syzbot


Title Repro Bisected Count Last Reported
uvm_fault(ADDR, 0x3, 0, 1) -> e 1 1d06h 1d06h
no output from test machine (2) C 89865 4d15h 57d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (12) 9 13d 15d
assert "sb->sb_cc == 0" failed in uipc_socket2.c 2 94d 139d
pool: free list modified: vmsppl 1 6d10h 6d10h
uvm_fault(ADDR, 0xbef, 0, 1) -> e (2) 1 6d14h 6d14h
uvm_fault(ADDR, 0x10b, 0, 1) -> e (2) 1 12d 12d
uvm_fault(ADDR, 0xbef, 0, 1) -> e 1 14d 14d
pool: free list modified: vnodes 1 108d 108d
uvm_fault(ADDR, 0x10b, 0, 1) -> e 1 27d 27d
kernel: page fault trap, code=0 (3) 1 28d 28d
panic: bad group arg size 29, should be <= 32 for &prog.GroupArg{ArgCommon:prog.ArgCommon{ref:LINEx328, dir:LINEx0}, Inn 1 31d 31d
assert "ps->ps_uvncount == 0" failed in kern_unveil.c (2) 1 126d 126d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (11) 6 37d 60d
pool: free list modified: uvmvnodes 1 128d 128d
pool: free list modified: sockpl 2 130d 140d
uvm_fault(ADDR, ADDR, 0, 1) -> e 1 40d 40d
panic: bad group arg size 29, should be <= 32 for &prog.GroupArg{ArgCommon:prog.ArgCommon{ref:LINEx2c0, dir:LINEx0}, Inn 1 44d 44d
uvm_fault: memcpy (2) syz 2168 49d 298d
uvm_fault: vio_start 1 140d 140d
uvm_fault: syscall 1 142d 142d
panic: broken type ref 1 57d 57d
pool: free list modified: mtagpl 1 144d 144d
assert "dupe == NULL" failed in uvm_page.c 4 144d 258d
pool: free list modified: art_table 1 147d 147d
assert "ifp != NULL" failed in if_ether.c (2) 1 154d 154d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 3 64d 64d
kqueue: knote !ACTIVE 2 157d 161d
uvm_fault: in4_cksum 1 161d 161d
panic: bad arg kind: <nil> (11) 1 77d 77d
kernel: privileged instruction fault trap, code=0 1 169d 169d
uvm_fault: ml_enlist 1 169d 169d
uvm_fault: tun_init 1 170d 170d
uvm_fault returns 14, GPA=ADDR C 2 83d 83d
panic: lock (kernel_lock) mbufpl not locked 1 174d 174d
panic: bad group arg size 0, should be <= 24 for &prog.GroupArg{ArgCommon:prog.ArgCommon{typ:(*prog.StructType)(ADDR)}, 1 86d 86d
panic.go:LINE +0x72 (5) 1 89d 89d
assert "pg->wire_count == 0" failed in uvm_page.c 1 184d 184d
panic: bad arg kind: <nil> (10) 1 98d 98d
panic: bad arg kind: <nil> (9) 1 101d 101d
pool: free list modified: art_heap4 2 197d 221d
uvm_fault: _bus_dmamap_load_mbuf 1 200d 200d
uvm_fault: m_copym 1 201d 201d
panic: bad arg kind: <nil> (8) 1 113d 113d
panic: pr_find_pagehead: mbufpl: page header missing (2) 1 204d 204d
pool: cpu free list modified: mcl2k 1 205d 205d
panic: bad arg kind: <nil> (7) 1 117d 117d
pool: free list modified: shmpl (2) 1 211d 211d
panic: bad arg kind: <nil> (6) 1 123d 123d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (7) 1 124d 124d
assert "mhead->m_flags & M_PKTHDR" failed in switchctl.c 1 215d 215d
pool: double put: mbufpl (2) 2 216d 247d
panic: attempt to access user address ADDR in supervisor mode 7 220d 270d
kernel: double fault trap, code=0 (2) syz 2 246d 246d
uvm_fault: rtable_satoplen (3) syz 237 254d 298d
panic: amap_lookups: offset out of range 1 224d 224d
panic: bad arg kind: <nil> (5) 1 137d 137d
uvm_fault: witness_checkorder (2) 1 227d 227d
panic: bad arg kind: &prog.IntType{IntTypeCommon:prog.IntTypeCommon{TypeCommon:prog.TypeCommon{TypeName:"int32", FldName 1 140d 140d
panic: bad arg kind (2) 2 230d 231d
assert "pg->wire_count == 1" failed in vfs_biomem.c 66 230d 555d
