syzbot

 sign-in | mailing list | source | docs
🐞 Open [115]
🐞 Fixed [23]
🐞 Invalid [310]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

Out of 310 bugs, 304 were automatically obsoleted (62 due to revoked reproducers), 6 were invalidated by users.
Title Repro Cause bisect Fix bisect Count Last Reported
KASAN: use-after-free Read in cpu_map_generic_redirect 27 59d 170d
BUG: soft lockup in perf_release (2) 1 97d 97d
BUG: soft lockup in ip_list_rcv (2) 1 99d 99d
SYZFAIL: SIGFPE 1 100d 100d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (4) 2 16d 16d
SYZFAIL: proc stdout read failed (3) 1 122d 122d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (3) 8 135d 206d
general protection fault in do_writepages 1 135d 135d
KASAN: use-after-free Read in fast_dput 1 158d 158d
BUG: corrupted list in p9_fd_cancelled origin:upstream missing-backport syz done error 30 161d 887d
general protection fault in dev_map_enqueue 1 161d 161d
UBSAN: shift-out-of-bounds in parse_audio_unit C done 23 174d 347d
kernel BUG in vlan_get_protocol_dgram C done 4 184d 201d
SYZFAIL: handshake read failed 1 184d 184d
BUG: corrupted list in __dentry_kill 1 186d 186d
general protection fault in f2fs_release_page 1 188d 188d
BUG: soft lockup in br_forward_delay_timer_expired 1 190d 190d
BUG: soft lockup in kthreadd (2) 1 190d 190d
kernel BUG in vlan_get_tci 1 202d 202d
android13-5.15-lts test error: lost connection to test machine 1 203d 203d
BUG: soft lockup in ipv6_rcv origin:lts C done 19 220d 440d
KASAN: use-after-free Write in virtio_transport_recv_pkt origin:upstream C error 1 299d 456d
SYZFAIL: open of /sys/kernel/debug/kcov failed (2) 1 211d 211d
SYZFAIL: proc stdout read failed (2) 1 215d 215d
SYZFAIL: umount failed 1 218d 218d
KASAN: use-after-free Read in binder_release_work origin:upstream C 97 200d 277d
BUG: soft lockup in syscall_exit_to_user_mode (2) 1 224d 224d
KASAN: slab-out-of-bounds Read in ext4_search_dir origin:upstream missing-backport C done 6 235d 595d
kernel BUG in ext4_mb_load_buddy_gfp (2) origin:upstream missing-backport C error done 24 742d 790d
BUG: soft lockup in addrconf_rs_timer (2) syz 99 190d 433d
KASAN: use-after-free Read in ext4_convert_inline_data_nolock missing-backport origin:upstream C error 1 245d 401d
KASAN: use-after-free Read in __ext4_check_dir_entry missing-backport origin:upstream C error 4 247d 370d
BUG: soft lockup in br_multicast_port_group_expired 2 239d 321d
SYZFAIL: open(/proc/self/ns/net) failed 1 248d 248d
SYZFAIL: ShmemBuilder: too large output offset 11 253d 335d
SYZFAIL: SIGSEGV (2) 1 262d 262d
SYZFAIL: bad allocate request 19 257d 361d
corrupted report (3) 71 231d 457d
general protection fault in steam_send_report 2 281d 295d
BUG: soft lockup in ip_list_rcv 20 283d 437d
BUG: soft lockup in sys_syslog C error 13 294d 453d
BUG: soft lockup in kauditd_thread C error 5 295d 455d
BUG: soft lockup in sys_clone origin:upstream C error 18 297d 440d
BUG: soft lockup in sys_openat (2) origin:lts C error 5 297d 346d
BUG: soft lockup in vfork C error 19 297d 452d
SYZFAIL: mmap of output file failed 26 253d 354d
BUG: soft lockup in __run_timers 1 289d 289d
