syzbot

 sign-in | mailing list | source | docs
🐞 Open [173]
🐞 Fixed [301]
🐞 Invalid [1056]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

Instances [tested repos]:
Name Last active Uptime Corpus Coverage 🛈 Crashes Execs Kernel build syzkaller build Bugs
Commit Config Freshness Status Commit Freshness Status All Only
ci-openbsd-main now 2h42m 7964 46813 2441 716257 b6d27d6c2ceb .config 4h46m cb4e87ff 4d00h failing all only
Applied filters: Manager=ci-openbsd-main (drop)
Extra filters: [With Repro]
upstream (121) 🔗
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Last activity
uvm_fault: ufs_dirremove -1 1 3d16h 3d15h 3d15h
uvm_fault: ufs_readdir -1 23 2h21m 4d11h 4d11h
SYZFAIL: too much cover (2) -1 1 8d12h 8d12h 8d12h
panic: thread NUM p_stat is NUM (4) 2 3 8d09h 10d 10d
uvm_fault: softclock (6) -1 2 8d09h 11d 11d
panic: thread NUM p_stat is -NUM 2 1 12d 12d 12d
assert "(p->pfik_flagrefs == NUM) || (p->pfik_flagrefs == NUM)" failed in pf_if.c -1 10 16d 20d 20d
SYZFAIL: too man -1 1 20d 20d 20d
protection_fault: mtx_enter (4) -1 1 22d 22d 22d
assert "kd_lookup(kd->kd_unit) == NULL" failed in kcov.c (5) -1 1 23d 23d 23d
SYZFAIL: tun: reSYZFAIL: tun: repckbd_enable: command error -1 1 24d 24d 24d
uvm_fault: blf_cbc_decrypt -1 1 29d 29d 29d
uvm_fault: ffs_blkfree (2) -1 3 10d 45d 45d
panic: kmmaplk rwlock ADDR: enter read deadlock 2 8 3d07h 56d 56d
panic: ffs2_balloc: unwind failed (4) 2 12 6d10h 57d 57d
uvm_fault: ufs_direnter (6) -1 8 7d08h 60d 60d
panic: ffs_valloc: dup alloc (5) 2 106 5d08h 63d 63d
uvm_fault: ffs_nodealloccg (4) -1 6 5d20h 63d 63d
protection_fault: pf_anchor_global_RB_REMOVE (3) -1 16 7d15h 64d 64d
uvm_fault: pvclock_get (2) -1 41 1d05h 64d 64d
uvm_fault: ffs_freefile (3) -1 3 5d16h 64d 64d
panic: init died (signal NUM, exit NUM) (2) 2 319 3h06m 64d 64d
uvm_fault: kcov_remote_enter (5) -1 354 9h25m 65d 65d
uvm_fault: ffs2_balloc (7) -1 327 5h02m 65d 65d
uvm_fault: ufsdirhash_lookup -1 3 6d07h 65d 65d
SYZFAIL: SIGFPE -1 601 45m 67d 67d
SYZFAIL: cover mmap failed -1 256 11h47m 67d 67d
SYZFAIL: child failed -1 5024 24m 67d 67d
SYZFAIL: SIGILL -1 624 3h58m 67d 67d
uvm_fault: dovutimens -1 153929 now 67d 67d
uvm_fault: dt_ioctl_record_stop (3) -1 32 1d19h 67d 67d
panic: curcpu->ci_proc_pmap didn't point to previous pmap (3) 2 1 68d 68d 68d
protection_fault: VOP_LOCK -1 1 69d 69d 69d
uvm_fault: uvm_map_protect -1 1 69d 69d 69d
assert "bp->b_bufsize > NUM" failed in vfs_bio.c -1 1 69d 69d 69d
panic: vput: ref cnt (3) 2 1 71d 71d 71d
panic: pool_do_get: pvpl: page empty 2 1 73d 73d 73d
uvm_fault: pmap_write_protect -1 1 74d 74d 74d
panic: pool_do_get: rttmr: page empty 2 1 77d 77d 77d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte 0x7fff 2 1 78d 78d 78d
pool: free list modified: mcl4k -1 1 78d 78d 78d
pool: free list modified: mbufpl (6) -1 3 67d 78d 78d
uvm_fault: _rb_remove -1 2 71d 79d 79d
panic: pool_do_get: pfstlim: page empty 2 1 79d 79d 79d
panic: pool_do_get: pkpcb: page empty (2) 2 2 77d 80d 80d
panic: inconsistent bufpage counts (2) 2 2 74d 107d 107d
uvm_fault: checkalias (2) -1 4 71d 126d 126d
panic: ffs_blkfree: bad size (6) 2 8 68d 142d 142d
assert "bpfilter_lookup(unit) == NULL" failed in bpf.c -1 38 3d11h 143d 143d
panic: pool_do_get: scsiplug: page empty 2 2 70d 150d 150d
panic: uvm_vnp_uncache: vnode not locked! 2 4 72d 154d 154d
uvm_fault: km_free (3) -1 5 68d 157d 157d
panic: vrele: ref cnt (2) 2 3 80d 158d 158d
assert "nlevel >= IPL_NONE" failed in intr.c (4) -1 4 71d 158d 158d
assert "pg->wire_count != NUM" failed in uvm_page.c -1 9080 3d01h 159d 159d
panic: vwakeup: neg numoutput (2) 2 2 79d 162d 162d
assert "bp->b_data != NULL" failed in vfs_biomem.c (6) -1 11 70d 172d 172d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (26) -1 735 1d23h 180d 180d
