syzbot

 sign-in | mailing list | source | docs
🐞 Open [75] 🐞 Fixed [253] 🐞 Invalid [529] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

Out of 529 bugs, 279 were automatically obsoleted (2 due to revoked reproducers), 250 were invalidated by users.
Title Repro Cause bisect Fix bisect Count Last Reported
assert "ps->ps_uvncount == NUM" failed in kernWARNING: SPL NOT LOWERED ON SYSCALL NUM NUM EXIT NUM aStopped at save 1 100d 100d
assert "ps->ps_uvncount == NUM" failed in multicore/kernel/sys/kern/kern_unveil.c 1 100d 100d
uvm_fault: softclock (3) 1 101d 101d
openbsd build error (19) 18 113d 390d
assert "__mp_lock_held(&sched_lock, curcpu()) == NUM" failed in kern_lock.c (3) 4 118d 137d
uvm_fault: witness_checkorder (3) C 212 82d 335d
protection_fault: remrunqueue 2 123d 130d
assert "!ISSET(p->p_flag, P_WSLEEP) || p->p_stat == SSTOP" failed in kern_sched.c syz 81 120d 145d
assert "to->to_kclock == KCLOCK_UPTIME" failed in kern_timeout.c (2) 1 124d 124d
assert "dtlookup(unit) == NULL" failed in dt_dev.c (2) 1 125d 125d
panic:Connection to ssh-serialport.googleapis.com closed by remote host. 1 142d 142d
panic: uvm_fault_unwire_locked: WARaNdIdNGre:s sS PnotL iNn OmT aLpO 1 53d 53d
panic: vop_gepneanic: kernel diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/multicore/ker 1 144d 144d
uvm_fault: bpfioctl (3) 1 149d 149d
assert "cifp != NULL" failed in route.c (2) 18 151d 379d
assert "sc->sc_dev == NUM" failed in if_tun.c (3) 68 155d 644d
panic: ffs_update: bad link cnt 18 170d 672d
panic: vop_genConnection to ssh-serialport.googleapis.com closed by remote host. 1 171d 171d
panic: voConnection to ssh-serialport.googleapis.com closed by remote host. 1 178d 178d
uvm_fault: db_enter (4) 30 185d 527d
uvm_fault: igmp_leavegroup (4) 271 146d 613d
panic: vopp_ganenier:ic_ a 1 207d 207d
kernel: page fault trap, code=NUM (2) 1 212d 212d
uvm_fault: softclock_process_kclock_timeout 4 215d 298d
multicore test error: no output from test machine (2) 1 217d 217d
protection_fault: in6_addmulti (2) 4 220d 284d
pool: free list modified: fdescpl (3) 10 221d 514d
multicore build error (16) 252 221d 449d
panic: vop_Connection to ssh-serialport.googleapis.com closed by remote host. 1 223d 223d
uvm_fault: NUM TID PID UID PRFLAGS PFLAGS CPU COMMANDNUM(NUM,NUM,NUM,NUM,49b,ADDR) at NUMtimeout_ru 1 223d 223d
assert "rw_write_held(uobj->vmobjlock)" failed in uvm_aobj.c 1 226d 226d
panic: vo (2) 1 139d 139d
assert "pg->wire_count == NUM" failed in vfs_biomem.c 10 233d 569d
protection_fault: fill_file (2) 2 235d 248d
panic: wakeup: p_stat is NUM (2) 4 236d 292d
panic: Non dma-reachable buffer at curaddr ADDR(raw) 1 244d 244d
uvm_fault: NUM TID PID UID PRFLAGS PFLAGS CPU COMMANDNUM(NUM,NUM,NUM,NUM,59d,ADDR) at NUMtimeout_ru 1 244d 244d
protection_fault: __llvm_retpoline_r11 (2) 1 245d 245d
openbsd test error: SYZFATAL: BUG: got no coverage: 2405 219d 294d
multicore test error: SYZFATAL: BUG: got no coverage: 4785 219d 294d
uvm_fault: kcov_remote_enter 3 251d 368d
uvm_fault: ffs2_balloc (2) 3 258d 327d
panic: missing alias (3) 1 260d 260d
assert "to->to_kclock == KCLOCK_UPTIME" failed in kern_timeout.c 1 265d 265d
uvm_fault: softclock (2) 2 270d 282d
openbsd boot error: can't ssh into the instance (5) 1 270d 270d
uvm_fault: NUM TID PID UID PRFLAGS PFLAGS CPU COMMAND*ADDR NUM NUM NUM ADDR NUM 1 280d 280d
panic: voWARNpI_NgGe:n SePLr iNc_ObT adLOoWpE 1 199d 199d
uvm_fault: NUM TID PID UID PRFLAGS PFLAGS CPU COMMANDNUM(NUM,NUM,NUM,NUM,58b,ADDR) at NUMtimeout_ru 1 291d 291d
panic: vpoapn_giecn: ekrice_brnadelop 1 202d 202d
uvm_fault: NUM TID PID UID PRFLAGS PFLAGS CPU COMMAND*ADDR NUM NUM 0x2 ADDR 0K syz 1 296d 296d
syzkaller: make target failed: failed to run ["gmake" "target"]: exit status 2 (2) 12 219d 220d
assert "((flags & PGO_LOCKED) != NUM && rw_lock_held(uobj->vmobjlock)) || (flags & PGO_LOCKED) == NUM" failed in uvm_vno (2) 1 326d 326d
panic: vputonfreelist: lock count is not zero (2) 1 333d 333d
panic: malloc: out of space in kmem_map (2) 1 336d 336d
