syzbot

 sign-in | mailing list | source | docs
🐞 Open [829]
🐞 Fixed [76]
🐞 Invalid [1004]
⬇ Missing Backports [123]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
KASAN: use-after-free Write in xfs_trans_committed_bulk origin:lts-only 24 C done 43 100d 922d 0/3 never xfs: fix super block buf log item UAF during force shutdown
KASAN: use-after-free Write in diWrite origin:upstream 24 C done 22 52d 364d 3/3 10d f98bf80b20f4 jfs: fix null ptr deref in dtInsertEntry
WARNING in ath6kl_bmi_get_target_info origin:upstream -1 C done 18 72d 308d 3/3 39d 46b47d4b06fa wifi: ath6kl: remove WARN on bad firmware input
WARNING in ext4_iomap_begin origin:upstream -1 C done 8 103d 136d 3/3 67d a597a609bfd4 ext4: ensure i_size is smaller than maxbytes
KASAN: use-after-free Write in ext4_insert_dentry origin:upstream 24 C done 4 144d 294d 3/3 109d 2883e9e74f73 ext4: fix off-by-one error in do_split
possible deadlock in j1939_sk_queue_drop_all origin:upstream missing-backport 4 C done 7 166d 784d 3/3 134d 44f48eb9a605 mm: resolve faulty mmap_region() error path behaviour
KASAN: use-after-free Read in __ocfs2_find_path origin:upstream 19 C done 11 173d 349d 3/3 137d 17c99ab3db2b ocfs2: validate l_tree_depth to avoid out-of-bounds access
UBSAN: array-index-out-of-bounds in xtSearch (2) origin:lts-only 15 C done 115 188d 684d 3/3 141d a1166e98d80c jfs: define xtree root and page independently
KASAN: use-after-free Read in ocfs2_search_dirblock 19 C done 8 198d 227d 3/3 162d 03b605ac1e5b ocfs2: check dir i_size in ocfs2_find_entry
possible deadlock in team_port_change_check origin:upstream 4 C done 52 199d 536d 3/3 165d bd099a2fa9be team: prevent adding a device which is already a team device lower
KASAN: use-after-free Read in ocfs2_lock_global_qf origin:lts-only 19 C done 4 250d 250d 3/3 217d f44e6d70c100 ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
INFO: task hung in do_rmdir origin:lts-only 1 C done 5 269d 292d 3/3 233d 28c21f0ac529 exfat: fix the infinite loop in exfat_readdir()
WARNING in nilfs_rmdir origin:lts-only -1 C done 4 271d 279d 3/3 233d 912188316a8c nilfs2: prevent use of deleted inode
WARNING in netdev_queue_update_kobjects (2) origin:upstream -1 C done 303 279d 322d 3/3 238d a9584c897d1c Bluetooth: fix use-after-free in device_for_each_child()
WARNING: locking bug in ext4_ioctl 4 C done 251 280d 833d 3/3 239d 48c335245371 locking/lockdep: Avoid creating new name string literals in lockdep_set_subclass()
UBSAN: array-index-out-of-bounds in dbAdjTree origin:lts-only 15 C done 7 281d 320d 3/3 240d a3d408870bc1 jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
possible deadlock in mi_read origin:upstream missing-backport 4 C done 827 315d 921d 3/3 271d 47e8a17491e3 fs/ntfs3: Fix possible deadlock in mi_read
WARNING in cfg80211_wext_siwgenie origin:lts-only -1 C done 316 338d 380d 3/3 296d e0f67494957f Revert "wifi: cfg80211: check wiphy mutex is held for wdev mutex"
WARNING in rcu_sync_dtor origin:upstream -1 C done 157 338d 420d 3/3 297d fbb177bc1d64 ext4: don't set SB_RDONLY after filesystem errors
UBSAN: array-index-out-of-bounds in dbSplit 15 C done 9 340d 351d 3/3 305d 25d2a3ff02f2 jfs: check if leafidx greater than num leaves per dmap tree
UBSAN: array-index-out-of-bounds in dbNextAG origin:upstream 15 C done 4 347d 440d 3/3 310d ead825332785 jfs: fix out-of-bounds in dbNextAG() and diAlloc()
WARNING: bad unlock balance in ocfs2_read_blocks origin:upstream 4 C done 10 348d 367d 3/3 313d f55a33fe0fb5 ocfs2: remove unreasonable unlock in ocfs2_read_blocks
general protection fault in ima_post_path_mknod origin:lts-only 2 C done 5 348d 348d 3/3 313d 4a1d95fc9706 udf: Don't return bh from udf_expand_dir_adinicb()
KASAN: use-after-free Read in ext4_search_dir 19 C done 5 349d 826d 3/3 315d be2e9b111e27 ext4: avoid OOB when system.data xattr changes underneath the filesystem
KASAN: use-after-free Read in try_to_wake_up 19 C done 71 366d 821d 3/3 333d 06afce714d87 nilfs2: fix potential hang in nilfs_detach_log_writer()
