syzbot

 sign-in | mailing list | source | docs
🐞 Open [119]
🐞 Fixed [291]
🐞 Invalid [909]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

Instances [tested repos]:
Name Last active Uptime Corpus Coverage 🛈 Crashes Execs Kernel build syzkaller build Bugs
Commit Config Freshness Status Commit Freshness Status All Only
ci-openbsd-main now 10h51m 7937 44770 1916 3747811 98ebdb79786a .config 1d02h 1c8c8cd8 1d06h all only
ci-openbsd-multicore now 10h42m 7875 48049 3261 4600266 772661234b1c .config 1d00h 1c8c8cd8 1d06h all only
ci-openbsd-setuid now 11h00m 4602 30049 6247 1818453 98ebdb79786a .config 1d02h 1c8c8cd8 1d06h all only
upstream (119):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Last activity
uvm_fault: spec_getattr (2) -1 1 7d16h 7d16h 7d16h
multicore test error: lost connection to test machine (3) -1 1 8d20h 8d20h 8d20h
assert "info->rti_ifa->ifa_ifp != NULL" failed in route.c (2) -1 1 10d 10d 10d
SYZFAIL: tun: can't open device (7) -1 21 45m 10d 10d
uvm_fault: uao_detach (2) -1 1 10d 10d 10d
SYZFAIL: dup2(NUM, kInPipeFd) failed (3) -1 103 5d11h 11d 11d
panic: ffs_valloc: dup alloc (4) 2 6 1d09h 13d 13d
panic: ffs2_balloc: unwind failed (3) 2 1 15d 15d 15d
uvm_fault: sys_shmat (2) -1 1 17d 17d 17d
witness: denied attempt to set clock forward to ADDR (3) -1 1 19d 19d 19d
assert "kd_lookup(kd->kd_unit) == NULL" failed in kcov.c (4) -1 1 19d 19d 19d
witness: lock_object uninitialized: ADDR (4) -1 1 21d 21d 21d
uvm_fault: ffs_nodealloccg (3) -1 1 22d 22d 22d
panic: uvmW_AfaRuNlItNG_:unwi rSPeL_ loNOckTe Ld:OW EaRdEdDr eOsNs SnYoStC AiLn mLa p7 2 1 30d 30d 30d
protection_fault: malloc (2) -1 1 32d 32d 32d
uvm_fault: ffs_fragextend (2) -1 1 35d 35d 35d
uvm_fault: ffs_alloccg (2) -1 2 35d 35d 35d
uvm_fault: ufs_direnter (5) -1 1 35d 35d 35d
uvm_fault: ffs_freefile (2) -1 1 35d 35d 35d
uvm_fault: ffs2_balloc (6) -1 6 3d20h 35d 35d
SYZFAIL: mmap of input file failed -1 1 36d 36d 36d
protection_fault: memcmp -1 1 38d 38d 38d
assert "refs > NUM" failed in kern_synch.c -1 1 39d 39d 39d
assert "pg->wire_count == NUM" failed in vfs_biomem.c (5) -1 1 55d 55d 55d
uvm_fault: bpfioctl (5) -1 1 62d 62d 62d
uvm_fault: alltraps_kern_meltdown -1 2 9d16h 68d 68d
panic: pool_p_free: rttmr free list modified: page ADDR; item addr ADDR; offset 0x10=ADDR 2 1 71d 71d 71d
assert "atomic_load_int(&fdp->fd_nuserevents) == NUM" failed in kern_descrip.c -1 2 70d 71d 71d
panic: softclock: invalid to_clock: -ADDR (3) 2 1 76d 76d 76d
protection_fault: sysctl_doproc -1 1 78d 78d 78d
uvm_fault: dt_ioctl_record_stop (2) -1 1479 3h01m 78d 78d
uvm_fault: putc (2) -1 1 89d 89d 89d
panic: unhandled af (5) 2 4 21d 91d 91d
assert "cifp != NULL" failed in route.c (5) -1 4 23d 92d 92d
protection_fault: icmp_mtudisc_timeout (4) -1 5 67d 93d 93d
panic: trap type NUM, code=NUM, pc=bd4f9 (2) 2 3 77d 99d 99d
panic: softclock: invalid to_clock: ADDR (4) 2 3 27d 99d 99d
SYZFAIL: open of /dev/kcov failed (2) -1 70 20h13m 101d 101d
protection_fault: pf_anchor_global_RB_REMOVE (2) -1 3 18d 108d 108d
uvm_fault: _copyin -1 5 71d 115d 115d
witness: reversal: sbufsnd inode (3) -1 5 53d 129d 129d
assert "next != NULL && next->start <= entry->end" failed in uvm_fault.c (5) -1 5 3d14h 151d 151d
uvm_fault: witness_checkorder (6) -1 39 3d07h 154d 154d
witness: reversal: &sched_lock &cq->cq_mtx -1 4 63d 156d 156d
assert "uvm_page_owner_locked_p(pg, TRUE)" failed in uvm_page.c (2) -1 5 3d14h 157d 157d
assert "rn != NULL" failed in pipex.c -1 20 38d 161d 161d
uvm_fault: mtx_enter_try -1 11 36d 164d 164d
uvm_fault: _copyinstr -1 13 75d 168d 168d
SYZFAIL: can't reallocate -1 19 3d02h 173d 173d
witness: reversal: &cq->cq_mtx &sched_lock -1 39 14d 179d 179d
uvm_fault: copyout -1 214 44d 179d 179d
multicore test error: SYZFATAL: image testing failed w/o kernel bug (2) -1 4 54d 185d 185d
uvm_fault: mtx_enter -1 59 2d07h 190d 190d
