syzbot


Out of 295 bugs, 250 were automatically obsoleted (43 due to revoked reproducers), 45 were invalidated by users.
Extra filters: [With Repro]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported
KASAN: use-after-free Write in prepare_to_wait_event 22 2 94d 94d
SYZFAIL: mmap of data segment failed -1 84 95d 705d
general protection fault in tipc_conn_close (5) 19 5 97d 252d
KASAN: use-after-free Read in path_put 19 8 105d 110d
kernel BUG in ext4_ext_map_blocks -1 1 107d 107d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (10) -1 16 84d 124d
BUG: unable to handle kernel paging request in sk_filter_trim_cap 8 2 134d 150d
KASAN: use-after-free Read in hci_uart_write_work (2) 19 1 136d 136d
BUG: soft lockup in addrconf_rs_timer (3) 1 1 138d 138d
BUG: soft lockup in sys_clone (3) 1 1 140d 140d
BUG: soft lockup in sys_exit_group (2) 1 1 143d 143d
KASAN: use-after-free Read in ipt_do_table 19 4 154d 203d
SYZFAIL: SIGILL -1 9 157d 493d
KASAN: use-after-free Read in seq_printf (2) 19 1 158d 158d
SYZFAIL: event already set -1 syz error error 35 161d 1649d
BUG: soft lockup in sys_bpf (2) 1 1 161d 161d
KASAN: wild-memory-access Read in page_add_file_rmap 17 1 162d 162d
KASAN: use-after-free Write in l2tp_session_delete (3) 22 5 164d 280d
KASAN: wild-memory-access Read in page_remove_rmap 17 syz error 3 165d 201d
BUG: soft lockup in sys_clone3 1 1 165d 165d
KASAN: use-after-free Read in fast_dput (3) 19 27 156d 299d
BUG: soft lockup in bpf_prog_release 1 1 202d 202d
syzkaller: make host failed: failed to run ["make" "host" "ci" "agent"]: exit status 2 -1 2 135d 135d
BUG: soft lockup in sys_recvmsg (2) 1 C error 2 245d 425d
KASAN: use-after-free Read in hci_uart_write_work 19 2 235d 248d
KASAN: use-after-free Read in f2fs_release_page 19 2 237d 246d
BUG: soft lockup in rcu_core_si 1 1 240d 240d
KASAN: null-ptr-deref Write in incfs_kill_sb 12 1 249d 249d
SYZFAIL: failed to recv rpc -1 syz 1264 172d 714d
general protection fault in ip6_create_rt_rcu (2) 2 1 262d 262d
general protection fault in inherit_task_group 2 C 48 275d 856d
KASAN: use-after-free Read in seq_printf 19 15 271d 378d
KASAN: use-after-free Read in steam_send_report 19 3 272d 283d
BUG: soft lockup in sys_openat 1 1 273d 273d
KASAN: use-after-free Write in __ip6_del_rt 22 syz 11 275d 425d
KASAN: use-after-free Read in fib_flush 19 7 278d 379d
BUG: soft lockup in sys_clone (2) 1 1 288d 288d
BUG: soft lockup in sys_bind 1 1 293d 293d
SYZFAIL: mount(tmpfs) failed -1 1 295d 295d
general protection fault in nexthop_get_nhc_lookup 2 syz 20 265d 347d
general protection fault in find_match 2 50 263d 443d
KASAN: use-after-free Read in f2fs_inode_dirtied 19 C done 3 315d 366d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (9) -1 2 216d 216d
SYZFAIL: SIGSEGV (2) -1 3 308d 402d
kernel BUG in ext4_create_inline_data -1 C done 2 324d 384d
KASAN: slab-out-of-bounds Read in mon_bin_event 17 C done 60 300d 355d
BUG: scheduling while atomic in futex_wait_queue_me 5 1 325d 325d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (8) -1 2 248d 248d
KASAN: slab-out-of-bounds Write in try_module_get 21 11 343d 414d
BUG: soft lockup in sock_read_iter 1 2 345d 357d
