syzbot

 sign-in | mailing list | source | docs
🐞 Open [1390]
≡ Subsystems
🐞 Fixed [7018]
🐞 Invalid [18320]
⬇ Missing Backports [223]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
✨ AI
💬 Send us feedback

Applied filters: Label=subsystems:hams (drop)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
general protection fault in rose_transmit_link (4) hams 21 C error 2057 5d21h 69d 26/29 never e1f0a18c9564 net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect
BUG: unable to handle kernel paging request in sk_skb_reason_drop hams 22 C 36 55d 69d 28/29 never ba1096c31528 netrom: fix double-free in nr_route_frame()
memory leak in nr_sendmsg hams 3 C 1 121d 117d 29/29 63d 613d12dd794e netrom: Fix memory leak in nr_sendmsg()
possible deadlock in serial8250_handle_irq hams 4 C 180 177d 978d 29/29 147d 38b04ed7072e 6pack: drop redundant locking and refcounting
general protection fault in rose_rt_ioctl hams 2 C 64 210d 210d 29/29 168d 1cc8a5b534e5 net: rose: fix a typo in rose_clear_routes()
KASAN: slab-use-after-free Read in rose_timer_expiry (3) hams 19 6059 203d 310d 29/29 168d da9c9c877597 net: rose: include node references in rose_neigh refcount
KASAN: slab-use-after-free Read in rose_get_neigh hams 19 C error 1449 261d 653d 29/29 202d 34a500caf48c rose: fix dangling neighbour pointers in rose_rt_device_down()
WARNING: refcount bug in ax25_release (3) hams 13 C done 5256 363d 668d 28/29 288d bca0902e6173 ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt 2f6efbabceb6 ax25: Remove broken autobind
BUG: soft lockup in rose_loopback_timer hams 1 C 1 419d 415d 28/29 288d a1300691aed9 net: rose: lock the socket in rose_bind()
KASAN: slab-use-after-free Read in rose_timer_expiry (2) hams 19 158 316d 440d 28/29 315d 5de7665e0a07 net: rose: fix timer races against user threads
possible deadlock in ax25_setsockopt hams 4 2 442d 449d 28/29 320d 95fc45d1dea8 ax25: rcu protect dev->ax25_ptr
kernel BUG in nr_header hams -1 2 489d 476d 28/29 323d a6d75ecee2bf net: lapb: increase LAPB_HEADER_LEN
memory leak in nr_create (3) hams 3 C 9 826d 1016d 26/29 624d 0b9130247f3b netrom: Fix a memory leak in nr_heartbeat_expiry()
possible deadlock in nr_rt_ioctl hams 4 C inconclusive 8 662d 690d 25/29 656d e03e7f20ebf7 netrom: fix possible dead-lock in nr_rt_ioctl()
WARNING: refcount bug in ax25_release (2) hams 13 C 240 672d 737d 25/29 672d 467324bcfe1a ax25: Fix netdev refcount issue
WARNING in rose_device_event hams -1 1 833d 833d 25/29 793d 64b8bc7d5f14 net/rose: fix races in rose_kill_by_device()
general protection fault in prepare_to_wait (2) hams 8 syz inconclusive 4 912d 950d 23/29 895d c2f8fd794960 netrom: Deny concurrent connect().
KASAN: use-after-free Write in nr_release hams 22 C done error 1784 1035d 2308d 22/29 1021d 611792920925 netrom: Fix use-after-free caused by accept on already connected socket
WARNING: refcount bug in nr_release (4) hams 13 C 24 1136d 1441d 22/29 1021d 409db27e3a2e netrom: Fix use-after-free of a listening socket.
KASAN: use-after-free Read in do_accept hams 19 1 1167d 1163d 22/29 1021d 409db27e3a2e netrom: Fix use-after-free of a listening socket.
