syzbot

 sign-in | mailing list | source | docs
🐞 Open [91]
🐞 Fixed [347]
🐞 Invalid [381]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

Instances [tested repos]:
Name Last active Uptime Corpus Coverage 🛈 Crashes Execs Kernel build syzkaller build Bugs
Commit Config Freshness Status Commit Freshness Status All Only
ci-freebsd-main now 1h14m 9233 108570 2861 771650 fe55780e5f10 .config 2d18h 1a7fb460 2h14m all only
Applied filters: Manager=ci-freebsd-main (drop)
upstream (81):
Title Repro Cause bisect Fix bisect Count Last Reported Last activity
SYZFAIL: repeatedly failed to execute the program 2 9h46m 3d10h 3d10h
freebsd test error: can't ssh into the instance 11 4d18h 5d02h 5d02h
freebsd build error (21) 3 6d01h 6d02h 6d02h
panic: kern_clock_gettime: NUM C 13 11h58m 7d20h 7d19h
SYZFAIL: ShmemBuilder: too large output offset 1 9d10h 9d10h 9d10h
panic: /syzkaller/managers/main/kernel/sys/kern/uipc_usrreq.c:LINE: uipc_sosend_stream_or_seqpacket: Empty stailq ADDR-> C 5 12d 13d 12d
panic: sleeping thread holds tun_mtx 47 13h30m 17d 17d
panic: brelse: non-VMIO buffer marked NOREUSE 84 5h40m 20d 20d
SYZFAIL: open of /dev/kcov failed 1072 now 23d 23d
panic: pfi_kkif_attach: null kif 2 17d 28d 28d
panic: vm_object_unwire: missing page 2 17d 31d 31d
panic: negative vmsize for uid -NUM 1 37d 37d 37d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: _callout_stop_safe: Bad link elm ADDR prev->next != 2 9d13h 42d 42d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_process: Bad tailq NEXT(ADDR->tqh_last) != 1 44d 44d 44d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: _callout_stop_safe: Bad link elm ADDR next->prev != syz 2 44d 44d 44d
freebsd test error: SYZFATAL: image testing failed w/o kernel bug (2) 3 10d 47d 47d
panic: Assertion m->m_flags & M_BLOCKED failed at /syzkaller/managers/main/kernel/sys/kern/uipc_usrreq.c:LINE C 33 32d 48d 48d
panic: Assertion pd->pcksum failed at /syzkaller/managers/main/kernel/sys/netpfil/pf/pf.c:LINE 7 12d 49d 49d
panic: tcp_do_segment: sent too much: NUM>NUM 45 1d00h 49d 49d
panic: /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE: in_pcblbgroup_insert: Bad list head ADDR first->prev ! 3 13d 50d 50d
panic: /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE: in_pcbremlbgrouphash: Bad link elm ADDR next->prev != 1 50d 50d 50d
panic: vm_page_dirty: page is invalid! 2 9d09h 51d 51d
panic: ASan: Invalid access, NUM-byte read at ADDR, StackMiddle(f2) (3) 5 21d 52d 52d
panic: negative vmsize for uid NUM 15 1d22h 55d 55d
Fatal trap NUM: page fault in witness_checkorder 4 40d 55d 55d
Fatal trap NUM: page fault in __mtx_lock_flags (4) 1 55d 55d 55d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h syz 379 35d 56d 55d
panic: executing segment marked as unreachable at /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE (in_pcbremlb 1 65d 65d 65d
panic: inconsistent boundary count NUM 1 65d 65d 65d
panic: ip6_deletefraghdr: ext headers not contigous in mbuf ADDR m_len NUM >= offset NUM + NUM 686 16d 66d 66d
Fatal trap NUM: page fault in callout_process (4) syz 3564 16d 69d 67d
SYZFAIL: SIGBUS (2) 29 1d03h 90d 90d
SYZFAIL: SIGSEGV 35 9h33m 91d 91d
panic: if_ref: ifp ADDR has NUM refs (2) syz 2 3d08h 92d 3d08h
