syzbot

 sign-in | mailing list | source | docs
🐞 Open [99]
🐞 Fixed [365]
🐞 Invalid [395]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

Instances [tested repos]:
Name Last active Uptime Corpus Coverage 🛈 Crashes Execs Kernel build syzkaller build Bugs
Commit Config Freshness Status Commit Freshness Status All Only
ci-freebsd-i386 now 17h59m 9670 181896 790 338102 c04fe26aa2f7 .config 12d failing 807a3b61 22h41m all only
ci-freebsd-main now 17h59m 9375 107248 2506 478847 c04fe26aa2f7 .config 12d failing 807a3b61 22h41m all only
upstream (99):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Last activity
Fatal trap NUM: page fault in ip6_freemoptions -1 1 3h14m 3h14m 3h14m
panic: flush_newblk_dep: Bad newblk ADDR 2 3 1d16h 1d16h 1d16h
panic: pmap_remove_all: page ADDR is not managed 2 2 3d02h 3d02h 3d02h
panic: vm_page_grab_zero_partial: page ADDR is invalid 2 1 4d03h 4d03h 4d03h
panic: vfs_knl_assert_locked: vnode is not locked but should be 2 1 4d04h 4d04h 4d04h
panic: /syzkaller/managers/i386/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h (2) 2 4 7d04h 7d04h 7d04h
panic: No memory for IFN 2 1 9d10h 9d10h 9d10h
panic: vtnet_txq_offload_ctx: mbuf ADDR start NUM offset NUM proto -NUM (3) 2 C 6 11d 12d 12d
SYZFAIL: failed to mkdir -1 2 18d 18d 18d
panic: No memory for IFA 2 1 18d 18d 18d
panic: Assertion !(sb->sb_state & SBS_CANTRCVMORE) failed at /syzkaller/managers/main/kernel/sys/kern/uipc_usrreq.c:LINE 2 C 9 4d08h 20d 20d
panic: igmp_change_state: no igmp_ifsoftc for ifp ADDR 2 1 35d 35d 35d
panic: sleeping thread[ htholredsa d tpuin_dm 2tx ti 2 1 35d 35d 35d
panic: m_apply, length > size of mbuf chain (NUM extra) 2 C 3 37d 37d 37d
panic: CURVNET_SET at /syzkaller/managers/main/kernel/sys/netinet6/in6_mcast.c:LINE inp_gcmoptions() curvnet=ADDR vnet=N 2 2 35d 39d 39d
Fatal trap NUM: page fault in in6_selecthlim (4) -1 1 39d 39d 39d
Fatal trap NUM: page fault in link_elf_search_symbol -1 1 43d 43d 43d
panic: deadlres_td_sleep_q: possible deadlock detected for ADDR (syz-executor), blocked for ADDR ticks 2 1 47d 47d 47d
panic: starting DAD on non-tentative address ADDR 2 1 50d 50d 50d
panic: ASan: Invalid access, NUM-byte read at ADDR, MallocRedZone(fb) (4) 2 1 50d 50d 50d
panic: witness_warn (3) 2 1 54d 54d 54d
Fatal trap NUM: page fault in in_pcbremhash_locked (2) -1 32 22h59m 57d 57d
Fatal trap NUM: page fault in in_joingroup_locked -1 2 6d17h 59d 59d
panic: proc_dtor: non-empty p_ktr 2 1 64d 64d 64d
SYZFAIL: repeatedly failed to execute the program -1 14 2d11h 71d 71d
freebsd build error (21) -1 393 now 73d 73d
SYZFAIL: ShmemBuilder: too large output offset -1 1 77d 77d 77d
panic: /syzkaller/managers/main/kernel/sys/kern/uipc_usrreq.c:LINE: uipc_sosend_stream_or_seqpacket: Empty stailq ADDR-> 2 C 7 25d 80d 80d
panic: sleeping thread holds tun_mtx 2 493 1h19m 85d 85d
panic: brelse: non-VMIO buffer marked NOREUSE 2 439 1h35m 88d 88d
SYZFAIL: open of /dev/kcov failed -1 13762 13m 91d 91d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/i386/kernel/sys/kern/sys_socket.c:LINE (3) 2 3 70d 96d 96d
panic: pfi_kkif_attach: null kif 2 6 5d07h 96d 96d
panic: vm_object_unwire: missing page 2 6 13d 99d 99d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: _callout_stop_safe: Bad link elm ADDR prev->next != 2 2 77d 110d 110d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: _callout_stop_safe: Bad link elm ADDR next->prev != 2 syz 3 25d 112d 112d
freebsd test error: SYZFATAL: image testing failed w/o kernel bug (2) -1 3 78d 115d 115d
panic: /syzkaller/managers/i386/kernel/sys/kern/uipc_usrreq.c:LINE: uipc_sosend_stream_or_seqpacket: Empty stailq ADDR-> 2 1166 7h36m 116d 116d
panic: Assertion m->m_flags & M_BLOCKED failed at /syzkaller/managers/main/kernel/sys/kern/uipc_usrreq.c:LINE 2 C 33 100d 116d 116d
panic: Assertion pd->pcksum failed at /syzkaller/managers/main/kernel/sys/netpfil/pf/pf.c:LINE 2 7 80d 116d 116d
panic: /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE: in_pcblbgroup_insert: Bad list head ADDR first->prev ! 2 3 81d 118d 118d
