syzbot


Out of 170 bugs, 166 were automatically obsoleted (56 due to revoked reproducers), 4 were invalidated by users.
Title Repro Cause bisect Fix bisect Count Last Reported
kernel BUG in tcp_collapse 1 94d 94d
KASAN: use-after-free Read in kernfs_find_and_get_ns 1 96d 96d
BUG: soft lockup in wg_expired_send_persistent_keepalive 1 101d 101d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (4) 2 16d 16d
general protection fault in bq_flush_to_queue 12 108d 352d
KASAN: use-after-free Read in input_dev_uevent 1 115d 115d
KASAN: use-after-free Read in steam_send_report 1 115d 115d
general protection fault in vsock_stream_has_data origin:lts C done 5 131d 131d
KASAN: use-after-free Write in virtio_transport_recv_pkt origin:upstream C done 3 131d 455d
general protection fault in dev_map_generic_redirect origin:lts syz 97 91d 456d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (3) 8 134d 205d
KASAN: use-after-free Write in detach_if_pending 5 135d 257d
SYZFAIL: ShmemBuilder: too large output offset (2) 1 146d 146d
SYZFAIL: SIGFPE 4 147d 227d
BUG: soft lockup in bpf_link_release 2 156d 239d
general protection fault in khugepaged 1 160d 160d
BUG: soft lockup in cleanup_net 1 167d 167d
SYZFAIL: proc stdout read failed (2) 5 167d 213d
SYZFAIL: mmap of data segment failed 11 171d 325d
kernel BUG in ext4_write_inline_data_end origin:lts C error done 2 194d 597d
BUG: corrupted list in p9_conn_cancel 1 187d 187d
kernel BUG in mark_buffer_dirty_inode syz inconclusive 3 199d 268d
BUG: soft lockup in tun_chr_ioctl 1 205d 205d
SYZFAIL: SIGILL (2) 1 214d 214d
KASAN: use-after-free Read in ext4_convert_inline_data_nolock origin:upstream missing-backport C done 2 232d 428d
KASAN: invalid-free in raw_release 1 230d 230d
SYZFAIL: netlink_send_ext: short netlink write 1 231d 231d
KASAN: use-after-free Read in sk_psock_verdict_data_ready 2 235d 268d
KASAN: use-after-free Read in cpu_map_generic_redirect 4 237d 316d
KASAN: use-after-free Read in ext4_find_extent missing-backport C error done 3 249d 746d
KASAN: out-of-bounds Read in ext4_ext_remove_space missing-backport C error error 6 256d 688d
invalid opcode in bpf_dispatcher_xdp C error done 55 257d 767d
BUG: soft lockup in addrconf_rs_timer (2) syz 176 210d 415d
SYZFAIL: repeatedly failed to execute the program 23438 214d 373d
SYZFAIL: bad allocate request 8 255d 354d
UBSAN: shift-out-of-bounds in parse_audio_unit C done 3 267d 326d
KASAN: use-after-free Read in cancel_delayed_work_sync 1 266d 266d
KASAN: null-ptr-deref Write in mark_buffer_dirty_inode 1 268d 268d
BUG: soft lockup in br_multicast_port_group_expired 3 271d 383d
BUG: unable to handle kernel paging request in bpf_dispatcher_xdp origin:lts missing-backport C done error 20 388d 715d
general protection fault in n_tty_receive_buf_common (2) 4 275d 347d
KASAN: use-after-free Read in __dev_get_by_index 1 276d 276d
SYZFAIL: mmap of output file failed 17 252d 326d
KASAN: use-after-free Write in steam_input_close 1 281d 281d
SYZFAIL: ShmemBuilder: too large output offset 5 283d 346d
KASAN: use-after-free Read in __ext4_check_dir_entry missing-backport origin:upstream C error 4 294d 418d
kernel BUG in ext4_split_extent_at missing-backport origin:upstream C error error 1 294d 755d
BUG: unable to handle kernel paging request in bpf_dispatcher_xdp_func origin:lts C done error 1 296d 609d
SYZFAIL: iptable checkpoint: socket(SOCK_STREAM, IPPROTO_TCP) failed 2 291d 341d
SYZFAIL: posix_spawn failed 3855 252d 364d
SYZFAIL: mkdir(syz-tmp) failed 134 252d 365d
BUG: soft lockup in mntput 1 297d 297d
SYZFAIL: failed to mkdir 3 302d 373d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (2) 30 283d 402d
BUG: soft lockup in br_multicast_group_expired 1 318d 318d
KASAN: use-after-free Write in hiddev_release 1 320d 320d
SYZFAIL: proc stdout read failed 1 323d 323d
KASAN: use-after-free Read in kernfs_get 2 324d 369d