protection_fault: done_flush 81 345d 702d
assert "dupe == NULL" failed in uvm_page.c (3) 25 348d 718d
assert "ps->ps_uvncount == NUM" failed in kern_unveil.c (2) 5 352d 563d
assert "ifa == rt->rt_ifa" failed in nd6.c (4) 1 353d 353d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 (4) 63 352d 401d
panic: pr_find_pagehead: pdppl: incorrect page 1 367d 367d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 (4) 9 373d 373d
assert "d->bd_in_uiomove == NUM" failed in bpf.c 1 373d 373d
uvm_fault: savectx 1 373d 373d
openbsd boot error: can't ssh into the instance (4) 28 374d 414d
assert "!_kernel_lock_held()" failed in uvm_map.c 6 376d 538d
assert "__mp_lock_held(&sched_lock, curcpu()) == NUM" failed in kern_lock.c (2) 1 378d 378d
pool: free list modified: inpcb (2) 2 379d 433d
panic: vo 1 291d 291d
uvm_fault: uvm_map_teardown 1 384d 384d
panic: ufsdirhash_lookup: bad offset in hash array (2) 1 384d 384d
panic: acquiring blockable sleep lock with spinlock or critical section held (rwlock) vmmaplk (2) 1 385d 385d
multicore test error: no output from test machine 1 387d 387d
malloc: free list modified: counters 9 389d 649d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte ADDR (3) 3 392d 417d
protection_fault: fill_file 2 403d 430d
uvm_fault: hardclock (4) 1 404d 404d
multicore boot error: can't ssh into the instance (4) 51 374d 375d
pool: free list modified: pdppl (3) 1 407d 407d
uvm_fault: pool_gc_pages 4 410d 597d
witness: lock_object uninitialized: ADDR (2) 1 410d 410d
uvm_fault: softclock 1 410d 410d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (21) 12 411d 423d
protection_fault: __llvm_retpoline_r11 1 412d 412d
uvm_fault: pool_do_get (2) 2 413d 436d
uvm_fault: rw_enter 1 416d 416d
panic: amap_pp_adjref: negative reference count (2) 1 417d 417d
assert "((flags & PGO_LOCKED) != NUM && rw_lock_held(uobj->vmobjlock)) || (flags & PGO_LOCKED) == NUM" failed in uvm_vno 1 419d 419d
uvm_fault: ufs_direnter 1 430d 430d
assert "bp->b_data != NULL" failed in vfs_biomem.c (3) 2 430d 446d
uvm_fault: bpfioctl (2) 2 431d 433d
panic: rw_enter: solock locking against myself 5 432d 519d
multicore test error: SYZFATAL: BUG: program execution failed: executor NUM: EOF (2) 78 405d 406d
openbsd test error: SYZFATAL: BUG: program execution failed: executor NUM: EOF 94 405d 410d
uvm_fault: __kernel_phys_end 1 435d 435d
panic: trap type NUM, code=NUM, pc=NUM (2) 1 446d 446d
protection_fault: in6_addmulti 1 446d 446d
panic: wakeup: p_stat is NUM 2 448d 470d
protection_fault: witness_checkorder 1 461d 461d
uvm_fault: NUM TID PID UID PRFLAGS PFLAGS CPU COMMAND*ADDR NUM NUM NUM ADDR 0K s 1 477d 477d
malloc: free list modified: free (3) 1 484d 484d
multicore test error: SYZFATAL: BUG: program execution failed: executor NUM: EOF 108 406d 407d
uvm_fault: km_free 6 509d 697d
panic:client_loop: send disconnect: Broken pipe 4 512d 651d
panic: vopclient_loop: send disconnect: Broken pipe (3) 3 515d 561d
panic: vopConnection to ssh-serialport.googleapis.com closed by remote host. 1 435d 435d
pool: free list modified: inpcb 2 524d 550d
pool: cpu free list modified: mbufpl (2) 1 527d 527d
protection_fault: lf_advlock (2) 4 531d 579d
pool: free list modified: art_heap4 (3) 1 538d 538d
uvm_fault: solock 1 539d 539d
panic: trap type NUM, code=NUM, pc=NUM 1 543d 543d
uvm_fault: hardclock (3) 1 547d 547d
assert "pmap->pm_type != PMAP_TYPE_EPT" failed in pmap.c 1 550d 550d
panic: tcpp_nucp t 1 461d 461d
pool: free list modified: bufpl 1 551d 551d
panic: vop_gene 1 461d 461d
panic: vop_generic_bclient_loop: send disconnect: Broken pipe 1 463d 463d
panic: vop_generic_bapdoapn 1 471d 471d
kernel: page fault trap, code=NUM syz 1 470d 470d
panic: vop_client_loop: send disconnect: Broken pipe (2) 1 478d 478d
panic: vop_gpeanneicri:c _kbeardonpe 1 479d 479d
panic: vop_geneclient_loop: send disconnect: Broken pipe 1 474d 474d
panic: voclient_loop: send disconnect: Broken pipe 1 560d 560d
protection_fault: tun_enqueue 1 560d 560d
