Out of 277 bugs, 269 were automatically obsoleted (81 due to revoked reproducers), 8 were invalidated by users.
Extra filters: [With Repro]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported
BUG: Address ::ffff:IP on device lo is missing its host route. -1 1 91d 91d
kernel panic: Attempted to kill init! 2 5 91d 93d
kernel panic: kernel: panic_on_warn set ... 2 1 91d 91d
KASAN: use-after-free Write in l2tp_session_delete (3) 22 6 92d 133d
android14-6.1 build error -1 170 56d 102d
KASAN: use-after-free Read in android_work 19 1 97d 97d
SYZFAIL: pselect failed -1 1 99d 99d
SYZFAIL: iptable checkpoint: getsockopt(IPT_SO_GET_INFO) failed -1 1 100d 100d
general protection fault in snd_scarlett2_controls_create origin:lts 2 syz, C error 4 194d 208d
KASAN: null-ptr-deref Write in remove_waiter origin:lts 12 syz, C inconclusive 1 115d 115d
general protection fault in f2fs_in_warm_node_list 2 6 105d 223d
general protection fault in set_link_state 2 290 72d 102d
kernel BUG in ext4_ext_insert_extent origin:upstream missing-backport -1 syz error 9 217d 263d
general protection fault in dummy_queue 2 15 74d 102d
BUG: bad usercopy in put_cmsg -1 1 128d 128d
KASAN: use-after-free Read in l2tp_xmit_skb 19 2 128d 140d
KASAN: null-ptr-deref Write in __ext4_handle_dirty_metadata 12 1 133d 133d
kernel BUG in ext4_es_cache_extent origin:upstream missing-backport -1 syz, C error 11 196d 242d
KASAN: null-ptr-deref Write in fat12_ent_put 12 1 139d 139d
KASAN: null-ptr-deref Write in incfs_kill_sb 12 3 140d 185d
general protection fault in fq_codel_change 2 1 149d 149d
BUG: soft lockup in asm_sysvec_irq_work 1 1 158d 158d
android14-6.1 test error: lost connection to test machine (4) -1 1 161d 161d
BUG: soft lockup in packet_rcv 1 1 177d 177d
general protection fault in tipc_conn_close (4) 2 2 179d 185d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (8) -1 12 142d 144d
KASAN: use-after-free Read in kernfs_get (3) 19 1 202d 202d
SYZFAIL: failed to send rpc (2) -1 1 206d 206d
KASAN: use-after-free Write in steam_input_close (3) 22 2 208d 208d
KASAN: slab-out-of-bounds Read in seq_printf (2) 17 1 213d 213d
KASAN: null-ptr-deref Read in tcf_idrinfo_destroy 11 7 215d 311d
BUG: Bad page map -1 1 217d 217d
kernel BUG in ext4_split_extent_at (3) -1 2 222d 240d
general protection fault in ip6_pol_route 2 1 236d 236d
general protection fault in n_tty_receive_buf_common (3) 2 2 246d 325d
BUG: soft lockup in blkdev_open 1 1 252d 252d
KASAN: use-after-free Write in l2tp_session_delete (2) 22 1 256d 256d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (7) -1 16 220d 259d
android14-6.1 test error: SYZFATAL: image testing failed w/o kernel bug (2) -1 10 233d 236d
general protection fault in delayed_work_timer_fn (3) 2 2 276d 300d
KASAN: slab-out-of-bounds Read in ext4_ext_correct_indexes origin:upstream 17 syz error 1 280d 280d
KASAN: use-after-free Read in worker_thread missing-backport 19 syz, C error error 171 284d 1239d
KASAN: use-after-free Read in sk_psock_verdict_data_ready (3) 19 1 294d 294d
SYZFAIL: failed to send rpc -1 41 300d 861d
general protection fault in tipc_conn_close (3) 2 3 301d 345d
BUG: soft lockup in addrconf_rs_timer (4) 1 7 301d 449d
KASAN: use-after-free Read in kernfs_get (2) origin:downstream 22 syz error 3 312d 397d
