syzbot


net subsystem


List(s): netdev@vger.kernel.org
Fixed bugs: 1725
Parent subsystem(s): kernel (90)
Child subsystems: atm (1) batman (6) bridge (5) hams (17) intel-wired-lan (0) mptcp (0) netfilter (14) openvswitch (0) ppp (3) rds (0) sctp (2) smc (4) tipc (4) tls (0) wireguard (4) wireless (49) wpan (5) x25 (2)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
kernel BUG in pn_socket_sendmsg net -1 C 11 20h15m 19h14m PATCH [3h12m]
kernel BUG in pn_socket_autobind net -1 C 3 7h15m 1d02h
BUG: spinlock already unlocked in lec_atm_close net 4 1 1d22h 1d02h
KASAN: slab-out-of-bounds Read in cache_seq_start_rcu net nfs 17 C 5 1d05h 1d02h 💬 2 [23h50m]
BUG: sleeping function called from invalid context in vhost_get_avail_idx kvm net virt 5 C 1 4d05h 1d20h PATCH [12h25m]
KASAN: slab-use-after-free Read in rtl8150_start_xmit net usb 19 14 3h14m 1d20h PATCH [4h24m]
possible deadlock in br_forward_delay_timer_expired (5) net 4 3 5d01h 4d13h
WARNING in sock_map_destroy (3) net bpf -1 C done error 4 21d 19d PATCH [1d09h]
KASAN: slab-use-after-free Read in __sk_msg_recvmsg net bpf 19 C error 6 10h11m 20d PATCH [20d]
WARNING: refcount bug in dev_deactivate_many net 13 C 91 35m 21d
KCSAN: data-race in copy_mm / percpu_counter_add_batch net race:benign 6 1 22d 21d
general protection fault in lec_atm_close net 2 2 28d 28d
possible deadlock in tcp_close (3) net 4 48 4h23m 28d PATCH [26d]
possible deadlock in inet_shutdown (3) net 4 C error 81 2h22m 28d 💬 1 [27d]
KMSAN: uninit-value in rtl8150_open (2) net usb 7 1 32d 28d PATCH [1d07h]
possible deadlock in inet_stream_connect (4) net 4 52 9h54m 35d
possible deadlock in __ipv6_dev_mc_inc net 4 175 21h10m 37d PATCH [30d]
WARNING: refcount bug in mpoad_close net 13 5 7d14h 37d PATCH [7d15h]
KCSAN: data-race in pfifo_fast_dequeue / pfifo_fast_enqueue (6) net 6 4 21d 41d 💬 1 [41d]
KASAN: null-ptr-deref Write in send_to_lecd net 12 2 44d 44d
BUG: soft lockup in perf_event_open (2) net 1 8 39d 45d
WARNING: refcount bug in call_timer_fn (4) net trace 13 16 22d 59d
KASAN: slab-use-after-free Read in sk_msg_recvmsg bpf net 19 C error error 3 71d 65d 💬 11 [48d]
WARNING in inet_sock_destruct (6) net -1 C error 155 3h02m 67d 💬 21 [47d]
memory leak in ldisc_receive net usb 3 C 2 14d 95d PATCH [87d]
INFO: rcu detected stall in cleanup_net (8) kernfs net 1 C error 30 5d10h 99d
INFO: rcu detected stall in netlink_recvmsg (5) net 1 C error error 2 106d 102d
INFO: rcu detected stall in kernfs_fop_write_iter (3) net 1 syz error error 19 17d 105d
INFO: rcu detected stall in neigh_periodic_work (5) net 1 syz error error 1 114d 110d
WARNING in rcu_note_context_switch (5) net -1 4 1d22h 117d
INFO: task hung in rxrpc_destroy_all_calls (4) afs net 1 53 8h45m 119d
INFO: rcu detected stall in rtnl_getlink (2) net 1 C error error 2 128d 127d
KMSAN: uninit-value in lec_atm_send net 7 C 11 8d08h 145d PATCH [132d]
WARNING in virtio_transport_send_pkt_info (2) kvm net virt -1 C error 2 11d 145d PATCH [145d]
INFO: task hung in devlink_health_report (3) net 1 syz 3 66d 145d 💬 2 [145d]
INFO: rcu detected stall in rescuer_thread (2) net 1 syz error inconclusive 7 4d00h 166d
KASAN: slab-use-after-free Read in qfq_reset_qdisc (2) net 19 C 45 79d 167d PATCH [161d]
KMSAN: uninit-value in macsec_handle_frame (2) net 7 18 84d 169d PATCH [71d]
possible deadlock in __netdev_update_features (2) net 4 29 10d 170d
kernel BUG in filemap_fault (3) net mm -1 C error error 15 79d 175d
WARNING in get_data net -1 C error 1613 162d 179d
kernel BUG in set_ipsecrequest net -1 C done error 8 95d 187d PATCH [166d]
WARNING in dev_shutdown (7) usb net -1 syz error error 24 21d 215d
BUG: corrupted list in flow_block_cb_setup_simple net 19 C error 33 3d17h 222d PATCH [63d]
WARNING in nfc_rfkill_set_block net nfc -1 C error error 31 107d 250d 💬 6 [100d]
INFO: task hung in dev_map_free (3) bpf net 1 106 42d 283d
BUG: sleeping function called from invalid context in dev_set_promiscuity (2) net 5 64 1d01h 288d 💬 2 [287d]
INFO: rcu detected stall in linkwatch_event (5) net mm 1 syz error error 3 112d 300d
KASAN: slab-out-of-bounds Write in mini_qdisc_pair_swap net 21 21 51d 323d
