syzbot


Instances [tested repos]:
Name Last active Uptime Corpus Coverage 🛈 Crashes Execs Kernel build syzkaller build
Commit Config Freshness Status Commit Freshness Status
ci-openbsd-main now 12h22m 6910 39013 578 1860329 8a9424f8c5c9 .config 1d06h af24b050 3d15h
ci-openbsd-multicore now 12h09m 7168 41358 706 3271759 8a9424f8c5c9 .config 1d06h af24b050 3d15h
ci-openbsd-setuid now 12h15m 4202 27880 489 2800616 8a9424f8c5c9 .config 1d06h af24b050 3d15h
upstream (131):
Title Repro Cause bisect Fix bisect Count Last Reported Last activity
panic: pool_do_get: sigapl: page empty 1 2h49m 2h49m 2h49m
panic: vrele: ref cnt 1 10h47m 10h46m 10h46m
panic: pool_do_get: pkpcb: page empty 1 12h50m 12h50m 12h50m
assert "pmap->pm_type != PMAP_TYPE_EPT" failed in pmap.c (3) 1 1d11h 1d11h 1d11h
panic: vop (2) 1 1d13h 1d13h 1d13h
panic: trap type NUM, code=NUM, pc=3c729 5 5h31m 1d21h 1d21h
assert "!ISSET(rt->rt_flags, RTF_LOCAL)" failed in nd6.c (3) 1 2d18h 2d18h 2d18h
assert "(pg->pg_flags & PG_BUSY) == NUM" failed in pmap.c 2 3d10h 4d00h 4d00h
panic: pool_do_get: filepl: page empty 1 4d16h 4d16h 4d16h
assert "mo->ro_magic == RWLOCK_OBJ_MAGIC" failed in kern_rwlock.c 1 5d03h 5d03h 5d03h
uvm_fault: VOP_LOCK (2) 1 5d06h 5d06h 5d06h
panic: trap type NUM, code=NUM, pc=3c709 1 5d10h 5d10h 5d10h
uvm_fault: arp_rtrequest (2) 1 5d17h 5d17h 5d17h
pool: cpu free list modified: mbufpl (4) 1 6d01h 6d01h 6d01h
uvm_fault: pool_do_get (3) 1 6d06h 6d06h 6d06h
panic: ifa_update_broadaddr does not support dynamic length (3) 2 5h32m 6d07h 6d07h
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte 0x3efff 1 6d15h 6d15h 6d15h
protection_fault: solock_shared 2 4d02h 6d17h 6d17h
panic: broken type ref (4) 3 6d05h 7d05h 7d05h
panic: thread NUM p_stat is NUM 1 8d09h 8d09h 8d09h
assert "__mp_lock_held(&sched_lock, curcpu()) == NUM" failed in kern_lock.c (5) 6 23h52m 10d 10d
protection_fault: ifaof_ifpforaddr 2 10d 10d 10d
panic: vop_generConnection to us-central1-ssh-serialport.googleapis.com closed by remote host. 1 10d 10d 10d
panic: ffs_fsync: not dirty 3 12h37m 10d 10d
panic: vref used where vget required (4) 2 1d10h 11d 11d
panic: ffs_freefile: freeing free inode 1 12d 12d 12d
panic: pmap_enter: PG_PVLIST mapping with unmanaged page: va ADDR, opte ADDR, pa ADDR (2) 1 12d 12d 12d
uvm_fault: checkalias 1 12d 12d 12d
panic: trap type NUM, code=NUM, pc=3c7a9 2 7d08h 12d 12d
protection_fault: strlcpy 1 12d 12d 12d
panic: time: Stop called on uninitialized Timer 2 8d03h 12d 12d
assert "bp->b_data != NULL" failed in vfs_biomem.c (5) 4 8d05h 13d 13d
panic: pool_do_get: rwobjpl: page empty 1 13d 13d 13d
uvm_fault: proc_trampoline 2 3d02h 14d 14d
pool: free list modified: tcpcb 1 16d 16d 16d
multicore boot error: can't ssh into the instance (6) 3 16d 16d 16d
