Instances [tested repos]:
Name Last active Uptime Corpus Coverage 🛈 Crashes Execs Kernel build syzkaller build Bugs
Commit Config Freshness Status Commit Freshness Status All Only
ci-openbsd-kasan now 11h11m 6593 45934 4055 885714 b1b521f3695d .config 6d20h 0ec395f8 11h39m all only
ci-openbsd-main now 10h30m 7776 47003 4093 1037947 18bf3026620e .config 12h33m 0ec395f8 11h39m all only
ci-openbsd-multicore now 10h43m 6852 44849 5615 138753 18bf3026620e .config 12h33m 0ec395f8 11h39m all only
ci-openbsd-setuid now 10h37m 4447 29976 4940 1126837 18bf3026620e .config 12h33m 0ec395f8 11h39m all only
Extra filters: [With Repro]
upstream (168) 🔗
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Last activity
protection_fault: mtx_enter (5) -1 2 4d12h 4d15h 4d15h
SYZFAIL: tun: reSYZFAIL: tun: reinit: getty repeating too quickly on port /dev/tty00, sleeping -1 1 8d04h 8d04h 8d04h
panic: kernel diagnostic assertion "pg->wire_count != NUM" failed: file "/syzkaller/managers/kasan/kernel/sys/uvm/uvm_pa 2 1 16d 16d 16d
SYZFAIL: cover_unprotect invoked on an unmapped -1 1 17d 17d 17d
SYZFAIL: cover_unprotect invokeddenied attempt to set clock back ADDR seconds -1 1 21d 21d 21d
uvm_fault: art_iter_open -1 1 22d 22d 22d
uvm_fault: pfi_kif_update (2) -1 1 23d 23d 23d
protection_fault: sysctl_doproc (3) -1 1 24d 24d 24d
uvm_fault: pciioctl -1 1 24d 24d 24d
protection_fault: rtable_l2 -1 1 27d 27d 27d
uvm_fault: witness_checkorder (7) -1 1 28d 28d 28d
assert "gkif != NULL" failed in pf_if.c -1 1 35d 35d 35d
panic: free: non-malloced addr ADDR type ip_moptions (2) 2 2 34d 35d 35d
SYZFAIL: too much cover (3) -1 1 35d 35d 35d
panic: kernel diagnostic assertion "pg->wire_count != NUM" failed: file "/syzkaller/managers/setuid/kernel/sys/uvm/uvm_p (2) 2 1 36d 36d 36d
uvm_fault: ip6_freemoptions (2) -1 2 22d 37d 37d
uvm_fault: in_ifdetach -1 1 39d 39d 39d
KASAN: invalid memory access in in_ifdetach -1 5 36d 39d 39d
SYZFAIL: mmap of output file failed (2) -1 1 40d 40d 40d
assert "info->rti_ifa->ifa_ifp != NULL" failed in route.c (3) -1 1 41d 41d 41d
uvm_fault: rtable_walk -1 2 33d 43d 43d
panic: free: size too small NUM <= NUM / NUM (ADDR) type rtable 2 4 22d 44d 44d
SYZFAIL: bad allocate request -1 3 37d 46d 46d
panic: free: non-malloced addr 0x3000 type ip_moptions 2 1 46d 46d 46d
uvm_fault: if_delgroup -1 1 47d 47d 47d
uvm_fault: uid_find -1 1 47d 47d 47d
uvm_fault: pfi_xcommit -1 2 27d 48d 48d
uvm_fault: wsmouseopen -1 2 38d 48d 48d
assert "(dirblock < dh->dh_nblk && dh->dh_blkfree[dirblock] >= (((slotneeded) + ((NUM) - NUM)) / (NUM)))" failed in ufs_ -1 4 21d 49d 49d
uvm_fault: malloc -1 10 21d 51d 51d
