syzbot


Out of 211 bugs, 205 were automatically obsoleted (68 due to revoked reproducers), 6 were invalidated by users.
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported
KASAN: slab-out-of-bounds Read in seq_printf 19 2 90d 94d
KASAN: use-after-free Write in steam_input_close (2) 24 1 94d 94d
KASAN: slab-out-of-bounds Read in mon_bin_event origin:lts 17 C done 5 112d 152d
KASAN: use-after-free Read in f2fs_inode_synced 19 C done 4 117d 240d
SYZFAIL: SIGSEGV (2) -1 3 109d 198d
BUG: corrupted list in p9_fd_cancelled (2) 8 syz error 14 111d 474d
KASAN: use-after-free Read in fib_flush 19 1 121d 121d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (6) -1 2 31d 31d
BUG: unable to handle kernel NULL pointer dereference in read_pages origin:downstream 10 C inconclusive 64 136d 619d
general protection fault in delayed_work_timer_fn (2) 2 2 126d 127d
general protection fault in qdisc_tree_reduce_backlog 2 C done 45 108d 126d
general protection fault in htb_qlen_notify origin:lts 2 C 74 109d 145d
android14-6.1 test error: SYZFATAL: image testing failed w/o kernel bug -1 2 135d 212d
SYZFAIL: SIGILL (3) -1 4 137d 221d
android14-6.1 test error: lost connection to test machine (3) -1 1 139d 139d
kernel BUG in ext4_split_extent_at (2) origin:lts -1 C done 1 157d 157d
SYZFAIL: repeatedly failed to execute the program (2) -1 3 152d 186d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (5) -1 2 62d 62d
SYZFAIL: posix_spawnp failed -1 5 155d 350d
BUG: soft lockup in bpf_link_release (2) 1 1 157d 157d
BUG: soft lockup in pcpu_balance_workfn 1 1 157d 157d
KASAN: use-after-free Read in inet_twsk_kill 19 3 164d 170d
BUG: soft lockup in tcp_tasklet_func 1 1 173d 173d
KASAN: use-after-free Read in move_linked_works (2) 19 1 175d 175d
KASAN: use-after-free Read in tcp_metrics_flush_all 19 82 146d 179d
BUG: stack guard page was hit in corrupted origin:lts -1 C 2 202d 498d
general protection fault in tipc_conn_close (2) 2 1 199d 199d
invalid opcode in __traceiter_ext4_ext_remove_space_done 2 1 217d 217d
BUG: soft lockup in kernfs_fop_write_iter 1 1 220d 220d
kernel BUG in mark_buffer_dirty_inode (2) -1 1 225d 225d
KASAN: use-after-free Write in kernfs_get 24 syz error 8 225d 394d
kernel BUG in do_swap_page -1 C done 9 241d 279d
BUG: soft lockup in sock_read_iter 1 2 235d 274d
KASAN: use-after-free Read in __netif_receive_skb_core 19 1 238d 238d
general protection fault in delayed_work_timer_fn 2 2 239d 304d
BUG: corrupted list in __dentry_kill (2) 8 2 242d 312d
KASAN: use-after-free Read in cpu_map_generic_redirect (2) 19 1 242d 242d
kernel BUG in ext4_ind_map_blocks -1 1 249d 249d
KASAN: use-after-free Read in cpu_map_enqueue origin:lts missing-backport 19 syz 111 239d 520d
general protection fault in dev_map_enqueue missing-backport 19 C error 1695 238d 632d
BUG: soft lockup in addrconf_rs_timer (3) 1 1 258d 258d
kernel BUG in tcp_collapse -1 1 262d 262d
KASAN: use-after-free Read in kernfs_find_and_get_ns 19 1 264d 264d
BUG: soft lockup in wg_expired_send_persistent_keepalive 1 1 270d 270d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (4) -1 2 184d 184d
general protection fault in bq_flush_to_queue 2 12 276d 521d
KASAN: use-after-free Read in input_dev_uevent 19 1 283d 283d
KASAN: use-after-free Read in steam_send_report 19 1 284d 284d
general protection fault in vsock_stream_has_data origin:lts 2 C done 5 300d 300d
KASAN: use-after-free Write in virtio_transport_recv_pkt origin:upstream 24 C done 3 300d 624d
general protection fault in dev_map_generic_redirect origin:lts 19 syz 97 259d 625d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (3) -1 8 302d 374d
KASAN: use-after-free Write in detach_if_pending 24 5 304d 426d
