syzbot

 sign-in | mailing list | source | docs
🐞 Open [98]
🐞 Fixed [351]
🐞 Invalid [381]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

Instances [tested repos]:
Name Last active Uptime Corpus Coverage 🛈 Crashes Execs Kernel build syzkaller build Bugs
Commit Config Freshness Status Commit Freshness Status All Only
ci-freebsd-i386 now 26m 8965 185377 1034 774028 55f80afa17e8 .config 1h46m 44f8051e 7h40m all only
ci-freebsd-main 1h09m 12h00m 9143 108242 3112 736658 b2bf651a797b .config 1d00h c118d736 13h32m all only
upstream (98):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Last activity
panic: deadlres_td_sleep_q: possible deadlock detected for ADDR (syz-executor), blocked for ADDR ticks 2 1 2d11h 2d11h 2d11h
panic: starting DAD on non-tentative address ADDR 2 1 5d20h 5d20h 5d20h
panic: ASan: Invalid access, NUM-byte read at ADDR, MallocRedZone(fb) (4) 2 1 5d23h 5d23h 5d23h
panic: witness_warn (3) 2 1 9d07h 9d07h 9d07h
Fatal trap NUM: page fault in in_pcbremhash_locked (2) -1 6 3d09h 12d 12d
Fatal trap NUM: page fault in in_joingroup_locked -1 1 15d 15d 15d
panic: proc_dtor: non-empty p_ktr 2 1 19d 19d 19d
SYZFAIL: repeatedly failed to execute the program -1 7 14h34m 26d 26d
freebsd test error: can't ssh into the instance -1 11 27d 28d 28d
freebsd build error (21) -1 11 1d10h 29d 29d
panic: kern_clock_gettime: NUM 2 C 42 2h18m 30d 30d
SYZFAIL: ShmemBuilder: too large output offset -1 1 32d 32d 32d
panic: /syzkaller/managers/main/kernel/sys/kern/uipc_usrreq.c:LINE: uipc_sosend_stream_or_seqpacket: Empty stailq ADDR-> 2 C 5 35d 36d 36d
panic: sleeping thread holds tun_mtx 2 129 1h45m 40d 40d
panic: brelse: non-VMIO buffer marked NOREUSE 2 180 5h07m 43d 43d
SYZFAIL: open of /dev/kcov failed -1 4779 6m 46d 46d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/i386/kernel/sys/kern/sys_socket.c:LINE (3) 2 3 25d 51d 51d
panic: pfi_kkif_attach: null kif 2 3 20d 51d 51d
panic: vm_object_unwire: missing page 2 3 16d 55d 55d
panic: negative vmsize for uid -NUM 2 1 60d 60d 60d
panic: /syzkaller/managers/i386/kernel/sys/kern/kern_timeout.c:LINE: callout_process: Bad tailq NEXT(ADDR->tqh_last) != 2 1 63d 63d 63d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: _callout_stop_safe: Bad link elm ADDR prev->next != 2 2 32d 65d 65d
panic: /syzkaller/managers/i386/kernel/sys/netinet/in_pcb.c:LINE: in_pcblbgroup_insert: Bad list head ADDR first->prev ! 2 1 66d 66d 66d
panic: mutex so_rcv not owned at /syzkaller/managers/i386/kernel/sys/kern/uipc_usrreq.c:LINE 2 6 64d 66d 66d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_process: Bad tailq NEXT(ADDR->tqh_last) != 2 1 67d 67d 67d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: _callout_stop_safe: Bad link elm ADDR next->prev != 2 syz 2 67d 67d 67d
freebsd test error: SYZFATAL: image testing failed w/o kernel bug (2) -1 3 34d 70d 70d
panic: /syzkaller/managers/i386/kernel/sys/kern/uipc_usrreq.c:LINE: uipc_sosend_stream_or_seqpacket: Empty stailq ADDR-> 2 690 1h29m 71d 71d
panic: Assertion m->m_flags & M_BLOCKED failed at /syzkaller/managers/main/kernel/sys/kern/uipc_usrreq.c:LINE 2 C 33 55d 71d 71d
panic: Assertion pd->pcksum failed at /syzkaller/managers/main/kernel/sys/netpfil/pf/pf.c:LINE 2 7 35d 72d 72d
panic: tcp_do_segment: sent too much: NUM>NUM 2 60 1d01h 72d 72d
panic: /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE: in_pcblbgroup_insert: Bad list head ADDR first->prev ! 2 3 36d 73d 73d
panic: /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE: in_pcbremlbgrouphash: Bad link elm ADDR next->prev != 2 1 73d 73d 73d
panic: vm_page_dirty: page is invalid! 2 2 32d 74d 74d
panic: Assertion pd->pcksum failed at /syzkaller/managers/i386/kernel/sys/netpfil/pf/pf.c:LINE 2 1 75d 75d 75d
panic: ASan: Invalid access, NUM-byte read at ADDR, StackMiddle(f2) (3) 2 7 2d13h 75d 75d
panic: negative vmsize for uid NUM 2 26 4d20h 78d 78d
Fatal trap NUM: page fault in witness_checkorder -1 4 63d 78d 78d
Fatal trap NUM: page fault in __mtx_lock_flags (4) -1 1 79d 79d 79d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h 2 syz 380 11d 79d 78d
