syzbot

 sign-in | mailing list | source | docs
🐞 Open [114]
🐞 Fixed [280]
🐞 Invalid [853]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

Out of 853 bugs, 581 were automatically obsoleted (9 due to revoked reproducers), 272 were invalidated by users.
Title Repro Cause bisect Fix bisect Count Last Reported
SYZFAIL: tun: can't open device (5) 82 53d 68d
openbsd build error (22) 7 113d 153d
assert "ps->ps_uvncount == NUM" failed in kern_unveil.c (4) C 12566 76d 431d
multicore test error: SYZFATAL: image testing failed w/o kernel bug 97 86d 93d
uvm_fault: unveil_add_vnode (2) 12 161d 243d
witness: lock_object uninitialized: ADDRxNUM 1 163d 163d
panic: thread NUM p_stat is NUM (2) 3 163d 228d
assert "d->bd_in_uiomove == NUM" failed in bpf.c (2) 1 165d 165d
protection_fault: mtx_enter 1 165d 165d
panic: semexit - semid not allocated 1 165d 165d
assert "rw_write_held(uobj->vmobjlock)" failed in uvm_vnode.c 11 167d 351d
uvm_fault: witness_checkorder (5) 7 167d 401d
uvm_fault: rtrequest (3) 2 167d 181d
assert "ps->ps_uvncount == NUM" failed: filepanic: kernel diagnostic assertion "((flags & PGO_LOCKED) != NUM && rw_lock_ 1 168d 168d
panic: Non dma-reachable buffer at curaddr ADDR(raw) (3) 4 170d 203d
panic: thread -ADDR p_stat is -NUM 2 174d 177d
witness: pmap_unwire: wiring for pmap ADDR va ADDR didn't change! 2 174d 175d
assert "rdomain == rtable_l2(rdomain)" failed in route.c 2 175d 208d
protection_fault: klist_invalidate 1 176d 176d
panic: kernel diagnostic assertion "va >= entry->start" failed: file "/syzkaller/managers/setuid/kernel/sys/uvm/uvm_faul 1 178d 178d
panic: kernel diagnostic assert 3 180d 197d
panic: kernel diagnostic assertion "ps->ps_uvncount == NUM" failed: file " 1 183d 183d
uvm_fault: spec_getattr 1 184d 184d
assert "kd_lookup(kd->kd_unit) == NULL" failed in kcov.c 2 184d 221d
panic: trap type NUM, code=NUM, pc=eaa29 1 185d 185d
panic: pledge_namei: ni_pledge 2 187d 229d
pool: free list modified: pdppl (4) 8 189d 367d
panic: kernel diagnostic assertion "nlevel >= IPL_NONE" failed: 1 190d 190d
panic: mutex 0xffffWAfRd8N0I7NeG:b7 8S8PL1 NUM noNtO T heLOlWd EiREnD m tOxN SY_SlCeaALL v7e5 NUM 1 191d 191d
assert "((flags & PGO_LOCKED) != NUM && rw_lock_held(uobj->vmobjlock)) || (flags & PGO_LOCKED) == NUM" failed in uvm_vno (4) 10 191d 413d
panic: softclock: invalid to_clock: -ADDR 22 191d 425d
witness: reversal: sbufsnd inode 4 191d 257d
SYZFAIL: tun: can't open device (4) 8 192d 293d
panic: kernel diagnostic assertion "map->limit == rtmap_limit" f 1 192d 192d
openbsd test error: kernel: protection fault trap, code=NUM 19 154d 155d
panic: softclock: invalid to_clock: ADDR (2) 4 195d 268d
kernel: protection fault trap, code=NUM (7) 6 196d 247d
uvm_fault: pmap_page_remove (5) 16 197d 508d
panic: softclock: invalid to_clock: NUM 14 200d 423d
malloc: free list modified: proc 1 200d 200d
SYZFAIL: tun_id out of range (3) 253765 161d 187d
witness: reversal: lock order data missing (4) 57671 161d 293d
SYZFAIL: failed to send rpc 8408 161d 294d
SYZFAIL: ioctl remote attach failed (5) 3214 161d 294d
SYZFAIL: failed to mkdtemp 25983 161d 289d
suppressed report 335741 161d 1529d
panic: assertwaitok: non-zero mutex count: NUM (2) 178 161d 282d
corrupted report (6) 2268 161d 1319d
SYZFAIL: failed to mkdir 3854 161d 289d
panic: malloc: allocation too large, type = NUM, size = ADDR (2) 126 161d 251d
SYZFAIL: too many calls in output 57 161d 294d
assert "map->limit == rtmap_limit" failed in rtable.c 77 161d 292d
uvm_fault: db_enter (5) 368 161d 597d
assert "uvm_page_owner_locked_p(pg)" failed in uvm_page.c 6746 161d 1220d
assert "va >= entry->start" failed in uvm_fault.c 50 161d 178d
assert "sc->sc_dev == NUM" failed in if_tun.c (5) 358 162d 432d
can't ssh into the instance 588 162d 343d
panic: trap type NUM, code=NUM, pc=ADDR (2) 511 162d 1209d
protection_fault: __x86_indirect_thunk_r11 (3) 9 203d 255d
assert "pg->wire_count == NUM" failed in vfs_biomem.c (3) 1384 163d 488d
SYZFAIL: failed to recv rpc (3) 536 163d 195d
SYZFAIL: SIGBUS 947 163d 265d
pool: free list modified: shmpl (5) 43 163d 255d
SYZFAIL: posix_spawn failed 131 164d 282d
uvm_fault: lf_advlock 1 204d 204d
uvm_fault: arp_rtrequest (2) 18 206d 379d
protection_fault: reaper 7 206d 260d
panic: missing alias (5) 42 167d 282d
panic: acquiring blockable sleep lock with spinlock or critical section held (rwlock) vmmaplk (3) 168 168d 554d
panic: kernel diagnostic assertion "uvm_page_owner_locked_p(pg)" failed 1 208d 208d
assert "pr->ps_threadcnt == NUM" failed in kern_exit.c 1 210d 210d
witness: lock_obwitness_checkordwitness_checkordrw_enter_write(ADDR)rw_enter_write+0unveil_delete_naunveil_delete_naunve 1 211d 211d
panic: trap type NUM, code=NUM, pc=NUM (3) 210 173d 686d
uvm_fault: uao_detach 2 213d 216d
assert "cifp != NULL" failed in route.c (3) 203 173d 440d
SYZFAIL: coverage filter is full (2) 3488 175d 175d
uvm_fault: proc_trampoline 6 216d 388d
panic: ffs_blkfree: freeing free frag 1 217d 217d
panic: pfi_attach_ifnet: pfi_kif_get failed 1 220d 220d
panic: free: size too small NUM <= NUM / NUM (ADDR) type shm 2 221d 271d
uvm_fault: x86_ipi_db (8) 330 182d 1166d
panic: pool_do_get: shmpl free list modified: page ADDR; item addr ADDR; offset 0x0=0x0 != ADDR 1 222d 222d
protection_fault: in6_addmulti (3) 1 224d 224d
witness: lock_object uninitializwitness_checkorder(ADDRwitness_checkordrw_enter_write(frw_enter_write+0unveil_delete_nau 1 226d 226d
uvm_fault: ufsdirhash_findfree 1 227d 227d
uvm_fault: ufs_direnter (3) 3 227d 229d
SYZFAIL: repeatedly failed to execute the program 8 228d 291d
panic: ffs2_balloc: unwind failed 1 228d 228d
uvm_fault: ffs_blkfree 6 228d 229d
uvm_fault: ffs_freefile 2 228d 229d
uvm_fault: ffs_alloccg 1 228d 228d
uvm_fault: ffs_nodealloccg (2) 2 228d 229d
uvm_fault: ffs_fragextend 2 229d 229d
panic: kernel diagnostic assertion "ps->ps_uvncount == NUM" faile 96 189d 193d
panic: kernel diagnostic assertion "pg->wire_count == NUM" failed 20 189d 193d
panic: mutex ADDR not held in mtx_leave 1190 191d 191d
uvm_fault: savectx (2) 33 191d 278d
protection_fault: icmp_mtudisc_timeout (2) 1 231d 231d
panic: trap type NUM, code=NUM, pc=e94f9 4 232d 232d
protection_fault: witness_checkorder (4) 1 233d 233d
assert "uvm_page_owner_locked_p(pg)" failed in managers/multicore/kernel/sys/uvm/uvm_page.c 1 233d 233d
SYZFAIL: SIGSEGV 10 234d 293d
panic: ifa_update_broadaddr does not support dynamic length (3) 37 210d 380d
panic: malloc: out of space in kmem_map (3) 1 235d 235d
panic: ffs_freefile: freeing free inode (2) 1 236d 236d
