Instances [tested repos]:
Name Last active Uptime Corpus Coverage 🛈 Crashes Execs Kernel build syzkaller build Bugs
Commit Config Freshness Status Commit Freshness Status All Only
ci-openbsd-kasan now 1d02h 6968 44534 1626 390113 eb6d9273e3e5 .config 1d03h 2f52988a 1d20h all only
ci-openbsd-main now 8h13m 8422 47803 1905 538335 dcba0a69dd74 .config 16h41m 2f52988a 1d20h all only
ci-openbsd-multicore now 8h31m 8054 48720 1993 512200 dcba0a69dd74 .config 16h41m 2f52988a 1d20h all only
ci-openbsd-setuid now 8h22m 4558 30359 2217 672542 dcba0a69dd74 .config 16h41m 2f52988a 1d20h all only
Extra filters: [With Repro]
upstream (184) 🔗
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Last activity
panic: acquiring blockable sleep lock with spinlock or critical section held (rwlock) vmmaplk (4) 2 1 1d00h 1d00h 1d00h
KASAN: invalid memory access in mrt6_ioctl -1 1 1d07h 1d07h 1d07h
uvm_fault: ip_setmoptions -1 1 1d20h 1d20h 1d20h
SYZFAIL: cover_unprotect invoked on an unmapped cover_t object -1 11713 now 2d13h 2d13h
kernel: protection fauplatnic : u n h an dl e d a f NUM -1 1 2d20h 2d20h 2d20h
protection_fault: dtioctl -1 1 2d21h 2d21h 2d21h
panic: ffs_blkfree: bad size (7) 2 1 4d12h 4d12h 4d12h
uvm_fault: solock_shared -1 1 5d04h 5d04h 5d04h
uvm_fault: scsi_xs_put -1 1 5d06h 5d06h 5d06h
panic: uvm_faultWAuRnNINe:lSoPck NOT LOdWEREs nN SYSCALL NUM NUM EXIT NUM c 2 1 5d10h 5d10h 5d10h
pool: free list modified: sockpl (4) -1 1 6d21h 6d21h 6d21h
uvm_fault: rtable_clearsource -1 3 15h19m 7d10h 7d10h
uvm_fault: rtable_lookup -1 1 7d13h 7d13h 7d13h
SYZFAIL: too many calls in output (3) -1 1 7d14h 7d14h 7d14h
uvm_fault: wsmouseclose -1 1 7d14h 7d14h 7d14h
malloc: free list modified: UVM -1 3 1d15h 8d15h 8d15h
uvm_fault: ifa_ifwithaddr -1 1 8d19h 8d19h 8d19h
malloc: free list modified: ??? -1 2 6d05h 8d21h 8d21h
panic: free: non-malloced addr 0x2000 type ip_moptions 2 1 10d 10d 10d
uvm_fault: dt_ioctl_record_stop (4) -1 2 8d23h 10d 10d
uvm_fault: mtx_enter (2) -1 3 8d17h 13d 13d
panic: kernel diagnostic assertion "(p->pfik_flagrefs == NUM) || (p->pfik_flagrefs == NUM)" failed 2 1 14d 14d 14d
uvm_fault: _rb_insert -1 1 15d 15d 15d
KASAN: invalid memory access in knote_processfork -1 3 15d 15d 15d
protection_fault: rtable_match -1 1 17d 17d 17d
panic: kernel diagnostic assertion "map->limit == rtmap_limit" fai 2 1 17d 17d 17d
KASAN: invalid memory access in pf_remove_if_empty_ruleset -1 11 3d17h 18d 18d
assert "rdomain == rtable_l2(rdomain)" failed in route.c (4) -1 2 9d04h 18d 18d
uvm_fault: kpageflttrap -1 6 4d06h 18d 18d
uvm_fault: knote_processfork -1 7 15d 19d 19d
uvm_fault: upageflttrap -1 21 2d19h 19d 19d
uvm_fault: rtable_add -1 1 19d 19d 19d
uvm_fault: pmap_page_remove (8) -1 1 19d 19d 19d
protection_fault: pool_do_put (3) -1 1 20d 20d 20d
panic: free: unaligned addr ADDR, size NUM, type ip_moptions, mask NUM 2 1 23d 23d 23d