SYZFAIL: posix_spawn failed 2472 252d 365d
SYZFAIL: failed to mkdtemp origin:lts syz 813 253d 562d
SYZFAIL: mkdir(syz-tmp) failed 107 254d 366d
BUG: soft lockup in mld_dad_work origin:lts syz 1 294d 294d
BUG: soft lockup in asm_exc_page_fault C error 3 305d 453d
SYZFAIL: iptable checkpoint: socket(SOCK_STREAM, IPPROTO_TCP) failed 2 297d 323d
BUG: soft lockup in wg_packet_handshake_receive_worker origin:lts syz 1 298d 298d
BUG: soft lockup in cleanup_net origin:lts syz 6 298d 424d
BUG: soft lockup in sys_exit_group C error 7 309d 452d
BUG: unable to handle kernel paging request in __raw_callee_save___kvm_vcpu_is_preempted 1 299d 299d
BUG: soft lockup in worker_thread origin:lts C done 1 312d 312d
BUG: soft lockup in destroy_list_workfn C done 9 314d 444d
BUG: soft lockup in __sock_create 18 306d 441d
BUG: soft lockup in free_work (2) 1 306d 306d
BUG: soft lockup in sys_socket C error 26 300d 449d
BUG: soft lockup in sk_psock_destroy origin:lts C done 2 318d 439d
BUG: soft lockup in rcu_core_si C done 46 292d 447d
BUG: soft lockup in ppp_ioctl 5 313d 440d
KASAN: slab-out-of-bounds Read in inode_test 1 315d 315d
SYZFAIL: open of /sys/kernel/debug/kcov failed 43 277d 353d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (2) 30 284d 403d
BUG: soft lockup in syscall_exit_to_user_mode origin:lts C 16 327d 406d
BUG: soft lockup in br_handle_frame 2 320d 326d
BUG: soft lockup in toggle_allocation_gate 4 320d 452d
BUG: soft lockup in sock_read_iter 10 322d 453d
BUG: soft lockup in bpf_prog_free_deferred origin:downstream C 7 333d 433d
BUG: unable to handle kernel paging request in bpf_probe_read_compat_str missing-backport C done 2 334d 528d
BUG: soft lockup in net_rx_action (2) 1 324d 324d
BUG: soft lockup in tcp_write_timer 11 326d 438d
BUG: unable to handle kernel paging request in bpf_probe_read_kernel_str missing-backport C done 2 338d 514d
BUG: soft lockup in srcu_invoke_callbacks (2) 1 330d 330d
BUG: soft lockup in kthreadd origin:lts C 2 340d 361d
BUG: soft lockup in rtnl_newlink 7 332d 442d
BUG: soft lockup in bpf_link_release 18 332d 452d
BUG: soft lockup in sock_write_iter 24 324d 460d
BUG: soft lockup in sys_lsetxattr 1 333d 333d
SYZFAIL: proc stdout read failed 1 334d 334d
BUG: soft lockup in __do_softirq 1 334d 334d
BUG: soft lockup in sys_getsockopt 6 338d 437d
BUG: soft lockup in tun_chr_write_iter 1 341d 341d
BUG: soft lockup in dev_ioctl 7 343d 432d
BUG: soft lockup in sys_recvmmsg 5 344d 436d
BUG: soft lockup in kernfs_fop_open 7 344d 443d
BUG: unable to handle kernel paging request in copy_from_kernel_nofault missing-backport C done 231 326d 596d
BUG: soft lockup in perf_ioctl 3 350d 421d
BUG: soft lockup in sys_mount origin:lts C error 17 364d 442d
SYZFAIL: SIGILL 1 351d 351d
general protection fault in flush_tlb_func 15 353d 465d
BUG: soft lockup in sys_faccessat2 1 354d 354d
BUG: soft lockup in sys_symlinkat 13 354d 445d
general protection fault in hrtimer_try_to_cancel origin:upstream missing-backport C done 42 366d 593d
BUG: soft lockup in vfs_fallocate 4 361d 402d
KASAN: null-ptr-deref Write in __kernfs_remove 1 362d 362d
