter -1 293 819d 825d 26/29 800d 8ecd06277a76 netfilter: ipset: Fix suspicious rcu_dereference_protected()
general protection fault in nf_tproxy_laddr4 netfilter 8 syz, C error 5 848d 857d 25/29 829d 21a673bddc8f netfilter: tproxy: bail out if IP has been disabled on the device
WARNING: suspicious RCU usage in nfqnl_reinject netfilter 4 2 839d 856d 25/29 829d dc21c6cc3d69 netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
KASAN: slab-use-after-free Read in ip_skb_dst_mtu netfilter 19 syz, C error 5 894d 925d 25/29 848d 18685451fc4e inet: inet_defrag: prevent sk release while still in use
KASAN: slab-out-of-bounds Read in update_counters netfilter bridge 17 syz, C 3 895d 895d 25/29 848d 0c83842df40f netfilter: validate user input for expected length
KASAN: slab-out-of-bounds Read in do_ipt_set_ctl netfilter 17 syz, C 111 885d 896d 25/29 848d 0c83842df40f netfilter: validate user input for expected length
KMSAN: uninit-value in xt_check_entry_offsets netfilter 7 1 892d 892d 25/29 848d 65acf6e0501a netfilter: complete validation of user input
KMSAN: uninit-value in nf_flow_offload_ip_hook netfilter 7 syz, C 5 896d 896d 25/29 848d 87b3593bed18 netfilter: flowtable: validate pppoe header
WARNING: ODEBUG bug in ip_set_free netfilter -1 syz, C 42 944d 947d 25/29 904d 27c5a095e251 netfilter: ipset: Missing gc cancellations fixed
WARNING: ODEBUG bug in hash_netiface4_destroy netfilter -1 syz, C done 80 944d 958d 25/29 904d 27c5a095e251 netfilter: ipset: Missing gc cancellations fixed
KMSAN: uninit-value in __nla_validate_parse (3) netfilter 17 24 919d 940d 25/29 905d 9a0d18853c28 netlink: add nla be16/32 types to minlen array
WARNING in __nf_unregister_net_hook (6) netfilter -1 syz, C error 2 949d 1066d 25/29 905d bccebf647017 netfilter: nf_tables: set dormant flag on hook register failure
inconsistent lock state in nf_connlabels_put netfilter 4 syz, C done 4 1057d 1058d 25/29 988d 643d12603664 netfilter: conntrack: switch connlabels to atomic_t
WARNING: proc registration bug in clusterip_tg_check (3) netfilter -1 syz, C done inconclusive 9 1336d 1870d 22/29 1197d 9db5d918e2c0 netfilter: ip_tables: remove clusterip target
KASAN: vmalloc-out-of-bounds Read in __ebt_unregister_table bridge netfilter 17 syz, C error 4 1308d 1308d 22/29 1197d e58a171d35e3 netfilter: ebtables: fix table blob use-after-free
INFO: task hung in nfnetlink_rcv_msg (3) netfilter 1 syz, C done 5 1378d 1389d 22/29 1197d 5e29dc36bd5e netfilter: ipset: Rework long task execution when adding/deleting entries
KASAN: slab-out-of-bounds Read in cttimeout_net_exit netfilter 17 syz, C 1444 1546d 1584d 22/29 1301d aeed55a08d0b netfilter: cttimeout: fix slab-out-of-bounds read in cttimeout_net_exit 394e771684f7 netfilter: cttimeout: fix slab-out-of-bounds read typo in cttimeout_net_exit
kernel panic: corrupted stack end in inet6_sendmsg netfilter 2 1 1449d 1449d 22/29 1301d b81d591386c3 riscv: Increase stack size under KASAN
KASAN: use-after-free Read in nf_hook_entries_grow netfilter 19 syz, C done done 5 1692d 1732d 22/29 1301d 6069da443bf6 netfilter: nf_tables: unregister flowtable hooks on netns exit
UBSAN: array-index-out-of-bounds in nfnetlink_unbind netfilter 17 syz, C done 6621 1567d 1584d 22/29 1301d ffd219efd9ee netfilter: nfnetlink: fix warn in nfnetlink_unbind
kernel panic: corrupted stack end in tcp_setsockopt netfilter 2 3 1406d 1555d 22/29 1301d b81d591386c3 riscv: Increase stack size under KASAN
