syzbot


Out of 585 bugs, 322 were automatically obsoleted (5 due to revoked reproducers), 263 were invalidated by users.
Title Repro Cause bisect Fix bisect Count Last Reported
protection_fault: softclock 2 93d 137d
multicore test error: SYZFATAL: BUG: failed to run executor version: failed to run ["./syz-executor" "version"]: signal: bad system call (core 249 54d 58d
uvm_fault: softclock_process_kclock_timeout (2) 4 96d 215d
panic: vop_generic_Connection to us-central1-ssh-serialport.googleapis.com closed by remote host. 1 8d17h 8d17h
assert "(bp->b_flags & B_BUSY) == NUM" failed in vfs_biomem.c 1 103d 103d
panic: vop_gserialport: Connection terminated to allow system upgrade. Please reconnect at your convenience. 1 16d 16d
pool: free list modified: pipepl 1 106d 106d
assert "sin6tosa(&ro->ro_dst)->sa_family == AF_INET6" failed in 1 113d 113d
panic: vop_geneserialport: Connection terminated to allow system upgrade. Please reconnect at your convenience. 1 30d 30d
multicore build error (17) 10 121d 247d
panic: Connection to us-central1-ssh-serialport.googleapis.com closed by remote host. 1 36d 36d
panic: vopConnection to us-central1-ssh-serialport.googleapis.com closed by remote host. 1 38d 38d
panic: ffs_blkfree: bad size (3) 1 134d 134d
openbsd build error (20) 1 47d 47d
panic: rw_enter: solock locking against myself (2) syz 3 138d 335d
uvm_fault: rw_enter (2) 3 138d 213d
openbsd boot error: can't ssh into the instance (7) 6 50d 50d
multicore test error: SYZFATAL: BUG: failed to run executor version: failed to run ["./syz-executor" "version"]: signal: abort trap (core dump 210 50d 54d
openbsd test error: SYZFATAL: BUG: failed to run executor version: failed to run ["./syz-executor" "version"]: signal: abort trap (core dump 105 50d 54d
openbsd test error: SYZFATAL: BUG: failed to run executor version: failed to run ["./syz-executor" "version"]: signal: bad system call (core 126 54d 58d
assert "bp->b_data != NULL" failed in vfs_biomem.c (4) 2 143d 146d
multicore boot error: can't ssh into the instance (5) 24 110d 110d
openbsd boot error: can't ssh into the instance (6) 12 110d 110d
panic: vop_generic_ 2 150d 151d
uvm_fault: fifo_read 2 165d 179d
assert "pmap->pm_type != PMAP_TYPE_EPT" failed in pmap.c (2) 1 168d 168d
assert "rw_write_held(&map->lock)" failed in uvm_map.c 1 170d 170d
panic: wakeup: p_stat is NUM (3) 2 178d 264d
panic: vop_ 1 95d 95d
uvm_fault: witness_checkorder (4) 1 184d 184d
assert "ps->ps_uvncount == NUM" failed in kern_unveil.c (3) 134 149d 364d
uvm_fault: pool_do_put (3) 1 189d 189d
uvm_fault: VOP_LOCK 1 192d 192d
pool: free list modified: shmpl (4) 1 194d 194d
panic: vConnection to ssh-serialport.googleapis.com closed by remote host. 1 196d 196d
assert "((flags & PGO_LOCKED) != NUM && rw_lock_held(uobj->vmobjlock)) || (flags & PGO_LOCKED) == NUM" failed in uvm_vno (3) 4 198d 299d
panic: runtime.errorString("integer divide by zero") 1 201d 201d
panic: (3) 1 115d 115d
assert "ifp != NULL" failed in if_ether.c (5) 181 167d 561d
protection_fault: __x86_indirect_thunk_r11 1 208d 208d
pool: cpu free list modified: mbufpl (3) 1 214d 214d
pool: free list modified: mbufpl (3) 1 218d 218d
assert "sc->sc_dev == NUM" failed in if_tun.c (4) 1 230d 230d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (22) 15 232d 407d
panic: (2) 1 147d 147d
panic: ffs_blkfree: bad size (2) 1 240d 240d
protection_fault: witness_checkorder (2) C 311 200d 315d
panic: uvm_fault_unwire_locked: addrepasnsi cno:t i n k er n e l dmaipagnostic assertion "!_kernel_lock_held()" fa 1 241d 241d
kqueue: knote !ACTIVE (2) 2 242d 254d
protection_fault: lf_advlock (3) 6 248d 488d
assert "pg->wire_count == NUM" failed in vfs_biomem.c (2) 2 254d 284d
panic: thread ADDR not in SRUN: NUM 4 256d 309d
panic: db_mtx_enter: mtx ADDR: locking against myself 1 258d 258d
assert "__mp_lock_held(&sched_lock, curcpu()) == NUM" failed in sched_bsd.c 2 259d 260d
panic: voserialport: Connection terminated to allow system upgrade. Please reconnect at your convenience. 1 262d 262d
assert "self->ci_proc_pmap == p->p_vmspace->vm_map.pmap" failed in pmap.c syz 2 263d 263d
assert "ps->ps_uvncount == NUM" failed in kernWARNING: SPL NOT LOWERED ON SYSCALL NUM NUM EXIT NUM aStopped at save 1 274d 274d
assert "ps->ps_uvncount == NUM" failed in multicore/kernel/sys/kern/kern_unveil.c 1 275d 275d
uvm_fault: softclock (3) 1 275d 275d
openbsd build error (19) 18 287d 564d
assert "__mp_lock_held(&sched_lock, curcpu()) == NUM" failed in kern_lock.c (3) 4 292d 311d