panic: vop_generic_badop (2) 91 238d 969d
uvm_fault: softclock (5) 1 240d 240d
uvm_fault: db_read_bytes 94 201d 435d
panic: trap type NUM, code=NUM, pc=e9779 133 202d 231d
panic: trap type NUM, code=NUM, pc=e9439 1 243d 243d
panic: inconsistent bufpage counts 3 247d 349d
assert "pmap->pm_type != PMAP_TYPE_EPT" failed in pmap.c (3) 8 248d 375d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte 0x3efff 11 248d 380d
assert "!ISSET(rt->rt_flags, RTF_LOCAL)" failed in nd6.c (3) 4 249d 376d
panic: vrele: ref cnt 4 251d 374d
uvm_fault: pool_gc_pages (2) 9 251d 440d
pool: free list modified: pmappl 3 252d 338d
protection_fault: done_flush (3) 5 252d 266d
uvm_fault: vm_terminate 4 253d 291d
openbsd build error (21) 114 215d 342d
protection_fault: nd6_timer 8 255d 344d
panic: ffs_blkfree: bad size (4) 5 257d 355d
panic: ffs_valloc: dup alloc (2) 47 217d 248d
panic: trap type NUM, code=NUM, pc=e8fb9 3 257d 258d
assert "start >= vm_map_min(map) && end <= vm_map_max(map)" failed in uvm_fault.c 1 260d 260d
panic: vpaopni_cg:en keerrinecl_b daidaogpn 1 260d 260d
uvm_fault: checkalias 8 260d 386d
pool: cpu free list modified: mbufpl (4) 5 260d 379d
panic: vref used where vget required (4) 9 261d 385d
uvm_fault: km_free (2) 10 262d 510d
protection_fault: pool_do_put (2) syz 36 263d 959d
pool: free list modified: inpcb (3) 1 264d 264d
witness: reversal: sbufrcv inode 2 265d 265d
protection_fault: fill_file (4) 1 266d 266d
panic: vwakeup: neg numoutput 2 266d 346d
uvm_fault: ffs2_balloc (4) 17 227d 238d
panic: pmap_remove_ptes: managed page without PG_PVLIST: va ADDR, opte ADDR (2) 1 267d 267d
panic: trap type NUM, code=NUM, pc=e8f59 1 268d 268d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (24) 3 181d 181d
panic: pmap_remove_pte: unmanaged page marked PG_PVLIST: va ADDR, opte ADDR 1 272d 272d
panic: trap type NUM, code=NUM, pc=e9509 36 233d 239d
openbsd test error: lost connection to test machine (3) 1 273d 273d
uvm_fault: rw_enter (3) 2 274d 351d
uvm_fault: dopselect 1 274d 274d
panic: trap type NUM, code=NUM, pc=e88b9 4 274d 278d
panic: pr_find_pagehead: pdppl: incorrect page (2) 1 275d 275d
panic: kernel diagnostic assertion "dupe == NULL" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uvm_page.c" 2 278d 308d
panic: curcpu->ci_proc_pmap didn't point to previous pmap 1 278d 278d
panic: vput: ref cnt (2) 1 279d 279d
panic: trap type NUM, code=NUM, pc=e7069 2 280d 280d
SYZFAIL: ShmemBuilder: too large output offset 1 280d 280d
assert "dupe == NULL" failed in uvm_page.c (4) 209 241d 537d
assert "kq->kq_nknotes == NUM" failed in kern_event.c 1 282d 282d
openbsd test error: SYZFAIL: failed to recv rpc 81 243d 294d
openbsd test error: no output from test machine 89 243d 295d
panic: pmap_unwire: wiring for pmap ADDR va ADDR didn't change! 1 284d 284d
panic: uvm_faulWtARN_IuNGn:w irSeP_Ll oNckOT ed:L OaWdEREdreD OsNs SnYoSCt AiLnL map7 1 284d 284d
SYZFAIL: coverage filter is full 383316 245d 292d
SYZFAIL: failed to recv rpc (2) 14 195d 195d
multicore test error: SYZFAIL: failed to recv rpc 29 245d 295d
panic: trap type NUM, code=NUM, pc=e9429 27 246d 256d
multicore test error: no output from test machine (3) 31 247d 295d
panic: pool_do_get: rtentry: page empty 1 288d 288d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte ADDR (4) 65 249d 423d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte 0x3edff 1 290d 290d
uvm_fault: VOP_LOCK (2) 5 290d 379d
assert "kn->kn_kq == kq" failed in kern_event.c 1 290d 290d
panic: vput: null vp 1 291d 291d
uvm_fault: pool_do_get (3) 2 292d 380d
witness: denied attempt to set clock forward to ADDR 1 292d 292d
assert "ISSET(bp->b_flags, B_BC)" failed in vfs_bio.c 8 293d 457d
panic: trap type NUM, code=NUM, pc=e6d89 1 293d 293d
panic: trap type NUM, code=NUM, pc=e6d59 1 294d 294d
multicore test error: SYZFAIL: setsid failed 8 295d 295d
panic: vclean: deadlock 324 290d 292d
assert "vp->v_usecount == NUM" failed in vfs_subr.c 23 290d 292d
panic: inconsistent poll.fdMutex 4 335d 363d
panic: trap type NUM, code=NUM, pc=3ca09 6 337d 337d
panic: pool_do_get: pfstate: page empty 1 337d 337d
uvm_fault: unveil_add_vnode 3 338d 437d
witness: reversal: amaplk vmmaplk 1 338d 338d
panic: ffs_update: bad link cnt (2) 26 338d 590d
assert "bp->b_data != NULL" failed in vfs_biomem.c (5) 6 339d 386d
uvm_fault: vio_rxeof (2) 1 341d 341d
panic: kernel diagnosticpm aap_susnewirrtei:o nw "irindugp ef o==r N pUmaLp L0xf" ffafiflfedd:NUM 0fil7e9 d"/s6yez4eka8l 1 343d 343d
panic: runtime error: invalid memory address or nil pointer dereference (9) 6 343d 406d
pool: free list modified: fdescpl (4) 14 344d 604d
uvm_fault: ufs_symlink 1 344d 344d
panic: runtime error: slice bounds out of range [:NUM] with capacity NUM 1 345d 345d
panic:p a nic : kernel diagnostic assertion "((flags & PGO_LOCKED) != NUM && rw_lock_held(uobj->vmobjlock)) || (flags & 1 345d 345d
panic: wd changed: "\x00\x00\x00\x00\x00" -> "/root" 1 345d 345d
protection_fault: __x86_indirect_thunk_r11 (2) 15 337d 420d
panic: pool_do_get: vnodes: page empty 1 346d 346d
panic: runtime error: invalid memory address or nil pointer dereference [recovered] 2 347d 349d
go runtime error 78 308d 487d
assert "__mp_lock_held(&sched_lock, curcpu()) == NUM" failed in kern_lock.c (5) 32 308d 384d
panic: trap type NUM, code=NUM, pc=3ca59 10 308d 337d
protection_fault: sosend 1 349d 349d
panic: m_copydata: short mbuf chain 1 350d 350d
pool: free list modified: sockpl (3) 41 353d 954d
panic: runtime error: index out of range [ADDR] with length NUM 16 344d 433d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte 0x2401 1 353d 353d
panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock (8) C 175 348d 362d
panic: runtime error: index out of range [NUM] with length NUM 1 354d 354d
kernel: protection fault trap, code=NUM (6) 42 355d 901d
uvm_fault: ufs_rmdir 1 355d 355d
assert "obj == NULL || UVM_OBJ_IS_DUMMY(obj) || rw_write_held(obj->vmobjlock)" failed in uvm_page.c 1 355d 355d
pool: free list modified: mbufpl (4) 1 362d 362d
panic: reflect: call of reflect.Value.Uint on string Value [recovered] 1 362d 362d
uvm_fault: ffs2_balloc (3) 5 363d 466d
panic: reflect: call of reflect.Value.Int on string Value [recovered] 1 365d 365d
panic: pool_do_get: rwobjpl: page empty 2 366d 387d
panic: Read from remote host us-central1-ssh-serialport.googleapis.com: Connection reset by peer 1 280d 280d
uvm_fault (3) 1 373d 373d
panic: uvm_fault_WuAnRwNiIrNe_lGoc: SPLke d: NaOTddr essL OnWoEtRED iOnN mSapY 1 373d 373d
