syzbot

 sign-in | mailing list | source | docs
🐞 Open [170]
🐞 Fixed [301]
🐞 Invalid [1070]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

Instances [tested repos]:
Name Last active Uptime Corpus Coverage 🛈 Crashes Execs Kernel build syzkaller build Bugs
Commit Config Freshness Status Commit Freshness Status All Only
ci-openbsd-multicore now 1h40m 8424 49596 3903 1646818 459bfe6c89ff .config 7h57m 4f06757f 2d02h all only
Applied filters: Manager=ci-openbsd-multicore (drop)
Extra filters: [With Repro]
upstream (132) 🔗
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Last activity
kernel:I Tp 0g ea faStopped at savectx+0xae: movl $NUM,%gs:0x688 -1 1 1d09h 1d09h 1d09h
panic: kernel diagnostic assertion "ISSET(p->p_flag, P_SUSPSIG | P_SUSPSINGLE) == NUM" failed: file "/syzkaller/managers 2 1 2d06h 2d06h 2d05h
kernel:NUM pca -1 1 3d09h 3d09h 3d09h
kernel: NUM ageStopped at savectx+0xae: movl $NUM,%gs:0x688 -1 1 4d07h 4d07h 4d07h
assert "d->bd_in_uiomove == NUM" failed in bpf.c (5) -1 1 5d01h 5d01h 5d01h
panic: uvm_fault(ADDR, 0x47, NUM, NUM) -> e 2 1 6d12h 6d12h 6d12h
panic: (5) 2 1 9d00h 9d00h 9d00h
panic: init died (signal NUM, 2 1 9d14h 9d14h 9d14h
panic: init died (signal NUM, e 2 1 18d 18d 18d
kernel:NUM -1 1 19d 19d 19d
panic: kernel diagnostic assertion "pg->wire_count != NUM" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uv 2 2 12h49m 20d 20d
witness: reversal: sbufsnd inode (4) -1 1 21d 21d 21d
kernel:T p aag -1 1 28d 28d 28d
panic: uvm_fault(ADDR, 0x98, NUM, NUM) -> e 2 1 30d 30d 30d
uvm_fault: remrunqueue -1 2 1d05h 33d 33d
witness: reversal: pf_lock netlock (4) -1 10 5h16m 35d 35d
assert "next != NULL && next->start <= entry->end" failed in uvm_fault.c (6) -1 1 37d 37d 37d
panic: unhandled af (6) 2 1 39d 39d 39d
uvm_fault: readdoslabel -1 1 41d 41d 41d
SYZFAIL: handshake read failed -1 1 44d 44d 44d
SYZFAIL: repeatedly failed to execute the program (3) -1 1 45d 45d 45d
kernel: -1 1 45d 45d 45d
assert "ISSET(p->p_flag, P_SUSPSIG | P_SUSPSINGLE) == NUM" failed in kern_sig.c -1 12 16h41m 45d 45d
panic: uvm_fault_unwire_locked: adWdArReNssI NnG:o tSP iLn maNpO 2 1 48d 48d 48d
uvm_fault: alltraps_kern_meltdown (2) -1 3 3d00h 59d 59d
uvm_fault: ffs_blkfree (2) -1 3 24d 59d 59d
panic: kernel diagnostic assertion "bpfilter_lookup(unit) 2 1 64d 64d 64d
assert "map->limit == rtmap_limit" failed in -1 1 64d 64d 64d
panic: ffs_freefile: freeing free inode (3) 2 2 31d 65d 65d
kernel: pa e -1 1 67d 67d 67d
assert "bpfilter_lookup(unit) == NULL" failed in multi -1 1 67d 67d 67d
assert "bpfilter_lookup(unit) == NULL" failed in -1 1 68d 68d 68d
panic: ffs2_balloc: unwind failed (4) 2 13 8d14h 72d 72d
uvm_fault: ffs_fragextend (3) -1 3 20d 72d 72d
panic: acquiring blockable sleSeaBIOS (version NUM.NUM.NUM-google) 2 1 72d 72d 72d
