syzbot

 sign-in | mailing list | source | docs
🐞 Open [131]
🐞 Fixed [2]
🐞 Invalid [239]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

Out of 239 bugs, 231 were automatically obsoleted (77 due to revoked reproducers), 8 were invalidated by users.
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported
android14-6.1 test error: SYZFATAL: image testing failed w/o kernel bug (2) -1 10 60d 63d
general protection fault in delayed_work_timer_fn (3) 2 2 104d 127d
KASAN: slab-out-of-bounds Read in ext4_ext_correct_indexes origin:upstream 17 syz error 1 107d 107d
KASAN: use-after-free Read in worker_thread missing-backport 19 C error error 171 111d 1066d
KASAN: use-after-free Read in sk_psock_verdict_data_ready (3) 19 1 122d 122d
SYZFAIL: failed to send rpc -1 41 127d 688d
general protection fault in tipc_conn_close (3) 2 3 128d 172d
BUG: soft lockup in addrconf_rs_timer (4) 1 7 128d 277d
KASAN: use-after-free Read in kernfs_get (2) origin:downstream 22 syz error 3 140d 224d
UBSAN: shift-out-of-bounds in s32ton origin:lts -1 C error 3 140d 188d
KASAN: use-after-free Read in process_one_work origin:upstream missing-backport 19 C error 1040 111d 1089d
KASAN: use-after-free Read in fast_dput 19 5 137d 202d
BUG: soft lockup in wg_expired_new_handshake 1 1 157d 157d
KASAN: use-after-free Read in move_linked_works (3) 19 2 164d 182d
KASAN: use-after-free Write in l2tp_session_delete origin:downstream 22 syz error 20 180d 584d
syzkaller: make host failed: failed to run ["make" "host" "ci" "agent"]: exit status 2 -1 2 98d 98d
KASAN: use-after-free Write in __ip6_del_rt origin:lts 22 syz error 1 199d 199d
BUG: soft lockup in sock_read_iter (2) 1 2 200d 249d
KASAN: use-after-free Read in ipt_do_table 19 1 201d 201d
BUG: soft lockup in tcp_tasklet_func (2) 1 1 203d 203d
general protection fault in find_match 2 5 215d 368d
KASAN: use-after-free Read in sk_psock_verdict_data_ready (2) 19 1 222d 222d
KASAN: use-after-free Read in kernfs_find_and_get_ns (2) 19 1 223d 223d
SYZFAIL: failed to recv rpc origin:upstream -1 syz 231 136d 677d
kernel BUG in ext4_inline_data_truncate missing-backport origin:upstream -1 C done 1 237d 460d
general protection fault in nexthop_get_nhc_lookup 2 9 228d 279d
KASAN: use-after-free Read in hci_uart_write_work 19 7 229d 249d
kernel BUG in ext4_create_inline_data origin:lts -1 C done 1 241d 255d
KASAN: slab-out-of-bounds Read in seq_printf 19 2 237d 242d
KASAN: use-after-free Write in steam_input_close (2) 22 1 242d 242d
KASAN: slab-out-of-bounds Read in mon_bin_event origin:lts 17 C done 5 260d 299d
KASAN: use-after-free Read in f2fs_inode_synced 19 C done 4 265d 388d
SYZFAIL: SIGSEGV (2) -1 3 256d 345d
BUG: corrupted list in p9_fd_cancelled (2) 8 syz error 14 258d 622d
KASAN: use-after-free Read in fib_flush 19 1 268d 268d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (6) -1 2 179d 179d
BUG: unable to handle kernel NULL pointer dereference in read_pages origin:downstream 10 C inconclusive 64 284d 767d
general protection fault in delayed_work_timer_fn (2) 2 2 274d 275d
general protection fault in qdisc_tree_reduce_backlog 2 C done 45 256d 273d
general protection fault in htb_qlen_notify origin:lts 2 C 74 257d 293d
android14-6.1 test error: SYZFATAL: image testing failed w/o kernel bug -1 2 283d 360d
SYZFAIL: SIGILL (3) -1 4 284d 368d
android14-6.1 test error: lost connection to test machine (3) -1 1 286d 286d