panic: pool_do_get: sigapl: page empty 1 374d 374d
panic: ffs_fsync: not dirty 3 374d 384d
panic: pool_do_get: pkpcb: page empty 1 374d 374d
panic: vop (2) 1 375d 375d
panic: softclock: invalid to_clock: ADDR 58 336d 427d
assert "(pg->pg_flags & PG_BUSY) == NUM" failed in pmap.c 28 336d 377d
panic: vputonfreelist: lock count is not zero (3) 3 377d 436d
protection_fault: solock_shared 2 377d 380d
panic: trap type NUM, code=NUM, pc=3ca79 21 338d 349d
panic: pool_do_get: filepl: page empty 1 378d 378d
assert "mo->ro_magic == RWLOCK_OBJ_MAGIC" failed in kern_rwlock.c 1 379d 379d
panic: trap type NUM, code=NUM, pc=3c709 1 379d 379d
panic: broken type ref (4) 3 380d 381d
multicore test error: SYZFATAL: failed to connect to host: dial tcp IP:NUM: connect: connection refused 55 341d 343d
openbsd test error: SYZFATAL: failed to connect to host: dial tcp IP:NUM: connect: connection refused 27 341d 343d
panic: trap type NUM, code=NUM, pc=3c7a9 2 381d 386d
panic: time: Stop called on uninitialized Timer 2 382d 386d
panic: thread NUM p_stat is NUM 1 382d 382d
SYZFAIL: setsid failed 6562 305d 308d
SYZFAIL: proc resp pipe read failed 2266 293d 294d
protection_fault: ifaof_ifpforaddr 2 384d 384d
panic: vop_generConnection to us-central1-ssh-serialport.googleapis.com closed by remote host. 1 384d 384d
syzkaller: make target failed: failed to run ["gmake" "target"]: exit status 2 (4) 6 308d 309d
multicore build error (18) 217 296d 309d
panic: ffs_freefile: freeing free inode 1 385d 385d
panic: pmap_enter: PG_PVLIST mapping with unmanaged page: va ADDR, opte ADDR, pa ADDR (2) 1 386d 386d
protection_fault: strlcpy 1 386d 386d
uvm_fault: kcov_remote_enter (2) 2 386d 398d
protection_fault: done_flush (2) C 55 349d 536d
pool: free list modified: tcpcb 1 389d 389d
multicore boot error: can't ssh into the instance (6) 3 390d 390d
uvm_fault: softclock (4) 9 390d 420d
protection_fault: icmp_mtudisc_timeout 3 393d 446d
panic: trap type NUM, code=NUM, pc=3c6d9 26 353d 362d
panic: Non dma-reachable buffer at curaddr ADDR(raw) (2) 3 398d 526d
syzkaller: make target failed: failed to run ["gmake" "target"]: exit status 2 (3) 6 309d 309d
panic: vop_gserialport: Connection terminated to allow system upgrade. Please reconnect at your convenience. (2) 1 309d 309d
panic: (4) 1 401d 401d
uvm_fault: bpfioctl (4) 1 402d 402d
assert "fp->f_count >= NUM" failed in kern_descrip.c 1 402d 402d
panic: trap type NUM, code=NUM, pc=3c729 39 363d 375d
uvm_fault: ufs_direnter (2) 1 404d 404d
panic: wakeup: p_stat is NUM (4) 1 408d 408d
uvm_fault: VOP_BWRITE 1 409d 409d
uvm_fault: pf_purge_expired_states 2 410d 488d
panic: bad arg kind: <nil> (13) 1 412d 412d
uvm_fault: rt_timer_timer 3 413d 425d
uvm_fault: strcmp 1 419d 419d
assert "scan->kqs_start.kn_filter == EVFILT_MARKER" failed in kern_event.c 1 419d 419d
protection_fault: witness_checkorder (3) 1 422d 422d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (23) 168 383d 481d
panic: pool_do_get: pfstkey: page empty 1 425d 425d
panic: missing alias (4) 1 427d 427d
protection_fault: softclock 2 433d 477d
multicore test error: SYZFATAL: BUG: failed to run executor version: failed to run ["./syz-executor" "version"]: signal: bad system call (core 249 394d 398d
uvm_fault: softclock_process_kclock_timeout (2) 4 436d 554d
panic: vop_generic_Connection to us-central1-ssh-serialport.googleapis.com closed by remote host. 1 348d 348d
assert "(bp->b_flags & B_BUSY) == NUM" failed in vfs_biomem.c 1 443d 443d
panic: vop_gserialport: Connection terminated to allow system upgrade. Please reconnect at your convenience. 1 355d 355d
pool: free list modified: pipepl 1 446d 446d
assert "sin6tosa(&ro->ro_dst)->sa_family == AF_INET6" failed in 1 453d 453d
panic: vop_geneserialport: Connection terminated to allow system upgrade. Please reconnect at your convenience. 1 369d 369d
multicore build error (17) 10 460d 586d
panic: Connection to us-central1-ssh-serialport.googleapis.com closed by remote host. 1 375d 375d
panic: vopConnection to us-central1-ssh-serialport.googleapis.com closed by remote host. 1 377d 377d
panic: ffs_blkfree: bad size (3) 1 473d 473d
openbsd build error (20) 1 387d 387d
panic: rw_enter: solock locking against myself (2) syz 3 478d 675d
uvm_fault: rw_enter (2) 3 478d 553d
openbsd boot error: can't ssh into the instance (7) 6 390d 390d
multicore test error: SYZFATAL: BUG: failed to run executor version: failed to run ["./syz-executor" "version"]: signal: abort trap (core dump 210 390d 394d
openbsd test error: SYZFATAL: BUG: failed to run executor version: failed to run ["./syz-executor" "version"]: signal: abort trap (core dump 105 390d 394d
openbsd test error: SYZFATAL: BUG: failed to run executor version: failed to run ["./syz-executor" "version"]: signal: bad system call (core 126 394d 398d
assert "bp->b_data != NULL" failed in vfs_biomem.c (4) 2 483d 485d
multicore boot error: can't ssh into the instance (5) 24 449d 449d
openbsd boot error: can't ssh into the instance (6) 12 449d 449d
panic: vop_generic_ 2 490d 491d
uvm_fault: fifo_read 2 505d 519d
assert "pmap->pm_type != PMAP_TYPE_EPT" failed in pmap.c (2) 1 507d 507d
assert "rw_write_held(&map->lock)" failed in uvm_map.c 1 509d 509d
panic: wakeup: p_stat is NUM (3) 2 518d 603d
panic: vop_ 1 434d 434d
uvm_fault: witness_checkorder (4) 1 524d 524d
assert "ps->ps_uvncount == NUM" failed in kern_unveil.c (3) 134 488d 704d
uvm_fault: pool_do_put (3) 1 529d 529d
uvm_fault: VOP_LOCK 1 531d 531d
pool: free list modified: shmpl (4) 1 533d 533d
panic: vConnection to ssh-serialport.googleapis.com closed by remote host. 1 535d 535d
assert "((flags & PGO_LOCKED) != NUM && rw_lock_held(uobj->vmobjlock)) || (flags & PGO_LOCKED) == NUM" failed in uvm_vno (3) 4 538d 639d
panic: runtime.errorString("integer divide by zero") 1 540d 540d
panic: (3) 1 454d 454d
assert "ifp != NULL" failed in if_ether.c (5) 181 506d 901d
protection_fault: __x86_indirect_thunk_r11 1 548d 548d
pool: cpu free list modified: mbufpl (3) 1 554d 554d
pool: free list modified: mbufpl (3) 1 558d 558d
assert "sc->sc_dev == NUM" failed in if_tun.c (4) 1 569d 569d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (22) 15 572d 747d
panic: (2) 1 486d 486d
panic: ffs_blkfree: bad size (2) 1 579d 579d
protection_fault: witness_checkorder (2) C 311 539d 655d
panic: uvm_fault_unwire_locked: addrepasnsi cno:t i n k er n e l dmaipagnostic assertion "!_kernel_lock_held()" fa 1 580d 580d
kqueue: knote !ACTIVE (2) 2 581d 594d
protection_fault: lf_advlock (3) 6 588d 827d
