Open syzbot reports by kernel subsystem
From: Eric Biggers
Date: Wed Jun 12 2019 - 03:42:39 EST
To make some sense of the huge number of open syzbot reports against the kernel
(https://syzkaller.appspot.com/upstream), I assigned a tentative kernel
subsystem(s) to most reports. I also wrote a script that assigns the reports
priorities based on some heuristics -- e.g. how recently it occurred, type of
reproducer, whether it happened in mainline, keywords in crash signature.
I personally find this really useful for my own use already. But in case it's
useful for other people too, I've listed all open bug reports below in order
from highest to lowest heuristic priority within each subsystem.
Ideally this sort of thing would be natively supported by syzbot itself, so
people don't have to dig through 500 bugs to find the ones in "their" subsystem,
or to find the ones to focus on fixing first.
I think that some kernel maintainers would also find reminders by subsystem
really helpful. For now I might send some out manually myself...
Just some ideas...
Subsystem(s) Repro Last seen Mainline Title
--------------------------------------------------------------------------------------------------------------
android/ashmem C 49 days ago yes WARNING in __vm_enough_memory
android/binder syz 10 days ago yes WARNING in binder_transaction_buffer_release
block C 10 days ago yes KASAN: use-after-free Read in debugfs_remove (3)
block C 1 days ago yes WARNING in blk_mq_sched_free_requests
block C 1 days ago yes WARNING in generic_make_request_checks
block C 4 days ago yes WARNING in md_ioctl
block 1 days ago yes KASAN: use-after-free Read in relay_switch_subbuf
block C 188 days ago yes KMSAN: kernel-infoleak in copy_page_to_iter (2)
block 96 days ago yes KASAN: use-after-free Read in disk_map_sector_rcu
block 58 days ago yes general protection fault in debugfs_remove
block 47 days ago yes general protection fault in relay_close_buf
block 138 days ago yes general protection fault in relay_switch_subbuf
bluetooth C 2 days ago yes KASAN: use-after-free Read in kfree_skb (3)
bluetooth C 1 days ago yes WARNING: refcount bug in kobject_get
bluetooth C 2 days ago yes general protection fault in skb_put
bluetooth C 1 days ago yes BUG: MAX_LOCKDEP_CHAIN_HLOCKS too low!
bluetooth C 1 days ago yes WARNING in tty_set_termios
bluetooth C 5 days ago yes general protection fault in kernfs_add_one
bluetooth C 1 days ago yes WARNING in kernfs_get
bluetooth C 10 days ago yes memory leak in get_device_parent
bluetooth C 18 days ago yes memory leak in bcsp_recv
bluetooth C 158 days ago yes KASAN: use-after-free Write in hci_sock_release
bluetooth C 41 days ago yes KASAN: slab-out-of-bounds Read in bacpy
bluetooth C 34 days ago yes WARNING: ODEBUG bug in rfcomm_dlc_free
bluetooth C 82 days ago yes BUG: unable to handle kernel NULL pointer dereference in hci_uart_set_flow_control
bluetooth C 45 days ago yes KMSAN: uninit-value in hci_event_packet
bluetooth 4 days ago yes KASAN: use-after-free Read in rfcomm_dlc_exists
bluetooth C 120 days ago yes general protection fault in qca_setup
bluetooth C 155 days ago yes KASAN: slab-out-of-bounds Read in hci_event_packet
bluetooth 39 days ago yes KASAN: use-after-free Read in hci_cmd_timeout
bluetooth 22 days ago KASAN: use-after-free Read in rfcomm_dlc_open (2)
bluetooth 175 days ago yes KASAN: use-after-free Read in kernfs_put
bluetooth 40 days ago general protection fault in rfcomm_dlc_open
bluetooth 40 days ago general protection fault in rfcomm_dlc_exists
bluetooth 57 days ago yes WARNING in kernfs_activate
bluetooth 54 days ago yes INFO: trying to register non-static key in hci_uart_send_frame
bluetooth 86 days ago yes WARNING in lockdep_register_key
bluetooth 115 days ago yes WARNING: ODEBUG bug in hci_uart_tty_close
bluetooth 119 days ago general protection fault in idr_remove
bluetooth 121 days ago yes INFO: trying to register non-static key in hci_uart_flush
crypto C 3 days ago yes INFO: task hung in aead_recvmsg
fs/9p C 7 days ago yes memory leak in v9fs_cache_session_get_cookie
fs/9p syz 41 days ago yes WARNING: refcount bug in p9_req_put
fs/9p C 303 days ago yes KASAN: use-after-free Read in p9_fd_poll
fs/9p C 300 days ago yes KASAN: use-after-free Read in ep_scan_ready_list
fs/9p C 299 days ago yes KASAN: use-after-free Read in p9_conn_cancel
fs/9p C 298 days ago yes KASAN: use-after-free Read in __queue_work (2)
fs/9p C 43 days ago yes INFO: task hung in iterate_supers
fs/9p C 40 days ago yes INFO: task hung in flush_work
fs/9p syz 62 days ago yes BUG: corrupted list in p9_read_work (2)
fs/9p C 315 days ago KASAN: use-after-free Read in generic_perform_write
fs/9p C 317 days ago yes general protection fault in p9_conn_cancel
fs/9p C 336 days ago yes KMSAN: uninit-value in unix_find_other
fs/9p C 334 days ago yes KMSAN: uninit-value in p9_client_rpc
fs/9p C 298 days ago yes WARNING: ODEBUG bug in p9_fd_close
fs/9p C 260 days ago yes BUG: corrupted list in p9_write_work
fs/9p C 237 days ago yes BUG: corrupted list in p9_conn_cancel
fs/9p C 258 days ago general protection fault in p9_client_prepare_req
fs/9p syz 330 days ago general protection fault in do_raw_spin_unlock
fs/bfs C 437 days ago yes KASAN: slab-out-of-bounds Read in find_first_zero_bit
fs/btrfs 3 days ago yes kernel BUG at fs/btrfs/volumes.c:LINE!
