syzbot

 sign-in | mailing list | source | docs
🐞 Open [150]
🐞 Fixed [270]
🐞 Invalid [679]
Kernel Health Bugs/Month Bug Lifetimes Fuzzing Crashes
💬 Send us feedback

Instances [tested repos]:
Name Last active Uptime Corpus Coverage 🛈 Crashes Execs Kernel build syzkaller build Bugs
Commit Config Freshness Status Commit Freshness Status All Only
ci-openbsd-multicore now 7h55m 7329 44099 132 432301 768408871d94 .config 1d11h 9750182a 1d12h all only
Applied filters: Manager=ci-openbsd-multicore (drop)
upstream (128):
Title Repro Cause bisect Fix bisect Count Last Reported Last activity
panic: malloc: out of space in kmem_map (3) 1 1d02h 1d02h 1d02h
panic: ffs_freefile: freeing free inode (2) 1 2d04h 2d04h 2d04h
uvm_fault: ffs2_balloc (4) 1 4d02h 4d02h 4d02h
panic: trap type NUM, code=NUM, pc=e9509 26 1h24m 4d17h 4d17h
uvm_fault: softclock (5) 1 5d23h 5d23h 5d23h
kernel: protection fault trap, code=NUM (7) 4 4d16h 12d 12d
panic: ffs_valloc: dup alloc (2) 46 15h44m 13d 13d
panic: malloc: allocation too large, type = NUM, size = ADDR (2) 3 14d 16d 16d
SYZFAIL: too much cover 2 2d10h 20d 20d
pool: free list modified: shmpl (5) 4 2d01h 21d 21d
panic: trap type NUM, code=NUM, pc=e9429 27 11d 21d 21d
witness: reversal: sbufsnd inode 3 22d 22d 22d
panic: trap type NUM, code=NUM, pc=e8fb9 3 23d 23d 23d
assert "start >= vm_map_min(map) && end <= vm_map_max(map)" failed in uvm_fault.c 1 25d 25d 25d
protection_fault: reaper 4 2d20h 25d 25d
panic: vpaopni_cg:en keerrinecl_b daidaogpn 1 25d 25d 25d
pool: free list modified: inpcb (3) 1 29d 29d 29d
SYZFAIL: SIGBUS 337 1h08m 31d 31d
witness: reversal: sbufrcv inode 2 30d 31d 31d
protection_fault: done_flush (3) 5 18d 31d 31d
panic: pmap_remove_ptes: managed page without PG_PVLIST: va ADDR, opte ADDR (2) 1 33d 33d 33d
panic: trap type NUM, code=NUM, pc=e8f59 1 33d 33d 33d
panic: pmap_remove_pte: unmanaged page marked PG_PVLIST: va ADDR, opte ADDR 1 37d 37d 37d
uvm_fault: dopselect 1 39d 39d 39d
panic: pr_find_pagehead: pdppl: incorrect page (2) 1 41d 41d 41d
panic: trap type NUM, code=NUM, pc=e88b9 4 40d 43d 43d
panic: curcpu->ci_proc_pmap didn't point to previous pmap 1 43d 43d 43d
uvm_fault: savectx (2) 3 42d 44d 44d
panic: vput: ref cnt (2) 1 45d 45d 45d
panic: trap type NUM, code=NUM, pc=e7069 2 46d 46d 46d
panic: assertwaitok: non-zero mutex count: NUM (2) 81 21h57m 47d 47d
assert "kq->kq_nknotes == NUM" failed in kern_event.c 1 47d 47d 47d
SYZFAIL: posix_spawn failed 24 1d21h 47d 47d
panic: uvm_faulWtARN_IuNGn:w irSeP_Ll oNckOT ed:L OaWdEREdreD OsNs SnYoSCt AiLnL map7 1 49d 49d 49d
panic: pool_do_get: rtentry: page empty 1 54d 54d 54d
SYZFAIL: failed to mkdtemp 14749 6m 54d 54d
SYZFAIL: failed to mkdir 2140 57m 55d 55d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte 0x3edff 1 55d 55d 55d
SYZFAIL: pipe failed 3 3d07h 55d 55d
assert "kn->kn_kq == kq" failed in kern_event.c 1 56d 56d 56d
uvm_fault: vm_terminate 4 18d 56d 56d
SYZFAIL: repeatedly failed to execute the program 1 56d 56d 56d
panic: vput: null vp 1 57d 57d 57d
SYZFAIL: coverage filter is full 383316 10d 58d 57d
witness: denied attempt to set clock forward to ADDR 1 58d 58d 58d
SYZFAIL: SIGSEGV 9 28d 58d 58d
panic: trap type NUM, code=NUM, pc=e6d89 1 59d 59d 59d
SYZFAIL: tun: can't open device (4) 6 1d12h 59d 59d
witness: reversal: lock order data missing (4) 15532 9m 59d 59d
SYZFAIL: ioctl remote attach failed (5) 58 1h49m 59d 59d
SYZFAIL: too many calls in output 36 20h56m 59d 59d
SYZFAIL: failed to send rpc 2478 8m 60d 60d
multicore test error: SYZFAIL: setsid failed 8 60d 60d 60d
multicore test error: SYZFAIL: failed to recv rpc 5162 now 61d 61d
multicore test error: no output from test machine (3) 31 12d 61d 61d
panic: kernel diagnostic assertion "dupe == NULL" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uvm_page.c" 2 43d 74d 74d
pool: free list modified: pmappl 3 17d 103d 103d
can't ssh into the instance 434 1d22h 109d 81d
protection_fault: nd6_timer 8 21d 109d 109d
panic: inconsistent bufpage counts 3 12d 114d 114d
