Out of 254 bugs, 246 were automatically obsoleted (77 due to revoked reproducers), 8 were invalidated by users.
Extra filters: [With Repro]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported
BUG: soft lockup in packet_rcv 1 1 95d 95d
general protection fault in tipc_conn_close (4) 2 2 97d 103d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (8) -1 12 60d 62d
KASAN: use-after-free Read in kernfs_get (3) 19 1 119d 119d
SYZFAIL: failed to send rpc (2) -1 1 123d 123d
KASAN: use-after-free Write in steam_input_close (3) 22 2 125d 125d
KASAN: slab-out-of-bounds Read in seq_printf (2) 17 1 131d 131d
KASAN: null-ptr-deref Read in tcf_idrinfo_destroy 11 7 133d 229d
BUG: Bad page map -1 1 135d 135d
kernel BUG in ext4_split_extent_at (3) -1 2 140d 157d
general protection fault in ip6_pol_route 2 1 154d 154d
general protection fault in n_tty_receive_buf_common (3) 2 2 164d 243d
BUG: soft lockup in blkdev_open 1 1 170d 170d
KASAN: use-after-free Write in l2tp_session_delete (2) 22 1 174d 174d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (7) -1 16 137d 177d
android14-6.1 test error: SYZFATAL: image testing failed w/o kernel bug (2) -1 10 151d 153d
general protection fault in delayed_work_timer_fn (3) 2 2 194d 218d
KASAN: slab-out-of-bounds Read in ext4_ext_correct_indexes origin:upstream 17 syz error 1 198d 198d
KASAN: use-after-free Read in worker_thread missing-backport 19 syz, C error error 171 202d 1157d
KASAN: use-after-free Read in sk_psock_verdict_data_ready (3) 19 1 212d 212d
SYZFAIL: failed to send rpc -1 41 218d 779d
general protection fault in tipc_conn_close (3) 2 3 219d 263d
BUG: soft lockup in addrconf_rs_timer (4) 1 7 219d 367d
KASAN: use-after-free Read in kernfs_get (2) origin:downstream 22 syz error 3 230d 315d
UBSAN: shift-out-of-bounds in s32ton origin:lts -1 syz, C error 3 230d 279d
KASAN: use-after-free Read in process_one_work origin:upstream missing-backport 19 syz, C error 1040 202d 1180d
KASAN: use-after-free Read in fast_dput 19 5 227d 292d
BUG: soft lockup in wg_expired_new_handshake 1 1 248d 248d
KASAN: use-after-free Read in move_linked_works (3) 19 2 255d 273d
KASAN: use-after-free Write in l2tp_session_delete origin:downstream 22 syz error 20 270d 675d
syzkaller: make host failed: failed to run ["make" "host" "ci" "agent"]: exit status 2 -1 2 189d 189d
KASAN: use-after-free Write in __ip6_del_rt origin:lts 22 syz error 1 290d 290d
BUG: soft lockup in sock_read_iter (2) 1 2 291d 340d
KASAN: use-after-free Read in ipt_do_table 19 1 292d 292d
BUG: soft lockup in tcp_tasklet_func (2) 1 1 293d 293d
general protection fault in find_match 2 5 306d 458d
KASAN: use-after-free Read in sk_psock_verdict_data_ready (2) 19 1 313d 313d
KASAN: use-after-free Read in kernfs_find_and_get_ns (2) 19 1 314d 314d
SYZFAIL: failed to recv rpc origin:upstream -1 syz 231 226d 768d
kernel BUG in ext4_inline_data_truncate missing-backport origin:upstream -1 syz, C done 1 328d 551d
general protection fault in nexthop_get_nhc_lookup 2 9 319d 369d
KASAN: use-after-free Read in hci_uart_write_work 19 7 320d 340d
kernel BUG in ext4_create_inline_data origin:lts -1 syz, C done 1 331d 346d
KASAN: slab-out-of-bounds Read in seq_printf 19 2 328d 333d
KASAN: use-after-free Write in steam_input_close (2) 22 1 333d 333d
KASAN: slab-out-of-bounds Read in mon_bin_event origin:lts 17 syz, C done 5 350d 390d
KASAN: use-after-free Read in f2fs_inode_synced 19 syz, C done 4 356d 478d
SYZFAIL: SIGSEGV (2) -1 3 347d 436d
BUG: corrupted list in p9_fd_cancelled (2) 8 syz error 14 349d 713d
KASAN: use-after-free Read in fib_flush 19 1 359d 359d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (6) -1 2 270d 270d
