syzbot


Out of 529 bugs, 279 were automatically obsoleted (2 due to revoked reproducers), 250 were invalidated by users.
Title Repro Cause bisect Fix bisect Count Last Reported
assert "ps->ps_uvncount == NUM" failed in kernWARNING: SPL NOT LOWERED ON SYSCALL NUM NUM EXIT NUM aStopped at save 1 100d 100d
assert "ps->ps_uvncount == NUM" failed in multicore/kernel/sys/kern/kern_unveil.c 1 100d 100d
uvm_fault: softclock (3) 1 101d 101d
openbsd build error (19) 18 113d 390d
assert "__mp_lock_held(&sched_lock, curcpu()) == NUM" failed in kern_lock.c (3) 4 118d 137d
uvm_fault: witness_checkorder (3) C 212 82d 335d
protection_fault: remrunqueue 2 123d 130d
assert "!ISSET(p->p_flag, P_WSLEEP) || p->p_stat == SSTOP" failed in kern_sched.c syz 81 120d 145d
assert "to->to_kclock == KCLOCK_UPTIME" failed in kern_timeout.c (2) 1 124d 124d
assert "dtlookup(unit) == NULL" failed in dt_dev.c (2) 1 125d 125d
panic:Connection to ssh-serialport.googleapis.com closed by remote host. 1 142d 142d
panic: uvm_fault_unwire_locked: WARaNdIdNGre:s sS PnotL iNn OmT aLpO 1 53d 53d
panic: vop_gepneanic: kernel diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/multicore/ker 1 144d 144d
uvm_fault: bpfioctl (3) 1 149d 149d
assert "cifp != NULL" failed in route.c (2) 18 151d 379d
assert "sc->sc_dev == NUM" failed in if_tun.c (3) 68 155d 644d
panic: ffs_update: bad link cnt 18 170d 672d
panic: vop_genConnection to ssh-serialport.googleapis.com closed by remote host. 1 171d 171d
panic: voConnection to ssh-serialport.googleapis.com closed by remote host. 1 178d 178d
uvm_fault: db_enter (4) 30 185d 527d
uvm_fault: igmp_leavegroup (4) 271 146d 613d
panic: vopp_ganenier:ic_ a 1 207d 207d
kernel: page fault trap, code=NUM (2) 1 212d 212d
uvm_fault: softclock_process_kclock_timeout 4 215d 298d
multicore test error: no output from test machine (2) 1 217d 217d
protection_fault: in6_addmulti (2) 4 220d 284d
pool: free list modified: fdescpl (3) 10 221d 514d
multicore build error (16) 252 221d 449d
panic: vop_Connection to ssh-serialport.googleapis.com closed by remote host. 1 223d 223d
uvm_fault: NUM TID PID UID PRFLAGS PFLAGS CPU COMMANDNUM(NUM,NUM,NUM,NUM,49b,ADDR) at NUMtimeout_ru 1 223d 223d
assert "rw_write_held(uobj->vmobjlock)" failed in uvm_aobj.c 1 226d 226d
panic: vo (2) 1 139d 139d
assert "pg->wire_count == NUM" failed in vfs_biomem.c 10 233d 569d
protection_fault: fill_file (2) 2 235d 248d
panic: wakeup: p_stat is NUM (2) 4 236d 292d
panic: Non dma-reachable buffer at curaddr ADDR(raw) 1 244d 244d
uvm_fault: NUM TID PID UID PRFLAGS PFLAGS CPU COMMANDNUM(NUM,NUM,NUM,NUM,59d,ADDR) at NUMtimeout_ru 1 244d 244d
protection_fault: __llvm_retpoline_r11 (2) 1 245d 245d
openbsd test error: SYZFATAL: BUG: got no coverage: 2405 219d 294d
multicore test error: SYZFATAL: BUG: got no coverage: 4785 219d 294d
uvm_fault: kcov_remote_enter 3 251d 368d
uvm_fault: ffs2_balloc (2) 3 258d 327d
panic: missing alias (3) 1 260d 260d
assert "to->to_kclock == KCLOCK_UPTIME" failed in kern_timeout.c 1 265d 265d
uvm_fault: softclock (2) 2 270d 282d
openbsd boot error: can't ssh into the instance (5) 1 270d 270d
uvm_fault: NUM TID PID UID PRFLAGS PFLAGS CPU COMMAND*ADDR NUM NUM NUM ADDR NUM 1 280d 280d
panic: voWARNpI_NgGe:n SePLr iNc_ObT adLOoWpE 1 199d 199d