uvm_fault: ufs_direnter (6) -1 9 2d20h 74d 74d
panic: uvm 2 1 74d 74d 74d
panic: kerne 2 2 20d 76d 76d
panic: ffs_valloc: dup alloc (5) 2 106 19d 77d 77d
uvm_fault: ffs_nodealloccg (4) -1 6 20d 77d 77d
protection_fault: memcmp (2) -1 1 78d 78d 78d
protection_fault: pf_anchor_global_RB_REMOVE (3) -1 21 15h52m 78d 78d
uvm_fault: ffs_freefile (3) -1 3 19d 78d 78d
panic: init died (signal NUM, exit NUM) (2) 2 615 23m 79d 79d
uvm_fault: ffs2_balloc (7) -1 346 4h20m 79d 79d
uvm_fault: ufsdirhash_lookup -1 3 20d 79d 79d
SYZFAIL: SIGFPE -1 755 52m 81d 81d
SYZFAIL: cover mmap failed -1 318 1h09m 81d 81d
SYZFAIL: child failed -1 5972 now 81d 81d
SYZFAIL: SIGILL -1 763 41m 81d 81d
uvm_fault: dovutimens -1 193088 now 81d 81d
uvm_fault: dt_ioctl_record_stop (3) -1 32 16d 82d 82d
panic: pmap_enter: PG_PVLIST mapping with unmanaged page: va ADDR, opte ADDR, pa ADDR (4) 2 1 84d 84d 84d
panic: uvm_fault(ADDR, 0x8, NUM, NUM) -> e 2 1 85d 85d 85d
assert "amap->am_buckets[bucket] == NULL" failed in uvm_amap.c (2) -1 1 89d 89d 89d
assert "atomic_load_int(&fdp->fd_nuserevents) == NUM" failed in kern_descrip.c (2) -1 5 13d 92d 92d
pool: cpu free list modified: mbufpl (5) -1 2 82d 121d 121d
uvm_fault: fill_kproc -1 2 65d 135d 135d
uvm_fault: checkalias (2) -1 4 85d 140d 140d
panic: ffs_blkfree: bad size (6) 2 8 82d 156d 156d
assert "bpfilter_lookup(unit) == NULL" failed in bpf.c -1 38 17d 157d 157d
uvm_fault: km_free (3) -1 5 82d 171d 171d
assert "nlevel >= IPL_NONE" failed in intr.c (4) -1 4 85d 172d 172d
assert "pg->wire_count != NUM" failed in uvm_page.c -1 9095 10h16m 174d 174d
panic: vref used where vget required (5) 2 3 89d 175d 175d
assert "bp->b_data != NULL" failed in vfs_biomem.c (6) -1 11 85d 187d 187d
kernel: protection fault trap, code=NUM (9) -1 6 26d 198d 198d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte 0x3efff (2) 2 3 86d 202d 202d
pool: free list modified: pdppl (5) -1 8 84d 202d 202d
SYZFAIL: SIGSEGV (2) -1 797 1h09m 206d 206d
panic: pmap_remove_ptes: managed page without PG_PVLIST: va ADDR, opte ADDR (3) 2 11 82d 212d 212d
uvm_fault: pmap_page_remove (7) -1 14 82d 215d 215d
uvm_fault: sys_shmat (2) -1 7 87d 256d 256d
assert "refs > NUM" failed in kern_synch.c -1 7 48d 277d 277d
assert "cifp != NULL" failed in route.c (5) -1 11 37d 331d 331d
uvm_fault: witness_checkorder (6) -1 92 20d 393d 393d
witness: reversal: &sched_lock &cq->cq_mtx -1 25 71d 395d 395d
SYZFAIL: can't reallocate -1 50 41d 412d 412d
panic: uvm_fault_unwire_locked: address not in map (5) 2 119 4d06h 438d 438d
panic: chgproccnt: procs < NUM 2 17 4d04h 477d 477d
uvm_fault: savectx (3) -1 4202 now 479d 479d
panic: trap type NUM, code=NUM, pc=NUM (4) 2 21 82d 480d 480d
SYZFAIL: coverage filter is full (3) -1 724617 12d 481d 481d