KASAN: use-after-free Read in nf_confirm netfilter 19 syz, C done 605 1568d 1584d 22/29 1301d 56b14ecec97f netfilter: conntrack: re-fetch conntrack after insertion
KASAN: use-after-free Read in nf_tables_trans_destroy_work netfilter 19 syz, C done 6 1431d 1438d 22/29 1301d d4bc8271db21 netfilter: nf_tables: netlink notifier might race to release objects 26b5934ff419 netfilter: nf_tables: release flow rule object from commit path
WARNING in nf_tables_exit_net netfilter -1 syz, C error 3 1420d 1419d 22/29 1301d 03c1f1ef1584 netfilter: Cleanup nft_net->module_list from nf_tables_exit_net()
memory leak in nft_chain_parse_hook netfilter 3 syz, C 1 1483d 1480d 22/29 1301d 77972a36ecc4 netfilter: nf_tables: clean up hook list when offload flags check fails
KASAN: use-after-free Read in __nf_register_net_hook netfilter 19 syz, C error 5 1663d 1663d 22/29 1301d 56763f12b0f0 netfilter: fix use-after-free in __nf_register_net_hook()
memory leak in do_replace bridge netfilter 3 syz, C 1 1463d 1459d 22/29 1301d 62ce44c4fff9 netfilter: ebtables: fix memory leak when blob is malformed
WARNING in nfnetlink_unbind netfilter -1 syz, C done 235 1568d 1584d 22/29 1301d ffd219efd9ee netfilter: nfnetlink: fix warn in nfnetlink_unbind
WARNING: suspicious RCU usage in nft_do_chain netfilter 4 1 1663d 1663d 22/29 1301d 17a8f31bba7b netfilter: egress: silence egress hook lockdep splats
WARNING: kmalloc bug in hash_ip_create netfilter -1 syz, C done 641 1813d 1840d 20/29 1654d 7bbc3d385bd8 netfilter: ipset: Fix oversized kvmalloc() calls
KASAN: use-after-free Read in nft_table_lookup (2) netfilter 19 syz done 1 1834d 1830d 20/29 1654d a499b03bf36b netfilter: nf_tables: unlink table before deleting it
KCSAN: data-race in __nf_conntrack_alloc / __nf_conntrack_find_get (3) netfilter 6 2 1746d 1745d 20/29 1654d 802a7dc5cf1b netfilter: conntrack: annotate data-races around ct->timeout
WARNING: kmalloc bug in hash_net_create netfilter -1 syz, C done 283 1813d 1840d 20/29 1654d 7bbc3d385bd8 netfilter: ipset: Fix oversized kvmalloc() calls
WARNING: kmalloc bug in nf_tables_newset netfilter -1 syz, C done 95 1812d 1840d 20/29 1654d 45928afe94a0 netfilter: nf_tables: Fix oversized kvmalloc() calls
WARNING: kmalloc bug in hash_mac_create netfilter -1 syz, C done 11 1833d 1838d 20/29 1654d 7bbc3d385bd8 netfilter: ipset: Fix oversized kvmalloc() calls
KASAN: use-after-free Read in nft_set_destroy netfilter 19 1 1739d 1739d 20/29 1654d 0f7d9b31ce7a netfilter: nf_tables: fix use-after-free in nft_set_catchall_destroy()
INFO: task can't die in nf_ct_iterate_cleanup (2) netfilter 1 1 1827d 1827d 20/29 1654d e9edc188fc76 netfilter: conntrack: serialize hash resizes and cleanups
KASAN: use-after-free Read in nf_tables_dump_sets netfilter 19 syz done done 1 1836d 1865d 20/29 1654d a499b03bf36b netfilter: nf_tables: unlink table before deleting it
WARNING in __nf_unregister_net_hook (4) netfilter -1 syz, C error 66 1656d 1986d 20/29 1654d 68a3765c659f netfilter: nf_tables: skip netdev events generated on netns removal
general protection fault in nf_tables_dump_tables netfilter 2 syz done done 4 1819d 1819d 20/29 1654d a499b03bf36b netfilter: nf_tables: unlink table before deleting it
WARNING in destroy_conntrack netfilter -1 syz, C done 1 1867d 1865d 20/29 1773d e3245a7b7b34 netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with mutex
WARNING: suspicious RCU usage in get_counters (2) netfilter 4 1 1908d 1908d 20/29 1773d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
