syzbot

 sign-in | mailing list | source | docs | 🏰
🐞 Open [1334]
≡ Subsystems
🐞 Fixed [7143]
🐞 Invalid [18889]
⬇ Missing Backports [220]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
✨ AI
💬 Send us feedback

Applied filters: Label=prio:high (drop)
Extra filters: [With Repro]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
KASAN: wild-memory-access Read in md5_update crypto prio:high 17 C done 8 274d 275d 2/29 never fixup: mm/gup: remove record_subpages()
WARNING: lock held when returning to user space in lock_vma_under_rcu mm prio:high 4 1 85d 81d 2/29 never userfaultfd: fix lock leak in mfill_get_vma()
WARNING in folio_add_new_anon_rmap mm prio:high -1 C error 14 86d 84d 2/29 never userfaultfd-introduce-struct-mfill_state-fix
KASAN: slab-out-of-bounds Read in usbtmc_interrupt usb prio:high 17 C 5 21d 296d 25/29 never 52f2ad3f7e5e usb: usbtmc: check URB actual_length for interrupt-IN notifications
WARNING: refcount bug in __inet_csk_reqsk_queue_drop net prio:high 13 9 11d 9d03h 21/29 never e10902df2448 tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req().
KASAN: slab-out-of-bounds Read in cache_seq_start_rcu prio:high nfs net 17 C 67 12d 47d 25/29 never ea25e3c7915b sunrpc: prevent out-of-bounds read in __cache_seq_start()
KMSAN: kernel-infoleak in irqentry_exit kernel prio:high 9 2761 now 8d09h 17/29 never rseq: Fix using an uninitialized stack variable in rseq_exit_user_update()
possible deadlock in rhashtable_free_and_destroy mm prio:high 4 8 26d 47d 2/29 never rhashtable: give each instance its own lockdep class
possible deadlock in __sk_receive_skb net prio:high 4 C error 80 17d 19d 27/29 never dbc81608e3a6 phonet/pep: disable BH around forwarded sk_receive_skb()
inconsistent lock state in __sk_receive_skb prio:high net 4 C error 147 5d00h 94d 27/29 never dbc81608e3a6 phonet/pep: disable BH around forwarded sk_receive_skb()
KASAN: use-after-free Read in jfs_lazycommit jfs prio:high 19 C error 4093 3h30m 1345d 0/29 never From 7e1a0b91e9efa8bec40fc5397ba6c4e683d72df0 Mon Sep 17 00:00:00 2001
INFO: task hung in __writeback_inodes_sb_nr (6) jfs prio:high 1 C done 4170 7d20h 1087d 1/29 never PM: hibernate: Fix block device handling in test_resume mode
UBSAN: shift-out-of-bounds in squashfs_xz_comp_opts squashfs prio:high -1 C error 4 72d 110d 2/29 never Squashfs: check xz dictionary size isn't zero
general protection fault in arp_create (4) net prio:high 2 2 23d 21d 27/29 never f80d3d98d2ff batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface
KMSAN: uninit-value in bch2_alloc_sectors_start_trans (2) fs prio:high 7 syz 875 252d 417d 2/29 never bcachefs: Add missing ei_last_dirtied update
WARNING in bch2_fs_journal_start fs prio:high -1 C done 14 352d 372d 2/29 never bcachefs: Don't allow mounting with crazy numbers of dirty journal entries
WARNING in closure_put_after_sub prio:high fs -1 2 302d 326d 2/29 never bcachefs: Ensure we don't return with closure on waitlist
KASAN: slab-use-after-free Write in bch2_get_next_dev fs prio:high 22 C 1331 230d 324d 2/29 never bcachefs: Fix UAF by journal write path
KASAN: slab-use-after-free Write in bch2_do_discards prio:high fs 22 syz 137 251d 321d 2/29 never bcachefs: Fix UAF by journal write path
KASAN: slab-out-of-bounds Read in __bch2_alloc_to_v4 fs prio:high 17 20 338d 336d 2/29 never bcachefs: Fix __bch2_alloc_to_v4 copy
kernel BUG in __journal_res_get (3) prio:high fs -1 C inconclusive 175 231d 354d 2/29 never bcachefs: Fix __bch2_fs_read_write() error path
kernel panic: in transaction restart: transaction_restart_relock, last restarted by prio:high fs 2 5 312d 312d 2/29 never bcachefs: Fix incorrect transaction handling
KMSAN: uninit-value in bch2_check_subvols fs prio:high 7 C 53 252d 341d 2/29 never bcachefs: Fix missing compat code in check_subvol()
