syzbot

 sign-in | mailing list | source | docs | 🏰
🐞 Open [1285]
≡ Subsystems
🐞 Fixed [7221]
🐞 Invalid [19098]
⬇ Missing Backports [222]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
✨ AI
💬 Send us feedback

Applied filters: WithRepro (drop) Label=prio:high (drop)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
WARNING in folio_add_new_anon_rmap prio:high mm -1 C error 14 120d 118d 2/29 never userfaultfd-introduce-struct-mfill_state-fix
general protection fault in jbd2_journal_dirty_metadata (2) prio:high ext4 2 C error 28 27d 68d 28/29 never 8fc197cf366b jbd2: check for aborted handle in jbd2_journal_dirty_metadata()
KASAN: use-after-free Read in jfs_lazycommit prio:high jfs 19 C error 4170 23h38m 1380d 0/29 never From 7e1a0b91e9efa8bec40fc5397ba6c4e683d72df0 Mon Sep 17 00:00:00 2001
KASAN: slab-use-after-free Read in hidraw_report_event prio:high input usb 19 C error 4 75d 76d 2/29 never HID: core: quiesce input in hid_hw_stop() to prevent use-after-free hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop
WARNING in hv_tlb_flush_enqueue kvm-x86 prio:high -1 C 2 20d 20d 2/29 never KVM: x86/hyperv: Ensure vCPU's Hyper-V object is initialized on cross-vCPU accesses
INFO: task hung in __writeback_inodes_sb_nr (6) prio:high jfs 1 C done 4176 4d04h 1121d 1/29 never PM: hibernate: Fix block device handling in test_resume mode
UBSAN: shift-out-of-bounds in squashfs_xz_comp_opts prio:high squashfs -1 C error 4 106d 144d 2/29 never Squashfs: check xz dictionary size isn't zero
KMSAN: uninit-value in bch2_alloc_sectors_start_trans (2) prio:high fs 7 syz 875 286d 451d 2/29 never bcachefs: Add missing ei_last_dirtied update
WARNING in bch2_fs_journal_start prio:high fs -1 C done 14 386d 406d 2/29 never bcachefs: Don't allow mounting with crazy numbers of dirty journal entries
KASAN: slab-use-after-free Write in bch2_get_next_dev prio:high fs 22 C 1331 265d 359d 2/29 never bcachefs: Fix UAF by journal write path
KASAN: slab-use-after-free Write in bch2_do_discards prio:high fs 22 syz 137 285d 355d 2/29 never bcachefs: Fix UAF by journal write path
kernel BUG in __journal_res_get (3) prio:high fs -1 C inconclusive 175 265d 389d 2/29 never bcachefs: Fix __bch2_fs_read_write() error path
KMSAN: uninit-value in bch2_check_subvols prio:high fs 7 C 53 286d 375d 2/29 never bcachefs: Fix missing compat code in check_subvol()
KASAN: slab-out-of-bounds Write in bch2_dirent_init_name prio:high fs 21 C error 1496 265d 390d 2/29 never bcachefs: Fix padding zeroout when creating casefolded dirents
INFO: task hung in invalidate_inode_pages2_range (3) prio:high fs 1 C done 57 33d 499d 2/29 never bcachefs: Fix readahead involved deadlock
INFO: task hung in bch2_readahead prio:high fs 1 C done 375 302d 783d 2/29 never bcachefs: Fix readahead involved deadlock
INFO: task hung in bch2_page_fault prio:high ext4 exfat ntfs3 1 syz done 42 326d 575d 2/29 never bcachefs: Fix readahead involved deadlock
INFO: task hung in bchfs_fpunch (2) prio:high fs mm 1 C done 2 338d 382d 2/29 never bcachefs: Fix readahead involved deadlock
INFO: task hung in pipe_release (6) prio:high kernfs 1 syz done 20 35d 499d 2/29 never bcachefs: Fix readahead involved deadlock
KMSAN: uninit-value in __bch2_alloc_v4_to_text prio:high fs 7 C 3 385d 390d 2/29 never bcachefs: Fix refs to undefined fields in __bch2_alloc_v4_to_text()