uvm_fault: rw_enter (3) 2 39d 116d 116d
assert "rw_write_held(uobj->vmobjlock)" failed in uvm_vnode.c 3 39d 116d 116d
panic: ffs_blkfree: bad size (4) 5 22d 120d 120d
pool: free list modified: pdppl (4) 7 41d 132d 132d
panic: vrele: ref cnt 4 16d 139d 139d
assert "pmap->pm_type != PMAP_TYPE_EPT" failed in pmap.c (3) 8 13d 140d 140d
assert "!ISSET(rt->rt_flags, RTF_LOCAL)" failed in nd6.c (3) 4 14d 141d 141d
uvm_fault: VOP_LOCK (2) 5 56d 144d 144d
uvm_fault: arp_rtrequest (2) 8 3d19h 144d 144d
pool: cpu free list modified: mbufpl (4) 5 26d 145d 145d
uvm_fault: pool_do_get (3) 2 57d 145d 145d
panic: ifa_update_broadaddr does not support dynamic length (3) 32 1d19h 145d 145d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte 0x3efff 11 14d 145d 145d
panic: vref used where vget required (4) 9 26d 150d 150d
uvm_fault: checkalias 8 25d 151d 151d
uvm_fault: proc_trampoline 4 27d 153d 153d
uvm_fault: witness_checkorder (5) 4 58d 166d 166d
pool: free list modified: rttmr 8 2d06h 170d 170d
protection_fault: lf_advlock (4) C 2 18d 172d 172d
assert "((flags & PGO_LOCKED) != NUM && rw_lock_held(uobj->vmobjlock)) || (flags & PGO_LOCKED) == NUM" failed in uvm_vno (4) 8 2d19h 178d 178d
assert "nlevel >= IPL_NONE" failed in intr.c (2) 27 3h19m 186d 186d
panic: softclock: invalid to_clock: NUM 12 37d 188d 188d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte ADDR (4) 65 15d 188d 188d
panic: softclock: invalid to_clock: -ADDR 19 1d06h 191d 191d
assert "ps->ps_uvncount == NUM" failed in kern_unveil.c (4) C 1294 14m 197d 162d
assert "sc->sc_dev == NUM" failed in if_tun.c (5) 347 2d17h 197d 197d
uvm_fault: db_read_bytes 44 1d13h 200d 200d
assert "cifp != NULL" failed in route.c (3) 83 1d20h 205d 205d
uvm_fault: pool_gc_pages (2) 9 17d 205d 205d
assert "ISSET(bp->b_flags, B_BC)" failed in vfs_bio.c 8 58d 222d 222d
assert "pg->wire_count == NUM" failed in vfs_biomem.c (3) 565 35m 253d 253d
uvm_fault: pmap_page_remove (5) 13 12d 273d 273d
uvm_fault: km_free (2) 10 27d 275d 275d
assert "dupe == NULL" failed in uvm_page.c (4) 209 6d09h 303d 303d
panic: acquiring blockable sleep lock with spinlock or critical section held (rwlock) vmmaplk (3) 69 3h46m 319d 319d
uvm_fault: ktrops (2) C 19 8d21h 344d 344d
uvm_fault: db_enter (5) 168 19h25m 362d 362d
kernel: page fault trap, code=NUM (3) C 66 14d 401d 158d
malloc: free list modified: free (4) C 16 5d01h 422d 421d
panic: trap type NUM, code=NUM, pc=NUM (3) 166 1d17h 452d 452d
witness: lock_object uninitialized: ADDR (3) C 464 10m 525d 383d
panic: ufsdirhash_lookup: bad offset in hash array (3) C 79 4d19h 565d 271d
protection_fault: sys_msgrcv (2) C 31 125d 696d 452d
uvm_fault: memcpy (5) C 6 173d 700d 700d
protection_fault: pool_do_put (2) syz 36 28d 724d 401d
panic: vop_generic_badop (2) 91 3d07h 734d 734d
panic: pmap_unwire: invalid PDE syz 6 114d 758d 699d
no output from test machine (8) C 452685 now 767d 763d
uvm_fault: ffs_indirtrunc C 4 523d 811d 811d
witness: reversal: vmmaplk inode (3) C 704 19h51m 843d 793d
SYZFATAL: executor NUM failed NUM times: executor NUM: exit status NUM syz 175427 2d19h 866d 866d
panic: bad dir (3) C 36 16d 872d 700d
panic: uvm_fault_unwire_locked: address not in map (4) C 246 6h16m 888d 869d
uvm_fault: x86_ipi_db (8) 280 3d02h 931d 931d
uvm_fault: ufs_lookup C 46 1d15h 967d 319d
kernel: double fault trap, code=NUM (2) C 34 24d 967d 919d
panic: trap type NUM, code=NUM, pc=ADDR (2) 420 11h16m 974d 974d
protection_fault: ktrops C 259 28d 977d 957d
protection_fault: sblock syz 38 801d 981d 980d
assert "uvm_page_owner_locked_p(pg)" failed in uvm_page.c 3205 17m 985d 985d
uvm_fault: fifo_write (2) C 3430 2d23h 988d 673d
SYZFAIL: tun: read failed syz 51633 16m 1006d 974d
corrupted report (6) 1780 1h12m 1085d 1085d
uvm_fault: memset C 45 4d10h 1126d 1126d
SYZFAIL: command failed syz 3552 38m 1294d 976d
suppressed report 333017 1h34m 1294d 1283d
panic: ufs_rename: lost dir entry C 77 23h29m 1667d 906d
lost connection to test machine (2) 844094 1h42m 2084d never