fs/btrfs 40 days ago yes invalid opcode in close_fs_devices
fs/btrfs 129 days ago yes general protection fault in btrfs_scan_one_device
fs/ext4,kernel/perf C 4 days ago yes INFO: rcu detected stall in ext4_file_write_iter
fs/ext4,kernel/perf C 4 days ago yes INFO: rcu detected stall in sys_sendfile64 (2)
fs/ext4 C 1 days ago yes WARNING in ext4_set_page_dirty
fs/ext4 C 98 days ago yes possible deadlock in __generic_file_fsync
fs/ext4 C 168 days ago yes possible deadlock in flush_workqueue (2)
fs/ext4 44 days ago yes KASAN: use-after-free Read in ext4_xattr_set_entry (2)
fs/ext4 44 days ago yes general protection fault in ext4_mb_initialize_context
fs/ext4 55 days ago yes KASAN: slab-out-of-bounds Write in __ext4_expand_extra_isize
fs/ext4 143 days ago yes KASAN: use-after-free Read in ext4_data_block_valid
fs/ext4 128 days ago yes INFO: task hung in ext4_file_write_iter
fs/ext4 107 days ago yes WARNING in ext4_dio_get_block_overwrite
fs/fat 2 days ago yes kernel BUG at fs/buffer.c:LINE!
fs/fuse C 2 days ago yes possible deadlock in free_ioctx_users
fs/fuse C 39 days ago yes WARNING in __device_add_disk
fs/fuse C 312 days ago yes KASAN: slab-out-of-bounds Write in end_requests
fs/fuse C 224 days ago yes WARNING in request_end
fs/fuse C 311 days ago yes INFO: task hung in fuse_reverse_inval_entry
fs/fuse C 153 days ago WARNING in ep_poll_callback
fs/gfs2 C 437 days ago yes WARNING in account_page_dirtied
fs/hfs C 394 days ago yes general protection fault in hfs_find_init
fs/hfs C 435 days ago yes kernel BUG at fs/hfs/inode.c:LINE!
fs/hfs C 434 days ago yes WARNING in hfs_bnode_create
fs/hfs C 417 days ago yes possible deadlock in hfs_find_init
fs/nfs C 1 days ago yes memory leak in nfs_get_client
fs/ntfs C 433 days ago yes KASAN: use-after-free Read in ntfs_read_locked_inode
fs/ntfs 1 days ago yes WARNING: bad unlock balance in rcu_core
fs/ntfs C 435 days ago yes KASAN: slab-out-of-bounds Read in ntfs_attr_find
fs/ntfs C 418 days ago yes kernel BUG at fs/ntfs/aops.c:LINE!
fs/overlayfs C 9 days ago yes possible deadlock in mnt_want_write
fs/overlayfs C 45 days ago yes WARNING in ovl_rename
fs/overlayfs C 35 days ago yes possible deadlock in pipe_lock (2)
fs/overlayfs C 44 days ago yes possible deadlock in path_openat
fs/overlayfs 6 days ago yes possible deadlock in seq_read (2)
fs/overlayfs 17 days ago yes possible deadlock in lookup_slow
fs/overlayfs 25 days ago yes possible deadlock in lock_trace (2)
fs/overlayfs 49 days ago yes possible deadlock in do_io_accounting (2)
fs/reiserfs C 170 days ago yes KASAN: use-after-free Read in blkdev_get
fs/reiserfs C 382 days ago yes BUG: unable to handle kernel paging request in cleanup_bitmap_list
fs/reiserfs syz 417 days ago yes kernel BUG at fs/reiserfs/journal.c:LINE!
fs/reiserfs C 418 days ago yes WARNING in unlock_new_inode
fs/reiserfs 50 days ago yes kernel BUG at fs/reiserfs/lock.c:LINE!
fs/xfs C 113 days ago yes INFO: task hung in xlog_grant_head_check
gpu C 1 days ago yes WARNING in vkms_vblank_simulate
hid syz 4 days ago yes INFO: task hung in fsnotify_connector_destroy_workfn (2)
input syz 231 days ago yes INFO: task hung in evdev_release
isdn C 1 days ago yes KMSAN: uninit-value in capi_write
isdn 126 days ago yes KASAN: use-after-free Read in dev_expire_timer
isdn 102 days ago yes BUG: spinlock bad magic in flush_workqueue_prep_pwqs
kernel C 0 days ago yes BUG: MAX_STACK_TRACE_ENTRIES too low! (2)
kernel C 33 days ago WARNING in cgroup_exit
kernel syz 89 days ago yes KASAN: out-of-bounds Read in unwind_next_frame
kernel C 97 days ago yes WARNING in task_participate_group_stop (2)
kernel 54 days ago yes WARNING in lockdep_unregister_key (2)
kernel/cgroup C 7 days ago yes WARNING in cgroup_apply_control_enable
kernel/cgroup C 2 days ago KASAN: slab-out-of-bounds Read in css_task_iter_advance
kernel/cgroup 1 days ago KASAN: use-after-free Read in css_task_iter_advance
kernel/exec C 188 days ago yes WARNING: syz-executor still has locks held!
