SYZFAIL: cover_unprotect invoked on an unmapped cover_t object

Status: upstream: reported on 2026/08/27 20:44
Reported-by: syzbot+37c63634bc39422ea050@syzkaller.appspotmail.com
First crash: 2d18h, last: now

Sample crash report:
SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
 (errno 4: Interrupted system call)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap3: SIOCIFDESTROY: Device not configured
SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap3: SIOCIFDESTROY: Device not configured
SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap3: SIOCIFDESTROY: Device not configured
SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap3: SIOCIFDESTROY: Device not configured
SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap3: SIOCIFDESTROY: Device not configured
SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap3: SIOCIFDESTROY: Device not configured
SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap3: SIOCIFDESTROY: Device not configured
SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap3: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap3: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap3: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap3: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap3: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap3: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap3: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap3: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
SYZFAIL: failed to mkdtemp
 (errno 22: Invalid argument)
SYZFAIL: failed to mkdtemp
 (errno 22: Invalid argument)
SYZFAIL: failed to mkdtemp
 (errno 22: Invalid argument)
SYZFAIL: failed to mkdtemp
 (errno 22: Invalid argument)
SYZFAIL: failed to mkdtemp
 (errno 22: Invalid argument)
SYZFAIL: repeatedly failed to execute the program
proc=3 req=51 state=1 status=67 (errno 4: Interrupted system call)


OpenBSD/amd64 (ci-openbsd-main-3.us-central1-a.c.syzkaller.internal) (tty00)

login: uvn_flush: obj=0xfffff880706a12d8, offset=0x3ff000.  error during pageout.
uvn_flush: WARNING: changes to page may be lost!
set $lines = 0

OpenBSD/amd64 (ci-openbsd-main-3.us-central1-a.c.syzkaller.internal) (tty00)

login: show panic

Crashes (12479):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/08/30 14:25 openbsd dcba0a69dd74 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 14:18 openbsd dcba0a69dd74 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 14:06 openbsd dcba0a69dd74 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 13:56 openbsd dcba0a69dd74 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 13:50 openbsd dcba0a69dd74 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 13:42 openbsd dcba0a69dd74 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 13:26 openbsd dcba0a69dd74 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 13:18 openbsd dcba0a69dd74 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 13:13 openbsd dcba0a69dd74 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 13:07 openbsd dcba0a69dd74 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 12:52 openbsd dcba0a69dd74 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 12:42 openbsd dcba0a69dd74 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 12:34 openbsd dcba0a69dd74 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 12:18 openbsd dcba0a69dd74 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 12:03 openbsd dcba0a69dd74 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 11:55 openbsd dcba0a69dd74 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 11:44 openbsd dcba0a69dd74 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 11:07 openbsd dcba0a69dd74 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 10:58 openbsd dcba0a69dd74 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 10:52 openbsd dcba0a69dd74 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 10:30 openbsd dcba0a69dd74 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 10:24 openbsd dcba0a69dd74 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 10:19 openbsd dcba0a69dd74 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 09:55 openbsd dcba0a69dd74 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 09:50 openbsd dcba0a69dd74 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 14:36 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan eb6d9273e3e5 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 14:30 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan eb6d9273e3e5 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 14:13 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan eb6d9273e3e5 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 13:34 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan eb6d9273e3e5 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 12:58 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan eb6d9273e3e5 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 12:26 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan eb6d9273e3e5 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 12:09 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan eb6d9273e3e5 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 11:50 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan eb6d9273e3e5 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 11:37 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan eb6d9273e3e5 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 11:30 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan eb6d9273e3e5 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 11:23 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan eb6d9273e3e5 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 11:18 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan eb6d9273e3e5 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 11:13 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan eb6d9273e3e5 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 10:47 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan eb6d9273e3e5 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 10:42 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan eb6d9273e3e5 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 10:36 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan eb6d9273e3e5 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 10:06 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan eb6d9273e3e5 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 10:01 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan eb6d9273e3e5 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/30 09:45 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan eb6d9273e3e5 2f52988a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/27 20:44 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 18607adc5162 e2fa417d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
* Struck through repros no longer work on HEAD.