syzbot

 sign-in | mailing list | source | docs
🐞 Open [97]
🐞 Fixed [351]
🐞 Invalid [381]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

Instances [tested repos]:
Name Last active Uptime Corpus Coverage 🛈 Crashes Execs Kernel build syzkaller build Bugs
Commit Config Freshness Status Commit Freshness Status All Only
ci-freebsd-i386 now 42m 8956 184526 344 160934 bf4d2a45b991 .config 3h51m 3cda49cf 2d17h all only
ci-freebsd-main now 3m 9079 109129 820 136836 bf4d2a45b991 .config 3h51m 3cda49cf 2d17h all only
upstream (97):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Last activity
panic: starting DAD on non-tentative address ADDR 2 1 2d04h 2d04h 2d04h
panic: ASan: Invalid access, NUM-byte read at ADDR, MallocRedZone(fb) (4) 2 1 2d07h 2d07h 2d07h
panic: witness_warn (3) 2 1 5d15h 5d15h 5d15h
Fatal trap NUM: page fault in in_pcbremhash_locked (2) -1 5 3d01h 8d19h 8d19h
Fatal trap NUM: page fault in in_joingroup_locked -1 1 11d 11d 11d
panic: proc_dtor: non-empty p_ktr 2 1 16d 16d 16d
SYZFAIL: repeatedly failed to execute the program -1 5 15h58m 22d 22d
freebsd test error: can't ssh into the instance -1 11 24d 24d 24d
freebsd build error (21) -1 3 25d 25d 25d
panic: kern_clock_gettime: NUM 2 C 32 19h10m 27d 27d
SYZFAIL: ShmemBuilder: too large output offset -1 1 28d 28d 28d
panic: /syzkaller/managers/main/kernel/sys/kern/uipc_usrreq.c:LINE: uipc_sosend_stream_or_seqpacket: Empty stailq ADDR-> 2 C 5 32d 32d 32d
panic: sleeping thread holds tun_mtx 2 108 58m 36d 36d
panic: brelse: non-VMIO buffer marked NOREUSE 2 165 1h29m 39d 39d
SYZFAIL: open of /dev/kcov failed -1 4211 21m 43d 43d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/i386/kernel/sys/kern/sys_socket.c:LINE (3) 2 3 22d 48d 48d
panic: pfi_kkif_attach: null kif 2 3 16d 48d 48d
panic: vm_object_unwire: missing page 2 3 12d 51d 51d
panic: negative vmsize for uid -NUM 2 1 57d 57d 57d
panic: /syzkaller/managers/i386/kernel/sys/kern/kern_timeout.c:LINE: callout_process: Bad tailq NEXT(ADDR->tqh_last) != 2 1 60d 60d 60d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: _callout_stop_safe: Bad link elm ADDR prev->next != 2 2 29d 61d 61d
panic: /syzkaller/managers/i386/kernel/sys/netinet/in_pcb.c:LINE: in_pcblbgroup_insert: Bad list head ADDR first->prev ! 2 1 62d 62d 62d
panic: mutex so_rcv not owned at /syzkaller/managers/i386/kernel/sys/kern/uipc_usrreq.c:LINE 2 6 60d 63d 63d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_process: Bad tailq NEXT(ADDR->tqh_last) != 2 1 63d 63d 63d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: _callout_stop_safe: Bad link elm ADDR next->prev != 2 syz 2 63d 64d 63d
freebsd test error: SYZFATAL: image testing failed w/o kernel bug (2) -1 3 30d 66d 66d
panic: /syzkaller/managers/i386/kernel/sys/kern/uipc_usrreq.c:LINE: uipc_sosend_stream_or_seqpacket: Empty stailq ADDR-> 2 647 3h01m 67d 67d
panic: Assertion m->m_flags & M_BLOCKED failed at /syzkaller/managers/main/kernel/sys/kern/uipc_usrreq.c:LINE 2 C 33 52d 67d 67d
panic: Assertion pd->pcksum failed at /syzkaller/managers/main/kernel/sys/netpfil/pf/pf.c:LINE 2 7 31d 68d 68d
panic: tcp_do_segment: sent too much: NUM>NUM 2 58 1d21h 69d 69d
panic: /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE: in_pcblbgroup_insert: Bad list head ADDR first->prev ! 2 3 32d 69d 69d
panic: /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE: in_pcbremlbgrouphash: Bad link elm ADDR next->prev != 2 1 70d 70d 70d
panic: vm_page_dirty: page is invalid! 2 2 28d 71d 71d
panic: Assertion pd->pcksum failed at /syzkaller/managers/i386/kernel/sys/netpfil/pf/pf.c:LINE 2 1 72d 72d 72d
panic: ASan: Invalid access, NUM-byte read at ADDR, StackMiddle(f2) (3) 2 6 7d03h 72d 72d
panic: negative vmsize for uid NUM 2 26 1d04h 74d 74d
Fatal trap NUM: page fault in witness_checkorder -1 4 60d 75d 75d
Fatal trap NUM: page fault in __mtx_lock_flags (4) -1 1 75d 75d 75d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h 2 syz 380 7d11h 75d 75d
panic: /syzkaller/managers/i386/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h 2 202 46d 75d 75d
