syzbot


Out of 561 bugs, 308 were automatically obsoleted (4 due to revoked reproducers), 253 were invalidated by users.
Title Repro Cause bisect Fix bisect Count Last Reported
uvm_fault: fifo_read 2 97d 111d
assert "pmap->pm_type != PMAP_TYPE_EPT" failed in pmap.c (2) 1 100d 100d
assert "rw_write_held(&map->lock)" failed in uvm_map.c 1 102d 102d
panic: wakeup: p_stat is NUM (3) 2 110d 196d
panic: vop_ 1 27d 27d
uvm_fault: witness_checkorder (4) 1 116d 116d
assert "ps->ps_uvncount == NUM" failed in kern_unveil.c (3) 134 81d 296d
uvm_fault: pool_do_put (3) 1 121d 121d
uvm_fault: VOP_LOCK 1 124d 124d
pool: free list modified: shmpl (4) 1 126d 126d
panic: vConnection to ssh-serialport.googleapis.com closed by remote host. 1 128d 128d
assert "((flags & PGO_LOCKED) != NUM && rw_lock_held(uobj->vmobjlock)) || (flags & PGO_LOCKED) == NUM" failed in uvm_vno (3) 4 130d 231d
panic: runtime.errorString("integer divide by zero") 1 133d 133d
panic: (3) 1 47d 47d
assert "ifp != NULL" failed in if_ether.c (5) 181 99d 493d
protection_fault: __x86_indirect_thunk_r11 1 140d 140d
pool: cpu free list modified: mbufpl (3) 1 146d 146d
pool: free list modified: mbufpl (3) 1 150d 150d
assert "sc->sc_dev == NUM" failed in if_tun.c (4) 1 162d 162d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (22) 15 164d 339d
panic: (2) 1 79d 79d
panic: ffs_blkfree: bad size (2) 1 172d 172d
protection_fault: witness_checkorder (2) C 311 132d 247d
panic: uvm_fault_unwire_locked: addrepasnsi cno:t i n k er n e l dmaipagnostic assertion "!_kernel_lock_held()" fa 1 173d 173d
kqueue: knote !ACTIVE (2) 2 174d 186d
protection_fault: lf_advlock (3) 6 180d 420d
assert "pg->wire_count == NUM" failed in vfs_biomem.c (2) 2 186d 216d
panic: thread ADDR not in SRUN: NUM 4 188d 241d
panic: db_mtx_enter: mtx ADDR: locking against myself 1 190d 190d
assert "__mp_lock_held(&sched_lock, curcpu()) == NUM" failed in sched_bsd.c 2 191d 192d
panic: voserialport: Connection terminated to allow system upgrade. Please reconnect at your convenience. 1 194d 194d
assert "self->ci_proc_pmap == p->p_vmspace->vm_map.pmap" failed in pmap.c syz 2 195d 195d
assert "ps->ps_uvncount == NUM" failed in kernWARNING: SPL NOT LOWERED ON SYSCALL NUM NUM EXIT NUM aStopped at save 1 206d 206d
assert "ps->ps_uvncount == NUM" failed in multicore/kernel/sys/kern/kern_unveil.c 1 207d 207d
uvm_fault: softclock (3) 1 207d 207d
openbsd build error (19) 18 219d 496d
assert "__mp_lock_held(&sched_lock, curcpu()) == NUM" failed in kern_lock.c (3) 4 224d 243d
uvm_fault: witness_checkorder (3) C 212 188d 442d
protection_fault: remrunqueue 2 230d 236d
assert "!ISSET(p->p_flag, P_WSLEEP) || p->p_stat == SSTOP" failed in kern_sched.c syz 81 226d 251d
assert "to->to_kclock == KCLOCK_UPTIME" failed in kern_timeout.c (2) 1 230d 230d
assert "dtlookup(unit) == NULL" failed in dt_dev.c (2) 1 232d 232d
panic:Connection to ssh-serialport.googleapis.com closed by remote host. 1 248d 248d
panic: uvm_fault_unwire_locked: WARaNdIdNGre:s sS PnotL iNn OmT aLpO 1 159d 159d
panic: vop_gepneanic: kernel diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/multicore/ker 1 251d 251d
uvm_fault: bpfioctl (3) 1 255d 255d
assert "cifp != NULL" failed in route.c (2) 18 257d 485d
assert "sc->sc_dev == NUM" failed in if_tun.c (3) 68 261d 750d
panic: ffs_update: bad link cnt 18 276d 778d
panic: vop_genConnection to ssh-serialport.googleapis.com closed by remote host. 1 278d 278d
panic: voConnection to ssh-serialport.googleapis.com closed by remote host. 1 284d 284d
uvm_fault: db_enter (4) 30 291d 633d
uvm_fault: igmp_leavegroup (4) 271 253d 719d
panic: vopp_ganenier:ic_ a 1 313d 313d
kernel: page fault trap, code=NUM (2) 1 318d 318d
uvm_fault: softclock_process_kclock_timeout 4 321d 405d
multicore test error: no output from test machine (2) 1 324d 324d
protection_fault: in6_addmulti (2) 4 326d 390d
pool: free list modified: fdescpl (3) 10 327d 620d
multicore build error (16) 252 327d 555d
panic: vop_Connection to ssh-serialport.googleapis.com closed by remote host. 1 329d 329d
uvm_fault: NUM TID PID UID PRFLAGS PFLAGS CPU COMMANDNUM(NUM,NUM,NUM,NUM,49b,ADDR) at NUMtimeout_ru 1 330d 330d
assert "rw_write_held(uobj->vmobjlock)" failed in uvm_aobj.c 1 332d 332d