panic: ffs_blkfree: freeing free frag (2) 2 1 25d 25d 25d
protection_fault: ifiq_enqueue_qlim -1 1 25d 25d 25d
uvm_fault: mld6_fasttimo -1 1 27d 27d 27d
uvm_fault: ip_freemoptions -1 2 17d 28d 28d
uvm_fault: amap_copy -1 1 30d 30d 30d
malloc: free list modified: temp -1 1 31d 31d 31d
uvm_fault: ifiq_enqueue_qlim -1 3 5d14h 32d 32d
SYZFAIL: tun: re (2) -1 1 34d 34d 34d
panic: unhandled af NUM 2 5 21d 35d 35d
assert "refs != ~NUM" failed in multico -1 1 36d 36d 36d
uvm_fault: device_lookup -1 1 36d 36d 36d
protection_fault: ip6_freemoptions -1 1 36d 36d 36d
assert "bpfilter_lookup(unit) == NULL" failed in bpf.c (2) -1 7 2d17h 36d 36d
witness: lock_object uninitialized: ADDR (6) -1 4 34d 37d 37d
panic: kernel diagnostic assertion "refs != ~NUM" failed: file 2 1 37d 37d 37d
assert "refs != ~NUM" failed in kern -1 1 37d 37d 37d
assert "!ISSET(rt->rt_flags, RTF_LOCAL)" failed in nd6.c (4) -1 3 8d20h 39d 39d
uvm_fault: sys_msgget -1 1 40d 40d 40d
uvm_fault: in_pcbhash_insert -1 6 3d15h 40d 40d
uvm_fault: rtable_exists -1 11 5d15h 41d 41d
uvm_fault: rtable_match -1 15 20h02m 42d 42d
uvm_fault: uvm_fault_upper_lookup -1 3 36d 42d 42d
uvm_fault: shm_deallocate_segment -1 6 8d13h 43d 43d
uvm_fault: ip6_freemoptions -1 6 11d 44d 44d
uvm_fault: sysctl_sysvipc -1 13 12d 44d 44d
protection_fault: uvm_fault_upper_lookup -1 1 45d 45d 45d
panic: free: size too large NUM > NUM (ADDR) type rtable 2 23 23h10m 45d 45d
protection_fault: amap_lookups -1 3 38d 45d 45d
protection_fault: free -1 1 46d 46d 46d
uvm_fault: dtioctl -1 13 3d08h 46d 46d
uvm_fault: rtable_l2 -1 61 18h17m 46d 46d
KASAN: invalid memory access in rw_status -1 3 3d05h 47d 46d
panic: free: non-malloced addr ADDR type ip_moptions 2 3 4d23h 47d 47d
uvm_fault: amap_lookups -1 59 4d15h 47d 47d
protection_fault: malloc (3) -1 1990 14m 47d 47d
KASAN: invalid memory access in witness_checkorder -1 5 33d 48d 47d
KASAN: invalid memory access in __mp_lock -1 2 47d 49d 49d
KASAN: invalid memory access in checkalias -1 420 33d 50d 50d
SYZFAIL: dup2(NUM, kInPipeFd) failed (4) -1 1 54d 54d 54d
panic: init 2 2 20d 58d 58d
SYZFAIL: mmap of input file failed (2) -1 1 59d 59d 59d
witness: reversal: fdlock inode (3) -1 4 10d 59d 59d
witness: reversal: sbufrcv inode (4) -1 1 60d 60d 60d
assert "pr->ps_threadcnt == NUM" failed in kern_exit.c (3) -1 2 37d 62d 62d
panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock (9) 2 11 2d21h 64d 64d
uvm_fault: sys_shmat (3) -1 23 2d07h 66d 66d
uvm_fault: bpfioctl (6) -1 2 44d 67d 67d
panic: in 2 2 69d 70d 70d
panic: i 2 3 44d 71d 71d
panic: init di 2 1 71d 71d 71d
panic: init died (signal 2 1 72d 72d 72d
panic: init died (signal NUM 2 1 72d 72d 72d
assert "map->limit == rtmap_limit" failed in ker -1 1 73d 73d 73d
assert "map->limit == rtmap_limit" failed in rOtNa bSlYe.cS -1 1 73d 73d 73d
kernel:I Tp 0g ea faStopped at savectx+0xae: movl $NUM,%gs:0x688 -1 1 78d 78d 78d
