|
uvm_fault: sys_futimes
|
-1 |
|
|
|
1 |
59m |
59m
|
59m |
|
protection_fault: rtable_match
|
-1 |
|
|
|
1 |
1d03h |
1d03h
|
1d03h |
|
panic: kernel diagnostic assertion "map->limit == rtmap_limit" fai
|
2 |
|
|
|
1 |
1d15h |
1d15h
|
1d15h |
|
uvm_fault: syscall (2)
|
-1 |
|
|
|
25 |
now |
1d20h
|
1d20h |
|
uvm_fault: Xsyscall
|
-1 |
|
|
|
16 |
1h05m |
1d20h
|
1d20h |
|
KASAN: invalid memory access in pf_remove_if_empty_ruleset
|
-1 |
|
|
|
1 |
2d04h |
2d04h
|
2d04h |
|
assert "rdomain == rtable_l2(rdomain)" failed in route.c (4)
|
-1 |
|
|
|
1 |
2d08h |
2d08h
|
2d08h |
|
uvm_fault: kerntrap
|
-1 |
|
|
|
2 |
1d10h |
2d10h
|
2d10h |
|
uvm_fault: kpageflttrap
|
-1 |
|
|
|
2 |
10h44m |
2d21h
|
2d21h |
|
uvm_fault: knote_processfork
|
-1 |
|
|
|
1 |
2d22h |
2d22h
|
2d22h |
|
uvm_fault: upageflttrap
|
-1 |
|
|
|
5 |
2h43m |
3d05h
|
3d05h |
|
uvm_fault: rtable_add
|
-1 |
|
|
|
1 |
3d06h |
3d06h
|
3d06h |
|
uvm_fault: pmap_page_remove (8)
|
-1 |
|
|
|
1 |
3d09h |
3d09h
|
3d09h |
|
protection_fault: pool_do_put (3)
|
-1 |
|
|
|
1 |
4d00h |
4d00h
|
4d00h |
|
panic: free: unaligned addr ADDR, size NUM, type ip_moptions, mask NUM
|
2 |
|
|
|
1 |
7d08h |
7d08h
|
7d08h |
|
panic: ffs_blkfree: freeing free frag (2)
|
2 |
|
|
|
1 |
9d03h |
9d03h
|
9d02h |
|
protection_fault: ifiq_enqueue_qlim
|
-1 |
|
|
|
1 |
9d08h |
9d08h
|
9d08h |
|
uvm_fault: mld6_fasttimo
|
-1 |
|
|
|
1 |
10d |
10d
|
10d |
|
uvm_fault: ip_freemoptions
|
-1 |
|
|
|
2 |
1d11h |
12d
|
12d |
|
uvm_fault: amap_copy
|
-1 |
|
|
|
1 |
14d |
14d
|
14d |
|
malloc: free list modified: temp
|
-1 |
|
|
|
1 |
15d |
15d
|
15d |
|
uvm_fault: ifiq_enqueue_qlim
|
-1 |
|
|
|
2 |
14d |
16d
|
16d |
|
kernel:E pag NUM aau
|
-1 |
|
|
|
1 |
17d |
17d
|
17d |
|
SYZFAIL: tun: re (2)
|
-1 |
|
|
|
1 |
18d |
18d
|
18d |
|
panic: unhandled af NUM
|
2 |
|
|
|
5 |
5d02h |
18d
|
18d |
|
assert "refs != ~NUM" failed in multico
|
-1 |
|
|
|
1 |
19d |
19d
|
19d |
|
uvm_fault: device_lookup
|
-1 |
|
|
|
1 |
20d |
20d
|
20d |
|
protection_fault: ip6_freemoptions
|
-1 |
|
|
|
1 |
20d |
20d
|
20d |
|
assert "bpfilter_lookup(unit) == NULL" failed in bpf.c (2)
|
-1 |
|
|
|
3 |
1d16h |
20d
|
20d |
|
witness: lock_object uninitialized: ADDR (6)
|
-1 |
|
|
|
4 |
17d |
20d
|
20d |
|
panic: kernel diagnostic assertion "refs != ~NUM" failed: file
|
2 |
|
|
|
1 |
21d |
21d
|
21d |
|
