syzbot

 sign-in | mailing list | source | docs | 🏰
🐞 Open [1319]
≡ Subsystems
🐞 Fixed [7197]
🐞 Invalid [19025]
⬇ Missing Backports [221]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
✨ AI
💬 Send us feedback

Applied filters: WithRepro (drop) Label=prio:high (drop)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
memory leak in path_openat (3) prio:high io-uring 3 C 1 19d 18d 27/29 never 2564ca2e31bd io_uring/nop: fix file reference leak with IOSQE_FIXED_FILE
WARNING in folio_add_new_anon_rmap prio:high mm -1 C error 14 109d 108d 2/29 never userfaultfd-introduce-struct-mfill_state-fix
KASAN: slab-out-of-bounds Read in usbtmc_interrupt prio:high usb 17 C 5 44d 319d 28/29 never 52f2ad3f7e5e usb: usbtmc: check URB actual_length for interrupt-IN notifications
WARNING in kernfs_new_node (3) prio:high kernfs -1 syz error error 54 16d 681d 2/29 never usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect()
KASAN: use-after-free Read in jfs_lazycommit prio:high jfs 19 C error 4149 16h12m 1369d 0/29 never From 7e1a0b91e9efa8bec40fc5397ba6c4e683d72df0 Mon Sep 17 00:00:00 2001
INFO: task hung in __writeback_inodes_sb_nr (6) prio:high jfs 1 C done 4175 4d17h 1111d 1/29 never PM: hibernate: Fix block device handling in test_resume mode
UBSAN: shift-out-of-bounds in squashfs_xz_comp_opts prio:high squashfs -1 C error 4 96d 134d 2/29 never Squashfs: check xz dictionary size isn't zero
KMSAN: uninit-value in bch2_alloc_sectors_start_trans (2) prio:high fs 7 syz 875 275d 441d 2/29 never bcachefs: Add missing ei_last_dirtied update
WARNING in bch2_fs_journal_start prio:high fs -1 C done 14 376d 396d 2/29 never bcachefs: Don't allow mounting with crazy numbers of dirty journal entries
KASAN: slab-use-after-free Write in bch2_get_next_dev prio:high fs 22 C 1331 254d 348d 2/29 never bcachefs: Fix UAF by journal write path
KASAN: slab-use-after-free Write in bch2_do_discards prio:high fs 22 syz 137 275d 345d 2/29 never bcachefs: Fix UAF by journal write path
kernel BUG in __journal_res_get (3) prio:high fs -1 C inconclusive 175 254d 378d 2/29 never bcachefs: Fix __bch2_fs_read_write() error path
KMSAN: uninit-value in bch2_check_subvols prio:high fs 7 C 53 276d 365d 2/29 never bcachefs: Fix missing compat code in check_subvol()
KASAN: slab-out-of-bounds Write in bch2_dirent_init_name prio:high fs 21 C error 1496 254d 379d 2/29 never bcachefs: Fix padding zeroout when creating casefolded dirents
INFO: task hung in invalidate_inode_pages2_range (3) prio:high fs 1 C done 57 22d 488d 2/29 never bcachefs: Fix readahead involved deadlock
INFO: task hung in bch2_readahead prio:high fs 1 C done 375 291d 772d 2/29 never bcachefs: Fix readahead involved deadlock
INFO: task hung in bch2_page_fault prio:high ext4 exfat ntfs3 1 syz done 42 315d 565d 2/29 never bcachefs: Fix readahead involved deadlock
INFO: task hung in bchfs_fpunch (2) prio:high fs mm 1 C done 2 328d 372d 2/29 never bcachefs: Fix readahead involved deadlock
INFO: task hung in pipe_release (6) prio:high kernfs 1 syz done 20 24d 489d 2/29 never bcachefs: Fix readahead involved deadlock
KMSAN: uninit-value in __bch2_alloc_v4_to_text prio:high fs 7 C 3 374d 379d 2/29 never bcachefs: Fix refs to undefined fields in __bch2_alloc_v4_to_text()
UBSAN: array-index-out-of-bounds in bch2_accounting_validate prio:high fs 15 C done 23 264d 331d 2/29 never bcachefs: Ignore accounting key type larger than BCH_DISK_ACCOUNTING_TYPE_NR
INFO: task hung in __closure_sync prio:high fs 1 C done 8591 262d 789d 2/29 never bcachefs: Increase BCH_MIN_NR_NBUCKETS
INFO: task hung in bch2_copygc_stop prio:high kernel 1 C done 31386 262d 761d 2/29 never bcachefs: Increase BCH_MIN_NR_NBUCKETS
INFO: task hung in __bch2_fs_stop prio:high fs 1 C done 1589 271d 746d 2/29 never bcachefs: Increase BCH_MIN_NR_NBUCKETS
kernel BUG in bch2_btree_repair_topology_recurse prio:high fs -1 C done 7 275d 335d 2/29 never bcachefs: btree_check_root_boundaries()
kernel BUG in bch2_printbuf_exit prio:high fs -1 C error 29 345d 349d 2/29 never bcachefs: convert str_hash.c to CLASS
KASAN: use-after-free Read in check_extent_overbig prio:high fs 19 C done done 18 291d 573d 2/29 never bcachefs: fix check_extent_overbig() call