WARNING: suspicious RCU usage in gc_worker netfilter 4 3 1927d 1954d 20/29 1773d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
divide error in nft_limit_init netfilter 2 syz, C done 4 1986d 1987d 20/29 1773d b895bdf5d643 netfilter: nft_limit: avoid possible divide error in nft_limit_init
KASAN: slab-out-of-bounds Write in xt_compat_target_from_user netfilter 21 syz, C error error 1 2223d 2222d 20/29 1773d b29c457a6511 netfilter: x_tables: fix compat match/target pad out-of-bound write
WARNING: suspicious RCU usage in vfree netfilter 4 1 1948d 1948d 20/29 1773d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
BUG: sleeping function called from invalid context in __alloc_skb netfilter 5 syz, C done 33 1820d 1962d 20/29 1773d 7072a355ba19 netfilter: nfnetlink: add a missing rcu_read_unlock()
net-next test error: WARNING in __nf_unregister_net_hook netfilter -1 42 1959d 1970d 20/29 1773d 43016d02cf6e netfilter: arptables: use pernet ops struct during unregister
upstream test error: WARNING in corrupted netfilter -1 1 1959d 1959d 20/29 1773d 43016d02cf6e netfilter: arptables: use pernet ops struct during unregister
UBSAN: shift-out-of-bounds in nft_hash_estimate netfilter -1 syz, C done 3 1961d 1961d 20/29 1773d a54754ec9891 netfilter: nftables: avoid overflows in nft_hash_buckets()
linux-next test error: WARNING in __nf_unregister_net_hook netfilter -1 21 1963d 1965d 20/29 1773d 43016d02cf6e netfilter: arptables: use pernet ops struct during unregister
KASAN: use-after-free Write in nft_ct_tmpl_put_pcpu netfilter 22 syz, C done 3 1867d 1867d 20/29 1773d e3245a7b7b34 netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with mutex
general protection fault in nft_set_elem_expr_alloc netfilter 2 syz, C done 3 1936d 1933d 20/29 1773d ad9f151e560b netfilter: nf_tables: initialize set before expression setup
WARNING: suspicious RCU usage in __clear_user netfilter 4 1 1941d 1941d 20/29 1773d 3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
kernel BUG at lib/string.c:LINE! (6) netfilter -1 syz, C done 2 2099d 2095d 19/29 2018d 6cb56218ad9e netfilter: xt_RATEEST: reject non-null terminated string from userspace
UBSAN: shift-out-of-bounds in hash_mac_create netfilter -1 syz, C unreliable 29 2084d 2104d 19/29 2018d 5c8193f568ae netfilter: ipset: fix shift-out-of-bounds in htable_bits()
memory leak in nf_tables_addchain netfilter 3 syz, C 1 2231d 2228d 15/29 2192d 59136aa3b264 netfilter: nf_tables: free chain context when BINDING flag is missing
WARNING in compat_do_ebt_get_ctl bridge netfilter -1 syz, C done 15 2222d 2233d 15/29 2192d 5c04da55c754 netfilter: ebtables: reject bogus getopt len value
WARNING in __nf_unregister_net_hook (2) netfilter -1 syz, C done 9 2258d 2257d 15/29 2192d 1e9451cbda45 netfilter: nf_tables: fix nat hook table deletion
invalid opcode in __phys_addr (2) netfilter 2 1 2272d 2272d 15/29 2235d c4e8fa9074ad netfilter: ipset: call ip_set_free() instead of kfree()
memory leak in ctnetlink_del_conntrack netfilter 3 syz, C 1 2293d 2291d 15/29 2253d 6c2d2176a85e netfilter: ctnetlink: memleak in filter initialization error path
memory leak in nf_tables_parse_netdev_hooks (3) netfilter 3 syz, C 1 2293d 2291d 15/29 2253d 3003055f5066 netfilter: nf_tables: hook list memleak in flowtable deletion
BUG: unable to handle kernel NULL pointer dereference in local_bh_disable netfilter 10 1 2283d 2283d 15/29 2253d 3021e69219e2 kcov: check kcov_softirq in kcov_remote_stop()