UBSAN: shift-out-of-bounds in s32ton origin:lts -1 syz, C error 3 312d 361d
KASAN: use-after-free Read in process_one_work origin:upstream missing-backport 19 syz, C error 1040 284d 1262d
KASAN: use-after-free Read in fast_dput 19 5 310d 375d
BUG: soft lockup in wg_expired_new_handshake 1 1 330d 330d
KASAN: use-after-free Read in move_linked_works (3) 19 2 337d 355d
KASAN: use-after-free Write in l2tp_session_delete origin:downstream 22 syz error 20 352d 757d
syzkaller: make host failed: failed to run ["make" "host" "ci" "agent"]: exit status 2 -1 2 271d 271d
KASAN: use-after-free Write in __ip6_del_rt origin:lts 22 syz error 1 372d 372d
BUG: soft lockup in sock_read_iter (2) 1 2 373d 422d
KASAN: use-after-free Read in ipt_do_table 19 1 374d 374d
BUG: soft lockup in tcp_tasklet_func (2) 1 1 376d 376d
general protection fault in find_match 2 5 388d 541d
KASAN: use-after-free Read in sk_psock_verdict_data_ready (2) 19 1 395d 395d
KASAN: use-after-free Read in kernfs_find_and_get_ns (2) 19 1 396d 396d
SYZFAIL: failed to recv rpc origin:upstream -1 syz 231 308d 850d
kernel BUG in ext4_inline_data_truncate missing-backport origin:upstream -1 syz, C done 1 410d 633d
general protection fault in nexthop_get_nhc_lookup 2 9 401d 451d
KASAN: use-after-free Read in hci_uart_write_work 19 7 402d 422d
kernel BUG in ext4_create_inline_data origin:lts -1 syz, C done 1 414d 428d
KASAN: slab-out-of-bounds Read in seq_printf 19 2 410d 415d
KASAN: use-after-free Write in steam_input_close (2) 22 1 415d 415d
KASAN: slab-out-of-bounds Read in mon_bin_event origin:lts 17 syz, C done 5 433d 472d
KASAN: use-after-free Read in f2fs_inode_synced 19 syz, C done 4 438d 561d
SYZFAIL: SIGSEGV (2) -1 3 429d 518d
BUG: corrupted list in p9_fd_cancelled (2) 8 syz error 14 431d 795d
KASAN: use-after-free Read in fib_flush 19 1 441d 441d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (6) -1 2 352d 352d
BUG: unable to handle kernel NULL pointer dereference in read_pages origin:downstream 10 syz, C inconclusive 64 456d 940d
general protection fault in delayed_work_timer_fn (2) 2 2 447d 447d
general protection fault in qdisc_tree_reduce_backlog 2 syz, C done 45 429d 446d
general protection fault in htb_qlen_notify origin:lts 2 syz, C 74 429d 466d
android14-6.1 test error: SYZFATAL: image testing failed w/o kernel bug -1 2 456d 533d
SYZFAIL: SIGILL (3) -1 4 457d 541d
android14-6.1 test error: lost connection to test machine (3) -1 1 459d 459d
kernel BUG in ext4_split_extent_at (2) origin:lts -1 syz, C done 1 477d 477d
SYZFAIL: repeatedly failed to execute the program (2) -1 3 472d 506d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (5) -1 2 383d 383d
SYZFAIL: posix_spawnp failed -1 5 475d 671d
BUG: soft lockup in bpf_link_release (2) 1 1 478d 478d
BUG: soft lockup in pcpu_balance_workfn 1 1 478d 478d
KASAN: use-after-free Read in inet_twsk_kill 19 3 485d 490d
BUG: soft lockup in tcp_tasklet_func 1 1 494d 494d
KASAN: use-after-free Read in move_linked_works (2) 19 1 496d 496d
KASAN: use-after-free Read in tcp_metrics_flush_all 19 82 466d 499d
BUG: stack guard page was hit in corrupted origin:lts -1 syz, C 2 523d 818d
general protection fault in tipc_conn_close (2) 2 1 520d 520d
invalid opcode in __traceiter_ext4_ext_remove_space_done 2 1 537d 537d
