Instances [tested repos]:
Name Last active Uptime Corpus Coverage 🛈 Crashes Execs Kernel build syzkaller build Bugs
Commit Config Freshness Status Commit Freshness Status All Only
ci-openbsd-kasan now 10h13m 6741 43540 1969 459186 3ca837577e76 .config 4d07h b2734a59 19h05m all only
ci-openbsd-main now 9h44m 7892 46729 1969 543891 896fef95f254 .config 14h42m b2734a59 19h05m all only
ci-openbsd-multicore now 9h28m 7572 47630 2014 503006 896fef95f254 .config 14h42m b2734a59 19h05m all only
ci-openbsd-setuid now 9h35m 4547 30362 2488 648234 896fef95f254 .config 14h42m b2734a59 19h05m all only
Extra filters: [With Repro]
upstream (180) 🔗
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Last activity
SYZFAIL: cover_unprotect invokeddenied attempt to set clock back ADDR seconds -1 1 6h52m 6h51m 6h51m
uvm_fault: art_iter_open -1 1 1d11h 1d11h 1d11h
uvm_fault: pfi_kif_update (2) -1 1 2d10h 2d10h 2d10h
protection_fault: sysctl_doproc (3) -1 1 2d16h 2d16h 2d16h
uvm_fault: pciioctl -1 1 2d16h 2d16h 2d16h
protection_fault: rtable_l2 -1 1 5d14h 5d14h 5d14h
uvm_fault: witness_checkorder (7) -1 1 6d15h 6d15h 6d15h
assert "gkif != NULL" failed in pf_if.c -1 1 13d 13d 13d
panic: free: non-malloced addr ADDR type ip_moptions (2) 2 2 13d 14d 14d
SYZFAIL: too much cover (3) -1 1 14d 14d 14d
panic: kernel diagnostic assertion "pg->wire_count != NUM" failed: file "/syzkaller/managers/setuid/kernel/sys/uvm/uvm_p (2) 2 1 15d 15d 15d
uvm_fault: ip6_freemoptions (2) -1 2 17h18m 16d 16d
uvm_fault: in_ifdetach -1 1 18d 18d 18d
KASAN: invalid memory access in in_ifdetach -1 5 15d 18d 18d
SYZFAIL: mmap of output file failed (2) -1 1 18d 18d 18d
assert "info->rti_ifa->ifa_ifp != NULL" failed in route.c (3) -1 1 19d 19d 19d
uvm_fault: rtable_walk -1 2 11d 22d 22d
panic: free: size too small NUM <= NUM / NUM (ADDR) type rtable 2 4 1d11h 23d 23d
SYZFAIL: bad allocate request -1 3 16d 25d 25d
panic: free: non-malloced addr 0x3000 type ip_moptions 2 1 25d 25d 25d
uvm_fault: if_delgroup -1 1 26d 26d 26d
uvm_fault: uid_find -1 1 26d 26d 26d
uvm_fault: pfi_xcommit -1 2 6d02h 26d 26d
uvm_fault: wsmouseopen -1 2 17d 26d 26d
assert "(dirblock < dh->dh_nblk && dh->dh_blkfree[dirblock] >= (((slotneeded) + ((NUM) - NUM)) / (NUM)))" failed in ufs_ -1 4 12h19m 27d 27d
uvm_fault: malloc -1 10 45m 30d 30d
assert "kd_lookup(kd->kd_unit) == NULL" failed in kcov.c (6) -1 1 32d 32d 32d
SYZFAIL: cover_u -1 4 2d07h 34d 34d
uvm_fault: udv_detach -1 1 34d 34d 34d
malloc: free list modified: proc (2) -1 1 35d 35d 35d
SYZFAIL: cover_unprotect invoked -1 2 1d01h 35d 35d
malloc: free list modified: vnodes -1 1 36d 36d 36d
uvm_fault: rtable_getsource -1 1 38d 38d 38d
uvm_fault: ufsdirhash_add -1 2 11h03m 39d 39d
panic: kernel diagnostic assertion "map->limit == 2 1 39d 39d 39d
