syzbot


Out of 219 bugs, 179 were automatically obsoleted (27 due to revoked reproducers), 40 were invalidated by users.
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported
KASAN: use-after-free Write in tipc_mon_reinit_self 24 1 105d 105d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (7) -1 2 27d 27d
SYZFAIL: open(/proc/self/ns/net) failed -1 1 117d 117d
BUG: soft lockup in sock_write_iter 1 1 124d 124d
KASAN: use-after-free Read in br_multicast_port_group_expired (2) 19 1 141d 141d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (6) -1 8 145d 217d
KASAN: stack-out-of-bounds Read in __xfrm_dst_hash 17 1 153d 153d
KASAN: use-after-free Read in exact_lock 19 53 131d 141d
kernel BUG in vlan_get_protocol_dgram -1 C done 6 183d 298d
KASAN: use-after-free Read in fast_dput 19 14 175d 364d
SYZFAIL: iptable checkpoint: socket(SOCK_STREAM, IPPROTO_TCP) failed -1 4 176d 264d
SYZFAIL: ebtable: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) -1 81 160d 348d
KASAN: use-after-free Read in lock_get_status 19 4 212d 228d
BUG: corrupted list in tipc_nametbl_translate 8 2 215d 237d
general protection fault in cleanup_bearer 19 C 14034 196d 199d
KASAN: out-of-bounds Read in __show_regs 17 1 217d 217d
BUG: soft lockup in br_multicast_group_expired (2) 1 1 220d 220d
BUG: Bad page map (3) -1 3 222d 367d
KASAN: use-after-free Write in virtio_transport_recv_pkt 24 C inconclusive 1 275d 466d
KASAN: use-after-free Read in bdev_try_to_free_page 19 1 227d 227d
KASAN: use-after-free Read in binder_release_work 19 C 154 209d 244d
BUG: soft lockup in mntput 1 1 246d 246d
SYZFAIL: handshake read failed -1 1 265d 265d
KASAN: use-after-free Write in l2tp_session_delete 24 2 265d 289d
kernel BUG in vlan_get_tci -1 2 270d 298d
SYZFAIL: netlink_send_ext: short netlink write -1 4 276d 365d
SYZFAIL: posix_spawn failed -1 9928 239d 375d
SYZFAIL: mmap of output file failed -1 20 264d 365d
SYZFAIL: child failed -1 syz error error 1 288d 1296d
KASAN: use-after-free Read in ext4_convert_inline_data_nolock 19 syz error 1 307d 440d
KASAN: use-after-free Read in __ext4_check_dir_entry 19 C error 2 312d 430d
BUG: corrupted list in p9_fd_cancelled (4) 8 4 292d 402d
BUG: unable to handle kernel paging request in __raw_callee_save___kvm_vcpu_is_preempted 8 1 301d 301d
SYZFAIL: mkdir(syz-tmp) failed -1 299 263d 375d
SYZFAIL: bad allocate request -1 148 263d 373d
KASAN: use-after-free Read in wg_queue_enqueue_per_peer_tx 19 2 303d 308d
SYZFAIL: ShmemBuilder: too large output offset -1 51 264d 371d
general protection fault in steam_send_report 2 1 304d 304d
SYZFAIL: can't reallocate -1 1 308d 308d
SYZFAIL: SIGSEGV -1 841 270d 383d
KASAN: use-after-free Write in __tlb_remove_page_size 24 1 311d 311d
SYZFAIL: SIGFPE -1 2 313d 358d
general protection fault in free_swap_cache 2 1 322d 322d
KASAN: stack-out-of-bounds Read in __show_regs 17 1 324d 324d
BUG: soft lockup in br_multicast_port_group_expired 1 1 324d 324d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (5) -1 30 294d 413d
KASAN: use-after-free Read in br_multicast_port_group_expired 19 1 328d 328d
BUG: soft lockup in net_rx_action 1 2 328d 340d
BUG: soft lockup in __run_timers 1 2 328d 397d
BUG: soft lockup in sys_sendmmsg 1 2 329d 329d
KASAN: use-after-free Read in usb_udc_uevent (3) 19 1 330d 330d
BUG: soft lockup in __netif_receive_skb_core 1 1 332d 332d
KASAN: use-after-free Read in unaccount_page_cache_page (2) 19 1 334d 334d
KASAN: use-after-free Read in worker_thread 19 1 336d 336d
BUG: soft lockup in wg_expired_send_persistent_keepalive 1 1 340d 340d
