syzbot

 sign-in | mailing list | source | docs
🐞 Open [98]
🐞 Fixed [364]
🐞 Invalid [387]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

Instances [tested repos]:
Name Last active Uptime Corpus Coverage 🛈 Crashes Execs Kernel build syzkaller build Bugs
Commit Config Freshness Status Commit Freshness Status All Only
ci-freebsd-i386 1h15m 12h39m 9196 187232 699 313829 0950ab7d7695 .config 1h04m 4bd24a3e 1h41m all only
ci-freebsd-main now 30m 9027 108005 1798 380218 0950ab7d7695 .config 1h04m 4bd24a3e 1h41m all only
upstream (98):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Last activity
panic: Assertion too many supplementary groups failed at /syzkaller/managers/i386/kernel/sys/kern/kern_prot.c:LINE 2 152 1d06h 5d17h 5d17h
panic: igmp_change_state: no igmp_ifsoftc for ifp ADDR 2 1 10d 10d 10d
panic: sleeping thread[ htholredsa d tpuin_dm 2tx ti 2 1 11d 11d 11d
panic: m_apply, length > size of mbuf chain (NUM extra) 2 C 3 13d 13d 13d
panic: CURVNET_SET at /syzkaller/managers/main/kernel/sys/netinet6/in6_mcast.c:LINE inp_gcmoptions() curvnet=ADDR vnet=N 2 2 11d 15d 15d
Fatal trap NUM: page fault in in6_selecthlim (4) -1 1 15d 15d 15d
Fatal trap NUM: page fault in link_elf_search_symbol -1 1 19d 19d 19d
panic: deadlres_td_sleep_q: possible deadlock detected for ADDR (syz-executor), blocked for ADDR ticks 2 1 23d 23d 23d
panic: starting DAD on non-tentative address ADDR 2 1 26d 26d 26d
panic: ASan: Invalid access, NUM-byte read at ADDR, MallocRedZone(fb) (4) 2 1 26d 26d 26d
panic: witness_warn (3) 2 1 29d 29d 29d
Fatal trap NUM: page fault in in_pcbremhash_locked (2) -1 23 2d12h 33d 33d
Fatal trap NUM: page fault in in_joingroup_locked -1 1 35d 35d 35d
panic: proc_dtor: non-empty p_ktr 2 1 40d 40d 40d
SYZFAIL: repeatedly failed to execute the program -1 10 2d03h 47d 47d
freebsd test error: can't ssh into the instance -1 11 48d 48d 48d
freebsd build error (21) -1 11 22d 49d 49d
panic: kern_clock_gettime: NUM 2 C 88 10h03m 51d 51d
SYZFAIL: ShmemBuilder: too large output offset -1 1 53d 53d 53d
panic: /syzkaller/managers/main/kernel/sys/kern/uipc_usrreq.c:LINE: uipc_sosend_stream_or_seqpacket: Empty stailq ADDR-> 2 C 7 22h35m 56d 56d
panic: sleeping thread holds tun_mtx 2 285 2h27m 61d 61d
panic: brelse: non-VMIO buffer marked NOREUSE 2 232 8h47m 63d 63d
SYZFAIL: open of /dev/kcov failed -1 9760 now 67d 67d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/i386/kernel/sys/kern/sys_socket.c:LINE (3) 2 3 46d 72d 72d
panic: pfi_kkif_attach: null kif 2 5 7d03h 72d 72d
panic: vm_object_unwire: missing page 2 5 18h12m 75d 75d
panic: negative vmsize for uid -NUM 2 1 81d 81d 81d
panic: /syzkaller/managers/i386/kernel/sys/kern/kern_timeout.c:LINE: callout_process: Bad tailq NEXT(ADDR->tqh_last) != 2 1 84d 84d 84d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: _callout_stop_safe: Bad link elm ADDR prev->next != 2 2 53d 85d 85d
panic: /syzkaller/managers/i386/kernel/sys/netinet/in_pcb.c:LINE: in_pcblbgroup_insert: Bad list head ADDR first->prev ! 2 1 86d 86d 86d
panic: mutex so_rcv not owned at /syzkaller/managers/i386/kernel/sys/kern/uipc_usrreq.c:LINE 2 6 84d 87d 87d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_process: Bad tailq NEXT(ADDR->tqh_last) != 2 1 88d 88d 88d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: _callout_stop_safe: Bad link elm ADDR next->prev != 2 syz 3 20h50m 88d 88d
freebsd test error: SYZFATAL: image testing failed w/o kernel bug (2) -1 3 54d 90d 90d
panic: /syzkaller/managers/i386/kernel/sys/kern/uipc_usrreq.c:LINE: uipc_sosend_stream_or_seqpacket: Empty stailq ADDR-> 2 999 4h07m 92d 92d
panic: Assertion m->m_flags & M_BLOCKED failed at /syzkaller/managers/main/kernel/sys/kern/uipc_usrreq.c:LINE 2 C 33 76d 92d 92d
panic: Assertion pd->pcksum failed at /syzkaller/managers/main/kernel/sys/netpfil/pf/pf.c:LINE 2 7 55d 92d 92d
panic: /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE: in_pcblbgroup_insert: Bad list head ADDR first->prev ! 2 3 56d 94d 94d
panic: vm_page_dirty: page is invalid! 2 2 53d 95d 95d