assert "ifp != NULL" failed in rtsock.c 2 231d 232d
panic.go:LINE +0x72 (4) 1 141d 141d
uvm_fault: x86_send_ipi 1 234d 234d
uvm_fault: VOP_ISLOCKED 1 235d 235d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (10) 3 145d 145d
panic: bad arg kind: <nil> (4) 1 147d 147d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (6) 1 147d 147d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST, va = ADDR, pa = ADDR (2) 1 239d 239d
uvm_fault: m_zero 1 241d 241d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (5) 1 155d 155d
panic: free: non-malloced addr ADDR type in_multi 4 245d 267d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (9) 3 157d 157d
uvm_fault: pfi_kif_update 6 248d 374d
uvm_fault: fifo_write 1 248d 248d
panic.go:LINE +0x72 (3) 1 159d 159d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (4) 2 161d 162d
panic: receive 1: so ADDR, so_type 3, sb_cc 176 1 250d 250d
panic: ffs_valloc: dup alloc 2 251d 254d
uvm_fault: 0ddb{1}> ddb{1}> set $lines = 0ddb{1}> set $maxwidth = 0ddb{1}> show panickernel page faultattempt to e 1 163d 163d
assert "!_kernel_lock_held()" failed in kern_fork.c 15 255d 516d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (8) 3 168d 168d
panic: WAaRcNqIuNirGi:n g SPbLl NoOcT kLaObWlEReE Ds lOeNe pSY SloCcAkL Lwi 2 t15h7 s79p3i4n4l5o0c kEX IorT 0c rai 1 168d 168d
uvm_fault 10 261d 276d
panic: free: size too small 24 <= 256 / 2 (ADDR) type in_multi 1 266d 266d
panic: bad arg kind: <nil> (3) 1 177d 177d
assert "cifp != NULL" failed in route.c 89 240d 295d
assert "rt->rt_ifa->ifa_ifp != NULL" failed in route.c 830 239d 280d
uvm_fault: in6_purgeaddr 1423 239d 280d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (7) 3 181d 181d
assert "ifp != NULL" failed in if_ether.c 208 241d 296d
assert "ifa == rt->rt_ifa" failed in nd6.c (2) 262 242d 279d
uvm_fault: tun_clone_destroy 1 272d 272d
panic: bad arg kind: <nil> (2) 1 189d 189d
panic: bad arg kind: <nil> 1 192d 192d
panic.go:LINE +0x72 (2) 1 194d 194d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (6) 3 196d 196d
uvm_fault: pmap_page_remove 7 288d 545d
openbsd build error (7) 1 200d 200d
multicore boot error: can't ssh into the instance (2) 96 216d 217d
openbsd boot error: can't ssh into the instance (2) 48 216d 217d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (3) 1 216d 216d
panic: vref used where vget required 1 306d 306d
panic: pfi_dynaddr_update 2 322d 403d
uvm_fault: pool_do_put 1 240d 240d
panic: runtime error: invalid memory address or nil pointer dereference (2) 1 242d 242d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST, va = ADDR, pa = ADDR 1 245d 245d
pool: free list modified: pdppl 1 245d 245d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (5) 3 245d 245d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (2) 1 245d 245d
panic.go:LINE +0x72 1 246d 246d
witness: reversal: inode fdlock C 523 313d 526d
panic: runtime error: invalid memory address or nil pointer dereference 1 250d 250d
panic: fifo_badop called C 8841 252d 587d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR 1 267d 267d
panic: ffs_blkfree: bad size 2 367d 371d
kernel: double fault trap, code=0 1 415d 415d
assert "la != NULL" failed in if_ether.c 3 400d 402d
uvm_fault: ml_purge 6 398d 404d
panic: in_cksum: out of data, len 63 1 384d 384d
uvm_fault: pfi_ifhead_RB_REMOVE 1 405d 405d
panic: uvm_fault_unwire_locked: address not in map (2) 7 395d 523d
