syzbot

 sign-in | mailing list | source | docs
🐞 Open [112]
🐞 Fixed [291]
🐞 Invalid [902]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

Instances [tested repos]:
Name Last active Uptime Corpus Coverage 🛈 Crashes Execs Kernel build syzkaller build Bugs
Commit Config Freshness Status Commit Freshness Status All Only
ci-openbsd-main now 6h53m 7842 45513 744 1249642 6d22a4a7112d .config 8h57m e2beed91 6d22h all only
ci-openbsd-multicore now 6h15m 8159 47684 884 2048992 6d22a4a7112d .config 8h57m e2beed91 6d22h all only
ci-openbsd-setuid now 6h44m 4610 30209 2052 607296 6d22a4a7112d .config 8h57m e2beed91 6d22h all only
upstream (112):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Last activity
protection_fault: malloc (2) -1 1 2d02h 2d02h 2d02h
uvm_fault: ffs_fragextend (2) -1 1 4d19h 4d19h 4d19h
uvm_fault: ffs_alloccg (2) -1 2 4d18h 4d20h 4d20h
uvm_fault: ufs_direnter (5) -1 1 4d22h 4d22h 4d22h
uvm_fault: ffs_freefile (2) -1 1 4d23h 4d23h 4d23h
uvm_fault: ffs2_balloc (6) -1 3 4d21h 5d00h 5d00h
SYZFAIL: mmap of input file failed -1 1 6d01h 6d01h 6d01h
protection_fault: memcmp -1 1 7d19h 7d19h 7d19h
assert "refs > NUM" failed in kern_synch.c -1 1 8d11h 8d11h 8d11h
assert "pg->wire_count == NUM" failed in vfs_biomem.c (5) -1 1 24d 24d 24d
uvm_fault: bpfioctl (5) -1 1 32d 32d 32d
uvm_fault: alltraps_kern_meltdown -1 1 38d 38d 38d
panic: pool_p_free: rttmr free list modified: page ADDR; item addr ADDR; offset 0x10=ADDR 2 1 41d 41d 41d
assert "atomic_load_int(&fdp->fd_nuserevents) == NUM" failed in kern_descrip.c -1 2 39d 41d 41d
panic: softclock: invalid to_clock: -ADDR (3) 2 1 46d 46d 46d
protection_fault: sysctl_doproc -1 1 47d 47d 47d
uvm_fault: dt_ioctl_record_stop (2) -1 917 29m 48d 48d
uvm_fault: putc (2) -1 1 58d 58d 58d
panic: unhandled af (5) 2 2 18d 60d 60d
assert "cifp != NULL" failed in route.c (5) -1 3 9d00h 62d 62d
protection_fault: icmp_mtudisc_timeout (4) -1 5 37d 63d 63d
panic: trap type NUM, code=NUM, pc=bd4f9 (2) 2 3 47d 68d 68d
panic: softclock: invalid to_clock: ADDR (4) 2 2 16d 69d 69d
uvm_fault: pmap_page_remove (6) -1 1 69d 69d 69d
SYZFAIL: open of /dev/kcov failed (2) -1 43 3d12h 70d 70d
protection_fault: pf_anchor_global_RB_REMOVE (2) -1 1 78d 78d 78d
assert "d->bd_in_uiomove == NUM" failed in bpf.c (4) -1 1 80d 80d 80d
panic: kernel diagnostic assertion "refs != ~NUM" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_synch 2 1 81d 81d 81d
uvm_fault: sys_shmat -1 1 81d 81d 81d
uvm_fault: _copyin -1 5 40d 84d 84d
SYZFAIL: tun: can't open device (6) -1 31 46d 87d 87d
witness: reversal: sbufsnd inode (3) -1 5 23d 99d 99d
assert "next != NULL && next->start <= entry->end" failed in uvm_fault.c (5) -1 3 47d 121d 121d
uvm_fault: witness_checkorder (6) -1 33 6d19h 124d 124d
witness: reversal: &sched_lock &cq->cq_mtx -1 4 32d 125d 125d
assert "uvm_page_owner_locked_p(pg, TRUE)" failed in uvm_page.c (2) -1 3 19d 126d 126d
assert "rn != NULL" failed in pipex.c -1 20 7d22h 130d 130d
uvm_fault: mtx_enter_try -1 11 6d04h 134d 134d
uvm_fault: _copyinstr -1 13 45d 137d 137d
assert "(sih->sih_state & SIS_RESTART) == NUM" failed in kern_softintr.c -1 2 82d 141d 141d
protection_fault: __x86_indirect_thunk_r11 (4) -1 4 88d 141d 141d
SYZFAIL: can't reallocate -1 15 19h14m 143d 143d
witness: reversal: &cq->cq_mtx &sched_lock -1 33 4d18h 149d 149d
uvm_fault: copyout -1 214 14d 149d 149d
multicore test error: SYZFATAL: image testing failed w/o kernel bug (2) -1 4 23d 154d 154d
uvm_fault: mtx_enter -1 47 9d16h 160d 160d
panic: uvm_fault_unwire_locked: address not in map (5) 2 35 5d23h 169d 169d
panic: chgproccnt: procs < NUM 2 5 22d 208d 208d
uvm_fault: savectx (3) -1 196 1h27m 209d 209d