uvm_fault: NUM TID PID UID PRFLAGS PFLAGS CPU COMMANDNUM(NUM,NUM,NUM,NUM,58b,ADDR) at NUMtimeout_ru 1 291d 291d
panic: vpoapn_giecn: ekrice_brnadelop 1 202d 202d
uvm_fault: NUM TID PID UID PRFLAGS PFLAGS CPU COMMAND*ADDR NUM NUM 0x2 ADDR 0K syz 1 296d 296d
syzkaller: make target failed: failed to run ["gmake" "target"]: exit status 2 (2) 12 219d 220d
assert "((flags & PGO_LOCKED) != NUM && rw_lock_held(uobj->vmobjlock)) || (flags & PGO_LOCKED) == NUM" failed in uvm_vno (2) 1 326d 326d
panic: vputonfreelist: lock count is not zero (2) 1 333d 333d
panic: malloc: out of space in kmem_map (2) 1 336d 336d
protection_fault: done_flush 81 345d 702d
assert "dupe == NULL" failed in uvm_page.c (3) 25 348d 718d
assert "ps->ps_uvncount == NUM" failed in kern_unveil.c (2) 5 352d 563d
assert "ifa == rt->rt_ifa" failed in nd6.c (4) 1 353d 353d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 (4) 63 352d 401d
panic: pr_find_pagehead: pdppl: incorrect page 1 367d 367d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 (4) 9 373d 373d
assert "d->bd_in_uiomove == NUM" failed in bpf.c 1 373d 373d
uvm_fault: savectx 1 373d 373d
openbsd boot error: can't ssh into the instance (4) 28 374d 414d
assert "!_kernel_lock_held()" failed in uvm_map.c 6 376d 538d
assert "__mp_lock_held(&sched_lock, curcpu()) == NUM" failed in kern_lock.c (2) 1 378d 378d
pool: free list modified: inpcb (2) 2 379d 433d
panic: vo 1 291d 291d
uvm_fault: uvm_map_teardown 1 384d 384d
panic: ufsdirhash_lookup: bad offset in hash array (2) 1 384d 384d
panic: acquiring blockable sleep lock with spinlock or critical section held (rwlock) vmmaplk (2) 1 385d 385d
multicore test error: no output from test machine 1 387d 387d
malloc: free list modified: counters 9 389d 649d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte ADDR (3) 3 392d 417d
protection_fault: fill_file 2 403d 430d
uvm_fault: hardclock (4) 1 404d 404d
multicore boot error: can't ssh into the instance (4) 51 374d 375d
pool: free list modified: pdppl (3) 1 407d 407d
uvm_fault: pool_gc_pages 4 410d 597d
witness: lock_object uninitialized: ADDR (2) 1 410d 410d
uvm_fault: softclock 1 410d 410d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (21) 12 411d 423d
protection_fault: __llvm_retpoline_r11 1 412d 412d
uvm_fault: pool_do_get (2) 2 413d 436d
uvm_fault: rw_enter 1 416d 416d
panic: amap_pp_adjref: negative reference count (2) 1 417d 417d
assert "((flags & PGO_LOCKED) != NUM && rw_lock_held(uobj->vmobjlock)) || (flags & PGO_LOCKED) == NUM" failed in uvm_vno 1 419d 419d
uvm_fault: ufs_direnter 1 430d 430d
assert "bp->b_data != NULL" failed in vfs_biomem.c (3) 2 430d 446d
uvm_fault: bpfioctl (2) 2 431d 433d
panic: rw_enter: solock locking against myself 5 432d 519d
multicore test error: SYZFATAL: BUG: program execution failed: executor NUM: EOF (2) 78 405d 406d
openbsd test error: SYZFATAL: BUG: program execution failed: executor NUM: EOF 94 405d 410d
uvm_fault: __kernel_phys_end 1 435d 435d
panic: trap type NUM, code=NUM, pc=NUM (2) 1 446d 446d
protection_fault: in6_addmulti 1 446d 446d
panic: wakeup: p_stat is NUM 2 448d 470d
protection_fault: witness_checkorder 1 461d 461d
uvm_fault: NUM TID PID UID PRFLAGS PFLAGS CPU COMMAND*ADDR NUM NUM NUM ADDR 0K s 1 477d 477d
malloc: free list modified: free (3) 1 484d 484d
multicore test error: SYZFATAL: BUG: program execution failed: executor NUM: EOF 108 406d 407d