panic: uvm_fault_unwire_locked: address not in map (5) 2 40 5d21h 199d 199d
panic: chgproccnt: procs < NUM 2 5 53d 238d 238d
uvm_fault: savectx (3) -1 264 7h46m 240d 240d
SYZFAIL: repeatedly failed to execute the program (2) -1 14 7d06h 241d 241d
panic: trap type NUM, code=NUM, pc=NUM (4) 2 15 13d 241d 241d
SYZFAIL: coverage filter is full (3) -1 494259 1d12h 242d 242d
protection_fault: bpfdetach -1 38 12h15m 244d 244d
uvm_fault: x86_ipi_db (9) -1 268 18h52m 245d 245d
SYZFAIL: SIGBUS (2) -1 596 1d10h 248d 248d
assert "rdomain == rtable_l2(rdomain)" failed in route.c (2) -1 8 42d 250d 250d
assert "sc->sc_dev == NUM" failed in if_tun.c (6) -1 101 4d21h 250d 250d
witness: reversal: sbufrcv inode (2) -1 13 12d 251d 251d
assert "refs != ~NUM" failed in kern_synch.c -1 565 3h05m 252d 252d
SYZFAIL: too many calls in output (2) -1 64 16d 253d 253d
SYZFAIL: posix_spawnp failed -1 831 6h40m 253d 253d
assert "map->limit == rtmap_limit" failed in rtable.c (2) -1 310 8h14m 254d 254d
uvm_fault: proc_trampoline (2) -1 193 2d00h 254d 254d
protection_fault: witness_checkorder (5) -1 7 65d 254d 254d
panic: pledge_namei: ni_pledge (2) 2 9 13d 254d 254d
uvm_fault: arp_rtrequest (3) -1 297 2d20h 255d 255d
protection_fault: copyout -1 8 65d 255d 255d
pool: free list modified: shmpl (6) -1 468 1h50m 256d 256d
uvm_fault: db_enter (6) -1 505 17h57m 256d 256d
can't ssh into the instance (2) -1 33892 1h18m 256d 256d
suppressed report (2) -1 12634 5h13m 256d 256d
panic: missing alias (6) 2 591 1h19m 256d 256d
SYZFAIL: failed to recv rpc (4) -1 1139 4h15m 256d 256d
panic: trap type NUM, code=NUM, pc=ADDR (3) 2 471 1h43m 256d 256d
corrupted report (7) -1 5237 3h11m 257d 257d
witness: reversal: lock order data missing (5) -1 165318 now 257d 257d
SYZFAIL: ioctl remote attach failed (6) -1 37261 5m 257d 257d
SYZFAIL: failed to mkdtemp (2) -1 59767 now 257d 257d
SYZFAIL: failed to send rpc (2) -1 19812 28m 257d 257d
SYZFAIL: tun_id out of range (4) -1 1884925 now 257d 257d
SYZFAIL: failed to mkdir (2) -1 7391 now 257d 257d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (25) -1 117 16d 311d 305d
SYZFAIL: too much cover -1 238 4h09m 426d 426d
SYZFAIL: pipe failed -1 4517 2h02m 461d 461d
pool: free list modified: rttmr -1 125 4h46m 575d 575d
protection_fault: lf_advlock (4) -1 C 25 11d 578d 578d
protection_fault: sys_semop -1 C 196 27m 597d 597d
uvm_fault: ktrops (2) -1 C 201 2h32m 750d 750d
uvm_fault: schedclock -1 syz 11 408d 776d 599d
kernel: page fault trap, code=NUM (3) -1 C 92 29d 806d 564d
malloc: free list modified: free (4) -1 C 24 9d11h 828d 827d
uvm_fault: hardclock (5) -1 syz 4 808d 960d 960d
panic: ufsdirhash_lookup: bad offset in hash array (3) 2 C 79 29d 971d 676d
protection_fault: sys_msgrcv (2) -1 C 160 31d 1101d 858d
uvm_fault: memcpy (5) -1 C 50 1d20h 1105d 1105d
assert "uvn->u_obj.uo_refs == NUM" failed in uvm_vnode.c (2) -1 syz 2 1109d 1109d 1109d
panic: pmap_unwire: invalid PDE 2 syz 6 520d 1163d 1105d
no output from test machine (8) -1 C 724883 now 1173d 1169d
uvm_fault: ffs_indirtrunc -1 C 6 15d 1217d 1217d
witness: reversal: vmmaplk inode (3) -1 C 1061 20d 1249d 1199d
SYZFATAL: executor NUM failed NUM times: executor NUM: exit status NUM -1 syz 175427 4d22h 1272d 1271d
panic: bad dir (3) 2 C 180 52d 1278d 1106d
uvm_fault: ufs_lookup -1 C 99 12d 1373d 725d
kernel: double fault trap, code=NUM (2) -1 C 34 430d 1373d 1325d
protection_fault: ktrops -1 C 259 434d 1383d 1363d
protection_fault: sblock -1 syz 38 1207d 1386d 1386d
uvm_fault: fifo_write (2) -1 C 3430 408d 1394d 1079d
SYZFAIL: tun: read failed -1 syz 357990 now 1411d 1380d
uvm_fault: memset -1 C 100 14d 1532d 1532d
SYZFAIL: command failed -1 syz 13965 1h53m 1699d 1382d
panic: ufs_rename: lost dir entry 2 C 130 5d12h 2073d 1311d
lost connection to test machine (2) -1 878747 now 2490d never