SYZFAIL: repeatedly failed to execute the program (2) -1 12 3d15h 210d 210d
panic: trap type NUM, code=NUM, pc=NUM (4) 2 12 1d05h 211d 211d
SYZFAIL: coverage filter is full (3) -1 460022 1d08h 211d 211d
protection_fault: bpfdetach -1 34 9h12m 213d 213d
uvm_fault: x86_ipi_db (9) -1 217 1d22h 215d 215d
SYZFAIL: SIGBUS (2) -1 39 4d22h 217d 217d
assert "rdomain == rtable_l2(rdomain)" failed in route.c (2) -1 8 11d 219d 219d
assert "sc->sc_dev == NUM" failed in if_tun.c (6) -1 47 3h14m 220d 220d
witness: reversal: sbufrcv inode (2) -1 12 6d04h 220d 220d
assert "refs != ~NUM" failed in kern_synch.c -1 423 13h33m 221d 221d
SYZFAIL: too many calls in output (2) -1 62 6d05h 222d 222d
SYZFAIL: posix_spawnp failed -1 566 3h06m 223d 223d
assert "map->limit == rtmap_limit" failed in rtable.c (2) -1 264 20h26m 223d 223d
uvm_fault: proc_trampoline (2) -1 139 14h54m 223d 223d
protection_fault: witness_checkorder (5) -1 7 35d 223d 223d
panic: pledge_namei: ni_pledge (2) 2 7 4d12h 224d 224d
uvm_fault: arp_rtrequest (3) -1 283 4d21h 224d 224d
protection_fault: copyout -1 8 34d 225d 225d
pool: free list modified: shmpl (6) -1 413 7h37m 225d 225d
uvm_fault: db_enter (6) -1 459 6h54m 225d 225d
can't ssh into the instance (2) -1 32186 7m 226d 226d
suppressed report (2) -1 10923 10m 226d 226d
panic: missing alias (6) 2 464 3h50m 226d 226d
SYZFAIL: failed to recv rpc (4) -1 937 3h35m 226d 226d
panic: trap type NUM, code=NUM, pc=ADDR (3) 2 394 6m 226d 226d
corrupted report (7) -1 4321 30m 226d 226d
witness: reversal: lock order data missing (5) -1 147339 7m 226d 226d
SYZFAIL: ioctl remote attach failed (6) -1 31721 now 226d 226d
SYZFAIL: failed to mkdtemp (2) -1 30372 6m 226d 226d
SYZFAIL: failed to send rpc (2) -1 17691 18m 226d 226d
SYZFAIL: tun_id out of range (4) -1 1641273 now 226d 226d
SYZFAIL: failed to mkdir (2) -1 2965 38m 226d 226d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (25) -1 78 41d 280d 274d
SYZFAIL: too much cover -1 212 1d23h 395d 395d
SYZFAIL: pipe failed -1 68 17d 430d 430d
pool: free list modified: rttmr -1 102 22h33m 545d 545d
protection_fault: lf_advlock (4) -1 C 23 now 547d 547d
protection_fault: sys_semop -1 C 158 2h04m 567d 567d
uvm_fault: ktrops (2) -1 C 179 1d06h 720d 720d
uvm_fault: schedclock -1 syz 11 377d 746d 569d
kernel: page fault trap, code=NUM (3) -1 C 92 24d 776d 533d
malloc: free list modified: free (4) -1 C 23 23d 797d 797d
uvm_fault: hardclock (5) -1 syz 4 777d 929d 929d
panic: ufsdirhash_lookup: bad offset in hash array (3) 2 C 79 23d 940d 646d
protection_fault: sys_msgrcv (2) -1 C 160 22h24m 1071d 827d
uvm_fault: memcpy (5) -1 C 43 4d16h 1075d 1075d
assert "uvn->u_obj.uo_refs == NUM" failed in uvm_vnode.c (2) -1 syz 2 1079d 1079d 1079d
panic: pmap_unwire: invalid PDE 2 syz 6 490d 1133d 1075d
no output from test machine (8) -1 C 701651 now 1142d 1138d
uvm_fault: ffs_indirtrunc -1 C 5 158d 1186d 1186d
witness: reversal: vmmaplk inode (3) -1 C 1060 1d05h 1218d 1169d
SYZFATAL: executor NUM failed NUM times: executor NUM: exit status NUM -1 syz 175427 2d11h 1241d 1241d
panic: bad dir (3) 2 C 180 22d 1247d 1075d
uvm_fault: ufs_lookup -1 C 97 4d20h 1342d 695d
kernel: double fault trap, code=NUM (2) -1 C 34 400d 1343d 1294d
protection_fault: ktrops -1 C 259 403d 1352d 1332d
protection_fault: sblock -1 syz 38 1176d 1356d 1356d
uvm_fault: fifo_write (2) -1 C 3430 378d 1364d 1048d
SYZFAIL: tun: read failed -1 syz 316952 now 1381d 1349d
uvm_fault: memset -1 C 94 4d18h 1502d 1502d
SYZFAIL: command failed -1 syz 13695 7h47m 1669d 1351d
panic: ufs_rename: lost dir entry 2 C 127 8d08h 2043d 1281d
lost connection to test machine (2) -1 870628 11m 2459d never