BUG: soft lockup in br_multicast_group_expired 1 1 341d 341d
BUG: soft lockup in ip_list_rcv 1 1 341d 341d
BUG: soft lockup in run_rebalance_domains 1 1 343d 343d
BUG: soft lockup in ipv6_rcv 1 3 347d 363d
KASAN: null-ptr-deref Write in __kernfs_remove 12 1 350d 350d
BUG: soft lockup in vfork 1 1 352d 352d
BUG: soft lockup in sys_exit_group 1 1 358d 358d
SYZFAIL: bad thread state in completion -1 syz error error 5 946d 1288d
KASAN: use-after-free Read in dev_get_by_index_rcu 19 1 367d 367d
BUG: soft lockup in sys_clone 1 1 371d 371d
BUG: soft lockup in sys_recvmsg 1 4 372d 450d
SYZFAIL: control pipe read failed -1 1 375d 375d
SYZFAIL: too many calls in output -1 2 380d 380d
BUG: soft lockup in sys_bpf 1 2 385d 389d
BUG: unable to handle kernel paging request in swake_up_locked 8 C inconclusive 1 403d 434d
KASAN: use-after-free Read in macsec_get_iflink 19 syz error 2 408d 534d
KASAN: use-after-free Read in wg_packet_send_staged_packets 19 1 434d 434d
go runtime error 2 22 435d 714d
SYZFAIL: tun read failed -1 syz error error 123 361d 1360d
SYZFAIL: proc resp pipe read failed -1 73 369d 384d
general protection fault in fq_codel_enqueue (2) 2 2 448d 450d
panic: runtime error: floating point error [recovered] 2 1 456d 456d
android13-5.10-lts build error -1 44 419d 439d
KASAN: use-after-free Read in f2fs_write_end_io 19 1 463d 463d
syzkaller: failed to copy syzkaller: file bin/linux_arm64/syz-fuzzer does not exist -1 2 385d 385d
BUG: unable to handle kernel paging request in fuse_dev_do_write (3) 8 1 477d 477d
KASAN: use-after-free Read in unaccount_page_cache_page 19 150 449d 977d
general protection fault in mnt_want_write (2) 2 1 515d 515d
BUG: corrupted list in p9_fd_cancelled (3) 8 C done unreliable 38 533d 618d
KASAN: stack-out-of-bounds Read in update_stack_state 17 1 528d 528d
panic: replaceArg: group fields don't match: NUM/NUM 2 13 492d 493d
general protection fault in skb_segment 2 C done 1 568d 582d
KASAN: use-after-free Read in key_task_permission 19 1 566d 566d
android13-5.10-lts test error: lost connection to test machine -1 1 572d 572d
BUG: unable to handle kernel paging request in fuse_dev_do_write (2) 8 1 597d 597d
KASAN: null-ptr-deref Write in backing_data_changed 12 C done 3 622d 694d
general protection fault in __writeback_single_inode 2 1 639d 639d
BUG: Bad page map (2) -1 1 641d 641d
KASAN: use-after-free Read in locked_inode_to_wb_and_lock_list 19 2 645d 676d
general protection fault in tipc_conn_close (3) 2 1 668d 668d
kernel BUG in __block_commit_write -1 1 670d 670d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (4) -1 20 679d 881d
corrupted report (2) -1 6 680d 758d
BUG: soft lockup in wg_packet_tx_worker 1 5 689d 739d
BUG: soft lockup in neigh_timer_handler 1 2 690d 698d
BUG: soft lockup in wg_packet_handshake_send_worker 1 6 697d 737d
BUG: soft lockup in sys_sendto 1 2 698d 735d
kernel panic: EXT4-fs (device loop2): panic forced after error 2 1 701d 701d
BUG: soft lockup in tc_modify_qdisc 1 C done done 314 685d 739d
BUG: soft lockup in addrconf_rs_timer 1 2 714d 732d
fatal error: fault -1 1 721d 721d
BUG: using smp_processor_id() in preemptible code in usbnet_skb_return 4 syz error error 2 723d 1203d
fatal error: Connection to IP closed by remote host. -1 3 738d 861d
BUG: stack guard page was hit in corrupted (23) -1 syz error error 1 762d 762d
KASAN: use-after-free Read in usb_udc_uevent (2) 19 1 760d 760d
kernel BUG in ext4_expand_extra_isize_ea -1 C done done 5 773d 786d
BUG: unable to handle kernel paging request in fuse_dev_do_write 8 18 733d 798d
