Instances [tested repos]:
Name Last active Uptime Corpus Coverage 🛈 Crashes Execs Kernel build syzkaller build Bugs
Commit Config Freshness Status Commit Freshness Status All Only
ci-openbsd-kasan now 1h31m 6881 44451 61 17278 18607adc5162 .config 6d01h 2f52988a 10h31m all only
ci-openbsd-main now 47m 8091 47218 68 21975 e885dbe04d18 .config 6h22m 2f52988a 10h31m all only
ci-openbsd-multicore now 55m 7817 48361 73 21339 e885dbe04d18 .config 6h22m 2f52988a 10h31m all only
ci-openbsd-setuid now 1h02m 4452 30026 87 23570 e885dbe04d18 .config 6h22m 2f52988a 10h31m all only
Extra filters: [With Repro]
upstream (182) 🔗
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Last activity
uvm_fault: ip_setmoptions -1 1 10h51m 10h51m 10h51m
SYZFAIL: cover_unprotect invoked on an unmapped cover_t object -1 5126 now 1d03h 1d03h
kernel: protection fauplatnic : u n h an dl e d a f NUM -1 1 1d10h 1d10h 1d10h
protection_fault: dtioctl -1 1 1d11h 1d11h 1d11h
panic: ffs_blkfree: bad size (7) 2 1 3d02h 3d02h 3d02h
uvm_fault: solock_shared -1 1 3d18h 3d18h 3d18h
uvm_fault: scsi_xs_put -1 1 3d20h 3d20h 3d20h
panic: uvm_faultWAuRnNINe:lSoPck NOT LOdWEREs nN SYSCALL NUM NUM EXIT NUM c 2 1 4d00h 4d00h 4d00h
pool: free list modified: sockpl (4) -1 1 5d11h 5d11h 5d11h
uvm_fault: rtable_clearsource -1 2 22h51m 6d00h 6d00h
uvm_fault: rtable_lookup -1 1 6d03h 6d03h 6d03h
SYZFAIL: too many calls in output (3) -1 1 6d04h 6d04h 6d04h
uvm_fault: wsmouseclose -1 1 6d04h 6d04h 6d04h
malloc: free list modified: UVM -1 3 5h01m 7d05h 7d05h
uvm_fault: ifa_ifwithaddr -1 1 7d09h 7d09h 7d09h
malloc: free list modified: ??? -1 2 4d19h 7d11h 7d11h
panic: free: non-malloced addr 0x2000 type ip_moptions 2 1 8d17h 8d17h 8d17h
uvm_fault: dt_ioctl_record_stop (4) -1 2 7d13h 8d22h 8d22h
uvm_fault: mtx_enter (2) -1 3 7d07h 11d 11d
panic: kernel diagnostic assertion "(p->pfik_flagrefs == NUM) || (p->pfik_flagrefs == NUM)" failed 2 1 12d 12d 12d
uvm_fault: _rb_insert -1 1 13d 13d 13d
KASAN: invalid memory access in knote_processfork -1 3 14d 14d 14d
protection_fault: rtable_match -1 1 15d 15d 15d
panic: kernel diagnostic assertion "map->limit == rtmap_limit" fai 2 1 16d 16d 16d
KASAN: invalid memory access in pf_remove_if_empty_ruleset -1 11 2d07h 16d 16d
assert "rdomain == rtable_l2(rdomain)" failed in route.c (4) -1 2 7d18h 17d 17d
uvm_fault: kpageflttrap -1 6 2d20h 17d 17d
uvm_fault: knote_processfork -1 7 14d 17d 17d
uvm_fault: upageflttrap -1 21 1d09h 17d 17d
uvm_fault: rtable_add -1 1 17d 17d 17d
uvm_fault: pmap_page_remove (8) -1 1 18d 18d 18d
protection_fault: pool_do_put (3) -1 1 18d 18d 18d
panic: free: unaligned addr ADDR, size NUM, type ip_moptions, mask NUM 2 1 22d 22d 22d
panic: ffs_blkfree: freeing free frag (2) 2 1 23d 23d 23d
protection_fault: ifiq_enqueue_qlim -1 1 24d 24d 24d
uvm_fault: mld6_fasttimo -1 1 25d 25d 25d
