syzbot

 sign-in | mailing list | source | docs
🐞 Open [101]
🐞 Fixed [365]
🐞 Invalid [395]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

Instances [tested repos]:
Name Last active Uptime Corpus Coverage 🛈 Crashes Execs Kernel build syzkaller build Bugs
Commit Config Freshness Status Commit Freshness Status All Only
ci-freebsd-i386 now 1d22h 9903 182396 1399 421356 c04fe26aa2f7 .config 13d failing 807a3b61 2d03h all only
ci-freebsd-main now 1d22h 9453 107342 3245 590794 c04fe26aa2f7 .config 13d failing 807a3b61 2d03h all only
upstream (101):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Last activity
panic: Assertion pd->pcksum failed at /syzkaller/managers/i386/kernel/sys/netpfil/pf/pf.c:LINE (2) 2 1 5h59m 5h58m 5h58m
panic: ASan: Invalid access, NUM-byte read at ADDR, StackLeft(f1) (3) 2 syz 2 10h45m 15h43m 10h44m
Fatal trap NUM: page fault in ip6_freemoptions -1 1 1d07h 1d07h 1d07h
panic: flush_newblk_dep: Bad newblk ADDR 2 3 2d21h 2d21h 2d21h
panic: pmap_remove_all: page ADDR is not managed 2 2 4d07h 4d07h 4d07h
panic: vm_page_grab_zero_partial: page ADDR is invalid 2 1 5d08h 5d08h 5d08h
panic: vfs_knl_assert_locked: vnode is not locked but should be 2 1 5d09h 5d09h 5d09h
panic: /syzkaller/managers/i386/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h (2) 2 4 8d09h 8d09h 8d09h
panic: No memory for IFN 2 1 10d 10d 10d
panic: vtnet_txq_offload_ctx: mbuf ADDR start NUM offset NUM proto -NUM (3) 2 C 6 13d 13d 13d
SYZFAIL: failed to mkdir -1 2 19d 19d 19d
panic: No memory for IFA 2 1 19d 19d 19d
panic: Assertion !(sb->sb_state & SBS_CANTRCVMORE) failed at /syzkaller/managers/main/kernel/sys/kern/uipc_usrreq.c:LINE 2 C 9 5d12h 21d 21d
panic: igmp_change_state: no igmp_ifsoftc for ifp ADDR 2 1 36d 36d 36d
panic: sleeping thread[ htholredsa d tpuin_dm 2tx ti 2 1 36d 36d 36d
panic: m_apply, length > size of mbuf chain (NUM extra) 2 C 3 38d 38d 38d
panic: CURVNET_SET at /syzkaller/managers/main/kernel/sys/netinet6/in6_mcast.c:LINE inp_gcmoptions() curvnet=ADDR vnet=N 2 2 37d 40d 40d
Fatal trap NUM: page fault in in6_selecthlim (4) -1 1 41d 41d 41d
Fatal trap NUM: page fault in link_elf_search_symbol -1 1 44d 44d 44d
panic: deadlres_td_sleep_q: possible deadlock detected for ADDR (syz-executor), blocked for ADDR ticks 2 1 48d 48d 48d
panic: starting DAD on non-tentative address ADDR 2 1 51d 51d 51d
panic: ASan: Invalid access, NUM-byte read at ADDR, MallocRedZone(fb) (4) 2 1 51d 51d 51d
panic: witness_warn (3) 2 1 55d 55d 55d
Fatal trap NUM: page fault in in_pcbremhash_locked (2) -1 33 1d04h 58d 58d
Fatal trap NUM: page fault in in_joingroup_locked -1 2 7d22h 61d 61d
panic: proc_dtor: non-empty p_ktr 2 1 65d 65d 65d
SYZFAIL: repeatedly failed to execute the program -1 14 3d16h 72d 72d
freebsd build error (21) -1 401 48m 75d 75d
SYZFAIL: ShmemBuilder: too large output offset -1 1 78d 78d 78d
panic: /syzkaller/managers/main/kernel/sys/kern/uipc_usrreq.c:LINE: uipc_sosend_stream_or_seqpacket: Empty stailq ADDR-> 2 C 7 26d 82d 82d
panic: sleeping thread holds tun_mtx 2 505 5h15m 86d 86d
panic: brelse: non-VMIO buffer marked NOREUSE 2 455 49m 89d 89d
SYZFAIL: open of /dev/kcov failed -1 13898 12m 92d 92d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/i386/kernel/sys/kern/sys_socket.c:LINE (3) 2 3 71d 97d 97d
panic: pfi_kkif_attach: null kif 2 6 6d11h 97d 97d
panic: vm_object_unwire: missing page 2 6 14d 100d 100d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: _callout_stop_safe: Bad link elm ADDR prev->next != 2 2 78d 111d 111d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: _callout_stop_safe: Bad link elm ADDR next->prev != 2 syz 3 26d 113d 113d
freebsd test error: SYZFATAL: image testing failed w/o kernel bug (2) -1 3 79d 116d 116d
panic: /syzkaller/managers/i386/kernel/sys/kern/uipc_usrreq.c:LINE: uipc_sosend_stream_or_seqpacket: Empty stailq ADDR-> 2 1180 1h24m 117d 117d
panic: Assertion m->m_flags & M_BLOCKED failed at /syzkaller/managers/main/kernel/sys/kern/uipc_usrreq.c:LINE 2 C 33 101d 117d 117d
panic: Assertion pd->pcksum failed at /syzkaller/managers/main/kernel/sys/netpfil/pf/pf.c:LINE 2 7 81d 118d 118d