BUG: soft lockup in kernfs_fop_write_iter 1 1 540d 540d
kernel BUG in mark_buffer_dirty_inode (2) -1 1 545d 545d
KASAN: use-after-free Write in kernfs_get 22 syz error 8 546d 714d
kernel BUG in do_swap_page -1 syz, C done 9 562d 599d
BUG: soft lockup in sock_read_iter 1 2 556d 595d
KASAN: use-after-free Read in __netif_receive_skb_core 19 1 558d 558d
general protection fault in delayed_work_timer_fn 2 2 560d 624d
BUG: corrupted list in __dentry_kill (2) 8 2 562d 632d
KASAN: use-after-free Read in cpu_map_generic_redirect (2) 19 1 563d 563d
kernel BUG in ext4_ind_map_blocks -1 1 569d 569d
KASAN: use-after-free Read in cpu_map_enqueue origin:lts missing-backport 19 syz 111 559d 840d
general protection fault in dev_map_enqueue missing-backport 19 syz, C error 1695 558d 952d
BUG: soft lockup in addrconf_rs_timer (3) 1 1 578d 578d
kernel BUG in tcp_collapse -1 1 582d 582d
KASAN: use-after-free Read in kernfs_find_and_get_ns 19 1 585d 585d
BUG: soft lockup in wg_expired_send_persistent_keepalive 1 1 590d 590d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (4) -1 2 505d 505d
general protection fault in bq_flush_to_queue 2 12 597d 841d
KASAN: use-after-free Read in input_dev_uevent 19 1 604d 604d
KASAN: use-after-free Read in steam_send_report 19 1 604d 604d
general protection fault in vsock_stream_has_data origin:lts 2 syz, C done 5 620d 620d
KASAN: use-after-free Write in virtio_transport_recv_pkt origin:upstream 22 syz, C done 3 620d 944d
general protection fault in dev_map_generic_redirect origin:lts 19 syz 97 580d 945d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (3) -1 8 623d 694d
KASAN: use-after-free Write in detach_if_pending 22 5 624d 746d
SYZFAIL: ShmemBuilder: too large output offset (2) -1 1 635d 635d
SYZFAIL: SIGFPE -1 4 636d 716d
BUG: soft lockup in bpf_link_release 1 2 645d 728d
general protection fault in khugepaged 2 1 649d 649d
BUG: soft lockup in cleanup_net 1 1 656d 656d
SYZFAIL: proc stdout read failed (2) -1 5 656d 702d
SYZFAIL: mmap of data segment failed -1 11 660d 814d
kernel BUG in ext4_write_inline_data_end origin:lts -1 syz, C error done 2 683d 1086d
BUG: corrupted list in p9_conn_cancel 8 1 676d 676d
kernel BUG in mark_buffer_dirty_inode -1 syz inconclusive 3 688d 757d
BUG: soft lockup in tun_chr_ioctl 1 1 694d 694d
SYZFAIL: SIGILL (2) -1 1 703d 703d
KASAN: use-after-free Read in ext4_convert_inline_data_nolock origin:upstream missing-backport 19 syz, C done 2 721d 917d
KASAN: invalid-free in raw_release 24 1 719d 719d
SYZFAIL: netlink_send_ext: short netlink write -1 1 720d 720d
KASAN: use-after-free Read in sk_psock_verdict_data_ready 19 2 724d 757d
KASAN: use-after-free Read in cpu_map_generic_redirect 19 4 726d 805d
KASAN: use-after-free Read in ext4_find_extent missing-backport 19 syz, C error done 3 738d 1235d
KASAN: out-of-bounds Read in ext4_ext_remove_space missing-backport 17 syz, C error error 6 745d 1177d
invalid opcode in bpf_dispatcher_xdp 2 syz, C error done 55 746d 1256d
BUG: soft lockup in addrconf_rs_timer (2) 1 syz 176 699d 904d
SYZFAIL: repeatedly failed to execute the program -1 23438 703d 862d
SYZFAIL: bad allocate request -1 8 744d 843d
UBSAN: shift-out-of-bounds in parse_audio_unit -1 syz, C done 3 756d 815d