BUG: unable to handle kernel NULL pointer dereference in read_pages origin:downstream 10 syz, C inconclusive 64 374d 858d
general protection fault in delayed_work_timer_fn (2) 2 2 365d 365d
general protection fault in qdisc_tree_reduce_backlog 2 syz, C done 45 347d 364d
general protection fault in htb_qlen_notify origin:lts 2 syz, C 74 347d 383d
android14-6.1 test error: SYZFATAL: image testing failed w/o kernel bug -1 2 374d 451d
SYZFAIL: SIGILL (3) -1 4 375d 459d
android14-6.1 test error: lost connection to test machine (3) -1 1 377d 377d
kernel BUG in ext4_split_extent_at (2) origin:lts -1 syz, C done 1 395d 395d
SYZFAIL: repeatedly failed to execute the program (2) -1 3 390d 424d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (5) -1 2 301d 301d
SYZFAIL: posix_spawnp failed -1 5 393d 589d
BUG: soft lockup in bpf_link_release (2) 1 1 395d 395d
BUG: soft lockup in pcpu_balance_workfn 1 1 395d 395d
KASAN: use-after-free Read in inet_twsk_kill 19 3 402d 408d
BUG: soft lockup in tcp_tasklet_func 1 1 411d 411d
KASAN: use-after-free Read in move_linked_works (2) 19 1 414d 414d
KASAN: use-after-free Read in tcp_metrics_flush_all 19 82 384d 417d
BUG: stack guard page was hit in corrupted origin:lts -1 syz, C 2 441d 736d
general protection fault in tipc_conn_close (2) 2 1 438d 438d
invalid opcode in __traceiter_ext4_ext_remove_space_done 2 1 455d 455d
BUG: soft lockup in kernfs_fop_write_iter 1 1 458d 458d
kernel BUG in mark_buffer_dirty_inode (2) -1 1 463d 463d
KASAN: use-after-free Write in kernfs_get 22 syz error 8 464d 632d
kernel BUG in do_swap_page -1 syz, C done 9 479d 517d
BUG: soft lockup in sock_read_iter 1 2 474d 512d
KASAN: use-after-free Read in __netif_receive_skb_core 19 1 476d 476d
general protection fault in delayed_work_timer_fn 2 2 478d 542d
BUG: corrupted list in __dentry_kill (2) 8 2 480d 550d
KASAN: use-after-free Read in cpu_map_generic_redirect (2) 19 1 481d 481d
kernel BUG in ext4_ind_map_blocks -1 1 487d 487d
KASAN: use-after-free Read in cpu_map_enqueue origin:lts missing-backport 19 syz 111 477d 758d
general protection fault in dev_map_enqueue missing-backport 19 syz, C error 1695 476d 870d
BUG: soft lockup in addrconf_rs_timer (3) 1 1 496d 496d
kernel BUG in tcp_collapse -1 1 500d 500d
KASAN: use-after-free Read in kernfs_find_and_get_ns 19 1 502d 502d
BUG: soft lockup in wg_expired_send_persistent_keepalive 1 1 508d 508d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (4) -1 2 422d 422d
general protection fault in bq_flush_to_queue 2 12 515d 759d
KASAN: use-after-free Read in input_dev_uevent 19 1 522d 522d
KASAN: use-after-free Read in steam_send_report 19 1 522d 522d
general protection fault in vsock_stream_has_data origin:lts 2 syz, C done 5 538d 538d
KASAN: use-after-free Write in virtio_transport_recv_pkt origin:upstream 22 syz, C done 3 538d 862d
general protection fault in dev_map_generic_redirect origin:lts 19 syz 97 498d 863d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (3) -1 8 541d 612d
KASAN: use-after-free Write in detach_if_pending 22 5 542d 664d
SYZFAIL: ShmemBuilder: too large output offset (2) -1 1 553d 553d
SYZFAIL: SIGFPE -1 4 554d 634d
BUG: soft lockup in bpf_link_release 1 2 563d 646d
general protection fault in khugepaged 2 1 567d 567d
BUG: soft lockup in cleanup_net 1 1 574d 574d
SYZFAIL: proc stdout read failed (2) -1 5 574d 620d
SYZFAIL: mmap of data segment failed -1 11 578d 731d
kernel BUG in ext4_write_inline_data_end origin:lts -1 syz, C error done 2 601d 1003d
BUG: corrupted list in p9_conn_cancel 8 1 594d 594d
