syzbot


net subsystem


List(s): netdev@vger.kernel.org
Fixed bugs: 1629
Parent subsystem(s): kernel (80)
Child subsystems: atm (0) batman (9) bridge (2) hams (7) intel-wired-lan (0) isdn4linux (1) mptcp (1) netfilter (14) openvswitch (0) ppp (2) rds (0) sctp (4) smc (9) tipc (6) tls (0) wireguard (6) wireless (52) wpan (7) x25 (1)
open (140):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
BUG: stack guard page was hit in sock_close net 1 2d07h 11h29m PATCH [12h24m]
possible deadlock in rpc_close_pipes nfs net C 258 26m 12h00m 💬 4 [2h42m]
possible deadlock in br_forward_delay_timer_expired (4) net 1 6d12h 2d12h
INFO: rcu detected stall in linkwatch_event (5) net syz error 1 11d 7d04h
possible deadlock in xsk_notifier (3) bpf net 1 8d11h 8d10h 💬 8 [7d05h]
WARNING in qdisc_tree_reduce_backlog net 1 10d 9d17h
KMSAN: uninit-value in unix_create1 net 1 17d 13d
WARNING in taprio_get_start_time (2) net 1 19d 19d
WARNING in __linkwatch_sync_dev (2) net C 394 9h31m 21d PATCH [15d]
general protection fault in add_grec (2) net 3 9d21h 22d
divide error in taprio_update_queue_max_sdu (2) net 3 21d 26d
WARNING: refcount bug in gro_cleanup net 1 38d 26d
general protection fault in ip6_mc_clear_src (2) net 22 1h35m 28d
WARNING in napi_disable net 1 38d 29d
general protection fault in __igmp_group_dropped net 3 27d 29d
WARNING: refcount bug in sk_skb_reason_drop (2) net 1 35d 29d
KASAN: slab-out-of-bounds Write in mini_qdisc_pair_swap net 2 1d18h 29d
general protection fault in ip_mc_up net 1 35d 29d
possible deadlock in __netdev_update_features net 40 23h09m 30d 💬 3 [29d]
possible deadlock in dev_set_promiscuity net 16 10d 30d 💬 1 [30d]
KMSAN: uninit-value in mkiss_receive_buf net 2 38d 35d
KMSAN: uninit-value in neigh_parms_release (2) net 1 41d 37d
WARNING: suspicious RCU usage in corrupted (3) net C done 1 8d00h 37d PATCH [34d]
WARNING in ah6_output net C error 5 6d11h 39d
BUG: unable to handle kernel NULL pointer dereference in vcc_sendmsg net 1 45d 41d
BUG: corrupted list in __hw_addr_del_entry net 3 28d 41d
KASAN: slab-use-after-free Read in fib6_add net 12 30d 43d
BUG: unable to handle kernel paging request in bond_rr_gen_slave_id (2) net 1 47d 43d
KASAN: slab-out-of-bounds Read in cache_clean net nfs 2 30d 43d 💬 2 [43d]
general protection fault in ip6_ins_rt net 2 36d 44d
possible deadlock in ptp_clock_unregister net C 20 23d 49d 💬 1 [23d]
KASAN: use-after-free Read in __linkwatch_run_queue net syz 22 2d07h 49d
KASAN: global-out-of-bounds Read in in_dev_finish_destroy net 12 31d 51d
WARNING in neigh_parms_release net 2 47d 52d
BUG: unable to handle kernel paging request in nsim_drv_port_add net 1 54d 53d
KMSAN: uninit-value in __ipv6_dev_mc_inc (2) net 41 36d 54d
KMSAN: uninit-value in __ipv6_dev_mc_dec (2) net 15 40d 54d
BUG: corrupted list in __nsim_dev_port_del net 2 40d 55d
general protection fault in mld_clear_delrec net 53 9h41m 56d
KASAN: slab-out-of-bounds Read in arp_mc_map net 2 56d 57d
INFO: rcu detected stall in inet_rtm_newaddr (2) net syz error 1 25d 57d
INFO: task hung in inet6_rtm_newaddr (2) net syz 1 58d 57d
general protection fault in __ip_mc_dec_group net 14 5h45m 57d
kernel BUG in in_dev_free_rcu net 5 15d 59d
kernel BUG in unregister_vlan_dev (3) net 7 18d 59d PATCH [9d18h]
general protection fault in rt6_find_cached_rt net 3 18d 59d
KASAN: global-out-of-bounds Read in fib6_ifup net 12 35d 59d
KASAN: global-out-of-bounds Read in fib6_ifdown (2) net syz 39 30d 60d
BUG: using smp_processor_id() in preemptible code in usbnet_skb_return net usb 1 64d 60d
BUG: soft lockup in sctp_generate_timeout_event net 1 63d 61d
WARNING in nsim_fib_event_nb net C done 99 3h31m 62d 💬 1 [33d]
KASAN: global-out-of-bounds Read in __find_rr_leaf (2) net 14 26d 62d
general protection fault in ip6_create_rt_rcu net 2 57d 62d
