syzbot


Out of 254 bugs, 211 were automatically obsoleted (37 due to revoked reproducers), 43 were invalidated by users.
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported
KASAN: use-after-free Read in f2fs_inode_dirtied 19 C done 3 100d 150d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (9) -1 2 1d22h 1d22h
SYZFAIL: SIGSEGV (2) -1 3 93d 187d
kernel BUG in ext4_create_inline_data -1 C done 2 109d 169d
KASAN: slab-out-of-bounds Read in mon_bin_event 17 C done 60 85d 140d
BUG: scheduling while atomic in futex_wait_queue_me 5 1 110d 110d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (8) -1 2 33d 33d
KASAN: slab-out-of-bounds Write in try_module_get 23 11 128d 199d
BUG: soft lockup in sock_read_iter 1 2 130d 142d
KASAN: use-after-free Write in u32_destroy_key 24 1 134d 134d
general protection fault in lo_ioctl 2 1 146d 146d
KASAN: use-after-free Read in ext4_xattr_inode_dec_ref_all 19 C done 3 208d 236d
KASAN: use-after-free Read in tw_timer_handler 19 syz 10 127d 161d
SYZFAIL: SIGFPE (2) -1 8 160d 336d
KASAN: use-after-free Read in exact_lock (2) 19 172 127d 206d
KASAN: use-after-free Read in tcp_net_metrics_exit_batch 19 613 128d 166d
KASAN: use-after-free Read in inet_twsk_purge 19 74 130d 165d
general protection fault in tipc_conn_close (4) 2 2 173d 240d
general protection fault in __rt6_nh_dev_match 2 2 178d 190d
KASAN: slab-out-of-bounds Read in dentry_revalidate 17 2 183d 261d
BUG: using smp_processor_id() in preemptible code in usbnet_skb_return (2) 4 C error 2 198d 389d
general protection fault in ip6_create_rt_rcu 2 1 190d 190d
SYZFAIL: netlink_send_ext: short netlink write (2) -1 2 191d 256d
KASAN: use-after-free Write in l2tp_session_delete (2) 24 3 192d 293d
BUG: soft lockup in cleanup_net 1 1 194d 194d
BUG: soft lockup in input_repeat_key 1 C error 3 248d 756d
general protection fault in __loop_clr_fd 2 1 196d 196d
KASAN: use-after-free Read in fast_dput (2) 19 1 197d 197d
KASAN: use-after-free Write in ext4_insert_dentry 24 C done 25 211d 430d
kernel BUG in ext4_ind_map_blocks -1 2 203d 221d
BUG: soft lockup in addrconf_rs_timer (2) 1 C 265 183d 514d
kernel BUG in blk_mq_dispatch_rq_list (4) fat -1 C error 16 869d 1122d
BUG: unable to handle kernel paging request in __gnet_stats_copy_basic 8 1 206d 206d
general protection fault in current_umask 2 C unreliable 5 217d 428d
KASAN: use-after-free Write in skb_release_data 24 1 209d 209d
KASAN: use-after-free Write in tipc_mon_reinit_self 24 1 233d 233d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (7) -1 2 154d 154d
SYZFAIL: open(/proc/self/ns/net) failed -1 1 245d 245d
BUG: soft lockup in sock_write_iter 1 1 251d 251d
KASAN: use-after-free Read in br_multicast_port_group_expired (2) 19 1 269d 269d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (6) -1 8 272d 344d
KASAN: stack-out-of-bounds Read in __xfrm_dst_hash 17 1 280d 280d
KASAN: use-after-free Read in exact_lock 19 53 259d 268d
kernel BUG in vlan_get_protocol_dgram -1 C done 6 311d 426d
KASAN: use-after-free Read in fast_dput 19 14 303d 492d
SYZFAIL: iptable checkpoint: socket(SOCK_STREAM, IPPROTO_TCP) failed -1 4 303d 391d
SYZFAIL: ebtable: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) -1 81 287d 475d
KASAN: use-after-free Read in lock_get_status 19 4 340d 356d