kernel BUG in ext4_split_extent_at (2) origin:lts -1 C done 1 304d 304d
SYZFAIL: repeatedly failed to execute the program (2) -1 3 300d 333d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (5) -1 2 210d 210d
SYZFAIL: posix_spawnp failed -1 5 302d 498d
BUG: soft lockup in bpf_link_release (2) 1 1 305d 305d
BUG: soft lockup in pcpu_balance_workfn 1 1 305d 305d
KASAN: use-after-free Read in inet_twsk_kill 19 3 312d 317d
BUG: soft lockup in tcp_tasklet_func 1 1 321d 321d
KASAN: use-after-free Read in move_linked_works (2) 19 1 323d 323d
KASAN: use-after-free Read in tcp_metrics_flush_all 19 82 293d 327d
BUG: stack guard page was hit in corrupted origin:lts -1 C 2 350d 646d
general protection fault in tipc_conn_close (2) 2 1 347d 347d
invalid opcode in __traceiter_ext4_ext_remove_space_done 2 1 364d 364d
BUG: soft lockup in kernfs_fop_write_iter 1 1 367d 367d
kernel BUG in mark_buffer_dirty_inode (2) -1 1 373d 373d
KASAN: use-after-free Write in kernfs_get 22 syz error 8 373d 542d
kernel BUG in do_swap_page -1 C done 9 389d 427d
BUG: soft lockup in sock_read_iter 1 2 383d 422d
KASAN: use-after-free Read in __netif_receive_skb_core 19 1 385d 385d
general protection fault in delayed_work_timer_fn 2 2 387d 451d
BUG: corrupted list in __dentry_kill (2) 8 2 389d 459d
KASAN: use-after-free Read in cpu_map_generic_redirect (2) 19 1 390d 390d
kernel BUG in ext4_ind_map_blocks -1 1 396d 396d
KASAN: use-after-free Read in cpu_map_enqueue origin:lts missing-backport 19 syz 111 386d 667d
general protection fault in dev_map_enqueue missing-backport 19 C error 1695 385d 779d
BUG: soft lockup in addrconf_rs_timer (3) 1 1 405d 405d
kernel BUG in tcp_collapse -1 1 410d 410d
KASAN: use-after-free Read in kernfs_find_and_get_ns 19 1 412d 412d
BUG: soft lockup in wg_expired_send_persistent_keepalive 1 1 417d 417d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (4) -1 2 332d 332d
general protection fault in bq_flush_to_queue 2 12 424d 668d
KASAN: use-after-free Read in input_dev_uevent 19 1 431d 431d
KASAN: use-after-free Read in steam_send_report 19 1 431d 431d
general protection fault in vsock_stream_has_data origin:lts 2 C done 5 447d 447d
KASAN: use-after-free Write in virtio_transport_recv_pkt origin:upstream 22 C done 3 447d 771d
general protection fault in dev_map_generic_redirect origin:lts 19 syz 97 407d 773d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (3) -1 8 450d 521d
KASAN: use-after-free Write in detach_if_pending 22 5 451d 573d
SYZFAIL: ShmemBuilder: too large output offset (2) -1 1 462d 462d
SYZFAIL: SIGFPE -1 4 463d 543d
BUG: soft lockup in bpf_link_release 1 2 472d 555d
general protection fault in khugepaged 2 1 477d 477d
BUG: soft lockup in cleanup_net 1 1 483d 483d
SYZFAIL: proc stdout read failed (2) -1 5 484d 529d
SYZFAIL: mmap of data segment failed -1 11 488d 641d
kernel BUG in ext4_write_inline_data_end origin:lts -1 C error done 2 510d 913d
BUG: corrupted list in p9_conn_cancel 8 1 503d 503d
kernel BUG in mark_buffer_dirty_inode -1 syz inconclusive 3 515d 584d
BUG: soft lockup in tun_chr_ioctl 1 1 521d 521d
SYZFAIL: SIGILL (2) -1 1 531d 531d
KASAN: use-after-free Read in ext4_convert_inline_data_nolock origin:upstream missing-backport 19 C done 2 548d 745d
KASAN: invalid-free in raw_release 24 1 546d 546d
SYZFAIL: netlink_send_ext: short netlink write -1 1 547d 547d
KASAN: use-after-free Read in sk_psock_verdict_data_ready 19 2 551d 584d
