Applied filters: WithRepro (drop)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
general protection fault in em_cmp_match 2 syz, C 1 1360d 1360d 0/1 never 9cd3fd2054c3 net_sched: reject TCF_EM_SIMPLE case for complex ematch module
KASAN: use-after-free Read in tc_chain_fill_node 19 syz, C 1031 1279d 2524d 0/1 never 6f99528e9797 net: core: netlink: add helper refcount dec and lock function 9d7e82cec35c net: sched: add helper function to take reference to Qdisc 3a7d0d07a386 net: sched: extend Qdisc with rcu 86bd446b5ceb net: sched: rename qdisc_destroy() to qdisc_put() e368fdb61d8e net: sched: use Qdisc rcu API instead of relying on rtnl lock
KASAN: use-after-free Read in skb_dequeue (2) 19 syz, C done 2 1815d 1845d 1/1 1785d bb2853a6a421 tty: Fix data race between tiocsti() and flush_to_ldisc()
KASAN: use-after-free Read in ext4_xattr_set_entry (2) 19 syz, C done 7 1818d 2276d 1/1 1787d a54c4613dac1 ext4: fix race writing to an inline_data file while its xattrs are changing
inconsistent lock state in sco_sock_timeout 4 syz, C done 19 1818d 2209d 1/1 1788d ba316be1b6a0 Bluetooth: schedule SCO timeouts with delayed_work
BUG: sleeping function called from invalid context in lock_sock_nested (2) 5 syz, C done 3909 1819d 1912d 1/1 1788d e04480920d1e Bluetooth: defer cleanup of resources in hci_unregister_dev()
KASAN: slab-out-of-bounds Write in ext4_write_inline_data 22 syz, C done 3 1824d 2030d 1/1 1794d a54c4613dac1 ext4: fix race writing to an inline_data file while its xattrs are changing
BUG: soft lockup in tx 1 syz, C done 1 1827d 1857d 1/1 1796d c7c5e6ff533f fq_codel: reject silly quantum parameters
BUG: corrupted list in kobject_add_internal 8 syz, C done 2 1831d 2078d 1/1 1801d 734bc5ff7831 Bluetooth: avoid circular locks in sco_sock_connect
kernel BUG in kvm_hv_set_msr_common -1 syz done 2 1832d 1862d 1/1 1801d 8750e72a79dd KVM: remember position in kvm->vcpus array
BUG: unable to handle kernel paging request in do_syscall_64 8 syz, C done 3 1837d 2355d 1/1 1804d a49145acfb97 fbmem: add margin check to fb_check_caps()
general protection fault in do_syscall_64 (2) 2 syz done 2 1836d 2169d 1/1 1804d a49145acfb97 fbmem: add margin check to fb_check_caps()
KASAN: use-after-free Read in ip_check_mc_rcu 19 syz done 7 1838d 1989d 1/1 1804d 23d2b94043ca igmp: Add ip_mc_list lock in ip_check_mc_rcu
KASAN: slab-out-of-bounds Write in decode_data 21 syz, C done 1 1839d 2385d 1/1 1808d 19d1532a1876 net: 6pack: fix slab-out-of-bounds in decode_data
INFO: task hung in do_fb_ioctl (2) 1 syz, C done 7 1839d 2254d 1/1 1809d a49145acfb97 fbmem: add margin check to fb_check_caps()
BUG: unable to handle kernel paging request in do_csum 8 syz, C done 1 1839d 2058d 1/1 1809d 1d011c4803c7 ip_gre: add validation for csum_start
BUG: unable to handle kernel NULL pointer dereference in __lookup_slow (2) 10 syz, C done 15 1849d 1973d 1/1 1817d 2acf15b94d5b reiserfs: add check for root_inode in reiserfs_fill_super
KASAN: use-after-free Read in search_by_entry_key (2) 19 syz, C done 2 1850d 2000d 1/1 1820d 2acf15b94d5b reiserfs: add check for root_inode in reiserfs_fill_super
KASAN: use-after-free Read in __queue_work 19 syz done 5 1851d 2223d 1/1 1820d e04480920d1e Bluetooth: defer cleanup of resources in hci_unregister_dev()
WARNING in close_fs_devices -1 syz, C done 105 1862d 2179d 1/1 1831d f267aeb6dea5 ocfs2: fix zero out valid data
possible deadlock in cleanup_net 4 syz, C done 5212 1862d 2124d 1/1 1831d e04480920d1e Bluetooth: defer cleanup of resources in hci_unregister_dev()
possible deadlock in __sock_release 4 syz, C done 57446 1862d 2124d 1/1 1831d 4694ae373dc2 PCI: Leave Apple Thunderbolt controllers on for s2idle or standby
KASAN: use-after-free Write in hci_sock_bind 22 syz, C done 12 1868d 2428d 1/1 1835d e04480920d1e Bluetooth: defer cleanup of resources in hci_unregister_dev()
kernel BUG at drivers/dma-buf/dma-buf.c:LINE! -1 syz done 1 1866d 2349d 1/1 1835d 3abab27c322e drm: Return -ENOTTY for non-drm ioctls
unexpected kernel reboot -1 syz, C done 684 1875d 2651d 1/1 1844d b97f07458373 KVM: x86: determine if an exception has an error code only when injecting it.
