syzbot

 sign-in | mailing list | source | docs
🐞 Open [161]
🐞 Fixed [292]
🐞 Invalid [923]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

Instances [tested repos]:
Name Last active Uptime Corpus Coverage 🛈 Crashes Execs Kernel build syzkaller build Bugs
Commit Config Freshness Status Commit Freshness Status All Only
ci-openbsd-main now 5h45m 8255 45762 123 236469 d004c0aeba6f .config 12h37m 48b27acc 19h36m all only
ci-openbsd-multicore now 5h30m 8297 48106 146 329534 d004c0aeba6f .config 12h37m 48b27acc 19h36m all only
ci-openbsd-setuid now 5h38m 4655 30235 358 126372 d004c0aeba6f .config 12h37m 48b27acc 19h36m all only
upstream (162):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Last activity
panic: kernel diagnostic assertion "(pg->pg_flags & (PQ_INACTIVE|PQ_ARead from remote host us-central1-ssh-serialport.go 2 1 9m 9m 9m
panic: kernel diagnostic assertion "(pg->pg_flags & (PQ_INACTIVE|PQ_ACTIVE)) == NUM" failed: file "/syzkaller/managers/s 2 1 2h48m 2h48m 2h48m
assert "(pg->pg_flags & (PQ_INACTIVE|PQ_ACTIVE)) == NUM" failed in uvm_page.c -1 190 now 5h43m 5h43m
assert "bp->b_data != NULL" failed in vfs_biomem.c (6) -1 2 21h23m 1d11h 1d11h
uvm_fault: statclock -1 1 1d12h 1d12h 1d12h
uvm_fault: pvclock_get -1 1 1d12h 1d12h 1d12h
assert "(sih->sih_state & SIS_RESTART) == NUM" failed in kern_softintr.c (2) -1 1 1d16h 1d16h 1d16h
uvm_fault: ufsdirhash_build -1 1 1d21h 1d21h 1d21h
uvm_fault: kcov_remote_enter (4) -1 7 1d10h 2d16h 2d16h
kernel: privileged instruction fault trap, code=NUM (2) -1 1 2d16h 2d16h 2d16h
assert "swap" failed in uvm_pager.c -1 1 5d10h 5d10h 5d10h
protection_fault: in6_addmulti (5) -1 1 5d23h 5d23h 5d23h
panic: pmap_remove_pte: unmanaged page marked PG_PVLIST: va ADDR, opte ADDR (2) 2 1 6d03h 6d03h 6d03h
assert "pg->wire_count == NUM" failed in vfs_biomem.c (6) -1 1 8d13h 8d13h 8d13h
uvm_fault: VOP_ISLOCKED (3) -1 1 8d16h 8d16h 8d16h
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (26) -1 3 9d15h 9d15h 9d15h
protection_fault: pool_p_free -1 1 10d 10d 10d
pool: free list modified: mbufpl (5) -1 1 11d 11d 11d
panic: pmap_do_remove: unmanaged PTP detected 2 1 12d 12d 12d
SYZFAIL: no call -1 1 12d 12d 12d
kernel: protection fault trap, code=NUM (9) -1 1 13d 13d 13d
assert "!pmap_is_ept(pmap)" failed in pmap.c -1 1 13d 13d 13d
uvm_fault: VOP_LOCK (3) -1 1 14d 14d 14d
uvm_fault: rn_add_radix_mask -1 1 14d 14d 14d
panic: pool_do_get: sosppl: page empty 2 1 15d 15d 15d
assert "ISSET(bp->b_flags, B_BC)" failed in vfs_bio.c (2) -1 1 16d 16d 16d
panic: curcpu->ci_proc_pmap didn't point to previous pmap (2) 2 1 16d 16d 16d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte 0x3efff (2) 2 1 16d 16d 16d
pool: free list modified: pdppl (5) -1 1 17d 17d 17d
panic: pmap_enter: PG_PVLIST mapping with unmanaged page: va ADDR, opte ADDR, pa ADDR (3) 2 1 17d 17d 17d
uvm_fault: vm_terminate (2) -1 2 1d04h 18d 18d
SYZFAIL: SIGSEGV (2) -1 7 1d02h 20d 20d
panic: kernel diagnostic assertio 2 1 20d 20d 20d
panic: pool_do_get: sockpl: page empty 2 1 21d 21d 21d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte ADDR (5) 2 13 12h58m 22d 22d
protection_fault: pmap_clear_attrs -1 2 21d 22d 22d
protection_fault: done_flush (4) -1 32 11h43m 24d 24d
uvm_fault: ffs_write -1 1 25d 25d 25d
openbsd build error (24) -1 1 25d 25d 25d
multicore build error (20) -1 2 25d 25d 25d
panic: pmap_remove_ptes: managed page without PG_PVLIST: va ADDR, opte ADDR (3) 2 1 26d 26d 26d
uvm_fault: pmap_page_remove (7) -1 3 16d 29d 29d
