syzbot


Out of 284 bugs, 239 were automatically obsoleted (43 due to revoked reproducers), 45 were invalidated by users.
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported
KASAN: use-after-free Read in ipt_do_table 19 4 96d 146d
SYZFAIL: SIGILL -1 9 99d 435d
KASAN: use-after-free Read in seq_printf (2) 19 1 101d 101d
SYZFAIL: event already set -1 syz error error 35 103d 1591d
BUG: soft lockup in sys_bpf (2) 1 1 103d 103d
KASAN: wild-memory-access Read in page_add_file_rmap 17 1 105d 105d
KASAN: use-after-free Write in l2tp_session_delete (3) 22 5 106d 222d
KASAN: wild-memory-access Read in page_remove_rmap 17 syz error 3 108d 143d
BUG: soft lockup in sys_clone3 1 1 108d 108d
KASAN: use-after-free Read in fast_dput (3) 19 27 99d 242d
BUG: soft lockup in bpf_prog_release 1 1 145d 145d
syzkaller: make host failed: failed to run ["make" "host" "ci" "agent"]: exit status 2 -1 2 78d 78d
BUG: soft lockup in sys_recvmsg (2) 1 C error 2 188d 367d
KASAN: use-after-free Read in hci_uart_write_work 19 2 177d 191d
KASAN: use-after-free Read in f2fs_release_page 19 2 180d 189d
BUG: soft lockup in rcu_core_si 1 1 182d 182d
KASAN: null-ptr-deref Write in incfs_kill_sb 12 1 191d 191d
SYZFAIL: failed to recv rpc -1 syz 1264 115d 657d
general protection fault in ip6_create_rt_rcu (2) 2 1 205d 205d
general protection fault in inherit_task_group 2 C 48 217d 799d
KASAN: use-after-free Read in seq_printf 19 15 213d 321d
KASAN: use-after-free Read in steam_send_report 19 3 214d 226d
BUG: soft lockup in sys_openat 1 1 216d 216d
KASAN: use-after-free Write in __ip6_del_rt 22 syz 11 218d 368d
KASAN: use-after-free Read in fib_flush 19 7 220d 321d
BUG: soft lockup in sys_clone (2) 1 1 230d 230d
BUG: soft lockup in sys_bind 1 1 235d 235d
SYZFAIL: mount(tmpfs) failed -1 1 237d 237d
general protection fault in nexthop_get_nhc_lookup 2 syz 20 208d 290d
general protection fault in find_match 2 50 206d 386d
KASAN: use-after-free Read in f2fs_inode_dirtied 19 C done 3 258d 308d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (9) -1 2 159d 159d
SYZFAIL: SIGSEGV (2) -1 3 250d 344d
kernel BUG in ext4_create_inline_data -1 C done 2 266d 327d
KASAN: slab-out-of-bounds Read in mon_bin_event 17 C done 60 243d 298d
BUG: scheduling while atomic in futex_wait_queue_me 5 1 268d 268d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (8) -1 2 190d 190d
KASAN: slab-out-of-bounds Write in try_module_get 21 11 285d 357d
BUG: soft lockup in sock_read_iter 1 2 287d 300d
KASAN: use-after-free Write in u32_destroy_key 22 1 291d 291d
general protection fault in lo_ioctl 2 1 303d 303d
KASAN: use-after-free Read in ext4_xattr_inode_dec_ref_all 19 C done 3 366d 394d
KASAN: use-after-free Read in tw_timer_handler 19 syz 10 285d 319d
SYZFAIL: SIGFPE (2) -1 8 317d 494d
KASAN: use-after-free Read in exact_lock (2) 19 172 285d 364d
KASAN: use-after-free Read in tcp_net_metrics_exit_batch 19 613 285d 324d
KASAN: use-after-free Read in inet_twsk_purge 19 74 288d 323d
general protection fault in tipc_conn_close (4) 2 2 331d 397d
