Instances [tested repos]:
Name Last active Uptime Corpus Coverage 🛈 Crashes Execs Kernel build syzkaller build Bugs
Commit Config Freshness Status Commit Freshness Status All Only
ci-openbsd-kasan now 1d03h 6943 43695 1398 507025 e6ac069a7f53 .config 1d03h 1e72964b 2d19h all only
ci-openbsd-main now 5h57m 8630 48041 1575 863860 1a498b6f2b58 .config 9h30m 1e72964b 2d19h all only
ci-openbsd-multicore now 5h41m 8436 49069 1609 817948 1a498b6f2b58 .config 9h30m 1e72964b 2d19h all only
ci-openbsd-setuid now 6h06m 4558 30293 1848 528844 1a498b6f2b58 .config 9h30m 1e72964b 2d19h all only
Extra filters: [With Repro]
upstream (174) 🔗
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Last activity
panic: free: non-malloced addr 0x2000 type ip_moptions 2 1 1h38m 1h38m 1h38m
uvm_fault: dt_ioctl_record_stop (4) -1 1 6h34m 6h33m 6h33m
uvm_fault: mtx_enter (2) -1 2 2d21h 3d02h 3d02h
panic: kernel diagnostic assertion "(p->pfik_flagrefs == NUM) || (p->pfik_flagrefs == NUM)" failed 2 1 4d00h 4d00h 4d00h
uvm_fault: _rb_insert -1 1 4d23h 4d23h 4d23h
KASAN: invalid memory access in knote_processfork -1 3 5d15h 5d22h 5d22h
protection_fault: rtable_match -1 1 7d03h 7d03h 7d03h
panic: kernel diagnostic assertion "map->limit == rtmap_limit" fai 2 1 7d16h 7d16h 7d16h
KASAN: invalid memory access in pf_remove_if_empty_ruleset -1 4 1d17h 8d05h 8d05h
assert "rdomain == rtable_l2(rdomain)" failed in route.c (4) -1 1 8d09h 8d09h 8d09h
uvm_fault: kpageflttrap -1 4 4d21h 8d21h 8d21h
uvm_fault: knote_processfork -1 7 5d15h 8d23h 8d23h
uvm_fault: upageflttrap -1 13 1h33m 9d05h 9d05h
uvm_fault: rtable_add -1 1 9d07h 9d07h 9d07h
uvm_fault: pmap_page_remove (8) -1 1 9d10h 9d10h 9d10h
protection_fault: pool_do_put (3) -1 1 10d 10d 10d
panic: free: unaligned addr ADDR, size NUM, type ip_moptions, mask NUM 2 1 13d 13d 13d
panic: ffs_blkfree: freeing free frag (2) 2 1 15d 15d 15d
protection_fault: ifiq_enqueue_qlim -1 1 15d 15d 15d
uvm_fault: mld6_fasttimo -1 1 17d 17d 17d
uvm_fault: ip_freemoptions -1 2 7d12h 18d 18d
uvm_fault: amap_copy -1 1 20d 20d 20d
malloc: free list modified: temp -1 1 21d 21d 21d
uvm_fault: ifiq_enqueue_qlim -1 2 20d 22d 22d
SYZFAIL: tun: re (2) -1 1 24d 24d 24d
panic: unhandled af NUM 2 5 11d 24d 24d
assert "refs != ~NUM" failed in multico -1 1 25d 25d 25d
uvm_fault: device_lookup -1 1 26d 26d 26d
protection_fault: ip6_freemoptions -1 1 26d 26d 26d
assert "bpfilter_lookup(unit) == NULL" failed in bpf.c (2) -1 3 7d17h 26d 26d
witness: lock_object uninitialized: ADDR (6) -1 4 24d 26d 26d
panic: kernel diagnostic assertion "refs != ~NUM" failed: file 2 1 27d 27d 27d
assert "refs != ~NUM" failed in kern -1 1 27d 27d 27d
assert "!ISSET(rt->rt_flags, RTF_LOCAL)" failed in nd6.c (4) -1 2 1d12h 29d 29d