panic: executing segment marked as unreachable at /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE (in_pcbremlb 2 1 84d 84d 84d
panic: inconsistent boundary count NUM 2 2 17d 85d 85d
panic: ip6_deletefraghdr: ext headers not contigous in mbuf ADDR m_len NUM >= offset NUM + NUM 2 686 36d 85d 85d
Fatal trap NUM: page fault in callout_process (4) -1 syz 3565 13d 89d 86d
SYZFAIL: SIGBUS (2) -1 33 2d09h 109d 109d
SYZFAIL: SIGSEGV -1 40 1h54m 110d 110d
panic: if_ref: ifp ADDR has NUM refs (2) 2 syz 2 22d 111d 22d
panic: vnode_pager_generic_getpages_done: page ADDR is mapped 2 6 28d 121d 121d
SYZFAIL: child stopped (2) -1 39 3h13m 125d 125d
SYZFAIL: clone failed (2) -1 4 1d22h 126d 126d
panic: mq notifiers left (3) 2 195 9m 126d 126d
panic: mld_change_state: bad ifp 2 6 1d22h 132d 132d
Fatal trap NUM: page fault in mld_change_state -1 6 25d 133d 133d
SYZFAIL: SIGILL (2) -1 262 17h35m 135d 135d
panic: pmap_growkernel: no memory to grow kernel (5) 2 457 23d 137d 137d
SYZFAIL: SIGFPE (2) -1 245 40m 137d 137d
SYZFAIL: invalid kcov comp type (4) -1 2716 49m 151d 151d
SYZFAIL: posix_spawnp failed -1 50867 14m 165d 165d
SYZFAIL: too much cover (3) -1 1493 1h10m 202d 202d
panic: pmap_demote_pde: a wired mapping is missing PG_A 2 61 6h00m 216d 216d
panic: vm_object_terminate_single_page: page ADDR does not belong to a queue 2 42 5d10h 262d 262d
SYZFAIL: cover mmap failed (2) -1 2263 4h51m 313d 313d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/main/kernel/sys/kern/sys_socket.c:LINE (4) 2 C 26 11d 318d 317d
Fatal trap NUM: page fault in in6m_disconnect_locked -1 syz 21 2d16h 329d 329d
SYZFAIL: too many calls in output -1 151 2h23m 358d 358d
Fatal trap NUM: page fault while in kernel mode (6) -1 syz 164 9d02h 358d 329d
SYZFAIL: failed to send rpc -1 422 12h05m 359d 359d
SYZFAIL: failed to recv rpc -1 93775 16m 359d 359d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (12) -1 134 9d05h 382d 382d
can't ssh into the instance -1 15708 10m 416d 416d
SYZFAIL: leak checking is not implemented -1 syz 76 415d 422d 422d
Fatal trap NUM: page fault in soisconnected -1 C 2 459d 459d 459d
panic: size_on_reasm_queue is NUM (4) 2 C 5 462d 541d 541d
SYZFAIL: child failed (2) -1 syz 5328 22m 546d 546d
corrupted report (5) -1 602 1h34m 571d 571d
SYZFAIL: command failed (2) -1 syz 15 9d02h 575d 575d
Fatal trap NUM: page fault in nd6_dad_timer (6) -1 syz 13 271d 594d 536d
Fatal trap NUM: page fault in in_pcbbind_setup -1 C 1 659d 659d 659d
suppressed report (4) -1 13003 28m 718d 718d
SYZFAIL: tun: can't open device (2) -1 syz 222 5h13m 719d 719d
panic: mutex Giant owned at /syzkaller/managers/main/kernel/sys/kern/kern_thread.c:LINE 2 C 1112 679d 739d 739d
Fatal trap NUM: page fault in kasan_atomic_load_int (3) -1 C 14 465d 1025d 1011d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-tcb @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb. (3) 2 syz 7 535d 1035d 1035d
Fatal trap NUM: page fault in ip6_output -1 syz 20014 3d18h 1087d 1069d
panic: Assertion v != tid failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:LINE (2) 2 syz 262 58d 1108d 1108d
panic: ASan: Invalid access, NUM-byte write at ADDR, MallocRedZone(fb) 2 C 1 1116d 1116d 1116d
panic: ASan: Invalid access, NUM-byte read at ADDR, UMAUseAfterFree(fd) (4) 2 C 1447 9h37m 1120d 994d
Fatal trap NUM: page fault in __mtx_assert -1 C 242 497d 1135d 1036d
panic: ASan: Invalid access, NUM-byte write at ADDR, UMAUseAfterFree(fd) (2) 2 C 73 29d 1139d 572d
SYZFATAL: Manager.Poll call failed: connection is shut down -1 syz 78758 381d 1170d 1168d
panic: a thread waited too long to allocate a page 2 23552 10m 1274d 1274d
panic: failed to reclaim memory 2 C 270111 10m 1274d 1257d
panic: pmap_san_enter_alloc_4k: no memory to grow shadow map 2 C 134665 11m 1346d 656d
panic: Going nowhere without my init! 2 C 1040 1h00m 1498d 1498d
panic: size_on_all_streams smaller than control length (2) 2 C 2081 44d 1788d 1788d
lost connection to test machine (2) -1 C 739777 now 2309d 14d
no output from test machine -1 C 332990 9m 2311d 1795d