panic: /syzkaller/managers/i386/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h 2 202 49d 79d 79d
panic: executing segment marked as unreachable at /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE (in_pcbremlb 2 1 88d 88d 88d
panic: inconsistent boundary count NUM 2 2 21d 88d 88d
panic: ip6_deletefraghdr: ext headers not contigous in mbuf ADDR m_len NUM >= offset NUM + NUM 2 686 40d 89d 89d
Fatal trap NUM: page fault in callout_process (4) -1 syz 3565 17d 92d 90d
SYZFAIL: SIGBUS (2) -1 36 1d00h 113d 113d
SYZFAIL: SIGSEGV -1 40 3d17h 114d 114d
panic: if_ref: ifp ADDR has NUM refs (2) 2 syz 2 26d 115d 26d
panic: vnode_pager_generic_getpages_done: page ADDR is mapped 2 8 6h06m 125d 125d
SYZFAIL: child stopped (2) -1 41 1d20h 128d 128d
SYZFAIL: clone failed (2) -1 4 5d14h 130d 130d
panic: mq notifiers left (3) 2 215 5h36m 130d 130d
panic: mld_change_state: bad ifp 2 8 9h36m 136d 136d
Fatal trap NUM: page fault in mld_change_state -1 6 29d 136d 136d
SYZFAIL: SIGILL (2) -1 272 14h01m 139d 139d
panic: pmap_growkernel: no memory to grow kernel (5) 2 457 27d 141d 141d
SYZFAIL: SIGFPE (2) -1 253 2h55m 141d 141d
SYZFAIL: invalid kcov comp type (4) -1 2875 3h40m 155d 155d
SYZFAIL: posix_spawnp failed -1 53121 1h10m 168d 168d
SYZFAIL: too much cover (3) -1 1607 1h56m 206d 206d
panic: pmap_demote_pde: a wired mapping is missing PG_A 2 63 4h23m 219d 219d
panic: vm_object_terminate_single_page: page ADDR does not belong to a queue 2 42 9d02h 266d 266d
SYZFAIL: cover mmap failed (2) -1 2431 1h20m 317d 317d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/main/kernel/sys/kern/sys_socket.c:LINE (4) 2 C 27 14h13m 322d 321d
Fatal trap NUM: page fault in in6m_disconnect_locked -1 syz 21 6d08h 332d 332d
SYZFAIL: too many calls in output -1 161 3h13m 361d 361d
Fatal trap NUM: page fault while in kernel mode (6) -1 syz 164 12d 362d 332d
SYZFAIL: failed to send rpc -1 435 5h54m 363d 363d
SYZFAIL: failed to recv rpc -1 94839 now 363d 363d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (12) -1 138 14h36m 386d 386d
can't ssh into the instance -1 17278 1h15m 420d 420d
SYZFAIL: leak checking is not implemented -1 syz 76 419d 426d 426d
Fatal trap NUM: page fault in soisconnected -1 C 2 463d 463d 463d
panic: size_on_reasm_queue is NUM (4) 2 C 5 466d 544d 544d
SYZFAIL: child failed (2) -1 syz 5525 2h01m 549d 549d
corrupted report (5) -1 625 8h12m 575d 575d
SYZFAIL: command failed (2) -1 syz 15 12d 578d 578d
Fatal trap NUM: page fault in nd6_dad_timer (6) -1 syz 13 275d 597d 540d
Fatal trap NUM: page fault in in_pcbbind_setup -1 C 1 663d 663d 663d
suppressed report (4) -1 13277 9m 722d 722d
SYZFAIL: tun: can't open device (2) -1 syz 237 12h58m 722d 722d
panic: mutex Giant owned at /syzkaller/managers/main/kernel/sys/kern/kern_thread.c:LINE 2 C 1112 682d 743d 743d
Fatal trap NUM: page fault in kasan_atomic_load_int (3) -1 C 14 469d 1029d 1015d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-tcb @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb. (3) 2 syz 7 539d 1039d 1039d
Fatal trap NUM: page fault in ip6_output -1 syz 20014 7d10h 1091d 1073d
panic: Assertion v != tid failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:LINE (2) 2 syz 262 62d 1112d 1112d
panic: ASan: Invalid access, NUM-byte write at ADDR, MallocRedZone(fb) 2 C 1 1120d 1120d 1120d
panic: ASan: Invalid access, NUM-byte read at ADDR, UMAUseAfterFree(fd) (4) 2 C 1451 2h22m 1123d 998d
Fatal trap NUM: page fault in __mtx_assert -1 C 242 501d 1139d 1039d
panic: ASan: Invalid access, NUM-byte write at ADDR, UMAUseAfterFree(fd) (2) 2 C 73 32d 1143d 575d
SYZFATAL: Manager.Poll call failed: connection is shut down -1 syz 78758 385d 1174d 1171d
panic: a thread waited too long to allocate a page 2 24195 1h14m 1278d 1278d
panic: failed to reclaim memory 2 C 273695 19m 1278d 1260d
panic: pmap_san_enter_alloc_4k: no memory to grow shadow map 2 C 136252 1h10m 1350d 660d
panic: Going nowhere without my init! 2 C 1080 3h01m 1502d 1501d
panic: size_on_all_streams smaller than control length (2) 2 C 2081 48d 1792d 1792d
lost connection to test machine (2) -1 C 743366 1h12m 2313d 18d
no output from test machine -1 C 333991 16m 2315d 1799d