syzbot


Out of 150 bugs, 111 were automatically obsoleted (19 due to revoked reproducers), 39 were invalidated by users.
Title Repro Cause bisect Fix bisect Count Last Reported
BUG: unable to handle kernel paging request in swake_up_locked C inconclusive 1 100d 131d
KASAN: use-after-free Read in macsec_get_iflink syz error 2 105d 231d
KASAN: use-after-free Read in wg_packet_send_staged_packets 1 130d 130d
go runtime error 22 132d 411d
SYZFAIL: tun read failed syz error error 123 58d 1057d
SYZFAIL: proc resp pipe read failed 73 65d 81d
general protection fault in fq_codel_enqueue (2) 2 145d 147d
panic: runtime error: floating point error [recovered] 1 153d 153d
android13-5.10-lts build error 44 116d 136d
KASAN: use-after-free Read in f2fs_write_end_io 1 160d 160d
syzkaller: failed to copy syzkaller: file bin/linux_arm64/syz-fuzzer does not exist 2 82d 82d
BUG: unable to handle kernel paging request in fuse_dev_do_write (3) 1 174d 174d
KASAN: use-after-free Read in unaccount_page_cache_page 150 145d 674d
general protection fault in mnt_want_write (2) 1 212d 212d
BUG: corrupted list in p9_fd_cancelled (3) C done unreliable 38 229d 314d
KASAN: stack-out-of-bounds Read in update_stack_state 1 225d 225d
panic: replaceArg: group fields don't match: NUM/NUM 13 189d 189d
general protection fault in skb_segment C done 1 264d 278d
KASAN: use-after-free Read in key_task_permission 1 263d 263d
android13-5.10-lts test error: lost connection to test machine 1 269d 269d
BUG: unable to handle kernel paging request in fuse_dev_do_write (2) 1 294d 294d
KASAN: null-ptr-deref Write in backing_data_changed C done 3 318d 391d
general protection fault in __writeback_single_inode 1 336d 336d
BUG: Bad page map (2) 1 338d 338d
KASAN: use-after-free Read in locked_inode_to_wb_and_lock_list 2 342d 372d
general protection fault in tipc_conn_close (3) 1 365d 365d
kernel BUG in __block_commit_write 1 367d 367d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (4) 20 375d 577d
corrupted report (2) 6 376d 454d
BUG: soft lockup in wg_packet_tx_worker 5 386d 435d
BUG: soft lockup in neigh_timer_handler 2 387d 395d
BUG: soft lockup in wg_packet_handshake_send_worker 6 394d 434d
BUG: soft lockup in sys_sendto 2 394d 431d
kernel panic: EXT4-fs (device loop2): panic forced after error 1 398d 398d
BUG: soft lockup in tc_modify_qdisc C done done 314 382d 435d
BUG: soft lockup in addrconf_rs_timer 2 411d 429d
fatal error: fault 1 418d 418d
BUG: using smp_processor_id() in preemptible code in usbnet_skb_return syz error error 2 419d 900d
fatal error: Connection to IP closed by remote host. 3 434d 558d
BUG: stack guard page was hit in corrupted (23) syz error error 1 459d 459d
KASAN: use-after-free Read in usb_udc_uevent (2) 1 456d 456d
kernel BUG in ext4_expand_extra_isize_ea C done done 5 469d 483d
BUG: unable to handle kernel paging request in fuse_dev_do_write 18 429d 495d
KASAN: global-out-of-bounds Read in f2fs_release_page 2 467d 499d
SYZFAIL: clock_gettime failed syz error error 5 475d 1000d
KASAN: use-after-free Read in f2fs_remove_dirty_inode C error error 4 489d 545d
general protection fault in do_swap_page 246 459d 896d
kernel panic: EXT4-fs (device loop3): panic forced after error 1 512d 512d