assert "pg->wire_count == NUM" failed in vfs_biomem.c (2) 2 594d 624d
panic: thread ADDR not in SRUN: NUM 4 596d 649d
panic: db_mtx_enter: mtx ADDR: locking against myself 1 598d 598d
assert "__mp_lock_held(&sched_lock, curcpu()) == NUM" failed in sched_bsd.c 2 599d 599d
panic: voserialport: Connection terminated to allow system upgrade. Please reconnect at your convenience. 1 602d 602d
assert "self->ci_proc_pmap == p->p_vmspace->vm_map.pmap" failed in pmap.c syz 2 603d 603d
assert "ps->ps_uvncount == NUM" failed in kernWARNING: SPL NOT LOWERED ON SYSCALL NUM NUM EXIT NUM aStopped at save 1 614d 614d
assert "ps->ps_uvncount == NUM" failed in multicore/kernel/sys/kern/kern_unveil.c 1 614d 614d
uvm_fault: softclock (3) 1 615d 615d
openbsd build error (19) 18 627d 903d
assert "__mp_lock_held(&sched_lock, curcpu()) == NUM" failed in kern_lock.c (3) 4 632d 651d
uvm_fault: witness_checkorder (3) C 212 596d 849d
protection_fault: remrunqueue 2 637d 644d
assert "!ISSET(p->p_flag, P_WSLEEP) || p->p_stat == SSTOP" failed in kern_sched.c syz 81 634d 658d
assert "to->to_kclock == KCLOCK_UPTIME" failed in kern_timeout.c (2) 1 638d 638d
assert "dtlookup(unit) == NULL" failed in dt_dev.c (2) 1 639d 639d
panic:Connection to ssh-serialport.googleapis.com closed by remote host. 1 656d 656d
panic: uvm_fault_unwire_locked: WARaNdIdNGre:s sS PnotL iNn OmT aLpO 1 567d 567d
panic: vop_gepneanic: kernel diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/multicore/ker 1 658d 658d
uvm_fault: bpfioctl (3) 1 663d 663d
assert "cifp != NULL" failed in route.c (2) 18 664d 893d
assert "sc->sc_dev == NUM" failed in if_tun.c (3) 68 669d 1158d
panic: ffs_update: bad link cnt 18 684d 1186d
panic: vop_genConnection to ssh-serialport.googleapis.com closed by remote host. 1 685d 685d
panic: voConnection to ssh-serialport.googleapis.com closed by remote host. 1 692d 692d
uvm_fault: db_enter (4) 30 699d 1041d
uvm_fault: igmp_leavegroup (4) 271 660d 1127d
panic: vopp_ganenier:ic_ a 1 720d 720d
kernel: page fault trap, code=NUM (2) 1 726d 726d
uvm_fault: softclock_process_kclock_timeout 4 728d 812d
multicore test error: no output from test machine (2) 1 731d 731d
protection_fault: in6_addmulti (2) 4 734d 798d
pool: free list modified: fdescpl (3) 10 735d 1027d
multicore build error (16) 252 735d 963d
panic: vop_Connection to ssh-serialport.googleapis.com closed by remote host. 1 737d 737d
uvm_fault: NUM TID PID UID PRFLAGS PFLAGS CPU COMMANDNUM(NUM,NUM,NUM,NUM,49b,ADDR) at NUMtimeout_ru 1 737d 737d
assert "rw_write_held(uobj->vmobjlock)" failed in uvm_aobj.c 1 740d 740d
panic: vo (2) 1 653d 653d
assert "pg->wire_count == NUM" failed in vfs_biomem.c 10 747d 1083d
protection_fault: fill_file (2) 2 749d 761d
panic: wakeup: p_stat is NUM (2) 4 750d 806d
panic: Non dma-reachable buffer at curaddr ADDR(raw) 1 757d 757d
uvm_fault: NUM TID PID UID PRFLAGS PFLAGS CPU COMMANDNUM(NUM,NUM,NUM,NUM,59d,ADDR) at NUMtimeout_ru 1 758d 758d
protection_fault: __llvm_retpoline_r11 (2) 1 759d 759d
openbsd test error: SYZFATAL: BUG: got no coverage: 2405 733d 808d
multicore test error: SYZFATAL: BUG: got no coverage: 4785 733d 808d
uvm_fault: kcov_remote_enter 3 764d 882d
uvm_fault: ffs2_balloc (2) 3 771d 841d
panic: missing alias (3) 1 773d 773d
assert "to->to_kclock == KCLOCK_UPTIME" failed in kern_timeout.c 1 779d 779d
uvm_fault: softclock (2) 2 783d 796d
openbsd boot error: can't ssh into the instance (5) 1 784d 784d
uvm_fault: NUM TID PID UID PRFLAGS PFLAGS CPU COMMAND*ADDR NUM NUM NUM ADDR NUM 1 794d 794d
panic: voWARNpI_NgGe:n SePLr iNc_ObT adLOoWpE 1 713d 713d
uvm_fault: NUM TID PID UID PRFLAGS PFLAGS CPU COMMANDNUM(NUM,NUM,NUM,NUM,58b,ADDR) at NUMtimeout_ru 1 805d 805d
panic: vpoapn_giecn: ekrice_brnadelop 1 716d 716d
uvm_fault: NUM TID PID UID PRFLAGS PFLAGS CPU COMMAND*ADDR NUM NUM 0x2 ADDR 0K syz 1 810d 810d
syzkaller: make target failed: failed to run ["gmake" "target"]: exit status 2 (2) 12 733d 733d
assert "((flags & PGO_LOCKED) != NUM && rw_lock_held(uobj->vmobjlock)) || (flags & PGO_LOCKED) == NUM" failed in uvm_vno (2) 1 839d 839d
panic: vputonfreelist: lock count is not zero (2) 1 847d 847d
panic: malloc: out of space in kmem_map (2) 1 850d 850d
protection_fault: done_flush 81 859d 1216d
assert "dupe == NULL" failed in uvm_page.c (3) 25 862d 1232d
assert "ps->ps_uvncount == NUM" failed in kern_unveil.c (2) 5 866d 1077d
assert "ifa == rt->rt_ifa" failed in nd6.c (4) 1 867d 867d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 (4) 63 866d 915d
panic: pr_find_pagehead: pdppl: incorrect page 1 881d 881d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 (4) 9 887d 887d
assert "d->bd_in_uiomove == NUM" failed in bpf.c 1 887d 887d
uvm_fault: savectx 1 887d 887d
openbsd boot error: can't ssh into the instance (4) 28 888d 928d
assert "!_kernel_lock_held()" failed in uvm_map.c 6 890d 1051d
assert "__mp_lock_held(&sched_lock, curcpu()) == NUM" failed in kern_lock.c (2) 1 891d 891d
pool: free list modified: inpcb (2) 2 893d 946d
panic: vo 1 804d 804d
uvm_fault: uvm_map_teardown 1 898d 898d
panic: ufsdirhash_lookup: bad offset in hash array (2) 1 898d 898d
panic: acquiring blockable sleep lock with spinlock or critical section held (rwlock) vmmaplk (2) 1 899d 899d
multicore test error: no output from test machine 1 901d 901d
malloc: free list modified: counters 9 903d 1162d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte ADDR (3) 3 906d 931d
protection_fault: fill_file 2 917d 944d
uvm_fault: hardclock (4) 1 918d 918d
multicore boot error: can't ssh into the instance (4) 51 888d 889d
pool: free list modified: pdppl (3) 1 921d 921d
uvm_fault: pool_gc_pages 4 923d 1111d
witness: lock_object uninitialized: ADDR (2) 1 924d 924d
uvm_fault: softclock 1 924d 924d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (21) 12 925d 936d
protection_fault: __llvm_retpoline_r11 1 925d 925d
uvm_fault: pool_do_get (2) 2 927d 950d
uvm_fault: rw_enter 1 930d 930d
panic: amap_pp_adjref: negative reference count (2) 1 931d 931d
assert "((flags & PGO_LOCKED) != NUM && rw_lock_held(uobj->vmobjlock)) || (flags & PGO_LOCKED) == NUM" failed in uvm_vno 1 933d 933d
uvm_fault: ufs_direnter 1 944d 944d
assert "bp->b_data != NULL" failed in vfs_biomem.c (3) 2 944d 960d
uvm_fault: bpfioctl (2) 2 945d 946d
panic: rw_enter: solock locking against myself 5 945d 1033d
multicore test error: SYZFATAL: BUG: program execution failed: executor NUM: EOF (2) 78 919d 919d
openbsd test error: SYZFATAL: BUG: program execution failed: executor NUM: EOF 94 919d 923d