KASAN: use-after-free Read in reservation_object_test_signaled_rcu 19 syz, C done 4 1875d 2110d 1/1 1844d 3abab27c322e drm: Return -ENOTTY for non-drm ioctls
BUG: unable to handle kernel paging request in diFree 8 syz, C done 18 1875d 2166d 1/1 1845d 9d574f985fe3 jfs: fix GPF in diFree
KASAN: use-after-free Read in hci_chan_del 19 syz, C done 24 1878d 2224d 1/1 1846d e2cb6b891ad2 bluetooth: eliminate the potential race condition when removing the HCI controller
WARNING in drm_prime_destroy_file_private -1 syz done 6 1877d 2068d 1/1 1846d 3abab27c322e drm: Return -ENOTTY for non-drm ioctls
divide error in do_journal_end (2) 2 syz, C done 4 1881d 1992d 1/1 1849d a149127be52f reiserfs: add check for invalid 1st journal block
general protection fault in mount_fs 2 syz, C done 12 1880d 2111d 1/1 1849d 8f6840c4fd1e ext4: return error code when ext4_fill_flex_info() fails
WARNING: suspicious RCU usage in vxlan_xmit 4 syz, C done 1 1885d 1885d 1/1 1855d 85e8b032d6eb vxlan: add missing rcu_read_lock() in neigh_reduce()
WARNING in batadv_iv_send_outstanding_bat_ogm_packet -1 syz, C done 373 1892d 2508d 1/1 1862d 9f460ae31c44 batman-adv: Avoid WARN_ON timing related checks
general protection fault in ieee802154_llsec_parse_dev_addr 2 syz, C done 32 1896d 2014d 1/1 1865d 25bdbfbb2d83 HID: quirks: Set INCREMENT_USAGE_ON_DUPLICATE for Saitek X65
KASAN: use-after-free Read in qfq_search_class 19 syz, C done 2 1899d 2385d 1/1 1868d 0cd58e5c53ba pkt_sched: sch_qfq: fix qfq_change_class() error path
KASAN: use-after-free Read in ntfs_iget (2) 19 syz, C done 1 1900d 1900d 1/1 1870d d98e4d95411b ntfs: fix validity check for file name attribute
WARNING in sta_apply_parameters -1 syz, C done 1 1900d 2127d 1/1 1870d 0ee4d55534f8 mac80211: remove warning in ieee80211_get_sband()
WARNING in sta_info_alloc -1 syz, C done 15 1903d 2160d 1/1 1873d 0ee4d55534f8 mac80211: remove warning in ieee80211_get_sband()
KASAN: null-ptr-deref Write in vhci_shutdown_connection 12 syz done 498 1907d 2088d 1/1 1873d 8d0caedb7596 can: bcm/raw/isotp: use per module netdevice notifier
WARNING in process_one_work -1 syz, C done 9 1909d 2474d 1/1 1878d 9f460ae31c44 batman-adv: Avoid WARN_ON timing related checks
general protection fault in try_to_wake_up 2 syz done 229 1909d 1997d 1/1 1879d 8d0caedb7596 can: bcm/raw/isotp: use per module netdevice notifier
WARNING: ODEBUG bug in slave_kobj_release -1 syz, C done 28 1914d 2091d 1/1 1884d 35d96e631860 bonding: init notify_work earlier to avoid uninitialized use
KASAN: use-after-free Read in drm_getunique 19 syz done 2 1927d 2095d 1/1 1896d b436acd1cf7f drm: Fix use-after-free read in drm_getunique()
BUG: unable to handle kernel NULL pointer dereference in corrupted 10 syz, C done 6 1928d 2510d 1/1 1898d 4ac06a1e013c nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect
KASAN: global-out-of-bounds Read in soft_cursor 17 syz, C done 22 1929d 2396d 1/1 1898d 860dafa90259 vt: Fix character height handling with VT_RESIZEX
KASAN: global-out-of-bounds Read in bit_putcs 19 syz, C done 214 1929d 2466d 1/1 1898d 860dafa90259 vt: Fix character height handling with VT_RESIZEX
WARNING: ODEBUG bug in cancel_delayed_work -1 syz, C done 1226 1931d 2227d 1/1 1899d 3a9d54b1947e Bluetooth: Set CONF_NOT_COMPLETE as l2cap_chan default
KASAN: use-after-free Read in hci_send_acl 19 syz, C done 3 1932d 2224d 1/1 1899d 5c4c8c954409 Bluetooth: verify AMP hci_chan before amp_destroy
KASAN: use-after-free Read in nfc_llcp_sock_unlink 19 syz, C done 22 1932d 1969d 1/1 1899d c61760e6940d net/nfc: fix use-after-free llcp_sock_bind/connect
WARNING in hsr_addr_subst_dest -1 syz, C done 3099 1932d 2700d 1/1 1899d 4b793acdca00 hsr: use netdev_err() instead of WARN_ONCE()
KASAN: slab-out-of-bounds Read in soft_cursor (2) 17 syz, C done 8 1931d 2053d 1/1 1899d 860dafa90259 vt: Fix character height handling with VT_RESIZEX
possible deadlock in tty_port_close_start 4 syz, C done 47 1937d 2403d 1/1 1907d c0070e1e6027 ttyprintk: Add TTY hangup callback.
KASAN: null-ptr-deref Read in llcp_sock_getname 11 syz, C 37 1941d 2500d 1/1 1912d 4ac06a1e013c nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect
kernel BUG in z_erofs_map_blocks_iter -1 syz done 10 1953d 2014d 1/1 1922d 24a806d849c0 erofs: add unsupported inode i_format check
kernel BUG at fs/inode.c:LINE! (2) -1 syz, C done 5 1957d 2095d 1/1 1924d 24a806d849c0 erofs: add unsupported inode i_format check
general protection fault in __queue_work 2 syz done 1 1957d 2204d 1/1 1924d e2cb6b891ad2 bluetooth: eliminate the potential race condition when removing the HCI controller
general protection fault in nl802154_del_llsec_devkey 2 syz, C done 110 1970d 2029d 1/1 1938d 27c746869e1a net: ieee802154: fix nl802154 del llsec devkey
general protection fault in nl802154_add_llsec_key 2 syz, C done 106 1969d 2025d 1/1 1938d 20d5fe2d7103 net: ieee802154: fix nl802154 add llsec key
general protection fault in nl802154_del_llsec_key 2 syz, C done 91 1970d 2022d 1/1 1938d 37feaaf5ceb2 net: ieee802154: fix nl802154 del llsec key
general protection fault in ieee802154_llsec_parse_key_id 11 syz, C done 64 1970d 2021d 1/1 1940d 6f7f657f2440 net: ieee802154: nl-mac: fix check on panid
WARNING in cfg80211_connect -1 syz, C done 336 1970d 2164d 1/1 1940d 1b5ab825d9ac cfg80211: remove WARN_ON() in cfg80211_sme_connect
general protection fault in nl802154_del_llsec_dev 2 syz, C done 70 1971d 2027d 1/1 1941d 3d1eac2f4558 net: ieee802154: fix nl802154 del llsec dev
general protection fault in crypto_destroy_tfm 2 syz done 12 1972d 2017d 1/1 1942d a0b96b4a6274 drivers: net: fix memory leak in peak_usb_create_dev
BUG: sleeping function called from invalid context in htb_destroy 5 syz, C done 2 1991d 2513d 1/1 1961d e323d865b361 net: sched: validate stab values
possible deadlock in red_change 4 syz, C done 10 1993d 2233d 1/1 1962d e323d865b361 net: sched: validate stab values
BUG: unable to handle kernel NULL pointer dereference in __lookup_slow 10 syz, C done 23 2006d 2164d 1/1 1973d d24396c5290b reiserfs: add check for an invalid ih_entry_count
WARNING in ext4_xattr_set_entry -1 syz, C done 12 2007d 2141d 1/1 1976d 6b22489911b7 ext4: do not try to set xattr into ea_inode if value is empty
BUG: unable to handle kernel NULL pointer dereference in amp_read_loc_assoc_final_data 10 syz, C done 114 2010d 2226d 1/1 1976d e8bd76ede155 Bluetooth: Fix null pointer dereference in amp_read_loc_assoc_final_data
KASAN: use-after-free Read in skb_dequeue 19 syz done 1 2018d 2222d 1/1 1985d c17af96554a8 btrfs: raid56: simplify tracking of Q stripe presence
KASAN: use-after-free Read in ntfs_iget 19 syz, C done 1 2018d 2078d 1/1 1985d 4dfe6bd94959 ntfs: check for valid standard information attribute