pool: free list modified: namei -1 1 29d 29d 29d
panic: vrele: v_writecount != NUM (2) 2 1 29d 29d 29d
assert "amap->am_buckets[bucket] == NULL" failed in uvm_amap.c -1 2 14d 30d 30d
panic: uao_find_swhash_elt: can't allocate entry 2 21 8d02h 32d 32d
assert "dupe == NULL" failed in uvm_page.c (5) -1 30 53m 32d 32d
openbsd test error: can't ssh into the instance -1 2 35d 35d 35d
multicore test error: can't ssh into the instance -1 4 35d 35d 35d
panic: mtx ADDR: locking against myself (3) 2 1 35d 35d 35d
assert "pr->ps_threadcnt == NUM" failed in kern_exit.c (2) -1 12 14h18m 39d 39d
panic: trap type NUM, code=NUM, pc=bd929 2 1 44d 44d 44d
protection_fault: leavepgrp -1 1 47d 47d 47d
protection_fault: mtx_enter (3) -1 48 6h48m 47d 47d
witness: reversal: fdlock inode (2) -1 1 47d 47d 47d
pool: free list modified: pvpl (2) -1 1 49d 49d 49d
uvm_fault: nd6_rtrequest -1 1 53d 53d 53d
uvm_fault: spec_getattr (2) -1 2 44d 60d 60d
multicore test error: lost connection to test machine (3) -1 1 62d 62d 62d
assert "info->rti_ifa->ifa_ifp != NULL" failed in route.c (2) -1 4 18d 63d 63d
SYZFAIL: tun: can't open device (7) -1 103 9h15m 64d 64d
uvm_fault: uao_detach (2) -1 2 8d20h 64d 64d
SYZFAIL: dup2(NUM, kInPipeFd) failed (3) -1 141 20d 64d 64d
panic: ffs_valloc: dup alloc (4) 2 6 54d 66d 66d
panic: ffs2_balloc: unwind failed (3) 2 1 68d 68d 68d
uvm_fault: sys_shmat (2) -1 4 5d10h 70d 70d
witness: denied attempt to set clock forward to ADDR (3) -1 1 72d 72d 72d
assert "kd_lookup(kd->kd_unit) == NULL" failed in kcov.c (4) -1 2 27d 72d 72d
witness: lock_object uninitialized: ADDR (4) -1 1 75d 75d 75d
uvm_fault: ffs_nodealloccg (3) -1 1 75d 75d 75d
panic: uvmW_AfaRuNlItNG_:unwi rSPeL_ loNOckTe Ld:OW EaRdEdDr eOsNs SnYoStC AiLn mLa p7 2 1 83d 83d 83d
protection_fault: malloc (2) -1 1 85d 85d 85d
uvm_fault: ffs_fragextend (2) -1 1 88d 88d 88d
uvm_fault: ffs_alloccg (2) -1 2 88d 88d 88d
uvm_fault: ufs_direnter (5) -1 1 88d 88d 88d
uvm_fault: ffs_freefile (2) -1 1 88d 88d 88d
uvm_fault: ffs2_balloc (6) -1 10 1d12h 88d 88d
SYZFAIL: mmap of input file failed -1 1 89d 89d 89d
assert "refs > NUM" failed in kern_synch.c -1 3 10d 92d 92d
uvm_fault: bpfioctl (5) -1 2 44d 116d 116d
uvm_fault: alltraps_kern_meltdown -1 2 62d 122d 122d
panic: softclock: invalid to_clock: -ADDR (3) 2 4 13d 129d 129d
uvm_fault: dt_ioctl_record_stop (2) -1 2476 3h57m 132d 132d
panic: unhandled af (5) 2 5 51d 144d 144d
assert "cifp != NULL" failed in route.c (5) -1 6 8d20h 145d 145d
protection_fault: icmp_mtudisc_timeout (4) -1 7 28d 147d 147d
panic: softclock: invalid to_clock: ADDR (4) 2 3 80d 152d 152d
SYZFAIL: open of /dev/kcov failed (2) -1 74 16d 154d 154d
protection_fault: pf_anchor_global_RB_REMOVE (2) -1 5 15d 161d 161d
witness: reversal: sbufsnd inode (3) -1 10 32d 183d 183d
assert "next != NULL && next->start <= entry->end" failed in uvm_fault.c (5) -1 7 29d 204d 204d
uvm_fault: witness_checkorder (6) -1 57 9d13h 208d 208d
witness: reversal: &sched_lock &cq->cq_mtx -1 6 1d01h 209d 209d
assert "uvm_page_owner_locked_p(pg, TRUE)" failed in uvm_page.c (2) -1 8 3d05h 210d 210d
assert "rn != NULL" failed in pipex.c -1 47 19h23m 214d 214d
uvm_fault: mtx_enter_try -1 15 10d 218d 218d
SYZFAIL: can't reallocate -1 34 20d 226d 226d
witness: reversal: &cq->cq_mtx &sched_lock -1 44 1d18h 232d 232d
uvm_fault: mtx_enter -1 112 1h06m 244d 244d
panic: uvm_fault_unwire_locked: address not in map (5) 2 90 1d04h 252d 252d
panic: chgproccnt: procs < NUM 2 7 13d 291d 291d
