syzbot


Out of 269 bugs, 225 were automatically obsoleted (40 due to revoked reproducers), 44 were invalidated by users.
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported
BUG: soft lockup in rcu_core_si 1 1 90d 90d
KASAN: null-ptr-deref Write in incfs_kill_sb 12 1 99d 99d
SYZFAIL: failed to recv rpc -1 syz 1264 23d 565d
general protection fault in ip6_create_rt_rcu (2) 2 1 113d 113d
general protection fault in inherit_task_group 2 C 48 125d 706d
KASAN: use-after-free Read in seq_printf 19 15 121d 229d
KASAN: use-after-free Read in steam_send_report 19 3 122d 134d
BUG: soft lockup in sys_openat 1 1 124d 124d
KASAN: use-after-free Write in __ip6_del_rt 24 syz 11 126d 276d
KASAN: use-after-free Read in fib_flush 19 7 128d 229d
BUG: soft lockup in sys_clone (2) 1 1 138d 138d
BUG: soft lockup in sys_bind 1 1 143d 143d
SYZFAIL: mount(tmpfs) failed -1 1 145d 145d
general protection fault in nexthop_get_nhc_lookup 2 syz 20 116d 197d
general protection fault in find_match 2 50 114d 294d
KASAN: use-after-free Read in f2fs_inode_dirtied 19 C done 3 166d 216d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (9) -1 2 67d 67d
SYZFAIL: SIGSEGV (2) -1 3 158d 252d
kernel BUG in ext4_create_inline_data -1 C done 2 174d 235d
KASAN: slab-out-of-bounds Read in mon_bin_event 17 C done 60 151d 206d
BUG: scheduling while atomic in futex_wait_queue_me 5 1 176d 176d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (8) -1 2 98d 98d
KASAN: slab-out-of-bounds Write in try_module_get 23 11 193d 265d
BUG: soft lockup in sock_read_iter 1 2 195d 208d
KASAN: use-after-free Write in u32_destroy_key 24 1 199d 199d
general protection fault in lo_ioctl 2 1 211d 211d
KASAN: use-after-free Read in ext4_xattr_inode_dec_ref_all 19 C done 3 274d 302d
KASAN: use-after-free Read in tw_timer_handler 19 syz 10 193d 226d
SYZFAIL: SIGFPE (2) -1 8 225d 402d
KASAN: use-after-free Read in exact_lock (2) 19 172 193d 272d
KASAN: use-after-free Read in tcp_net_metrics_exit_batch 19 613 193d 232d
KASAN: use-after-free Read in inet_twsk_purge 19 74 196d 231d
general protection fault in tipc_conn_close (4) 2 2 239d 305d
general protection fault in __rt6_nh_dev_match 2 2 244d 255d
KASAN: slab-out-of-bounds Read in dentry_revalidate 17 2 249d 327d
BUG: using smp_processor_id() in preemptible code in usbnet_skb_return (2) 4 C error 2 263d 454d
general protection fault in ip6_create_rt_rcu 2 1 255d 255d
SYZFAIL: netlink_send_ext: short netlink write (2) -1 2 257d 322d
KASAN: use-after-free Write in l2tp_session_delete (2) 24 3 258d 358d
BUG: soft lockup in cleanup_net 1 1 260d 260d
BUG: soft lockup in input_repeat_key 1 C error 3 313d 822d
general protection fault in __loop_clr_fd 2 1 262d 262d
KASAN: use-after-free Read in fast_dput (2) 19 1 263d 263d
KASAN: use-after-free Write in ext4_insert_dentry 24 C done 25 277d 496d
kernel BUG in ext4_ind_map_blocks -1 2 268d 287d
BUG: soft lockup in addrconf_rs_timer (2) 1 C 265 249d 580d
kernel BUG in blk_mq_dispatch_rq_list (4) fat -1 C error 16 935d 1187d
BUG: unable to handle kernel paging request in __gnet_stats_copy_basic 8 1 271d 271d
general protection fault in current_umask 2 C unreliable 5 283d 493d
KASAN: use-after-free Write in skb_release_data 24 1 275d 275d
KASAN: use-after-free Write in tipc_mon_reinit_self 24 1 298d 298d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (7) -1 2 220d 220d
SYZFAIL: open(/proc/self/ns/net) failed -1 1 311d 311d
BUG: soft lockup in sock_write_iter 1 1 317d 317d