KASAN: use-after-free Read in ntfs_read_locked_inode 19 syz, C done 2 2020d 2170d 1/1 1990d 4dfe6bd94959 ntfs: check for valid standard information attribute
kernel BUG in pfkey_send_acquire -1 syz, C done 56 2027d 2056d 1/1 1996d cecf5d87ff20 block: split .sysfs_lock into two locks
general protection fault in ioctl_standard_call 2 syz, C done 23 2031d 2144d 1/1 2000d 5122565188ba wext: fix NULL-ptr-dereference with cfg80211's lack of commit()
KASAN: slab-out-of-bounds Read in squashfs_export_iget 17 syz, C done 5 2042d 2142d 1/1 2012d eabac19e40c0 squashfs: add more sanity checks in inode lookup
general protection fault in ieee80211_subif_start_xmit 2 syz, C done 4 2046d 2088d 1/1 2013d 054c9939b480 mac80211: pause TX while changing interface type
UBSAN: undefined-behaviour in tcindex_set_parms -1 syz, C done 39 2058d 2173d 1/1 2020d bcd0cf19ef82 net_sched: avoid shift-out-of-bounds in tcindex_set_parms()
kernel BUG at fs/reiserfs/prints.c:LINE! -1 syz, C done 5 2069d 2160d 1/1 2021d d24396c5290b reiserfs: add check for an invalid ih_entry_count
KASAN: use-after-free Read in search_by_entry_key 19 syz, C done 1 2069d 2159d 1/1 2022d d24396c5290b reiserfs: add check for an invalid ih_entry_count
KASAN: slab-out-of-bounds Read in squashfs_get_id 17 syz, C 58 2027d 2171d 1/1 2023d f37aa4c7366e squashfs: add more sanity checks in id lookup
KASAN: use-after-free Read in squashfs_get_id 19 syz, C 3 2067d 2120d 1/1 2023d f37aa4c7366e squashfs: add more sanity checks in id lookup
KASAN: use-after-free Read in tls_write_space 19 syz, C done 25 2075d 2700d 1/1 2044d f45a4248ea4c net: usb: rtl8150: set random MAC address when set_ethernet_addr() fails
divide error in do_journal_end 2 syz, C done 2 2077d 2137d 1/1 2046d d24396c5290b reiserfs: add check for an invalid ih_entry_count
general protection fault in dqput 2 syz, C done 2 2078d 2091d 1/1 2047d 11c514a99bb9 quota: Sanity-check quota file headers on load
WARNING in md_ioctl -1 syz, C done 199 2077d 2695d 1/1 2047d c731b84b51bf md: fix a warning caused by a race between concurrent md_ioctl()s
general protection fault in hci_phy_link_complete_evt 2 syz, C done 28 2082d 2224d 1/1 2051d 6dfccd13db2f Bluetooth: Fix null pointer dereference in hci_event_packet()
KASAN: use-after-free Read in leaf_paste_entries 19 syz, C done 1 2085d 2085d 1/1 2054d d24396c5290b reiserfs: add check for an invalid ih_entry_count
general protection fault in hci_event_packet 2 syz, C done 3 2085d 2152d 1/1 2055d 6dfccd13db2f Bluetooth: Fix null pointer dereference in hci_event_packet()
KASAN: slab-out-of-bounds Read in hci_le_meta_evt 17 syz, C done 12 2085d 2226d 1/1 2055d f7e0e8b2f1b0 Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt()
KASAN: use-after-free Read in reiserfs_read_locked_inode 19 syz, C done 4 2089d 2171d 1/1 2058d d24396c5290b reiserfs: add check for an invalid ih_entry_count
INFO: task hung in rdma_destroy_id 1 syz, C done 2 2089d 2119d 1/1 2059d 96ebc9c871d8 usb: uas: Add PNY USB Portable SSD to unusual_uas
INFO: task hung in do_read_cache_page 1 syz, C done 2 2091d 2151d 1/1 2060d 8d1ddb5e7937 fcntl: Fix potential deadlock in send_sig{io, urg}()
BUG: unable to handle kernel paging request in dquot_add_space 8 syz, C done 1 2092d 2152d 1/1 2061d 11c514a99bb9 quota: Sanity-check quota file headers on load
BUG: unable to handle kernel paging request in dqput 8 syz, C done 8 2091d 2160d 1/1 2061d 11c514a99bb9 quota: Sanity-check quota file headers on load
general protection fault in gfs2_ri_update 2 syz, C done 28 2096d 2173d 1/1 2064d 778721510e84 gfs2: check for empty rgrp tree in gfs2_ri_update
KASAN: use-after-free Write in sco_chan_del 22 syz, C done 10 2100d 2224d 1/1 2069d 6dfccd13db2f Bluetooth: Fix null pointer dereference in hci_event_packet()
KASAN: use-after-free Read in btrfs_scan_one_device 19 syz, C done 43 2104d 2179d 1/1 2074d 0697d9a61099 btrfs: don't access possibly stale fs_info data for printing duplicate device
BUG: sleeping function called from invalid context in corrupted 5 syz, C done 2 2110d 2111d 1/1 2079d 7bc40aedf24d mac80211: free sta in sta_info_insert_finish() on errors
BUG: sleeping function called from invalid context in sta_info_move_state 5 syz, C done 760 2110d 2112d 1/1 2079d 7bc40aedf24d mac80211: free sta in sta_info_insert_finish() on errors
KASAN: slab-out-of-bounds Read in ntfs_attr_find 17 syz, C done 10 2112d 2169d 1/1 2081d 4f8c94022f0b ntfs: add check for mft record size in superblock
general protection fault in rose_send_frame 2 syz, C done 5 2116d 2693d 1/1 2081d 3b3fd068c56e rose: Fix Null pointer dereference in rose_send_frame()
KASAN: slab-out-of-bounds Read in soft_cursor 17 syz, C done 61 2129d 2467d 1/1 2099d 13774d81f385 ALSA: hda: fix a runtime pm issue in SOF when integrated GPU is disabled
KASAN: use-after-free Read in debugfs_remove 19 syz, C done 15 2134d 2630d 1/1 2103d bad8e64fb19d blktrace: fix debugfs use after free
UBSAN: undefined-behaviour in init_sb -1 syz, C done 2 2136d 2169d 1/1 2106d 0ddc5154b24c gfs2: add validation checks for size of superblock
WARNING in unlock_new_inode -1 syz, C done 66 2136d 2174d 1/1 2106d 8859bf2b1278 reiserfs: only call unlock_new_inode() if I_NEW
KASAN: use-after-free Read in tipc_mcast_xmit 19 syz, C done 3 2137d 2160d 1/1 2106d ed42989eab57 tipc: fix the skb_unshare() in tipc_buf_append()
KASAN: global-out-of-bounds Read in fb_pad_aligned_buffer 17 syz, C done 5 2137d 2463d 1/1 2106d 3c4e0dff2095 vt: Disable KD_FONT_OP_COPY
KASAN: use-after-free Read in ntfs_attr_find 19 syz, C done 13 2138d 2169d 1/1 2107d 4f8c94022f0b ntfs: add check for mft record size in superblock
divide error in tabledist 2 syz, C done 3 2148d 2505d 1/1 2117d eadd1befdd77 netem: fix zero division in tabledist
general protection fault in qp_release_pages 2 syz, C done 4 2149d 2151d 1/1 2117d 90ca6333fd65 VMCI: check return value of get_user_pages_fast() for errors
UBSAN: undefined-behaviour in tabledist -1 syz, C done 2 2156d 2156d 1/1 2124d eadd1befdd77 netem: fix zero division in tabledist
KASAN: global-out-of-bounds Read in fbcon_get_font 17 syz, C done 47 2156d 2467d 1/1 2124d 5af08640795b fbcon: Fix global-out-of-bounds read in fbcon_get_font()
KASAN: slab-out-of-bounds Read in fbcon_get_font 17 syz, C done 97 2160d 2468d 1/1 2129d bc5269ca7650 vt_ioctl: change VT_RESIZEX ioctl to check for error return from vc_resize()
general protection fault in get_unique_tuple 2 syz, C done 33 2160d 2422d 1/1 2129d 1cc5ef91d2ff netfilter: ctnetlink: add a range check for l3/l4 protonum
general protection fault in nf_nat_setup_info 2 syz, C done 22 2165d 2256d 1/1 2134d 1cc5ef91d2ff netfilter: ctnetlink: add a range check for l3/l4 protonum
KASAN: use-after-free Read in soft_cursor 19 syz, C done 16 2169d 2466d 1/1 2139d ec0972adecb3 fbcon: Fix user font detection test at fbcon_resize().
