syzbot

 sign-in | mailing list | source | docs
🐞 Open [169]
🐞 Fixed [301]
🐞 Invalid [1055]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

Instances [tested repos]:
Name Last active Uptime Corpus Coverage 🛈 Crashes Execs Kernel build syzkaller build Bugs
Commit Config Freshness Status Commit Freshness Status All Only
ci-openbsd-main now 5h21m 8221 46994 5035 1817443 61b7e18e5713 .config 7h19m c69befb3 3d06h all only
Applied filters: Manager=ci-openbsd-main (drop)
Extra filters: [With Repro]
upstream (120) 🔗
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Last activity
SYZFAIL: too much cover (2) -1 1 2d23h 2d23h 2d23h
panic: thread NUM p_stat is NUM (4) 2 3 2d20h 5d09h 5d09h
uvm_fault: softclock (6) -1 2 2d20h 6d00h 6d00h
panic: thread NUM p_stat is -NUM 2 1 6d12h 6d12h 6d12h
assert "(p->pfik_flagrefs == NUM) || (p->pfik_flagrefs == NUM)" failed in pf_if.c -1 10 10d 14d 14d
SYZFAIL: too man -1 1 15d 15d 15d
protection_fault: mtx_enter (4) -1 1 16d 16d 16d
assert "kd_lookup(kd->kd_unit) == NULL" failed in kcov.c (5) -1 1 18d 18d 18d
SYZFAIL: tun: reSYZFAIL: tun: repckbd_enable: command error -1 1 19d 19d 19d
uvm_fault: blf_cbc_decrypt -1 1 24d 24d 24d
uvm_fault: ffs_blkfree (2) -1 3 5d03h 39d 39d
panic: kmmaplk rwlock ADDR: enter read deadlock 2 7 3d06h 50d 50d
panic: ffs2_balloc: unwind failed (4) 2 12 21h28m 52d 52d
uvm_fault: ufs_direnter (6) -1 8 1d19h 54d 54d
panic: ffs_valloc: dup alloc (5) 2 103 5h11m 57d 57d
uvm_fault: ffs_nodealloccg (4) -1 6 7h51m 57d 57d
protection_fault: pf_anchor_global_RB_REMOVE (3) -1 16 2d02h 58d 58d
uvm_fault: pvclock_get (2) -1 37 20h12m 58d 58d
uvm_fault: ffs_freefile (3) -1 3 3h19m 58d 58d
panic: init died (signal NUM, exit NUM) (2) 2 250 now 59d 59d
uvm_fault: kcov_remote_enter (5) -1 304 1h22m 59d 59d
uvm_fault: ffs2_balloc (7) -1 313 7h48m 59d 59d
uvm_fault: ufsdirhash_lookup -1 3 18h31m 59d 59d
SYZFAIL: SIGFPE -1 551 10h35m 61d 61d
SYZFAIL: cover mmap failed -1 237 11h33m 61d 61d
SYZFAIL: child failed -1 4738 13m 61d 61d
SYZFAIL: SIGILL -1 582 2h01m 61d 61d
uvm_fault: dovutimens -1 140264 now 61d 61d
uvm_fault: dt_ioctl_record_stop (3) -1 31 22m 62d 62d
panic: curcpu->ci_proc_pmap didn't point to previous pmap (3) 2 1 62d 62d 62d
protection_fault: VOP_LOCK -1 1 63d 63d 63d
uvm_fault: uvm_map_protect -1 1 64d 64d 64d
assert "bp->b_bufsize > NUM" failed in vfs_bio.c -1 1 64d 64d 64d
panic: vput: ref cnt (3) 2 1 65d 65d 65d
panic: pool_do_get: pvpl: page empty 2 1 67d 67d 67d
uvm_fault: pmap_write_protect -1 1 68d 68d 68d
panic: pool_do_get: rttmr: page empty 2 1 71d 71d 71d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte 0x7fff 2 1 72d 72d 72d
pool: free list modified: mcl4k -1 1 72d 72d 72d
pool: free list modified: mbufpl (6) -1 3 62d 73d 73d
uvm_fault: _rb_remove -1 2 65d 74d 74d
panic: pool_do_get: pfstlim: page empty 2 1 74d 74d 74d
panic: pool_do_get: pkpcb: page empty (2) 2 2 71d 75d 75d
panic: inconsistent bufpage counts (2) 2 2 68d 102d 102d
uvm_fault: checkalias (2) -1 4 65d 120d 120d
panic: ffs_blkfree: bad size (6) 2 8 62d 136d 136d
assert "bpfilter_lookup(unit) == NULL" failed in bpf.c -1 37 32d 137d 137d
panic: pool_do_get: scsiplug: page empty 2 2 64d 144d 144d
panic: uvm_vnp_uncache: vnode not locked! 2 4 67d 148d 148d
uvm_fault: km_free (3) -1 5 62d 152d 152d
panic: vrele: ref cnt (2) 2 3 74d 152d 152d
assert "nlevel >= IPL_NONE" failed in intr.c (4) -1 4 65d 152d 152d
assert "pg->wire_count != NUM" failed in uvm_page.c -1 9073 14h51m 154d 154d
panic: vwakeup: neg numoutput (2) 2 2 73d 156d 156d
assert "bp->b_data != NULL" failed in vfs_biomem.c (6) -1 11 65d 167d 167d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (26) -1 702 5d04h 175d 175d