fs/ext4,kernel/perf C 4 days ago yes INFO: rcu detected stall in ext4_file_write_iter
fs/ext4,kernel/perf C 4 days ago yes INFO: rcu detected stall in sys_sendfile64 (2)
kernel/perf C 2 days ago yes WARNING in perf_group_attach
kernel/perf C 2 days ago yes INFO: task hung in __do_page_fault (2)
kernel/perf syz 3 days ago yes INFO: task hung in do_exit
kernel/perf C 100 days ago yes KASAN: use-after-free Write in _free_event
kernel/perf syz 54 days ago yes KASAN: use-after-free Read in refcount_sub_and_test_checked (2)
kernel/perf C 39 days ago yes KASAN: stack-out-of-bounds Read in update_stack_state
kernel/perf C 80 days ago yes WARNING in arch_install_hw_breakpoint
kernel/perf 1 days ago yes general protection fault in perf_tp_event
kernel/perf syz 53 days ago yes WARNING: ODEBUG bug in __do_softirq
kernel/perf C 116 days ago yes KASAN: use-after-free Read in uprobe_perf_close
kernel/perf 1 days ago yes WARNING in tracepoint_probe_register_prio (3)
kernel/perf syz 61 days ago yes INFO: rcu detected stall in __perf_sw_event
kernel/perf C 244 days ago yes WARNING in event_function_local
kernel/perf 64 days ago yes INFO: task hung in uprobe_start_dup_mmap
kernel/perf 177 days ago yes possible deadlock in perf_trace_destroy (3)
kernel/perf 152 days ago yes possible deadlock in percpu_down_write
kernel/perf 144 days ago yes possible deadlock in uprobe_clear_state
kvm C 51 days ago yes KASAN: use-after-free Read in do_general_protection
kvm C 9 days ago yes unexpected kernel reboot (3)
kvm C 95 days ago yes KASAN: use-after-free Read in __schedule (2)
kvm C 263 days ago yes KASAN: use-after-free Write in preempt_notifier_register (2)
kvm syz 100 days ago yes BUG: unable to handle kernel paging request in mmu_page_zap_pte
kvm C 98 days ago yes KMSAN: uninit-value in vmx_queue_exception
kvm syz 45 days ago yes BUG: soft lockup in kvm_vm_ioctl
kvm syz 189 days ago yes KASAN: use-after-free Read in kvm_write_guest_offset_cached
kvm syz 95 days ago BUG: unable to handle kernel paging request in __kvm_mmu_prepare_zap_page
kvm C 312 days ago yes BUG: unable to handle kernel paging request in vmx_vcpu_run
kvm syz 54 days ago yes WARNING in kvm_arch_vcpu_ioctl_run (3)
kvm syz 44 days ago yes INFO: rcu detected stall in kvm_vcpu_ioctl
kvm C 261 days ago yes general protection fault in __schedule (2)
kvm syz 187 days ago yes general protection fault in kvm_pv_send_ipi
kvm C 153 days ago yes WARNING in mmu_spte_clear_track_bits (2)
kvm C 234 days ago yes BUG: sleeping function called from invalid context at arch/x86/mm/fault.c:LINE (2)
kvm syz 218 days ago yes BUG: spinlock cpu recursion on CPU, syz-executor
kvm syz 118 days ago yes BUG: soft lockup in kvm_vm_release
kvm C 507 days ago yes WARNING in x86_emulate_insn
kvm C 319 days ago yes WARNING: kernel stack regs has bad value (2)
kvm syz 275 days ago yes INFO: rcu detected stall in vcpu_enter_guest
kvm 56 days ago yes BUG: unable to handle kernel paging request in init_srcu_struct_fields
kvm C 308 days ago WARNING in kvm_set_tsc_khz
kvm 95 days ago kernel BUG at arch/x86/kvm/x86.c:LINE! (3)
kvm 143 days ago yes WARNING in _cleanup_srcu_struct
kvm 106 days ago yes WARNING: kernel stack regs has bad 'bp' value (4)
loop C 39 days ago yes WARNING in notify_change
loop C 190 days ago yes WARNING in mark_buffer_dirty
media C 1 days ago yes KASAN: use-after-free Read in v4l2_release
usb,media C 1 days ago yes general protection fault in flexcop_usb_probe
media C 5 days ago yes KASAN: use-after-free Read in v4l2_fh_init
media C 1 days ago yes WARNING in __vb2_queue_cancel
media C 9 days ago yes KASAN: null-ptr-deref Read in refcount_sub_and_test_checked (2)
media C 10 days ago yes KASAN: use-after-free Read in v4l2_ioctl
usb,media C 2 days ago yes KMSAN: uninit-value in sd_init
media C 3 days ago yes WARNING in vb2_core_reqbufs
usb,media C 1 days ago yes WARNING in __flush_work (3)
usb,media C 1 days ago yes WARNING in spi_register_controller
media C 6 days ago yes KASAN: slab-out-of-bounds Read in technisat_usb2_rc_query
media,usb C 5 days ago yes INFO: trying to register non-static key in mxl111sf_ctrl_msg
media C 222 days ago yes KASAN: use-after-free Write in __vb2_cleanup_fileio
media syz 94 days ago yes BUG: unable to handle kernel paging request in tpg_fill_plane_buffer
usb,media 2 days ago yes BUG: unable to handle kernel paging request in au0828_usb_disconnect
media C 168 days ago yes general protection fault in vb2_mmap
media 10 days ago yes KASAN: use-after-free Write in v4l2_prio_close
media 6 days ago yes KASAN: use-after-free Read in __video_do_ioctl
media 33 days ago yes KASAN: use-after-free Write in v4l2_device_release
media C 222 days ago yes INFO: task hung in vivid_stop_generating_vid_cap
media C 173 days ago yes WARNING in dma_buf_vunmap
media C 168 days ago yes possible deadlock in v4l2_release
media 42 days ago yes KASAN: use-after-free Read in v4l2_fh_del
media 129 days ago yes divide error in vivid_thread_vid_cap
mm C 132 days ago KASAN: null-ptr-deref Read in reclaim_high
mm 9 days ago yes kernel BUG at mm/huge_memory.c:LINE!
mm syz 125 days ago yes WARNING in untrack_pfn
mm 54 days ago yes WARNING: locking bug in split_huge_page_to_list
mm 80 days ago yes kernel BUG at mm/internal.h:LINE!
mm 66 days ago yes kernel BUG at mm/page_alloc.c:LINE!
