Instances [tested repos]:
Name Last active Uptime Corpus Coverage 🛈 Crashes Execs Kernel build syzkaller build Bugs
Commit Config Freshness Status Commit Freshness Status All Only
ci-openbsd-kasan now 11h27m 6966 44572 2795 742351 eb6d9273e3e5 .config 12h19m 2f52988a 1d05h all only
ci-openbsd-main now 6h27m 8402 47662 3412 963426 2c3a37e498aa .config 10h44m 2f52988a 1d05h all only
ci-openbsd-multicore now 6h44m 8158 48751 3664 934818 2c3a37e498aa .config 10h44m 2f52988a 1d05h all only
ci-openbsd-setuid now 6h36m 4545 30281 4465 1204165 2c3a37e498aa .config 10h44m 2f52988a 1d05h all only
Extra filters: [With Repro]
upstream (184) 🔗
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Last activity
panic: acquiring blockable sleep lock with spinlock or critical section held (rwlock) vmmaplk (4) 2 1 9h44m 9h43m 9h43m
KASAN: invalid memory access in mrt6_ioctl -1 1 16h06m 16h05m 16h05m
uvm_fault: ip_setmoptions -1 1 1d05h 1d05h 1d05h
SYZFAIL: cover_unprotect invoked on an unmapped cover_t object -1 8824 now 1d22h 1d22h
kernel: protection fauplatnic : u n h an dl e d a f NUM -1 1 2d05h 2d05h 2d05h
protection_fault: dtioctl -1 1 2d06h 2d06h 2d06h
panic: ffs_blkfree: bad size (7) 2 1 3d21h 3d21h 3d21h
uvm_fault: solock_shared -1 1 4d13h 4d13h 4d13h
uvm_fault: scsi_xs_put -1 1 4d15h 4d15h 4d15h
panic: uvm_faultWAuRnNINe:lSoPck NOT LOdWEREs nN SYSCALL NUM NUM EXIT NUM c 2 1 4d19h 4d19h 4d19h
pool: free list modified: sockpl (4) -1 1 6d06h 6d06h 6d06h
uvm_fault: rtable_clearsource -1 3 22m 6d19h 6d19h
uvm_fault: rtable_lookup -1 1 6d22h 6d22h 6d22h
SYZFAIL: too many calls in output (3) -1 1 6d23h 6d23h 6d23h
uvm_fault: wsmouseclose -1 1 6d23h 6d23h 6d23h
malloc: free list modified: UVM -1 3 1d00h 8d00h 8d00h
uvm_fault: ifa_ifwithaddr -1 1 8d04h 8d04h 8d04h
malloc: free list modified: ??? -1 2 5d14h 8d06h 8d06h
panic: free: non-malloced addr 0x2000 type ip_moptions 2 1 9d12h 9d12h 9d12h
uvm_fault: dt_ioctl_record_stop (4) -1 2 8d08h 9d17h 9d17h
uvm_fault: mtx_enter (2) -1 3 8d02h 12d 12d
panic: kernel diagnostic assertion "(p->pfik_flagrefs == NUM) || (p->pfik_flagrefs == NUM)" failed 2 1 13d 13d 13d
uvm_fault: _rb_insert -1 1 14d 14d 14d
KASAN: invalid memory access in knote_processfork -1 3 15d 15d 15d
protection_fault: rtable_match -1 1 16d 16d 16d
panic: kernel diagnostic assertion "map->limit == rtmap_limit" fai 2 1 17d 17d 17d
KASAN: invalid memory access in pf_remove_if_empty_ruleset -1 11 3d02h 17d 17d
assert "rdomain == rtable_l2(rdomain)" failed in route.c (4) -1 2 8d13h 17d 17d
uvm_fault: kpageflttrap -1 6 3d15h 18d 18d
uvm_fault: knote_processfork -1 7 15d 18d 18d
uvm_fault: upageflttrap -1 21 2d04h 18d 18d
uvm_fault: rtable_add -1 1 18d 18d 18d
uvm_fault: pmap_page_remove (8) -1 1 18d 18d 18d
protection_fault: pool_do_put (3) -1 1 19d 19d 19d
panic: free: unaligned addr ADDR, size NUM, type ip_moptions, mask NUM 2 1 22d 22d 22d