assert "refs != ~NUM" failed in kern
|
-1 |
|
|
|
1 |
21d |
21d
|
21d |
|
assert "!ISSET(rt->rt_flags, RTF_LOCAL)" failed in nd6.c (4)
|
-1 |
|
|
|
1 |
22d |
22d
|
22d |
|
kernel:l : pagege a rap , c o eaultStopped at dovutimens+0x368: movl 0x98(%rax),%r12d
|
-1 |
|
|
|
1 |
23d |
23d
|
23d |
|
uvm_fault: sys_msgget
|
-1 |
|
|
|
1 |
23d |
23d
|
23d |
|
uvm_fault: in_pcbhash_insert
|
-1 |
|
|
|
3 |
11d |
24d
|
24d |
|
uvm_fault: rtable_exists
|
-1 |
|
|
|
7 |
2d06h |
25d
|
25d |
|
uvm_fault: rtable_match
|
-1 |
|
|
|
6 |
1d23h |
26d
|
26d |
|
uvm_fault: uvm_fault_upper_lookup
|
-1 |
|
|
|
3 |
20d |
26d
|
26d |
|
uvm_fault: shm_deallocate_segment
|
-1 |
|
|
|
5 |
21h06m |
27d
|
27d |
|
uvm_fault: ip6_freemoptions
|
-1 |
|
|
|
5 |
19h07m |
28d
|
28d |
|
uvm_fault: sysctl_sysvipc
|
-1 |
|
|
|
12 |
2d08h |
28d
|
28d |
|
protection_fault: uvm_fault_upper_lookup
|
-1 |
|
|
|
1 |
29d |
29d
|
29d |
|
panic: free: size too large NUM > NUM (ADDR) type rtable
|
2 |
|
|
|
12 |
1d11h |
29d
|
29d |
|
protection_fault: amap_lookups
|
-1 |
|
|
|
3 |
22d |
29d
|
29d |
|
protection_fault: free
|
-1 |
|
|
|
1 |
30d |
30d
|
30d |
|
uvm_fault: dtioctl
|
-1 |
|
|
|
5 |
8h36m |
30d
|
30d |
|
uvm_fault: rtable_l2
|
-1 |
|
|
|
17 |
14h55m |
30d
|
30d |
|
KASAN: invalid memory access in rw_status
|
-1 |
|
|
|
2 |
25d |
30d
|
30d |
|
panic: free: non-malloced addr ADDR type ip_moptions
|
2 |
|
|
|
1 |
31d |
31d
|
31d |
|
uvm_fault: amap_lookups
|
-1 |
|
|
|
57 |
8d23h |
31d
|
31d |
|
protection_fault: malloc (3)
|
-1 |
|
|
|
1094 |
11m |
31d
|
31d |
|
KASAN: invalid memory access in witness_checkorder
|
-1 |
|
|
|
5 |
17d |
31d
|
30d |
|
KASAN: invalid memory access in __mp_lock
|
-1 |
|
|
|
2 |
31d |
33d
|
33d |
|
KASAN: invalid memory access in checkalias
|
-1 |
|
|
|
420 |
17d |
34d
|
34d |
|
SYZFAIL: dup2(NUM, kInPipeFd) failed (4)
|
-1 |
|
|
|
1 |
38d |
38d
|
38d |
|
kernel:c
|
-1 |
|
|
|
1 |
38d |
38d
|
38d |
|
panic: init
|
2 |
|
|
|
2 |
4d12h |
42d
|
42d |
|
SYZFAIL: mmap of input file failed (2)
|
-1 |
|
|
|
1 |
43d |
43d
|
43d |
|
witness: reversal: fdlock inode (3)
|
-1 |
|
|
|
3 |
12d |
43d
|
43d |
|
witness: reversal: sbufrcv inode (4)
|
-1 |
|
|
|
1 |
44d |
44d
|
44d |
|
assert "pr->ps_threadcnt == NUM" failed in kern_exit.c (3)
|
-1 |
|
|
|
2 |
21d |
46d
|
46d |
|
panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock (9)