uvm_fault: VOP_LOCK (3) -1 3 68d 185d 185d
assert "ISSET(bp->b_flags, B_BC)" failed in vfs_bio.c (2) -1 3 79d 187d 187d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte 0x3efff (2) 2 3 72d 188d 188d
pool: free list modified: pdppl (5) -1 8 70d 188d 188d
SYZFAIL: SIGSEGV (2) -1 657 50m 191d 191d
panic: pmap_remove_ptes: managed page without PG_PVLIST: va ADDR, opte ADDR (3) 2 11 67d 197d 197d
uvm_fault: pmap_page_remove (7) -1 14 67d 200d 200d
uvm_fault: sys_shmat (2) -1 7 72d 242d 242d
assert "refs > NUM" failed in kern_synch.c -1 7 33d 263d 263d
panic: softclock: invalid to_clock: -ADDR (3) 2 6 80d 301d 301d
assert "cifp != NULL" failed in route.c (5) -1 11 22d 317d 317d
SYZFAIL: can't reallocate -1 50 27d 398d 398d
uvm_fault: mtx_enter -1 214 44d 415d 415d
panic: uvm_fault_unwire_locked: address not in map (5) 2 118 8h37m 424d 424d
panic: chgproccnt: procs < NUM 2 16 7d11h 463d 463d
uvm_fault: savectx (3) -1 3303 35m 465d 465d
panic: trap type NUM, code=NUM, pc=NUM (4) 2 21 68d 466d 466d
SYZFAIL: coverage filter is full (3) -1 724446 2h57m 466d 466d
protection_fault: bpfdetach -1 76 15d 468d 468d
SYZFAIL: SIGBUS (2) -1 1777 58m 473d 473d
assert "sc->sc_dev == NUM" failed in if_tun.c (6) -1 117 14d 475d 475d
assert "refs != ~NUM" failed in kern_synch.c -1 1182 4h18m 476d 476d
SYZFAIL: posix_spawnp failed -1 4072 3d07h 478d 478d
assert "map->limit == rtmap_limit" failed in rtable.c (2) -1 494 2d08h 478d 478d
panic: pledge_namei: ni_pledge (2) 2 14 80d 479d 479d
uvm_fault: arp_rtrequest (3) -1 416 4d02h 479d 479d
pool: free list modified: shmpl (6) -1 899 6d01h 480d 480d
can't ssh into the instance (2) -1 35143 4d10h 481d 481d
suppressed report (2) -1 18195 5h45m 481d 481d
panic: missing alias (6) 2 1479 7d09h 481d 481d
SYZFAIL: failed to recv rpc (4) -1 2977 1h40m 481d 481d
panic: trap type NUM, code=NUM, pc=ADDR (3) 2 4506 4h48m 481d 481d
corrupted report (7) -1 34923 now 481d 481d
SYZFAIL: ioctl remote attach failed (6) -1 73938 17m 482d 482d
SYZFAIL: failed to mkdtemp (2) -1 209704 now 482d 482d
SYZFAIL: failed to send rpc (2) -1 32436 1h09m 482d 482d
SYZFAIL: tun_id out of range (4) -1 3523040 now 482d 482d
SYZFAIL: failed to mkdir (2) -1 35359 now 482d 482d
SYZFAIL: pipe failed -1 7792 5d19h 685d 685d
protection_fault: lf_advlock (4) -1 C 63 9h44m 803d 803d
protection_fault: sys_semop -1 C 373 23d 822d 822d
uvm_fault: ktrops (2) -1 C 424 1h08m 975d 975d
uvm_fault: schedclock -1 syz 11 632d 1001d 824d
kernel: page fault trap, code=NUM (3) -1 C 93 11d 1031d 788d
malloc: free list modified: free (4) -1 C 40 59d 1053d 1052d
uvm_fault: hardclock (5) -1 syz 4 1032d 1184d 1184d
panic: ufsdirhash_lookup: bad offset in hash array (3) 2 C 107 10d 1195d 901d
protection_fault: sys_msgrcv (2) -1 C 168 5d21h 1326d 1082d
uvm_fault: memcpy (5) -1 C 107 10h10m 1330d 1330d
no output from test machine (8) -1 C 866634 now 1397d 1394d
uvm_fault: ffs_indirtrunc -1 C 38 2d17h 1441d 1441d
SYZFATAL: executor NUM failed NUM times: executor NUM: exit status NUM -1 syz 175427 9d21h 1496d 1496d
panic: bad dir (3) 2 C 222 9d04h 1502d 1330d
uvm_fault: ufs_lookup -1 C 638 20h06m 1598d 950d
kernel: double fault trap, code=NUM (2) -1 C 41 8d09h 1598d 1549d
protection_fault: ktrops -1 C 259 659d 1608d 1587d
protection_fault: sblock -1 syz 38 1431d 1611d 1611d
uvm_fault: fifo_write (2) -1 C 3430 633d 1619d 1303d
SYZFAIL: tun: read failed -1 syz 575632 6m 1636d 1604d
uvm_fault: memset -1 C 968 2h06m 1757d 1757d
SYZFAIL: command failed -1 syz 15837 6d00h 1924d 1606d
panic: ufs_rename: lost dir entry 2 C 146 1d10h 2298d 1536d
lost connection to test machine (2) -1 1221713 now 2714d never