panic: vo (2) 1 245d 245d
assert "pg->wire_count == NUM" failed in vfs_biomem.c 10 340d 676d
protection_fault: fill_file (2) 2 341d 354d
panic: wakeup: p_stat is NUM (2) 4 343d 399d
panic: Non dma-reachable buffer at curaddr ADDR(raw) 1 350d 350d
uvm_fault: NUM TID PID UID PRFLAGS PFLAGS CPU COMMANDNUM(NUM,NUM,NUM,NUM,59d,ADDR) at NUMtimeout_ru 1 350d 350d
protection_fault: __llvm_retpoline_r11 (2) 1 351d 351d
openbsd test error: SYZFATAL: BUG: got no coverage: 2405 326d 400d
multicore test error: SYZFATAL: BUG: got no coverage: 4785 326d 400d
uvm_fault: kcov_remote_enter 3 357d 475d
uvm_fault: ffs2_balloc (2) 3 364d 434d
panic: missing alias (3) 1 366d 366d
assert "to->to_kclock == KCLOCK_UPTIME" failed in kern_timeout.c 1 372d 372d
uvm_fault: softclock (2) 2 376d 389d
openbsd boot error: can't ssh into the instance (5) 1 376d 376d
uvm_fault: NUM TID PID UID PRFLAGS PFLAGS CPU COMMAND*ADDR NUM NUM NUM ADDR NUM 1 387d 387d
panic: voWARNpI_NgGe:n SePLr iNc_ObT adLOoWpE 1 306d 306d
uvm_fault: NUM TID PID UID PRFLAGS PFLAGS CPU COMMANDNUM(NUM,NUM,NUM,NUM,58b,ADDR) at NUMtimeout_ru 1 397d 397d
panic: vpoapn_giecn: ekrice_brnadelop 1 309d 309d
uvm_fault: NUM TID PID UID PRFLAGS PFLAGS CPU COMMAND*ADDR NUM NUM 0x2 ADDR 0K syz 1 403d 403d
syzkaller: make target failed: failed to run ["gmake" "target"]: exit status 2 (2) 12 325d 326d
assert "((flags & PGO_LOCKED) != NUM && rw_lock_held(uobj->vmobjlock)) || (flags & PGO_LOCKED) == NUM" failed in uvm_vno (2) 1 432d 432d
panic: vputonfreelist: lock count is not zero (2) 1 439d 439d
panic: malloc: out of space in kmem_map (2) 1 442d 442d
protection_fault: done_flush 81 452d 809d
assert "dupe == NULL" failed in uvm_page.c (3) 25 455d 824d
assert "ps->ps_uvncount == NUM" failed in kern_unveil.c (2) 5 459d 669d
assert "ifa == rt->rt_ifa" failed in nd6.c (4) 1 460d 460d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 (4) 63 458d 507d
panic: pr_find_pagehead: pdppl: incorrect page 1 474d 474d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 (4) 9 479d 479d
assert "d->bd_in_uiomove == NUM" failed in bpf.c 1 479d 479d
uvm_fault: savectx 1 479d 479d
openbsd boot error: can't ssh into the instance (4) 28 481d 520d
assert "!_kernel_lock_held()" failed in uvm_map.c 6 483d 644d
assert "__mp_lock_held(&sched_lock, curcpu()) == NUM" failed in kern_lock.c (2) 1 484d 484d
pool: free list modified: inpcb (2) 2 485d 539d
panic: vo 1 397d 397d
uvm_fault: uvm_map_teardown 1 490d 490d
panic: ufsdirhash_lookup: bad offset in hash array (2) 1 491d 491d
panic: acquiring blockable sleep lock with spinlock or critical section held (rwlock) vmmaplk (2) 1 492d 492d
multicore test error: no output from test machine 1 493d 493d
malloc: free list modified: counters 9 495d 755d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte ADDR (3) 3 499d 523d
protection_fault: fill_file 2 510d 536d
uvm_fault: hardclock (4) 1 510d 510d
multicore boot error: can't ssh into the instance (4) 51 481d 481d
pool: free list modified: pdppl (3) 1 514d 514d
uvm_fault: pool_gc_pages 4 516d 703d
witness: lock_object uninitialized: ADDR (2) 1 516d 516d
uvm_fault: softclock 1 517d 517d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (21) 12 518d 529d
protection_fault: __llvm_retpoline_r11 1 518d 518d
uvm_fault: pool_do_get (2) 2 519d 542d
uvm_fault: rw_enter 1 523d 523d
panic: amap_pp_adjref: negative reference count (2) 1 523d 523d
assert "((flags & PGO_LOCKED) != NUM && rw_lock_held(uobj->vmobjlock)) || (flags & PGO_LOCKED) == NUM" failed in uvm_vno 1 525d 525d
uvm_fault: ufs_direnter 1 536d 536d
assert "bp->b_data != NULL" failed in vfs_biomem.c (3) 2 536d 553d
uvm_fault: bpfioctl (2) 2 538d 539d
panic: rw_enter: solock locking against myself 5 538d 626d
multicore test error: SYZFATAL: BUG: program execution failed: executor NUM: EOF (2) 78 511d 512d
openbsd test error: SYZFATAL: BUG: program execution failed: executor NUM: EOF 94 511d 516d
uvm_fault: __kernel_phys_end 1 541d 541d
panic: trap type NUM, code=NUM, pc=NUM (2) 1 552d 552d
protection_fault: in6_addmulti 1 553d 553d
panic: wakeup: p_stat is NUM 2 554d 576d
protection_fault: witness_checkorder 1 567d 567d
uvm_fault: NUM TID PID UID PRFLAGS PFLAGS CPU COMMAND*ADDR NUM NUM NUM ADDR 0K s 1 583d 583d
