syzbot


Out of 144 bugs, 141 were automatically obsoleted (50 due to revoked reproducers), 3 were invalidated by users.
Title Repro Cause bisect Fix bisect Count Last Reported
SYZFAIL: netlink_send_ext: short netlink write 1 90d 90d
KASAN: use-after-free Read in sk_psock_verdict_data_ready 2 94d 127d
KASAN: use-after-free Read in cpu_map_generic_redirect 4 96d 175d
KASAN: use-after-free Read in ext4_find_extent missing-backport C error done 3 108d 605d
KASAN: out-of-bounds Read in ext4_ext_remove_space missing-backport C error error 6 115d 547d
invalid opcode in bpf_dispatcher_xdp C error done 55 116d 626d
BUG: soft lockup in addrconf_rs_timer (2) syz 176 69d 274d
SYZFAIL: repeatedly failed to execute the program 23438 73d 232d
SYZFAIL: bad allocate request 8 114d 213d
UBSAN: shift-out-of-bounds in parse_audio_unit C done 3 126d 185d
KASAN: use-after-free Read in cancel_delayed_work_sync 1 125d 125d
KASAN: null-ptr-deref Write in mark_buffer_dirty_inode 1 127d 127d
BUG: soft lockup in br_multicast_port_group_expired 3 130d 242d
BUG: unable to handle kernel paging request in bpf_dispatcher_xdp origin:lts missing-backport C done error 20 247d 574d
general protection fault in n_tty_receive_buf_common (2) 4 134d 206d
KASAN: use-after-free Read in __dev_get_by_index 1 135d 135d
SYZFAIL: mmap of output file failed 17 111d 185d
KASAN: use-after-free Write in steam_input_close 1 140d 140d
SYZFAIL: ShmemBuilder: too large output offset 5 142d 205d
KASAN: use-after-free Read in __ext4_check_dir_entry missing-backport origin:upstream C error 4 153d 277d
kernel BUG in ext4_split_extent_at missing-backport origin:upstream C error error 1 153d 614d
BUG: unable to handle kernel paging request in bpf_dispatcher_xdp_func origin:lts C done error 1 155d 468d
SYZFAIL: iptable checkpoint: socket(SOCK_STREAM, IPPROTO_TCP) failed 2 150d 200d
SYZFAIL: posix_spawn failed 3855 111d 223d
SYZFAIL: mkdir(syz-tmp) failed 134 111d 224d
BUG: soft lockup in mntput 1 156d 156d
SYZFAIL: failed to mkdir 3 161d 232d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (2) 30 142d 261d
BUG: soft lockup in br_multicast_group_expired 1 177d 177d
KASAN: use-after-free Write in hiddev_release 1 179d 179d
SYZFAIL: proc stdout read failed 1 182d 182d
KASAN: use-after-free Read in kernfs_get 2 183d 228d
BUG: soft lockup in ndisc_send_rs 1 186d 186d
BUG: corrupted list in __dentry_kill 2 187d 214d
BUG: soft lockup in ip_list_rcv 2 193d 216d
BUG: soft lockup in net_rx_action 2 194d 237d
BUG: soft lockup in ipv6_get_lladdr 1 195d 195d
KASAN: use-after-free Read in ext4_read_inline_dir 1 197d 197d
BUG: soft lockup in arp_rcv 1 203d 203d
BUG: soft lockup in rtnl_newlink 2 204d 215d
BUG: using smp_processor_id() in preemptible code in usbnet_skb_return 2 209d 209d
SYZFAIL: SIGILL 3 209d 209d
general protection fault in inherit_task_group origin:downstream C 1 221d 361d
BUG: unable to handle kernel paging request in bpf_probe_read_compat_str missing-backport origin:upstream C error error 3 221d 386d
BUG: scheduling while atomic in wait_for_common origin:lts C done 9 228d 272d
BUG: scheduling while atomic in rcu_boost_kthread origin:lts C unreliable 3 232d 360d
KASAN: stack-out-of-bounds Read in hash origin:lts C done 97 205d 316d
KASAN: use-after-free Read in move_linked_works 2 228d 295d
