syzbot

 sign-in | mailing list | source | docs
🐞 Open [106]
🐞 Fixed [288]
🐞 Invalid [878]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

Instances [tested repos]:
Name Last active Uptime Corpus Coverage 🛈 Crashes Execs Kernel build syzkaller build Bugs
Commit Config Freshness Status Commit Freshness Status All Only
ci-openbsd-main now 10h57m 7934 43916 778 2049794 f62159b6a996 .config 15h49m d6cdfb8a 22h50m all only
ci-openbsd-multicore now 11h04m 8292 47704 1412 2875036 f62159b6a996 .config 15h49m d6cdfb8a 22h50m all only
ci-openbsd-setuid now 10h50m 4578 29732 3513 976536 f62159b6a996 .config 15h49m d6cdfb8a 22h50m all only
upstream (106):
Title Repro Cause bisect Fix bisect Count Last Reported Last activity
protection_fault: mtx_enter (2) 1 2d02h 2d02h 2d02h
assert "(LIST_NEXT(inp, inp_lhash) == NULL) || (LIST_NEXT(inp, inp_lhash) == _Q_INVALID)" failed in in_pcb.c 1 8d12h 8d12h 8d12h
assert "!ISSET(inp->inp_flags, INP_IPV6)" failed in in_pcb.c 2 8d12h 8d13h 8d13h
protection_fault: in_pcbhash_lookup 3 8d13h 8d14h 8d14h
witness: reversal: sbufsnd inode (3) 2 8d06h 10d 10d
protection_fault: in6_addmulti (4) 1 12d 12d 12d
assert "next != NULL && next->start <= entry->end" failed in uvm_fault.c (5) 2 31d 32d 32d
witness: userret: mlockall 2 33d 34d 34d
uvm_fault: witness_checkorder (6) 6 9h52m 35d 35d
witness: reversal: &sched_lock &cq->cq_mtx 3 19h43m 36d 36d
assert "uvm_page_owner_locked_p(pg, TRUE)" failed in uvm_page.c (2) 1 38d 38d 38d
assert "kd_lookup(kd->kd_unit) == NULL" failed in kcov.c (3) 2 6d21h 38d 38d
SYZFAIL: dup2(NUM, kInPipeFd) failed (2) 2 18d 40d 40d
assert "rn != NULL" failed in pipex.c 1 41d 41d 41d
assert "refs != ~NUM" failed in kerneWARNING: SPL NOT LOWERED ON SYSCALL NUM NUM EXIT NUM aStopped at savectx+0xae 1 44d 44d 44d
uvm_fault: mtx_enter_try 2 32d 45d 45d
uvm_fault: _copyinstr 7 37m 49d 49d
assert "(sih->sih_state & SIS_RESTART) == NUM" failed in kern_softintr.c 1 52d 52d 52d
openbsd build error (23) 9 30d 52d 52d
openbsd test error: SYZFATAL: image testing failed w/o kernel bug (2) 1 52d 52d 52d
protection_fault: __x86_indirect_thunk_r11 (4) 4 10m 53d 53d
SYZFAIL: can't reallocate 4 9d07h 54d 54d
SYZFAIL: invalid kcov comp type 6 10d 56d 56d
witness: denied attempt to set clock forward to ADDR (2) 1 58d 58d 58d
witness: reversal: &cq->cq_mtx &sched_lock 11 9h01m 60d 60d
uvm_fault: copyout 65 10h27m 60d 60d
uvm_fault: mld6_fasttimeo 1 60d 60d 60d
panic: vrele: v_writecount != NUM 2 12d 65d 65d
multicore test error: SYZFATAL: image testing failed w/o kernel bug (2) 1 66d 66d 66d
uvm_fault: mtx_enter 18 1h51m 71d 71d
witness: nd6_resolve: something odd happens 1 74d 74d 74d
panic: softclock: invalid to_clock: ADDR (3) 1 76d 76d 76d
uvm_fault: refcnt_rele 2 42d 76d 76d
uvm_fault: dt_ioctl_record_stop 574 1h50m 76d 76d
panic: uvm_fault_unwire_locked: address not in map (5) 13 5h49m 80d 80d
panic: mtx ADDR: locking against myself (2) 242 3h55m 102d 102d
assert "info->rti_ifa->ifa_ifp != NULL" failed in route.c 12 14d 104d 104d
panic: chgproccnt: procs < NUM 4 3d10h 119d 119d
uvm_fault: savectx (3) 55 20h01m 121d 121d
SYZFAIL: repeatedly failed to execute the program (2) 5 19d 122d 122d
panic: trap type NUM, code=NUM, pc=NUM (4) 8 26d 122d 122d
SYZFAIL: coverage filter is full (3) 407419 4d11h 123d 123d
protection_fault: bpfdetach 15 3d21h 124d 124d
uvm_fault: x86_ipi_db (9) 94 2h41m 126d 126d