KASAN: use-after-free Read in cancel_delayed_work_sync 19 1 755d 755d
KASAN: null-ptr-deref Write in mark_buffer_dirty_inode 12 1 757d 757d
BUG: soft lockup in br_multicast_port_group_expired 1 3 760d 872d
BUG: unable to handle kernel paging request in bpf_dispatcher_xdp origin:lts missing-backport 8 syz, C done error 20 877d 1204d
general protection fault in n_tty_receive_buf_common (2) 2 4 764d 835d
KASAN: use-after-free Read in __dev_get_by_index 19 1 765d 765d
SYZFAIL: mmap of output file failed -1 17 741d 815d
KASAN: use-after-free Write in steam_input_close 22 1 770d 770d
SYZFAIL: ShmemBuilder: too large output offset -1 5 772d 835d
KASAN: use-after-free Read in __ext4_check_dir_entry missing-backport origin:upstream 19 syz, C error 4 782d 907d
kernel BUG in ext4_split_extent_at missing-backport origin:upstream -1 syz, C error error 1 783d 1244d
BUG: unable to handle kernel paging request in bpf_dispatcher_xdp_func origin:lts 8 syz, C done error 1 785d 1098d
SYZFAIL: iptable checkpoint: socket(SOCK_STREAM, IPPROTO_TCP) failed -1 2 780d 830d
SYZFAIL: posix_spawn failed -1 3855 740d 853d
SYZFAIL: mkdir(syz-tmp) failed -1 134 741d 854d
BUG: soft lockup in mntput 1 1 786d 786d
SYZFAIL: failed to mkdir -1 3 791d 861d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (2) -1 30 772d 891d
BUG: soft lockup in br_multicast_group_expired 1 1 807d 807d
KASAN: use-after-free Write in hiddev_release 22 1 809d 809d
SYZFAIL: proc stdout read failed -1 1 812d 812d
KASAN: use-after-free Read in kernfs_get 19 2 813d 858d
BUG: soft lockup in ndisc_send_rs 1 1 816d 816d
BUG: corrupted list in __dentry_kill 8 2 817d 844d
BUG: soft lockup in ip_list_rcv 1 2 823d 846d
BUG: soft lockup in net_rx_action 1 2 823d 867d
BUG: soft lockup in ipv6_get_lladdr 1 1 825d 825d
KASAN: use-after-free Read in ext4_read_inline_dir 19 1 827d 827d
BUG: soft lockup in arp_rcv 1 1 833d 833d
BUG: soft lockup in rtnl_newlink 1 2 834d 844d
BUG: using smp_processor_id() in preemptible code in usbnet_skb_return 4 2 839d 839d
SYZFAIL: SIGILL -1 3 839d 839d
general protection fault in inherit_task_group origin:downstream 2 syz, C 1 851d 991d
BUG: unable to handle kernel paging request in bpf_probe_read_compat_str missing-backport origin:upstream 8 syz, C error error 3 851d 1016d
BUG: scheduling while atomic in wait_for_common origin:lts 5 syz, C done 9 858d 902d
BUG: scheduling while atomic in rcu_boost_kthread origin:lts 5 syz, C unreliable 3 862d 990d
KASAN: stack-out-of-bounds Read in hash origin:lts 17 syz, C done 97 835d 945d
KASAN: use-after-free Read in move_linked_works 19 2 858d 925d
BUG: unable to handle kernel paging request in bpf_probe_read_kernel_str missing-backport 8 syz, C inconclusive 3 868d 1005d
BUG: scheduling while atomic in p9_client_rpc 5 2 863d 927d
BUG: soft lockup in kjournald2 (2) 1 1 863d 863d
BUG: scheduling while atomic in wait_transaction_locked 5 10 867d 961d
BUG: scheduling while atomic in unlink_anon_vmas 5 syz, C done 2 879d 957d
BUG: scheduling while atomic in jbd2_log_wait_commit 5 3 874d 943d
general protection fault in hrtimer_try_to_cancel origin:upstream missing-backport 2 syz, C done done 25 885d 1081d
UBSAN: array-index-out-of-bounds in bpf_bprintf_prepare 15 syz, C done 14 886d 985d
BUG: scheduling while atomic in do_nanosleep 5 syz, C done 104 856d 1000d