uvm_fault: witness_checkorder (3) C 212 256d 510d
protection_fault: remrunqueue 2 298d 304d
assert "!ISSET(p->p_flag, P_WSLEEP) || p->p_stat == SSTOP" failed in kern_sched.c syz 81 294d 319d
assert "to->to_kclock == KCLOCK_UPTIME" failed in kern_timeout.c (2) 1 298d 298d
assert "dtlookup(unit) == NULL" failed in dt_dev.c (2) 1 300d 300d
panic:Connection to ssh-serialport.googleapis.com closed by remote host. 1 316d 316d
panic: uvm_fault_unwire_locked: WARaNdIdNGre:s sS PnotL iNn OmT aLpO 1 228d 228d
panic: vop_gepneanic: kernel diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/multicore/ker 1 319d 319d
uvm_fault: bpfioctl (3) 1 323d 323d
assert "cifp != NULL" failed in route.c (2) 18 325d 553d
assert "sc->sc_dev == NUM" failed in if_tun.c (3) 68 329d 818d
panic: ffs_update: bad link cnt 18 344d 846d
panic: vop_genConnection to ssh-serialport.googleapis.com closed by remote host. 1 346d 346d
panic: voConnection to ssh-serialport.googleapis.com closed by remote host. 1 352d 352d
uvm_fault: db_enter (4) 30 359d 701d
uvm_fault: igmp_leavegroup (4) 271 321d 787d
panic: vopp_ganenier:ic_ a 1 381d 381d
kernel: page fault trap, code=NUM (2) 1 386d 386d
uvm_fault: softclock_process_kclock_timeout 4 389d 473d
multicore test error: no output from test machine (2) 1 392d 392d
protection_fault: in6_addmulti (2) 4 394d 458d
pool: free list modified: fdescpl (3) 10 395d 688d
multicore build error (16) 252 395d 623d
panic: vop_Connection to ssh-serialport.googleapis.com closed by remote host. 1 397d 397d
uvm_fault: NUM TID PID UID PRFLAGS PFLAGS CPU COMMANDNUM(NUM,NUM,NUM,NUM,49b,ADDR) at NUMtimeout_ru 1 398d 398d
assert "rw_write_held(uobj->vmobjlock)" failed in uvm_aobj.c 1 400d 400d
panic: vo (2) 1 313d 313d
assert "pg->wire_count == NUM" failed in vfs_biomem.c 10 408d 744d
protection_fault: fill_file (2) 2 409d 422d
panic: wakeup: p_stat is NUM (2) 4 411d 467d
panic: Non dma-reachable buffer at curaddr ADDR(raw) 1 418d 418d
uvm_fault: NUM TID PID UID PRFLAGS PFLAGS CPU COMMANDNUM(NUM,NUM,NUM,NUM,59d,ADDR) at NUMtimeout_ru 1 418d 418d
protection_fault: __llvm_retpoline_r11 (2) 1 419d 419d
openbsd test error: SYZFATAL: BUG: got no coverage: 2405 394d 468d
multicore test error: SYZFATAL: BUG: got no coverage: 4785 394d 468d
uvm_fault: kcov_remote_enter 3 425d 543d
uvm_fault: ffs2_balloc (2) 3 432d 502d
panic: missing alias (3) 1 434d 434d
assert "to->to_kclock == KCLOCK_UPTIME" failed in kern_timeout.c 1 440d 440d
uvm_fault: softclock (2) 2 444d 457d
openbsd boot error: can't ssh into the instance (5) 1 444d 444d
uvm_fault: NUM TID PID UID PRFLAGS PFLAGS CPU COMMAND*ADDR NUM NUM NUM ADDR NUM 1 455d 455d
panic: voWARNpI_NgGe:n SePLr iNc_ObT adLOoWpE 1 374d 374d
uvm_fault: NUM TID PID UID PRFLAGS PFLAGS CPU COMMANDNUM(NUM,NUM,NUM,NUM,58b,ADDR) at NUMtimeout_ru 1 465d 465d
panic: vpoapn_giecn: ekrice_brnadelop 1 377d 377d
uvm_fault: NUM TID PID UID PRFLAGS PFLAGS CPU COMMAND*ADDR NUM NUM 0x2 ADDR 0K syz 1 471d 471d
syzkaller: make target failed: failed to run ["gmake" "target"]: exit status 2 (2) 12 393d 394d
assert "((flags & PGO_LOCKED) != NUM && rw_lock_held(uobj->vmobjlock)) || (flags & PGO_LOCKED) == NUM" failed in uvm_vno (2) 1 500d 500d
panic: vputonfreelist: lock count is not zero (2) 1 507d 507d
panic: malloc: out of space in kmem_map (2) 1 510d 510d
protection_fault: done_flush 81 520d 877d
assert "dupe == NULL" failed in uvm_page.c (3) 25 523d 892d
assert "ps->ps_uvncount == NUM" failed in kern_unveil.c (2) 5 527d 737d
assert "ifa == rt->rt_ifa" failed in nd6.c (4) 1 528d 528d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 (4) 63 526d 575d
panic: pr_find_pagehead: pdppl: incorrect page 1 542d 542d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 (4) 9 547d 547d
assert "d->bd_in_uiomove == NUM" failed in bpf.c 1 547d 547d
uvm_fault: savectx 1 547d 547d
openbsd boot error: can't ssh into the instance (4) 28 549d 588d
assert "!_kernel_lock_held()" failed in uvm_map.c 6 551d 712d
assert "__mp_lock_held(&sched_lock, curcpu()) == NUM" failed in kern_lock.c (2) 1 552d 552d
pool: free list modified: inpcb (2) 2 553d 607d
panic: vo 1 465d 465d
uvm_fault: uvm_map_teardown 1 558d 558d
panic: ufsdirhash_lookup: bad offset in hash array (2) 1 559d 559d
panic: acquiring blockable sleep lock with spinlock or critical section held (rwlock) vmmaplk (2) 1 560d 560d
multicore test error: no output from test machine 1 561d 561d
malloc: free list modified: counters 9 563d 823d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte ADDR (3) 3 567d 591d