panic: ffs_blkfree: freeing free frag (2) 2 1 24d 24d 24d
protection_fault: ifiq_enqueue_qlim -1 1 24d 24d 24d
uvm_fault: mld6_fasttimo -1 1 26d 26d 26d
uvm_fault: ip_freemoptions -1 2 16d 28d 28d
uvm_fault: amap_copy -1 1 29d 29d 29d
malloc: free list modified: temp -1 1 30d 30d 30d
uvm_fault: ifiq_enqueue_qlim -1 3 4d23h 31d 31d
SYZFAIL: tun: re (2) -1 1 33d 33d 33d
panic: unhandled af NUM 2 5 20d 34d 34d
assert "refs != ~NUM" failed in multico -1 1 35d 35d 35d
uvm_fault: device_lookup -1 1 35d 35d 35d
protection_fault: ip6_freemoptions -1 1 35d 35d 35d
assert "bpfilter_lookup(unit) == NULL" failed in bpf.c (2) -1 7 2d02h 36d 36d
witness: lock_object uninitialized: ADDR (6) -1 4 33d 36d 36d
panic: kernel diagnostic assertion "refs != ~NUM" failed: file 2 1 36d 36d 36d
assert "refs != ~NUM" failed in kern -1 1 36d 36d 36d
assert "!ISSET(rt->rt_flags, RTF_LOCAL)" failed in nd6.c (4) -1 3 8d05h 38d 38d
uvm_fault: sys_msgget -1 1 39d 39d 39d
uvm_fault: in_pcbhash_insert -1 6 3d00h 39d 39d
uvm_fault: rtable_exists -1 11 5d00h 41d 41d
uvm_fault: rtable_match -1 15 5h06m 42d 42d
uvm_fault: uvm_fault_upper_lookup -1 3 35d 42d 42d
uvm_fault: shm_deallocate_segment -1 6 7d22h 43d 43d
uvm_fault: ip6_freemoptions -1 6 11d 43d 43d
uvm_fault: sysctl_sysvipc -1 13 12d 44d 44d
protection_fault: uvm_fault_upper_lookup -1 1 45d 45d 45d
panic: free: size too large NUM > NUM (ADDR) type rtable 2 23 8h13m 45d 45d
protection_fault: amap_lookups -1 3 37d 45d 45d
protection_fault: free -1 1 45d 45d 45d
uvm_fault: dtioctl -1 13 2d17h 46d 46d
uvm_fault: rtable_l2 -1 61 3h21m 46d 46d
KASAN: invalid memory access in rw_status -1 3 2d15h 46d 46d
panic: free: non-malloced addr ADDR type ip_moptions 2 3 4d08h 46d 46d
uvm_fault: amap_lookups -1 59 4d00h 46d 46d
protection_fault: malloc (3) -1 1961 8m 47d 47d
KASAN: invalid memory access in witness_checkorder -1 5 33d 47d 46d
KASAN: invalid memory access in __mp_lock -1 2 46d 49d 49d
KASAN: invalid memory access in checkalias -1 420 32d 49d 49d
SYZFAIL: dup2(NUM, kInPipeFd) failed (4) -1 1 53d 53d 53d
panic: init 2 2 19d 58d 58d
SYZFAIL: mmap of input file failed (2) -1 1 58d 58d 58d
witness: reversal: fdlock inode (3) -1 4 10d 58d 58d
witness: reversal: sbufrcv inode (4) -1 1 60d 60d 60d
assert "pr->ps_threadcnt == NUM" failed in kern_exit.c (3) -1 2 37d 62d 62d
panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock (9) 2 11 2d06h 63d 63d
uvm_fault: sys_shmat (3) -1 23 1d16h 65d 65d
uvm_fault: bpfioctl (6) -1 2 44d 66d 66d
panic: in 2 2 68d 70d 70d
panic: i 2 3 43d 70d 70d
panic: init di 2 1 71d 71d 71d
panic: init died (signal 2 1 71d 71d 71d
panic: init died (signal NUM 2 1 72d 72d 72d
assert "map->limit == rtmap_limit" failed in ker -1 1 72d 72d 72d
assert "map->limit == rtmap_limit" failed in rOtNa bSlYe.cS -1 1 72d 72d 72d
kernel:I Tp 0g ea faStopped at savectx+0xae: movl $NUM,%gs:0x688 -1 1 77d 77d 77d
