syzbot

 sign-in | mailing list | source | docs
🐞 Open [89]
🐞 Fixed [346]
🐞 Invalid [378]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

Instances [tested repos]:
Name Last active Uptime Corpus Coverage 🛈 Crashes Execs Kernel build syzkaller build Bugs
Commit Config Freshness Status Commit Freshness Status All Only
ci-freebsd-i386 now 3m 9259 181737 384 168058 1fee99800a79 .config 11h24m 4826c28e 2d12h all only
ci-freebsd-main now 13h11m 9117 107379 1043 183176 99ec65e7fe61 .config 14h39m 4826c28e 2d12h all only
upstream (89):
Title Repro Cause bisect Fix bisect Count Last Reported Last activity
panic: sleeping thread holds tun_mtx 5 13h03m 2d18h 2d18h
panic: brelse: non-VMIO buffer marked NOREUSE 13 48m 5d15h 5d15h
SYZFAIL: open of /dev/kcov failed 1 9d01h 9d01h 9d01h
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/i386/kernel/sys/kern/sys_socket.c:LINE (3) 2 1d21h 14d 14d
panic: pfi_kkif_attach: null kif 2 2d16h 14d 14d
panic: vm_object_unwire: missing page 2 2d15h 17d 17d
panic: negative vmsize for uid -NUM 1 23d 23d 23d
panic: /syzkaller/managers/i386/kernel/sys/kern/kern_timeout.c:LINE: callout_process: Bad tailq NEXT(ADDR->tqh_last) != 1 26d 26d 26d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: _callout_stop_safe: Bad link elm ADDR prev->next != 1 27d 27d 27d
panic: /syzkaller/managers/i386/kernel/sys/netinet/in_pcb.c:LINE: in_pcblbgroup_insert: Bad list head ADDR first->prev ! 1 28d 28d 28d
panic: mutex so_rcv not owned at /syzkaller/managers/i386/kernel/sys/kern/uipc_usrreq.c:LINE 6 26d 29d 29d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_process: Bad tailq NEXT(ADDR->tqh_last) != 1 29d 29d 29d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: _callout_stop_safe: Bad link elm ADDR next->prev != syz 2 30d 30d 30d
freebsd test error: SYZFATAL: image testing failed w/o kernel bug (2) 1 32d 32d 32d
panic: /syzkaller/managers/i386/kernel/sys/kern/uipc_usrreq.c:LINE: uipc_sosend_stream_or_seqpacket: Empty stailq ADDR-> 281 52m 33d 33d
panic: Assertion m->m_flags & M_BLOCKED failed at /syzkaller/managers/main/kernel/sys/kern/uipc_usrreq.c:LINE C 33 18d 33d 33d
panic: Assertion pd->pcksum failed at /syzkaller/managers/main/kernel/sys/netpfil/pf/pf.c:LINE 6 14d 34d 34d
panic: tcp_do_segment: sent too much: NUM>NUM 33 11h23m 35d 35d
panic: /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE: in_pcblbgroup_insert: Bad list head ADDR first->prev ! 2 25d 35d 35d
panic: /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE: in_pcbremlbgrouphash: Bad link elm ADDR next->prev != 1 36d 36d 36d
panic: vm_page_dirty: page is invalid! 1 37d 37d 37d
panic: Assertion pd->pcksum failed at /syzkaller/managers/i386/kernel/sys/netpfil/pf/pf.c:LINE 1 38d 38d 38d
panic: ASan: Invalid access, NUM-byte read at ADDR, StackMiddle(f2) (3) 5 6d17h 38d 38d
panic: negative vmsize for uid NUM 11 12h39m 40d 40d
Fatal trap NUM: page fault in witness_checkorder 4 26d 41d 41d
Fatal trap NUM: page fault in __mtx_lock_flags (4) 1 41d 41d 41d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h syz 379 21d 41d 41d
panic: /syzkaller/managers/i386/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h 202 12d 41d 41d
panic: executing segment marked as unreachable at /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE (in_pcbremlb 1 50d 50d 50d
panic: inconsistent boundary count NUM 1 51d 51d 51d
panic: ip6_deletefraghdr: ext headers not contigous in mbuf ADDR m_len NUM >= offset NUM + NUM 686 2d10h 51d 51d
Fatal trap NUM: page fault in callout_process (4) syz 3564 1d12h 55d 52d
panic: Bad list head ADDR first->prev != head (2) 113 41d 69d 69d
panic: tcp_do_segment: sent too much 13 38d 70d 70d
