|
uvm_fault: ip_setmoptions
|
-1 |
|
|
|
1 |
10h51m |
10h51m
|
10h51m |
|
SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
|
-1 |
|
|
|
5126 |
now |
1d03h
|
1d03h |
|
kernel: protection fauplatnic : u n h an dl e d a f NUM
|
-1 |
|
|
|
1 |
1d10h |
1d10h
|
1d10h |
|
protection_fault: dtioctl
|
-1 |
|
|
|
1 |
1d11h |
1d11h
|
1d11h |
|
panic: ffs_blkfree: bad size (7)
|
2 |
|
|
|
1 |
3d02h |
3d02h
|
3d02h |
|
uvm_fault: solock_shared
|
-1 |
|
|
|
1 |
3d18h |
3d18h
|
3d18h |
|
uvm_fault: scsi_xs_put
|
-1 |
|
|
|
1 |
3d20h |
3d20h
|
3d20h |
|
panic: uvm_faultWAuRnNINe:lSoPck NOT LOdWEREs nN SYSCALL NUM NUM EXIT NUM c
|
2 |
|
|
|
1 |
4d00h |
4d00h
|
4d00h |
|
pool: free list modified: sockpl (4)
|
-1 |
|
|
|
1 |
5d11h |
5d11h
|
5d11h |
|
uvm_fault: rtable_clearsource
|
-1 |
|
|
|
2 |
22h51m |
6d00h
|
6d00h |
|
uvm_fault: rtable_lookup
|
-1 |
|
|
|
1 |
6d03h |
6d03h
|
6d03h |
|
SYZFAIL: too many calls in output (3)
|
-1 |
|
|
|
1 |
6d04h |
6d04h
|
6d04h |
|
uvm_fault: wsmouseclose
|
-1 |
|
|
|
1 |
6d04h |
6d04h
|
6d04h |
|
malloc: free list modified: UVM
|
-1 |
|
|
|
3 |
5h01m |
7d05h
|
7d05h |
|
uvm_fault: ifa_ifwithaddr
|
-1 |
|
|
|
1 |
7d09h |
7d09h
|
7d09h |
|
malloc: free list modified: ???
|
-1 |
|
|
|
2 |
4d19h |
7d11h
|
7d11h |
|
panic: free: non-malloced addr 0x2000 type ip_moptions
|
2 |
|
|
|
1 |
8d17h |
8d17h
|
8d17h |
|
uvm_fault: dt_ioctl_record_stop (4)
|
-1 |
|
|
|
2 |
7d13h |
8d22h
|
8d22h |
|
uvm_fault: mtx_enter (2)
|
-1 |
|
|
|
3 |
7d07h |
11d
|
11d |
|
panic: kernel diagnostic assertion "(p->pfik_flagrefs == NUM) || (p->pfik_flagrefs == NUM)" failed
|
2 |
|
|
|
1 |
12d |
12d
|
12d |
|
uvm_fault: _rb_insert
|
-1 |
|
|
|
1 |
13d |
13d
|
13d |
|
KASAN: invalid memory access in knote_processfork
|
-1 |
|
|
|
3 |
14d |
14d
|
14d |
|
protection_fault: rtable_match
|
-1 |
|
|
|
1 |
15d |
15d
|
15d |
|
panic: kernel diagnostic assertion "map->limit == rtmap_limit" fai
|
2 |
|
|
|
1 |
16d |
16d
|
16d |
|
KASAN: invalid memory access in pf_remove_if_empty_ruleset
|
-1 |
|
|
|
11 |
2d07h |
16d
|
16d |
|
assert "rdomain == rtable_l2(rdomain)" failed in route.c (4)
|
-1 |
|
|
|
2 |
7d18h |
17d
|
17d |
|
uvm_fault: kpageflttrap
|
-1 |
|
|
|
6 |
2d20h |
17d
|
17d |
|
uvm_fault: knote_processfork
|
-1 |
|
|
|
7 |
14d |
17d
|
17d |
|
uvm_fault: upageflttrap
|
-1 |
|
|
|
21 |
1d09h |
17d
|
17d |
|
uvm_fault: rtable_add
|
-1 |
|