KASAN: use-after-free Write in u32_destroy_key 22 1 349d 349d
general protection fault in lo_ioctl 2 1 361d 361d
KASAN: use-after-free Read in ext4_xattr_inode_dec_ref_all 19 C done 3 423d 451d
KASAN: use-after-free Read in tw_timer_handler 19 syz 10 342d 376d
SYZFAIL: SIGFPE (2) -1 8 375d 551d
KASAN: use-after-free Read in exact_lock (2) 19 172 342d 421d
KASAN: use-after-free Read in tcp_net_metrics_exit_batch 19 613 343d 381d
KASAN: use-after-free Read in inet_twsk_purge 19 74 345d 380d
general protection fault in tipc_conn_close (4) 2 2 388d 455d
general protection fault in __rt6_nh_dev_match 2 2 393d 405d
KASAN: slab-out-of-bounds Read in dentry_revalidate 17 2 398d 476d
BUG: using smp_processor_id() in preemptible code in usbnet_skb_return (2) 4 C error 2 413d 604d
general protection fault in ip6_create_rt_rcu 2 1 405d 405d
SYZFAIL: netlink_send_ext: short netlink write (2) -1 2 406d 472d
KASAN: use-after-free Write in l2tp_session_delete (2) 22 3 407d 508d
BUG: soft lockup in cleanup_net 1 1 409d 409d
BUG: soft lockup in input_repeat_key 1 C error 3 463d 971d
general protection fault in __loop_clr_fd 2 1 411d 411d
KASAN: use-after-free Read in fast_dput (2) 19 1 412d 412d
KASAN: use-after-free Write in ext4_insert_dentry 22 C done 25 426d 645d
kernel BUG in ext4_ind_map_blocks -1 2 418d 436d
BUG: soft lockup in addrconf_rs_timer (2) 1 C 265 398d 729d
kernel BUG in blk_mq_dispatch_rq_list (4) fat -1 C error 16 1084d 1337d
BUG: unable to handle kernel paging request in __gnet_stats_copy_basic 8 1 421d 421d
general protection fault in current_umask 2 C unreliable 5 432d 643d
KASAN: use-after-free Write in skb_release_data 22 1 424d 424d
KASAN: use-after-free Write in tipc_mon_reinit_self 22 1 448d 448d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (7) -1 2 369d 369d
SYZFAIL: open(/proc/self/ns/net) failed -1 1 460d 460d
BUG: soft lockup in sock_write_iter 1 1 466d 466d
KASAN: use-after-free Read in br_multicast_port_group_expired (2) 19 1 484d 484d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (6) -1 8 487d 559d
KASAN: stack-out-of-bounds Read in __xfrm_dst_hash 17 1 495d 495d
KASAN: use-after-free Read in exact_lock 19 53 474d 483d
kernel BUG in vlan_get_protocol_dgram -1 C done 6 526d 641d
KASAN: use-after-free Read in fast_dput 19 14 518d 707d
SYZFAIL: iptable checkpoint: socket(SOCK_STREAM, IPPROTO_TCP) failed -1 4 518d 606d
SYZFAIL: ebtable: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) -1 81 502d 690d
KASAN: use-after-free Read in lock_get_status 19 4 555d 571d
BUG: corrupted list in tipc_nametbl_translate 8 2 557d 580d
general protection fault in cleanup_bearer 19 C 14034 538d 541d
KASAN: out-of-bounds Read in __show_regs 17 1 560d 560d
BUG: soft lockup in br_multicast_group_expired (2) 1 1 563d 563d
BUG: Bad page map (3) -1 3 564d 710d
KASAN: use-after-free Write in virtio_transport_recv_pkt 22 C inconclusive 1 617d 809d
KASAN: use-after-free Read in bdev_try_to_free_page 19 1 570d 570d
KASAN: use-after-free Read in binder_release_work 19 C 154 552d 586d
BUG: soft lockup in mntput 1 1 588d 588d
SYZFAIL: handshake read failed -1 1 608d 608d
KASAN: use-after-free Write in l2tp_session_delete 22 2 608d 632d
