syzbot

 sign-in | mailing list | source | docs
🐞 Open [173]
🐞 Fixed [299]
🐞 Invalid [968]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

Instances [tested repos]:
Name Last active Uptime Corpus Coverage 🛈 Crashes Execs Kernel build syzkaller build Bugs
Commit Config Freshness Status Commit Freshness Status All Only
ci-openbsd-multicore 12d broken dca435757bf3 .config 13d 018ebef2 24d failing all only
Applied filters: Manager=ci-openbsd-multicore (drop)
upstream (136) 🔗
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Last activity
panic: trap type NUM, WAcRoNdIeN=G: 0SPL, N OpTc =fLOffWEfRfEfDff 8O1Ne S6YSC3f8b 2 1 14d 14d 14d
pool: cpu free list modified: mbufpl (5) -1 1 14d 14d 14d
panic: WARtrNap ItNyGp:e S4P,L coNOTd eLOW=E0R,E pDc= fOfNf fSYSffCALfLf NUM e03 1e9EbX 2 1 15d 15d 15d
panic: trap type NUM, code=NUM, pc=fffWfAfRfNffI8N2Gb: fS6PLb fbNO 2 1 18d 18d 18d
SYZFAIL: open of /dev/kcov failed (3) -1 1 21d 21d 21d
assert "rdomain == rtable_l2(rdomain)" failed in route.c (3) -1 1 23d 23d 23d
pool: free list modified: tcpcb (2) -1 1 26d 26d 26d
uvm_fault: pool_gc_pages (3) -1 1 26d 26d 26d
uvm_fault: fill_kproc -1 1 28d 28d 28d
panic: trap type NUM, code=NUM, pc=bccb9 2 1 29d 29d 29d
witness: lock_object uninitialized: ADDR (5) -1 1 31d 31d 31d
witness: reversal: sbufrcv inode (3) -1 13 18d 36d 36d
uvm_fault: done_flush -1 1 41d 41d 41d
panic: ffs_blkfree: bad size (6) 2 2 28d 49d 49d
assert "bpfilter_lookup(unit) == NULL" failed in bpf.c -1 1 49d 49d 49d
witness: shared lock of (rwlock) maddr while exclusively lo -1 1 53d 53d 53d
witness: shared lock of (rwlock) pmaddr while exclausively locked -1 1 53d 53d 53d
panic: maddr rwlock 0x 2 1 53d 53d 53d
witness: shared lpaock of (rwlock) mnaddr while excluisively locked -1 1 54d 54d 54d
witness: shared lock of (rwlock) mpaddr while exclusively locked -1 1 54d 54d 54d
panic: pool_do_get: pfstkey: page empty (2) 2 1 60d 60d 60d
pool: cpu free list modified: mtagpl -1 1 62d 62d 62d
pool: cpu free list modified: pvpl -1 1 63d 63d 63d
uvm_fault: km_free (3) -1 1 64d 64d 64d
assert "nlevel >= IPL_NONE" failed in intr.c (4) -1 3 36d 64d 64d
assert "pg->wire_count != NUM" failed in uvm_page.c -1 8982 12d 66d 66d
panic: vref used where vget required (5) 2 2 57d 68d 68d
panic: vwakeup: neg numoutput (2) 2 1 68d 68d 68d
panic: kernel diagnostic assertion "pg->wire_count == NUM" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uv 2 2 66d 69d 69d
panic: amap_wipeout: corrupt amap (2) 2 1 70d 70d 70d
assert "(pg->pg_flags & (PQ_INACTIVE|PQ_ACTIVE)) == NUM" failed in NIuvNmG_:p aSgeP.Lc -1 1 70d 70d 70d
assert "dupe == NULL" failed in uvm_pageW.cA -1 1 70d 70d 70d
panic: kernel diaWgARnostNiIcN aGs:s SPeLr tNOioTn L"O(WpgER-E>D pONg SY_fSlCaAgLs L& NUM NUM (P16Q6_3I30NACT501IV6E E| 2 1 72d 72d 72d
panic: kernel diagnostic assertion "(pg->pg_flags & (PQ_INACTIVE|PQ_ACTIVE)) == NUM" failed: file "/syzkaller/managers/m 2 6 69d 76d 76d
