syzbot

 sign-in | mailing list | source | docs
🐞 Open [110]
🐞 Fixed [23]
🐞 Invalid [302]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

Out of 302 bugs, 297 were automatically obsoleted (62 due to revoked reproducers), 5 were invalidated by users.
Title Repro Cause bisect Fix bisect Count Last Reported
KASAN: use-after-free Read in fast_dput 1 106d 106d
BUG: corrupted list in p9_fd_cancelled origin:upstream missing-backport syz done error 30 109d 835d
general protection fault in dev_map_enqueue 1 109d 109d
UBSAN: shift-out-of-bounds in parse_audio_unit C done 23 122d 295d
kernel BUG in vlan_get_protocol_dgram C done 4 132d 150d
SYZFAIL: handshake read failed 1 132d 132d
BUG: corrupted list in __dentry_kill 1 134d 134d
general protection fault in f2fs_release_page 1 136d 136d
BUG: soft lockup in br_forward_delay_timer_expired 1 138d 138d
BUG: soft lockup in kthreadd (2) 1 138d 138d
kernel BUG in vlan_get_tci 1 150d 150d
android13-5.15-lts test error: lost connection to test machine 1 151d 151d
BUG: soft lockup in ipv6_rcv origin:lts C done 19 168d 388d
KASAN: use-after-free Write in virtio_transport_recv_pkt origin:upstream C error 1 248d 404d
SYZFAIL: open of /sys/kernel/debug/kcov failed (2) 1 159d 159d
SYZFAIL: proc stdout read failed (2) 1 163d 163d
SYZFAIL: umount failed 1 167d 167d
KASAN: use-after-free Read in binder_release_work origin:upstream C 97 148d 225d
BUG: soft lockup in syscall_exit_to_user_mode (2) 1 172d 172d
KASAN: slab-out-of-bounds Read in ext4_search_dir origin:upstream missing-backport C done 6 183d 543d
kernel BUG in ext4_mb_load_buddy_gfp (2) origin:upstream missing-backport C error done 24 691d 738d
BUG: soft lockup in addrconf_rs_timer (2) syz 99 138d 381d
KASAN: use-after-free Read in ext4_convert_inline_data_nolock missing-backport origin:upstream C error 1 193d 349d
KASAN: use-after-free Read in __ext4_check_dir_entry missing-backport origin:upstream C error 4 195d 319d
BUG: soft lockup in br_multicast_port_group_expired 2 187d 269d
SYZFAIL: open(/proc/self/ns/net) failed 1 196d 196d
SYZFAIL: ShmemBuilder: too large output offset 11 201d 284d
SYZFAIL: SIGSEGV (2) 1 210d 210d
SYZFAIL: bad allocate request 19 205d 309d
corrupted report (3) 71 180d 405d
general protection fault in steam_send_report 2 229d 243d
BUG: soft lockup in ip_list_rcv 20 231d 385d
BUG: soft lockup in sys_syslog C error 13 243d 401d
BUG: soft lockup in kauditd_thread C error 5 243d 403d
BUG: soft lockup in sys_clone origin:upstream C error 18 245d 388d
BUG: soft lockup in sys_openat (2) origin:lts C error 5 245d 294d
BUG: soft lockup in vfork C error 19 245d 400d
SYZFAIL: mmap of output file failed 26 201d 302d
BUG: soft lockup in __run_timers 1 237d 237d
SYZFAIL: posix_spawn failed 2472 201d 313d
SYZFAIL: failed to mkdtemp origin:lts syz 813 201d 510d
SYZFAIL: mkdir(syz-tmp) failed 107 202d 314d
BUG: soft lockup in mld_dad_work origin:lts syz 1 243d 243d
BUG: soft lockup in asm_exc_page_fault C error 3 253d 401d
SYZFAIL: iptable checkpoint: socket(SOCK_STREAM, IPPROTO_TCP) failed 2 246d 271d
