|
panic: Non dma-reachable buffer at curaddr ADDR(raw) (3)
|
|
|
|
2 |
1d20h |
1d23h
|
1d23h |
|
uvm_fault: lf_advlock
|
|
|
|
1 |
3d11h |
3d11h
|
3d11h |
|
assert "rdomain == rtable_l2(rdomain)" failed in route.c
|
|
|
|
1 |
6d14h |
6d14h
|
6d14h |
|
panic: kernel diagnostic assertion "uvm_page_owner_locked_p(pg)" failed
|
|
|
|
1 |
7d08h |
7d08h
|
7d08h |
|
assert "pr->ps_threadcnt == NUM" failed in kern_exit.c
|
|
|
|
1 |
8d21h |
8d21h
|
8d21h |
|
witness: lock_obwitness_checkordwitness_checkordrw_enter_write(ADDR)rw_enter_write+0unveil_delete_naunveil_delete_naunve
|
|
|
|
1 |
9d16h |
9d15h
|
9d15h |
|
uvm_fault: uao_detach
|
|
|
|
2 |
12d |
14d
|
14d |
|
panic: ffs_blkfree: freeing free frag
|
|
|
|
1 |
16d |
16d
|
16d |
|
panic: pfi_attach_ifnet: pfi_kif_get failed
|
|
|
|
1 |
18d |
18d
|
18d |
|
assert "kd_lookup(kd->kd_unit) == NULL" failed in kcov.c
|
|
|
|
1 |
20d |
20d
|
20d |
|
panic: pool_do_get: shmpl free list modified: page ADDR; item addr ADDR; offset 0x0=0x0 != ADDR
|
|
|
|
1 |
21d |
21d
|
21d |
|
protection_fault: in6_addmulti (3)
|
|
|
|
1 |
23d |
23d
|
23d |
|
witness: lock_object uninitializwitness_checkorder(ADDRwitness_checkordrw_enter_write(frw_enter_write+0unveil_delete_nau
|
|
|
|
1 |
25d |
25d
|
25d |
|
uvm_fault: ufsdirhash_findfree
|
|
|
|
1 |
25d |
25d
|
25d |
|
panic: ffs2_balloc: unwind failed
|
|
|
|
1 |
26d |
26d
|
26d |
|
panic: thread NUM p_stat is NUM (2)
|
|
|
|
1 |
27d |
27d
|
27d |
|
uvm_fault: ffs_alloccg
|
|
|
|
1 |
27d |
27d
|
27d |
|
uvm_fault: ffs_nodealloccg (2)
|
|
|
|
2 |
27d |
28d
|
28d |
|
uvm_fault: ffs_fragextend
|
|
|
|
2 |
27d |
28d
|
28d |
|
uvm_fault: ffs_blkfree
|
|
|
|
6 |
26d |
28d
|
28d |
|
panic: pledge_namei: ni_pledge
|
|
|
|
1 |
28d |
28d
|
28d |
|
uvm_fault: ufs_direnter (3)
|
|
|
|
3 |
26d |
28d
|
28d |
|
uvm_fault: ffs_freefile
|
|
|
|
2 |
26d |
28d
|
28d |
|
protection_fault: icmp_mtudisc_timeout (2)
|
|
|
|
1 |
30d |
30d
|
30d |
|
panic: trap type NUM, code=NUM, pc=e9779
|
|
|
|
133 |
18h06m |
30d
|
30d |
|
panic: trap type NUM, code=NUM, pc=e94f9
|
|
|
|
4 |
30d |
31d
|
31d |
|
protection_fault: witness_checkorder (4)
|
|
|
|
1 |
31d |
31d
|
31d |
|
assert "uvm_page_owner_locked_p(pg)" failed in managers/multicore/kernel/sys/uvm/uvm_page.c
|
|
|
|
1 |
32d |
32d
|
32d |
|
panic: malloc: out of space in kmem_map (3)
|
|
|
|
1 |
34d |
34d
|
34d |
|
panic: ffs_freefile: freeing free inode (2)
|
|
|
|
1 |
35d |
35d
|
35d |
|
uvm_fault: ffs2_balloc (4)
|
|
|
|
17 |
26d |
37d
|
37d |
|
panic: trap type NUM, code=NUM, pc=e9509
|
|
|
|
36 |
31d |
38d
|
38d |
|
uvm_fault: softclock (5)
|
|
|
|
1 |
39d |
39d
|
39d |
|
uvm_fault: unveil_add_vnode (2)
|
|
|
|
6 |
8d14h |
41d
|
41d |
|
panic: trap type NUM, code=NUM, pc=e9439
|
|
|
|
1 |
42d |
42d
|
42d |
|
kernel: protection fault trap, code=NUM (7)