|
|
1 |
17d |
17d
|
17d |
|
uvm_fault: pmap_page_remove (8)
|
-1 |
|
|
|
1 |
18d |
18d
|
18d |
|
protection_fault: pool_do_put (3)
|
-1 |
|
|
|
1 |
18d |
18d
|
18d |
|
panic: free: unaligned addr ADDR, size NUM, type ip_moptions, mask NUM
|
2 |
|
|
|
1 |
22d |
22d
|
22d |
|
panic: ffs_blkfree: freeing free frag (2)
|
2 |
|
|
|
1 |
23d |
23d
|
23d |
|
protection_fault: ifiq_enqueue_qlim
|
-1 |
|
|
|
1 |
24d |
24d
|
24d |
|
uvm_fault: mld6_fasttimo
|
-1 |
|
|
|
1 |
25d |
25d
|
25d |
|
uvm_fault: ip_freemoptions
|
-1 |
|
|
|
2 |
16d |
27d
|
27d |
|
uvm_fault: amap_copy
|
-1 |
|
|
|
1 |
29d |
29d
|
29d |
|
malloc: free list modified: temp
|
-1 |
|
|
|
1 |
29d |
29d
|
29d |
|
uvm_fault: ifiq_enqueue_qlim
|
-1 |
|
|
|
3 |
4d04h |
31d
|
31d |
|
SYZFAIL: tun: re (2)
|
-1 |
|
|
|
1 |
33d |
33d
|
33d |
|
panic: unhandled af NUM
|
2 |
|
|
|
5 |
19d |
33d
|
33d |
|
assert "refs != ~NUM" failed in multico
|
-1 |
|
|
|
1 |
34d |
34d
|
34d |
|
uvm_fault: device_lookup
|
-1 |
|
|
|
1 |
34d |
34d
|
34d |
|
protection_fault: ip6_freemoptions
|
-1 |
|
|
|
1 |
35d |
35d
|
35d |
|
assert "bpfilter_lookup(unit) == NULL" failed in bpf.c (2)
|
-1 |
|
|
|
7 |
1d07h |
35d
|
35d |
|
witness: lock_object uninitialized: ADDR (6)
|
-1 |
|
|
|
4 |
32d |
35d
|
35d |
|
panic: kernel diagnostic assertion "refs != ~NUM" failed: file
|
2 |
|
|
|
1 |
35d |
35d
|
35d |
|
assert "refs != ~NUM" failed in kern
|
-1 |
|
|
|
1 |
36d |
36d
|
36d |
|
assert "!ISSET(rt->rt_flags, RTF_LOCAL)" failed in nd6.c (4)
|
-1 |
|
|
|
3 |
7d10h |
37d
|
37d |
|
uvm_fault: sys_msgget
|
-1 |
|
|
|
1 |
38d |
38d
|
38d |
|
uvm_fault: in_pcbhash_insert
|
-1 |
|
|
|
6 |
2d05h |
38d
|
38d |
|
uvm_fault: rtable_exists
|
-1 |
|
|
|
11 |
4d05h |
40d
|
40d |
|
uvm_fault: rtable_match
|
-1 |
|
|
|
14 |
2d11h |
41d
|
41d |
|
uvm_fault: uvm_fault_upper_lookup
|
-1 |
|
|
|
3 |
34d |
41d
|
41d |
|
uvm_fault: shm_deallocate_segment
|
-1 |
|
|
|
6 |
7d03h |
42d
|
42d |
|
uvm_fault: ip6_freemoptions
|
-1 |
|
|
|
6 |
10d |
42d
|
42d |
|
uvm_fault: sysctl_sysvipc
|
-1 |
|
|
|
13 |
11d |
43d
|
43d |
|
protection_fault: uvm_fault_upper_lookup
|
-1 |
|
|
|
1 |
44d |
44d
|
44d |
|
panic: free: size too large NUM > NUM (ADDR) type rtable
|
2 |
|
|
|
20 |
1h57m |
44d
|
44d |
|
protection_fault: amap_lookups
|
-1 |
|
|
|
3 |
36d |
44d
|
44d |
|
protection_fault: free
|
-1 |
|
|
|
1 |
44d |
44d
|
44d |
|
uvm_fault: dtioctl
