Instances [tested repos]:
Name Last active Uptime Corpus Coverage 🛈 Crashes Execs Kernel build syzkaller build Bugs
Commit Config Freshness Status Commit Freshness Status All Only
ci-openbsd-kasan now 8h15m 6741 43540 3857 900311 3ca837577e76 .config 4d18h afb79809 8h52m all only
ci-openbsd-main now 7h57m 7931 46788 4023 1093382 b52801912201 .config 9h41m afb79809 8h52m all only
ci-openbsd-multicore now 7h39m 7593 47630 3914 1014537 ece1de515165 .config 9h23m afb79809 8h52m all only
ci-openbsd-setuid now 7h47m 4558 30422 4903 1283578 ece1de515165 .config 9h23m afb79809 8h52m all only
Extra filters: [With Repro]
upstream (180) 🔗
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Last activity
SYZFAIL: cover_unprotect invokeddenied attempt to set clock back ADDR seconds -1 1 18h32m 18h31m 18h31m
uvm_fault: art_iter_open -1 1 1d23h 1d23h 1d23h
uvm_fault: pfi_kif_update (2) -1 1 2d21h 2d21h 2d21h
protection_fault: sysctl_doproc (3) -1 1 3d03h 3d03h 3d03h
uvm_fault: pciioctl -1 1 3d04h 3d04h 3d04h
protection_fault: rtable_l2 -1 1 6d02h 6d02h 6d02h
uvm_fault: witness_checkorder (7) -1 1 7d03h 7d03h 7d03h
assert "gkif != NULL" failed in pf_if.c -1 1 14d 14d 14d
panic: free: non-malloced addr ADDR type ip_moptions (2) 2 2 13d 14d 14d
SYZFAIL: too much cover (3) -1 1 14d 14d 14d
panic: kernel diagnostic assertion "pg->wire_count != NUM" failed: file "/syzkaller/managers/setuid/kernel/sys/uvm/uvm_p (2) 2 1 16d 16d 16d
uvm_fault: ip6_freemoptions (2) -1 2 1d04h 16d 16d
uvm_fault: in_ifdetach -1 1 18d 18d 18d
KASAN: invalid memory access in in_ifdetach -1 5 15d 18d 18d
SYZFAIL: mmap of output file failed (2) -1 1 19d 19d 19d
assert "info->rti_ifa->ifa_ifp != NULL" failed in route.c (3) -1 1 20d 20d 20d
uvm_fault: rtable_walk -1 2 12d 22d 22d
panic: free: size too small NUM <= NUM / NUM (ADDR) type rtable 2 4 1d23h 23d 23d
SYZFAIL: bad allocate request -1 3 16d 25d 25d
panic: free: non-malloced addr 0x3000 type ip_moptions 2 1 25d 25d 25d
uvm_fault: if_delgroup -1 1 26d 26d 26d
uvm_fault: uid_find -1 1 26d 26d 26d
uvm_fault: pfi_xcommit -1 2 6d14h 27d 27d
uvm_fault: wsmouseopen -1 2 17d 27d 27d
assert "(dirblock < dh->dh_nblk && dh->dh_blkfree[dirblock] >= (((slotneeded) + ((NUM) - NUM)) / (NUM)))" failed in ufs_ -1 4 23h59m 28d 28d
uvm_fault: malloc -1 10 12h26m 30d 30d
assert "kd_lookup(kd->kd_unit) == NULL" failed in kcov.c (6) -1 1 32d 32d 32d
SYZFAIL: cover_u -1 4 2d18h 34d 34d
uvm_fault: udv_detach -1 1 34d 34d 34d
malloc: free list modified: proc (2) -1 1 35d 35d 35d
SYZFAIL: cover_unprotect invoked -1 2 1d13h 36d 36d
malloc: free list modified: vnodes -1 1 37d 37d 37d
uvm_fault: rtable_getsource -1 1 38d 38d 38d
uvm_fault: ufsdirhash_add -1 2 22h43m 39d 39d
panic: kernel diagnostic assertion "map->limit == 2 1 40d 40d 40d
