Instances [tested repos]:
Name Last active Uptime Corpus Coverage 🛈 Crashes Execs Kernel build syzkaller build Bugs
Commit Config Freshness Status Commit Freshness Status All Only
ci-openbsd-kasan now 13h52m 6287 41230 288 70552 ad30987d14ad .config 2d21h 853b104b 19h30m all only
ci-openbsd-main 9m 12h59m 8170 47818 322 76416 c10aa57bf0a6 .config 19h55m 853b104b 19h30m all only
ci-openbsd-multicore now 2m 7730 48934 275 132075 a0c91716cd0c .config 1h36m 853b104b 19h30m all only
ci-openbsd-setuid 18m 12h57m 4490 30418 370 97532 c10aa57bf0a6 .config 19h55m 853b104b 19h30m all only
Extra filters: [With Repro]
upstream (185) 🔗
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Last activity
uvm_fault: rtable_walk -1 1 1d22h 1d22h 1d22h
protection_fault: in_ifdetach -1 23 50m 2d12h 2d12h
panic: free: size too small NUM <= NUM / NUM (ADDR) type rtable 2 1 2d18h 2d18h 2d18h
SYZFAIL: bad allocate request -1 1 4d19h 4d19h 4d19h
panic: free: non-malloced addr 0x3000 type ip_moptions 2 1 5d01h 5d01h 5d01h
uvm_fault: if_delgroup -1 1 5d14h 5d14h 5d14h
uvm_fault: uid_find -1 1 5d18h 5d18h 5d18h
uvm_fault: pfi_xcommit -1 1 6d04h 6d04h 6d04h
uvm_fault: wsmouseopen -1 1 6d11h 6d11h 6d11h
assert "(dirblock < dh->dh_nblk && dh->dh_blkfree[dirblock] >= (((slotneeded) + ((NUM) - NUM)) / (NUM)))" failed in ufs_ -1 1 7d09h 7d09h 7d09h
uvm_fault: malloc -1 1 9d15h 9d15h 9d15h
assert "kd_lookup(kd->kd_unit) == NULL" failed in kcov.c (6) -1 1 11d 11d 11d
SYZFAIL: cover_u -1 2 5d15h 13d 13d
uvm_fault: udv_detach -1 1 14d 14d 14d
malloc: free list modified: proc (2) -1 1 14d 14d 14d
SYZFAIL: cover_unprotect invoked -1 1 15d 15d 15d
malloc: free list modified: vnodes -1 1 16d 16d 16d
uvm_fault: rtable_getsource -1 1 18d 18d 18d
assert "next != NULL && next->start <= entry->end" failed in uvm_fault.c (7) -1 syz, C 2 18d 18d 18d
uvm_fault: ufsdirhash_add -1 1 19d 19d 19d
panic: kernel diagnostic assertion "map->limit == 2 1 19d 19d 19d
panic: acquiring blockable sleep lock with spinlock or critical section held (rwlock) vmmaplk (4) 2 2 15d 20d 20d
KASAN: invalid memory access in mrt6_ioctl -1 1 20d 20d 20d
uvm_fault: ip_setmoptions -1 1 21d 21d 21d
SYZFAIL: cover_unprotect invoked on an unmapped cover_t object -1 98136 now 22d 22d
kernel: protection fauplatnic : u n h an dl e d a f NUM -1 1 22d 22d 22d
protection_fault: dtioctl -1 1 22d 22d 22d
panic: ffs_blkfree: bad size (7) 2 1 24d 24d 24d
uvm_fault: solock_shared -1 1 24d 24d 24d
uvm_fault: scsi_xs_put -1 1 24d 24d 24d
panic: uvm_faultWAuRnNINe:lSoPck NOT LOdWEREs nN SYSCALL NUM NUM EXIT NUM c 2 1 25d 25d 25d
pool: free list modified: sockpl (4) -1 1 26d 26d 26d
uvm_fault: rtable_clearsource -1 7 2d16h 27d 27d
uvm_fault: rtable_lookup -1 2 17d 27d 27d
SYZFAIL: too many calls in output (3) -1 9 2d23h 27d 27d
uvm_fault: wsmouseclose -1 1 27d 27d 27d