|
-1 |
|
|
|
13 |
1d22h |
45d
|
45d |
|
uvm_fault: rtable_l2
|
-1 |
|
|
|
60 |
2d01h |
45d
|
45d |
|
KASAN: invalid memory access in rw_status
|
-1 |
|
|
|
3 |
1d20h |
45d
|
45d |
|
panic: free: non-malloced addr ADDR type ip_moptions
|
2 |
|
|
|
3 |
3d13h |
45d
|
45d |
|
uvm_fault: amap_lookups
|
-1 |
|
|
|
59 |
3d05h |
45d
|
45d |
|
protection_fault: malloc (3)
|
-1 |
|
|
|
1939 |
16m |
46d
|
46d |
|
KASAN: invalid memory access in witness_checkorder
|
-1 |
|
|
|
5 |
32d |
46d
|
45d |
|
KASAN: invalid memory access in __mp_lock
|
-1 |
|
|
|
2 |
45d |
48d
|
48d |
|
KASAN: invalid memory access in checkalias
|
-1 |
|
|
|
420 |
32d |
48d
|
48d |
|
SYZFAIL: dup2(NUM, kInPipeFd) failed (4)
|
-1 |
|
|
|
1 |
52d |
52d
|
52d |
|
panic: init
|
2 |
|
|
|
2 |
19d |
57d
|
57d |
|
SYZFAIL: mmap of input file failed (2)
|
-1 |
|
|
|
1 |
57d |
57d
|
57d |
|
witness: reversal: fdlock inode (3)
|
-1 |
|
|
|
4 |
9d13h |
58d
|
58d |
|
witness: reversal: sbufrcv inode (4)
|
-1 |
|
|
|
1 |
59d |
59d
|
59d |
|
assert "pr->ps_threadcnt == NUM" failed in kern_exit.c (3)
|
-1 |
|
|
|
2 |
36d |
61d
|
61d |
|
panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock (9)
|
2 |
|
|
|
11 |
1d11h |
62d
|
62d |
|
uvm_fault: sys_shmat (3)
|
-1 |
|
|
|
23 |
21h14m |
65d
|
65d |
|
uvm_fault: bpfioctl (6)
|
-1 |
|
|
|
2 |
43d |
65d
|
65d |
|
panic: in
|
2 |
|
|
|
2 |
68d |
69d
|
69d |
|
panic: i
|
2 |
|
|
|
3 |
42d |
70d
|
70d |
|
panic: init di
|
2 |
|
|
|
1 |
70d |
70d
|
70d |
|
panic: init died (signal
|
2 |
|
|
|
1 |
70d |
70d
|
70d |
|
panic: init died (signal NUM
|
2 |
|
|
|
1 |
71d |
71d
|
71d |
|
assert "map->limit == rtmap_limit" failed in ker
|
-1 |
|
|
|
1 |
71d |
71d
|
71d |
|
assert "map->limit == rtmap_limit" failed in rOtNa bSlYe.cS
|
-1 |
|
|
|
1 |
72d |
72d
|
72d |
|
kernel:I Tp 0g ea faStopped at savectx+0xae: movl $NUM,%gs:0x688
|
-1 |
|
|
|
1 |
76d |
76d
|
76d |
|
panic: kernel diagnostic assertion "ISSET(p->p_flag, P_SUSPSIG | P_SUSPSINGLE) == NUM" failed: file "/syzkaller/managers
|
2 |
|
|
|
1 |
77d |
77d
|
77d |
|
kernel: NUM ageStopped at savectx+0xae: movl $NUM,%gs:0x688
|
-1 |
|
|
|
1 |
79d |
79d
|
79d |
|
assert "d->bd_in_uiomove == NUM" failed in bpf.c (5)
|
-1 |
|
|
|
1 |
80d |
80d
|
80d |
|
panic: uvm_fault(ADDR, 0x47, NUM, NUM) -> e
|
2 |
|
|
|
1 |
81d |
81d
|
81d |
|
panic: (5)
|
2 |
|
|
|
3 |
15d |
84d
|
84d |
|
