|
KASAN: use-after-free Read in input_dev_uevent
|
|
|
|
1 |
93d |
93d
|
|
KASAN: use-after-free Read in steam_send_report
|
|
|
|
1 |
93d |
93d
|
|
general protection fault in vsock_stream_has_data
origin:lts
|
C |
|
done |
5 |
109d |
109d
|
|
KASAN: use-after-free Write in virtio_transport_recv_pkt
origin:upstream
|
C |
|
done |
3 |
110d |
434d
|
|
general protection fault in dev_map_generic_redirect
origin:lts
|
syz |
|
|
97 |
69d |
435d
|
|
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (3)
|
|
|
|
8 |
112d |
184d
|
|
KASAN: use-after-free Write in detach_if_pending
|
|
|
|
5 |
114d |
236d
|
|
SYZFAIL: ShmemBuilder: too large output offset (2)
|
|
|
|
1 |
125d |
125d
|
|
SYZFAIL: SIGFPE
|
|
|
|
4 |
126d |
206d
|
|
BUG: soft lockup in bpf_link_release
|
|
|
|
2 |
134d |
218d
|
|
general protection fault in khugepaged
|
|
|
|
1 |
139d |
139d
|
|
BUG: soft lockup in cleanup_net
|
|
|
|
1 |
145d |
145d
|
|
SYZFAIL: proc stdout read failed (2)
|
|
|
|
5 |
146d |
192d
|
|
SYZFAIL: mmap of data segment failed
|
|
|
|
11 |
150d |
303d
|
|
kernel BUG in ext4_write_inline_data_end
origin:lts
|
C |
error |
done |
2 |
173d |
575d
|
|
BUG: corrupted list in p9_conn_cancel
|
|
|
|
1 |
165d |
165d
|
|
kernel BUG in mark_buffer_dirty_inode
|
syz |
|
inconclusive |
3 |
177d |
246d
|
|
BUG: soft lockup in tun_chr_ioctl
|
|
|
|
1 |
183d |
183d
|
|
SYZFAIL: SIGILL (2)
|
|
|
|
1 |
193d |
193d
|
|
KASAN: use-after-free Read in ext4_convert_inline_data_nolock
origin:upstream
missing-backport
|
C |
|
done |
2 |
211d |
407d
|
|
KASAN: invalid-free in raw_release
|
|
|
|
1 |
208d |
208d
|
|
SYZFAIL: netlink_send_ext: short netlink write
|
|
|
|
1 |
210d |
210d
|
|
KASAN: use-after-free Read in sk_psock_verdict_data_ready
|
|
|
|
2 |
213d |
246d
|
|
KASAN: use-after-free Read in cpu_map_generic_redirect
|
|
|
|
4 |
215d |
294d
|
|
KASAN: use-after-free Read in ext4_find_extent
missing-backport
|
C |
error |
done |
3 |
227d |
724d
|
|
KASAN: out-of-bounds Read in ext4_ext_remove_space
missing-backport
|
C |
error |
error |
6 |
235d |
667d
|
|
invalid opcode in bpf_dispatcher_xdp
|
C |
error |
done |
55 |
235d |
745d
|
|
BUG: soft lockup in addrconf_rs_timer (2)
|
syz |
|
|
176 |
188d |
394d
|
|
SYZFAIL: repeatedly failed to execute the program
|
|
|
|
23438 |
192d |
352d
|
|
SYZFAIL: bad allocate request
|
|
|
|
8 |
233d |
333d
|
|
UBSAN: shift-out-of-bounds in parse_audio_unit
|
C |
|
done |
3 |
246d |
304d
|
|
KASAN: use-after-free Read in cancel_delayed_work_sync
|
|
|
|
1 |
244d |
244d
|
|
KASAN: null-ptr-deref Write in mark_buffer_dirty_inode
|
|
|
|
1 |
247d |
247d
|
|
BUG: soft lockup in br_multicast_port_group_expired
|
|
|
|
3 |
250d |
361d
|
|
BUG: unable to handle kernel paging request in bpf_dispatcher_xdp
origin:lts