KASAN: global-out-of-bounds Read in get_unique_tuple 17 syz, C done 1 2170d 2410d 1/1 2139d 1cc5ef91d2ff netfilter: ctnetlink: add a range check for l3/l4 protonum
KASAN: global-out-of-bounds Read in fbcon_resize 17 syz, C done 286 2172d 2192d 1/1 2142d ec0972adecb3 fbcon: Fix user font detection test at fbcon_resize().
general protection fault in __sock_release 2 syz done 8 2187d 2199d 1/1 2156d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
WARNING in snd_pcm_plugin_build_mulaw -1 syz, C done 2 2188d 2198d 1/1 2157d 949a1ebe8cea ALSA: pcm: oss: Remove superfluous WARN_ON() for mulaw sanity check
KASAN: use-after-free Read in seq_release_private 19 syz done 1 2188d 2188d 1/1 2157d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
WARNING: ODEBUG bug in get_signal -1 syz done 3 2190d 2199d 1/1 2158d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
WARNING in snd_pcm_drop -1 syz done 1 2190d 2190d 1/1 2158d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
WARNING: ODEBUG bug in exit_to_usermode_loop -1 syz done 2 2189d 2191d 1/1 2158d 70e37988db94 nvmet-fc: Fix a missed _irqsave version of spin_lock in 'nvmet_fc_fod_op_done()'
general protection fault in tty_release 2 syz, C done 9 2191d 2197d 1/1 2160d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: use-after-free Write in __sock_release 22 syz done 1 2192d 2192d 1/1 2161d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: use-after-free Read in locks_remove_file 19 syz done 4 2191d 2200d 1/1 2161d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: use-after-free Read in cuse_channel_release 19 syz done 1 2193d 2193d 1/1 2162d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: use-after-free Read in __fput 19 syz done 1 2193d 2193d 1/1 2162d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: use-after-free Write in ex_handler_refcount 22 syz, C done 11 2193d 2402d 1/1 2163d f9c70bdc279b Bluetooth: add a mutex lock to avoid UAF in do_enale_set
kernel BUG at include/linux/fs.h:LINE! -1 syz done 1 2194d 2194d 1/1 2163d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: use-after-free Read in snd_pcm_oss_release 19 syz done 1 2193d 2193d 1/1 2163d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
kernel BUG at fs/inode.c:LINE! -1 syz done 2 2194d 2223d 1/1 2164d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: invalid-free in vcs_release 24 syz done 1 2194d 2194d 1/1 2164d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: use-after-free Read in fbcon_cursor 19 syz done 4 2196d 2455d 1/1 2165d 50145474f6ef fbcon: remove soft scrollback code
BUG: corrupted list in mousedev_release 8 syz done 1 2196d 2196d 1/1 2165d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: use-after-free Read in eventfd_release 19 syz done 1 2197d 2197d 1/1 2167d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
INFO: trying to register non-static key in uhid_char_release -1 syz, C done 3 2197d 2219d 1/1 2167d bce1305c0ece HID: core: Correctly handle ReportSize being zero
WARNING in corrupted (2) -1 syz, C done 1 2198d 2198d 1/1 2167d 949a1ebe8cea ALSA: pcm: oss: Remove superfluous WARN_ON() for mulaw sanity check
INFO: trying to register non-static key in uhid_dev_destroy -1 syz, C done 14 2206d 2373d 1/1 2175d bce1305c0ece HID: core: Correctly handle ReportSize being zero
KASAN: slab-out-of-bounds Read in vcs_scr_readw 17 syz, C inconclusive 80 2458d 2467d 1/1 2177d 0c9acb1af77a vcs: prevent write access to vcsu devices
WARNING in inc_nlink -1 syz, C done 8 2207d 2356d 1/1 2177d facb03dddec0 fs/minix: don't allow getting deleted inodes
BUG: unable to handle kernel NULL pointer dereference in get_block 10 syz, C done 60 2212d 2362d 1/1 2180d 270ef41094e9 fs/minix: reject too-large maximum file size
KASAN: slab-out-of-bounds Read in get_block 17 syz, C done 3 2215d 2330d 1/1 2184d 270ef41094e9 fs/minix: reject too-large maximum file size
KASAN: use-after-free Read in get_block 19 syz, C done 6 2215d 2347d 1/1 2184d 270ef41094e9 fs/minix: reject too-large maximum file size
KASAN: slab-out-of-bounds Read in hci_event_packet 17 syz, C done 15 2215d 2425d 1/1 2184d 51c19bf3d5cf Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt()
KASAN: slab-out-of-bounds Read in bacpy 17 syz, C done 3 2221d 2682d 1/1 2186d 51c19bf3d5cf Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt()
KASAN: slab-out-of-bounds Read in hci_extended_inquiry_result_evt 17 syz, C done 6 2219d 2253d 1/1 2186d 51c19bf3d5cf Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt()
KASAN: null-ptr-deref Read in drm_dp_aux_dev_get_by_minor 11 syz, C done 1 2219d 2279d 1/1 2186d 270ef41094e9 fs/minix: reject too-large maximum file size
KASAN: slab-out-of-bounds Read in hci_inquiry_result_with_rssi_evt 17 syz, C done 4 2219d 2248d 1/1 2186d 629b49c848ee Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_with_rssi_evt()
KASAN: use-after-free Read in l2cap_chan_close 19 syz, C done 8 2219d 2402d 1/1 2186d f9c70bdc279b Bluetooth: add a mutex lock to avoid UAF in do_enale_set
BUG: unable to handle kernel NULL pointer dereference in do_syscall_64 (2) 10 syz, C done 4 2223d 2236d 1/1 2192d 033724d68642 fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins.
