syzbot


Title Repro Cause bisect Fix bisect Count Last Reported
SYZFAIL: clone failed syz 1 3d04h 3d04h
multicore build error (11) 2 4d19h 4d19h
multicore build error (10) 2 36d 109d
openbsd build error (13) 1 114d 114d
uvm_fault: x86_ipi_db (2) 1 55d 55d
uvm_fault: x86_ipi_db 1 58d 58d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (16) 21 60d 65d
assert "(key.from) > 0 && (key.from) <= w_max_used_index && (key.from) < witness_count" failed in subr_witness.c 1 161d 161d
uvm_fault: strlen 1 165d 165d
panic: ffs_alloccg: map corrupted 1 166d 166d
uvm_fault: fdcopy 1 170d 170d
panic (2) syz 8 85d 94d
uvm_fault: in6_pcbhashlookup 1 178d 178d
panic 1 97d 97d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 (3) 9 189d 193d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (15) 6 116d 124d
assert "ifp != NULL" failed in if_ether.c (3) 2 199d 204d
uvm_fault: pmap_page_remove (2) 5 204d 381d
uvm_fault: nd6_dad_duplicated 1 204d 204d
soreceive 1 58 210d 366d
pool: free list modified: pvpl 17 211d 466d
panic: runtime error: invalid memory address or nil pointer dereference (3) 28 212d 478d
panic: m_copym0: m == NULL and not COPYALL 306 209d 473d
panic: m_copym0: short mbuf chain 214 213d 472d
witness: reversal: vmmaplk inode (2) C 46771 124d 438d
witness: reversal: inode netlock C 6 124d 124d
witness: reversal: netlock inode C 11 124d 124d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 (3) 3 125d 125d
uvm_fault: tun_dev_read (2) 71 218d 465d
uvm_fault: rtrequest 1 218d 218d
openbsd build error (12) 1 129d 129d
multicore build error (9) 1 129d 129d
uvm_fault: ml_dequeue 2 219d 261d
assert "dupe == NULL" failed in uvm_page.c (2) 1 219d 219d
panic: pr_find_pagehead: mbufpl: incorrect page (2) 20 223d 490d
uvm_fault: memcpy (3) 26 224d 281d
uvm_fault: sbdrop 44 231d 450d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (14) 6 142d 143d
assert "pg->wire_count == 1" failed in vfs_biomem.c (2) 9 233d 301d
panic: in6_cksum: out of data, len 64 1 235d 235d
uvm_fault: _bpf_mtap (2) 8 238d 253d
panic: unhandled af (3) syz 7 234d 243d
uvm_fault: ml_enlist (2) 1 239d 239d
uvm_fault: ml_purge (2) 8 244d 462d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (13) 39 163d 242d
panic: pr_find_pagehead: mbufpl: page header missing (3) 2 248d 281d
uvm_fault: m_free (2) 429 218d 467d
uvm_fault: pool_cache_get 518 219d 497d
pool: free list modified: anonpl 8 251d 473d
panic: amap_lookup: offset out of range 2 254d 301d
uvm_fault: 0x1:uvm_fault(ADDR, 0x1, 0, 1) -> e kernel: page fault trap, code=0Stopped at db_read_bytes 1 166d 166d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 (2) 45 167d 169d
panic: free: size too small 10 <= 4096 / 2 (ADDR) type devbuf 2 257d 262d
pool: free list modified: vcpupl 1 258d 258d
uvm_fault: bpf_mtap 10 258d 486d
pool: free list modified: filepl 1 265d 265d
pool: free list modified: shmpl (3) 1 270d 270d
uvm_fault: uvmfault_anonget 1 273d 273d
uvm_fault: unveil_find_cover 1 274d 274d
assert "mhead->m_flags & M_PKTHDR" failed in switchctl.c (2) 1 275d 275d
malloc: free list modified: free 12 276d 498d
uvm_fault: nd6_ns_output 1 283d 283d
uvm_fault: x86_send_ipi (2) 2 285d 297d
panic.go:LINE +0x72 (7) syz 3 204d 205d
assert "ifp != NULL" failed in rtsock.c (2) 26 263d 266d
panic: vref used where vget required (2) 2 294d 298d
panic: amap_lookups: offset out of range (2) 1 295d 295d
pool: free list modified: pffrnode 7 295d 433d
uvm_fault: uvm_map_clean 1 297d 297d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (8) 10 249d 320d
uvm_fault: igmp_leavegroup 1 299d 299d
syzkaller: make target failed: failed to run ["gmake" "target"]: exit status 2 3 210d 210d