uvm_fault: __kernel_phys_end 1 949d 949d
panic: trap type NUM, code=NUM, pc=NUM (2) 1 960d 960d
protection_fault: in6_addmulti 1 960d 960d
panic: wakeup: p_stat is NUM 2 962d 983d
protection_fault: witness_checkorder 1 975d 975d
uvm_fault: NUM TID PID UID PRFLAGS PFLAGS CPU COMMAND*ADDR NUM NUM NUM ADDR 0K s 1 991d 991d
malloc: free list modified: free (3) 1 998d 998d
multicore test error: SYZFATAL: BUG: program execution failed: executor NUM: EOF 108 920d 921d
uvm_fault: km_free 6 1022d 1211d
panic:client_loop: send disconnect: Broken pipe 4 1026d 1165d
panic: vopclient_loop: send disconnect: Broken pipe (3) 3 1029d 1075d
panic: vopConnection to ssh-serialport.googleapis.com closed by remote host. 1 949d 949d
pool: free list modified: inpcb 2 1038d 1064d
pool: cpu free list modified: mbufpl (2) 1 1040d 1040d
protection_fault: lf_advlock (2) 4 1045d 1093d
pool: free list modified: art_heap4 (3) 1 1052d 1052d
uvm_fault: solock 1 1053d 1053d
panic: trap type NUM, code=NUM, pc=NUM 1 1057d 1057d
uvm_fault: hardclock (3) 1 1060d 1060d
assert "pmap->pm_type != PMAP_TYPE_EPT" failed in pmap.c 1 1064d 1064d
panic: tcpp_nucp t 1 975d 975d
pool: free list modified: bufpl 1 1065d 1065d
panic: vop_gene 1 975d 975d
panic: vop_generic_bclient_loop: send disconnect: Broken pipe 1 976d 976d
panic: vop_generic_bapdoapn 1 985d 985d
kernel: page fault trap, code=NUM syz 1 983d 983d
panic: vop_client_loop: send disconnect: Broken pipe (2) 1 992d 992d
panic: vop_gpeanneicri:c _kbeardonpe 1 993d 993d
panic: vop_geneclient_loop: send disconnect: Broken pipe 1 988d 988d
panic: voclient_loop: send disconnect: Broken pipe 1 1074d 1074d
protection_fault: tun_enqueue 1 1074d 1074d
assert "bp->b_data != NULL" failed in vfs_biomem.c (2) 2 1075d 1127d
witness: lock_object uninitialized: ADDR 71 1080d 1220d
panic: ufsdirhash_lookup: bad offset in hash array 1 1080d 1080d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte ADDR (2) 1 1082d 1082d
panic: vop_client_loop: send disconnect: Broken pipe 1 996d 996d
panic: vop_generic_bpaadonipc 1 1001d 1001d
pool: free list modified: sockpl (2) 3 1092d 1148d
malloc: free list modified: free (2) 1 1098d 1098d
SYZFAIL: ioctl remote attach failed (4) 68 1101d 1215d
uvm_fault: pmap_page_remove (4) 1 1105d 1105d
protection_fault: pool_do_put 1 1118d 1118d
panic: vpopa_ngiecn:kerericn_elba diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/setuid/k 1 1037d 1037d
panic: vpoanp_igc:en e r i c _ b ad op 1 1038d 1038d
panic: pmap_enter: PG_PVLIST mapping with unmanaged page: va ADDR, opte ADDR, pa ADDR 2 1129d 1205d
panic: pool_do_get: pfiaddrpl: page empty 1 1129d 1129d
panic: vop_generclient_loop: send disconnect: Broken pipe 1 1043d 1043d
uvm_fault: putc 2 1134d 1137d
uvm_fault: pf_anchor_global_RB_INSERT_COLOR 1 1135d 1135d
panic: vop_pganeince:ri kce_rbandelo p 1 1054d 1054d
panic: vop_genericp_anbaidc:o p 1 1053d 1053d
panic: vop_generic_baclient_loop: send disconnect: Broken pipe 1 1052d 1052d
panic: runtime error: invalid memory address or nil pointer dereference (8) 1 1054d 1054d
uvm_fault: ffs2_balloc 1 1140d 1140d
assert "ifa == rt->rt_ifa" failed in nd6.c (3) 2 1142d 1168d
uvm_fault: VOP_ISLOCKED (2) 1 1143d 1143d
panic: vpoapn_igc:e kernel diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/setuid/kernel/s 1 1055d 1055d
panic: vclient_loop: send disconnect: Broken pipe (2) 1 1054d 1054d
uvm_fault: db_enter (3) 1 1054d 1054d
uvm_fault: pool_do_get 1 1150d 1150d
panic: vclient_loop: send disconnect: Broken pipe 1 1061d 1061d
uvm_fault: ktrops 1 1151d 1151d
panic: vop_genericp_baandiocp: 1 1111d 1111d
panic: vop_geneprianci_c: kernel diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/multicore 1 1074d 1074d
panic: broken type ref (3) 1 1065d 1065d
panic: vop_generic_badpoapn 1 1064d 1064d
panic: vop_genepranici_c:bakdeorpn 1 1066d 1066d
uvm_fault: memcpy (4) 2 1154d 1222d
multicore test error: SYZFATAL: BUG: program execution failed: bad reply magic ADDR 1 1072d 1072d
openbsd test error: SYZFATAL: BUG: program execution failed: bad reply magic ADDR 3 1072d 1072d
assert "la != NULL" failed in if_ether.c (2) 1 1161d 1161d
protection_fault: sys_msgrcv 1 1166d 1166d
panic: vop_geneprainci_cb:a kdeoprn 1 1167d 1167d
panic:p a nic: kernel diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/setuid/kernel/sys/ke 1 1079d 1079d
openbsd build error (18) 1 1079d 1079d
uvm_fault: db_enter (2) 1 1085d 1085d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte ADDR 3 1176d 1226d
panic: vpoapn_igc:en keerricn_elba d o dpi 1 1176d 1176d
kernel: privileged instruction fault trap, code=NUM 1 1178d 1178d
uvm_fault: hardclock (2) 1 1180d 1180d
panic: vop_generic_bad 1 1092d 1092d
panic: vop_genclient_loop: send disconnect: Broken pipe (2) 1 1097d 1097d
kernel: protection fault trap, code=NUM (4) 1 1098d 1098d
panic: vop_genclient_loop: send disconnect: Broken pipe 1 1099d 1099d
panic: vop_generic_client_loop: send disconnect: Broken pipe 1 1100d 1100d
uvm_fault: ffs_nodealloccg 1 1192d 1192d
assert "dtlookup(unit) == NULL" failed in dt_dev.c 1 1193d 1193d
panic: vop_generic_pbaandiopc 1 1103d 1103d
pool: free list modified: fdescpl 1 1195d 1195d
assert "ifp != NULL" failed in if_ether.c (4) 2 1195d 1240d
panic: vopclient_loop: send disconnect: Broken pipe (2) 1 1107d 1107d
assert "ps->ps_uvncount == NUM" failed in kern_unveil.c 2 1207d 1220d
panic: pmap_remove_ptes: managed page without PG_PVLIST: va ADDR, opte ADDR 1 1216d 1216d
assert "bp->b_data != NULL" failed in vfs_biomem.c 1 1218d 1218d
panic: runtime error: invalid memory address or nil pointer dereference (7) 1 1219d 1219d
panic: missing alias (2) 2 1219d 1220d
panic: vref used where vget required (3) 1 1219d 1219d
panic: client_loop: send disconnect: Broken pipe (2) 1 1130d 1130d
panic: vop_generic_WbAaRdNopI 1 1134d 1134d
panic: apcaqniuci:r kinegr nbleol c kdaiblage snloesteipc laosscke r t io n " ! _ ke r n e l_ l o wcikt_hh s 1 1134d 1134d
panic: acqupirainincg: b lo c kkaerblneel s l e ep l o c k d i a gwintohs tsipc i nl oc k o r c r it i c a l 1 1134d 1134d
panic: vop_gclient_loop: send disconnect: Broken pipe 1 1134d 1134d
panic: acquipraniincg: k e brnleolck daibaleg nsolseteip lc oacsks weirttiho n s "pi!nl_okecrkn oelr_ l corcik_thiec 1 1135d 1135d
panic: acpquainriic:n g bl o ck a b le s l e e p l o c k w i t h s p in l o c k o r c ri t i ca l s 1 1135d 1135d
panic: acquiring blpocankaicb:l e s l e keerp lnoecl k w i t h s p i nl oc k o r cr i t ic a l s e c ti o n 1 1135d 1135d