panic: acquiring blockable sleep lock with spinlock or critical section held (rwlock) vmmaplk (4) 2 3 19d 41d 41d
uvm_fault: ip_setmoptions -1 1 42d 42d 42d
SYZFAIL: cover_unprotect invoked on an unmapped cover_t object -1 194006 now 43d 43d
kernel: protection fauplatnic : u n h an dl e d a f NUM -1 1 43d 43d 43d
protection_fault: dtioctl -1 1 43d 43d 43d
panic: ffs_blkfree: bad size (7) 2 1 45d 45d 45d
uvm_fault: solock_shared -1 1 45d 45d 45d
uvm_fault: scsi_xs_put -1 1 45d 45d 45d
panic: uvm_faultWAuRnNINe:lSoPck NOT LOdWEREs nN SYSCALL NUM NUM EXIT NUM c 2 1 45d 45d 45d
pool: free list modified: sockpl (4) -1 1 47d 47d 47d
uvm_fault: rtable_clearsource -1 7 23d 47d 47d
uvm_fault: rtable_lookup -1 2 38d 48d 48d
SYZFAIL: too many calls in output (3) -1 10 15d 48d 48d
uvm_fault: wsmouseclose -1 1 48d 48d 48d
malloc: free list modified: UVM -1 6 23d 49d 49d
uvm_fault: ifa_ifwithaddr -1 1 49d 49d 49d
malloc: free list modified: ??? -1 5 22d 49d 49d
panic: free: non-malloced addr 0x2000 type ip_moptions 2 1 50d 50d 50d
uvm_fault: dt_ioctl_record_stop (4) -1 3 4d23h 50d 50d
uvm_fault: mtx_enter (2) -1 5 3d15h 53d 53d
panic: kernel diagnostic assertion "(p->pfik_flagrefs == NUM) || (p->pfik_flagrefs == NUM)" failed 2 1 54d 54d 54d
uvm_fault: _rb_insert -1 1 55d 55d 55d
protection_fault: rtable_match -1 1 57d 57d 57d
panic: kernel diagnostic assertion "map->limit == rtmap_limit" fai 2 1 58d 58d 58d
assert "rdomain == rtable_l2(rdomain)" failed in route.c (4) -1 3 27d 59d 59d
uvm_fault: kpageflttrap -1 10 5d16h 59d 59d
uvm_fault: knote_processfork -1 40 23d 59d 59d
uvm_fault: upageflttrap -1 26 9d06h 59d 59d
uvm_fault: rtable_add -1 1 59d 59d 59d
uvm_fault: pmap_page_remove (8) -1 1 60d 60d 60d
protection_fault: pool_do_put (3) -1 1 60d 60d 60d
panic: free: unaligned addr ADDR, size NUM, type ip_moptions, mask NUM 2 1 64d 64d 64d
panic: ffs_blkfree: freeing free frag (2) 2 1 65d 65d 65d
protection_fault: ifiq_enqueue_qlim -1 1 65d 65d 65d
uvm_fault: ip_freemoptions -1 3 1d01h 69d 69d
uvm_fault: amap_copy -1 1 70d 70d 70d
malloc: free list modified: temp -1 5 4d00h 71d 71d
uvm_fault: ifiq_enqueue_qlim -1 4 10d 73d 73d
SYZFAIL: tun: re (2) -1 2 26d 75d 75d
panic: unhandled af NUM 2 6 1d00h 75d 75d
assert "refs != ~NUM" failed in multico -1 1 76d 76d 76d
uvm_fault: device_lookup -1 2 28d 76d 76d
protection_fault: ip6_freemoptions -1 1 77d 77d 77d
assert "bpfilter_lookup(unit) == NULL" failed in bpf.c (2) -1 7 43d 77d 77d
witness: lock_object uninitialized: ADDR (6) -1 7 1d04h 77d 77d
panic: kernel diagnostic assertion "refs != ~NUM" failed: file 2 2 31d 77d 77d
assert "refs != ~NUM" failed in kern -1 1 77d 77d 77d
assert "!ISSET(rt->rt_flags, RTF_LOCAL)" failed in nd6.c (4) -1 3 49d 79d 79d
uvm_fault: sys_msgget -1 1 80d 80d 80d
uvm_fault: in_pcbhash_insert -1 8 3d21h 80d 80d