malloc: free list modified: free (3) 1 590d 590d
multicore test error: SYZFATAL: BUG: program execution failed: executor NUM: EOF 108 512d 514d
uvm_fault: km_free 6 615d 803d
panic:client_loop: send disconnect: Broken pipe 4 618d 757d
panic: vopclient_loop: send disconnect: Broken pipe (3) 3 621d 668d
panic: vopConnection to ssh-serialport.googleapis.com closed by remote host. 1 542d 542d
pool: free list modified: inpcb 2 630d 657d
pool: cpu free list modified: mbufpl (2) 1 633d 633d
protection_fault: lf_advlock (2) 4 637d 686d
pool: free list modified: art_heap4 (3) 1 644d 644d
uvm_fault: solock 1 646d 646d
panic: trap type NUM, code=NUM, pc=NUM 1 649d 649d
uvm_fault: hardclock (3) 1 653d 653d
assert "pmap->pm_type != PMAP_TYPE_EPT" failed in pmap.c 1 657d 657d
panic: tcpp_nucp t 1 567d 567d
pool: free list modified: bufpl 1 657d 657d
panic: vop_gene 1 567d 567d
panic: vop_generic_bclient_loop: send disconnect: Broken pipe 1 569d 569d
panic: vop_generic_bapdoapn 1 577d 577d
kernel: page fault trap, code=NUM syz 1 576d 576d
panic: vop_client_loop: send disconnect: Broken pipe (2) 1 584d 584d
panic: vop_gpeanneicri:c _kbeardonpe 1 585d 585d
panic: vop_geneclient_loop: send disconnect: Broken pipe 1 580d 580d
panic: voclient_loop: send disconnect: Broken pipe 1 666d 666d
protection_fault: tun_enqueue 1 667d 667d
assert "bp->b_data != NULL" failed in vfs_biomem.c (2) 2 667d 719d
witness: lock_object uninitialized: ADDR 71 673d 812d
panic: ufsdirhash_lookup: bad offset in hash array 1 673d 673d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte ADDR (2) 1 675d 675d
panic: vop_client_loop: send disconnect: Broken pipe 1 588d 588d
panic: vop_generic_bpaadonipc 1 593d 593d
pool: free list modified: sockpl (2) 3 685d 740d
malloc: free list modified: free (2) 1 690d 690d
SYZFAIL: ioctl remote attach failed (4) 68 693d 807d
uvm_fault: pmap_page_remove (4) 1 698d 698d
protection_fault: pool_do_put 1 710d 710d
panic: vpopa_ngiecn:kerericn_elba diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/setuid/k 1 629d 629d
panic: vpoanp_igc:en e r i c _ b ad op 1 631d 631d
panic: pmap_enter: PG_PVLIST mapping with unmanaged page: va ADDR, opte ADDR, pa ADDR 2 721d 798d
panic: pool_do_get: pfiaddrpl: page empty 1 722d 722d
panic: vop_generclient_loop: send disconnect: Broken pipe 1 636d 636d
uvm_fault: putc 2 726d 730d
uvm_fault: pf_anchor_global_RB_INSERT_COLOR 1 728d 728d
panic: vop_pganeince:ri kce_rbandelo p 1 646d 646d
panic: vop_genericp_anbaidc:o p 1 645d 645d
panic: vop_generic_baclient_loop: send disconnect: Broken pipe 1 644d 644d
panic: runtime error: invalid memory address or nil pointer dereference (8) 1 646d 646d
uvm_fault: ffs2_balloc 1 733d 733d
assert "ifa == rt->rt_ifa" failed in nd6.c (3) 2 734d 761d
uvm_fault: VOP_ISLOCKED (2) 1 735d 735d
panic: vpoapn_igc:e kernel diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/setuid/kernel/s 1 648d 648d
panic: vclient_loop: send disconnect: Broken pipe (2) 1 647d 647d
uvm_fault: db_enter (3) 1 647d 647d
uvm_fault: pool_do_get 1 742d 742d
panic: vclient_loop: send disconnect: Broken pipe 1 653d 653d
uvm_fault: ktrops 1 744d 744d
panic: vop_genericp_baandiocp: 1 703d 703d
panic: vop_geneprianci_c: kernel diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/multicore 1 666d 666d
panic: broken type ref (3) 1 657d 657d
panic: vop_generic_badpoapn 1 656d 656d
panic: vop_genepranici_c:bakdeorpn 1 658d 658d
uvm_fault: memcpy (4) 2 746d 815d
multicore test error: SYZFATAL: BUG: program execution failed: bad reply magic ADDR 1 664d 664d
openbsd test error: SYZFATAL: BUG: program execution failed: bad reply magic ADDR 3 664d 664d
assert "la != NULL" failed in if_ether.c (2) 1 753d 753d
protection_fault: sys_msgrcv 1 759d 759d
panic: vop_geneprainci_cb:a kdeoprn 1 760d 760d
panic:p a nic: kernel diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/setuid/kernel/sys/ke 1 671d 671d
openbsd build error (18) 1 671d 671d
uvm_fault: db_enter (2) 1 677d 677d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte ADDR 3 769d 818d
panic: vpoapn_igc:en keerricn_elba d o dpi 1 769d 769d
kernel: privileged instruction fault trap, code=NUM 1 771d 771d
uvm_fault: hardclock (2) 1 772d 772d
panic: vop_generic_bad 1 684d 684d