assert "bp->b_data != NULL" failed in vfs_biomem.c (2) 2 561d 613d
witness: lock_object uninitialized: ADDR 71 566d 706d
panic: ufsdirhash_lookup: bad offset in hash array 1 566d 566d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte ADDR (2) 1 569d 569d
panic: vop_client_loop: send disconnect: Broken pipe 1 482d 482d
panic: vop_generic_bpaadonipc 1 487d 487d
pool: free list modified: sockpl (2) 3 578d 634d
malloc: free list modified: free (2) 1 584d 584d
SYZFAIL: ioctl remote attach failed (4) 68 587d 701d
uvm_fault: pmap_page_remove (4) 1 591d 591d
protection_fault: pool_do_put 1 604d 604d
panic: vpopa_ngiecn:kerericn_elba diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/setuid/k 1 523d 523d
panic: vpoanp_igc:en e r i c _ b ad op 1 524d 524d
panic: pmap_enter: PG_PVLIST mapping with unmanaged page: va ADDR, opte ADDR, pa ADDR 2 615d 691d
panic: pool_do_get: pfiaddrpl: page empty 1 615d 615d
panic: vop_generclient_loop: send disconnect: Broken pipe 1 529d 529d
uvm_fault: putc 2 620d 623d
uvm_fault: pf_anchor_global_RB_INSERT_COLOR 1 621d 621d
panic: vop_pganeince:ri kce_rbandelo p 1 540d 540d
panic: vop_genericp_anbaidc:o p 1 539d 539d
panic: vop_generic_baclient_loop: send disconnect: Broken pipe 1 538d 538d
panic: runtime error: invalid memory address or nil pointer dereference (8) 1 540d 540d
uvm_fault: ffs2_balloc 1 627d 627d
assert "ifa == rt->rt_ifa" failed in nd6.c (3) 2 628d 654d
uvm_fault: VOP_ISLOCKED (2) 1 629d 629d
panic: vpoapn_igc:e kernel diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/setuid/kernel/s 1 541d 541d
panic: vclient_loop: send disconnect: Broken pipe (2) 1 540d 540d
uvm_fault: db_enter (3) 1 541d 541d
uvm_fault: pool_do_get 1 636d 636d
panic: vclient_loop: send disconnect: Broken pipe 1 547d 547d
uvm_fault: ktrops 1 637d 637d
panic: vop_genericp_baandiocp: 1 597d 597d
panic: vop_geneprianci_c: kernel diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/multicore 1 560d 560d
panic: broken type ref (3) 1 551d 551d
panic: vop_generic_badpoapn 1 550d 550d
panic: vop_genepranici_c:bakdeorpn 1 552d 552d
uvm_fault: memcpy (4) 2 640d 709d
multicore test error: SYZFATAL: BUG: program execution failed: bad reply magic ADDR 1 558d 558d
openbsd test error: SYZFATAL: BUG: program execution failed: bad reply magic ADDR 3 558d 558d
assert "la != NULL" failed in if_ether.c (2) 1 647d 647d
protection_fault: sys_msgrcv 1 653d 653d
panic: vop_geneprainci_cb:a kdeoprn 1 653d 653d
panic:p a nic: kernel diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/setuid/kernel/sys/ke 1 565d 565d
openbsd build error (18) 1 565d 565d
uvm_fault: db_enter (2) 1 571d 571d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte ADDR 3 662d 712d
panic: vpoapn_igc:en keerricn_elba d o dpi 1 662d 662d
kernel: privileged instruction fault trap, code=NUM 1 664d 664d
uvm_fault: hardclock (2) 1 666d 666d
panic: vop_generic_bad 1 578d 578d
panic: vop_genclient_loop: send disconnect: Broken pipe (2) 1 583d 583d
kernel: protection fault trap, code=NUM (4) 1 584d 584d
panic: vop_genclient_loop: send disconnect: Broken pipe 1 585d 585d
panic: vop_generic_client_loop: send disconnect: Broken pipe 1 586d 586d
uvm_fault: ffs_nodealloccg 1 678d 678d
assert "dtlookup(unit) == NULL" failed in dt_dev.c 1 679d 679d
panic: vop_generic_pbaandiopc 1 589d 589d
pool: free list modified: fdescpl 1 681d 681d
assert "ifp != NULL" failed in if_ether.c (4) 2 681d 726d
panic: vopclient_loop: send disconnect: Broken pipe (2) 1 593d 593d
assert "ps->ps_uvncount == NUM" failed in kern_unveil.c 2 693d 706d
panic: pmap_remove_ptes: managed page without PG_PVLIST: va ADDR, opte ADDR 1 703d 703d
assert "bp->b_data != NULL" failed in vfs_biomem.c 1 704d 704d
panic: runtime error: invalid memory address or nil pointer dereference (7) 1 705d 705d
panic: missing alias (2) 2 705d 706d
panic: vref used where vget required (3) 1 706d 706d
panic: client_loop: send disconnect: Broken pipe (2) 1 616d 616d
panic: vop_generic_WbAaRdNopI 1 620d 620d