BUG: corrupted list in tipc_nametbl_translate 8 2 342d 365d
general protection fault in cleanup_bearer 19 C 14034 323d 326d
KASAN: out-of-bounds Read in __show_regs 17 1 345d 345d
BUG: soft lockup in br_multicast_group_expired (2) 1 1 348d 348d
BUG: Bad page map (3) -1 3 349d 495d
KASAN: use-after-free Write in virtio_transport_recv_pkt 24 C inconclusive 1 402d 594d
KASAN: use-after-free Read in bdev_try_to_free_page 19 1 355d 355d
KASAN: use-after-free Read in binder_release_work 19 C 154 337d 371d
BUG: soft lockup in mntput 1 1 373d 373d
SYZFAIL: handshake read failed -1 1 393d 393d
KASAN: use-after-free Write in l2tp_session_delete 24 2 393d 417d
kernel BUG in vlan_get_tci -1 2 397d 426d
SYZFAIL: netlink_send_ext: short netlink write -1 4 403d 492d
SYZFAIL: posix_spawn failed -1 9928 366d 503d
SYZFAIL: mmap of output file failed -1 20 391d 492d
SYZFAIL: child failed -1 syz error error 1 415d 1424d
KASAN: use-after-free Read in ext4_convert_inline_data_nolock 19 syz error 1 434d 567d
KASAN: use-after-free Read in __ext4_check_dir_entry 19 C error 2 439d 557d
BUG: corrupted list in p9_fd_cancelled (4) 8 4 420d 530d
BUG: unable to handle kernel paging request in __raw_callee_save___kvm_vcpu_is_preempted 8 1 429d 429d
SYZFAIL: mkdir(syz-tmp) failed -1 299 390d 502d
SYZFAIL: bad allocate request -1 148 391d 501d
KASAN: use-after-free Read in wg_queue_enqueue_per_peer_tx 19 2 431d 435d
SYZFAIL: ShmemBuilder: too large output offset -1 51 391d 499d
general protection fault in steam_send_report 2 1 432d 432d
SYZFAIL: can't reallocate -1 1 436d 436d
SYZFAIL: SIGSEGV -1 841 397d 511d
KASAN: use-after-free Write in __tlb_remove_page_size 24 1 439d 439d
SYZFAIL: SIGFPE -1 2 440d 485d
general protection fault in free_swap_cache 2 1 450d 450d
KASAN: stack-out-of-bounds Read in __show_regs 17 1 451d 451d
BUG: soft lockup in br_multicast_port_group_expired 1 1 452d 452d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (5) -1 30 422d 540d
KASAN: use-after-free Read in br_multicast_port_group_expired 19 1 455d 455d
BUG: soft lockup in net_rx_action 1 2 455d 467d
BUG: soft lockup in __run_timers 1 2 456d 524d
BUG: soft lockup in sys_sendmmsg 1 2 457d 457d
KASAN: use-after-free Read in usb_udc_uevent (3) 19 1 458d 458d
BUG: soft lockup in __netif_receive_skb_core 1 1 459d 459d
KASAN: use-after-free Read in unaccount_page_cache_page (2) 19 1 462d 462d
KASAN: use-after-free Read in worker_thread 19 1 464d 464d
BUG: soft lockup in wg_expired_send_persistent_keepalive 1 1 468d 468d
BUG: soft lockup in br_multicast_group_expired 1 1 469d 469d
BUG: soft lockup in ip_list_rcv 1 1 469d 469d
BUG: soft lockup in run_rebalance_domains 1 1 470d 470d
BUG: soft lockup in ipv6_rcv 1 3 474d 491d
KASAN: null-ptr-deref Write in __kernfs_remove 12 1 477d 477d
BUG: soft lockup in vfork 1 1 479d 479d
BUG: soft lockup in sys_exit_group 1 1 485d 485d
SYZFAIL: bad thread state in completion -1 syz error error 5 1074d 1416d
KASAN: use-after-free Read in dev_get_by_index_rcu 19 1 495d 495d
BUG: soft lockup in sys_clone 1 1 498d 498d
BUG: soft lockup in sys_recvmsg 1 4 499d 578d
SYZFAIL: control pipe read failed -1 1 502d 502d
SYZFAIL: too many calls in output -1 2 507d 507d
BUG: soft lockup in sys_bpf 1 2 512d 517d
BUG: unable to handle kernel paging request in swake_up_locked 8 C inconclusive 1 531d 562d