malloc: free list modified: UVM -1 6 2d18h 28d 28d
uvm_fault: ifa_ifwithaddr -1 1 28d 28d 28d
malloc: free list modified: ??? -1 5 1d13h 28d 28d
panic: free: non-malloced addr 0x2000 type ip_moptions 2 1 29d 29d 29d
uvm_fault: dt_ioctl_record_stop (4) -1 2 28d 30d 30d
uvm_fault: mtx_enter (2) -1 3 28d 32d 32d
panic: kernel diagnostic assertion "(p->pfik_flagrefs == NUM) || (p->pfik_flagrefs == NUM)" failed 2 1 33d 33d 33d
uvm_fault: _rb_insert -1 1 34d 34d 34d
protection_fault: rtable_match -1 1 36d 36d 36d
panic: kernel diagnostic assertion "map->limit == rtmap_limit" fai 2 1 37d 37d 37d
KASAN: invalid memory access in pf_remove_if_empty_ruleset -1 13 1d02h 37d 37d
assert "rdomain == rtable_l2(rdomain)" failed in route.c (4) -1 3 7d01h 38d 38d
uvm_fault: kpageflttrap -1 6 23d 38d 38d
uvm_fault: knote_processfork -1 40 2d18h 38d 38d
uvm_fault: upageflttrap -1 24 3d13h 38d 38d
uvm_fault: rtable_add -1 1 39d 39d 39d
uvm_fault: pmap_page_remove (8) -1 1 39d 39d 39d
protection_fault: pool_do_put (3) -1 1 39d 39d 39d
panic: free: unaligned addr ADDR, size NUM, type ip_moptions, mask NUM 2 1 43d 43d 43d
panic: ffs_blkfree: freeing free frag (2) 2 1 44d 44d 44d
protection_fault: ifiq_enqueue_qlim -1 1 45d 45d 45d
uvm_fault: ip_freemoptions -1 2 37d 48d 48d
uvm_fault: amap_copy -1 1 50d 50d 50d
malloc: free list modified: temp -1 2 15d 50d 50d
uvm_fault: ifiq_enqueue_qlim -1 3 25d 52d 52d
SYZFAIL: tun: re (2) -1 2 5d15h 54d 54d
panic: unhandled af NUM 2 5 40d 54d 54d
assert "refs != ~NUM" failed in multico -1 1 55d 55d 55d
uvm_fault: device_lookup -1 2 7d08h 55d 55d
protection_fault: ip6_freemoptions -1 1 56d 56d 56d
assert "bpfilter_lookup(unit) == NULL" failed in bpf.c (2) -1 7 22d 56d 56d
witness: lock_object uninitialized: ADDR (6) -1 5 10d 56d 56d
panic: kernel diagnostic assertion "refs != ~NUM" failed: file 2 2 10d 56d 56d
assert "refs != ~NUM" failed in kern -1 1 57d 57d 57d
assert "!ISSET(rt->rt_flags, RTF_LOCAL)" failed in nd6.c (4) -1 3 28d 58d 58d
uvm_fault: sys_msgget -1 1 59d 59d 59d
uvm_fault: in_pcbhash_insert -1 7 10d 59d 59d
uvm_fault: rtable_exists -1 19 1d15h 61d 61d
uvm_fault: rtable_match -1 24 6d20h 62d 62d
uvm_fault: uvm_fault_upper_lookup -1 3 55d 62d 62d
uvm_fault: shm_deallocate_segment -1 7 3d08h 63d 63d
uvm_fault: sysctl_sysvipc -1 16 7d05h 64d 64d
protection_fault: uvm_fault_upper_lookup -1 1 65d 65d 65d
panic: free: size too large NUM > NUM (ADDR) type rtable 2 44 11h05m 65d 65d
protection_fault: amap_lookups -1 3 57d 65d 65d
protection_fault: free -1 1 65d 65d 65d
uvm_fault: dtioctl -1 15 10d 66d 66d
uvm_fault: rtable_l2 -1 74 4d16h 66d 66d
KASAN: invalid memory access in rw_status -1 4 14d 66d 66d
uvm_fault: amap_lookups -1 60 7h06m 67d 67d
protection_fault: malloc (3) -1 2767 39m 67d 67d
KASAN: invalid memory access in witness_checkorder -1 5 53d 67d 66d
