syzbot

 sign-in | mailing list | source | docs
🐞 Open [97]
🐞 Fixed [351]
🐞 Invalid [383]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

Instances [tested repos]:
Name Last active Uptime Corpus Coverage 🛈 Crashes Execs Kernel build syzkaller build Bugs
Commit Config Freshness Status Commit Freshness Status All Only
ci-freebsd-i386 now 6h10m 8937 182001 284 275757 0bf113e9041f .config 9h11m 7117feec 18h42m all only
ci-freebsd-main now 6h45m 8951 107617 837 225747 0bf113e9041f .config 9h11m 7117feec 18h42m all only
upstream (97):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Last activity
Fatal trap NUM: page fault in link_elf_search_symbol -1 1 1d09h 1d09h 1d09h
panic: deadlres_td_sleep_q: possible deadlock detected for ADDR (syz-executor), blocked for ADDR ticks 2 1 4d20h 4d20h 4d20h
panic: starting DAD on non-tentative address ADDR 2 1 8d05h 8d05h 8d05h
panic: ASan: Invalid access, NUM-byte read at ADDR, MallocRedZone(fb) (4) 2 1 8d08h 8d08h 8d08h
panic: witness_warn (3) 2 1 11d 11d 11d
Fatal trap NUM: page fault in in_pcbremhash_locked (2) -1 7 1d21h 14d 14d
Fatal trap NUM: page fault in in_joingroup_locked -1 1 17d 17d 17d
panic: proc_dtor: non-empty p_ktr 2 1 22d 22d 22d
SYZFAIL: repeatedly failed to execute the program -1 7 2d23h 28d 28d
freebsd test error: can't ssh into the instance -1 11 30d 30d 30d
freebsd build error (21) -1 11 3d18h 31d 31d
panic: kern_clock_gettime: NUM 2 C 47 11h38m 33d 33d
SYZFAIL: ShmemBuilder: too large output offset -1 1 34d 34d 34d
panic: /syzkaller/managers/main/kernel/sys/kern/uipc_usrreq.c:LINE: uipc_sosend_stream_or_seqpacket: Empty stailq ADDR-> 2 C 5 38d 38d 38d
panic: sleeping thread holds tun_mtx 2 139 50m 42d 42d
panic: brelse: non-VMIO buffer marked NOREUSE 2 185 1d12h 45d 45d
SYZFAIL: open of /dev/kcov failed -1 5277 now 49d 49d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/i386/kernel/sys/kern/sys_socket.c:LINE (3) 2 3 28d 54d 54d
panic: pfi_kkif_attach: null kif 2 3 22d 54d 54d
panic: vm_object_unwire: missing page 2 3 18d 57d 57d
panic: negative vmsize for uid -NUM 2 1 63d 63d 63d
panic: /syzkaller/managers/i386/kernel/sys/kern/kern_timeout.c:LINE: callout_process: Bad tailq NEXT(ADDR->tqh_last) != 2 1 66d 66d 66d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: _callout_stop_safe: Bad link elm ADDR prev->next != 2 2 35d 67d 67d
panic: /syzkaller/managers/i386/kernel/sys/netinet/in_pcb.c:LINE: in_pcblbgroup_insert: Bad list head ADDR first->prev ! 2 1 68d 68d 68d
panic: mutex so_rcv not owned at /syzkaller/managers/i386/kernel/sys/kern/uipc_usrreq.c:LINE 2 6 66d 69d 69d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_process: Bad tailq NEXT(ADDR->tqh_last) != 2 1 69d 69d 69d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: _callout_stop_safe: Bad link elm ADDR next->prev != 2 syz 2 70d 70d 70d
freebsd test error: SYZFATAL: image testing failed w/o kernel bug (2) -1 3 36d 72d 72d
panic: /syzkaller/managers/i386/kernel/sys/kern/uipc_usrreq.c:LINE: uipc_sosend_stream_or_seqpacket: Empty stailq ADDR-> 2 715 2h11m 73d 73d
panic: Assertion m->m_flags & M_BLOCKED failed at /syzkaller/managers/main/kernel/sys/kern/uipc_usrreq.c:LINE 2 C 33 58d 73d 73d
panic: Assertion pd->pcksum failed at /syzkaller/managers/main/kernel/sys/netpfil/pf/pf.c:LINE 2 7 37d 74d 74d
panic: tcp_do_segment: sent too much: NUM>NUM 2 60 3d10h 75d 75d
panic: /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE: in_pcblbgroup_insert: Bad list head ADDR first->prev ! 2 3 38d 75d 75d
panic: /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE: in_pcbremlbgrouphash: Bad link elm ADDR next->prev != 2 1 76d 76d 76d
panic: vm_page_dirty: page is invalid! 2 2 34d 77d 77d
panic: Assertion pd->pcksum failed at /syzkaller/managers/i386/kernel/sys/netpfil/pf/pf.c:LINE 2 1 78d 78d 78d
panic: ASan: Invalid access, NUM-byte read at ADDR, StackMiddle(f2) (3) 2 7 4d22h 78d 78d
panic: negative vmsize for uid NUM 2 27 1h54m 80d 80d
Fatal trap NUM: page fault in witness_checkorder -1 4 66d 81d 81d