SYZFAIL: ShmemBuilder: too large output offset (2) -1 1 315d 315d
SYZFAIL: SIGFPE -1 4 316d 396d
BUG: soft lockup in bpf_link_release 1 2 325d 408d
general protection fault in khugepaged 2 1 329d 329d
BUG: soft lockup in cleanup_net 1 1 335d 335d
SYZFAIL: proc stdout read failed (2) -1 5 336d 382d
SYZFAIL: mmap of data segment failed -1 11 340d 493d
kernel BUG in ext4_write_inline_data_end origin:lts -1 C error done 2 363d 765d
BUG: corrupted list in p9_conn_cancel 8 1 356d 356d
kernel BUG in mark_buffer_dirty_inode -1 syz inconclusive 3 368d 437d
BUG: soft lockup in tun_chr_ioctl 1 1 373d 373d
SYZFAIL: SIGILL (2) -1 1 383d 383d
KASAN: use-after-free Read in ext4_convert_inline_data_nolock origin:upstream missing-backport 19 C done 2 401d 597d
KASAN: invalid-free in raw_release 22 1 398d 398d
SYZFAIL: netlink_send_ext: short netlink write -1 1 400d 400d
KASAN: use-after-free Read in sk_psock_verdict_data_ready 19 2 404d 437d
KASAN: use-after-free Read in cpu_map_generic_redirect 19 4 405d 484d
KASAN: use-after-free Read in ext4_find_extent missing-backport 19 C error done 3 418d 915d
KASAN: out-of-bounds Read in ext4_ext_remove_space missing-backport 17 C error error 6 425d 857d
invalid opcode in bpf_dispatcher_xdp 2 C error done 55 425d 935d
BUG: soft lockup in addrconf_rs_timer (2) 1 syz 176 379d 584d
SYZFAIL: repeatedly failed to execute the program -1 23438 382d 542d
SYZFAIL: bad allocate request -1 8 423d 523d
UBSAN: shift-out-of-bounds in parse_audio_unit -1 C done 3 436d 494d
KASAN: use-after-free Read in cancel_delayed_work_sync 19 1 434d 434d
KASAN: null-ptr-deref Write in mark_buffer_dirty_inode 12 1 437d 437d
BUG: soft lockup in br_multicast_port_group_expired 1 3 440d 551d
BUG: unable to handle kernel paging request in bpf_dispatcher_xdp origin:lts missing-backport 8 C done error 20 556d 884d
general protection fault in n_tty_receive_buf_common (2) 2 4 444d 515d
KASAN: use-after-free Read in __dev_get_by_index 19 1 445d 445d
SYZFAIL: mmap of output file failed -1 17 421d 494d
KASAN: use-after-free Write in steam_input_close 24 1 450d 450d
SYZFAIL: ShmemBuilder: too large output offset -1 5 452d 515d
KASAN: use-after-free Read in __ext4_check_dir_entry missing-backport origin:upstream 19 C error 4 462d 586d
kernel BUG in ext4_split_extent_at missing-backport origin:upstream -1 C error error 1 462d 924d
BUG: unable to handle kernel paging request in bpf_dispatcher_xdp_func origin:lts 8 C done error 1 465d 777d
SYZFAIL: iptable checkpoint: socket(SOCK_STREAM, IPPROTO_TCP) failed -1 2 460d 510d
SYZFAIL: posix_spawn failed -1 3855 420d 533d
SYZFAIL: mkdir(syz-tmp) failed -1 134 420d 533d
BUG: soft lockup in mntput 1 1 465d 465d
SYZFAIL: failed to mkdir -1 3 470d 541d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (2) -1 30 451d 570d
BUG: soft lockup in br_multicast_group_expired 1 1 487d 487d
KASAN: use-after-free Write in hiddev_release 24 1 488d 488d
SYZFAIL: proc stdout read failed -1 1 492d 492d
KASAN: use-after-free Read in kernfs_get 19 2 492d 538d
BUG: soft lockup in ndisc_send_rs 1 1 496d 496d
BUG: corrupted list in __dentry_kill 8 2 496d 524d
BUG: soft lockup in ip_list_rcv 1 2 503d 526d
BUG: soft lockup in net_rx_action 1 2 503d 546d
BUG: soft lockup in ipv6_get_lladdr 1 1 505d 505d
KASAN: use-after-free Read in ext4_read_inline_dir 19 1 507d 507d
BUG: soft lockup in arp_rcv 1 1 513d 513d
BUG: soft lockup in rtnl_newlink 1 2 514d 524d
BUG: using smp_processor_id() in preemptible code in usbnet_skb_return 4 2 519d 519d
SYZFAIL: SIGILL -1 3 519d 519d
general protection fault in inherit_task_group origin:downstream 2 C 1 530d 671d