protection_fault: fill_file 2 578d 604d
uvm_fault: hardclock (4) 1 578d 578d
multicore boot error: can't ssh into the instance (4) 51 549d 549d
pool: free list modified: pdppl (3) 1 582d 582d
uvm_fault: pool_gc_pages 4 584d 771d
witness: lock_object uninitialized: ADDR (2) 1 584d 584d
uvm_fault: softclock 1 585d 585d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (21) 12 586d 597d
protection_fault: __llvm_retpoline_r11 1 586d 586d
uvm_fault: pool_do_get (2) 2 587d 611d
uvm_fault: rw_enter 1 591d 591d
panic: amap_pp_adjref: negative reference count (2) 1 591d 591d
assert "((flags & PGO_LOCKED) != NUM && rw_lock_held(uobj->vmobjlock)) || (flags & PGO_LOCKED) == NUM" failed in uvm_vno 1 593d 593d
uvm_fault: ufs_direnter 1 604d 604d
assert "bp->b_data != NULL" failed in vfs_biomem.c (3) 2 604d 621d
uvm_fault: bpfioctl (2) 2 606d 607d
panic: rw_enter: solock locking against myself 5 606d 694d
multicore test error: SYZFATAL: BUG: program execution failed: executor NUM: EOF (2) 78 579d 580d
openbsd test error: SYZFATAL: BUG: program execution failed: executor NUM: EOF 94 579d 584d
uvm_fault: __kernel_phys_end 1 609d 609d
panic: trap type NUM, code=NUM, pc=NUM (2) 1 620d 620d
protection_fault: in6_addmulti 1 621d 621d
panic: wakeup: p_stat is NUM 2 622d 644d
protection_fault: witness_checkorder 1 635d 635d
uvm_fault: NUM TID PID UID PRFLAGS PFLAGS CPU COMMAND*ADDR NUM NUM NUM ADDR 0K s 1 651d 651d
malloc: free list modified: free (3) 1 658d 658d
multicore test error: SYZFATAL: BUG: program execution failed: executor NUM: EOF 108 580d 582d
uvm_fault: km_free 6 683d 871d
panic:client_loop: send disconnect: Broken pipe 4 686d 825d
panic: vopclient_loop: send disconnect: Broken pipe (3) 3 689d 736d
panic: vopConnection to ssh-serialport.googleapis.com closed by remote host. 1 610d 610d
pool: free list modified: inpcb 2 698d 725d
pool: cpu free list modified: mbufpl (2) 1 701d 701d
protection_fault: lf_advlock (2) 4 705d 754d
pool: free list modified: art_heap4 (3) 1 712d 712d
uvm_fault: solock 1 714d 714d
panic: trap type NUM, code=NUM, pc=NUM 1 717d 717d
uvm_fault: hardclock (3) 1 721d 721d
assert "pmap->pm_type != PMAP_TYPE_EPT" failed in pmap.c 1 725d 725d
panic: tcpp_nucp t 1 635d 635d
pool: free list modified: bufpl 1 725d 725d
panic: vop_gene 1 635d 635d
panic: vop_generic_bclient_loop: send disconnect: Broken pipe 1 637d 637d
panic: vop_generic_bapdoapn 1 645d 645d
kernel: page fault trap, code=NUM syz 1 644d 644d
panic: vop_client_loop: send disconnect: Broken pipe (2) 1 652d 652d
panic: vop_gpeanneicri:c _kbeardonpe 1 653d 653d
panic: vop_geneclient_loop: send disconnect: Broken pipe 1 648d 648d
panic: voclient_loop: send disconnect: Broken pipe 1 735d 735d
protection_fault: tun_enqueue 1 735d 735d
assert "bp->b_data != NULL" failed in vfs_biomem.c (2) 2 735d 787d
witness: lock_object uninitialized: ADDR 71 741d 880d
panic: ufsdirhash_lookup: bad offset in hash array 1 741d 741d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte ADDR (2) 1 743d 743d
panic: vop_client_loop: send disconnect: Broken pipe 1 656d 656d
panic: vop_generic_bpaadonipc 1 661d 661d
pool: free list modified: sockpl (2) 3 753d 808d
malloc: free list modified: free (2) 1 758d 758d
SYZFAIL: ioctl remote attach failed (4) 68 761d 875d
uvm_fault: pmap_page_remove (4) 1 766d 766d
protection_fault: pool_do_put 1 778d 778d
panic: vpopa_ngiecn:kerericn_elba diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/setuid/k 1 697d 697d
panic: vpoanp_igc:en e r i c _ b ad op 1 699d 699d
panic: pmap_enter: PG_PVLIST mapping with unmanaged page: va ADDR, opte ADDR, pa ADDR 2 789d 866d
panic: pool_do_get: pfiaddrpl: page empty 1 790d 790d
panic: vop_generclient_loop: send disconnect: Broken pipe 1 704d 704d
uvm_fault: putc 2 794d 798d
uvm_fault: pf_anchor_global_RB_INSERT_COLOR 1 796d 796d
panic: vop_pganeince:ri kce_rbandelo p 1 714d 714d
panic: vop_genericp_anbaidc:o p 1 713d 713d
panic: vop_generic_baclient_loop: send disconnect: Broken pipe 1 712d 712d
panic: runtime error: invalid memory address or nil pointer dereference (8) 1 714d 714d
uvm_fault: ffs2_balloc 1 801d 801d
assert "ifa == rt->rt_ifa" failed in nd6.c (3) 2 802d 829d
uvm_fault: VOP_ISLOCKED (2) 1 803d 803d
panic: vpoapn_igc:e kernel diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/setuid/kernel/s 1 716d 716d
panic: vclient_loop: send disconnect: Broken pipe (2) 1 715d 715d
uvm_fault: db_enter (3) 1 715d 715d
