syzbot

 sign-in | mailing list | source | docs
🐞 Open [82]
🐞 Fixed [345]
🐞 Invalid [378]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

Instances [tested repos]:
Name Last active Uptime Corpus Coverage 🛈 Crashes Execs Kernel build syzkaller build Bugs
Commit Config Freshness Status Commit Freshness Status All Only
ci-freebsd-i386 now 10h26m 9355 177627 1019 664231 afb0eadf97b2 .config 14h11m 9497799b 10h53m all only
ci-freebsd-main now 10h27m 8947 106316 2750 661417 afb0eadf97b2 .config 14h11m 9497799b 10h53m all only
upstream (82):
Title Repro Cause bisect Fix bisect Count Last Reported Last activity
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: _callout_stop_safe: Bad link elm ADDR prev->next != 1 1d05h 1d05h 1d05h
panic: /syzkaller/managers/i386/kernel/sys/netinet/in_pcb.c:LINE: in_pcblbgroup_insert: Bad list head ADDR first->prev ! 1 1d21h 1d21h 1d21h
panic: mutex so_rcv not owned at /syzkaller/managers/i386/kernel/sys/kern/uipc_usrreq.c:LINE 2 2d15h 2d15h 2d15h
panic: mutex so_rcv not owned at /syzkaller/managers/main/kernel/sys/kern/uipc_usrreq.c:LINE C 5 2d15h 2d15h 2d15h
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_process: Bad tailq NEXT(ADDR->tqh_last) != 1 3d10h 3d10h 3d10h
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: _callout_stop_safe: Bad link elm ADDR next->prev != syz 2 3d12h 3d13h 3d12h
freebsd test error: SYZFATAL: image testing failed w/o kernel bug (2) 1 6d02h 6d02h 6d02h
panic: /syzkaller/managers/i386/kernel/sys/kern/uipc_usrreq.c:LINE: uipc_sosend_stream_or_seqpacket: Empty stailq ADDR-> 21 1h11m 7d07h 7d07h
panic: Assertion m->m_flags & M_BLOCKED failed at /syzkaller/managers/main/kernel/sys/kern/uipc_usrreq.c:LINE C 30 2d13h 7d10h 7d10h
panic: Assertion pd->pcksum failed at /syzkaller/managers/main/kernel/sys/netpfil/pf/pf.c:LINE 5 2d10h 7d23h 7d23h
panic: tcp_do_segment: sent too much: NUM>NUM 7 1d06h 8d17h 8d17h
panic: /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE: in_pcblbgroup_insert: Bad list head ADDR first->prev ! 1 9d07h 9d07h 9d07h
panic: /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE: in_pcbremlbgrouphash: Bad link elm ADDR next->prev != 1 9d13h 9d13h 9d13h
panic: vm_page_dirty: page is invalid! 1 10d 10d 10d
panic: Assertion pd->pcksum failed at /syzkaller/managers/i386/kernel/sys/netpfil/pf/pf.c:LINE 1 11d 11d 11d
panic: ASan: Invalid access, NUM-byte read at ADDR, StackMiddle(f2) (3) 3 2d15h 11d 11d
panic: negative vmsize for uid NUM 3 7d06h 14d 14d
Fatal trap NUM: page fault in witness_checkorder 3 5d04h 14d 14d
Fatal trap NUM: page fault in __mtx_lock_flags (4) 1 14d 14d 14d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h syz 315 8m 14d 14d
panic: /syzkaller/managers/i386/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h 162 2h45m 14d 14d
panic: executing segment marked as unreachable at /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE (in_pcbremlb 1 23d 23d 23d
panic: inconsistent boundary count NUM 1 24d 24d 24d
panic: ip6_deletefraghdr: ext headers not contigous in mbuf ADDR m_len NUM >= offset NUM + NUM 294 6m 25d 25d
Fatal trap NUM: page fault in callout_process (4) syz 2923 now 28d 26d
panic: Bad list head ADDR first->prev != head (2) 113 15d 42d 42d
panic: tcp_do_segment: sent too much 13 11d 44d 44d
SYZFAIL: SIGBUS (2) 10 12h23m 49d 49d
SYZFAIL: SIGSEGV 14 13h36m 50d 50d
panic: if_ref: ifp ADDR has NUM refs (2) 1 51d 51d 51d
panic: vnode_pager_generic_getpages_done: page ADDR is mapped 1 60d 60d 60d