KASAN: use-after-free Read in br_multicast_port_group_expired (2) 19 1 334d 334d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (6) -1 8 338d 410d
KASAN: stack-out-of-bounds Read in __xfrm_dst_hash 17 1 346d 346d
KASAN: use-after-free Read in exact_lock 19 53 324d 334d
kernel BUG in vlan_get_protocol_dgram -1 C done 6 376d 491d
KASAN: use-after-free Read in fast_dput 19 14 368d 558d
SYZFAIL: iptable checkpoint: socket(SOCK_STREAM, IPPROTO_TCP) failed -1 4 369d 457d
SYZFAIL: ebtable: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) -1 81 353d 541d
KASAN: use-after-free Read in lock_get_status 19 4 405d 422d
BUG: corrupted list in tipc_nametbl_translate 8 2 408d 430d
general protection fault in cleanup_bearer 19 C 14034 389d 392d
KASAN: out-of-bounds Read in __show_regs 17 1 411d 411d
BUG: soft lockup in br_multicast_group_expired (2) 1 1 413d 413d
BUG: Bad page map (3) -1 3 415d 560d
KASAN: use-after-free Write in virtio_transport_recv_pkt 24 C inconclusive 1 468d 659d
KASAN: use-after-free Read in bdev_try_to_free_page 19 1 420d 420d
KASAN: use-after-free Read in binder_release_work 19 C 154 402d 437d
BUG: soft lockup in mntput 1 1 439d 439d
SYZFAIL: handshake read failed -1 1 458d 458d
KASAN: use-after-free Write in l2tp_session_delete 24 2 459d 482d
kernel BUG in vlan_get_tci -1 2 463d 491d
SYZFAIL: netlink_send_ext: short netlink write -1 4 469d 558d
SYZFAIL: posix_spawn failed -1 9928 432d 569d
SYZFAIL: mmap of output file failed -1 20 457d 558d
SYZFAIL: child failed -1 syz error error 1 481d 1489d
KASAN: use-after-free Read in ext4_convert_inline_data_nolock 19 syz error 1 500d 633d
KASAN: use-after-free Read in __ext4_check_dir_entry 19 C error 2 505d 623d
BUG: corrupted list in p9_fd_cancelled (4) 8 4 485d 595d
BUG: unable to handle kernel paging request in __raw_callee_save___kvm_vcpu_is_preempted 8 1 494d 494d
SYZFAIL: mkdir(syz-tmp) failed -1 299 456d 568d
SYZFAIL: bad allocate request -1 148 456d 566d
KASAN: use-after-free Read in wg_queue_enqueue_per_peer_tx 19 2 496d 501d
SYZFAIL: ShmemBuilder: too large output offset -1 51 457d 565d
general protection fault in steam_send_report 2 1 498d 498d
SYZFAIL: can't reallocate -1 1 501d 501d
SYZFAIL: SIGSEGV -1 841 463d 577d
KASAN: use-after-free Write in __tlb_remove_page_size 24 1 504d 504d
SYZFAIL: SIGFPE -1 2 506d 551d
general protection fault in free_swap_cache 2 1 515d 515d
KASAN: stack-out-of-bounds Read in __show_regs 17 1 517d 517d
BUG: soft lockup in br_multicast_port_group_expired 1 1 518d 518d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (5) -1 30 487d 606d
KASAN: use-after-free Read in br_multicast_port_group_expired 19 1 521d 521d
BUG: soft lockup in net_rx_action 1 2 521d 533d
BUG: soft lockup in __run_timers 1 2 521d 590d
BUG: soft lockup in sys_sendmmsg 1 2 522d 522d
KASAN: use-after-free Read in usb_udc_uevent (3) 19 1 523d 523d
BUG: soft lockup in __netif_receive_skb_core 1 1 525d 525d
KASAN: use-after-free Read in unaccount_page_cache_page (2) 19 1 528d 528d
KASAN: use-after-free Read in worker_thread 19 1 530d 530d
BUG: soft lockup in wg_expired_send_persistent_keepalive 1 1 533d 533d
BUG: soft lockup in br_multicast_group_expired 1 1 534d 534d
BUG: soft lockup in ip_list_rcv 1 1 535d 535d
BUG: soft lockup in run_rebalance_domains 1 1 536d 536d
BUG: soft lockup in ipv6_rcv 1 3 540d 557d
KASAN: null-ptr-deref Write in __kernfs_remove 12 1 543d 543d
BUG: soft lockup in vfork 1 1 545d 545d
BUG: soft lockup in sys_exit_group 1 1 551d 551d
