syzbot


Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
KASAN: use-after-free Read in compute_effective_progs (2) 19 C error 11 1138d 1266d 2/2 never 3527e3cbb84d bpf: Fix KASAN use-after-free Read in compute_effective_progs
kernel BUG in ext4_write_inline_data_end (2) -1 C error 16 146d 1180d 2/2 never 91f90b571f1a ext4: fix race condition between ext4_write and ext4_convert_inline_data
BUG: corrupted list in insert_work 8 C done done 9 1161d 1261d 2/2 never d007f49ab789 percpu_ref_init(): clean ->percpu_count_ref on failure
BUG: corrupted list in process_one_work 19 C error done 35 60d 1259d 2/2 never d007f49ab789 percpu_ref_init(): clean ->percpu_count_ref on failure
kernel BUG in tun_attach -1 C error 31 1148d 1190d 2/2 never bec1be0a745a net: tun: unlink NAPI from device on destruction
KASAN: slab-out-of-bounds Read in exfat_clear_bitmap 17 C error 2 1252d 1252d 2/2 never 82f723b8a5ad exfat: check if cluster num is valid
KASAN: use-after-free Read in free_netdev 19 C error 2 1158d 1190d 2/2 never bec1be0a745a net: tun: unlink NAPI from device on destruction
kernel BUG in ext4_mb_find_by_goal -1 C error done 31 815d 856d 2/2 765d 100c0ad6c045 ext4: allow ext4_get_group_info() to fail
general protection fault in chrdev_open 2 C error 1 1200d 1199d 2/2 779d 56a7f57da5d0 9p: missing chunk of "fs/9p: Don't update file type when updating file attributes"
kernel BUG in end_page_writeback f2fs -1 C error inconclusive 3 905d 956d 2/2 813d b2f423fda64f f2fs: fix to avoid use-after-free for cached IPU bio
kernel BUG in cdc_ncm_fill_tx_frame (2) -1 C error 3 857d 865d 2/2 815d 42b78c8cc774 net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize
kernel BUG in kvfree -1 C done 1 867d 867d 2/2 830d 1a8822343e67 ext4: fix invalid free tracking in ext4_xattr_move_to_block()
KASAN: slab-out-of-bounds Read in ext4_group_desc_csum ext4 19 C error inconclusive 11 839d 940d 2/2 830d 0dde3141c527 ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
general protection fault in ext4_xattr_set_entry (5) 2 C done 11 832d 835d 2/2 830d bb8592efcf8e ext4: fix use-after-free in ext4_xattr_set_entry
KASAN: slab-out-of-bounds Read in get_max_inline_xattr_value_size ext4 19 C error 4 908d 988d 2/2 835d 3967d330baf2 ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop
general protection fault in ext4_xattr_set_entry (4) 2 C error 62 835d 864d 2/2 835d bb8592efcf8e ext4: fix use-after-free in ext4_xattr_set_entry
KASAN: use-after-free Read in ext4_ext_rm_leaf ext4 19 C error inconclusive 1 972d 972d 2/2 849d 3967d330baf2 ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop
KASAN: use-after-free Read in ext4_rename_dir_prepare (3) 19 C error 4 873d 873d 2/2 865d dd887f83ea54 BACKPORT: ext4: fix use-after-free in ext4_rename_dir_prepare
general protection fault in ext4_xattr_set_entry (3) 2 C error 9 866d 869d 2/2 865d bb8592efcf8e ext4: fix use-after-free in ext4_xattr_set_entry
kernel BUG in ext4_write_inline_data ext4 -1 C error inconclusive 3 950d 1049d 2/2 869d 5e92073713f8 UPSTREAM: ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
kernel BUG in __skb_gso_segment -1 C error 1 1010d 1010d 2/2 869d 25dbd87379f8 net/af_packet: make sure to pull mac header
general protection fault in em_cmp_match 2 C error 1 1014d 1014d 2/2 869d 5c544c7c6afa net_sched: reject TCF_EM_SIMPLE case for complex ematch module
general protection fault in fscrypt_limit_io_blocks 2 C error 5 991d 1055d 2/2 869d a41d63f20471 ext4: don't allow journal inode to have encrypt flag
