syzbot

 sign-in | mailing list | source | docs
🐞 Open [101]
🐞 Fixed [365]
🐞 Invalid [395]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

Instances [tested repos]:
Name Last active Uptime Corpus Coverage 🛈 Crashes Execs Kernel build syzkaller build Bugs
Commit Config Freshness Status Commit Freshness Status All Only
ci-freebsd-i386 now 3d00h 10008 182612 1686 491127 c04fe26aa2f7 .config 14d failing 807a3b61 3d05h all only
ci-freebsd-main now 3d00h 9481 107372 3730 666191 c04fe26aa2f7 .config 14d failing 807a3b61 3d05h all only
upstream (101):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Last activity
panic: Assertion pd->pcksum failed at /syzkaller/managers/i386/kernel/sys/netpfil/pf/pf.c:LINE (2) 2 1 1d07h 1d07h 1d07h
panic: ASan: Invalid access, NUM-byte read at ADDR, StackLeft(f1) (3) 2 syz 2 1d12h 1d17h 1d12h
Fatal trap NUM: page fault in ip6_freemoptions -1 1 2d09h 2d09h 2d09h
panic: flush_newblk_dep: Bad newblk ADDR 2 3 3d23h 3d23h 3d23h
panic: pmap_remove_all: page ADDR is not managed 2 2 5d08h 5d08h 5d08h
panic: vm_page_grab_zero_partial: page ADDR is invalid 2 1 6d10h 6d10h 6d10h
panic: vfs_knl_assert_locked: vnode is not locked but should be 2 1 6d11h 6d10h 6d10h
panic: /syzkaller/managers/i386/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h (2) 2 4 9d10h 9d11h 9d11h
panic: No memory for IFN 2 1 11d 11d 11d
panic: vtnet_txq_offload_ctx: mbuf ADDR start NUM offset NUM proto -NUM (3) 2 C 6 14d 14d 14d
SYZFAIL: failed to mkdir -1 2 20d 20d 20d
panic: No memory for IFA 2 1 20d 20d 20d
panic: Assertion !(sb->sb_state & SBS_CANTRCVMORE) failed at /syzkaller/managers/main/kernel/sys/kern/uipc_usrreq.c:LINE 2 C 9 6d14h 22d 22d
panic: igmp_change_state: no igmp_ifsoftc for ifp ADDR 2 1 37d 37d 37d
panic: sleeping thread[ htholredsa d tpuin_dm 2tx ti 2 1 37d 37d 37d
panic: m_apply, length > size of mbuf chain (NUM extra) 2 C 3 39d 39d 39d
panic: CURVNET_SET at /syzkaller/managers/main/kernel/sys/netinet6/in6_mcast.c:LINE inp_gcmoptions() curvnet=ADDR vnet=N 2 2 38d 41d 41d
Fatal trap NUM: page fault in in6_selecthlim (4) -1 1 42d 42d 42d
Fatal trap NUM: page fault in link_elf_search_symbol -1 1 46d 46d 46d
panic: deadlres_td_sleep_q: possible deadlock detected for ADDR (syz-executor), blocked for ADDR ticks 2 1 49d 49d 49d
panic: starting DAD on non-tentative address ADDR 2 1 52d 52d 52d
panic: ASan: Invalid access, NUM-byte read at ADDR, MallocRedZone(fb) (4) 2 1 53d 53d 53d
panic: witness_warn (3) 2 1 56d 56d 56d
Fatal trap NUM: page fault in in_pcbremhash_locked (2) -1 34 17h46m 59d 59d
Fatal trap NUM: page fault in in_joingroup_locked -1 2 9d00h 62d 62d
panic: proc_dtor: non-empty p_ktr 2 1 67d 67d 67d
SYZFAIL: repeatedly failed to execute the program -1 14 4d17h 73d 73d
freebsd build error (21) -1 415 37m 76d 76d
SYZFAIL: ShmemBuilder: too large output offset -1 1 79d 79d 79d
panic: /syzkaller/managers/main/kernel/sys/kern/uipc_usrreq.c:LINE: uipc_sosend_stream_or_seqpacket: Empty stailq ADDR-> 2 C 7 27d 83d 83d
panic: sleeping thread holds tun_mtx 2 514 1h11m 87d 87d
panic: brelse: non-VMIO buffer marked NOREUSE 2 468 37m 90d 90d
SYZFAIL: open of /dev/kcov failed -1 14056 12m 93d 93d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/i386/kernel/sys/kern/sys_socket.c:LINE (3) 2 3 72d 98d 98d
panic: pfi_kkif_attach: null kif 2 6 7d13h 98d 98d
panic: vm_object_unwire: missing page 2 6 15d 102d 102d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: _callout_stop_safe: Bad link elm ADDR prev->next != 2 2 79d 112d 112d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: _callout_stop_safe: Bad link elm ADDR next->prev != 2 syz 3 27d 114d 114d
freebsd test error: SYZFATAL: image testing failed w/o kernel bug (2) -1 3 81d 117d 117d
panic: /syzkaller/managers/i386/kernel/sys/kern/uipc_usrreq.c:LINE: uipc_sosend_stream_or_seqpacket: Empty stailq ADDR-> 2 1202 8m 118d 118d
panic: Assertion m->m_flags & M_BLOCKED failed at /syzkaller/managers/main/kernel/sys/kern/uipc_usrreq.c:LINE 2 C 33 102d 118d 118d
panic: Assertion pd->pcksum failed at /syzkaller/managers/main/kernel/sys/netpfil/pf/pf.c:LINE 2 7 82d 119d 119d