WARNING in bch2_prt_printf prio:high fs -1 C done error 103 277d 782d 2/29 never bcachefs: journal_entry_btree_keys_to_text() is more careful
KASAN: slab-use-after-free Read in current_time prio:high kernfs 19 C 2 34d 30d 28/29 never b93c55b4932d bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs
INFO: task hung in btrfs_invalidate_folio (4) prio:high btrfs 1 C error 7 36d 36d 9/29 never 532085d00eb5 btrfs: fix deadlock cloning inline extent when using flushoncommit
WARNING in dma_resv_add_fence prio:high dri media -1 C 7 50d 55d 5/29 never drm/virtio: use uninterruptible resv lock for plane updates drm/virtio: use uninterruptible resv lock for plane updates
KASAN: slab-use-after-free Read in reverse_path_check_proc prio:high fs 19 C 113 23d 40d 28/29 never a1e9718b406b eventpoll: restore EP_UNACTIVE_PTR sentinel for ctx->tfile_check_list
possible deadlock in lock_two_nondirectories (2) overlayfs ext4 prio:high 4 C error 17 5d02h 27d 28/29 never c143957520c6 ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT
INFO: trying to register non-static key in f2fs_exist_written_data prio:high f2fs -1 C error 152 44d 54d 2/29 never f2fs: initialize ino_entry_info before checkpoint load
KASAN: null-ptr-deref Read in io_sqe_buffer_register prio:high io-uring 11 C done 54 296d 300d 2/29 never fixup: mm/gup: remove record_subpages()
KASAN: wild-memory-access Read in md5_update prio:high crypto 17 C done 8 298d 298d 2/29 never fixup: mm/gup: remove record_subpages()
KMSAN: uninit-value in ni_seek_data_or_hole prio:high ntfs3 7 C 6 39d 36d 28/29 never 57ac2831c8e0 fs/ntfs3: prevent potential lcn remains uninitialized
possible deadlock in keyring_clear (3) prio:high keyrings lsm 4 C 81 4d09h 267d 22/29 never 696c030e1e34 fscrypt: Replace mk_users keyring with simple list
BUG: sleeping function called from invalid context in lockref_get_not_dead prio:high gfs2 5 C error 13 59d 77d 22/29 never b99a1f0f18ee gfs2: fix quota init duplicate scan
KASAN: slab-use-after-free Write in gfs2_qd_dealloc (3) prio:high gfs2 22 C error 146 142d 399d 22/29 never f9c9ec2c319f gfs2: fix use-after-free in gfs2_qd_dealloc
KASAN: slab-out-of-bounds Read in hfsplus_bnode_read prio:high hfs 21 C error error 521 338d 1313d 28/29 never 966cb76fb285 hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length
KMSAN: uninit-value in hfsplus_bnode_find prio:high hfs 7 C 24 14d 78d 5/29 never hfs/hfsplus: zero-initialize buffer in hfs_bnode_read hfsplus: Add a sanity check for btree node size
general protection fault in __hfsplus_setxattr prio:high hfs 2 C error 153 25d 78d 28/29 never 7a41fd2b32e5 hfsplus: Remove the duplicate attr inode dirty marking action
KMSAN: kernel-infoleak in move_addr_to_user (7) prio:high hams wpan 9 C 46 60d 647d 26/29 never 4db86f8ab11b ieee802154: fix kernel-infoleak in dgram_recvmsg()
WARNING in ip_rt_bug (3) prio:high net -1 C error 54 32d 43d 28/29 never 7eb72c1e3984 ipv4: icmp: reject broadcast/multicast routes
general protection fault in jbd2_journal_dirty_metadata (2) prio:high ext4 2 C error 28 16d 58d 28/29 never 8fc197cf366b jbd2: check for aborted handle in jbd2_journal_dirty_metadata()
general protection fault in remove_waiter prio:high kernel 2 syz 6 52d 64d 28/29 never 40a25d59e85b locking/rtmutex: Skip remove_waiter() when waiter is not enqueued
WARNING: ODEBUG bug in i2c_device_remove (2) prio:high i2c usb -1 C 3 58d 72d 28/29 never 680daf40a82d media: rtl2832: fix use-after-free in rtl2832_remove()
KASAN: slab-use-after-free Read in do_sync_mmap_readahead prio:high mm 19 C done 3 375d 378d 2/29 never mm-filemap-allow-arch-to-request-folio-size-for-exec-memory-fix
WARNING in page_counter_uncharge (2) prio:high cgroups mm -1 C error 10 15d 95d 28/29 never 15807d0ddde3 mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch
kernel BUG in swap_cgroup_record (2) prio:high cgroups mm -1 C error 227 169d 173d 2/29 never mm/swap_cgroup: fix kernel BUG in swap_cgroup_record
KASAN: slab-use-after-free Read in ip6gre_tunnel_xmit prio:high net 19 C error error 33 181d 589d 0/29 never ip6_gre: use skb_vlan_inet_prepare() instead of pskb_inet_may_pull()