KASAN: invalid-free in nf_tables_newset netfilter 24 syz, C done 21 2345d 2360d 15/29 2282d 7fb6f78df700 netfilter: nf_tables: do not leave dangling pointer in nf_tables_set_alloc_name
WARNING in nf_nat_unregister_fn netfilter -1 1 2345d 2345d 15/29 2282d b4faef1739dd netfilter: nat: fix error handling upon registering inet hook
INFO: task hung in hashlimit_net_exit netfilter 1 syz done 53 2400d 2408d 15/29 2346d 8d0015a7ab76 netfilter: xt_hashlimit: limit the max size of hashtable
WARNING: proc registration bug in hashlimit_mt_check_common netfilter -1 syz, C done 320 2386d 2411d 15/29 2346d 99b79c3900d4 netfilter: xt_hashlimit: unregister proc file before releasing mutex
INFO: rcu detected stall in ip_set_uadd netfilter 1 syz, C done 11 2391d 2428d 15/29 2346d f66ee0410b1c netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports
memory leak in nf_tables_parse_netdev_hooks (2) netfilter 3 syz, C 2 2386d 2390d 15/29 2346d 2d285f26ecd0 netfilter: nf_tables: free flowtable hooks on hook register error
INFO: rcu detected stall in ip_set_udel netfilter 1 syz, C done 12 2405d 2428d 15/29 2346d f66ee0410b1c netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports
general protection fault in ip_set_comment_free netfilter 2 syz, C done 19 2389d 2426d 15/29 2346d 8af1c6fbd923 netfilter: ipset: Fix forceadd evaluation path
KASAN: slab-out-of-bounds Read in bitmap_ip_add netfilter 17 syz done done 7 2422d 2434d 15/29 2367d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
general protection fault in __nf_tables_chain_type_lookup netfilter 2 1 2432d 2431d 15/29 2373d 826035498ec1 netfilter: nf_tables: add __nft_chain_type_get()
KASAN: slab-out-of-bounds Read in bitmap_ip_ext_cleanup netfilter 17 syz, C done done 8 2417d 2433d 15/29 2375d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: slab-out-of-bounds Read in bitmap_port_ext_cleanup netfilter 17 syz, C done done 10 2425d 2433d 15/29 2375d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: slab-out-of-bounds Read in bitmap_ipmac_destroy netfilter 17 syz, C done done 2 2428d 2428d 15/29 2375d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: slab-out-of-bounds Read in bitmap_ipmac_ext_cleanup netfilter 17 syz, C unreliable done 15 2417d 2432d 15/29 2375d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: slab-out-of-bounds Read in bitmap_port_destroy netfilter 17 syz, C done done 2 2429d 2429d 15/29 2375d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: use-after-free Read in bitmap_ip_ext_cleanup netfilter 19 syz, C done done 2 2433d 2433d 15/29 2399d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: use-after-free Read in bitmap_ipmac_ext_cleanup netfilter 19 syz, C done done 2 2433d 2433d 15/29 2399d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: slab-out-of-bounds Write in bitmap_ip_del netfilter 21 syz, C done done 7 2431d 2432d 15/29 2399d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: use-after-free Read in bitmap_ip_destroy netfilter 19 syz, C done done 1 2433d 2433d 15/29 2402d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
WARNING in nft_request_module netfilter -1 syz, C done 7 2437d 2437d 15/29 2403d 9332d27d7918 netfilter: nf_tables: remove WARN and add NLA_STRING upper limits
KASAN: slab-out-of-bounds Read in bitmap_ip_list netfilter 17 syz, C 85 2418d 2434d 15/29 2403d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: use-after-free Read in bitmap_port_ext_cleanup netfilter 19 syz, C done 11 2433d 2442d 15/29 2403d c120959387ef netfilter: fix a use-after-free in mtype_destroy()