assert "kd_lookup(kd->kd_unit) == NULL" failed in kcov.c (6) -1 1 53d 53d 53d
SYZFAIL: cover_u -1 5 12d 55d 55d
uvm_fault: udv_detach -1 1 55d 55d 55d
malloc: free list modified: proc (2) -1 1 56d 56d 56d
SYZFAIL: cover_unprotect invoked -1 3 11d 57d 57d
malloc: free list modified: vnodes -1 1 58d 58d 58d
uvm_fault: rtable_getsource -1 1 59d 59d 59d
uvm_fault: ufsdirhash_add -1 2 21d 60d 60d
panic: kernel diagnostic assertion "map->limit == 2 1 61d 61d 61d
panic: acquiring blockable sleep lock with spinlock or critical section held (rwlock) vmmaplk (4) 2 3 40d 62d 62d
uvm_fault: ip_setmoptions -1 1 63d 63d 63d
SYZFAIL: cover_unprotect invoked on an unmapped cover_t object -1 258516 now 64d 64d
kernel: protection fauplatnic : u n h an dl e d a f NUM -1 1 64d 64d 64d
protection_fault: dtioctl -1 1 64d 64d 64d
panic: ffs_blkfree: bad size (7) 2 1 65d 65d 65d
uvm_fault: solock_shared -1 1 66d 66d 66d
uvm_fault: scsi_xs_put -1 1 66d 66d 66d
panic: uvm_faultWAuRnNINe:lSoPck NOT LOdWEREs nN SYSCALL NUM NUM EXIT NUM c 2 1 66d 66d 66d
pool: free list modified: sockpl (4) -1 1 68d 68d 68d
uvm_fault: rtable_clearsource -1 7 44d 68d 68d
uvm_fault: rtable_lookup -1 2 59d 69d 69d
SYZFAIL: too many calls in output (3) -1 12 17d 69d 69d
uvm_fault: wsmouseclose -1 1 69d 69d 69d
malloc: free list modified: UVM -1 6 44d 70d 70d
uvm_fault: ifa_ifwithaddr -1 1 70d 70d 70d
malloc: free list modified: ??? -1 5 43d 70d 70d
panic: free: non-malloced addr 0x2000 type ip_moptions 2 1 71d 71d 71d
uvm_fault: dt_ioctl_record_stop (4) -1 3 25d 71d 71d
uvm_fault: mtx_enter (2) -1 5 24d 74d 74d
panic: kernel diagnostic assertion "(p->pfik_flagrefs == NUM) || (p->pfik_flagrefs == NUM)" failed 2 1 75d 75d 75d
uvm_fault: _rb_insert -1 1 76d 76d 76d
protection_fault: rtable_match -1 1 78d 78d 78d
panic: kernel diagnostic assertion "map->limit == rtmap_limit" fai 2 1 79d 79d 79d
assert "rdomain == rtable_l2(rdomain)" failed in route.c (4) -1 3 48d 79d 79d
uvm_fault: kpageflttrap -1 12 1d18h 80d 80d
uvm_fault: knote_processfork -1 40 44d 80d 80d
uvm_fault: upageflttrap -1 31 1d22h 80d 80d
uvm_fault: rtable_add -1 1 80d 80d 80d
uvm_fault: pmap_page_remove (8) -1 1 80d 80d 80d
protection_fault: pool_do_put (3) -1 2 5d01h 81d 81d
panic: free: unaligned addr ADDR, size NUM, type ip_moptions, mask NUM 2 1 84d 84d 84d
panic: ffs_blkfree: freeing free frag (2) 2 1 86d 86d 86d
protection_fault: ifiq_enqueue_qlim -1 1 86d 86d 86d
uvm_fault: ip_freemoptions -1 3 21d 90d 90d
malloc: free list modified: temp -1 5 24d 92d 92d
uvm_fault: ifiq_enqueue_qlim -1 4 31d 94d 94d
SYZFAIL: tun: re (2) -1 2 47d 96d 96d
panic: unhandled af NUM 2 6 21d 96d 96d