kernel BUG in mark_buffer_dirty_inode -1 syz inconclusive 3 606d 675d
BUG: soft lockup in tun_chr_ioctl 1 1 611d 611d
SYZFAIL: SIGILL (2) -1 1 621d 621d
KASAN: use-after-free Read in ext4_convert_inline_data_nolock origin:upstream missing-backport 19 syz, C done 2 639d 835d
KASAN: invalid-free in raw_release 24 1 637d 637d
SYZFAIL: netlink_send_ext: short netlink write -1 1 638d 638d
KASAN: use-after-free Read in sk_psock_verdict_data_ready 19 2 642d 675d
KASAN: use-after-free Read in cpu_map_generic_redirect 19 4 644d 723d
KASAN: use-after-free Read in ext4_find_extent missing-backport 19 syz, C error done 3 656d 1153d
KASAN: out-of-bounds Read in ext4_ext_remove_space missing-backport 17 syz, C error error 6 663d 1095d
invalid opcode in bpf_dispatcher_xdp 2 syz, C error done 55 664d 1173d
BUG: soft lockup in addrconf_rs_timer (2) 1 syz 176 617d 822d
SYZFAIL: repeatedly failed to execute the program -1 23438 620d 780d
SYZFAIL: bad allocate request -1 8 662d 761d
UBSAN: shift-out-of-bounds in parse_audio_unit -1 syz, C done 3 674d 732d
KASAN: use-after-free Read in cancel_delayed_work_sync 19 1 673d 673d
KASAN: null-ptr-deref Write in mark_buffer_dirty_inode 12 1 675d 675d
BUG: soft lockup in br_multicast_port_group_expired 1 3 678d 790d
BUG: unable to handle kernel paging request in bpf_dispatcher_xdp origin:lts missing-backport 8 syz, C done error 20 795d 1122d
general protection fault in n_tty_receive_buf_common (2) 2 4 682d 753d
KASAN: use-after-free Read in __dev_get_by_index 19 1 683d 683d
SYZFAIL: mmap of output file failed -1 17 659d 733d
KASAN: use-after-free Write in steam_input_close 22 1 688d 688d
SYZFAIL: ShmemBuilder: too large output offset -1 5 690d 753d
KASAN: use-after-free Read in __ext4_check_dir_entry missing-backport origin:upstream 19 syz, C error 4 700d 824d
kernel BUG in ext4_split_extent_at missing-backport origin:upstream -1 syz, C error error 1 701d 1162d
BUG: unable to handle kernel paging request in bpf_dispatcher_xdp_func origin:lts 8 syz, C done error 1 703d 1016d
SYZFAIL: iptable checkpoint: socket(SOCK_STREAM, IPPROTO_TCP) failed -1 2 698d 748d
SYZFAIL: posix_spawn failed -1 3855 658d 771d
SYZFAIL: mkdir(syz-tmp) failed -1 134 658d 771d
BUG: soft lockup in mntput 1 1 703d 703d
SYZFAIL: failed to mkdir -1 3 709d 779d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (2) -1 30 690d 809d
BUG: soft lockup in br_multicast_group_expired 1 1 725d 725d
KASAN: use-after-free Write in hiddev_release 22 1 726d 726d
SYZFAIL: proc stdout read failed -1 1 730d 730d
KASAN: use-after-free Read in kernfs_get 19 2 730d 776d
BUG: soft lockup in ndisc_send_rs 1 1 734d 734d
BUG: corrupted list in __dentry_kill 8 2 734d 762d
BUG: soft lockup in ip_list_rcv 1 2 741d 764d
BUG: soft lockup in net_rx_action 1 2 741d 784d
BUG: soft lockup in ipv6_get_lladdr 1 1 743d 743d
KASAN: use-after-free Read in ext4_read_inline_dir 19 1 745d 745d
BUG: soft lockup in arp_rcv 1 1 751d 751d
BUG: soft lockup in rtnl_newlink 1 2 752d 762d
BUG: using smp_processor_id() in preemptible code in usbnet_skb_return 4 2 757d 757d
SYZFAIL: SIGILL -1 3 757d 757d
general protection fault in inherit_task_group origin:downstream 2 syz, C 1 768d 909d
BUG: unable to handle kernel paging request in bpf_probe_read_compat_str missing-backport origin:upstream 8 syz, C error error 3 769d 934d
BUG: scheduling while atomic in wait_for_common origin:lts 5 syz, C done 9 776d 820d
BUG: scheduling while atomic in rcu_boost_kthread origin:lts 5 syz, C unreliable 3 780d 908d
KASAN: stack-out-of-bounds Read in hash origin:lts 17 syz, C done 97 753d 863d
KASAN: use-after-free Read in move_linked_works 19 2 776d 843d