general protection fault in kernfs_name_hash (6) C error error 22 542d 708d
kernel panic: EXT4-fs (device loop4): panic forced after error 1 516d 516d
android12-5.10-lts build error (2) 220 499d 599d
VFS: Busy inodes after unmount (use-after-free) C done inconclusive 1 566d 566d
general protection fault in filp_close 1 539d 539d
BUG: unable to handle kernel paging request in z_erofs_decompress_pcluster erofs C error error 3 584d 682d
BUG: Bad page map 1 556d 556d
KASAN: use-after-free Read in hci_cmd_timeout 1 563d 563d
syzkaller: make host failed: failed to run ["make" "host" "ci"]: exit status 2 2 567d 567d
kernel panic: corrupted stack end in sys_sendmmsg syz error error 14 581d 607d
KASAN: use-after-free Read in fuse_copy_one C error inconclusive 1 669d 669d
kernel BUG in jbd2_journal_get_create_access syz error error 1 676d 676d
KASAN: stack-out-of-bounds Read in xfrm_state_find (2) syz error error 1 622d 622d
BUG: scheduling while atomic in f2fs_register_inmem_page C error inconclusive 1 548d 548d
KASAN: use-after-free Read in usb_udc_uevent 2 581d 605d
general protection fault in f2fs_release_page f2fs 3 597d 639d
general protection fault in tipc_conn_close (2) 6 639d 725d
KASAN: use-after-free Read in xpad_presence_work 1 684d 684d
kernel panic: EXT4-fs (device loop0): panic forced after error ext4 C 1 629d 629d
divide error in netem_enqueue (2) 1 730d 730d
KASAN: vmalloc-out-of-bounds Read in init_srcu_struct_fields (2) 1 748d 748d
panic: runtime error: floating point error 1 753d 753d
KASAN: use-after-free Read in __cgroup_bpf_attach (3) 1 768d 768d
KASAN: use-after-free Read in __tcf_qdisc_find 1 768d 768d
KASAN: invalid-free in selinux_tun_dev_free_security 14 762d 771d
general protection fault in fq_codel_enqueue 1 779d 779d
BUG: corrupted list in pwq_dec_nr_in_flight (2) 1 782d 782d
general protection fault in tcp_sk_exit (2) 1 790d 790d
KASAN: use-after-free Read in css_free_rwork_fn (2) 2 794d 879d
android12-5.10-lts-superproject build error 24 802d 828d
panic: bad group arg size NUM, should be <= NUM for &prog.GroupArg{ArgCommon:prog.ArgCommon{ref:0x2de, dir:0x0}, Inner:[ 23 715d 717d
general protection fault in ext4_xattr_set_entry C error 2 722d 736d
kernel BUG in ext4_es_cache_extent C error 1 748d 748d
BUG: unable to handle kernel paging request in reuseport_select_sock 1 822d 822d
BUG: stack guard page was hit in corrupted (22) syz done done 1 858d 858d
kernel panic: corrupted stack end in sys_futex syz error error 1 885d 885d
KASAN: use-after-free Read in f2fs_available_free_memory syz error error 7 945d 1045d
BUG: unable to handle kernel NULL pointer dereference in ipv6_rcv syz 1 888d 888d
divide error in netem_enqueue 2 838d 848d
general protection fault in tipc_conn_close 1 854d 854d
BUG: stack guard page was hit in file_open (11) 4 856d 858d
BUG: stack guard page was hit in sys_mkdir (5) 1 857d 857d
BUG: stack guard page was hit in sys_creat (10) 1 858d 858d
kernel BUG in collapse_huge_page 1 865d 865d
general protection fault in __device_attach 1 867d 867d
kernel BUG in blk_mq_dispatch_rq_list C error 16 786d 986d
KASAN: use-after-free Read in __cgroup_bpf_attach (2) 1 875d 875d
KASAN: use-after-free Read in vcs_write 1 876d 876d