KASAN: use-after-free Read in __nf_tables_abort netfilter 19 syz, C done 3 2430d 2432d 15/29 2403d eb014de4fd41 netfilter: nf_tables: autoload modules from the abort path
WARNING: suspicious RCU usage in find_set_and_id netfilter 4 syz done 6 2428d 2431d 15/29 2403d 5038517119d5 netfilter: ipset: fix suspicious RCU usage in find_set_and_id
BUG: corrupted list in nft_obj_del netfilter 8 syz, C done 7 2435d 2437d 15/29 2403d 335178d5429c netfilter: nf_tables: fix flowtable list del corruption
BUG: corrupted list in nf_tables_commit netfilter 8 syz, C done 8 2437d 2437d 15/29 2403d 335178d5429c netfilter: nf_tables: fix flowtable list del corruption
general protection fault in dccp_timeout_nlattr_to_obj netfilter 2 syz, C done 7 2443d 2446d 15/29 2403d 1d9a7acd3d1e netfilter: conntrack: dccp, sctp: handle null timeout argument
general protection fault in nft_parse_register netfilter 2 1 2435d 2434d 15/29 2403d 7eaecf7963c1 netfilter: nft_osf: add missing check for DREG attribute
general protection fault in xt_rateest_tg_checkentry netfilter 2 syz, C done 12 2446d 2457d 15/29 2403d 1b789577f655 netfilter: arp_tables: init netns pointer in xt_tgchk_param struct
general protection fault in hash_netiface6_uadt netfilter 2 1 2443d 2443d 15/29 2403d 22dad713b8a5 netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present
general protection fault in xt_rateest_put netfilter 2 syz, C done 97 2434d 2441d 15/29 2403d 212e7f56605e netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct
general protection fault in hash_netnet6_uadt netfilter 2 1 2443d 2443d 15/29 2403d 22dad713b8a5 netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present
memory leak in nf_tables_parse_netdev_hooks netfilter 3 syz, C 6 2407d 2437d 15/29 2403d cd77e75b5e46 netfilter: nf_tables: fix memory leak in nf_tables_parse_netdev_hooks()
general protection fault in hash_ipmark6_uadt netfilter 2 2 2443d 2443d 15/29 2403d 22dad713b8a5 netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present
general protection fault in nft_chain_parse_hook netfilter 2 syz, C done 48 2422d 2437d 15/29 2403d 826035498ec1 netfilter: nf_tables: add __nft_chain_type_get()
WARNING in nf_tables_table_destroy netfilter -1 syz, C done done 1 2435d 2434d 15/29 2403d eb014de4fd41 netfilter: nf_tables: autoload modules from the abort path
KASAN: slab-out-of-bounds Read in bitmap_ip_gc netfilter 17 syz, C done 15 2416d 2434d 15/29 2403d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
general protection fault in nft_tunnel_get_init netfilter 2 syz, C done 7 2437d 2437d 15/29 2403d 1c702bf902bd netfilter: nft_tunnel: fix null-attribute check
KASAN: slab-out-of-bounds Read in bitmap_port_add netfilter 17 syz done 9 2428d 2434d 15/29 2403d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: slab-out-of-bounds Read in bitmap_ip_test netfilter 17 syz 10 2423d 2434d 15/29 2403d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
general protection fault in hash_ipportnet4_uadt netfilter 2 syz, C done 13 2443d 2445d 15/29 2403d 22dad713b8a5 netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present
KASAN: slab-out-of-bounds Read in bitmap_port_list netfilter 17 syz, C 152 2426d 2434d 15/29 2403d 32c72165dbd0 netfilter: ipset: use bitmap infrastructure completely
KASAN: use-after-free Read in bitmap_port_destroy netfilter 19 syz, C 1 2434d 2434d 15/29 2403d c120959387ef netfilter: fix a use-after-free in mtype_destroy()