uvm_fault: ip_freemoptions -1 2 16d 27d 27d
uvm_fault: amap_copy -1 1 29d 29d 29d
malloc: free list modified: temp -1 1 29d 29d 29d
uvm_fault: ifiq_enqueue_qlim -1 3 4d04h 31d 31d
SYZFAIL: tun: re (2) -1 1 33d 33d 33d
panic: unhandled af NUM 2 5 19d 33d 33d
assert "refs != ~NUM" failed in multico -1 1 34d 34d 34d
uvm_fault: device_lookup -1 1 34d 34d 34d
protection_fault: ip6_freemoptions -1 1 35d 35d 35d
assert "bpfilter_lookup(unit) == NULL" failed in bpf.c (2) -1 7 1d07h 35d 35d
witness: lock_object uninitialized: ADDR (6) -1 4 32d 35d 35d
panic: kernel diagnostic assertion "refs != ~NUM" failed: file 2 1 35d 35d 35d
assert "refs != ~NUM" failed in kern -1 1 36d 36d 36d
assert "!ISSET(rt->rt_flags, RTF_LOCAL)" failed in nd6.c (4) -1 3 7d10h 37d 37d
uvm_fault: sys_msgget -1 1 38d 38d 38d
uvm_fault: in_pcbhash_insert -1 6 2d05h 38d 38d
uvm_fault: rtable_exists -1 11 4d05h 40d 40d
uvm_fault: rtable_match -1 14 2d11h 41d 41d
uvm_fault: uvm_fault_upper_lookup -1 3 34d 41d 41d
uvm_fault: shm_deallocate_segment -1 6 7d03h 42d 42d
uvm_fault: ip6_freemoptions -1 6 10d 42d 42d
uvm_fault: sysctl_sysvipc -1 13 11d 43d 43d
protection_fault: uvm_fault_upper_lookup -1 1 44d 44d 44d
panic: free: size too large NUM > NUM (ADDR) type rtable 2 20 1h57m 44d 44d
protection_fault: amap_lookups -1 3 36d 44d 44d
protection_fault: free -1 1 44d 44d 44d
uvm_fault: dtioctl -1 13 1d22h 45d 45d
uvm_fault: rtable_l2 -1 60 2d01h 45d 45d
KASAN: invalid memory access in rw_status -1 3 1d20h 45d 45d
panic: free: non-malloced addr ADDR type ip_moptions 2 3 3d13h 45d 45d
uvm_fault: amap_lookups -1 59 3d05h 45d 45d
protection_fault: malloc (3) -1 1939 16m 46d 46d
KASAN: invalid memory access in witness_checkorder -1 5 32d 46d 45d
KASAN: invalid memory access in __mp_lock -1 2 45d 48d 48d
KASAN: invalid memory access in checkalias -1 420 32d 48d 48d
SYZFAIL: dup2(NUM, kInPipeFd) failed (4) -1 1 52d 52d 52d
panic: init 2 2 19d 57d 57d
SYZFAIL: mmap of input file failed (2) -1 1 57d 57d 57d
witness: reversal: fdlock inode (3) -1 4 9d13h 58d 58d
witness: reversal: sbufrcv inode (4) -1 1 59d 59d 59d
assert "pr->ps_threadcnt == NUM" failed in kern_exit.c (3) -1 2 36d 61d 61d
panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock (9) 2 11 1d11h 62d 62d
uvm_fault: sys_shmat (3) -1 23 21h14m 65d 65d
uvm_fault: bpfioctl (6) -1 2 43d 65d 65d
panic: in 2 2 68d 69d 69d
panic: i 2 3 42d 70d 70d
panic: init di 2 1 70d 70d 70d
panic: init died (signal 2 1 70d 70d 70d
panic: init died (signal NUM 2 1 71d 71d 71d
assert "map->limit == rtmap_limit" failed in ker -1 1 71d 71d 71d
assert "map->limit == rtmap_limit" failed in rOtNa bSlYe.cS -1 1 72d 72d 72d
kernel:I Tp 0g ea faStopped at savectx+0xae: movl $NUM,%gs:0x688 -1 1 76d 76d 76d
panic: kernel diagnostic assertion "ISSET(p->p_flag, P_SUSPSIG | P_SUSPSINGLE) == NUM" failed: file "/syzkaller/managers 2 1 77d 77d 77d