KASAN: invalid memory access in __mp_lock -1 2 66d 69d 69d
SYZFAIL: dup2(NUM, kInPipeFd) failed (4) -1 1 73d 73d 73d
panic: init 2 2 40d 78d 78d
SYZFAIL: mmap of input file failed (2) -1 1 78d 78d 78d
witness: reversal: fdlock inode (3) -1 4 30d 79d 79d
witness: reversal: sbufrcv inode (4) -1 1 80d 80d 80d
assert "pr->ps_threadcnt == NUM" failed in kern_exit.c (3) -1 2 57d 82d 82d
panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock (9) 2 12 3h45m 83d 83d
uvm_fault: sys_shmat (3) -1 25 12h32m 86d 86d
uvm_fault: bpfioctl (6) -1 2 64d 86d 86d
panic: in 2 2 89d 90d 90d
panic: i 2 3 63d 91d 91d
panic: (5) 2 4 6d02h 105d 105d
panic: init died (signal NUM, 2 2 79d 105d 105d
assert "rn != NULL" failed in pipex.c (3) -1 5 57d 106d 106d
panic: amap_pp_adjref: negative reference count (3) 2 41 11h50m 111d 111d
uvm_fault: ufs_readdir -1 186 39d 115d 115d
witness: reversal: sbufsnd inode (4) -1 16 17d 118d 118d
uvm_fault: remrunqueue -1 3 83d 129d 129d
assert "(p->pfik_flagrefs == NUM) || (p->pfik_flagrefs == NUM)" failed in pf_if.c -1 26 25d 130d 130d
witness: reversal: pf_lock netlock (4) -1 248 3h55m 131d 131d
panic: unhandled af (6) 2 261 1h24m 135d 135d
SYZFAIL: repeatedly failed to execute the program (3) -1 5 23d 141d 141d
assert "ISSET(p->p_flag, P_SUSPSIG | P_SUSPSINGLE) == NUM" failed in kern_sig.c -1 38 1h21m 142d 142d
panic: kmmaplk rwlock ADDR: enter read deadlock 2 14 78d 167d 167d
panic: ffs2_balloc: unwind failed (4) 2 21 57d 168d 168d
uvm_fault: ufs_direnter (6) -1 10 87d 170d 170d
panic: kerne 2 3 75d 172d 172d
panic: ffs_valloc: dup alloc (5) 2 219 3d12h 173d 173d
protection_fault: pf_anchor_global_RB_REMOVE (3) -1 29 34d 174d 174d
uvm_fault: ffs_freefile (3) -1 5 41d 175d 175d
panic: init died (signal NUM, exit NUM) (2) 2 3023 37m 175d 175d
uvm_fault: kcov_remote_enter (5) -1 596 44d 175d 175d
uvm_fault: ffs2_balloc (7) -1 392 41d 175d 175d
uvm_fault: ufsdirhash_lookup -1 8 6d08h 176d 176d
SYZFAIL: SIGFPE -1 1506 1h07m 177d 177d
SYZFAIL: cover mmap failed -1 1161 4h08m 178d 178d
SYZFAIL: child failed -1 12837 11m 178d 178d
SYZFAIL: SIGILL -1 1535 7h24m 178d 178d
assert "atomic_load_int(&fdp->fd_nuserevents) == NUM" failed in kern_descrip.c (2) -1 7 62d 188d 188d
assert "pg->wire_count != NUM" failed in uvm_page.c -1 9157 1d13h 270d 270d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (26) -1 836 9d15h 291d 291d
kernel: protection fault trap, code=NUM (9) -1 14 32d 295d 295d
SYZFAIL: SIGSEGV (2) -1 1563 6h54m 302d 302d
assert "cifp != NULL" failed in route.c (5) -1 16 29d 427d 427d
SYZFAIL: can't reallocate -1 53 23d 508d 508d
panic: uvm_fault_unwire_locked: address not in map (5) 2 198 9h35m 534d 534d
panic: chgproccnt: procs < NUM 2 23 57d 573d 573d
SYZFAIL: coverage filter is full (3) -1 750270 28d 577d 577d
protection_fault: bpfdetach -1 86 32d 579d 579d
