Applied filters: WithRepro (drop) Label=prio:normal (drop)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
INFO: task hung in xfs_buf_item_unpin (2) prio:normal xfs 1 syz, C done done 160 25d 813d 27/29 never 41a28c865d1d xfs: don't hold buffer locks across sync transaction commit in xfs_sync_sb_buf
WARNING: suspicious RCU usage in xfrm_nlmsg_multicast prio:normal net 4 syz, C error 163 54d 98d 26/29 never 42d100f5232f xfrm: add missing RCU read lock in xfrm_send_migrate_state()
UBSAN: array-index-out-of-bounds in snd_dummy_probe prio:normal sound 15 syz, C 14 94d 93d 27/29 never 02442d5fe8ee ALSA: dummy: Check card index validity at probe
memory leak in ieee80211_mesh_csa_beacon prio:normal wireless 3 syz, C 4 55d 75d 26/29 never 860134b3af77 wifi: mac80211: mesh: reset the CSA state when leaving
KASAN: use-after-free Read in kvm_setup_guest_pvclock prio:normal kvm-x86 19 syz, C 5 100d 130d 26/29 never da260bcb56fe KVM: pfncache: use a dedicated invalidation sequence for cache refresh
kernel BUG in sock_sendmsg_nosec prio:normal net -1 syz, C 2 67d 68d 27/29 never 73e594c19b4f af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header().
general protection fault in __bch2_err_trace prio:normal fs 2 syz, C done 25 402d 458d 2/29 never bcachefs: Delete faulty read_only/nochanges check in fs_open()
kernel BUG in do_bch2_trans_commit_to_journal_replay prio:normal fs -1 syz 22 471d 475d 2/29 never bcachefs: do_bch2_trans_commit_to_journal_replay handles accounting
KASAN: slab-out-of-bounds Read in blk_mq_free_rqs prio:normal block 19 C 35 6d10h 197d 19/29 never 894e4e608492 blk-mq: fix out-of-bounds read in blk_mq_free_rqs
WARNING in super_dev_register prio:normal fuse -1 syz, C 10 124d 127d 28/29 never 83887ad02f30 block: reject block device inodes with i_rdev == 0 in lookup_bdev()
BUG: using smp_processor_id() in preemptible code in bpf_mem_cache_free_rcu prio:normal bpf 4 syz, C error 2284 23d 130d 26/29 never de020dc8049b bpf: Fix missing migration protection in __rhtab_map_lookup_and_delete_batch()
UBSAN: array-index-out-of-bounds in print_bpf_insn (2) prio:normal bpf 17 syz, C 5821 47d 79d 27/29 never 37e5c4f4d285 bpf: Reject invalid LDSX instruction in disassembly
WARNING in btrfs_init_new_device prio:normal btrfs -1 syz, C error 213 8h48m 89d 2/29 never btrfs: unwind device add when sysfs registration fails btrfs: unwind device add when sysfs registration fails
KASAN: slab-use-after-free Write in config_item_get prio:normal fs 22 syz, C error 8 80d 100d 27/29 never f06c2d26d199 configfs: unhash the dentry before dropping the item in rmdir
KASAN: slab-out-of-bounds Read in ctl_ioctl prio:normal dm 17 syz, C 4 35d 49d 26/29 never 9b3fcf519d37 dm ioctl: don't let data_start run past the buffer
KASAN: wild-memory-access Write in __journal_read_write prio:normal dm 21 C 2 37d 37d 26/29 never fc79aeb86a2c dm-integrity: validate the superblock on resume
KASAN: slab-use-after-free Read in dm_table_get_mode prio:normal dm 19 syz, C 1 46d 45d 26/29 never c9417c1c5269 dm: fix reading free memory in do_resume
possible deadlock in ipvlan_uninit prio:normal net 4 syz, C error 7402 43d 118d 27/29 never a8455260b2e9 ipvlan: unregister upper devices outside pnodes_lock
general protection fault in _wait_barrier prio:normal raid 2 C 3 13d 71d 26/29 never 4c90b76e0198 md: Fix the null-ptr-deref of 'mddev->private' while submitting IO
KASAN: slab-use-after-free Read in __dynamic_dev_dbg prio:normal driver-core media 19 syz, C 561 1d02h 51d 26/29 never 118a3590a408 media: imon: fix use-after-free in display_close via dev_dbg
KASAN: slab-use-after-free Read in vidtv_bridge_on_new_pkts_avail prio:normal media 19 C 10 56d 74d 26/29 never 2af02ccd048b media: vidtv: fix uaf in vidtv_bridge_on_new_pkts_avail
KASAN: vmalloc-out-of-bounds Write in tpg_fill_plane_buffer (5) prio:normal media 21 C 44 7d23h 105d 26/29 never a2ec28dd2a88 media: vivid: round the height down to the vertical subsampling factor
WARNING in cfg80211_pernet_exit prio:normal -1 C error 1 72d 67d 27/29 never debac3a20dec net: Remove conflicting altnames for dying netns in __dev_change_net_namespace().