panic: kernel diagnostic assertion "ISSET(p->p_flag, P_SUSPSIG | P_SUSPSINGLE) == NUM" failed: file "/syzkaller/managers 2 1 78d 78d 78d
kernel: NUM ageStopped at savectx+0xae: movl $NUM,%gs:0x688 -1 1 81d 81d 81d
assert "d->bd_in_uiomove == NUM" failed in bpf.c (5) -1 1 81d 81d 81d
panic: uvm_fault(ADDR, 0x47, NUM, NUM) -> e 2 1 83d 83d 83d
panic: (5) 2 3 17d 85d 85d
panic: init died (signal NUM, 2 2 59d 86d 86d
assert "rn != NULL" failed in pipex.c (3) -1 5 38d 86d 86d
panic: vputonfreelist: lock count is not zero (4) 2 1 89d 89d 89d
protection_fault: __x86_indirect_thunk_r11 (5) -1 1 89d 89d 89d
panic: amap_pp_adjref: negative reference count (3) 2 29 31m 91d 91d
uvm_fault: ufs_readdir -1 186 20d 95d 95d
panic: kernel diagnostic assertion "pg->wire_count != NUM" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uv 2 2 77d 97d 97d
witness: reversal: sbufsnd inode (4) -1 15 2d21h 98d 98d
uvm_fault: remrunqueue -1 3 63d 110d 110d
assert "(p->pfik_flagrefs == NUM) || (p->pfik_flagrefs == NUM)" failed in pf_if.c -1 26 5d09h 111d 111d
witness: reversal: pf_lock netlock (4) -1 170 11h58m 112d 112d
panic: unhandled af (6) 2 217 3h42m 116d 116d
SYZFAIL: repeatedly failed to execute the program (3) -1 5 3d20h 122d 122d
assert "ISSET(p->p_flag, P_SUSPSIG | P_SUSPSINGLE) == NUM" failed in kern_sig.c -1 31 5d13h 122d 122d
panic: kmmaplk rwlock ADDR: enter read deadlock 2 14 58d 147d 147d
panic: ffs2_balloc: unwind failed (4) 2 21 37d 148d 148d
uvm_fault: ufs_direnter (6) -1 10 68d 151d 151d
panic: kerne 2 3 56d 153d 153d
panic: ffs_valloc: dup alloc (5) 2 194 22h29m 154d 154d
protection_fault: pf_anchor_global_RB_REMOVE (3) -1 29 14d 155d 155d
uvm_fault: pvclock_get (2) -1 54 42d 155d 155d
uvm_fault: ffs_freefile (3) -1 5 22d 155d 155d
panic: init died (signal NUM, exit NUM) (2) 2 2260 12m 155d 155d
uvm_fault: kcov_remote_enter (5) -1 596 24d 156d 156d
uvm_fault: ffs2_balloc (7) -1 392 22d 156d 156d
uvm_fault: ufsdirhash_lookup -1 6 8d00h 156d 156d
SYZFAIL: SIGFPE -1 1395 4h46m 158d 158d
SYZFAIL: cover mmap failed -1 1013 3h31m 158d 158d
SYZFAIL: child failed -1 10240 now 158d 158d
SYZFAIL: SIGILL -1 1411 13h32m 158d 158d
assert "atomic_load_int(&fdp->fd_nuserevents) == NUM" failed in kern_descrip.c (2) -1 7 43d 169d 169d
assert "pg->wire_count != NUM" failed in uvm_page.c -1 9146 1d16h 250d 250d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (26) -1 832 24d 272d 272d
kernel: protection fault trap, code=NUM (9) -1 14 12d 275d 275d
SYZFAIL: SIGSEGV (2) -1 1457 59m 282d 282d
assert "cifp != NULL" failed in route.c (5) -1 16 10d 408d 408d
SYZFAIL: can't reallocate -1 53 3d09h 489d 489d
panic: uvm_fault_unwire_locked: address not in map (5) 2 176 7h26m 515d 515d
panic: chgproccnt: procs < NUM 2 23 37d 554d 554d
SYZFAIL: coverage filter is full (3) -1 750270 9d06h 557d 557d
protection_fault: bpfdetach -1 86 12d 559d 559d