panic: acquiring blockable sleep lock with spinlock or critical section held (rwlock) vmmaplk (4) 2 3 18d 41d 41d
uvm_fault: ip_setmoptions -1 1 41d 41d 41d
SYZFAIL: cover_unprotect invoked on an unmapped cover_t object -1 192164 now 42d 42d
kernel: protection fauplatnic : u n h an dl e d a f NUM -1 1 42d 42d 42d
protection_fault: dtioctl -1 1 42d 42d 42d
panic: ffs_blkfree: bad size (7) 2 1 44d 44d 44d
uvm_fault: solock_shared -1 1 45d 45d 45d
uvm_fault: scsi_xs_put -1 1 45d 45d 45d
panic: uvm_faultWAuRnNINe:lSoPck NOT LOdWEREs nN SYSCALL NUM NUM EXIT NUM c 2 1 45d 45d 45d
pool: free list modified: sockpl (4) -1 1 46d 46d 46d
uvm_fault: rtable_clearsource -1 7 23d 47d 47d
uvm_fault: rtable_lookup -1 2 37d 47d 47d
SYZFAIL: too many calls in output (3) -1 10 15d 47d 47d
uvm_fault: wsmouseclose -1 1 47d 47d 47d
malloc: free list modified: UVM -1 6 23d 48d 48d
uvm_fault: ifa_ifwithaddr -1 1 48d 48d 48d
malloc: free list modified: ??? -1 5 21d 48d 48d
panic: free: non-malloced addr 0x2000 type ip_moptions 2 1 50d 50d 50d
uvm_fault: dt_ioctl_record_stop (4) -1 3 4d11h 50d 50d
uvm_fault: mtx_enter (2) -1 5 3d03h 53d 53d
panic: kernel diagnostic assertion "(p->pfik_flagrefs == NUM) || (p->pfik_flagrefs == NUM)" failed 2 1 54d 54d 54d
uvm_fault: _rb_insert -1 1 55d 55d 55d
protection_fault: rtable_match -1 1 57d 57d 57d
panic: kernel diagnostic assertion "map->limit == rtmap_limit" fai 2 1 57d 57d 57d
assert "rdomain == rtable_l2(rdomain)" failed in route.c (4) -1 3 27d 58d 58d
uvm_fault: kpageflttrap -1 10 5d04h 59d 59d
uvm_fault: knote_processfork -1 40 23d 59d 59d
uvm_fault: upageflttrap -1 26 8d18h 59d 59d
uvm_fault: rtable_add -1 1 59d 59d 59d
uvm_fault: pmap_page_remove (8) -1 1 59d 59d 59d
protection_fault: pool_do_put (3) -1 1 60d 60d 60d
panic: free: unaligned addr ADDR, size NUM, type ip_moptions, mask NUM 2 1 63d 63d 63d
panic: ffs_blkfree: freeing free frag (2) 2 1 65d 65d 65d
protection_fault: ifiq_enqueue_qlim -1 1 65d 65d 65d
uvm_fault: ip_freemoptions -1 3 13h31m 68d 68d
uvm_fault: amap_copy -1 1 70d 70d 70d
malloc: free list modified: temp -1 5 3d12h 71d 71d
uvm_fault: ifiq_enqueue_qlim -1 4 9d23h 72d 72d
SYZFAIL: tun: re (2) -1 2 26d 74d 74d
panic: unhandled af NUM 2 6 12h37m 75d 75d
assert "refs != ~NUM" failed in multico -1 1 76d 76d 76d
uvm_fault: device_lookup -1 2 27d 76d 76d
protection_fault: ip6_freemoptions -1 1 76d 76d 76d
assert "bpfilter_lookup(unit) == NULL" failed in bpf.c (2) -1 7 42d 76d 76d
witness: lock_object uninitialized: ADDR (6) -1 7 16h28m 77d 77d
panic: kernel diagnostic assertion "refs != ~NUM" failed: file 2 2 30d 77d 77d
assert "refs != ~NUM" failed in kern -1 1 77d 77d 77d
assert "!ISSET(rt->rt_flags, RTF_LOCAL)" failed in nd6.c (4) -1 3 48d 79d 79d
uvm_fault: sys_msgget -1 1 80d 80d 80d
uvm_fault: in_pcbhash_insert -1 8 3d09h 80d 80d