kernel BUG in vlan_get_tci -1 2 613d 641d
SYZFAIL: netlink_send_ext: short netlink write -1 4 618d 707d
SYZFAIL: posix_spawn failed -1 9928 581d 718d
SYZFAIL: mmap of output file failed -1 20 606d 707d
SYZFAIL: child failed -1 syz error error 1 630d 1639d
KASAN: use-after-free Read in ext4_convert_inline_data_nolock 19 syz error 1 649d 782d
KASAN: use-after-free Read in __ext4_check_dir_entry 19 C error 2 654d 772d
BUG: corrupted list in p9_fd_cancelled (4) 8 4 635d 745d
BUG: unable to handle kernel paging request in __raw_callee_save___kvm_vcpu_is_preempted 8 1 644d 644d
SYZFAIL: mkdir(syz-tmp) failed -1 299 605d 717d
SYZFAIL: bad allocate request -1 148 606d 716d
KASAN: use-after-free Read in wg_queue_enqueue_per_peer_tx 19 2 646d 650d
SYZFAIL: ShmemBuilder: too large output offset -1 51 606d 714d
general protection fault in steam_send_report 2 1 647d 647d
SYZFAIL: can't reallocate -1 1 651d 651d
SYZFAIL: SIGSEGV -1 841 612d 726d
KASAN: use-after-free Write in __tlb_remove_page_size 22 1 654d 654d
SYZFAIL: SIGFPE -1 2 656d 700d
general protection fault in free_swap_cache 2 1 665d 665d
KASAN: stack-out-of-bounds Read in __show_regs 17 1 666d 666d
BUG: soft lockup in br_multicast_port_group_expired 1 1 667d 667d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (5) -1 30 637d 755d
KASAN: use-after-free Read in br_multicast_port_group_expired 19 1 670d 670d
BUG: soft lockup in net_rx_action 1 2 670d 682d
BUG: soft lockup in __run_timers 1 2 671d 739d
BUG: soft lockup in sys_sendmmsg 1 2 672d 672d
KASAN: use-after-free Read in usb_udc_uevent (3) 19 1 673d 673d
BUG: soft lockup in __netif_receive_skb_core 1 1 674d 674d
KASAN: use-after-free Read in unaccount_page_cache_page (2) 19 1 677d 677d
KASAN: use-after-free Read in worker_thread 19 1 679d 679d
BUG: soft lockup in wg_expired_send_persistent_keepalive 1 1 683d 683d
BUG: soft lockup in br_multicast_group_expired 1 1 684d 684d
BUG: soft lockup in ip_list_rcv 1 1 684d 684d
BUG: soft lockup in run_rebalance_domains 1 1 685d 685d
BUG: soft lockup in ipv6_rcv 1 3 689d 706d
KASAN: null-ptr-deref Write in __kernfs_remove 12 1 692d 692d
BUG: soft lockup in vfork 1 1 694d 694d
BUG: soft lockup in sys_exit_group 1 1 700d 700d
SYZFAIL: bad thread state in completion -1 syz error error 5 1289d 1631d
KASAN: use-after-free Read in dev_get_by_index_rcu 19 1 710d 710d
BUG: soft lockup in sys_clone 1 1 713d 713d
BUG: soft lockup in sys_recvmsg 1 4 714d 793d
SYZFAIL: control pipe read failed -1 1 717d 717d
SYZFAIL: too many calls in output -1 2 722d 722d
BUG: soft lockup in sys_bpf 1 2 727d 732d
BUG: unable to handle kernel paging request in swake_up_locked 8 C inconclusive 1 746d 777d
KASAN: use-after-free Read in macsec_get_iflink 19 syz error 2 751d 877d
KASAN: use-after-free Read in wg_packet_send_staged_packets 19 1 776d 776d
go runtime error 2 22 778d 1057d
SYZFAIL: tun read failed -1 syz error error 123 704d 1702d
SYZFAIL: proc resp pipe read failed -1 73 711d 727d
general protection fault in fq_codel_enqueue (2) 2 2 791d 793d
panic: runtime error: floating point error [recovered] 2 1 798d 798d
android13-5.10-lts build error -1 44 762d 781d
