syzbot

 sign-in | mailing list | source | docs
🐞 Open [132] 🐞 Fixed [269] 🐞 Invalid [577] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

Out of 577 bugs, 316 were automatically obsoleted (5 due to revoked reproducers), 261 were invalidated by users.
Title Repro Cause bisect Fix bisect Count Last Reported
panic: vop_geneserialport: Connection terminated to allow system upgrade. Please reconnect at your convenience. 1 1d13h 1d13h
multicore build error (17) 10 92d 218d
panic: Connection to us-central1-ssh-serialport.googleapis.com closed by remote host. 1 7d15h 7d15h
panic: vopConnection to us-central1-ssh-serialport.googleapis.com closed by remote host. 1 9d12h 9d12h
panic: ffs_blkfree: bad size (3) 1 105d 105d
openbsd build error (20) 1 19d 19d
panic: rw_enter: solock locking against myself (2) syz 3 109d 306d
uvm_fault: rw_enter (2) 3 109d 184d
openbsd boot error: can't ssh into the instance (7) 6 21d 21d
multicore test error: SYZFATAL: BUG: failed to run executor version: failed to run ["./syz-executor" "version"]: signal: abort trap (core dump 210 21d 25d
openbsd test error: SYZFATAL: BUG: failed to run executor version: failed to run ["./syz-executor" "version"]: signal: abort trap (core dump 105 21d 25d
openbsd test error: SYZFATAL: BUG: failed to run executor version: failed to run ["./syz-executor" "version"]: signal: bad system call (core 126 25d 30d
assert "bp->b_data != NULL" failed in vfs_biomem.c (4) 2 114d 117d
multicore boot error: can't ssh into the instance (5) 24 81d 81d
openbsd boot error: can't ssh into the instance (6) 12 81d 81d
panic: vop_generic_ 2 121d 122d
uvm_fault: fifo_read 2 136d 150d
assert "pmap->pm_type != PMAP_TYPE_EPT" failed in pmap.c (2) 1 139d 139d
assert "rw_write_held(&map->lock)" failed in uvm_map.c 1 141d 141d
panic: wakeup: p_stat is NUM (3) 2 150d 235d
panic: vop_ 1 66d 66d
uvm_fault: witness_checkorder (4) 1 155d 155d
assert "ps->ps_uvncount == NUM" failed in kern_unveil.c (3) 134 120d 335d
uvm_fault: pool_do_put (3) 1 160d 160d
uvm_fault: VOP_LOCK 1 163d 163d
pool: free list modified: shmpl (4) 1 165d 165d
panic: vConnection to ssh-serialport.googleapis.com closed by remote host. 1 167d 167d
assert "((flags & PGO_LOCKED) != NUM && rw_lock_held(uobj->vmobjlock)) || (flags & PGO_LOCKED) == NUM" failed in uvm_vno (3) 4 169d 270d
panic: runtime.errorString("integer divide by zero") 1 172d 172d
panic: (3) 1 86d 86d
assert "ifp != NULL" failed in if_ether.c (5) 181 138d 533d
protection_fault: __x86_indirect_thunk_r11 1 180d 180d
pool: cpu free list modified: mbufpl (3) 1 186d 186d
pool: free list modified: mbufpl (3) 1 189d 189d
assert "sc->sc_dev == NUM" failed in if_tun.c (4) 1 201d 201d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (22) 15 203d 378d
panic: (2) 1 118d 118d
panic: ffs_blkfree: bad size (2) 1 211d 211d
protection_fault: witness_checkorder (2) C 311 171d 286d
panic: uvm_fault_unwire_locked: addrepasnsi cno:t i n k er n e l dmaipagnostic assertion "!_kernel_lock_held()" fa 1 212d 212d
kqueue: knote !ACTIVE (2) 2 213d 225d
protection_fault: lf_advlock (3) 6 220d 459d
assert "pg->wire_count == NUM" failed in vfs_biomem.c (2) 2 225d 255d
panic: thread ADDR not in SRUN: NUM 4 227d 280d
panic: db_mtx_enter: mtx ADDR: locking against myself 1 230d 230d
assert "__mp_lock_held(&sched_lock, curcpu()) == NUM" failed in sched_bsd.c 2 230d 231d
panic: voserialport: Connection terminated to allow system upgrade. Please reconnect at your convenience. 1 233d 233d
assert "self->ci_proc_pmap == p->p_vmspace->vm_map.pmap" failed in pmap.c syz 2 234d 234d
assert "ps->ps_uvncount == NUM" failed in kernWARNING: SPL NOT LOWERED ON SYSCALL NUM NUM EXIT NUM aStopped at save 1 246d 246d
assert "ps->ps_uvncount == NUM" failed in multicore/kernel/sys/kern/kern_unveil.c 1 246d 246d
uvm_fault: softclock (3) 1 246d 246d
openbsd build error (19) 18 259d 535d
assert "__mp_lock_held(&sched_lock, curcpu()) == NUM" failed in kern_lock.c (3) 4 263d 282d
uvm_fault: witness_checkorder (3) C 212 227d 481d
protection_fault: remrunqueue 2 269d 275d
assert "!ISSET(p->p_flag, P_WSLEEP) || p->p_stat == SSTOP" failed in kern_sched.c syz 81 265d 290d
assert "to->to_kclock == KCLOCK_UPTIME" failed in kern_timeout.c (2) 1 270d 270d
assert "dtlookup(unit) == NULL" failed in dt_dev.c (2) 1 271d 271d
panic:Connection to ssh-serialport.googleapis.com closed by remote host. 1 288d 288d