assert "(pg->pg_flags & (PQ_INACTIVE|PQ_ACTIVE)) == NUM" failed in NOuvT mL_OpageW.EcR -1 1 77d 77d 77d
assert "bp->b_data != NULL" failed in vfs_biomem.c (6) -1 6 15d 79d 79d
assert "swap" failed in uvm_pager.c -1 1 83d 83d 83d
panic: pmap_remove_pte: unmanaged page marked PG_PVLIST: va ADDR, opte ADDR (2) 2 1 84d 84d 84d
assert "pg->wire_count == NUM" failed in vfs_biomem.c (6) -1 1 86d 86d 86d
panic: pmap_do_remove: unmanaged PTP detected 2 2 50d 90d 90d
kernel: protection fault trap, code=NUM (9) -1 3 14d 91d 91d
assert "!pmap_is_ept(pmap)" failed in pmap.c -1 2 41d 91d 91d
assert "ISSET(bp->b_flags, B_BC)" failed in vfs_bio.c (2) -1 2 15d 94d 94d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte 0x3efff (2) 2 2 47d 94d 94d
pool: free list modified: pdppl (5) -1 4 33d 95d 95d
SYZFAIL: SIGSEGV (2) -1 10 14d 98d 98d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte ADDR (5) 2 25 13d 100d 100d
protection_fault: pmap_clear_attrs -1 3 16d 100d 100d
protection_fault: done_flush (4) -1 914 12d 102d 102d
panic: pmap_remove_ptes: managed page without PG_PVLIST: va ADDR, opte ADDR (3) 2 4 13d 104d 104d
uvm_fault: pmap_page_remove (7) -1 10 17d 107d 107d
assert "dupe == NULL" failed in uvm_page.c (5) -1 80 13d 110d 110d
witness: reversal: fdlock inode (2) -1 7 36d 125d 125d
uvm_fault: spec_getattr (2) -1 3 49d 139d 139d
SYZFAIL: tun: can't open device (7) -1 200 14d 142d 142d
uvm_fault: uao_detach (2) -1 3 53d 142d 142d
SYZFAIL: dup2(NUM, kInPipeFd) failed (3) -1 155 16d 142d 142d
uvm_fault: sys_shmat (2) -1 6 15d 148d 148d
assert "kd_lookup(kd->kd_unit) == NULL" failed in kcov.c (4) -1 3 31d 151d 151d
uvm_fault: ffs2_balloc (6) -1 10 79d 167d 167d
assert "refs > NUM" failed in kern_synch.c -1 5 17d 170d 170d
uvm_fault: bpfioctl (5) -1 4 38d 194d 194d
uvm_fault: alltraps_kern_meltdown -1 5 49d 200d 200d
panic: softclock: invalid to_clock: -ADDR (3) 2 5 68d 208d 208d
uvm_fault: dt_ioctl_record_stop (2) -1 4368 13d 210d 210d
assert "cifp != NULL" failed in route.c (5) -1 9 18d 224d 224d
protection_fault: icmp_mtudisc_timeout (4) -1 8 22d 225d 225d
witness: reversal: sbufsnd inode (3) -1 39 36d 261d 261d
assert "next != NULL && next->start <= entry->end" failed in uvm_fault.c (5) -1 10 26d 283d 283d
uvm_fault: witness_checkorder (6) -1 79 20d 286d 286d
witness: reversal: &sched_lock &cq->cq_mtx -1 21 28d 287d 287d
assert "uvm_page_owner_locked_p(pg, TRUE)" failed in uvm_page.c (2) -1 8 81d 288d 288d
assert "rn != NULL" failed in pipex.c -1 73 38d 292d 292d
uvm_fault: mtx_enter_try -1 15 88d 296d 296d
SYZFAIL: can't reallocate -1 47 14d 305d 305d
witness: reversal: &cq->cq_mtx &sched_lock -1 122 19d 311d 311d
uvm_fault: mtx_enter -1 199 13d 322d 322d
panic: uvm_fault_unwire_locked: address not in map (5) 2 96 25d 331d 331d
panic: chgproccnt: procs < NUM 2 8 33d 370d 370d
uvm_fault: savectx (3) -1 597 13d 372d 372d
SYZFAIL: repeatedly failed to execute the program (2) -1 24 35d 372d 372d
panic: trap type NUM, code=NUM, pc=NUM (4) 2 20 40d 373d 373d