general protection fault in __rt6_nh_dev_match 2 2 336d 347d
KASAN: slab-out-of-bounds Read in dentry_revalidate 17 2 341d 419d
BUG: using smp_processor_id() in preemptible code in usbnet_skb_return (2) 4 C error 2 355d 547d
general protection fault in ip6_create_rt_rcu 2 1 347d 347d
SYZFAIL: netlink_send_ext: short netlink write (2) -1 2 349d 414d
KASAN: use-after-free Write in l2tp_session_delete (2) 22 3 350d 450d
BUG: soft lockup in cleanup_net 1 1 352d 352d
BUG: soft lockup in input_repeat_key 1 C error 3 405d 914d
general protection fault in __loop_clr_fd 2 1 354d 354d
KASAN: use-after-free Read in fast_dput (2) 19 1 355d 355d
KASAN: use-after-free Write in ext4_insert_dentry 22 C done 25 369d 588d
kernel BUG in ext4_ind_map_blocks -1 2 360d 379d
BUG: soft lockup in addrconf_rs_timer (2) 1 C 265 341d 672d
kernel BUG in blk_mq_dispatch_rq_list (4) fat -1 C error 16 1027d 1279d
BUG: unable to handle kernel paging request in __gnet_stats_copy_basic 8 1 363d 363d
general protection fault in current_umask 2 C unreliable 5 375d 585d
KASAN: use-after-free Write in skb_release_data 22 1 367d 367d
KASAN: use-after-free Write in tipc_mon_reinit_self 22 1 390d 390d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (7) -1 2 312d 312d
SYZFAIL: open(/proc/self/ns/net) failed -1 1 403d 403d
BUG: soft lockup in sock_write_iter 1 1 409d 409d
KASAN: use-after-free Read in br_multicast_port_group_expired (2) 19 1 426d 426d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (6) -1 8 430d 502d
KASAN: stack-out-of-bounds Read in __xfrm_dst_hash 17 1 438d 438d
KASAN: use-after-free Read in exact_lock 19 53 416d 426d
kernel BUG in vlan_get_protocol_dgram -1 C done 6 468d 583d
KASAN: use-after-free Read in fast_dput 19 14 460d 650d
SYZFAIL: iptable checkpoint: socket(SOCK_STREAM, IPPROTO_TCP) failed -1 4 461d 549d
SYZFAIL: ebtable: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) -1 81 445d 633d
KASAN: use-after-free Read in lock_get_status 19 4 497d 514d
BUG: corrupted list in tipc_nametbl_translate 8 2 500d 522d
general protection fault in cleanup_bearer 19 C 14034 481d 484d
KASAN: out-of-bounds Read in __show_regs 17 1 503d 503d
BUG: soft lockup in br_multicast_group_expired (2) 1 1 506d 506d
BUG: Bad page map (3) -1 3 507d 652d
KASAN: use-after-free Write in virtio_transport_recv_pkt 22 C inconclusive 1 560d 752d
KASAN: use-after-free Read in bdev_try_to_free_page 19 1 512d 512d
KASAN: use-after-free Read in binder_release_work 19 C 154 494d 529d
BUG: soft lockup in mntput 1 1 531d 531d
SYZFAIL: handshake read failed -1 1 550d 550d
KASAN: use-after-free Write in l2tp_session_delete 22 2 551d 574d
kernel BUG in vlan_get_tci -1 2 555d 583d
SYZFAIL: netlink_send_ext: short netlink write -1 4 561d 650d
SYZFAIL: posix_spawn failed -1 9928 524d 661d
SYZFAIL: mmap of output file failed -1 20 549d 650d
SYZFAIL: child failed -1 syz error error 1 573d 1581d
KASAN: use-after-free Read in ext4_convert_inline_data_nolock 19 syz error 1 592d 725d
KASAN: use-after-free Read in __ext4_check_dir_entry 19 C error 2 597d 715d
