Groups
Groups
Sign in
Groups
Groups
syzkaller-bugs
Conversations
About
Send feedback
Help
Sort By Relevance
Sort By Date
1–30 of many
syzbot
,
Jie Wang
3
Jun 25
[syzbot] [jfs?] KASAN: slab-use-after-free Write in lmLogSync
BUG:
KASAN
: slab-
use
-
after
-
free
in lmLogSync+0x9a5/0xa40 fs/jfs/jfs_logmgr.c:1003 Write of size 4 at addr ffff888078b39a18 by task jfsCommit/119 CPU: 1 UID: 0 PID: 119 Comm:
unread,
[syzbot] [jfs?] KASAN: slab-use-after-free Write in lmLogSync
BUG:
KASAN
: slab-
use
-
after
-
free
in lmLogSync+0x9a5/0xa40 fs/jfs/jfs_logmgr.c:1003 Write of size 4 at addr ffff888078b39a18 by task jfsCommit/119 CPU: 1 UID: 0 PID: 119 Comm:
Jun 25
syzbot
,
Hillf Danton
2
Jun 20
[syzbot] [bluetooth?] KASAN: slab-use-after-free Write in bt_accept_dequeue
BUG:
KASAN
: slab-
use
-
after
-
free
in instrument_atomic_read_write include/linux/instrumented.h:112 [inline] > BUG:
KASAN
: slab-
use
-
after
-
free
in atomic_fetch_add_relaxed
unread,
[syzbot] [bluetooth?] KASAN: slab-use-after-free Write in bt_accept_dequeue
BUG:
KASAN
: slab-
use
-
after
-
free
in instrument_atomic_read_write include/linux/instrumented.h:112 [inline] > BUG:
KASAN
: slab-
use
-
after
-
free
in atomic_fetch_add_relaxed
Jun 20
syzbot
, …
Jeff Layton
13
Jun 20
[syzbot] [fs?] KASAN: slab-use-after-free Read in shrink_dcache_tree
lock implementation
after
spin_unlock()/completion_done() releases the lock.". Neither of these explicitly guarantees that the RCU read-side critical section (and the
unread,
[syzbot] [fs?] KASAN: slab-use-after-free Read in shrink_dcache_tree
lock implementation
after
spin_unlock()/completion_done() releases the lock.". Neither of these explicitly guarantees that the RCU read-side critical section (and the
Jun 20
syzbot
Jun 2
[syzbot] [btrfs?] KASAN: slab-use-after-free Write in btrfs_put_root
BUG:
KASAN
: slab-
use
-
after
-
free
in instrument_atomic_read_write include/linux/instrumented.h:112 [inline] BUG:
KASAN
: slab-
use
-
after
-
free
in atomic_fetch_sub_release
unread,
[syzbot] [btrfs?] KASAN: slab-use-after-free Write in btrfs_put_root
BUG:
KASAN
: slab-
use
-
after
-
free
in instrument_atomic_read_write include/linux/instrumented.h:112 [inline] BUG:
KASAN
: slab-
use
-
after
-
free
in atomic_fetch_sub_release
Jun 2
syzbot
Jun 1
[syzbot] [serial?] KASAN: slab-use-after-free Read in stop_tty
BUG:
KASAN
: slab-
use
-
after
-
free
in stop_t[ 93.746644][ T5837] BUG:
KASAN
: slab-
use
-
after
-
free
in __stop_tty drivers/tty/tty_io.c:742 [inline] BUG:
KASAN
: slab-
use
-
after
unread,
[syzbot] [serial?] KASAN: slab-use-after-free Read in stop_tty
BUG:
KASAN
: slab-
use
-
after
-
free
in stop_t[ 93.746644][ T5837] BUG:
KASAN
: slab-
use
-
after
-
free
in __stop_tty drivers/tty/tty_io.c:742 [inline] BUG:
KASAN
: slab-
use
-
after
Jun 1
syzbot
Jun 1
[syzbot] [net?] KASAN: use-after-free Read in filemap_map_pages
BUG:
KASAN
:
use
-
after
-
free
in ptep_get include/linux/pgtable.h:461 [inline] BUG:
KASAN
:
use
-
after
-
free
in filemap_map_order0_folio mm/filemap.c:3856 [inline] BUG:
KASAN
unread,