missing-backport
|
C |
done |
error |
20 |
366d |
694d
|
|
general protection fault in n_tty_receive_buf_common (2)
|
|
|
|
4 |
254d |
325d
|
|
KASAN: use-after-free Read in __dev_get_by_index
|
|
|
|
1 |
255d |
255d
|
|
SYZFAIL: mmap of output file failed
|
|
|
|
17 |
231d |
304d
|
|
KASAN: use-after-free Write in steam_input_close
|
|
|
|
1 |
260d |
260d
|
|
SYZFAIL: ShmemBuilder: too large output offset
|
|
|
|
5 |
262d |
325d
|
|
KASAN: use-after-free Read in __ext4_check_dir_entry
missing-backport
origin:upstream
|
C |
|
error |
4 |
272d |
396d
|
|
kernel BUG in ext4_split_extent_at
missing-backport
origin:upstream
|
C |
error |
error |
1 |
272d |
733d
|
|
BUG: unable to handle kernel paging request in bpf_dispatcher_xdp_func
origin:lts
|
C |
done |
error |
1 |
275d |
587d
|
|
SYZFAIL: iptable checkpoint: socket(SOCK_STREAM, IPPROTO_TCP) failed
|
|
|
|
2 |
270d |
320d
|
|
SYZFAIL: posix_spawn failed
|
|
|
|
3855 |
230d |
343d
|
|
SYZFAIL: mkdir(syz-tmp) failed
|
|
|
|
134 |
230d |
343d
|
|
BUG: soft lockup in mntput
|
|
|
|
1 |
275d |
275d
|
|
SYZFAIL: failed to mkdir
|
|
|
|
3 |
280d |
351d
|
|
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (2)
|
|
|
|
30 |
261d |
380d
|
|
BUG: soft lockup in br_multicast_group_expired
|
|
|
|
1 |
296d |
296d
|
|
KASAN: use-after-free Write in hiddev_release
|
|
|
|
1 |
298d |
298d
|
|
SYZFAIL: proc stdout read failed
|
|
|
|
1 |
302d |
302d
|
|
KASAN: use-after-free Read in kernfs_get
|
|
|
|
2 |
302d |
348d
|
|
BUG: soft lockup in ndisc_send_rs
|
|
|
|
1 |
306d |
306d
|
|
BUG: corrupted list in __dentry_kill
|
|
|
|
2 |
306d |
333d
|
|
BUG: soft lockup in ip_list_rcv
|
|
|
|
2 |
313d |
335d
|
|
BUG: soft lockup in net_rx_action
|
|
|
|
2 |
313d |
356d
|
|
BUG: soft lockup in ipv6_get_lladdr
|
|
|
|
1 |
315d |
315d
|
|
KASAN: use-after-free Read in ext4_read_inline_dir
|
|
|
|
1 |
316d |
316d
|
|
BUG: soft lockup in arp_rcv
|
|
|
|
1 |
323d |
323d
|
|
BUG: soft lockup in rtnl_newlink
|
|
|
|
2 |
324d |
334d
|
|
BUG: using smp_processor_id() in preemptible code in usbnet_skb_return
|
|
|
|
2 |
328d |
328d
|
|
SYZFAIL: SIGILL
|
|
|
|
3 |
329d |
329d
|
|
general protection fault in inherit_task_group
origin:downstream
|
C |
|
|
1 |
340d |
480d
|
|
BUG: unable to handle kernel paging request in bpf_probe_read_compat_str
missing-backport
origin:upstream
|
C |
error |
error |
3 |
340d |
506d
|
|
BUG: scheduling while atomic in wait_for_common
origin:lts
|
C |
|
done |
9 |
347d |
392d
|
|
BUG: scheduling while atomic in rcu_boost_kthread
origin:lts
|
C |
|
unreliable |
3 |
352d |
480d
|
|
KASAN: stack-out-of-bounds Read in hash
origin:lts
|
C |
|
done |
97 |
324d |
435d
|
|
KASAN: use-after-free Read in move_linked_works
|
|
|
|
2 |
347d |
415d
|
|
