syzbot


Out of 302 bugs, 271 were automatically obsoleted (98 due to revoked reproducers), 31 were invalidated by users.
Title Repro Cause bisect Fix bisect Count Last Reported
SYZFAIL: proc resp pipe read failed 57 23d 31d
BUG: unable to handle kernel paging request in ipgre_header C 1 110d 722d
BUG: soft lockup in sys_getsockopt 1 101d 101d
BUG: soft lockup in __perf_sw_event (2) C 4 111d 1099d
BUG: corrupted list in p9_fd_cancelled (2) syz 25 112d 976d
BUG: soft lockup in locks_remove_file 1 119d 119d
syzkaller: failed to copy syzkaller: file bin/linux_arm64/syz-fuzzer does not exist 2 32d 32d
BUG: unable to handle kernel paging request in srcu_invoke_callbacks (2) 1 131d 131d
panic: runtime error: floating point errorConnection to IP closed by remote host. 1 132d 132d
general protection fault in skb_segment C 1 145d 229d
general protection fault in bdevname (2) C 6 146d 861d
kernel BUG in unmap_page_range 15 138d 399d
panic: replaceArg: group fields don't match: NUM/NUM 3 140d 140d
SYZFAIL: tun read failed syz 850 391d 1244d
BUG: unable to handle kernel paging request in run_timer_softirq (2) 2 146d 195d
kernel BUG in dev_map_free 2 147d 164d
KASAN: use-after-free Read in __ext4_iget 13 155d 362d
kernel BUG in __migration_entry_wait (2) 5 174d 264d
UBSAN: array-index-out-of-bounds in check_ld_imm 1 174d 174d
KASAN: slab-out-of-bounds Read in unaccount_page_cache_page 2 177d 258d
KASAN: use-after-free Read in usb_udc_uevent (4) 1 189d 189d
android12-5.4 test error: BUG: failed to run executor version: failed to start ./syz-executor [./syz-executor version]: fork/exec ./syz-executor: 1 199d 199d
android12-5.4 test error: BUG: failed to run executor version: failed to run ["./syz-executor" "version"]: signal: segmentation fault 1 199d 199d
BUG: soft lockup in hub_event C 1 320d 320d
general protection fault in tipc_conn_close (2) 2 276d 351d
KASAN: use-after-free Read in loop_control_ioctl (2) 1 280d 280d
BUG: Bad page map (2) 7 288d 406d
general protection fault in rcu_sync_func (2) 23 301d 598d
kernel BUG in fd_array_map_free 1 297d 297d
KASAN: use-after-free Write in ext4_fill_super syz 1 308d 322d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (9) 20 326d 528d
general protection fault in __free_pages_ok 1 319d 319d
BUG: unable to handle kernel paging request in deref_stack_reg 1 333d 333d
SYZFAIL: both fault injection and rerun are enabled for the same call syz 9 249d 251d
kernel BUG in copy_page_range 1 339d 339d
kernel BUG in jbd2_journal_get_create_access (3) 2 367d 480d
KASAN: use-after-free Read in get_max_inline_xattr_value_size (2) C 3 369d 377d
BUG: unable to handle kernel paging request in run_timer_softirq 2 360d 367d
SYZFAIL: bad argument type syz 4 390d 1217d
BUG: using smp_processor_id() in preemptible code in usbnet_skb_return syz 1 391d 850d
SYZFAIL: invalid syscall number syz 4 391d 1217d
KASAN: slab-out-of-bounds Read in ext4_find_extent ext4 C 1 392d 578d
SYZFAIL: clock_gettime failed syz 6 393d 957d
SYZFAIL: command has bad number of arguments syz 3 393d 1215d
kernel BUG in __migration_entry_wait 1 390d 390d
kernel BUG in validate_xmit_skb 2 393d 428d
KASAN: null-ptr-deref Write in unlink_file_vma 1 399d 399d
KASAN: use-after-free Write in trylock_super 4 411d 500d