[syzbot] [net?] KASAN: use-after-free Read in filemap_map_pages
BUG:
KASAN
:
use
-
after
-
free
in ptep_get include/linux/pgtable.h:461 [inline] BUG:
KASAN
:
use
-
after
-
free
in filemap_map_order0_folio mm/filemap.c:3856 [inline] BUG:
KASAN
Jun 1
syzbot ci
May 28
[syzbot ci] Re: netlink: fix skb refcount leak when dump start fails
: *
KASAN
: slab-
use
-
after
-
free
Read in nl80211_prepare_wdev_dump *
KASAN
: slab-
use
-
after
-
free
Read in xfrm_dump_sa_done *
KASAN
: slab-
use
-
after
-
free
Write in sk_skb_reason_drop
unread,
[syzbot ci] Re: netlink: fix skb refcount leak when dump start fails
: *
KASAN
: slab-
use
-
after
-
free
Read in nl80211_prepare_wdev_dump *
KASAN
: slab-
use
-
after
-
free
Read in xfrm_dump_sa_done *
KASAN
: slab-
use
-
after
-
free
Write in sk_skb_reason_drop
May 28
syzbot
May 27
[syzbot] [jfs?] KASAN: slab-use-after-free Read in txLazyUnlock (3)
BUG:
KASAN
: slab-
use
-
after
-
free
in JFS_SBI fs/jfs/jfs_incore.h:217 [inline] BUG:
KASAN
: slab-
use
-
after
-
free
in txLazyUnlock+0xf6/0x190 fs/jfs/jfs_txnmgr.c:2786 Read
unread,
[syzbot] [jfs?] KASAN: slab-use-after-free Read in txLazyUnlock (3)
BUG:
KASAN
: slab-
use
-
after
-
free
in JFS_SBI fs/jfs/jfs_incore.h:217 [inline] BUG:
KASAN
: slab-
use
-
after
-
free
in txLazyUnlock+0xf6/0x190 fs/jfs/jfs_txnmgr.c:2786 Read
May 27
syzbot
, …
Christian Brauner
12
Jun 4
[syzbot] [fs?] KASAN: slab-use-after-free Read in reverse_path_check_proc
BUG:
KASAN
: slab-
use
-
after
-
free
in reverse_path_check_proc+0x5b/0x240 fs/eventpoll.c:1663 Read of size 8 at addr ffff88803777f7e0 by task syz.3.20/6001 CPU: 0 UID: 0 PID: 6001
unread,
[syzbot] [fs?] KASAN: slab-use-after-free Read in reverse_path_check_proc
BUG:
KASAN
: slab-
use
-
after
-
free
in reverse_path_check_proc+0x5b/0x240 fs/eventpoll.c:1663 Read of size 8 at addr ffff88803777f7e0 by task syz.3.20/6001 CPU: 0 UID: 0 PID: 6001
Jun 4
syzbot
May 22
[syzbot] [sound?] KASAN: slab-use-after-free Read in snd_pcm_oss_look_for_setup (2)
BUG:
KASAN
: slab-
use
-
after
-
free
in snd_pcm_oss_look_for_setup+0x2d3/0x370 sound/core/oss/pcm_oss.c:2355 Read of size 8 at addr ffff888022f56d00 by task syz.1.988/10837
unread,
[syzbot] [sound?] KASAN: slab-use-after-free Read in snd_pcm_oss_look_for_setup (2)
BUG:
KASAN
: slab-
use
-
after
-
free
in snd_pcm_oss_look_for_setup+0x2d3/0x370 sound/core/oss/pcm_oss.c:2355 Read of size 8 at addr ffff888022f56d00 by task syz.1.988/10837
May 22
syzbot
,
Philipp Weber
4
May 20
[syzbot] [bluetooth?] KASAN: slab-use-after-free Read in skb_dequeue (2)
BUG:
KASAN
: slab-
use
-
after
-
free
in __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:132 [inline] BUG:
KASAN
: slab-
use
-
after
-
free
in _raw_spin_lock_irqsave
unread,
[syzbot] [bluetooth?] KASAN: slab-use-after-free Read in skb_dequeue (2)
BUG:
KASAN
: slab-
use
-
after
-
free
in __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:132 [inline] BUG:
KASAN
: slab-
use
-
after
-
free
in _raw_spin_lock_irqsave
May 20
syzbot
, …
Dave Kleikamp
12
May 6
[syzbot] KASAN: use-after-free Read in jfs_lazycommit
?]