BUG: Bad page map 1 364d 364d
BUG: soft lockup in br_ioctl_stub 4 364d 435d
BUG: soft lockup in raw_ioctl 20 347d 445d
BUG: soft lockup in chrdev_open 1 369d 369d
BUG: soft lockup in tcp_tasklet_func 1 369d 369d
KASAN: use-after-free Write in l2tp_session_delete 2 372d 385d
BUG: soft lockup in ext4_lazyinit_thread 1 372d 372d
BUG: soft lockup in __cleanup_mnt 1 372d 372d
BUG: soft lockup in bpf_map_free_deferred 8 372d 445d
BUG: soft lockup in hub_event 12 372d 443d
BUG: soft lockup in sys_recvmsg 10 377d 464d
BUG: soft lockup in addrconf_dad_work 3 377d 432d
BUG: soft lockup in perf_release 3 377d 440d
BUG: soft lockup in sys_sendto 1 380d 380d
KASAN: use-after-free Read in wg_queue_enqueue_per_peer_tx 1 381d 381d
BUG: soft lockup in loop_control_ioctl 3 382d 386d
BUG: soft lockup in perf_sched_delayed 1 382d 382d
BUG: soft lockup in kjournald2 1 384d 384d
BUG: soft lockup in tcp_keepalive_timer 12 381d 449d
BUG: soft lockup in ext4_file_write_iter 6 388d 453d
BUG: scheduling while atomic in tracepoint_probe_register_prio_may_exist C done 2 398d 497d
BUG: soft lockup in sys_readlink 2 389d 447d
BUG: unable to handle kernel paging request in swake_up_locked origin:lts syz 1 390d 390d
BUG: soft lockup in sys_mkdirat 8 393d 445d
BUG: soft lockup in tipc_net_finalize_work 1 399d 399d
BUG: soft lockup in uinput_write 1 400d 400d
BUG: soft lockup in uinput_ioctl 2 400d 440d
BUG: soft lockup in sys_mprotect 1 401d 401d
BUG: soft lockup in tun_chr_ioctl 5 401d 432d
BUG: soft lockup in sys_mknodat 3 402d 436d
BUG: scheduling while atomic in do_epoll_wait 15 396d 480d
BUG: soft lockup in sys_creat 4 403d 433d
UBSAN: array-index-out-of-bounds in bpf_bprintf_prepare C done 12 414d 502d
BUG: soft lockup in sys_sendmmsg 1 404d 404d
BUG: scheduling while atomic in kjournald2 2 405d 456d
android13-5.15-lts test error: SYZFATAL: failed to connect to host: dial tcp IP:NUM: connect: connection refused 6 406d 407d
SYZFAIL: SIGSEGV 260 367d 373d
BUG: scheduling while atomic in trace_set_clr_event C done 5 418d 506d
BUG: soft lockup in sys_add_key 2 408d 445d
BUG: scheduling while atomic in wait_on_page_bit_common 10 408d 469d
BUG: soft lockup in mld_ifc_work 1 409d 409d
BUG: soft lockup in tun_chr_close 3 409d 439d
BUG: soft lockup in tcp_delack_timer 1 409d 409d
BUG: soft lockup in lo_ioctl 2 409d 431d
BUG: workqueue leaked lock or atomic in bpf_map_free_deferred 4 410d 456d
BUG: soft lockup in sys_vmsplice 1 410d 410d
BUG: soft lockup in kcov_ioctl 8 411d 443d
BUG: soft lockup in kvm_dev_ioctl 1 412d 412d
BUG: soft lockup in sys_mkdir 2 412d 417d
BUG: scheduling while atomic in futex_wait_queue_me 19 396d 493d
BUG: soft lockup in syscall_enter_from_user_mode 1 413d 413d
BUG: soft lockup in sys_sched_setaffinity 1 414d 414d
BUG: scheduling while atomic in do_nanosleep origin:lts C done 74 396d 514d
BUG: workqueue leaked lock or atomic in bpf_prog_free_deferred C done 29 397d 501d
BUG: scheduling while atomic in vhost_worker 1 417d 417d
BUG: soft lockup in generic_file_write_iter 1 418d 418d
BUG: soft lockup in sys_readv 1 418d 418d
BUG: workqueue leaked lock or atomic in fsnotify_mark_destroy_workfn 2 419d 449d