BUG: corrupted list in p9_fd_cancelled (4) 8 4 577d 687d
BUG: unable to handle kernel paging request in __raw_callee_save___kvm_vcpu_is_preempted 8 1 586d 586d
SYZFAIL: mkdir(syz-tmp) failed -1 299 548d 660d
SYZFAIL: bad allocate request -1 148 548d 658d
KASAN: use-after-free Read in wg_queue_enqueue_per_peer_tx 19 2 589d 593d
SYZFAIL: ShmemBuilder: too large output offset -1 51 549d 657d
general protection fault in steam_send_report 2 1 590d 590d
SYZFAIL: can't reallocate -1 1 593d 593d
SYZFAIL: SIGSEGV -1 841 555d 669d
KASAN: use-after-free Write in __tlb_remove_page_size 22 1 596d 596d
SYZFAIL: SIGFPE -1 2 598d 643d
general protection fault in free_swap_cache 2 1 607d 607d
KASAN: stack-out-of-bounds Read in __show_regs 17 1 609d 609d
BUG: soft lockup in br_multicast_port_group_expired 1 1 610d 610d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (5) -1 30 579d 698d
KASAN: use-after-free Read in br_multicast_port_group_expired 19 1 613d 613d
BUG: soft lockup in net_rx_action 1 2 613d 625d
BUG: soft lockup in __run_timers 1 2 613d 682d
BUG: soft lockup in sys_sendmmsg 1 2 614d 614d
KASAN: use-after-free Read in usb_udc_uevent (3) 19 1 615d 615d
BUG: soft lockup in __netif_receive_skb_core 1 1 617d 617d
KASAN: use-after-free Read in unaccount_page_cache_page (2) 19 1 620d 620d
KASAN: use-after-free Read in worker_thread 19 1 622d 622d
BUG: soft lockup in wg_expired_send_persistent_keepalive 1 1 625d 625d
BUG: soft lockup in br_multicast_group_expired 1 1 626d 626d
BUG: soft lockup in ip_list_rcv 1 1 627d 627d
BUG: soft lockup in run_rebalance_domains 1 1 628d 628d
BUG: soft lockup in ipv6_rcv 1 3 632d 649d
KASAN: null-ptr-deref Write in __kernfs_remove 12 1 635d 635d
BUG: soft lockup in vfork 1 1 637d 637d
BUG: soft lockup in sys_exit_group 1 1 643d 643d
SYZFAIL: bad thread state in completion -1 syz error error 5 1231d 1573d
KASAN: use-after-free Read in dev_get_by_index_rcu 19 1 652d 652d
BUG: soft lockup in sys_clone 1 1 656d 656d
BUG: soft lockup in sys_recvmsg 1 4 657d 736d
SYZFAIL: control pipe read failed -1 1 660d 660d
SYZFAIL: too many calls in output -1 2 665d 665d
BUG: soft lockup in sys_bpf 1 2 670d 674d
BUG: unable to handle kernel paging request in swake_up_locked 8 C inconclusive 1 688d 720d
KASAN: use-after-free Read in macsec_get_iflink 19 syz error 2 693d 820d
KASAN: use-after-free Read in wg_packet_send_staged_packets 19 1 719d 719d
go runtime error 2 22 721d 999d
SYZFAIL: tun read failed -1 syz error error 123 646d 1645d
SYZFAIL: proc resp pipe read failed -1 73 654d 670d
general protection fault in fq_codel_enqueue (2) 2 2 734d 735d
panic: runtime error: floating point error [recovered] 2 1 741d 741d
android13-5.10-lts build error -1 44 704d 724d
KASAN: use-after-free Read in f2fs_write_end_io 19 1 748d 748d
syzkaller: failed to copy syzkaller: file bin/linux_arm64/syz-fuzzer does not exist -1 2 670d 670d
BUG: unable to handle kernel paging request in fuse_dev_do_write (3) 8 1 762d 762d
KASAN: use-after-free Read in unaccount_page_cache_page 19 150 734d 1262d