KASAN
:
use
-
after
-
free
Read in jfs_lazycommit Author: kapoorarnav43@gmail.com #syz fix From 7e1a0b91e9efa8bec40fc5397ba6c4e683d72df0 Mon Sep 17 00:00:00 2001 From: ArnavKapoor
unread,
[syzbot] KASAN: use-after-free Read in jfs_lazycommit
?]
KASAN
:
use
-
after
-
free
Read in jfs_lazycommit Author: kapoorarnav43@gmail.com #syz fix From 7e1a0b91e9efa8bec40fc5397ba6c4e683d72df0 Mon Sep 17 00:00:00 2001 From: ArnavKapoor
May 6
syzbot
4
May 6
Re: [syzbot] [jfs?] KASAN: use-after-free Read in jfs_lazycommit
issue:
KASAN
: slab-
use
-
after
-
free
Read in blk_update_request ================================================================== BUG:
KASAN
: slab-
use
-
after
-
free
in
unread,
Re: [syzbot] [jfs?] KASAN: use-after-free Read in jfs_lazycommit
issue:
KASAN
: slab-
use
-
after
-
free
Read in blk_update_request ================================================================== BUG:
KASAN
: slab-
use
-
after
-
free
in
May 6
syzbot
15
Jun 9
[syzbot] [mm?] KASAN: use-after-free Read in copy_folio_from_iter_atomic (2)
issue:
KASAN
: slab-
use
-
after
-
free
Read in blk_update_request ================================================================== BUG:
KASAN
: slab-
use
-
after
-
free
in
unread,
[syzbot] [mm?] KASAN: use-after-free Read in copy_folio_from_iter_atomic (2)
issue:
KASAN
: slab-
use
-
after
-
free
Read in blk_update_request ================================================================== BUG:
KASAN
: slab-
use
-
after
-
free
in
Jun 9
syzbot ci
Apr 24
[syzbot ci] Re: netlink: clean up failed initial dump-start state
: *
KASAN
: slab-
use
-
after
-
free
Read in inet_diag_dump_done *
KASAN
: slab-
use
-
after
-
free
Read in netlink_dump_done *
KASAN
: slab-
use
-
after
-
free
Read in netlink_rcv_skb *
KASAN
unread,
[syzbot ci] Re: netlink: clean up failed initial dump-start state
: *
KASAN
: slab-
use
-
after
-
free
Read in inet_diag_dump_done *
KASAN
: slab-
use
-
after
-
free
Read in netlink_dump_done *
KASAN
: slab-
use
-
after
-
free
Read in netlink_rcv_skb *
KASAN
Apr 24
syzbot ci
,
Jan Kara
2
Apr 23
[syzbot ci] Re: fs: Handle multiply claimed blocks more gracefully with mmb
: >
KASAN
: slab-
use
-
after
-
free
Read in remove_assoc_queue > > Full report is available here: > https://ci.syzbot.org/series/3ac1baf5-8cbb-4927-a4b1-c051f76ce076
unread,
[syzbot ci] Re: fs: Handle multiply claimed blocks more gracefully with mmb
: >
KASAN
: slab-
use
-
after
-
free
Read in remove_assoc_queue > > Full report is available here: > https://ci.syzbot.org/series/3ac1baf5-8cbb-4927-a4b1-c051f76ce076
Apr 23
syzbot
Apr 22
[syzbot] [bluetooth] KASAN: slab-use-after-free Read in process_one_work (2)
BUG:
KASAN
: slab-
use
-
after
-
free
in __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:132 [inline] BUG:
KASAN
: slab-
use
-
after
-
free
in _raw_spin_lock_irqsave
unread,
[syzbot] [bluetooth] KASAN: slab-use-after-free Read in process_one_work (2)
BUG:
KASAN
: slab-
use
-
after
-
free
in __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:132 [inline] BUG:
KASAN
: slab-
use
-
after
-
free
in _raw_spin_lock_irqsave
Apr 22
syzbot
3
Apr 17
Re: [syzbot] [jfs?] UBSAN: shift-out-of-bounds in dbJoin (2)
issue:
KASAN
: slab-
use
-
after
-
free
Read in lbmIODone ================================================================== BUG:
KASAN
: slab-
use
-
after
-
free