divide error in fbcon_switch 2 syz, C done 259 2228d 2468d 1/1 2194d ce684552a266 vt: Reject zero-sized screen buffer size.
general protection fault in do_con_write 2 syz, C done 3008 2228d 2467d 1/1 2194d ce684552a266 vt: Reject zero-sized screen buffer size.
kernel BUG at fs/buffer.c:LINE! -1 syz done 23 2225d 2678d 1/1 2194d 270ef41094e9 fs/minix: reject too-large maximum file size
general protection fault in free_netdev 2 syz, C done 99 2226d 2256d 1/1 2194d 46ef5b89ec0e ip6_gre: fix null-ptr-deref in ip6gre_init_net()
BUG: unable to handle kernel paging request in do_con_trol 8 syz, C done 36 2229d 2461d 1/1 2198d ce684552a266 vt: Reject zero-sized screen buffer size.
WARNING in snd_info_get_line -1 syz, C done 23 2228d 2241d 1/1 2198d 60379ba08532 ALSA: info: Drop WARN_ON() from buffer NULL sanity check
BUG: unable to handle kernel paging request in insert_char 8 syz, C done 46 2242d 2463d 1/1 2212d ce684552a266 vt: Reject zero-sized screen buffer size.
INFO: task hung in __flush_work 1 syz done 6 2244d 2693d 1/1 2214d a39c46067c84 net/9p: validate fds in p9_fd_open
KASAN: null-ptr-deref Read in do_con_trol 11 syz, C done 1 2244d 2394d 1/1 2214d ce684552a266 vt: Reject zero-sized screen buffer size.
KASAN: null-ptr-deref Read in insert_char 11 syz, C done 3 2245d 2440d 1/1 2215d ce684552a266 vt: Reject zero-sized screen buffer size.
KASAN: user-memory-access Read in insert_char 17 syz, C done 2 2247d 2460d 1/1 2216d ce684552a266 vt: Reject zero-sized screen buffer size.
BUG: unable to handle kernel paging request in csi_J 8 syz, C done 3 2255d 2424d 1/1 2224d ce684552a266 vt: Reject zero-sized screen buffer size.
BUG: unable to handle kernel NULL pointer dereference in generic_perform_write (2) 10 syz, C done 1 2267d 2357d 1/1 2237d 829b37b8cddb ext4: avoid race conditions when remounting with options that change dax
WARNING in enqueue_task_dl -1 syz done 1 2274d 2603d 1/1 2244d ce9bc3b27f2a sched/deadline: Initialize ->dl_boosted
general protection fault in fq_codel_enqueue 2 syz, C done 5 2296d 2324d 1/1 2266d 6dd912f82680 net: check untrusted gso_size at kernel entry
kernel BUG at arch/x86/mm/physaddr.c:LINE! (2) -1 syz, C done 82 2297d 2437d 1/1 2267d 57d38f26d81e vt: fix unicode console freeing with a common interface
INFO: trying to register non-static key in hci_uart_flush -1 syz done 4 2302d 2546d 1/1 2271d 4946ea5c1237 netfilter: nf_conntrack_pptp: fix compilation warning with W=1 build
KASAN: use-after-free Write in snd_rawmidi_kernel_write1 22 syz, C done 1 2303d 2333d 1/1 2272d c1f6e3c818dd ALSA: rawmidi: Fix racy buffer resize under concurrent accesses
KASAN: null-ptr-deref Write in choke_reset 12 syz, C done 236 2304d 2329d 1/1 2274d e9b3c610a05c USB: serial: garmin_gps: add sanity checking for data length
KASAN: use-after-free Read in rdma_listen 19 syz done 143 2336d 2648d 1/1 2305d 7c11910783a1 RDMA/ucma: Put a lock around every call to the rdma_cm layer
KASAN: use-after-free Read in cma_cancel_operation 19 syz, C done 6 2347d 2498d 1/1 2317d 7c11910783a1 RDMA/ucma: Put a lock around every call to the rdma_cm layer
WARNING in geneve_exit_batch_net -1 syz, C done 2 2350d 2394d 1/1 2319d 0fda7600c2e1 geneve: move debug check after netdev unregister
WARNING: ODEBUG bug in rfcomm_dev_ioctl -1 syz, C done 1 2351d 2351d 1/1 2320d 71811cac8532 Bluetooth: RFCOMM: fix ODEBUG bug in rfcomm_dev_ioctl
KASAN: use-after-free Write in release_tty 22 syz, C done 148 2350d 2467d 1/1 2320d ca4463bf8438 vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console
WARNING: ODEBUG bug in route4_change -1 syz, C done 28 2355d 2374d 1/1 2325d ef299cc3fa1a net_sched: cls_route: remove the right filter from hashtable
WARNING: refcount bug in sock_wfree 13 syz, C done done 1 2358d 2478d 1/1 2328d 5c3e82fe1596 sctp: fix refcount bug in sctp_wfree
KASAN: use-after-free Read in tty_open 19 syz, C done 2 2362d 2468d 1/1 2331d ca4463bf8438 vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console
BUG: unable to handle kernel paging request in init_srcu_struct_fields 8 syz done 3 2362d 2560d 1/1 2331d 28df0642abbf usbip: tools: Fix read_usb_vudc_device() error path handling
KASAN: slab-out-of-bounds Read in selinux_xfrm_alloc_user 17 syz, C done 3 2364d 2369d 1/1 2332d a1a7e3a36e01 xfrm: add the missing verify_sec_ctx_len check in xfrm_add_acquire
WARNING: ODEBUG bug in rfcomm_dlc_free -1 syz, C done 21 2364d 2596d 1/1 2334d 71811cac8532 Bluetooth: RFCOMM: fix ODEBUG bug in rfcomm_dev_ioctl
KASAN: slab-out-of-bounds Write in tcindex_set_parms 21 syz, C done 2 2368d 2368d 1/1 2336d 0d1c3530e1bd net_sched: keep alloc_hash updated after hash allocation
KASAN: use-after-free Write in tcindex_set_parms 22 syz, C done 3 2367d 2371d 1/1 2336d 0d1c3530e1bd net_sched: keep alloc_hash updated after hash allocation
possible deadlock in ovl_write_iter (2) 4 syz done 2 2370d 2370d 1/1 2340d b63e48fb50e1 USB: Disable LPM on WD19's Realtek Hub
KASAN: use-after-free Read in n_tty_receive_buf_common 19 syz, C done 40 2372d 2466d 1/1 2341d e8c75a30a23c vt: selection, push sel_lock up
inconsistent lock state in rxrpc_put_client_connection_id 4 syz, C done 89 2380d 2397d 1/1 2349d 963485d436cc rxrpc: Fix call RCU cleanup using non-bh-safe locks
KASAN: use-after-free Read in ext4_xattr_set_entry 19 syz done 10 2380d 2628d 1/1 2349d 9803387c55f7 ext4: validate the debug_want_extra_isize mount option at parse time