KASAN: slab-out-of-bounds Write in bch2_dirent_init_name prio:high fs 21 C error 1496 231d 355d 2/29 never bcachefs: Fix padding zeroout when creating casefolded dirents
INFO: task hung in invalidate_inode_pages2_range (3) prio:high fs 1 C done 56 106d 465d 2/29 never bcachefs: Fix readahead involved deadlock
INFO: task hung in bch2_readahead fs prio:high 1 C done 375 267d 749d 2/29 never bcachefs: Fix readahead involved deadlock
INFO: task hung in bch2_page_fault prio:high ntfs3 exfat ext4 1 syz done 42 292d 541d 2/29 never bcachefs: Fix readahead involved deadlock
INFO: task hung in bchfs_fpunch (2) mm fs prio:high 1 C done 2 304d 348d 2/29 never bcachefs: Fix readahead involved deadlock
INFO: task hung in pipe_release (6) kernfs prio:high 1 syz done 20 1d08h 465d 2/29 never bcachefs: Fix readahead involved deadlock
KMSAN: uninit-value in __bch2_alloc_v4_to_text prio:high fs 7 C 3 350d 356d 2/29 never bcachefs: Fix refs to undefined fields in __bch2_alloc_v4_to_text()
kernel BUG in bch2_fill_extent (2) prio:high fs -1 10 246d 328d 2/29 never bcachefs: Fix unhandled key type in fiemap_fill_extent
UBSAN: array-index-out-of-bounds in bch2_accounting_validate prio:high fs 15 C done 23 240d 308d 2/29 never bcachefs: Ignore accounting key type larger than BCH_DISK_ACCOUNTING_TYPE_NR
INFO: task hung in __closure_sync fs prio:high 1 C done 8591 238d 765d 2/29 never bcachefs: Increase BCH_MIN_NR_NBUCKETS
INFO: task hung in bch2_copygc_stop kernel prio:high 1 C done 31386 238d 738d 2/29 never bcachefs: Increase BCH_MIN_NR_NBUCKETS
INFO: task hung in __bch2_fs_stop fs prio:high 1 C done 1589 247d 722d 2/29 never bcachefs: Increase BCH_MIN_NR_NBUCKETS
kernel BUG in bch2_btree_repair_topology_recurse prio:high fs -1 C done 7 251d 312d 2/29 never bcachefs: btree_check_root_boundaries()
kernel BUG in bch2_printbuf_exit fs prio:high -1 C error 29 322d 325d 2/29 never bcachefs: convert str_hash.c to CLASS
WARNING in bch2_verify_accounting_clean prio:high fs -1 29 235d 484d 2/29 never bcachefs: do_bch2_trans_commit_to_journal_replay handles accounting
KASAN: use-after-free Read in check_extent_overbig prio:high fs 19 C done done 18 267d 549d 2/29 never bcachefs: fix check_extent_overbig() call
WARNING in bch2_prt_printf fs prio:high -1 C done error 103 254d 758d 2/29 never bcachefs: journal_entry_btree_keys_to_text() is more careful
KASAN: slab-use-after-free Read in current_time fs prio:high 19 C 2 10d 6d16h 1/29 never bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs
WARNING: ODEBUG bug in smpboot_thread_fn prio:high kernel -1 5 34d 34d 27/29 never 4df78ff02629 bridge: mcast: Fix a possible use-after-free when removing a bridge port
KASAN: slab-use-after-free Read in close_fs_devices prio:high btrfs 19 22 343d 346d 2/29 never btrfs: fix a use-after-free race if btrfs_open_devices() failed
INFO: task hung in btrfs_invalidate_folio (4) btrfs prio:high 1 C error 7 13d 13d 0/29 never btrfs: fix deadlock cloning inline extent when using flushoncommit
kernel BUG in replace_file_extents btrfs prio:high -1 54 1d06h 50d 2/29 never btrfs: validate data reloc tree file extent item members
KASAN: slab-use-after-free Read in dma_buf_fd actionable prio:high dri media 19 21 21d 89d 23/29 never ead6680f354f dma-buf: fix UAF in dma_buf_fd() tracepoint
WARNING in dma_resv_add_fence prio:high dri media -1 C 7 26d 31d 1/29 never drm/virtio: use uninterruptible resv lock for plane updates drm/virtio: use uninterruptible resv lock for plane updates
KASAN: slab-use-after-free Read in z_erofs_decompress_kickoff prio:high erofs 19 2 13d 36d 21/29 never 1aee05e814d2 erofs: fix use-after-free on sbi->sync_decompress
INFO: trying to register non-static key in f2fs_exist_written_data prio:high f2fs -1 C error 152 21d 30d 2/29 never f2fs: initialize ino_entry_info before checkpoint load