panic: /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE: in_pcblbgroup_insert: Bad list head ADDR first->prev ! 2 3 82d 119d 119d
panic: vm_page_dirty: page is invalid! 2 2 78d 120d 120d
panic: ASan: Invalid access, NUM-byte read at ADDR, StackMiddle(f2) (3) 2 23 4d00h 121d 121d
panic: negative vmsize for uid NUM 2 30 17h25m 124d 124d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h 2 syz 448 21d 125d 124d
panic: inconsistent boundary count NUM 2 4 1d18h 134d 134d
Fatal trap NUM: page fault in callout_process (4) -1 syz 3887 15h39m 138d 136d
SYZFAIL: SIGBUS (2) -1 51 7h05m 159d 159d
SYZFAIL: SIGSEGV -1 51 2d17h 160d 160d
panic: if_ref: ifp ADDR has NUM refs (2) 2 syz 2 72d 161d 72d
panic: vnode_pager_generic_getpages_done: page ADDR is mapped 2 9 41d 171d 171d
SYZFAIL: child stopped (2) -1 66 3d13h 174d 174d
SYZFAIL: clone failed (2) -1 15 3d03h 176d 176d
panic: mq notifiers left (3) 2 489 2h15m 176d 176d
panic: mld_change_state: bad ifp 2 12 1d03h 182d 182d
Fatal trap NUM: page fault in mld_change_state -1 8 11d 182d 182d
SYZFAIL: SIGILL (2) -1 417 2h16m 184d 184d
SYZFAIL: SIGFPE (2) -1 392 3h43m 187d 187d
SYZFAIL: invalid kcov comp type (4) -1 5659 2h22m 201d 201d
SYZFAIL: posix_spawnp failed -1 85541 now 214d 214d
SYZFAIL: too much cover (3) -1 3953 38m 252d 252d
panic: pmap_demote_pde: a wired mapping is missing PG_A 2 67 39d 265d 265d
panic: vm_object_terminate_single_page: page ADDR does not belong to a queue 2 73 2h21m 312d 312d
SYZFAIL: cover mmap failed (2) -1 4972 now 363d 363d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/main/kernel/sys/kern/sys_socket.c:LINE (4) 2 C 32 1d03h 368d 367d
Fatal trap NUM: page fault in in6m_disconnect_locked -1 syz 36 4d06h 378d 378d
SYZFAIL: too many calls in output -1 246 20h45m 407d 407d
Fatal trap NUM: page fault while in kernel mode (6) -1 syz 165 13d 408d 378d
SYZFAIL: failed to send rpc -1 616 11h47m 409d 409d
SYZFAIL: failed to recv rpc -1 106787 now 409d 409d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (12) -1 198 26d 432d 432d
can't ssh into the instance -1 23184 18m 466d 466d
SYZFAIL: leak checking is not implemented -1 syz 76 465d 472d 472d
Fatal trap NUM: page fault in soisconnected -1 C 2 509d 509d 509d
panic: size_on_reasm_queue is NUM (4) 2 C 5 512d 590d 590d
SYZFAIL: child failed (2) -1 syz 8716 22m 595d 595d
corrupted report (5) -1 811 58m 621d 621d
SYZFAIL: command failed (2) -1 syz 19 2d00h 624d 624d
Fatal trap NUM: page fault in nd6_dad_timer (6) -1 syz 13 321d 643d 586d
Fatal trap NUM: page fault in in_pcbbind_setup -1 C 1 708d 708d 708d
suppressed report (4) -1 15439 17m 768d 768d
SYZFAIL: tun: can't open device (2) -1 syz 799 1d14h 768d 768d
panic: mutex Giant owned at /syzkaller/managers/main/kernel/sys/kern/kern_thread.c:LINE 2 C 1112 728d 789d 789d
Fatal trap NUM: page fault in kasan_atomic_load_int (3) -1 C 14 515d 1075d 1061d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-tcb @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb. (3) 2 syz 7 585d 1085d 1085d
Fatal trap NUM: page fault in ip6_output -1 syz 20015 41d 1137d 1119d
panic: Assertion v != tid failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:LINE (2) 2 syz 262 107d 1157d 1157d
panic: ASan: Invalid access, NUM-byte write at ADDR, MallocRedZone(fb) 2 C 1 1166d 1166d 1166d
panic: ASan: Invalid access, NUM-byte read at ADDR, UMAUseAfterFree(fd) (4) 2 C 1553 15h47m 1169d 1043d
Fatal trap NUM: page fault in __mtx_assert -1 C 242 547d 1185d 1085d
panic: ASan: Invalid access, NUM-byte write at ADDR, UMAUseAfterFree(fd) (2) 2 C 74 9d17h 1189d 621d
SYZFATAL: Manager.Poll call failed: connection is shut down -1 syz 78758 431d 1220d 1217d
panic: a thread waited too long to allocate a page 2 34927 8m 1324d 1324d
panic: failed to reclaim memory 2 C 329636 now 1324d 1306d
panic: pmap_san_enter_alloc_4k: no memory to grow shadow map 2 C 161872 now 1396d 706d
panic: Going nowhere without my init! 2 C 1136 1d00h 1547d 1547d
panic: size_on_all_streams smaller than control length (2) 2 C 2082 24d 1838d 1838d
lost connection to test machine (2) -1 C 794674 now 2359d 64d
no output from test machine -1 C 346695 now 2361d 1845d