panic: vm_page_dirty: page is invalid! 2 2 77d 119d 119d
panic: ASan: Invalid access, NUM-byte read at ADDR, StackMiddle(f2) (3) 2 23 2d19h 120d 120d
panic: negative vmsize for uid NUM 2 29 39d 123d 123d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h 2 syz 448 20d 123d 123d
panic: inconsistent boundary count NUM 2 4 13h51m 133d 133d
Fatal trap NUM: page fault in callout_process (4) -1 syz 3885 7d04h 137d 135d
SYZFAIL: SIGBUS (2) -1 50 22h07m 157d 157d
SYZFAIL: SIGSEGV -1 51 1d12h 159d 159d
panic: if_ref: ifp ADDR has NUM refs (2) 2 syz 2 71d 160d 71d
panic: vnode_pager_generic_getpages_done: page ADDR is mapped 2 9 40d 169d 169d
SYZFAIL: child stopped (2) -1 66 2d08h 173d 173d
SYZFAIL: clone failed (2) -1 15 1d22h 174d 174d
panic: mq notifiers left (3) 2 477 11m 175d 175d
panic: mld_change_state: bad ifp 2 11 7d19h 181d 181d
Fatal trap NUM: page fault in mld_change_state -1 8 10d 181d 181d
SYZFAIL: SIGILL (2) -1 411 9h18m 183d 183d
SYZFAIL: SIGFPE (2) -1 385 4h40m 186d 186d
SYZFAIL: invalid kcov comp type (4) -1 5630 1h36m 199d 199d
SYZFAIL: posix_spawnp failed -1 84116 now 213d 213d
SYZFAIL: too much cover (3) -1 3825 12m 251d 251d
panic: pmap_demote_pde: a wired mapping is missing PG_A 2 67 38d 264d 264d
panic: vm_object_terminate_single_page: page ADDR does not belong to a queue 2 71 5h24m 311d 311d
SYZFAIL: cover mmap failed (2) -1 4905 58m 362d 362d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/main/kernel/sys/kern/sys_socket.c:LINE (4) 2 C 30 17d 366d 366d
Fatal trap NUM: page fault in in6m_disconnect_locked -1 syz 36 3d01h 377d 377d
SYZFAIL: too many calls in output -1 244 4h02m 406d 406d
Fatal trap NUM: page fault while in kernel mode (6) -1 syz 165 12d 407d 377d
SYZFAIL: failed to send rpc -1 613 1d02h 407d 407d
SYZFAIL: failed to recv rpc -1 106637 now 408d 408d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (12) -1 198 25d 431d 431d
can't ssh into the instance -1 23119 28m 465d 465d
SYZFAIL: leak checking is not implemented -1 syz 76 463d 471d 471d
Fatal trap NUM: page fault in soisconnected -1 C 2 507d 507d 507d
panic: size_on_reasm_queue is NUM (4) 2 C 5 511d 589d 589d
SYZFAIL: child failed (2) -1 syz 8620 13m 594d 594d
corrupted report (5) -1 806 1h03m 620d 620d
SYZFAIL: command failed (2) -1 syz 19 19h22m 623d 623d
Fatal trap NUM: page fault in nd6_dad_timer (6) -1 syz 13 320d 642d 585d
Fatal trap NUM: page fault in in_pcbbind_setup -1 C 1 707d 707d 707d
suppressed report (4) -1 15379 16m 766d 766d
SYZFAIL: tun: can't open device (2) -1 syz 799 9h25m 767d 767d
panic: mutex Giant owned at /syzkaller/managers/main/kernel/sys/kern/kern_thread.c:LINE 2 C 1112 727d 787d 787d
Fatal trap NUM: page fault in kasan_atomic_load_int (3) -1 C 14 513d 1073d 1060d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-tcb @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb. (3) 2 syz 7 583d 1084d 1084d
Fatal trap NUM: page fault in ip6_output -1 syz 20015 40d 1136d 1118d
panic: Assertion v != tid failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:LINE (2) 2 syz 262 106d 1156d 1156d
panic: ASan: Invalid access, NUM-byte write at ADDR, MallocRedZone(fb) 2 C 1 1165d 1165d 1165d
panic: ASan: Invalid access, NUM-byte read at ADDR, UMAUseAfterFree(fd) (4) 2 C 1551 10h16m 1168d 1042d
Fatal trap NUM: page fault in __mtx_assert -1 C 242 546d 1184d 1084d
panic: ASan: Invalid access, NUM-byte write at ADDR, UMAUseAfterFree(fd) (2) 2 C 74 8d12h 1188d 620d
SYZFATAL: Manager.Poll call failed: connection is shut down -1 syz 78758 430d 1219d 1216d
panic: a thread waited too long to allocate a page 2 34518 6m 1323d 1323d
panic: failed to reclaim memory 2 C 327845 now 1323d 1305d
panic: pmap_san_enter_alloc_4k: no memory to grow shadow map 2 C 160896 now 1395d 705d
panic: Going nowhere without my init! 2 C 1135 11h08m 1546d 1546d
panic: size_on_all_streams smaller than control length (2) 2 C 2082 22d 1837d 1837d
lost connection to test machine (2) -1 C 793735 now 2358d 62d
no output from test machine -1 C 346316 now 2360d 1843d