SYZFAIL: child stopped (2) 12 9h10m 64d 64d
SYZFAIL: clone failed (2) 2 41d 66d 66d
panic: mq notifiers left (3) 77 3h55m 66d 66d
panic: mld_change_state: bad ifp 3 44d 72d 72d
Fatal trap NUM: page fault in mld_change_state 4 28d 72d 72d
SYZFAIL: SIGILL (2) 103 15h32m 74d 74d
panic: pmap_growkernel: no memory to grow kernel (5) 215 6h26m 77d 77d
SYZFAIL: SIGFPE (2) 86 1d05h 77d 77d
Fatal trap NUM: page fault in in_pcbremhash_locked C 123 11m 80d 72d
SYZFAIL: invalid kcov comp type (4) 637 28m 91d 91d
SYZFAIL: posix_spawnp failed 16141 now 104d 104d
SYZFAIL: too much cover (3) 128 11h58m 142d 142d
freebsd test error: lost connection to test machine (7) 2 60d 145d 145d
panic: pmap_demote_pde: a wired mapping is missing PG_A 35 now 155d 155d
panic: vm_object_terminate_single_page: page ADDR does not belong to a queue 14 14h51m 202d 202d
SYZFAIL: cover mmap failed (2) 530 1h30m 253d 253d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/main/kernel/sys/kern/sys_socket.c:LINE (4) C 22 1d13h 258d 257d
Fatal trap NUM: page fault in in6m_disconnect_locked syz 7 1d20h 268d 268d
SYZFAIL: too many calls in output 71 19h09m 297d 297d
Fatal trap NUM: page fault while in kernel mode (6) syz 154 1d02h 298d 268d
SYZFAIL: failed to send rpc 206 1h33m 298d 298d
SYZFAIL: failed to recv rpc 72549 now 299d 299d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (12) 124 13d 322d 322d
can't ssh into the instance 2588 5m 356d 356d
SYZFAIL: leak checking is not implemented syz 76 354d 362d 362d
Fatal trap NUM: page fault in soisconnected C 2 398d 398d 398d
panic: size_on_reasm_queue is NUM (4) C 5 402d 480d 480d
SYZFAIL: child failed (2) syz 3382 5h32m 485d 485d
corrupted report (5) 192 13h52m 511d 511d
SYZFAIL: command failed (2) syz 10 4h44m 514d 514d
Fatal trap NUM: page fault in nd6_dad_timer (6) syz 13 211d 533d 476d
Fatal trap NUM: page fault in in_pcbbind_setup C 1 598d 598d 598d
suppressed report (4) 8335 8m 658d 658d
SYZFAIL: tun: can't open device (2) syz 12 11d 658d 658d
panic: mutex Giant owned at /syzkaller/managers/main/kernel/sys/kern/kern_thread.c:LINE C 1112 618d 678d 678d
Fatal trap NUM: page fault in kasan_atomic_load_int (3) C 14 405d 965d 951d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-tcb @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb. (3) syz 7 474d 975d 975d
Fatal trap NUM: page fault in ip6_output syz 20010 72d 1027d 1009d
panic: Assertion v != tid failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:LINE (2) syz 261 420d 1047d 1047d
panic: ASan: Invalid access, NUM-byte write at ADDR, MallocRedZone(fb) C 1 1056d 1056d 1056d
panic: ASan: Invalid access, NUM-byte read at ADDR, UMAUseAfterFree(fd) (4) C 1270 11h14m 1059d 933d
Fatal trap NUM: page fault in __mtx_assert C 242 437d 1075d 975d
panic: ASan: Invalid access, NUM-byte write at ADDR, UMAUseAfterFree(fd) (2) C 66 186d 1079d 511d
SYZFATAL: Manager.Poll call failed: connection is shut down syz 78758 321d 1110d 1107d
panic: a thread waited too long to allocate a page 10137 9m 1214d 1214d
panic: failed to reclaim memory C 196752 now 1214d 1196d
panic: pmap_san_enter_alloc_4k: no memory to grow shadow map C 102452 now 1286d 596d
panic: Going nowhere without my init! C 448 7h41m 1437d 1437d
panic: size_on_all_streams smaller than control length (2) C 2080 18d 1728d 1728d
lost connection to test machine (2) syz 683226 now 2249d 295d
no output from test machine C 312921 now 2251d 1735d