dashboard/app: sort bugs by impact

The impact score is deducted from the title.

Author: tarasmadan

dashboard/app/main.go

@@ -26,6 +26,7 @@ import (
 	"github.com/google/syzkaller/pkg/hash"
 	"github.com/google/syzkaller/pkg/html"
 	"github.com/google/syzkaller/pkg/html/urlutil"
+	"github.com/google/syzkaller/pkg/report"
 	"github.com/google/syzkaller/pkg/subsystem"
 	"github.com/google/syzkaller/pkg/vcs"
 	"golang.org/x/sync/errgroup"
@@ -365,6 +366,7 @@ type uiCommit struct {
 type uiBug struct {
 	Namespace      string
 	Title          string
+	ImpactScore    int
 	NumCrashes     int64
 	NumCrashesBad  bool
 	BisectCause    BisectStatus
@@ -1938,6 +1940,7 @@ func createUIBug(c context.Context, bug *Bug, state *ReportingState, managers []
 	uiBug := &uiBug{
 		Namespace:      bug.Namespace,
 		Title:          bug.displayTitle(),
+		ImpactScore:    report.TitleToImpact(bug.Title),
 		BisectCause:    bug.BisectCause,
 		BisectFix:      bug.BisectFix,
 		NumCrashes:     bug.NumCrashes,

dashboard/app/templates/templates.html

@@ -168,6 +168,7 @@ <h1><a href="/{{$.Namespace}}">syzbot</a></h1>
 			<th><a onclick="return sortTable(this, 'Kernel', textSort)" href="#">Kernel</a></th>
 		{{end}}
 		<th><a onclick="return sortTable(this, 'Title', textSort)" href="#">Title</a></th>
+		<th><a onclick="return sortTable(this, 'ImpactScore', numSort)" href="#">ImpactScore</a></th>
 		<th><a onclick="return sortTable(this, 'Repro', reproSort)" href="#">Repro</a></th>
 		<th><a onclick="return sortTable(this, 'Cause bisect', textSort)" href="#">Cause bisect</a></th>
 		<th><a onclick="return sortTable(this, 'Fix bisect', textSort)" href="#">Fix bisect</a></th>
@@ -202,6 +203,7 @@ <h1><a href="/{{$.Namespace}}">syzbot</a></h1>
 					<span class="bug-label">{{link .Link .Name}}</span>
 				{{- end}}
 			</td>
+			<td class="stat">{{$b.ImpactScore}}</td>
 			<td class="stat">{{formatReproLevel $b.ReproLevel}}</td>
 			<td class="bisect_status">{{print $b.BisectCause}}</td>
 			<td class="bisect_status">{{print $b.BisectFix}}</td>

pkg/report/crash/types.go

@@ -20,7 +20,7 @@ const (
 	KASANUseAfterFreeRead  = Type("KASAN-USE-AFTER-FREE-READ")
 	KASANUseAfterFreeWrite = Type("KASAN-USE-AFTER-FREE-WRITE")
 	KASANWrite             = Type("KASAN-WRITE")
-	KCSAN                  = Type("KCSAN")
+	KCSANOther             = Type("KCSAN-OTHER")
 	KCSANDataRace          = Type("DATARACE")
 	KFENCE                 = Type("KFENCE")
 	KMSAN                  = Type("KMSAN")
@@ -56,7 +56,7 @@ func (t Type) IsKMSAN() bool {
 }
 
 func (t Type) IsKCSAN() bool {
-	return t == KCSANDataRace || t == KCSAN
+	return t == KCSANDataRace || t == KCSANOther
 }
 
 func (t Type) IsUBSAN() bool {

pkg/report/impact_score.go

@@ -0,0 +1,43 @@
+// Copyright 2025 syzkaller project authors. All rights reserved.
+// Use of this source code is governed by Apache 2 LICENSE that can be found in the LICENSE file.
+
+package report
+
+import (
+	"github.com/google/syzkaller/pkg/report/crash"
+)
+
+// impactOrder represent an ordering of bug impact severity. The earlier
+// entries are considered more severe.
+var impactOrder = []crash.Type{
+	crash.KASANWrite,
+	crash.KASANUseAfterFreeWrite,
+	crash.KASANInvalidFree,
+	crash.KASANUseAfterFreeRead,
+	crash.KASANRead,
+	crash.KASANOther,
+	crash.MemorySafetyUBSAN,
+	crash.MemorySafetyBUG,
+	crash.MemorySafetyWARNING,
+	crash.MemoryLeak,
+	crash.KMSAN,
+	crash.KCSANDataRace,
+	crash.KCSANOther,
+	crash.AtomicSleep,
+	crash.LockdepBug,
+	crash.Hang,
+	crash.DoS,
+}
+
+// TitleToImpact converts a bug title to an impact score.
+// A higher score indicates a more severe impact.
+// -1 means unknown.
+func TitleToImpact(title string) int {
+	typ := TitleToCrashType(title)
+	for i, t := range impactOrder {
+		if typ == t {
+			return len(impactOrder) - i
+		}
+	}
+	return -1
+}

pkg/report/impact_score_test.go

@@ -0,0 +1,45 @@
+// Copyright 2025 syzkaller project authors. All rights reserved.
+// Use of this source code is governed by Apache 2 LICENSE that can be found in the LICENSE file.
+
+package report
+
+import (
+	"testing"
+)
+
+func TestImpactScore(t *testing.T) {
+	tests := []struct {
+		name     string
+		title    string
+		expected int
+	}{
+		{
+			name:     "empty means unknown",
+			title:    "",
+			expected: -1,
+		},
+		{
+			name:     "unknown",
+			title:    "KGSAN: ",
+			expected: -1,
+		},
+		{
+			name:     "unknown KASAN",
+			title:    "KASAN: unknown",
+			expected: 12,
+		},
+		{
+			name:     "known Hang",
+			title:    "BUG: soft lockup in some function",
+			expected: 2,
+		},
+	}
+	for _, test := range tests {
+		t.Run(test.name, func(t *testing.T) {
+			got := TitleToImpact(test.title)
+			if got != test.expected {
+				t.Errorf("TitleToImpact(%q) = %d, want %d", test.title, got, test.expected)
+			}
+		})
+	}
+}

pkg/report/title_to_type.go

@@ -228,4 +228,8 @@ var titleToType = []struct {
 		includePrefixes: []string{"UBSAN: "},
 		crashType:       crash.UBSAN,
 	},
+	{
+		includePrefixes: []string{"KCSAN: "},
+		crashType:       crash.KCSANOther,
+	},
 }