KASAN: global-out-of-bounds Read in fib6_clean_node (2) net 62 24d 62d
WARNING: suspicious RCU usage in __fib6_update_sernum_upto_root net 24 26d 62d 💬 1 [62d]
WARNING in rt6_multipath_rebalance (2) net 50 15h17m 62d
KASAN: null-ptr-deref Write in dst_cache_per_cpu_get (3) net 2 25d 70d
KASAN: slab-use-after-free Read in sk_psock_verdict_data_ready (3) bpf net 4 4d18h 71d 💬 1 [71d]
BUG: soft lockup in garp_join_timer (3) net 3 40d 71d
INFO: task hung in usbnet_disconnect (3) net usb 46 3d02h 81d
WARNING in dst_cache_per_cpu_get net 1 84d 83d
KASAN: null-ptr-deref Write in rcuref_put (4) net 2 63d 84d
KMSAN: uninit-value in __vxlan_find_mac (2) net 1 90d 85d
BUG: soft lockup in wg_packet_tx_worker (3) net 1 92d 86d
possible deadlock in dev_close net 1 96d 92d 💬 2 [91d]
BUG: sleeping function called from invalid context in dev_set_allmulti net 3361 26d 113d
WARNING in depot_fetch_stack net 10 26d 120d
INFO: rcu detected stall in call_timer_fn (5) net input usb C 8 3d13h 126d
general protection fault in generic_hwtstamp_ioctl_lower (2) net C 17 8d17h 148d 💬 3 [145d]
general protection fault in ip6_pol_route (3) bcachefs net syz error 25 21d 148d 💬 3 [145d]
general protection fault in __fib6_drop_pcpu_from (6) net 228 48d 148d
WARNING: locking bug in netpoll_poll_disable (2) net 2 89d 170d
WARNING in max_vclocks_store net C 1 167d 177d
INFO: task hung in inet_rtm_newaddr net syz done 61 4d04h 188d
BUG: Bad page state in skb_pp_cow_data net C done 42 11d 205d 💬 2 [203d]
BUG: unable to handle kernel paging request in dst_dev_put (2) net syz 1549 7d04h 210d
KCSAN: data-race in kick_pool / wq_worker_running net 834 4h43m 215d 💬 1 [215d]
WARNING: locking bug in try_to_wake_up (2) net syz error error 154 21d 227d
KASAN: slab-use-after-free Read in cfusbl_device_notify net 140 1d17h 238d
WARNING in rtnl_dellink (4) net 31 18d 249d
INFO: task hung in genl_rcv_msg (4) net C done 120 1d20h 273d
INFO: task hung in new_device_store (5) net syz inconclusive 108 3d19h 279d 💬 7 [266d]
INFO: task hung in tun_chr_close (5) net syz done 590 21h39m 290d
KASAN: slab-use-after-free Read in sk_filter_trim_cap bpf net 12 52d 301d
possible deadlock in rtnl_lock (8) net C 434 65d 318d 💬 5 [294d]
INFO: task hung in switchdev_deferred_process_work (3) net syz inconclusive 489 4d00h 328d
INFO: task hung in addrconf_dad_work (5) net C done 1485 13h18m 338d
INFO: task hung in linkwatch_event (4) net C done 3254 6d02h 340d
WARNING: suspicious RCU usage in dev_deactivate_queue net C error 7829 4d15h 350d 💬 1 [51d]
INFO: task hung in cleanup_net (7) net 120 5d11h 356d
BUG: sleeping function called from invalid context in synchronize_net net C done 54 155d 356d 💬 2 [347d]
possible deadlock in do_ipv6_setsockopt (4) net C error 3730 68d 357d 💬 1 [84d]
WARNING: suspicious RCU usage in dev_activate net C error 789 19d 364d PATCH [348d]
possible deadlock in do_ip_setsockopt (4) net C done done 12508 68d 371d PATCH [283d]
WARNING in dev_deactivate_many net C 217 13d 373d
KMSAN: uninit-value in nci_ntf_packet (3) net nfc C 63 2d04h 381d PATCH [259d]
UBSAN: array-index-out-of-bounds in llc_conn_state_process (2) net 20 21d 394d 💬 1 [54d]
INFO: task hung in nsim_destroy (4) net 428 3d10h 397d
INFO: task hung in __vhost_worker_flush net virt 331 21d 399d 💬 5 [97d]
KMSAN: kernel-infoleak in __skb_datagram_iter (4) net C 507 2d02h 404d 💬 1 [238d]
INFO: rcu detected stall in sendmsg (4) net C error 56 26d 404d
KMSAN: uninit-value in dev_map_hash_lookup_elem bpf net C 20 384d 410d
INFO: rcu detected stall in sock_write_iter (3) net C done 158 7d12h 421d 💬 1 [421d]
KMSAN: uninit-value in hsr_get_node (3) net C 28 16d 441d 💬 8 [347d]
possible deadlock in hsr_dev_xmit (2) net C done 877 1d01h 461d 💬 2 [423d]
KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings net syz done 8758 48m 467d PATCH [450d]