KASAN: global-out-of-bounds Read in f2fs_release_page 19 2 771d 803d
SYZFAIL: clock_gettime failed -1 syz error error 5 778d 1303d
KASAN: use-after-free Read in f2fs_remove_dirty_inode 19 C error error 4 792d 849d
general protection fault in do_swap_page 2 246 762d 1199d
kernel panic: EXT4-fs (device loop3): panic forced after error 2 1 816d 816d
general protection fault in kernfs_name_hash (6) 2 C error error 22 846d 1011d
kernel panic: EXT4-fs (device loop4): panic forced after error 2 1 819d 819d
android12-5.10-lts build error (2) -1 220 802d 903d
VFS: Busy inodes after unmount (use-after-free) 2 C done inconclusive 1 869d 869d
general protection fault in filp_close 2 1 842d 842d
BUG: unable to handle kernel paging request in z_erofs_decompress_pcluster erofs 8 C error error 3 887d 985d
BUG: Bad page map -1 1 860d 860d
KASAN: use-after-free Read in hci_cmd_timeout 19 1 866d 866d
syzkaller: make host failed: failed to run ["make" "host" "ci"]: exit status 2 -1 2 870d 870d
kernel panic: corrupted stack end in sys_sendmmsg 2 syz error error 14 885d 910d
KASAN: use-after-free Read in fuse_copy_one 19 C error inconclusive 1 972d 972d
kernel BUG in jbd2_journal_get_create_access -1 syz error error 1 979d 979d
KASAN: stack-out-of-bounds Read in xfrm_state_find (2) 17 syz error error 1 925d 925d
BUG: scheduling while atomic in f2fs_register_inmem_page 5 C error inconclusive 1 851d 851d
KASAN: use-after-free Read in usb_udc_uevent 19 2 885d 908d
general protection fault in f2fs_release_page f2fs 19 3 901d 942d
general protection fault in tipc_conn_close (2) 2 6 942d 1028d
KASAN: use-after-free Read in xpad_presence_work 19 1 987d 987d
kernel panic: EXT4-fs (device loop0): panic forced after error ext4 2 C 1 932d 932d
divide error in netem_enqueue (2) 2 1 1033d 1033d
KASAN: vmalloc-out-of-bounds Read in init_srcu_struct_fields (2) 17 1 1052d 1052d
panic: runtime error: floating point error 2 1 1056d 1056d
KASAN: use-after-free Read in __cgroup_bpf_attach (3) 19 1 1071d 1071d
KASAN: use-after-free Read in __tcf_qdisc_find 19 1 1072d 1072d
KASAN: invalid-free in selinux_tun_dev_free_security 22 14 1065d 1075d
general protection fault in fq_codel_enqueue 2 1 1082d 1082d
BUG: corrupted list in pwq_dec_nr_in_flight (2) 8 1 1085d 1085d
general protection fault in tcp_sk_exit (2) 2 1 1093d 1093d
KASAN: use-after-free Read in css_free_rwork_fn (2) 19 2 1097d 1182d
android12-5.10-lts-superproject build error -1 24 1106d 1132d
panic: bad group arg size NUM, should be <= NUM for &prog.GroupArg{ArgCommon:prog.ArgCommon{ref:0x2de, dir:0x0}, Inner:[ 2 23 1019d 1020d
general protection fault in ext4_xattr_set_entry 2 C error 2 1026d 1040d
kernel BUG in ext4_es_cache_extent -1 C error 1 1051d 1051d
BUG: unable to handle kernel paging request in reuseport_select_sock 8 1 1125d 1125d
BUG: stack guard page was hit in corrupted (22) -1 syz done done 1 1161d 1161d
kernel panic: corrupted stack end in sys_futex 2 syz error error 1 1189d 1189d
KASAN: use-after-free Read in f2fs_available_free_memory 19 syz error error 7 1248d 1348d
BUG: unable to handle kernel NULL pointer dereference in ipv6_rcv 10 syz 1 1191d 1191d
divide error in netem_enqueue 2 2 1141d 1152d
general protection fault in tipc_conn_close 2 1 1157d 1157d
BUG: stack guard page was hit in file_open (11) -1 4 1159d 1161d
BUG: stack guard page was hit in sys_mkdir (5) -1 1 1161d 1161d
BUG: stack guard page was hit in sys_creat (10) -1 1 1162d 1162d
kernel BUG in collapse_huge_page -1 1 1168d 1168d
general protection fault in __device_attach 2 1 1170d 1170d
kernel BUG in blk_mq_dispatch_rq_list -1 C error 16 1089d 1289d