KASAN: use-after-free Read in macsec_get_iflink 19 syz error 2 536d 662d
KASAN: use-after-free Read in wg_packet_send_staged_packets 19 1 561d 561d
go runtime error 2 22 563d 842d
SYZFAIL: tun read failed -1 syz error error 123 489d 1487d
SYZFAIL: proc resp pipe read failed -1 73 496d 512d
general protection fault in fq_codel_enqueue (2) 2 2 576d 578d
panic: runtime error: floating point error [recovered] 2 1 583d 583d
android13-5.10-lts build error -1 44 547d 566d
KASAN: use-after-free Read in f2fs_write_end_io 19 1 591d 591d
syzkaller: failed to copy syzkaller: file bin/linux_arm64/syz-fuzzer does not exist -1 2 512d 512d
BUG: unable to handle kernel paging request in fuse_dev_do_write (3) 8 1 604d 604d
KASAN: use-after-free Read in unaccount_page_cache_page 19 150 576d 1105d
general protection fault in mnt_want_write (2) 2 1 642d 642d
BUG: corrupted list in p9_fd_cancelled (3) 8 C done unreliable 38 660d 745d
KASAN: stack-out-of-bounds Read in update_stack_state 17 1 656d 656d
panic: replaceArg: group fields don't match: NUM/NUM 2 13 620d 620d
general protection fault in skb_segment 2 C done 1 695d 709d
KASAN: use-after-free Read in key_task_permission 19 1 694d 694d
android13-5.10-lts test error: lost connection to test machine -1 1 699d 699d
BUG: unable to handle kernel paging request in fuse_dev_do_write (2) 8 1 725d 725d
KASAN: null-ptr-deref Write in backing_data_changed 12 C done 3 749d 822d
general protection fault in __writeback_single_inode 2 1 767d 767d
BUG: Bad page map (2) -1 1 769d 769d
KASAN: use-after-free Read in locked_inode_to_wb_and_lock_list 19 2 773d 803d
general protection fault in tipc_conn_close (3) 2 1 796d 796d
kernel BUG in __block_commit_write -1 1 797d 797d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (4) -1 20 806d 1008d
corrupted report (2) -1 6 807d 885d
BUG: soft lockup in wg_packet_tx_worker 1 5 817d 866d
BUG: soft lockup in neigh_timer_handler 1 2 818d 826d
BUG: soft lockup in wg_packet_handshake_send_worker 1 6 825d 865d
BUG: soft lockup in sys_sendto 1 2 825d 862d
kernel panic: EXT4-fs (device loop2): panic forced after error 2 1 829d 829d
BUG: soft lockup in tc_modify_qdisc 1 C done done 314 813d 866d
BUG: soft lockup in addrconf_rs_timer 1 2 842d 860d
fatal error: fault -1 1 849d 849d
BUG: using smp_processor_id() in preemptible code in usbnet_skb_return 4 syz error error 2 850d 1331d
fatal error: Connection to IP closed by remote host. -1 3 865d 989d
BUG: stack guard page was hit in corrupted (23) -1 syz error error 1 890d 890d
KASAN: use-after-free Read in usb_udc_uevent (2) 19 1 887d 887d
kernel BUG in ext4_expand_extra_isize_ea -1 C done done 5 900d 914d
BUG: unable to handle kernel paging request in fuse_dev_do_write 8 18 860d 926d
KASAN: global-out-of-bounds Read in f2fs_release_page 19 2 898d 930d
SYZFAIL: clock_gettime failed -1 syz error error 5 906d 1431d
KASAN: use-after-free Read in f2fs_remove_dirty_inode 19 C error error 4 920d 976d
general protection fault in do_swap_page 2 246 890d 1327d
kernel panic: EXT4-fs (device loop3): panic forced after error 2 1 943d 943d
general protection fault in kernfs_name_hash (6) 2 C error error 22 973d 1139d
kernel panic: EXT4-fs (device loop4): panic forced after error 2 1 947d 947d
android12-5.10-lts build error (2) -1 220 929d 1030d