INFO: rcu detected stall in inet_rtm_newaddr (2) net 1 C error inconclusive 7 86d 351d 💬 9 [180d]
INFO: task hung in inet6_rtm_newaddr (2) net 1 C error inconclusive 10 113d 351d
WARNING in nsim_fib_event_nb net -1 C done error 904 47d 356d PATCH [204d]
BUG: soft lockup in hsr_announce (3) net 1 37 25d 364d
INFO: rcu detected stall in rtnl_newlink (5) net 1 C error 175 7d13h 373d
INFO: task hung in usbnet_disconnect (3) net usb 1 84 55d 374d
INFO: task hung in mISDN_ioctl net nilfs 1 C done error 2 98d 399d 💬 3 [131d]
INFO: rcu detected stall in call_timer_fn (5) net input usb 1 C 9 286d 419d
INFO: task hung in inet_rtm_newaddr net 1 C done 127 2d12h 482d
BUG: Bad page state in skb_pp_cow_data net -1 C done 144 2d19h 499d PATCH [167d]
INFO: rcu detected stall in sys_sendmmsg (7) mm net 1 114 5d08h 508d
KASAN: slab-use-after-free Read in cfusbl_device_notify net 19 176 27d 532d
INFO: task hung in genl_rcv_msg (4) net 1 C done 569 1h12m 566d
INFO: task hung in new_device_store (5) net 1 C inconclusive error 143 3d19h 573d 💬 18 [109d]
INFO: task hung in tun_chr_close (5) net 1 C done 663 10d 583d
INFO: task hung in switchdev_deferred_process_work (3) net 1 C inconclusive 621 7d13h 621d
INFO: task hung in addrconf_dad_work (5) net 1 C done 1676 4h32m 632d 💬 2 [9h22m]
INFO: task hung in linkwatch_event (4) net 1 C done 3513 1d10h 634d 💬 2 [9h22m]
WARNING in dev_deactivate_many net -1 C 241 2d10h 667d
KMSAN: uninit-value in nci_ntf_packet (3) net nfc 7 C 194 72d 675d PATCH [553d]
UBSAN: array-index-out-of-bounds in llc_conn_state_process (2) net 15 30 20d 688d 💬 1 [347d]
INFO: task hung in nsim_destroy (4) net 1 syz error error 436 62d 691d
INFO: task hung in __vhost_worker_flush net virt 1 C error 337 6d20h 692d 💬 12 [92d]
KMSAN: uninit-value in dev_map_hash_lookup_elem bpf net 7 C 20 677d 703d
INFO: rcu detected stall in sock_write_iter (3) net 1 C done error 202 2d17h 715d 💬 1 [715d]
KMSAN: uninit-value in __schedule (5) net 22 C 595 48d 742d 💬 1 [70d]
possible deadlock in hsr_dev_xmit (2) net 4 C done 1315 3h09m 755d 💬 2 [9h22m]
possible deadlock in sock_map_delete_elem bpf net 4 C error done 869 680d 765d
WARNING: ODEBUG bug in advance_sched net -1 C done done 10 563d 853d 💬 1 [526d]
WARNING in call_rcu (3) net -1 C 3 753d 856d
WARNING in tcp_recvmsg_locked (2) net -1 C done 13 11d 869d PATCH [86d]
INFO: rcu detected stall in ip_list_rcv (6) net 1 C done done 58 11d 870d 💬 5 [394d]
INFO: task hung in synchronize_rcu (4) net fs 1 C done error 3175 16m 1084d 💬 8 [9h22m]
INFO: task hung in del_device_store net 1 C error 2008 14h05m 1144d 💬 2 [9h22m]
INFO: task hung in rfkill_sync_work net nfc 1 C done error 110 109d 1212d PATCH [1157d]
KMSAN: uninit-value in bpf_prog_run_generic_xdp net 7 C 2111 7d12h 1251d PATCH [383d]
INFO: task hung in nfc_rfkill_set_block net nfc 1 C done done 1387 107d 1254d
INFO: task can't die in vlan_ioctl_handler net 1 syz error error 178 10d 1423d
INFO: rcu detected stall in sys_exit_group (7) net 1 C unreliable inconclusive 90 653d 1649d
general protection fault in skb_release_data (2) net bluetooth 22 C done error 703 386d 2051d
INFO: rcu detected stall in addrconf_dad_work (5) net 1 C done inconclusive 19 102d 2053d
INFO: rcu detected stall in tc_modify_qdisc net 1 C done 632 14h34m 2093d 💬 13 [30d]
KMSAN: uninit-value in eth_type_trans (2) net 7 C 8561 7d10h 2282d 💬 7 [9h22m]
possible deadlock in __dev_queue_xmit (3) net 4 C done inconclusive 1154 25d 2332d 💬 5 [660d]
WARNING in rcu_check_gp_start_stall net -1 C done error 2914 1d21h 2616d 💬 9 [9h22m]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KCSAN: data-race in page_pool_put_unrefed_netmem / page_pool_release (3) net 6 1 32d 28d
KCSAN: data-race in ipvlan_open / is_upper_ndev_bond_master_filter (10) net 6 1 33d 29d
KCSAN: data-race in page_pool_put_unrefed_netmem / page_pool_refill_alloc_cache net 6 325 12d 106d
KCSAN: data-race in bq_flush_to_queue / cpu_map_kthread_run (2) bpf net 6 463 7d12h 109d
BUG: unable to handle kernel paging request in __run_timers (2) sound virt net 21 4 81d 177d
KCSAN: data-race in data_alloc / prb_reserve net 6 1250 1d07h 1853d