uvm_fault: rtable_exists -1 21 6d22h 82d 82d
uvm_fault: rtable_match -1 28 5d21h 83d 83d
uvm_fault: uvm_fault_upper_lookup -1 3 76d 83d 83d
uvm_fault: shm_deallocate_segment -1 8 6d15h 84d 84d
uvm_fault: sysctl_sysvipc -1 17 18d 85d 85d
protection_fault: uvm_fault_upper_lookup -1 1 86d 86d 86d
panic: free: size too large NUM > NUM (ADDR) type rtable 2 63 13h08m 86d 86d
protection_fault: amap_lookups -1 3 78d 86d 86d
protection_fault: free -1 1 86d 86d 86d
uvm_fault: dtioctl -1 17 1d17h 87d 87d
uvm_fault: rtable_l2 -1 85 1d04h 87d 87d
KASAN: invalid memory access in rw_status -1 4 35d 87d 87d
uvm_fault: amap_lookups -1 65 2d17h 87d 87d
protection_fault: malloc (3) -1 3454 5h56m 88d 88d
KASAN: invalid memory access in witness_checkorder -1 5 74d 88d 87d
KASAN: invalid memory access in __mp_lock -1 2 87d 90d 90d
panic: init 2 2 61d 99d 99d
witness: reversal: fdlock inode (3) -1 4 51d 100d 100d
assert "pr->ps_threadcnt == NUM" failed in kern_exit.c (3) -1 2 78d 103d 103d
panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock (9) 2 15 8d07h 104d 104d
uvm_fault: sys_shmat (3) -1 41 1h42m 107d 107d
uvm_fault: bpfioctl (6) -1 2 85d 107d 107d
panic: i 2 3 84d 112d 112d
panic: (5) 2 4 26d 126d 126d
assert "rn != NULL" failed in pipex.c (3) -1 5 78d 126d 126d
panic: amap_pp_adjref: negative reference count (3) 2 47 8h46m 132d 132d
witness: reversal: sbufsnd inode (4) -1 16 37d 139d 139d
assert "(p->pfik_flagrefs == NUM) || (p->pfik_flagrefs == NUM)" failed in pf_if.c -1 27 18h12m 151d 151d
witness: reversal: pf_lock netlock (4) -1 367 20h40m 152d 152d
panic: unhandled af (6) 2 299 23h09m 156d 156d
SYZFAIL: repeatedly failed to execute the program (3) -1 7 6d20h 162d 162d
assert "ISSET(p->p_flag, P_SUSPSIG | P_SUSPSINGLE) == NUM" failed in kern_sig.c -1 45 1d05h 162d 162d
panic: ffs_valloc: dup alloc (5) 2 304 9h45m 194d 194d
protection_fault: pf_anchor_global_RB_REMOVE (3) -1 29 54d 195d 195d
uvm_fault: ffs_freefile (3) -1 5 62d 196d 196d
panic: init died (signal NUM, exit NUM) (2) 2 3377 20m 196d 196d
uvm_fault: ufsdirhash_lookup -1 10 1d00h 197d 197d
SYZFAIL: SIGFPE -1 1626 6h04m 198d 198d
SYZFAIL: cover mmap failed -1 1357 6h54m 198d 198d
SYZFAIL: child failed -1 16501 7m 198d 198d
SYZFAIL: SIGILL -1 1670 18m 198d 198d
assert "atomic_load_int(&fdp->fd_nuserevents) == NUM" failed in kern_descrip.c (2) -1 7 83d 209d 209d
assert "pg->wire_count != NUM" failed in uvm_page.c -1 9168 1d15h 291d 291d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (26) -1 852 9h53m 312d 312d
kernel: protection fault trap, code=NUM (9) -1 16 1d21h 315d 315d
SYZFAIL: SIGSEGV (2) -1 1676 17h09m 323d 323d
assert "cifp != NULL" failed in route.c (5) -1 16 50d 448d 448d
SYZFAIL: can't reallocate -1 54 8d02h 529d 529d
panic: uvm_fault_unwire_locked: address not in map (5) 2 224 5h19m 555d 555d