panic(ADDR) at panic+0x164 1 212d 212d
openbsd boot error: can't ssh into the instance (3) 18 213d 214d
multicore boot error: can't ssh into the instance (3) 15 213d 214d
kernel: privileged instruction fault trap, code=0 (2) 1 304d 304d
assert "!_kernel_lock_held()" failed in kern_fork.c (2) 1 304d 304d
uvm_fault(ADDR, 0xa, 0, 1) -> e (2) 1 219d 219d
assert "!ISSET(rt->rt_flags, RTF_LOCAL)" failed in nd6.c (2) 1 308d 308d
no output from test machine (4) syz 14713 222d 228d
panic: amap_wipeout: corrupt amap 6 313d 402d
uvm_fault(ADDR, 0x7b8, 0, 1) -> e 1 231d 231d
uvm_fault(ADDR, 0x3, 0, 1) -> e (2) 1 235d 235d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 (2) 21 237d 239d
uvm_fault(ADDR, 0xa, 0, 1) -> e 1 237d 237d
pool: free list modified: tcpqe 4 328d 445d
uvm_fault(ADDR, 0x3, 0, 1) -> e 1 240d 240d
no output from test machine (2) C 89865 243d 296d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (12) 9 252d 254d
assert "sb->sb_cc == 0" failed in uipc_socket2.c 2 334d 378d
pool: free list modified: vmsppl 1 245d 245d
uvm_fault(ADDR, 0xbef, 0, 1) -> e (2) 1 245d 245d
uvm_fault(ADDR, 0x10b, 0, 1) -> e (2) 1 251d 251d
uvm_fault(ADDR, 0xbef, 0, 1) -> e 1 253d 253d
pool: free list modified: vnodes 1 347d 347d
uvm_fault(ADDR, 0x10b, 0, 1) -> e 1 266d 266d
kernel: page fault trap, code=0 (3) 1 267d 267d
panic: bad group arg size 29, should be <= 32 for &prog.GroupArg{ArgCommon:prog.ArgCommon{ref:LINEx328, dir:LINEx0}, Inn 1 270d 270d
assert "ps->ps_uvncount == 0" failed in kern_unveil.c (2) 1 365d 365d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (11) 6 276d 299d
pool: free list modified: uvmvnodes 1 367d 367d
pool: free list modified: sockpl 2 369d 379d
uvm_fault(ADDR, ADDR, 0, 1) -> e 1 279d 279d
panic: bad group arg size 29, should be <= 32 for &prog.GroupArg{ArgCommon:prog.ArgCommon{ref:LINEx2c0, dir:LINEx0}, Inn 1 283d 283d
uvm_fault: memcpy (2) syz 2168 288d 537d
uvm_fault: vio_start 1 379d 379d
uvm_fault: syscall 1 381d 381d
panic: broken type ref 1 296d 296d
pool: free list modified: mtagpl 1 383d 383d
assert "dupe == NULL" failed in uvm_page.c 4 384d 497d
pool: free list modified: art_table 1 386d 386d
assert "ifp != NULL" failed in if_ether.c (2) 1 393d 393d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 3 304d 304d
kqueue: knote !ACTIVE 2 396d 400d
uvm_fault: in4_cksum 1 400d 400d
panic: bad arg kind: <nil> (11) 1 316d 316d
kernel: privileged instruction fault trap, code=0 1 408d 408d
uvm_fault: ml_enlist 1 409d 409d
uvm_fault: tun_init 1 409d 409d
uvm_fault returns 14, GPA=ADDR C 2 322d 322d
panic: lock (kernel_lock) mbufpl not locked 1 413d 413d
panic: bad group arg size 0, should be <= 24 for &prog.GroupArg{ArgCommon:prog.ArgCommon{typ:(*prog.StructType)(ADDR)}, 1 325d 325d
panic.go:LINE +0x72 (5) 1 328d 328d
assert "pg->wire_count == 0" failed in uvm_page.c 1 423d 423d
panic: bad arg kind: <nil> (10) 1 338d 338d
panic: bad arg kind: <nil> (9) 1 341d 341d
pool: free list modified: art_heap4 2 436d 460d
uvm_fault: _bus_dmamap_load_mbuf 1 439d 439d
uvm_fault: m_copym 1 441d 441d
panic: bad arg kind: <nil> (8) 1 352d 352d
panic: pr_find_pagehead: mbufpl: page header missing (2) 1 443d 443d
pool: cpu free list modified: mcl2k 1 444d 444d
panic: bad arg kind: <nil> (7) 1 357d 357d
pool: free list modified: shmpl (2) 1 450d 450d
panic: bad arg kind: <nil> (6) 1 362d 362d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (7) 1 363d 363d
assert "mhead->m_flags & M_PKTHDR" failed in switchctl.c 1 454d 454d
pool: double put: mbufpl (2) 2 455d 486d
panic: attempt to access user address ADDR in supervisor mode 7 459d 509d