uvm_fault: pool_do_get 1 810d 810d
panic: vclient_loop: send disconnect: Broken pipe 1 721d 721d
uvm_fault: ktrops 1 812d 812d
panic: vop_genericp_baandiocp: 1 771d 771d
panic: vop_geneprianci_c: kernel diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/multicore 1 734d 734d
panic: broken type ref (3) 1 725d 725d
panic: vop_generic_badpoapn 1 724d 724d
panic: vop_genepranici_c:bakdeorpn 1 726d 726d
uvm_fault: memcpy (4) 2 814d 883d
multicore test error: SYZFATAL: BUG: program execution failed: bad reply magic ADDR 1 732d 732d
openbsd test error: SYZFATAL: BUG: program execution failed: bad reply magic ADDR 3 732d 732d
assert "la != NULL" failed in if_ether.c (2) 1 821d 821d
protection_fault: sys_msgrcv 1 827d 827d
panic: vop_geneprainci_cb:a kdeoprn 1 828d 828d
panic:p a nic: kernel diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/setuid/kernel/sys/ke 1 739d 739d
openbsd build error (18) 1 739d 739d
uvm_fault: db_enter (2) 1 745d 745d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte ADDR 3 837d 886d
panic: vpoapn_igc:en keerricn_elba d o dpi 1 837d 837d
kernel: privileged instruction fault trap, code=NUM 1 839d 839d
uvm_fault: hardclock (2) 1 840d 840d
panic: vop_generic_bad 1 752d 752d
panic: vop_genclient_loop: send disconnect: Broken pipe (2) 1 757d 757d
kernel: protection fault trap, code=NUM (4) 1 759d 759d
panic: vop_genclient_loop: send disconnect: Broken pipe 1 760d 760d
panic: vop_generic_client_loop: send disconnect: Broken pipe 1 761d 761d
uvm_fault: ffs_nodealloccg 1 852d 852d
assert "dtlookup(unit) == NULL" failed in dt_dev.c 1 853d 853d
panic: vop_generic_pbaandiopc 1 764d 764d
pool: free list modified: fdescpl 1 856d 856d
assert "ifp != NULL" failed in if_ether.c (4) 2 856d 901d
panic: vopclient_loop: send disconnect: Broken pipe (2) 1 767d 767d
assert "ps->ps_uvncount == NUM" failed in kern_unveil.c 2 868d 880d
panic: pmap_remove_ptes: managed page without PG_PVLIST: va ADDR, opte ADDR 1 877d 877d
assert "bp->b_data != NULL" failed in vfs_biomem.c 1 878d 878d
panic: runtime error: invalid memory address or nil pointer dereference (7) 1 879d 879d
panic: missing alias (2) 2 880d 880d
panic: vref used where vget required (3) 1 880d 880d
panic: client_loop: send disconnect: Broken pipe (2) 1 791d 791d
panic: vop_generic_WbAaRdNopI 1 795d 795d
panic: apcaqniuci:r kinegr nbleol c kdaiblage snloesteipc laosscke r t io n " ! _ ke r n e l_ l o wcikt_hh s 1 795d 795d
panic: acqupirainincg: b lo c kkaerblneel s l e ep l o c k d i a gwintohs tsipc i nl oc k o r c r it i c a l 1 795d 795d
panic: vop_gclient_loop: send disconnect: Broken pipe 1 795d 795d
panic: acquipraniincg: k e brnleolck daibaleg nsolseteip lc oacsks weirttiho n s "pi!nl_okecrkn oelr_ l corcik_thiec 1 796d 796d
panic: acpquainriic:n g bl o ck a b le s l e e p l o c k w i t h s p in l o c k o r c ri t i ca l s 1 796d 796d
panic: acquiring blpocankaicb:l e s l e keerp lnoecl k w i t h s p i nl oc k o r cr i t ic a l s e c ti o n 1 796d 796d
panic: apcaqnuiic:ri nkg ebrloncekla b l e sl ee p l o c k w i t h s p i n l oc k o r cr i ti c a l 1 796d 796d
panic: acquiring blockable sleep lock with spinlock or criticapl saneictci:o nk ehrenled (lk deriangenlo_lsotickc) 1 796d 796d
panic: acquiring blocpkaanbilec: k er snleele p lo c k w i th s p i nl o c k or c r i ti ca l s ec t 1 796d 796d
kernel: protection fault trap, code=NUM (3) 1 796d 796d
panic: acquirpinagni c :b l koecrknaebll ed silageneop slotickc a ss e r t i o n " ! _ k e r n el _ l o ckwi_t 1 796d 796d
panic: acquiring bplaoncikca:b l e sl e e p l okcek rwnielt h s p i n dloicak gonro scrtiitci c a l s e cati 1 796d 796d
panic: acquiring blockabplaen i sc:le e p l kocek rn e l d ia g no s t i wci t ha s s e r t i o n "s!_pkienlro 1 796d 796d
panic: acquiringp abnlioc:c k ab l e sl e e p lo c k w it h s p i n l oc k o rk er n e l d i agn o s 1 796d 796d
panic: acpqauniicr:in g bl kocerknaeblle d ia g no s t i cs alseseeprt i lonoc k w it"h!_ k seprninell_olckoc 1 796d 796d
panic: acquirinpgan bilco:c kkaeblrne esll e ep lo ck wi t h s p in l oc k o r c r i ti c a l s ec t 1 796d 796d
panic: acquiring blockablep a ni c : k er ne l d ia gn o s t i c as s e r stleieopn l oc k w i t h s 1 796d 796d
panic: acquiring bl o c kpaablniec s:le e p l o c k wi t h s p i n l o c k o r c ri t i c a l s e c t i 1 796d 796d
panic: apcqauniircin:g b lkeorcknaelbldei saglenoepst ilc o c k w i th sp i n l o c k a s s oerrt ciorint i"c! 1 796d 796d