BUG: soft lockup in wg_packet_handshake_receive_worker origin:lts syz 1 246d 246d
BUG: soft lockup in cleanup_net origin:lts syz 6 246d 373d
BUG: soft lockup in sys_exit_group C error 7 257d 401d
BUG: unable to handle kernel paging request in __raw_callee_save___kvm_vcpu_is_preempted 1 247d 247d
BUG: soft lockup in worker_thread origin:lts C done 1 260d 260d
BUG: soft lockup in destroy_list_workfn C done 9 262d 392d
BUG: soft lockup in __sock_create 18 254d 389d
BUG: soft lockup in free_work (2) 1 254d 254d
BUG: soft lockup in sys_socket C error 26 248d 397d
BUG: soft lockup in sk_psock_destroy origin:lts C done 2 266d 387d
BUG: soft lockup in rcu_core_si C done 46 240d 395d
BUG: soft lockup in ppp_ioctl 5 261d 388d
KASAN: slab-out-of-bounds Read in inode_test 1 263d 263d
SYZFAIL: open of /sys/kernel/debug/kcov failed 43 225d 301d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (2) 30 232d 351d
BUG: soft lockup in syscall_exit_to_user_mode origin:lts C 16 275d 354d
BUG: soft lockup in br_handle_frame 2 268d 274d
BUG: soft lockup in toggle_allocation_gate 4 268d 401d
BUG: soft lockup in sock_read_iter 10 270d 401d
BUG: soft lockup in bpf_prog_free_deferred origin:downstream C 7 282d 381d
BUG: unable to handle kernel paging request in bpf_probe_read_compat_str missing-backport C done 2 282d 476d
BUG: soft lockup in net_rx_action (2) 1 272d 272d
BUG: soft lockup in tcp_write_timer 11 274d 387d
BUG: unable to handle kernel paging request in bpf_probe_read_kernel_str missing-backport C done 2 286d 462d
BUG: soft lockup in srcu_invoke_callbacks (2) 1 278d 278d
BUG: soft lockup in kthreadd origin:lts C 2 289d 309d
BUG: soft lockup in rtnl_newlink 7 280d 390d
BUG: soft lockup in bpf_link_release 18 280d 400d
BUG: soft lockup in sock_write_iter 24 272d 408d
BUG: soft lockup in sys_lsetxattr 1 282d 282d
SYZFAIL: proc stdout read failed 1 282d 282d
BUG: soft lockup in __do_softirq 1 282d 282d
BUG: soft lockup in sys_getsockopt 6 286d 385d
BUG: soft lockup in tun_chr_write_iter 1 289d 289d
BUG: soft lockup in dev_ioctl 7 291d 381d
BUG: soft lockup in sys_recvmmsg 5 292d 384d
BUG: soft lockup in kernfs_fop_open 7 292d 391d
BUG: unable to handle kernel paging request in copy_from_kernel_nofault missing-backport C done 231 275d 544d
BUG: soft lockup in perf_ioctl 3 298d 369d
BUG: soft lockup in sys_mount origin:lts C error 17 312d 390d
SYZFAIL: SIGILL 1 299d 299d
general protection fault in flush_tlb_func 15 301d 413d
BUG: soft lockup in sys_faccessat2 1 302d 302d
BUG: soft lockup in sys_symlinkat 13 302d 393d
general protection fault in hrtimer_try_to_cancel origin:upstream missing-backport C done 42 314d 541d
BUG: soft lockup in vfs_fallocate 4 310d 350d
KASAN: null-ptr-deref Write in __kernfs_remove 1 310d 310d
BUG: Bad page map 1 312d 312d
BUG: soft lockup in br_ioctl_stub 4 312d 383d
BUG: soft lockup in raw_ioctl 20 295d 393d
BUG: soft lockup in chrdev_open 1 317d 317d
BUG: soft lockup in tcp_tasklet_func 1 317d 317d
KASAN: use-after-free Write in l2tp_session_delete 2 320d 333d