BUG: unable to handle kernel paging request in bpf_probe_read_kernel_str missing-backport 8 syz, C inconclusive 3 786d 923d
BUG: scheduling while atomic in p9_client_rpc 5 2 781d 845d
BUG: soft lockup in kjournald2 (2) 1 1 781d 781d
BUG: scheduling while atomic in wait_transaction_locked 5 10 785d 879d
BUG: scheduling while atomic in unlink_anon_vmas 5 syz, C done 2 797d 875d
BUG: scheduling while atomic in jbd2_log_wait_commit 5 3 791d 861d
general protection fault in hrtimer_try_to_cancel origin:upstream missing-backport 2 syz, C done done 25 803d 999d
UBSAN: array-index-out-of-bounds in bpf_bprintf_prepare 15 syz, C done 14 803d 903d
BUG: scheduling while atomic in do_nanosleep 5 syz, C done 104 774d 918d
KASAN: use-after-free Read in wg_packet_receive 19 1 795d 795d
BUG: unable to handle kernel NULL pointer dereference in sk_psock_verdict_data_ready origin:upstream missing-backport 10 syz, C 204 775d 913d
BUG: scheduling while atomic in exit_to_user_mode_loop 5 syz, C done 1087 776d 957d
BUG: scheduling while atomic in do_epoll_wait origin:lts 5 syz 26 782d 913d
BUG: scheduling while atomic in __put_anon_vma origin:lts 5 syz, C done 1 810d 844d
BUG: workqueue leaked lock or atomic in bpf_prog_free_deferred -1 syz, C done 46 780d 913d
android14-6.1 test error: lost connection to test machine (2) -1 8 805d 806d
BUG: unable to handle kernel paging request in copy_from_kernel_nofault origin:upstream missing-backport 8 syz, C done inconclusive 127 786d 1002d
BUG: scheduling while atomic in synchronize_rcu_expedited origin:lts 5 syz, C 27 790d 816d
SYZFAIL: SIGSEGV -1 316 773d 779d
BUG: corrupted list in p9_fd_cancelled 8 27 813d 1185d
BUG: scheduling while atomic in __skb_wait_for_more_packets 5 2 815d 860d
KASAN: use-after-free Read in wg_queue_enqueue_per_peer_tx 19 1 817d 817d
BUG: scheduling while atomic in futex_wait_queue 5 34 784d 918d
BUG: workqueue leaked lock or atomic in bpf_map_free_deferred -1 5 827d 860d
BUG: workqueue leaked lock or atomic in free_work origin:lts -1 syz, C 5 838d 916d
BUG: scheduling while atomic in pcpu_alloc 5 11 823d 883d
BUG: scheduling while atomic in __writeback_inodes_sb_nr 5 1 830d 830d
BUG: scheduling while atomic in start_this_handle 5 1 831d 831d
BUG: scheduling while atomic in folio_wait_bit_common 5 9 833d 859d
BUG: scheduling while atomic in bpf_prog_pack_alloc origin:lts 5 syz, C 2 843d 862d
BUG: scheduling while atomic in kauditd_thread origin:lts 5 syz, C 1 845d 845d
BUG: scheduling while atomic in vhost_worker 5 1 836d 836d
BUG: scheduling while atomic in bpf_dispatcher_change_prog origin:lts 5 syz, C 1 883d 883d
BUG: scheduling while atomic in rtnl_lock 5 1 839d 839d
SYZFAIL: tun read failed origin:upstream -1 syz inconclusive 44 756d 1110d
SYZFAIL: proc resp pipe read failed -1 2 766d 771d
BUG: scheduling while atomic in do_sys_poll origin:lts 5 syz, C 8 850d 850d
BUG: scheduling while atomic in rtnl_lock_killable 5 3 843d 858d
BUG: scheduling while atomic in lock_sock_nested 5 1 844d 844d
BUG: scheduling while atomic in bit_wait_io 5 14 841d 920d
KASAN: use-after-free Read in mod_delayed_work_on 19 2 849d 867d
android14-6.1 test error: SYZFATAL: failed to connect to host: dial tcp IP:NUM: connect: connection refused -1 10 812d 813d
BUG: scheduling while atomic in msleep 5 1 854d 854d
general protection fault in mnt_want_write 2 1 855d 855d
BUG: scheduling while atomic in text_poke_set 5 2 856d 859d
BUG: scheduling while atomic in text_poke_copy 5 1 856d 856d
BUG: scheduling while atomic in ext4_buffered_write_iter 5 1 858d 858d
BUG: scheduling while atomic in kernfs_activate 5 1 859d 859d