panic: init died (signal NUM,
|
2 |
|
|
|
2 |
58d |
84d
|
84d |
|
assert "rn != NULL" failed in pipex.c (3)
|
-1 |
|
|
|
5 |
36d |
85d
|
85d |
|
panic: vputonfreelist: lock count is not zero (4)
|
2 |
|
|
|
1 |
88d |
88d
|
88d |
|
protection_fault: __x86_indirect_thunk_r11 (5)
|
-1 |
|
|
|
1 |
88d |
88d
|
88d |
|
panic: amap_pp_adjref: negative reference count (3)
|
2 |
|
|
|
27 |
10h45m |
90d
|
90d |
|
uvm_fault: ufs_readdir
|
-1 |
|
|
|
186 |
18d |
94d
|
94d |
|
panic: kernel diagnostic assertion "pg->wire_count != NUM" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uv
|
2 |
|
|
|
2 |
75d |
96d
|
96d |
|
witness: reversal: sbufsnd inode (4)
|
-1 |
|
|
|
15 |
1d11h |
97d
|
97d |
|
uvm_fault: remrunqueue
|
-1 |
|
|
|
3 |
62d |
108d
|
108d |
|
assert "(p->pfik_flagrefs == NUM) || (p->pfik_flagrefs == NUM)" failed in pf_if.c
|
-1 |
|
|
|
26 |
3d23h |
109d
|
109d |
|
witness: reversal: pf_lock netlock (4)
|
-1 |
|
|
|
168 |
33m |
110d
|
110d |
|
panic: unhandled af (6)
|
2 |
|
|
|
215 |
34m |
114d
|
114d |
|
SYZFAIL: repeatedly failed to execute the program (3)
|
-1 |
|
|
|
5 |
2d10h |
120d
|
120d |
|
assert "ISSET(p->p_flag, P_SUSPSIG | P_SUSPSINGLE) == NUM" failed in kern_sig.c
|
-1 |
|
|
|
31 |
4d03h |
120d
|
120d |
|
panic: kmmaplk rwlock ADDR: enter read deadlock
|
2 |
|
|
|
14 |
57d |
146d
|
146d |
|
panic: ffs2_balloc: unwind failed (4)
|
2 |
|
|
|
21 |
35d |
147d
|
147d |
|
uvm_fault: ufs_direnter (6)
|
-1 |
|
|
|
10 |
66d |
149d
|
149d |
|
panic: kerne
|
2 |
|
|
|
3 |
54d |
151d
|
151d |
|
panic: ffs_valloc: dup alloc (5)
|
2 |
|
|
|
193 |
12h55m |
152d
|
152d |
|
protection_fault: pf_anchor_global_RB_REMOVE (3)
|
-1 |
|
|
|
29 |
13d |
153d
|
153d |
|
uvm_fault: pvclock_get (2)
|
-1 |
|
|
|
54 |
41d |
153d
|
153d |
|
uvm_fault: ffs_freefile (3)
|
-1 |
|
|
|
5 |
20d |
154d
|
154d |
|
panic: init died (signal NUM, exit NUM) (2)
|
2 |
|
|
|
2233 |
8m |
154d
|
154d |
|
uvm_fault: kcov_remote_enter (5)
|
-1 |
|
|
|
596 |
23d |
154d
|
154d |
|
uvm_fault: ffs2_balloc (7)
|
-1 |
|
|
|
392 |
20d |
154d
|
154d |
|
uvm_fault: ufsdirhash_lookup
|
-1 |
|
|
|
6 |
6d14h |
155d
|
155d |
|
SYZFAIL: SIGFPE
|
-1 |
|
|
|
1390 |
2h51m |
156d
|
156d |
|
SYZFAIL: cover mmap failed
|
-1 |
|
|
|
1006 |
3h15m |
156d
|
156d |
|
SYZFAIL: child failed
|
-1 |
|
|
|
10048 |
now |
156d
|
156d |
|
SYZFAIL: SIGILL
|
-1 |
|
|
|
1404 |
4h09m |
156d
|
156d |
|