|
|
|
|
5 |
27d |
45d
|
45d |
|
panic: ffs_valloc: dup alloc (2)
|
|
|
|
47 |
16d |
46d
|
46d |
|
pool: double put: shmpl
|
|
|
|
2 |
38d |
48d
|
48d |
|
panic: malloc: allocation too large, type = NUM, size = ADDR (2)
|
|
|
|
5 |
29d |
49d
|
49d |
|
multicore build error (19)
|
|
|
|
3 |
1d00h |
51d
|
51d |
|
protection_fault: __x86_indirect_thunk_r11 (3)
|
|
|
|
9 |
1d16h |
54d
|
54d |
|
SYZFAIL: too much cover
|
|
|
|
3 |
5d23h |
54d
|
54d |
|
pool: free list modified: shmpl (5)
|
|
|
|
21 |
6d10h |
54d
|
54d |
|
panic: trap type NUM, code=NUM, pc=e9429
|
|
|
|
27 |
44d |
54d
|
54d |
|
witness: reversal: sbufsnd inode
|
|
|
|
3 |
56d |
56d
|
56d |
|
panic: trap type NUM, code=NUM, pc=e8fb9
|
|
|
|
3 |
56d |
56d
|
56d |
|
assert "start >= vm_map_min(map) && end <= vm_map_max(map)" failed in uvm_fault.c
|
|
|
|
1 |
58d |
58d
|
58d |
|
protection_fault: reaper
|
|
|
|
7 |
5d03h |
59d
|
59d |
|
panic: vpaopni_cg:en keerrinecl_b daidaogpn
|
|
|
|
1 |
59d |
59d
|
59d |
|
pool: free list modified: inpcb (3)
|
|
|
|
1 |
62d |
62d
|
62d |
|
SYZFAIL: SIGBUS
|
|
|
|
803 |
2h51m |
64d
|
64d |
|
witness: reversal: sbufrcv inode
|
|
|
|
2 |
63d |
64d
|
64d |
|
protection_fault: fill_file (4)
|
|
|
|
1 |
64d |
64d
|
64d |
|
protection_fault: done_flush (3)
|
|
|
|
5 |
51d |
65d
|
65d |
|
panic: pmap_remove_ptes: managed page without PG_PVLIST: va ADDR, opte ADDR (2)
|
|
|
|
1 |
66d |
66d
|
66d |
|
panic: softclock: invalid to_clock: ADDR (2)
|
|
|
|
2 |
14d |
66d
|
66d |
|
panic: trap type NUM, code=NUM, pc=e8f59
|
|
|
|
1 |
66d |
66d
|
66d |
|
panic: free: size too small NUM <= NUM / NUM (ADDR) type shm
|
|
|
|
2 |
19d |
70d
|
70d |
|
panic: pmap_remove_pte: unmanaged page marked PG_PVLIST: va ADDR, opte ADDR
|
|
|
|
1 |
71d |
71d
|
71d |
|
openbsd test error: lost connection to test machine (3)
|
|
|
|
1 |
71d |
71d
|
71d |
|
uvm_fault: dopselect
|
|
|
|
1 |
73d |
73d
|
73d |
|
panic: pr_find_pagehead: pdppl: incorrect page (2)
|
|
|
|
1 |
74d |
74d
|
74d |
|
panic: trap type NUM, code=NUM, pc=e88b9
|
|
|
|
4 |
73d |
76d
|
76d |
|
panic: curcpu->ci_proc_pmap didn't point to previous pmap
|
|
|
|
1 |
77d |
77d
|
77d |
|
uvm_fault: savectx (2)
|
|
|
|
30 |
2d06h |
77d
|
77d |
|
panic: vput: ref cnt (2)
|
|
|
|
1 |
78d |
78d
|
78d |
|
panic: trap type NUM, code=NUM, pc=e7069
|
|
|
|
2 |
79d |
79d
|
79d |
|
SYZFAIL: ShmemBuilder: too large output offset
|
|
|
|
1 |
79d |
79d
|
79d |
|
panic: assertwaitok: non-zero mutex count: NUM (2)
|
|
|
|
111 |
1d09h |
81d
|
81d |
|
panic: missing alias (5)
|
|
|
|
25 |
21h18m |
81d
|
81d |
|
assert "kq->kq_nknotes == NUM" failed in kern_event.c
|
|
|
|
1 |
81d |
81d
|
81d |
|
SYZFAIL: posix_spawn failed
|
|
|
|
70 |
1d10h |
81d
|
81d |
|
panic: pmap_unwire: wiring for pmap ADDR va ADDR didn't change!