inconsistent lock state in rxrpc_put_client_conn 4 syz, C done 6584 2380d 2397d 1/1 2349d 963485d436cc rxrpc: Fix call RCU cleanup using non-bh-safe locks
kernel BUG at net/rxrpc/local_object.c:LINE! -1 syz, C done 13912 2382d 2592d 1/1 2351d d12040b6933f rxrpc: Fix lack of conn cleanup when local endpoint is cleaned up [ver #2]
general protection fault in selinux_socket_sendmsg 2 syz, C done 36 2382d 2563d 1/1 2352d 963485d436cc rxrpc: Fix call RCU cleanup using non-bh-safe locks
INFO: task hung in paste_selection 1 syz, C done 10 2383d 2459d 1/1 2353d e8c75a30a23c vt: selection, push sel_lock up
INFO: task hung in htable_put 1 syz, C done 8 2385d 2431d 1/1 2355d 8d0015a7ab76 netfilter: xt_hashlimit: limit the max size of hashtable
kernel BUG at fs/reiserfs/lock.c:LINE! (2) -1 syz, C done 2 2388d 2388d 1/1 2358d 4d5c1adaf893 reiserfs: Fix spurious unlock in reiserfs_fill_super() error handling
INFO: task hung in drain_all_pages 1 syz, C done 1 2389d 2419d 1/1 2358d 380324734956 s390/mm: Explicitly compare PAGE_DEFAULT_KEY against zero in storage_key_init_range
KASAN: stack-out-of-bounds Write in ax25_getname 21 syz, C done 4 2393d 2688d 1/1 2362d 42d84c8490f9 vhost: Check docket sk_family instead of call getname
INFO: task hung in hashlimit_mt_check_common 1 syz, C done 3 2395d 2410d 1/1 2363d 8d0015a7ab76 netfilter: xt_hashlimit: limit the max size of hashtable
INFO: task hung in tty_ldisc_hangup 1 syz, C done 10 2395d 2462d 1/1 2363d e8c75a30a23c vt: selection, push sel_lock up
general protection fault in padata_reorder 2 syz, C done 90 2394d 2397d 1/1 2363d cad926f70b5a padata: fix null pointer deref of pd->pinst
KASAN: slab-out-of-bounds Read in tcf_exts_destroy 17 syz, C done 1 2398d 2515d 1/1 2368d 599be01ee567 net_sched: fix an OOB access in cls_tcindex
BUG: sleeping function called from invalid context in tpk_write 5 syz, C done 30 2403d 2465d 1/1 2373d 9a655c77ff8f ttyprintk: fix a potential deadlock in interrupt context issue
general protection fault in path_openat 2 syz, C done 13 2404d 2409d 1/1 2373d 6404674acd59 vfs: fix do_last() regression
KASAN: slab-out-of-bounds Read in __nla_put_nohdr 17 syz, C done 1 2411d 2411d 1/1 2380d 61678d28d4a4 net_sched: fix datalen for ematch
general protection fault in nft_chain_parse_hook 2 syz, C done 5 2411d 2423d 1/1 2380d 826035498ec1 netfilter: nf_tables: add __nft_chain_type_get()
WARNING in cbq_destroy_class -1 syz, C done 1 2416d 2416d 1/1 2385d 2e24cd755552 net_sched: fix ops->bind_class() implementations
KASAN: slab-out-of-bounds Write in setup_udp_tunnel_sock 21 syz, C done 1 2416d 2416d 1/1 2386d 940ba1498665 gtp: make sure only SOCK_DGRAM UDP sockets are accepted
KASAN: use-after-free Read in snd_timer_resolution 19 syz, C done 2 2420d 2420d 1/1 2390d 60adcfde92fa ALSA: seq: Fix racy access for queue timer in proc read
KASAN: use-after-free Read in tcp_check_sack_reordering 19 syz, C done 1 2420d 2420d 1/1 2390d 9a655c77ff8f ttyprintk: fix a potential deadlock in interrupt context issue
general protection fault in xt_rateest_put 2 syz, C done 10 2421d 2423d 1/1 2391d 212e7f56605e netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct
BUG: corrupted list in nf_tables_commit 8 syz, C done 2 2423d 2424d 1/1 2392d 335178d5429c netfilter: nf_tables: fix flowtable list del corruption
WARNING in nft_request_module -1 syz, C done 1 2423d 2423d 1/1 2392d 9332d27d7918 netfilter: nf_tables: remove WARN and add NLA_STRING upper limits
general protection fault in nft_tunnel_get_init 2 syz, C done 1 2424d 2424d 1/1 2392d 1c702bf902bd netfilter: nft_tunnel: fix null-attribute check
general protection fault in nf_ct_netns_do_get 2 syz, C done 11 2428d 2443d 1/1 2395d 1b789577f655 netfilter: arp_tables: init netns pointer in xt_tgchk_param struct
KASAN: use-after-free Write in __alloc_skb 22 syz, C done 2 2427d 2495d 1/1 2397d d836f5c69d87 net: rtnetlink: validate IFLA_MTU attribute in rtnl_create_link()
general protection fault in xt_rateest_tg_checkentry 2 syz, C done 12 2428d 2444d 1/1 2397d 212e7f56605e netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct
KASAN: slab-out-of-bounds Read in macvlan_broadcast 17 syz, C done 10 2428d 2433d 1/1 2398d 96cc4b69581d macvlan: do not assume mac_header is set in macvlan_broadcast()
KASAN: use-after-free Read in macvlan_broadcast 19 syz, C done 7 2430d 2433d 1/1 2399d 96cc4b69581d macvlan: do not assume mac_header is set in macvlan_broadcast()
WARNING: bad unlock balance in gtp_encap_enable_socket 4 syz, C done 2 2431d 2434d 1/1 2401d 90d72256addf gtp: fix bad unlock balance in gtp_encap_enable_socket
BUG: sleeping function called from invalid context in lock_sock_nested 5 syz done 1 2436d 2466d 1/1 2403d 37f96694cf73 crypto: af_alg - Use bh_lock_sock in sk_destruct
general protection fault in rxrpc_connect_call 2 syz, C done 285 2438d 2602d 1/1 2408d d12040b6933f rxrpc: Fix lack of conn cleanup when local endpoint is cleaned up [ver #2]
possible deadlock in refcount_dec_and_mutex_lock 4 syz, C done done 5 2441d 2497d 1/1 2411d 1c05839aa973 nbd: fix shutdown and recv work deadlock v2
INFO: rcu detected stall in addrconf_dad_work (2) 1 syz, C done 1 2451d 2451d 1/1 2420d d9e15a273306 pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM
WARNING: refcount bug in cdev_get 13 syz, C done 12 2450d 2576d 1/1 2420d 94a72b3f024f bridge/mdb: remove wrong use of NLM_F_MULTI