uvm_fault: km_free 6 509d 697d
panic:client_loop: send disconnect: Broken pipe 4 512d 651d
panic: vopclient_loop: send disconnect: Broken pipe (3) 3 515d 561d
panic: vopConnection to ssh-serialport.googleapis.com closed by remote host. 1 435d 435d
pool: free list modified: inpcb 2 524d 550d
pool: cpu free list modified: mbufpl (2) 1 527d 527d
protection_fault: lf_advlock (2) 4 531d 579d
pool: free list modified: art_heap4 (3) 1 538d 538d
uvm_fault: solock 1 539d 539d
panic: trap type NUM, code=NUM, pc=NUM 1 543d 543d
uvm_fault: hardclock (3) 1 547d 547d
assert "pmap->pm_type != PMAP_TYPE_EPT" failed in pmap.c 1 550d 550d
panic: tcpp_nucp t 1 461d 461d
pool: free list modified: bufpl 1 551d 551d
panic: vop_gene 1 461d 461d
panic: vop_generic_bclient_loop: send disconnect: Broken pipe 1 463d 463d
panic: vop_generic_bapdoapn 1 471d 471d
kernel: page fault trap, code=NUM syz 1 470d 470d
panic: vop_client_loop: send disconnect: Broken pipe (2) 1 478d 478d
panic: vop_gpeanneicri:c _kbeardonpe 1 479d 479d
panic: vop_geneclient_loop: send disconnect: Broken pipe 1 474d 474d
panic: voclient_loop: send disconnect: Broken pipe 1 560d 560d
protection_fault: tun_enqueue 1 560d 560d
assert "bp->b_data != NULL" failed in vfs_biomem.c (2) 2 561d 613d
witness: lock_object uninitialized: ADDR 71 566d 706d
panic: ufsdirhash_lookup: bad offset in hash array 1 566d 566d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte ADDR (2) 1 569d 569d
panic: vop_client_loop: send disconnect: Broken pipe 1 482d 482d
panic: vop_generic_bpaadonipc 1 487d 487d
pool: free list modified: sockpl (2) 3 578d 634d
malloc: free list modified: free (2) 1 584d 584d
SYZFAIL: ioctl remote attach failed (4) 68 587d 701d
uvm_fault: pmap_page_remove (4) 1 591d 591d
protection_fault: pool_do_put 1 604d 604d
panic: vpopa_ngiecn:kerericn_elba diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/setuid/k 1 523d 523d
panic: vpoanp_igc:en e r i c _ b ad op 1 524d 524d
panic: pmap_enter: PG_PVLIST mapping with unmanaged page: va ADDR, opte ADDR, pa ADDR 2 615d 691d
panic: pool_do_get: pfiaddrpl: page empty 1 615d 615d
panic: vop_generclient_loop: send disconnect: Broken pipe 1 529d 529d
uvm_fault: putc 2 620d 623d
uvm_fault: pf_anchor_global_RB_INSERT_COLOR 1 621d 621d
panic: vop_pganeince:ri kce_rbandelo p 1 540d 540d
panic: vop_genericp_anbaidc:o p 1 539d 539d
panic: vop_generic_baclient_loop: send disconnect: Broken pipe 1 538d 538d
panic: runtime error: invalid memory address or nil pointer dereference (8) 1 540d 540d
uvm_fault: ffs2_balloc 1 627d 627d
assert "ifa == rt->rt_ifa" failed in nd6.c (3) 2 628d 654d
uvm_fault: VOP_ISLOCKED (2) 1 629d 629d
panic: vpoapn_igc:e kernel diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/setuid/kernel/s 1 541d 541d
panic: vclient_loop: send disconnect: Broken pipe (2) 1 540d 540d
uvm_fault: db_enter (3) 1 541d 541d
uvm_fault: pool_do_get 1 636d 636d
panic: vclient_loop: send disconnect: Broken pipe 1 547d 547d
uvm_fault: ktrops 1 637d 637d
panic: vop_genericp_baandiocp: 1 597d 597d
panic: vop_geneprianci_c: kernel diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/multicore 1 560d 560d
panic: broken type ref (3) 1 551d 551d
panic: vop_generic_badpoapn 1 550d 550d
panic: vop_genepranici_c:bakdeorpn 1 552d 552d