KASAN: use-after-free Read in f2fs_write_end_io 19 1 806d 806d
syzkaller: failed to copy syzkaller: file bin/linux_arm64/syz-fuzzer does not exist -1 2 727d 727d
BUG: unable to handle kernel paging request in fuse_dev_do_write (3) 8 1 819d 819d
KASAN: use-after-free Read in unaccount_page_cache_page 19 150 791d 1320d
general protection fault in mnt_want_write (2) 2 1 857d 857d
BUG: corrupted list in p9_fd_cancelled (3) 8 C done unreliable 38 875d 960d
KASAN: stack-out-of-bounds Read in update_stack_state 17 1 871d 871d
panic: replaceArg: group fields don't match: NUM/NUM 2 13 835d 835d
general protection fault in skb_segment 2 C done 1 910d 924d
KASAN: use-after-free Read in key_task_permission 19 1 909d 909d
android13-5.10-lts test error: lost connection to test machine -1 1 914d 914d
BUG: unable to handle kernel paging request in fuse_dev_do_write (2) 8 1 940d 940d
KASAN: null-ptr-deref Write in backing_data_changed 12 C done 3 964d 1037d
general protection fault in __writeback_single_inode 2 1 982d 982d
BUG: Bad page map (2) -1 1 984d 984d
KASAN: use-after-free Read in locked_inode_to_wb_and_lock_list 19 2 988d 1018d
general protection fault in tipc_conn_close (3) 2 1 1011d 1011d
kernel BUG in __block_commit_write -1 1 1012d 1012d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (4) -1 20 1021d 1223d
corrupted report (2) -1 6 1022d 1100d
BUG: soft lockup in wg_packet_tx_worker 1 5 1032d 1081d
BUG: soft lockup in neigh_timer_handler 1 2 1033d 1041d
BUG: soft lockup in wg_packet_handshake_send_worker 1 6 1040d 1080d
BUG: soft lockup in sys_sendto 1 2 1040d 1077d
kernel panic: EXT4-fs (device loop2): panic forced after error 2 1 1044d 1044d
BUG: soft lockup in tc_modify_qdisc 1 C done done 314 1028d 1081d
BUG: soft lockup in addrconf_rs_timer 1 2 1057d 1075d
fatal error: fault -1 1 1064d 1064d
BUG: using smp_processor_id() in preemptible code in usbnet_skb_return 4 syz error error 2 1065d 1546d
fatal error: Connection to IP closed by remote host. -1 3 1080d 1204d
BUG: stack guard page was hit in corrupted (23) -1 syz error error 1 1105d 1105d
KASAN: use-after-free Read in usb_udc_uevent (2) 19 1 1102d 1102d
kernel BUG in ext4_expand_extra_isize_ea -1 C done done 5 1115d 1129d
BUG: unable to handle kernel paging request in fuse_dev_do_write 8 18 1075d 1141d
KASAN: global-out-of-bounds Read in f2fs_release_page 19 2 1113d 1145d
SYZFAIL: clock_gettime failed -1 syz error error 5 1121d 1646d
KASAN: use-after-free Read in f2fs_remove_dirty_inode 19 C error error 4 1135d 1191d
general protection fault in do_swap_page 2 246 1105d 1542d
kernel panic: EXT4-fs (device loop3): panic forced after error 2 1 1158d 1158d
general protection fault in kernfs_name_hash (6) 2 C error error 22 1188d 1354d
kernel panic: EXT4-fs (device loop4): panic forced after error 2 1 1162d 1162d
android12-5.10-lts build error (2) -1 220 1144d 1245d
VFS: Busy inodes after unmount (use-after-free) 2 C done inconclusive 1 1212d 1212d
general protection fault in filp_close 2 1 1185d 1185d
BUG: unable to handle kernel paging request in z_erofs_decompress_pcluster erofs 8 C error error 3 1230d 1328d
BUG: Bad page map -1 1 1202d 1202d