uvm_fault: x86_ipi_db (9) -1 8199 20d 561d 561d
SYZFAIL: SIGBUS (2) -1 2946 5h19m 564d 564d
assert "sc->sc_dev == NUM" failed in if_tun.c (6) -1 125 2h37m 566d 566d
assert "refs != ~NUM" failed in kern_synch.c -1 1260 19h54m 567d 567d
SYZFAIL: posix_spawnp failed -1 syz 7087 23m 569d 32d
assert "map->limit == rtmap_limit" failed in rtable.c (2) -1 523 2d10h 569d 569d
uvm_fault: proc_trampoline (2) -1 3492 14d 569d 569d
protection_fault: witness_checkorder (5) -1 40 13d 569d 569d
uvm_fault: arp_rtrequest (3) -1 486 2d19h 570d 570d
pool: free list modified: shmpl (6) -1 925 28d 571d 571d
uvm_fault: db_enter (6) -1 641 23d 572d 572d
can't ssh into the instance (2) -1 35652 1d15h 572d 572d
suppressed report (2) -1 20512 1h07m 572d 572d
panic: missing alias (6) 2 1494 9d11h 572d 572d
SYZFAIL: failed to recv rpc (4) -1 4464 22m 572d 572d
panic: trap type NUM, code=NUM, pc=ADDR (3) 2 4894 21h16m 572d 572d
corrupted report (7) -1 61756 20m 572d 572d
witness: reversal: lock order data missing (5) -1 233317 27m 573d 573d
SYZFAIL: ioctl remote attach failed (6) -1 81766 now 573d 573d
SYZFAIL: failed to mkdtemp (2) -1 316052 now 573d 573d
SYZFAIL: failed to send rpc (2) -1 37678 19m 573d 573d
SYZFAIL: tun_id out of range (4) -1 4111277 now 573d 573d
SYZFAIL: failed to mkdir (2) -1 54776 15m 573d 573d
SYZFAIL: pipe failed -1 7808 14d 776d 776d
protection_fault: lf_advlock (4) -1 syz, C 67 1d02h 894d 894d
uvm_fault: ktrops (2) -1 syz, C 637 5h38m 1066d 1066d
uvm_fault: schedclock -1 syz 11 723d 1092d 915d
kernel: page fault trap, code=NUM (3) -1 syz, C 96 50d 1122d 879d
malloc: free list modified: free (4) -1 syz, C 44 5d13h 1144d 1143d
uvm_fault: hardclock (5) -1 syz 4 1123d 1275d 1275d
panic: ufsdirhash_lookup: bad offset in hash array (3) 2 syz, C 107 16d 1286d 992d
uvm_fault: memcpy (5) -1 syz, C 112 51d 1421d 1421d
assert "uvn->u_obj.uo_refs == NUM" failed in uvm_vnode.c (2) -1 syz 2 1425d 1425d 1425d
panic: pmap_unwire: invalid PDE 2 syz 6 836d 1479d 1421d
no output from test machine (8) -1 syz, C 913043 now 1488d 1485d
uvm_fault: ffs_indirtrunc -1 syz, C 43 23d 1532d 1532d
witness: reversal: vmmaplk inode (3) -1 syz, C 1061 67d 1564d 1515d
SYZFATAL: executor NUM failed NUM times: executor NUM: exit status NUM -1 syz 175427 2d20h 1587d 1587d
panic: bad dir (3) 2 syz, C 223 86d 1593d 1421d
uvm_fault: ufs_lookup -1 syz, C 746 23d 1689d 1041d
kernel: double fault trap, code=NUM (2) -1 syz, C 41 99d 1689d 1640d
protection_fault: ktrops -1 syz, C 259 750d 1699d 1679d
protection_fault: sblock -1 syz 38 1522d 1702d 1702d
uvm_fault: fifo_write (2) -1 syz, C 3430 724d 1710d 1394d
SYZFAIL: tun: read failed -1 syz 592386 now 1727d 1695d
SYZFAIL: command failed -1 syz 15838 66d 2015d 1697d
panic: ufs_rename: lost dir entry 2 syz, C 148 16d 2389d 1627d
lost connection to test machine (2) -1 1784115 now 2805d never