SYZFAIL: SIGBUS (2) 5 6d04h 129d 129d
assert "rdomain == rtable_l2(rdomain)" failed in route.c (2) 4 12d 130d 130d
assert "sc->sc_dev == NUM" failed in if_tun.c (6) 24 13d 131d 131d
witness: reversal: fdlock inode 4 4d04h 131d 131d
witness: reversal: sbufrcv inode (2) 10 31d 132d 132d
assert "refs != ~NUM" failed in kern_synch.c 218 1d02h 132d 132d
SYZFAIL: too many calls in output (2) 48 4d00h 134d 134d
panic: malloc: allocation too large, type = NUM, size = ADDR (4) 22 36d 134d 134d
kernel: protection fault trap, code=NUM (8) 8 22d 134d 134d
SYZFAIL: posix_spawnp failed 240 55m 134d 134d
assert "map->limit == rtmap_limit" failed in rtable.c (2) 73 1d14h 134d 134d
uvm_fault: proc_trampoline (2) 49 3h30m 134d 134d
protection_fault: witness_checkorder (5) 5 30d 134d 134d
panic: pledge_namei: ni_pledge (2) 3 15d 135d 135d
uvm_fault: arp_rtrequest (3) 195 17h04m 135d 135d
protection_fault: copyout 6 17d 136d 136d
pool: free list modified: shmpl (6) 283 2h48m 137d 137d
uvm_fault: db_enter (6) 323 4h23m 137d 137d
can't ssh into the instance (2) 4415 now 137d 137d
suppressed report (2) 3415 28m 137d 137d
panic: missing alias (6) 147 10h44m 137d 137d
SYZFAIL: failed to recv rpc (4) 555 4h49m 137d 137d
panic: trap type NUM, code=NUM, pc=ADDR (3) 175 21h41m 137d 137d
corrupted report (7) 1844 now 138d 138d
witness: reversal: lock order data missing (5) 99837 now 138d 138d
SYZFAIL: ioctl remote attach failed (6) 11998 now 138d 138d
SYZFAIL: failed to mkdtemp (2) 12621 now 138d 138d
SYZFAIL: failed to send rpc (2) 12918 8m 138d 138d
SYZFAIL: tun_id out of range (4) 974647 now 138d 138d
SYZFAIL: failed to mkdir (2) 1339 9m 138d 138d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (25) 18 64d 192d 185d
uvm_fault: ffs2_balloc (5) 4 69d 216d 216d
SYZFAIL: too much cover 164 2h50m 307d 307d
SYZFAIL: pipe failed 34 1d03h 342d 342d
pool: free list modified: rttmr 21 52d 456d 456d
protection_fault: lf_advlock (4) C 12 34d 459d 459d
protection_fault: sys_semop C 70 8d20h 478d 478d
uvm_fault: ktrops (2) C 129 1d13h 631d 631d
uvm_fault: schedclock syz 11 288d 657d 480d
kernel: page fault trap, code=NUM (3) C 78 11h38m 687d 444d
malloc: free list modified: free (4) C 21 11d 709d 708d
uvm_fault: hardclock (5) syz 4 688d 840d 840d
panic: ufsdirhash_lookup: bad offset in hash array (3) C 79 4d15h 851d 557d
protection_fault: sys_msgrcv (2) C 95 1d02h 982d 738d
uvm_fault: memcpy (5) C 22 9d11h 986d 986d
assert "uvn->u_obj.uo_refs == NUM" failed in uvm_vnode.c (2) syz 2 990d 990d 990d
panic: pmap_unwire: invalid PDE syz 6 401d 1044d 986d
no output from test machine (8) C 613787 now 1053d 1050d
uvm_fault: ffs_indirtrunc C 5 69d 1097d 1097d
witness: reversal: vmmaplk inode (3) C 1060 122d 1129d 1080d
SYZFATAL: executor NUM failed NUM times: executor NUM: exit status NUM syz 175427 11d 1152d 1152d
panic: bad dir (3) C 136 8d22h 1159d 986d
uvm_fault: ufs_lookup C 93 4d15h 1254d 606d
kernel: double fault trap, code=NUM (2) C 34 311d 1254d 1205d
protection_fault: ktrops C 259 315d 1264d 1244d
protection_fault: sblock syz 38 1087d 1267d 1267d
uvm_fault: fifo_write (2) C 3430 289d 1275d 959d
SYZFAIL: tun: read failed syz 186994 now 1292d 1260d
uvm_fault: memset C 86 12d 1413d 1413d
SYZFAIL: command failed syz 13064 17d 1580d 1262d
panic: ufs_rename: lost dir entry C 121 12d 1954d 1192d
lost connection to test machine (2) 856451 now 2370d never