SYZFAIL: negative running syz 81 395d 1250d
KASAN: use-after-free Read in unaccount_page_cache_page 143 409d 622d
KASAN: out-of-bounds Read in ext4_xattr_set_entry ext4 C 14 457d 1223d
kernel BUG at net/core/skbuff.c:LINE! C 267 437d 1657d
SYZFAIL: unknown binary format syz 1 460d 1189d
VFS: Busy inodes after unmount (use-after-free) C 4 461d 517d
KASAN: use-after-free Read in f2fs_remove_dirty_inode 2 461d 475d
BUG: unable to handle kernel paging request in z_erofs_vle_unzip_all C 1 462d 632d
fatal error: runtime.chanrecvunexpected signal during runtime execution 1 432d 432d
KASAN: use-after-free Read in ext4_group_desc_csum 6 466d 519d
KASAN: use-after-free Read in f2fs_release_page f2fs 4 480d 579d
BUG: corrupted list in __dentry_kill 1 480d 480d
kernel BUG in __es_remove_extent 1 450d 450d
KASAN: use-after-free Read in process_one_work 1 494d 494d
general protection fault in tipc_conn_close 9 494d 759d
fatal error: faultConnection to IP closed by remote host. 1 495d 495d
KASAN: slab-out-of-bounds Write in tun_free_netdev (2) syz 4 682d 1205d
syzkaller: make host failed: failed to run ["make" "host" "ci"]: exit status 2 (2) 2 518d 518d
fatal error: Connection to IP closed by remote host. 1 519d 519d
KASAN: null-ptr-deref Write in mark_buffer_dirty_inode fat 1 540d 540d
BUG: corrupted list in p9_fd_cancel 1 546d 546d
BUG: unable to handle kernel paging request in expire_timers (2) 6 551d 802d
KASAN: use-after-free Read in lo_ioctl 1 558d 558d
BUG: scheduling while atomic in f2fs_register_inmem_page 1 476d 476d
KASAN: use-after-free Read in usb_udc_uevent (3) 2 564d 602d
KASAN: use-after-free Read in loop_control_ioctl 1 569d 569d
kernel panic: panic_on_warn set C 52 1238d 1337d
BUG: Dentry still in use [unmount of msdos loop0] C 36 1003d 1298d
BUG: Dentry still in use [unmount of vfat loop0] C 47 1004d 1318d
BUG: Dentry still in use [unmount of ext4 loop0] C 132 1002d 1319d
KASAN: use-after-free Read in free_netdev C 427 702d 1603d
BUG: Dentry still in use [unmount of devpts devpts] C 11 1017d 1313d
BUG: Dentry still in use [unmount of sysfs sysfs] C 12 1005d 1286d
KASAN: use-after-free Read in skb_dequeue syz 1 1075d 1075d
general protection fault in legacy_get_tree C 9 1033d 1384d
kernel BUG in bd_finish_claiming syz 2 1051d 1051d
divide error in get_scan_count C 6 972d 999d
BUG: Dentry still in use [unmount of incremental-fs incremental-fs] C 13 1004d 1274d
KASAN: use-after-free Read in exact_lock 1 581d 581d
KASAN: slab-out-of-bounds Write in netif_napi_del C 11 704d 769d
KASAN: use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio C 6 1200d 1262d
general protection fault in chrdev_open C 1 780d 780d
KASAN: use-after-free Read in ip_check_mc_rcu C 5 1034d 1242d
BUG: unable to handle kernel paging request in dquot_add_inodes C 3 984d 1324d
BUG: scheduling while atomic: syz-executor/ADDR C 56 1010d 1139d
BUG: Dentry still in use [unmount of overlay overlay] C 20 1010d 1309d
general protection fault in pending_reads_dispatch_ioctl C 10 914d 1260d
KASAN: slab-out-of-bounds Write in legacy_parse_param C 2 937d 937d
SYZFAIL: both collide and fault injection are enabled syz 15 462d 1078d
BUG: Dentry still in use [unmount of 9p 9p] C 11 1007d 1272d