uvm_fault: sys_msgget -1 1 29d 29d 29d
uvm_fault: in_pcbhash_insert -1 4 4d18h 30d 30d
uvm_fault: rtable_exists -1 8 2d22h 31d 31d
uvm_fault: rtable_match -1 7 3d16h 32d 32d
uvm_fault: uvm_fault_upper_lookup -1 3 26d 32d 32d
uvm_fault: shm_deallocate_segment -1 5 6d21h 33d 33d
uvm_fault: ip6_freemoptions -1 6 1d17h 34d 34d
uvm_fault: sysctl_sysvipc -1 13 2d20h 34d 34d
protection_fault: uvm_fault_upper_lookup -1 1 35d 35d 35d
panic: free: size too large NUM > NUM (ADDR) type rtable 2 15 1d03h 35d 35d
protection_fault: amap_lookups -1 3 28d 35d 35d
protection_fault: free -1 1 36d 36d 36d
uvm_fault: dtioctl -1 7 3d03h 36d 36d
uvm_fault: rtable_l2 -1 25 1d00h 36d 36d
KASAN: invalid memory access in rw_status -1 2 31d 37d 36d
panic: free: non-malloced addr ADDR type ip_moptions 2 1 37d 37d 37d
uvm_fault: amap_lookups -1 57 15d 37d 37d
protection_fault: malloc (3) -1 1354 44m 37d 37d
KASAN: invalid memory access in witness_checkorder -1 5 23d 37d 36d
KASAN: invalid memory access in __mp_lock -1 2 37d 39d 39d
KASAN: invalid memory access in checkalias -1 420 23d 40d 40d
SYZFAIL: dup2(NUM, kInPipeFd) failed (4) -1 1 44d 44d 44d
panic: init 2 2 10d 48d 48d
SYZFAIL: mmap of input file failed (2) -1 1 49d 49d 49d
witness: reversal: fdlock inode (3) -1 4 21h29m 49d 49d
witness: reversal: sbufrcv inode (4) -1 1 50d 50d 50d
assert "pr->ps_threadcnt == NUM" failed in kern_exit.c (3) -1 2 27d 52d 52d
panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock (9) 2 7 16d 54d 54d
uvm_fault: sys_shmat (3) -1 19 3d17h 56d 56d
uvm_fault: bpfioctl (6) -1 2 34d 57d 57d
panic: in 2 2 59d 60d 60d
panic: i 2 3 34d 61d 61d
panic: init di 2 1 61d 61d 61d
panic: init died (signal 2 1 62d 62d 62d
panic: init died (signal NUM 2 1 62d 62d 62d
assert "map->limit == rtmap_limit" failed in ker -1 1 63d 63d 63d
assert "map->limit == rtmap_limit" failed in rOtNa bSlYe.cS -1 1 63d 63d 63d
kernel:I Tp 0g ea faStopped at savectx+0xae: movl $NUM,%gs:0x688 -1 1 68d 68d 68d
panic: kernel diagnostic assertion "ISSET(p->p_flag, P_SUSPSIG | P_SUSPSINGLE) == NUM" failed: file "/syzkaller/managers 2 1 68d 68d 68d
kernel: NUM ageStopped at savectx+0xae: movl $NUM,%gs:0x688 -1 1 70d 70d 70d
assert "d->bd_in_uiomove == NUM" failed in bpf.c (5) -1 1 71d 71d 71d
panic: uvm_fault(ADDR, 0x47, NUM, NUM) -> e 2 1 73d 73d 73d
panic: (5) 2 3 7d00h 75d 75d
panic: init died (signal NUM, 2 2 49d 76d 76d
assert "rn != NULL" failed in pipex.c (3) -1 5 28d 76d 76d
panic: vputonfreelist: lock count is not zero (4) 2 1 79d 79d 79d
protection_fault: __x86_indirect_thunk_r11 (5) -1 1 79d 79d 79d
panic: amap_pp_adjref: negative reference count (3) 2 19 1d04h 81d 81d