general protection fault in mnt_want_write (2) 2 1 800d 800d
BUG: corrupted list in p9_fd_cancelled (3) 8 C done unreliable 38 818d 903d
KASAN: stack-out-of-bounds Read in update_stack_state 17 1 813d 813d
panic: replaceArg: group fields don't match: NUM/NUM 2 13 777d 778d
general protection fault in skb_segment 2 C done 1 853d 867d
KASAN: use-after-free Read in key_task_permission 19 1 851d 851d
android13-5.10-lts test error: lost connection to test machine -1 1 857d 857d
BUG: unable to handle kernel paging request in fuse_dev_do_write (2) 8 1 882d 882d
KASAN: null-ptr-deref Write in backing_data_changed 12 C done 3 907d 979d
general protection fault in __writeback_single_inode 2 1 924d 924d
BUG: Bad page map (2) -1 1 926d 926d
KASAN: use-after-free Read in locked_inode_to_wb_and_lock_list 19 2 930d 961d
general protection fault in tipc_conn_close (3) 2 1 953d 953d
kernel BUG in __block_commit_write -1 1 955d 955d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (4) -1 20 964d 1166d
corrupted report (2) -1 6 965d 1043d
BUG: soft lockup in wg_packet_tx_worker 1 5 975d 1024d
BUG: soft lockup in neigh_timer_handler 1 2 975d 983d
BUG: soft lockup in wg_packet_handshake_send_worker 1 6 982d 1022d
BUG: soft lockup in sys_sendto 1 2 983d 1020d
kernel panic: EXT4-fs (device loop2): panic forced after error 2 1 987d 987d
BUG: soft lockup in tc_modify_qdisc 1 C done done 314 970d 1024d
BUG: soft lockup in addrconf_rs_timer 1 2 999d 1017d
fatal error: fault -1 1 1006d 1006d
BUG: using smp_processor_id() in preemptible code in usbnet_skb_return 4 syz error error 2 1008d 1489d
fatal error: Connection to IP closed by remote host. -1 3 1023d 1146d
BUG: stack guard page was hit in corrupted (23) -1 syz error error 1 1047d 1047d
KASAN: use-after-free Read in usb_udc_uevent (2) 19 1 1045d 1045d
kernel BUG in ext4_expand_extra_isize_ea -1 C done done 5 1058d 1072d
BUG: unable to handle kernel paging request in fuse_dev_do_write 8 18 1018d 1083d
KASAN: global-out-of-bounds Read in f2fs_release_page 19 2 1056d 1088d
SYZFAIL: clock_gettime failed -1 syz error error 5 1063d 1589d
KASAN: use-after-free Read in f2fs_remove_dirty_inode 19 C error error 4 1077d 1134d
general protection fault in do_swap_page 2 246 1047d 1484d
kernel panic: EXT4-fs (device loop3): panic forced after error 2 1 1101d 1101d
general protection fault in kernfs_name_hash (6) 2 C error error 22 1131d 1297d
kernel panic: EXT4-fs (device loop4): panic forced after error 2 1 1104d 1104d
android12-5.10-lts build error (2) -1 220 1087d 1188d
VFS: Busy inodes after unmount (use-after-free) 2 C done inconclusive 1 1155d 1155d
general protection fault in filp_close 2 1 1128d 1128d
BUG: unable to handle kernel paging request in z_erofs_decompress_pcluster erofs 8 C error error 3 1172d 1270d
BUG: Bad page map -1 1 1145d 1145d
KASAN: use-after-free Read in hci_cmd_timeout 19 1 1152d 1152d
syzkaller: make host failed: failed to run ["make" "host" "ci"]: exit status 2 -1 2 1156d 1156d
kernel panic: corrupted stack end in sys_sendmmsg 2 syz error error 14 1170d 1196d