UBSAN: array-index-out-of-bounds in bch2_accounting_validate prio:high fs 15 C done 23 274d 342d 2/29 never bcachefs: Ignore accounting key type larger than BCH_DISK_ACCOUNTING_TYPE_NR
INFO: task hung in __closure_sync prio:high fs 1 C done 8591 272d 800d 2/29 never bcachefs: Increase BCH_MIN_NR_NBUCKETS
INFO: task hung in bch2_copygc_stop prio:high kernel 1 C done 31386 273d 772d 2/29 never bcachefs: Increase BCH_MIN_NR_NBUCKETS
INFO: task hung in __bch2_fs_stop prio:high fs 1 C done 1589 281d 757d 2/29 never bcachefs: Increase BCH_MIN_NR_NBUCKETS
kernel BUG in bch2_btree_repair_topology_recurse prio:high fs -1 C done 7 286d 346d 2/29 never bcachefs: btree_check_root_boundaries()
kernel BUG in bch2_printbuf_exit prio:high fs -1 C error 29 356d 359d 2/29 never bcachefs: convert str_hash.c to CLASS
KASAN: use-after-free Read in check_extent_overbig prio:high fs 19 C done done 18 301d 583d 2/29 never bcachefs: fix check_extent_overbig() call
WARNING in bch2_prt_printf prio:high fs -1 C done error 103 288d 792d 2/29 never bcachefs: journal_entry_btree_keys_to_text() is more careful
KASAN: slab-use-after-free Read in current_time prio:high kernfs 19 C 2 44d 41d 28/29 never b93c55b4932d bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs
INFO: task hung in btrfs_invalidate_folio (4) prio:high btrfs 1 C error 7 47d 47d 28/29 never 532085d00eb5 btrfs: fix deadlock cloning inline extent when using flushoncommit
WARNING in dma_resv_add_fence prio:high media dri -1 C 7 61d 65d 20/29 never 9af1b6e175c8 drm/virtio: use uninterruptible resv lock for plane updates drm/virtio: use uninterruptible resv lock for plane updates
KASAN: slab-use-after-free Read in reverse_path_check_proc prio:high fs 19 C 113 34d 50d 28/29 never a1e9718b406b eventpoll: restore EP_UNACTIVE_PTR sentinel for ctx->tfile_check_list
possible deadlock in lock_two_nondirectories (2) prio:high ext4 overlayfs 4 C error 17 15d 37d 28/29 never c143957520c6 ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT
INFO: trying to register non-static key in f2fs_exist_written_data prio:high f2fs -1 C error 152 55d 64d 2/29 never f2fs: initialize ino_entry_info before checkpoint load
KASAN: null-ptr-deref Read in io_sqe_buffer_register prio:high io-uring 11 C done 54 307d 311d 2/29 never fixup: mm/gup: remove record_subpages()
KASAN: wild-memory-access Read in md5_update prio:high crypto 17 C done 8 308d 309d 2/29 never fixup: mm/gup: remove record_subpages()
KMSAN: uninit-value in ni_seek_data_or_hole prio:high ntfs3 7 C 6 50d 47d 28/29 never 57ac2831c8e0 fs/ntfs3: prevent potential lcn remains uninitialized
possible deadlock in keyring_clear (3) prio:high keyrings lsm 4 C 81 15d 278d 28/29 never 696c030e1e34 fscrypt: Replace mk_users keyring with simple list
BUG: sleeping function called from invalid context in lockref_get_not_dead prio:high gfs2 5 C error 13 69d 88d 28/29 never b99a1f0f18ee gfs2: fix quota init duplicate scan
KASAN: slab-use-after-free Write in gfs2_qd_dealloc (3) prio:high gfs2 22 C error 146 152d 410d 28/29 never f9c9ec2c319f gfs2: fix use-after-free in gfs2_qd_dealloc
KASAN: slab-out-of-bounds Read in hfsplus_bnode_read prio:high hfs 21 C error error 521 348d 1324d 28/29 never 966cb76fb285 hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length