kernel: protection fSeaBIOS (version NUM.NUM.NUM-google) syz 1 801d 801d
panic: vop_generic_bado 1 806d 806d
panic: bad dir (2) 44 863d 875d
pool: free list modified: pdppl (2) 1 899d 899d
panic: client_loop: send disconnect: Broken pipe 1 823d 823d
assert "next != NULL && next->start <= entry->end" failed in uvm_fault.c (2) syz 2 894d 894d
witness: reversal: lock order data missing (2) C 173 958d 1108d
openbsd build error (16) 1 829d 829d
multicore boot error: witness: reversal: vmmaplk inode 60 830d 831d
uvm_fault: pmap_page_remove (3) 1 835d 835d
multicore boot error: kernel: protection fault trap, code=NUM 57 834d 835d
panic: acquiring blockable sleep lock with spinlock or critical section held (rwlock) kmmaplk (2) 2 930d 990d
panic: vopclient_loop: send disconnect: Broken pipe 1 849d 849d
panic: vop_generipac_nibac:do kpe 1 849d 849d
panic: vop 1 856d 856d
SYZFAIL: tun: can't open device (3) 86 862d 862d
SYZFAIL: tun_id out of range (2) 182 862d 862d
panic: trap type NUM, code=NUM, pc=ADDR 1 873d 873d
kernel: protection fault trap, code=NUM (2) C 16 878d 901d
panic: 1 877d 877d
SYZFAIL: dup2(NUM, kInPipeFd) failed syz 4 883d 901d
SYZFAIL: tun_id out of range 109 884d 884d
panic: vop_generic_badop 1 965d 965d
multicore build error (14) 58 887d 890d
kernel: double fault trap, code=NUM 1 888d 888d
SYZFAIL: ioctl remote attach failed (2) 6 888d 908d
uvm_fault: hardclock 1 990d 990d
SYZFAIL: open of /dev/kcov failed 3 904d 904d
SYZFAIL: ioctl remote attach failed 3 1006d 1058d
kernel: page fault trap, code=0 (4) 2 1007d 1036d
SYZFAIL: tun: can't open device (2) 1 1036d 1036d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (20) 24 962d 982d
openbsd test error: timed out (3) 72 968d 972d
multicore test error: timed out (3) 150 968d 972d
kernel: protection fault trap, code=NUM 1 981d 981d
uvm_fault: x86_ipi_db (6) 1 1003d 1003d
panic: wakeup: p_stat iSeaBIOS (version NUM.NUM.NUM-google) 1 1004d 1004d
uvm_fault: x86_ipi_db (5) 1 1008d 1008d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (19) 3 1017d 1017d
uvm_fault: x86_ipi_db (4) 1 1022d 1022d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (18) 6 1040d 1041d
panic: acquiring blockable sleep lock with spinlock or critical section held (rwlock) kmmaplk 11 1139d 1302d
multicore build error (12) 1 1179d 1179d
uvm_fault: x86_ipi_db (3) 4 1187d 1204d
panic: runtime error: invalid memory address or nil pointer dereference (6) 276 1111d 1111d
openbsd test error: lost connection to test machine (2) 3 1125d 1125d
multicore test error: lost connection to test machine (2) 6 1125d 1125d
openbsd test error: lost connection to test machine 15 1125d 1125d
multicore test error: lost connection to test machine 36 1125d 1125d
corrupted report (4) 21 1221d 1389d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (17) 3 1171d 1171d
panic: runtime error: invalid memory address or nil pointer dereference (5) 10821 1164d 1164d
panic: runtime error: invalid memory address or nil pointer dereference (4) 2753 1164d 1165d
SYZFAIL: clone failed syz 1 1185d 1185d
multicore build error (11) 2 1187d 1187d
multicore build error (10) 2 1219d 1291d
openbsd build error (13) 1 1297d 1297d
uvm_fault: x86_ipi_db (2) 1 1237d 1237d
uvm_fault: x86_ipi_db 1 1240d 1240d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (16) 21 1243d 1247d
assert "(key.from) > 0 && (key.from) <= w_max_used_index && (key.from) < witness_count" failed in subr_witness.c 1 1343d 1343d
uvm_fault: strlen 1 1347d 1347d
panic: ffs_alloccg: map corrupted 1 1348d 1348d
uvm_fault: fdcopy 1 1353d 1353d
panic (2) syz 8 1267d 1277d
uvm_fault: in6_pcbhashlookup 1 1360d 1360d
panic 1 1279d 1279d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 (3) 9 1371d 1375d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (15) 6 1298d 1307d
assert "ifp != NULL" failed in if_ether.c (3) 2 1382d 1387d
uvm_fault: pmap_page_remove (2) 5 1387d 1563d
uvm_fault: nd6_dad_duplicated 1 1387d 1387d
soreceive 1 58 1392d 1548d
pool: free list modified: pvpl 17 1393d 1648d
panic: runtime error: invalid memory address or nil pointer dereference (3) 28 1394d 1661d
panic: m_copym0: m == NULL and not COPYALL 306 1391d 1655d
panic: m_copym0: short mbuf chain 214 1395d 1654d
witness: reversal: vmmaplk inode (2) C 46771 1306d 1620d
witness: reversal: inode netlock C 6 1307d 1307d
witness: reversal: netlock inode C 11 1307d 1307d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 (3) 3 1307d 1307d
uvm_fault: tun_dev_read (2) 71 1400d 1647d
uvm_fault: rtrequest 1 1400d 1400d