panic: vop_genclient_loop: send disconnect: Broken pipe (2) 1 689d 689d
kernel: protection fault trap, code=NUM (4) 1 691d 691d
panic: vop_genclient_loop: send disconnect: Broken pipe 1 692d 692d
panic: vop_generic_client_loop: send disconnect: Broken pipe 1 693d 693d
uvm_fault: ffs_nodealloccg 1 784d 784d
assert "dtlookup(unit) == NULL" failed in dt_dev.c 1 785d 785d
panic: vop_generic_pbaandiopc 1 696d 696d
pool: free list modified: fdescpl 1 788d 788d
assert "ifp != NULL" failed in if_ether.c (4) 2 788d 833d
panic: vopclient_loop: send disconnect: Broken pipe (2) 1 699d 699d
assert "ps->ps_uvncount == NUM" failed in kern_unveil.c 2 800d 812d
panic: pmap_remove_ptes: managed page without PG_PVLIST: va ADDR, opte ADDR 1 809d 809d
assert "bp->b_data != NULL" failed in vfs_biomem.c 1 810d 810d
panic: runtime error: invalid memory address or nil pointer dereference (7) 1 811d 811d
panic: missing alias (2) 2 812d 812d
panic: vref used where vget required (3) 1 812d 812d
panic: client_loop: send disconnect: Broken pipe (2) 1 723d 723d
panic: vop_generic_WbAaRdNopI 1 727d 727d
panic: apcaqniuci:r kinegr nbleol c kdaiblage snloesteipc laosscke r t io n " ! _ ke r n e l_ l o wcikt_hh s 1 727d 727d
panic: acqupirainincg: b lo c kkaerblneel s l e ep l o c k d i a gwintohs tsipc i nl oc k o r c r it i c a l 1 727d 727d
panic: vop_gclient_loop: send disconnect: Broken pipe 1 727d 727d
panic: acquipraniincg: k e brnleolck daibaleg nsolseteip lc oacsks weirttiho n s "pi!nl_okecrkn oelr_ l corcik_thiec 1 728d 728d
panic: acpquainriic:n g bl o ck a b le s l e e p l o c k w i t h s p in l o c k o r c ri t i ca l s 1 728d 728d
panic: acquiring blpocankaicb:l e s l e keerp lnoecl k w i t h s p i nl oc k o r cr i t ic a l s e c ti o n 1 728d 728d
panic: apcaqnuiic:ri nkg ebrloncekla b l e sl ee p l o c k w i t h s p i n l oc k o r cr i ti c a l 1 728d 728d
panic: acquiring blockable sleep lock with spinlock or criticapl saneictci:o nk ehrenled (lk deriangenlo_lsotickc) 1 728d 728d
panic: acquiring blocpkaanbilec: k er snleele p lo c k w i th s p i nl o c k or c r i ti ca l s ec t 1 728d 728d
kernel: protection fault trap, code=NUM (3) 1 728d 728d
panic: acquirpinagni c :b l koecrknaebll ed silageneop slotickc a ss e r t i o n " ! _ k e r n el _ l o ckwi_t 1 728d 728d
panic: acquiring bplaoncikca:b l e sl e e p l okcek rwnielt h s p i n dloicak gonro scrtiitci c a l s e cati 1 728d 728d
panic: acquiring blockabplaen i sc:le e p l kocek rn e l d ia g no s t i wci t ha s s e r t i o n "s!_pkienlro 1 728d 728d
panic: acquiringp abnlioc:c k ab l e sl e e p lo c k w it h s p i n l oc k o rk er n e l d i agn o s 1 728d 728d
panic: acpqauniicr:in g bl kocerknaeblle d ia g no s t i cs alseseeprt i lonoc k w it"h!_ k seprninell_olckoc 1 728d 728d
panic: acquirinpgan bilco:c kkaeblrne esll e ep lo ck wi t h s p in l oc k o r c r i ti c a l s ec t 1 728d 728d
panic: acquiring blockablep a ni c : k er ne l d ia gn o s t i c as s e r stleieopn l oc k w i t h s 1 728d 728d
panic: acquiring bl o c kpaablniec s:le e p l o c k wi t h s p i n l o c k o r c ri t i c a l s e c t i 1 728d 728d
panic: apcqauniircin:g b lkeorcknaelbldei saglenoepst ilc o c k w i th sp i n l o c k a s s oerrt ciorint i"c! 1 728d 728d
kernel: protection fSeaBIOS (version NUM.NUM.NUM-google) syz 1 733d 733d
panic: vop_generic_bado 1 738d 738d
panic: bad dir (2) 44 795d 807d
pool: free list modified: pdppl (2) 1 831d 831d
panic: client_loop: send disconnect: Broken pipe 1 755d 755d
assert "next != NULL && next->start <= entry->end" failed in uvm_fault.c (2) syz 2 826d 826d
witness: reversal: lock order data missing (2) C 173 890d 1040d
openbsd build error (16) 1 761d 761d
multicore boot error: witness: reversal: vmmaplk inode 60 762d 763d
uvm_fault: pmap_page_remove (3) 1 767d 767d
multicore boot error: kernel: protection fault trap, code=NUM 57 766d 767d
panic: acquiring blockable sleep lock with spinlock or critical section held (rwlock) kmmaplk (2) 2 862d 922d
panic: vopclient_loop: send disconnect: Broken pipe 1 781d 781d
panic: vop_generipac_nibac:do kpe 1 781d 781d
panic: vop 1 788d 788d
SYZFAIL: tun: can't open device (3) 86 794d 794d
SYZFAIL: tun_id out of range (2) 182 794d 794d
panic: trap type NUM, code=NUM, pc=ADDR 1 805d 805d