panic: uvm_fault_unwire_locked: WARaNdIdNGre:s sS PnotL iNn OmT aLpO 1 199d 199d
panic: vop_gepneanic: kernel diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/multicore/ker 1 290d 290d
uvm_fault: bpfioctl (3) 1 295d 295d
assert "cifp != NULL" failed in route.c (2) 18 296d 524d
assert "sc->sc_dev == NUM" failed in if_tun.c (3) 68 300d 789d
panic: ffs_update: bad link cnt 18 315d 817d
panic: vop_genConnection to ssh-serialport.googleapis.com closed by remote host. 1 317d 317d
panic: voConnection to ssh-serialport.googleapis.com closed by remote host. 1 324d 324d
uvm_fault: db_enter (4) 30 330d 672d
uvm_fault: igmp_leavegroup (4) 271 292d 758d
panic: vopp_ganenier:ic_ a 1 352d 352d
kernel: page fault trap, code=NUM (2) 1 358d 358d
uvm_fault: softclock_process_kclock_timeout 4 360d 444d
multicore test error: no output from test machine (2) 1 363d 363d
protection_fault: in6_addmulti (2) 4 365d 430d
pool: free list modified: fdescpl (3) 10 366d 659d
multicore build error (16) 252 366d 595d
panic: vop_Connection to ssh-serialport.googleapis.com closed by remote host. 1 368d 368d
uvm_fault: NUM TID PID UID PRFLAGS PFLAGS CPU COMMANDNUM(NUM,NUM,NUM,NUM,49b,ADDR) at NUMtimeout_ru 1 369d 369d
assert "rw_write_held(uobj->vmobjlock)" failed in uvm_aobj.c 1 371d 371d
panic: vo (2) 1 284d 284d
assert "pg->wire_count == NUM" failed in vfs_biomem.c 10 379d 715d
protection_fault: fill_file (2) 2 380d 393d
panic: wakeup: p_stat is NUM (2) 4 382d 438d
panic: Non dma-reachable buffer at curaddr ADDR(raw) 1 389d 389d
uvm_fault: NUM TID PID UID PRFLAGS PFLAGS CPU COMMANDNUM(NUM,NUM,NUM,NUM,59d,ADDR) at NUMtimeout_ru 1 389d 389d
protection_fault: __llvm_retpoline_r11 (2) 1 391d 391d
openbsd test error: SYZFATAL: BUG: got no coverage: 2405 365d 439d
multicore test error: SYZFATAL: BUG: got no coverage: 4785 365d 439d
uvm_fault: kcov_remote_enter 3 396d 514d
uvm_fault: ffs2_balloc (2) 3 403d 473d
panic: missing alias (3) 1 405d 405d
assert "to->to_kclock == KCLOCK_UPTIME" failed in kern_timeout.c 1 411d 411d
uvm_fault: softclock (2) 2 415d 428d
openbsd boot error: can't ssh into the instance (5) 1 415d 415d
uvm_fault: NUM TID PID UID PRFLAGS PFLAGS CPU COMMAND*ADDR NUM NUM NUM ADDR NUM 1 426d 426d
panic: voWARNpI_NgGe:n SePLr iNc_ObT adLOoWpE 1 345d 345d
uvm_fault: NUM TID PID UID PRFLAGS PFLAGS CPU COMMANDNUM(NUM,NUM,NUM,NUM,58b,ADDR) at NUMtimeout_ru 1 436d 436d
panic: vpoapn_giecn: ekrice_brnadelop 1 348d 348d
uvm_fault: NUM TID PID UID PRFLAGS PFLAGS CPU COMMAND*ADDR NUM NUM 0x2 ADDR 0K syz 1 442d 442d
syzkaller: make target failed: failed to run ["gmake" "target"]: exit status 2 (2) 12 365d 365d
assert "((flags & PGO_LOCKED) != NUM && rw_lock_held(uobj->vmobjlock)) || (flags & PGO_LOCKED) == NUM" failed in uvm_vno (2) 1 471d 471d
panic: vputonfreelist: lock count is not zero (2) 1 478d 478d
panic: malloc: out of space in kmem_map (2) 1 481d 481d
protection_fault: done_flush 81 491d 848d
assert "dupe == NULL" failed in uvm_page.c (3) 25 494d 863d
assert "ps->ps_uvncount == NUM" failed in kern_unveil.c (2) 5 498d 708d
assert "ifa == rt->rt_ifa" failed in nd6.c (4) 1 499d 499d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 (4) 63 498d 546d
panic: pr_find_pagehead: pdppl: incorrect page 1 513d 513d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 (4) 9 518d 518d
assert "d->bd_in_uiomove == NUM" failed in bpf.c 1 518d 518d
uvm_fault: savectx 1 519d 519d
openbsd boot error: can't ssh into the instance (4) 28 520d 560d
assert "!_kernel_lock_held()" failed in uvm_map.c 6 522d 683d
assert "__mp_lock_held(&sched_lock, curcpu()) == NUM" failed in kern_lock.c (2) 1 523d 523d
pool: free list modified: inpcb (2) 2 524d 578d
panic: vo 1 436d 436d
uvm_fault: uvm_map_teardown 1 530d 530d
panic: ufsdirhash_lookup: bad offset in hash array (2) 1 530d 530d
panic: acquiring blockable sleep lock with spinlock or critical section held (rwlock) vmmaplk (2) 1 531d 531d
multicore test error: no output from test machine 1 532d 532d
malloc: free list modified: counters 9 534d 794d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte ADDR (3) 3 538d 562d
protection_fault: fill_file 2 549d 575d
uvm_fault: hardclock (4) 1 549d 549d
multicore boot error: can't ssh into the instance (4) 51 520d 520d
pool: free list modified: pdppl (3) 1 553d 553d
uvm_fault: pool_gc_pages 4 555d 742d
witness: lock_object uninitialized: ADDR (2) 1 555d 555d
uvm_fault: softclock 1 556d 556d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (21) 12 557d 568d
