syzbot

 sign-in | mailing list | source | docs
🐞 Open [95]
🐞 Fixed [350]
🐞 Invalid [381]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

Instances [tested repos]:
Name Last active Uptime Corpus Coverage 🛈 Crashes Execs Kernel build syzkaller build Bugs
Commit Config Freshness Status Commit Freshness Status All Only
ci-freebsd-i386 now 2h06m 8661 182784 674 518127 945ba658d803 .config 5h49m 528e2a84 3h41m all only
ci-freebsd-main now 2h40m 9006 107315 1829 548209 945ba658d803 .config 5h49m 528e2a84 3h41m all only
upstream (95):
Title Repro Cause bisect Fix bisect Count Last Reported Last activity
Fatal trap NUM: page fault in in_pcbremhash_locked (2) 1 4h11m 4h10m 4h10m
Fatal trap NUM: page fault in in_joingroup_locked 1 2d20h 2d20h 2d20h
panic: in6_pcbconnect: inp is already connected 6 1d14h 3d14h 3d14h
panic: proc_dtor: non-empty p_ktr 1 7d16h 7d16h 7d16h
SYZFAIL: repeatedly failed to execute the program 3 6d09h 14d 14d
freebsd test error: can't ssh into the instance 11 15d 15d 15d
freebsd build error (21) 3 16d 16d 16d
panic: kern_clock_gettime: NUM C 18 1d10h 18d 18d
SYZFAIL: ShmemBuilder: too large output offset 1 20d 20d 20d
panic: /syzkaller/managers/main/kernel/sys/kern/uipc_usrreq.c:LINE: uipc_sosend_stream_or_seqpacket: Empty stailq ADDR-> C 5 23d 23d 23d
panic: sleeping thread holds tun_mtx 72 1h41m 28d 28d
panic: brelse: non-VMIO buffer marked NOREUSE 124 5h37m 30d 30d
SYZFAIL: open of /dev/kcov failed 2913 24m 34d 34d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/i386/kernel/sys/kern/sys_socket.c:LINE (3) 3 13d 39d 39d
panic: pfi_kkif_attach: null kif 3 8d06h 39d 39d
panic: vm_object_unwire: missing page 3 4d04h 42d 42d
panic: negative vmsize for uid -NUM 1 48d 48d 48d
panic: /syzkaller/managers/i386/kernel/sys/kern/kern_timeout.c:LINE: callout_process: Bad tailq NEXT(ADDR->tqh_last) != 1 51d 51d 51d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: _callout_stop_safe: Bad link elm ADDR prev->next != 2 20d 53d 53d
panic: /syzkaller/managers/i386/kernel/sys/netinet/in_pcb.c:LINE: in_pcblbgroup_insert: Bad list head ADDR first->prev ! 1 53d 53d 53d
panic: mutex so_rcv not owned at /syzkaller/managers/i386/kernel/sys/kern/uipc_usrreq.c:LINE 6 51d 54d 54d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_process: Bad tailq NEXT(ADDR->tqh_last) != 1 55d 55d 55d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: _callout_stop_safe: Bad link elm ADDR next->prev != syz 2 55d 55d 55d
freebsd test error: SYZFATAL: image testing failed w/o kernel bug (2) 3 21d 57d 57d
panic: /syzkaller/managers/i386/kernel/sys/kern/uipc_usrreq.c:LINE: uipc_sosend_stream_or_seqpacket: Empty stailq ADDR-> 578 3h23m 59d 59d
panic: Assertion m->m_flags & M_BLOCKED failed at /syzkaller/managers/main/kernel/sys/kern/uipc_usrreq.c:LINE C 33 43d 59d 59d
panic: Assertion pd->pcksum failed at /syzkaller/managers/main/kernel/sys/netpfil/pf/pf.c:LINE 7 23d 59d 59d
panic: tcp_do_segment: sent too much: NUM>NUM 52 1d16h 60d 60d
panic: /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE: in_pcblbgroup_insert: Bad list head ADDR first->prev ! 3 24d 61d 61d
panic: /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE: in_pcbremlbgrouphash: Bad link elm ADDR next->prev != 1 61d 61d 61d
panic: vm_page_dirty: page is invalid! 2 20d 62d 62d
panic: Assertion pd->pcksum failed at /syzkaller/managers/i386/kernel/sys/netpfil/pf/pf.c:LINE 1 63d 63d 63d
panic: ASan: Invalid access, NUM-byte read at ADDR, StackMiddle(f2) (3) 5 32d 63d 63d
panic: negative vmsize for uid NUM 18 19h07m 66d 66d
Fatal trap NUM: page fault in witness_checkorder 4 51d 66d 66d
Fatal trap NUM: page fault in __mtx_lock_flags (4) 1 66d 66d 66d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h syz 379 46d 66d 66d
panic: /syzkaller/managers/i386/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h 202 37d 66d 66d
