SYZFAIL: cover_unprotect invoked on an unmapped cover_t object

Status: upstream: reported on 2026/08/27 20:44
Reported-by: syzbot+37c63634bc39422ea050@syzkaller.appspotmail.com
First crash: 49d, last: now

Sample crash report:
SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
 (errno 4: Interrupted system call)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap0: SIOCIFDESTROY: Device not configured
SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap0: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap0: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap0: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap0: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap0: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap0: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap0: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap0: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap0: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap0: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap0: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap0: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap0: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap0: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap0: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap0: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap0: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap0: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap0: SIOCIFDESTROY: Device not configured
SYZFAIL: too many calls in output
slot=64 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
SYZFAIL: repeatedly failed to execute the program
proc=0 req=33 state=3 status=67 (errno 4: Interrupted system call)


OpenBSD/amd64 (ci-openbsd-multicore-2.us-central1-a.c.syzkaller.internal) (tty00)

login: uvn_flush: obj=0xfffffa806f592738, offset=0x3ff000.  error during pageout.
uvn_flush: WARNING: changes to page may be lost!
set $lines = 0
Password:
Login incorrect
login: show panic
Password:
Login incorrect
login: trace
Password:
Login incorrect
login: show proc
Password:
Login incorrect
show all locks
login: Password:
Login incorrect
show all pools
login: Password:
Login incorrect
trace
login: Password:
Login incorrect
trace
login: Password:

Crashes (219078):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/10/16 02:52 openbsd 2976452f6b3c 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/16 02:28 openbsd 2976452f6b3c 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/16 02:22 openbsd 2976452f6b3c 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/16 02:16 openbsd 2976452f6b3c 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/16 02:09 openbsd 2976452f6b3c 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/16 02:04 openbsd 2976452f6b3c 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/16 01:58 openbsd 2976452f6b3c 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/16 01:51 openbsd 2976452f6b3c 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/16 01:47 openbsd 2976452f6b3c 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/16 01:40 openbsd 2976452f6b3c 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/16 01:30 openbsd 2976452f6b3c 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/16 01:23 openbsd 2976452f6b3c 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/16 01:16 openbsd 2976452f6b3c 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/16 01:09 openbsd 2976452f6b3c 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/16 01:01 openbsd 2976452f6b3c 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/16 00:45 openbsd 2976452f6b3c 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/16 00:39 openbsd 2976452f6b3c 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/16 00:26 openbsd 2976452f6b3c 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/16 00:19 openbsd 2976452f6b3c 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/16 00:12 openbsd 2976452f6b3c 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/16 00:02 openbsd 2976452f6b3c 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/15 23:50 openbsd 2976452f6b3c 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/15 23:44 openbsd 2976452f6b3c 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/15 23:38 openbsd 2976452f6b3c 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/15 23:30 openbsd 2976452f6b3c 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/15 23:22 openbsd 2976452f6b3c 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/15 23:09 openbsd 2976452f6b3c 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/15 23:02 openbsd 2976452f6b3c 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/15 22:50 openbsd 2976452f6b3c 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/15 22:41 openbsd 2976452f6b3c 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/15 22:35 openbsd 2976452f6b3c 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/15 22:27 openbsd 2976452f6b3c 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/15 22:10 openbsd 2976452f6b3c 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/15 21:59 openbsd 2976452f6b3c 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/16 02:59 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan bacaf78497a8 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/16 02:45 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan bacaf78497a8 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/16 02:35 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan bacaf78497a8 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/16 00:53 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan bacaf78497a8 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/16 00:33 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan bacaf78497a8 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/15 23:15 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan bacaf78497a8 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/15 22:55 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan bacaf78497a8 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/15 22:19 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan bacaf78497a8 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/15 21:53 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan bacaf78497a8 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/10/15 21:46 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan bacaf78497a8 3f2522c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/27 20:44 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 18607adc5162 e2fa417d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
* Struck through repros no longer work on HEAD.