KASAN: use-after-free Read in wg_packet_receive 19 1 877d 877d
BUG: unable to handle kernel NULL pointer dereference in sk_psock_verdict_data_ready origin:upstream missing-backport 10 syz, C 204 857d 995d
BUG: scheduling while atomic in exit_to_user_mode_loop 5 syz, C done 1087 858d 1040d
BUG: scheduling while atomic in do_epoll_wait origin:lts 5 syz 26 864d 995d
BUG: scheduling while atomic in __put_anon_vma origin:lts 5 syz, C done 1 892d 926d
BUG: workqueue leaked lock or atomic in bpf_prog_free_deferred -1 syz, C done 46 862d 995d
android14-6.1 test error: lost connection to test machine (2) -1 8 887d 888d
BUG: unable to handle kernel paging request in copy_from_kernel_nofault origin:upstream missing-backport 8 syz, C done inconclusive 127 868d 1084d
BUG: scheduling while atomic in synchronize_rcu_expedited origin:lts 5 syz, C 27 873d 898d
SYZFAIL: SIGSEGV -1 316 855d 861d
BUG: corrupted list in p9_fd_cancelled 8 27 895d 1267d
BUG: scheduling while atomic in __skb_wait_for_more_packets 5 2 897d 942d
KASAN: use-after-free Read in wg_queue_enqueue_per_peer_tx 19 1 899d 899d
BUG: scheduling while atomic in futex_wait_queue 5 34 866d 1000d
BUG: workqueue leaked lock or atomic in bpf_map_free_deferred -1 5 909d 942d
BUG: workqueue leaked lock or atomic in free_work origin:lts -1 syz, C 5 920d 998d
BUG: scheduling while atomic in pcpu_alloc 5 11 905d 965d
BUG: scheduling while atomic in __writeback_inodes_sb_nr 5 1 912d 912d
BUG: scheduling while atomic in start_this_handle 5 1 913d 913d
BUG: scheduling while atomic in folio_wait_bit_common 5 9 915d 941d
BUG: scheduling while atomic in bpf_prog_pack_alloc origin:lts 5 syz, C 2 925d 944d
BUG: scheduling while atomic in kauditd_thread origin:lts 5 syz, C 1 927d 927d
BUG: scheduling while atomic in vhost_worker 5 1 918d 918d
BUG: scheduling while atomic in bpf_dispatcher_change_prog origin:lts 5 syz, C 1 965d 965d
BUG: scheduling while atomic in rtnl_lock 5 1 921d 921d
SYZFAIL: tun read failed origin:upstream -1 syz inconclusive 44 838d 1192d
SYZFAIL: proc resp pipe read failed -1 2 848d 853d
BUG: scheduling while atomic in do_sys_poll origin:lts 5 syz, C 8 932d 932d
BUG: scheduling while atomic in rtnl_lock_killable 5 3 925d 940d
BUG: scheduling while atomic in lock_sock_nested 5 1 927d 927d
BUG: scheduling while atomic in bit_wait_io 5 14 924d 1002d
KASAN: use-after-free Read in mod_delayed_work_on 19 2 932d 949d
android14-6.1 test error: SYZFATAL: failed to connect to host: dial tcp IP:NUM: connect: connection refused -1 10 894d 895d
BUG: scheduling while atomic in msleep 5 1 936d 936d
general protection fault in mnt_want_write 2 1 938d 938d
BUG: scheduling while atomic in text_poke_set 5 2 938d 941d
BUG: scheduling while atomic in text_poke_copy 5 1 938d 938d
BUG: scheduling while atomic in ext4_buffered_write_iter 5 1 941d 941d
BUG: scheduling while atomic in kernfs_activate 5 1 941d 941d
BUG: scheduling while atomic in rcu_barrier 5 1 942d 942d
BUG: workqueue leaked lock or atomic in addrconf_dad_work -1 1 943d 943d
BUG: workqueue leaked lock or atomic in drain_vmap_area_work -1 1 944d 944d
BUG: using smp_processor_id() in preemptible code in rcu_is_watching 4 2 945d 958d
panic: runtime error: floating point error [recovered] 2 3 948d 965d