KASAN: use-after-free Read in fuse_copy_one origin:upstream missing-backport C error error 1 432d 961d
BUG: scheduling while atomic in _vm_unmap_aliases C done 16 401d 478d
BUG: soft lockup in sys_unlink 7 421d 443d
BUG: soft lockup in destroy_super_work 1 421d 421d
BUG: scheduling while atomic in p9_client_rpc 1 421d 421d
BUG: soft lockup in sys_open 1 422d 422d
BUG: scheduling while atomic in __bpf_arch_text_poke 3 423d 463d
BUG: soft lockup in kernfs_fop_read_iter 1 423d 423d
BUG: soft lockup in inet_stream_connect 1 424d 424d
BUG: soft lockup in sys_perf_event_open 1 424d 424d
BUG: soft lockup in sys_request_key 1 424d 424d
BUG: unable to handle kernel NULL pointer dereference in dev_queue_xmit_nit origin:downstream C inconclusive 1 434d 564d
BUG: soft lockup in __bpf_trace_kfree 2 425d 430d
BUG: soft lockup in sys_unshare 1 425d 425d
BUG: soft lockup in srcu_invoke_callbacks 6 425d 455d
BUG: soft lockup in tty_ioctl 1 425d 425d
BUG: soft lockup in sys_io_submit 1 426d 426d
SYZFAIL: failed to mkdir origin:upstream syz 1 426d 688d
BUG: soft lockup in genl_parallel_done 1 426d 426d
BUG: soft lockup in sys_rename 2 426d 431d
BUG: soft lockup in tcp_setsockopt 1 427d 427d
BUG: scheduling while atomic in unlink_anon_vmas origin:lts C 1 438d 438d
BUG: soft lockup in sys_getdents64 6 430d 443d
BUG: scheduling while atomic in bit_wait_io 7 430d 456d
BUG: soft lockup in sys_keyctl 2 431d 432d
BUG: soft lockup in tun_chr_read_iter 1 431d 431d
BUG: soft lockup in sys_preadv 3 431d 446d
BUG: soft lockup in rtnl_setlink 1 432d 432d
BUG: soft lockup in security_socket_setsockopt 1 432d 432d
BUG: soft lockup in udp_setsockopt 1 432d 432d
BUG: soft lockup in linkwatch_event 3 432d 442d
BUG: using __this_cpu_read() in preemptible code in percpu_counter_add_batch 1 433d 433d
BUG: soft lockup in sys_mlockall 1 433d 433d
SYZFAIL: tun read failed origin:upstream syz 44 350d 686d
SYZFAIL: proc resp pipe read failed 13 359d 373d
BUG: soft lockup in fuse_dev_release 1 434d 434d
BUG: soft lockup in ppp_release 1 435d 435d
BUG: scheduling while atomic in xfer_to_guest_mode_handle_work 1 435d 435d
BUG: soft lockup in bpf_prog_release 1 436d 436d
BUG: soft lockup in free_work 1 437d 437d
BUG: soft lockup in vhost_vsock_dev_release 1 437d 437d
BUG: soft lockup in kernfs_fop_release 2 437d 442d
BUG: soft lockup in sys_openat 21 397d 453d
BUG: soft lockup in ext4_release_file 1 438d 438d
BUG: scheduling while atomic in syslog_print 2 439d 455d
BUG: soft lockup in fuse_dir_ioctl 1 439d 439d
BUG: workqueue leaked lock or atomic in ext4_end_io_rsv_work 4 440d 466d
BUG: soft lockup in udpv6_setsockopt 1 441d 441d
BUG: soft lockup in sys_fsopen 1 441d 441d
BUG: soft lockup in hci_sock_ioctl 1 443d 443d
BUG: soft lockup in net_rx_action 1 443d 443d
BUG: soft lockup in fqdir_work_fn 1 443d 443d
BUG: soft lockup in wg_packet_tx_worker (2) 1 444d 444d
BUG: scheduling while atomic in uevent_store 1 444d 444d
BUG: scheduling while atomic in start_this_handle 6 444d 483d
BUG: workqueue leaked lock or atomic in addrconf_dad_work 1 444d 444d
