syzbot

 sign-in | mailing list | source | docs
🐞 Open [112]
🐞 Fixed [291]
🐞 Invalid [902]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

Instances [tested repos]:
Name Last active Uptime Corpus Coverage 🛈 Crashes Execs Kernel build syzkaller build Bugs
Commit Config Freshness Status Commit Freshness Status All Only
ci-openbsd-main now 11h39m 8007 45335 2524 4015077 ce3d8cc26663 .config 13h28m e2beed91 6d13h all only
ci-openbsd-multicore now 11h01m 8254 47658 2891 6286177 cfdf5dc3e7db .config 12h29m e2beed91 6d13h all only
ci-openbsd-setuid now 11h30m 4604 30203 6629 1907235 ce3d8cc26663 .config 13h28m e2beed91 6d13h all only
upstream (112):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Last activity
protection_fault: malloc (2) -1 1 1d17h 1d17h 1d17h
uvm_fault: ffs_fragextend (2) -1 1 4d10h 4d10h 4d10h
uvm_fault: ffs_alloccg (2) -1 2 4d10h 4d12h 4d12h
uvm_fault: ufs_direnter (5) -1 1 4d13h 4d13h 4d13h
uvm_fault: ffs_freefile (2) -1 1 4d15h 4d15h 4d15h
uvm_fault: ffs2_balloc (6) -1 3 4d13h 4d15h 4d15h
SYZFAIL: mmap of input file failed -1 1 5d16h 5d16h 5d16h
protection_fault: memcmp -1 1 7d11h 7d11h 7d11h
assert "refs > NUM" failed in kern_synch.c -1 1 8d03h 8d03h 8d03h
assert "pg->wire_count == NUM" failed in vfs_biomem.c (5) -1 1 24d 24d 24d
uvm_fault: bpfioctl (5) -1 1 31d 31d 31d
uvm_fault: alltraps_kern_meltdown -1 1 38d 38d 38d
panic: pool_p_free: rttmr free list modified: page ADDR; item addr ADDR; offset 0x10=ADDR 2 1 40d 40d 40d
assert "atomic_load_int(&fdp->fd_nuserevents) == NUM" failed in kern_descrip.c -1 2 39d 41d 41d
panic: softclock: invalid to_clock: -ADDR (3) 2 1 45d 45d 45d
protection_fault: sysctl_doproc -1 1 47d 47d 47d
uvm_fault: dt_ioctl_record_stop (2) -1 900 now 47d 47d
uvm_fault: putc (2) -1 1 58d 58d 58d
panic: unhandled af (5) 2 2 17d 60d 60d
assert "cifp != NULL" failed in route.c (5) -1 3 8d16h 61d 61d
protection_fault: icmp_mtudisc_timeout (4) -1 5 36d 62d 62d
panic: trap type NUM, code=NUM, pc=bd4f9 (2) 2 3 47d 68d 68d
panic: softclock: invalid to_clock: ADDR (4) 2 2 15d 68d 68d
uvm_fault: pmap_page_remove (6) -1 1 68d 68d 68d
SYZFAIL: open of /dev/kcov failed (2) -1 43 3d03h 70d 70d
protection_fault: pf_anchor_global_RB_REMOVE (2) -1 1 77d 77d 77d
assert "d->bd_in_uiomove == NUM" failed in bpf.c (4) -1 1 80d 80d 80d
panic: kernel diagnostic assertion "refs != ~NUM" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_synch 2 1 81d 81d 81d
uvm_fault: sys_shmat -1 1 81d 81d 81d
uvm_fault: _copyin -1 5 40d 84d 84d
SYZFAIL: tun: can't open device (6) -1 31 46d 87d 87d
witness: reversal: sbufsnd inode (3) -1 5 23d 98d 98d
assert "next != NULL && next->start <= entry->end" failed in uvm_fault.c (5) -1 3 46d 120d 120d
uvm_fault: witness_checkorder (6) -1 33 6d11h 123d 123d
witness: reversal: &sched_lock &cq->cq_mtx -1 4 32d 125d 125d
assert "uvm_page_owner_locked_p(pg, TRUE)" failed in uvm_page.c (2) -1 3 19d 126d 126d
assert "rn != NULL" failed in pipex.c -1 20 7d14h 130d 130d
uvm_fault: mtx_enter_try -1 11 5d20h 133d 133d
uvm_fault: _copyinstr -1 13 44d 137d 137d
assert "(sih->sih_state & SIS_RESTART) == NUM" failed in kern_softintr.c -1 2 82d 140d 140d
protection_fault: __x86_indirect_thunk_r11 (4) -1 4 88d 141d 141d
SYZFAIL: can't reallocate -1 15 10h50m 142d 142d
witness: reversal: &cq->cq_mtx &sched_lock -1 33 4d10h 148d 148d
uvm_fault: copyout -1 214 13d 148d 148d
multicore test error: SYZFATAL: image testing failed w/o kernel bug (2) -1 4 23d 154d 154d
uvm_fault: mtx_enter -1 47 9d08h 159d 159d
panic: uvm_fault_unwire_locked: address not in map (5) 2 35 5d15h 168d 168d
panic: chgproccnt: procs < NUM 2 5 22d 207d 207d
uvm_fault: savectx (3) -1 193 2h59m 209d 209d