kernel: protection fault trap, code=NUM (2) C 16 810d 833d
panic: 1 809d 809d
SYZFAIL: dup2(NUM, kInPipeFd) failed syz 4 815d 833d
SYZFAIL: tun_id out of range 109 816d 816d
panic: vop_generic_badop 1 897d 897d
multicore build error (14) 58 819d 822d
kernel: double fault trap, code=NUM 1 820d 820d
SYZFAIL: ioctl remote attach failed (2) 6 820d 840d
uvm_fault: hardclock 1 922d 922d
SYZFAIL: open of /dev/kcov failed 3 836d 836d
SYZFAIL: ioctl remote attach failed 3 938d 990d
kernel: page fault trap, code=0 (4) 2 939d 968d
SYZFAIL: tun: can't open device (2) 1 968d 968d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (20) 24 894d 914d
openbsd test error: timed out (3) 72 900d 904d
multicore test error: timed out (3) 150 900d 904d
kernel: protection fault trap, code=NUM 1 913d 913d
uvm_fault: x86_ipi_db (6) 1 935d 935d
panic: wakeup: p_stat iSeaBIOS (version NUM.NUM.NUM-google) 1 936d 936d
uvm_fault: x86_ipi_db (5) 1 940d 940d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (19) 3 949d 949d
uvm_fault: x86_ipi_db (4) 1 954d 954d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (18) 6 972d 973d
panic: acquiring blockable sleep lock with spinlock or critical section held (rwlock) kmmaplk 11 1071d 1234d
multicore build error (12) 1 1111d 1111d
uvm_fault: x86_ipi_db (3) 4 1119d 1136d
panic: runtime error: invalid memory address or nil pointer dereference (6) 276 1043d 1043d
openbsd test error: lost connection to test machine (2) 3 1057d 1057d
multicore test error: lost connection to test machine (2) 6 1057d 1057d
openbsd test error: lost connection to test machine 15 1057d 1057d
multicore test error: lost connection to test machine 36 1057d 1057d
corrupted report (4) 21 1153d 1321d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (17) 3 1103d 1103d
panic: runtime error: invalid memory address or nil pointer dereference (5) 10821 1096d 1096d
panic: runtime error: invalid memory address or nil pointer dereference (4) 2753 1096d 1097d
SYZFAIL: clone failed syz 1 1117d 1117d
multicore build error (11) 2 1119d 1119d
multicore build error (10) 2 1151d 1223d
openbsd build error (13) 1 1229d 1229d
uvm_fault: x86_ipi_db (2) 1 1169d 1169d
uvm_fault: x86_ipi_db 1 1172d 1172d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (16) 21 1175d 1179d
assert "(key.from) > 0 && (key.from) <= w_max_used_index && (key.from) < witness_count" failed in subr_witness.c 1 1275d 1275d
uvm_fault: strlen 1 1279d 1279d
panic: ffs_alloccg: map corrupted 1 1280d 1280d
uvm_fault: fdcopy 1 1285d 1285d
panic (2) syz 8 1199d 1209d
uvm_fault: in6_pcbhashlookup 1 1292d 1292d
panic 1 1211d 1211d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 (3) 9 1303d 1307d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (15) 6 1230d 1239d
assert "ifp != NULL" failed in if_ether.c (3) 2 1314d 1319d
uvm_fault: pmap_page_remove (2) 5 1319d 1495d
uvm_fault: nd6_dad_duplicated 1 1319d 1319d
soreceive 1 58 1324d 1480d
pool: free list modified: pvpl 17 1325d 1580d
panic: runtime error: invalid memory address or nil pointer dereference (3) 28 1326d 1593d
panic: m_copym0: m == NULL and not COPYALL 306 1323d 1587d
panic: m_copym0: short mbuf chain 214 1327d 1586d
witness: reversal: vmmaplk inode (2) C 46771 1238d 1552d
witness: reversal: inode netlock C 6 1239d 1239d
witness: reversal: netlock inode C 11 1239d 1239d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 (3) 3 1239d 1239d
uvm_fault: tun_dev_read (2) 71 1332d 1579d
uvm_fault: rtrequest 1 1332d 1332d
openbsd build error (12) 1 1243d 1243d
multicore build error (9) 1 1243d 1243d
uvm_fault: ml_dequeue 2 1333d 1375d
assert "dupe == NULL" failed in uvm_page.c (2) 1 1334d 1334d
panic: pr_find_pagehead: mbufpl: incorrect page (2) 20 1338d 1605d
uvm_fault: memcpy (3) 26 1338d 1396d
uvm_fault: sbdrop 44 1345d 1565d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (14) 6 1257d 1257d
assert "pg->wire_count == 1" failed in vfs_biomem.c (2) 9 1348d 1416d
panic: in6_cksum: out of data, len 64 1 1349d 1349d
uvm_fault: _bpf_mtap (2) 8 1352d 1367d
panic: unhandled af (3) syz 7 1348d 1358d
uvm_fault: ml_enlist (2) 1 1353d 1353d
uvm_fault: ml_purge (2) 8 1358d 1577d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (13) 39 1277d 1356d