uvm_fault: memcpy (4) 2 640d 709d
multicore test error: SYZFATAL: BUG: program execution failed: bad reply magic ADDR 1 558d 558d
openbsd test error: SYZFATAL: BUG: program execution failed: bad reply magic ADDR 3 558d 558d
assert "la != NULL" failed in if_ether.c (2) 1 647d 647d
protection_fault: sys_msgrcv 1 653d 653d
panic: vop_geneprainci_cb:a kdeoprn 1 653d 653d
panic:p a nic: kernel diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/setuid/kernel/sys/ke 1 565d 565d
openbsd build error (18) 1 565d 565d
uvm_fault: db_enter (2) 1 571d 571d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte ADDR 3 662d 712d
panic: vpoapn_igc:en keerricn_elba d o dpi 1 662d 662d
kernel: privileged instruction fault trap, code=NUM 1 664d 664d
uvm_fault: hardclock (2) 1 666d 666d
panic: vop_generic_bad 1 578d 578d
panic: vop_genclient_loop: send disconnect: Broken pipe (2) 1 583d 583d
kernel: protection fault trap, code=NUM (4) 1 584d 584d
panic: vop_genclient_loop: send disconnect: Broken pipe 1 585d 585d
panic: vop_generic_client_loop: send disconnect: Broken pipe 1 586d 586d
uvm_fault: ffs_nodealloccg 1 678d 678d
assert "dtlookup(unit) == NULL" failed in dt_dev.c 1 679d 679d
panic: vop_generic_pbaandiopc 1 589d 589d
pool: free list modified: fdescpl 1 681d 681d
assert "ifp != NULL" failed in if_ether.c (4) 2 681d 726d
panic: vopclient_loop: send disconnect: Broken pipe (2) 1 593d 593d
assert "ps->ps_uvncount == NUM" failed in kern_unveil.c 2 693d 706d
panic: pmap_remove_ptes: managed page without PG_PVLIST: va ADDR, opte ADDR 1 703d 703d
assert "bp->b_data != NULL" failed in vfs_biomem.c 1 704d 704d
panic: runtime error: invalid memory address or nil pointer dereference (7) 1 705d 705d
panic: missing alias (2) 2 705d 706d
panic: vref used where vget required (3) 1 706d 706d
panic: client_loop: send disconnect: Broken pipe (2) 1 616d 616d
panic: vop_generic_WbAaRdNopI 1 620d 620d
panic: apcaqniuci:r kinegr nbleol c kdaiblage snloesteipc laosscke r t io n " ! _ ke r n e l_ l o wcikt_hh s 1 620d 620d
panic: acqupirainincg: b lo c kkaerblneel s l e ep l o c k d i a gwintohs tsipc i nl oc k o r c r it i c a l 1 620d 620d
panic: vop_gclient_loop: send disconnect: Broken pipe 1 620d 620d
panic: acquipraniincg: k e brnleolck daibaleg nsolseteip lc oacsks weirttiho n s "pi!nl_okecrkn oelr_ l corcik_thiec 1 621d 621d
panic: acpquainriic:n g bl o ck a b le s l e e p l o c k w i t h s p in l o c k o r c ri t i ca l s 1 621d 621d
panic: acquiring blpocankaicb:l e s l e keerp lnoecl k w i t h s p i nl oc k o r cr i t ic a l s e c ti o n 1 621d 621d
panic: apcaqnuiic:ri nkg ebrloncekla b l e sl ee p l o c k w i t h s p i n l oc k o r cr i ti c a l 1 621d 621d
panic: acquiring blockable sleep lock with spinlock or criticapl saneictci:o nk ehrenled (lk deriangenlo_lsotickc) 1 621d 621d
panic: acquiring blocpkaanbilec: k er snleele p lo c k w i th s p i nl o c k or c r i ti ca l s ec t 1 621d 621d
kernel: protection fault trap, code=NUM (3) 1 621d 621d
panic: acquirpinagni c :b l koecrknaebll ed silageneop slotickc a ss e r t i o n " ! _ k e r n el _ l o ckwi_t 1 621d 621d
panic: acquiring bplaoncikca:b l e sl e e p l okcek rwnielt h s p i n dloicak gonro scrtiitci c a l s e cati 1 621d 621d
