SYZFAIL: cover_unprotect invoked on an unmapped cover_t object

Status: upstream: reported on 2026/08/27 20:44
Reported-by: syzbot+37c63634bc39422ea050@syzkaller.appspotmail.com
First crash: 9d18h, last: now

Sample crash report:
SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
 (errno 4: Interrupted system call)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap6: SIOCIFDESTROY: Device not configured
SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap6: SIOCIFDESTROY: Device not configured
SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap6: SIOCIFDESTROY: Device not configured
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap6: SIOCIFDESTROY: Device not configured
SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap6: SIOCIFDESTROY: Device not configured
SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap6: SIOCIFDESTROY: Device not configured
SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap6: SIOCIFDESTROY: Device not configured
SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap6: SIOCIFDESTROY: Device not configured
SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap6: SIOCIFDESTROY: Device not configured
SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap6: SIOCIFDESTROY: Device not configured
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap6: SIOCIFDESTROY: Device not configured
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap6: SIOCIFDESTROY: Device not configured
SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap6: SIOCIFDESTROY: Device not configured
SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap6: SIOCIFDESTROY: Device not configured
SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap6: SIOCIFDESTROY: Device not configured
SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap6: SIOCIFDESTROY: Device not configured
SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap6: SIOCIFDESTROY: Device not configured
SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap6: SIOCIFDESTROY: Device not configured
SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap6: SIOCIFDESTROY: Device not configured
SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
ifconfig: tap6: SIOCIFDESTROY: Device not configured
SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
 (errno 1: Operation not permitted)
SYZFAIL: child failed
 (errno 0: Undefined error: 0)
SYZFAIL: repeatedly failed to execute the program
proc=6 req=27 state=3 status=67 (errno 4: Interrupted system call)


OpenBSD/amd64 (ci-openbsd-multicore-4.us-central1-a.c.syzkaller.internal) (tty00)

login: uvn_flush: obj=0xfffff0006f38d738, offset=0x3fe000.  error during pageout.
uvn_flush: WARNING: changes to page may be lost!
set $lines = 0
Password:
Login incorrect
login: show panic
Password:
Login incorrect
login: trace
Password:
Login incorrect
login: show proc
Password:
Login incorrect
show all locks
login: Password:
Login incorrect
show all pools
login: Password:
Login incorrect
trace
login: Password:
Login incorrect
trace
login: Password:

Crashes (42037):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/09/06 15:32 openbsd 9bba88810ddf 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 15:25 openbsd 9bba88810ddf 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 15:12 openbsd 9bba88810ddf 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 15:07 openbsd 9bba88810ddf 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 14:53 openbsd 9bba88810ddf 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 14:41 openbsd 9bba88810ddf 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 14:29 openbsd 9bba88810ddf 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 14:10 openbsd 9bba88810ddf 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 14:04 openbsd 9bba88810ddf 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 14:00 openbsd 9bba88810ddf 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 13:54 openbsd 9bba88810ddf 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 13:49 openbsd 9bba88810ddf 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 13:38 openbsd 9bba88810ddf 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 13:31 openbsd 9bba88810ddf 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 13:25 openbsd 9bba88810ddf 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 13:17 openbsd 9bba88810ddf 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 13:11 openbsd 9bba88810ddf 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 12:59 openbsd 9bba88810ddf 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 12:52 openbsd 9bba88810ddf 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 12:45 openbsd 9bba88810ddf 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 12:33 openbsd 9bba88810ddf 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 12:27 openbsd 9bba88810ddf 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 12:21 openbsd 9bba88810ddf 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 12:16 openbsd 9bba88810ddf 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 12:10 openbsd 9bba88810ddf 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 11:58 openbsd 9bba88810ddf 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 11:46 openbsd 9bba88810ddf 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 11:39 openbsd 9bba88810ddf 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 11:33 openbsd 9bba88810ddf 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 11:14 openbsd 9bba88810ddf 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 11:09 openbsd 9bba88810ddf 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 15:20 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 06706d23b01e 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 15:01 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 06706d23b01e 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 14:47 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 06706d23b01e 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 14:34 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 06706d23b01e 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 14:23 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 06706d23b01e 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 14:16 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 06706d23b01e 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 13:44 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 06706d23b01e 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 13:04 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 06706d23b01e 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 12:40 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 06706d23b01e 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 12:05 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 06706d23b01e 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 11:53 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 06706d23b01e 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 11:27 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 06706d23b01e 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/09/06 11:21 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 06706d23b01e 4f7b22a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
2026/08/27 20:44 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 18607adc5162 e2fa417d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
* Struck through repros no longer work on HEAD.