syzbot


Instances [tested repos]:
Name Last active Uptime Corpus Coverage 🛈 Crashes Execs Kernel build syzkaller build Bugs
Commit Config Freshness Status Commit Freshness Status All Only
ci-openbsd-main now 13h17m 4799 43391 3183 243250 070ee79af545 .config 20h52m failing ee4e11c8 18h54m all only
ci-openbsd-multicore now 13h10m 4981 47539 4503 14840 070ee79af545 .config 20h52m ee4e11c8 18h54m all only
ci-openbsd-setuid now 13h16m 3174 30063 808 483552 070ee79af545 .config 20h52m ee4e11c8 18h54m all only
upstream (147):
Title Repro Cause bisect Fix bisect Count Last Reported Last activity
panic: pool_do_get: rtentry: page empty 1 3d15h 3d15h 3d15h
SYZFAIL: failed to mkdtemp 9 10h33m 4d08h 4d08h
SYZFAIL: failed to mkdir 1 4d10h 4d10h 4d10h
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte 0x3edff 1 4d19h 4d19h 4d19h
SYZFAIL: pipe failed 2 5d01h 5d01h 5d01h
assert "kn->kn_kq == kq" failed in kern_event.c 1 5d15h 5d15h 5d15h
uvm_fault: vm_terminate 3 2d23h 5d21h 5d21h
SYZFAIL: repeatedly failed to execute the program 1 6d06h 6d06h 6d06h
panic: vput: null vp 1 6d13h 6d13h 6d13h
assert "map->limit == rtmap_limit" failed in rtable.c 1 6d18h 6d18h 6d18h
assert "vp->v_usecount == NUM" failed in vfs_subr.c 23 5d09h 6d21h 6d21h
panic: vclean: deadlock 324 5d07h 6d23h 6d23h
SYZFAIL: coverage filter is full 64376 now 7d13h 7d04h
witness: denied attempt to set clock forward to ADDR 1 7d15h 7d15h 7d15h
SYZFAIL: SIGSEGV 2 4d13h 8d08h 8d08h
panic: trap type NUM, code=NUM, pc=e6d89 1 8d11h 8d11h 8d11h
SYZFAIL: tun: can't open device (4) 1 8d13h 8d13h 8d13h
witness: reversal: lock order data missing (4) 2552 12h31m 8d13h 8d13h
panic: trap type NUM, code=NUM, pc=e6d59 1 8d17h 8d17h 8d17h
SYZFAIL: ioctl remote attach failed (5) 2 14h36m 9d01h 9d01h
SYZFAIL: too many calls in output 15 20h34m 9d03h 9d03h
openbsd test error: SYZFAIL: failed to recv rpc 17 16m 9d04h 9d04h
SYZFAIL: failed to send rpc 563 10m 9d13h 9d13h
multicore test error: SYZFAIL: setsid failed 8 9d17h 10d 10d
openbsd test error: no output from test machine 37 1d01h 10d 10d
multicore test error: SYZFAIL: failed to recv rpc 1949 36m 10d 10d
multicore test error: no output from test machine (3) 15 4d06h 10d 10d
panic: kernel diagnostic assertion "dupe == NULL" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uvm_page.c" 1 23d 23d 23d
panic: trap type NUM, code=NUM, pc=3ca59 10 23d 51d 51d
panic: pool_do_get: pfstate: page empty 1 52d 52d 52d
panic: trap type NUM, code=NUM, pc=3ca09 6 52d 52d 52d
pool: free list modified: pmappl 2 23d 53d 53d
witness: reversal: amaplk vmmaplk 1 53d 53d 53d
uvm_fault: vio_rxeof (2) 1 56d 56d 56d
openbsd build error (21) 111 4d15h 57d 57d
panic: kernel diagnosticpm aap_susnewirrtei:o nw "irindugp ef o==r N pUmaLp L0xf" ffafiflfedd:NUM 0fil7e9 d"/s6yez4eka8l 1 58d 58d 58d
can't ssh into the instance 351 16h50m 58d 30d
protection_fault: nd6_timer 4 4d12h 58d 58d
uvm_fault: ufs_symlink 1 58d 58d 58d
panic: runtime error: slice bounds out of range [:NUM] with capacity NUM 1 59d 59d 59d
panic:p a nic : kernel diagnostic assertion "((flags & PGO_LOCKED) != NUM && rw_lock_held(uobj->vmobjlock)) || (flags & 1 60d 60d 60d