BUG: unable to handle kernel paging request in bpf_probe_read_kernel_str missing-backport C inconclusive 3 238d 375d
BUG: scheduling while atomic in p9_client_rpc 2 233d 297d
BUG: soft lockup in kjournald2 (2) 1 233d 233d
BUG: scheduling while atomic in wait_transaction_locked 10 237d 331d
BUG: scheduling while atomic in unlink_anon_vmas C done 2 249d 327d
BUG: scheduling while atomic in jbd2_log_wait_commit 3 244d 313d
general protection fault in hrtimer_try_to_cancel origin:upstream missing-backport C done done 25 255d 452d
UBSAN: array-index-out-of-bounds in bpf_bprintf_prepare C done 14 256d 355d
BUG: scheduling while atomic in do_nanosleep C done 104 226d 370d
KASAN: use-after-free Read in wg_packet_receive 1 247d 247d
BUG: unable to handle kernel NULL pointer dereference in sk_psock_verdict_data_ready origin:upstream missing-backport C 204 228d 365d
BUG: scheduling while atomic in exit_to_user_mode_loop C done 1087 228d 410d
BUG: scheduling while atomic in do_epoll_wait origin:lts syz 26 234d 365d
BUG: scheduling while atomic in __put_anon_vma origin:lts C done 1 262d 296d
BUG: workqueue leaked lock or atomic in bpf_prog_free_deferred C done 46 232d 365d
android14-6.1 test error: lost connection to test machine (2) 8 257d 258d
BUG: unable to handle kernel paging request in copy_from_kernel_nofault origin:upstream missing-backport C done inconclusive 127 238d 454d
BUG: scheduling while atomic in synchronize_rcu_expedited origin:lts C 27 243d 268d
SYZFAIL: SIGSEGV 316 225d 231d
BUG: corrupted list in p9_fd_cancelled 27 265d 637d
BUG: scheduling while atomic in __skb_wait_for_more_packets 2 267d 312d
KASAN: use-after-free Read in wg_queue_enqueue_per_peer_tx 1 269d 269d
BUG: scheduling while atomic in futex_wait_queue 34 236d 370d
BUG: workqueue leaked lock or atomic in bpf_map_free_deferred 5 279d 312d
BUG: workqueue leaked lock or atomic in free_work origin:lts C 5 290d 368d
BUG: scheduling while atomic in pcpu_alloc 11 275d 335d
BUG: scheduling while atomic in __writeback_inodes_sb_nr 1 283d 283d
BUG: scheduling while atomic in start_this_handle 1 283d 283d
BUG: scheduling while atomic in folio_wait_bit_common 9 285d 311d
BUG: scheduling while atomic in bpf_prog_pack_alloc origin:lts C 2 296d 314d
BUG: scheduling while atomic in kauditd_thread origin:lts C 1 297d 297d
BUG: scheduling while atomic in vhost_worker 1 288d 288d
BUG: scheduling while atomic in bpf_dispatcher_change_prog origin:lts C 1 335d 335d
BUG: scheduling while atomic in rtnl_lock 1 291d 291d
SYZFAIL: tun read failed origin:upstream syz inconclusive 44 208d 562d
SYZFAIL: proc resp pipe read failed 2 218d 223d
BUG: scheduling while atomic in do_sys_poll origin:lts C 8 302d 302d
BUG: scheduling while atomic in rtnl_lock_killable 3 295d 310d
BUG: scheduling while atomic in lock_sock_nested 1 297d 297d
BUG: scheduling while atomic in bit_wait_io 14 294d 372d
KASAN: use-after-free Read in mod_delayed_work_on 2 302d 319d
android14-6.1 test error: SYZFATAL: failed to connect to host: dial tcp IP:NUM: connect: connection refused 10 264d 265d
BUG: scheduling while atomic in msleep 1 306d 306d
general protection fault in mnt_want_write 1 308d 308d
BUG: scheduling while atomic in text_poke_set 2 308d 311d
BUG: scheduling while atomic in text_poke_copy 1 308d 308d
BUG: scheduling while atomic in ext4_buffered_write_iter 1 311d 311d
BUG: scheduling while atomic in kernfs_activate 1 311d 311d