Fatal trap NUM: page fault in __mtx_lock_flags (4) -1 1 81d 81d 81d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h 2 syz 380 13d 81d 81d
panic: inconsistent boundary count NUM 2 2 23d 91d 91d
panic: ip6_deletefraghdr: ext headers not contigous in mbuf ADDR m_len NUM >= offset NUM + NUM 2 686 42d 91d 91d
Fatal trap NUM: page fault in callout_process (4) -1 syz 3565 19d 95d 92d
SYZFAIL: SIGBUS (2) -1 37 1d14h 115d 115d
SYZFAIL: SIGSEGV -1 40 6d02h 116d 116d
panic: if_ref: ifp ADDR has NUM refs (2) 2 syz 2 28d 117d 28d
panic: vnode_pager_generic_getpages_done: page ADDR is mapped 2 8 2d14h 127d 127d
SYZFAIL: child stopped (2) -1 41 4d04h 131d 131d
SYZFAIL: clone failed (2) -1 4 7d22h 132d 132d
panic: mq notifiers left (3) 2 231 2h00m 132d 132d
panic: mld_change_state: bad ifp 2 8 2d18h 138d 138d
Fatal trap NUM: page fault in mld_change_state -1 6 31d 139d 139d
SYZFAIL: SIGILL (2) -1 280 4h36m 141d 141d
panic: pmap_growkernel: no memory to grow kernel (5) 2 457 29d 143d 143d
SYZFAIL: SIGFPE (2) -1 259 12h42m 143d 143d
SYZFAIL: invalid kcov comp type (4) -1 3065 9m 157d 157d
SYZFAIL: posix_spawnp failed -1 54292 now 171d 171d
SYZFAIL: too much cover (3) -1 1694 13m 208d 208d
panic: pmap_demote_pde: a wired mapping is missing PG_A 2 65 12h10m 222d 222d
panic: vm_object_terminate_single_page: page ADDR does not belong to a queue 2 42 11d 269d 269d
SYZFAIL: cover mmap failed (2) -1 2552 now 319d 319d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/main/kernel/sys/kern/sys_socket.c:LINE (4) 2 C 27 2d22h 324d 323d
Fatal trap NUM: page fault in in6m_disconnect_locked -1 syz 22 23h16m 335d 335d
SYZFAIL: too many calls in output -1 163 1d10h 364d 364d
Fatal trap NUM: page fault while in kernel mode (6) -1 syz 164 15d 364d 335d
SYZFAIL: failed to send rpc -1 446 6h06m 365d 365d
SYZFAIL: failed to recv rpc -1 95568 now 365d 365d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (12) -1 138 2d23h 388d 388d
can't ssh into the instance -1 18093 31m 422d 422d
SYZFAIL: leak checking is not implemented -1 syz 76 421d 428d 428d
Fatal trap NUM: page fault in soisconnected -1 C 2 465d 465d 465d
panic: size_on_reasm_queue is NUM (4) 2 C 5 468d 547d 547d
SYZFAIL: child failed (2) -1 syz 5702 now 552d 552d
corrupted report (5) -1 636 10h15m 577d 577d
SYZFAIL: command failed (2) -1 syz 15 15d 581d 581d
Fatal trap NUM: page fault in nd6_dad_timer (6) -1 syz 13 277d 600d 542d
Fatal trap NUM: page fault in in_pcbbind_setup -1 C 1 665d 665d 665d
suppressed report (4) -1 13412 34m 724d 724d
SYZFAIL: tun: can't open device (2) -1 syz 237 2d21h 725d 725d
panic: mutex Giant owned at /syzkaller/managers/main/kernel/sys/kern/kern_thread.c:LINE 2 C 1112 685d 745d 745d
Fatal trap NUM: page fault in kasan_atomic_load_int (3) -1 C 14 471d 1031d 1017d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-tcb @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb. (3) 2 syz 7 541d 1041d 1041d
Fatal trap NUM: page fault in ip6_output -1 syz 20014 9d19h 1093d 1075d
panic: Assertion v != tid failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:LINE (2) 2 syz 262 64d 1114d 1114d
panic: ASan: Invalid access, NUM-byte write at ADDR, MallocRedZone(fb) 2 C 1 1122d 1122d 1122d
panic: ASan: Invalid access, NUM-byte read at ADDR, UMAUseAfterFree(fd) (4) 2 C 1458 2h07m 1126d 1000d
Fatal trap NUM: page fault in __mtx_assert -1 C 242 503d 1141d 1042d
panic: ASan: Invalid access, NUM-byte write at ADDR, UMAUseAfterFree(fd) (2) 2 C 73 35d 1146d 578d
SYZFATAL: Manager.Poll call failed: connection is shut down -1 syz 78758 387d 1176d 1174d
panic: a thread waited too long to allocate a page 2 24592 5m 1280d 1280d
panic: failed to reclaim memory 2 C 275928 now 1281d 1263d
panic: pmap_san_enter_alloc_4k: no memory to grow shadow map 2 C 137311 5m 1352d 662d
panic: Going nowhere without my init! 2 C 1087 1d20h 1504d 1504d
panic: size_on_all_streams smaller than control length (2) 2 C 2081 50d 1794d 1794d
lost connection to test machine (2) -1 C 745895 now 2315d 20d
no output from test machine -1 C 334602 5m 2317d 1801d