uvm_fault: rtable_exists -1 21 6d10h 81d 81d
uvm_fault: rtable_match -1 28 5d09h 82d 82d
uvm_fault: uvm_fault_upper_lookup -1 3 76d 82d 82d
uvm_fault: shm_deallocate_segment -1 8 6d04h 84d 84d
uvm_fault: sysctl_sysvipc -1 17 18d 84d 84d
protection_fault: uvm_fault_upper_lookup -1 1 85d 85d 85d
panic: free: size too large NUM > NUM (ADDR) type rtable 2 63 1h28m 85d 85d
protection_fault: amap_lookups -1 3 78d 86d 86d
protection_fault: free -1 1 86d 86d 86d
uvm_fault: dtioctl -1 17 1d05h 86d 86d
uvm_fault: rtable_l2 -1 85 16h53m 86d 86d
KASAN: invalid memory access in rw_status -1 4 34d 87d 86d
uvm_fault: amap_lookups -1 65 2d05h 87d 87d
protection_fault: malloc (3) -1 3449 6m 87d 87d
KASAN: invalid memory access in witness_checkorder -1 5 73d 88d 87d
KASAN: invalid memory access in __mp_lock -1 2 87d 89d 89d
panic: init 2 2 60d 98d 98d
witness: reversal: fdlock inode (3) -1 4 51d 99d 99d
assert "pr->ps_threadcnt == NUM" failed in kern_exit.c (3) -1 2 77d 102d 102d
panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock (9) 2 15 7d19h 104d 104d
uvm_fault: sys_shmat (3) -1 40 11h44m 106d 106d
uvm_fault: bpfioctl (6) -1 2 84d 107d 107d
panic: i 2 3 84d 111d 111d
panic: (5) 2 4 26d 125d 125d
assert "rn != NULL" failed in pipex.c (3) -1 5 78d 126d 126d
panic: amap_pp_adjref: negative reference count (3) 2 46 14h44m 131d 131d
witness: reversal: sbufsnd inode (4) -1 16 37d 138d 138d
assert "(p->pfik_flagrefs == NUM) || (p->pfik_flagrefs == NUM)" failed in pf_if.c -1 27 6h32m 151d 151d
witness: reversal: pf_lock netlock (4) -1 367 9h00m 152d 152d
panic: unhandled af (6) 2 299 11h29m 156d 156d
SYZFAIL: repeatedly failed to execute the program (3) -1 7 6d09h 162d 162d
assert "ISSET(p->p_flag, P_SUSPSIG | P_SUSPSINGLE) == NUM" failed in kern_sig.c -1 45 18h08m 162d 162d
panic: ffs_valloc: dup alloc (5) 2 303 20m 194d 194d
protection_fault: pf_anchor_global_RB_REMOVE (3) -1 29 54d 195d 195d
uvm_fault: ffs_freefile (3) -1 5 62d 195d 195d
panic: init died (signal NUM, exit NUM) (2) 2 3373 now 196d 196d
uvm_fault: ufsdirhash_lookup -1 10 12h33m 196d 196d
SYZFAIL: SIGFPE -1 1625 14h47m 198d 198d
SYZFAIL: cover mmap failed -1 1355 1h50m 198d 198d
SYZFAIL: child failed -1 16420 16m 198d 198d
SYZFAIL: SIGILL -1 1666 4h56m 198d 198d
assert "atomic_load_int(&fdp->fd_nuserevents) == NUM" failed in kern_descrip.c (2) -1 7 83d 209d 209d
assert "pg->wire_count != NUM" failed in uvm_page.c -1 9168 1d03h 290d 290d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (26) -1 848 14d 312d 312d
kernel: protection fault trap, code=NUM (9) -1 16 1d09h 315d 315d
SYZFAIL: SIGSEGV (2) -1 1676 5h29m 322d 322d
assert "cifp != NULL" failed in route.c (5) -1 16 50d 448d 448d
SYZFAIL: can't reallocate -1 54 7d14h 529d 529d
panic: uvm_fault_unwire_locked: address not in map (5) 2 223 2d16h 555d 555d