VFS: Busy inodes after unmount (use-after-free) 2 C done inconclusive 1 997d 997d
general protection fault in filp_close 2 1 970d 970d
BUG: unable to handle kernel paging request in z_erofs_decompress_pcluster erofs 8 C error error 3 1015d 1113d
BUG: Bad page map -1 1 987d 987d
KASAN: use-after-free Read in hci_cmd_timeout 19 1 994d 994d
syzkaller: make host failed: failed to run ["make" "host" "ci"]: exit status 2 -1 2 998d 998d
kernel panic: corrupted stack end in sys_sendmmsg 2 syz error error 14 1012d 1038d
KASAN: use-after-free Read in fuse_copy_one 19 C error inconclusive 1 1100d 1100d
kernel BUG in jbd2_journal_get_create_access -1 syz error error 1 1107d 1107d
KASAN: stack-out-of-bounds Read in xfrm_state_find (2) 17 syz error error 1 1053d 1053d
BUG: scheduling while atomic in f2fs_register_inmem_page 5 C error inconclusive 1 979d 979d
KASAN: use-after-free Read in usb_udc_uevent 19 2 1012d 1036d
general protection fault in f2fs_release_page f2fs 19 3 1028d 1070d
general protection fault in tipc_conn_close (2) 2 6 1069d 1156d
KASAN: use-after-free Read in xpad_presence_work 19 1 1114d 1114d
kernel panic: EXT4-fs (device loop0): panic forced after error ext4 2 C 1 1060d 1060d
divide error in netem_enqueue (2) 2 1 1161d 1161d
KASAN: vmalloc-out-of-bounds Read in init_srcu_struct_fields (2) 17 1 1179d 1179d
panic: runtime error: floating point error 2 1 1184d 1184d
KASAN: use-after-free Read in __cgroup_bpf_attach (3) 19 1 1198d 1198d
KASAN: use-after-free Read in __tcf_qdisc_find 19 1 1199d 1199d
KASAN: invalid-free in selinux_tun_dev_free_security 22 14 1193d 1202d
general protection fault in fq_codel_enqueue 2 1 1210d 1210d
BUG: corrupted list in pwq_dec_nr_in_flight (2) 8 1 1213d 1213d
general protection fault in tcp_sk_exit (2) 2 1 1221d 1221d
KASAN: use-after-free Read in css_free_rwork_fn (2) 19 2 1225d 1310d
android12-5.10-lts-superproject build error -1 24 1233d 1259d
panic: bad group arg size NUM, should be <= NUM for &prog.GroupArg{ArgCommon:prog.ArgCommon{ref:0x2de, dir:0x0}, Inner:[ 2 23 1146d 1148d
general protection fault in ext4_xattr_set_entry 2 C error 2 1153d 1167d
kernel BUG in ext4_es_cache_extent -1 C error 1 1178d 1178d
BUG: unable to handle kernel paging request in reuseport_select_sock 8 1 1252d 1252d
BUG: stack guard page was hit in corrupted (22) -1 syz done done 1 1289d 1289d
kernel panic: corrupted stack end in sys_futex 2 syz error error 1 1316d 1316d
KASAN: use-after-free Read in f2fs_available_free_memory 19 syz error error 7 1376d 1475d
BUG: unable to handle kernel NULL pointer dereference in ipv6_rcv 10 syz 1 1319d 1319d
divide error in netem_enqueue 2 2 1268d 1279d
general protection fault in tipc_conn_close 2 1 1284d 1284d
BUG: stack guard page was hit in file_open (11) -1 4 1287d 1289d
BUG: stack guard page was hit in sys_mkdir (5) -1 1 1288d 1288d
BUG: stack guard page was hit in sys_creat (10) -1 1 1289d 1289d
kernel BUG in collapse_huge_page -1 1 1296d 1296d
general protection fault in __device_attach 2 1 1298d 1298d
kernel BUG in blk_mq_dispatch_rq_list -1 C error 16 1217d 1417d
KASAN: use-after-free Read in __cgroup_bpf_attach (2) 19 1 1306d 1306d
KASAN: use-after-free Read in vcs_write 19 1 1307d 1307d
SYZFAIL: failed to mkdtemp -1 15 1308d 1475d
BUG: corrupted list in pwq_dec_nr_in_flight 8 1 1308d 1308d