protection_fault: __llvm_retpoline_r11 1 557d 557d
uvm_fault: pool_do_get (2) 2 558d 582d
uvm_fault: rw_enter 1 562d 562d
panic: amap_pp_adjref: negative reference count (2) 1 562d 562d
assert "((flags & PGO_LOCKED) != NUM && rw_lock_held(uobj->vmobjlock)) || (flags & PGO_LOCKED) == NUM" failed in uvm_vno 1 565d 565d
uvm_fault: ufs_direnter 1 575d 575d
assert "bp->b_data != NULL" failed in vfs_biomem.c (3) 2 575d 592d
uvm_fault: bpfioctl (2) 2 577d 578d
panic: rw_enter: solock locking against myself 5 577d 665d
multicore test error: SYZFATAL: BUG: program execution failed: executor NUM: EOF (2) 78 550d 551d
openbsd test error: SYZFATAL: BUG: program execution failed: executor NUM: EOF 94 550d 555d
uvm_fault: __kernel_phys_end 1 580d 580d
panic: trap type NUM, code=NUM, pc=NUM (2) 1 592d 592d
protection_fault: in6_addmulti 1 592d 592d
panic: wakeup: p_stat is NUM 2 593d 615d
protection_fault: witness_checkorder 1 606d 606d
uvm_fault: NUM TID PID UID PRFLAGS PFLAGS CPU COMMAND*ADDR NUM NUM NUM ADDR 0K s 1 623d 623d
malloc: free list modified: free (3) 1 630d 630d
multicore test error: SYZFATAL: BUG: program execution failed: executor NUM: EOF 108 551d 553d
uvm_fault: km_free 6 654d 842d
panic:client_loop: send disconnect: Broken pipe 4 657d 796d
panic: vopclient_loop: send disconnect: Broken pipe (3) 3 660d 707d
panic: vopConnection to ssh-serialport.googleapis.com closed by remote host. 1 581d 581d
pool: free list modified: inpcb 2 669d 696d
pool: cpu free list modified: mbufpl (2) 1 672d 672d
protection_fault: lf_advlock (2) 4 676d 725d
pool: free list modified: art_heap4 (3) 1 683d 683d
uvm_fault: solock 1 685d 685d
panic: trap type NUM, code=NUM, pc=NUM 1 688d 688d
uvm_fault: hardclock (3) 1 692d 692d
assert "pmap->pm_type != PMAP_TYPE_EPT" failed in pmap.c 1 696d 696d
panic: tcpp_nucp t 1 606d 606d
pool: free list modified: bufpl 1 696d 696d
panic: vop_gene 1 607d 607d
panic: vop_generic_bclient_loop: send disconnect: Broken pipe 1 608d 608d
panic: vop_generic_bapdoapn 1 617d 617d
kernel: page fault trap, code=NUM syz 1 615d 615d
panic: vop_client_loop: send disconnect: Broken pipe (2) 1 623d 623d
panic: vop_gpeanneicri:c _kbeardonpe 1 624d 624d
panic: vop_geneclient_loop: send disconnect: Broken pipe 1 619d 619d
panic: voclient_loop: send disconnect: Broken pipe 1 706d 706d
protection_fault: tun_enqueue 1 706d 706d
assert "bp->b_data != NULL" failed in vfs_biomem.c (2) 2 706d 759d
witness: lock_object uninitialized: ADDR 71 712d 851d
panic: ufsdirhash_lookup: bad offset in hash array 1 712d 712d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte ADDR (2) 1 714d 714d
panic: vop_client_loop: send disconnect: Broken pipe 1 627d 627d
panic: vop_generic_bpaadonipc 1 632d 632d
pool: free list modified: sockpl (2) 3 724d 779d
malloc: free list modified: free (2) 1 729d 729d
SYZFAIL: ioctl remote attach failed (4) 68 732d 846d
uvm_fault: pmap_page_remove (4) 1 737d 737d
protection_fault: pool_do_put 1 749d 749d
panic: vpopa_ngiecn:kerericn_elba diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/setuid/k 1 669d 669d
panic: vpoanp_igc:en e r i c _ b ad op 1 670d 670d
panic: pmap_enter: PG_PVLIST mapping with unmanaged page: va ADDR, opte ADDR, pa ADDR 2 760d 837d
panic: pool_do_get: pfiaddrpl: page empty 1 761d 761d
panic: vop_generclient_loop: send disconnect: Broken pipe 1 675d 675d
uvm_fault: putc 2 765d 769d
uvm_fault: pf_anchor_global_RB_INSERT_COLOR 1 767d 767d
panic: vop_pganeince:ri kce_rbandelo p 1 685d 685d
panic: vop_genericp_anbaidc:o p 1 684d 684d
panic: vop_generic_baclient_loop: send disconnect: Broken pipe 1 683d 683d
panic: runtime error: invalid memory address or nil pointer dereference (8) 1 685d 685d
uvm_fault: ffs2_balloc 1 772d 772d
assert "ifa == rt->rt_ifa" failed in nd6.c (3) 2 773d 800d
uvm_fault: VOP_ISLOCKED (2) 1 774d 774d
panic: vpoapn_igc:e kernel diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/setuid/kernel/s 1 687d 687d
panic: vclient_loop: send disconnect: Broken pipe (2) 1 686d 686d
uvm_fault: db_enter (3) 1 686d 686d
uvm_fault: pool_do_get 1 781d 781d
panic: vclient_loop: send disconnect: Broken pipe 1 692d 692d
uvm_fault: ktrops 1 783d 783d
panic: vop_genericp_baandiocp: 1 742d 742d
panic: vop_geneprianci_c: kernel diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/multicore 1 706d 706d
panic: broken type ref (3) 1 696d 696d