SYZFAIL: child stopped (2) 27 4d15h 105d 105d
SYZFAIL: clone failed (2) 3 36d 107d 107d
panic: mq notifiers left (3) 140 6h07m 107d 107d
panic: mld_change_state: bad ifp 5 10d 113d 113d
Fatal trap NUM: page fault in mld_change_state 6 6d09h 113d 113d
SYZFAIL: SIGILL (2) 218 5h35m 115d 115d
panic: pmap_growkernel: no memory to grow kernel (5) 457 4d09h 118d 118d
SYZFAIL: SIGFPE (2) 197 3h09m 118d 118d
SYZFAIL: posix_spawnp failed 40981 1h57m 145d 145d
panic: pmap_demote_pde: a wired mapping is missing PG_A 51 21d 196d 196d
panic: vm_object_terminate_single_page: page ADDR does not belong to a queue 37 11h10m 243d 243d
SYZFAIL: cover mmap failed (2) 1265 55m 294d 294d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/main/kernel/sys/kern/sys_socket.c:LINE (4) C 25 19d 299d 298d
Fatal trap NUM: page fault in in6m_disconnect_locked syz 19 5d20h 309d 309d
SYZFAIL: too many calls in output 133 15h56m 338d 338d
Fatal trap NUM: page fault while in kernel mode (6) syz 154 42d 339d 309d
SYZFAIL: failed to send rpc 353 7h42m 339d 339d
SYZFAIL: failed to recv rpc 88158 7m 340d 340d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (12) 128 7d06h 363d 363d
can't ssh into the instance 5182 2h14m 397d 397d
SYZFAIL: leak checking is not implemented syz 76 395d 403d 403d
Fatal trap NUM: page fault in soisconnected C 2 439d 440d 439d
panic: size_on_reasm_queue is NUM (4) C 5 443d 521d 521d
SYZFAIL: child failed (2) syz 4129 2h03m 526d 526d
corrupted report (5) 392 6h26m 552d 552d
SYZFAIL: command failed (2) syz 12 7m 555d 555d
Fatal trap NUM: page fault in nd6_dad_timer (6) syz 13 252d 574d 517d
Fatal trap NUM: page fault in in_pcbbind_setup C 1 639d 639d 639d
suppressed report (4) 10848 15m 699d 699d
SYZFAIL: tun: can't open device (2) syz 136 12m 699d 699d
panic: mutex Giant owned at /syzkaller/managers/main/kernel/sys/kern/kern_thread.c:LINE C 1112 659d 720d 719d
Fatal trap NUM: page fault in kasan_atomic_load_int (3) C 14 446d 1006d 992d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-tcb @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb. (3) syz 7 516d 1016d 1016d
Fatal trap NUM: page fault in ip6_output syz 20013 17d 1068d 1050d
panic: Assertion v != tid failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:LINE (2) syz 262 38d 1088d 1088d
panic: ASan: Invalid access, NUM-byte write at ADDR, MallocRedZone(fb) C 1 1097d 1097d 1097d
panic: ASan: Invalid access, NUM-byte read at ADDR, UMAUseAfterFree(fd) (4) C 1405 6h37m 1100d 974d
Fatal trap NUM: page fault in __mtx_assert C 242 478d 1116d 1016d
panic: ASan: Invalid access, NUM-byte write at ADDR, UMAUseAfterFree(fd) (2) C 73 9d15h 1120d 552d
SYZFATAL: Manager.Poll call failed: connection is shut down syz 78758 362d 1151d 1148d
panic: a thread waited too long to allocate a page 20176 2h03m 1255d 1255d
panic: failed to reclaim memory C 251650 now 1255d 1237d
panic: pmap_san_enter_alloc_4k: no memory to grow shadow map C 126623 1h58m 1327d 637d
panic: Going nowhere without my init! C 1003 2h46m 1478d 1478d
panic: size_on_all_streams smaller than control length (2) C 2081 24d 1769d 1769d
lost connection to test machine (2) syz 720878 now 2290d 336d
no output from test machine C 327641 8m 2292d 1776d