openbsd build error (12) 1 1311d 1311d
multicore build error (9) 1 1311d 1311d
uvm_fault: ml_dequeue 2 1401d 1443d
assert "dupe == NULL" failed in uvm_page.c (2) 1 1402d 1402d
panic: pr_find_pagehead: mbufpl: incorrect page (2) 20 1406d 1673d
uvm_fault: memcpy (3) 26 1406d 1464d
uvm_fault: sbdrop 44 1413d 1633d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (14) 6 1325d 1325d
assert "pg->wire_count == 1" failed in vfs_biomem.c (2) 9 1416d 1484d
panic: in6_cksum: out of data, len 64 1 1417d 1417d
uvm_fault: _bpf_mtap (2) 8 1420d 1435d
panic: unhandled af (3) syz 7 1416d 1426d
uvm_fault: ml_enlist (2) 1 1421d 1421d
uvm_fault: ml_purge (2) 8 1426d 1645d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (13) 39 1345d 1424d
panic: pr_find_pagehead: mbufpl: page header missing (3) 2 1430d 1463d
uvm_fault: m_free (2) 429 1400d 1650d
uvm_fault: pool_cache_get 518 1401d 1679d
pool: free list modified: anonpl 8 1434d 1656d
panic: amap_lookup: offset out of range 2 1437d 1483d
uvm_fault: 0x1:uvm_fault(ADDR, 0x1, 0, 1) -> e kernel: page fault trap, code=0Stopped at db_read_bytes 1 1348d 1348d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 (2) 45 1349d 1351d
panic: free: size too small 10 <= 4096 / 2 (ADDR) type devbuf 2 1440d 1445d
pool: free list modified: vcpupl 1 1441d 1441d
uvm_fault: bpf_mtap 10 1441d 1668d
pool: free list modified: filepl 1 1447d 1447d
pool: free list modified: shmpl (3) 1 1452d 1452d
uvm_fault: uvmfault_anonget 1 1455d 1455d
uvm_fault: unveil_find_cover 1 1456d 1456d
assert "mhead->m_flags & M_PKTHDR" failed in switchctl.c (2) 1 1457d 1457d
malloc: free list modified: free 12 1458d 1680d
uvm_fault: nd6_ns_output 1 1466d 1466d
uvm_fault: x86_send_ipi (2) 2 1467d 1479d
panic.go:LINE +0x72 (7) syz 3 1386d 1388d
assert "ifp != NULL" failed in rtsock.c (2) 26 1445d 1448d
panic: vref used where vget required (2) 2 1477d 1480d
panic: amap_lookups: offset out of range (2) 1 1478d 1478d
pool: free list modified: pffrnode 7 1478d 1616d
uvm_fault: uvm_map_clean 1 1479d 1479d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (8) 10 1432d 1503d
uvm_fault: igmp_leavegroup 1 1482d 1482d
syzkaller: make target failed: failed to run ["gmake" "target"]: exit status 2 3 1393d 1393d
panic(ADDR) at panic+0x164 1 1395d 1395d
openbsd boot error: can't ssh into the instance (3) 18 1396d 1396d
multicore boot error: can't ssh into the instance (3) 15 1396d 1396d
kernel: privileged instruction fault trap, code=0 (2) 1 1487d 1487d
assert "!_kernel_lock_held()" failed in kern_fork.c (2) 1 1487d 1487d
uvm_fault(ADDR, 0xa, 0, 1) -> e (2) 1 1401d 1401d
assert "!ISSET(rt->rt_flags, RTF_LOCAL)" failed in nd6.c (2) 1 1490d 1490d
no output from test machine (4) syz 14713 1404d 1411d
panic: amap_wipeout: corrupt amap 6 1496d 1584d
uvm_fault(ADDR, 0x7b8, 0, 1) -> e 1 1413d 1413d
uvm_fault(ADDR, 0x3, 0, 1) -> e (2) 1 1417d 1417d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 (2) 21 1419d 1421d
uvm_fault(ADDR, 0xa, 0, 1) -> e 1 1420d 1420d
pool: free list modified: tcpqe 4 1510d 1627d
uvm_fault(ADDR, 0x3, 0, 1) -> e 1 1422d 1422d
no output from test machine (2) C 89865 1426d 1478d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (12) 9 1434d 1437d
assert "sb->sb_cc == 0" failed in uipc_socket2.c 2 1516d 1560d
pool: free list modified: vmsppl 1 1427d 1427d
uvm_fault(ADDR, 0xbef, 0, 1) -> e (2) 1 1428d 1428d
uvm_fault(ADDR, 0x10b, 0, 1) -> e (2) 1 1434d 1434d
uvm_fault(ADDR, 0xbef, 0, 1) -> e 1 1435d 1435d
pool: free list modified: vnodes 1 1530d 1530d
uvm_fault(ADDR, 0x10b, 0, 1) -> e 1 1448d 1448d
kernel: page fault trap, code=0 (3) 1 1449d 1449d
panic: bad group arg size 29, should be <= 32 for &prog.GroupArg{ArgCommon:prog.ArgCommon{ref:LINEx328, dir:LINEx0}, Inn 1 1452d 1452d
assert "ps->ps_uvncount == 0" failed in kern_unveil.c (2) 1 1548d 1548d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (11) 6 1459d 1481d
pool: free list modified: uvmvnodes 1 1549d 1549d
pool: free list modified: sockpl 2 1551d 1562d
uvm_fault(ADDR, ADDR, 0, 1) -> e 1 1462d 1462d
panic: bad group arg size 29, should be <= 32 for &prog.GroupArg{ArgCommon:prog.ArgCommon{ref:LINEx2c0, dir:LINEx0}, Inn 1 1466d 1466d
uvm_fault: memcpy (2) syz 2168 1471d 1719d
uvm_fault: vio_start 1 1561d 1561d
uvm_fault: syscall 1 1564d 1564d
panic: broken type ref 1 1478d 1478d
pool: free list modified: mtagpl 1 1565d 1565d
assert "dupe == NULL" failed in uvm_page.c 4 1566d 1679d
pool: free list modified: art_table 1 1568d 1568d