panic: apcaqniuci:r kinegr nbleol c kdaiblage snloesteipc laosscke r t io n " ! _ ke r n e l_ l o wcikt_hh s 1 620d 620d
panic: acqupirainincg: b lo c kkaerblneel s l e ep l o c k d i a gwintohs tsipc i nl oc k o r c r it i c a l 1 620d 620d
panic: vop_gclient_loop: send disconnect: Broken pipe 1 620d 620d
panic: acquipraniincg: k e brnleolck daibaleg nsolseteip lc oacsks weirttiho n s "pi!nl_okecrkn oelr_ l corcik_thiec 1 621d 621d
panic: acpquainriic:n g bl o ck a b le s l e e p l o c k w i t h s p in l o c k o r c ri t i ca l s 1 621d 621d
panic: acquiring blpocankaicb:l e s l e keerp lnoecl k w i t h s p i nl oc k o r cr i t ic a l s e c ti o n 1 621d 621d
panic: apcaqnuiic:ri nkg ebrloncekla b l e sl ee p l o c k w i t h s p i n l oc k o r cr i ti c a l 1 621d 621d
panic: acquiring blockable sleep lock with spinlock or criticapl saneictci:o nk ehrenled (lk deriangenlo_lsotickc) 1 621d 621d
panic: acquiring blocpkaanbilec: k er snleele p lo c k w i th s p i nl o c k or c r i ti ca l s ec t 1 621d 621d
kernel: protection fault trap, code=NUM (3) 1 621d 621d
panic: acquirpinagni c :b l koecrknaebll ed silageneop slotickc a ss e r t i o n " ! _ k e r n el _ l o ckwi_t 1 621d 621d
panic: acquiring bplaoncikca:b l e sl e e p l okcek rwnielt h s p i n dloicak gonro scrtiitci c a l s e cati 1 621d 621d
panic: acquiring blockabplaen i sc:le e p l kocek rn e l d ia g no s t i wci t ha s s e r t i o n "s!_pkienlro 1 621d 621d
panic: acquiringp abnlioc:c k ab l e sl e e p lo c k w it h s p i n l oc k o rk er n e l d i agn o s 1 622d 622d
panic: acpqauniicr:in g bl kocerknaeblle d ia g no s t i cs alseseeprt i lonoc k w it"h!_ k seprninell_olckoc 1 622d 622d
panic: acquirinpgan bilco:c kkaeblrne esll e ep lo ck wi t h s p in l oc k o r c r i ti c a l s ec t 1 622d 622d
panic: acquiring blockablep a ni c : k er ne l d ia gn o s t i c as s e r stleieopn l oc k w i t h s 1 622d 622d
panic: acquiring bl o c kpaablniec s:le e p l o c k wi t h s p i n l o c k o r c ri t i c a l s e c t i 1 622d 622d
panic: apcqauniircin:g b lkeorcknaelbldei saglenoepst ilc o c k w i th sp i n l o c k a s s oerrt ciorint i"c! 1 622d 622d
kernel: protection fSeaBIOS (version NUM.NUM.NUM-google) syz 1 627d 627d
panic: vop_generic_bado 1 631d 631d
panic: bad dir (2) 44 688d 700d
pool: free list modified: pdppl (2) 1 724d 724d
panic: client_loop: send disconnect: Broken pipe 1 649d 649d
assert "next != NULL && next->start <= entry->end" failed in uvm_fault.c (2) syz 2 719d 719d
witness: reversal: lock order data missing (2) C 173 784d 933d
openbsd build error (16) 1 655d 655d
multicore boot error: witness: reversal: vmmaplk inode 60 656d 656d
uvm_fault: pmap_page_remove (3) 1 660d 660d
multicore boot error: kernel: protection fault trap, code=NUM 57 660d 661d
panic: acquiring blockable sleep lock with spinlock or critical section held (rwlock) kmmaplk (2) 2 755d 816d
panic: vopclient_loop: send disconnect: Broken pipe 1 674d 674d
panic: vop_generipac_nibac:do kpe 1 675d 675d
panic: vop 1 682d 682d
SYZFAIL: tun: can't open device (3) 86 688d 688d
SYZFAIL: tun_id out of range (2) 182 688d 688d
panic: trap type NUM, code=NUM, pc=ADDR 1 698d 698d
kernel: protection fault trap, code=NUM (2) C 16 703d 726d
panic: 1 702d 702d
SYZFAIL: dup2(NUM, kInPipeFd) failed syz 4 708d 726d
SYZFAIL: tun_id out of range 109 710d 710d
panic: vop_generic_badop 1 791d 791d
multicore build error (14) 58 713d 715d
kernel: double fault trap, code=NUM 1 713d 713d
SYZFAIL: ioctl remote attach failed (2) 6 714d 733d
uvm_fault: hardclock 1 816d 816d
SYZFAIL: open of /dev/kcov failed 3 730d 730d
SYZFAIL: ioctl remote attach failed 3 832d 884d
kernel: page fault trap, code=0 (4) 2 833d 861d
SYZFAIL: tun: can't open device (2) 1 862d 862d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (20) 24 788d 807d
openbsd test error: timed out (3) 72 794d 797d
multicore test error: timed out (3) 150 794d 797d
kernel: protection fault trap, code=NUM 1 807d 807d
uvm_fault: x86_ipi_db (6) 1 829d 829d
panic: wakeup: p_stat iSeaBIOS (version NUM.NUM.NUM-google) 1 830d 830d