KMSAN: uninit-value in hfsplus_bnode_find prio:high hfs 7 C 24 25d 88d 20/29 never d67aadee19ff hfs/hfsplus: zero-initialize buffer in hfs_bnode_read 3f95e2661574 hfsplus: Add a sanity check for btree node size
general protection fault in __hfsplus_setxattr prio:high hfs 2 C error 153 36d 88d 28/29 never 7a41fd2b32e5 hfsplus: Remove the duplicate attr inode dirty marking action
KMSAN: kernel-infoleak in move_addr_to_user (7) prio:high hams wpan 9 C 46 70d 657d 28/29 never 4db86f8ab11b ieee802154: fix kernel-infoleak in dgram_recvmsg()
memory leak in path_openat (3) prio:high io-uring 3 C 1 29d 29d 28/29 never 2564ca2e31bd io_uring/nop: fix file reference leak with IOSQE_FIXED_FILE
KASAN: slab-use-after-free Read in ip6gre_tunnel_xmit prio:high net 19 C error error 33 191d 599d 0/29 never ip6_gre: use skb_vlan_inet_prepare() instead of pskb_inet_may_pull()
WARNING in ip_rt_bug (3) prio:high net -1 C error 54 43d 53d 28/29 never 7eb72c1e3984 ipv4: icmp: reject broadcast/multicast routes
KASAN: slab-out-of-bounds Read in usbtmc_interrupt prio:high usb 17 C 5 55d 330d 28/29 never 52f2ad3f7e5e usb: usbtmc: check URB actual_length for interrupt-IN notifications
WARNING in kernfs_new_node (3) prio:high kernfs -1 syz error error 54 27d 691d 2/29 never usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect()
general protection fault in remove_waiter prio:high kernel 2 syz 6 63d 74d 28/29 never 40a25d59e85b locking/rtmutex: Skip remove_waiter() when waiter is not enqueued
WARNING: ODEBUG bug in i2c_device_remove (2) prio:high i2c usb -1 C 3 68d 82d 28/29 never 680daf40a82d media: rtl2832: fix use-after-free in rtl2832_remove()
KASAN: slab-use-after-free Read in do_sync_mmap_readahead prio:high mm 19 C done 3 385d 389d 2/29 never mm-filemap-allow-arch-to-request-folio-size-for-exec-memory-fix
WARNING in page_counter_uncharge (2) prio:high cgroups mm -1 C error 10 26d 106d 28/29 never 15807d0ddde3 mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch
kernel BUG in swap_cgroup_record (2) prio:high cgroups mm -1 C error 227 180d 184d 2/29 never mm/swap_cgroup: fix kernel BUG in swap_cgroup_record
KMSAN: uninit-value in mptcp_established_options prio:high mptcp 7 syz 3191 37d 72d 28/29 never 5e939544f9d2 mptcp: fix uninit-value in mptcp_established_options
BUG: corrupted list in dev_deactivate_many (2) prio:high net 8 syz 8 32d 34d 28/29 never 8eed5519e496 net: watchdog: fix refcount tracking races net: watchdog: fix refcount tracking races
KASAN: slab-use-after-free Read in netfs_unbuffered_write prio:high netfs 19 C 8 12d 43d 23/29 never 64f04f978923 netfs: Fix DIO write retry for filesystems without a ->prepare_write()
kernel BUG in link_path_walk prio:high ocfs2 -1 C error 17656 now 220d 2/29 never ocfs2: do not use make_bad_inode() in ocfs2_read_inode_block_full()
possible deadlock in ocfs2_acquire_dquot prio:high ocfs2 4 C 71841 208d 650d 2/29 never ocfs2: fix circular locking dependency in ocfs2_acquire_dquot
possible deadlock in ocfs2_evict_inode prio:high ocfs2 4 C error 2694 26d 692d 28/29 never ff6f26c58421 ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write
KMSAN: uninit-value in _find_next_bit prio:high ocfs2 7 C 30 89d 477d 28/29 never 93c8c6ea90be ocfs2: use kzalloc for quota recovery bitmap allocation
general protection fault in ovl_iterate prio:high overlayfs 8 C 20 35d 201d 28/29 never 1711b6ed6953 ovl: keep err zero after successful ovl_cache_get()