panic: vop_generic_badpoapn 1 695d 695d
panic: vop_genepranici_c:bakdeorpn 1 698d 698d
uvm_fault: memcpy (4) 2 785d 854d
multicore test error: SYZFATAL: BUG: program execution failed: bad reply magic ADDR 1 704d 704d
openbsd test error: SYZFATAL: BUG: program execution failed: bad reply magic ADDR 3 704d 704d
assert "la != NULL" failed in if_ether.c (2) 1 793d 793d
protection_fault: sys_msgrcv 1 798d 798d
panic: vop_geneprainci_cb:a kdeoprn 1 799d 799d
panic:p a nic: kernel diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/setuid/kernel/sys/ke 1 711d 711d
openbsd build error (18) 1 710d 710d
uvm_fault: db_enter (2) 1 717d 717d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte ADDR 3 808d 857d
panic: vpoapn_igc:en keerricn_elba d o dpi 1 808d 808d
kernel: privileged instruction fault trap, code=NUM 1 810d 810d
uvm_fault: hardclock (2) 1 812d 812d
panic: vop_generic_bad 1 724d 724d
panic: vop_genclient_loop: send disconnect: Broken pipe (2) 1 728d 728d
kernel: protection fault trap, code=NUM (4) 1 730d 730d
panic: vop_genclient_loop: send disconnect: Broken pipe 1 731d 731d
panic: vop_generic_client_loop: send disconnect: Broken pipe 1 732d 732d
uvm_fault: ffs_nodealloccg 1 823d 823d
assert "dtlookup(unit) == NULL" failed in dt_dev.c 1 824d 824d
panic: vop_generic_pbaandiopc 1 735d 735d
pool: free list modified: fdescpl 1 827d 827d
assert "ifp != NULL" failed in if_ether.c (4) 2 827d 872d
panic: vopclient_loop: send disconnect: Broken pipe (2) 1 738d 738d
assert "ps->ps_uvncount == NUM" failed in kern_unveil.c 2 839d 851d
panic: pmap_remove_ptes: managed page without PG_PVLIST: va ADDR, opte ADDR 1 848d 848d
assert "bp->b_data != NULL" failed in vfs_biomem.c 1 849d 849d
panic: runtime error: invalid memory address or nil pointer dereference (7) 1 850d 850d
panic: missing alias (2) 2 851d 851d
panic: vref used where vget required (3) 1 851d 851d
panic: client_loop: send disconnect: Broken pipe (2) 1 762d 762d
panic: vop_generic_WbAaRdNopI 1 766d 766d
panic: apcaqniuci:r kinegr nbleol c kdaiblage snloesteipc laosscke r t io n " ! _ ke r n e l_ l o wcikt_hh s 1 766d 766d
panic: acqupirainincg: b lo c kkaerblneel s l e ep l o c k d i a gwintohs tsipc i nl oc k o r c r it i c a l 1 766d 766d
panic: vop_gclient_loop: send disconnect: Broken pipe 1 766d 766d
panic: acquipraniincg: k e brnleolck daibaleg nsolseteip lc oacsks weirttiho n s "pi!nl_okecrkn oelr_ l corcik_thiec 1 767d 767d
panic: acpquainriic:n g bl o ck a b le s l e e p l o c k w i t h s p in l o c k o r c ri t i ca l s 1 767d 767d
panic: acquiring blpocankaicb:l e s l e keerp lnoecl k w i t h s p i nl oc k o r cr i t ic a l s e c ti o n 1 767d 767d
panic: apcaqnuiic:ri nkg ebrloncekla b l e sl ee p l o c k w i t h s p i n l oc k o r cr i ti c a l 1 767d 767d
panic: acquiring blockable sleep lock with spinlock or criticapl saneictci:o nk ehrenled (lk deriangenlo_lsotickc) 1 767d 767d
panic: acquiring blocpkaanbilec: k er snleele p lo c k w i th s p i nl o c k or c r i ti ca l s ec t 1 767d 767d
kernel: protection fault trap, code=NUM (3) 1 767d 767d
panic: acquirpinagni c :b l koecrknaebll ed silageneop slotickc a ss e r t i o n " ! _ k e r n el _ l o ckwi_t 1 767d 767d
panic: acquiring bplaoncikca:b l e sl e e p l okcek rwnielt h s p i n dloicak gonro scrtiitci c a l s e cati 1 767d 767d
panic: acquiring blockabplaen i sc:le e p l kocek rn e l d ia g no s t i wci t ha s s e r t i o n "s!_pkienlro 1 767d 767d
panic: acquiringp abnlioc:c k ab l e sl e e p lo c k w it h s p i n l oc k o rk er n e l d i agn o s 1 767d 767d
panic: acpqauniicr:in g bl kocerknaeblle d ia g no s t i cs alseseeprt i lonoc k w it"h!_ k seprninell_olckoc 1 767d 767d
panic: acquirinpgan bilco:c kkaeblrne esll e ep lo ck wi t h s p in l oc k o r c r i ti c a l s ec t 1 767d 767d
panic: acquiring blockablep a ni c : k er ne l d ia gn o s t i c as s e r stleieopn l oc k w i t h s 1 767d 767d
panic: acquiring bl o c kpaablniec s:le e p l o c k wi t h s p i n l o c k o r c ri t i c a l s e c t i 1 767d 767d
panic: apcqauniircin:g b lkeorcknaelbldei saglenoepst ilc o c k w i th sp i n l o c k a s s oerrt ciorint i"c! 1 767d 767d
kernel: protection fSeaBIOS (version NUM.NUM.NUM-google) syz 1 772d 772d
panic: vop_generic_bado 1 777d 777d
panic: bad dir (2) 44 834d 846d
pool: free list modified: pdppl (2) 1 870d 870d
panic: client_loop: send disconnect: Broken pipe 1 794d 794d