BUG: soft lockup in ndisc_send_rs 1 327d 327d
BUG: corrupted list in __dentry_kill 2 328d 355d
BUG: soft lockup in ip_list_rcv 2 334d 357d
BUG: soft lockup in net_rx_action 2 335d 378d
BUG: soft lockup in ipv6_get_lladdr 1 336d 336d
KASAN: use-after-free Read in ext4_read_inline_dir 1 338d 338d
BUG: soft lockup in arp_rcv 1 344d 344d
BUG: soft lockup in rtnl_newlink 2 345d 356d
BUG: using smp_processor_id() in preemptible code in usbnet_skb_return 2 350d 350d
SYZFAIL: SIGILL 3 350d 350d
general protection fault in inherit_task_group origin:downstream C 1 362d 502d
BUG: unable to handle kernel paging request in bpf_probe_read_compat_str missing-backport origin:upstream C error error 3 362d 527d
BUG: scheduling while atomic in wait_for_common origin:lts C done 9 369d 413d
BUG: scheduling while atomic in rcu_boost_kthread origin:lts C unreliable 3 373d 501d
KASAN: stack-out-of-bounds Read in hash origin:lts C done 97 346d 457d
KASAN: use-after-free Read in move_linked_works 2 369d 436d
BUG: unable to handle kernel paging request in bpf_probe_read_kernel_str missing-backport C inconclusive 3 379d 516d
BUG: scheduling while atomic in p9_client_rpc 2 374d 438d
BUG: soft lockup in kjournald2 (2) 1 374d 374d
BUG: scheduling while atomic in wait_transaction_locked 10 378d 472d
BUG: scheduling while atomic in unlink_anon_vmas C done 2 390d 468d
BUG: scheduling while atomic in jbd2_log_wait_commit 3 385d 454d
general protection fault in hrtimer_try_to_cancel origin:upstream missing-backport C done done 25 396d 592d
UBSAN: array-index-out-of-bounds in bpf_bprintf_prepare C done 14 397d 496d
BUG: scheduling while atomic in do_nanosleep C done 104 367d 511d
KASAN: use-after-free Read in wg_packet_receive 1 388d 388d
BUG: unable to handle kernel NULL pointer dereference in sk_psock_verdict_data_ready origin:upstream missing-backport C 204 369d 506d
BUG: scheduling while atomic in exit_to_user_mode_loop C done 1087 369d 551d
BUG: scheduling while atomic in do_epoll_wait origin:lts syz 26 375d 506d
BUG: scheduling while atomic in __put_anon_vma origin:lts C done 1 403d 437d
BUG: workqueue leaked lock or atomic in bpf_prog_free_deferred C done 46 373d 506d
android14-6.1 test error: lost connection to test machine (2) 8 398d 399d
BUG: unable to handle kernel paging request in copy_from_kernel_nofault origin:upstream missing-backport C done inconclusive 127 379d 595d
BUG: scheduling while atomic in synchronize_rcu_expedited origin:lts C 27 384d 409d
SYZFAIL: SIGSEGV 316 366d 372d
BUG: corrupted list in p9_fd_cancelled 27 406d 778d
BUG: scheduling while atomic in __skb_wait_for_more_packets 2 408d 453d
KASAN: use-after-free Read in wg_queue_enqueue_per_peer_tx 1 410d 410d
BUG: scheduling while atomic in futex_wait_queue 34 377d 511d
BUG: workqueue leaked lock or atomic in bpf_map_free_deferred 5 420d 453d
BUG: workqueue leaked lock or atomic in free_work origin:lts C 5 431d 509d
BUG: scheduling while atomic in pcpu_alloc 11 416d 476d
BUG: scheduling while atomic in __writeback_inodes_sb_nr 1 424d 424d
BUG: scheduling while atomic in start_this_handle 1 424d 424d
BUG: scheduling while atomic in folio_wait_bit_common 9 426d 452d
BUG: scheduling while atomic in bpf_prog_pack_alloc origin:lts C 2 437d 455d
BUG: scheduling while atomic in kauditd_thread origin:lts C 1 438d 438d
BUG: scheduling while atomic in vhost_worker 1 429d 429d
BUG: scheduling while atomic in bpf_dispatcher_change_prog origin:lts C 1 476d 476d
BUG: scheduling while atomic in rtnl_lock 1 432d 432d
SYZFAIL: tun read failed origin:upstream syz inconclusive 44 349d 703d
SYZFAIL: proc resp pipe read failed 2 359d 364d
BUG: scheduling while atomic in do_sys_poll origin:lts C 8 443d 443d
BUG: scheduling while atomic in rtnl_lock_killable 3 436d 451d
BUG: scheduling while atomic in lock_sock_nested 1 438d 438d
BUG: scheduling while atomic in bit_wait_io 14 435d 513d