panic: pr_find_pagehead: mbufpl: page header missing (3) 2 1362d 1395d
uvm_fault: m_free (2) 429 1332d 1582d
uvm_fault: pool_cache_get 518 1333d 1611d
pool: free list modified: anonpl 8 1366d 1588d
panic: amap_lookup: offset out of range 2 1369d 1415d
uvm_fault: 0x1:uvm_fault(ADDR, 0x1, 0, 1) -> e kernel: page fault trap, code=0Stopped at db_read_bytes 1 1280d 1280d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 (2) 45 1281d 1283d
panic: free: size too small 10 <= 4096 / 2 (ADDR) type devbuf 2 1372d 1377d
pool: free list modified: vcpupl 1 1373d 1373d
uvm_fault: bpf_mtap 10 1373d 1600d
pool: free list modified: filepl 1 1379d 1379d
pool: free list modified: shmpl (3) 1 1384d 1384d
uvm_fault: uvmfault_anonget 1 1387d 1387d
uvm_fault: unveil_find_cover 1 1388d 1388d
assert "mhead->m_flags & M_PKTHDR" failed in switchctl.c (2) 1 1389d 1389d
malloc: free list modified: free 12 1390d 1612d
uvm_fault: nd6_ns_output 1 1398d 1398d
uvm_fault: x86_send_ipi (2) 2 1399d 1411d
panic.go:LINE +0x72 (7) syz 3 1318d 1320d
assert "ifp != NULL" failed in rtsock.c (2) 26 1377d 1380d
panic: vref used where vget required (2) 2 1409d 1412d
panic: amap_lookups: offset out of range (2) 1 1410d 1410d
pool: free list modified: pffrnode 7 1410d 1548d
uvm_fault: uvm_map_clean 1 1411d 1411d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (8) 10 1364d 1435d
uvm_fault: igmp_leavegroup 1 1414d 1414d
syzkaller: make target failed: failed to run ["gmake" "target"]: exit status 2 3 1325d 1325d
panic(ADDR) at panic+0x164 1 1327d 1327d
openbsd boot error: can't ssh into the instance (3) 18 1328d 1328d
multicore boot error: can't ssh into the instance (3) 15 1328d 1328d
kernel: privileged instruction fault trap, code=0 (2) 1 1419d 1419d
assert "!_kernel_lock_held()" failed in kern_fork.c (2) 1 1419d 1419d
uvm_fault(ADDR, 0xa, 0, 1) -> e (2) 1 1333d 1333d
assert "!ISSET(rt->rt_flags, RTF_LOCAL)" failed in nd6.c (2) 1 1422d 1422d
no output from test machine (4) syz 14713 1336d 1343d
panic: amap_wipeout: corrupt amap 6 1428d 1516d
uvm_fault(ADDR, 0x7b8, 0, 1) -> e 1 1345d 1345d
uvm_fault(ADDR, 0x3, 0, 1) -> e (2) 1 1349d 1349d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 (2) 21 1351d 1353d
uvm_fault(ADDR, 0xa, 0, 1) -> e 1 1352d 1352d
pool: free list modified: tcpqe 4 1442d 1559d
uvm_fault(ADDR, 0x3, 0, 1) -> e 1 1354d 1354d
no output from test machine (2) C 89865 1358d 1410d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (12) 9 1366d 1369d
assert "sb->sb_cc == 0" failed in uipc_socket2.c 2 1448d 1492d
pool: free list modified: vmsppl 1 1359d 1359d
uvm_fault(ADDR, 0xbef, 0, 1) -> e (2) 1 1360d 1360d
uvm_fault(ADDR, 0x10b, 0, 1) -> e (2) 1 1366d 1366d
uvm_fault(ADDR, 0xbef, 0, 1) -> e 1 1367d 1367d
pool: free list modified: vnodes 1 1462d 1462d
uvm_fault(ADDR, 0x10b, 0, 1) -> e 1 1380d 1380d
kernel: page fault trap, code=0 (3) 1 1381d 1381d
panic: bad group arg size 29, should be <= 32 for &prog.GroupArg{ArgCommon:prog.ArgCommon{ref:LINEx328, dir:LINEx0}, Inn 1 1384d 1384d
assert "ps->ps_uvncount == 0" failed in kern_unveil.c (2) 1 1480d 1480d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (11) 6 1391d 1413d
pool: free list modified: uvmvnodes 1 1481d 1481d
pool: free list modified: sockpl 2 1483d 1494d
uvm_fault(ADDR, ADDR, 0, 1) -> e 1 1394d 1394d
panic: bad group arg size 29, should be <= 32 for &prog.GroupArg{ArgCommon:prog.ArgCommon{ref:LINEx2c0, dir:LINEx0}, Inn 1 1398d 1398d
uvm_fault: memcpy (2) syz 2168 1403d 1651d
uvm_fault: vio_start 1 1493d 1493d
uvm_fault: syscall 1 1496d 1496d
panic: broken type ref 1 1410d 1410d
pool: free list modified: mtagpl 1 1497d 1497d
assert "dupe == NULL" failed in uvm_page.c 4 1498d 1611d
pool: free list modified: art_table 1 1500d 1500d
assert "ifp != NULL" failed in if_ether.c (2) 1 1508d 1508d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 3 1418d 1418d
kqueue: knote !ACTIVE 2 1510d 1514d
uvm_fault: in4_cksum 1 1514d 1514d
panic: bad arg kind: <nil> (11) 1 1431d 1431d
kernel: privileged instruction fault trap, code=0 1 1523d 1523d
uvm_fault: ml_enlist 1 1523d 1523d
uvm_fault: tun_init 1 1524d 1524d
uvm_fault returns 14, GPA=ADDR C 2 1437d 1437d
panic: lock (kernel_lock) mbufpl not locked 1 1527d 1527d