mm 131 days ago yes possible deadlock in userfaultfd_ctx_read
mm/shmem 49 days ago yes KASAN: use-after-free Read in shmem_fault
vfs,mm/userfaultfd C 1 days ago yes possible deadlock in io_submit_one
vfs/aio,mm/userfaultfd C 26 days ago yes possible deadlock in userfaultfd_release
mm/userfaultfd C 130 days ago yes possible deadlock in aio_poll
usb,net C 1 days ago yes KASAN: use-after-free Read in usb_kill_anchored_urbs
net C 1 days ago yes memory leak in nf_hook_entries_grow
net C 1 days ago yes KMSAN: uninit-value in bcmp
usb,net C 1 days ago yes KMSAN: uninit-value in ax88772_bind
net C 0 days ago yes KMSAN: uninit-value in bond_start_xmit (2)
net C 2 days ago yes memory leak in start_sync_thread
net C 1 days ago yes BUG: Bad rss-counter state (3)
net C 0 days ago yes kernel BUG at net/core/skbuff.c:LINE! (3)
net C 3 days ago yes KMSAN: uninit-value in ip6_parse_tlv
net C 0 days ago yes unregister_netdevice: waiting for DEV to become free (2)
usb,net C 0 days ago yes WARNING in rollback_registered_many (2)
net syz 1 days ago yes INFO: trying to register non-static key in __icmp_send
net C 76 days ago yes KASAN: use-after-free Write in skb_release_data (2)
net syz 1 days ago general protection fault in ip6_dst_lookup_tail (2)
net syz 58 days ago yes WARNING: refcount bug in igmp_start_timer
net C 17 days ago yes INFO: task hung in addrconf_dad_work
net syz 11 days ago yes WARNING in xt_compat_add_offset
net syz 22 days ago yes WARNING: ODEBUG bug in del_timer (3)
net 2 days ago yes KASAN: use-after-free Read in tcp_sk_exit
net C 52 days ago yes KMSAN: uninit-value in do_ip_vs_set_ctl
net C 45 days ago yes KMSAN: uninit-value in __dev_mc_del
net C 43 days ago yes KMSAN: uninit-value in __netif_receive_skb_core
net C 39 days ago yes WARNING: locking bug in lock_sock_nested
net 1 days ago yes KASAN: null-ptr-deref Read in ip6_hold_safe
net C 149 days ago yes KASAN: use-after-free Read in tick_sched_handle (3)
net C 98 days ago yes KMSAN: uninit-value in gre_rcv (2)
net C 62 days ago yes KMSAN: uninit-value in __dev_mc_add
net 5 days ago yes KASAN: use-after-free Read in ila_nf_input
net 2 days ago yes general protection fault in gro_cells_destroy
net 2 days ago yes KASAN: slab-out-of-bounds Read in ip6_hold_safe
net 2 days ago kernel panic: stack is corrupted in __lock_acquire (4)
net 5 days ago yes general protection fault in rt_cache_valid
net 3 days ago yes kernel BUG at net/ipv6/route.c:LINE! (2)
net syz 77 days ago yes WARNING: bad unlock balance detected! (3)
net C 359 days ago yes KMSAN: uninit-value in IP6_ECN_decapsulate
net C 280 days ago yes KMSAN: uninit-value in strlcpy (2)
net C 204 days ago yes KMSAN: uninit-value in ip_rcv_core
net C 198 days ago yes KASAN: slab-out-of-bounds Read in ip6_tnl_parse_tlv_enc_lim
net C 197 days ago KASAN: out-of-bounds in update_curr
net C 188 days ago yes KMSAN: uninit-value in sit_tunnel_xmit
net C 114 days ago yes INFO: task hung in rtnetlink_rcv_msg
net C 142 days ago yes kernel BUG at net/ipv4/ip_output.c:LINE!
net 11 days ago yes KASAN: slab-out-of-bounds Read in tcp_sk_exit
net 10 days ago yes KASAN: user-memory-access Write in dst_release
net 4 days ago yes INFO: task hung in unregister_netdevice_notifier (3)
net 11 days ago KASAN: null-ptr-deref Write in dst_release
net C 434 days ago yes possible deadlock in sch_direct_xmit
net C 416 days ago yes INFO: task hung in do_ip_vs_set_ctl (2)
net C 406 days ago yes WARNING in tcp_enter_loss (2)
net C 296 days ago yes inconsistent lock state in ila_xlat_nl_cmd_del_mapping
net 13 days ago BUG: unable to handle kernel paging request in dst_dev_put
net syz 296 days ago yes inconsistent lock state in ila_xlat_nl_cmd_add_mapping
net syz 201 days ago yes WARNING in csum_and_copy_to_iter
net syz 112 days ago yes INFO: trying to register non-static key in icmp_send
net 13 days ago general protection fault in __sock_release (2)
net 11 days ago KASAN: slab-out-of-bounds Read in fib6_rule_lookup (2)
net 9 days ago KASAN: slab-out-of-bounds Read in fib6_purge_rt (2)
net 2 days ago general protection fault in fib6_purge_rt (2)
net 2 days ago general protection fault in dev_get_by_index_rcu
net 33 days ago yes KASAN: slab-out-of-bounds Read in page_get_anon_vma
net 98 days ago yes KASAN: use-after-free Read in icmp_sk_exit
net C 169 days ago possible deadlock in neigh_change_state
net 3 days ago general protection fault in fib6_nh_init
net 3 days ago general protection fault in tcp_v6_connect
net 44 days ago KASAN: wild-memory-access Write in fib6_purge_rt
net 31 days ago general protection fault in ipv6_rcv
net 2 days ago KASAN: user-memory-access Write in fib6_purge_rt (2)
net syz 119 days ago WARNING: locking bug in try_to_grab_pending
net 23 days ago yes possible deadlock in sk_diag_fill
net 23 days ago yes possible deadlock in bond_get_stats (2)
net 97 days ago yes general protection fault in __queue_work
net 72 days ago KASAN: use-after-free Read in ip_tunnel_lookup
net 99 days ago yes KASAN: slab-out-of-bounds Read in ip_send_unicast_reply
net 7 days ago KASAN: slab-out-of-bounds Read in icmpv6_xrlim_allow
net 3 days ago WARNING: locking bug in udpv6_pre_connect
net 3 days ago WARNING: locking bug in icmp6_send (2)