SYZFAIL: failed to mkdtemp 15 877d 1045d
BUG: corrupted list in pwq_dec_nr_in_flight 1 877d 877d
corrupted report 289 856d 1005d
BUG: corrupted list in p9_fd_cancelled (2) 3 887d 922d
general protection fault in tcp_sk_exit 1 889d 889d
SYZFAIL: tun: ioctl(TUNSETIFF) failed 7 889d 1048d
kernel panic: corrupted stack end in file_open 1 892d 892d
general protection fault in icmpv6_sk_exit 1 898d 898d
general protection fault in mnt_want_write 1 905d 905d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (3) 3 817d 817d
general protection fault in del_gendisk (3) C done 1 846d 846d
KASAN: use-after-free Read in io_uring_cancel_task_requests 1 932d 932d
KASAN: slab-out-of-bounds Read in fuse_inode_eq 5 932d 939d
KASAN: use-after-free Write in dir_mkdir 1 938d 938d
KASAN: null-ptr-deref Write in incfs_fresh_pending_reads_exist 1 945d 945d
general protection fault in kernfs_name_hash C done 2 880d 880d
kernel BUG in notify_change (2) C error 2 873d 873d
general protection fault in del_gendisk (2) C error 2 870d 871d
SYZFAIL: sandbox fork failed 3 953d 1037d
KASAN: vmalloc-out-of-bounds Read in init_srcu_struct_fields 1 992d 992d
SYZFAIL: bad thread state in schedule 1 972d 972d
KASAN: stack-out-of-bounds Read in iov_iter_revert C error 10 902d 1054d
SYZFAIL: invalid syscall number 2 992d 1013d
kernel BUG in ext4_free_blocks 3 1006d 1038d
general protection fault in io_prep_async_work 1 975d 975d
KASAN: use-after-free Read in io_kill_linked_timeout C error 14 923d 971d
KASAN: use-after-free Read in __fdget_raw C error error 1 967d 967d
KASAN: invalid-free in io_dismantle_req C error 7 934d 928d
general protection fault in del_gendisk C error 1 933d 1040d
BUG: corrupted list in p9_fd_cancelled 1 1014d 1014d
KASAN: use-after-free Read in task_work_run 2 1047d 1046d
KASAN: use-after-free Write in chroot_fs_refs 2 1045d 1046d
BUG: stack guard page was hit in sys_fsetxattr 1 958d 958d
BUG: stack guard page was hit in sys_lsetxattr C error inconclusive 2 964d 964d
BUG: stack guard page was hit in sys_setxattr C error 6 960d 983d
BUG: stack guard page was hit in corrupted C error 3 948d 983d
BUG: stack guard page was hit in sys_unlink 2 983d 984d
BUG: stack guard page was hit in sys_creat C error done 7 931d 995d
BUG: stack guard page was hit in sys_lchown C error 4 951d 1000d
BUG: stack guard page was hit in sys_chdir 5 929d 1001d
KASAN: use-after-free Read in css_free_rwork_fn 1 1020d 1020d
KASAN: use-after-free Read in rcu_cblist_dequeue 1 1052d 1046d
BUG: workqueue lockup C error 25 957d 1055d
KASAN: use-after-free Read in __cgroup_bpf_attach 2 1026d 1029d
KASAN: use-after-free Read in dev_uevent 1 1031d 1031d
general protection fault in bdev_read_page 1 1032d 1032d
SYZFAIL: out of opened kcov threads 47 1008d 1009d
SYZFAIL: tun: can't open /dev/net/tun 1 1042d 1042d
KASAN: use-after-free Read in compute_effective_progs 1 1037d 1037d
KASAN: stack-out-of-bounds Read in xfrm_state_find 1 1041d 1041d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (2) 1 963d 963d
android12-5.10-lts test error: UBSAN: object-size-mismatch in wg_xmit 69 1018d 1044d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 1 1036d 1036d
android12-5.10-lts build error 1 1058d 1058d