uvm_fault: ufs_dirremove -1 1 84d 84d 84d
panic: init died (signal NUM, e 2 1 85d 85d 85d
uvm_fault: ufs_readdir -1 186 10d 85d 85d
kernel:NUM -1 1 86d 86d 86d
panic: kernel diagnostic assertion "pg->wire_count != NUM" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uv 2 2 67d 87d 87d
witness: reversal: sbufsnd inode (4) -1 14 7d01h 88d 88d
SYZFAIL: too much cover (2) -1 1 89d 89d 89d
panic: thread NUM p_stat is NUM (4) 2 3 89d 91d 91d
uvm_fault: softclock (6) -1 2 89d 92d 92d
uvm_fault: remrunqueue -1 3 53d 100d 100d
assert "(p->pfik_flagrefs == NUM) || (p->pfik_flagrefs == NUM)" failed in pf_if.c -1 24 16d 101d 101d
witness: reversal: pf_lock netlock (4) -1 116 2h41m 102d 102d
panic: unhandled af (6) 2 149 11h27m 106d 106d
SYZFAIL: repeatedly failed to execute the program (3) -1 3 31d 112d 112d
assert "ISSET(p->p_flag, P_SUSPSIG | P_SUSPSINGLE) == NUM" failed in kern_sig.c -1 30 14h01m 112d 112d
panic: kmmaplk rwlock ADDR: enter read deadlock 2 14 48d 137d 137d
panic: ffs2_balloc: unwind failed (4) 2 21 27d 138d 138d
uvm_fault: ffs_fragextend (3) -1 3 87d 138d 138d
uvm_fault: ufs_direnter (6) -1 10 58d 141d 141d
panic: kerne 2 3 45d 143d 143d
panic: ffs_valloc: dup alloc (5) 2 184 2d10h 144d 144d
uvm_fault: ffs_nodealloccg (4) -1 6 86d 144d 144d
protection_fault: pf_anchor_global_RB_REMOVE (3) -1 29 4d08h 145d 145d
uvm_fault: pvclock_get (2) -1 54 32d 145d 145d
uvm_fault: ffs_freefile (3) -1 5 12d 145d 145d
panic: init died (signal NUM, exit NUM) (2) 2 1988 34m 145d 145d
uvm_fault: kcov_remote_enter (5) -1 596 14d 146d 146d
uvm_fault: ffs2_balloc (7) -1 392 12d 146d 146d
uvm_fault: ufsdirhash_lookup -1 5 3d18h 146d 146d
SYZFAIL: SIGFPE -1 1318 9h24m 148d 148d
SYZFAIL: cover mmap failed -1 864 3h31m 148d 148d
SYZFAIL: child failed -1 9382 28m 148d 148d
SYZFAIL: SIGILL -1 1321 1h54m 148d 148d
assert "atomic_load_int(&fdp->fd_nuserevents) == NUM" failed in kern_descrip.c (2) -1 7 32d 159d 159d
assert "pg->wire_count != NUM" failed in uvm_page.c -1 9141 12h14m 240d 240d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (26) -1 832 14d 261d 261d
kernel: protection fault trap, code=NUM (9) -1 14 2d16h 265d 265d
SYZFAIL: SIGSEGV (2) -1 1380 2h58m 272d 272d
assert "cifp != NULL" failed in route.c (5) -1 15 31d 398d 398d
SYZFAIL: can't reallocate -1 52 22d 479d 479d
panic: uvm_fault_unwire_locked: address not in map (5) 2 168 3d02h 505d 505d
panic: chgproccnt: procs < NUM 2 23 27d 544d 544d
SYZFAIL: coverage filter is full (3) -1 746787 1d22h 547d 547d
protection_fault: bpfdetach -1 86 2d07h 549d 549d
uvm_fault: x86_ipi_db (9) -1 8199 9d23h 551d 551d
SYZFAIL: SIGBUS (2) -1 2829 1h51m 553d 553d
assert "sc->sc_dev == NUM" failed in if_tun.c (6) -1 122 31d 556d 556d