|
2 |
|
|
|
7 |
10d |
48d
|
48d |
|
uvm_fault: sys_shmat (3)
|
-1 |
|
|
|
18 |
4d08h |
50d
|
50d |
|
uvm_fault: bpfioctl (6)
|
-1 |
|
|
|
2 |
28d |
51d
|
51d |
|
kernel:XIag0e a
|
-1 |
|
|
|
1 |
52d |
52d
|
52d |
|
panic: in
|
2 |
|
|
|
2 |
53d |
54d
|
54d |
|
panic: i
|
2 |
|
|
|
3 |
27d |
55d
|
55d |
|
panic: init di
|
2 |
|
|
|
1 |
55d |
55d
|
55d |
|
panic: init died (signal
|
2 |
|
|
|
1 |
56d |
56d
|
56d |
|
panic: init died (signal NUM
|
2 |
|
|
|
1 |
56d |
56d
|
56d |
|
assert "map->limit == rtmap_limit" failed in ker
|
-1 |
|
|
|
1 |
57d |
57d
|
57d |
|
assert "map->limit == rtmap_limit" failed in rOtNa bSlYe.cS
|
-1 |
|
|
|
1 |
57d |
57d
|
57d |
|
kernel:I Tp 0g ea faStopped at savectx+0xae: movl $NUM,%gs:0x688
|
-1 |
|
|
|
1 |
62d |
62d
|
62d |
|
panic: kernel diagnostic assertion "ISSET(p->p_flag, P_SUSPSIG | P_SUSPSINGLE) == NUM" failed: file "/syzkaller/managers
|
2 |
|
|
|
1 |
62d |
62d
|
62d |
|
kernel:NUM pca
|
-1 |
|
|
|
1 |
64d |
64d
|
64d |
|
kernel: NUM ageStopped at savectx+0xae: movl $NUM,%gs:0x688
|
-1 |
|
|
|
1 |
64d |
64d
|
64d |
|
assert "d->bd_in_uiomove == NUM" failed in bpf.c (5)
|
-1 |
|
|
|
1 |
65d |
65d
|
65d |
|
panic: uvm_fault(ADDR, 0x47, NUM, NUM) -> e
|
2 |
|
|
|
1 |
67d |
67d
|
67d |
|
panic: (5)
|
2 |
|
|
|
3 |
1d00h |
69d
|
69d |
|
panic: init died (signal NUM,
|
2 |
|
|
|
2 |
43d |
70d
|
70d |
|
assert "rn != NULL" failed in pipex.c (3)
|
-1 |
|
|
|
5 |
22d |
70d
|
70d |
|
panic: vputonfreelist: lock count is not zero (4)
|
2 |
|
|
|
1 |
73d |
73d
|
73d |
|
protection_fault: __x86_indirect_thunk_r11 (5)
|
-1 |
|
|
|
1 |
73d |
73d
|
73d |
|
panic: amap_pp_adjref: negative reference count (3)
|
2 |
|
|
|
16 |
2d08h |
75d
|
75d |
|
uvm_fault: ufs_dirremove
|
-1 |
|
|
|
1 |
78d |
78d
|
78d |
|
panic: init died (signal NUM, e
|
2 |
|
|
|
1 |
78d |
78d
|
78d |
|
uvm_fault: ufs_readdir
|
-1 |
|
|
|
186 |
4d00h |
79d
|
79d |
|
kernel:NUM
|
-1 |
|
|
|
1 |
80d |
80d
|
80d |
|
panic: kernel diagnostic assertion "pg->wire_count != NUM" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uv
|
2 |
|
|
|
2 |
61d |
81d
|
81d |
|
witness: reversal: sbufsnd inode (4)
|
-1 |
|
|
|
14 |
1d01h |
82d
|
82d |
|
SYZFAIL: too much cover (2)
|
-1 |
|
|
|
1 |
83d |
83d
|
83d |
|
panic: thread NUM p_stat is NUM (4)
|
2 |
|
|
|
3 |
83d |
85d
|
85d |
|
uvm_fault: softclock (6)