KASAN: use-after-free Read in __cgroup_bpf_attach (2) 19 1 1178d 1178d
KASAN: use-after-free Read in vcs_write 19 1 1179d 1179d
SYZFAIL: failed to mkdtemp -1 15 1180d 1348d
BUG: corrupted list in pwq_dec_nr_in_flight 8 1 1180d 1180d
corrupted report -1 289 1159d 1308d
BUG: corrupted list in p9_fd_cancelled (2) 8 3 1190d 1225d
general protection fault in tcp_sk_exit 2 1 1193d 1193d
SYZFAIL: tun: ioctl(TUNSETIFF) failed -1 7 1193d 1351d
kernel panic: corrupted stack end in file_open 2 1 1195d 1195d
general protection fault in icmpv6_sk_exit 2 1 1202d 1202d
general protection fault in mnt_want_write 2 1 1208d 1208d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (3) -1 3 1120d 1120d
general protection fault in del_gendisk (3) 2 C done 1 1149d 1149d
KASAN: use-after-free Read in io_uring_cancel_task_requests 19 1 1235d 1235d
KASAN: slab-out-of-bounds Read in fuse_inode_eq 17 5 1235d 1243d
KASAN: use-after-free Write in dir_mkdir 24 1 1242d 1242d
KASAN: null-ptr-deref Write in incfs_fresh_pending_reads_exist 12 1 1249d 1249d
general protection fault in kernfs_name_hash 2 C done 2 1183d 1183d
kernel BUG in notify_change (2) -1 C error 2 1177d 1177d
general protection fault in del_gendisk (2) 2 C error 2 1173d 1174d
SYZFAIL: sandbox fork failed -1 3 1256d 1340d
KASAN: vmalloc-out-of-bounds Read in init_srcu_struct_fields 17 1 1295d 1295d
SYZFAIL: bad thread state in schedule -1 1 1275d 1275d
KASAN: stack-out-of-bounds Read in iov_iter_revert 17 C error 10 1205d 1357d
SYZFAIL: invalid syscall number -1 2 1295d 1316d
kernel BUG in ext4_free_blocks -1 3 1309d 1341d
general protection fault in io_prep_async_work 2 1 1278d 1278d
KASAN: use-after-free Read in io_kill_linked_timeout 19 C error 14 1227d 1275d
KASAN: use-after-free Read in __fdget_raw 19 C error error 1 1270d 1270d
KASAN: invalid-free in io_dismantle_req 22 C error 7 1237d 1231d
general protection fault in del_gendisk 2 C error 1 1237d 1343d
BUG: corrupted list in p9_fd_cancelled 8 1 1317d 1317d
KASAN: use-after-free Read in task_work_run 19 2 1351d 1350d
KASAN: use-after-free Write in chroot_fs_refs 24 2 1348d 1350d
BUG: stack guard page was hit in sys_fsetxattr -1 1 1261d 1261d
BUG: stack guard page was hit in sys_lsetxattr -1 C error inconclusive 2 1267d 1267d
BUG: stack guard page was hit in sys_setxattr -1 C error 6 1264d 1286d
BUG: stack guard page was hit in corrupted -1 C error 3 1252d 1287d
BUG: stack guard page was hit in sys_unlink -1 2 1286d 1287d
BUG: stack guard page was hit in sys_creat -1 C error done 7 1234d 1298d
BUG: stack guard page was hit in sys_lchown -1 C error 4 1255d 1303d
BUG: stack guard page was hit in sys_chdir -1 5 1232d 1304d
KASAN: use-after-free Read in css_free_rwork_fn 19 1 1323d 1323d
KASAN: use-after-free Read in rcu_cblist_dequeue 19 1 1356d 1350d
BUG: workqueue lockup -1 C error 25 1260d 1359d
KASAN: use-after-free Read in __cgroup_bpf_attach 19 2 1330d 1332d
KASAN: use-after-free Read in dev_uevent 19 1 1334d 1334d
general protection fault in bdev_read_page 2 1 1335d 1335d
SYZFAIL: out of opened kcov threads -1 47 1311d 1312d
SYZFAIL: tun: can't open /dev/net/tun -1 1 1345d 1345d
KASAN: use-after-free Read in compute_effective_progs 19 1 1341d 1341d
KASAN: stack-out-of-bounds Read in xfrm_state_find 17 1 1345d 1345d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (2) -1 1 1266d 1266d
android12-5.10-lts test error: UBSAN: object-size-mismatch in wg_xmit -1 69 1321d 1347d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 -1 1 1340d 1340d
android12-5.10-lts build error -1 1 1362d 1362d