KASAN: use-after-free Read in hci_cmd_timeout 19 1 1209d 1209d
syzkaller: make host failed: failed to run ["make" "host" "ci"]: exit status 2 -1 2 1213d 1213d
kernel panic: corrupted stack end in sys_sendmmsg 2 syz error error 14 1227d 1253d
KASAN: use-after-free Read in fuse_copy_one 19 C error inconclusive 1 1315d 1315d
kernel BUG in jbd2_journal_get_create_access -1 syz error error 1 1322d 1322d
KASAN: stack-out-of-bounds Read in xfrm_state_find (2) 17 syz error error 1 1268d 1268d
BUG: scheduling while atomic in f2fs_register_inmem_page 5 C error inconclusive 1 1194d 1194d
KASAN: use-after-free Read in usb_udc_uevent 19 2 1227d 1251d
general protection fault in f2fs_release_page f2fs 19 3 1243d 1285d
general protection fault in tipc_conn_close (2) 2 6 1284d 1371d
KASAN: use-after-free Read in xpad_presence_work 19 1 1329d 1329d
kernel panic: EXT4-fs (device loop0): panic forced after error ext4 2 C 1 1275d 1275d
divide error in netem_enqueue (2) 2 1 1376d 1376d
KASAN: vmalloc-out-of-bounds Read in init_srcu_struct_fields (2) 17 1 1394d 1394d
panic: runtime error: floating point error 2 1 1399d 1399d
KASAN: use-after-free Read in __cgroup_bpf_attach (3) 19 1 1413d 1413d
KASAN: use-after-free Read in __tcf_qdisc_find 19 1 1414d 1414d
KASAN: invalid-free in selinux_tun_dev_free_security 24 14 1408d 1417d
general protection fault in fq_codel_enqueue 2 1 1425d 1425d
BUG: corrupted list in pwq_dec_nr_in_flight (2) 8 1 1428d 1428d
general protection fault in tcp_sk_exit (2) 2 1 1436d 1436d
KASAN: use-after-free Read in css_free_rwork_fn (2) 19 2 1440d 1525d
android12-5.10-lts-superproject build error -1 24 1448d 1474d
panic: bad group arg size NUM, should be <= NUM for &prog.GroupArg{ArgCommon:prog.ArgCommon{ref:0x2de, dir:0x0}, Inner:[ 2 23 1361d 1363d
general protection fault in ext4_xattr_set_entry 2 C error 2 1368d 1382d
kernel BUG in ext4_es_cache_extent -1 C error 1 1393d 1393d
BUG: unable to handle kernel paging request in reuseport_select_sock 8 1 1467d 1467d
BUG: stack guard page was hit in corrupted (22) -1 syz done done 1 1504d 1504d
kernel panic: corrupted stack end in sys_futex 2 syz error error 1 1531d 1531d
KASAN: use-after-free Read in f2fs_available_free_memory 19 syz error error 7 1591d 1690d
BUG: unable to handle kernel NULL pointer dereference in ipv6_rcv 10 syz 1 1534d 1534d
divide error in netem_enqueue 2 2 1484d 1494d
general protection fault in tipc_conn_close 2 1 1499d 1499d
BUG: stack guard page was hit in file_open (11) -1 4 1502d 1504d
BUG: stack guard page was hit in sys_mkdir (5) -1 1 1503d 1503d
BUG: stack guard page was hit in sys_creat (10) -1 1 1504d 1504d
kernel BUG in collapse_huge_page -1 1 1511d 1511d
general protection fault in __device_attach 2 1 1513d 1513d
kernel BUG in blk_mq_dispatch_rq_list -1 C error 16 1432d 1632d
KASAN: use-after-free Read in __cgroup_bpf_attach (2) 19 1 1521d 1521d
KASAN: use-after-free Read in vcs_write 19 1 1522d 1522d
SYZFAIL: failed to mkdtemp -1 15 1523d 1690d
BUG: corrupted list in pwq_dec_nr_in_flight 8 1 1523d 1523d
corrupted report -1 289 1502d 1651d
BUG: corrupted list in p9_fd_cancelled (2) 8 3 1532d 1568d
general protection fault in tcp_sk_exit 2 1 1535d 1535d