BUG: scheduling while atomic in rcu_barrier 1 312d 312d
BUG: workqueue leaked lock or atomic in addrconf_dad_work 1 313d 313d
BUG: workqueue leaked lock or atomic in drain_vmap_area_work 1 314d 314d
BUG: using smp_processor_id() in preemptible code in rcu_is_watching 2 315d 328d
panic: runtime error: floating point error [recovered] 3 318d 335d
UBSAN: shift-out-of-bounds in scalar32_min_max_arsh origin:upstream missing-backport C done done 2 332d 422d
syzkaller: failed to copy syzkaller: file bin/linux_arm64/syz-fuzzer does not exist 2 233d 233d
general protection fault in skb_segment origin:upstream missing-backport C done done 1 337d 427d
UBSAN: array-index-out-of-bounds in check_stack_range_initialized C done 3803 315d 330d
general protection fault in tipc_crypto_rcv_complete 1 340d 340d
general protection fault in n_tty_receive_buf_common 1 356d 356d
general protection fault in tipc_conn_close 6 369d 596d
KASAN: use-after-free Read in unix_stream_read_actor missing-backport origin:upstream C done done 2 385d 459d
BUG: soft lockup in kjournald2 1 376d 376d
SYZFAIL: clone failed origin:upstream syz 1 380d 380d
android14-6.1 test error: BUG: mismatching fuzzer/executor git revisions: ADDR vs ADDR 1 400d 400d
general protection fault in ovl_lookup_single 1 401d 401d
KASAN: use-after-free Read in dev_uevent 6 412d 583d
BUG: stack guard page was hit in sys_sendmmsg missing-backport origin:upstream C done done 2 456d 610d
android14-6.1 test error: lost connection to test machine 3 448d 468d
kernel BUG in iptunnel_xmit (2) 1 448d 448d
BUG: soft lockup in wg_packet_tx_worker 3 452d 474d
BUG: soft lockup in neigh_timer_handler 2 452d 474d
KASAN: use-after-free Read in consume_skb C error done 4 463d 521d
BUG: soft lockup in tc_modify_qdisc C done done 53 442d 474d
KASAN: use-after-free Write in igrab origin:upstream missing-backport C done unreliable 29 456d 616d
BUG: soft lockup in addrconf_rs_timer 1 472d 472d
BUG: soft lockup in sys_sendmmsg 1 474d 474d
KASAN: use-after-free Read in get_max_inline_xattr_value_size origin:lts C error done 10 490d 578d
kernel BUG in ext4_trim_fs origin:lts C error done 9 497d 566d
KASAN: null-ptr-deref Write in backing_data_changed origin:downstream C done done 1 505d 541d
general protection fault in ext4_acquire_dquot origin:lts C done done 1 506d 630d
kernel BUG in ext4_mb_find_by_goal origin:lts C error done 78 479d 636d
kernel BUG in ext4_mb_load_buddy_gfp C error done 42 480d 637d
general protection fault in LZ4_decompress_safe_partial origin:lts C done done 2 527d 541d
kernel BUG in __block_commit_write syz error error 1 517d 517d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 8 527d 629d
panic: runtime error: floating point error 1 543d 542d
KASAN: null-ptr-deref Write in hidraw_release origin:upstream missing-backport C error done 5 571d 616d
KASAN: use-after-free Write in process_notifier 288 526d 552d
BUG: unable to handle kernel paging request in bpf_test_run 1 567d 567d
general protection fault in free_percpu 1 582d 582d
fatal error: Connection to IP closed by remote host. 1 595d 595d
general protection fault in idr_remove 1 608d 608d
BUG: soft lockup in hub_event 1 609d 609d
kernel BUG in pskb_expand_head 1 615d 615d
kernel BUG in mas_store_prealloc origin:lts C done done 12 620d 639d
kernel BUG in iptunnel_xmit 1 641d 641d