multicore test error: SYZFATAL: BUG: failed to run executor version: failed to run ["./syz-executor" "version"]: signal: bad system call (core 249 20d 24d 24d
uvm_fault: kcov_remote_enter (2) 2 12d 24d 24d
panic: (4) 1 27d 27d 27d
uvm_fault: witness_checkorder (5) 2 2d15h 27d 27d
uvm_fault: bpfioctl (4) 1 28d 28d 28d
assert "fp->f_count >= NUM" failed in kern_descrip.c 1 28d 28d 28d
uvm_fault: ufs_direnter (2) 1 30d 30d 30d
pool: free list modified: rttmr 2 15d 30d 30d
panic: runtime error: invalid memory address or nil pointer dereference (9) 4 6d04h 32d 32d
protection_fault: lf_advlock (4) C 1 19d 33d 33d
panic: wakeup: p_stat is NUM (4) 1 34d 34d 34d
uvm_fault: VOP_BWRITE 1 35d 35d 35d
panic: bad arg kind: <nil> (13) 1 38d 38d 38d
assert "((flags & PGO_LOCKED) != NUM && rw_lock_held(uobj->vmobjlock)) || (flags & PGO_LOCKED) == NUM" failed in uvm_vno (4) 4 17h34m 39d 39d
uvm_fault: strcmp 1 45d 45d 45d
assert "scan->kqs_start.kn_filter == EVFILT_MARKER" failed in kern_event.c 1 45d 45d 45d
protection_fault: __x86_indirect_thunk_r11 (2) 10 2h47m 46d 46d
uvm_fault: softclock (4) 9 16d 46d 46d
assert "nlevel >= IPL_NONE" failed in intr.c (2) 1 47d 47d 47d
protection_fault: witness_checkorder (3) 1 48d 48d 48d
panic: softclock: invalid to_clock: NUM 7 1d06h 49d 49d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte ADDR (4) 10 2d11h 49d 49d
panic: pool_do_get: pfstkey: page empty 1 51d 51d 51d
panic: softclock: invalid to_clock: -ADDR 10 8d13h 51d 51d
uvm_fault: rt_timer_timer 3 39d 51d 51d
protection_fault: sys_semop C 2 38d 52d 52d
panic: softclock: invalid to_clock: ADDR 37 18h43m 53d 53d
panic: missing alias (4) 1 53d 53d 53d
assert "ps->ps_uvncount == NUM" failed in kern_unveil.c (4) C 16 4d19h 57d 23d
assert "sc->sc_dev == NUM" failed in if_tun.c (5) 4 10d 58d 58d
panic: runtime error: index out of range [ADDR] with length NUM 5 2h53m 59d 59d
uvm_fault: db_read_bytes 6 55m 61d 61d
panic: vputonfreelist: lock count is not zero (3) 3 3d14h 63d 63d
uvm_fault: unveil_add_vnode 1 63d 63d 63d
assert "cifp != NULL" failed in route.c (3) 27 3d20h 66d 66d
uvm_fault: pool_gc_pages (2) 4 11d 66d 66d
assert "(bp->b_flags & B_BUSY) == NUM" failed in vfs_biomem.c 1 69d 69d 69d
pool: free list modified: pipepl 1 72d 72d 72d
protection_fault: icmp_mtudisc_timeout 3 19d 72d 72d
assert "sin6tosa(&ro->ro_dst)->sa_family == AF_INET6" failed in 1 79d 79d 79d
assert "ISSET(bp->b_flags, B_BC)" failed in vfs_bio.c 3 11d 83d 83d
uvm_fault: ffs2_balloc (3) 4 13d 92d 92d
protection_fault: softclock 2 59d 103d 103d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (23) 168 10d 107d 107d
go runtime error 28 15h35m 113d 113d
uvm_fault: pf_purge_expired_states 2 36d 114d 114d