assert "next != NULL && next->start <= entry->end" failed in uvm_fault.c (2) syz 2 865d 865d
witness: reversal: lock order data missing (2) C 173 929d 1079d
openbsd build error (16) 1 800d 800d
multicore boot error: witness: reversal: vmmaplk inode 60 801d 802d
uvm_fault: pmap_page_remove (3) 1 806d 806d
multicore boot error: kernel: protection fault trap, code=NUM 57 806d 806d
panic: acquiring blockable sleep lock with spinlock or critical section held (rwlock) kmmaplk (2) 2 901d 961d
panic: vopclient_loop: send disconnect: Broken pipe 1 820d 820d
panic: vop_generipac_nibac:do kpe 1 820d 820d
panic: vop 1 827d 827d
SYZFAIL: tun: can't open device (3) 86 833d 833d
SYZFAIL: tun_id out of range (2) 182 833d 834d
panic: trap type NUM, code=NUM, pc=ADDR 1 844d 844d
kernel: protection fault trap, code=NUM (2) C 16 849d 872d
panic: 1 848d 848d
SYZFAIL: dup2(NUM, kInPipeFd) failed syz 4 854d 872d
SYZFAIL: tun_id out of range 109 856d 856d
panic: vop_generic_badop 1 936d 936d
multicore build error (14) 58 859d 861d
kernel: double fault trap, code=NUM 1 859d 859d
SYZFAIL: ioctl remote attach failed (2) 6 859d 879d
uvm_fault: hardclock 1 961d 961d
SYZFAIL: open of /dev/kcov failed 3 875d 876d
SYZFAIL: ioctl remote attach failed 3 977d 1030d
kernel: page fault trap, code=0 (4) 2 978d 1007d
SYZFAIL: tun: can't open device (2) 1 1007d 1007d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (20) 24 933d 953d
openbsd test error: timed out (3) 72 940d 943d
multicore test error: timed out (3) 150 940d 943d
kernel: protection fault trap, code=NUM 1 952d 952d
uvm_fault: x86_ipi_db (6) 1 974d 974d
panic: wakeup: p_stat iSeaBIOS (version NUM.NUM.NUM-google) 1 975d 975d
uvm_fault: x86_ipi_db (5) 1 979d 979d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (19) 3 988d 988d
uvm_fault: x86_ipi_db (4) 1 993d 993d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (18) 6 1012d 1012d
panic: acquiring blockable sleep lock with spinlock or critical section held (rwlock) kmmaplk 11 1110d 1273d
multicore build error (12) 1 1151d 1151d
uvm_fault: x86_ipi_db (3) 4 1158d 1175d
panic: runtime error: invalid memory address or nil pointer dereference (6) 276 1083d 1083d
openbsd test error: lost connection to test machine (2) 3 1096d 1096d
multicore test error: lost connection to test machine (2) 6 1096d 1096d
openbsd test error: lost connection to test machine 15 1096d 1096d
multicore test error: lost connection to test machine 36 1096d 1096d
corrupted report (4) 21 1192d 1361d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (17) 3 1142d 1142d
panic: runtime error: invalid memory address or nil pointer dereference (5) 10821 1135d 1136d
panic: runtime error: invalid memory address or nil pointer dereference (4) 2753 1136d 1136d
SYZFAIL: clone failed syz 1 1156d 1156d
multicore build error (11) 2 1158d 1158d
multicore build error (10) 2 1190d 1263d
openbsd build error (13) 1 1268d 1268d
uvm_fault: x86_ipi_db (2) 1 1208d 1208d
uvm_fault: x86_ipi_db 1 1211d 1211d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (16) 21 1214d 1218d
assert "(key.from) > 0 && (key.from) <= w_max_used_index && (key.from) < witness_count" failed in subr_witness.c 1 1314d 1314d
uvm_fault: strlen 1 1318d 1318d
panic: ffs_alloccg: map corrupted 1 1320d 1320d
uvm_fault: fdcopy 1 1324d 1324d
panic (2) syz 8 1238d 1248d
uvm_fault: in6_pcbhashlookup 1 1332d 1332d
panic 1 1251d 1251d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 (3) 9 1342d 1346d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (15) 6 1269d 1278d
assert "ifp != NULL" failed in if_ether.c (3) 2 1353d 1358d
uvm_fault: pmap_page_remove (2) 5 1358d 1534d
uvm_fault: nd6_dad_duplicated 1 1358d 1358d
soreceive 1 58 1364d 1520d
pool: free list modified: pvpl 17 1364d 1619d
panic: runtime error: invalid memory address or nil pointer dereference (3) 28 1366d 1632d
panic: m_copym0: m == NULL and not COPYALL 306 1362d 1626d
panic: m_copym0: short mbuf chain 214 1366d 1625d
witness: reversal: vmmaplk inode (2) C 46771 1277d 1591d
witness: reversal: inode netlock C 6 1278d 1278d
witness: reversal: netlock inode C 11 1278d 1278d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 (3) 3 1279d 1279d
uvm_fault: tun_dev_read (2) 71 1371d 1618d
uvm_fault: rtrequest 1 1371d 1371d
openbsd build error (12) 1 1283d 1283d
multicore build error (9) 1 1283d 1283d
uvm_fault: ml_dequeue 2 1372d 1414d
assert "dupe == NULL" failed in uvm_page.c (2) 1 1373d 1373d