general protection fault in ovl_iterate overlayfs prio:high 8 C 20 1d15h 166d 21/29 never 1711b6ed6953 ovl: keep err zero after successful ovl_cache_get()
KMSAN: uninit-value in _find_next_bit ocfs2 prio:high 7 C 30 54d 443d 2/29 never ocfs2: use kzalloc for quota recovery bitmap allocation
BUG: sleeping function called from invalid context in lockref_get_not_dead gfs2 prio:high 5 C error 13 35d 53d 2/29 never gfs2: fix quota init duplicate scan
KASAN: slab-use-after-free Write in gfs2_qd_dealloc (3) prio:high gfs2 22 C error 146 118d 375d 2/29 never gfs2: fix use-after-free in gfs2_qd_dealloc
KASAN: slab-use-after-free Read in ip6gre_tunnel_xmit net prio:high 19 C error error 33 157d 565d 0/29 never ip6_gre: use skb_vlan_inet_prepare() instead of pskb_inet_may_pull()
WARNING in ip_rt_bug (3) prio:high net -1 C error 54 8d21h 19d 27/29 never 7eb72c1e3984 ipv4: icmp: reject broadcast/multicast routes
KASAN: slab-use-after-free Read in ipv6_chk_acast_addr net prio:high 19 1 17d 10d 21/29 never f723ccaff2fb ipv6: anycast: insert aca into global hash under idev->lock
general protection fault in jbd2_journal_dirty_metadata (2) prio:high ext4 2 C error 26 7h19m 34d 0/29 never jbd2: check for aborted handle in jbd2_journal_dirty_metadata()
WARNING: suspicious RCU usage in kernfs_put prio:high kernfs 4 1 62d 58d 2/29 never kernfs: fix suspicious RCU usage in kernfs_put()
general protection fault in remove_waiter prio:high kernel 2 syz 6 29d 40d 17/29 never 40a25d59e85b locking/rtmutex: Skip remove_waiter() when waiter is not enqueued
KASAN: null-ptr-deref Read in io_sqe_buffer_register io-uring prio:high 11 C done 54 273d 276d 2/29 never fixup: mm/gup: remove record_subpages()
WARNING: ODEBUG bug in i2c_device_remove (2) i2c usb prio:high -1 C 3 34d 48d 2/29 never media: rtl2832: fix use-after-free in rtl2832_remove()
general protection fault in vidtv_psi_ts_psi_write_into media prio:high 8 65 11h59m 147d 2/29 never media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
KASAN: slab-use-after-free Read in do_sync_mmap_readahead prio:high mm 19 C done 3 351d 354d 2/29 never mm-filemap-allow-arch-to-request-folio-size-for-exec-memory-fix
WARNING in page_counter_uncharge (2) prio:high cgroups mm -1 C error 7 37d 72d 2/29 never mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch
kernel BUG in swap_cgroup_record (2) prio:high mm cgroups -1 C error 227 146d 150d 2/29 never mm/swap_cgroup: fix kernel BUG in swap_cgroup_record
WARNING in folio_lruvec_lock cgroups mm prio:high -1 1 357d 353d 2/29 never mm/vma: correctly invoke late KSM check after mmap hook
kernel BUG in __get_vm_area_node prio:high bridge -1 2 33d 29d 25/29 never 04aa71da5f35 mm/vmalloc: do not trigger BUG() on BH disabled context
KASAN: wild-memory-access Read in lookup_swap_cgroup_id (2) cgroups mm prio:high 17 4 58d 122d 2/29 never mm: swap_cgroup: fix NULL deref in lookup_swap_cgroup_id on swapless host
KMSAN: uninit-value in mptcp_established_options prio:high mptcp 7 syz 3191 2d22h 38d 21/29 never 5e939544f9d2 mptcp: fix uninit-value in mptcp_established_options
KMSAN: uninit-value in nci_dev_up (3) net nfc prio:high 7 1 24d 20d 0/29 never nfc: nci: fix use of uninitialized memory in CORE_INIT_RSP parsing
UBSAN: array-index-out-of-bounds in ocfs2_dx_dir_lookup_rec ocfs2 prio:high 15 1 21d 17d 0/29 never ocfs2: fix buffer head management in ocfs2_read_blocks()
possible deadlock in ocfs2_acquire_dquot prio:high ocfs2 4 C 71841 173d 616d 2/29 never ocfs2: fix circular locking dependency in ocfs2_acquire_dquot
WARNING in __ocfs2_decrease_refcount ocfs2 prio:high -1 11 7h43m 21d 0/29 never ocfs2: fix out-of-bounds write in ocfs2_remove_refcount_extent
WARNING in drm_prime_destroy_file_private (3) dri prio:high -1 C error 183 23d 26d 29/29 6d17h dc366607c41c drm: Replace old pointer to new idr