kernel: NUM ageStopped at savectx+0xae: movl $NUM,%gs:0x688 -1 1 79d 79d 79d
assert "d->bd_in_uiomove == NUM" failed in bpf.c (5) -1 1 80d 80d 80d
panic: uvm_fault(ADDR, 0x47, NUM, NUM) -> e 2 1 81d 81d 81d
panic: (5) 2 3 15d 84d 84d
panic: init died (signal NUM, 2 2 58d 84d 84d
assert "rn != NULL" failed in pipex.c (3) -1 5 36d 85d 85d
panic: vputonfreelist: lock count is not zero (4) 2 1 88d 88d 88d
protection_fault: __x86_indirect_thunk_r11 (5) -1 1 88d 88d 88d
panic: amap_pp_adjref: negative reference count (3) 2 27 10h45m 90d 90d
uvm_fault: ufs_readdir -1 186 18d 94d 94d
panic: kernel diagnostic assertion "pg->wire_count != NUM" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uv 2 2 75d 96d 96d
witness: reversal: sbufsnd inode (4) -1 15 1d11h 97d 97d
uvm_fault: remrunqueue -1 3 62d 108d 108d
assert "(p->pfik_flagrefs == NUM) || (p->pfik_flagrefs == NUM)" failed in pf_if.c -1 26 3d23h 109d 109d
witness: reversal: pf_lock netlock (4) -1 168 33m 110d 110d
panic: unhandled af (6) 2 215 34m 114d 114d
SYZFAIL: repeatedly failed to execute the program (3) -1 5 2d10h 120d 120d
assert "ISSET(p->p_flag, P_SUSPSIG | P_SUSPSINGLE) == NUM" failed in kern_sig.c -1 31 4d03h 120d 120d
panic: kmmaplk rwlock ADDR: enter read deadlock 2 14 57d 146d 146d
panic: ffs2_balloc: unwind failed (4) 2 21 35d 147d 147d
uvm_fault: ufs_direnter (6) -1 10 66d 149d 149d
panic: kerne 2 3 54d 151d 151d
panic: ffs_valloc: dup alloc (5) 2 193 12h55m 152d 152d
protection_fault: pf_anchor_global_RB_REMOVE (3) -1 29 13d 153d 153d
uvm_fault: pvclock_get (2) -1 54 41d 153d 153d
uvm_fault: ffs_freefile (3) -1 5 20d 154d 154d
panic: init died (signal NUM, exit NUM) (2) 2 2233 8m 154d 154d
uvm_fault: kcov_remote_enter (5) -1 596 23d 154d 154d
uvm_fault: ffs2_balloc (7) -1 392 20d 154d 154d
uvm_fault: ufsdirhash_lookup -1 6 6d14h 155d 155d
SYZFAIL: SIGFPE -1 1390 2h51m 156d 156d
SYZFAIL: cover mmap failed -1 1006 3h15m 156d 156d
SYZFAIL: child failed -1 10048 now 156d 156d
SYZFAIL: SIGILL -1 1404 4h09m 156d 156d
assert "atomic_load_int(&fdp->fd_nuserevents) == NUM" failed in kern_descrip.c (2) -1 7 41d 167d 167d
assert "pg->wire_count != NUM" failed in uvm_page.c -1 9146 6h26m 249d 249d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (26) -1 832 23d 270d 270d
kernel: protection fault trap, code=NUM (9) -1 14 11d 273d 273d
SYZFAIL: SIGSEGV (2) -1 1451 21m 281d 281d
assert "cifp != NULL" failed in route.c (5) -1 16 8d14h 406d 406d
SYZFAIL: can't reallocate -1 53 1d23h 487d 487d
panic: uvm_fault_unwire_locked: address not in map (5) 2 174 4h47m 513d 513d
panic: chgproccnt: procs < NUM 2 23 36d 552d 552d
SYZFAIL: coverage filter is full (3) -1 750270 7d20h 556d 556d
protection_fault: bpfdetach -1 86 10d 558d 558d
uvm_fault: x86_ipi_db (9) -1 8199 18d 560d 560d
