syzbot


Out of 187 bugs, 148 were automatically obsoleted (20 due to revoked reproducers), 39 were invalidated by users.
Title Repro Cause bisect Fix bisect Count Last Reported
BUG: unable to handle kernel paging request in __raw_callee_save___kvm_vcpu_is_preempted 1 97d 97d
SYZFAIL: mkdir(syz-tmp) failed 299 58d 170d
SYZFAIL: bad allocate request 148 58d 169d
KASAN: use-after-free Read in wg_queue_enqueue_per_peer_tx 2 99d 103d
SYZFAIL: ShmemBuilder: too large output offset 51 59d 167d
general protection fault in steam_send_report 1 100d 100d
SYZFAIL: can't reallocate 1 103d 103d
SYZFAIL: SIGSEGV 841 65d 179d
KASAN: use-after-free Write in __tlb_remove_page_size 1 107d 107d
SYZFAIL: SIGFPE 2 108d 153d
general protection fault in free_swap_cache 1 118d 118d
KASAN: stack-out-of-bounds Read in __show_regs 1 119d 119d
BUG: soft lockup in br_multicast_port_group_expired 1 120d 120d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (5) 30 89d 208d
KASAN: use-after-free Read in br_multicast_port_group_expired 1 123d 123d
BUG: soft lockup in net_rx_action 2 123d 135d
BUG: soft lockup in __run_timers 2 124d 192d
BUG: soft lockup in sys_sendmmsg 2 125d 125d
KASAN: use-after-free Read in usb_udc_uevent (3) 1 126d 126d
BUG: soft lockup in __netif_receive_skb_core 1 127d 127d
KASAN: use-after-free Read in unaccount_page_cache_page (2) 1 130d 130d
KASAN: use-after-free Read in worker_thread 1 132d 132d
BUG: soft lockup in wg_expired_send_persistent_keepalive 1 136d 136d
BUG: soft lockup in br_multicast_group_expired 1 137d 137d
BUG: soft lockup in ip_list_rcv 1 137d 137d
BUG: soft lockup in run_rebalance_domains 1 138d 138d
BUG: soft lockup in ipv6_rcv 3 142d 159d
KASAN: null-ptr-deref Write in __kernfs_remove 1 145d 145d
BUG: soft lockup in vfork 1 147d 147d
BUG: soft lockup in sys_exit_group 1 153d 153d
SYZFAIL: bad thread state in completion syz error error 5 742d 1083d
KASAN: use-after-free Read in dev_get_by_index_rcu 1 163d 163d
BUG: soft lockup in sys_clone 1 166d 166d
BUG: soft lockup in sys_recvmsg 4 167d 246d
SYZFAIL: control pipe read failed 1 170d 170d
SYZFAIL: too many calls in output 2 175d 175d
BUG: soft lockup in sys_bpf 2 180d 184d
BUG: unable to handle kernel paging request in swake_up_locked C inconclusive 1 198d 230d
KASAN: use-after-free Read in macsec_get_iflink syz error 2 203d 330d
KASAN: use-after-free Read in wg_packet_send_staged_packets 1 229d 229d
go runtime error 22 231d 510d
SYZFAIL: tun read failed syz error error 123 157d 1155d
SYZFAIL: proc resp pipe read failed 73 164d 180d
general protection fault in fq_codel_enqueue (2) 2 244d 246d
panic: runtime error: floating point error [recovered] 1 251d 251d
android13-5.10-lts build error 44 214d 234d
KASAN: use-after-free Read in f2fs_write_end_io 1 259d 259d
syzkaller: failed to copy syzkaller: file bin/linux_arm64/syz-fuzzer does not exist 2 180d 180d
BUG: unable to handle kernel paging request in fuse_dev_do_write (3) 1 272d 272d
KASAN: use-after-free Read in unaccount_page_cache_page 150 244d 773d
general protection fault in mnt_want_write (2) 1 310d 310d
BUG: corrupted list in p9_fd_cancelled (3) C done unreliable 38 328d 413d
KASAN: stack-out-of-bounds Read in update_stack_state 1 324d 324d
panic: replaceArg: group fields don't match: NUM/NUM 13 288d 288d
general protection fault in skb_segment C done 1 363d 377d
KASAN: use-after-free Read in key_task_permission 1 361d 361d
android13-5.10-lts test error: lost connection to test machine 1 367d 367d
BUG: unable to handle kernel paging request in fuse_dev_do_write (2) 1 392d 392d
KASAN: null-ptr-deref Write in backing_data_changed C done 3 417d 489d
general protection fault in __writeback_single_inode 1 435d 435d
BUG: Bad page map (2) 1 437d 437d
KASAN: use-after-free Read in locked_inode_to_wb_and_lock_list 2 441d 471d
general protection fault in tipc_conn_close (3) 1 463d 463d