uvm_fault: x86_ipi_db (9) -1 8199 39d 581d 581d
SYZFAIL: SIGBUS (2) -1 3118 2h26m 583d 583d
assert "sc->sc_dev == NUM" failed in if_tun.c (6) -1 143 1d04h 585d 585d
assert "refs != ~NUM" failed in kern_synch.c -1 1293 23h52m 587d 587d
SYZFAIL: posix_spawnp failed -1 syz 7578 4d15h 589d 51d
assert "map->limit == rtmap_limit" failed in rtable.c (2) -1 528 2h32m 589d 589d
uvm_fault: proc_trampoline (2) -1 3509 2d17h 589d 589d
protection_fault: witness_checkorder (5) -1 47 7h45m 589d 589d
uvm_fault: arp_rtrequest (3) -1 496 3d16h 590d 590d
pool: free list modified: shmpl (6) -1 925 48d 591d 591d
uvm_fault: db_enter (6) -1 641 43d 591d 591d
can't ssh into the instance (2) -1 35713 17h32m 592d 592d
suppressed report (2) -1 21287 2h33m 592d 592d
panic: missing alias (6) 2 1495 2d12h 592d 592d
SYZFAIL: failed to recv rpc (4) -1 4867 2h12m 592d 592d
panic: trap type NUM, code=NUM, pc=ADDR (3) 2 4939 5h46m 592d 592d
corrupted report (7) -1 61901 11h45m 592d 592d
witness: reversal: lock order data missing (5) -1 234736 now 592d 592d
SYZFAIL: ioctl remote attach failed (6) -1 88539 now 592d 592d
SYZFAIL: failed to mkdtemp (2) -1 320948 now 592d 592d
SYZFAIL: failed to send rpc (2) -1 38338 1h15m 592d 592d
SYZFAIL: tun_id out of range (4) -1 4222138 15m 592d 592d
SYZFAIL: failed to mkdir (2) -1 55608 1h15m 592d 592d
SYZFAIL: pipe failed -1 7808 34d 796d 796d
protection_fault: lf_advlock (4) -1 syz, C 67 20d 913d 913d
uvm_fault: ktrops (2) -1 syz, C 660 5h13m 1085d 1085d
kernel: page fault trap, code=NUM (3) -1 syz, C 96 70d 1142d 899d
malloc: free list modified: free (4) -1 syz, C 45 10d 1163d 1162d
uvm_fault: hardclock (5) -1 syz 4 1143d 1295d 1295d
panic: ufsdirhash_lookup: bad offset in hash array (3) 2 syz, C 107 36d 1306d 1012d
uvm_fault: memcpy (5) -1 syz, C 112 71d 1441d 1441d
assert "uvn->u_obj.uo_refs == NUM" failed in uvm_vnode.c (2) -1 syz 2 1445d 1445d 1445d
panic: pmap_unwire: invalid PDE 2 syz 6 855d 1499d 1440d
no output from test machine (8) -1 syz, C 919570 now 1508d 1504d
uvm_fault: ffs_indirtrunc -1 syz, C 43 43d 1552d 1552d
witness: reversal: vmmaplk inode (3) -1 syz, C 1061 16d 1584d 1534d
SYZFATAL: executor NUM failed NUM times: executor NUM: exit status NUM -1 syz 175427 8d10h 1607d 1607d
panic: bad dir (3) 2 syz, C 223 105d 1613d 1441d
uvm_fault: ufs_lookup -1 syz, C 746 43d 1708d 1060d
kernel: double fault trap, code=NUM (2) -1 syz, C 41 119d 1708d 1660d
protection_fault: ktrops -1 syz, C 259 769d 1718d 1698d
protection_fault: sblock -1 syz 38 1542d 1722d 1721d
uvm_fault: fifo_write (2) -1 syz, C 3430 743d 1729d 1414d
SYZFAIL: tun: read failed -1 syz 595818 39m 1747d 1715d
SYZFAIL: command failed -1 syz 15838 86d 2035d 1717d
panic: ufs_rename: lost dir entry 2 syz, C 149 7d20h 2408d 1647d
lost connection to test machine (2) -1 1894533 now 2825d never