BUG: Dentry still in use [unmount of ext2 loop0] C 1 1231d 1231d
BUG: Dentry still in use [unmount of ramfs ramfs] C 476 903d 1225d
KASAN: use-after-free Read in filp_close C 3 1087d 1292d
kernel BUG in vhost_get_vq_desc C 4 849d 890d
general protection fault in mon_bin_flush C 2 678d 679d
BUG: Dentry still in use [unmount of erofs loop0] C 3 1074d 1278d
BUG: Dentry still in use [unmount of binder binder] C 10 1005d 1294d
BUG: Dentry still in use [unmount of tmpfs tmpfs] C 10 1100d 1271d
general protection fault in __fsnotify_parent syz 3 1043d 1140d
BUG: Dentry still in use [unmount of fuse fuse] C 5 1005d 1293d
KASAN: stack-out-of-bounds Read in unwind_next_frame C 49 1121d 1625d
KASAN: invalid-free in packet_set_ring C 1 957d 957d
general protection fault in hci_uart_tty_ioctl C 2 742d 742d
KASAN: use-after-free Write in ext4_write_inline_data_end C 6 1176d 1220d
kernel BUG in pfkey_send_acquire C 278 621d 1286d
divide error in genelink_tx_fixup C 65 929d 1013d
BUG: Dentry still in use [unmount of f2fs loop0] C 1 1244d 1244d
BUG: unable to handle kernel paging request in __schedule C 12 1247d 1404d
BUG: unable to handle kernel paging request in bpf_trace_run2 C 4 1248d 1403d
BUG: unable to handle kernel paging request in bpf_trace_run7 C 3 1254d 1290d
KASAN: invalid-free in create_cache C 159 1267d 1336d
general protection fault in free_percpu C 2 1292d 1292d
BUG: unable to handle kernel paging request in dqput C 14 1307d 1403d
general protection fault in dqput C 2 1308d 1328d
KASAN: use-after-free Write in betop_probe C 1 1320d 1320d
KASAN: use-after-free Read in tipc_mcast_xmit C 23 1375d 1396d
KASAN: slab-out-of-bounds Read in f2fs_build_segment_manager C 5 1381d 1400d
general protection fault in ieee80211_key_free C 11 1381d 1391d
KASAN: use-after-free Read in io_cancel_async_work C 25 1382d 1435d
general protection fault in ieee80211_assign_vif_chanctx C 3 1383d 1390d
BUG: corrupted list in io_poll_wake C 7 1384d 1426d
KASAN: stack-out-of-bounds Read in iov_iter_revert C 37 1388d 1437d
KASAN: invalid-free in ieee80211_ibss_leave C 1 1389d 1389d
general protection fault in dma_buf_release C 99 1392d 1477d
KASAN: use-after-free Read in io_sq_wq_submit_work C 3 1393d 1425d
KASAN: use-after-free Read in tipc_named_reinit syz 8 1397d 1632d
BUG: unable to handle kernel paging request in dquot_add_space C 1 1402d 1402d
BUG: unable to handle kernel paging request in bpf_trace_run4 C 2 1403d 1403d
general protection fault in tty_release C 11 1415d 1427d
general protection fault in sock_close syz 13 1416d 1429d
kernel BUG at ./include/linux/fs.h:LINE! syz 1 1417d 1417d
KASAN: use-after-free Write in eventfd_release syz 1 1418d 1418d
kernel BUG at fs/inode.c:LINE! C 5 1420d 1429d
KASAN: use-after-free Write in ex_handler_refcount syz 4 1425d 1427d
general protection fault in uhid_char_release C 27 1426d 1603d
kernel panic: Attempted to kill init! C 1 1426d 1426d
KASAN: use-after-free Write in pipe_release syz 1 1427d 1427d
KASAN: use-after-free Read in dput syz 1 1428d 1428d
KASAN: use-after-free Read in __fsnotify_parent syz 1 1428d 1428d
general protection fault in create_empty_buffers (3) 1 597d 597d
general protection fault in kernel_accept 1 636d 636d
KASAN: user-memory-access Write in profile_hits (2) 1 655d 655d