|
-1 |
|
|
|
2 |
83d |
86d
|
86d |
|
panic: thread NUM p_stat is -NUM
|
2 |
|
|
|
1 |
86d |
86d
|
86d |
|
kernel:T p aag
|
-1 |
|
|
|
1 |
89d |
89d
|
89d |
|
panic: uvm_fault(ADDR, 0x98, NUM, NUM) -> e
|
2 |
|
|
|
6 |
30d |
91d
|
91d |
|
uvm_fault: remrunqueue
|
-1 |
|
|
|
3 |
47d |
94d
|
94d |
|
assert "(p->pfik_flagrefs == NUM) || (p->pfik_flagrefs == NUM)" failed in pf_if.c
|
-1 |
|
|
|
24 |
10d |
95d
|
95d |
|
witness: reversal: pf_lock netlock (4)
|
-1 |
|
|
|
92 |
1h52m |
96d
|
96d |
|
panic: unhandled af (6)
|
2 |
|
|
|
125 |
7h11m |
99d
|
99d |
|
SYZFAIL: repeatedly failed to execute the program (3)
|
-1 |
|
|
|
3 |
25d |
106d
|
106d |
|
assert "ISSET(p->p_flag, P_SUSPSIG | P_SUSPSINGLE) == NUM" failed in kern_sig.c
|
-1 |
|
|
|
27 |
8d04h |
106d
|
106d |
|
uvm_fault: alltraps_kern_meltdown (2)
|
-1 |
|
|
|
36 |
4h00m |
119d
|
119d |
|
uvm_fault: ffs_blkfree (2)
|
-1 |
|
|
|
3 |
85d |
120d
|
120d |
|
panic: kmmaplk rwlock ADDR: enter read deadlock
|
2 |
|
|
|
14 |
42d |
131d
|
131d |
|
panic: ffs2_balloc: unwind failed (4)
|
2 |
|
|
|
21 |
21d |
132d
|
132d |
|
uvm_fault: ffs_fragextend (3)
|
-1 |
|
|
|
3 |
81d |
132d
|
132d |
|
uvm_fault: ufs_direnter (6)
|
-1 |
|
|
|
10 |
52d |
135d
|
135d |
|
panic: kerne
|
2 |
|
|
|
3 |
39d |
137d
|
137d |
|
panic: ffs_valloc: dup alloc (5)
|
2 |
|
|
|
182 |
47m |
138d
|
138d |
|
uvm_fault: ffs_nodealloccg (4)
|
-1 |
|
|
|
6 |
80d |
138d
|
138d |
|
protection_fault: pf_anchor_global_RB_REMOVE (3)
|
-1 |
|
|
|
28 |
15d |
139d
|
139d |
|
uvm_fault: pvclock_get (2)
|
-1 |
|
|
|
54 |
26d |
139d
|
139d |
|
uvm_fault: ffs_freefile (3)
|
-1 |
|
|
|
5 |
6d02h |
139d
|
139d |
|
panic: init died (signal NUM, exit NUM) (2)
|
2 |
|
|
|
1856 |
55m |
139d
|
139d |
|
uvm_fault: kcov_remote_enter (5)
|
-1 |
|
|
|
596 |
8d14h |
140d
|
140d |
|
uvm_fault: ffs2_balloc (7)
|
-1 |
|
|
|
392 |
6d02h |
140d
|
140d |
|
uvm_fault: ufsdirhash_lookup
|
-1 |
|
|
|
4 |
23d |
140d
|
140d |
|
SYZFAIL: SIGFPE
|
-1 |
|
|
|
1254 |
6h03m |
142d
|
142d |
|
SYZFAIL: cover mmap failed
|
-1 |
|
|
|
804 |
34m |
142d
|
142d |
|
SYZFAIL: child failed
|
-1 |
|
|
|
9090 |
1h22m |
142d
|
142d |
|
SYZFAIL: SIGILL
|
-1 |
|
|
|
1274 |
18h54m |
142d
|
142d |
|
assert "atomic_load_int(&fdp->fd_nuserevents) == NUM" failed in kern_descrip.c (2)
|
-1 |
|
|
|
7 |
26d |
153d
|
153d |
|