KASAN: use-after-free Read in cpu_map_generic_redirect 19 4 553d 632d
KASAN: use-after-free Read in ext4_find_extent missing-backport 19 C error done 3 565d 1062d
KASAN: out-of-bounds Read in ext4_ext_remove_space missing-backport 17 C error error 6 573d 1005d
invalid opcode in bpf_dispatcher_xdp 2 C error done 55 573d 1083d
BUG: soft lockup in addrconf_rs_timer (2) 1 syz 176 526d 731d
SYZFAIL: repeatedly failed to execute the program -1 23438 530d 689d
SYZFAIL: bad allocate request -1 8 571d 671d
UBSAN: shift-out-of-bounds in parse_audio_unit -1 C done 3 583d 642d
KASAN: use-after-free Read in cancel_delayed_work_sync 19 1 582d 582d
KASAN: null-ptr-deref Write in mark_buffer_dirty_inode 12 1 585d 585d
BUG: soft lockup in br_multicast_port_group_expired 1 3 587d 699d
BUG: unable to handle kernel paging request in bpf_dispatcher_xdp origin:lts missing-backport 8 C done error 20 704d 1031d
general protection fault in n_tty_receive_buf_common (2) 2 4 592d 663d
KASAN: use-after-free Read in __dev_get_by_index 19 1 593d 593d
SYZFAIL: mmap of output file failed -1 17 569d 642d
KASAN: use-after-free Write in steam_input_close 22 1 597d 597d
SYZFAIL: ShmemBuilder: too large output offset -1 5 599d 663d
KASAN: use-after-free Read in __ext4_check_dir_entry missing-backport origin:upstream 19 C error 4 610d 734d
kernel BUG in ext4_split_extent_at missing-backport origin:upstream -1 C error error 1 610d 1071d
BUG: unable to handle kernel paging request in bpf_dispatcher_xdp_func origin:lts 8 C done error 1 612d 925d
SYZFAIL: iptable checkpoint: socket(SOCK_STREAM, IPPROTO_TCP) failed -1 2 607d 657d
SYZFAIL: posix_spawn failed -1 3855 568d 680d
SYZFAIL: mkdir(syz-tmp) failed -1 134 568d 681d
BUG: soft lockup in mntput 1 1 613d 613d
SYZFAIL: failed to mkdir -1 3 618d 689d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (2) -1 30 599d 718d
BUG: soft lockup in br_multicast_group_expired 1 1 634d 634d
KASAN: use-after-free Write in hiddev_release 22 1 636d 636d
SYZFAIL: proc stdout read failed -1 1 640d 640d
KASAN: use-after-free Read in kernfs_get 19 2 640d 686d
BUG: soft lockup in ndisc_send_rs 1 1 644d 644d
BUG: corrupted list in __dentry_kill 8 2 644d 671d
BUG: soft lockup in ip_list_rcv 1 2 650d 673d
BUG: soft lockup in net_rx_action 1 2 651d 694d
BUG: soft lockup in ipv6_get_lladdr 1 1 653d 653d
KASAN: use-after-free Read in ext4_read_inline_dir 19 1 654d 654d
BUG: soft lockup in arp_rcv 1 1 661d 661d
BUG: soft lockup in rtnl_newlink 1 2 661d 672d
BUG: using smp_processor_id() in preemptible code in usbnet_skb_return 4 2 666d 666d
SYZFAIL: SIGILL -1 3 666d 666d
general protection fault in inherit_task_group origin:downstream 2 C 1 678d 818d
BUG: unable to handle kernel paging request in bpf_probe_read_compat_str missing-backport origin:upstream 8 C error error 3 678d 843d
BUG: scheduling while atomic in wait_for_common origin:lts 5 C done 9 685d 729d
BUG: scheduling while atomic in rcu_boost_kthread origin:lts 5 C unreliable 3 689d 818d
KASAN: stack-out-of-bounds Read in hash origin:lts 17 C done 97 662d 773d
KASAN: use-after-free Read in move_linked_works 19 2 685d 752d
BUG: unable to handle kernel paging request in bpf_probe_read_kernel_str missing-backport 8 C inconclusive 3 695d 832d
BUG: scheduling while atomic in p9_client_rpc 5 2 690d 755d
BUG: soft lockup in kjournald2 (2) 1 1 691d 691d