uvm_fault: savectx (3) -1 378 1h12m 293d 293d
SYZFAIL: repeatedly failed to execute the program (2) -1 23 13d 294d 294d
panic: trap type NUM, code=NUM, pc=NUM (4) 2 18 11d 294d 294d
SYZFAIL: coverage filter is full (3) -1 566796 5h51m 295d 295d
protection_fault: bpfdetach -1 45 3d19h 297d 297d
uvm_fault: x86_ipi_db (9) -1 351 35m 299d 299d
SYZFAIL: SIGBUS (2) -1 619 2d16h 301d 301d
assert "sc->sc_dev == NUM" failed in if_tun.c (6) -1 105 25d 303d 303d
witness: reversal: sbufrcv inode (2) -1 13 66d 304d 304d
assert "refs != ~NUM" failed in kern_synch.c -1 864 18h53m 305d 305d
SYZFAIL: too many calls in output (2) -1 66 8d22h 306d 306d
SYZFAIL: posix_spawnp failed -1 1163 6h13m 307d 307d
assert "map->limit == rtmap_limit" failed in rtable.c (2) -1 373 4d09h 307d 307d
uvm_fault: proc_trampoline (2) -1 253 17h56m 307d 307d
protection_fault: witness_checkorder (5) -1 12 20d 307d 307d
panic: pledge_namei: ni_pledge (2) 2 11 28d 308d 308d
uvm_fault: arp_rtrequest (3) -1 324 1d15h 308d 308d
pool: free list modified: shmpl (6) -1 576 1d21h 309d 309d
uvm_fault: db_enter (6) -1 530 4d16h 309d 309d
can't ssh into the instance (2) -1 34628 3h34m 310d 310d
suppressed report (2) -1 14097 2h42m 310d 310d
panic: missing alias (6) 2 965 12h30m 310d 310d
SYZFAIL: failed to recv rpc (4) -1 1356 10h06m 310d 310d
panic: trap type NUM, code=NUM, pc=ADDR (3) 2 773 3h49m 310d 310d
corrupted report (7) -1 6920 17m 310d 310d
witness: reversal: lock order data missing (5) -1 181697 now 310d 310d
SYZFAIL: ioctl remote attach failed (6) -1 45396 18m 310d 310d
SYZFAIL: failed to mkdtemp (2) -1 75864 now 310d 310d
SYZFAIL: failed to send rpc (2) -1 23305 now 310d 310d
SYZFAIL: tun_id out of range (4) -1 2323332 now 310d 310d
SYZFAIL: failed to mkdir (2) -1 9326 now 310d 310d
SYZFAIL: too much cover -1 308 10h05m 479d 479d
SYZFAIL: pipe failed -1 6701 2d15h 514d 514d
pool: free list modified: rttmr -1 140 8d11h 629d 629d
protection_fault: lf_advlock (4) -1 C 38 7d14h 631d 631d
protection_fault: sys_semop -1 C 251 3h33m 650d 650d
uvm_fault: ktrops (2) -1 C 234 2h48m 803d 803d
uvm_fault: schedclock -1 syz 11 461d 829d 652d
kernel: page fault trap, code=NUM (3) -1 C 92 12d 860d 617d
malloc: free list modified: free (4) -1 C 26 16d 881d 880d
uvm_fault: hardclock (5) -1 syz 4 861d 1013d 1013d
panic: ufsdirhash_lookup: bad offset in hash array (3) 2 C 101 1d17h 1024d 730d
protection_fault: sys_msgrcv (2) -1 C 164 50d 1154d 911d
uvm_fault: memcpy (5) -1 C 62 2d05h 1159d 1159d
assert "uvn->u_obj.uo_refs == NUM" failed in uvm_vnode.c (2) -1 syz 2 1162d 1163d 1162d
panic: pmap_unwire: invalid PDE 2 syz 6 573d 1217d 1158d
no output from test machine (8) -1 C 761641 now 1226d 1222d
uvm_fault: ffs_indirtrunc -1 C 6 68d 1270d 1270d
witness: reversal: vmmaplk inode (3) -1 C 1061 14d 1302d 1252d
SYZFATAL: executor NUM failed NUM times: executor NUM: exit status NUM -1 syz 175427 2d01h 1325d 1325d
panic: bad dir (3) 2 C 187 3h03m 1331d 1159d
uvm_fault: ufs_lookup -1 C 99 37d 1426d 778d
kernel: double fault trap, code=NUM (2) -1 C 34 483d 1426d 1378d
protection_fault: ktrops -1 C 259 487d 1436d 1416d
protection_fault: sblock -1 syz 38 1260d 1440d 1439d
uvm_fault: fifo_write (2) -1 C 3430 461d 1447d 1132d
SYZFAIL: tun: read failed -1 syz 440850 now 1465d 1433d
uvm_fault: memset -1 C 102 1d19h 1585d 1585d
SYZFAIL: command failed -1 syz 14995 43m 1753d 1435d
panic: ufs_rename: lost dir entry 2 C 134 5d04h 2126d 1365d
lost connection to test machine (2) -1 892045 30m 2543d never