panic: ASan: Invalid access, NUM-byte read at ADDR, StackMiddle(f2) (3) 2 14 11d 96d 96d
panic: negative vmsize for uid NUM 2 29 15d 99d 99d
Fatal trap NUM: page fault in witness_checkorder -1 4 84d 99d 99d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h 2 syz 414 3h31m 99d 99d
panic: inconsistent boundary count NUM 2 3 5d02h 109d 109d
Fatal trap NUM: page fault in callout_process (4) -1 syz 3732 17m 113d 111d
SYZFAIL: SIGBUS (2) -1 42 8d03h 133d 133d
SYZFAIL: SIGSEGV -1 47 1d18h 135d 135d
panic: if_ref: ifp ADDR has NUM refs (2) 2 syz 2 47d 136d 47d
panic: vnode_pager_generic_getpages_done: page ADDR is mapped 2 9 16d 145d 145d
SYZFAIL: child stopped (2) -1 54 23h58m 149d 149d
SYZFAIL: clone failed (2) -1 10 5h25m 150d 150d
panic: mq notifiers left (3) 2 313 1h33m 151d 151d
panic: mld_change_state: bad ifp 2 10 3d13h 157d 157d
Fatal trap NUM: page fault in mld_change_state -1 6 50d 157d 157d
SYZFAIL: SIGILL (2) -1 333 8h20m 159d 159d
panic: pmap_growkernel: no memory to grow kernel (5) 2 457 48d 161d 161d
SYZFAIL: SIGFPE (2) -1 321 2h19m 161d 161d
SYZFAIL: invalid kcov comp type (4) -1 4457 1h20m 175d 175d
SYZFAIL: posix_spawnp failed -1 65865 1h18m 189d 189d
SYZFAIL: too much cover (3) -1 2697 1h17m 226d 226d
panic: pmap_demote_pde: a wired mapping is missing PG_A 2 67 14d 240d 240d
panic: vm_object_terminate_single_page: page ADDR does not belong to a queue 2 46 7d01h 287d 287d
SYZFAIL: cover mmap failed (2) -1 3493 2h03m 337d 337d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/main/kernel/sys/kern/sys_socket.c:LINE (4) 2 C 29 8d03h 342d 342d
Fatal trap NUM: page fault in in6m_disconnect_locked -1 syz 28 7d02h 353d 353d
SYZFAIL: too many calls in output -1 196 17h47m 382d 382d
Fatal trap NUM: page fault while in kernel mode (6) -1 syz 164 33d 382d 353d
SYZFAIL: failed to send rpc -1 510 14h20m 383d 383d
SYZFAIL: failed to recv rpc -1 101095 15m 384d 384d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (12) -1 198 21h34m 406d 406d
can't ssh into the instance -1 21247 1h18m 440d 440d
SYZFAIL: leak checking is not implemented -1 syz 76 439d 446d 446d
Fatal trap NUM: page fault in soisconnected -1 C 2 483d 483d 483d
panic: size_on_reasm_queue is NUM (4) 2 C 5 487d 565d 565d
SYZFAIL: child failed (2) -1 syz 6952 1h20m 570d 570d
corrupted report (5) -1 689 8h53m 595d 595d
SYZFAIL: command failed (2) -1 syz 16 1d10h 599d 599d
Fatal trap NUM: page fault in nd6_dad_timer (6) -1 syz 13 296d 618d 561d
Fatal trap NUM: page fault in in_pcbbind_setup -1 C 1 683d 683d 683d
suppressed report (4) -1 14082 2h47m 742d 742d
SYZFAIL: tun: can't open device (2) -1 syz 532 17m 743d 743d
panic: mutex Giant owned at /syzkaller/managers/main/kernel/sys/kern/kern_thread.c:LINE 2 C 1112 703d 763d 763d
Fatal trap NUM: page fault in kasan_atomic_load_int (3) -1 C 14 489d 1049d 1035d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-tcb @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb. (3) 2 syz 7 559d 1059d 1059d
Fatal trap NUM: page fault in ip6_output -1 syz 20015 15d 1112d 1093d
panic: Assertion v != tid failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:LINE (2) 2 syz 262 82d 1132d 1132d
panic: ASan: Invalid access, NUM-byte write at ADDR, MallocRedZone(fb) 2 C 1 1141d 1141d 1141d
panic: ASan: Invalid access, NUM-byte read at ADDR, UMAUseAfterFree(fd) (4) 2 C 1500 7h28m 1144d 1018d
Fatal trap NUM: page fault in __mtx_assert -1 C 242 522d 1160d 1060d
panic: ASan: Invalid access, NUM-byte write at ADDR, UMAUseAfterFree(fd) (2) 2 C 73 53d 1164d 596d
SYZFATAL: Manager.Poll call failed: connection is shut down -1 syz 78758 405d 1195d 1192d
panic: a thread waited too long to allocate a page 2 28288 1h17m 1299d 1299d
panic: failed to reclaim memory 2 C 295866 now 1299d 1281d
panic: pmap_san_enter_alloc_4k: no memory to grow shadow map 2 C 145812 1h19m 1371d 681d
panic: Going nowhere without my init! 2 C 1103 21h19m 1522d 1522d
panic: size_on_all_streams smaller than control length (2) 2 C 2081 68d 1813d 1813d
lost connection to test machine (2) -1 C 772001 8m 2333d 38d
no output from test machine -1 C 339572 9m 2335d 1819d