assert "ifp != NULL" failed in if_ether.c (2) 1 1576d 1576d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 3 1486d 1486d
kqueue: knote !ACTIVE 2 1578d 1582d
uvm_fault: in4_cksum 1 1582d 1582d
panic: bad arg kind: <nil> (11) 1 1499d 1499d
kernel: privileged instruction fault trap, code=0 1 1591d 1591d
uvm_fault: ml_enlist 1 1591d 1591d
uvm_fault: tun_init 1 1592d 1592d
uvm_fault returns 14, GPA=ADDR C 2 1505d 1505d
panic: lock (kernel_lock) mbufpl not locked 1 1595d 1595d
panic: bad group arg size 0, should be <= 24 for &prog.GroupArg{ArgCommon:prog.ArgCommon{typ:(*prog.StructType)(ADDR)}, 1 1507d 1507d
panic.go:LINE +0x72 (5) 1 1510d 1510d
assert "pg->wire_count == 0" failed in uvm_page.c 1 1605d 1605d
panic: bad arg kind: <nil> (10) 1 1520d 1520d
panic: bad arg kind: <nil> (9) 1 1523d 1523d
pool: free list modified: art_heap4 2 1618d 1643d
uvm_fault: _bus_dmamap_load_mbuf 1 1622d 1622d
uvm_fault: m_copym 1 1623d 1623d
panic: bad arg kind: <nil> (8) 1 1535d 1535d
panic: pr_find_pagehead: mbufpl: page header missing (2) 1 1625d 1625d
pool: cpu free list modified: mcl2k 1 1626d 1626d
panic: bad arg kind: <nil> (7) 1 1539d 1539d
pool: free list modified: shmpl (2) 1 1633d 1633d
panic: bad arg kind: <nil> (6) 1 1544d 1544d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (7) 1 1545d 1545d
assert "mhead->m_flags & M_PKTHDR" failed in switchctl.c 1 1636d 1636d
pool: double put: mbufpl (2) 2 1637d 1669d
panic: attempt to access user address ADDR in supervisor mode 7 1642d 1691d
kernel: double fault trap, code=0 (2) syz 2 1668d 1668d
uvm_fault: rtable_satoplen (3) syz 237 1676d 1719d
panic: amap_lookups: offset out of range 1 1646d 1646d
panic: bad arg kind: <nil> (5) 1 1558d 1558d
uvm_fault: witness_checkorder (2) 1 1648d 1648d
panic: bad arg kind: &prog.IntType{IntTypeCommon:prog.IntTypeCommon{TypeCommon:prog.TypeCommon{TypeName:"int32", FldName 1 1561d 1561d
panic: bad arg kind (2) 2 1651d 1653d
assert "pg->wire_count == 1" failed in vfs_biomem.c 66 1652d 1977d
assert "ifp != NULL" failed in rtsock.c 2 1652d 1654d
panic.go:LINE +0x72 (4) 1 1563d 1563d
uvm_fault: x86_send_ipi 1 1656d 1656d
uvm_fault: VOP_ISLOCKED 1 1656d 1656d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (10) 3 1566d 1566d
panic: bad arg kind: <nil> (4) 1 1569d 1569d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (6) 1 1569d 1569d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST, va = ADDR, pa = ADDR (2) 1 1661d 1661d
uvm_fault: m_zero 1 1662d 1662d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (5) 1 1576d 1576d
panic: free: non-malloced addr ADDR type in_multi 4 1667d 1689d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (9) 3 1578d 1578d
uvm_fault: pfi_kif_update 6 1669d 1796d
uvm_fault: fifo_write 1 1669d 1669d
panic.go:LINE +0x72 (3) 1 1581d 1581d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (4) 2 1583d 1583d
panic: receive 1: so ADDR, so_type 3, sb_cc 176 1 1671d 1671d
panic: ffs_valloc: dup alloc 2 1672d 1675d
uvm_fault: 0ddb{1}> ddb{1}> set $lines = 0ddb{1}> set $maxwidth = 0ddb{1}> show panickernel page faultattempt to e 1 1585d 1585d
assert "!_kernel_lock_held()" failed in kern_fork.c 15 1676d 1937d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (8) 3 1589d 1589d
panic: WAaRcNqIuNirGi:n g SPbLl NoOcT kLaObWlEReE Ds lOeNe pSY SloCcAkL Lwi 2 t15h7 s79p3i4n4l5o0c kEX IorT 0c rai 1 1590d 1590d
uvm_fault 10 1682d 1697d
panic: free: size too small 24 <= 256 / 2 (ADDR) type in_multi 1 1688d 1688d
panic: bad arg kind: <nil> (3) 1 1599d 1599d
assert "cifp != NULL" failed in route.c 89 1661d 1716d
assert "rt->rt_ifa->ifa_ifp != NULL" failed in route.c 830 1661d 1702d
uvm_fault: in6_purgeaddr 1423 1661d 1702d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (7) 3 1602d 1602d
assert "ifp != NULL" failed in if_ether.c 208 1663d 1717d
assert "ifa == rt->rt_ifa" failed in nd6.c (2) 262 1663d 1700d
uvm_fault: tun_clone_destroy 1 1694d 1694d
panic: bad arg kind: <nil> (2) 1 1610d 1610d
panic: bad arg kind: <nil> 1 1613d 1613d
panic.go:LINE +0x72 (2) 1 1616d 1616d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (6) 3 1618d 1618d
uvm_fault: pmap_page_remove 7 1710d 1966d
openbsd build error (7) 1 1621d 1621d
multicore boot error: can't ssh into the instance (2) 96 1638d 1639d
openbsd boot error: can't ssh into the instance (2) 48 1638d 1639d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (3) 1 1638d 1638d
panic: vref used where vget required 1 1727d 1727d
panic: pfi_dynaddr_update 2 1744d 1824d