assert "pg->wire_count == NUM" failed in vfs_biomem.c (3) 26 22h16m 114d 114d
uvm_fault: pmap_page_remove (5) 3 4d16h 134d 134d
uvm_fault: km_free (2) 6 9d03h 136d 136d
panic: Non dma-reachable buffer at curaddr ADDR(raw) (2) 3 24d 152d 152d
protection_fault: done_flush (2) C 51 4d06h 162d 13d
assert "dupe == NULL" failed in uvm_page.c (4) 43 3h49m 163d 163d
panic: acquiring blockable sleep lock with spinlock or critical section held (rwlock) vmmaplk (3) 11 1d14h 180d 180d
uvm_fault: softclock_process_kclock_timeout (2) 4 62d 180d 180d
uvm_fault: ktrops (2) C 7 45d 205d 205d
multicore build error (17) 10 86d 212d 212d
panic: ffs_update: bad link cnt (2) 11 1d11h 216d 216d
uvm_fault: db_enter (5) 9 3d04h 223d 223d
pool: free list modified: fdescpl (4) 13 52d 230d 230d
uvm_fault: schedclock syz 10 21d 231d 54d
kernel: page fault trap, code=NUM (3) C 37 18h16m 262d 19d
malloc: free list modified: free (4) C 14 10d 283d 282d
panic: trap type NUM, code=NUM, pc=NUM (3) 48 9h40m 312d 312d
witness: lock_object uninitialized: ADDR (3) C 322 7h08m 386d 244d
uvm_fault: hardclock (5) syz 4 263d 415d 415d
panic: ufsdirhash_lookup: bad offset in hash array (3) C 79 10d 426d 132d
kernel: protection fault trap, code=NUM (6) 40 3d22h 528d 528d
protection_fault: sys_msgrcv (2) C 30 61d 556d 313d
uvm_fault: memcpy (5) C 6 34d 561d 561d
assert "uvn->u_obj.uo_refs == NUM" failed in uvm_vnode.c (2) syz 2 564d 564d 564d
pool: free list modified: sockpl (3) 33 5d06h 580d 580d
protection_fault: pool_do_put (2) syz 34 4d19h 585d 262d
panic: vop_generic_badop (2) 73 3d08h 595d 595d
panic: pmap_unwire: invalid PDE syz 6 59d 619d 560d
no output from test machine (8) C 342853 now 628d 624d
uvm_fault: ffs_indirtrunc C 4 384d 672d 672d
witness: reversal: vmmaplk inode (3) C 426 299d 704d 654d
SYZFATAL: executor NUM failed NUM times: executor NUM: exit status NUM syz 167522 now 727d 727d
panic: bad dir (3) C 24 21h10m 733d 561d
panic: uvm_fault_unwire_locked: address not in map (4) C 140 14h39m 748d 730d
uvm_fault: x86_ipi_db (8) 178 18h36m 792d 792d
uvm_fault: ufs_lookup C 44 2d11h 828d 180d
kernel: double fault trap, code=NUM (2) C 20 8h36m 828d 780d
panic: trap type NUM, code=NUM, pc=ADDR (2) 303 1d16h 835d 835d
protection_fault: ktrops C 244 5d09h 838d 818d
protection_fault: sblock syz 38 662d 841d 841d
assert "uvm_page_owner_locked_p(pg)" failed in uvm_page.c 228 55m 846d 846d
uvm_fault: fifo_write (2) C 2504 3h12m 849d 534d
SYZFAIL: tun: read failed syz 35263 25d 866d 835d
corrupted report (6) 878 5h15m 946d 946d
uvm_fault: memset C 40 19d 987d 987d
SYZFAIL: command failed syz 2451 41d 1154d 837d
suppressed report 256793 now 1155d 1144d
panic: ufs_rename: lost dir entry C 67 2h31m 1528d 766d
lost connection to test machine (2) 834211 5h18m 1945d never