KASAN: use-after-free Read in fuse_copy_one 19 C error inconclusive 1 1257d 1257d
kernel BUG in jbd2_journal_get_create_access -1 syz error error 1 1264d 1264d
KASAN: stack-out-of-bounds Read in xfrm_state_find (2) 17 syz error error 1 1210d 1210d
BUG: scheduling while atomic in f2fs_register_inmem_page 5 C error inconclusive 1 1136d 1136d
KASAN: use-after-free Read in usb_udc_uevent 19 2 1170d 1193d
general protection fault in f2fs_release_page f2fs 19 3 1186d 1228d
general protection fault in tipc_conn_close (2) 2 6 1227d 1313d
KASAN: use-after-free Read in xpad_presence_work 19 1 1272d 1272d
kernel panic: EXT4-fs (device loop0): panic forced after error ext4 2 C 1 1218d 1218d
divide error in netem_enqueue (2) 2 1 1318d 1318d
KASAN: vmalloc-out-of-bounds Read in init_srcu_struct_fields (2) 17 1 1337d 1337d
panic: runtime error: floating point error 2 1 1341d 1341d
KASAN: use-after-free Read in __cgroup_bpf_attach (3) 19 1 1356d 1356d
KASAN: use-after-free Read in __tcf_qdisc_find 19 1 1357d 1357d
KASAN: invalid-free in selinux_tun_dev_free_security 24 14 1350d 1360d
general protection fault in fq_codel_enqueue 2 1 1368d 1368d
BUG: corrupted list in pwq_dec_nr_in_flight (2) 8 1 1370d 1370d
general protection fault in tcp_sk_exit (2) 2 1 1378d 1378d
KASAN: use-after-free Read in css_free_rwork_fn (2) 19 2 1383d 1467d
android12-5.10-lts-superproject build error -1 24 1391d 1417d
panic: bad group arg size NUM, should be <= NUM for &prog.GroupArg{ArgCommon:prog.ArgCommon{ref:0x2de, dir:0x0}, Inner:[ 2 23 1304d 1305d
general protection fault in ext4_xattr_set_entry 2 C error 2 1311d 1325d
kernel BUG in ext4_es_cache_extent -1 C error 1 1336d 1336d
BUG: unable to handle kernel paging request in reuseport_select_sock 8 1 1410d 1410d
BUG: stack guard page was hit in corrupted (22) -1 syz done done 1 1447d 1447d
kernel panic: corrupted stack end in sys_futex 2 syz error error 1 1474d 1474d
KASAN: use-after-free Read in f2fs_available_free_memory 19 syz error error 7 1533d 1633d
BUG: unable to handle kernel NULL pointer dereference in ipv6_rcv 10 syz 1 1476d 1476d
divide error in netem_enqueue 2 2 1426d 1437d
general protection fault in tipc_conn_close 2 1 1442d 1442d
BUG: stack guard page was hit in file_open (11) -1 4 1444d 1446d
BUG: stack guard page was hit in sys_mkdir (5) -1 1 1446d 1446d
BUG: stack guard page was hit in sys_creat (10) -1 1 1447d 1447d
kernel BUG in collapse_huge_page -1 1 1453d 1453d
general protection fault in __device_attach 2 1 1456d 1456d
kernel BUG in blk_mq_dispatch_rq_list -1 C error 16 1375d 1574d
KASAN: use-after-free Read in __cgroup_bpf_attach (2) 19 1 1464d 1464d
KASAN: use-after-free Read in vcs_write 19 1 1465d 1465d
SYZFAIL: failed to mkdtemp -1 15 1465d 1633d
BUG: corrupted list in pwq_dec_nr_in_flight 8 1 1465d 1465d
corrupted report -1 289 1444d 1593d
BUG: corrupted list in p9_fd_cancelled (2) 8 3 1475d 1510d
general protection fault in tcp_sk_exit 2 1 1478d 1478d
SYZFAIL: tun: ioctl(TUNSETIFF) failed -1 7 1478d 1637d
kernel panic: corrupted stack end in file_open 2 1 1481d 1481d