uvm_fault: device_lookup -1 2 49d 97d 97d
assert "bpfilter_lookup(unit) == NULL" failed in bpf.c (2) -1 7 64d 98d 98d
witness: lock_object uninitialized: ADDR (6) -1 7 22d 98d 98d
panic: kernel diagnostic assertion "refs != ~NUM" failed: file 2 2 51d 98d 98d
assert "!ISSET(rt->rt_flags, RTF_LOCAL)" failed in nd6.c (4) -1 3 70d 100d 100d
uvm_fault: in_pcbhash_insert -1 8 24d 101d 101d
uvm_fault: rtable_exists -1 21 27d 103d 103d
uvm_fault: rtable_match -1 28 26d 104d 104d
uvm_fault: shm_deallocate_segment -1 13 2h55m 105d 105d
uvm_fault: sysctl_sysvipc -1 17 39d 106d 106d
panic: free: size too large NUM > NUM (ADDR) type rtable 2 63 21d 107d 107d
uvm_fault: dtioctl -1 17 22d 108d 108d
uvm_fault: rtable_l2 -1 86 14d 108d 108d
KASAN: invalid memory access in rw_status -1 4 55d 108d 108d
uvm_fault: amap_lookups -1 66 10d 108d 108d
protection_fault: malloc (3) -1 3471 1d23h 109d 109d
KASAN: invalid memory access in witness_checkorder -1 6 5d09h 109d 108d
panic: init 2 2 82d 120d 120d
witness: reversal: fdlock inode (3) -1 4 72d 120d 120d
panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock (9) 2 15 29d 125d 125d
uvm_fault: sys_shmat (3) -1 71 1h06m 127d 127d
panic: (5) 2 4 47d 147d 147d
panic: amap_pp_adjref: negative reference count (3) 2 48 20d 153d 153d
witness: reversal: sbufsnd inode (4) -1 16 58d 159d 159d
assert "(p->pfik_flagrefs == NUM) || (p->pfik_flagrefs == NUM)" failed in pf_if.c -1 31 3d21h 172d 172d
witness: reversal: pf_lock netlock (4) -1 405 4h50m 173d 173d
panic: unhandled af (6) 2 299 21d 177d 177d
SYZFAIL: repeatedly failed to execute the program (3) -1 8 12d 183d 183d
assert "ISSET(p->p_flag, P_SUSPSIG | P_SUSPSINGLE) == NUM" failed in kern_sig.c -1 50 7d12h 183d 183d
panic: ffs_valloc: dup alloc (5) 2 348 1d04h 215d 215d
uvm_fault: ffs_freefile (3) -1 5 83d 216d 216d
panic: init died (signal NUM, exit NUM) (2) 2 3516 2d06h 217d 217d
uvm_fault: ufsdirhash_lookup -1 10 21d 217d 217d
SYZFAIL: SIGFPE -1 1734 1h52m 219d 219d
SYZFAIL: cover mmap failed -1 1470 1h55m 219d 219d
SYZFAIL: child failed -1 19260 now 219d 219d
SYZFAIL: SIGILL -1 1796 9h24m 219d 219d
assert "pg->wire_count != NUM" failed in uvm_page.c -1 9200 18h01m 312d 312d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (26) -1 852 21d 333d 333d
kernel: protection fault trap, code=NUM (9) -1 17 19d 336d 336d
SYZFAIL: SIGSEGV (2) -1 1803 9m 344d 344d
assert "cifp != NULL" failed in route.c (5) -1 16 71d 469d 469d
SYZFAIL: can't reallocate -1 55 20d 550d 550d
panic: uvm_fault_unwire_locked: address not in map (5) 2 224 21d 576d 576d
panic: chgproccnt: procs < NUM 2 26 1d05h 615d 615d
SYZFAIL: coverage filter is full (3) -1 800476 now 619d 619d