BUG: soft lockup in ext4_lazyinit_thread 1 321d 321d
BUG: soft lockup in __cleanup_mnt 1 321d 321d
BUG: soft lockup in bpf_map_free_deferred 8 321d 393d
BUG: soft lockup in hub_event 12 321d 391d
BUG: soft lockup in sys_recvmsg 10 325d 412d
BUG: soft lockup in addrconf_dad_work 3 325d 381d
BUG: soft lockup in perf_release 3 325d 388d
BUG: soft lockup in sys_sendto 1 328d 328d
KASAN: use-after-free Read in wg_queue_enqueue_per_peer_tx 1 329d 329d
BUG: soft lockup in loop_control_ioctl 3 330d 334d
BUG: soft lockup in perf_sched_delayed 1 331d 331d
BUG: soft lockup in kjournald2 1 332d 332d
BUG: soft lockup in tcp_keepalive_timer 12 329d 397d
BUG: soft lockup in ext4_file_write_iter 6 336d 402d
BUG: scheduling while atomic in tracepoint_probe_register_prio_may_exist C done 2 346d 445d
BUG: soft lockup in sys_readlink 2 337d 395d
BUG: unable to handle kernel paging request in swake_up_locked origin:lts syz 1 338d 338d
BUG: soft lockup in sys_mkdirat 8 341d 393d
BUG: soft lockup in tipc_net_finalize_work 1 347d 347d
BUG: soft lockup in uinput_write 1 348d 348d
BUG: soft lockup in uinput_ioctl 2 348d 388d
BUG: soft lockup in sys_mprotect 1 349d 349d
BUG: soft lockup in tun_chr_ioctl 5 350d 381d
BUG: soft lockup in sys_mknodat 3 350d 384d
BUG: scheduling while atomic in do_epoll_wait 15 344d 429d
BUG: soft lockup in sys_creat 4 351d 382d
UBSAN: array-index-out-of-bounds in bpf_bprintf_prepare C done 12 362d 450d
BUG: soft lockup in sys_sendmmsg 1 352d 352d
BUG: scheduling while atomic in kjournald2 2 353d 404d
android13-5.15-lts test error: SYZFATAL: failed to connect to host: dial tcp IP:NUM: connect: connection refused 6 354d 355d
SYZFAIL: SIGSEGV 260 315d 321d
BUG: scheduling while atomic in trace_set_clr_event C done 5 366d 454d
BUG: soft lockup in sys_add_key 2 356d 393d
BUG: scheduling while atomic in wait_on_page_bit_common 10 356d 417d
BUG: soft lockup in mld_ifc_work 1 357d 357d
BUG: soft lockup in tun_chr_close 3 357d 387d
BUG: soft lockup in tcp_delack_timer 1 357d 357d
BUG: soft lockup in lo_ioctl 2 358d 379d
BUG: workqueue leaked lock or atomic in bpf_map_free_deferred 4 359d 404d
BUG: soft lockup in sys_vmsplice 1 359d 359d
BUG: soft lockup in kcov_ioctl 8 359d 391d
BUG: soft lockup in kvm_dev_ioctl 1 360d 360d
BUG: soft lockup in sys_mkdir 2 361d 365d
BUG: scheduling while atomic in futex_wait_queue_me 19 345d 441d
BUG: soft lockup in syscall_enter_from_user_mode 1 362d 362d
BUG: soft lockup in sys_sched_setaffinity 1 362d 362d
BUG: scheduling while atomic in do_nanosleep origin:lts C done 74 345d 462d
BUG: workqueue leaked lock or atomic in bpf_prog_free_deferred C done 29 345d 450d
BUG: scheduling while atomic in vhost_worker 1 365d 365d
BUG: soft lockup in generic_file_write_iter 1 366d 366d
BUG: soft lockup in sys_readv 1 366d 366d
BUG: workqueue leaked lock or atomic in fsnotify_mark_destroy_workfn 2 367d 397d
KASAN: use-after-free Read in fuse_copy_one origin:upstream missing-backport C error error 1 380d 910d
BUG: scheduling while atomic in _vm_unmap_aliases C done 16 349d 426d