KMSAN: uninit-value in mptcp_established_options prio:high mptcp 7 syz 3191 26d 61d 28/29 never 5e939544f9d2 mptcp: fix uninit-value in mptcp_established_options
BUG: corrupted list in dev_deactivate_many (2) prio:high net 8 syz 8 22d 23d 28/29 never 8eed5519e496 net: watchdog: fix refcount tracking races net: watchdog: fix refcount tracking races
possible deadlock in ocfs2_acquire_dquot prio:high ocfs2 4 C 71841 197d 639d 2/29 never ocfs2: fix circular locking dependency in ocfs2_acquire_dquot
possible deadlock in ocfs2_evict_inode prio:high ocfs2 4 C error 2694 16d 682d 28/29 never ff6f26c58421 ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write
KMSAN: uninit-value in _find_next_bit prio:high ocfs2 7 C 30 78d 467d 28/29 never 93c8c6ea90be ocfs2: use kzalloc for quota recovery bitmap allocation
general protection fault in ovl_iterate prio:high overlayfs 8 C 20 25d 190d 28/29 never 1711b6ed6953 ovl: keep err zero after successful ovl_cache_get()
inconsistent lock state in __sk_receive_skb prio:high net 4 C error 147 28d 117d 28/29 never dbc81608e3a6 phonet/pep: disable BH around forwarded sk_receive_skb()
possible deadlock in __sk_receive_skb prio:high net 4 C error 80 40d 43d 28/29 never dbc81608e3a6 phonet/pep: disable BH around forwarded sk_receive_skb()
KASAN: slab-out-of-bounds Read in cache_seq_start_rcu prio:high net nfs 17 C 67 35d 71d 28/29 never ea25e3c7915b sunrpc: prevent out-of-bounds read in __cache_seq_start()
WARNING in drm_prime_destroy_file_private (3) dri prio:high -1 C error 183 46d 50d 29/29 30d dc366607c41c drm: Replace old pointer to new idr
BUG: sleeping function called from invalid context in ip_vs_conn_new lvs prio:high 5 C 2034 56d 79d 29/29 30d d493d9de1c21 ipvs: fix the spin_lock usage for RT build
WARNING in vma_mark_detached prio:high mm -1 C error 8 49d 72d 29/29 40d 619eab23e1ce mm/vma: do not try to unmap a VMA if mmap_prepare() invoked from mmap()
INFO: task hung in lbs_remove_card usb libertas prio:high 1 C 14933 43d 321d 29/29 40d 4a142520d166 wifi: libertas: notify firmware load wait on disconnect
general protection fault in task_work_cancel lsm prio:high 2 syz error 15 97d 116d 29/29 41d 929553bbb4cd landlock: Fully release unused TSYNC work entries
KMSAN: uninit-value in fuse_dentry_revalidate (2) fuse prio:high 7 C 261 77d 136d 29/29 41d 5a6baf204610 fuse: fix uninit-value in fuse_dentry_revalidate()
WARNING in attr_data_get_block_locked prio:high ntfs3 -1 C 12 56d 128d 29/29 41d d7ea8495fd30 fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked()
WARNING in filename_mkdirat gfs2 prio:high -1 C 84 51d 135d 29/29 41d 2ff7cf7e0640 gfs2: Call unlock_new_inode before d_instantiate
KASAN: stack-out-of-bounds Read in l2cap_send_cmd bluetooth prio:high 17 C 174 97d 109d 29/29 41d 9d87cb22195b Bluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_req
inconsistent lock state in igrab xfs prio:high 4 C error 521 57d 137d 29/29 41d f621324dfb3d iomap: fix lockdep complaint when reads fail
BUG: sleeping function called from invalid context in usb_tx_block usb libertas prio:high 5 C 780 72d 127d 29/29 41d 7c5c2b661bdb wifi: libertas: don't kill URBs in interrupt context
memory leak in run_add_entry (2) prio:high ntfs3 3 C 1 89d 103d 29/29 41d 87ac077d6ea8 ntfs3: fix memory leak in indx_create_allocate()
KMSAN: uninit-value in ntfs_iomap_begin ntfs3 prio:high 7 C 191 78d 129d 29/29 41d e98266e823a1 fs/ntfs3: prevent uninitialized lcn caused by zero len
KMSAN: uninit-value in bpf_prog_test_run_skb bpf prio:high 7 C 4 102d 182d 29/29 41d 12bec2bd4b76 bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb
general protection fault in f2fs_in_warm_node_list prio:high f2fs 2 C error 11247 70d 133d 29/29 41d 2d9c4a4ed4ee f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io()
INFO: task hung in btrfs_invalidate_folio (3) prio:high btrfs 1 C error 9 91d 104d 29/29 41d b48c980b6a7e btrfs: fix deadlock between reflink and transaction commit when using flushoncommit
general protection fault in rwsem_mark_wake mm prio:high 2 C error 9235 103d 106d 29/29 41d 68bcd8b6e0b1 locking/rwsem: Fix logic error in rwsem_del_waiter()