SYZFAIL: SIGBUS (2) 20 7d19h 75d 75d
SYZFAIL: SIGSEGV 26 1d15h 76d 76d
panic: if_ref: ifp ADDR has NUM refs (2) 1 77d 77d 77d
panic: vnode_pager_generic_getpages_done: page ADDR is mapped 5 1d13h 87d 87d
SYZFAIL: child stopped (2) 24 10h38m 91d 91d
SYZFAIL: clone failed (2) 3 22d 92d 92d
panic: mq notifiers left (3) 112 1d00h 92d 92d
panic: mld_change_state: bad ifp 4 22d 98d 98d
Fatal trap NUM: page fault in mld_change_state 5 9d10h 99d 99d
SYZFAIL: SIGILL (2) 180 1d01h 101d 101d
panic: pmap_growkernel: no memory to grow kernel (5) 381 49m 103d 103d
SYZFAIL: SIGFPE (2) 166 1h00m 103d 103d
Fatal trap NUM: page fault in in_pcbremhash_locked C 188 4h06m 107d 98d
SYZFAIL: invalid kcov comp type (4) 943 1h57m 117d 117d
SYZFAIL: posix_spawnp failed 32245 now 131d 131d
SYZFAIL: too much cover (3) 305 2h43m 168d 168d
freebsd test error: lost connection to test machine (7) 2 86d 171d 171d
panic: pmap_demote_pde: a wired mapping is missing PG_A 51 7d08h 182d 182d
panic: vm_object_terminate_single_page: page ADDR does not belong to a queue 35 1d03h 229d 229d
SYZFAIL: cover mmap failed (2) 860 now 279d 279d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/main/kernel/sys/kern/sys_socket.c:LINE (4) C 25 4d17h 284d 283d
Fatal trap NUM: page fault in in6m_disconnect_locked syz 16 3d09h 295d 295d
SYZFAIL: too many calls in output 115 12m 324d 324d
Fatal trap NUM: page fault while in kernel mode (6) syz 154 27d 324d 295d
SYZFAIL: failed to send rpc 306 4h56m 325d 325d
SYZFAIL: failed to recv rpc 82901 38m 325d 325d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (12) 126 20d 348d 348d
can't ssh into the instance 3550 4h54m 382d 382d
SYZFAIL: leak checking is not implemented syz 76 381d 388d 388d
Fatal trap NUM: page fault in soisconnected C 2 425d 425d 425d
panic: size_on_reasm_queue is NUM (4) C 5 428d 507d 507d
SYZFAIL: child failed (2) syz 3684 41m 512d 512d
corrupted report (5) 316 17h20m 537d 537d
SYZFAIL: command failed (2) syz 10 26d 541d 541d
Fatal trap NUM: page fault in nd6_dad_timer (6) syz 13 237d 560d 502d
Fatal trap NUM: page fault in in_pcbbind_setup C 1 625d 625d 625d
suppressed report (4) 9638 35m 684d 684d
SYZFAIL: tun: can't open device (2) syz 18 9d07h 685d 685d
panic: mutex Giant owned at /syzkaller/managers/main/kernel/sys/kern/kern_thread.c:LINE C 1112 645d 705d 705d
Fatal trap NUM: page fault in kasan_atomic_load_int (3) C 14 431d 991d 977d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-tcb @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb. (3) syz 7 501d 1001d 1001d
Fatal trap NUM: page fault in ip6_output syz 20013 3d06h 1053d 1035d
panic: Assertion v != tid failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:LINE (2) syz 262 24d 1074d 1074d
panic: ASan: Invalid access, NUM-byte write at ADDR, MallocRedZone(fb) C 1 1082d 1082d 1082d
panic: ASan: Invalid access, NUM-byte read at ADDR, UMAUseAfterFree(fd) (4) C 1349 1h59m 1086d 960d
Fatal trap NUM: page fault in __mtx_assert C 242 463d 1101d 1002d
panic: ASan: Invalid access, NUM-byte write at ADDR, UMAUseAfterFree(fd) (2) C 72 4d16h 1106d 538d
SYZFATAL: Manager.Poll call failed: connection is shut down syz 78758 347d 1136d 1134d
panic: a thread waited too long to allocate a page 17096 now 1240d 1240d
panic: failed to reclaim memory C 232948 now 1241d 1223d
panic: pmap_san_enter_alloc_4k: no memory to grow shadow map C 118874 now 1312d 622d
panic: Going nowhere without my init! C 982 2h59m 1464d 1464d
panic: size_on_all_streams smaller than control length (2) C 2081 10d 1754d 1754d
lost connection to test machine (2) syz 707276 now 2275d 321d
no output from test machine C 323090 now 2277d 1761d