assert "pg->wire_count != NUM" failed in uvm_page.c
|
-1 |
|
|
|
9139 |
3d12h |
234d
|
234d |
|
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (26)
|
-1 |
|
|
|
832 |
8d20h |
255d
|
255d |
|
kernel: protection fault trap, code=NUM (9)
|
-1 |
|
|
|
13 |
14d |
259d
|
259d |
|
SYZFAIL: SIGSEGV (2)
|
-1 |
|
|
|
1335 |
2h37m |
266d
|
266d |
|
assert "cifp != NULL" failed in route.c (5)
|
-1 |
|
|
|
15 |
25d |
392d
|
392d |
|
SYZFAIL: can't reallocate
|
-1 |
|
|
|
52 |
16d |
473d
|
473d |
|
panic: uvm_fault_unwire_locked: address not in map (5)
|
2 |
|
|
|
166 |
3d05h |
499d
|
499d |
|
panic: chgproccnt: procs < NUM
|
2 |
|
|
|
23 |
21d |
538d
|
538d |
|
uvm_fault: savectx (3)
|
-1 |
|
|
|
6174 |
48m |
540d
|
540d |
|
SYZFAIL: coverage filter is full (3)
|
-1 |
|
|
|
744174 |
22h12m |
541d
|
541d |
|
protection_fault: bpfdetach
|
-1 |
|
|
|
85 |
23d |
543d
|
543d |
|
uvm_fault: x86_ipi_db (9)
|
-1 |
|
|
|
8199 |
3d22h |
545d
|
545d |
|
SYZFAIL: SIGBUS (2)
|
-1 |
|
|
|
2758 |
11h08m |
547d
|
547d |
|
assert "sc->sc_dev == NUM" failed in if_tun.c (6)
|
-1 |
|
|
|
122 |
25d |
550d
|
550d |
|
assert "refs != ~NUM" failed in kern_synch.c
|
-1 |
|
|
|
1251 |
18h19m |
551d
|
551d |
|
SYZFAIL: posix_spawnp failed
|
-1 |
syz |
|
|
6001 |
1d00h |
553d
|
15d |
|
assert "map->limit == rtmap_limit" failed in rtable.c (2)
|
-1 |
|
|
|
516 |
4d13h |
553d
|
553d |
|
uvm_fault: proc_trampoline (2)
|
-1 |
|
|
|
3434 |
1h22m |
553d
|
553d |
|
protection_fault: witness_checkorder (5)
|
-1 |
|
|
|
39 |
4d02h |
553d
|
553d |
|
uvm_fault: arp_rtrequest (3)
|
-1 |
|
|
|
473 |
5h04m |
554d
|
554d |
|
pool: free list modified: shmpl (6)
|
-1 |
|
|
|
925 |
12d |
555d
|
555d |
|
uvm_fault: db_enter (6)
|
-1 |
|
|
|
641 |
7d13h |
556d
|
556d |
|
can't ssh into the instance (2)
|
-1 |
|
|
|
35642 |
2d15h |
556d
|
556d |
|
suppressed report (2)
|
-1 |
|
|
|
19971 |
1h25m |
556d
|
556d |
|
panic: missing alias (6)
|
2 |
|
|
|
1493 |
2h22m |
556d
|
556d |
|
SYZFAIL: failed to recv rpc (4)
|
-1 |
|
|
|
4265 |
57m |
556d
|
556d |
|
panic: trap type NUM, code=NUM, pc=ADDR (3)
|
2 |
|
|
|
4772 |
4h08m |
556d
|
556d |
|
corrupted report (7)
|
-1 |
|
|
|
61575 |
9m |
556d
|
556d |
|
witness: reversal: lock order data missing (5)
|
-1 |
|
|
|
228472 |
10m |
556d
|
556d |
|
SYZFAIL: ioctl remote attach failed (6)
|
-1 |
|
|
|
79859 |
2h13m |
556d
|
556d |
|