|
|
|
|
1 |
82d |
82d
|
82d |
|
panic: uvm_faulWtARN_IuNGn:w irSeP_Ll oNckOT ed:L OaWdEREdreD OsNs SnYoSCt AiLnL map7
|
|
|
|
1 |
83d |
83d
|
83d |
|
panic: pool_do_get: rtentry: page empty
|
|
|
|
1 |
87d |
87d
|
87d |
|
SYZFAIL: failed to mkdtemp
|
|
|
|
18324 |
1h22m |
88d
|
88d |
|
SYZFAIL: failed to mkdir
|
|
|
|
2652 |
3h44m |
88d
|
88d |
|
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte 0x3edff
|
|
|
|
1 |
88d |
88d
|
88d |
|
SYZFAIL: pipe failed
|
|
|
|
10 |
10h02m |
88d
|
88d |
|
assert "kn->kn_kq == kq" failed in kern_event.c
|
|
|
|
1 |
89d |
89d
|
89d |
|
uvm_fault: vm_terminate
|
|
|
|
4 |
52d |
89d
|
89d |
|
SYZFAIL: repeatedly failed to execute the program
|
|
|
|
8 |
26d |
90d
|
90d |
|
assert "map->limit == rtmap_limit" failed in rtable.c
|
|
|
|
54 |
2h58m |
90d
|
90d |
|
SYZFAIL: coverage filter is full
|
|
|
|
383316 |
43d |
91d
|
91d |
|
SYZFAIL: SIGSEGV
|
|
|
|
10 |
32d |
92d
|
92d |
|
SYZFAIL: tun: can't open device (4)
|
|
|
|
7 |
3d02h |
92d
|
92d |
|
witness: reversal: lock order data missing (4)
|
|
|
|
33663 |
23m |
92d
|
92d |
|
SYZFAIL: ioctl remote attach failed (5)
|
|
|
|
175 |
7h13m |
92d
|
92d |
|
SYZFAIL: too many calls in output
|
|
|
|
50 |
2d20h |
93d
|
93d |
|
openbsd test error: SYZFAIL: failed to recv rpc
|
|
|
|
81 |
42d |
93d
|
93d |
|
SYZFAIL: failed to send rpc
|
|
|
|
4538 |
21m |
93d
|
93d |
|
openbsd test error: no output from test machine
|
|
|
|
89 |
42d |
94d
|
94d |
|
multicore test error: SYZFAIL: failed to recv rpc
|
|
|
|
7084 |
1h02m |
94d
|
94d |
|
multicore test error: no output from test machine (3)
|
|
|
|
31 |
45d |
94d
|
94d |
|
panic: kernel diagnostic assertion "dupe == NULL" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uvm_page.c"
|
|
|
|
2 |
77d |
107d
|
107d |
|
pool: free list modified: pmappl
|
|
|
|
3 |
50d |
137d
|
137d |
|
openbsd build error (21)
|
|
|
|
114 |
14d |
141d
|
141d |
|
can't ssh into the instance
|
|
|
|
474 |
17h44m |
142d
|
114d |
|
protection_fault: nd6_timer
|
|
|
|
8 |
54d |
142d
|
142d |
|
panic: vwakeup: neg numoutput
|
|
|
|
2 |
64d |
145d
|
145d |
|
panic: inconsistent bufpage counts
|
|
|
|
3 |
45d |
147d
|
147d |
|
uvm_fault: rw_enter (3)
|
|
|
|
2 |
72d |
149d
|
149d |
|
assert "rw_write_held(uobj->vmobjlock)" failed in uvm_vnode.c
|
|
|
|
5 |
4d09h |
149d
|
149d |
|
panic: ffs_blkfree: bad size (4)
|
|
|
|
5 |
55d |
154d
|
154d |
|
pool: free list modified: pdppl (4)
|
|
|
|
7 |
74d |
165d
|
165d |
|
panic: vrele: ref cnt
|
|
|
|
4 |
49d |
172d
|
172d |