kernel: double fault trap, code=0 (2) syz 2 486d 486d
uvm_fault: rtable_satoplen (3) syz 237 493d 537d
panic: amap_lookups: offset out of range 1 463d 463d
panic: bad arg kind: <nil> (5) 1 376d 376d
uvm_fault: witness_checkorder (2) 1 466d 466d
panic: bad arg kind: &prog.IntType{IntTypeCommon:prog.IntTypeCommon{TypeCommon:prog.TypeCommon{TypeName:"int32", FldName 1 379d 379d
panic: bad arg kind (2) 2 469d 471d
assert "pg->wire_count == 1" failed in vfs_biomem.c 66 469d 794d
assert "ifp != NULL" failed in rtsock.c 2 470d 471d
panic.go:LINE +0x72 (4) 1 380d 380d
uvm_fault: x86_send_ipi 1 474d 474d
uvm_fault: VOP_ISLOCKED 1 474d 474d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (10) 3 384d 384d
panic: bad arg kind: <nil> (4) 1 386d 386d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (6) 1 387d 387d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST, va = ADDR, pa = ADDR (2) 1 478d 478d
uvm_fault: m_zero 1 480d 480d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (5) 1 394d 394d
panic: free: non-malloced addr ADDR type in_multi 4 484d 506d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (9) 3 396d 396d
uvm_fault: pfi_kif_update 6 487d 614d
uvm_fault: fifo_write 1 487d 487d
panic.go:LINE +0x72 (3) 1 398d 398d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (4) 2 400d 401d
panic: receive 1: so ADDR, so_type 3, sb_cc 176 1 489d 489d
panic: ffs_valloc: dup alloc 2 490d 493d
uvm_fault: 0ddb{1}> ddb{1}> set $lines = 0ddb{1}> set $maxwidth = 0ddb{1}> show panickernel page faultattempt to e 1 403d 403d
assert "!_kernel_lock_held()" failed in kern_fork.c 15 494d 755d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (8) 3 407d 407d
panic: WAaRcNqIuNirGi:n g SPbLl NoOcT kLaObWlEReE Ds lOeNe pSY SloCcAkL Lwi 2 t15h7 s79p3i4n4l5o0c kEX IorT 0c rai 1 407d 407d
uvm_fault 10 500d 515d
panic: free: size too small 24 <= 256 / 2 (ADDR) type in_multi 1 505d 505d
panic: bad arg kind: <nil> (3) 1 416d 416d
assert "cifp != NULL" failed in route.c 89 479d 534d
assert "rt->rt_ifa->ifa_ifp != NULL" failed in route.c 830 478d 519d
uvm_fault: in6_purgeaddr 1423 478d 519d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (7) 3 420d 420d
assert "ifp != NULL" failed in if_ether.c 208 480d 535d
assert "ifa == rt->rt_ifa" failed in nd6.c (2) 262 481d 518d
uvm_fault: tun_clone_destroy 1 511d 511d
panic: bad arg kind: <nil> (2) 1 428d 428d
panic: bad arg kind: <nil> 1 431d 431d
panic.go:LINE +0x72 (2) 1 433d 433d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (6) 3 435d 435d
uvm_fault: pmap_page_remove 7 527d 784d
openbsd build error (7) 1 439d 439d
multicore boot error: can't ssh into the instance (2) 96 455d 457d
openbsd boot error: can't ssh into the instance (2) 48 455d 456d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (3) 1 455d 455d
panic: vref used where vget required 1 545d 545d
panic: pfi_dynaddr_update 2 561d 642d
uvm_fault: pool_do_put 1 479d 479d
panic: runtime error: invalid memory address or nil pointer dereference (2) 1 481d 481d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST, va = ADDR, pa = ADDR 1 484d 484d
pool: free list modified: pdppl 1 484d 484d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (5) 3 484d 484d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (2) 1 484d 484d
panic.go:LINE +0x72 1 485d 485d
witness: reversal: inode fdlock C 523 552d 765d
panic: runtime error: invalid memory address or nil pointer dereference 1 490d 490d
panic: fifo_badop called C 8841 491d 826d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR 1 506d 506d
panic: ffs_blkfree: bad size 2 606d 610d