BUG: soft lockup in sys_fsmount 1 445d 445d
BUG: scheduling while atomic in kthreadd 1 445d 445d
BUG: scheduling while atomic in wait_for_common_io 3 446d 468d
BUG: soft lockup in kvm_vcpu_ioctl 1 446d 446d
BUG: scheduling while atomic in wait_for_common 6 446d 457d
BUG: scheduling while atomic in ext4_file_read_iter 1 446d 446d
BUG: soft lockup in sys_memfd_create 20 407d 446d
BUG: scheduling while atomic in wait_transaction_locked 4 448d 471d
BUG: scheduling while atomic in rtnl_lock_killable 1 449d 449d
BUG: scheduling while atomic in rcu_boost_kthread origin:lts missing-backport syz done 3 449d 494d
BUG: scheduling while atomic in ext4_buffered_write_iter 1 453d 453d
BUG: scheduling while atomic in pcpu_alloc 4 453d 461d
BUG: workqueue leaked lock or atomic in wb_workfn 1 454d 454d
BUG: scheduling while atomic in pipe_write 1 454d 454d
BUG: scheduling while atomic in __iomap_dio_rw 1 454d 454d
BUG: scheduling while atomic in sock_alloc_send_pskb 1 455d 455d
BUG: scheduling while atomic in kernfs_remove 1 455d 455d
BUG: scheduling while atomic in __kernfs_remove 1 456d 456d
BUG: scheduling while atomic in pipe_read 1 457d 457d
BUG: scheduling while atomic in synchronize_rcu_expedited 34 417d 488d
BUG: workqueue leaked lock or atomic in fsnotify_connector_destroy_workfn 1 457d 457d
BUG: scheduling while atomic in do_sys_poll 3 458d 466d
BUG: scheduling while atomic in do_sched_yield 1 458d 458d
BUG: scheduling while atomic in kauditd_thread 1 460d 460d
KASAN: use-after-free Read in delayed_work_timer_fn 1 463d 463d
panic: runtime error: floating point error [recovered] (2) 1 464d 464d
syzkaller: failed to copy syzkaller: file bin/linux_arm64/syz-fuzzer does not exist 2 375d 375d
BUG: workqueue leaked lock or atomic in wg_packet_handshake_receive_worker 1 465d 465d
BUG: soft lockup in sys_madvise 1 466d 466d
general protection fault in fq_codel_enqueue 1 468d 468d
BUG: scheduling while atomic in rtnl_lock 1 470d 470d
panic: replaceArg: group fields don't match: NUM/NUM 7 482d 482d
KASAN: use-after-free Read in vma_interval_tree_augment_rotate 2 494d 496d
kernel BUG in jbd2_journal_get_create_access missing-backport origin:upstream syz error error 1 936d 936d
BUG: scheduling while atomic in __skb_wait_for_more_packets 1 511d 511d
KASAN: use-after-free Read in unaccount_page_cache_page 118 485d 960d
general protection fault in ax88179_disconnect C done 2 534d 534d
KASAN: use-after-free Write in enqueue_timer 1 533d 533d
general protection fault in tipc_conn_close (2) 4 539d 655d
general protection fault in skb_segment origin:upstream C done 1 557d 571d
KASAN: use-after-free Read in f2fs_release_page (2) 1 551d 551d
kernel BUG in prog_array_map_poke_run missing-backport origin:upstream C done 32 537d 605d
KASAN: use-after-free Read in __skb_datagram_iter origin:upstream C done 1 568d 598d
BUG: scheduling while atomic in f2fs_register_inmem_page origin:lts C error done 4 587d 841d
corrupted report (2) 1 580d 580d
KASAN: use-after-free Read in vma_interval_tree_insert (2) 1 588d 588d
KASAN: use-after-free Read in unix_stream_read_actor origin:upstream C 1 601d 601d
