syzbot

 sign-in | mailing list | source | docs
🐞 Open [541] 🐞 Fixed [376] 🐞 Invalid [902] 📈 Kernel Health 📈 Bugs/Month 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

Instances [tested repos]:
Name Last active Uptime Corpus Coverage 🛈 Crashes Execs Kernel build syzkaller build Bugs
Commit Config Freshness Status Commit Freshness Status All Only
ci2-netbsd-kmsan now 25m 2569 43510 364 216110 7022656d8ab2 .config 11h48m 639d6cdf 1h42m all only
Applied filters: Manager=ci2-netbsd-kmsan (drop)
upstream (215):
Title Repro Cause bisect Fix bisect Count Last Reported Last activity
panic: " failed: file "/syzkaller/managers/ci2-netbsd-kmsan/kernel/sys/miscfs/specfs/spec_vnops.c", line NUM 1 5d00h 2d11h 2d11h
panic: ernel diagnostic assertion "sn->sn_opencnt" failed: file "/syzkaller/managers/ci2-netbsd-kmsan/kernel/sys/miscfs/ 1 5d02h 3d11h 3d11h
panic: netbsd:panic+0x1b3 1 5d09h 3d11h 3d11h
assert failed: fdvp->v_mount == tdvp->v_mount 1 5d14h 3d11h 3d11h
panic: ap_get_physpaetached 1 5d18h 3d11h 3d11h
page fault in htable_foreach_lle 3 9h51m 4d11h 4d11h
panic: ADDR] cpu1: Begin traceback... 1 5d21h 4d11h 4d11h
panic: emory (2) 1 5d21h 4d11h 4d11h
panic: d: file "/syzkaller/managers/ci2-netbsd-kmsan/kernel/sys/kern/vfs_vnops.c", line NUM 1 6d12h 5d11h 5d11h
panic: LOCKDEBUG: Reader / writer lock error: rw_vector_enter,NUM: locking again 1 6d14h 5d11h 5d11h
MSan: Uninitialized Memory in uvm_fault_internal 1 8d01h 7d11h 7d11h
panic: back... 1 9d08h 9d08h 9d08h
panic: diagnostic assertion "lwpcnt >= NUM" failed: file "/syzkaller/managers/ci2-netbsd-kmsan/kernel/sys/kern/kern_uidi 1 10d 10d 10d
MSan: Uninitialized Memory in bus_dmamap_sync (3) 1 10d 10d 10d
panic: of memory (2) 2 9d06h 12d 12d
panic: LOCKDEBUG: Reader / writer lock e rror: rw_vector_enter,NUM: locking against myself 1 14d 14d 14d
page fault in memset 5 11h04m 15d 15d
page fault in fork1 (5) 1 16d 16d 16d
panic: kmem_free(ADDR, NUM) != allocated size ADDR; overwrote? 8 6d11h 18d 18d
assert failed: pde->pde_key != ((void *)NUM) 2 4d14h 18d 18d
netbsd test error: lost connection to test machine (6) 9 18d 19d 19d
assert failed: mp == vp->v_mount 1 19d 19d 19d
panic: init died (signal NUM, exit NUM) 3 5d16h 19d 19d
assert failed: ln->la_numheld == NUM 26 18d 20d 20d
protection fault in fork1 (5) 1 20d 20d 20d
panic: kernel diagnostic assertion "tmp != NULL" failed: file "/syzkaller/managers/ci2-netbsd-kmsan/kern 1 20d 20d 20d
assert failed: lle->la_numheld == NUM 17 18d 20d 20d
MSan: Uninitialized Memory in tmpfs_rmdir 1 21d 21d 21d
MSan: Uninitialized Memory in kern_free 1 21d 21d 21d
MSan: Uninitialized Memory in pppread 11 2h18m 22d 22d
panic: gnostic assertion "proccnt >= NUM" failed: file "/syzkaller/managers/ci2-netbsd-kmsan/kernel/sys/kern/kern_uidinf 1 23d 23d 23d
panic:pm ap_get_physpage: out of memory 1 23d 23d 23d
assert failed: requested_size > NUM (2) 73 18m 23d 23d
page fault in layer_bypass 2 15d 24d 24d