SYZFAIL: coverage filter is full (3) -1 640708 13d 373d 373d
protection_fault: bpfdetach -1 64 13d 375d 375d
uvm_fault: x86_ipi_db (9) -1 479 13d 377d 377d
SYZFAIL: SIGBUS (2) -1 627 19d 379d 379d
assert "sc->sc_dev == NUM" failed in if_tun.c (6) -1 111 25d 382d 382d
assert "refs != ~NUM" failed in kern_synch.c -1 1088 13d 383d 383d
SYZFAIL: too many calls in output (2) -1 76 14d 384d 384d
SYZFAIL: posix_spawnp failed -1 1390 12d 385d 385d
assert "map->limit == rtmap_limit" failed in rtable.c (2) -1 438 13d 385d 385d
uvm_fault: proc_trampoline (2) -1 427 13d 385d 385d
protection_fault: witness_checkorder (5) -1 17 35d 385d 385d
panic: pledge_namei: ni_pledge (2) 2 13 15d 386d 386d
uvm_fault: arp_rtrequest (3) -1 365 15d 386d 386d
pool: free list modified: shmpl (6) -1 745 13d 387d 387d
uvm_fault: db_enter (6) -1 576 13d 388d 388d
can't ssh into the instance (2) -1 34951 12d 388d 388d
suppressed report (2) -1 15136 13d 388d 388d
panic: missing alias (6) 2 1395 13d 388d 388d
SYZFAIL: failed to recv rpc (4) -1 1526 13d 388d 388d
panic: trap type NUM, code=NUM, pc=ADDR (3) 2 3152 12d 388d 388d
corrupted report (7) -1 10054 12d 388d 388d
witness: reversal: lock order data missing (5) -1 199181 12d 388d 388d
SYZFAIL: ioctl remote attach failed (6) -1 62874 12d 388d 388d
SYZFAIL: failed to mkdtemp (2) -1 85832 12d 388d 388d
SYZFAIL: failed to send rpc (2) -1 27866 12d 388d 388d
SYZFAIL: tun_id out of range (4) -1 2870115 12d 388d 388d
SYZFAIL: failed to mkdir (2) -1 10185 12d 388d 388d
SYZFAIL: too much cover -1 354 15d 557d 557d
SYZFAIL: pipe failed -1 7782 26d 592d 592d
pool: free list modified: rttmr -1 148 38d 707d 707d
protection_fault: lf_advlock (4) -1 C 54 15d 710d 710d
protection_fault: sys_semop -1 C 335 13d 729d 729d
uvm_fault: ktrops (2) -1 C 264 14d 882d 882d
kernel: page fault trap, code=NUM (3) -1 C 92 20d 938d 695d
malloc: free list modified: free (4) -1 C 32 13d 959d 959d
panic: ufsdirhash_lookup: bad offset in hash array (3) 2 C 107 45d 1102d 808d
protection_fault: sys_msgrcv (2) -1 C 166 25d 1233d 989d
uvm_fault: memcpy (5) -1 C 68 37d 1237d 1237d
panic: pmap_unwire: invalid PDE 2 syz 6 652d 1295d 1237d
no output from test machine (8) -1 C 811433 12d 1304d 1300d
uvm_fault: ffs_indirtrunc -1 C 6 146d 1348d 1348d
witness: reversal: vmmaplk inode (3) -1 C 1061 23d 1380d 1331d
SYZFATAL: executor NUM failed NUM times: executor NUM: exit status NUM -1 syz 175427 24d 1403d 1403d
panic: bad dir (3) 2 C 207 15d 1409d 1237d
uvm_fault: ufs_lookup -1 C 99 45d 1504d 857d
kernel: double fault trap, code=NUM (2) -1 C 37 14d 1505d 1456d
protection_fault: ktrops -1 C 259 565d 1514d 1494d
protection_fault: sblock -1 syz 38 1338d 1518d 1518d
uvm_fault: fifo_write (2) -1 C 3430 540d 1526d 1210d
SYZFAIL: tun: read failed -1 syz 545622 12d 1543d 1511d
uvm_fault: memset -1 C 102 52d 1664d 1664d
SYZFAIL: command failed -1 syz 15733 13d 1831d 1513d
panic: ufs_rename: lost dir entry 2 C 143 14d 2205d 1443d
lost connection to test machine (2) -1 895208 12d 2621d never