kernel BUG in __block_commit_write 1 465d 465d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (4) 20 474d 676d
corrupted report (2) 6 475d 553d
BUG: soft lockup in wg_packet_tx_worker 5 485d 534d
BUG: soft lockup in neigh_timer_handler 2 485d 494d
BUG: soft lockup in wg_packet_handshake_send_worker 6 493d 533d
BUG: soft lockup in sys_sendto 2 493d 530d
kernel panic: EXT4-fs (device loop2): panic forced after error 1 497d 497d
BUG: soft lockup in tc_modify_qdisc C done done 314 480d 534d
BUG: soft lockup in addrconf_rs_timer 2 510d 528d
fatal error: fault 1 516d 516d
BUG: using smp_processor_id() in preemptible code in usbnet_skb_return syz error error 2 518d 999d
fatal error: Connection to IP closed by remote host. 3 533d 656d
BUG: stack guard page was hit in corrupted (23) syz error error 1 558d 558d
KASAN: use-after-free Read in usb_udc_uevent (2) 1 555d 555d
kernel BUG in ext4_expand_extra_isize_ea C done done 5 568d 582d
BUG: unable to handle kernel paging request in fuse_dev_do_write 18 528d 593d
KASAN: global-out-of-bounds Read in f2fs_release_page 2 566d 598d
SYZFAIL: clock_gettime failed syz error error 5 573d 1099d
KASAN: use-after-free Read in f2fs_remove_dirty_inode C error error 4 587d 644d
general protection fault in do_swap_page 246 557d 995d
kernel panic: EXT4-fs (device loop3): panic forced after error 1 611d 611d
general protection fault in kernfs_name_hash (6) C error error 22 641d 807d
kernel panic: EXT4-fs (device loop4): panic forced after error 1 614d 614d
android12-5.10-lts build error (2) 220 597d 698d
VFS: Busy inodes after unmount (use-after-free) C done inconclusive 1 665d 665d
general protection fault in filp_close 1 638d 638d
BUG: unable to handle kernel paging request in z_erofs_decompress_pcluster erofs C error error 3 683d 781d
BUG: Bad page map 1 655d 655d
KASAN: use-after-free Read in hci_cmd_timeout 1 662d 662d
syzkaller: make host failed: failed to run ["make" "host" "ci"]: exit status 2 2 666d 666d
kernel panic: corrupted stack end in sys_sendmmsg syz error error 14 680d 706d
KASAN: use-after-free Read in fuse_copy_one C error inconclusive 1 767d 767d
kernel BUG in jbd2_journal_get_create_access syz error error 1 775d 775d
KASAN: stack-out-of-bounds Read in xfrm_state_find (2) syz error error 1 721d 721d
BUG: scheduling while atomic in f2fs_register_inmem_page C error inconclusive 1 647d 647d
KASAN: use-after-free Read in usb_udc_uevent 2 680d 703d
general protection fault in f2fs_release_page f2fs 3 696d 738d
general protection fault in tipc_conn_close (2) 6 737d 823d
KASAN: use-after-free Read in xpad_presence_work 1 782d 782d
kernel panic: EXT4-fs (device loop0): panic forced after error ext4 C 1 728d 728d
divide error in netem_enqueue (2) 1 829d 829d
KASAN: vmalloc-out-of-bounds Read in init_srcu_struct_fields (2) 1 847d 847d
panic: runtime error: floating point error 1 852d 852d
KASAN: use-after-free Read in __cgroup_bpf_attach (3) 1 866d 866d
KASAN: use-after-free Read in __tcf_qdisc_find 1 867d 867d
KASAN: invalid-free in selinux_tun_dev_free_security 14 861d 870d
general protection fault in fq_codel_enqueue 1 878d 878d
BUG: corrupted list in pwq_dec_nr_in_flight (2) 1 881d 881d
general protection fault in tcp_sk_exit (2) 1 889d 889d
KASAN: use-after-free Read in css_free_rwork_fn (2) 2 893d 978d
android12-5.10-lts-superproject build error 24 901d 927d
panic: bad group arg size NUM, should be <= NUM for &prog.GroupArg{ArgCommon:prog.ArgCommon{ref:0x2de, dir:0x0}, Inner:[ 23 814d 816d
general protection fault in ext4_xattr_set_entry C error 2 821d 835d
kernel BUG in ext4_es_cache_extent C error 1 846d 846d
BUG: unable to handle kernel paging request in reuseport_select_sock 1 920d 920d
BUG: stack guard page was hit in corrupted (22) syz done done 1 957d 957d
kernel panic: corrupted stack end in sys_futex syz error error 1 984d 984d
KASAN: use-after-free Read in f2fs_available_free_memory syz error error 7 1044d 1143d