panicConnection to ssh-serialport.googleapis.com closed by remote host. 1 254d 254d
uvm_fault: vfs_lookup 1 439d 439d
panic: Data modified on freelist: word 4 of object ADDR size 0x84 previous type free (ADDR != ADDR) 1 266d 266d
panic: Data modified on freelist: word 5 of object ADDR size 0xa0 previous type devbuf (0xd != ADDR) 1 266d 266d
panic: Data modified on freelist: word 5 of object ADDR size 0xc0 previous type devbuf (0xd != ADDR) 1 273d 273d
panic: Data modified on freelist: word 5 of object ADDR size 0x100 previous type devbuf (0xd != ADDR) syz 7 266d 296d
panic: attempt WtAoR eNIxNeGc:u tSeP uL seNOrT a LddOrWEesRsE D 0Ox0N iSYn SCsAuLpLe rv3i 4s orEX ImTo d0 e9 1 266d 266d
panic: bad arg kind 1 277d 277d
uvm_fault: ADDR: movl $ADDR,0(%rdi)ddb> ddb> set $lines = 0ddb> set $maxwidth = 0ddb> show panickernel page 1 281d 281d
uvm_fault: ADDR: jmp ADDR 1 283d 283d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (4) 9 290d 290d
uvm_fault: pmap_enter syz 3 531d 537d
panic: malloc: allocation tooWA RlNaIrNGge: ,SPL NOT LOWERED ON SYSCALL 3 4 EXIT 0 9 1 309d 309d
multicore test error: timed out 43 428d 465d
panic: amap_add: slot in use 2 518d 523d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (3) 12 347d 348d
panic: vput: v_writecount != 0 C 2 349d 349d
uvm_fault: _bpf_mtap 31 560d 582d
panic: pool_cache_item_magic_check: mcl2k cpu free list modified: item addr ADDR+24 ADDR!=ADDR 1 564d 564d
panic: rw_enter: vmmaplk locking against myself 3 574d 576d
uvm_fault: tun_dev_read 2 574d 576d
openbsd test error: timed out 19 433d 493d
panic: bpf_mcopy 1 578d 578d
multicore build error (4) 2 422d 422d
openbsd build error (6) 1 422d 422d
pool: double put: mcl2k 4 580d 582d
pool: double put: mcl64k 1 581d 581d
panic: missing alias 1 585d 585d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (2) 3 416d 416d
panic: bad dir C 1390 421d 422d
multicore build error (2) 10 447d 448d
openbsd build error (4) 5 447d 448d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 12 456d 457d
multicore build error 26 457d 458d
openbsd build error (3) 13 457d 458d
multicore boot error: can't ssh into the instance 6 457d 457d
openbsd boot error: can't ssh into the instance 3 457d 457d
panic: ffs_read: type 0 1 594d 594d
panic: serialport: VM disconnected. 1 465d 465d
panic: kserialport: VM disconnected. 1 466d 466d
panic: kernel diagnostic serialport: VM disconnected. 1 466d 466d
panic: kernel diserialport: VM disconnected. 1 545d 545d
openbsd build error 1 510d 510d
lost connection to test machine C 276 558d 632d
https://github.com/openbsd/src.git boot error: uvm_fault: memcmp 6 564d 564d
https://github.com/openbsd/src.git test error 16 572d 593d
multicore boot error: uvm_fault: smbios_find 12 564d 564d
kernel: kernel relinking fa 1 653d 632d
https://github.com/openbsd/src.git boot error 479 587d 632d
panic: sandbox escaping file name "../file0" 111 587d 588d
multicore test error (2) 3 573d 573d
multicore test error 3 573d 573d
panic: sandbox escaping file name "../file0/file0", Files are map[./file0:true ../file0:true] 1 587d 587d
panic: sandbox escaping file name "../file0", Files are map[../file0:true] 11 586d 587d
panic: sandbox escaping file name "../file0", Files are map[./file0:true ../file0:true] 1 587d 587d
panic: sandbox escaping file name "../file0/file0" 2 587d 587d