BUG: unable to handle kernel paging request in bpf_probe_read_kernel_str
missing-backport
|
C |
|
inconclusive |
3 |
357d |
494d
|
|
BUG: scheduling while atomic in p9_client_rpc
|
|
|
|
2 |
352d |
417d
|
|
BUG: soft lockup in kjournald2 (2)
|
|
|
|
1 |
353d |
353d
|
|
BUG: scheduling while atomic in wait_transaction_locked
|
|
|
|
10 |
356d |
450d
|
|
BUG: scheduling while atomic in unlink_anon_vmas
|
C |
|
done |
2 |
369d |
447d
|
|
BUG: scheduling while atomic in jbd2_log_wait_commit
|
|
|
|
3 |
363d |
432d
|
|
general protection fault in hrtimer_try_to_cancel
origin:upstream
missing-backport
|
C |
done |
done |
25 |
375d |
571d
|
|
UBSAN: array-index-out-of-bounds in bpf_bprintf_prepare
|
C |
|
done |
14 |
375d |
474d
|
|
BUG: scheduling while atomic in do_nanosleep
|
C |
|
done |
104 |
345d |
489d
|
|
KASAN: use-after-free Read in wg_packet_receive
|
|
|
|
1 |
367d |
367d
|
|
BUG: unable to handle kernel NULL pointer dereference in sk_psock_verdict_data_ready
origin:upstream
missing-backport
|
C |
|
|
204 |
347d |
484d
|
|
BUG: scheduling while atomic in exit_to_user_mode_loop
|
C |
|
done |
1087 |
347d |
529d
|
|
BUG: scheduling while atomic in do_epoll_wait
origin:lts
|
syz |
|
|
26 |
353d |
485d
|
|
BUG: scheduling while atomic in __put_anon_vma
origin:lts
|
C |
|
done |
1 |
381d |
416d
|
|
BUG: workqueue leaked lock or atomic in bpf_prog_free_deferred
|
C |
|
done |
46 |
351d |
484d
|
|
android14-6.1 test error: lost connection to test machine (2)
|
|
|
|
8 |
377d |
377d
|
|
BUG: unable to handle kernel paging request in copy_from_kernel_nofault
origin:upstream
missing-backport
|
C |
done |
inconclusive |
127 |
357d |
574d
|
|
BUG: scheduling while atomic in synchronize_rcu_expedited
origin:lts
|
C |
|
|
27 |
362d |
388d
|
|
SYZFAIL: SIGSEGV
|
|
|
|
316 |
344d |
351d
|
|
BUG: corrupted list in p9_fd_cancelled
|
|
|
|
27 |
385d |
757d
|
|
BUG: scheduling while atomic in __skb_wait_for_more_packets
|
|
|
|
2 |
387d |
431d
|
|
KASAN: use-after-free Read in wg_queue_enqueue_per_peer_tx
|
|
|
|
1 |
389d |
389d
|
|
BUG: scheduling while atomic in futex_wait_queue
|
|
|
|
34 |
355d |
489d
|
|
BUG: workqueue leaked lock or atomic in bpf_map_free_deferred
|
|
|
|
5 |
398d |
432d
|
|
BUG: workqueue leaked lock or atomic in free_work
origin:lts
|
C |
|
|
5 |
410d |
487d
|
|
BUG: scheduling while atomic in pcpu_alloc
|
|
|
|
11 |
394d |
454d
|
|
BUG: scheduling while atomic in __writeback_inodes_sb_nr
|
|
|
|
1 |
402d |
402d
|
|
BUG: scheduling while atomic in start_this_handle
|
|
|
|
1 |
403d |
403d
|
|
BUG: scheduling while atomic in folio_wait_bit_common
|
|
|
|
9 |
405d |
430d
|
|
BUG: scheduling while atomic in bpf_prog_pack_alloc
origin:lts
|
C |
|
|
2 |
415d |
434d
|
|
BUG: scheduling while atomic in kauditd_thread