panic: bad group arg size 0, should be <= 24 for &prog.GroupArg{ArgCommon:prog.ArgCommon{typ:(*prog.StructType)(ADDR)}, 1 1439d 1439d
panic.go:LINE +0x72 (5) 1 1442d 1442d
assert "pg->wire_count == 0" failed in uvm_page.c 1 1537d 1537d
panic: bad arg kind: <nil> (10) 1 1452d 1452d
panic: bad arg kind: <nil> (9) 1 1455d 1455d
pool: free list modified: art_heap4 2 1550d 1575d
uvm_fault: _bus_dmamap_load_mbuf 1 1554d 1554d
uvm_fault: m_copym 1 1555d 1555d
panic: bad arg kind: <nil> (8) 1 1467d 1467d
panic: pr_find_pagehead: mbufpl: page header missing (2) 1 1557d 1557d
pool: cpu free list modified: mcl2k 1 1558d 1558d
panic: bad arg kind: <nil> (7) 1 1471d 1471d
pool: free list modified: shmpl (2) 1 1565d 1565d
panic: bad arg kind: <nil> (6) 1 1476d 1476d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (7) 1 1477d 1477d
assert "mhead->m_flags & M_PKTHDR" failed in switchctl.c 1 1568d 1568d
pool: double put: mbufpl (2) 2 1569d 1601d
panic: attempt to access user address ADDR in supervisor mode 7 1574d 1623d
kernel: double fault trap, code=0 (2) syz 2 1600d 1600d
uvm_fault: rtable_satoplen (3) syz 237 1608d 1651d
panic: amap_lookups: offset out of range 1 1578d 1578d
panic: bad arg kind: <nil> (5) 1 1490d 1490d
uvm_fault: witness_checkorder (2) 1 1580d 1580d
panic: bad arg kind: &prog.IntType{IntTypeCommon:prog.IntTypeCommon{TypeCommon:prog.TypeCommon{TypeName:"int32", FldName 1 1493d 1493d
panic: bad arg kind (2) 2 1583d 1585d
assert "pg->wire_count == 1" failed in vfs_biomem.c 66 1584d 1909d
assert "ifp != NULL" failed in rtsock.c 2 1584d 1586d
panic.go:LINE +0x72 (4) 1 1495d 1495d
uvm_fault: x86_send_ipi 1 1588d 1588d
uvm_fault: VOP_ISLOCKED 1 1588d 1588d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (10) 3 1498d 1498d
panic: bad arg kind: <nil> (4) 1 1501d 1501d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (6) 1 1501d 1501d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST, va = ADDR, pa = ADDR (2) 1 1593d 1593d
uvm_fault: m_zero 1 1594d 1594d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (5) 1 1508d 1508d
panic: free: non-malloced addr ADDR type in_multi 4 1599d 1621d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (9) 3 1510d 1510d
uvm_fault: pfi_kif_update 6 1601d 1728d
uvm_fault: fifo_write 1 1601d 1601d
panic.go:LINE +0x72 (3) 1 1513d 1513d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (4) 2 1515d 1515d
panic: receive 1: so ADDR, so_type 3, sb_cc 176 1 1603d 1603d
panic: ffs_valloc: dup alloc 2 1604d 1607d
uvm_fault: 0ddb{1}> ddb{1}> set $lines = 0ddb{1}> set $maxwidth = 0ddb{1}> show panickernel page faultattempt to e 1 1517d 1517d
assert "!_kernel_lock_held()" failed in kern_fork.c 15 1608d 1869d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (8) 3 1521d 1521d
panic: WAaRcNqIuNirGi:n g SPbLl NoOcT kLaObWlEReE Ds lOeNe pSY SloCcAkL Lwi 2 t15h7 s79p3i4n4l5o0c kEX IorT 0c rai 1 1522d 1522d
uvm_fault 10 1614d 1629d
panic: free: size too small 24 <= 256 / 2 (ADDR) type in_multi 1 1620d 1620d
panic: bad arg kind: <nil> (3) 1 1531d 1531d
assert "cifp != NULL" failed in route.c 89 1593d 1648d
assert "rt->rt_ifa->ifa_ifp != NULL" failed in route.c 830 1593d 1634d
uvm_fault: in6_purgeaddr 1423 1593d 1634d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (7) 3 1534d 1534d
assert "ifp != NULL" failed in if_ether.c 208 1595d 1649d
assert "ifa == rt->rt_ifa" failed in nd6.c (2) 262 1595d 1632d
uvm_fault: tun_clone_destroy 1 1626d 1626d
panic: bad arg kind: <nil> (2) 1 1542d 1542d
panic: bad arg kind: <nil> 1 1545d 1545d
panic.go:LINE +0x72 (2) 1 1548d 1548d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (6) 3 1550d 1550d
uvm_fault: pmap_page_remove 7 1642d 1898d
openbsd build error (7) 1 1553d 1553d
multicore boot error: can't ssh into the instance (2) 96 1570d 1571d
openbsd boot error: can't ssh into the instance (2) 48 1570d 1571d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (3) 1 1570d 1570d
panic: vref used where vget required 1 1659d 1659d
panic: pfi_dynaddr_update 2 1676d 1756d
uvm_fault: pool_do_put 1 1594d 1594d
panic: runtime error: invalid memory address or nil pointer dereference (2) 1 1595d 1595d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST, va = ADDR, pa = ADDR 1 1598d 1598d