KMSAN: uninit-value in br_nf_forward_arp (3) bridge netfilter 7 2 2484d 2476d 15/29 2408d 5604285839aa net-backports: netfilter: bridge: make sure to pull arp header in br_nf_forward_arp()
KASAN: vmalloc-out-of-bounds Read in compat_copy_entries netfilter bridge 17 syz, C done 3 2469d 2469d 15/29 2408d e608f631f0ba netfilter: ebtables: compat: reject all padding in matches/watchers
KMSAN: uninit-value in nf_conntrack_tcp_packet netfilter 7 syz 3 2479d 2481d 15/29 2445d 9424e2e7ad93 net-backports: tcp: md5: fix potential overestimation of TCP option space
KCSAN: data-race in ip_finish_output2 / ip_finish_output2 netfilter 6 26 2475d 2520d 15/29 2471d 25c7a6d1f90e net: avoid potential false sharing in neighbor related code
KASAN: use-after-free Read in nf_ct_deliver_cached_events netfilter 19 syz, C done 169 2516d 2522d 15/29 2471d ad88b7a6aa3e netfilter: ecache: don't look for ecache extension on dying/unconfirmed conntracks
KCSAN: data-race in __nf_ct_refresh_acct / __nf_ct_refresh_acct netfilter 6 2460 2509d 2540d 13/29 2509d e37542ba111f net-backports: netfilter: conntrack: avoid possible false sharing
WARNING in xt_compat_add_offset netfilter -1 syz, C done 18 2600d 2764d 12/29 2578d 3b48300d5cc7 netfilter: ebtables: also count base chain policies
net-next build error (2) netfilter -1 2 2666d 2666d 12/29 2600d c9bb6165a16e netfilter: nf_conntrack_bridge: fix CONFIG_IPV6=y
KASAN: use-after-free Read in brnf_exit_net bridge netfilter 19 syz done 3 2644d 2647d 12/29 2600d 7e6daf50e1f4 netfilter: bridge: prevent UAF in brnf_exit_net()
general protection fault in nf_ct_gre_keymap_flush netfilter 2 syz, C 22 2789d 2795d 11/29 2730d ac088a88b5d5 netfilter: conntrack: fix error path in nf_conntrack_pernet_init()
INFO: rcu detected stall in netlink_sendmsg netfilter 1 syz 83 2769d 2825d 11/29 2752d 12750abad517 xfrm: policy: fix infinite loop when merging src-nodes
WARNING in cttimeout_default_get netfilter -1 syz, C 44 2842d 2862d 11/29 2841d 89259088c1b7 netfilter: nfnetlink_cttimeout: fetch timeouts for udplite and gre, too
general protection fault in icmp_timeout_obj_to_nlattr netfilter 2 syz, C 13 2874d 2878d 11/29 2866d 8866df9264a3 netfilter: nfnetlink_cttimeout: pass default timeout policy to obj_to_nlattr
general protection fault in ctnetlink_alloc_filter netfilter 2 syz, C 80 2916d 2919d 11/29 2866d 9306425b70bf netfilter: ctnetlink: must check mark attributes vs NULL
KMSAN: uninit-value in __nf_conntrack_find_get netfilter 7 syz, C 67 2978d 2984d 8/29 2962d 6613b6173dee netfilter: conntrack: dccp: treat SYNC/SYNCACK as invalid if no prior state
KMSAN: uninit-value in gc_worker netfilter 7 10 2978d 2990d 8/29 2962d 6613b6173dee netfilter: conntrack: dccp: treat SYNC/SYNCACK as invalid if no prior state
KMSAN: uninit-value in br_nf_forward_arp netfilter bridge 7 1 3030d 3027d 8/29 2984d b84bbaf7a6c8 packet: in packet_snd start writing at link layer allocation
KMSAN: uninit-value in nfqnl_recv_config (2) netfilter 7 syz, C 10 3005d 3021d 8/29 2992d ba062ebb2cd5 netfilter: nf_queue: augment nfqa_cfg_policy
KMSAN: uninit-value in ebt_stp_mt_check (2) bridge netfilter 7 syz, C 222 2992d 3024d 8/29 2992d c568503ef020 netfilter: x_tables: initialise match/target check parameter struct
WARNING in ebt_do_table bridge netfilter -1 syz, C 13 3001d 3026d 8/29 2992d 11ff7288beb2 netfilter: ebtables: reject non-bridge targets