SYZFAIL: SIGBUS (2) -1 2929 7h18m 562d 562d
assert "sc->sc_dev == NUM" failed in if_tun.c (6) -1 124 18h52m 564d 564d
assert "refs != ~NUM" failed in kern_synch.c -1 1259 1d08h 566d 566d
SYZFAIL: posix_spawnp failed -1 syz 6877 now 568d 30d
assert "map->limit == rtmap_limit" failed in rtable.c (2) -1 523 1d00h 568d 568d
uvm_fault: proc_trampoline (2) -1 3492 12d 568d 568d
protection_fault: witness_checkorder (5) -1 40 12d 568d 568d
uvm_fault: arp_rtrequest (3) -1 486 1d09h 569d 569d
pool: free list modified: shmpl (6) -1 925 27d 570d 570d
uvm_fault: db_enter (6) -1 641 22d 570d 570d
can't ssh into the instance (2) -1 35652 5h09m 571d 571d
suppressed report (2) -1 20481 2h07m 571d 571d
panic: missing alias (6) 2 1494 8d01h 571d 571d
SYZFAIL: failed to recv rpc (4) -1 4445 2h59m 571d 571d
panic: trap type NUM, code=NUM, pc=ADDR (3) 2 4893 23h47m 571d 571d
corrupted report (7) -1 61751 2h07m 571d 571d
witness: reversal: lock order data missing (5) -1 233236 35m 571d 571d
SYZFAIL: ioctl remote attach failed (6) -1 81254 now 571d 571d
SYZFAIL: failed to mkdtemp (2) -1 315693 now 571d 571d
SYZFAIL: failed to send rpc (2) -1 37637 1h19m 571d 571d
SYZFAIL: tun_id out of range (4) -1 4103228 now 571d 571d
SYZFAIL: failed to mkdir (2) -1 54726 21m 571d 571d
SYZFAIL: pipe failed -1 7808 13d 775d 775d
protection_fault: lf_advlock (4) -1 syz, C 66 11d 892d 892d
uvm_fault: ktrops (2) -1 syz, C 634 12h01m 1064d 1064d
uvm_fault: schedclock -1 syz 11 722d 1090d 913d
kernel: page fault trap, code=NUM (3) -1 syz, C 96 49d 1121d 878d
malloc: free list modified: free (4) -1 syz, C 44 4d03h 1142d 1141d
uvm_fault: hardclock (5) -1 syz 4 1122d 1274d 1274d
panic: ufsdirhash_lookup: bad offset in hash array (3) 2 syz, C 107 15d 1285d 991d
uvm_fault: memcpy (5) -1 syz, C 112 50d 1420d 1420d
assert "uvn->u_obj.uo_refs == NUM" failed in uvm_vnode.c (2) -1 syz 2 1423d 1424d 1423d
panic: pmap_unwire: invalid PDE 2 syz 6 834d 1478d 1419d
no output from test machine (8) -1 syz, C 912536 now 1487d 1483d
uvm_fault: ffs_indirtrunc -1 syz, C 43 21d 1531d 1531d
witness: reversal: vmmaplk inode (3) -1 syz, C 1061 65d 1563d 1513d
SYZFATAL: executor NUM failed NUM times: executor NUM: exit status NUM -1 syz 175427 1d10h 1586d 1586d
panic: bad dir (3) 2 syz, C 223 84d 1592d 1420d
uvm_fault: ufs_lookup -1 syz, C 746 22d 1687d 1039d
kernel: double fault trap, code=NUM (2) -1 syz, C 41 98d 1687d 1639d
protection_fault: ktrops -1 syz, C 259 748d 1697d 1677d
protection_fault: sblock -1 syz 38 1521d 1701d 1700d
uvm_fault: fifo_write (2) -1 syz, C 3430 722d 1708d 1393d
SYZFAIL: tun: read failed -1 syz 592112 now 1726d 1694d
SYZFAIL: command failed -1 syz 15838 65d 2014d 1696d
panic: ufs_rename: lost dir entry 2 syz, C 148 15d 2387d 1625d
lost connection to test machine (2) -1 1775787 now 2804d never