kernel BUG in ext4_free_blocks (2) ext4 -1 C error 25 872d 1174d 2/2 869d beda74302101 UPSTREAM: ext4: block range must be validated before use in ext4_mb_clear_bb() 7550aade9783 ext4: block range must be validated before use in ext4_mb_clear_bb()
general protection fault in ext4_xattr_set_entry (2) ext4 2 C error 423 871d 1070d 2/2 870d bb8592efcf8e ext4: fix use-after-free in ext4_xattr_set_entry
KASAN: use-after-free Read in ext4_rename_dir_prepare (2) 19 C error inconclusive 3 940d 940d 2/2 906d dd887f83ea54 BACKPORT: ext4: fix use-after-free in ext4_rename_dir_prepare
kernel BUG in add_grec (2) -1 C error inconclusive 1039 1031d 1031d 2/2 938d 44affe7ede59 ipv6: ensure sane device mtu in tunnels
KASAN: use-after-free Read in ext4_rename_dir_prepare 19 C error 2 1002d 1037d 2/2 976d dd887f83ea54 BACKPORT: ext4: fix use-after-free in ext4_rename_dir_prepare
kernel BUG in ext4_writepages -1 C error 5 1067d 1229d 2/2 1038d fb98cb61efff ext4: avoid crash when inline data creation follows DIO write
KASAN: use-after-free Read in gc_data_segment 19 C error 4 1041d 1065d 2/2 1038d 4a8e8bf28070 f2fs: fix to do sanity check on summary info
KASAN: use-after-free Read in mon_bin_flush 19 C error 2 1098d 1100d 2/2 1067d 1b257f97fec4 usb: mon: make mmapped memory read only
kernel BUG in notify_change (3) -1 C error 2 1124d 1124d 2/2 1082d bcf6dddd9746 ANDROID: incfs: Add check for ATTR_KILL_SUID and ATTR_MODE in incfs_setattr
kernel BUG in ext4_ind_remove_space -1 C error 55 1228d 1338d 2/2 1226d 22c450d39f89 ext4: limit length to bitmap_maxbytes - blocksize in punch_hole
kernel BUG in vhost_get_vq_desc -1 C error done 19 1286d 1330d 2/2 1226d 698dc7d13c4e vhost/vsock: don't check owner in vhost_vsock_stop() while releasing
BUG: stack guard page was hit in sys_open (5) -1 4 1240d 1245d 2/2 1227d 3e45af8a72c0 ANDROID: incremental-fs: limit mount stack depth
BUG: stack guard page was hit in sys_lsetxattr (2) -1 2 1296d 1299d 2/2 1227d 3e45af8a72c0 ANDROID: incremental-fs: limit mount stack depth
general protection fault in incfs_kill_sb 2 C done 380 1302d 1304d 2/2 1227d 3e45af8a72c0 ANDROID: incremental-fs: limit mount stack depth
BUG: stack guard page was hit in security_file_open -1 2 1245d 1297d 2/2 1227d 3e45af8a72c0 ANDROID: incremental-fs: limit mount stack depth
BUG: stack guard page was hit in sys_mkdirat -1 syz error 3 1228d 1261d 2/2 1227d 3e45af8a72c0 ANDROID: incremental-fs: limit mount stack depth
BUG: stack guard page was hit in sys_chmod -1 1 1272d 1272d 2/2 1227d 3e45af8a72c0 ANDROID: incremental-fs: limit mount stack depth
BUG: stack guard page was hit in sys_chown -1 2 1256d 1291d 2/2 1227d 3e45af8a72c0 ANDROID: incremental-fs: limit mount stack depth
BUG: stack guard page was hit in sys_mknodat -1 1 1255d 1255d 2/2 1227d 3e45af8a72c0 ANDROID: incremental-fs: limit mount stack depth
BUG: stack guard page was hit in sys_chdir (4) -1 1 1268d 1268d 2/2 1227d 3e45af8a72c0 ANDROID: incremental-fs: limit mount stack depth
BUG: stack guard page was hit in sys_unlink (8) -1 1 1267d 1267d 2/2 1227d 3e45af8a72c0 ANDROID: incremental-fs: limit mount stack depth
BUG: stack guard page was hit in sys_listxattr -1 1 1266d 1266d 2/2 1227d 3e45af8a72c0 ANDROID: incremental-fs: limit mount stack depth
kernel BUG in mpage_prepare_extent_to_map -1 C error 254 1249d 1417d 2/2 1248d 330d0e44fc5a ext4: don't BUG if someone dirty pages without asking ext4 first