possible deadlock in __might_fault 4 syz, C done 385 2452d 2702d 1/1 2421d 19e6317d24c2 usb: mon: Fix a deadlock in usbmon between mmap and read
INFO: task hung in fsnotify_mark_destroy_workfn 1 syz done 3 2454d 2641d 1/1 2423d 7e7c005b4b1f rtc: disable uie before setting time and enable after
possible deadlock in mon_bin_vma_fault 4 syz, C done 375 2454d 2704d 1/1 2424d 19e6317d24c2 usb: mon: Fix a deadlock in usbmon between mmap and read
WARNING in xfrm6_tunnel_net_exit -1 syz done 34 2455d 2704d 1/1 2425d f75a2804da39 xfrm: destroy xfrm_state synchronously on net exit path
inconsistent lock state in sp_get 4 syz, C done 1 2458d 2458d 1/1 2427d 5c9934b6767b 6pack,mkiss: fix possible deadlock
KASAN: slab-out-of-bounds Read in linear_transfer 17 syz, C done 2 2466d 2467d 1/1 2436d 4cc8d6505ab8 ALSA: pcm: oss: Avoid potential buffer overflows
WARNING: refcount bug in kobject_get 13 syz, C done 21 2467d 2696d 1/1 2436d ac43432cb1f5 driver core: Fix use-after-free and double free on glue directory
KASAN: use-after-free Read in slip_open 19 syz, C done done 7 2467d 2479d 1/1 2436d e58c19124189 slip: Fix use-after-free Read in slip_open
INFO: task hung in vivid_stop_generating_vid_cap 1 syz, C done 291 2470d 2704d 1/1 2439d 6dcd5d7a7a29 media: vivid: Fix wrong locking that causes race conditions on streaming stop
INFO: task hung in sdr_cap_stop_streaming 1 syz, C done 152 2470d 2704d 1/1 2439d 6dcd5d7a7a29 media: vivid: Fix wrong locking that causes race conditions on streaming stop
KASAN: use-after-free Read in __vb2_perform_fileio 19 syz, C done 13 2470d 2700d 1/1 2440d 6dcd5d7a7a29 media: vivid: Fix wrong locking that causes race conditions on streaming stop
KASAN: use-after-free Read in kfree_skb 19 syz, C done 95 2474d 2594d 1/1 2442d cf94da6f502d Bluetooth: Fix invalid-free in bcsp_close()
WARNING in __vb2_queue_cancel -1 syz, C done 11 2478d 2689d 1/1 2447d 6dcd5d7a7a29 media: vivid: Fix wrong locking that causes race conditions on streaming stop
WARNING: suspicious RCU usage in memfd_fcntl 4 syz, C done done 1879 2480d 2502d 1/1 2450d e4cc9c81e230 memfd: Use radix_tree_deref_slot_protected to avoid the warning.
possible deadlock in ovl_write_iter 4 syz done 84 2487d 2697d 1/1 2451d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
KASAN: use-after-free Read in rxrpc_send_keepalive 19 syz done 6 2502d 2575d 1/1 2452d c48fc11b69e9 rxrpc: Fix call ref leak
BUG: corrupted list in p9_fd_cancelled 8 syz done 2 2487d 2550d 1/1 2452d 697d877849d4 perf/core: Consistently fail fork on allocation failures
KASAN: use-after-free Read in __lock_sock 19 syz done 2 2504d 2504d 1/1 2452d 09d6ac8dc51a libata/ahci: Fix PCS quirk application
WARNING in corrupted -1 syz done 25 2524d 2676d 1/1 2453d c751798aa224 bpf: fix use after free in prog symbol exposure
possible deadlock in io_submit_one 4 syz done 406 2526d 2704d 1/1 2453d cbcfa130a911 fs/userfaultfd.c: disable irqs for fault_pending and event locks
WARNING in bpf_jit_free -1 syz done 293 2527d 2704d 1/1 2454d c751798aa224 bpf: fix use after free in prog symbol exposure
KASAN: use-after-free Read in pneigh_get_next 19 syz done 1 2638d 2638d 1/1 2454d f3e92cb8e2eb neigh: fix use-after-free read in pneigh_get_next
WARNING in ovl_rename -1 syz done 1 2686d 2686d 1/1 2454d 146d62e5a586 ovl: detect overlapping layers
kernel BUG at arch/x86/mm/physaddr.c:LINE! -1 syz done 1 2624d 2624d 1/1 2454d 5684abf7020d ip_tunnel: allow not to count pkts on tstats by setting skb's dev to NULL
WARNING in ovl_instantiate -1 syz done 5 2694d 2699d 1/1 2454d 146d62e5a586 ovl: detect overlapping layers
WARNING: suspicious RCU usage in llc_sap_close 4 syz, C done 10 2493d 2649d 1/1 2454d 9708d2b5b7c6 llc: avoid blocking in llc_sap_close()
BUG: unable to handle kernel NULL pointer dereference in blk_mq_map_swqueue 10 syz, C done 12 2503d 2688d 1/1 2456d e9e006f5fcf2 nbd: fix max number of supported devs
KASAN: null-ptr-deref Write in kvm_write_guest_virt_system 12 syz, C done 50 2520d 2538d 1/1 2458d c552ffb5c93d crypto: cavium/zip - Add missing single_release()
possible deadlock in free_ioctx_users 4 syz, C done 77 2526d 2649d 1/1 2458d 76e43c8ccaa3 fuse: fix deadlock with aio poll and fuse_iqueue::waitq.lock
KASAN: use-after-free Read in wait_consider_task 19 syz, C done 58 2531d 2540d 1/1 2459d fe9bc1644918 RDMA/restrack: Protect from reentry to resource return path
WARNING: ODEBUG bug in free_task -1 syz, C done 165 2530d 2540d 1/1 2459d fe9bc1644918 RDMA/restrack: Protect from reentry to resource return path
general protection fault in tcf_action_destroy 2 syz, C done 15 2528d 2550d 1/1 2459d b91ee4aa2a21 mISDN: enforce CAP_NET_RAW for raw sockets
WARNING: suspicious RCU usage in netem_enqueue 4 syz, C done 2 2533d 2537d 1/1 2460d 62794fc4fbf5 net_sched: add max len check for TCA_KIND
KASAN: use-after-free Read in __change_pid 19 syz, C done 4 2532d 2540d 1/1 2460d fe9bc1644918 RDMA/restrack: Protect from reentry to resource return path
possible deadlock in do_io_accounting 4 syz, C done 4 2531d 2643d 1/1 2460d 146d62e5a586 ovl: detect overlapping layers
KASAN: use-after-free Read in pids_release 19 syz, C done 7 2533d 2540d 1/1 2460d fe9bc1644918 RDMA/restrack: Protect from reentry to resource return path
general protection fault in release_task 2 syz, C done 3 2533d 2540d 1/1 2460d fe9bc1644918 RDMA/restrack: Protect from reentry to resource return path