SYZFAIL: bad thread state in completion -1 syz error error 5 1139d 1481d
KASAN: use-after-free Read in dev_get_by_index_rcu 19 1 560d 560d
BUG: soft lockup in sys_clone 1 1 564d 564d
BUG: soft lockup in sys_recvmsg 1 4 565d 644d
SYZFAIL: control pipe read failed -1 1 568d 568d
SYZFAIL: too many calls in output -1 2 573d 573d
BUG: soft lockup in sys_bpf 1 2 578d 582d
BUG: unable to handle kernel paging request in swake_up_locked 8 C inconclusive 1 596d 627d
KASAN: use-after-free Read in macsec_get_iflink 19 syz error 2 601d 728d
KASAN: use-after-free Read in wg_packet_send_staged_packets 19 1 627d 627d
go runtime error 2 22 628d 907d
SYZFAIL: tun read failed -1 syz error error 123 554d 1553d
SYZFAIL: proc resp pipe read failed -1 73 562d 578d
general protection fault in fq_codel_enqueue (2) 2 2 641d 643d
panic: runtime error: floating point error [recovered] 2 1 649d 649d
android13-5.10-lts build error -1 44 612d 632d
KASAN: use-after-free Read in f2fs_write_end_io 19 1 656d 656d
syzkaller: failed to copy syzkaller: file bin/linux_arm64/syz-fuzzer does not exist -1 2 578d 578d
BUG: unable to handle kernel paging request in fuse_dev_do_write (3) 8 1 670d 670d
KASAN: use-after-free Read in unaccount_page_cache_page 19 150 642d 1170d
general protection fault in mnt_want_write (2) 2 1 708d 708d
BUG: corrupted list in p9_fd_cancelled (3) 8 C done unreliable 38 726d 811d
KASAN: stack-out-of-bounds Read in update_stack_state 17 1 721d 721d
panic: replaceArg: group fields don't match: NUM/NUM 2 13 685d 686d
general protection fault in skb_segment 2 C done 1 761d 775d
KASAN: use-after-free Read in key_task_permission 19 1 759d 759d
android13-5.10-lts test error: lost connection to test machine -1 1 765d 765d
BUG: unable to handle kernel paging request in fuse_dev_do_write (2) 8 1 790d 790d
KASAN: null-ptr-deref Write in backing_data_changed 12 C done 3 815d 887d
general protection fault in __writeback_single_inode 2 1 832d 832d
BUG: Bad page map (2) -1 1 834d 834d
KASAN: use-after-free Read in locked_inode_to_wb_and_lock_list 19 2 838d 869d
general protection fault in tipc_conn_close (3) 2 1 861d 861d
kernel BUG in __block_commit_write -1 1 863d 863d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (4) -1 20 872d 1074d
corrupted report (2) -1 6 873d 951d
BUG: soft lockup in wg_packet_tx_worker 1 5 882d 932d
BUG: soft lockup in neigh_timer_handler 1 2 883d 891d
BUG: soft lockup in wg_packet_handshake_send_worker 1 6 890d 930d
BUG: soft lockup in sys_sendto 1 2 891d 928d
kernel panic: EXT4-fs (device loop2): panic forced after error 2 1 895d 895d
BUG: soft lockup in tc_modify_qdisc 1 C done done 314 878d 932d
BUG: soft lockup in addrconf_rs_timer 1 2 907d 925d
fatal error: fault -1 1 914d 914d
BUG: using smp_processor_id() in preemptible code in usbnet_skb_return 4 syz error error 2 916d 1396d
fatal error: Connection to IP closed by remote host. -1 3 931d 1054d
BUG: stack guard page was hit in corrupted (23) -1 syz error error 1 955d 955d
KASAN: use-after-free Read in usb_udc_uevent (2) 19 1 953d 953d
kernel BUG in ext4_expand_extra_isize_ea -1 C done done 5 966d 980d
BUG: unable to handle kernel paging request in fuse_dev_do_write 8 18 926d 991d
KASAN: global-out-of-bounds Read in f2fs_release_page 19 2 964d 996d
SYZFAIL: clock_gettime failed -1 syz error error 5 971d 1496d
KASAN: use-after-free Read in f2fs_remove_dirty_inode 19 C error error 4 985d 1042d
general protection fault in do_swap_page 2 246 955d 1392d