in lbmIODone
unread,
Re: [syzbot] [jfs?] UBSAN: shift-out-of-bounds in dbJoin (2)
issue:
KASAN
: slab-
use
-
after
-
free
Read in lbmIODone ================================================================== BUG:
KASAN
: slab-
use
-
after
-
free
in lbmIODone
Apr 17
syzbot
,
Edward Adam Davis
26
Apr 18
[syzbot] [jfs?] KASAN: slab-use-after-free Read in lbmIODone
issue:
KASAN
: slab-
use
-
after
-
free
Read in rtlock_slowlock_locked ================================================================== BUG:
KASAN
: slab-
use
-
after
-
free
unread,
[syzbot] [jfs?] KASAN: slab-use-after-free Read in lbmIODone
issue:
KASAN
: slab-
use
-
after
-
free
Read in rtlock_slowlock_locked ================================================================== BUG:
KASAN
: slab-
use
-
after
-
free
Apr 18
syzbot
2
Apr 17
Re: [syzbot] [jfs?] UBSAN: shift-out-of-bounds in extAlloc (2)
issue:
KASAN
: slab-
use
-
after
-
free
Read in lbmIODone ================================================================== BUG:
KASAN
: slab-
use
-
after
-
free
in lbmIODone
unread,
Re: [syzbot] [jfs?] UBSAN: shift-out-of-bounds in extAlloc (2)
issue:
KASAN
: slab-
use
-
after
-
free
Read in lbmIODone ================================================================== BUG:
KASAN
: slab-
use
-
after
-
free
in lbmIODone
Apr 17
syzbot
2
Apr 17
Re: [syzbot] [jfs?] UBSAN: array-index-out-of-bounds in dbFindLeaf (2)
issue:
KASAN
: slab-
use
-
after
-
free
Read in lbmIODone ================================================================== BUG:
KASAN
: slab-
use
-
after
-
free
in lbmIODone
unread,
Re: [syzbot] [jfs?] UBSAN: array-index-out-of-bounds in dbFindLeaf (2)
issue:
KASAN
: slab-
use
-
after
-
free
Read in lbmIODone ================================================================== BUG:
KASAN
: slab-
use
-
after
-
free
in lbmIODone
Apr 17
syzbot
Apr 17
Re: [syzbot] [jfs?] general protection fault in metapage_write_folio
issue:
KASAN
: slab-
use
-
after
-
free
Read in lbmIODone =========================[ 161.221911][ C1] ================================================================
unread,
Re: [syzbot] [jfs?] general protection fault in metapage_write_folio
issue:
KASAN
: slab-
use
-
after
-
free
Read in lbmIODone =========================[ 161.221911][ C1] ================================================================
Apr 17
syzbot
, …
Edward Adam Davis
26
Apr 16
[syzbot] [dri?] KASAN: slab-use-after-free Read in drm_gem_object_release_handle
issue:
KASAN
: slab-
use
-
after
-
free
Read in drm_gem_object_release_handle ================================================================== BUG:
KASAN
: slab-
use
-
unread,
[syzbot] [dri?] KASAN: slab-use-after-free Read in drm_gem_object_release_handle
issue:
KASAN
: slab-
use
-
after
-
free
Read in drm_gem_object_release_handle ================================================================== BUG:
KASAN
: slab-
use
-
Apr 16
syzbot
,
Wentao Guan
2
Apr 10
[syzbot] [serial?] KASAN: slab-use-after-free Read in kbd_event (2)
BUG:
KASAN
: slab-
use
-
after
-
free
in kbd_keycode drivers/tty/vt/keyboard.c:1435 [inline] BUG: KASA[ 730.192938][ T7920] BUG:
KASAN
: slab-
use
-
after
-
free
in kbd_event+0x3330
unread,
[syzbot] [serial?] KASAN: slab-use-after-free Read in kbd_event (2)
BUG:
KASAN
: slab-
use
-
after
-
free
in kbd_keycode drivers/tty/vt/keyboard.c:1435 [inline] BUG: KASA[ 730.192938][ T7920] BUG:
KASAN
: slab-
use
-
after
-
free
in kbd_event+0x3330
Apr 10
syzbot
Apr 1
[syzbot] [input?] [usb?] KASAN: slab-use-after-free Read in hiddev_disconnect (4)
BUG:
KASAN
: slab-
use
-
after
-
free
in debug_spin_lock_before kernel/locking/spinlock_debug.c:86 [inline] BUG:
KASAN
: slab-
use
-
after
-
free
in do_raw_spin_lock+0x23b/0x260
unread,
[syzbot] [input?] [usb?] KASAN: slab-use-after-free Read in hiddev_disconnect (4)
BUG:
KASAN
: slab-
use
-
after
-
free
in debug_spin_lock_before kernel/locking/spinlock_debug.c:86 [inline] BUG:
KASAN
: slab-
use
-
after
-
free
in do_raw_spin_lock+0x23b/0x260
Apr 1
syzbot
Mar 31
[syzbot] [bpf?] [net?] KASAN: slab-use-after-free Read in sk_psock_verdict_data_ready (4)
BUG:
KASAN
: slab-
use
-
after
-
free
in sk_psock_verdict_data_ready+0xec/0x590 net/core/skmsg.c:1278 Read of size 8 at addr ffff8880594da860 by task syz.4.1842/11013 CPU: 1 UID
unread,
[syzbot] [bpf?] [net?] KASAN: slab-use-after-free Read in sk_psock_verdict_data_ready (4)
BUG:
KASAN
: slab-
use
-
after
-
free
in sk_psock_verdict_data_ready+0xec/0x590 net/core/skmsg.c:1278 Read of size 8 at addr ffff8880594da860 by task syz.4.1842/11013 CPU: 1 UID
Mar 31
syzbot
,
Rafael Alejandro Diaz Cruz
12
Mar 30
Re: [syzbot] [jfs] general protection fault in txEnd
Busy inodes
after
unmount (
use
-
after
-
free
) VFS: Busy inodes
after
unmount of loop0 (jfs) ------------[ cut here ]------------ kernel BUG at fs/super.c:656! Oops: invalid opcode
unread,
Re: [syzbot] [jfs] general protection fault in txEnd
Busy inodes
after
unmount (
use
-
after
-
free
) VFS: Busy inodes
after
unmount of loop0 (jfs) ------------[ cut here ]------------ kernel BUG at fs/super.c:656! Oops: invalid opcode
Mar 30
syzbot
,
Edward Adam Davis
14
Mar 25
[syzbot] [gfs2?] INFO: task hung in gfs2_recover_journal (4)
issue:
KASAN
: slab-
use
-
after
-
free
Read in gfs2_invalidate_folio RBP: 00007ffd3cccca40 R08: 00007ffd3cccda40 R09: 00000000ffffffff R10: 0000000000000000 R11: 0000000000000246
unread,
[syzbot] [gfs2?] INFO: task hung in gfs2_recover_journal (4)
issue:
KASAN
: slab-
use
-
after
-
free
Read in gfs2_invalidate_folio RBP: 00007ffd3cccca40 R08: 00007ffd3cccda40 R09: 00000000ffffffff R10: 0000000000000000 R11: 0000000000000246
Mar 25
syzbot
6
May 5
[syzbot] [gfs2?] WARNING in gfs2_fill_super
issue:
KASAN
: slab-
use
-
after
-
free
Read in gfs2_put_super ================================================================== BUG:
KASAN
: slab-
use
-
after
-
free
in gfs2_put_super
unread,
[syzbot] [gfs2?] WARNING in gfs2_fill_super
issue:
KASAN
: slab-
use
-
after
-
free
Read in gfs2_put_super ================================================================== BUG:
KASAN
: slab-
use
-
after
-
free
in gfs2_put_super
May 5
syzbot ci
Mar 24
[syzbot ci] Re: context_tracking,x86: Defer some IPIs until a user->kernel transition
: *
KASAN
: slab-out-of-bounds Read in __dynamic_pr_debug *
KASAN
: slab-
use
-
after
-
free
Read in __dynamic_dev_dbg Full report is available here: https://ci.syzbot.org/series
unread,
[syzbot ci] Re: context_tracking,x86: Defer some IPIs until a user->kernel transition
: *
KASAN
: slab-out-of-bounds Read in __dynamic_pr_debug *
KASAN
: slab-
use
-
after
-
free
Read in __dynamic_dev_dbg Full report is available here: https://ci.syzbot.org/series
Mar 24
