syzbot


Out of 279 bugs, 250 were automatically obsoleted (92 due to revoked reproducers), 29 were invalidated by users.
Title Repro Cause bisect Fix bisect Count Last Reported
BUG: soft lockup in hub_event C 1 175d 175d
general protection fault in tipc_conn_close (2) 2 131d 206d
KASAN: use-after-free Read in loop_control_ioctl (2) 1 135d 135d
BUG: Bad page map (2) 7 143d 261d
general protection fault in rcu_sync_func (2) 23 156d 452d
kernel BUG in fd_array_map_free 1 152d 152d
KASAN: use-after-free Write in ext4_fill_super syz 1 163d 177d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (9) 20 181d 383d
general protection fault in __free_pages_ok 1 174d 174d
BUG: unable to handle kernel paging request in deref_stack_reg 1 188d 188d
SYZFAIL: both fault injection and rerun are enabled for the same call syz 9 104d 106d
kernel BUG in copy_page_range 1 194d 194d
kernel BUG in jbd2_journal_get_create_access (3) 2 222d 334d
KASAN: use-after-free Read in get_max_inline_xattr_value_size (2) C 3 224d 232d
BUG: unable to handle kernel paging request in run_timer_softirq 2 215d 222d
SYZFAIL: bad argument type syz 4 245d 1071d
BUG: using smp_processor_id() in preemptible code in usbnet_skb_return syz 1 246d 705d
SYZFAIL: invalid syscall number syz 4 246d 1072d
KASAN: slab-out-of-bounds Read in ext4_find_extent ext4 C 1 247d 433d
SYZFAIL: clock_gettime failed syz 6 248d 812d
SYZFAIL: command has bad number of arguments syz 3 248d 1070d
kernel BUG in __migration_entry_wait 1 245d 245d
kernel BUG in validate_xmit_skb 2 248d 283d
KASAN: null-ptr-deref Write in unlink_file_vma 1 254d 254d
KASAN: use-after-free Write in trylock_super 4 265d 355d
SYZFAIL: negative running syz 81 250d 1105d
KASAN: use-after-free Read in unaccount_page_cache_page 143 263d 477d
KASAN: out-of-bounds Read in ext4_xattr_set_entry ext4 C 14 312d 1077d
kernel BUG at net/core/skbuff.c:LINE! C 267 292d 1512d
SYZFAIL: unknown binary format syz 1 315d 1043d
VFS: Busy inodes after unmount (use-after-free) C 4 316d 371d
KASAN: use-after-free Read in f2fs_remove_dirty_inode 2 316d 330d
BUG: unable to handle kernel paging request in z_erofs_vle_unzip_all C 1 316d 487d
fatal error: runtime.chanrecvunexpected signal during runtime execution 1 287d 287d
KASAN: use-after-free Read in ext4_group_desc_csum 6 321d 374d
KASAN: use-after-free Read in f2fs_release_page f2fs 4 334d 434d
BUG: corrupted list in __dentry_kill 1 335d 335d
kernel BUG in __es_remove_extent 1 305d 305d
KASAN: use-after-free Read in process_one_work 1 349d 349d
general protection fault in tipc_conn_close 9 349d 614d
fatal error: faultConnection to IP closed by remote host. 1 350d 350d
KASAN: slab-out-of-bounds Write in tun_free_netdev (2) syz 4 537d 1060d
syzkaller: make host failed: failed to run ["make" "host" "ci"]: exit status 2 (2) 2 372d 372d
fatal error: Connection to IP closed by remote host. 1 374d 374d
KASAN: null-ptr-deref Write in mark_buffer_dirty_inode fat 1 395d 395d
BUG: corrupted list in p9_fd_cancel 1 401d 401d
BUG: unable to handle kernel paging request in expire_timers (2) 6 406d 657d
KASAN: use-after-free Read in lo_ioctl 1 413d 413d
BUG: scheduling while atomic in f2fs_register_inmem_page 1 331d 331d
KASAN: use-after-free Read in usb_udc_uevent (3) 2 419d 457d
KASAN: use-after-free Read in loop_control_ioctl 1 424d 424d
kernel panic: panic_on_warn set C 52 1093d 1192d
BUG: Dentry still in use [unmount of msdos loop0] C 36 858d 1153d
BUG: Dentry still in use [unmount of vfat loop0] C 47 859d 1173d
BUG: Dentry still in use [unmount of ext4 loop0] C 132 857d 1174d