panic: apcaqnuiic:ri nkg ebrloncekla b l e sl ee p l o c k w i t h s p i n l oc k o r cr i ti c a l 1 1135d 1135d
panic: acquiring blockable sleep lock with spinlock or criticapl saneictci:o nk ehrenled (lk deriangenlo_lsotickc) 1 1135d 1135d
panic: acquiring blocpkaanbilec: k er snleele p lo c k w i th s p i nl o c k or c r i ti ca l s ec t 1 1135d 1135d
kernel: protection fault trap, code=NUM (3) 1 1135d 1135d
panic: acquirpinagni c :b l koecrknaebll ed silageneop slotickc a ss e r t i o n " ! _ k e r n el _ l o ckwi_t 1 1135d 1135d
panic: acquiring bplaoncikca:b l e sl e e p l okcek rwnielt h s p i n dloicak gonro scrtiitci c a l s e cati 1 1135d 1135d
panic: acquiring blockabplaen i sc:le e p l kocek rn e l d ia g no s t i wci t ha s s e r t i o n "s!_pkienlro 1 1135d 1135d
panic: acquiringp abnlioc:c k ab l e sl e e p lo c k w it h s p i n l oc k o rk er n e l d i agn o s 1 1135d 1135d
panic: acpqauniicr:in g bl kocerknaeblle d ia g no s t i cs alseseeprt i lonoc k w it"h!_ k seprninell_olckoc 1 1136d 1136d
panic: acquirinpgan bilco:c kkaeblrne esll e ep lo ck wi t h s p in l oc k o r c r i ti c a l s ec t 1 1136d 1136d
panic: acquiring blockablep a ni c : k er ne l d ia gn o s t i c as s e r stleieopn l oc k w i t h s 1 1136d 1136d
panic: acquiring bl o c kpaablniec s:le e p l o c k wi t h s p i n l o c k o r c ri t i c a l s e c t i 1 1136d 1136d
panic: apcqauniircin:g b lkeorcknaelbldei saglenoepst ilc o c k w i th sp i n l o c k a s s oerrt ciorint i"c! 1 1136d 1136d
kernel: protection fSeaBIOS (version NUM.NUM.NUM-google) syz 1 1140d 1140d
panic: vop_generic_bado 1 1145d 1145d
panic: bad dir (2) 44 1202d 1214d
pool: free list modified: pdppl (2) 1 1238d 1238d
panic: client_loop: send disconnect: Broken pipe 1 1162d 1162d
assert "next != NULL && next->start <= entry->end" failed in uvm_fault.c (2) syz 2 1233d 1233d
witness: reversal: lock order data missing (2) C 173 1298d 1447d
openbsd build error (16) 1 1169d 1169d
multicore boot error: witness: reversal: vmmaplk inode 60 1170d 1170d
uvm_fault: pmap_page_remove (3) 1 1174d 1174d
multicore boot error: kernel: protection fault trap, code=NUM 57 1174d 1175d
panic: acquiring blockable sleep lock with spinlock or critical section held (rwlock) kmmaplk (2) 2 1269d 1329d
panic: vopclient_loop: send disconnect: Broken pipe 1 1188d 1188d
panic: vop_generipac_nibac:do kpe 1 1189d 1189d
panic: vop 1 1195d 1195d
SYZFAIL: tun: can't open device (3) 86 1202d 1202d
SYZFAIL: tun_id out of range (2) 182 1202d 1202d
panic: trap type NUM, code=NUM, pc=ADDR 1 1212d 1212d
kernel: protection fault trap, code=NUM (2) C 16 1217d 1240d
panic: 1 1216d 1216d
SYZFAIL: dup2(NUM, kInPipeFd) failed syz 4 1222d 1240d
SYZFAIL: tun_id out of range 109 1224d 1224d
panic: vop_generic_badop 1 1304d 1304d
multicore build error (14) 58 1227d 1229d
kernel: double fault trap, code=NUM 1 1227d 1227d
SYZFAIL: ioctl remote attach failed (2) 6 1228d 1247d
uvm_fault: hardclock 1 1329d 1329d
SYZFAIL: open of /dev/kcov failed 3 1244d 1244d
SYZFAIL: ioctl remote attach failed 3 1345d 1398d
kernel: page fault trap, code=0 (4) 2 1347d 1375d
SYZFAIL: tun: can't open device (2) 1 1376d 1376d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (20) 24 1302d 1321d
openbsd test error: timed out (3) 72 1308d 1311d
multicore test error: timed out (3) 150 1308d 1311d
kernel: protection fault trap, code=NUM 1 1320d 1320d
uvm_fault: x86_ipi_db (6) 1 1343d 1343d
panic: wakeup: p_stat iSeaBIOS (version NUM.NUM.NUM-google) 1 1344d 1344d
uvm_fault: x86_ipi_db (5) 1 1347d 1347d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (19) 3 1357d 1357d
uvm_fault: x86_ipi_db (4) 1 1361d 1361d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (18) 6 1380d 1380d
panic: acquiring blockable sleep lock with spinlock or critical section held (rwlock) kmmaplk 11 1478d 1641d
multicore build error (12) 1 1519d 1519d
uvm_fault: x86_ipi_db (3) 4 1526d 1543d
panic: runtime error: invalid memory address or nil pointer dereference (6) 276 1451d 1451d
openbsd test error: lost connection to test machine (2) 3 1464d 1464d
multicore test error: lost connection to test machine (2) 6 1464d 1464d
openbsd test error: lost connection to test machine 15 1464d 1464d
multicore test error: lost connection to test machine 36 1464d 1464d
corrupted report (4) 21 1560d 1729d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (17) 3 1510d 1510d
panic: runtime error: invalid memory address or nil pointer dereference (5) 10821 1503d 1504d
panic: runtime error: invalid memory address or nil pointer dereference (4) 2753 1504d 1504d
SYZFAIL: clone failed syz 1 1525d 1525d
multicore build error (11) 2 1526d 1526d
multicore build error (10) 2 1558d 1631d
openbsd build error (13) 1 1636d 1636d
uvm_fault: x86_ipi_db (2) 1 1576d 1576d
uvm_fault: x86_ipi_db 1 1580d 1580d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (16) 21 1582d 1586d
assert "(key.from) > 0 && (key.from) <= w_max_used_index && (key.from) < witness_count" failed in subr_witness.c 1 1683d 1683d
uvm_fault: strlen 1 1687d 1687d
panic: ffs_alloccg: map corrupted 1 1688d 1688d
uvm_fault: fdcopy 1 1692d 1692d
panic (2) syz 8 1607d 1616d
uvm_fault: in6_pcbhashlookup 1 1700d 1700d
panic 1 1619d 1619d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 (3) 9 1710d 1714d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (15) 6 1637d 1646d
assert "ifp != NULL" failed in if_ether.c (3) 2 1721d 1726d
uvm_fault: pmap_page_remove (2) 5 1726d 1902d
uvm_fault: nd6_dad_duplicated 1 1726d 1726d
soreceive 1 58 1732d 1888d
pool: free list modified: pvpl 17 1733d 1988d
panic: runtime error: invalid memory address or nil pointer dereference (3) 28 1734d 2000d
panic: m_copym0: m == NULL and not COPYALL 306 1731d 1995d
panic: m_copym0: short mbuf chain 214 1735d 1994d
witness: reversal: vmmaplk inode (2) C 46771 1646d 1960d
witness: reversal: inode netlock C 6 1646d 1646d
witness: reversal: netlock inode C 11 1646d 1646d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 (3) 3 1647d 1647d
uvm_fault: tun_dev_read (2) 71 1740d 1987d
uvm_fault: rtrequest 1 1740d 1740d
openbsd build error (12) 1 1651d 1651d
multicore build error (9) 1 1651d 1651d
uvm_fault: ml_dequeue 2 1740d 1782d
assert "dupe == NULL" failed in uvm_page.c (2) 1 1741d 1741d
panic: pr_find_pagehead: mbufpl: incorrect page (2) 20 1745d 2012d
uvm_fault: memcpy (3) 26 1745d 1803d
uvm_fault: sbdrop 44 1753d 1972d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (14) 6 1664d 1665d
assert "pg->wire_count == 1" failed in vfs_biomem.c (2) 9 1755d 1823d