panic: rnel diagnostic asseetached 1 24d 24d 24d
assert failed: pnode->sysctl_parent == snode 21 1d12h 24d 24d
panic: cpu1[NUM idle/NUM]: heart stopped beating 1 25d 25d 25d
panic: LOCKDEBUG: Reader / writer lock error: rw_vector_enter,NUM: locking against mysel (3) 3 1d05h 26d 26d
MSan: Uninitialized Memory in strlcpy (2) 3 26d 26d 26d
netbsd test error: SYZFATAL: failed to connect to host: dial tcp IP:NUM: connect: connection refused 36 24d 27d 27d
panic: get_physpage: out of memory (3) 5 7d06h 27d 27d
panic: mory 1 27d 27d 27d
can't ssh into the instance 1070 1h41m 27d 27d
protection fault in VFS_STATVFS 3 3d00h 27d 27d
panic: physpage: out of memory (3) 5 8d04h 28d 28d
panic: out of memory (2) 3 26d 29d 29d
MSan: Uninitialized Memory in vfs_busy 2 20d 29d 29d
assert failed: fli->fli_trans_cnt > NUM (3) 26 1d10h 29d 29d
panic: ge: out of memory 2 29d 29d 29d
assert failed: ifa->ifa_refcnt > NUM 8 1d22h 29d 29d
panic: yspage: out of memory (2) 4 7d10h 29d 29d
panic: _physpage: out of memory (3) 1 29d 29d 29d
assert failed: dp != NULL 25 16d 30d 30d
assert failed: lktype != LK_NONE (2) 23 6d10h 30d 30d
panic: [ 1 32d 32d 32d
panic: f memory (2) 2 13d 32d 32d
SYZFAIL: leak checking is not implemented syz 381 19h27m 33d 33d
MSan: Uninitialized Memory in umap_lookup 8 10d 33d 33d
page fault in union_statvfs (3) 1 33d 33d 33d
panic: el diagnostic assertion "dq->dq_ump->um_quotas[dq->dq_type] != vp" failed: file "/syzkaller/managers/ci2-netbsd-k 1 37d 37d 37d
assert failed: node->tn_spec.tn_dir.tn_parent == dnode 1 38d 38d 38d
panic: memory (3) 5 8d03h 38d 38d
MSan: Uninitialized Memory in layer_lookup C 12 14h35m 38d 38d
page fault in tmpfs_loadvnode (2) C 7 12d 39d 39d
panic: hyspage: out of memory (2) 4 7d02h 39d 39d
panic: "lwpcnt >= NUM" failed: file "/syzkaller/managers/ci2-netbsd-kmsan/kernel/sys/kern/kern_uidinfo.c", line NUM uid 1 40d 40d 40d
panic: [ NUM.ADDR] panic() at netbsd:panic+0x1b3 (5) 30 4d01h 40d 40d
panic: netbsd:vpanic+0xc9d 3 4d00h 41d 41d
panic: _get_physpage: out of memory (3) 7 9d17h 41d 41d
panic:pmap_get_physpage: out of memory (3) 5 4d09h 41d 41d
assert failed: vp == vp->v_specnode->sn_dev->sd_bdevvp 164 3d09h 41d 41d
assert failed: tmp != NULL (2) 2223 18m 43d 43d
panic: [ NUM.ADDR] vpanic() at netbsd:vpanic+0xc9d (5) 39 5d15h 44d 44d
panic: page: out of memory (2) 6 8d06h 44d 44d
panic: kernel diagnostic assertion "hispgrp->pg_jobc > NUM" failed: file "/ 1 45d 45d 45d
assert failed: dq->dq_ump->um_quotas[dq->dq_type] != vp (3) 16 10d 45d 45d
panic: age: out of memory (2) 4 13d 48d 48d
panic: c assertion "ks->ks_pshared_proc == NULL" failed: file "/syzkaller/managers/ci2-netbsd-kmsan/kernel/sys/kern/uipc 1 48d 48d 48d
page fault in sysctl_rtable (7) 4 7d00h 51d 51d
panic: LIST_* forw ADDR /syzkaller/managers/ci2-netbsd-kmsan/kernel/sys/kern/subr_pool.c:LINE 1 53d 53d 53d
panic: pmap_pp_remove: mapping not present C 2 35d 54d 54d
page fault in pmap_remove_all 1 54d 54d 54d