BUG: Bad page map 1 701d 701d
KASAN: use-after-free Write in __mod_timer (3) 2 705d 761d
KASAN: use-after-free Write in mod_delayed_work_on 1 727d 727d
KASAN: use-after-free Write in kjournald2 1 765d 765d
panic: bad group arg size NUM, should be <= NUM for &prog.GroupArg{ArgCommon:prog.ArgCommon{ref:0x2de, dir:0x0}, Inner:[ 7 666d 667d
kernel BUG in jbd2_journal_get_create_access (2) 1 810d 810d
general protection fault in sock_from_file C 6 1438d 1442d
BUG: unable to handle kernel paging request in do_sys_open C 12 1504d 1563d
KASAN: use-after-free Write in input_ff_create C 1 1534d 1534d
KASAN: slab-out-of-bounds Read in hiddev_ioctl_usage C 2 1553d 1570d
KASAN: slab-out-of-bounds Write in betop_probe C 1 1553d 1553d
BUG: Bad page state C 9 1579d 1610d
android12-5.4 build error (2) 2 820d 820d
KASAN: use-after-free Write in addrconf_ifdown 1 824d 824d
BUG: soft lockup in process_srcu 1 826d 826d
SYZFAIL: bad thread state in completion 1 831d 831d
SYZFAIL: tun: ioctl(TUNSETIFF) failed (2) 3 843d 861d
KASAN: use-after-free Read in usb_udc_uevent (2) 2 846d 862d
KASAN: null-ptr-deref Write in d_delete 3 882d 882d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (8) 2 767d 767d
kernel BUG in ext4_ext_insert_extent 1 914d 914d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (7) 3 914d 1023d
general protection fault in fire_user_return_notifiers 1 927d 927d
KASAN: user-memory-access Write in profile_hits 1 930d 930d
KASAN: use-after-free Read in f2fs_available_free_memory 7 934d 1116d
general protection fault in klist_iter_exit 1 946d 946d
kernel BUG in jbd2_journal_get_create_access 1 953d 953d
SYZFAIL: too much cover 1 964d 964d
SYZFAIL: open of /sys/kernel/debug/kcov failed 6 966d 1067d
SYZFAIL: cover mmap failed 3 966d 966d
KASAN: use-after-free Write in chroot_fs_refs 1 970d 970d
SYZFAIL: copyin: bad argument size 4 970d 991d
SYZFAIL: input command overflows input 1 975d 975d
SYZFAIL: out of opened kcov threads 32 958d 959d
BUG: soft lockup in smp_call_function 1 994d 994d
KASAN: use-after-free Read in dev_uevent (2) 2 998d 1004d
BUG: Dentry still in use [unmount of msdos loop4] 9 1003d 1281d
BUG: Dentry still in use [unmount of vfat loop2] 5 1006d 1127d
BUG: Dentry still in use [unmount of ext4 loop3] 14 1006d 1319d
panic: failed to create a resource ifindex with ioctl$sock_SIOCGIFCONF, ioctl$sock_SIOCGIFCONF 2 1008d 1019d
general protection fault in __device_attach 8 1009d 1265d
BUG: corrupted list in firmware_fallback_sysfs 70 1010d 1558d
BUG: Dentry still in use [unmount of ext4 loop2] 14 1027d 1271d
KASAN: use-after-free Write in __mod_timer (2) 1 1028d 1028d
general protection fault in rcu_sync_func 2 1030d 1058d
BUG: Dentry still in use [unmount of vfat loop1] (2) 2 1030d 1078d
BUG: Dentry still in use [unmount of vfat loop4] (2) 1 1030d 1030d
KASAN: use-after-free Write in paging64_update_accessed_dirty_bits (2) 1 1031d 1031d
BUG: Dentry still in use [unmount of ext4 loop4] 15 1032d 1300d
KASAN: use-after-free Read in hci_uart_flush 1 1033d 1033d
BUG: Dentry still in use [unmount of ext4 loop5] 14 1034d 1316d
BUG: Dentry still in use [unmount of vfat loop5] 8 1034d 1318d
BUG: Dentry still in use [unmount of msdos loop3] (2) 1 1035d 1035d