KASAN: use-after-free Read in free_netdev C 427 557d 1457d
BUG: Dentry still in use [unmount of devpts devpts] C 11 871d 1168d
BUG: Dentry still in use [unmount of sysfs sysfs] C 12 860d 1140d
KASAN: use-after-free Read in skb_dequeue syz 1 930d 930d
general protection fault in legacy_get_tree C 9 888d 1239d
kernel BUG in bd_finish_claiming syz 2 906d 906d
divide error in get_scan_count C 6 827d 854d
BUG: Dentry still in use [unmount of incremental-fs incremental-fs] C 13 859d 1129d
KASAN: use-after-free Read in exact_lock 1 436d 436d
KASAN: slab-out-of-bounds Write in netif_napi_del C 11 559d 624d
KASAN: use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio C 6 1055d 1117d
general protection fault in chrdev_open C 1 634d 634d
KASAN: use-after-free Read in ip_check_mc_rcu C 5 889d 1097d
BUG: unable to handle kernel paging request in dquot_add_inodes C 3 838d 1179d
BUG: scheduling while atomic: syz-executor/ADDR C 56 864d 994d
BUG: Dentry still in use [unmount of overlay overlay] C 20 865d 1164d
general protection fault in pending_reads_dispatch_ioctl C 10 769d 1115d
KASAN: slab-out-of-bounds Write in legacy_parse_param C 2 792d 792d
SYZFAIL: both collide and fault injection are enabled syz 15 317d 933d
BUG: Dentry still in use [unmount of 9p 9p] C 11 862d 1127d
BUG: Dentry still in use [unmount of ext2 loop0] C 1 1086d 1086d
BUG: Dentry still in use [unmount of ramfs ramfs] C 476 758d 1080d
KASAN: use-after-free Read in filp_close C 3 942d 1147d
kernel BUG in vhost_get_vq_desc C 4 704d 744d
general protection fault in mon_bin_flush C 2 532d 534d
BUG: Dentry still in use [unmount of erofs loop0] C 3 929d 1132d
BUG: Dentry still in use [unmount of binder binder] C 10 860d 1149d
BUG: Dentry still in use [unmount of tmpfs tmpfs] C 10 955d 1126d
general protection fault in __fsnotify_parent syz 3 898d 995d
BUG: Dentry still in use [unmount of fuse fuse] C 5 860d 1148d
KASAN: stack-out-of-bounds Read in unwind_next_frame C 49 976d 1480d
KASAN: invalid-free in packet_set_ring C 1 812d 812d
general protection fault in hci_uart_tty_ioctl C 2 597d 597d
KASAN: use-after-free Write in ext4_write_inline_data_end C 6 1031d 1074d
kernel BUG in pfkey_send_acquire C 278 476d 1141d
divide error in genelink_tx_fixup C 65 784d 867d
BUG: Dentry still in use [unmount of f2fs loop0] C 1 1099d 1099d
BUG: unable to handle kernel paging request in __schedule C 12 1102d 1258d
BUG: unable to handle kernel paging request in bpf_trace_run2 C 4 1103d 1258d
BUG: unable to handle kernel paging request in bpf_trace_run7 C 3 1109d 1145d
KASAN: invalid-free in create_cache C 159 1122d 1191d
general protection fault in free_percpu C 2 1147d 1147d
BUG: unable to handle kernel paging request in dqput C 14 1162d 1257d
general protection fault in dqput C 2 1162d 1183d
KASAN: use-after-free Write in betop_probe C 1 1174d 1174d
KASAN: use-after-free Read in tipc_mcast_xmit C 23 1230d 1251d
KASAN: slab-out-of-bounds Read in f2fs_build_segment_manager C 5 1236d 1255d
general protection fault in ieee80211_key_free C 11 1236d 1246d
KASAN: use-after-free Read in io_cancel_async_work C 25 1236d 1290d
general protection fault in ieee80211_assign_vif_chanctx C 3 1238d 1244d
BUG: corrupted list in io_poll_wake C 7 1238d 1281d
KASAN: stack-out-of-bounds Read in iov_iter_revert C 37 1242d 1292d
KASAN: invalid-free in ieee80211_ibss_leave C 1 1244d 1244d
general protection fault in dma_buf_release C 99 1247d 1332d
KASAN: use-after-free Read in io_sq_wq_submit_work C 3 1248d 1280d
KASAN: use-after-free Read in tipc_named_reinit syz 8 1252d 1487d