BUG: soft lockup in sys_unlink 7 369d 391d
BUG: soft lockup in destroy_super_work 1 369d 369d
BUG: scheduling while atomic in p9_client_rpc 1 369d 369d
BUG: soft lockup in sys_open 1 370d 370d
BUG: scheduling while atomic in __bpf_arch_text_poke 3 371d 411d
BUG: soft lockup in kernfs_fop_read_iter 1 371d 371d
BUG: soft lockup in inet_stream_connect 1 372d 372d
BUG: soft lockup in sys_perf_event_open 1 372d 372d
BUG: soft lockup in sys_request_key 1 372d 372d
BUG: unable to handle kernel NULL pointer dereference in dev_queue_xmit_nit origin:downstream C inconclusive 1 382d 512d
BUG: soft lockup in __bpf_trace_kfree 2 373d 378d
BUG: soft lockup in sys_unshare 1 373d 373d
BUG: soft lockup in srcu_invoke_callbacks 6 373d 404d
BUG: soft lockup in tty_ioctl 1 373d 373d
BUG: soft lockup in sys_io_submit 1 374d 374d
SYZFAIL: failed to mkdir origin:upstream syz 1 374d 636d
BUG: soft lockup in genl_parallel_done 1 374d 374d
BUG: soft lockup in sys_rename 2 375d 379d
BUG: soft lockup in tcp_setsockopt 1 375d 375d
BUG: scheduling while atomic in unlink_anon_vmas origin:lts C 1 386d 386d
BUG: soft lockup in sys_getdents64 6 378d 391d
BUG: scheduling while atomic in bit_wait_io 7 378d 404d
BUG: soft lockup in sys_keyctl 2 379d 380d
BUG: soft lockup in tun_chr_read_iter 1 379d 379d
BUG: soft lockup in sys_preadv 3 379d 394d
BUG: soft lockup in rtnl_setlink 1 380d 380d
BUG: soft lockup in security_socket_setsockopt 1 380d 380d
BUG: soft lockup in udp_setsockopt 1 380d 380d
BUG: soft lockup in linkwatch_event 3 380d 390d
BUG: using __this_cpu_read() in preemptible code in percpu_counter_add_batch 1 381d 381d
BUG: soft lockup in sys_mlockall 1 381d 381d
SYZFAIL: tun read failed origin:upstream syz 44 298d 635d
SYZFAIL: proc resp pipe read failed 13 307d 321d
BUG: soft lockup in fuse_dev_release 1 383d 383d
BUG: soft lockup in ppp_release 1 383d 383d
BUG: scheduling while atomic in xfer_to_guest_mode_handle_work 1 383d 383d
BUG: soft lockup in bpf_prog_release 1 384d 384d
BUG: soft lockup in free_work 1 385d 385d
BUG: soft lockup in vhost_vsock_dev_release 1 385d 385d
BUG: soft lockup in kernfs_fop_release 2 385d 390d
BUG: soft lockup in sys_openat 21 345d 401d
BUG: soft lockup in ext4_release_file 1 386d 386d
BUG: scheduling while atomic in syslog_print 2 387d 403d
BUG: soft lockup in fuse_dir_ioctl 1 387d 387d
BUG: workqueue leaked lock or atomic in ext4_end_io_rsv_work 4 388d 415d
BUG: soft lockup in udpv6_setsockopt 1 389d 389d
BUG: soft lockup in sys_fsopen 1 389d 389d
BUG: soft lockup in hci_sock_ioctl 1 391d 391d
BUG: soft lockup in net_rx_action 1 391d 391d
BUG: soft lockup in fqdir_work_fn 1 392d 392d
BUG: soft lockup in wg_packet_tx_worker (2) 1 392d 392d
BUG: scheduling while atomic in uevent_store 1 392d 392d
BUG: scheduling while atomic in start_this_handle 6 392d 431d
BUG: workqueue leaked lock or atomic in addrconf_dad_work 1 392d 392d
BUG: soft lockup in sys_fsmount 1 393d 393d
BUG: scheduling while atomic in kthreadd 1 393d 393d
BUG: scheduling while atomic in wait_for_common_io 3 394d 416d