BUG: Dentry still in use [unmount of ext4 loop1] 9 1041d 1313d
BUG: Dentry still in use [unmount of erofs loop2] 1 1043d 1043d
KASAN: out-of-bounds Read in unwind_next_frame 16 1045d 1551d
BUG: unable to handle kernel paging request in srcu_invoke_callbacks 1 1072d 1072d
BUG: Dentry still in use [unmount of erofs loop1] 2 1074d 1074d
BUG: Dentry still in use [unmount of msdos loop5] 7 1082d 1258d
SYZFAIL: sandbox fork failed 4 1084d 1231d
KASAN: slab-out-of-bounds Write in __internal_add_timer (2) 4 1084d 1259d
SYZFAIL: tun: ioctl(TUNSETIFF) failed 1 984d 984d
BUG: Dentry still in use [unmount of msdos loop2] (2) 1 1110d 1110d
BUG: Dentry still in use [unmount of vfat loop3] 6 1115d 1284d
KASAN: slab-out-of-bounds Write in __run_timers 4 1124d 1314d
BUG: corrupted list in p9_fd_cancelled 3 1125d 1334d
BUG: unable to handle kernel paging request in corrupted C 1 1566d 1566d
general protection fault in corrupted C 1 1600d 1600d
BUG: unable to handle kernel paging request in kfree C 4 1614d 1616d
KASAN: use-after-free Read in hrtimer_start_range_ns 1 1156d 1156d
KASAN: use-after-free Read in dev_uevent 4 1156d 1220d
BUG: Dentry still in use [unmount of vfat loop4] 3 1158d 1311d
android12-5.4 boot error: can't ssh into the instance 2 1162d 1162d
general protection fault in kernfs_find_ns 1 1162d 1162d
general protection fault in create_empty_buffers (2) 1 1174d 1174d
KASAN: use-after-free Write in paging64_update_accessed_dirty_bits 1 1179d 1179d
BUG: Dentry still in use [unmount of msdos loop3] 2 1189d 1230d
SYZFAIL: netlink_send_ext: short netlink read 1 1190d 1190d
general protection fault in bdevname 1 1194d 1194d
BUG: Dentry still in use [unmount of vfat loop1] 4 1204d 1316d
BUG: unable to handle kernel paging request in expire_timers 3 1204d 1297d
BUG: Dentry still in use [unmount of msdos loop1] 2 1211d 1217d
general protection fault in expire_timers 1 1212d 1212d
BUG: Dentry still in use [unmount of msdos loop2] 7 1230d 1298d
BUG: Dentry still in use [unmount of ext2 loop2] 1 1232d 1232d
SYZFAIL: result overflows kMaxCommands 1 1242d 1242d
BUG: Dentry still in use [unmount of f2fs loop4] 1 1244d 1244d
panic: failed to create a resource ifindex with ioctl$sock_SIOCGIFCONF 1 1244d 1244d
KASAN: use-after-free Write in __mod_timer 1 1245d 1245d
android12-5.4 build error 19 1267d 1374d
BUG: Dentry still in use [unmount of erofs loop5] 1 1278d 1278d
BUG: unable to handle kernel NULL pointer dereference in call_timer_fn 5 1285d 1460d
KASAN: use-after-free Read in usb_udc_uevent 1 1289d 1289d
panic: runtime error: invalid memory address or nil pointer dereference 233 1173d 1173d
BUG: soft lockup in __perf_sw_event 2 1306d 1319d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (6) 1 1203d 1203d
kernel BUG at block/bio.c:LINE! 1 1326d 1326d
BUG: unable to handle kernel paging request in syscall_trace_enter 3 1326d 1415d
android12-5.4 boot error: kernel panic: VFS: Unable to mount root fs on unknown-block(0,0) 300 1337d 1374d
KASAN: use-after-free Read in chrdev_open 1 1376d 1376d
general protection fault in create_empty_buffers 1 1380d 1380d
divide error in mac80211_hwsim_bss_info_changed 2 1382d 1390d
KASAN: slab-out-of-bounds Write in f2fs_build_segment_manager 4 1386d 1394d