uvm_fault: x86_ipi_db (5) 1 833d 833d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (19) 3 843d 843d
uvm_fault: x86_ipi_db (4) 1 847d 847d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (18) 6 866d 867d
panic: acquiring blockable sleep lock with spinlock or critical section held (rwlock) kmmaplk 11 964d 1128d
multicore build error (12) 1 1005d 1005d
uvm_fault: x86_ipi_db (3) 4 1012d 1029d
panic: runtime error: invalid memory address or nil pointer dereference (6) 276 937d 937d
openbsd test error: lost connection to test machine (2) 3 950d 950d
multicore test error: lost connection to test machine (2) 6 950d 950d
openbsd test error: lost connection to test machine 15 950d 951d
multicore test error: lost connection to test machine 36 950d 951d
corrupted report (4) 21 1047d 1215d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (17) 3 997d 997d
panic: runtime error: invalid memory address or nil pointer dereference (5) 10821 990d 990d
panic: runtime error: invalid memory address or nil pointer dereference (4) 2753 990d 990d
SYZFAIL: clone failed syz 1 1011d 1011d
multicore build error (11) 2 1012d 1012d
multicore build error (10) 2 1044d 1117d
openbsd build error (13) 1 1122d 1122d
uvm_fault: x86_ipi_db (2) 1 1063d 1063d
uvm_fault: x86_ipi_db 1 1066d 1066d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (16) 21 1068d 1073d
assert "(key.from) > 0 && (key.from) <= w_max_used_index && (key.from) < witness_count" failed in subr_witness.c 1 1169d 1169d
uvm_fault: strlen 1 1173d 1173d
panic: ffs_alloccg: map corrupted 1 1174d 1174d
uvm_fault: fdcopy 1 1178d 1178d
panic (2) syz 8 1093d 1102d
uvm_fault: in6_pcbhashlookup 1 1186d 1186d
panic 1 1105d 1105d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 (3) 9 1197d 1201d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (15) 6 1124d 1133d
assert "ifp != NULL" failed in if_ether.c (3) 2 1208d 1212d
uvm_fault: pmap_page_remove (2) 5 1212d 1389d
uvm_fault: nd6_dad_duplicated 1 1212d 1212d
soreceive 1 58 1218d 1374d
pool: free list modified: pvpl 17 1219d 1474d
panic: runtime error: invalid memory address or nil pointer dereference (3) 28 1220d 1486d
panic: m_copym0: m == NULL and not COPYALL 306 1217d 1481d
panic: m_copym0: short mbuf chain 214 1221d 1480d
witness: reversal: vmmaplk inode (2) C 46771 1132d 1446d
witness: reversal: inode netlock C 6 1132d 1132d
witness: reversal: netlock inode C 11 1132d 1132d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 (3) 3 1133d 1133d
uvm_fault: tun_dev_read (2) 71 1226d 1473d
uvm_fault: rtrequest 1 1226d 1226d
openbsd build error (12) 1 1137d 1137d
multicore build error (9) 1 1137d 1137d
uvm_fault: ml_dequeue 2 1227d 1269d
assert "dupe == NULL" failed in uvm_page.c (2) 1 1227d 1227d
panic: pr_find_pagehead: mbufpl: incorrect page (2) 20 1231d 1498d
uvm_fault: memcpy (3) 26 1232d 1289d
uvm_fault: sbdrop 44 1239d 1458d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (14) 6 1150d 1151d
assert "pg->wire_count == 1" failed in vfs_biomem.c (2) 9 1241d 1309d
panic: in6_cksum: out of data, len 64 1 1243d 1243d
uvm_fault: _bpf_mtap (2) 8 1246d 1261d
panic: unhandled af (3) syz 7 1242d 1251d
uvm_fault: ml_enlist (2) 1 1247d 1247d
uvm_fault: ml_purge (2) 8 1252d 1470d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (13) 39 1171d 1250d
panic: pr_find_pagehead: mbufpl: page header missing (3) 2 1256d 1289d
uvm_fault: m_free (2) 429 1226d 1475d
uvm_fault: pool_cache_get 518 1227d 1505d
pool: free list modified: anonpl 8 1259d 1481d
panic: amap_lookup: offset out of range 2 1262d 1309d
uvm_fault: 0x1:uvm_fault(ADDR, 0x1, 0, 1) -> e kernel: page fault trap, code=0Stopped at db_read_bytes 1 1174d 1174d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 (2) 45 1175d 1177d
panic: free: size too small 10 <= 4096 / 2 (ADDR) type devbuf 2 1265d 1270d
pool: free list modified: vcpupl 1 1266d 1266d
uvm_fault: bpf_mtap 10 1266d 1494d
pool: free list modified: filepl 1 1273d 1273d
pool: free list modified: shmpl (3) 1 1278d 1278d