assert "atomic_load_int(&fdp->fd_nuserevents) == NUM" failed in kern_descrip.c (2)
|
-1 |
|
|
|
7 |
41d |
167d
|
167d |
|
assert "pg->wire_count != NUM" failed in uvm_page.c
|
-1 |
|
|
|
9146 |
6h26m |
249d
|
249d |
|
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (26)
|
-1 |
|
|
|
832 |
23d |
270d
|
270d |
|
kernel: protection fault trap, code=NUM (9)
|
-1 |
|
|
|
14 |
11d |
273d
|
273d |
|
SYZFAIL: SIGSEGV (2)
|
-1 |
|
|
|
1451 |
21m |
281d
|
281d |
|
assert "cifp != NULL" failed in route.c (5)
|
-1 |
|
|
|
16 |
8d14h |
406d
|
406d |
|
SYZFAIL: can't reallocate
|
-1 |
|
|
|
53 |
1d23h |
487d
|
487d |
|
panic: uvm_fault_unwire_locked: address not in map (5)
|
2 |
|
|
|
174 |
4h47m |
513d
|
513d |
|
panic: chgproccnt: procs < NUM
|
2 |
|
|
|
23 |
36d |
552d
|
552d |
|
SYZFAIL: coverage filter is full (3)
|
-1 |
|
|
|
750270 |
7d20h |
556d
|
556d |
|
protection_fault: bpfdetach
|
-1 |
|
|
|
86 |
10d |
558d
|
558d |
|
uvm_fault: x86_ipi_db (9)
|
-1 |
|
|
|
8199 |
18d |
560d
|
560d |
|
SYZFAIL: SIGBUS (2)
|
-1 |
|
|
|
2929 |
7h18m |
562d
|
562d |
|
assert "sc->sc_dev == NUM" failed in if_tun.c (6)
|
-1 |
|
|
|
124 |
18h52m |
564d
|
564d |
|
assert "refs != ~NUM" failed in kern_synch.c
|
-1 |
|
|
|
1259 |
1d08h |
566d
|
566d |
|
SYZFAIL: posix_spawnp failed
|
-1 |
syz |
|
|
6877 |
now |
568d
|
30d |
|
assert "map->limit == rtmap_limit" failed in rtable.c (2)
|
-1 |
|
|
|
523 |
1d00h |
568d
|
568d |
|
uvm_fault: proc_trampoline (2)
|
-1 |
|
|
|
3492 |
12d |
568d
|
568d |
|
protection_fault: witness_checkorder (5)
|
-1 |
|
|
|
40 |
12d |
568d
|
568d |
|
uvm_fault: arp_rtrequest (3)
|
-1 |
|
|
|
486 |
1d09h |
569d
|
569d |
|
pool: free list modified: shmpl (6)
|
-1 |
|
|
|
925 |
27d |
570d
|
570d |
|
uvm_fault: db_enter (6)
|
-1 |
|
|
|
641 |
22d |
570d
|
570d |
|
can't ssh into the instance (2)
|
-1 |
|
|
|
35652 |
5h09m |
571d
|
571d |
|
suppressed report (2)
|
-1 |
|
|
|
20481 |
2h07m |
571d
|
571d |
|
panic: missing alias (6)
|
2 |
|
|
|
1494 |
8d01h |
571d
|
571d |
|
SYZFAIL: failed to recv rpc (4)
|
-1 |
|
|
|
4445 |
2h59m |
571d
|
571d |
|
panic: trap type NUM, code=NUM, pc=ADDR (3)
|
2 |
|
|
|
4893 |
23h47m |
571d
|
571d |
|
corrupted report (7)
|
-1 |
|
|
|
61751 |
2h07m |
571d
|
571d |
|
witness: reversal: lock order data missing (5)
|
-1 |
|
|
|
233236 |
35m |
571d
|
571d |
|
SYZFAIL: ioctl remote attach failed (6)
|
-1 |