origin:lts
|
C |
|
|
1 |
416d |
416d
|
|
BUG: scheduling while atomic in vhost_worker
|
|
|
|
1 |
407d |
407d
|
|
BUG: scheduling while atomic in bpf_dispatcher_change_prog
origin:lts
|
C |
|
|
1 |
454d |
454d
|
|
BUG: scheduling while atomic in rtnl_lock
|
|
|
|
1 |
410d |
410d
|
|
SYZFAIL: tun read failed
origin:upstream
|
syz |
inconclusive |
|
44 |
328d |
682d
|
|
SYZFAIL: proc resp pipe read failed
|
|
|
|
2 |
337d |
342d
|
|
BUG: scheduling while atomic in do_sys_poll
origin:lts
|
C |
|
|
8 |
422d |
422d
|
|
BUG: scheduling while atomic in rtnl_lock_killable
|
|
|
|
3 |
414d |
429d
|
|
BUG: scheduling while atomic in lock_sock_nested
|
|
|
|
1 |
416d |
416d
|
|
BUG: scheduling while atomic in bit_wait_io
|
|
|
|
14 |
413d |
492d
|
|
KASAN: use-after-free Read in mod_delayed_work_on
|
|
|
|
2 |
421d |
439d
|
|
android14-6.1 test error: SYZFATAL: failed to connect to host: dial tcp IP:NUM: connect: connection refused
|
|
|
|
10 |
384d |
385d
|
|
BUG: scheduling while atomic in msleep
|
|
|
|
1 |
425d |
425d
|
|
general protection fault in mnt_want_write
|
|
|
|
1 |
427d |
427d
|
|
BUG: scheduling while atomic in text_poke_set
|
|
|
|
2 |
428d |
431d
|
|
BUG: scheduling while atomic in text_poke_copy
|
|
|
|
1 |
428d |
428d
|
|
BUG: scheduling while atomic in ext4_buffered_write_iter
|
|
|
|
1 |
430d |
430d
|
|
BUG: scheduling while atomic in kernfs_activate
|
|
|
|
1 |
430d |
430d
|
|
BUG: scheduling while atomic in rcu_barrier
|
|
|
|
1 |
432d |
432d
|
|
BUG: workqueue leaked lock or atomic in addrconf_dad_work
|
|
|
|
1 |
432d |
432d
|
|
BUG: workqueue leaked lock or atomic in drain_vmap_area_work
|
|
|
|
1 |
433d |
433d
|
|
BUG: using smp_processor_id() in preemptible code in rcu_is_watching
|
|
|
|
2 |
434d |
448d
|
|
panic: runtime error: floating point error [recovered]
|
|
|
|
3 |
437d |
454d
|
|
UBSAN: shift-out-of-bounds in scalar32_min_max_arsh
origin:upstream
missing-backport
|
C |
done |
done |
2 |
451d |
541d
|
|
syzkaller: failed to copy syzkaller: file bin/linux_arm64/syz-fuzzer does not exist
|
|
|
|
2 |
352d |
352d
|
|
general protection fault in skb_segment
origin:upstream
missing-backport
|
C |
done |
done |
1 |
456d |
546d
|
|
UBSAN: array-index-out-of-bounds in check_stack_range_initialized
|
C |
|
done |
3803 |
434d |
450d
|
|
general protection fault in tipc_crypto_rcv_complete
|
|
|
|
1 |
460d |
460d
|
|
general protection fault in n_tty_receive_buf_common
|
|
|
|
1 |
475d |
475d
|
|
general protection fault in tipc_conn_close
|
|
|
|
6 |
489d |
715d
|
|
KASAN: use-after-free Read in unix_stream_read_actor
missing-backport
origin:upstream
|
C |
done |
done |
2 |
504d |
578d
|
|
BUG: soft lockup in kjournald2
|
|
|
|
1 |
495d |
495d
|
|
SYZFAIL: clone failed
origin:upstream
|
syz |