KASAN: use-after-free Write in paging64_update_accessed_dirty_bits 24 C error 16 1305d 1413d 2/2 1248d e90518d10c7d KVM: x86/mmu: do compare-and-exchange of gPTE via the user address
kernel BUG in add_grec -1 C error 83 1271d 1345d 2/2 1271d ae8ec5eabb1a net: ipv6: fix skb_over_panic in __ip6_append_data
kernel BUG in iput -1 C error 2 1280d 1280d 2/2 1271d 9eeaa2d7d58a exfat: avoid incorrectly releasing for root inode
KASAN: slab-out-of-bounds Read in packet_recvmsg 17 C error 1 1287d 1287d 2/2 1276d 70b7b3c055fd net/packet: fix slab-out-of-bounds access in packet_recvmsg()
KASAN: use-after-free Write in null_skcipher_crypt 24 1 1337d 1337d 2/2 1276d 9248694dac20 esp: Fix possible buffer overflow in ESP transformation
BUG: stack guard page was hit in file_open -1 C error 25 1294d 1373d 2/2 1294d 6f915dd2af92 ANDROID: incremental-fs: remove index and incomplete dir on umount
kernel BUG in notify_change -1 C error 3 1311d 1370d 2/2 1294d 6f915dd2af92 ANDROID: incremental-fs: remove index and incomplete dir on umount
KASAN: invalid-free in bitmap_free 22 C error done 1 1377d 1377d 2/2 1294d 7da349f07e45 net/packet: rx_owner_map depends on pg_vec
general protection fault in pending_reads_dispatch_ioctl 2 C error 4 1327d 1358d 2/2 1302d 4b1862e4fc69 ANDROID: incremental-fs: fix GPF in pending_reads_dispatch_ioctl
KASAN: use-after-free Read in hardware_disable 19 C error done 5 1333d 1336d 2/2 1302d 080dbe7e9b86 KVM: x86: Forcibly leave nested virt when SMM state is toggled
BUG: Dentry still in use in unmount -1 C done 1184 1304d 1317d 2/2 1303d 6f915dd2af92 ANDROID: incremental-fs: remove index and incomplete dir on umount
general protection fault in reweight_entity 2 C done 2 1314d 1372d 1/2 1304d 4c47eaa7c828 BACKPORT: sched/fair: Fix fault in reweight_entity
kernel BUG in kvm_mmu_notifier_invalidate_range_end -1 C error done 167 1341d 1428d 1/2 1304d 2fc2c66b9ce4 ANDROID: percpu-rwsem: enable percpu_sem destruction in atomic context
general protection fault in tipc_crypto_key_distr 2 1 1413d 1413d 1/2 1324d a7d91625863d tipc: check for null after calling kmemdup
KASAN: slab-out-of-bounds Write in legacy_parse_param 23 C error 1 1358d 1358d 1/2 1331d eadde287a62e vfs: fs_context: fix up param length parsing in legacy_parse_param
kernel BUG in cdc_ncm_fill_tx_frame -1 C error 40 1364d 1429d 1/2 1360d 385ffd31ebdb net: cdc_ncm: Allow for dwNtbOutMaxSize to be unset or zero
general protection fault in klist_iter_exit 2 C error 5 1378d 1415d 1/2 1369d c602863ad28e nfc: fix segfault in nfc_genl_dump_devices_done
KASAN: null-ptr-deref Write in prepare_to_wait 12 C error 2 1421d 1421d 1/2 1388d 748786564a35 Revert "io_uring: reinforce cancel on flush during exit"
general protection fault in scsi_queue_rq 2 C error 3 1396d 1421d 1/2 1388d 06cc8187dbb6 scsi: core: Remove command size deduction from scsi_setup_scsi_cmnd()
BUG: Dentry still in use [unmount of ramfs ramfs] -1 C error 3 1428d 1429d 1/2 1388d df4c5491ab63 ANDROID: Incremental fs: Fix dentry get/put imbalance on vfs_mkdir() failure
KASAN: use-after-free Write in ext4_stop_mmpd 24 C done 3 1425d 1426d 1/2 1410d b663890d8544 ext4: fix possible UAF when remounting r/o a mmp-protected file system
divide error in genelink_tx_fixup 2 C error 8 1421d 1426d 1/2 1410d 017718dfbb6f usbnet: fix error return code in usbnet_probe()
KASAN: invalid-free in io_commit_cqring 22 C error 3 1416d 1427d 1/2 1416d 3f2c12ec8a3f io_uring: don't take uring_lock during iowq cancel