panic: agnostic assertion "hispgrp->pg_jobc > NUM" failed: file "/syzkaller/managers/ci2-netbsd-kmsan/kernel/sys/kern/ke 1 55d 55d 55d
panic: t_physpage: out of memory (3) 6 4d10h 55d 55d
panic: NUM.ADDR] cpu1: Begin traceback... (3) 2 12d 55d 55d
panic: (6) 22 6h28m 56d 56d
panic: map_get_physpage: out of memory (2) 54 5d11h 56d 56d
panic: et_physpage: out of memory (2) 2 26d 56d 56d
panic: ap_get_physpage: out of memory (4) 36 5d14h 56d 56d
panic: e: out of memory (2) 2 24d 56d 56d
assert failed: (use & VUSECOUNT_MASK) == NUM (2) 86 15h52m 56d 56d
assert failed: c->c_cpu == cc (3) 7 3d00h 56d 56d
assert failed: (c->c_flags & CALLOUT_PENDING) != NUM 2 31d 57d 57d
panic: pmap'%f%*_get_physpage: ouNUMt of memory 1 57d 57d 57d
MSan: Uninitialized Memory in mount_domount syz 13 2d00h 57d 57d
panic: ufsdirhash_dirtrunc: blocks in use C 73 14h14m 58d 45d
netbsd boot error: can't ssh into the instance (11) 13 34d 61d 61d
assert failed: atomic_load_relaxed(&pp->pp_pte.pte_va) == NUM (3) 7 7d01h 62d 62d
panic: p_get_physpage: out of memory (2) 14 6d05h 62d 62d
panic: diagnostic assertion "(pg->pqflags & (PQ_INTENT_MASK | PQ_INTENT_SET)) != (PQ_INTENT_D | PQ_INTENT_SET)" failed: 1 62d 62d 62d
corrupted report (6) 569 7h11m 62d 62d
suppressed report (2) 609 2h03m 62d 62d
lost connection to test machine (3) 4987 34m 62d 62d
go runtime error (2) 824 6h23m 62d 62d
MSan: Uninitialized Memory in rip6_ctlinput C 1 184d 184d 184d
MSan: Uninitialized Memory in ufs_rmdir syz 5 3d21h 230d 230d
assert failed: fli->fli_trans_cnt == NUM (2) syz 55 1d04h 237d 169d
page fault in uao_swap_off C 6 35d 287d 282d
SYZFAIL: failed to mkdir (2) syz 3 220d 287d 287d
MSan: Uninitialized Memory in uao_detach C 3 177d 287d 227d
MSan: Uninitialized Memory in fd_getfile C 7 12d 291d 291d
panic: hook_disestablish: hook ADDR not established syz 1 294d 294d 294d
panic: cpu0: found cpu1 heart stopped beating and unresponsive C 22 7d02h 298d 231d
page fault in union_revoke C 3 321d 322d 322d
assert failed: rt->rt_ifp != NULL syz 12 154d 323d 187d
panic: LOCKDEBUG: Reader / writer lock error: rw_destroy,NUM: assertion failed: (rw->rw_owner & ~RW_NODEBUG) == NUM C 15 4d15h 329d 316d
panic: cpu1: time has not advanced in NUM heartbeats C 371 3d13h 334d 334d
panic: cpu0: softints stuck for NUM seconds C 793 5h19m 337d 337d
panic: cpu1: softints stuck for NUM seconds C 276 7h14m 337d 219d
page fault in Xintr_x2apic_ltimer (2) C 9 11d 339d 261d
page fault in uvm_pgflcache_alloc C 1 344d 344d 344d
page fault in uao_detach C 29 2d14h 362d 362d
SYZFAIL: failed to mkdtemp syz 9 197d 368d 364d
assert failed: mutex_owned(&tty_lock) C 37 47d 373d 373d
assert failed: dev == sc->sc_dev C 2 306d 380d 380d
MSan: Uninitialized Memory in sysctl_rtable C 124 7d23h 390d 390d
assert failed: KERNEL_LOCKED_P() (2) C 46 391d 392d 392d
MSan: Uninitialized Memory in union_statvfs syz 1 401d 401d 401d
MSan: Uninitialized Memory in callout_softclock C 14 7d04h 405d 393d