panic: in6_cksum: out of data, len 64 1 1757d 1757d
uvm_fault: _bpf_mtap (2) 8 1760d 1774d
panic: unhandled af (3) syz 7 1756d 1765d
uvm_fault: ml_enlist (2) 1 1760d 1760d
uvm_fault: ml_purge (2) 8 1766d 1984d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (13) 39 1685d 1763d
panic: pr_find_pagehead: mbufpl: page header missing (3) 2 1769d 1803d
uvm_fault: m_free (2) 429 1740d 1989d
uvm_fault: pool_cache_get 518 1741d 2019d
pool: free list modified: anonpl 8 1773d 1995d
panic: amap_lookup: offset out of range 2 1776d 1823d
uvm_fault: 0x1:uvm_fault(ADDR, 0x1, 0, 1) -> e kernel: page fault trap, code=0Stopped at db_read_bytes 1 1688d 1688d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 (2) 45 1689d 1690d
panic: free: size too small 10 <= 4096 / 2 (ADDR) type devbuf 2 1779d 1784d
pool: free list modified: vcpupl 1 1780d 1780d
uvm_fault: bpf_mtap 10 1780d 2007d
pool: free list modified: filepl 1 1787d 1787d
pool: free list modified: shmpl (3) 1 1792d 1792d
uvm_fault: uvmfault_anonget 1 1795d 1795d
uvm_fault: unveil_find_cover 1 1796d 1796d
assert "mhead->m_flags & M_PKTHDR" failed in switchctl.c (2) 1 1797d 1797d
malloc: free list modified: free 12 1797d 2019d
uvm_fault: nd6_ns_output 1 1805d 1805d
uvm_fault: x86_send_ipi (2) 2 1807d 1818d
panic.go:LINE +0x72 (7) syz 3 1726d 1727d
assert "ifp != NULL" failed in rtsock.c (2) 26 1785d 1788d
panic: vref used where vget required (2) 2 1816d 1820d
panic: amap_lookups: offset out of range (2) 1 1817d 1817d
pool: free list modified: pffrnode 7 1817d 1955d
uvm_fault: uvm_map_clean 1 1819d 1819d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (8) 10 1771d 1842d
uvm_fault: igmp_leavegroup 1 1821d 1821d
syzkaller: make target failed: failed to run ["gmake" "target"]: exit status 2 3 1732d 1732d
panic(ADDR) at panic+0x164 1 1734d 1734d
openbsd boot error: can't ssh into the instance (3) 18 1735d 1736d
multicore boot error: can't ssh into the instance (3) 15 1735d 1736d
kernel: privileged instruction fault trap, code=0 (2) 1 1826d 1826d
assert "!_kernel_lock_held()" failed in kern_fork.c (2) 1 1826d 1826d
uvm_fault(ADDR, 0xa, 0, 1) -> e (2) 1 1741d 1741d
assert "!ISSET(rt->rt_flags, RTF_LOCAL)" failed in nd6.c (2) 1 1830d 1830d
no output from test machine (4) syz 14713 1744d 1750d
panic: amap_wipeout: corrupt amap 6 1835d 1924d
uvm_fault(ADDR, 0x7b8, 0, 1) -> e 1 1753d 1753d
uvm_fault(ADDR, 0x3, 0, 1) -> e (2) 1 1757d 1757d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 (2) 21 1759d 1761d
uvm_fault(ADDR, 0xa, 0, 1) -> e 1 1759d 1759d
pool: free list modified: tcpqe 4 1850d 1967d
uvm_fault(ADDR, 0x3, 0, 1) -> e 1 1762d 1762d
no output from test machine (2) C 89865 1765d 1818d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (12) 9 1774d 1776d
assert "sb->sb_cc == 0" failed in uipc_socket2.c 2 1855d 1900d
pool: free list modified: vmsppl 1 1767d 1767d
uvm_fault(ADDR, 0xbef, 0, 1) -> e (2) 1 1767d 1767d
uvm_fault(ADDR, 0x10b, 0, 1) -> e (2) 1 1773d 1773d
uvm_fault(ADDR, 0xbef, 0, 1) -> e 1 1775d 1775d
pool: free list modified: vnodes 1 1869d 1869d
uvm_fault(ADDR, 0x10b, 0, 1) -> e 1 1788d 1788d
kernel: page fault trap, code=0 (3) 1 1789d 1789d
panic: bad group arg size 29, should be <= 32 for &prog.GroupArg{ArgCommon:prog.ArgCommon{ref:LINEx328, dir:LINEx0}, Inn 1 1791d 1791d
assert "ps->ps_uvncount == 0" failed in kern_unveil.c (2) 1 1887d 1887d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (11) 6 1798d 1821d
pool: free list modified: uvmvnodes 1 1889d 1889d
pool: free list modified: sockpl 2 1891d 1901d
uvm_fault(ADDR, ADDR, 0, 1) -> e 1 1801d 1801d
panic: bad group arg size 29, should be <= 32 for &prog.GroupArg{ArgCommon:prog.ArgCommon{ref:LINEx2c0, dir:LINEx0}, Inn 1 1805d 1805d
uvm_fault: memcpy (2) syz 2168 1810d 2058d
uvm_fault: vio_start 1 1901d 1901d
uvm_fault: syscall 1 1903d 1903d
panic: broken type ref 1 1818d 1818d
pool: free list modified: mtagpl 1 1904d 1904d
assert "dupe == NULL" failed in uvm_page.c 4 1905d 2018d
pool: free list modified: art_table 1 1908d 1908d
assert "ifp != NULL" failed in if_ether.c (2) 1 1915d 1915d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 3 1825d 1825d
kqueue: knote !ACTIVE 2 1918d 1922d
uvm_fault: in4_cksum 1 1922d 1922d
panic: bad arg kind: <nil> (11) 1 1838d 1838d
kernel: privileged instruction fault trap, code=0 1 1930d 1930d
uvm_fault: ml_enlist 1 1930d 1930d
uvm_fault: tun_init 1 1931d 1931d
uvm_fault returns 14, GPA=ADDR C 2 1844d 1844d
panic: lock (kernel_lock) mbufpl not locked 1 1934d 1934d
panic: bad group arg size 0, should be <= 24 for &prog.GroupArg{ArgCommon:prog.ArgCommon{typ:(*prog.StructType)(ADDR)}, 1 1847d 1847d
panic.go:LINE +0x72 (5) 1 1849d 1849d
assert "pg->wire_count == 0" failed in uvm_page.c 1 1945d 1945d
panic: bad arg kind: <nil> (10) 1 1859d 1859d
panic: bad arg kind: <nil> (9) 1 1862d 1862d
pool: free list modified: art_heap4 2 1958d 1982d
uvm_fault: _bus_dmamap_load_mbuf 1 1961d 1961d
uvm_fault: m_copym 1 1962d 1962d
panic: bad arg kind: <nil> (8) 1 1874d 1874d
panic: pr_find_pagehead: mbufpl: page header missing (2) 1 1965d 1965d
pool: cpu free list modified: mcl2k 1 1966d 1966d
panic: bad arg kind: <nil> (7) 1 1878d 1878d
pool: free list modified: shmpl (2) 1 1972d 1972d
panic: bad arg kind: <nil> (6) 1 1884d 1884d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (7) 1 1884d 1884d
assert "mhead->m_flags & M_PKTHDR" failed in switchctl.c 1 1975d 1975d
pool: double put: mbufpl (2) 2 1976d 2008d
panic: attempt to access user address ADDR in supervisor mode 7 1981d 2031d
kernel: double fault trap, code=0 (2) syz 2 2007d 2007d
uvm_fault: rtable_satoplen (3) syz 237 2015d 2058d
panic: amap_lookups: offset out of range 1 1985d 1985d
panic: bad arg kind: <nil> (5) 1 1897d 1897d
uvm_fault: witness_checkorder (2) 1 1988d 1988d
panic: bad arg kind: &prog.IntType{IntTypeCommon:prog.IntTypeCommon{TypeCommon:prog.TypeCommon{TypeName:"int32", FldName 1 1900d 1900d
panic: bad arg kind (2) 2 1990d 1992d
assert "pg->wire_count == 1" failed in vfs_biomem.c 66 1991d 2316d
assert "ifp != NULL" failed in rtsock.c 2 1991d 1993d
panic.go:LINE +0x72 (4) 1 1902d 1902d
uvm_fault: x86_send_ipi 1 1995d 1995d
uvm_fault: VOP_ISLOCKED 1 1996d 1996d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (10) 3 1906d 1906d
panic: bad arg kind: <nil> (4) 1 1908d 1908d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (6) 1 1908d 1908d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST, va = ADDR, pa = ADDR (2) 1 2000d 2000d
