syzbot

 sign-in | mailing list | source | docs
🐞 Open [98]
🐞 Fixed [351]
🐞 Invalid [381]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

Instances [tested repos]:
Name Last active Uptime Corpus Coverage 🛈 Crashes Execs Kernel build syzkaller build Bugs
Commit Config Freshness Status Commit Freshness Status All Only
ci-freebsd-i386 now 10h46m 8913 184248 43 15126 da84054f3a50 .config 11h42m d8fc7335 1d15h failing all only
ci-freebsd-main now 10h09m 9108 108204 97 16086 9e8c1f9576e7 .config 11h29m d8fc7335 1d15h failing all only
upstream (98):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Last activity
panic: deadlres_td_sleep_q: possible deadlock detected for ADDR (syz-executor), blocked for ADDR ticks 2 1 1d15h 1d15h 1d15h
panic: starting DAD on non-tentative address ADDR 2 1 5d00h 5d00h 5d00h
panic: ASan: Invalid access, NUM-byte read at ADDR, MallocRedZone(fb) (4) 2 1 5d02h 5d02h 5d02h
panic: witness_warn (3) 2 1 8d10h 8d10h 8d10h
Fatal trap NUM: page fault in in_pcbremhash_locked (2) -1 6 2d13h 11d 11d
Fatal trap NUM: page fault in in_joingroup_locked -1 1 14d 14d 14d
panic: proc_dtor: non-empty p_ktr 2 1 19d 19d 19d
SYZFAIL: repeatedly failed to execute the program -1 6 4h22m 25d 25d
freebsd test error: can't ssh into the instance -1 11 27d 27d 27d
freebsd build error (21) -1 11 13h18m 28d 28d
panic: kern_clock_gettime: NUM 2 C 40 23h05m 30d 30d
SYZFAIL: ShmemBuilder: too large output offset -1 1 31d 31d 31d
panic: /syzkaller/managers/main/kernel/sys/kern/uipc_usrreq.c:LINE: uipc_sosend_stream_or_seqpacket: Empty stailq ADDR-> 2 C 5 35d 35d 35d
panic: sleeping thread holds tun_mtx 2 124 12h35m 39d 39d
panic: brelse: non-VMIO buffer marked NOREUSE 2 176 1h16m 42d 42d
SYZFAIL: open of /dev/kcov failed -1 4631 now 45d 45d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/i386/kernel/sys/kern/sys_socket.c:LINE (3) 2 3 24d 50d 50d
panic: pfi_kkif_attach: null kif 2 3 19d 50d 50d
panic: vm_object_unwire: missing page 2 3 15d 54d 54d
panic: negative vmsize for uid -NUM 2 1 59d 59d 59d
panic: /syzkaller/managers/i386/kernel/sys/kern/kern_timeout.c:LINE: callout_process: Bad tailq NEXT(ADDR->tqh_last) != 2 1 62d 62d 62d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: _callout_stop_safe: Bad link elm ADDR prev->next != 2 2 31d 64d 64d
panic: /syzkaller/managers/i386/kernel/sys/netinet/in_pcb.c:LINE: in_pcblbgroup_insert: Bad list head ADDR first->prev ! 2 1 65d 65d 65d
panic: mutex so_rcv not owned at /syzkaller/managers/i386/kernel/sys/kern/uipc_usrreq.c:LINE 2 6 63d 65d 65d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_process: Bad tailq NEXT(ADDR->tqh_last) != 2 1 66d 66d 66d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: _callout_stop_safe: Bad link elm ADDR next->prev != 2 syz 2 66d 66d 66d
freebsd test error: SYZFATAL: image testing failed w/o kernel bug (2) -1 3 33d 69d 69d
panic: /syzkaller/managers/i386/kernel/sys/kern/uipc_usrreq.c:LINE: uipc_sosend_stream_or_seqpacket: Empty stailq ADDR-> 2 684 3h52m 70d 70d
panic: Assertion m->m_flags & M_BLOCKED failed at /syzkaller/managers/main/kernel/sys/kern/uipc_usrreq.c:LINE 2 C 33 54d 70d 70d
panic: Assertion pd->pcksum failed at /syzkaller/managers/main/kernel/sys/netpfil/pf/pf.c:LINE 2 7 34d 71d 71d
panic: tcp_do_segment: sent too much: NUM>NUM 2 60 5h11m 72d 72d
panic: /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE: in_pcblbgroup_insert: Bad list head ADDR first->prev ! 2 3 35d 72d 72d
panic: /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE: in_pcbremlbgrouphash: Bad link elm ADDR next->prev != 2 1 72d 72d 72d
panic: vm_page_dirty: page is invalid! 2 2 31d 73d 73d
panic: Assertion pd->pcksum failed at /syzkaller/managers/i386/kernel/sys/netpfil/pf/pf.c:LINE 2 1 74d 74d 74d
panic: ASan: Invalid access, NUM-byte read at ADDR, StackMiddle(f2) (3) 2 7 1d17h 74d 74d
panic: negative vmsize for uid NUM 2 26 4d00h 77d 77d
Fatal trap NUM: page fault in witness_checkorder -1 4 62d 77d 77d
Fatal trap NUM: page fault in __mtx_lock_flags (4) -1 1 78d 78d 78d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h 2 syz 380 10d 78d 78d