SYZFAIL: repeatedly failed to execute the program (2) -1 12 3d07h 210d 210d
panic: trap type NUM, code=NUM, pc=NUM (4) 2 12 20h48m 210d 210d
SYZFAIL: coverage filter is full (3) -1 460022 1d00h 211d 211d
protection_fault: bpfdetach -1 34 49m 213d 213d
uvm_fault: x86_ipi_db (9) -1 217 1d13h 214d 214d
SYZFAIL: SIGBUS (2) -1 39 4d13h 217d 217d
assert "rdomain == rtable_l2(rdomain)" failed in route.c (2) -1 8 11d 219d 219d
assert "sc->sc_dev == NUM" failed in if_tun.c (6) -1 46 2d18h 219d 219d
witness: reversal: sbufrcv inode (2) -1 12 5d20h 220d 220d
assert "refs != ~NUM" failed in kern_synch.c -1 423 5h10m 221d 221d
SYZFAIL: too many calls in output (2) -1 62 5d20h 222d 222d
SYZFAIL: posix_spawnp failed -1 563 2h45m 222d 222d
assert "map->limit == rtmap_limit" failed in rtable.c (2) -1 264 12h03m 223d 223d
uvm_fault: proc_trampoline (2) -1 139 6h31m 223d 223d
protection_fault: witness_checkorder (5) -1 7 34d 223d 223d
panic: pledge_namei: ni_pledge (2) 2 7 4d03h 224d 224d
uvm_fault: arp_rtrequest (3) -1 283 4d13h 224d 224d
protection_fault: copyout -1 8 34d 224d 224d
pool: free list modified: shmpl (6) -1 412 6h28m 225d 225d
uvm_fault: db_enter (6) -1 458 16h20m 225d 225d
can't ssh into the instance (2) -1 32144 now 225d 225d
suppressed report (2) -1 10894 now 225d 225d
panic: missing alias (6) 2 462 23h09m 225d 225d
SYZFAIL: failed to recv rpc (4) -1 934 2h14m 225d 225d
panic: trap type NUM, code=NUM, pc=ADDR (3) 2 392 3h42m 225d 225d
corrupted report (7) -1 4306 10m 226d 226d
witness: reversal: lock order data missing (5) -1 147102 now 226d 226d
SYZFAIL: ioctl remote attach failed (6) -1 31632 now 226d 226d
SYZFAIL: failed to mkdtemp (2) -1 30288 8m 226d 226d
SYZFAIL: failed to send rpc (2) -1 17668 16m 226d 226d
SYZFAIL: tun_id out of range (4) -1 1638499 now 226d 226d
SYZFAIL: failed to mkdir (2) -1 2959 5m 226d 226d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (25) -1 78 41d 280d 274d
SYZFAIL: too much cover -1 212 1d14h 395d 395d
SYZFAIL: pipe failed -1 68 17d 430d 430d
pool: free list modified: rttmr -1 102 14h10m 544d 544d
protection_fault: lf_advlock (4) -1 C 22 1d14h 547d 547d
protection_fault: sys_semop -1 C 157 1d12h 566d 566d
uvm_fault: ktrops (2) -1 C 179 21h55m 719d 719d
uvm_fault: schedclock -1 syz 11 377d 745d 568d
kernel: page fault trap, code=NUM (3) -1 C 92 23d 776d 533d
malloc: free list modified: free (4) -1 C 23 23d 797d 796d
uvm_fault: hardclock (5) -1 syz 4 777d 929d 929d
panic: ufsdirhash_lookup: bad offset in hash array (3) 2 C 79 23d 940d 646d
protection_fault: sys_msgrcv (2) -1 C 160 14h00m 1070d 827d
uvm_fault: memcpy (5) -1 C 43 4d08h 1075d 1075d
assert "uvn->u_obj.uo_refs == NUM" failed in uvm_vnode.c (2) -1 syz 2 1078d 1078d 1078d
panic: pmap_unwire: invalid PDE 2 syz 6 489d 1133d 1074d
no output from test machine (8) -1 C 701336 now 1142d 1138d
uvm_fault: ffs_indirtrunc -1 C 5 158d 1186d 1186d
witness: reversal: vmmaplk inode (3) -1 C 1060 20h36m 1218d 1168d
SYZFATAL: executor NUM failed NUM times: executor NUM: exit status NUM -1 syz 175427 2d02h 1241d 1241d
panic: bad dir (3) 2 C 180 21d 1247d 1075d
uvm_fault: ufs_lookup -1 C 97 4d11h 1342d 694d
kernel: double fault trap, code=NUM (2) -1 C 34 399d 1342d 1294d
protection_fault: ktrops -1 C 259 403d 1352d 1332d
protection_fault: sblock -1 syz 38 1176d 1355d 1355d
uvm_fault: fifo_write (2) -1 C 3430 377d 1363d 1048d
SYZFAIL: tun: read failed -1 syz 316311 now 1381d 1349d
uvm_fault: memset -1 C 94 4d09h 1501d 1501d
SYZFAIL: command failed -1 syz 13694 4h36m 1668d 1351d
panic: ufs_rename: lost dir entry 2 C 127 7d23h 2042d 1280d
lost connection to test machine (2) -1 870569 now 2459d never