|
assert "pmap->pm_type != PMAP_TYPE_EPT" failed in pmap.c (3)
|
|
|
|
8 |
46d |
173d
|
173d |
|
assert "!ISSET(rt->rt_flags, RTF_LOCAL)" failed in nd6.c (3)
|
|
|
|
4 |
47d |
175d
|
175d |
|
uvm_fault: VOP_LOCK (2)
|
|
|
|
5 |
89d |
177d
|
177d |
|
uvm_fault: arp_rtrequest (2)
|
|
|
|
18 |
4d22h |
178d
|
178d |
|
pool: cpu free list modified: mbufpl (4)
|
|
|
|
5 |
59d |
178d
|
178d |
|
panic: ifa_update_broadaddr does not support dynamic length (3)
|
|
|
|
37 |
9d00h |
178d
|
178d |
|
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte 0x3efff
|
|
|
|
11 |
47d |
179d
|
179d |
|
panic: vref used where vget required (4)
|
|
|
|
9 |
60d |
183d
|
183d |
|
uvm_fault: checkalias
|
|
|
|
8 |
59d |
184d
|
184d |
|
uvm_fault: proc_trampoline
|
|
|
|
6 |
15d |
187d
|
187d |
|
uvm_fault: witness_checkorder (5)
|
|
|
|
6 |
14d |
200d
|
200d |
|
pool: free list modified: rttmr
|
|
|
|
9 |
1d08h |
203d
|
203d |
|
protection_fault: lf_advlock (4)
|
C |
|
|
2 |
52d |
206d
|
206d |
|
assert "((flags & PGO_LOCKED) != NUM && rw_lock_held(uobj->vmobjlock)) || (flags & PGO_LOCKED) == NUM" failed in uvm_vno (4)
|
|
|
|
9 |
16d |
211d
|
211d |
|
assert "nlevel >= IPL_NONE" failed in intr.c (2)
|
|
|
|
59 |
4d22h |
219d
|
219d |
|
panic: softclock: invalid to_clock: NUM
|
|
|
|
13 |
6d23h |
222d
|
222d |
|
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte ADDR (4)
|
|
|
|
65 |
48d |
222d
|
222d |
|
panic: softclock: invalid to_clock: -ADDR
|
|
|
|
20 |
21d |
224d
|
224d |
|
protection_fault: sys_semop
|
C |
|
|
3 |
6d21h |
225d
|
225d |
|
assert "ps->ps_uvncount == NUM" failed in kern_unveil.c (4)
|
C |
|
|
5186 |
29m |
230d
|
196d |
|
assert "sc->sc_dev == NUM" failed in if_tun.c (5)
|
|
|
|
355 |
3d23h |
231d
|
231d |
|
uvm_fault: db_read_bytes
|
|
|
|
94 |
14h12m |
233d
|
233d |
|
assert "cifp != NULL" failed in route.c (3)
|
|
|
|
196 |
20h44m |
239d
|
239d |
|
uvm_fault: pool_gc_pages (2)
|
|
|
|
9 |
50d |
239d
|
239d |
|
assert "pg->wire_count == NUM" failed in vfs_biomem.c (3)
|
|
|
|
1133 |
2h48m |
286d
|
286d |
|
uvm_fault: pmap_page_remove (5)
|
|
|
|
15 |
9d19h |
306d
|
306d |
|
uvm_fault: km_free (2)
|
|
|
|
10 |
61d |
308d
|
308d |
|
assert "dupe == NULL" failed in uvm_page.c (4)
|
|
|
|
209 |
39d |
336d
|
336d |
|
panic: acquiring blockable sleep lock with spinlock or critical section held (rwlock) vmmaplk (3)
|
|
|
|
140 |
1h36m |
353d
|
353d |
|
uvm_fault: ktrops (2)
|
C |
|
|
34 |
8h50m |
378d
|
378d |
|
uvm_fault: db_enter (5)
|
|
|
|
249 |
23h25m |
396d
|