panic: executing segment marked as unreachable at /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE (in_pcbremlb 1 75d 75d 75d
panic: inconsistent boundary count NUM 2 9d01h 76d 76d
panic: ip6_deletefraghdr: ext headers not contigous in mbuf ADDR m_len NUM >= offset NUM + NUM 686 27d 77d 77d
Fatal trap NUM: page fault in callout_process (4) syz 3565 5d08h 80d 78d
SYZFAIL: SIGBUS (2) 31 4d12h 100d 100d
SYZFAIL: SIGSEGV 37 18h52m 102d 102d
panic: if_ref: ifp ADDR has NUM refs (2) syz 2 14d 103d 14d
panic: vnode_pager_generic_getpages_done: page ADDR is mapped 6 19d 112d 112d
SYZFAIL: child stopped (2) 31 1d03h 116d 116d
SYZFAIL: clone failed (2) 3 47d 117d 117d
panic: mq notifiers left (3) 162 6h39m 118d 118d
panic: mld_change_state: bad ifp 5 21d 124d 124d
Fatal trap NUM: page fault in mld_change_state 6 17d 124d 124d
SYZFAIL: SIGILL (2) 243 11h51m 126d 126d
panic: pmap_growkernel: no memory to grow kernel (5) 457 15d 128d 128d
SYZFAIL: SIGFPE (2) 224 15h07m 129d 129d
SYZFAIL: invalid kcov comp type (4) 2145 3h48m 142d 142d
SYZFAIL: posix_spawnp failed 46413 now 156d 156d
SYZFAIL: too much cover (3) 1109 57m 194d 194d
panic: pmap_demote_pde: a wired mapping is missing PG_A 55 1h11m 207d 207d
panic: vm_object_terminate_single_page: page ADDR does not belong to a queue 40 4d13h 254d 254d
SYZFAIL: cover mmap failed (2) 1815 27m 305d 305d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/main/kernel/sys/kern/sys_socket.c:LINE (4) C 26 3d04h 309d 309d
Fatal trap NUM: page fault in in6m_disconnect_locked syz 19 16d 320d 320d
SYZFAIL: too many calls in output 145 19h03m 349d 349d
Fatal trap NUM: page fault while in kernel mode (6) syz 164 11h57m 350d 320d
SYZFAIL: failed to send rpc 390 12h06m 350d 350d
SYZFAIL: failed to recv rpc 91158 8m 351d 351d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (12) 134 14h05m 374d 374d
can't ssh into the instance 10499 now 408d 408d
SYZFAIL: leak checking is not implemented syz 76 406d 414d 414d
Fatal trap NUM: page fault in soisconnected C 2 450d 450d 450d
panic: size_on_reasm_queue is NUM (4) C 5 454d 532d 532d
SYZFAIL: child failed (2) syz 4787 1h06m 537d 537d
corrupted report (5) 513 1h08m 562d 562d
SYZFAIL: command failed (2) syz 15 11h07m 566d 566d
Fatal trap NUM: page fault in nd6_dad_timer (6) syz 13 263d 585d 528d
Fatal trap NUM: page fault in in_pcbbind_setup C 1 650d 650d 650d
suppressed report (4) 12230 now 709d 709d
SYZFAIL: tun: can't open device (2) syz 159 16h36m 710d 710d
panic: mutex Giant owned at /syzkaller/managers/main/kernel/sys/kern/kern_thread.c:LINE C 1112 670d 730d 730d
Fatal trap NUM: page fault in kasan_atomic_load_int (3) C 14 456d 1016d 1003d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-tcb @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb. (3) syz 7 526d 1026d 1026d
Fatal trap NUM: page fault in ip6_output syz 20013 28d 1079d 1060d
panic: Assertion v != tid failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:LINE (2) syz 262 49d 1099d 1099d
panic: ASan: Invalid access, NUM-byte write at ADDR, MallocRedZone(fb) C 1 1108d 1108d 1108d
panic: ASan: Invalid access, NUM-byte read at ADDR, UMAUseAfterFree(fd) (4) C 1423 5h07m 1111d 985d
Fatal trap NUM: page fault in __mtx_assert C 242 489d 1127d 1027d
panic: ASan: Invalid access, NUM-byte write at ADDR, UMAUseAfterFree(fd) (2) C 73 20d 1131d 563d
SYZFATAL: Manager.Poll call failed: connection is shut down syz 78758 373d 1162d 1159d
panic: a thread waited too long to allocate a page 21940 28m 1266d 1266d
panic: failed to reclaim memory C 261973 now 1266d 1248d
panic: pmap_san_enter_alloc_4k: no memory to grow shadow map C 130926 now 1338d 648d
panic: Going nowhere without my init! C 1016 2d06h 1489d 1489d
panic: size_on_all_streams smaller than control length (2) C 2081 35d 1780d 1780d
lost connection to test machine (2) C 731811 now 2301d 5d19h
no output from test machine C 330623 now 2303d 1786d