BUG: unable to handle kernel paging request in dquot_add_space C 1 1257d 1257d
BUG: unable to handle kernel paging request in bpf_trace_run4 C 2 1258d 1258d
general protection fault in tty_release C 11 1270d 1282d
general protection fault in sock_close syz 13 1271d 1284d
kernel BUG at ./include/linux/fs.h:LINE! syz 1 1271d 1271d
KASAN: use-after-free Write in eventfd_release syz 1 1273d 1273d
kernel BUG at fs/inode.c:LINE! C 5 1275d 1284d
KASAN: use-after-free Write in ex_handler_refcount syz 4 1280d 1282d
general protection fault in uhid_char_release C 27 1281d 1458d
kernel panic: Attempted to kill init! C 1 1281d 1281d
KASAN: use-after-free Write in pipe_release syz 1 1282d 1282d
KASAN: use-after-free Read in dput syz 1 1282d 1282d
KASAN: use-after-free Read in __fsnotify_parent syz 1 1283d 1283d
general protection fault in create_empty_buffers (3) 1 452d 452d
general protection fault in kernel_accept 1 491d 491d
KASAN: user-memory-access Write in profile_hits (2) 1 510d 510d
BUG: Bad page map 1 556d 556d
KASAN: use-after-free Write in __mod_timer (3) 2 559d 615d
KASAN: use-after-free Write in mod_delayed_work_on 1 582d 582d
KASAN: use-after-free Write in kjournald2 1 620d 620d
panic: bad group arg size NUM, should be <= NUM for &prog.GroupArg{ArgCommon:prog.ArgCommon{ref:0x2de, dir:0x0}, Inner:[ 7 521d 522d
kernel BUG in jbd2_journal_get_create_access (2) 1 665d 665d
general protection fault in sock_from_file C 6 1293d 1297d
BUG: unable to handle kernel paging request in do_sys_open C 12 1359d 1418d
KASAN: use-after-free Write in input_ff_create C 1 1389d 1389d
KASAN: slab-out-of-bounds Read in hiddev_ioctl_usage C 2 1407d 1425d
KASAN: slab-out-of-bounds Write in betop_probe C 1 1408d 1408d
BUG: Bad page state C 9 1434d 1465d
android12-5.4 build error (2) 2 675d 675d
KASAN: use-after-free Write in addrconf_ifdown 1 678d 678d
BUG: soft lockup in process_srcu 1 681d 681d
SYZFAIL: bad thread state in completion 1 686d 686d
SYZFAIL: tun: ioctl(TUNSETIFF) failed (2) 3 698d 716d
KASAN: use-after-free Read in usb_udc_uevent (2) 2 701d 717d
KASAN: null-ptr-deref Write in d_delete 3 737d 737d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (8) 2 622d 622d
kernel BUG in ext4_ext_insert_extent 1 768d 768d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (7) 3 769d 878d
general protection fault in fire_user_return_notifiers 1 782d 782d
KASAN: user-memory-access Write in profile_hits 1 785d 785d
KASAN: use-after-free Read in f2fs_available_free_memory 7 788d 971d
general protection fault in klist_iter_exit 1 801d 801d
kernel BUG in jbd2_journal_get_create_access 1 808d 808d
SYZFAIL: too much cover 1 819d 819d
SYZFAIL: open of /sys/kernel/debug/kcov failed 6 820d 922d
SYZFAIL: cover mmap failed 3 821d 821d
KASAN: use-after-free Write in chroot_fs_refs 1 825d 825d
SYZFAIL: copyin: bad argument size 4 825d 846d
SYZFAIL: input command overflows input 1 829d 829d
SYZFAIL: out of opened kcov threads 32 813d 814d
BUG: soft lockup in smp_call_function 1 849d 849d
KASAN: use-after-free Read in dev_uevent (2) 2 853d 859d
BUG: Dentry still in use [unmount of msdos loop4] 9 858d 1136d
BUG: Dentry still in use [unmount of vfat loop2] 5 861d 982d
BUG: Dentry still in use [unmount of ext4 loop3] 14 861d 1174d
panic: failed to create a resource ifindex with ioctl$sock_SIOCGIFCONF, ioctl$sock_SIOCGIFCONF 2 863d 874d
general protection fault in __device_attach 8 864d 1120d
BUG: corrupted list in firmware_fallback_sysfs 70 865d 1413d
BUG: Dentry still in use [unmount of ext4 loop2] 14 882d 1126d
