syzbot

 sign-in | mailing list | source | docs
🐞 Open [84]
🐞 Fixed [345]
🐞 Invalid [378]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

Instances [tested repos]:
Name Last active Uptime Corpus Coverage 🛈 Crashes Execs Kernel build syzkaller build Bugs
Commit Config Freshness Status Commit Freshness Status All Only
ci-freebsd-i386 now 4h05m 8952 178908 132 168644 9fb60477fe26 .config 7h44m b84f0537 17h26m all only
ci-freebsd-main now 4h39m 8997 106476 574 139683 9fb60477fe26 .config 7h44m b84f0537 17h26m all only
upstream (84):
Title Repro Cause bisect Fix bisect Count Last Reported Last activity
panic: negative vmsize for uid -NUM 1 2d23h 2d23h 2d23h
panic: /syzkaller/managers/i386/kernel/sys/kern/kern_timeout.c:LINE: callout_process: Bad tailq NEXT(ADDR->tqh_last) != 1 5d22h 5d22h 5d22h
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: _callout_stop_safe: Bad link elm ADDR prev->next != 1 7d15h 7d15h 7d15h
panic: /syzkaller/managers/i386/kernel/sys/netinet/in_pcb.c:LINE: in_pcblbgroup_insert: Bad list head ADDR first->prev ! 1 8d07h 8d07h 8d07h
panic: mutex so_rcv not owned at /syzkaller/managers/i386/kernel/sys/kern/uipc_usrreq.c:LINE 6 6d06h 9d01h 9d01h
panic: mutex so_rcv not owned at /syzkaller/managers/main/kernel/sys/kern/uipc_usrreq.c:LINE C 7 6d06h 9d01h 9d01h
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_process: Bad tailq NEXT(ADDR->tqh_last) != 1 9d20h 9d20h 9d20h
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: _callout_stop_safe: Bad link elm ADDR next->prev != syz 2 9d22h 9d23h 9d22h
freebsd test error: SYZFATAL: image testing failed w/o kernel bug (2) 1 12d 12d 12d
panic: /syzkaller/managers/i386/kernel/sys/kern/uipc_usrreq.c:LINE: uipc_sosend_stream_or_seqpacket: Empty stailq ADDR-> 72 5h55m 13d 13d
panic: Assertion m->m_flags & M_BLOCKED failed at /syzkaller/managers/main/kernel/sys/kern/uipc_usrreq.c:LINE C 32 5d14h 13d 13d
panic: Assertion pd->pcksum failed at /syzkaller/managers/main/kernel/sys/netpfil/pf/pf.c:LINE 5 8d20h 14d 14d
panic: tcp_do_segment: sent too much: NUM>NUM 12 2d13h 15d 15d
panic: /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE: in_pcblbgroup_insert: Bad list head ADDR first->prev ! 2 5d01h 15d 15d
panic: /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE: in_pcbremlbgrouphash: Bad link elm ADDR next->prev != 1 15d 15d 15d
panic: vm_page_dirty: page is invalid! 1 16d 16d 16d
panic: Assertion pd->pcksum failed at /syzkaller/managers/i386/kernel/sys/netpfil/pf/pf.c:LINE 1 17d 17d 17d
panic: ASan: Invalid access, NUM-byte read at ADDR, StackMiddle(f2) (3) 3 9d01h 18d 18d
panic: negative vmsize for uid NUM 3 13d 20d 20d
Fatal trap NUM: page fault in witness_checkorder 4 6d00h 21d 21d
Fatal trap NUM: page fault in __mtx_lock_flags (4) 1 21d 21d 21d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h syz 379 1d04h 21d 21d
panic: /syzkaller/managers/i386/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h 200 9h27m 21d 21d
panic: executing segment marked as unreachable at /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE (in_pcbremlb 1 30d 30d 30d
panic: inconsistent boundary count NUM 1 31d 31d 31d
panic: ip6_deletefraghdr: ext headers not contigous in mbuf ADDR m_len NUM >= offset NUM + NUM 385 7m 31d 31d
Fatal trap NUM: page fault in callout_process (4) syz 3560 3h27m 35d 32d
panic: Bad list head ADDR first->prev != head (2) 113 21d 49d 49d
panic: tcp_do_segment: sent too much 13 18d 50d 50d
SYZFAIL: SIGBUS (2) 13 17h27m 55d 55d
SYZFAIL: SIGSEGV 19 1d12h 56d 56d
panic: if_ref: ifp ADDR has NUM refs (2) 1 57d 57d 57d