panic: pr_find_pagehead: mbufpl: incorrect page (2) 20 1377d 1644d
uvm_fault: memcpy (3) 26 1377d 1435d
uvm_fault: sbdrop 44 1384d 1604d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (14) 6 1296d 1297d
assert "pg->wire_count == 1" failed in vfs_biomem.c (2) 9 1387d 1455d
panic: in6_cksum: out of data, len 64 1 1388d 1388d
uvm_fault: _bpf_mtap (2) 8 1391d 1406d
panic: unhandled af (3) syz 7 1388d 1397d
uvm_fault: ml_enlist (2) 1 1392d 1392d
uvm_fault: ml_purge (2) 8 1397d 1616d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (13) 39 1316d 1395d
panic: pr_find_pagehead: mbufpl: page header missing (3) 2 1401d 1434d
uvm_fault: m_free (2) 429 1371d 1621d
uvm_fault: pool_cache_get 518 1372d 1650d
pool: free list modified: anonpl 8 1405d 1627d
panic: amap_lookup: offset out of range 2 1408d 1455d
uvm_fault: 0x1:uvm_fault(ADDR, 0x1, 0, 1) -> e kernel: page fault trap, code=0Stopped at db_read_bytes 1 1319d 1319d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 (2) 45 1320d 1322d
panic: free: size too small 10 <= 4096 / 2 (ADDR) type devbuf 2 1411d 1416d
pool: free list modified: vcpupl 1 1412d 1412d
uvm_fault: bpf_mtap 10 1412d 1639d
pool: free list modified: filepl 1 1418d 1418d
pool: free list modified: shmpl (3) 1 1423d 1423d
uvm_fault: uvmfault_anonget 1 1426d 1426d
uvm_fault: unveil_find_cover 1 1427d 1427d
assert "mhead->m_flags & M_PKTHDR" failed in switchctl.c (2) 1 1428d 1428d
malloc: free list modified: free 12 1429d 1651d
uvm_fault: nd6_ns_output 1 1437d 1437d
uvm_fault: x86_send_ipi (2) 2 1438d 1450d
panic.go:LINE +0x72 (7) syz 3 1358d 1359d
assert "ifp != NULL" failed in rtsock.c (2) 26 1416d 1420d
panic: vref used where vget required (2) 2 1448d 1451d
panic: amap_lookups: offset out of range (2) 1 1449d 1449d
pool: free list modified: pffrnode 7 1449d 1587d
uvm_fault: uvm_map_clean 1 1450d 1450d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (8) 10 1403d 1474d
uvm_fault: igmp_leavegroup 1 1453d 1453d
syzkaller: make target failed: failed to run ["gmake" "target"]: exit status 2 3 1364d 1364d
panic(ADDR) at panic+0x164 1 1366d 1366d
openbsd boot error: can't ssh into the instance (3) 18 1367d 1367d
multicore boot error: can't ssh into the instance (3) 15 1367d 1367d
kernel: privileged instruction fault trap, code=0 (2) 1 1458d 1458d
assert "!_kernel_lock_held()" failed in kern_fork.c (2) 1 1458d 1458d
uvm_fault(ADDR, 0xa, 0, 1) -> e (2) 1 1372d 1372d
assert "!ISSET(rt->rt_flags, RTF_LOCAL)" failed in nd6.c (2) 1 1461d 1461d
no output from test machine (4) syz 14713 1376d 1382d
panic: amap_wipeout: corrupt amap 6 1467d 1555d
uvm_fault(ADDR, 0x7b8, 0, 1) -> e 1 1384d 1384d
uvm_fault(ADDR, 0x3, 0, 1) -> e (2) 1 1388d 1388d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 (2) 21 1390d 1392d
uvm_fault(ADDR, 0xa, 0, 1) -> e 1 1391d 1391d
pool: free list modified: tcpqe 4 1482d 1598d
uvm_fault(ADDR, 0x3, 0, 1) -> e 1 1393d 1393d
no output from test machine (2) C 89865 1397d 1450d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (12) 9 1405d 1408d
assert "sb->sb_cc == 0" failed in uipc_socket2.c 2 1487d 1531d
pool: free list modified: vmsppl 1 1399d 1399d
uvm_fault(ADDR, 0xbef, 0, 1) -> e (2) 1 1399d 1399d
uvm_fault(ADDR, 0x10b, 0, 1) -> e (2) 1 1405d 1405d
uvm_fault(ADDR, 0xbef, 0, 1) -> e 1 1406d 1406d
pool: free list modified: vnodes 1 1501d 1501d
uvm_fault(ADDR, 0x10b, 0, 1) -> e 1 1420d 1420d
kernel: page fault trap, code=0 (3) 1 1420d 1420d
panic: bad group arg size 29, should be <= 32 for &prog.GroupArg{ArgCommon:prog.ArgCommon{ref:LINEx328, dir:LINEx0}, Inn 1 1423d 1423d
assert "ps->ps_uvncount == 0" failed in kern_unveil.c (2) 1 1519d 1519d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (11) 6 1430d 1453d
pool: free list modified: uvmvnodes 1 1521d 1521d
pool: free list modified: sockpl 2 1523d 1533d
uvm_fault(ADDR, ADDR, 0, 1) -> e 1 1433d 1433d
panic: bad group arg size 29, should be <= 32 for &prog.GroupArg{ArgCommon:prog.ArgCommon{ref:LINEx2c0, dir:LINEx0}, Inn 1 1437d 1437d
uvm_fault: memcpy (2) syz 2168 1442d 1690d
uvm_fault: vio_start 1 1532d 1532d
uvm_fault: syscall 1 1535d 1535d
panic: broken type ref 1 1449d 1449d
pool: free list modified: mtagpl 1 1536d 1536d
assert "dupe == NULL" failed in uvm_page.c 4 1537d 1650d
pool: free list modified: art_table 1 1539d 1539d
assert "ifp != NULL" failed in if_ether.c (2) 1 1547d 1547d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 3 1457d 1457d