KASAN: use-after-free Write in __mod_timer (2) 1 883d 883d
general protection fault in rcu_sync_func 2 884d 913d
BUG: Dentry still in use [unmount of vfat loop1] (2) 2 885d 933d
BUG: Dentry still in use [unmount of vfat loop4] (2) 1 885d 885d
KASAN: use-after-free Write in paging64_update_accessed_dirty_bits (2) 1 886d 886d
BUG: Dentry still in use [unmount of ext4 loop4] 15 887d 1155d
KASAN: use-after-free Read in hci_uart_flush 1 887d 887d
BUG: Dentry still in use [unmount of ext4 loop5] 14 889d 1171d
BUG: Dentry still in use [unmount of vfat loop5] 8 889d 1173d
BUG: Dentry still in use [unmount of msdos loop3] (2) 1 890d 890d
BUG: Dentry still in use [unmount of ext4 loop1] 9 896d 1168d
BUG: Dentry still in use [unmount of erofs loop2] 1 898d 898d
KASAN: out-of-bounds Read in unwind_next_frame 16 900d 1406d
BUG: unable to handle kernel paging request in srcu_invoke_callbacks 1 927d 927d
BUG: Dentry still in use [unmount of erofs loop1] 2 929d 929d
BUG: Dentry still in use [unmount of msdos loop5] 7 937d 1113d
SYZFAIL: sandbox fork failed 4 939d 1086d
KASAN: slab-out-of-bounds Write in __internal_add_timer (2) 4 939d 1114d
SYZFAIL: tun: ioctl(TUNSETIFF) failed 1 839d 839d
BUG: Dentry still in use [unmount of msdos loop2] (2) 1 964d 964d
BUG: Dentry still in use [unmount of vfat loop3] 6 970d 1139d
KASAN: slab-out-of-bounds Write in __run_timers 4 979d 1169d
BUG: corrupted list in p9_fd_cancelled 3 980d 1188d
BUG: unable to handle kernel paging request in corrupted C 1 1421d 1421d
general protection fault in corrupted C 1 1455d 1455d
BUG: unable to handle kernel paging request in kfree C 4 1468d 1471d
KASAN: use-after-free Read in hrtimer_start_range_ns 1 1011d 1011d
KASAN: use-after-free Read in dev_uevent 4 1011d 1075d
BUG: Dentry still in use [unmount of vfat loop4] 3 1013d 1165d
android12-5.4 boot error: can't ssh into the instance 2 1016d 1016d
general protection fault in kernfs_find_ns 1 1017d 1017d
general protection fault in create_empty_buffers (2) 1 1029d 1029d
KASAN: use-after-free Write in paging64_update_accessed_dirty_bits 1 1034d 1034d
BUG: Dentry still in use [unmount of msdos loop3] 2 1044d 1084d
SYZFAIL: netlink_send_ext: short netlink read 1 1045d 1045d
general protection fault in bdevname 1 1049d 1049d
BUG: Dentry still in use [unmount of vfat loop1] 4 1059d 1171d
BUG: unable to handle kernel paging request in expire_timers 3 1059d 1151d
BUG: Dentry still in use [unmount of msdos loop1] 2 1066d 1072d
general protection fault in expire_timers 1 1066d 1066d
BUG: Dentry still in use [unmount of msdos loop2] 7 1085d 1153d
BUG: Dentry still in use [unmount of ext2 loop2] 1 1086d 1086d
SYZFAIL: result overflows kMaxCommands 1 1097d 1097d
BUG: Dentry still in use [unmount of f2fs loop4] 1 1099d 1099d
panic: failed to create a resource ifindex with ioctl$sock_SIOCGIFCONF 1 1099d 1099d
KASAN: use-after-free Write in __mod_timer 1 1099d 1099d
android12-5.4 build error 19 1122d 1229d
BUG: Dentry still in use [unmount of erofs loop5] 1 1132d 1132d
BUG: unable to handle kernel NULL pointer dereference in call_timer_fn 5 1139d 1315d
KASAN: use-after-free Read in usb_udc_uevent 1 1144d 1144d
panic: runtime error: invalid memory address or nil pointer dereference 233 1028d 1028d
BUG: soft lockup in __perf_sw_event 2 1161d 1173d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (6) 1 1058d 1058d
kernel BUG at block/bio.c:LINE! 1 1180d 1180d
BUG: unable to handle kernel paging request in syscall_trace_enter 3 1181d 1270d
android12-5.4 boot error: kernel panic: VFS: Unable to mount root fs on unknown-block(0,0) 300 1192d 1228d