assert "refs != ~NUM" failed in kern_synch.c -1 1253 16h55m 557d 557d
SYZFAIL: posix_spawnp failed -1 syz 6100 2h46m 559d 21d
assert "map->limit == rtmap_limit" failed in rtable.c (2) -1 517 3d22h 559d 559d
uvm_fault: proc_trampoline (2) -1 3492 4d07h 559d 559d
protection_fault: witness_checkorder (5) -1 40 3d14h 559d 559d
uvm_fault: arp_rtrequest (3) -1 480 9h02m 560d 560d
pool: free list modified: shmpl (6) -1 925 18d 561d 561d
uvm_fault: db_enter (6) -1 641 13d 562d 562d
can't ssh into the instance (2) -1 35642 8d16h 562d 562d
suppressed report (2) -1 20173 14m 562d 562d
panic: missing alias (6) 2 1493 6d03h 562d 562d
SYZFAIL: failed to recv rpc (4) -1 4346 9m 562d 562d
panic: trap type NUM, code=NUM, pc=ADDR (3) 2 4806 5h00m 562d 562d
corrupted report (7) -1 61689 3h11m 562d 562d
witness: reversal: lock order data missing (5) -1 231161 now 562d 562d
SYZFAIL: ioctl remote attach failed (6) -1 80290 9m 562d 562d
SYZFAIL: failed to mkdtemp (2) -1 308283 now 562d 562d
SYZFAIL: failed to send rpc (2) -1 37115 37m 562d 562d
SYZFAIL: tun_id out of range (4) -1 4053821 now 562d 562d
SYZFAIL: failed to mkdir (2) -1 53808 18m 562d 562d
SYZFAIL: pipe failed -1 7808 4d19h 766d 766d
protection_fault: lf_advlock (4) -1 syz, C 66 3d02h 884d 884d
uvm_fault: ktrops (2) -1 syz, C 609 3h31m 1056d 1056d
uvm_fault: schedclock -1 syz 11 713d 1082d 905d
kernel: page fault trap, code=NUM (3) -1 syz, C 96 40d 1112d 869d
malloc: free list modified: free (4) -1 syz, C 42 12d 1133d 1133d
uvm_fault: hardclock (5) -1 syz 4 1113d 1265d 1265d
panic: ufsdirhash_lookup: bad offset in hash array (3) 2 syz, C 107 6d22h 1276d 982d
uvm_fault: memcpy (5) -1 syz, C 112 41d 1411d 1411d
assert "uvn->u_obj.uo_refs == NUM" failed in uvm_vnode.c (2) -1 syz 2 1415d 1415d 1415d
panic: pmap_unwire: invalid PDE 2 syz 6 826d 1469d 1411d
no output from test machine (8) -1 syz, C 908436 6m 1478d 1475d
uvm_fault: ffs_indirtrunc -1 syz, C 43 13d 1522d 1522d
witness: reversal: vmmaplk inode (3) -1 syz, C 1061 57d 1554d 1505d
SYZFATAL: executor NUM failed NUM times: executor NUM: exit status NUM -1 syz 175427 6d19h 1577d 1577d
panic: bad dir (3) 2 syz, C 223 76d 1583d 1411d
uvm_fault: ufs_lookup -1 syz, C 746 13d 1678d 1031d
kernel: double fault trap, code=NUM (2) -1 syz, C 41 89d 1679d 1630d
protection_fault: ktrops -1 syz, C 259 739d 1688d 1668d
protection_fault: sblock -1 syz 38 1512d 1692d 1692d
uvm_fault: fifo_write (2) -1 syz, C 3430 714d 1700d 1384d
SYZFAIL: tun: read failed -1 syz 589555 12m 1717d 1685d
SYZFAIL: command failed -1 syz 15838 56d 2005d 1687d
panic: ufs_rename: lost dir entry 2 syz, C 148 6d21h 2379d 1617d
lost connection to test machine (2) -1 1698811 now 2795d never