BUG: unable to handle kernel paging request in bpf_probe_read_compat_str missing-backport origin:upstream 8 C error error 3 530d 696d
BUG: scheduling while atomic in wait_for_common origin:lts 5 C done 9 538d 582d
BUG: scheduling while atomic in rcu_boost_kthread origin:lts 5 C unreliable 3 542d 670d
KASAN: stack-out-of-bounds Read in hash origin:lts 17 C done 97 514d 625d
KASAN: use-after-free Read in move_linked_works 19 2 537d 605d
BUG: unable to handle kernel paging request in bpf_probe_read_kernel_str missing-backport 8 C inconclusive 3 548d 684d
BUG: scheduling while atomic in p9_client_rpc 5 2 543d 607d
BUG: soft lockup in kjournald2 (2) 1 1 543d 543d
BUG: scheduling while atomic in wait_transaction_locked 5 10 546d 641d
BUG: scheduling while atomic in unlink_anon_vmas 5 C done 2 559d 637d
BUG: scheduling while atomic in jbd2_log_wait_commit 5 3 553d 623d
general protection fault in hrtimer_try_to_cancel origin:upstream missing-backport 2 C done done 25 565d 761d
UBSAN: array-index-out-of-bounds in bpf_bprintf_prepare 15 C done 14 565d 664d
BUG: scheduling while atomic in do_nanosleep 5 C done 104 535d 680d
KASAN: use-after-free Read in wg_packet_receive 19 1 557d 557d
BUG: unable to handle kernel NULL pointer dereference in sk_psock_verdict_data_ready origin:upstream missing-backport 10 C 204 537d 674d
BUG: scheduling while atomic in exit_to_user_mode_loop 5 C done 1087 537d 719d
BUG: scheduling while atomic in do_epoll_wait origin:lts 5 syz 26 543d 675d
BUG: scheduling while atomic in __put_anon_vma origin:lts 5 C done 1 572d 606d
BUG: workqueue leaked lock or atomic in bpf_prog_free_deferred -1 C done 46 542d 675d
android14-6.1 test error: lost connection to test machine (2) -1 8 567d 567d
BUG: unable to handle kernel paging request in copy_from_kernel_nofault origin:upstream missing-backport 8 C done inconclusive 127 548d 764d
BUG: scheduling while atomic in synchronize_rcu_expedited origin:lts 5 C 27 552d 578d
SYZFAIL: SIGSEGV -1 316 534d 541d
BUG: corrupted list in p9_fd_cancelled 8 27 575d 947d
BUG: scheduling while atomic in __skb_wait_for_more_packets 5 2 577d 621d
KASAN: use-after-free Read in wg_queue_enqueue_per_peer_tx 19 1 579d 579d
BUG: scheduling while atomic in futex_wait_queue 5 34 546d 680d
BUG: workqueue leaked lock or atomic in bpf_map_free_deferred -1 5 588d 622d
BUG: workqueue leaked lock or atomic in free_work origin:lts -1 C 5 600d 678d
BUG: scheduling while atomic in pcpu_alloc 5 11 585d 645d
BUG: scheduling while atomic in __writeback_inodes_sb_nr 5 1 592d 592d
BUG: scheduling while atomic in start_this_handle 5 1 593d 593d
BUG: scheduling while atomic in folio_wait_bit_common 5 9 595d 621d
BUG: scheduling while atomic in bpf_prog_pack_alloc origin:lts 5 C 2 605d 624d
BUG: scheduling while atomic in kauditd_thread origin:lts 5 C 1 607d 607d
BUG: scheduling while atomic in vhost_worker 5 1 598d 598d
BUG: scheduling while atomic in bpf_dispatcher_change_prog origin:lts 5 C 1 645d 645d
BUG: scheduling while atomic in rtnl_lock 5 1 600d 600d
SYZFAIL: tun read failed origin:upstream -1 syz inconclusive 44 518d 872d
SYZFAIL: proc resp pipe read failed -1 2 528d 532d
BUG: scheduling while atomic in do_sys_poll origin:lts 5 C 8 612d 612d
BUG: scheduling while atomic in rtnl_lock_killable 5 3 604d 620d
BUG: scheduling while atomic in lock_sock_nested 5 1 606d 606d
BUG: scheduling while atomic in bit_wait_io 5 14 603d 682d
KASAN: use-after-free Read in mod_delayed_work_on 19 2 611d 629d
android14-6.1 test error: SYZFATAL: failed to connect to host: dial tcp IP:NUM: connect: connection refused -1 10 574d 575d
BUG: scheduling while atomic in msleep 5 1 616d 616d
general protection fault in mnt_want_write 2 1 617d 617d