uvm_fault: pool_do_put 1 1662d 1662d
panic: runtime error: invalid memory address or nil pointer dereference (2) 1 1663d 1663d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST, va = ADDR, pa = ADDR 1 1666d 1666d
pool: free list modified: pdppl 1 1667d 1667d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (5) 3 1666d 1666d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (2) 1 1667d 1667d
panic.go:LINE +0x72 1 1667d 1667d
witness: reversal: inode fdlock C 523 1734d 1947d
panic: runtime error: invalid memory address or nil pointer dereference 1 1672d 1672d
panic: fifo_badop called C 8841 1674d 2008d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR 1 1688d 1688d
panic: ffs_blkfree: bad size 2 1788d 1793d
kernel: double fault trap, code=0 1 1836d 1836d
assert "la != NULL" failed in if_ether.c 3 1821d 1823d
uvm_fault: ml_purge 6 1820d 1826d
panic: in_cksum: out of data, len 63 1 1806d 1806d
uvm_fault: pfi_ifhead_RB_REMOVE 1 1827d 1827d
panic: uvm_fault_unwire_locked: address not in map (2) 7 1817d 1944d
panicConnection to ssh-serialport.googleapis.com closed by remote host. 1 1675d 1675d
uvm_fault: vfs_lookup 1 1861d 1861d
panic: Data modified on freelist: word 4 of object ADDR size 0x84 previous type free (ADDR != ADDR) 1 1687d 1687d
panic: Data modified on freelist: word 5 of object ADDR size 0xa0 previous type devbuf (0xd != ADDR) 1 1687d 1687d
panic: Data modified on freelist: word 5 of object ADDR size 0xc0 previous type devbuf (0xd != ADDR) 1 1694d 1694d
panic: Data modified on freelist: word 5 of object ADDR size 0x100 previous type devbuf (0xd != ADDR) syz 7 1687d 1717d
panic: attempt WtAoR eNIxNeGc:u tSeP uL seNOrT a LddOrWEesRsE D 0Ox0N iSYn SCsAuLpLe rv3i 4s orEX ImTo d0 e9 1 1687d 1687d
panic: bad arg kind 1 1698d 1698d
uvm_fault: ADDR: movl $ADDR,0(%rdi)ddb> ddb> set $lines = 0ddb> set $maxwidth = 0ddb> show panickernel page 1 1702d 1702d
uvm_fault: ADDR: jmp ADDR 1 1704d 1704d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (4) 9 1711d 1712d
uvm_fault: pmap_enter syz 3 1952d 1958d
panic: malloc: allocation tooWA RlNaIrNGge: ,SPL NOT LOWERED ON SYSCALL 3 4 EXIT 0 9 1 1731d 1731d
multicore test error: timed out 43 1849d 1887d
panic: amap_add: slot in use 2 1940d 1945d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (3) 12 1769d 1769d
panic: vput: v_writecount != 0 C 2 1771d 1771d
uvm_fault: _bpf_mtap 31 1982d 2004d
panic: pool_cache_item_magic_check: mcl2k cpu free list modified: item addr ADDR+24 ADDR!=ADDR 1 1985d 1985d
panic: rw_enter: vmmaplk locking against myself 3 1995d 1997d
uvm_fault: tun_dev_read 2 1996d 1997d
openbsd test error: timed out 19 1855d 1914d
panic: bpf_mcopy 1 2000d 2000d
multicore build error (4) 2 1844d 1844d
openbsd build error (6) 1 1844d 1844d
pool: double put: mcl2k 4 2002d 2004d
pool: double put: mcl64k 1 2002d 2002d
panic: missing alias 1 2007d 2007d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (2) 3 1837d 1837d
panic: bad dir C 1390 1843d 1844d
multicore build error (2) 10 1869d 1869d
openbsd build error (4) 5 1869d 1869d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 12 1877d 1878d
multicore build error 26 1879d 1880d
openbsd build error (3) 13 1879d 1880d
multicore boot error: can't ssh into the instance 6 1879d 1879d
openbsd boot error: can't ssh into the instance 3 1879d 1879d
panic: ffs_read: type 0 1 2016d 2016d
panic: serialport: VM disconnected. 1 1887d 1887d
panic: kserialport: VM disconnected. 1 1887d 1887d
panic: kernel diagnostic serialport: VM disconnected. 1 1888d 1888d
panic: kernel diserialport: VM disconnected. 1 1966d 1966d
openbsd build error 1 1932d 1932d
lost connection to test machine C 276 1980d 2053d
https://github.com/openbsd/src.git boot error: uvm_fault: memcmp 6 1985d 1985d
https://github.com/openbsd/src.git test error 16 1993d 2014d
multicore boot error: uvm_fault: smbios_find 12 1985d 1985d
kernel: kernel relinking fa 1 2074d 2053d
https://github.com/openbsd/src.git boot error 479 2008d 2053d
panic: sandbox escaping file name "../file0" 111 2008d 2009d
multicore test error (2) 3 1995d 1995d
multicore test error 3 1995d 1995d
panic: sandbox escaping file name "../file0/file0", Files are map[./file0:true ../file0:true] 1 2008d 2008d
panic: sandbox escaping file name "../file0", Files are map[../file0:true] 11 2008d 2008d
panic: sandbox escaping file name "../file0", Files are map[./file0:true ../file0:true] 1 2008d 2008d
panic: sandbox escaping file name "../file0/file0" 2 2008d 2008d