panic: chgproccnt: procs < NUM 2 24 4d08h 594d 594d
SYZFAIL: coverage filter is full (3) -1 753546 2d20h 598d 598d
protection_fault: bpfdetach -1 87 17d 600d 600d
SYZFAIL: SIGBUS (2) -1 3332 9h36m 604d 604d
assert "sc->sc_dev == NUM" failed in if_tun.c (6) -1 172 1d03h 606d 606d
assert "refs != ~NUM" failed in kern_synch.c -1 1326 1d11h 608d 608d
SYZFAIL: posix_spawnp failed -1 syz 7638 5d10h 610d 72d
assert "map->limit == rtmap_limit" failed in rtable.c (2) -1 538 23h59m 610d 610d
uvm_fault: proc_trampoline (2) -1 3511 16d 610d 610d
protection_fault: witness_checkorder (5) -1 56 1d05h 610d 610d
uvm_fault: arp_rtrequest (3) -1 505 2d01h 611d 611d
can't ssh into the instance (2) -1 35745 1d10h 612d 612d
suppressed report (2) -1 22025 now 612d 612d
panic: missing alias (6) 2 1497 1d09h 612d 612d
SYZFAIL: failed to recv rpc (4) -1 5154 9h25m 612d 612d
panic: trap type NUM, code=NUM, pc=ADDR (3) 2 4970 18h34m 612d 612d
corrupted report (7) -1 62011 1h11m 613d 613d
witness: reversal: lock order data missing (5) -1 236781 39m 613d 613d
SYZFAIL: ioctl remote attach failed (6) -1 94256 5m 613d 613d
SYZFAIL: failed to mkdtemp (2) -1 328950 32m 613d 613d
SYZFAIL: failed to send rpc (2) -1 38891 1h23m 613d 613d
SYZFAIL: tun_id out of range (4) -1 4337437 now 613d 613d
SYZFAIL: failed to mkdir (2) -1 56864 36m 613d 613d
SYZFAIL: pipe failed -1 7811 9h34m 817d 817d
protection_fault: lf_advlock (4) -1 syz, C 69 9d11h 934d 934d
uvm_fault: ktrops (2) -1 syz, C 697 2d21h 1106d 1106d
malloc: free list modified: free (4) -1 syz, C 48 2d17h 1184d 1183d
uvm_fault: hardclock (5) -1 syz 4 1164d 1316d 1316d
panic: ufsdirhash_lookup: bad offset in hash array (3) 2 syz, C 107 1d13h 1327d 1033d
uvm_fault: memcpy (5) -1 syz, C 112 92d 1462d 1462d
assert "uvn->u_obj.uo_refs == NUM" failed in uvm_vnode.c (2) -1 syz 2 1465d 1465d 1465d
panic: pmap_unwire: invalid PDE 2 syz 6 876d 1520d 1461d
no output from test machine (8) -1 syz, C 926343 now 1529d 1525d
uvm_fault: ffs_indirtrunc -1 syz, C 43 63d 1573d 1573d
witness: reversal: vmmaplk inode (3) -1 syz, C 1065 9h47m 1605d 1555d
SYZFATAL: executor NUM failed NUM times: executor NUM: exit status NUM -1 syz 175427 1d05h 1628d 1628d
panic: bad dir (3) 2 syz, C 223 126d 1634d 1462d
uvm_fault: ufs_lookup -1 syz, C 746 64d 1729d 1081d
kernel: double fault trap, code=NUM (2) -1 syz, C 41 139d 1729d 1681d
protection_fault: ktrops -1 syz, C 259 790d 1739d 1719d
protection_fault: sblock -1 syz 38 1563d 1742d 1742d
uvm_fault: fifo_write (2) -1 syz, C 3430 764d 1750d 1435d
SYZFAIL: tun: read failed -1 syz 599210 20m 1768d 1736d
SYZFAIL: command failed -1 syz 15843 15d 2055d 1738d
panic: ufs_rename: lost dir entry 2 syz, C 150 11d 2429d 1667d
lost connection to test machine (2) -1 2007967 now 2846d never