protection_fault: bpfdetach -1 87 38d 621d 621d
SYZFAIL: SIGBUS (2) -1 3467 19m 625d 625d
assert "sc->sc_dev == NUM" failed in if_tun.c (6) -1 208 1h00m 627d 627d
assert "refs != ~NUM" failed in kern_synch.c -1 1329 3d17h 629d 629d
SYZFAIL: posix_spawnp failed -1 syz 7638 12d 630d 93d
assert "map->limit == rtmap_limit" failed in rtable.c (2) -1 543 2d08h 631d 631d
uvm_fault: proc_trampoline (2) -1 3511 37d 631d 631d
protection_fault: witness_checkorder (5) -1 58 15d 631d 631d
uvm_fault: arp_rtrequest (3) -1 515 4d05h 632d 632d
can't ssh into the instance (2) -1 35750 2d21h 633d 633d
suppressed report (2) -1 22280 8h45m 633d 633d
panic: missing alias (6) 2 1501 6d03h 633d 633d
SYZFAIL: failed to recv rpc (4) -1 5411 1h35m 633d 633d
panic: trap type NUM, code=NUM, pc=ADDR (3) 2 4971 10d 633d 633d
corrupted report (7) -1 62074 3h32m 634d 634d
witness: reversal: lock order data missing (5) -1 238042 4h33m 634d 634d
SYZFAIL: ioctl remote attach failed (6) -1 98488 9m 634d 634d
SYZFAIL: failed to mkdtemp (2) -1 332615 22m 634d 634d
SYZFAIL: failed to send rpc (2) -1 39363 51m 634d 634d
SYZFAIL: tun_id out of range (4) -1 4454946 now 634d 634d
SYZFAIL: failed to mkdir (2) -1 57482 3h44m 634d 634d
SYZFAIL: pipe failed -1 7811 21d 838d 838d
protection_fault: lf_advlock (4) -1 syz, C 69 30d 955d 955d
uvm_fault: ktrops (2) -1 syz, C 716 8h16m 1127d 1127d
malloc: free list modified: free (4) -1 syz, C 48 23d 1205d 1204d
uvm_fault: hardclock (5) -1 syz 4 1185d 1337d 1337d
panic: ufsdirhash_lookup: bad offset in hash array (3) 2 syz, C 107 8d10h 1348d 1054d
uvm_fault: memcpy (5) -1 syz, C 112 113d 1483d 1483d
assert "uvn->u_obj.uo_refs == NUM" failed in uvm_vnode.c (2) -1 syz 2 1486d 1486d 1486d
panic: pmap_unwire: invalid PDE 2 syz 6 897d 1541d 1482d
no output from test machine (8) -1 syz, C 929624 now 1550d 1546d
uvm_fault: ffs_indirtrunc -1 syz, C 43 84d 1594d 1594d
witness: reversal: vmmaplk inode (3) -1 syz, C 1302 3h29m 1626d 1576d
SYZFATAL: executor NUM failed NUM times: executor NUM: exit status NUM -1 syz 175427 8d01h 1649d 1649d
panic: bad dir (3) 2 syz, C 223 147d 1655d 1483d
uvm_fault: ufs_lookup -1 syz, C 746 84d 1750d 1102d
kernel: double fault trap, code=NUM (2) -1 syz, C 41 160d 1750d 1702d
protection_fault: ktrops -1 syz, C 259 811d 1760d 1740d
protection_fault: sblock -1 syz 38 1584d 1763d 1763d
uvm_fault: fifo_write (2) -1 syz, C 3430 785d 1771d 1456d
SYZFAIL: tun: read failed -1 syz 601842 10m 1788d 1757d
SYZFAIL: command failed -1 syz 15843 36d 2076d 1759d
panic: ufs_rename: lost dir entry 2 syz, C 153 12d 2450d 1688d
lost connection to test machine (2) -1 2152393 now 2867d never