syzbot

 sign-in | mailing list | source | docs
🐞 Open [105]
🐞 Fixed [288]
🐞 Invalid [878]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

Instances [tested repos]:
Name Last active Uptime Corpus Coverage 🛈 Crashes Execs Kernel build syzkaller build Bugs
Commit Config Freshness Status Commit Freshness Status All Only
ci-openbsd-main now 5h48m 8071 43798 1327 2388885 cf553b9e24a5 .config 18h26m ed3e87f7 6h42m all only
ci-openbsd-multicore now 5h34m 8115 47294 2089 3285778 cf553b9e24a5 .config 18h26m ed3e87f7 6h42m all only
ci-openbsd-setuid now 5h40m 4563 29693 4610 1099672 cf553b9e24a5 .config 18h26m ed3e87f7 6h42m all only
upstream (105):
Title Repro Cause bisect Fix bisect Count Last Reported Last activity
assert "(LIST_NEXT(inp, inp_lhash) == NULL) || (LIST_NEXT(inp, inp_lhash) == _Q_INVALID)" failed in in_pcb.c 1 5d20h 5d20h 5d20h
assert "!ISSET(inp->inp_flags, INP_IPV6)" failed in in_pcb.c 2 5d19h 5d21h 5d21h
protection_fault: in_pcbhash_lookup 3 5d20h 5d22h 5d22h
witness: reversal: sbufsnd inode (3) 2 5d13h 7d18h 7d18h
protection_fault: in6_addmulti (4) 1 9d15h 9d15h 9d15h
assert "next != NULL && next->start <= entry->end" failed in uvm_fault.c (5) 2 28d 29d 29d
witness: userret: mlockall 2 30d 31d 31d
uvm_fault: witness_checkorder (6) 5 9d11h 32d 32d
witness: reversal: &sched_lock &cq->cq_mtx 2 11d 34d 34d
assert "uvm_page_owner_locked_p(pg, TRUE)" failed in uvm_page.c (2) 1 35d 35d 35d
assert "kd_lookup(kd->kd_unit) == NULL" failed in kcov.c (3) 2 4d04h 35d 35d
SYZFAIL: dup2(NUM, kInPipeFd) failed (2) 2 15d 37d 37d
assert "rn != NULL" failed in pipex.c 1 39d 39d 39d
assert "refs != ~NUM" failed in kerneWARNING: SPL NOT LOWERED ON SYSCALL NUM NUM EXIT NUM aStopped at savectx+0xae 1 41d 41d 41d
uvm_fault: mtx_enter_try 2 29d 42d 42d
uvm_fault: _copyinstr 6 4d21h 46d 46d
assert "(sih->sih_state & SIS_RESTART) == NUM" failed in kern_softintr.c 1 49d 49d 49d
openbsd build error (23) 9 28d 49d 49d
openbsd test error: SYZFATAL: image testing failed w/o kernel bug (2) 1 49d 49d 49d
protection_fault: __x86_indirect_thunk_r11 (4) 3 7d21h 50d 50d
SYZFAIL: can't reallocate 4 6d14h 51d 51d
SYZFAIL: invalid kcov comp type 6 7d17h 53d 53d
witness: denied attempt to set clock forward to ADDR (2) 1 55d 55d 55d
witness: reversal: &cq->cq_mtx &sched_lock 9 3d00h 57d 57d
uvm_fault: copyout 60 4h54m 57d 57d
uvm_fault: mld6_fasttimeo 1 57d 57d 57d
panic: vrele: v_writecount != NUM 2 9d20h 62d 62d
multicore test error: SYZFATAL: image testing failed w/o kernel bug (2) 1 63d 63d 63d
uvm_fault: mtx_enter 17 3d09h 68d 68d
witness: nd6_resolve: something odd happens 1 72d 72d 72d
panic: softclock: invalid to_clock: ADDR (3) 1 73d 73d 73d
uvm_fault: refcnt_rele 2 39d 73d 73d
uvm_fault: dt_ioctl_record_stop 538 6h33m 73d 73d
panic: uvm_fault_unwire_locked: address not in map (5) 11 13d 77d 77d
panic: mtx ADDR: locking against myself (2) 239 14h19m 99d 99d
assert "info->rti_ifa->ifa_ifp != NULL" failed in route.c 12 12d 101d 101d
panic: chgproccnt: procs < NUM 4 17h49m 116d 116d
uvm_fault: savectx (3) 53 23h51m 118d 118d
SYZFAIL: repeatedly failed to execute the program (2) 5 16d 119d 119d
panic: trap type NUM, code=NUM, pc=NUM (4) 8 23d 119d 119d
SYZFAIL: coverage filter is full (3) 407419 1d18h 120d 120d
protection_fault: bpfdetach 15 1d05h 122d 122d
uvm_fault: x86_ipi_db (9) 90 5d19h 123d 123d
SYZFAIL: SIGBUS (2) 5 3d12h 126d 126d