KASAN: use-after-free Write in kernfs_get 3 619d 707d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 20 668d 870d
BUG: soft lockup in ext4_file_mmap 1 678d 678d
BUG: soft lockup in net_tx_action 1 682d 682d
BUG: soft lockup in wg_packet_tx_worker 1 688d 688d
BUG: soft lockup in tc_modify_qdisc origin:lts C done done 254 673d 728d
BUG: soft lockup in tipc_disc_timeout 1 697d 697d
BUG: soft lockup in addrconf_rs_timer 1 711d 711d
BUG: soft lockup in wg_packet_handshake_send_worker 2 715d 721d
corrupted report 4 718d 800d
BUG: unable to handle kernel paging request in fuse_dev_do_write 2 723d 725d
KASAN: stack-out-of-bounds Read in __show_regs 1 729d 729d
kernel BUG in ext4_mb_find_by_goal C error done 19 739d 778d
KASAN: out-of-bounds Read in ext4_xattr_set_entry 1 746d 746d
fatal error: Connection to IP closed by remote host. 1 746d 746d
VFS: Busy inodes after unmount (use-after-free) origin:downstream C error done 2 757d 859d
KASAN: use-after-free Read in f2fs_release_page f2fs 5 761d 910d
general protection fault in tipc_conn_close 4 765d 980d
general protection fault in ext4_release_dquot 1 772d 772d
BUG: unable to handle kernel paging request in z_erofs_decompress_queue C error error 1 803d 975d
panic: runtime error: floating point errorConnection to IP closed by remote host. (2) 1 797d 797d
KASAN: use-after-free Read in macsec_get_iflink 1 800d 800d
KASAN: slab-out-of-bounds Read in iostat_update_and_unbind_ctx 1 818d 818d
general protection fault in fuse_atomic_open 1 823d 823d
KASAN: use-after-free Read in f2fs_remove_dirty_inode origin:lts syz error error 1 838d 838d
KASAN: use-after-free Read in insert_work 1 832d 832d
syzkaller: make host failed: failed to run ["make" "host" "ci"]: exit status 2 2 860d 860d
KASAN: use-after-free Read in move_linked_works 1 865d 865d
KASAN: use-after-free Read in kernfs_get 3 865d 989d
KASAN: use-after-free Read in do_handle_mm_fault syz error done 4 893d 918d
KASAN: use-after-free Write in vma_put_file_ref syz error done 2 895d 918d
kernel BUG in pfkey_send_acquire syz unreliable error 35 964d 998d
android13-5.15-lts boot error: can't ssh into the instance 1 892d 892d
kernel BUG in ext4_free_blocks ext4 1 894d 894d
KASAN: use-after-free Read in __mark_inode_dirty fat 2 911d 925d
panic: runtime error: floating point errorConnection to IP closed by remote host. 1 889d 889d
panic: runtime error: floating point error 3 899d 946d
KASAN: use-after-free Read in evict fat 1 904d 904d
kernel BUG in cdc_ncm_fill_tx_frame 1 954d 954d
panic: runtime error: floating point error [recovered] 1 932d 932d
KASAN: use-after-free Read in usb_udc_uevent 1 913d 913d
KASAN: use-after-free Read in vma_interval_tree_insert 2 919d 946d
kernel BUG in jbd2_journal_dirty_metadata C 1 929d 929d
KASAN: use-after-free Read in __tcf_qdisc_find 1 946d 946d
kernel BUG in mld_newpack 1 960d 960d
KASAN: slab-out-of-bounds Read in __htab_map_lookup_and_delete_batch 1 953d 953d
BUG: soft lockup in input_repeat_key 1 955d 955d
KASAN: use-after-free Read in mon_bin_flush 1 994d 994d
kernel panic: EXT4-fs (device loop0): panic forced after error ext4 C error 1 922d 922d