KASAN: use-after-free Read in mod_delayed_work_on 2 443d 460d
android14-6.1 test error: SYZFATAL: failed to connect to host: dial tcp IP:NUM: connect: connection refused 10 405d 406d
BUG: scheduling while atomic in msleep 1 447d 447d
general protection fault in mnt_want_write 1 449d 449d
BUG: scheduling while atomic in text_poke_set 2 449d 452d
BUG: scheduling while atomic in text_poke_copy 1 449d 449d
BUG: scheduling while atomic in ext4_buffered_write_iter 1 452d 452d
BUG: scheduling while atomic in kernfs_activate 1 452d 452d
BUG: scheduling while atomic in rcu_barrier 1 453d 453d
BUG: workqueue leaked lock or atomic in addrconf_dad_work 1 454d 454d
BUG: workqueue leaked lock or atomic in drain_vmap_area_work 1 455d 455d
BUG: using smp_processor_id() in preemptible code in rcu_is_watching 2 456d 469d
panic: runtime error: floating point error [recovered] 3 459d 476d
UBSAN: shift-out-of-bounds in scalar32_min_max_arsh origin:upstream missing-backport C done done 2 473d 563d
syzkaller: failed to copy syzkaller: file bin/linux_arm64/syz-fuzzer does not exist 2 374d 374d
general protection fault in skb_segment origin:upstream missing-backport C done done 1 478d 568d
UBSAN: array-index-out-of-bounds in check_stack_range_initialized C done 3803 456d 471d
general protection fault in tipc_crypto_rcv_complete 1 481d 481d
general protection fault in n_tty_receive_buf_common 1 496d 496d
general protection fault in tipc_conn_close 6 510d 737d
KASAN: use-after-free Read in unix_stream_read_actor missing-backport origin:upstream C done done 2 526d 600d
BUG: soft lockup in kjournald2 1 517d 517d
SYZFAIL: clone failed origin:upstream syz 1 521d 521d
android14-6.1 test error: BUG: mismatching fuzzer/executor git revisions: ADDR vs ADDR 1 541d 541d
general protection fault in ovl_lookup_single 1 542d 542d
KASAN: use-after-free Read in dev_uevent 6 553d 724d
BUG: stack guard page was hit in sys_sendmmsg missing-backport origin:upstream C done done 2 596d 751d
android14-6.1 test error: lost connection to test machine 3 589d 609d
kernel BUG in iptunnel_xmit (2) 1 589d 589d
BUG: soft lockup in wg_packet_tx_worker 3 593d 615d
BUG: soft lockup in neigh_timer_handler 2 593d 615d
KASAN: use-after-free Read in consume_skb C error done 4 603d 662d
BUG: soft lockup in tc_modify_qdisc C done done 53 583d 615d
KASAN: use-after-free Write in igrab origin:upstream missing-backport C done unreliable 29 597d 757d
BUG: soft lockup in addrconf_rs_timer 1 613d 613d
BUG: soft lockup in sys_sendmmsg 1 615d 615d
KASAN: use-after-free Read in get_max_inline_xattr_value_size origin:lts C error done 10 631d 719d
kernel BUG in ext4_trim_fs origin:lts C error done 9 638d 707d
KASAN: null-ptr-deref Write in backing_data_changed origin:downstream C done done 1 646d 682d
general protection fault in ext4_acquire_dquot origin:lts C done done 1 647d 771d
kernel BUG in ext4_mb_find_by_goal origin:lts C error done 78 620d 777d
kernel BUG in ext4_mb_load_buddy_gfp C error done 42 621d 778d
general protection fault in LZ4_decompress_safe_partial origin:lts C done done 2 668d 682d
kernel BUG in __block_commit_write syz error error 1 658d 658d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 8 668d 770d
panic: runtime error: floating point error 1 683d 683d
KASAN: null-ptr-deref Write in hidraw_release origin:upstream missing-backport C error done 5 712d 757d
KASAN: use-after-free Write in process_notifier 288 667d 693d
BUG: unable to handle kernel paging request in bpf_test_run 1 708d 708d
general protection fault in free_percpu 1 723d 723d
fatal error: Connection to IP closed by remote host. 1 736d 736d
general protection fault in idr_remove 1 749d 749d
BUG: soft lockup in hub_event 1 750d 750d
kernel BUG in pskb_expand_head 1 756d 756d
kernel BUG in mas_store_prealloc origin:lts C done done 12 760d 780d
kernel BUG in iptunnel_xmit 1 782d 782d