KASAN: stack-out-of-bounds Write in compat_copy_entries netfilter bridge 21 syz 10 3029d 3068d 5/29 3024d 94c752f99954 netfilter: ebtables: handle string from userspace with care
KASAN: use-after-free Read in nla_strlcpy netfilter 19 syz, C 59 3028d 3041d 5/29 3024d 4b83a9049a98 netfilter: provide correct argument to nla_strlcpy()
KASAN: slab-out-of-bounds Read in nla_strlcpy netfilter 17 syz, C 34 3028d 3041d 5/29 3024d 4b83a9049a98 netfilter: provide correct argument to nla_strlcpy()
KMSAN: uninit-value in ebt_stp_mt_check netfilter bridge 7 syz, C 211 3025d 3069d 5/29 3024d a4995684a949 netfilter: bridge: stp fix reference to uninitialized data
BUG: unable to handle kernel paging request in nla_strlcpy netfilter 8 1 3033d 3033d 5/29 3024d 4b83a9049a98 netfilter: provide correct argument to nla_strlcpy()
KASAN: slab-out-of-bounds Read in clusterip_tg_check netfilter 17 syz, C 22 3148d 3154d 5/29 3048d 1a38956cce5e netfilter: ipt_CLUSTERIP: fix out-of-bounds accesses in clusterip_tg_check()
INFO: trying to register non-static key in del_timer_sync netfilter -1 syz, C 89 3128d 3154d 5/29 3049d 10414014bc08 netfilter: x_tables: fix missing timer initialization in xt_LED
BUG: unable to handle kernel paging request in cgroup_mt_destroy_v1 netfilter 8 syz, C 3 3151d 3151d 5/29 3049d ba7cd5d95f25 netfilter: xt_cgroup: initialize info->priv in cgroup_mt_check_v1()
KASAN: use-after-free Write in xt_rateest_put netfilter 22 syz, C 7 3152d 3153d 5/29 3049d 7dc68e98757a netfilter: xt_RATEEST: acquire xt_rateest_mutex for hash insert
KMSAN: uninit-value in iptable_mangle_hook netfilter 7 syz, C 1134 3054d 3085d 5/29 3054d b855ff827476 dccp: initialize ireq->ir_mark
KMSAN: uninit-value in ip6table_mangle_hook netfilter 7 syz, C 601 3054d 3085d 5/29 3054d b855ff827476 dccp: initialize ireq->ir_mark
BUG: unable to handle kernel paging request in compat_copy_entries netfilter bridge 8 syz 5 3120d 3118d 5/29 3068d b71812168571 netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets
WARNING in xt_cluster_mt netfilter -1 syz, C 4 3124d 3124d 5/29 3086d aebfa52a925d netfilter: drop template ct when conntrack is skipped.
WARNING in __proc_create netfilter -1 syz, C 12 3121d 3114d 4/29 3100d b1d0a5d0cba4 netfilter: x_tables: add and use xt_check_proc_name
WARNING in __xlate_proc_name netfilter -1 syz, C 11 3119d 3155d 4/29 3100d b1d0a5d0cba4 netfilter: x_tables: add and use xt_check_proc_name
BUG: unable to handle kernel paging request in ebt_among_mt_check (2) netfilter bridge 8 syz, C 946 3100d 3116d 4/29 3100d c8d70a700a5b netfilter: bridge: ebt_among: add more missing match size checks
KASAN: slab-out-of-bounds Read in ip6_route_me_harder netfilter 17 syz, C 66 3118d 3126d 4/29 3117d 7d98386d55a5 netfilter: use skb_to_full_sk in ip6_route_me_harder
WARNING in compat_copy_entries netfilter bridge -1 syz, C 434 3117d 3133d 4/29 3117d b71812168571 netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets
BUG: unable to handle kernel paging request in ebt_among_mt_check bridge netfilter 8 syz, C 823 3117d 3133d 4/29 3117d c4585a2823ed netfilter: bridge: ebt_among: add missing match size checks
KASAN: use-after-free Write in nf_nat_ipv6_manip_pkt netfilter 22 syz, C 2 3133d 3133d 4/29 3117d b078556aecd7 netfilter: ipv6: fix use-after-free Write in nf_nat_ipv6_manip_pkt
KASAN: use-after-free Read in ip6_route_me_harder netfilter 19 syz, C 44 3118d 3126d 4/29 3117d 7d98386d55a5 netfilter: use skb_to_full_sk in ip6_route_me_harder