BUG: scheduling while atomic in wait_transaction_locked 5 10 694d 788d
BUG: scheduling while atomic in unlink_anon_vmas 5 C done 2 707d 784d
BUG: scheduling while atomic in jbd2_log_wait_commit 5 3 701d 770d
general protection fault in hrtimer_try_to_cancel origin:upstream missing-backport 2 C done done 25 713d 909d
UBSAN: array-index-out-of-bounds in bpf_bprintf_prepare 15 C done 14 713d 812d
BUG: scheduling while atomic in do_nanosleep 5 C done 104 683d 827d
KASAN: use-after-free Read in wg_packet_receive 19 1 704d 704d
BUG: unable to handle kernel NULL pointer dereference in sk_psock_verdict_data_ready origin:upstream missing-backport 10 C 204 685d 822d
BUG: scheduling while atomic in exit_to_user_mode_loop 5 C done 1087 685d 867d
BUG: scheduling while atomic in do_epoll_wait origin:lts 5 syz 26 691d 822d
BUG: scheduling while atomic in __put_anon_vma origin:lts 5 C done 1 719d 753d
BUG: workqueue leaked lock or atomic in bpf_prog_free_deferred -1 C done 46 689d 822d
android14-6.1 test error: lost connection to test machine (2) -1 8 714d 715d
BUG: unable to handle kernel paging request in copy_from_kernel_nofault origin:upstream missing-backport 8 C done inconclusive 127 695d 912d
BUG: scheduling while atomic in synchronize_rcu_expedited origin:lts 5 C 27 700d 725d
SYZFAIL: SIGSEGV -1 316 682d 688d
BUG: corrupted list in p9_fd_cancelled 8 27 723d 1095d
BUG: scheduling while atomic in __skb_wait_for_more_packets 5 2 725d 769d
KASAN: use-after-free Read in wg_queue_enqueue_per_peer_tx 19 1 726d 726d
BUG: scheduling while atomic in futex_wait_queue 5 34 693d 827d
BUG: workqueue leaked lock or atomic in bpf_map_free_deferred -1 5 736d 770d
BUG: workqueue leaked lock or atomic in free_work origin:lts -1 C 5 748d 825d
BUG: scheduling while atomic in pcpu_alloc 5 11 732d 792d
BUG: scheduling while atomic in __writeback_inodes_sb_nr 5 1 740d 740d
BUG: scheduling while atomic in start_this_handle 5 1 740d 740d
BUG: scheduling while atomic in folio_wait_bit_common 5 9 742d 768d
BUG: scheduling while atomic in bpf_prog_pack_alloc origin:lts 5 C 2 753d 771d
BUG: scheduling while atomic in kauditd_thread origin:lts 5 C 1 754d 754d
BUG: scheduling while atomic in vhost_worker 5 1 745d 745d
BUG: scheduling while atomic in bpf_dispatcher_change_prog origin:lts 5 C 1 792d 792d
BUG: scheduling while atomic in rtnl_lock 5 1 748d 748d
SYZFAIL: tun read failed origin:upstream -1 syz inconclusive 44 665d 1019d
SYZFAIL: proc resp pipe read failed -1 2 675d 680d
BUG: scheduling while atomic in do_sys_poll origin:lts 5 C 8 759d 759d
BUG: scheduling while atomic in rtnl_lock_killable 5 3 752d 767d
BUG: scheduling while atomic in lock_sock_nested 5 1 754d 754d
BUG: scheduling while atomic in bit_wait_io 5 14 751d 830d
KASAN: use-after-free Read in mod_delayed_work_on 19 2 759d 776d
android14-6.1 test error: SYZFATAL: failed to connect to host: dial tcp IP:NUM: connect: connection refused -1 10 721d 722d
BUG: scheduling while atomic in msleep 5 1 763d 763d
general protection fault in mnt_want_write 2 1 765d 765d
BUG: scheduling while atomic in text_poke_set 5 2 765d 769d
BUG: scheduling while atomic in text_poke_copy 5 1 765d 765d
BUG: scheduling while atomic in ext4_buffered_write_iter 5 1 768d 768d
BUG: scheduling while atomic in kernfs_activate 5 1 768d 768d
BUG: scheduling while atomic in rcu_barrier 5 1 770d 770d
BUG: workqueue leaked lock or atomic in addrconf_dad_work -1 1 770d 770d