panic: /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE: in_pcblbgroup_insert: Bad list head ADDR first->prev ! 2 3 83d 120d 120d
panic: vm_page_dirty: page is invalid! 2 2 79d 121d 121d
panic: ASan: Invalid access, NUM-byte read at ADDR, StackMiddle(f2) (3) 2 23 5d01h 122d 122d
panic: negative vmsize for uid NUM 2 31 1h55m 125d 125d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h 2 syz 448 22d 126d 125d
panic: inconsistent boundary count NUM 2 4 2d20h 136d 136d
Fatal trap NUM: page fault in callout_process (4) -1 syz 3887 1d17h 139d 137d
SYZFAIL: SIGBUS (2) -1 51 1d08h 160d 160d
SYZFAIL: SIGSEGV -1 51 3d19h 161d 161d
panic: if_ref: ifp ADDR has NUM refs (2) 2 syz 2 73d 162d 73d
panic: vnode_pager_generic_getpages_done: page ADDR is mapped 2 9 42d 172d 172d
SYZFAIL: child stopped (2) -1 66 4d14h 175d 175d
SYZFAIL: clone failed (2) -1 15 4d05h 177d 177d
panic: mq notifiers left (3) 2 491 1h36m 177d 177d
panic: mld_change_state: bad ifp 2 12 2d05h 183d 183d
Fatal trap NUM: page fault in mld_change_state -1 8 12d 183d 183d
SYZFAIL: SIGILL (2) -1 423 4h01m 186d 186d
SYZFAIL: SIGFPE (2) -1 396 1h43m 188d 188d
SYZFAIL: invalid kcov comp type (4) -1 5666 10h26m 202d 202d
SYZFAIL: posix_spawnp failed -1 86916 now 215d 215d
SYZFAIL: too much cover (3) -1 4081 now 253d 253d
panic: pmap_demote_pde: a wired mapping is missing PG_A 2 67 40d 267d 267d
panic: vm_object_terminate_single_page: page ADDR does not belong to a queue 2 73 1d04h 313d 313d
SYZFAIL: cover mmap failed (2) -1 5036 31m 364d 364d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/main/kernel/sys/kern/sys_socket.c:LINE (4) 2 C 32 2d05h 369d 368d
Fatal trap NUM: page fault in in6m_disconnect_locked -1 syz 36 5d07h 379d 379d
SYZFAIL: too many calls in output -1 248 6h31m 408d 408d
Fatal trap NUM: page fault while in kernel mode (6) -1 syz 165 14d 409d 380d
SYZFAIL: failed to send rpc -1 621 4h59m 410d 410d
SYZFAIL: failed to recv rpc -1 106912 30m 410d 410d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (12) -1 198 27d 433d 433d
can't ssh into the instance -1 23243 1h54m 467d 467d
SYZFAIL: leak checking is not implemented -1 syz 76 466d 473d 473d
Fatal trap NUM: page fault in soisconnected -1 C 2 510d 510d 510d
panic: size_on_reasm_queue is NUM (4) 2 C 5 513d 591d 591d
SYZFAIL: child failed (2) -1 syz 8800 27m 596d 596d
corrupted report (5) -1 819 6h48m 622d 622d
SYZFAIL: command failed (2) -1 syz 19 3d01h 625d 625d
Fatal trap NUM: page fault in nd6_dad_timer (6) -1 syz 13 322d 644d 587d
Fatal trap NUM: page fault in in_pcbbind_setup -1 C 1 710d 710d 710d
suppressed report (4) -1 15510 2h51m 769d 769d
SYZFAIL: tun: can't open device (2) -1 syz 805 3h39m 769d 769d
panic: mutex Giant owned at /syzkaller/managers/main/kernel/sys/kern/kern_thread.c:LINE 2 C 1112 729d 790d 790d
Fatal trap NUM: page fault in kasan_atomic_load_int (3) -1 C 14 516d 1076d 1062d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-tcb @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb. (3) 2 syz 7 586d 1086d 1086d
Fatal trap NUM: page fault in ip6_output -1 syz 20015 42d 1138d 1120d
panic: Assertion v != tid failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:LINE (2) 2 syz 262 109d 1159d 1159d
panic: ASan: Invalid access, NUM-byte write at ADDR, MallocRedZone(fb) 2 C 1 1167d 1167d 1167d
panic: ASan: Invalid access, NUM-byte read at ADDR, UMAUseAfterFree(fd) (4) 2 C 1556 10m 1170d 1045d
Fatal trap NUM: page fault in __mtx_assert -1 C 242 548d 1186d 1086d
panic: ASan: Invalid access, NUM-byte write at ADDR, UMAUseAfterFree(fd) (2) 2 C 74 10d 1190d 622d
SYZFATAL: Manager.Poll call failed: connection is shut down -1 syz 78758 432d 1221d 1218d
panic: a thread waited too long to allocate a page 2 35298 now 1325d 1325d
panic: failed to reclaim memory 2 C 331456 now 1325d 1307d
panic: pmap_san_enter_alloc_4k: no memory to grow shadow map 2 C 162803 now 1397d 707d
panic: Going nowhere without my init! 2 C 1137 13h15m 1549d 1548d
panic: size_on_all_streams smaller than control length (2) 2 C 2082 25d 1839d 1839d
lost connection to test machine (2) -1 C 795477 now 2360d 65d
no output from test machine -1 C 347011 now 2362d 1846d