panic: vnode_pager_generic_getpages_done: page ADDR is mapped 1 67d 67d 67d
SYZFAIL: child stopped (2) 15 3h12m 71d 71d
SYZFAIL: clone failed (2) 3 1d21h 72d 72d
panic: mq notifiers left (3) 85 1d02h 72d 72d
panic: mld_change_state: bad ifp 4 2d10h 78d 78d
Fatal trap NUM: page fault in mld_change_state 4 34d 79d 79d
SYZFAIL: SIGILL (2) 122 8h47m 81d 81d
panic: pmap_growkernel: no memory to grow kernel (5) 264 6h24m 83d 83d
SYZFAIL: SIGFPE (2) 100 8h24m 83d 83d
Fatal trap NUM: page fault in in_pcbremhash_locked C 137 1h01m 87d 78d
SYZFAIL: invalid kcov comp type (4) 697 now 97d 97d
SYZFAIL: posix_spawnp failed 20242 now 111d 111d
SYZFAIL: too much cover (3) 162 9h07m 148d 148d
freebsd test error: lost connection to test machine (7) 2 66d 151d 151d
panic: pmap_demote_pde: a wired mapping is missing PG_A 39 1d19h 162d 162d
panic: vm_object_terminate_single_page: page ADDR does not belong to a queue 17 1d12h 208d 208d
SYZFAIL: cover mmap failed (2) 602 2h05m 259d 259d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/main/kernel/sys/kern/sys_socket.c:LINE (4) C 24 1d20h 264d 263d
Fatal trap NUM: page fault in in6m_disconnect_locked syz 8 4d20h 275d 275d
SYZFAIL: too many calls in output 83 3h28m 304d 304d
Fatal trap NUM: page fault while in kernel mode (6) syz 154 7d12h 304d 275d
SYZFAIL: failed to send rpc 225 11h08m 305d 305d
SYZFAIL: failed to recv rpc 75187 now 305d 305d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (12) 126 17h40m 328d 328d
can't ssh into the instance 2890 1h58m 362d 362d
SYZFAIL: leak checking is not implemented syz 76 361d 368d 368d
Fatal trap NUM: page fault in soisconnected C 2 405d 405d 405d
panic: size_on_reasm_queue is NUM (4) C 5 408d 487d 486d
SYZFAIL: child failed (2) syz 3459 43m 492d 492d
corrupted report (5) 213 11h26m 517d 517d
SYZFAIL: command failed (2) syz 10 6d14h 521d 521d
Fatal trap NUM: page fault in nd6_dad_timer (6) syz 13 217d 540d 482d
Fatal trap NUM: page fault in in_pcbbind_setup C 1 605d 605d 605d
suppressed report (4) 8592 3h24m 664d 664d
SYZFAIL: tun: can't open device (2) syz 13 4d18h 665d 665d
panic: mutex Giant owned at /syzkaller/managers/main/kernel/sys/kern/kern_thread.c:LINE C 1112 625d 685d 685d
Fatal trap NUM: page fault in kasan_atomic_load_int (3) C 14 411d 971d 957d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-tcb @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb. (3) syz 7 481d 981d 981d
Fatal trap NUM: page fault in ip6_output syz 20010 78d 1033d 1015d
panic: Assertion v != tid failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:LINE (2) syz 262 4d06h 1054d 1054d
panic: ASan: Invalid access, NUM-byte write at ADDR, MallocRedZone(fb) C 1 1062d 1062d 1062d
panic: ASan: Invalid access, NUM-byte read at ADDR, UMAUseAfterFree(fd) (4) C 1285 6m 1066d 940d
Fatal trap NUM: page fault in __mtx_assert C 242 443d 1081d 982d
panic: ASan: Invalid access, NUM-byte write at ADDR, UMAUseAfterFree(fd) (2) C 67 2d01h 1085d 518d
SYZFATAL: Manager.Poll call failed: connection is shut down syz 78758 327d 1116d 1114d
panic: a thread waited too long to allocate a page 11809 now 1220d 1220d
panic: failed to reclaim memory C 205470 now 1220d 1202d
panic: pmap_san_enter_alloc_4k: no memory to grow shadow map C 106538 now 1292d 602d
panic: Going nowhere without my init! C 465 11h06m 1444d 1444d
panic: size_on_all_streams smaller than control length (2) C 2080 24d 1734d 1734d
lost connection to test machine (2) syz 689301 now 2255d 301d
no output from test machine C 315008 now 2257d 1741d