panic: kernel diagnostic assertion "ISSET(p->p_flag, P_SUSPSIG | P_SUSPSINGLE) == NUM" failed: file "/syzkaller/managers 2 1 78d 78d 78d
kernel: NUM ageStopped at savectx+0xae: movl $NUM,%gs:0x688 -1 1 80d 80d 80d
assert "d->bd_in_uiomove == NUM" failed in bpf.c (5) -1 1 81d 81d 81d
panic: uvm_fault(ADDR, 0x47, NUM, NUM) -> e 2 1 82d 82d 82d
panic: (5) 2 3 16d 85d 85d
panic: init died (signal NUM, 2 2 58d 85d 85d
assert "rn != NULL" failed in pipex.c (3) -1 5 37d 85d 85d
panic: vputonfreelist: lock count is not zero (4) 2 1 89d 89d 89d
protection_fault: __x86_indirect_thunk_r11 (5) -1 1 89d 89d 89d
panic: amap_pp_adjref: negative reference count (3) 2 28 12h42m 91d 91d
uvm_fault: ufs_readdir -1 186 19d 94d 94d
panic: kernel diagnostic assertion "pg->wire_count != NUM" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uv 2 2 76d 96d 96d
witness: reversal: sbufsnd inode (4) -1 15 2d06h 97d 97d
uvm_fault: remrunqueue -1 3 62d 109d 109d
assert "(p->pfik_flagrefs == NUM) || (p->pfik_flagrefs == NUM)" failed in pf_if.c -1 26 4d18h 110d 110d
witness: reversal: pf_lock netlock (4) -1 168 19h35m 111d 111d
panic: unhandled af (6) 2 216 10h30m 115d 115d
SYZFAIL: repeatedly failed to execute the program (3) -1 5 3d05h 121d 121d
assert "ISSET(p->p_flag, P_SUSPSIG | P_SUSPSINGLE) == NUM" failed in kern_sig.c -1 31 4d22h 121d 121d
panic: kmmaplk rwlock ADDR: enter read deadlock 2 14 57d 146d 146d
panic: ffs2_balloc: unwind failed (4) 2 21 36d 148d 148d
uvm_fault: ufs_direnter (6) -1 10 67d 150d 150d
panic: kerne 2 3 55d 152d 152d
panic: ffs_valloc: dup alloc (5) 2 194 7h32m 153d 153d
protection_fault: pf_anchor_global_RB_REMOVE (3) -1 29 13d 154d 154d
uvm_fault: pvclock_get (2) -1 54 42d 154d 154d
uvm_fault: ffs_freefile (3) -1 5 21d 154d 154d
panic: init died (signal NUM, exit NUM) (2) 2 2246 8m 155d 155d
uvm_fault: kcov_remote_enter (5) -1 596 24d 155d 155d
uvm_fault: ffs2_balloc (7) -1 392 21d 155d 155d
uvm_fault: ufsdirhash_lookup -1 6 7d09h 155d 155d
SYZFAIL: SIGFPE -1 1393 15m 157d 157d
SYZFAIL: cover mmap failed -1 1009 now 157d 157d
SYZFAIL: child failed -1 10155 now 157d 157d
SYZFAIL: SIGILL -1 1410 2h41m 157d 157d
assert "atomic_load_int(&fdp->fd_nuserevents) == NUM" failed in kern_descrip.c (2) -1 7 42d 168d 168d
assert "pg->wire_count != NUM" failed in uvm_page.c -1 9146 1d01h 250d 250d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (26) -1 832 24d 271d 271d
kernel: protection fault trap, code=NUM (9) -1 14 12d 274d 274d
SYZFAIL: SIGSEGV (2) -1 1454 4h14m 282d 282d
assert "cifp != NULL" failed in route.c (5) -1 16 9d09h 407d 407d
SYZFAIL: can't reallocate -1 53 2d18h 488d 488d
panic: uvm_fault_unwire_locked: address not in map (5) 2 175 7h55m 514d 514d
panic: chgproccnt: procs < NUM 2 23 37d 553d 553d
SYZFAIL: coverage filter is full (3) -1 750270 8d15h 557d 557d
protection_fault: bpfdetach -1 86 11d 559d 559d