net 77 days ago yes BUG: spinlock bad magic in __queue_work
net 48 days ago yes WARNING in remove_proc_entry (2)
net 38 days ago yes WARNING in __static_key_slow_dec_cpuslocked
net 89 days ago general protection fault in ip6_dst_hoplimit
net 141 days ago KASAN: use-after-free Read in do_raw_spin_trylock
net 92 days ago yes possible deadlock in genl_rcv (2)
net 83 days ago yes possible deadlock in skb_queue_tail
net 55 days ago INFO: rcu detected stall in gc_worker
net 52 days ago WARNING in fib6_add (2)
net 104 days ago yes KASAN: slab-out-of-bounds Read in dst_dev_put
net 88 days ago possible deadlock in dev_uc_sync_multiple
net 75 days ago possible deadlock in __dev_queue_xmit (2)
net/ax25 1 days ago yes general protection fault in ax25_send_frame
net/ax25 syz 48 days ago yes KASAN: stack-out-of-bounds Write in ax25_getname
net/ax25 155 days ago general protection fault in ax25_send_control
net/ax25 81 days ago inconsistent lock state in ax25_std_heartbeat_expiry
net/batman-adv C 1 days ago yes memory leak in batadv_tvlv_handler_register
net/bpf syz 1 days ago yes KASAN: use-after-free Read in sk_psock_unlink
net/bpf C 1 days ago yes WARNING in bpf_jit_free
net/bpf syz 3 days ago yes BUG: unable to handle kernel paging request in bpf_prog_kallsyms_add
net/bpf syz 1 days ago yes KASAN: slab-out-of-bounds Read in class_equal
net/bpf C 1 days ago yes WARNING: kernel stack frame pointer has bad value (2)
net/bpf syz 4 days ago yes KASAN: slab-out-of-bounds Read in usage_accumulate
net/bpf syz 1 days ago yes WARNING in bpf_prog_kallsyms_find
net/bpf syz 7 days ago yes general protection fault in rb_erase (2)
net/bpf syz 6 days ago yes KASAN: slab-out-of-bounds Read in corrupted (2)
net/bpf syz 40 days ago yes KASAN: use-after-free Read in bpf_prog_kallsyms_add
net/bpf syz 12 days ago yes memory leak in sock_hash_update_common
net/bpf syz 4 days ago general protection fault in mm_update_next_owner
net/bpf C 231 days ago yes KASAN: use-after-free Read in psock_map_pop
net/bpf syz 161 days ago yes KASAN: use-after-free Read in bpf_prog_kallsyms_del
net/bpf C 324 days ago yes general protection fault in smap_list_hash_remove
net/bpf C 291 days ago yes general protection fault in bpf_tcp_close (2)
net/bpf C 316 days ago yes KASAN: slab-out-of-bounds Read in sock_hash_ctx_update_elem
net/bpf syz 130 days ago BUG: unable to handle kernel paging request in bpf_prog_kallsyms_find
net/bpf C 264 days ago yes WARNING: suspicious RCU usage in trace_call_bpf
net/bpf syz 159 days ago yes WARNING in bpf_prog_kallsyms_add
net/bpf 13 days ago WARNING in bpf_base_func_proto
net/bpf 44 days ago INFO: rcu detected stall in sys_bpf
net/dccp C 32 days ago yes KASAN: use-after-free Read in ccid2_hc_tx_packet_recv
net/dccp C 25 days ago yes KASAN: use-after-free Read in ccid_hc_tx_delete
net/dccp C 31 days ago yes BUG: please report to dccp@xxxxxxxxxxxxxxx => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx_hist_sample_rtt()
net/dccp C 417 days ago yes KMSAN: uninit-value in dccp_invalid_packet
net/dccp C 493 days ago yes suspicious RCU usage at ./include/net/inet_sock.h:LINE
net/dccp C 260 days ago yes WARNING: suspicious RCU usage in pid_task
net/hsr C 1 days ago yes KMSAN: uninit-value in hsr_register_frame_in
net/hsr C 1 days ago yes WARNING in hsr_forward_skb
net/hsr C 1 days ago yes WARNING in hsr_addr_subst_dest
net/hsr C 6 days ago yes memory leak in hsr_create_self_node
net/hsr 58 days ago BUG: corrupted list in hsr_prune_nodes
net/kcm C 1 days ago yes KMSAN: uninit-value in ip_tunnel_xmit (2)
net/kcm C 2 days ago yes memory leak in rawv6_sendmsg
net/kcm C 140 days ago yes general protection fault in skb_unlink
net/kcm syz 377 days ago yes general protection fault in requeue_rx_msgs
net/l2tp syz 2 days ago yes WARNING: locking bug in do_ipv6_setsockopt
net/l2tp syz 6 days ago yes WARNING: locking bug in inet_autobind
net/llc C 1 days ago yes memory leak in llc_conn_ac_send_sabme_cmd_p_set_x
net/llc C 1 days ago yes memory leak in llc_ui_sendmsg
net/netrom C 1 days ago yes general protection fault in prepare_to_wait
net/netrom syz 10 days ago yes KASAN: use-after-free Read in lock_sock_nested
net/netrom C 11 days ago yes memory leak in nr_create
net/netrom C 15 days ago yes memory leak in nr_rx_frame
net/netrom syz 55 days ago yes KASAN: use-after-free Read in refcount_inc_not_zero_checked (2)
net/netrom syz 13 days ago yes memory leak in nr_loopback_queue
net/netrom 5 days ago KASAN: use-after-free Read in nr_release
net/pfkey 126 days ago yes WARNING in pfkey_sock_destruct
net/ppp syz 1 days ago yes memory leak in pppoe_sendmsg
net/rdma syz 1 days ago yes KASAN: use-after-free Read in rdma_listen (2)
net/rdma C 2 days ago yes WARNING: bad unlock balance in ucma_event_handler
net/rdma C 94 days ago yes KASAN: use-after-free Read in cma_cancel_operation
net/rdma syz 68 days ago yes general protection fault in rdma_listen (2)
net/rdma C 436 days ago yes KASAN: use-after-free Read in __list_del_entry_valid (4)
net/rdma C 93 days ago yes BUG: corrupted list in rdma_listen
net/rdma syz 112 days ago yes KASAN: use-after-free Read in addr_handler
net/rdma syz 80 days ago yes WARNING: bad unlock balance in ucma_destroy_id