possible deadlock in xt_find_table_lock (2) netfilter 4 4 3143d 3141d 4/29 3125d 01ea306f2ac2 netfilter: drop outermost socket lock in getsockopt()
divide error in nf_nat_l4proto_unique_tuple netfilter 2 syz, C 2 3139d 3139d 4/29 3125d db57ccf0f2f4 netfilter: nat: cope with negative port range
WARNING in __queue_work netfilter -1 syz, C 1 3135d 3135d 4/29 3125d cfc2c7405333 netfilter: IDLETIMER: be syzkaller friendly
WARNING: ODEBUG bug in led_tg_destroy netfilter -1 syz, C 4 3131d 3139d 4/29 3125d 10414014bc08 netfilter: x_tables: fix missing timer initialization in xt_LED
possible deadlock in do_ip_setsockopt (3) netfilter 4 3731 3127d 3144d 4/29 3125d 01ea306f2ac2 netfilter: drop outermost socket lock in getsockopt()
WARNING: proc registration bug in clusterip_tg_check netfilter -1 syz, C 779 3127d 3145d 4/29 3125d b3e456fce9f5 netfilter: ipt_CLUSTERIP: fix a race condition of proc file creation
general protection fault in arpt_do_table netfilter 2 syz, C 3 3130d 3130d 4/29 3125d 57ebd808a97d netfilter: add back stackpointer size checks
WARNING: ODEBUG bug in __queue_work netfilter -1 syz, C 2 3135d 3131d 4/29 3125d cfc2c7405333 netfilter: IDLETIMER: be syzkaller friendly
general protection fault in ip6t_do_table netfilter 2 syz, C 8077 3128d 3155d 4/29 3125d 57ebd808a97d netfilter: add back stackpointer size checks
WARNING: bad unlock balance in hashlimit_mt_common netfilter 4 syz, C 2059 3127d 3140d 4/29 3125d de526f401284 netfilter: xt_hashlimit: fix lock imbalance
kernel BUG at kernel/time/timer.c:LINE! netfilter -1 syz, C 18 3127d 3139d 4/29 3125d 10414014bc08 netfilter: x_tables: fix missing timer initialization in xt_LED
possible deadlock in do_ipv6_setsockopt (2) netfilter 4 3642 3127d 3142d 4/29 3125d 01ea306f2ac2 netfilter: drop outermost socket lock in getsockopt()
possible deadlock in do_ip_getsockopt (2) netfilter 4 206 3127d 3142d 4/29 3125d 01ea306f2ac2 netfilter: drop outermost socket lock in getsockopt()
KASAN: use-after-free Write in xt_rateest_tg_checkentry netfilter 22 syz, C 2 3152d 3153d 4/29 3139d 7dc68e98757a netfilter: xt_RATEEST: acquire xt_rateest_mutex for hash insert
general protection fault in cgroup_mt_destroy_v1 netfilter 2 syz, C 91 3142d 3154d 4/29 3139d ba7cd5d95f25 netfilter: xt_cgroup: initialize info->priv in cgroup_mt_check_v1()
possible deadlock in do_ip_setsockopt (2) netfilter 4 59 3144d 3147d 4/29 3144d 3f34cfae1238 netfilter: on sockopt() acquire sock lock only in the required scope
possible deadlock in xt_find_target netfilter 4 34 3148d 3155d 4/29 3147d 3f34cfae1238 netfilter: on sockopt() acquire sock lock only in the required scope
possible deadlock in do_ip_getsockopt netfilter 4 22 3149d 3154d 4/29 3147d 3f34cfae1238 netfilter: on sockopt() acquire sock lock only in the required scope
general protection fault in get_info netfilter 2 syz, C 760 3167d 3170d 4/29 3151d e3eeacbac4ad netfilter: x_tables: don't return garbage pointer on modprobe failure
suspicious RCU usage at net/netfilter/ipset/ip_set_core.c:LINE netfilter -1 syz, C 38048 3172d 3177d 4/29 3151d f998b6b10144 netfilter: ipset: Missing nfnl_lock()/nfnl_unlock() is added to ip_set_net_exit()
general protection fault in nf_tables_dump_obj_done netfilter 2 syz, C 976 3173d 3178d 3/29 3164d 8bea728dce89 netfilter: nf_tables: fix potential NULL-ptr deref in nf_tables_dump_obj_done()
kernel BUG at lib/string.c:LINE! netfilter -1 syz, C 73 3265d 3281d 3/29 3250d e466af75c074 netfilter: x_tables: avoid stack-out-of-bounds read in xt_copy_counters_from_user