kernel panic: EXT4-fs (device loop3): panic forced after error 2 1 1009d 1009d
general protection fault in kernfs_name_hash (6) 2 C error error 22 1039d 1205d
kernel panic: EXT4-fs (device loop4): panic forced after error 2 1 1012d 1012d
android12-5.10-lts build error (2) -1 220 995d 1096d
VFS: Busy inodes after unmount (use-after-free) 2 C done inconclusive 1 1062d 1062d
general protection fault in filp_close 2 1 1035d 1035d
BUG: unable to handle kernel paging request in z_erofs_decompress_pcluster erofs 8 C error error 3 1080d 1178d
BUG: Bad page map -1 1 1053d 1053d
KASAN: use-after-free Read in hci_cmd_timeout 19 1 1060d 1060d
syzkaller: make host failed: failed to run ["make" "host" "ci"]: exit status 2 -1 2 1064d 1064d
kernel panic: corrupted stack end in sys_sendmmsg 2 syz error error 14 1078d 1104d
KASAN: use-after-free Read in fuse_copy_one 19 C error inconclusive 1 1165d 1165d
kernel BUG in jbd2_journal_get_create_access -1 syz error error 1 1172d 1172d
KASAN: stack-out-of-bounds Read in xfrm_state_find (2) 17 syz error error 1 1118d 1118d
BUG: scheduling while atomic in f2fs_register_inmem_page 5 C error inconclusive 1 1044d 1044d
KASAN: use-after-free Read in usb_udc_uevent 19 2 1078d 1101d
general protection fault in f2fs_release_page f2fs 19 3 1094d 1136d
general protection fault in tipc_conn_close (2) 2 6 1135d 1221d
KASAN: use-after-free Read in xpad_presence_work 19 1 1180d 1180d
kernel panic: EXT4-fs (device loop0): panic forced after error ext4 2 C 1 1126d 1126d
divide error in netem_enqueue (2) 2 1 1226d 1226d
KASAN: vmalloc-out-of-bounds Read in init_srcu_struct_fields (2) 17 1 1245d 1245d
panic: runtime error: floating point error 2 1 1249d 1249d
KASAN: use-after-free Read in __cgroup_bpf_attach (3) 19 1 1264d 1264d
KASAN: use-after-free Read in __tcf_qdisc_find 19 1 1265d 1265d
KASAN: invalid-free in selinux_tun_dev_free_security 22 14 1258d 1268d
general protection fault in fq_codel_enqueue 2 1 1276d 1276d
BUG: corrupted list in pwq_dec_nr_in_flight (2) 8 1 1278d 1278d
general protection fault in tcp_sk_exit (2) 2 1 1286d 1286d
KASAN: use-after-free Read in css_free_rwork_fn (2) 19 2 1291d 1375d
android12-5.10-lts-superproject build error -1 24 1299d 1325d
panic: bad group arg size NUM, should be <= NUM for &prog.GroupArg{ArgCommon:prog.ArgCommon{ref:0x2de, dir:0x0}, Inner:[ 2 23 1212d 1213d
general protection fault in ext4_xattr_set_entry 2 C error 2 1219d 1233d
kernel BUG in ext4_es_cache_extent -1 C error 1 1244d 1244d
BUG: unable to handle kernel paging request in reuseport_select_sock 8 1 1318d 1318d
BUG: stack guard page was hit in corrupted (22) -1 syz done done 1 1355d 1355d
kernel panic: corrupted stack end in sys_futex 2 syz error error 1 1382d 1382d
KASAN: use-after-free Read in f2fs_available_free_memory 19 syz error error 7 1441d 1541d
BUG: unable to handle kernel NULL pointer dereference in ipv6_rcv 10 syz 1 1384d 1384d
divide error in netem_enqueue 2 2 1334d 1345d
general protection fault in tipc_conn_close 2 1 1350d 1350d
BUG: stack guard page was hit in file_open (11) -1 4 1352d 1354d
BUG: stack guard page was hit in sys_mkdir (5) -1 1 1354d 1354d
BUG: stack guard page was hit in sys_creat (10) -1 1 1355d 1355d
kernel BUG in collapse_huge_page -1 1 1361d 1361d
general protection fault in __device_attach 2 1 1364d 1364d
kernel BUG in blk_mq_dispatch_rq_list -1 C error 16 1283d 1482d
KASAN: use-after-free Read in __cgroup_bpf_attach (2) 19 1 1372d 1372d
