syzbot


fixed bugs (91)
Instances:
Name Active Uptime Corpus Coverage Crashes Execs Kernel build syzkaller build
Commit Freshness Status Commit Freshness Status
ci-openbsd-main now 3h41m 7831 40540 1540 576778 325fe800 6h23m 3334d684 17h28m
ci-openbsd-multicore now 3h49m 7685 42506 1629 476055 325fe800 6h23m 3334d684 17h28m
ci-openbsd-setuid now 3h57m 3604 26186 404 1847926 325fe800 6h23m 3334d684 17h28m
upstream (70):
Title Repro Bisected Count Last Reported
kernel: privileged instruction fault trap, code=0 1 6d09h 6d09h
uvm_fault: ml_enlist 1 6d12h 6d12h
uvm_fault: tun_init 1 7d03h 7d03h
panic: lock (kernel_lock) mbufpl not locked 1 10d 10d
kqueue: knote !QUEUED 4 8h28m 11d
panic: kqueue_scan:LINE: kq=ADDR kn=ADDR knote !ACTIVE 1 17d 17d
assert "pg->wire_count == 0" failed in uvm_page.c 1 20d 20d
uvm_fault: pfr_detach_table C 12 18d 21d
uvm_fault: pfi_dynaddr_remove C 17 18d 23d
pool: free list modified: pffrnode 3 6d06h 31d
witness: reversal: vmmaplk inode (2) C 9048 11m 35d
uvm_fault: _bus_dmamap_load_mbuf 1 37d 37d
uvm_fault: m_copym 1 38d 38d
panic: pr_find_pagehead: mbufpl: page header missing (2) 1 41d 41d
pool: cpu free list modified: mcl2k 1 41d 41d
pool: free list modified: tcpqe 1 42d 42d
uvm_fault: sbdrop 18 22h08m 48d
pool: free list modified: shmpl (2) 1 48d 48d
kernel: protection fault trap, code=0 (7) syz 151475 now 49d
assert "mhead->m_flags & M_PKTHDR" failed in switchctl.c 1 51d 51d
pool: free list modified: art_heap4 2 33d 58d
uvm_fault: ifa_update_broadaddr 658 59m 59d
uvm_fault: pool_do_put (2) syz 11 2d19h 60d
uvm_fault: ml_purge (2) 1 60d 60d
pool: free list modified: aobjpl C 3 48d 60d
panic: amap_lookups: offset out of range 1 61d 61d
uvm_fault: tun_dev_read (2) 7 6h10m 62d
pool: free list modified: pvpl 3 7d06h 63d
uvm_fault: witness_checkorder (2) 1 64d 64d
uvm_fault: m_free (2) 100 16h47m 65d
panic: bad arg kind (2) 2 66d 68d
assert "ifp != NULL" failed in rtsock.c 2 67d 69d
panic: m_copym0: short mbuf chain 54 22h27m 69d
panic: m_copym0: m == NULL and not COPYALL 79 7h25m 70d
panic: receive 3: so ADDR, so_type 3, m ADDR, m_type 0 syz 234 16h11m 71d
pool: free list modified: anonpl 3 12d 71d
uvm_fault: x86_send_ipi 1 71d 71d
uvm_fault: VOP_ISLOCKED 1 71d 71d
panic: runtime error: invalid memory address or nil pointer dereference (3) 6 7d14h 76d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST, va = ADDR, pa = ADDR (2) 1 76d 76d
uvm_fault: m_zero 1 77d 77d
uvm_fault: soreceive syz 59 1d17h 81d
panic: receive 3: so ADDR, so_type 1, m ADDR, m_type 0 3 9d20h 83d
kernel: double fault trap, code=0 (2) syz 2 83d 83d
uvm_fault: bpf_mtap 4 3d09h 83d
pool: double put: mbufpl (2) 2 52d 84d
uvm_fault: fifo_write 1 84d 84d
panic: m_copydata: null mbuf C 392 1d13h 85d
panic: receive 1: so ADDR, so_type 3, sb_cc 176 12 11d 87d
panic: pr_find_pagehead: mbufpl: incorrect page (2) 7 3d22h 88d
panic: ffs_valloc: dup alloc 2 87d 91d
uvm_fault: in_delmulti syz 155052 now 91d
pool: cpu free list modified: mbufpl syz 4566 now 92d
assert "dupe == NULL" failed in uvm_page.c 3 71d 94d
uvm_fault: pool_cache_get 143 6h08m 94d
malloc: free list modified: free 6 4d18h 95d
panic: free: non-malloced addr ADDR type in_multi 4 82d 104d
panic: sbdrop syz 66 1h27m 106d
panic: attempt to access user address ADDR in supervisor mode 7 57d 106d
panic: receive 1a: so ADDR, so_type 3, m ADDR, m_type 0 syz 185 7h06m 113d
panic: tcp_output: template len != hdrlen - optlen syz 117 14h09m 119d
uvm_fault: vio_rxeof syz 4175 now 126d
panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock (2) syz 33 2d11h 133d
pool: free list modified: mbufpl (2) syz 389 7h16m 133d
uvm_fault: memcpy (2) syz 2144 1d09h 134d
uvm_fault: rtable_satoplen (3) syz 237 91d 134d
uvm_fault: pfi_kif_update 6 84d 211d
assert "pg->wire_count == 1" failed in vfs_biomem.c 68 67d 392d
lost connection to test machine (2) 581299 now 394d
no output from test machine C 389473 now 469d