syzkaller: failed to copy syzkaller: file bin/netbsd_amd64/syz-executor does not exist 1 1274d 1274d
KASAN: slab-out-of-bounds Write in __internal_add_timer 4 1397d 1471d
BUG: soft lockup in __run_hrtimer 2 1398d 1402d
BUG: unable to handle kernel paging request in bpf_trace_run6 1 1415d 1415d
KASAN: slab-out-of-bounds Read in firmware_fallback_sysfs 6 1420d 1530d
general protection fault in fib_check_nexthop 2 1426d 1441d
kernel BUG at arch/x86/kernel/traps.c:LINE! 1 1433d 1433d
general protection fault in io_sq_wq_submit_work 1 1436d 1436d
KASAN: use-after-free Read in ext4_xattr_set_entry 6 1450d 1631d
KASAN: slab-out-of-bounds Write in tun_free_netdev 2 1450d 1466d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (5) 2 1360d 1402d
KASAN: use-after-free Write in skb_release_data 2 1458d 1488d
kernel BUG at ./include/linux/swapops.h:LINE! 1 1484d 1484d
general protection fault in perf_tp_event 7 1490d 1656d
KASAN: use-after-free Read in smsc95xx_mdio_read 4 1498d 1506d
KASAN: use-after-free Read in _vm_unmap_aliases 1 1511d 1511d
KASAN: slab-out-of-bounds Read in tipc_nl_name_table_dump 1 1521d 1521d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (4) 20 1415d 1527d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 2 1521d 1521d
KASAN: use-after-free Read in dentry_free 1 1541d 1541d
BUG: unable to handle kernel paging request in netif_receive_generic_xdp 1 1550d 1550d
syzkaller: make target failed: failed to run ["make" "target"]: exit status 2 (2) 5 1438d 1441d
BUG: corrupted list in prepare_to_wait_event 4 1554d 1603d
android-5.4 boot error: can't ssh into the instance (3) 12 1438d 1438d
android-5.4 boot error: can't ssh into the instance (2) 3 1438d 1438d
KASAN: use-after-free Write in copyin 4 1567d 1610d
android-5.4 test error: timed out 3 1571d 1571d
KASAN: use-after-free Read in __schedule 3 1579d 1606d
KASAN: use-after-free Read in dev_get_by_index_rcu 1 1588d 1588d
general protection fault in prepare_to_wait_event 1 1590d 1590d
KASAN: use-after-free Write in locks_delete_block 2 1590d 1654d
general protection fault in uhid_char_write 2 1600d 1600d
KASAN: stack-out-of-bounds Read in update_stack_state 2 1627d 1634d
KASAN: out-of-bounds Read in update_stack_state 1 1627d 1627d
KASAN: slab-out-of-bounds Read in tipc_named_reinit 1 1632d 1632d
KASAN: use-after-free Read in flock_lock_inode 1 1641d 1641d
kernel BUG at net/ipv6/esp6.c:LINE! 1 1643d 1643d
KASAN: use-after-free Read in tun_chr_write_iter 1 1647d 1647d
syzkaller: make target failed: failed to run ["make" "target"]: exit status 2 2 1528d 1529d
KASAN: use-after-free Read in do_xdp_generic 198 1620d 1650d
syzkaller: make host failed: failed to run ["make" "host" "ci"]: exit status 2 1 1548d 1548d
android-5.4 test error: BUG: mismatching fuzzer/executor system call descriptions: ADDR vs ADDR 9 1572d 1574d
android-5.4 boot error: can't ssh into the instance 6 1584d 1584d
kernel panic: audit: out of memory in audit_log_start 3 1614d 1616d
kernel panic: audit: rate limit exceeded C 1 1616d 1616d
kernel panic: audit: backlog limit exceeded C 3 1614d 1616d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (3) 2 1628d 1628d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (2) 1 1640d 1640d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 1 1651d 1651d