syzbot
Out of
39 bugs,
13 were automatically obsoleted (
13 due to revoked reproducers),
26 were invalidated by users.
Applied filters:
WithRepro (
drop)
| Title |
Rank
🛈
|
Repro |
Cause bisect |
Fix bisect |
Count |
Last |
Reported |
|
kernel: page fault trap, code=NUM (3)
|
-1 |
syz, C |
|
|
96 |
114d |
1186d
|
|
uvm_fault: schedclock
|
-1 |
syz |
|
|
11 |
787d |
1156d
|
|
protection_fault: sys_semop
|
-1 |
syz, C |
|
|
373 |
178d |
977d
|
|
witness: lock_object uninitialized: ADDR (3)
|
-1 |
syz, C |
|
|
6417 |
627d |
1310d
|
|
assert "ps->ps_uvncount == NUM" failed in kern_unveil.c (4)
|
-1 |
syz, C |
|
|
12566 |
627d |
982d
|
|
protection_fault: pool_do_put (2)
|
-1 |
syz |
|
|
36 |
814d |
1509d
|
|
panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock (8)
|
2 |
syz, C |
|
|
175 |
899d |
912d
|
|
protection_fault: done_flush (2)
|
-1 |
syz, C |
|
|
55 |
900d |
1087d
|
|
panic: rw_enter: solock locking against myself (2)
|
2 |
syz |
|
|
3 |
1028d |
1225d
|
|
protection_fault: witness_checkorder (2)
|
-1 |
syz, C |
|
|
311 |
1090d |
1205d
|
|
assert "self->ci_proc_pmap == p->p_vmspace->vm_map.pmap" failed in pmap.c
|
-1 |
syz |
|
|
2 |
1153d |
1153d
|
|
uvm_fault: witness_checkorder (3)
|
-1 |
syz, C |
|
|
212 |
1146d |
1400d
|
|
assert "!ISSET(p->p_flag, P_WSLEEP) || p->p_stat == SSTOP" failed in kern_sched.c
|
-1 |
syz |
|
|
81 |
1184d |
1209d
|
|
kernel: page fault trap, code=NUM
|
-1 |
syz |
|
|
1 |
1534d |
1534d
|
|
kernel: protection fSeaBIOS (version NUM.NUM.NUM-google)
|
-1 |
syz |
|
|
1 |
1691d |
1691d
|
|
assert "next != NULL && next->start <= entry->end" failed in uvm_fault.c (2)
|
-1 |
syz |
|
|
2 |
1784d |
1784d
|
|
witness: reversal: lock order data missing (2)
|
-1 |
syz, C |
|
|
173 |
1848d |
1998d
|
|
kernel: protection fault trap, code=NUM (2)
|
-1 |
syz, C |
|
|
16 |
1768d |
1791d
|
|
SYZFAIL: dup2(NUM, kInPipeFd) failed
|
-1 |
syz |
|
|
4 |
1773d |
1791d
|
|
SYZFAIL: clone failed
|
-1 |
syz |
|
|
1 |
2075d |
2075d
|
|
panic (2)
|
-1 |
syz |
|
|
8 |
2157d |
2167d
|
|
witness: reversal: vmmaplk inode (2)
|
-1 |
syz, C |
|
|
46771 |
2196d |
2510d
|
|
witness: reversal: inode netlock
|
-1 |
syz, C |
|
|
6 |
2197d |
2197d
|
|
witness: reversal: netlock inode
|
-1 |
syz, C |
|
|
11 |
2197d |
2197d
|
|
panic: unhandled af (3)
|
2 |
syz |
|
|
7 |
2307d |
2316d
|
|
panic.go:LINE +0x72 (7)
|
-1 |
syz |
|
|
3 |
2276d |
2278d
|
|
no output from test machine (4)
|
-1 |
syz |
|
|
14713 |
2294d |
2301d
|
|
no output from test machine (2)
|
-1 |
syz, C |
|
|
89865 |
2316d |
2368d
|
|
uvm_fault: memcpy (2)
|
-1 |
syz |
|
|
2168 |
2361d |
2609d
|
|
uvm_fault returns 14, GPA=ADDR
|
-1 |
syz, C |
|
|
2 |
2395d |
2395d
|
|
kernel: double fault trap, code=0 (2)
|
-1 |
syz |
|
|
2 |
2558d |
2558d
|
|
uvm_fault: rtable_satoplen (3)
|
-1 |
syz |
|
|
237 |
2566d |
2609d
|
|
witness: reversal: inode fdlock
|
-1 |
syz, C |
|
|
523 |
2624d |
2838d
|
|
panic: fifo_badop called
|
2 |
syz, C |
|
|
8841 |
2564d |
2898d
|
|
panic: Data modified on freelist: word 5 of object ADDR size 0x100 previous type devbuf (0xd != ADDR)
|
2 |
syz |
|
|
7 |
2577d |
2607d
|
|
uvm_fault: pmap_enter
|
-1 |
syz |
|
|
3 |
2842d |
2848d
|
|
panic: vput: v_writecount != 0
|
2 |
syz, C |
|
|
2 |
2661d |
2661d
|
|
panic: bad dir
|
2 |
syz, C |
|
|
1390 |
2733d |
2734d
|
|
lost connection to test machine
|
-1 |
syz, C |
|
|
276 |
2870d |
2943d
|