WARNING in skb_checksum_help origin:upstream missing-backport -1 C done 3337 391d 834d 3/3 347d 27874ca77bd2 net: missing check virtio
possible deadlock in rds_wake_sk_sleep origin:upstream missing-backport 4 C done 1 395d 838d 3/3 354d 124f20c5f6e5 net:rds: Fix possible deadlock in rds_message_put
possible deadlock in hfsplus_file_extend missing-backport origin:lts-only 4 C done 3439 397d 923d 3/3 362d 603d064d406a hfsplus: fix to avoid false alarm of circular locking
UBSAN: array-index-out-of-bounds in diFree origin:upstream missing-backport 15 C done 13 401d 447d 3/3 365d 63f7fdf733ad jfs: Fix array-index-out-of-bounds in diFree
possible deadlock in local_lock_acquire origin:upstream missing-backport 4 C done 54 398d 540d 3/3 365d d240b789dded mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
possible deadlock in __lock_task_sighand origin:upstream 4 C done 108 403d 554d 3/3 371d d240b789dded mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
WARNING in perf_event_release_kernel origin:upstream -1 C done 1 405d 634d 3/3 372d 9ad46f1fef42 perf: Fix event leak upon exec and file release
kernel BUG in __block_write_begin_int -1 C done 3 429d 429d 3/3 387d 7000b438dda9 nilfs2: fix kernel bug on rename operation of broken directory
KASAN: use-after-free Read in nilfs_set_link 19 C done 1 429d 429d 3/3 387d 7000b438dda9 nilfs2: fix kernel bug on rename operation of broken directory
kernel BUG in f2fs_vm_page_mkwrite origin:upstream -1 C done 3 432d 474d 3/3 389d 70f5ef5f33c3 f2fs: fix return value of f2fs_convert_inline_inode()
WARNING in ieee80211_check_rate_mask origin:lts-only -1 C done 29 399d 510d 3/3 397d badabac392d3 wifi: mac80211: check basic rates validity
SYZFAIL: clone failed origin:lts-only -1 syz done 1 478d 600d 3/3 404d f0f1bd244a85 perf/core: Fix missing wakeup when waiting for context reference
WARNING in hid_output_report origin:lts-only -1 C done 8 448d 448d 3/3 408d 8bac61934cd5 HID: core: remove unnecessary WARN_ON() in implement()
possible deadlock in sock_hash_update_common origin:upstream 4 C done 1 485d 485d 3/3 445d 11e8ecc5b860 bpf: Allow delete from sockmap/sockhash only if update is allowed
WARNING in sock_hash_delete_elem -1 C done 987 527d 554d 3/3 490d d1e73fb19a4c bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in scheduler_tick 4 C done 162 527d 552d 3/3 491d d1e73fb19a4c bpf, sockmap: Prevent lock inversion deadlock in map delete elem
WARNING in sock_map_delete_elem -1 C done 1015 527d 554d 3/3 493d d1e73fb19a4c bpf, sockmap: Prevent lock inversion deadlock in map delete elem
WARNING in sock_map_unref -1 C done 18 528d 530d 3/3 494d d1e73fb19a4c bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in hrtimer_run_queues 4 C done 20 528d 553d 3/3 497d d1e73fb19a4c bpf, sockmap: Prevent lock inversion deadlock in map delete elem
WARNING: proc registration bug in scsi_host_alloc origin:lts-only -1 C inconclusive 28 536d 901d 3/3 527d cea234bb214b scsi: core: Fix unremoved procfs host directory regression
BUG: unable to handle kernel paging request in bpf_probe_read_kernel_str origin:upstream 8 C done 1 561d 595d 3/3 529d e8a67fe34b76 x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()
BUG: unable to handle kernel paging request in copy_from_kernel_nofault origin:upstream 8 C done 2 571d 674d 3/3 540d e8a67fe34b76 x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()
KASAN: use-after-free Read in unix_stream_read_actor origin:lts-only 19 C done 1 677d 679d 3/3 646d 75bcfc188abf af_unix: fix use-after-free in unix_stream_read_actor()
INFO: task hung in xfs_buf_delwri_pushbuf origin:lts-only 1 C done 30 686d 920d 3/3 654d 8d0baec78e8a xfs: fix intermittent hang during quotacheck
general protection fault in inherit_task_group origin:upstream 2 C done 4 688d 693d 3/3 654d 21b07a2e6095 perf/core: Fix potential NULL deref
WARNING in isotp_tx_timer_handler -1 C done 3 688d 892d 3/3 657d e163ad6a8639 can: isotp: add local echo tx processing and tx without FC
UBSAN: shift-out-of-bounds in extAlloc origin:upstream -1 C done 217 733d 925d 3/3 701d 8f994b830dd0 jfs: validate max amount of blocks before allocation.