BUG: scheduling while atomic in rcu_barrier 5 1 860d 860d
BUG: workqueue leaked lock or atomic in addrconf_dad_work -1 1 861d 861d
BUG: workqueue leaked lock or atomic in drain_vmap_area_work -1 1 861d 861d
BUG: using smp_processor_id() in preemptible code in rcu_is_watching 4 2 862d 876d
panic: runtime error: floating point error [recovered] 2 3 866d 883d
UBSAN: shift-out-of-bounds in scalar32_min_max_arsh origin:upstream missing-backport -1 syz, C done done 2 879d 970d
syzkaller: failed to copy syzkaller: file bin/linux_arm64/syz-fuzzer does not exist -1 2 781d 781d
general protection fault in skb_segment origin:upstream missing-backport 2 syz, C done done 1 885d 975d
UBSAN: array-index-out-of-bounds in check_stack_range_initialized 15 syz, C done 3803 863d 878d
general protection fault in tipc_crypto_rcv_complete 2 1 888d 888d
general protection fault in n_tty_receive_buf_common 2 1 903d 903d
general protection fault in tipc_conn_close 2 6 917d 1144d
KASAN: use-after-free Read in unix_stream_read_actor missing-backport origin:upstream 19 syz, C done done 2 933d 1007d
BUG: soft lockup in kjournald2 1 1 924d 924d
SYZFAIL: clone failed origin:upstream -1 syz 1 928d 928d
android14-6.1 test error: BUG: mismatching fuzzer/executor git revisions: ADDR vs ADDR -1 1 948d 948d
general protection fault in ovl_lookup_single 2 1 949d 949d
KASAN: use-after-free Read in dev_uevent 19 6 960d 1130d
BUG: stack guard page was hit in sys_sendmmsg missing-backport origin:upstream -1 syz, C done done 2 1003d 1158d
android14-6.1 test error: lost connection to test machine -1 3 996d 1016d
kernel BUG in iptunnel_xmit (2) -1 1 996d 996d
BUG: soft lockup in wg_packet_tx_worker 1 3 1000d 1022d
BUG: soft lockup in neigh_timer_handler 1 2 1000d 1022d
KASAN: use-after-free Read in consume_skb 19 syz, C error done 4 1010d 1069d
BUG: soft lockup in tc_modify_qdisc 1 syz, C done done 53 990d 1022d
KASAN: use-after-free Write in igrab origin:upstream missing-backport 22 syz, C done unreliable 29 1003d 1164d
BUG: soft lockup in addrconf_rs_timer 1 1 1019d 1019d
BUG: soft lockup in sys_sendmmsg 1 1 1022d 1022d
KASAN: use-after-free Read in get_max_inline_xattr_value_size origin:lts 19 syz, C error done 10 1037d 1126d
kernel BUG in ext4_trim_fs origin:lts -1 syz, C error done 9 1045d 1114d
KASAN: null-ptr-deref Write in backing_data_changed origin:downstream 12 syz, C done done 1 1052d 1089d
general protection fault in ext4_acquire_dquot origin:lts 2 syz, C done done 1 1054d 1178d
kernel BUG in ext4_mb_find_by_goal origin:lts -1 syz, C error done 78 1027d 1184d
kernel BUG in ext4_mb_load_buddy_gfp -1 syz, C error done 42 1028d 1185d
general protection fault in LZ4_decompress_safe_partial origin:lts 2 syz, C done done 2 1075d 1089d
kernel BUG in __block_commit_write -1 syz error error 1 1065d 1065d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 -1 8 1074d 1177d
panic: runtime error: floating point error 2 1 1090d 1090d
KASAN: null-ptr-deref Write in hidraw_release origin:upstream missing-backport 12 syz, C error done 5 1119d 1164d
KASAN: use-after-free Write in process_notifier 22 288 1073d 1100d
BUG: unable to handle kernel paging request in bpf_test_run 8 1 1115d 1115d
general protection fault in free_percpu 2 1 1130d 1130d
fatal error: Connection to IP closed by remote host. -1 1 1143d 1143d
general protection fault in idr_remove 2 1 1156d 1156d
BUG: soft lockup in hub_event 1 1 1157d 1157d
kernel BUG in pskb_expand_head -1 1 1163d 1163d
kernel BUG in mas_store_prealloc origin:lts -1 syz, C done done 12 1167d 1187d
kernel BUG in iptunnel_xmit -1 1 1189d 1189d