panic: chgproccnt: procs < NUM 2 24 3d20h 594d 594d
SYZFAIL: coverage filter is full (3) -1 753546 2d09h 598d 598d
protection_fault: bpfdetach -1 87 17d 599d 599d
SYZFAIL: SIGBUS (2) -1 3330 2h23m 604d 604d
assert "sc->sc_dev == NUM" failed in if_tun.c (6) -1 172 15h20m 606d 606d
assert "refs != ~NUM" failed in kern_synch.c -1 1326 23h31m 607d 607d
SYZFAIL: posix_spawnp failed -1 syz 7638 4d23h 609d 72d
assert "map->limit == rtmap_limit" failed in rtable.c (2) -1 538 12h19m 609d 609d
uvm_fault: proc_trampoline (2) -1 3511 15d 609d 609d
protection_fault: witness_checkorder (5) -1 56 17h30m 609d 609d
uvm_fault: arp_rtrequest (3) -1 505 1d13h 610d 610d
can't ssh into the instance (2) -1 35745 23h08m 612d 612d
suppressed report (2) -1 21997 2h22m 612d 612d
panic: missing alias (6) 2 1497 22h01m 612d 612d
SYZFAIL: failed to recv rpc (4) -1 5150 27m 612d 612d
panic: trap type NUM, code=NUM, pc=ADDR (3) 2 4970 6h54m 612d 612d
corrupted report (7) -1 62007 13h15m 612d 612d
witness: reversal: lock order data missing (5) -1 236746 22m 613d 613d
SYZFAIL: ioctl remote attach failed (6) -1 94181 now 613d 613d
SYZFAIL: failed to mkdtemp (2) -1 328800 now 613d 613d
SYZFAIL: failed to send rpc (2) -1 38881 12m 613d 613d
SYZFAIL: tun_id out of range (4) -1 4334873 now 613d 613d
SYZFAIL: failed to mkdir (2) -1 56848 11m 613d 613d
SYZFAIL: pipe failed -1 7810 1d01h 817d 817d
protection_fault: lf_advlock (4) -1 syz, C 69 9d00h 934d 934d
uvm_fault: ktrops (2) -1 syz, C 697 2d09h 1106d 1106d
malloc: free list modified: free (4) -1 syz, C 48 2d05h 1184d 1183d
uvm_fault: hardclock (5) -1 syz 4 1163d 1315d 1315d
panic: ufsdirhash_lookup: bad offset in hash array (3) 2 syz, C 107 1d01h 1326d 1032d
uvm_fault: memcpy (5) -1 syz, C 112 91d 1461d 1461d
assert "uvn->u_obj.uo_refs == NUM" failed in uvm_vnode.c (2) -1 syz 2 1465d 1465d 1465d
panic: pmap_unwire: invalid PDE 2 syz 6 876d 1519d 1461d
no output from test machine (8) -1 syz, C 926219 8m 1528d 1525d
uvm_fault: ffs_indirtrunc -1 syz, C 43 63d 1572d 1572d
witness: reversal: vmmaplk inode (3) -1 syz, C 1064 1d20h 1604d 1555d
SYZFATAL: executor NUM failed NUM times: executor NUM: exit status NUM -1 syz 175427 17h55m 1627d 1627d
panic: bad dir (3) 2 syz, C 223 126d 1634d 1461d
uvm_fault: ufs_lookup -1 syz, C 746 63d 1729d 1081d
kernel: double fault trap, code=NUM (2) -1 syz, C 41 139d 1729d 1680d
protection_fault: ktrops -1 syz, C 259 790d 1739d 1719d
protection_fault: sblock -1 syz 38 1562d 1742d 1742d
uvm_fault: fifo_write (2) -1 syz, C 3430 764d 1750d 1434d
SYZFAIL: tun: read failed -1 syz 599151 6m 1767d 1735d
SYZFAIL: command failed -1 syz 15843 14d 2055d 1737d
panic: ufs_rename: lost dir entry 2 syz, C 150 11d 2429d 1667d
lost connection to test machine (2) -1 2004716 now 2845d never