panic: /syzkaller/managers/i386/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h 2 202 49d 78d 78d
panic: executing segment marked as unreachable at /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE (in_pcbremlb 2 1 87d 87d 87d
panic: inconsistent boundary count NUM 2 2 20d 88d 88d
panic: ip6_deletefraghdr: ext headers not contigous in mbuf ADDR m_len NUM >= offset NUM + NUM 2 686 39d 88d 88d
Fatal trap NUM: page fault in callout_process (4) -1 syz 3565 16d 92d 89d
SYZFAIL: SIGBUS (2) -1 36 3h35m 112d 112d
SYZFAIL: SIGSEGV -1 40 2d21h 113d 113d
panic: if_ref: ifp ADDR has NUM refs (2) 2 syz 2 25d 114d 25d
panic: vnode_pager_generic_getpages_done: page ADDR is mapped 2 7 20h50m 124d 124d
SYZFAIL: child stopped (2) -1 41 23h26m 127d 127d
SYZFAIL: clone failed (2) -1 4 4d17h 129d 129d
panic: mq notifiers left (3) 2 208 6h25m 129d 129d
panic: mld_change_state: bad ifp 2 7 1d22h 135d 135d
Fatal trap NUM: page fault in mld_change_state -1 6 28d 136d 136d
SYZFAIL: SIGILL (2) -1 271 16h27m 138d 138d
panic: pmap_growkernel: no memory to grow kernel (5) 2 457 26d 140d 140d
SYZFAIL: SIGFPE (2) -1 252 7h17m 140d 140d
SYZFAIL: invalid kcov comp type (4) -1 2838 2h05m 154d 154d
SYZFAIL: posix_spawnp failed -1 52661 now 167d 167d
SYZFAIL: too much cover (3) -1 1585 23m 205d 205d
panic: pmap_demote_pde: a wired mapping is missing PG_A 2 62 18h48m 219d 219d
panic: vm_object_terminate_single_page: page ADDR does not belong to a queue 2 42 8d05h 265d 265d
SYZFAIL: cover mmap failed (2) -1 2382 26m 316d 316d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/main/kernel/sys/kern/sys_socket.c:LINE (4) 2 C 26 14d 321d 320d
Fatal trap NUM: page fault in in6m_disconnect_locked -1 syz 21 5d11h 332d 332d
SYZFAIL: too many calls in output -1 159 1h44m 360d 360d
Fatal trap NUM: page fault while in kernel mode (6) -1 syz 164 11d 361d 332d
SYZFAIL: failed to send rpc -1 433 5h05m 362d 362d
SYZFAIL: failed to recv rpc -1 94574 22m 362d 362d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (12) -1 136 1d02h 385d 385d
can't ssh into the instance -1 16990 now 419d 419d
SYZFAIL: leak checking is not implemented -1 syz 76 418d 425d 425d
Fatal trap NUM: page fault in soisconnected -1 C 2 462d 462d 462d
panic: size_on_reasm_queue is NUM (4) 2 C 5 465d 544d 543d
SYZFAIL: child failed (2) -1 syz 5474 48m 548d 548d
corrupted report (5) -1 621 2h10m 574d 574d
SYZFAIL: command failed (2) -1 syz 15 11d 577d 577d
Fatal trap NUM: page fault in nd6_dad_timer (6) -1 syz 13 274d 597d 539d
Fatal trap NUM: page fault in in_pcbbind_setup -1 C 1 662d 662d 662d
suppressed report (4) -1 13231 now 721d 721d
SYZFAIL: tun: can't open device (2) -1 syz 236 3h43m 721d 721d
panic: mutex Giant owned at /syzkaller/managers/main/kernel/sys/kern/kern_thread.c:LINE 2 C 1112 681d 742d 742d
Fatal trap NUM: page fault in kasan_atomic_load_int (3) -1 C 14 468d 1028d 1014d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-tcb @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb. (3) 2 syz 7 538d 1038d 1038d
Fatal trap NUM: page fault in ip6_output -1 syz 20014 6d14h 1090d 1072d
panic: Assertion v != tid failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:LINE (2) 2 syz 262 61d 1111d 1111d
panic: ASan: Invalid access, NUM-byte write at ADDR, MallocRedZone(fb) 2 C 1 1119d 1119d 1119d
panic: ASan: Invalid access, NUM-byte read at ADDR, UMAUseAfterFree(fd) (4) 2 C 1450 18h58m 1123d 997d
Fatal trap NUM: page fault in __mtx_assert -1 C 242 500d 1138d 1038d
panic: ASan: Invalid access, NUM-byte write at ADDR, UMAUseAfterFree(fd) (2) 2 C 73 31d 1142d 574d
SYZFATAL: Manager.Poll call failed: connection is shut down -1 syz 78758 384d 1173d 1170d
panic: a thread waited too long to allocate a page 2 24048 6m 1277d 1277d
panic: failed to reclaim memory 2 C 272862 now 1277d 1259d
panic: pmap_san_enter_alloc_4k: no memory to grow shadow map 2 C 135888 now 1349d 659d
panic: Going nowhere without my init! 2 C 1072 27m 1501d 1501d
panic: size_on_all_streams smaller than control length (2) 2 C 2081 47d 1791d 1791d
lost connection to test machine (2) -1 C 742346 now 2312d 17d
no output from test machine -1 C 333764 now 2314d 1798d