MSan: Uninitialized Memory in sysctl_dumpentry C 2 272d 407d 407d
assert failed: entry->next->start <= entry->end C 28 5d00h 410d 410d
panic: vrelel: bad ref count (2) C 667 1d04h 431d 414d
assert failed: (use & VUSECOUNT_MASK) > NUM (2) syz 64 2d01h 441d 360d
MSan: Uninitialized Memory in ifreq_setaddr (2) C 195 1d21h 444d 444d
MSan: Uninitialized Memory in psref_release C 188 4d07h 445d 445d
panic: state is LOADED, usecount NUM, expected ACTIVE at genfs_lock:NUM C 17 1d13h 446d 446d
assert failed: c->c_func != NULL C 11 12d 457d 331d
panic: kmem_free(ADDR, NUM) != allocated size NUM; overwrote? (2) C 7 6d08h 464d 38d
MSan: Uninitialized Memory in compat_43_sys_recvmsg C 9 353d 468d 468d
assert failed: np->netc_anon == NULL C 4 17d 474d 474d
assert failed: ne->ne_defexported.netc_anon == NULL C 6 17d 474d 473d
protection fault in xrstor64 C 110 472d 478d 478d
MSan: Uninitialized Memory in kpreempt C 1 493d 493d 493d
MSan: Uninitialized Memory in db_frame_info C 13 7d06h 502d 444d
MSan: Uninitialized Memory in ttwrite C 1 511d 511d 511d
page fault in ptyfs_unmount syz 1 543d 543d 543d
panic: LOCKDEBUG: Mutex error: mutex_vector_enter,NUM: locking against myself C 1052 1d11h 548d 548d
page fault in iostat_free C 2 556d 556d 556d
page fault in sl_compress_setup C 78 4d13h 599d 599d
assert failed: !dev->dv_detach_done C 10 404d 628d 628d
MSan: Uninitialized Memory in ksyms_getname C 26 48d 652d 593d
assert failed: sn->sn_opencnt (2) C 2367 55m 653d 637d
panic: sw_reg_strategy: swap to sparse file C 1695 55m 656d 190d
panic: LOCKDEBUG: Reader / writer lock error: rw_vector_enter,NUM: locking against myself C 31970 1h03m 659d 659d
MSan: Uninitialized Memory in quota1_handle_cmd_put C 36 201d 663d 663d
MSan: Uninitialized Memory in export C 26 7d18h 663d 663d
MSan: Uninitialized Memory in kauth_cred_setgroups C 43 5d12h 663d 650d
MSan: Uninitialized Memory in cpu_softintr_p C 1 667d 667d 667d
MSan: Uninitialized Memory in db_nextframe C 82 7d12h 667d 665d
assert failed: (cnp->cn_flags & LOCKPARENT) == NUM || searchdir == NULL || VOP_ISLOCKED(searchdir) == LK_EXCLUSIVE (2) C 40 37d 687d 685d
assert failed: mp->mnt_refcnt > NUM || mutex_owned(&mountlist_lock) C 36 2d05h 693d 542d
panic: bpf_change_type C 21 9d03h 753d 753d
panic: pmap_get_physpage: out of memory (4) C 110603 now 768d 533d
SYZFATAL: executor NUM failed NUM times: failed to start executor binary: fork/exec /root/syz-executor: permission denie syz 157238 36m 784d 784d
assert failed: dev->ud_ifaces == NULL C 8900 37d 821d 722d
page fault in Xintr_legacy8 C 5 330d 877d 877d
assert failed: sn->sn_opencnt == NUM C 15 796d 880d 768d
assert failed: (pg->pqflags & (PQ_INTENT_MASK | PQ_INTENT_SET)) != (PQ_INTENT_D | PQ_INTENT_SET) (2) C 93 17d 907d 232d
assert failed: c->c_magic == CALLOUT_MAGIC (2) C 137 4d11h 908d 395d
SYZFAIL: %s (2) syz 51 537d 913d 910d
page fault in usb_free_device C 97 821d 923d 921d
panic: LOCKDEBUG: Mutex error: kmem_intr_free,286: allocation contains active lock (2) C 63 5d16h 1101d 828d