pool: free list modified: pdppl 1 1599d 1599d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (5) 3 1598d 1598d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (2) 1 1599d 1599d
panic.go:LINE +0x72 1 1599d 1599d
witness: reversal: inode fdlock C 523 1666d 1879d
panic: runtime error: invalid memory address or nil pointer dereference 1 1604d 1604d
panic: fifo_badop called C 8841 1606d 1940d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR 1 1620d 1620d
panic: ffs_blkfree: bad size 2 1720d 1725d
kernel: double fault trap, code=0 1 1768d 1768d
assert "la != NULL" failed in if_ether.c 3 1753d 1755d
uvm_fault: ml_purge 6 1752d 1758d
panic: in_cksum: out of data, len 63 1 1738d 1738d
uvm_fault: pfi_ifhead_RB_REMOVE 1 1759d 1759d
panic: uvm_fault_unwire_locked: address not in map (2) 7 1749d 1876d
panicConnection to ssh-serialport.googleapis.com closed by remote host. 1 1607d 1607d
uvm_fault: vfs_lookup 1 1793d 1793d
panic: Data modified on freelist: word 4 of object ADDR size 0x84 previous type free (ADDR != ADDR) 1 1619d 1619d
panic: Data modified on freelist: word 5 of object ADDR size 0xa0 previous type devbuf (0xd != ADDR) 1 1619d 1619d
panic: Data modified on freelist: word 5 of object ADDR size 0xc0 previous type devbuf (0xd != ADDR) 1 1626d 1626d
panic: Data modified on freelist: word 5 of object ADDR size 0x100 previous type devbuf (0xd != ADDR) syz 7 1619d 1649d
panic: attempt WtAoR eNIxNeGc:u tSeP uL seNOrT a LddOrWEesRsE D 0Ox0N iSYn SCsAuLpLe rv3i 4s orEX ImTo d0 e9 1 1619d 1619d
panic: bad arg kind 1 1630d 1630d
uvm_fault: ADDR: movl $ADDR,0(%rdi)ddb> ddb> set $lines = 0ddb> set $maxwidth = 0ddb> show panickernel page 1 1634d 1634d
uvm_fault: ADDR: jmp ADDR 1 1636d 1636d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (4) 9 1643d 1644d
uvm_fault: pmap_enter syz 3 1884d 1890d
panic: malloc: allocation tooWA RlNaIrNGge: ,SPL NOT LOWERED ON SYSCALL 3 4 EXIT 0 9 1 1663d 1663d
multicore test error: timed out 43 1781d 1819d
panic: amap_add: slot in use 2 1872d 1877d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (3) 12 1701d 1701d
panic: vput: v_writecount != 0 C 2 1703d 1703d
uvm_fault: _bpf_mtap 31 1914d 1936d
panic: pool_cache_item_magic_check: mcl2k cpu free list modified: item addr ADDR+24 ADDR!=ADDR 1 1917d 1917d
panic: rw_enter: vmmaplk locking against myself 3 1927d 1929d
uvm_fault: tun_dev_read 2 1928d 1929d
openbsd test error: timed out 19 1787d 1846d
panic: bpf_mcopy 1 1932d 1932d
multicore build error (4) 2 1776d 1776d
openbsd build error (6) 1 1776d 1776d
pool: double put: mcl2k 4 1934d 1936d
pool: double put: mcl64k 1 1934d 1934d
panic: missing alias 1 1939d 1939d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (2) 3 1769d 1769d
panic: bad dir C 1390 1775d 1776d
multicore build error (2) 10 1801d 1801d
openbsd build error (4) 5 1801d 1801d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 12 1809d 1810d
multicore build error 26 1811d 1812d
openbsd build error (3) 13 1811d 1812d
multicore boot error: can't ssh into the instance 6 1811d 1811d
openbsd boot error: can't ssh into the instance 3 1811d 1811d
panic: ffs_read: type 0 1 1948d 1948d
panic: serialport: VM disconnected. 1 1819d 1819d
panic: kserialport: VM disconnected. 1 1819d 1819d
panic: kernel diagnostic serialport: VM disconnected. 1 1820d 1820d
panic: kernel diserialport: VM disconnected. 1 1898d 1898d
openbsd build error 1 1864d 1864d
lost connection to test machine C 276 1912d 1985d
https://github.com/openbsd/src.git boot error: uvm_fault: memcmp 6 1917d 1917d
https://github.com/openbsd/src.git test error 16 1925d 1946d
multicore boot error: uvm_fault: smbios_find 12 1917d 1917d
kernel: kernel relinking fa 1 2006d 1985d
https://github.com/openbsd/src.git boot error 479 1940d 1985d
panic: sandbox escaping file name "../file0" 111 1940d 1941d
multicore test error (2) 3 1927d 1927d
multicore test error 3 1927d 1927d
panic: sandbox escaping file name "../file0/file0", Files are map[./file0:true ../file0:true] 1 1940d 1940d
panic: sandbox escaping file name "../file0", Files are map[../file0:true] 11 1940d 1940d
panic: sandbox escaping file name "../file0", Files are map[./file0:true ../file0:true] 1 1940d 1940d
panic: sandbox escaping file name "../file0/file0" 2 1940d 1940d