net/rdma 82 days ago yes KASAN: use-after-free Read in addr_resolve
net/rdma 69 days ago KASAN: use-after-free Read in rdma_bind_addr
net/rdma 105 days ago yes KASAN: slab-out-of-bounds Read in rdma_listen
net/rds C 2 days ago yes general protection fault in rds_recv_rcvbuf_delta
net/rds 71 days ago yes KASAN: use-after-free Read in rds_cong_queue_updates (2)
net/rds 68 days ago yes KASAN: slab-out-of-bounds Read in rds_cong_queue_updates (2)
net/rose C 1 days ago yes general protection fault in rose_send_frame
net/rose 10 days ago INFO: rcu detected stall in rose_connect
net/rose 5 days ago INFO: rcu detected stall in rose_loopback_timer (2)
net/rxrpc C 22 days ago yes general protection fault in rxrpc_connect_call
net/rxrpc 19 days ago yes WARNING: locking bug in flush_workqueue_prep_pwqs
net/sctp C 2 days ago yes memory leak in sctp_stream_init_ext
net/sctp C 6 days ago yes memory leak in sctp_get_port_local
net/sctp C 11 days ago yes memory leak in sctp_send_reset_streams
net/sctp C 10 days ago yes memory leak in sctp_v6_create_accept_sk
net/sctp syz 57 days ago yes KASAN: use-after-free Read in __lock_sock
net/sctp C 89 days ago general protection fault in sctp_sched_dequeue_common (2)
net/sctp 10 days ago yes KASAN: slab-out-of-bounds Read in rt_cache_valid
net/sctp 4 days ago KASAN: use-after-free Read in ip6_hold_safe (3)
net/sctp 1 days ago KASAN: user-memory-access Read in ip6_hold_safe (3)
net/sctp 6 days ago BUG: unable to handle kernel paging request in sctp_v6_get_dst
net/sctp 5 days ago general protection fault in sctp_v6_get_dst (2)
net/sctp 78 days ago BUG: unable to handle kernel paging request in dst_release (2)
net/sctp 57 days ago KASAN: slab-out-of-bounds Read in fib6_rule_action
net/sctp 116 days ago general protection fault in reuseport_add_sock
net/smc C 1 days ago yes WARNING in smc_unhash_sk (2)
net/smc C 1 days ago yes WARNING: ODEBUG bug in __sk_destruct
net/smc C 174 days ago yes general protection fault in inet_accept
net/smc syz 147 days ago yes general protection fault in __smc_diag_dump
net/strparser syz 121 days ago yes WARNING in strp_done (2)
net/sunrpc 27 days ago linux-next test error: WARNING in remove_proc_entry
net/tipc C 1 days ago yes general protection fault in dst_dev_put (2)
net/tipc syz 4 days ago yes KASAN: use-after-free Read in rt_cache_valid
net/tipc C 2 days ago yes memory leak in tipc_buf_acquire
net/tipc syz 1 days ago yes INFO: task hung in genl_rcv_msg
net/tipc syz 2 days ago yes INFO: task hung in ctrl_getfamily
net/tipc C 10 days ago yes WARNING: locking bug in __queue_work
net/tipc C 21 days ago yes KASAN: slab-out-of-bounds Read in rhashtable_walk_enter
net/tipc C 21 days ago yes BUG: spinlock bad magic in rhashtable_walk_enter
net/tipc syz 5 days ago yes KMSAN: uninit-value in __tipc_nl_bearer_enable
net/tipc C 21 days ago yes WARNING: locking bug in rhashtable_walk_enter
net/tipc C 92 days ago yes general protection fault in __bfs (2)
net/tipc C 15 days ago yes INFO: task hung in netdev_run_todo
net/tipc syz 34 days ago yes KASAN: slab-out-of-bounds Read in ip_append_data
net/tipc syz 182 days ago yes inconsistent lock state in icmp_send
net/tipc 2 days ago BUG: unable to handle kernel paging request in iptunnel_xmit
net/tipc 24 days ago general protection fault in rhashtable_walk_enter
net/tipc 25 days ago BUG: corrupted list in proto_register
net/tipc 173 days ago general protection fault in ip6_route_output_flags
net/tipc 146 days ago INFO: rcu detected stall in tipc_disc_timeout
net/tipc 126 days ago INFO: task hung in tipc_bcast_stop
net/tls C 1 days ago yes KASAN: use-after-free Read in tls_write_space
net/tls C 1 days ago yes kernel BUG at include/linux/scatterlist.h:LINE!
net/tls C 1 days ago yes KMSAN: uninit-value in gf128mul_4k_lle (3)
net/tls C 2 days ago yes INFO: task hung in tls_sw_free_resources_tx
net/tls C 1 days ago yes INFO: task hung in __flush_work
net/tls C 4 days ago yes WARNING in sk_stream_kill_queues (3)
net/tls syz 4 days ago yes memory leak in create_ctx
net/tls C 29 days ago yes kernel BUG at include/linux/mm.h:LINE! (5)
net/tls C 152 days ago yes KASAN: use-after-free Read in crypto_gcm_init_common
net/tls C 133 days ago yes KASAN: use-after-free Read in generic_gcmaes_encrypt
net/tls syz 263 days ago yes general protection fault in tcp_cleanup_ulp
net/tls C 259 days ago KASAN: slab-out-of-bounds Read in tls_write_space
net/tls 2 days ago KASAN: use-after-free Read in timer_is_static_object (2)
net/tls 25 days ago KASAN: use-after-free Read in tls_push_sg
net/tls 20 days ago yes WARNING: ODEBUG bug in tls_sw_free_resources_tx
net/tls 31 days ago INFO: task hung in tls_sw_sendmsg
usb,net/wireless C 1 days ago yes general protection fault in ath6kl_usb_alloc_urb_from_pipe
usb,net/wireless C 1 days ago yes KMSAN: uninit-value in rt2500usb_bbp_read
net/wireless C 2 days ago yes memory leak in kobject_set_name_vargs
usb,net/wireless C 1 days ago yes WARNING: ODEBUG bug in rsi_probe
usb,net/wireless C 1 days ago yes WARNING in ar5523_submit_rx_cmd/usb_submit_urb
usb,net/wireless C 1 days ago yes WARNING: ath10k USB support is incomplete, don't expect anything to work!