possible deadlock in exfat_iterate origin:upstream 4 C done 81 771d 904d 3/3 714d 1c33ca1e1974 exfat: release s_lock before calling dir_emit()
KASAN: null-ptr-deref Write in get_block origin:upstream missing-backport 12 C done 2 780d 826d 3/3 718d afd9a31b5aa4 fs/sysv: Null check to prevent null-ptr-deref bug
possible deadlock in hugetlbfs_file_mmap origin:lts-only 4 C done 242 786d 925d 3/3 722d d0eb4917f4d3 sched/cpuset: Bring back cpuset_mutex
INFO: task hung in drop_current_rng origin:lts-only 1 C done 307 790d 923d 3/3 723d f5634d21541e hwrng: virtio - don't wait on cleanup
WARNING in corrupted -1 C done 3 801d 915d 3/3 727d 784a8027b8ac media: usb: siano: Fix warning due to null work_func_t function pointer
WARNING in usbnet_start_xmit/usb_submit_urb -1 C done 2 803d 859d 3/3 727d 27d0f755d649 net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
UBSAN: shift-out-of-bounds in dbFree origin:upstream -1 C done 1 812d 874d 3/3 731d de984faecddb jfs: jfs_dmap: Validate db_l2nbperpage while mounting
WARNING in nilfs_btree_assign -1 C done 26 823d 898d 3/3 771d b12011cea56b nilfs2: fix buffer corruption due to concurrent device reads
BUG: unable to handle kernel paging request in ext4_acquire_dquot origin:lts-only 8 C done 2 824d 859d 3/3 777d 32c2f51fffec quota: Properly disable quotas when add_dquot_ref() fails
BUG: unable to handle kernel NULL pointer dereference in hdr_find_e origin:lts-only 10 C done 8 828d 913d 3/3 780d 333feb7ba84f fs/ntfs3: Check fields while reading
WARNING in nilfs_segctor_do_construct -1 C done 2 834d 855d 3/3 792d 4357336192ed nilfs2: fix possible out-of-bounds segment allocation in resize ioctl
possible deadlock in ext4_xattr_set_handle 4 C done 42 835d 927d 3/3 795d bdbfbb7d5057 ext4: add EA_INODE checking to ext4_iget()
general protection fault in gfs2_evict_inode 8 C done 4 839d 890d 3/3 805d fd8b4e28f400 gfs2: Don't deref jdesc in evict
WARNING: bad unlock balance in l2cap_bredr_sig_cmd origin:lts-only 4 C done 5 850d 882d 3/3 816d 116b9c002c89 Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp
possible deadlock in sys_quotactl_fd origin:upstream 4 C done 167 850d 899d 3/3 816d 1de53f2223eb ext4: fix lockdep warning when enabling MMP
WARNING: bad unlock balance in l2cap_recv_frame origin:lts-only 4 C done 5 850d 873d 3/3 816d 116b9c002c89 Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp
WARNING in hfsplus_cat_write_inode origin:lts-only -1 C done 9 852d 913d 3/3 816d 37cab61a52d6 fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()
WARNING: ODEBUG bug in __do_softirq origin:lts-only -1 C done 1 857d 859d 3/3 827d cff0af3d1364 net/sched: sch_ingress: Only create under TC_H_INGRESS
kernel BUG in end_page_writeback origin:lts-only -1 C done 6 867d 916d 3/3 835d 9a7f63283af6 f2fs: fix to avoid use-after-free for cached IPU bio
BUG: unable to handle kernel paging request in sctp_outq_tail 8 C done 2 895d 926d 3/3 863d 667eb99cf7c1 sctp: check send stream number after wait_for_sndbuf
BUG: unable to handle kernel paging request in io_arm_poll_handler 8 C done 11 913d 923d 3/3 876d f4ba55411cc8 io_uring: avoid null-ptr-deref in io_arm_poll_handler
WARNING: refcount bug in qrtr_node_lookup 13 C done 1 918d 918d 3/3 887d b9ba5906c420 net: qrtr: Fix a refcount bug in qrtr_recvmsg()
KASAN: use-after-free Read in hfsplus_releasepage 19 C done 1 925d 925d 3/3 892d 05103d88482d fs: hfsplus: fix UAF issue in hfsplus_put_super
possible deadlock in l2tp_tunnel_register 4 C done 41 925d 927d 3/3 892d f6df58aa15f7 l2tp: Avoid possible recursive deadlock in l2tp_tunnel_register()