panic: acquiring blockabplaen i sc:le e p l kocek rn e l d ia g no s t i wci t ha s s e r t i o n "s!_pkienlro 1 621d 621d
panic: acquiringp abnlioc:c k ab l e sl e e p lo c k w it h s p i n l oc k o rk er n e l d i agn o s 1 622d 622d
panic: acpqauniicr:in g bl kocerknaeblle d ia g no s t i cs alseseeprt i lonoc k w it"h!_ k seprninell_olckoc 1 622d 622d
panic: acquirinpgan bilco:c kkaeblrne esll e ep lo ck wi t h s p in l oc k o r c r i ti c a l s ec t 1 622d 622d
panic: acquiring blockablep a ni c : k er ne l d ia gn o s t i c as s e r stleieopn l oc k w i t h s 1 622d 622d
panic: acquiring bl o c kpaablniec s:le e p l o c k wi t h s p i n l o c k o r c ri t i c a l s e c t i 1 622d 622d
panic: apcqauniircin:g b lkeorcknaelbldei saglenoepst ilc o c k w i th sp i n l o c k a s s oerrt ciorint i"c! 1 622d 622d
kernel: protection fSeaBIOS (version NUM.NUM.NUM-google) syz 1 627d 627d
panic: vop_generic_bado 1 631d 631d
panic: bad dir (2) 44 688d 700d
pool: free list modified: pdppl (2) 1 724d 724d
panic: client_loop: send disconnect: Broken pipe 1 649d 649d
assert "next != NULL && next->start <= entry->end" failed in uvm_fault.c (2) syz 2 719d 719d
witness: reversal: lock order data missing (2) C 173 784d 933d
openbsd build error (16) 1 655d 655d
multicore boot error: witness: reversal: vmmaplk inode 60 656d 656d
uvm_fault: pmap_page_remove (3) 1 660d 660d
multicore boot error: kernel: protection fault trap, code=NUM 57 660d 661d
panic: acquiring blockable sleep lock with spinlock or critical section held (rwlock) kmmaplk (2) 2 755d 816d
panic: vopclient_loop: send disconnect: Broken pipe 1 674d 674d
panic: vop_generipac_nibac:do kpe 1 675d 675d
panic: vop 1 682d 682d
SYZFAIL: tun: can't open device (3) 86 688d 688d
SYZFAIL: tun_id out of range (2) 182 688d 688d
panic: trap type NUM, code=NUM, pc=ADDR 1 698d 698d
kernel: protection fault trap, code=NUM (2) C 16 703d 726d
panic: 1 702d 702d
SYZFAIL: dup2(NUM, kInPipeFd) failed syz 4 708d 726d
SYZFAIL: tun_id out of range 109 710d 710d
panic: vop_generic_badop 1 791d 791d
multicore build error (14) 58 713d 715d
kernel: double fault trap, code=NUM 1 713d 713d
SYZFAIL: ioctl remote attach failed (2) 6 714d 733d
uvm_fault: hardclock 1 816d 816d
SYZFAIL: open of /dev/kcov failed 3 730d 730d
SYZFAIL: ioctl remote attach failed 3 832d 884d
kernel: page fault trap, code=0 (4) 2 833d 861d
SYZFAIL: tun: can't open device (2) 1 862d 862d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (20) 24 788d 807d
openbsd test error: timed out (3) 72 794d 797d
multicore test error: timed out (3) 150 794d 797d
kernel: protection fault trap, code=NUM 1 807d 807d
uvm_fault: x86_ipi_db (6) 1 829d 829d
panic: wakeup: p_stat iSeaBIOS (version NUM.NUM.NUM-google) 1 830d 830d
uvm_fault: x86_ipi_db (5) 1 833d 833d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (19) 3 843d 843d
uvm_fault: x86_ipi_db (4) 1 847d 847d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (18) 6 866d 867d
panic: acquiring blockable sleep lock with spinlock or critical section held (rwlock) kmmaplk 11 964d 1128d
multicore build error (12) 1 1005d 1005d
uvm_fault: x86_ipi_db (3) 4 1012d 1029d
panic: runtime error: invalid memory address or nil pointer dereference (6) 276 937d 937d
openbsd test error: lost connection to test machine (2) 3 950d 950d
multicore test error: lost connection to test machine (2) 6 950d 950d