uvm_fault: m_zero 1 2002d 2002d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (5) 1 1916d 1916d
panic: free: non-malloced addr ADDR type in_multi 4 2006d 2028d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (9) 3 1918d 1918d
uvm_fault: pfi_kif_update 6 2009d 2135d
uvm_fault: fifo_write 1 2009d 2009d
panic.go:LINE +0x72 (3) 1 1920d 1920d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (4) 2 1922d 1923d
panic: receive 1: so ADDR, so_type 3, sb_cc 176 1 2011d 2011d
panic: ffs_valloc: dup alloc 2 2012d 2015d
uvm_fault: 0ddb{1}> ddb{1}> set $lines = 0ddb{1}> set $maxwidth = 0ddb{1}> show panickernel page faultattempt to e 1 1924d 1924d
assert "!_kernel_lock_held()" failed in kern_fork.c 15 2016d 2276d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (8) 3 1928d 1928d
panic: WAaRcNqIuNirGi:n g SPbLl NoOcT kLaObWlEReE Ds lOeNe pSY SloCcAkL Lwi 2 t15h7 s79p3i4n4l5o0c kEX IorT 0c rai 1 1929d 1929d
uvm_fault 10 2022d 2037d
panic: free: size too small 24 <= 256 / 2 (ADDR) type in_multi 1 2027d 2027d
panic: bad arg kind: <nil> (3) 1 1938d 1938d
assert "cifp != NULL" failed in route.c 89 2001d 2056d
assert "rt->rt_ifa->ifa_ifp != NULL" failed in route.c 830 2000d 2041d
uvm_fault: in6_purgeaddr 1423 2000d 2041d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (7) 3 1942d 1942d
assert "ifp != NULL" failed in if_ether.c 208 2002d 2057d
assert "ifa == rt->rt_ifa" failed in nd6.c (2) 262 2002d 2040d
uvm_fault: tun_clone_destroy 1 2033d 2033d
panic: bad arg kind: <nil> (2) 1 1950d 1950d
panic: bad arg kind: <nil> 1 1953d 1953d
panic.go:LINE +0x72 (2) 1 1955d 1955d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (6) 3 1957d 1957d
uvm_fault: pmap_page_remove 7 2049d 2306d
openbsd build error (7) 1 1961d 1961d
multicore boot error: can't ssh into the instance (2) 96 1977d 1978d
openbsd boot error: can't ssh into the instance (2) 48 1977d 1978d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (3) 1 1977d 1977d
panic: vref used where vget required 1 2067d 2067d
panic: pfi_dynaddr_update 2 2083d 2164d
uvm_fault: pool_do_put 1 2001d 2001d
panic: runtime error: invalid memory address or nil pointer dereference (2) 1 2002d 2002d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST, va = ADDR, pa = ADDR 1 2006d 2006d
pool: free list modified: pdppl 1 2006d 2006d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (5) 3 2005d 2005d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (2) 1 2006d 2006d
panic.go:LINE +0x72 1 2007d 2007d
witness: reversal: inode fdlock C 523 2074d 2287d
panic: runtime error: invalid memory address or nil pointer dereference 1 2011d 2011d
panic: fifo_badop called C 8841 2013d 2348d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR 1 2028d 2028d
panic: ffs_blkfree: bad size 2 2128d 2132d
kernel: double fault trap, code=0 1 2176d 2176d
assert "la != NULL" failed in if_ether.c 3 2160d 2163d
uvm_fault: ml_purge 6 2159d 2165d
panic: in_cksum: out of data, len 63 1 2145d 2145d
uvm_fault: pfi_ifhead_RB_REMOVE 1 2166d 2166d
panic: uvm_fault_unwire_locked: address not in map (2) 7 2156d 2284d
panicConnection to ssh-serialport.googleapis.com closed by remote host. 1 2015d 2015d
uvm_fault: vfs_lookup 1 2200d 2200d
panic: Data modified on freelist: word 4 of object ADDR size 0x84 previous type free (ADDR != ADDR) 1 2026d 2026d
panic: Data modified on freelist: word 5 of object ADDR size 0xa0 previous type devbuf (0xd != ADDR) 1 2027d 2027d
panic: Data modified on freelist: word 5 of object ADDR size 0xc0 previous type devbuf (0xd != ADDR) 1 2034d 2034d
panic: Data modified on freelist: word 5 of object ADDR size 0x100 previous type devbuf (0xd != ADDR) syz 7 2027d 2057d
panic: attempt WtAoR eNIxNeGc:u tSeP uL seNOrT a LddOrWEesRsE D 0Ox0N iSYn SCsAuLpLe rv3i 4s orEX ImTo d0 e9 1 2027d 2027d
panic: bad arg kind 1 2038d 2038d
uvm_fault: ADDR: movl $ADDR,0(%rdi)ddb> ddb> set $lines = 0ddb> set $maxwidth = 0ddb> show panickernel page 1 2042d 2042d
uvm_fault: ADDR: jmp ADDR 1 2044d 2044d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (4) 9 2051d 2051d
uvm_fault: pmap_enter syz 3 2292d 2298d
panic: malloc: allocation tooWA RlNaIrNGge: ,SPL NOT LOWERED ON SYSCALL 3 4 EXIT 0 9 1 2070d 2070d
multicore test error: timed out 43 2189d 2226d
panic: amap_add: slot in use 2 2279d 2284d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (3) 12 2108d 2109d
panic: vput: v_writecount != 0 C 2 2110d 2110d
uvm_fault: _bpf_mtap 31 2321d 2343d
panic: pool_cache_item_magic_check: mcl2k cpu free list modified: item addr ADDR+24 ADDR!=ADDR 1 2325d 2325d
panic: rw_enter: vmmaplk locking against myself 3 2335d 2337d
uvm_fault: tun_dev_read 2 2335d 2337d
openbsd test error: timed out 19 2194d 2254d
panic: bpf_mcopy 1 2339d 2339d
multicore build error (4) 2 2183d 2183d
openbsd build error (6) 1 2183d 2183d
pool: double put: mcl2k 4 2341d 2343d
pool: double put: mcl64k 1 2342d 2342d
panic: missing alias 1 2346d 2346d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (2) 3 2177d 2177d
panic: bad dir C 1390 2182d 2183d
multicore build error (2) 10 2208d 2208d
openbsd build error (4) 5 2208d 2208d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 12 2217d 2218d
multicore build error 26 2218d 2219d
openbsd build error (3) 13 2218d 2219d
multicore boot error: can't ssh into the instance 6 2218d 2218d
openbsd boot error: can't ssh into the instance 3 2218d 2218d
panic: ffs_read: type 0 1 2355d 2355d
panic: serialport: VM disconnected. 1 2226d 2226d
panic: kserialport: VM disconnected. 1 2227d 2227d
panic: kernel diagnostic serialport: VM disconnected. 1 2227d 2227d
panic: kernel diserialport: VM disconnected. 1 2306d 2306d
openbsd build error 1 2271d 2271d
lost connection to test machine C 276 2319d 2393d
https://github.com/openbsd/src.git boot error: uvm_fault: memcmp 6 2325d 2325d
https://github.com/openbsd/src.git test error 16 2333d 2354d
multicore boot error: uvm_fault: smbios_find 12 2325d 2325d
kernel: kernel relinking fa 1 2414d 2393d
https://github.com/openbsd/src.git boot error 479 2348d 2393d
panic: sandbox escaping file name "../file0" 111 2347d 2349d
multicore test error (2) 3 2334d 2334d
multicore test error 3 2334d 2334d
panic: sandbox escaping file name "../file0/file0", Files are map[./file0:true ../file0:true] 1 2347d 2347d
panic: sandbox escaping file name "../file0", Files are map[../file0:true] 11 2347d 2347d
panic: sandbox escaping file name "../file0", Files are map[./file0:true ../file0:true] 1 2347d 2347d
panic: sandbox escaping file name "../file0/file0" 2 2347d 2348d