|
|
|
81254 |
now |
571d
|
571d |
|
SYZFAIL: failed to mkdtemp (2)
|
-1 |
|
|
|
315693 |
now |
571d
|
571d |
|
SYZFAIL: failed to send rpc (2)
|
-1 |
|
|
|
37637 |
1h19m |
571d
|
571d |
|
SYZFAIL: tun_id out of range (4)
|
-1 |
|
|
|
4103228 |
now |
571d
|
571d |
|
SYZFAIL: failed to mkdir (2)
|
-1 |
|
|
|
54726 |
21m |
571d
|
571d |
|
SYZFAIL: pipe failed
|
-1 |
|
|
|
7808 |
13d |
775d
|
775d |
|
protection_fault: lf_advlock (4)
|
-1 |
syz, C |
|
|
66 |
11d |
892d
|
892d |
|
uvm_fault: ktrops (2)
|
-1 |
syz, C |
|
|
634 |
12h01m |
1064d
|
1064d |
|
uvm_fault: schedclock
|
-1 |
syz |
|
|
11 |
722d |
1090d
|
913d |
|
kernel: page fault trap, code=NUM (3)
|
-1 |
syz, C |
|
|
96 |
49d |
1121d
|
878d |
|
malloc: free list modified: free (4)
|
-1 |
syz, C |
|
|
44 |
4d03h |
1142d
|
1141d |
|
uvm_fault: hardclock (5)
|
-1 |
syz |
|
|
4 |
1122d |
1274d
|
1274d |
|
panic: ufsdirhash_lookup: bad offset in hash array (3)
|
2 |
syz, C |
|
|
107 |
15d |
1285d
|
991d |
|
uvm_fault: memcpy (5)
|
-1 |
syz, C |
|
|
112 |
50d |
1420d
|
1420d |
|
assert "uvn->u_obj.uo_refs == NUM" failed in uvm_vnode.c (2)
|
-1 |
syz |
|
|
2 |
1423d |
1424d
|
1423d |
|
panic: pmap_unwire: invalid PDE
|
2 |
syz |
|
|
6 |
834d |
1478d
|
1419d |
|
no output from test machine (8)
|
-1 |
syz, C |
|
|
912536 |
now |
1487d
|
1483d |
|
uvm_fault: ffs_indirtrunc
|
-1 |
syz, C |
|
|
43 |
21d |
1531d
|
1531d |
|
witness: reversal: vmmaplk inode (3)
|
-1 |
syz, C |
|
|
1061 |
65d |
1563d
|
1513d |
|
SYZFATAL: executor NUM failed NUM times: executor NUM: exit status NUM
|
-1 |
syz |
|
|
175427 |
1d10h |
1586d
|
1586d |
|
panic: bad dir (3)
|
2 |
syz, C |
|
|
223 |
84d |
1592d
|
1420d |
|
uvm_fault: ufs_lookup
|
-1 |
syz, C |
|
|
746 |
22d |
1687d
|
1039d |
|
kernel: double fault trap, code=NUM (2)
|
-1 |
syz, C |
|
|
41 |
98d |
1687d
|
1639d |
|
protection_fault: ktrops
|
-1 |
syz, C |
|
|
259 |
748d |
1697d
|
1677d |
|
protection_fault: sblock
|
-1 |
syz |
|
|
38 |
1521d |
1701d
|
1700d |
|
uvm_fault: fifo_write (2)
|
-1 |
syz, C |
|
|
3430 |
722d |
1708d
|
1393d |
|
SYZFAIL: tun: read failed
|
-1 |
syz |
|
|
592112 |
now |
1726d
|
1694d |
|
SYZFAIL: command failed
|
-1 |
syz |
|
|
15838 |
65d |
2014d
|
1696d |
|
panic: ufs_rename: lost dir entry
|
2 |
syz, C |
|
|
148 |
15d |
2387d
|
1625d |
|
lost connection to test machine (2)
|
-1 |
|
|
|
1775787 |
now |
2804d
|
never |