general protection fault in icmpv6_sk_exit 2 1 1487d 1487d
general protection fault in mnt_want_write 2 1 1493d 1493d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (3) -1 3 1405d 1405d
general protection fault in del_gendisk (3) 2 C done 1 1434d 1434d
KASAN: use-after-free Read in io_uring_cancel_task_requests 19 1 1520d 1520d
KASAN: slab-out-of-bounds Read in fuse_inode_eq 17 5 1520d 1528d
KASAN: use-after-free Write in dir_mkdir 22 1 1527d 1527d
KASAN: null-ptr-deref Write in incfs_fresh_pending_reads_exist 12 1 1534d 1534d
general protection fault in kernfs_name_hash 2 C done 2 1468d 1468d
kernel BUG in notify_change (2) -1 C error 2 1462d 1462d
general protection fault in del_gendisk (2) 2 C error 2 1459d 1459d
SYZFAIL: sandbox fork failed -1 3 1541d 1625d
KASAN: vmalloc-out-of-bounds Read in init_srcu_struct_fields 17 1 1581d 1581d
SYZFAIL: bad thread state in schedule -1 1 1561d 1561d
KASAN: stack-out-of-bounds Read in iov_iter_revert 17 C error 10 1490d 1643d
SYZFAIL: invalid syscall number -1 2 1580d 1602d
kernel BUG in ext4_free_blocks -1 3 1594d 1627d
general protection fault in io_prep_async_work 2 1 1563d 1563d
KASAN: use-after-free Read in io_kill_linked_timeout 19 C error 14 1512d 1560d
KASAN: use-after-free Read in __fdget_raw 19 C error error 1 1555d 1555d
KASAN: invalid-free in io_dismantle_req 24 C error 7 1522d 1516d
general protection fault in del_gendisk 2 C error 1 1522d 1629d
BUG: corrupted list in p9_fd_cancelled 8 1 1602d 1602d
KASAN: use-after-free Read in task_work_run 19 2 1636d 1635d
KASAN: use-after-free Write in chroot_fs_refs 22 2 1633d 1635d
BUG: stack guard page was hit in sys_fsetxattr -1 1 1546d 1546d
BUG: stack guard page was hit in sys_lsetxattr -1 C error inconclusive 2 1552d 1552d
BUG: stack guard page was hit in sys_setxattr -1 C error 6 1549d 1572d
BUG: stack guard page was hit in corrupted -1 C error 3 1537d 1572d
BUG: stack guard page was hit in sys_unlink -1 2 1572d 1572d
BUG: stack guard page was hit in sys_creat -1 C error done 7 1519d 1583d
BUG: stack guard page was hit in sys_lchown -1 C error 4 1540d 1589d
BUG: stack guard page was hit in sys_chdir -1 5 1517d 1589d
KASAN: use-after-free Read in css_free_rwork_fn 19 1 1609d 1609d
KASAN: use-after-free Read in rcu_cblist_dequeue 19 1 1641d 1635d
BUG: workqueue lockup -1 C error 25 1546d 1644d
KASAN: use-after-free Read in __cgroup_bpf_attach 19 2 1615d 1617d
KASAN: use-after-free Read in dev_uevent 19 1 1619d 1619d
general protection fault in bdev_read_page 2 1 1620d 1620d
SYZFAIL: out of opened kcov threads -1 47 1596d 1597d
SYZFAIL: tun: can't open /dev/net/tun -1 1 1630d 1630d
KASAN: use-after-free Read in compute_effective_progs 19 1 1626d 1626d
KASAN: stack-out-of-bounds Read in xfrm_state_find 17 1 1630d 1630d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (2) -1 1 1552d 1552d
android12-5.10-lts test error: UBSAN: object-size-mismatch in wg_xmit -1 69 1606d 1633d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 -1 1 1625d 1625d
android12-5.10-lts build error -1 1 1647d 1647d