syzbot

 sign-in | mailing list | source | docs
🐞 Open [42]
🐞 Fixed [374]
🐞 Invalid [478]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

Out of 68 bugs, 1 were automatically obsoleted (1 due to revoked reproducers), 67 were invalidated by users.
Applied filters: WithRepro (drop)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported
panic: in6_pcblookup_hash_locked: invalid foreign address 2 syz 62 1214d 1263d
panic: prot 0x3 is not subset of max_prot NUM 2 C 2 1071d 1071d
SYZFAIL: child failed -1 syz 286 1558d 1976d
SYZFAIL: command failed -1 syz 34 1550d 1975d
panic: _mtx_lock_sleep: recursed on non-recursive mutex process lock @ /syzkaller/managers/main/kernel/sys/kern/kern_for 2 C 2 1441d 1441d
Fatal trap NUM: page fault while in kernel mode (4) -1 C 7 1250d 1575d
panic: About to free ctl:ADDR so:ADDR and its in 1 2 C 20 1627d 2070d
panic: ASan: Invalid access, NUM-byte read in kvprintf 2 C 5 1723d 1742d
panic: rack_output:NUM: r.start:ADDR < SND.UNA:ADDR; tp:ADDR, rack:ADDR, rsm:ADDR 2 C 270 1501d 1897d
panic: ASan: Invalid access, NUM-byte read at ADDR, UMAUseAfterFree(fd) (3) 2 C 58 1499d 1552d
panic: pmap_kasan_enter_alloc_4k: no memory to grow shadow map (2) 2 C 602 1727d 1776d
panic: out of swap space 2 C 15036 1649d 1892d
panic: ASan: Invalid access, NUM-byte read at ADDR, UseAfterScope(f8) 2 syz 7 1623d 1705d
panic: Queues are not empty when handling SHUTDOWN-ACK 2 syz 142 1656d 2226d
SYZFAIL: output overflow (2) -1 syz 14 1662d 1832d
panic: hpts_sane_input_insert: hpts:ADDR inp:ADDR incorrect CPU 2 C 186 1681d 1839d
SYZFAIL: tun: can't open device -1 syz 159 1783d 1975d
panic: m_copydata, offset > size of mbuf chain 2 syz 11 1778d 1781d
panic: hpts_sane_input_remove: hpts:ADDR inp:ADDR incorrect CPU 2 syz 5 1788d 1833d
panic: ASan: Invalid access, 2-byte read in sctp_common_input_processing 2 syz 8 1788d 1836d
panic: mtx_lock() of destroyed mutex at sys/netinet/sctp_pcb.c:LINE 2 syz 24 1847d 2273d
Fatal trap 9: general protection fault in __mtx_lock_sleep -1 syz 295 1841d 2515d
Fatal trap 9: general protection fault in sctp_timer_stop -1 syz 232 1841d 2155d
panic: ASan: Invalid access, 8-byte read in __mtx_lock_sleep 2 syz 23 1744d 1827d
panic: ASan: Invalid access, 8-byte read in sctp_lower_sosend 2 syz 49 1711d 1819d
panic: ASan: Invalid access, 1-byte write in sctp_lower_sosend 2 syz 332 1732d 1837d
Fatal trap 12: page fault in __mtx_lock_sleep -1 syz 151 1842d 2490d
panic: Warning: Last msg marked incomplete, yet nothing left? 2 C 34 1637d 1891d
panic: ASan: Invalid access, NUM-byte read in __mtx_lock_flags 2 C 188 1711d 1777d
panic: ASan: Invalid access, 8-byte write in sctp_timer_stop 2 C 269 1711d 1837d
Fatal trap 9: general protection fault in sctp_lower_sosend (2) -1 C 446 1841d 2161d
panic: ASan: Invalid access, NUM-byte read in sctp_ss_default_select 2 C 1 1780d 1780d
panic: ASan: Invalid access, NUM-byte read in smp_masked_invlpg_range 2 C 1 1730d 1730d
panic: rsm:ADDR nrsm:ADDR rack:ADDR -- rsm->m is NULL? 2 C 25 1896d 1901d
panic: ASan: Invalid access, 4-byte read in in6_sin6_2_sin 2 C 8 1820d 1838d
panic: Most recently used by tcp_fsb 2 C 149 1901d 1901d
panic: rack_output: IP version incorrect: 0 2 C 31 1901d 1901d
panic: Most recently used by xform 2 C 115 1901d 1901d
Fatal trap 12: page fault in in6_unlink_ifa (2) -1 syz 20 1847d 2235d
panic: interrupts enabled 2 C 191 1876d 1876d
SYZFAIL: output overflow -1 syz 38 1898d 1976d
SYZFAIL: tun: read failed -1 syz 1040 1895d 1976d
panic: sbflush_internal: ccc 0 mb 0 mbcnt 256 2 C 23 2590d 2681d
panic: pfi_dynaddr_setup: non-NULL dyn 2 C 35 2031d 2272d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/kern/uipc_ktls.c:LINE 2 C 6 2026d 2227d
panic: sleepq_add: td ADDR to sleep on wchan ADDR with sleeping prohibited 2 C 6804 2103d 2141d
panic: pfi_kif_unref: ADDR has zero refs 2 C 2 2108d 2108d
panic: thread with borrowed priority returning to userland 2 syz 8 2231d 2265d
panic: tp:ADDR rc_sacked:LINE > out:LINE 2 C 185 2258d 2268d
panic: m_copydata, length > size of mbuf chain 2 C 93 2268d 2289d
panic: sbsndptr_noadv: sb_mb is NULL 2 C 686 2268d 2289d
panic: mtx_lock() of destroyed mutex at sys/kern/sys_socket.c:LINE 2 syz 43 2317d 2629d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/kern/sys_socket.c:LINE 2 syz 3 2352d 2367d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE 2 C 9 2371d 2372d
panic: _mtx_lock_sleep: recursed on non-recursive mutex rtentry @ /syzkaller/managers/main/kernel/sys/net/route.c:LINE 2 C 4 2418d 2605d
panic: mutex pcbinfohash not owned at /syzkaller/managers/i386/kernel/sys/netinet6/in6_pcb.c:LINE 2 syz 6 2446d 2447d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/main/kernel/sys/netinet6/in6_ifattach.c:LINE 2 syz 4 2468d 2470d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/i386/kernel/sys/netinet6/in6_ifattach.c:LINE (2) 2 syz 1 2470d 2470d
Fatal trap 12: page fault in thread_lock_validate -1 syz 1 2483d 2483d
panic: inp_leave_group: imf_sources not empty (2) 2 C 70 2589d 2622d
panic: non-kernel pmap pmap ADDR cpu 0 pcid 0 2 syz 1 2598d 2598d
panic: _mtx_lock_sleep: recursed on non-recursive mutex rtentry @ /syzkaller/managers/i386/kernel/sys/net/route.c:LINE 2 syz 1 2605d 2605d
panic: sbflush_internal: ccc 0 mb 0 mbcnt 512 2 syz 5 2605d 2663d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/main/kernel/sys/kern/sys_socket.c:LINE 2 syz 5 2618d 2629d
panic: Memory modified after free ADDR(256) val=0 @ ADDR 2 syz 6 2622d 2629d
panic: m_uiotombuf: progress != total 2 syz 2 2681d 2681d
panic: Bad tailq NEXT(ADDR->tqh_last) != NULL (2) 2 C 2194 2066d 2288d
panic: vm_page_free_prep: freeing wired page ADDR 2 C 2 2622d 2622d