uvm_fault: uvmfault_anonget 1 1281d 1281d
uvm_fault: unveil_find_cover 1 1282d 1282d
assert "mhead->m_flags & M_PKTHDR" failed in switchctl.c (2) 1 1283d 1283d
malloc: free list modified: free 12 1284d 1506d
uvm_fault: nd6_ns_output 1 1291d 1291d
uvm_fault: x86_send_ipi (2) 2 1293d 1305d
panic.go:LINE +0x72 (7) syz 3 1212d 1213d
assert "ifp != NULL" failed in rtsock.c (2) 26 1271d 1274d
panic: vref used where vget required (2) 2 1302d 1306d
panic: amap_lookups: offset out of range (2) 1 1303d 1303d
pool: free list modified: pffrnode 7 1303d 1442d
uvm_fault: uvm_map_clean 1 1305d 1305d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (8) 10 1257d 1328d
uvm_fault: igmp_leavegroup 1 1307d 1307d
syzkaller: make target failed: failed to run ["gmake" "target"]: exit status 2 3 1218d 1218d
panic(ADDR) at panic+0x164 1 1221d 1221d
openbsd boot error: can't ssh into the instance (3) 18 1221d 1222d
multicore boot error: can't ssh into the instance (3) 15 1221d 1222d
kernel: privileged instruction fault trap, code=0 (2) 1 1312d 1312d
assert "!_kernel_lock_held()" failed in kern_fork.c (2) 1 1312d 1312d
uvm_fault(ADDR, 0xa, 0, 1) -> e (2) 1 1227d 1227d
assert "!ISSET(rt->rt_flags, RTF_LOCAL)" failed in nd6.c (2) 1 1316d 1316d
no output from test machine (4) syz 14713 1230d 1237d
panic: amap_wipeout: corrupt amap 6 1321d 1410d
uvm_fault(ADDR, 0x7b8, 0, 1) -> e 1 1239d 1239d
uvm_fault(ADDR, 0x3, 0, 1) -> e (2) 1 1243d 1243d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 (2) 21 1245d 1247d
uvm_fault(ADDR, 0xa, 0, 1) -> e 1 1245d 1245d
pool: free list modified: tcpqe 4 1336d 1453d
uvm_fault(ADDR, 0x3, 0, 1) -> e 1 1248d 1248d
no output from test machine (2) C 89865 1251d 1304d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (12) 9 1260d 1262d
assert "sb->sb_cc == 0" failed in uipc_socket2.c 2 1342d 1386d
pool: free list modified: vmsppl 1 1253d 1253d
uvm_fault(ADDR, 0xbef, 0, 1) -> e (2) 1 1253d 1253d
uvm_fault(ADDR, 0x10b, 0, 1) -> e (2) 1 1259d 1259d
uvm_fault(ADDR, 0xbef, 0, 1) -> e 1 1261d 1261d
pool: free list modified: vnodes 1 1355d 1355d
uvm_fault(ADDR, 0x10b, 0, 1) -> e 1 1274d 1274d
kernel: page fault trap, code=0 (3) 1 1275d 1275d
panic: bad group arg size 29, should be <= 32 for &prog.GroupArg{ArgCommon:prog.ArgCommon{ref:LINEx328, dir:LINEx0}, Inn 1 1278d 1278d
assert "ps->ps_uvncount == 0" failed in kern_unveil.c (2) 1 1373d 1373d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (11) 6 1284d 1307d
pool: free list modified: uvmvnodes 1 1375d 1375d
pool: free list modified: sockpl 2 1377d 1388d
uvm_fault(ADDR, ADDR, 0, 1) -> e 1 1287d 1287d
panic: bad group arg size 29, should be <= 32 for &prog.GroupArg{ArgCommon:prog.ArgCommon{ref:LINEx2c0, dir:LINEx0}, Inn 1 1291d 1291d
uvm_fault: memcpy (2) syz 2168 1296d 1545d
uvm_fault: vio_start 1 1387d 1387d
uvm_fault: syscall 1 1389d 1389d
panic: broken type ref 1 1304d 1304d
pool: free list modified: mtagpl 1 1391d 1391d
assert "dupe == NULL" failed in uvm_page.c 4 1392d 1505d
pool: free list modified: art_table 1 1394d 1394d
assert "ifp != NULL" failed in if_ether.c (2) 1 1401d 1401d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 3 1312d 1312d
kqueue: knote !ACTIVE 2 1404d 1408d
uvm_fault: in4_cksum 1 1408d 1408d
panic: bad arg kind: <nil> (11) 1 1324d 1324d
kernel: privileged instruction fault trap, code=0 1 1416d 1416d
uvm_fault: ml_enlist 1 1417d 1417d
uvm_fault: tun_init 1 1417d 1417d
uvm_fault returns 14, GPA=ADDR C 2 1330d 1330d
panic: lock (kernel_lock) mbufpl not locked 1 1421d 1421d
panic: bad group arg size 0, should be <= 24 for &prog.GroupArg{ArgCommon:prog.ArgCommon{typ:(*prog.StructType)(ADDR)}, 1 1333d 1333d
panic.go:LINE +0x72 (5) 1 1336d 1336d
assert "pg->wire_count == 0" failed in uvm_page.c 1 1431d 1431d
panic: bad arg kind: <nil> (10) 1 1346d 1346d
panic: bad arg kind: <nil> (9) 1 1349d 1349d
pool: free list modified: art_heap4 2 1444d 1468d
uvm_fault: _bus_dmamap_load_mbuf 1 1447d 1447d
uvm_fault: m_copym 1 1449d 1449d