uvm_fault: x86_ipi_db (9) -1 8199 19d 560d 560d
SYZFAIL: SIGBUS (2) -1 2942 3h11m 563d 563d
assert "sc->sc_dev == NUM" failed in if_tun.c (6) -1 124 1d13h 565d 565d
assert "refs != ~NUM" failed in kern_synch.c -1 1260 4h58m 567d 567d
SYZFAIL: posix_spawnp failed -1 syz 6995 17m 568d 31d
assert "map->limit == rtmap_limit" failed in rtable.c (2) -1 523 1d19h 569d 569d
uvm_fault: proc_trampoline (2) -1 3492 13d 569d 569d
protection_fault: witness_checkorder (5) -1 40 13d 569d 569d
uvm_fault: arp_rtrequest (3) -1 486 2d04h 570d 570d
pool: free list modified: shmpl (6) -1 925 28d 571d 571d
uvm_fault: db_enter (6) -1 641 23d 571d 571d
can't ssh into the instance (2) -1 35652 1d00h 571d 571d
suppressed report (2) -1 20505 1h30m 571d 571d
panic: missing alias (6) 2 1494 8d20h 571d 571d
SYZFAIL: failed to recv rpc (4) -1 4456 4h44m 571d 571d
panic: trap type NUM, code=NUM, pc=ADDR (3) 2 4894 6h19m 571d 571d
corrupted report (7) -1 61755 1h31m 572d 572d
witness: reversal: lock order data missing (5) -1 233287 1h32m 572d 572d
SYZFAIL: ioctl remote attach failed (6) -1 81542 now 572d 572d
SYZFAIL: failed to mkdtemp (2) -1 315869 5m 572d 572d
SYZFAIL: failed to send rpc (2) -1 37664 26m 572d 572d
SYZFAIL: tun_id out of range (4) -1 4107793 now 572d 572d
SYZFAIL: failed to mkdir (2) -1 54758 1h44m 572d 572d
SYZFAIL: pipe failed -1 7808 14d 776d 776d
protection_fault: lf_advlock (4) -1 syz, C 67 11h44m 893d 893d
uvm_fault: ktrops (2) -1 syz, C 635 8h10m 1065d 1065d
uvm_fault: schedclock -1 syz 11 723d 1091d 914d
kernel: page fault trap, code=NUM (3) -1 syz, C 96 49d 1121d 879d
malloc: free list modified: free (4) -1 syz, C 44 4d22h 1143d 1142d
uvm_fault: hardclock (5) -1 syz 4 1123d 1275d 1275d
panic: ufsdirhash_lookup: bad offset in hash array (3) 2 syz, C 107 16d 1286d 991d
uvm_fault: memcpy (5) -1 syz, C 112 50d 1420d 1420d
assert "uvn->u_obj.uo_refs == NUM" failed in uvm_vnode.c (2) -1 syz 2 1424d 1424d 1424d
panic: pmap_unwire: invalid PDE 2 syz 6 835d 1478d 1420d
no output from test machine (8) -1 syz, C 912831 now 1488d 1484d
uvm_fault: ffs_indirtrunc -1 syz, C 43 22d 1532d 1532d
witness: reversal: vmmaplk inode (3) -1 syz, C 1061 66d 1564d 1514d
SYZFATAL: executor NUM failed NUM times: executor NUM: exit status NUM -1 syz 175427 2d05h 1586d 1586d
panic: bad dir (3) 2 syz, C 223 85d 1593d 1421d
uvm_fault: ufs_lookup -1 syz, C 746 22d 1688d 1040d
kernel: double fault trap, code=NUM (2) -1 syz, C 41 98d 1688d 1640d
protection_fault: ktrops -1 syz, C 259 749d 1698d 1678d
protection_fault: sblock -1 syz 38 1522d 1701d 1701d
uvm_fault: fifo_write (2) -1 syz, C 3430 723d 1709d 1394d
SYZFAIL: tun: read failed -1 syz 592254 now 1726d 1695d
SYZFAIL: command failed -1 syz 15838 65d 2014d 1697d
panic: ufs_rename: lost dir entry 2 syz, C 148 16d 2388d 1626d
lost connection to test machine (2) -1 1780217 now 2805d never