usb,net/wireless C 1 days ago yes INFO: trying to register non-static key in del_timer_sync (2)
usb,net/wireless C 1 days ago yes WARNING in zd_mac_clear
usb,net/wireless C 0 days ago yes INFO: trying to register non-static key in rtl_c2hcmd_launcher
usb,net/wireless C 3 days ago yes WARNING in submit_rx_urb/usb_submit_urb
net/x25 C 2 days ago yes memory leak in lapb_register
net/x25 1 days ago KASAN: null-ptr-deref Read in x25_connect
net/x25 18 days ago general protection fault in refcount_sub_and_test_checked
net/x25 3 days ago general protection fault in x25_connect
net/x25 112 days ago KASAN: use-after-free Read in x25_write_internal
net/x25 110 days ago INFO: rcu detected stall in x25_connect
net/xfrm C 63 days ago yes general protection fault in get_work_pool
net/xfrm C 438 days ago yes KASAN: use-after-free Read in _decode_session4
net/xfrm C 210 days ago yes KASAN: use-after-free Read in _decode_session6
net/xfrm C 203 days ago yes KASAN: slab-out-of-bounds Read in _decode_session6 (2)
net/xfrm syz 40 days ago yes WARNING in xfrm_policy_fini
net/xfrm C 83 days ago WARNING: suspicious RCU usage in xfrm_get_sadinfo
net/xfrm C 83 days ago WARNING: suspicious RCU usage in xfrm_get_spdinfo
net/xfrm C 83 days ago WARNING: suspicious RCU usage in xfrm_alloc_userspi
net/xfrm C 226 days ago yes KMSAN: uninit-value in _decode_session6
net/xfrm C 156 days ago yes KMSAN: uninit-value in xfrm_state_find
net/xfrm C 152 days ago yes KMSAN: uninit-value in _decode_session4
net/xfrm C 133 days ago yes KASAN: stack-out-of-bounds Read in xfrm_state_find (5)
net/xfrm 33 days ago KASAN: use-after-free Write in xfrm_hash_rebuild
net/xfrm 30 days ago KASAN: use-after-free Write in __xfrm_policy_unlink (2)
net/xfrm syz 84 days ago WARNING: suspicious RCU usage in xfrm_get_policy
net/xfrm syz 453 days ago general protection fault in xfrm_init_replay
net/xfrm C 197 days ago yes WARNING in xfrm_policy_insert
net/xfrm 11 days ago yes WARNING in __vunmap
net/xfrm 11 days ago yes INFO: rcu detected stall in pppol2tp_sendmsg
net/xfrm 18 days ago yes INFO: rcu detected stall in igmp_ifc_timer_expire
net/xfrm 57 days ago KASAN: use-after-free Read in xfrm_sk_policy_lookup (2)
net/xfrm 59 days ago general protection fault in xfrm_lookup_with_ifid
net/xfrm 116 days ago yes general protection fault in __vunmap
net/xfrm 155 days ago general protection fault in ipcomp_init_state
net/xfrm 106 days ago general protection fault in __xfrm_policy_check
net/xfrm 103 days ago general protection fault in xfrmi_rcv_cb
net/xfrm 133 days ago INFO: rcu detected stall in inet_dgram_connect
rtc C 2 days ago yes BUG: workqueue lockup (4)
security/apparmor C 35 days ago yes INFO: rcu detected stall in rw_verify_area
security/ima C 8 days ago possible deadlock in get_user_pages_unlocked (2)
security/ima C 8 days ago yes possible deadlock in process_measurement
security/ima C 91 days ago yes INFO: task hung in process_measurement
security/ima C 7 days ago possible deadlock in __do_page_fault (2)
security/smack syz 240 days ago yes possible deadlock in ext4_evict_inode
security/tomoyo syz 7 days ago yes KASAN: use-after-free Read in tomoyo_realpath_from_path
security/tomoyo 15 days ago KASAN: invalid-free in tomoyo_realpath_from_path
sound C 16 days ago yes WARNING: proc registration bug in snd_info_card_register
sound,usb syz 4 days ago yes WARNING in snd_usb_motu_microbookii_communicate/usb_submit_urb
sound C 107 days ago yes KASAN: slab-out-of-bounds Write in default_read_copy_kernel
sound syz 45 days ago yes INFO: rcu detected stall in snd_seq_write
sound 42 days ago yes KASAN: use-after-free Write in check_and_subscribe_port
sound 89 days ago yes KASAN: use-after-free Read in wake_up_if_idle
sound 16 days ago yes WARNING: suspicious RCU usage in line6_pcm_acquire
sound 168 days ago yes KASAN: use-after-free Read in delete_and_unsubscribe_port
sound 58 days ago KASAN: slab-out-of-bounds Read in linear_transfer (2)
sound 83 days ago yes INFO: task hung in snd_seq_write
tty C 0 days ago yes possible deadlock in console_unlock
tty C 47 days ago yes BUG: unable to handle kernel paging request in slhc_free
tty syz 7 days ago yes memory leak in cfserl_create
unknown C 10 days ago yes memory leak in proc_register
unknown C 35 days ago yes possible deadlock in down_trylock (2)
unknown syz 55 days ago yes BUG: unable to handle kernel paging request in free_block (5)
unknown 2 days ago yes KASAN: use-after-free Read in blkcg_print_stat
unknown 9 days ago linux-next boot error: WARNING: workqueue cpumask: online intersect > possible intersect
unknown 1 days ago yes BUG: MAX_LOCKDEP_CHAINS too low!
unknown C 233 days ago yes kernel BUG at fs/block_dev.c:LINE!
unknown C 79 days ago yes INFO: rcu detected stall in do_idle
unknown 1 days ago yes possible deadlock in userfaultfd_read (2)
unknown C 261 days ago yes general protection fault in finish_task_switch (2)
unknown 17 days ago yes KASAN: use-after-free Read in dst_dev_put
unknown C 162 days ago yes WARNING in enqueue_task_dl
unknown C 109 days ago yes WARNING in rcu_check_gp_start_stall
unknown syz 172 days ago yes general protection fault in put_pid
unknown C 334 days ago yes BUG: MAX_LOCK_DEPTH too low! (2)
unknown C 334 days ago general protection fault in propagate_entity_cfs_rq
unknown syz 149 days ago yes BUG: unable to handle kernel NULL pointer dereference in __do_softirq
unknown C 283 days ago yes WARNING: suspicious RCU usage (4)
unknown 2 days ago KASAN: use-after-free Read in register_shrinker_prepared
unknown 7 days ago yes WARNING in cleanup_mnt
unknown 2 days ago WARNING: refcount bug in css_task_iter_next
unknown syz 191 days ago yes WARNING in blkdev_put
unknown 62 days ago yes KASAN: use-after-free Read in page_get_anon_vma
unknown 33 days ago yes INFO: rcu detected stall in try_check_zero
unknown 45 days ago yes WARNING in zap_class
unknown 85 days ago yes kernel BUG at include/linux/page-flags.h:LINE!