corrupted report -1 289 1287d 1436d
BUG: corrupted list in p9_fd_cancelled (2) 8 3 1317d 1353d
general protection fault in tcp_sk_exit 2 1 1320d 1320d
SYZFAIL: tun: ioctl(TUNSETIFF) failed -1 7 1320d 1479d
kernel panic: corrupted stack end in file_open 2 1 1323d 1323d
general protection fault in icmpv6_sk_exit 2 1 1329d 1329d
general protection fault in mnt_want_write 2 1 1335d 1335d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (3) -1 3 1247d 1247d
general protection fault in del_gendisk (3) 2 C done 1 1277d 1277d
KASAN: use-after-free Read in io_uring_cancel_task_requests 19 1 1362d 1362d
KASAN: slab-out-of-bounds Read in fuse_inode_eq 17 5 1363d 1370d
KASAN: use-after-free Write in dir_mkdir 24 1 1369d 1369d
KASAN: null-ptr-deref Write in incfs_fresh_pending_reads_exist 12 1 1376d 1376d
general protection fault in kernfs_name_hash 2 C done 2 1311d 1311d
kernel BUG in notify_change (2) -1 C error 2 1304d 1304d
general protection fault in del_gendisk (2) 2 C error 2 1301d 1302d
SYZFAIL: sandbox fork failed -1 3 1384d 1467d
KASAN: vmalloc-out-of-bounds Read in init_srcu_struct_fields 17 1 1423d 1423d
SYZFAIL: bad thread state in schedule -1 1 1403d 1403d
KASAN: stack-out-of-bounds Read in iov_iter_revert 17 C error 10 1332d 1485d
SYZFAIL: invalid syscall number -1 2 1422d 1444d
kernel BUG in ext4_free_blocks -1 3 1436d 1469d
general protection fault in io_prep_async_work 2 1 1406d 1406d
KASAN: use-after-free Read in io_kill_linked_timeout 19 C error 14 1354d 1402d
KASAN: use-after-free Read in __fdget_raw 19 C error error 1 1397d 1397d
KASAN: invalid-free in io_dismantle_req 22 C error 7 1365d 1359d
general protection fault in del_gendisk 2 C error 1 1364d 1471d
BUG: corrupted list in p9_fd_cancelled 8 1 1444d 1444d
KASAN: use-after-free Read in task_work_run 19 2 1478d 1477d
KASAN: use-after-free Write in chroot_fs_refs 24 2 1476d 1477d
BUG: stack guard page was hit in sys_fsetxattr -1 1 1388d 1388d
BUG: stack guard page was hit in sys_lsetxattr -1 C error inconclusive 2 1394d 1394d
BUG: stack guard page was hit in sys_setxattr -1 C error 6 1391d 1414d
BUG: stack guard page was hit in corrupted -1 C error 3 1379d 1414d
BUG: stack guard page was hit in sys_unlink -1 2 1414d 1414d
BUG: stack guard page was hit in sys_creat -1 C error done 7 1362d 1426d
BUG: stack guard page was hit in sys_lchown -1 C error 4 1382d 1431d
BUG: stack guard page was hit in sys_chdir -1 5 1360d 1432d
KASAN: use-after-free Read in css_free_rwork_fn 19 1 1451d 1451d
KASAN: use-after-free Read in rcu_cblist_dequeue 19 1 1483d 1477d
BUG: workqueue lockup -1 C error 25 1388d 1486d
KASAN: use-after-free Read in __cgroup_bpf_attach 19 2 1457d 1459d
KASAN: use-after-free Read in dev_uevent 19 1 1462d 1462d
general protection fault in bdev_read_page 2 1 1463d 1463d
SYZFAIL: out of opened kcov threads -1 47 1439d 1440d
SYZFAIL: tun: can't open /dev/net/tun -1 1 1473d 1473d
KASAN: use-after-free Read in compute_effective_progs 19 1 1468d 1468d
KASAN: stack-out-of-bounds Read in xfrm_state_find 17 1 1472d 1472d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (2) -1 1 1394d 1394d
android12-5.10-lts test error: UBSAN: object-size-mismatch in wg_xmit -1 69 1449d 1475d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 -1 1 1467d 1467d
android12-5.10-lts build error -1 1 1489d 1489d