kernel: double fault trap, code=0 1 654d 654d
assert "la != NULL" failed in if_ether.c 3 639d 641d
uvm_fault: ml_purge 6 637d 643d
panic: in_cksum: out of data, len 63 1 623d 623d
uvm_fault: pfi_ifhead_RB_REMOVE 1 644d 644d
panic: uvm_fault_unwire_locked: address not in map (2) 7 634d 762d
panicConnection to ssh-serialport.googleapis.com closed by remote host. 1 493d 493d
uvm_fault: vfs_lookup 1 678d 678d
panic: Data modified on freelist: word 4 of object ADDR size 0x84 previous type free (ADDR != ADDR) 1 505d 505d
panic: Data modified on freelist: word 5 of object ADDR size 0xa0 previous type devbuf (0xd != ADDR) 1 505d 505d
panic: Data modified on freelist: word 5 of object ADDR size 0xc0 previous type devbuf (0xd != ADDR) 1 512d 512d
panic: Data modified on freelist: word 5 of object ADDR size 0x100 previous type devbuf (0xd != ADDR) syz 7 505d 535d
panic: attempt WtAoR eNIxNeGc:u tSeP uL seNOrT a LddOrWEesRsE D 0Ox0N iSYn SCsAuLpLe rv3i 4s orEX ImTo d0 e9 1 505d 505d
panic: bad arg kind 1 516d 516d
uvm_fault: ADDR: movl $ADDR,0(%rdi)ddb> ddb> set $lines = 0ddb> set $maxwidth = 0ddb> show panickernel page 1 520d 520d
uvm_fault: ADDR: jmp ADDR 1 522d 522d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (4) 9 529d 529d
uvm_fault: pmap_enter syz 3 770d 776d
panic: malloc: allocation tooWA RlNaIrNGge: ,SPL NOT LOWERED ON SYSCALL 3 4 EXIT 0 9 1 548d 548d
multicore test error: timed out 43 667d 704d
panic: amap_add: slot in use 2 757d 762d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (3) 12 586d 587d
panic: vput: v_writecount != 0 C 2 588d 588d
uvm_fault: _bpf_mtap 31 799d 822d
panic: pool_cache_item_magic_check: mcl2k cpu free list modified: item addr ADDR+24 ADDR!=ADDR 1 803d 803d
panic: rw_enter: vmmaplk locking against myself 3 813d 815d
uvm_fault: tun_dev_read 2 814d 815d
openbsd test error: timed out 19 672d 732d
panic: bpf_mcopy 1 817d 817d
multicore build error (4) 2 661d 661d
openbsd build error (6) 1 661d 661d
pool: double put: mcl2k 4 819d 821d
pool: double put: mcl64k 1 820d 820d
panic: missing alias 1 824d 824d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (2) 3 655d 655d
panic: bad dir C 1390 660d 661d
multicore build error (2) 10 686d 687d
openbsd build error (4) 5 686d 687d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 12 695d 696d
multicore build error 26 696d 697d
openbsd build error (3) 13 696d 697d
multicore boot error: can't ssh into the instance 6 696d 696d
openbsd boot error: can't ssh into the instance 3 696d 696d
panic: ffs_read: type 0 1 833d 833d
panic: serialport: VM disconnected. 1 704d 704d
panic: kserialport: VM disconnected. 1 705d 705d
panic: kernel diagnostic serialport: VM disconnected. 1 705d 705d
panic: kernel diserialport: VM disconnected. 1 784d 784d
openbsd build error 1 749d 749d
lost connection to test machine C 276 797d 871d
https://github.com/openbsd/src.git boot error: uvm_fault: memcmp 6 803d 803d
https://github.com/openbsd/src.git test error 16 811d 832d
multicore boot error: uvm_fault: smbios_find 12 803d 803d
kernel: kernel relinking fa 1 892d 871d
https://github.com/openbsd/src.git boot error 479 826d 871d
panic: sandbox escaping file name "../file0" 111 826d 827d
multicore test error (2) 3 812d 812d
multicore test error 3 812d 812d
panic: sandbox escaping file name "../file0/file0", Files are map[./file0:true ../file0:true] 1 826d 826d
panic: sandbox escaping file name "../file0", Files are map[../file0:true] 11 826d 826d
panic: sandbox escaping file name "../file0", Files are map[./file0:true ../file0:true] 1 826d 826d
panic: sandbox escaping file name "../file0/file0" 2 826d 826d