SYZFAIL: failed to mkdtemp (2)
|
-1 |
|
|
|
304019 |
now |
556d
|
556d |
|
SYZFAIL: failed to send rpc (2)
|
-1 |
|
|
|
36687 |
27m |
556d
|
556d |
|
SYZFAIL: tun_id out of range (4)
|
-1 |
|
|
|
4018951 |
now |
556d
|
556d |
|
SYZFAIL: failed to mkdir (2)
|
-1 |
|
|
|
53305 |
5m |
556d
|
556d |
|
SYZFAIL: pipe failed
|
-1 |
|
|
|
7807 |
6d09h |
760d
|
760d |
|
protection_fault: lf_advlock (4)
|
-1 |
syz, C |
|
|
64 |
66d |
878d
|
878d |
|
uvm_fault: ktrops (2)
|
-1 |
syz, C |
|
|
590 |
22h45m |
1050d
|
1050d |
|
uvm_fault: schedclock
|
-1 |
syz |
|
|
11 |
707d |
1076d
|
899d |
|
kernel: page fault trap, code=NUM (3)
|
-1 |
syz, C |
|
|
96 |
34d |
1106d
|
863d |
|
malloc: free list modified: free (4)
|
-1 |
syz, C |
|
|
42 |
6d03h |
1127d
|
1127d |
|
uvm_fault: hardclock (5)
|
-1 |
syz |
|
|
4 |
1107d |
1259d
|
1259d |
|
panic: ufsdirhash_lookup: bad offset in hash array (3)
|
2 |
syz, C |
|
|
107 |
21h16m |
1270d
|
976d |
|
uvm_fault: memcpy (5)
|
-1 |
syz, C |
|
|
112 |
35d |
1405d
|
1405d |
|
assert "uvn->u_obj.uo_refs == NUM" failed in uvm_vnode.c (2)
|
-1 |
syz |
|
|
2 |
1409d |
1409d
|
1409d |
|
panic: pmap_unwire: invalid PDE
|
2 |
syz |
|
|
6 |
820d |
1463d
|
1405d |
|
no output from test machine (8)
|
-1 |
syz, C |
|
|
905089 |
now |
1472d
|
1469d |
|
uvm_fault: ffs_indirtrunc
|
-1 |
syz, C |
|
|
43 |
7d06h |
1516d
|
1516d |
|
witness: reversal: vmmaplk inode (3)
|
-1 |
syz, C |
|
|
1061 |
51d |
1548d
|
1499d |
|
SYZFATAL: executor NUM failed NUM times: executor NUM: exit status NUM
|
-1 |
syz |
|
|
175427 |
18h50m |
1571d
|
1571d |
|
panic: bad dir (3)
|
2 |
syz, C |
|
|
223 |
70d |
1577d
|
1405d |
|
uvm_fault: ufs_lookup
|
-1 |
syz, C |
|
|
746 |
7d09h |
1672d
|
1025d |
|
kernel: double fault trap, code=NUM (2)
|
-1 |
syz, C |
|
|
41 |
83d |
1673d
|
1624d |
|
protection_fault: ktrops
|
-1 |
syz, C |
|
|
259 |
733d |
1682d
|
1662d |
|
protection_fault: sblock
|
-1 |
syz |
|
|
38 |
1506d |
1686d
|
1686d |
|
uvm_fault: fifo_write (2)
|
-1 |
syz, C |
|
|
3430 |
708d |
1694d
|
1378d |
|
SYZFAIL: tun: read failed
|
-1 |
syz |
|
|
588172 |
14m |
1711d
|
1679d |
|
SYZFAIL: command failed
|
-1 |
syz |
|
|
15838 |
50d |
1999d
|
1681d |
|
panic: ufs_rename: lost dir entry
|
2 |
syz, C |
|
|
148 |
20h40m |
2373d
|
1611d |
|
lost connection to test machine (2)
|
-1 |
|
|
|
1645849 |
now |
2789d
|
never |