BUG: workqueue leaked lock or atomic in drain_vmap_area_work -1 1 771d 771d
BUG: using smp_processor_id() in preemptible code in rcu_is_watching 4 2 772d 785d
panic: runtime error: floating point error [recovered] 2 3 775d 792d
UBSAN: shift-out-of-bounds in scalar32_min_max_arsh origin:upstream missing-backport -1 C done done 2 789d 879d
syzkaller: failed to copy syzkaller: file bin/linux_arm64/syz-fuzzer does not exist -1 2 690d 690d
general protection fault in skb_segment origin:upstream missing-backport 2 C done done 1 794d 884d
UBSAN: array-index-out-of-bounds in check_stack_range_initialized 15 C done 3803 772d 787d
general protection fault in tipc_crypto_rcv_complete 2 1 798d 798d
general protection fault in n_tty_receive_buf_common 2 1 813d 813d
general protection fault in tipc_conn_close 2 6 826d 1053d
KASAN: use-after-free Read in unix_stream_read_actor missing-backport origin:upstream 19 C done done 2 842d 916d
BUG: soft lockup in kjournald2 1 1 833d 833d
SYZFAIL: clone failed origin:upstream -1 syz 1 838d 838d
android14-6.1 test error: BUG: mismatching fuzzer/executor git revisions: ADDR vs ADDR -1 1 858d 858d
general protection fault in ovl_lookup_single 2 1 858d 858d
KASAN: use-after-free Read in dev_uevent 19 6 869d 1040d
BUG: stack guard page was hit in sys_sendmmsg missing-backport origin:upstream -1 C done done 2 913d 1067d
android14-6.1 test error: lost connection to test machine -1 3 905d 925d
kernel BUG in iptunnel_xmit (2) -1 1 905d 905d
BUG: soft lockup in wg_packet_tx_worker 1 3 909d 931d
BUG: soft lockup in neigh_timer_handler 1 2 909d 931d
KASAN: use-after-free Read in consume_skb 19 C error done 4 920d 978d
BUG: soft lockup in tc_modify_qdisc 1 C done done 53 899d 931d
KASAN: use-after-free Write in igrab origin:upstream missing-backport 22 C done unreliable 29 913d 1073d
BUG: soft lockup in addrconf_rs_timer 1 1 929d 929d
BUG: soft lockup in sys_sendmmsg 1 1 931d 931d
KASAN: use-after-free Read in get_max_inline_xattr_value_size origin:lts 19 C error done 10 947d 1035d
kernel BUG in ext4_trim_fs origin:lts -1 C error done 9 954d 1023d
KASAN: null-ptr-deref Write in backing_data_changed origin:downstream 12 C done done 1 962d 998d
general protection fault in ext4_acquire_dquot origin:lts 2 C done done 1 963d 1087d
kernel BUG in ext4_mb_find_by_goal origin:lts -1 C error done 78 936d 1093d
kernel BUG in ext4_mb_load_buddy_gfp -1 C error done 42 938d 1094d
general protection fault in LZ4_decompress_safe_partial origin:lts 2 C done done 2 984d 998d
kernel BUG in __block_commit_write -1 syz error error 1 975d 975d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 -1 8 984d 1086d
panic: runtime error: floating point error 2 1 1000d 1000d
KASAN: null-ptr-deref Write in hidraw_release origin:upstream missing-backport 12 C error done 5 1028d 1073d
KASAN: use-after-free Write in process_notifier 22 288 983d 1009d
BUG: unable to handle kernel paging request in bpf_test_run 8 1 1025d 1025d
general protection fault in free_percpu 2 1 1040d 1040d
fatal error: Connection to IP closed by remote host. -1 1 1052d 1052d
general protection fault in idr_remove 2 1 1065d 1065d
BUG: soft lockup in hub_event 1 1 1066d 1066d
kernel BUG in pskb_expand_head -1 1 1072d 1072d
kernel BUG in mas_store_prealloc origin:lts -1 C done done 12 1077d 1097d
kernel BUG in iptunnel_xmit -1 1 1098d 1098d