BUG: sleeping function called from invalid context in ip_vs_conn_new lvs prio:high 5 C 2034 32d 55d 29/29 7d00h d493d9de1c21 ipvs: fix the spin_lock usage for RT build
WARNING: bad unlock balance in do_wp_page mm prio:high 4 8 27d 43d 29/29 10d mm: memcontrol: fix rcu unbalance in get_non_dying_memcg_end()
KCSAN: data-race in bond_3ad_get_active_agg_info / bond_3ad_state_machine_handler (3) net prio:high 6 1 41d 40d 29/29 17d c4f050ce06c5 bonding: 3ad: implement proper RCU rules for port->aggregator
KASAN: slab-use-after-free Write in rsi_91x_deinit actionable wireless prio:high 22 1 54d 49d 29/29 17d db57a1aa54ff wifi: rsi: fix kthread lifetime race between self-exit and external-stop
WARNING in vma_mark_detached prio:high mm -1 C error 8 25d 48d 29/29 17d 619eab23e1ce mm/vma: do not try to unmap a VMA if mmap_prepare() invoked from mmap()
INFO: task hung in lbs_remove_card usb libertas prio:high 1 C 14933 19d 298d 29/29 17d 4a142520d166 wifi: libertas: notify firmware load wait on disconnect
general protection fault in task_work_cancel lsm prio:high 2 syz error 15 73d 93d 29/29 17d 929553bbb4cd landlock: Fully release unused TSYNC work entries
general protection fault in task_work_cancel_match prio:high kernel 2 10 79d 108d 29/29 17d 929553bbb4cd landlock: Fully release unused TSYNC work entries
BUG: stack guard page was hit in addrconf_rs_timer prio:high net -1 1 86d 86d 29/29 18d b7405dcf7385 bonding: prevent potential infinite loop in bond_header_parse()
KMSAN: uninit-value in fuse_dentry_revalidate (2) fuse prio:high 7 C 261 54d 113d 29/29 18d 5a6baf204610 fuse: fix uninit-value in fuse_dentry_revalidate()
WARNING in attr_data_get_block_locked prio:high ntfs3 -1 C 12 33d 104d 29/29 18d d7ea8495fd30 fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked()
WARNING in filename_mkdirat gfs2 prio:high -1 C 84 28d 111d 29/29 18d 2ff7cf7e0640 gfs2: Call unlock_new_inode before d_instantiate
KASAN: use-after-free Write in ocfs2_write_end_nolock actionable ocfs2 prio:high 22 26 28d 66d 29/29 18d 7bc5da4842be ocfs2: fix out-of-bounds write in ocfs2_write_end_inline
KASAN: stack-out-of-bounds Read in l2cap_send_cmd bluetooth prio:high 17 C 174 73d 86d 29/29 18d 9d87cb22195b Bluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_req
inconsistent lock state in igrab xfs prio:high 4 C error 521 34d 114d 29/29 18d f621324dfb3d iomap: fix lockdep complaint when reads fail
BUG: sleeping function called from invalid context in usb_tx_block usb libertas prio:high 5 C 780 49d 103d 29/29 18d 7c5c2b661bdb wifi: libertas: don't kill URBs in interrupt context
memory leak in run_add_entry (2) prio:high ntfs3 3 C 1 65d 79d 29/29 18d 87ac077d6ea8 ntfs3: fix memory leak in indx_create_allocate()
KMSAN: uninit-value in ntfs_iomap_begin ntfs3 prio:high 7 C 191 55d 105d 29/29 18d e98266e823a1 fs/ntfs3: prevent uninitialized lcn caused by zero len
KMSAN: uninit-value in bpf_prog_test_run_skb bpf prio:high 7 C 4 78d 159d 29/29 18d 12bec2bd4b76 bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb
general protection fault in f2fs_in_warm_node_list prio:high f2fs 2 C error 11247 47d 109d 29/29 18d 2d9c4a4ed4ee f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io()
KASAN: slab-use-after-free Read in rds_conn_path_drop rds prio:high 19 1 95d 94d 29/29 18d ebf71dd4aff4 net/rds: Restrict use of RDS/IB to the initial network namespace
INFO: task hung in btrfs_invalidate_folio (3) prio:high btrfs 1 C error 9 67d 81d 29/29 18d b48c980b6a7e btrfs: fix deadlock between reflink and transaction commit when using flushoncommit
general protection fault in rwsem_mark_wake mm prio:high 2 C error 9235 80d 82d 29/29 18d 68bcd8b6e0b1 locking/rwsem: Fix logic error in rwsem_del_waiter()
possible deadlock in ocfs2_extend_dir ocfs2 prio:high 4 1 99d 95d 29/29 18d b02da26a992d ocfs2: fix possible deadlock between unlink and dio_end_io_write