kqueue: knote !ACTIVE 2 1550d 1553d
uvm_fault: in4_cksum 1 1554d 1554d
panic: bad arg kind: <nil> (11) 1 1470d 1470d
kernel: privileged instruction fault trap, code=0 1 1562d 1562d
uvm_fault: ml_enlist 1 1562d 1562d
uvm_fault: tun_init 1 1563d 1563d
uvm_fault returns 14, GPA=ADDR C 2 1476d 1476d
panic: lock (kernel_lock) mbufpl not locked 1 1566d 1566d
panic: bad group arg size 0, should be <= 24 for &prog.GroupArg{ArgCommon:prog.ArgCommon{typ:(*prog.StructType)(ADDR)}, 1 1478d 1478d
panic.go:LINE +0x72 (5) 1 1481d 1481d
assert "pg->wire_count == 0" failed in uvm_page.c 1 1576d 1576d
panic: bad arg kind: <nil> (10) 1 1491d 1491d
panic: bad arg kind: <nil> (9) 1 1494d 1494d
pool: free list modified: art_heap4 2 1590d 1614d
uvm_fault: _bus_dmamap_load_mbuf 1 1593d 1593d
uvm_fault: m_copym 1 1594d 1594d
panic: bad arg kind: <nil> (8) 1 1506d 1506d
panic: pr_find_pagehead: mbufpl: page header missing (2) 1 1597d 1597d
pool: cpu free list modified: mcl2k 1 1597d 1597d
panic: bad arg kind: <nil> (7) 1 1510d 1510d
pool: free list modified: shmpl (2) 1 1604d 1604d
panic: bad arg kind: <nil> (6) 1 1515d 1515d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (7) 1 1516d 1516d
assert "mhead->m_flags & M_PKTHDR" failed in switchctl.c 1 1607d 1607d
pool: double put: mbufpl (2) 2 1608d 1640d
panic: attempt to access user address ADDR in supervisor mode 7 1613d 1663d
kernel: double fault trap, code=0 (2) syz 2 1639d 1639d
uvm_fault: rtable_satoplen (3) syz 237 1647d 1690d
panic: amap_lookups: offset out of range 1 1617d 1617d
panic: bad arg kind: <nil> (5) 1 1529d 1529d
uvm_fault: witness_checkorder (2) 1 1620d 1620d
panic: bad arg kind: &prog.IntType{IntTypeCommon:prog.IntTypeCommon{TypeCommon:prog.TypeCommon{TypeName:"int32", FldName 1 1532d 1532d
panic: bad arg kind (2) 2 1622d 1624d
assert "pg->wire_count == 1" failed in vfs_biomem.c 66 1623d 1948d
assert "ifp != NULL" failed in rtsock.c 2 1623d 1625d
panic.go:LINE +0x72 (4) 1 1534d 1534d
uvm_fault: x86_send_ipi 1 1627d 1627d
uvm_fault: VOP_ISLOCKED 1 1627d 1627d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (10) 3 1538d 1538d
panic: bad arg kind: <nil> (4) 1 1540d 1540d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (6) 1 1540d 1540d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST, va = ADDR, pa = ADDR (2) 1 1632d 1632d
uvm_fault: m_zero 1 1634d 1634d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (5) 1 1548d 1548d
panic: free: non-malloced addr ADDR type in_multi 4 1638d 1660d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (9) 3 1549d 1549d
uvm_fault: pfi_kif_update 6 1640d 1767d
uvm_fault: fifo_write 1 1640d 1640d
panic.go:LINE +0x72 (3) 1 1552d 1552d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (4) 2 1554d 1554d
panic: receive 1: so ADDR, so_type 3, sb_cc 176 1 1643d 1643d
panic: ffs_valloc: dup alloc 2 1643d 1647d
uvm_fault: 0ddb{1}> ddb{1}> set $lines = 0ddb{1}> set $maxwidth = 0ddb{1}> show panickernel page faultattempt to e 1 1556d 1556d
assert "!_kernel_lock_held()" failed in kern_fork.c 15 1647d 1908d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (8) 3 1560d 1560d
panic: WAaRcNqIuNirGi:n g SPbLl NoOcT kLaObWlEReE Ds lOeNe pSY SloCcAkL Lwi 2 t15h7 s79p3i4n4l5o0c kEX IorT 0c rai 1 1561d 1561d
uvm_fault 10 1653d 1668d
panic: free: size too small 24 <= 256 / 2 (ADDR) type in_multi 1 1659d 1659d
panic: bad arg kind: <nil> (3) 1 1570d 1570d
assert "cifp != NULL" failed in route.c 89 1633d 1687d
assert "rt->rt_ifa->ifa_ifp != NULL" failed in route.c 830 1632d 1673d
uvm_fault: in6_purgeaddr 1423 1632d 1673d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (7) 3 1574d 1574d
assert "ifp != NULL" failed in if_ether.c 208 1634d 1688d
assert "ifa == rt->rt_ifa" failed in nd6.c (2) 262 1634d 1671d
uvm_fault: tun_clone_destroy 1 1665d 1665d
panic: bad arg kind: <nil> (2) 1 1581d 1581d
panic: bad arg kind: <nil> 1 1585d 1585d
panic.go:LINE +0x72 (2) 1 1587d 1587d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (6) 3 1589d 1589d
uvm_fault: pmap_page_remove 7 1681d 1938d
openbsd build error (7) 1 1593d 1593d
multicore boot error: can't ssh into the instance (2) 96 1609d 1610d
openbsd boot error: can't ssh into the instance (2) 48 1609d 1610d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (3) 1 1609d 1609d
panic: vref used where vget required 1 1698d 1698d
panic: pfi_dynaddr_update 2 1715d 1795d
uvm_fault: pool_do_put 1 1633d 1633d