assert "rdomain == rtable_l2(rdomain)" failed in route.c (2) 4 10d 128d 128d
assert "sc->sc_dev == NUM" failed in if_tun.c (6) 24 10d 128d 128d
witness: reversal: fdlock inode 4 1d12h 129d 129d
witness: reversal: sbufrcv inode (2) 10 28d 129d 129d
assert "refs != ~NUM" failed in kern_synch.c 214 8h39m 130d 130d
SYZFAIL: too many calls in output (2) 48 1d07h 131d 131d
panic: malloc: allocation too large, type = NUM, size = ADDR (4) 22 33d 131d 131d
kernel: protection fault trap, code=NUM (8) 8 19d 131d 131d
SYZFAIL: posix_spawnp failed 238 2d03h 131d 131d
assert "map->limit == rtmap_limit" failed in rtable.c (2) 72 21h22m 132d 132d
uvm_fault: proc_trampoline (2) 46 3d16h 132d 132d
protection_fault: witness_checkorder (5) 5 27d 132d 132d
panic: pledge_namei: ni_pledge (2) 3 12d 132d 132d
uvm_fault: arp_rtrequest (3) 193 1d18h 133d 133d
protection_fault: copyout 6 14d 133d 133d
pool: free list modified: shmpl (6) 282 2d11h 134d 134d
uvm_fault: db_enter (6) 311 1d14h 134d 134d
can't ssh into the instance (2) 3063 now 134d 134d
suppressed report (2) 3340 4h06m 134d 134d
panic: missing alias (6) 144 15h21m 134d 134d
SYZFAIL: failed to recv rpc (4) 542 11h46m 134d 134d
panic: trap type NUM, code=NUM, pc=ADDR (3) 169 10h02m 134d 134d
corrupted report (7) 1780 6h25m 135d 135d
witness: reversal: lock order data missing (5) 98245 4h13m 135d 135d
SYZFAIL: ioctl remote attach failed (6) 11602 4h26m 135d 135d
SYZFAIL: failed to mkdtemp (2) 12065 4h51m 135d 135d
SYZFAIL: failed to send rpc (2) 12805 4h14m 135d 135d
SYZFAIL: tun_id out of range (4) 954669 4h13m 135d 135d
SYZFAIL: failed to mkdir (2) 1292 10h25m 135d 135d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (25) 18 61d 189d 183d
uvm_fault: ffs2_balloc (5) 4 66d 214d 214d
SYZFAIL: too much cover 152 18h52m 304d 304d
SYZFAIL: pipe failed 30 3d18h 339d 339d
pool: free list modified: rttmr 21 49d 453d 453d
protection_fault: lf_advlock (4) C 12 31d 456d 456d
protection_fault: sys_semop C 70 6d03h 475d 475d
uvm_fault: ktrops (2) C 127 15h08m 628d 628d
uvm_fault: schedclock syz 11 286d 654d 477d
kernel: page fault trap, code=NUM (3) C 77 16h14m 684d 442d
malloc: free list modified: free (4) C 21 9d05h 706d 705d
uvm_fault: hardclock (5) syz 4 686d 838d 838d
panic: ufsdirhash_lookup: bad offset in hash array (3) C 79 1d23h 849d 554d
protection_fault: sys_msgrcv (2) C 93 1d02h 979d 736d
uvm_fault: memcpy (5) C 22 6d18h 983d 983d
assert "uvn->u_obj.uo_refs == NUM" failed in uvm_vnode.c (2) syz 2 987d 987d 987d
panic: pmap_unwire: invalid PDE syz 6 398d 1041d 983d
no output from test machine (8) C 611131 3h54m 1051d 1047d
uvm_fault: ffs_indirtrunc C 5 66d 1095d 1095d
witness: reversal: vmmaplk inode (3) C 1060 119d 1127d 1077d
SYZFATAL: executor NUM failed NUM times: executor NUM: exit status NUM syz 175427 9d04h 1149d 1149d
panic: bad dir (3) C 136 6d05h 1156d 984d
uvm_fault: ufs_lookup C 93 1d23h 1251d 603d
kernel: double fault trap, code=NUM (2) C 34 308d 1251d 1203d
protection_fault: ktrops C 259 312d 1261d 1241d
protection_fault: sblock syz 38 1085d 1264d 1264d
uvm_fault: fifo_write (2) C 3430 286d 1272d 957d
SYZFAIL: tun: read failed syz 184094 4h13m 1289d 1258d
uvm_fault: memset C 86 9d09h 1410d 1410d
SYZFAIL: command failed syz 13064 15d 1577d 1260d
panic: ufs_rename: lost dir entry C 121 9d07h 1951d 1189d
lost connection to test machine (2) 856300 4h15m 2368d never