unknown 77 days ago yes possible deadlock in static_key_slow_dec
unknown 63 days ago yes INFO: task hung in __x64_sys_io_destroy
unknown 176 days ago yes KASAN: slab-out-of-bounds Read in perf_exclude_event
unknown 149 days ago yes BUG: Bad page map (3)
unknown 177 days ago yes INFO: task hung in vfs_setxattr
unknown 172 days ago yes possible deadlock in ep_free
unknown 165 days ago yes inconsistent lock state in fs_reclaim_acquire (2)
unknown 161 days ago yes WARNING in handle_irq (3)
unknown 157 days ago yes possible deadlock in fs_reclaim_acquire
unknown 148 days ago yes possible deadlock in try_to_wake_up
unknown 148 days ago yes INFO: task hung in sock_ioctl
usb,net C 1 days ago yes KASAN: use-after-free Read in usb_kill_anchored_urbs
usb C 1 days ago yes general protection fault in device_del (3)
usb,net/wireless C 1 days ago yes general protection fault in ath6kl_usb_alloc_urb_from_pipe
usb,media C 1 days ago yes general protection fault in flexcop_usb_probe
usb C 1 days ago yes KMSAN: uninit-value in r871xu_drv_init
usb,net/wireless C 1 days ago yes KMSAN: uninit-value in rt2500usb_bbp_read
usb,net C 1 days ago yes KMSAN: uninit-value in ax88772_bind
usb,net/wireless C 1 days ago yes WARNING: ODEBUG bug in rsi_probe
usb,media C 2 days ago yes KMSAN: uninit-value in sd_init
usb C 3 days ago yes KMSAN: uninit-value in mii_nway_restart
usb C 16 days ago yes KASAN: use-after-free Read in ds_probe
usb,net/wireless C 1 days ago yes WARNING in ar5523_submit_rx_cmd/usb_submit_urb
usb,net/wireless C 1 days ago yes WARNING: ath10k USB support is incomplete, don't expect anything to work!
usb,media C 1 days ago yes WARNING in __flush_work (3)
usb,net/wireless C 1 days ago yes INFO: trying to register non-static key in del_timer_sync (2)
usb,media C 1 days ago yes WARNING in spi_register_controller
usb C 1 days ago yes possible deadlock in mon_bin_vma_fault
usb,net/wireless C 1 days ago yes WARNING in zd_mac_clear
usb,net/wireless C 0 days ago yes INFO: trying to register non-static key in rtl_c2hcmd_launcher
usb,net C 0 days ago yes WARNING in rollback_registered_many (2)
usb C 6 days ago yes general protection fault in cdev_del
usb syz 8 days ago yes KASAN: use-after-free Read in p54u_load_firmware_cb
usb C 8 days ago yes KASAN: stack-out-of-bounds Read in hfcsusb_probe
usb C 6 days ago yes KMSAN: uninit-value in read_sensor_register
usb C 6 days ago yes KASAN: invalid-free in rsi_91x_deinit
usb,net/wireless C 3 days ago yes WARNING in submit_rx_urb/usb_submit_urb
usb C 9 days ago yes KMSAN: uninit-value in i2c_w
media,usb C 5 days ago yes INFO: trying to register non-static key in mxl111sf_ctrl_msg
usb C 6 days ago yes WARNING in aiptek_open/usb_submit_urb
sound,usb syz 4 days ago yes WARNING in snd_usb_motu_microbookii_communicate/usb_submit_urb
usb syz 31 days ago yes general protection fault in drain_workqueue
usb C 41 days ago yes KASAN: global-out-of-bounds Read in hdpvr_probe
usb,media 2 days ago yes BUG: unable to handle kernel paging request in au0828_usb_disconnect
usb syz 17 days ago yes INFO: trying to register non-static key in usbtouch_reset_resume
usb C 236 days ago yes KASAN: use-after-free Read in vhci_hub_control
usb 10 days ago yes KASAN: use-after-free Read in device_del
usb syz 44 days ago yes KASAN: slab-out-of-bounds Read in hex_string
usb 7 days ago yes KMSAN: uninit-value in ax88178_bind
usb 13 days ago yes general protection fault in usb_gadget_udc_reset (2)
usb 12 days ago yes KASAN: slab-out-of-bounds Read in p54u_load_firmware_cb
usb 50 days ago yes BUG: unable to handle kernel paging request in osq_lock
usb 33 days ago yes INFO: task hung in usb_bulk_msg
vfs C 2 days ago yes KASAN: use-after-free Read in mntput
vfs,mm/userfaultfd C 1 days ago yes possible deadlock in io_submit_one
vfs C 63 days ago general protection fault in d_alloc_pseudo
vfs 4 days ago yes BUG: Dentry still in use [unmount of tmpfs tmpfs]
vfs C 142 days ago yes INFO: task hung in lock_mount
vfs 93 days ago KASAN: use-after-free Read in d_walk
vfs 57 days ago yes INFO: task hung in __ia32_sys_io_uring_enter
vfs 51 days ago yes INFO: task hung in __x64_sys_io_uring_enter
vfs/aio,mm/userfaultfd C 26 days ago yes possible deadlock in userfaultfd_release
vfs/io_uring C 1 days ago yes memory leak in new_inode_pseudo
vhost C 3 days ago yes memory leak in vhost_net_ioctl
vhost 105 days ago yes INFO: task hung in vhost_init_device_iotlb
... and if I rank all reports together, these are the highest-priority reports
currently:
vfs C 2 days ago yes KASAN: use-after-free Read in mntput
vfs,mm/userfaultfd C 1 days ago yes possible deadlock in io_submit_one
bluetooth C 2 days ago yes KASAN: use-after-free Read in kfree_skb (3)
kernel C 0 days ago yes BUG: MAX_STACK_TRACE_ENTRIES too low! (2)
media C 1 days ago yes KASAN: use-after-free Read in v4l2_release
net/tls C 1 days ago yes KASAN: use-after-free Read in tls_write_space
usb,net C 1 days ago yes KASAN: use-after-free Read in usb_kill_anchored_urbs
net/rose C 1 days ago yes general protection fault in rose_send_frame
net/netrom C 1 days ago yes general protection fault in prepare_to_wait
net/tipc C 1 days ago yes general protection fault in dst_dev_put (2)
vfs/io_uring C 1 days ago yes memory leak in new_inode_pseudo
bluetooth C 1 days ago yes WARNING: refcount bug in kobject_get