panic: runtime error: invalid memory address or nil pointer dereference (2) 1 1634d 1634d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST, va = ADDR, pa = ADDR 1 1638d 1638d
pool: free list modified: pdppl 1 1638d 1638d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (5) 3 1637d 1637d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (2) 1 1638d 1638d
panic.go:LINE +0x72 1 1639d 1639d
witness: reversal: inode fdlock C 523 1706d 1919d
panic: runtime error: invalid memory address or nil pointer dereference 1 1643d 1643d
panic: fifo_badop called C 8841 1645d 1979d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR 1 1659d 1659d
panic: ffs_blkfree: bad size 2 1760d 1764d
kernel: double fault trap, code=0 1 1807d 1807d
assert "la != NULL" failed in if_ether.c 3 1792d 1794d
uvm_fault: ml_purge 6 1791d 1797d
panic: in_cksum: out of data, len 63 1 1777d 1777d
uvm_fault: pfi_ifhead_RB_REMOVE 1 1798d 1798d
panic: uvm_fault_unwire_locked: address not in map (2) 7 1788d 1916d
panicConnection to ssh-serialport.googleapis.com closed by remote host. 1 1647d 1647d
uvm_fault: vfs_lookup 1 1832d 1832d
panic: Data modified on freelist: word 4 of object ADDR size 0x84 previous type free (ADDR != ADDR) 1 1658d 1658d
panic: Data modified on freelist: word 5 of object ADDR size 0xa0 previous type devbuf (0xd != ADDR) 1 1659d 1659d
panic: Data modified on freelist: word 5 of object ADDR size 0xc0 previous type devbuf (0xd != ADDR) 1 1665d 1665d
panic: Data modified on freelist: word 5 of object ADDR size 0x100 previous type devbuf (0xd != ADDR) syz 7 1659d 1688d
panic: attempt WtAoR eNIxNeGc:u tSeP uL seNOrT a LddOrWEesRsE D 0Ox0N iSYn SCsAuLpLe rv3i 4s orEX ImTo d0 e9 1 1659d 1659d
panic: bad arg kind 1 1670d 1670d
uvm_fault: ADDR: movl $ADDR,0(%rdi)ddb> ddb> set $lines = 0ddb> set $maxwidth = 0ddb> show panickernel page 1 1674d 1674d
uvm_fault: ADDR: jmp ADDR 1 1675d 1675d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (4) 9 1683d 1683d
uvm_fault: pmap_enter syz 3 1923d 1929d
panic: malloc: allocation tooWA RlNaIrNGge: ,SPL NOT LOWERED ON SYSCALL 3 4 EXIT 0 9 1 1702d 1702d
multicore test error: timed out 43 1820d 1858d
panic: amap_add: slot in use 2 1911d 1916d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (3) 12 1740d 1740d
panic: vput: v_writecount != 0 C 2 1742d 1742d
uvm_fault: _bpf_mtap 31 1953d 1975d
panic: pool_cache_item_magic_check: mcl2k cpu free list modified: item addr ADDR+24 ADDR!=ADDR 1 1956d 1956d
panic: rw_enter: vmmaplk locking against myself 3 1967d 1969d
uvm_fault: tun_dev_read 2 1967d 1968d
openbsd test error: timed out 19 1826d 1886d
panic: bpf_mcopy 1 1971d 1971d
multicore build error (4) 2 1815d 1815d
openbsd build error (6) 1 1815d 1815d
pool: double put: mcl2k 4 1973d 1975d
pool: double put: mcl64k 1 1974d 1974d
panic: missing alias 1 1978d 1978d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (2) 3 1808d 1808d
panic: bad dir C 1390 1814d 1815d
multicore build error (2) 10 1840d 1840d
openbsd build error (4) 5 1840d 1840d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 12 1849d 1849d
multicore build error 26 1850d 1851d
openbsd build error (3) 13 1850d 1851d
multicore boot error: can't ssh into the instance 6 1850d 1850d
openbsd boot error: can't ssh into the instance 3 1850d 1850d
panic: ffs_read: type 0 1 1987d 1987d
panic: serialport: VM disconnected. 1 1858d 1858d
panic: kserialport: VM disconnected. 1 1858d 1858d
panic: kernel diagnostic serialport: VM disconnected. 1 1859d 1859d
panic: kernel diserialport: VM disconnected. 1 1938d 1938d
openbsd build error 1 1903d 1903d
lost connection to test machine C 276 1951d 2025d
https://github.com/openbsd/src.git boot error: uvm_fault: memcmp 6 1956d 1956d
https://github.com/openbsd/src.git test error 16 1964d 1985d
multicore boot error: uvm_fault: smbios_find 12 1956d 1956d
kernel: kernel relinking fa 1 2045d 2025d
https://github.com/openbsd/src.git boot error 479 1979d 2025d
panic: sandbox escaping file name "../file0" 111 1979d 1980d
multicore test error (2) 3 1966d 1966d
multicore test error 3 1966d 1966d
panic: sandbox escaping file name "../file0/file0", Files are map[./file0:true ../file0:true] 1 1979d 1979d
panic: sandbox escaping file name "../file0", Files are map[../file0:true] 11 1979d 1979d
panic: sandbox escaping file name "../file0", Files are map[./file0:true ../file0:true] 1 1979d 1979d
panic: sandbox escaping file name "../file0/file0" 2 1979d 1979d