SYZFAIL: tun: ioctl(TUNSETIFF) failed -1 7 1535d 1694d
kernel panic: corrupted stack end in file_open 2 1 1538d 1538d
general protection fault in icmpv6_sk_exit 2 1 1544d 1544d
general protection fault in mnt_want_write 2 1 1550d 1550d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (3) -1 3 1462d 1462d
general protection fault in del_gendisk (3) 2 C done 1 1492d 1492d
KASAN: use-after-free Read in io_uring_cancel_task_requests 19 1 1577d 1577d
KASAN: slab-out-of-bounds Read in fuse_inode_eq 17 5 1578d 1585d
KASAN: use-after-free Write in dir_mkdir 22 1 1584d 1584d
KASAN: null-ptr-deref Write in incfs_fresh_pending_reads_exist 12 1 1591d 1591d
general protection fault in kernfs_name_hash 2 C done 2 1526d 1526d
kernel BUG in notify_change (2) -1 C error 2 1519d 1519d
general protection fault in del_gendisk (2) 2 C error 2 1516d 1517d
SYZFAIL: sandbox fork failed -1 3 1599d 1682d
KASAN: vmalloc-out-of-bounds Read in init_srcu_struct_fields 17 1 1638d 1638d
SYZFAIL: bad thread state in schedule -1 1 1618d 1618d
KASAN: stack-out-of-bounds Read in iov_iter_revert 17 C error 10 1547d 1700d
SYZFAIL: invalid syscall number -1 2 1637d 1659d
kernel BUG in ext4_free_blocks -1 3 1651d 1684d
general protection fault in io_prep_async_work 2 1 1621d 1621d
KASAN: use-after-free Read in io_kill_linked_timeout 19 C error 14 1569d 1617d
KASAN: use-after-free Read in __fdget_raw 19 C error error 1 1612d 1612d
KASAN: invalid-free in io_dismantle_req 24 C error 7 1580d 1574d
general protection fault in del_gendisk 2 C error 1 1579d 1686d
BUG: corrupted list in p9_fd_cancelled 8 1 1659d 1659d
KASAN: use-after-free Read in task_work_run 19 2 1693d 1692d
KASAN: use-after-free Write in chroot_fs_refs 22 2 1691d 1692d
BUG: stack guard page was hit in sys_fsetxattr -1 1 1603d 1603d
BUG: stack guard page was hit in sys_lsetxattr -1 C error inconclusive 2 1609d 1609d
BUG: stack guard page was hit in sys_setxattr -1 C error 6 1606d 1629d
BUG: stack guard page was hit in corrupted -1 C error 3 1594d 1629d
BUG: stack guard page was hit in sys_unlink -1 2 1629d 1629d
BUG: stack guard page was hit in sys_creat -1 C error done 7 1577d 1641d
BUG: stack guard page was hit in sys_lchown -1 C error 4 1597d 1646d
BUG: stack guard page was hit in sys_chdir -1 5 1575d 1647d
KASAN: use-after-free Read in css_free_rwork_fn 19 1 1666d 1666d
KASAN: use-after-free Read in rcu_cblist_dequeue 19 1 1698d 1692d
BUG: workqueue lockup -1 C error 25 1603d 1701d
KASAN: use-after-free Read in __cgroup_bpf_attach 19 2 1672d 1674d
KASAN: use-after-free Read in dev_uevent 19 1 1677d 1677d
general protection fault in bdev_read_page 2 1 1678d 1678d
SYZFAIL: out of opened kcov threads -1 47 1654d 1655d
SYZFAIL: tun: can't open /dev/net/tun -1 1 1688d 1688d
KASAN: use-after-free Read in compute_effective_progs 19 1 1683d 1683d
KASAN: stack-out-of-bounds Read in xfrm_state_find 17 1 1687d 1687d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (2) -1 1 1609d 1609d
android12-5.10-lts test error: UBSAN: object-size-mismatch in wg_xmit -1 69 1664d 1690d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 -1 1 1682d 1682d
android12-5.10-lts build error -1 1 1704d 1704d