panic: wd changed: "\x00\x00\x00\x00\x00" -> "/root" 1 60d 60d 60d
panic: pool_do_get: vnodes: page empty 1 61d 61d 61d
panic: vwakeup: neg numoutput 1 61d 61d 61d
panic: runtime error: invalid memory address or nil pointer dereference [recovered] 2 62d 63d 63d
panic: inconsistent bufpage counts 2 51d 64d 64d
protection_fault: sosend 1 64d 64d 64d
panic: m_copydata: short mbuf chain 1 65d 65d 65d
uvm_fault: rw_enter (3) 1 65d 65d 65d
assert "rw_write_held(uobj->vmobjlock)" failed in uvm_vnode.c 2 6d18h 65d 65d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte 0x2401 1 68d 68d 68d
panic: runtime error: index out of range [NUM] with length NUM 1 69d 69d 69d
uvm_fault: ufs_rmdir 1 70d 70d 70d
panic: ffs_blkfree: bad size (4) 1 70d 70d 70d
assert "obj == NULL || UVM_OBJ_IS_DUMMY(obj) || rw_write_held(obj->vmobjlock)" failed in uvm_page.c 1 70d 70d 70d
panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock (8) C 175 63d 76d 76d
pool: free list modified: mbufpl (4) 1 77d 77d 77d
panic: reflect: call of reflect.Value.Uint on string Value [recovered] 1 77d 77d 77d
panic: inconsistent poll.fdMutex 4 50d 77d 77d
panic: reflect: call of reflect.Value.Int on string Value [recovered] 1 80d 80d 80d
pool: free list modified: pdppl (4) 6 63d 81d 81d
uvm_fault (3) 1 88d 88d 88d
panic: uvm_fault_WuAnRwNiIrNe_lGoc: SPLke d: NaOTddr essL OnWoEtRED iOnN mSapY 1 88d 88d 88d
panic: pool_do_get: sigapl: page empty 1 88d 88d 88d
panic: vrele: ref cnt 2 66d 89d 89d
panic: pool_do_get: pkpcb: page empty 1 89d 89d 89d
assert "pmap->pm_type != PMAP_TYPE_EPT" failed in pmap.c (3) 6 56d 90d 90d
assert "!ISSET(rt->rt_flags, RTF_LOCAL)" failed in nd6.c (3) 3 51d 91d 91d
uvm_fault: VOP_LOCK (2) 5 5d11h 93d 93d
uvm_fault: arp_rtrequest (2) 5 69d 94d 94d
pool: cpu free list modified: mbufpl (4) 2 63d 94d 94d
uvm_fault: pool_do_get (3) 2 7d04h 94d 94d
panic: ifa_update_broadaddr does not support dynamic length (3) 20 23d 94d 94d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte 0x3efff 9 2d17h 95d 95d
assert "__mp_lock_held(&sched_lock, curcpu()) == NUM" failed in kern_lock.c (5) 32 23d 98d 98d
panic: ffs_fsync: not dirty 3 89d 99d 99d
panic: vref used where vget required (4) 6 23d 99d 99d
uvm_fault: checkalias 4 60d 100d 100d
assert "bp->b_data != NULL" failed in vfs_biomem.c (5) 6 53d 101d 101d
panic: pool_do_get: rwobjpl: page empty 2 81d 101d 101d
uvm_fault: proc_trampoline 3 58d 103d 103d
uvm_fault: witness_checkorder (5) 4 7d21h 116d 116d
pool: free list modified: rttmr 5 55d 119d 119d
panic: runtime error: invalid memory address or nil pointer dereference (9) 6 58d 120d 120d
protection_fault: lf_advlock (4) C 2 69d 122d 122d
assert "((flags & PGO_LOCKED) != NUM && rw_lock_held(uobj->vmobjlock)) || (flags & PGO_LOCKED) == NUM" failed in uvm_vno (4) 7 8d05h 127d 127d
protection_fault: __x86_indirect_thunk_r11 (2) 15 52d 135d 135d
assert "nlevel >= IPL_NONE" failed in intr.c (2) 7 1d02h 136d 136d
panic: softclock: invalid to_clock: NUM 10 55d 138d 138d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte ADDR (4) 34 15h56m 138d 138d
panic: softclock: invalid to_clock: -ADDR 15 24d 140d 140d