possible deadlock in sock_map_delete_elem bpf net C error done 869 387d 471d
KASAN: slab-use-after-free Read in handle_tx (2) net C 433 25m 497d 💬 2 [165d]
INFO: rcu detected stall in ipv6_rcv (4) net C done done 12 46d 546d
WARNING: ODEBUG bug in advance_sched net C done done 10 270d 559d 💬 1 [233d]
INFO: rcu detected stall in sys_recvmmsg (3) net 164 4d12h 561d
WARNING in call_rcu (3) net C 3 460d 562d
memory leak in radix_tree_insert (2) net arm-msm C 1 563d 573d PATCH [568d]
WARNING in tcp_recvmsg_locked (2) net C done 12 6d06h 575d 💬 1 [575d]
INFO: rcu detected stall in ip_list_rcv (6) net C done done 49 16d 576d 💬 5 [101d]
INFO: rcu detected stall in nsim_dev_trap_report_work (2) net syz done 17 122d 609d
memory leak in fasync_helper (2) net C 1 570d 650d PATCH [483d]
WARNING in inet_sock_destruct (4) net C done 6584 6h14m 740d 💬 4 [19d]
unregister_netdevice: waiting for DEV to become free (8) net C done 343213 now 754d PATCH [506d]
INFO: task hung in rfkill_unregister (3) net nfc C 1634 1h03m 756d 💬 6 [24d]
INFO: task hung in synchronize_rcu (4) net fs C done error 894 3d18h 791d 💬 6 [334d]
INFO: task hung in del_device_store net syz error 1793 10h18m 850d
INFO: task hung in rfkill_sync_work net nfc C done 48 18d 919d PATCH [863d]
KMSAN: uninit-value in bpf_prog_run_generic_xdp net C 1549 3d19h 957d PATCH [90d]
INFO: task hung in nfc_rfkill_set_block net nfc C done done 451 4d07h 960d
WARNING in ip_rt_bug (2) net C done error 364 28d 994d 💬 3 [370d]
INFO: task can't die in vlan_ioctl_handler net 165 16d 1129d
BUG: "hc->tx_t_ipi == NUM" holds (exception!) at net/dccp/ccids/ccid3.c:LINE/ccid3_update_send_interval() net C inconclusive error 64 29d 1269d 💬 1 [167d]
INFO: rcu detected stall in sys_exit_group (7) net C unreliable inconclusive 90 359d 1356d
BUG: MAX_LOCKDEP_KEYS too low! (2) no-reminders net C unreliable 5367 1h22m 1505d PATCH [742d]
general protection fault in skb_release_data (2) net bluetooth C done error 703 93d 1757d
INFO: rcu detected stall in addrconf_dad_work (5) net C done inconclusive 14 87d 1759d
INFO: rcu detected stall in tc_modify_qdisc net C done 582 19h57m 1799d 💬 13 [366d]
INFO: rcu detected stall in netlink_sendmsg (4) net C done error 38 729d 1919d
WARNING in kcm_write_msgs net C done 620 8d17h 1931d 💬 5 [334d]
KMSAN: uninit-value in eth_type_trans (2) net C 7274 1d16h 1988d 💬 5 [19d]
BUG: workqueue lockup (5) net C done 12791 7h37m 1996d
possible deadlock in __dev_queue_xmit (3) net C done inconclusive 1026 2d11h 2038d 💬 5 [366d]
WARNING in rcu_check_gp_start_stall net C done error 2599 18h26m 2322d 💬 7 [19d]
BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx_hist_sample_rtt() net C done error 7968 77d 2796d 💬 3 [2642d]
moderation (14):
Title Repro Cause bisect Fix bisect Count Last Reported Discussions
BUG: corrupted list in nsim_bpf_destroy_prog (2) net 1 5d02h 1d02h
Internal error in desc_read (3) net 1 25d 20d
KASAN: slab-use-after-free Read in rxrpc_input_call_event afs net 1 30d 26d
KCSAN: data-race in cleanup_net / synchronize_net (2) net 3 29d 28d
general protection fault in inetdev_event net 1 41d 29d
WARNING: lock held when returning to user space in netlbl_conn_setattr lsm net 1 31d 29d
KASAN: slab-out-of-bounds Read in nsim_dev_trap_report_work net 1 39d 35d
general protection fault in slip_receive_buf (2) net 1 41d 37d
BUG: corrupted list in team_priority_option_set (4) net 1 43d 39d
general protection fault in nsim_fib_event_work net 2 54d 54d
BUG: unable to handle kernel paging request in put_child (2) net 1 58d 54d
general protection fault in rt6_mtu_change_route net 3 31d 58d
KCSAN: data-race in prandom_seed / prandom_u32 net syz 612 1135d 1555d
KCSAN: data-race in data_alloc / prb_reserve net 1099 48m 1560d