BUG: unable to handle kernel NULL pointer dereference in ipv6_rcv syz 1 986d 986d
divide error in netem_enqueue 2 936d 947d
general protection fault in tipc_conn_close 1 952d 952d
BUG: stack guard page was hit in file_open (11) 4 954d 957d
BUG: stack guard page was hit in sys_mkdir (5) 1 956d 956d
BUG: stack guard page was hit in sys_creat (10) 1 957d 957d
kernel BUG in collapse_huge_page 1 964d 964d
general protection fault in __device_attach 1 966d 966d
kernel BUG in blk_mq_dispatch_rq_list C error 16 885d 1085d
KASAN: use-after-free Read in __cgroup_bpf_attach (2) 1 974d 974d
KASAN: use-after-free Read in vcs_write 1 975d 975d
SYZFAIL: failed to mkdtemp 15 976d 1143d
BUG: corrupted list in pwq_dec_nr_in_flight 1 976d 976d
corrupted report 289 954d 1104d
BUG: corrupted list in p9_fd_cancelled (2) 3 985d 1021d
general protection fault in tcp_sk_exit 1 988d 988d
SYZFAIL: tun: ioctl(TUNSETIFF) failed 7 988d 1147d
kernel panic: corrupted stack end in file_open 1 991d 991d
general protection fault in icmpv6_sk_exit 1 997d 997d
general protection fault in mnt_want_write 1 1003d 1003d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (3) 3 915d 915d
general protection fault in del_gendisk (3) C done 1 945d 945d
KASAN: use-after-free Read in io_uring_cancel_task_requests 1 1030d 1030d
KASAN: slab-out-of-bounds Read in fuse_inode_eq 5 1031d 1038d
KASAN: use-after-free Write in dir_mkdir 1 1037d 1037d
KASAN: null-ptr-deref Write in incfs_fresh_pending_reads_exist 1 1044d 1044d
general protection fault in kernfs_name_hash C done 2 979d 979d
kernel BUG in notify_change (2) C error 2 972d 972d
general protection fault in del_gendisk (2) C error 2 969d 970d
SYZFAIL: sandbox fork failed 3 1052d 1135d
KASAN: vmalloc-out-of-bounds Read in init_srcu_struct_fields 1 1091d 1091d
SYZFAIL: bad thread state in schedule 1 1071d 1071d
KASAN: stack-out-of-bounds Read in iov_iter_revert C error 10 1000d 1153d
SYZFAIL: invalid syscall number 2 1090d 1112d
kernel BUG in ext4_free_blocks 3 1104d 1137d
general protection fault in io_prep_async_work 1 1074d 1074d
KASAN: use-after-free Read in io_kill_linked_timeout C error 14 1022d 1070d
KASAN: use-after-free Read in __fdget_raw C error error 1 1065d 1065d
KASAN: invalid-free in io_dismantle_req C error 7 1032d 1027d
general protection fault in del_gendisk C error 1 1032d 1139d
BUG: corrupted list in p9_fd_cancelled 1 1112d 1112d
KASAN: use-after-free Read in task_work_run 2 1146d 1145d
KASAN: use-after-free Write in chroot_fs_refs 2 1144d 1145d
BUG: stack guard page was hit in sys_fsetxattr 1 1056d 1056d
BUG: stack guard page was hit in sys_lsetxattr C error inconclusive 2 1062d 1062d
BUG: stack guard page was hit in sys_setxattr C error 6 1059d 1082d
BUG: stack guard page was hit in corrupted C error 3 1047d 1082d
BUG: stack guard page was hit in sys_unlink 2 1082d 1082d
BUG: stack guard page was hit in sys_creat C error done 7 1029d 1094d
BUG: stack guard page was hit in sys_lchown C error 4 1050d 1099d
BUG: stack guard page was hit in sys_chdir 5 1028d 1100d
KASAN: use-after-free Read in css_free_rwork_fn 1 1119d 1119d
KASAN: use-after-free Read in rcu_cblist_dequeue 1 1151d 1145d
BUG: workqueue lockup C error 25 1056d 1154d
KASAN: use-after-free Read in __cgroup_bpf_attach 2 1125d 1127d
KASAN: use-after-free Read in dev_uevent 1 1130d 1130d
general protection fault in bdev_read_page 1 1131d 1131d
SYZFAIL: out of opened kcov threads 47 1107d 1108d
SYZFAIL: tun: can't open /dev/net/tun 1 1140d 1140d
KASAN: use-after-free Read in compute_effective_progs 1 1136d 1136d
KASAN: stack-out-of-bounds Read in xfrm_state_find 1 1140d 1140d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (2) 1 1062d 1062d
android12-5.10-lts test error: UBSAN: object-size-mismatch in wg_xmit 69 1116d 1143d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 1 1135d 1135d
android12-5.10-lts build error 1 1157d 1157d