general protection fault in wait_consider_task 2 syz, C done 5 2533d 2538d 1/1 2460d fe9bc1644918 RDMA/restrack: Protect from reentry to resource return path
INFO: rcu detected stall in netlink_sendmsg 1 syz, C done 3 2545d 2550d 1/1 2460d d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
KASAN: use-after-free Read in release_task 19 syz, C done 2 2535d 2537d 1/1 2461d fe9bc1644918 RDMA/restrack: Protect from reentry to resource return path
WARNING in handle_desc -1 syz, C done 1 2541d 2541d 1/1 2461d 3ca94192278c KVM: X86: Fix userspace set invalid CR4
BUG: unable to handle kernel NULL pointer dereference in tc_bind_tclass 10 syz, C done 18 2536d 2555d 1/1 2461d 8b142a00edcf net_sched: check cops->tcf_block in tc_bind_tclass()
general protection fault in qdisc_destroy 2 syz, C done 9 2541d 2551d 1/1 2461d 6efb971ba8ed net_sched: let qdisc_put() accept NULL pointer
INFO: rcu detected stall in addrconf_dad_work 1 syz, C done 19 2542d 2554d 1/1 2463d d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
INFO: rcu detected stall in mld_ifc_timer_expire 1 syz, C done 33 2542d 2555d 1/1 2463d d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
INFO: rcu detected stall in br_handle_frame 1 syz, C done 41 2543d 2555d 1/1 2463d d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
INFO: task hung in __x64_sys_io_destroy 1 syz, C done 1 2543d 2543d 1/1 2463d 2d29bcc8c237 media: tvp5150: fix switch exit in set control handler
WARNING: refcount bug in hci_register_dev 13 syz, C done 3 2549d 2561d 1/1 2465d ac43432cb1f5 driver core: Fix use-after-free and double free on glue directory
WARNING in kernfs_get -1 syz, C done 14 2549d 2689d 1/1 2465d ac43432cb1f5 driver core: Fix use-after-free and double free on glue directory
general protection fault in kernfs_add_one 2 syz, C done 8 2558d 2697d 1/1 2465d ac43432cb1f5 driver core: Fix use-after-free and double free on glue directory
general protection fault in packet_lookup_frame 2 syz, C done 1 2579d 2579d 1/1 2466d 32d3182cd2cd net/packet: fix race in tpacket_snd()
WARNING in tty_set_termios -1 syz, C done 151 2588d 2698d 1/1 2467d b36a1552d731 Bluetooth: hci_uart: check for missing tty operations
general protection fault in tcf_ife_init 2 syz, C done 15 2587d 2604d 1/1 2467d c8ec4632c6ac ife: error out when nla attributes are empty
KASAN: null-ptr-deref Write in kthread_stop 12 syz, C done 12 2587d 2692d 1/1 2467d 6dcd5d7a7a29 media: vivid: Fix wrong locking that causes race conditions on streaming stop
general protection fault in rds_recv_rcvbuf_delta 2 syz, C done 7 2594d 2641d 1/1 2468d c5c1a030a7db net/rds: An rds_sock is added too early to the hash table
INFO: task hung in blkdev_issue_flush 1 syz, C done 2 2621d 2622d 1/1 2468d 6e4d91aa0718 hwmon: (acpi_power_meter) Change log level for 'unsafe software power cap'
general protection fault in iptunnel_xmit 2 syz, C done 2 2595d 2595d 1/1 2468d 5684abf7020d ip_tunnel: allow not to count pkts on tstats by setting skb's dev to NULL
WARNING in kernfs_put -1 syz, C done 1 2626d 2626d 1/1 2469d ac43432cb1f5 driver core: Fix use-after-free and double free on glue directory
WARNING in notify_change -1 syz, C done 12 2632d 2689d 1/1 2469d f69e749a4935 Abort file_remove_privs() for non-reg. files
BUG: unable to handle kernel paging request in coalesced_mmio_write 8 syz, C done 2 2631d 2631d 1/1 2469d b60fe990c6b0 KVM: coalesced_mmio: add bounds checking
possible deadlock in userfaultfd_release 4 syz, C done 4 2632d 2637d 1/1 2469d cbcfa130a911 fs/userfaultfd.c: disable irqs for fault_pending and event locks
possible deadlock in acct_pin_kill 4 syz, C done 125 2662d 2697d 1/1 2470d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
WARNING in xfrm_state_fini -1 syz, C done 78 2679d 2703d 1/1 2471d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
WARNING in __flush_work -1 syz, C done 135 2676d 2682d 1/1 2471d ac3b35f11a06 drm/udl: Replace drm_dev_unref with drm_dev_put
KASAN: use-after-free Read in get_mem_cgroup_from_mm 19 syz, C done 6 2685d 2699d 1/1 2471d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
general protection fault in ip6erspan_set_version 2 syz, C done 7 2694d 2704d 1/1 2471d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
possible deadlock in pipe_lock 4 syz, C done 2 2686d 2690d 1/1 2471d 146d62e5a586 ovl: detect overlapping layers
general protection fault in sctp_timeout_obj_to_nlattr 2 syz, C done 7 2699d 2703d 1/1 2472d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
general protection fault in generic_timeout_obj_to_nlattr 2 syz, C done 11 2699d 2704d 1/1 2472d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
general protection fault in gre_timeout_obj_to_nlattr 2 syz, C done 13 2699d 2704d 1/1 2472d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
general protection fault in tcp_timeout_obj_to_nlattr 2 syz, C done 7 2700d 2702d 1/1 2472d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
general protection fault in icmp_timeout_obj_to_nlattr 2 syz, C done 3 2702d 2704d 1/1 2472d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
general protection fault in udp_timeout_obj_to_nlattr 2 syz, C done 8 2699d 2704d 1/1 2472d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
general protection fault in dccp_timeout_obj_to_nlattr 2 syz, C done 7 2699d 2704d 1/1 2472d 5593530e5694 Revert "tipc: fix modprobe tipc failed after switch order of device registration"