KASAN: use-after-free Read in chrdev_open 1 1231d 1231d
general protection fault in create_empty_buffers 1 1235d 1235d
divide error in mac80211_hwsim_bss_info_changed 2 1237d 1245d
KASAN: slab-out-of-bounds Write in f2fs_build_segment_manager 4 1241d 1249d
syzkaller: failed to copy syzkaller: file bin/netbsd_amd64/syz-executor does not exist 1 1129d 1129d
KASAN: slab-out-of-bounds Write in __internal_add_timer 4 1252d 1326d
BUG: soft lockup in __run_hrtimer 2 1253d 1257d
BUG: unable to handle kernel paging request in bpf_trace_run6 1 1270d 1270d
KASAN: slab-out-of-bounds Read in firmware_fallback_sysfs 6 1275d 1385d
general protection fault in fib_check_nexthop 2 1280d 1296d
kernel BUG at arch/x86/kernel/traps.c:LINE! 1 1288d 1288d
general protection fault in io_sq_wq_submit_work 1 1291d 1291d
KASAN: use-after-free Read in ext4_xattr_set_entry 6 1304d 1485d
KASAN: slab-out-of-bounds Write in tun_free_netdev 2 1305d 1320d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (5) 2 1214d 1257d
KASAN: use-after-free Write in skb_release_data 2 1312d 1343d
kernel BUG at ./include/linux/swapops.h:LINE! 1 1338d 1338d
general protection fault in perf_tp_event 7 1344d 1511d
KASAN: use-after-free Read in smsc95xx_mdio_read 4 1353d 1360d
KASAN: use-after-free Read in _vm_unmap_aliases 1 1366d 1366d
KASAN: slab-out-of-bounds Read in tipc_nl_name_table_dump 1 1376d 1376d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (4) 20 1270d 1382d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 2 1375d 1376d
KASAN: use-after-free Read in dentry_free 1 1396d 1396d
BUG: unable to handle kernel paging request in netif_receive_generic_xdp 1 1405d 1405d
syzkaller: make target failed: failed to run ["make" "target"]: exit status 2 (2) 5 1293d 1296d
BUG: corrupted list in prepare_to_wait_event 4 1409d 1458d
android-5.4 boot error: can't ssh into the instance (3) 12 1293d 1293d
android-5.4 boot error: can't ssh into the instance (2) 3 1293d 1293d
KASAN: use-after-free Write in copyin 4 1422d 1465d
android-5.4 test error: timed out 3 1426d 1426d
KASAN: use-after-free Read in __schedule 3 1434d 1461d
KASAN: use-after-free Read in dev_get_by_index_rcu 1 1443d 1443d
general protection fault in prepare_to_wait_event 1 1444d 1444d
KASAN: use-after-free Write in locks_delete_block 2 1444d 1509d
general protection fault in uhid_char_write 2 1455d 1455d
KASAN: stack-out-of-bounds Read in update_stack_state 2 1481d 1489d
KASAN: out-of-bounds Read in update_stack_state 1 1482d 1482d
KASAN: slab-out-of-bounds Read in tipc_named_reinit 1 1487d 1487d
KASAN: use-after-free Read in flock_lock_inode 1 1496d 1496d
kernel BUG at net/ipv6/esp6.c:LINE! 1 1497d 1497d
KASAN: use-after-free Read in tun_chr_write_iter 1 1502d 1502d
syzkaller: make target failed: failed to run ["make" "target"]: exit status 2 2 1383d 1383d
KASAN: use-after-free Read in do_xdp_generic 198 1475d 1505d
syzkaller: make host failed: failed to run ["make" "host" "ci"]: exit status 2 1 1402d 1402d
android-5.4 test error: BUG: mismatching fuzzer/executor system call descriptions: ADDR vs ADDR 9 1427d 1429d
android-5.4 boot error: can't ssh into the instance 6 1439d 1439d
kernel panic: audit: out of memory in audit_log_start 3 1468d 1471d
kernel panic: audit: rate limit exceeded C 1 1471d 1471d
kernel panic: audit: backlog limit exceeded C 3 1469d 1471d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (3) 2 1483d 1483d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (2) 1 1495d 1495d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 1 1505d 1505d