inconsistent lock state in __sk_receive_skb prio:high net 4 C error 147 39d 128d 28/29 never dbc81608e3a6 phonet/pep: disable BH around forwarded sk_receive_skb()
possible deadlock in __sk_receive_skb prio:high net 4 C error 80 51d 53d 28/29 never dbc81608e3a6 phonet/pep: disable BH around forwarded sk_receive_skb()
KASAN: slab-out-of-bounds Read in cache_seq_start_rcu prio:high net nfs 17 C 67 46d 82d 28/29 never ea25e3c7915b sunrpc: prevent out-of-bounds read in __cache_seq_start()
WARNING in udf_free_blocks (3) udf prio:high -1 C error 5 18d 22d 2/29 never udf: avoid recursive s_alloc_mutex deadlock when freeing AED blocks
WARNING in drm_prime_destroy_file_private (3) dri prio:high -1 C error 183 57d 60d 29/29 41d dc366607c41c drm: Replace old pointer to new idr
BUG: sleeping function called from invalid context in ip_vs_conn_new lvs prio:high 5 C 2034 66d 89d 29/29 41d d493d9de1c21 ipvs: fix the spin_lock usage for RT build
WARNING in vma_mark_detached prio:high mm -1 C error 8 60d 82d 29/29 51d 619eab23e1ce mm/vma: do not try to unmap a VMA if mmap_prepare() invoked from mmap()
INFO: task hung in lbs_remove_card usb libertas prio:high 1 C 14933 53d 332d 29/29 51d 4a142520d166 wifi: libertas: notify firmware load wait on disconnect
general protection fault in task_work_cancel lsm prio:high 2 syz error 15 107d 127d 29/29 51d 929553bbb4cd landlock: Fully release unused TSYNC work entries
KMSAN: uninit-value in fuse_dentry_revalidate (2) fuse prio:high 7 C 261 88d 147d 29/29 52d 5a6baf204610 fuse: fix uninit-value in fuse_dentry_revalidate()
WARNING in attr_data_get_block_locked prio:high ntfs3 -1 C 12 67d 139d 29/29 52d d7ea8495fd30 fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked()
WARNING in filename_mkdirat gfs2 prio:high -1 C 84 62d 145d 29/29 52d 2ff7cf7e0640 gfs2: Call unlock_new_inode before d_instantiate
KASAN: stack-out-of-bounds Read in l2cap_send_cmd bluetooth prio:high 17 C 174 108d 120d 29/29 52d 9d87cb22195b Bluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_req
inconsistent lock state in igrab xfs prio:high 4 C error 521 68d 148d 29/29 52d f621324dfb3d iomap: fix lockdep complaint when reads fail
BUG: sleeping function called from invalid context in usb_tx_block usb libertas prio:high 5 C 780 83d 137d 29/29 52d 7c5c2b661bdb wifi: libertas: don't kill URBs in interrupt context
memory leak in run_add_entry (2) prio:high ntfs3 3 C 1 99d 113d 29/29 52d 87ac077d6ea8 ntfs3: fix memory leak in indx_create_allocate()
KMSAN: uninit-value in ntfs_iomap_begin ntfs3 prio:high 7 C 191 89d 140d 29/29 52d e98266e823a1 fs/ntfs3: prevent uninitialized lcn caused by zero len
KMSAN: uninit-value in bpf_prog_test_run_skb bpf prio:high 7 C 4 112d 193d 29/29 52d 12bec2bd4b76 bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb
general protection fault in f2fs_in_warm_node_list prio:high f2fs 2 C error 11247 81d 144d 29/29 52d 2d9c4a4ed4ee f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io()
INFO: task hung in btrfs_invalidate_folio (3) prio:high btrfs 1 C error 9 102d 115d 29/29 52d b48c980b6a7e btrfs: fix deadlock between reflink and transaction commit when using flushoncommit
general protection fault in rwsem_mark_wake mm prio:high 2 C error 9235 114d 117d 29/29 52d 68bcd8b6e0b1 locking/rwsem: Fix logic error in rwsem_del_waiter()