panic: bad arg kind: <nil> (8) 1 1361d 1361d
panic: pr_find_pagehead: mbufpl: page header missing (2) 1 1451d 1451d
pool: cpu free list modified: mcl2k 1 1452d 1452d
panic: bad arg kind: <nil> (7) 1 1365d 1365d
pool: free list modified: shmpl (2) 1 1459d 1459d
panic: bad arg kind: <nil> (6) 1 1370d 1370d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (7) 1 1371d 1371d
assert "mhead->m_flags & M_PKTHDR" failed in switchctl.c 1 1462d 1462d
pool: double put: mbufpl (2) 2 1463d 1494d
panic: attempt to access user address ADDR in supervisor mode 7 1467d 1517d
kernel: double fault trap, code=0 (2) syz 2 1494d 1494d
uvm_fault: rtable_satoplen (3) syz 237 1502d 1545d
panic: amap_lookups: offset out of range 1 1471d 1471d
panic: bad arg kind: <nil> (5) 1 1384d 1384d
uvm_fault: witness_checkorder (2) 1 1474d 1474d
panic: bad arg kind: &prog.IntType{IntTypeCommon:prog.IntTypeCommon{TypeCommon:prog.TypeCommon{TypeName:"int32", FldName 1 1387d 1387d
panic: bad arg kind (2) 2 1477d 1479d
assert "pg->wire_count == 1" failed in vfs_biomem.c 66 1477d 1802d
assert "ifp != NULL" failed in rtsock.c 2 1478d 1479d
panic.go:LINE +0x72 (4) 1 1388d 1388d
uvm_fault: x86_send_ipi 1 1482d 1482d
uvm_fault: VOP_ISLOCKED 1 1482d 1482d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (10) 3 1392d 1392d
panic: bad arg kind: <nil> (4) 1 1394d 1394d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (6) 1 1395d 1395d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST, va = ADDR, pa = ADDR (2) 1 1486d 1486d
uvm_fault: m_zero 1 1488d 1488d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (5) 1 1402d 1402d
panic: free: non-malloced addr ADDR type in_multi 4 1492d 1514d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (9) 3 1404d 1404d
uvm_fault: pfi_kif_update 6 1495d 1622d
uvm_fault: fifo_write 1 1495d 1495d
panic.go:LINE +0x72 (3) 1 1406d 1406d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (4) 2 1408d 1409d
panic: receive 1: so ADDR, so_type 3, sb_cc 176 1 1497d 1497d
panic: ffs_valloc: dup alloc 2 1498d 1501d
uvm_fault: 0ddb{1}> ddb{1}> set $lines = 0ddb{1}> set $maxwidth = 0ddb{1}> show panickernel page faultattempt to e 1 1411d 1411d
assert "!_kernel_lock_held()" failed in kern_fork.c 15 1502d 1763d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (8) 3 1415d 1415d
panic: WAaRcNqIuNirGi:n g SPbLl NoOcT kLaObWlEReE Ds lOeNe pSY SloCcAkL Lwi 2 t15h7 s79p3i4n4l5o0c kEX IorT 0c rai 1 1415d 1415d
uvm_fault 10 1508d 1523d
panic: free: size too small 24 <= 256 / 2 (ADDR) type in_multi 1 1513d 1513d
panic: bad arg kind: <nil> (3) 1 1425d 1424d
assert "cifp != NULL" failed in route.c 89 1487d 1542d
assert "rt->rt_ifa->ifa_ifp != NULL" failed in route.c 830 1486d 1527d
uvm_fault: in6_purgeaddr 1423 1487d 1527d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (7) 3 1428d 1428d
assert "ifp != NULL" failed in if_ether.c 208 1488d 1543d
assert "ifa == rt->rt_ifa" failed in nd6.c (2) 262 1489d 1526d
uvm_fault: tun_clone_destroy 1 1519d 1519d
panic: bad arg kind: <nil> (2) 1 1436d 1436d
panic: bad arg kind: <nil> 1 1439d 1439d
panic.go:LINE +0x72 (2) 1 1442d 1442d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (6) 3 1443d 1443d
uvm_fault: pmap_page_remove 7 1535d 1792d
openbsd build error (7) 1 1447d 1447d
multicore boot error: can't ssh into the instance (2) 96 1463d 1465d
openbsd boot error: can't ssh into the instance (2) 48 1463d 1465d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (3) 1 1463d 1463d
panic: vref used where vget required 1 1553d 1553d
panic: pfi_dynaddr_update 2 1570d 1650d
uvm_fault: pool_do_put 1 1487d 1487d
panic: runtime error: invalid memory address or nil pointer dereference (2) 1 1489d 1489d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST, va = ADDR, pa = ADDR 1 1492d 1492d
pool: free list modified: pdppl 1 1492d 1492d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (5) 3 1492d 1492d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (2) 1 1492d 1492d
panic.go:LINE +0x72 1 1493d 1493d
witness: reversal: inode fdlock C 523 1560d 1773d