memory leak in nr_create (2) hams 3 C 11 1092d 1151d 22/29 1021d 611792920925 netrom: Fix use-after-free caused by accept on already connected socket
general protection fault in ax25_send_frame (2) hams 10 13 1237d 1223d 22/29 1125d e97c089d7a49 rose: Fix NULL pointer dereference in rose_send_frame()
general protection fault in rose_send_frame (2) hams 2 7 1239d 1264d 22/29 1125d e97c089d7a49 rose: Fix NULL pointer dereference in rose_send_frame()
KASAN: use-after-free Read in sixpack_close hams 19 C done 879 1587d 1592d 20/29 1478d 81b1d548d00b hamradio: remove needs_free_netdev to avoid UAF
memory leak in nr_create hams 3 C 250 1709d 2494d 20/29 1597d 517a16b1a88b netrom: Decrease sock refcount when sock timers expire
KASAN: slab-out-of-bounds Write in decode_data hams 21 C done error 7 2147d 2303d 20/29 1597d 19d1532a1876 net: 6pack: fix slab-out-of-bounds in decode_data
KMSAN: uninit-value in ax25_connect hams 7 C 15 2024d 2157d 15/29 2016d 2f2a7ffad5c6 AX.25: Fix out-of-bounds read in ax25_connect()
KMSAN: uninit-value in __dev_get_by_name hams 7 C 2 2139d 2139d 15/29 2077d 687775cec056 ax25: fix setsockopt(SO_BINDTODEVICE)
WARNING: held lock freed! (2) hams -1 C done 1 2456d 2452d 12/29 2402d 4638faac0327 netrom: hold sock when setting skb->destructor
KASAN: use-after-free Read in release_sock hams 19 C done 10 2425d 2435d 12/29 2402d 4638faac0327 netrom: hold sock when setting skb->destructor
KASAN: use-after-free Read in nr_release hams 19 C done 25 2403d 2482d 12/29 2402d 4638faac0327 netrom: hold sock when setting skb->destructor
KASAN: use-after-free Read in nr_insert_socket hams 19 C done 22 2426d 2442d 12/29 2402d 4638faac0327 netrom: hold sock when setting skb->destructor
KASAN: use-after-free Read in nr_rx_frame (2) hams 19 C done 3 2430d 2437d 12/29 2402d 4638faac0327 netrom: hold sock when setting skb->destructor
memory leak in nr_rx_frame hams 3 C 5 2431d 2494d 12/29 2424d c8c8218ec5af netrom: fix a memory leak in nr_rx_frame()
inconsistent lock state in ax25_destroy_timer hams 4 2 2474d 2475d 12/29 2450d d4d5d8e83c96 ax25: fix inconsistent lock state in ax25_destroy_timer
inconsistent lock state in ax25_rt_autobind hams 4 2 2474d 2474d 12/29 2450d d4d5d8e83c96 ax25: fix inconsistent lock state in ax25_destroy_timer
INFO: rcu detected stall in rose_loopback_timer hams 1 5 2509d 2528d 12/29 2494d 0453c6824595 net/rose: fix unbound loop in rose_loopback_timer()
KASAN: stack-out-of-bounds Write in rose_write_internal hams 21 1 2568d 2568d 12/29 2541d e5dcc0c3223c net: rose: fix a possible stack overflow
general protection fault in ax25cmp hams 2 C 2294 2612d 2644d 11/29 2577d b0cf029234f9 net/rose: fix NULL ax25_cb kernel panic
KASAN: use-after-free Read in refcount_inc_not_zero_checked hams 19 syz 24 2580d 2639d 11/29 2577d 63346650c1a9 netrom: switch to sock timer API
KASAN: use-after-free Read in kmemdup hams 19 1 2623d 2623d 11/29 2577d 63530aba7826 ax25: fix possible use-after-free
WARNING: refcount bug in nr_release hams 13 1 2636d 2634d 11/29 2577d 63346650c1a9 netrom: switch to sock timer API
inconsistent lock state in nr_find_socket hams 4 C 19 2628d 2643d 11/29 2626d 7314f5480f3e netrom: fix locking in nr_find_socket()
kernel BUG at kernel/time/timer.c:LINE! (2) hams -1 C 5 2638d 2640d 11/29 2626d 202700e30740 net/hamradio/6pack: use mod_timer() to rearm timers
KASAN: use-after-free Read in nr_rx_frame hams 19 syz 2 2633d 2639d 11/29 2626d 7314f5480f3e netrom: fix locking in nr_find_socket()
possible deadlock in nr_destroy_socket hams 4 syz 20 2629d 2639d 11/29 2626d 7314f5480f3e netrom: fix locking in nr_find_socket()
KASAN: use-after-free Read in ax25_fillin_cb hams 19 syz 4 2647d 2644d 11/29 2626d c433570458e4 ax25: fix a use-after-free in ax25_fillin_cb()