396d |
|
uvm_fault: schedclock
|
syz |
|
|
11 |
35d |
404d
|
227d |
|
kernel: page fault trap, code=NUM (3)
|
C |
|
|
73 |
3d10h |
434d
|
191d |
|
malloc: free list modified: free (4)
|
C |
|
|
16 |
38d |
456d
|
455d |
|
panic: trap type NUM, code=NUM, pc=NUM (3)
|
|
|
|
198 |
2d07h |
485d
|
485d |
|
witness: lock_object uninitialized: ADDR (3)
|
C |
|
|
3184 |
2d08h |
558d
|
417d |
|
uvm_fault: hardclock (5)
|
syz |
|
|
4 |
435d |
587d
|
587d |
|
panic: ufsdirhash_lookup: bad offset in hash array (3)
|
C |
|
|
79 |
7d11h |
598d
|
304d |
|
protection_fault: sys_msgrcv (2)
|
C |
|
|
31 |
159d |
729d
|
485d |
|
uvm_fault: memcpy (5)
|
C |
|
|
20 |
26d |
733d
|
733d |
|
assert "uvn->u_obj.uo_refs == NUM" failed in uvm_vnode.c (2)
|
syz |
|
|
2 |
737d |
737d
|
737d |
|
protection_fault: pool_do_put (2)
|
syz |
|
|
36 |
62d |
757d
|
434d |
|
panic: vop_generic_badop (2)
|
|
|
|
91 |
36d |
768d
|
768d |
|
panic: pmap_unwire: invalid PDE
|
syz |
|
|
6 |
148d |
791d
|
733d |
|
no output from test machine (8)
|
C |
|
|
477720 |
22m |
800d
|
797d |
|
uvm_fault: ffs_indirtrunc
|
C |
|
|
4 |
556d |
844d
|
844d |
|
witness: reversal: vmmaplk inode (3)
|
C |
|
|
828 |
6h44m |
876d
|
827d |
|
SYZFATAL: executor NUM failed NUM times: executor NUM: exit status NUM
|
syz |
|
|
175427 |
8d01h |
899d
|
899d |
|
panic: bad dir (3)
|
C |
|
|
36 |
50d |
905d
|
733d |
|
panic: uvm_fault_unwire_locked: address not in map (4)
|
C |
|
|
376 |
3h25m |
921d
|
902d |
|
uvm_fault: x86_ipi_db (8)
|
|
|
|
293 |
12d |
965d
|
965d |
|
uvm_fault: ufs_lookup
|
C |
|
|
84 |
25d |
1001d
|
353d |
|
kernel: double fault trap, code=NUM (2)
|
C |
|
|
34 |
58d |
1001d
|
952d |
|
panic: trap type NUM, code=NUM, pc=ADDR (2)
|
|
|
|
456 |
3h09m |
1007d
|
1007d |
|
protection_fault: ktrops
|
C |
|
|
259 |
62d |
1011d
|
991d |
|
protection_fault: sblock
|
syz |
|
|
38 |
834d |
1014d
|
1014d |
|
assert "uvm_page_owner_locked_p(pg)" failed in uvm_page.c
|
|
|
|
5820 |
38m |
1019d
|
1019d |
|
uvm_fault: fifo_write (2)
|
C |
|
|
3430 |
36d |
1022d
|
706d |
|
SYZFAIL: tun: read failed
|
syz |
|
|
57167 |
21m |
1039d
|
1007d |
|
corrupted report (6)
|
|
|
|
2055 |
4h58m |
1118d
|
1118d |
|
uvm_fault: memset
|
C |
|
|
76 |
21d |
1160d
|
1160d |
|
SYZFAIL: command failed
|
syz |
|
|
12761 |
12h34m |
1327d
|
1009d |
|
suppressed report
|
|
|
|
334701 |
2h23m |
1327d
|
1317d |
|
panic: ufs_rename: lost dir entry
|
C |
|
|
101 |
20h51m |
1701d
|
939d |
|
lost connection to test machine (2)
|
|
|
|
848159 |
26m |
2117d
|
never |