panic: runtime error: invalid memory address or nil pointer dereference 1 1498d 1498d
panic: fifo_badop called C 8841 1499d 1834d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR 1 1514d 1514d
panic: ffs_blkfree: bad size 2 1614d 1618d
kernel: double fault trap, code=0 1 1662d 1662d
assert "la != NULL" failed in if_ether.c 3 1647d 1649d
uvm_fault: ml_purge 6 1645d 1651d
panic: in_cksum: out of data, len 63 1 1631d 1631d
uvm_fault: pfi_ifhead_RB_REMOVE 1 1652d 1652d
panic: uvm_fault_unwire_locked: address not in map (2) 7 1642d 1770d
panicConnection to ssh-serialport.googleapis.com closed by remote host. 1 1501d 1501d
uvm_fault: vfs_lookup 1 1686d 1686d
panic: Data modified on freelist: word 4 of object ADDR size 0x84 previous type free (ADDR != ADDR) 1 1513d 1513d
panic: Data modified on freelist: word 5 of object ADDR size 0xa0 previous type devbuf (0xd != ADDR) 1 1513d 1513d
panic: Data modified on freelist: word 5 of object ADDR size 0xc0 previous type devbuf (0xd != ADDR) 1 1520d 1520d
panic: Data modified on freelist: word 5 of object ADDR size 0x100 previous type devbuf (0xd != ADDR) syz 7 1513d 1543d
panic: attempt WtAoR eNIxNeGc:u tSeP uL seNOrT a LddOrWEesRsE D 0Ox0N iSYn SCsAuLpLe rv3i 4s orEX ImTo d0 e9 1 1513d 1513d
panic: bad arg kind 1 1524d 1524d
uvm_fault: ADDR: movl $ADDR,0(%rdi)ddb> ddb> set $lines = 0ddb> set $maxwidth = 0ddb> show panickernel page 1 1528d 1528d
uvm_fault: ADDR: jmp ADDR 1 1530d 1530d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (4) 9 1537d 1538d
uvm_fault: pmap_enter syz 3 1778d 1784d
panic: malloc: allocation tooWA RlNaIrNGge: ,SPL NOT LOWERED ON SYSCALL 3 4 EXIT 0 9 1 1557d 1557d
multicore test error: timed out 43 1675d 1712d
panic: amap_add: slot in use 2 1765d 1770d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (3) 12 1594d 1595d
panic: vput: v_writecount != 0 C 2 1596d 1596d
uvm_fault: _bpf_mtap 31 1808d 1830d
panic: pool_cache_item_magic_check: mcl2k cpu free list modified: item addr ADDR+24 ADDR!=ADDR 1 1811d 1811d
panic: rw_enter: vmmaplk locking against myself 3 1821d 1823d
uvm_fault: tun_dev_read 2 1822d 1823d
openbsd test error: timed out 19 1680d 1740d
panic: bpf_mcopy 1 1825d 1825d
multicore build error (4) 2 1669d 1669d
openbsd build error (6) 1 1669d 1669d
pool: double put: mcl2k 4 1827d 1829d
pool: double put: mcl64k 1 1828d 1828d
panic: missing alias 1 1832d 1832d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (2) 3 1663d 1663d
panic: bad dir C 1390 1668d 1669d
multicore build error (2) 10 1694d 1695d
openbsd build error (4) 5 1694d 1695d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 12 1703d 1704d
multicore build error 26 1704d 1705d
openbsd build error (3) 13 1704d 1705d
multicore boot error: can't ssh into the instance 6 1704d 1704d
openbsd boot error: can't ssh into the instance 3 1704d 1704d
panic: ffs_read: type 0 1 1842d 1842d
panic: serialport: VM disconnected. 1 1713d 1713d
panic: kserialport: VM disconnected. 1 1713d 1713d
panic: kernel diagnostic serialport: VM disconnected. 1 1713d 1713d
panic: kernel diserialport: VM disconnected. 1 1792d 1792d
openbsd build error 1 1757d 1757d
lost connection to test machine C 276 1805d 1879d
https://github.com/openbsd/src.git boot error: uvm_fault: memcmp 6 1811d 1811d
https://github.com/openbsd/src.git test error 16 1819d 1840d
multicore boot error: uvm_fault: smbios_find 12 1811d 1811d
kernel: kernel relinking fa 1 1900d 1879d
https://github.com/openbsd/src.git boot error 479 1834d 1879d
panic: sandbox escaping file name "../file0" 111 1834d 1835d
multicore test error (2) 3 1820d 1820d
multicore test error 3 1820d 1820d
panic: sandbox escaping file name "../file0/file0", Files are map[./file0:true ../file0:true] 1 1834d 1834d
panic: sandbox escaping file name "../file0", Files are map[../file0:true] 11 1834d 1834d
panic: sandbox escaping file name "../file0", Files are map[./file0:true ../file0:true] 1 1834d 1834d
panic: sandbox escaping file name "../file0/file0" 2 1834d 1834d