BUG: scheduling while atomic in text_poke_set 5 2 618d 621d
BUG: scheduling while atomic in text_poke_copy 5 1 618d 618d
BUG: scheduling while atomic in ext4_buffered_write_iter 5 1 620d 620d
BUG: scheduling while atomic in kernfs_activate 5 1 621d 621d
BUG: scheduling while atomic in rcu_barrier 5 1 622d 622d
BUG: workqueue leaked lock or atomic in addrconf_dad_work -1 1 622d 622d
BUG: workqueue leaked lock or atomic in drain_vmap_area_work -1 1 623d 623d
BUG: using smp_processor_id() in preemptible code in rcu_is_watching 4 2 624d 638d
panic: runtime error: floating point error [recovered] 2 3 627d 645d
UBSAN: shift-out-of-bounds in scalar32_min_max_arsh origin:upstream missing-backport -1 C done done 2 641d 731d
syzkaller: failed to copy syzkaller: file bin/linux_arm64/syz-fuzzer does not exist -1 2 542d 542d
general protection fault in skb_segment origin:upstream missing-backport 2 C done done 1 646d 737d
UBSAN: array-index-out-of-bounds in check_stack_range_initialized 15 C done 3803 625d 640d
general protection fault in tipc_crypto_rcv_complete 2 1 650d 650d
general protection fault in n_tty_receive_buf_common 2 1 665d 665d
general protection fault in tipc_conn_close 2 6 679d 905d
KASAN: use-after-free Read in unix_stream_read_actor missing-backport origin:upstream 19 C done done 2 694d 769d
BUG: soft lockup in kjournald2 1 1 686d 686d
SYZFAIL: clone failed origin:upstream -1 syz 1 690d 690d
android14-6.1 test error: BUG: mismatching fuzzer/executor git revisions: ADDR vs ADDR -1 1 710d 710d
general protection fault in ovl_lookup_single 2 1 711d 711d
KASAN: use-after-free Read in dev_uevent 19 6 722d 892d
BUG: stack guard page was hit in sys_sendmmsg missing-backport origin:upstream -1 C done done 2 765d 920d
android14-6.1 test error: lost connection to test machine -1 3 758d 777d
kernel BUG in iptunnel_xmit (2) -1 1 758d 758d
BUG: soft lockup in wg_packet_tx_worker 1 3 761d 784d
BUG: soft lockup in neigh_timer_handler 1 2 762d 784d
KASAN: use-after-free Read in consume_skb 19 C error done 4 772d 831d
BUG: soft lockup in tc_modify_qdisc 1 C done done 53 752d 783d
KASAN: use-after-free Write in igrab origin:upstream missing-backport 24 C done unreliable 29 765d 926d
BUG: soft lockup in addrconf_rs_timer 1 1 781d 781d
BUG: soft lockup in sys_sendmmsg 1 1 784d 784d
KASAN: use-after-free Read in get_max_inline_xattr_value_size origin:lts 19 C error done 10 799d 887d
kernel BUG in ext4_trim_fs origin:lts -1 C error done 9 807d 876d
KASAN: null-ptr-deref Write in backing_data_changed origin:downstream 12 C done done 1 814d 851d
general protection fault in ext4_acquire_dquot origin:lts 2 C done done 1 815d 939d
kernel BUG in ext4_mb_find_by_goal origin:lts -1 C error done 78 789d 946d
kernel BUG in ext4_mb_load_buddy_gfp -1 C error done 42 790d 947d
general protection fault in LZ4_decompress_safe_partial origin:lts 2 C done done 2 836d 851d
kernel BUG in __block_commit_write -1 syz error error 1 827d 827d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 -1 8 836d 938d
panic: runtime error: floating point error 2 1 852d 852d
KASAN: null-ptr-deref Write in hidraw_release origin:upstream missing-backport 12 C error done 5 880d 926d
KASAN: use-after-free Write in process_notifier 24 288 835d 862d
BUG: unable to handle kernel paging request in bpf_test_run 8 1 877d 877d
general protection fault in free_percpu 2 1 892d 892d
fatal error: Connection to IP closed by remote host. -1 1 905d 905d
general protection fault in idr_remove 2 1 918d 918d
BUG: soft lockup in hub_event 1 1 919d 919d
kernel BUG in pskb_expand_head -1 1 925d 925d
kernel BUG in mas_store_prealloc origin:lts -1 C done done 12 929d 949d
kernel BUG in iptunnel_xmit -1 1 951d 951d