BUG: soft lockup in kvm_vcpu_ioctl 1 394d 394d
BUG: scheduling while atomic in wait_for_common 6 394d 405d
BUG: scheduling while atomic in ext4_file_read_iter 1 394d 394d
BUG: soft lockup in sys_memfd_create 20 355d 394d
BUG: scheduling while atomic in wait_transaction_locked 4 396d 419d
BUG: scheduling while atomic in rtnl_lock_killable 1 397d 397d
BUG: scheduling while atomic in rcu_boost_kthread origin:lts missing-backport syz done 3 397d 443d
BUG: scheduling while atomic in ext4_buffered_write_iter 1 401d 401d
BUG: scheduling while atomic in pcpu_alloc 4 401d 409d
BUG: workqueue leaked lock or atomic in wb_workfn 1 402d 402d
BUG: scheduling while atomic in pipe_write 1 402d 402d
BUG: scheduling while atomic in __iomap_dio_rw 1 402d 402d
BUG: scheduling while atomic in sock_alloc_send_pskb 1 403d 403d
BUG: scheduling while atomic in kernfs_remove 1 403d 403d
BUG: scheduling while atomic in __kernfs_remove 1 404d 404d
BUG: scheduling while atomic in pipe_read 1 405d 405d
BUG: scheduling while atomic in synchronize_rcu_expedited 34 365d 436d
BUG: workqueue leaked lock or atomic in fsnotify_connector_destroy_workfn 1 405d 405d
BUG: scheduling while atomic in do_sys_poll 3 406d 414d
BUG: scheduling while atomic in do_sched_yield 1 407d 407d
BUG: scheduling while atomic in kauditd_thread 1 409d 409d
KASAN: use-after-free Read in delayed_work_timer_fn 1 411d 411d
panic: runtime error: floating point error [recovered] (2) 1 412d 412d
syzkaller: failed to copy syzkaller: file bin/linux_arm64/syz-fuzzer does not exist 2 323d 323d
BUG: workqueue leaked lock or atomic in wg_packet_handshake_receive_worker 1 413d 413d
BUG: soft lockup in sys_madvise 1 414d 414d
general protection fault in fq_codel_enqueue 1 416d 416d
BUG: scheduling while atomic in rtnl_lock 1 419d 419d
panic: replaceArg: group fields don't match: NUM/NUM 7 430d 430d
KASAN: use-after-free Read in vma_interval_tree_augment_rotate 2 442d 444d
kernel BUG in jbd2_journal_get_create_access missing-backport origin:upstream syz error error 1 885d 885d
BUG: scheduling while atomic in __skb_wait_for_more_packets 1 459d 459d
KASAN: use-after-free Read in unaccount_page_cache_page 118 433d 908d
general protection fault in ax88179_disconnect C done 2 482d 482d
KASAN: use-after-free Write in enqueue_timer 1 481d 481d
general protection fault in tipc_conn_close (2) 4 487d 603d
general protection fault in skb_segment origin:upstream C done 1 505d 519d
KASAN: use-after-free Read in f2fs_release_page (2) 1 499d 499d
kernel BUG in prog_array_map_poke_run missing-backport origin:upstream C done 32 485d 553d
KASAN: use-after-free Read in __skb_datagram_iter origin:upstream C done 1 516d 547d
BUG: scheduling while atomic in f2fs_register_inmem_page origin:lts C error done 4 535d 789d
corrupted report (2) 1 528d 528d
KASAN: use-after-free Read in vma_interval_tree_insert (2) 1 536d 536d
KASAN: use-after-free Read in unix_stream_read_actor origin:upstream C 1 549d 549d
KASAN: use-after-free Write in kernfs_get 3 568d 655d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 20 617d 819d