openbsd test error: lost connection to test machine 15 950d 951d
multicore test error: lost connection to test machine 36 950d 951d
corrupted report (4) 21 1047d 1215d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (17) 3 997d 997d
panic: runtime error: invalid memory address or nil pointer dereference (5) 10821 990d 990d
panic: runtime error: invalid memory address or nil pointer dereference (4) 2753 990d 990d
SYZFAIL: clone failed syz 1 1011d 1011d
multicore build error (11) 2 1012d 1012d
multicore build error (10) 2 1044d 1117d
openbsd build error (13) 1 1122d 1122d
uvm_fault: x86_ipi_db (2) 1 1063d 1063d
uvm_fault: x86_ipi_db 1 1066d 1066d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (16) 21 1068d 1073d
assert "(key.from) > 0 && (key.from) <= w_max_used_index && (key.from) < witness_count" failed in subr_witness.c 1 1169d 1169d
uvm_fault: strlen 1 1173d 1173d
panic: ffs_alloccg: map corrupted 1 1174d 1174d
uvm_fault: fdcopy 1 1178d 1178d
panic (2) syz 8 1093d 1102d
uvm_fault: in6_pcbhashlookup 1 1186d 1186d
panic 1 1105d 1105d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 (3) 9 1197d 1201d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (15) 6 1124d 1133d
assert "ifp != NULL" failed in if_ether.c (3) 2 1208d 1212d
uvm_fault: pmap_page_remove (2) 5 1212d 1389d
uvm_fault: nd6_dad_duplicated 1 1212d 1212d
soreceive 1 58 1218d 1374d
pool: free list modified: pvpl 17 1219d 1474d
panic: runtime error: invalid memory address or nil pointer dereference (3) 28 1220d 1486d
panic: m_copym0: m == NULL and not COPYALL 306 1217d 1481d
panic: m_copym0: short mbuf chain 214 1221d 1480d
witness: reversal: vmmaplk inode (2) C 46771 1132d 1446d
witness: reversal: inode netlock C 6 1132d 1132d
witness: reversal: netlock inode C 11 1132d 1132d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 (3) 3 1133d 1133d
uvm_fault: tun_dev_read (2) 71 1226d 1473d
uvm_fault: rtrequest 1 1226d 1226d
openbsd build error (12) 1 1137d 1137d
multicore build error (9) 1 1137d 1137d
uvm_fault: ml_dequeue 2 1227d 1269d
assert "dupe == NULL" failed in uvm_page.c (2) 1 1227d 1227d
panic: pr_find_pagehead: mbufpl: incorrect page (2) 20 1231d 1498d
uvm_fault: memcpy (3) 26 1232d 1289d
uvm_fault: sbdrop 44 1239d 1458d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (14) 6 1150d 1151d
assert "pg->wire_count == 1" failed in vfs_biomem.c (2) 9 1241d 1309d
panic: in6_cksum: out of data, len 64 1 1243d 1243d
uvm_fault: _bpf_mtap (2) 8 1246d 1261d
panic: unhandled af (3) syz 7 1242d 1251d
uvm_fault: ml_enlist (2) 1 1247d 1247d
uvm_fault: ml_purge (2) 8 1252d 1470d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (13) 39 1171d 1250d
panic: pr_find_pagehead: mbufpl: page header missing (3) 2 1256d 1289d
uvm_fault: m_free (2) 429 1226d 1475d
uvm_fault: pool_cache_get 518 1227d 1505d
pool: free list modified: anonpl 8 1259d 1481d
panic: amap_lookup: offset out of range 2 1262d 1309d
uvm_fault: 0x1:uvm_fault(ADDR, 0x1, 0, 1) -> e kernel: page fault trap, code=0Stopped at db_read_bytes 1 1174d 1174d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 (2) 45 1175d 1177d
panic: free: size too small 10 <= 4096 / 2 (ADDR) type devbuf 2 1265d 1270d
pool: free list modified: vcpupl 1 1266d 1266d
uvm_fault: bpf_mtap 10 1266d 1494d