protection_fault: sys_semop C 2 57d 141d 141d
assert "ps->ps_uvncount == NUM" failed in kern_unveil.c (4) C 53 8h55m 146d 112d
assert "sc->sc_dev == NUM" failed in if_tun.c (5) 211 1d03h 147d 147d
panic: runtime error: index out of range [ADDR] with length NUM 16 59d 147d 147d
uvm_fault: db_read_bytes 37 1d01h 149d 149d
uvm_fault: unveil_add_vnode 3 53d 151d 151d
assert "cifp != NULL" failed in route.c (3) 58 6d20h 155d 155d
uvm_fault: pool_gc_pages (2) 6 50d 155d 155d
assert "ISSET(bp->b_flags, B_BC)" failed in vfs_bio.c 8 7d20h 171d 171d
uvm_fault: ffs2_balloc (3) 5 77d 181d 181d
go runtime error 78 23d 202d 202d
assert "pg->wire_count == NUM" failed in vfs_biomem.c (3) 186 9h17m 203d 203d
uvm_fault: pmap_page_remove (5) 10 5d12h 222d 222d
uvm_fault: km_free (2) 9 52d 224d 224d
assert "dupe == NULL" failed in uvm_page.c (4) 126 1d11h 252d 252d
panic: acquiring blockable sleep lock with spinlock or critical section held (rwlock) vmmaplk (3) 25 1d12h 269d 269d
uvm_fault: ktrops (2) C 7 133d 294d 294d
panic: ffs_update: bad link cnt (2) 26 53d 305d 305d
uvm_fault: db_enter (5) 69 15h41m 312d 312d
pool: free list modified: fdescpl (4) 14 58d 319d 319d
uvm_fault: schedclock syz 10 109d 320d 143d
kernel: page fault trap, code=NUM (3) C 61 5d14h 350d 107d
malloc: free list modified: free (4) C 14 52d 372d 371d
panic: trap type NUM, code=NUM, pc=NUM (3) 115 1d14h 401d 401d
witness: lock_object uninitialized: ADDR (3) C 331 5d13h 475d 333d
uvm_fault: hardclock (5) syz 4 351d 503d 503d
panic: ufsdirhash_lookup: bad offset in hash array (3) C 79 63d 515d 220d
kernel: protection fault trap, code=NUM (6) 42 70d 616d 616d
protection_fault: sys_msgrcv (2) C 31 75d 645d 401d
uvm_fault: memcpy (5) C 6 123d 649d 649d
assert "uvn->u_obj.uo_refs == NUM" failed in uvm_vnode.c (2) syz 2 653d 653d 653d
pool: free list modified: sockpl (3) 41 67d 669d 669d
protection_fault: pool_do_put (2) syz 35 8d07h 674d 350d
panic: vop_generic_badop (2) 84 53d 684d 684d
panic: pmap_unwire: invalid PDE syz 6 64d 707d 649d
no output from test machine (8) C 386001 now 716d 713d
uvm_fault: ffs_indirtrunc C 4 472d 760d 760d
witness: reversal: vmmaplk inode (3) C 544 1d00h 792d 743d
SYZFATAL: executor NUM failed NUM times: executor NUM: exit status NUM syz 175427 23d 815d 815d
panic: bad dir (3) C 32 6d13h 822d 649d
panic: uvm_fault_unwire_locked: address not in map (4) C 156 12h45m 837d 818d
uvm_fault: x86_ipi_db (8) 227 2d21h 881d 881d
uvm_fault: ufs_lookup C 45 71d 917d 269d
kernel: double fault trap, code=NUM (2) C 30 50d 917d 868d
panic: trap type NUM, code=NUM, pc=ADDR (2) 361 1d15h 923d 923d
protection_fault: ktrops C 256 3d18h 927d 907d
protection_fault: sblock syz 38 750d 930d 930d
assert "uvm_page_owner_locked_p(pg)" failed in uvm_page.c 1094 9h49m 935d 935d
uvm_fault: fifo_write (2) C 3228 15h17m 938d 622d
SYZFAIL: tun: read failed syz 41676 8h32m 955d 923d
corrupted report (6) 1384 8h59m 1034d 1034d
uvm_fault: memset C 41 5d01h 1076d 1076d
SYZFAIL: command failed syz 2528 9h07m 1243d 925d
suppressed report 310181 18m 1243d 1233d
panic: ufs_rename: lost dir entry C 70 10h06m 1617d 855d
lost connection to test machine (2) 840469 18m 2033d never