KASAN: use-after-free Read in vcs_write 19 1 1373d 1373d
SYZFAIL: failed to mkdtemp -1 15 1373d 1541d
BUG: corrupted list in pwq_dec_nr_in_flight 8 1 1373d 1373d
corrupted report -1 289 1352d 1501d
BUG: corrupted list in p9_fd_cancelled (2) 8 3 1383d 1418d
general protection fault in tcp_sk_exit 2 1 1386d 1386d
SYZFAIL: tun: ioctl(TUNSETIFF) failed -1 7 1386d 1544d
kernel panic: corrupted stack end in file_open 2 1 1389d 1389d
general protection fault in icmpv6_sk_exit 2 1 1395d 1395d
general protection fault in mnt_want_write 2 1 1401d 1401d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (3) -1 3 1313d 1313d
general protection fault in del_gendisk (3) 2 C done 1 1342d 1342d
KASAN: use-after-free Read in io_uring_cancel_task_requests 19 1 1428d 1428d
KASAN: slab-out-of-bounds Read in fuse_inode_eq 17 5 1428d 1436d
KASAN: use-after-free Write in dir_mkdir 24 1 1435d 1435d
KASAN: null-ptr-deref Write in incfs_fresh_pending_reads_exist 12 1 1442d 1442d
general protection fault in kernfs_name_hash 2 C done 2 1376d 1376d
kernel BUG in notify_change (2) -1 C error 2 1370d 1370d
general protection fault in del_gendisk (2) 2 C error 2 1367d 1367d
SYZFAIL: sandbox fork failed -1 3 1449d 1533d
KASAN: vmalloc-out-of-bounds Read in init_srcu_struct_fields 17 1 1489d 1489d
SYZFAIL: bad thread state in schedule -1 1 1469d 1469d
KASAN: stack-out-of-bounds Read in iov_iter_revert 17 C error 10 1398d 1551d
SYZFAIL: invalid syscall number -1 2 1488d 1510d
kernel BUG in ext4_free_blocks -1 3 1502d 1535d
general protection fault in io_prep_async_work 2 1 1471d 1471d
KASAN: use-after-free Read in io_kill_linked_timeout 19 C error 14 1420d 1468d
KASAN: use-after-free Read in __fdget_raw 19 C error error 1 1463d 1463d
KASAN: invalid-free in io_dismantle_req 22 C error 7 1430d 1424d
general protection fault in del_gendisk 2 C error 1 1430d 1537d
BUG: corrupted list in p9_fd_cancelled 8 1 1510d 1510d
KASAN: use-after-free Read in task_work_run 19 2 1544d 1543d
KASAN: use-after-free Write in chroot_fs_refs 24 2 1541d 1543d
BUG: stack guard page was hit in sys_fsetxattr -1 1 1454d 1454d
BUG: stack guard page was hit in sys_lsetxattr -1 C error inconclusive 2 1460d 1460d
BUG: stack guard page was hit in sys_setxattr -1 C error 6 1457d 1480d
BUG: stack guard page was hit in corrupted -1 C error 3 1445d 1480d
BUG: stack guard page was hit in sys_unlink -1 2 1480d 1480d
BUG: stack guard page was hit in sys_creat -1 C error done 7 1427d 1491d
BUG: stack guard page was hit in sys_lchown -1 C error 4 1448d 1497d
BUG: stack guard page was hit in sys_chdir -1 5 1425d 1497d
KASAN: use-after-free Read in css_free_rwork_fn 19 1 1517d 1517d
KASAN: use-after-free Read in rcu_cblist_dequeue 19 1 1549d 1543d
BUG: workqueue lockup -1 C error 25 1454d 1552d
KASAN: use-after-free Read in __cgroup_bpf_attach 19 2 1523d 1525d
KASAN: use-after-free Read in dev_uevent 19 1 1527d 1527d
general protection fault in bdev_read_page 2 1 1528d 1528d
SYZFAIL: out of opened kcov threads -1 47 1504d 1505d
SYZFAIL: tun: can't open /dev/net/tun -1 1 1538d 1538d
KASAN: use-after-free Read in compute_effective_progs 19 1 1534d 1534d
KASAN: stack-out-of-bounds Read in xfrm_state_find 17 1 1538d 1538d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (2) -1 1 1460d 1460d
android12-5.10-lts test error: UBSAN: object-size-mismatch in wg_xmit -1 69 1514d 1541d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 -1 1 1533d 1533d
android12-5.10-lts build error -1 1 1555d 1555d