UBSAN: shift-out-of-bounds in scalar32_min_max_arsh origin:upstream missing-backport -1 syz, C done done 2 961d 1052d
syzkaller: failed to copy syzkaller: file bin/linux_arm64/syz-fuzzer does not exist -1 2 863d 863d
general protection fault in skb_segment origin:upstream missing-backport 2 syz, C done done 1 967d 1057d
UBSAN: array-index-out-of-bounds in check_stack_range_initialized 15 syz, C done 3803 945d 960d
general protection fault in tipc_crypto_rcv_complete 2 1 970d 970d
general protection fault in n_tty_receive_buf_common 2 1 985d 985d
general protection fault in tipc_conn_close 2 6 999d 1226d
KASAN: use-after-free Read in unix_stream_read_actor missing-backport origin:upstream 19 syz, C done done 2 1015d 1089d
BUG: soft lockup in kjournald2 1 1 1006d 1006d
SYZFAIL: clone failed origin:upstream -1 syz 1 1010d 1010d
android14-6.1 test error: BUG: mismatching fuzzer/executor git revisions: ADDR vs ADDR -1 1 1030d 1030d
general protection fault in ovl_lookup_single 2 1 1031d 1031d
KASAN: use-after-free Read in dev_uevent 19 6 1042d 1213d
BUG: stack guard page was hit in sys_sendmmsg missing-backport origin:upstream -1 syz, C done done 2 1085d 1240d
android14-6.1 test error: lost connection to test machine -1 3 1078d 1098d
kernel BUG in iptunnel_xmit (2) -1 1 1078d 1078d
BUG: soft lockup in wg_packet_tx_worker 1 3 1082d 1104d
BUG: soft lockup in neigh_timer_handler 1 2 1082d 1104d
KASAN: use-after-free Read in consume_skb 19 syz, C error done 4 1092d 1151d
BUG: soft lockup in tc_modify_qdisc 1 syz, C done done 53 1072d 1104d
KASAN: use-after-free Write in igrab origin:upstream missing-backport 22 syz, C done unreliable 29 1085d 1246d
BUG: soft lockup in addrconf_rs_timer 1 1 1101d 1101d
BUG: soft lockup in sys_sendmmsg 1 1 1104d 1104d
KASAN: use-after-free Read in get_max_inline_xattr_value_size origin:lts 19 syz, C error done 10 1119d 1208d
kernel BUG in ext4_trim_fs origin:lts -1 syz, C error done 9 1127d 1196d
KASAN: null-ptr-deref Write in backing_data_changed origin:downstream 12 syz, C done done 1 1135d 1171d
general protection fault in ext4_acquire_dquot origin:lts 2 syz, C done done 1 1136d 1260d
kernel BUG in ext4_mb_find_by_goal origin:lts -1 syz, C error done 78 1109d 1266d
kernel BUG in ext4_mb_load_buddy_gfp -1 syz, C error done 42 1110d 1267d
general protection fault in LZ4_decompress_safe_partial origin:lts 2 syz, C done done 2 1157d 1171d
kernel BUG in __block_commit_write -1 syz error error 1 1147d 1147d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 -1 8 1157d 1259d
panic: runtime error: floating point error 2 1 1172d 1172d
KASAN: null-ptr-deref Write in hidraw_release origin:upstream missing-backport 12 syz, C error done 5 1201d 1246d
KASAN: use-after-free Write in process_notifier 22 288 1155d 1182d
BUG: unable to handle kernel paging request in bpf_test_run 8 1 1197d 1197d
general protection fault in free_percpu 2 1 1212d 1212d
fatal error: Connection to IP closed by remote host. -1 1 1225d 1225d
general protection fault in idr_remove 2 1 1238d 1238d
BUG: soft lockup in hub_event 1 1 1239d 1239d
kernel BUG in pskb_expand_head -1 1 1245d 1245d
kernel BUG in mas_store_prealloc origin:lts -1 syz, C done done 12 1249d 1269d
kernel BUG in iptunnel_xmit -1 1 1271d 1271d