uvm_fault: VOP_LOCK (3) -1 3 62d 180d 180d
assert "ISSET(bp->b_flags, B_BC)" failed in vfs_bio.c (2) -1 3 74d 182d 182d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte 0x3efff (2) 2 3 66d 182d 182d
pool: free list modified: pdppl (5) -1 8 64d 182d 182d
SYZFAIL: SIGSEGV (2) -1 606 6m 186d 186d
panic: pmap_remove_ptes: managed page without PG_PVLIST: va ADDR, opte ADDR (3) 2 11 62d 192d 192d
uvm_fault: pmap_page_remove (7) -1 14 62d 195d 195d
uvm_fault: sys_shmat (2) -1 7 67d 236d 236d
assert "refs > NUM" failed in kern_synch.c -1 7 28d 258d 258d
panic: softclock: invalid to_clock: -ADDR (3) 2 6 74d 295d 295d
assert "cifp != NULL" failed in route.c (5) -1 11 17d 311d 311d
SYZFAIL: can't reallocate -1 50 21d 392d 392d
uvm_fault: mtx_enter -1 214 38d 409d 409d
panic: uvm_fault_unwire_locked: address not in map (5) 2 116 1d17h 418d 418d
panic: chgproccnt: procs < NUM 2 16 1d22h 457d 457d
uvm_fault: savectx (3) -1 2884 18m 459d 459d
panic: trap type NUM, code=NUM, pc=NUM (4) 2 21 62d 460d 460d
SYZFAIL: coverage filter is full (3) -1 719462 4d00h 461d 461d
protection_fault: bpfdetach -1 76 9d22h 463d 463d
SYZFAIL: SIGBUS (2) -1 1719 2h30m 467d 467d
assert "sc->sc_dev == NUM" failed in if_tun.c (6) -1 117 8d20h 469d 469d
assert "refs != ~NUM" failed in kern_synch.c -1 1176 4h53m 471d 471d
SYZFAIL: too many calls in output (2) -1 79 67d 472d 472d
SYZFAIL: posix_spawnp failed -1 4069 22h39m 472d 472d
assert "map->limit == rtmap_limit" failed in rtable.c (2) -1 492 12h22m 473d 473d
panic: pledge_namei: ni_pledge (2) 2 14 74d 473d 473d
uvm_fault: arp_rtrequest (3) -1 414 2h36m 474d 474d
pool: free list modified: shmpl (6) -1 899 12h41m 475d 475d
can't ssh into the instance (2) -1 35142 4d03h 475d 475d
suppressed report (2) -1 18086 6h55m 475d 475d
panic: missing alias (6) 2 1479 1d20h 475d 475d
SYZFAIL: failed to recv rpc (4) -1 2875 1h34m 475d 475d
panic: trap type NUM, code=NUM, pc=ADDR (3) 2 4493 10h45m 475d 475d
corrupted report (7) -1 32114 now 476d 476d
SYZFAIL: ioctl remote attach failed (6) -1 73519 6m 476d 476d
SYZFAIL: failed to mkdtemp (2) -1 204868 now 476d 476d
SYZFAIL: failed to send rpc (2) -1 32064 12m 476d 476d
SYZFAIL: tun_id out of range (4) -1 3480584 now 476d 476d
SYZFAIL: failed to mkdir (2) -1 34201 5m 476d 476d
SYZFAIL: pipe failed -1 7792 6h35m 680d 680d
protection_fault: lf_advlock (4) -1 C 61 5d07h 797d 797d
protection_fault: sys_semop -1 C 373 18d 816d 816d
uvm_fault: ktrops (2) -1 C 406 1h37m 969d 969d
uvm_fault: schedclock -1 syz 11 627d 995d 818d
kernel: page fault trap, code=NUM (3) -1 C 93 5d11h 1026d 783d
malloc: free list modified: free (4) -1 C 40 53d 1047d 1046d
uvm_fault: hardclock (5) -1 syz 4 1027d 1179d 1179d
panic: ufsdirhash_lookup: bad offset in hash array (3) 2 C 107 4d11h 1190d 896d
protection_fault: sys_msgrcv (2) -1 C 168 9h05m 1320d 1077d
uvm_fault: memcpy (5) -1 C 104 2h58m 1324d 1324d
no output from test machine (8) -1 C 863622 now 1392d 1388d
uvm_fault: ffs_indirtrunc -1 C 37 11h55m 1436d 1436d
SYZFATAL: executor NUM failed NUM times: executor NUM: exit status NUM -1 syz 175427 4d08h 1491d 1491d
panic: bad dir (3) 2 C 222 3d15h 1497d 1325d
uvm_fault: ufs_lookup -1 C 615 32m 1592d 944d
kernel: double fault trap, code=NUM (2) -1 C 41 2d20h 1592d 1544d
protection_fault: ktrops -1 C 259 653d 1602d 1582d
protection_fault: sblock -1 syz 38 1426d 1605d 1605d
uvm_fault: fifo_write (2) -1 C 3430 627d 1613d 1298d
SYZFAIL: tun: read failed -1 syz 575118 15m 1630d 1599d
uvm_fault: memset -1 C 926 25m 1751d 1751d
SYZFAIL: command failed -1 syz 15837 11h10m 1918d 1601d
panic: ufs_rename: lost dir entry 2 C 145 4d10h 2292d 1530d
lost connection to test machine (2) -1 1188931 now 2709d never