BUG: soft lockup in ext4_file_mmap 1 626d 626d
BUG: soft lockup in net_tx_action 1 630d 630d
BUG: soft lockup in wg_packet_tx_worker 1 636d 636d
BUG: soft lockup in tc_modify_qdisc origin:lts C done done 254 621d 676d
BUG: soft lockup in tipc_disc_timeout 1 645d 645d
BUG: soft lockup in addrconf_rs_timer 1 660d 660d
BUG: soft lockup in wg_packet_handshake_send_worker 2 663d 669d
corrupted report 4 667d 749d
BUG: unable to handle kernel paging request in fuse_dev_do_write 2 671d 673d
KASAN: stack-out-of-bounds Read in __show_regs 1 677d 677d
kernel BUG in ext4_mb_find_by_goal C error done 19 687d 726d
KASAN: out-of-bounds Read in ext4_xattr_set_entry 1 694d 694d
fatal error: Connection to IP closed by remote host. 1 694d 694d
VFS: Busy inodes after unmount (use-after-free) origin:downstream C error done 2 705d 807d
KASAN: use-after-free Read in f2fs_release_page f2fs 5 709d 858d
general protection fault in tipc_conn_close 4 713d 928d
general protection fault in ext4_release_dquot 1 720d 720d
BUG: unable to handle kernel paging request in z_erofs_decompress_queue C error error 1 751d 923d
panic: runtime error: floating point errorConnection to IP closed by remote host. (2) 1 745d 745d
KASAN: use-after-free Read in macsec_get_iflink 1 748d 748d
KASAN: slab-out-of-bounds Read in iostat_update_and_unbind_ctx 1 766d 766d
general protection fault in fuse_atomic_open 1 772d 772d
KASAN: use-after-free Read in f2fs_remove_dirty_inode origin:lts syz error error 1 786d 786d
KASAN: use-after-free Read in insert_work 1 780d 780d
syzkaller: make host failed: failed to run ["make" "host" "ci"]: exit status 2 2 808d 808d
KASAN: use-after-free Read in move_linked_works 1 813d 813d
KASAN: use-after-free Read in kernfs_get 3 813d 937d
KASAN: use-after-free Read in do_handle_mm_fault syz error done 4 841d 867d
KASAN: use-after-free Write in vma_put_file_ref syz error done 2 843d 866d
kernel BUG in pfkey_send_acquire syz unreliable error 35 912d 946d
android13-5.15-lts boot error: can't ssh into the instance 1 840d 840d
kernel BUG in ext4_free_blocks ext4 1 842d 842d
KASAN: use-after-free Read in __mark_inode_dirty fat 2 859d 873d
panic: runtime error: floating point errorConnection to IP closed by remote host. 1 838d 838d
panic: runtime error: floating point error 3 847d 894d
KASAN: use-after-free Read in evict fat 1 852d 852d
kernel BUG in cdc_ncm_fill_tx_frame 1 902d 902d
panic: runtime error: floating point error [recovered] 1 880d 880d
KASAN: use-after-free Read in usb_udc_uevent 1 861d 861d
KASAN: use-after-free Read in vma_interval_tree_insert 2 867d 894d
kernel BUG in jbd2_journal_dirty_metadata C 1 877d 877d
KASAN: use-after-free Read in __tcf_qdisc_find 1 894d 894d
kernel BUG in mld_newpack 1 908d 908d
KASAN: slab-out-of-bounds Read in __htab_map_lookup_and_delete_batch 1 901d 901d
BUG: soft lockup in input_repeat_key 1 903d 903d
KASAN: use-after-free Read in mon_bin_flush 1 942d 942d
kernel panic: EXT4-fs (device loop0): panic forced after error ext4 C error 1 870d 870d