panic: uvm_fault(ADDR, ADDR, 1) -> e (2) C 2 1127d 1127d 1127d
integer divide fault in itimer_callout C 39 216d 1158d 1158d
panic: kmsan_md_addr_to_shad: impossible, va=ADDR (2) C 9 7d23h 1180d 1180d
panic: rw_vector_enter,305: uninitialized lock (lock=ADDR, from=ADDR) C 52 5d08h 1183d 1183d
MSan: Uninitialized Memory in mutex_enter syz 1 1183d 1183d 717d
SYZFAIL: clone failed syz 11742 152d 1190d 900d
assert failed: nmp == NULL || nmp == mp C 590 1h22m 1195d 1195d
SYZFAIL: syz_usb_connect: vhci_open failed syz 2309 208d 1212d 1212d
panic: LOCKDEBUG: Kernel lock error: _kernel_lock,240: spinout C 1374 43m 1273d 671d
panic: LOCKDEBUG: Mutex error: _mutex_init,359: already initialized C 53 177d 1283d 1283d
page fault in mutex_dump C 266 55d 1283d 1283d
assert failed: (mp->mnt_iflag & IMNT_GONE) == 0 C 43 711d 1303d 719d
page fault in wskbd_do_ioctl C 44 423d 1318d 1318d
assert failed: vrefcnt(vp) > 0 C 1377 3h18m 1334d 790d
assert failed: fp != NULL (2) C 16 281d 1356d 1291d
panic: mutex_vector_enter,512: uninitialized lock (lock=ADDR, from=ADDR) C 201 19d 1361d 1304d
panic: kmsan_md_addr_to_shad: impossible, va=0x0 (2) C 47 450d 1362d 1362d
assert failed: bytes != 0 (2) C 14 11d 1369d 1230d
page fault in wsmousedoioctl C 71 433d 1377d 1377d
page fault in usb_event_thread C 1 661d 1382d 828d
page fault in wsmux_do_ioctl C 26 38d 1385d 1385d
assert failed: (PHYS_TO_VM_PAGE(pmap_pte2pa(opte)) == NULL) C 44 9d19h 1392d 1392d
panic: kmsan_intr_enter: lwp->ctx = 16 C 8 604d 1411d 1411d
page fault in mutex_enter C 28 302d 1413d 1332d
panic: LOCKDEBUG: Reader / writer lock error: mi_userret,116: sleep lock held C 672 2d17h 1417d 1417d
assert failed: ks->ks_pshared_proc == NULL C 1007 10h14m 1420d 1419d
panic: LOCKDEBUG: Mutex error: rw_vector_enter,309: spin lock held C 633 4d11h 1420d 1420d
assert failed: ps->ps_endoffset != endoffset C 4470 1d12h 1453d 1453d
panic: LOCKDEBUG: Kernel lock error: _kernel_lock,244: spinout C 92 1273d 1492d 671d
fault in supervisor mode (2) C 4313 1d09h 1494d 1411d
assert failed: hispgrp->pg_jobc > 0 C 16488 2h00m 1507d 1507d
assert failed: pgrp->pg_jobc > 0 C 2051 28d 1507d 1507d
assert failed: c->c_cpu->cc_lwp == curlwp || c->c_cpu->cc_active != c (3) syz 138 356d 1556d 1349d
panic: fpudna from kernel, ip ADDR, trapframe ADDR syz 4950 1h33m 1568d 708d
MSan: Uninitialized Memory in uiomove C 1642 4d10h 1569d 714d
assert failed: rv (2) C 162 4d07h 1696d 1556d
assert failed: pg->wire_count != 0 (3) C 268 5d06h 1711d 1708d
assert failed: proccnt >= 0 C 208 2d14h 1808d 719d
panic: uvm_fault_unwire_locked: address not in map C 54 160d 1815d 1815d
assert failed: entry->next != &map->header && entry->next->start <= entry->end C 114 430d 1825d 1824d
assert failed: (so2->so_options & SO_ACCEPTCONN) == 0 || so2->so_lock == uipc_lock C 258 11d 1935d 1820d
assert failed: lwpcnt >= 0 C 15829 1h07m 1938d 790d
no output from test machine C 2094897 33m 1941d 1931d