KASAN: null-ptr-deref Read in netlink_has_listeners prio:normal net 11 C 49 5d08h 11d 26/29 never fd0909e963ed netdev-genl: ignore NETDEV_UNREGISTER rebroadcasts
WARNING: suspicious RCU usage in expect_iter_name prio:normal netfilter 4 syz, C error 1558 34d 56d 26/29 never 207d591c3532 netfilter: ctnetlink: fix suspicious RCU usage in expect_iter_name
INFO: task hung in nilfs_transaction_begin (3) prio:normal nilfs 1 syz, C error 7 67d 113d 27/29 never ce5a5ad1a833 nilfs2: fix infinite loop in nilfs_clean_segments()
BUG: corrupted list in nilfs_lookup_dirty_data_buffers prio:normal nilfs 8 syz, C 3 113d 135d 27/29 never a1735eae5544 nilfs2: reject invalid block index in GC ioctl
BUG: corrupted list in nvmet_fc_remove_port prio:normal nvme 8 syz, C error 2 26d 26d 26/29 never 60385038754e nvmet: use the enabled transport when disabling a port
KASAN: null-ptr-deref Write in fput prio:normal ocfs2 12 syz, C error error 5 1d14h 90d 21/29 never 0a8f258c0f01 ocfs2/heartbeat: serialize concurrent writes to a region's dev attribute
WARNING in __rt_mutex_slowlock_locked (3) prio:normal ocfs2 -1 syz, C error 3 138d 140d 27/29 never 2fdf181afd43 ocfs2: use inode_lock_nested() for orphan dir locking
KASAN: slab-out-of-bounds Read in reg_fixed_voltage_probe prio:normal kernel 17 syz, C 7 76d 77d 26/29 never f7396c2dbbc1 regulator: fixed: reject incompatible platform devices
KASAN: use-after-free Read in ring_buffer_peek prio:normal 19 C 1 86d 82d 27/29 never 372f8534244d tracing: Fix use-after-free in trace_pipe read on sub-buffer order change
WARNING: refcount bug in trace_suspend_resume (2) prio:normal usb 13 syz, C 5 67d 89d 26/29 never cb3b441f2698 usb: gadget: fix refcount underflow in gadgetfs_bind() error path
KASAN: stack-out-of-bounds Write in append_midi1_out_jack prio:normal usb 21 C 6 58d 72d 26/29 never 310c2d4608d8 usb: gadget: midi2: Fix the jack descriptor array sizes
KASAN: slab-use-after-free Write in tty_init_dev prio:normal serial 22 C 7 49d 99d 2/29 never usb: gadget: u_serial: pin ports while TTYs are installed
KASAN: slab-use-after-free Write in release_tty prio:normal actionable serial 22 syz, C error 7 32d 88d 2/29 never usb: gadget: u_serial: pin ports while TTYs are installed
KASAN: slab-use-after-free Read in trace_event_raw_event_udc_log_req prio:normal usb 19 C 2 51d 92d 27/29 never bdab5605259b usb: gadget: uvc: fix dangling pointers in uvc_function_bind() and uvc_function_unbind()
KMSAN: uninit-value in cfg80211_classify8021d prio:normal wireless 7 syz, C 24 228d 382d 26/29 never 48b2c5c628b0 wifi: cfg80211: check IP header size in cfg80211_classify8021d()
INFO: task hung in inet_rtm_newaddr prio:normal net 1 syz, C done 329 2d18h 680d 26/29 never f4e72e375807 wifi: cfg80211: reduce RTNL holding in regulatory enforcement
general protection fault in ieee80211_put_srates_elem prio:normal wireless 2 syz, C error error 15 200d 291d 26/29 never ac7472a24bd4 wifi: mac80211: abort chanswitch when leaving a mesh
WARNING in mac80211_hwsim_tx (2) prio:normal wireless -1 syz, C error 523 19h11m 180d 26/29 never e14bf37bb2b3 wifi: mac80211: don't allow injecting frames wider than the chanctx
BUG: using smp_processor_id() in preemptible code in ieee80211_tx_control_port prio:normal wireless 4 syz, C error 32 53d 58d 26/29 never aaf06d7cb648 wifi: mac80211: fix stats/preemption in ieee80211_tx_control_port()
WARNING in nf_flow_offload_ip_hook prio:normal netfilter -1 syz, C done 9 95d 94d 29/29 53d 8aecf0bbcc72 netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()
KASAN: slab-out-of-bounds Read in ieee80211_ie_split_ric (3) prio:normal wireless 17 syz, C 2 102d 120d 29/29 53d a2f5286ca4f3 wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie()
memory leak in vlan_vid_add prio:normal net 3 syz, C 1 108d 122d 29/29 81d dcf15eaf5641 net: hsr: fix memory leak on slave unregistration by removing synced VLANs
KASAN: slab-use-after-free Read in debugfs_u32_get (2) prio:normal driver-core fs 19 syz 1 132d 142d 29/29 101d 2e996ca81f95 netdevsim: remove ethtool debugfs files before freeing netdev
general protection fault in can_rx_unregister (2) prio:normal can 8 syz, C 3 167d 167d 29/29 114d 8ba68464e478 bonding: refuse to enslave CAN devices
general protection fault in kernel_sock_shutdown (4) rdma prio:normal 19 syz, C 105 155d 197d 29/29 114d 0b28000b64f4 RDMA/nldev: Add mutual exclusion in nldev_dellink()
KASAN: slab-use-after-free Read in sk_msg_recvmsg prio:normal bpf net 19 syz, C error error 3 269d 264d 29/29 114d c010995b29c8 sockmap: Fix use-after-free in udp_bpf_recvmsg()
UBSAN: shift-out-of-bounds in ieee80211_parse_tx_radiotap prio:normal wireless -1 syz, C error 67 155d 160d 29/29 114d 6c0cf89f36ac wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap
general protection fault in h4_recv prio:normal bluetooth 2 syz, C error 4 215d 211d 29/29 136d 902fe40bce70 Bluetooth: hci_uart: Fix NULL deref in recv callbacks when priv is uninitialized
memory leak in xfrm_policy_construct prio:normal net 3 syz, C 8 212d 212d 29/29 161d xfrm: fix refcount leak in xfrm_migrate_policy_find
general protection fault in nilfs_mdt_save_to_shadow_map prio:normal nilfs 2 syz, C error 87 206d 235d 29/29 169d 4a4e0328edd9 nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map