|
|
1 |
500d |
500d
|
|
android14-6.1 test error: BUG: mismatching fuzzer/executor git revisions: ADDR vs ADDR
|
|
|
|
1 |
520d |
520d
|
|
general protection fault in ovl_lookup_single
|
|
|
|
1 |
520d |
520d
|
|
KASAN: use-after-free Read in dev_uevent
|
|
|
|
6 |
531d |
702d
|
|
BUG: stack guard page was hit in sys_sendmmsg
missing-backport
origin:upstream
|
C |
done |
done |
2 |
575d |
730d
|
|
android14-6.1 test error: lost connection to test machine
|
|
|
|
3 |
568d |
587d
|
|
kernel BUG in iptunnel_xmit (2)
|
|
|
|
1 |
568d |
568d
|
|
BUG: soft lockup in wg_packet_tx_worker
|
|
|
|
3 |
571d |
593d
|
|
BUG: soft lockup in neigh_timer_handler
|
|
|
|
2 |
571d |
593d
|
|
KASAN: use-after-free Read in consume_skb
|
C |
error |
done |
4 |
582d |
641d
|
|
BUG: soft lockup in tc_modify_qdisc
|
C |
done |
done |
53 |
561d |
593d
|
|
KASAN: use-after-free Write in igrab
origin:upstream
missing-backport
|
C |
done |
unreliable |
29 |
575d |
735d
|
|
BUG: soft lockup in addrconf_rs_timer
|
|
|
|
1 |
591d |
591d
|
|
BUG: soft lockup in sys_sendmmsg
|
|
|
|
1 |
593d |
593d
|
|
KASAN: use-after-free Read in get_max_inline_xattr_value_size
origin:lts
|
C |
error |
done |
10 |
609d |
697d
|
|
kernel BUG in ext4_trim_fs
origin:lts
|
C |
error |
done |
9 |
617d |
686d
|
|
KASAN: null-ptr-deref Write in backing_data_changed
origin:downstream
|
C |
done |
done |
1 |
624d |
661d
|
|
general protection fault in ext4_acquire_dquot
origin:lts
|
C |
done |
done |
1 |
625d |
749d
|
|
kernel BUG in ext4_mb_find_by_goal
origin:lts
|
C |
error |
done |
78 |
598d |
756d
|
|
kernel BUG in ext4_mb_load_buddy_gfp
|
C |
error |
done |
42 |
600d |
756d
|
|
general protection fault in LZ4_decompress_safe_partial
origin:lts
|
C |
done |
done |
2 |
646d |
660d
|
|
kernel BUG in __block_commit_write
|
syz |
error |
error |
1 |
637d |
637d
|
|
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1
|
|
|
|
8 |
646d |
748d
|
|
panic: runtime error: floating point error
|
|
|
|
1 |
662d |
662d
|
|
KASAN: null-ptr-deref Write in hidraw_release
origin:upstream
missing-backport
|
C |
error |
done |
5 |
690d |
735d
|
|
KASAN: use-after-free Write in process_notifier
|
|
|
|
288 |
645d |
672d
|
|
BUG: unable to handle kernel paging request in bpf_test_run
|
|
|
|
1 |
687d |
687d
|
|
general protection fault in free_percpu
|
|
|
|
1 |
702d |
702d
|
|
fatal error: Connection to IP closed by remote host.
|
|
|
|
1 |
715d |
715d
|
|
general protection fault in idr_remove
|
|
|
|
1 |
727d |
727d
|
|
BUG: soft lockup in hub_event
|
|
|
|
1 |
728d |
728d
|
|
kernel BUG in pskb_expand_head
|
|
|
|
1 |
735d |
735d
|
|
kernel BUG in mas_store_prealloc
origin:lts
|
C |
done |
done |
12 |
739d |
759d
|
|
kernel BUG in iptunnel_xmit
|
|
|
|
1 |
761d |
761d
|