protection_fault: bpfdetach -1 80 2d18h 483d 483d
uvm_fault: x86_ipi_db (9) -1 5445 16m 484d 484d
SYZFAIL: SIGBUS (2) -1 1984 3h06m 487d 487d
assert "sc->sc_dev == NUM" failed in if_tun.c (6) -1 119 10d 489d 489d
assert "refs != ~NUM" failed in kern_synch.c -1 1214 12h44m 491d 491d
SYZFAIL: posix_spawnp failed -1 4081 12h11m 492d 492d
assert "map->limit == rtmap_limit" failed in rtable.c (2) -1 501 5d07h 492d 492d
uvm_fault: proc_trampoline (2) -1 2287 9m 493d 493d
protection_fault: witness_checkorder (5) -1 23 9h57m 493d 493d
uvm_fault: arp_rtrequest (3) -1 430 2d02h 494d 494d
pool: free list modified: shmpl (6) -1 903 3h53m 495d 495d
uvm_fault: db_enter (6) -1 623 8h04m 495d 495d
can't ssh into the instance (2) -1 35144 2d00h 495d 495d
suppressed report (2) -1 18375 21h21m 495d 495d
panic: missing alias (6) 2 1484 4h57m 495d 495d
SYZFAIL: failed to recv rpc (4) -1 3321 3h03m 495d 495d
panic: trap type NUM, code=NUM, pc=ADDR (3) 2 4550 52m 495d 495d
corrupted report (7) -1 41935 now 496d 496d
witness: reversal: lock order data missing (5) -1 215205 5m 496d 496d
SYZFAIL: ioctl remote attach failed (6) -1 75652 6m 496d 496d
SYZFAIL: failed to mkdtemp (2) -1 223738 now 496d 496d
SYZFAIL: failed to send rpc (2) -1 33354 now 496d 496d
SYZFAIL: tun_id out of range (4) -1 3642519 now 496d 496d
SYZFAIL: failed to mkdir (2) -1 38887 9m 496d 496d
SYZFAIL: pipe failed -1 7792 20d 700d 700d
protection_fault: lf_advlock (4) -1 C 64 5d20h 817d 817d
protection_fault: sys_semop -1 C 373 38d 836d 836d
uvm_fault: ktrops (2) -1 C 461 1h15m 989d 989d
kernel: page fault trap, code=NUM (3) -1 C 93 25d 1045d 803d
malloc: free list modified: free (4) -1 C 40 3d12h 1067d 1066d
panic: ufsdirhash_lookup: bad offset in hash array (3) 2 C 107 10d 1210d 915d
protection_fault: sys_msgrcv (2) -1 C 168 20d 1340d 1097d
uvm_fault: memcpy (5) -1 C 108 1d12h 1344d 1344d
panic: pmap_unwire: invalid PDE 2 syz 6 759d 1402d 1344d
no output from test machine (8) -1 C 874051 now 1412d 1408d
uvm_fault: ffs_indirtrunc -1 C 39 3d23h 1456d 1456d
witness: reversal: vmmaplk inode (3) -1 C 1061 60d 1488d 1438d
SYZFATAL: executor NUM failed NUM times: executor NUM: exit status NUM -1 syz 175427 10d 1510d 1510d
panic: bad dir (3) 2 C 223 9d11h 1517d 1345d
uvm_fault: ufs_lookup -1 C 664 1d01h 1612d 964d
kernel: double fault trap, code=NUM (2) -1 C 41 22d 1612d 1563d
protection_fault: ktrops -1 C 259 673d 1622d 1602d
protection_fault: sblock -1 syz 38 1446d 1625d 1625d
uvm_fault: fifo_write (2) -1 C 3430 647d 1633d 1318d
SYZFAIL: tun: read failed -1 syz 577723 13m 1650d 1619d
uvm_fault: memset -1 C 1065 2h13m 1771d 1771d
SYZFAIL: command failed -1 syz 15837 20d 1938d 1621d
panic: ufs_rename: lost dir entry 2 C 146 15d 2312d 1550d
lost connection to test machine (2) -1 1297975 now 2729d never