pool: free list modified: filepl 1 1273d 1273d
pool: free list modified: shmpl (3) 1 1278d 1278d
uvm_fault: uvmfault_anonget 1 1281d 1281d
uvm_fault: unveil_find_cover 1 1282d 1282d
assert "mhead->m_flags & M_PKTHDR" failed in switchctl.c (2) 1 1283d 1283d
malloc: free list modified: free 12 1284d 1506d
uvm_fault: nd6_ns_output 1 1291d 1291d
uvm_fault: x86_send_ipi (2) 2 1293d 1305d
panic.go:LINE +0x72 (7) syz 3 1212d 1213d
assert "ifp != NULL" failed in rtsock.c (2) 26 1271d 1274d
panic: vref used where vget required (2) 2 1302d 1306d
panic: amap_lookups: offset out of range (2) 1 1303d 1303d
pool: free list modified: pffrnode 7 1303d 1442d
uvm_fault: uvm_map_clean 1 1305d 1305d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (8) 10 1257d 1328d
uvm_fault: igmp_leavegroup 1 1307d 1307d
syzkaller: make target failed: failed to run ["gmake" "target"]: exit status 2 3 1218d 1218d
panic(ADDR) at panic+0x164 1 1221d 1221d
openbsd boot error: can't ssh into the instance (3) 18 1221d 1222d
multicore boot error: can't ssh into the instance (3) 15 1221d 1222d
kernel: privileged instruction fault trap, code=0 (2) 1 1312d 1312d
assert "!_kernel_lock_held()" failed in kern_fork.c (2) 1 1312d 1312d
uvm_fault(ADDR, 0xa, 0, 1) -> e (2) 1 1227d 1227d
assert "!ISSET(rt->rt_flags, RTF_LOCAL)" failed in nd6.c (2) 1 1316d 1316d
no output from test machine (4) syz 14713 1230d 1237d
panic: amap_wipeout: corrupt amap 6 1321d 1410d
uvm_fault(ADDR, 0x7b8, 0, 1) -> e 1 1239d 1239d
uvm_fault(ADDR, 0x3, 0, 1) -> e (2) 1 1243d 1243d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 (2) 21 1245d 1247d
uvm_fault(ADDR, 0xa, 0, 1) -> e 1 1245d 1245d
pool: free list modified: tcpqe 4 1336d 1453d
uvm_fault(ADDR, 0x3, 0, 1) -> e 1 1248d 1248d
no output from test machine (2) C 89865 1251d 1304d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (12) 9 1260d 1262d
assert "sb->sb_cc == 0" failed in uipc_socket2.c 2 1342d 1386d
pool: free list modified: vmsppl 1 1253d 1253d
uvm_fault(ADDR, 0xbef, 0, 1) -> e (2) 1 1253d 1253d
uvm_fault(ADDR, 0x10b, 0, 1) -> e (2) 1 1259d 1259d
uvm_fault(ADDR, 0xbef, 0, 1) -> e 1 1261d 1261d
pool: free list modified: vnodes 1 1355d 1355d
uvm_fault(ADDR, 0x10b, 0, 1) -> e 1 1274d 1274d
kernel: page fault trap, code=0 (3) 1 1275d 1275d
panic: bad group arg size 29, should be <= 32 for &prog.GroupArg{ArgCommon:prog.ArgCommon{ref:LINEx328, dir:LINEx0}, Inn 1 1278d 1278d
assert "ps->ps_uvncount == 0" failed in kern_unveil.c (2) 1 1373d 1373d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (11) 6 1284d 1307d
pool: free list modified: uvmvnodes 1 1375d 1375d
pool: free list modified: sockpl 2 1377d 1388d
uvm_fault(ADDR, ADDR, 0, 1) -> e 1 1287d 1287d
panic: bad group arg size 29, should be <= 32 for &prog.GroupArg{ArgCommon:prog.ArgCommon{ref:LINEx2c0, dir:LINEx0}, Inn 1 1291d 1291d
uvm_fault: memcpy (2) syz 2168 1296d 1545d
uvm_fault: vio_start 1 1387d 1387d
uvm_fault: syscall 1 1389d 1389d
panic: broken type ref 1 1304d 1304d
pool: free list modified: mtagpl 1 1391d 1391d
assert "dupe == NULL" failed in uvm_page.c 4 1392d 1505d
pool: free list modified: art_table 1 1394d 1394d
assert "ifp != NULL" failed in if_ether.c (2) 1 1401d 1401d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 3 1312d 1312d
kqueue: knote !ACTIVE 2 1404d 1408d
uvm_fault: in4_cksum 1 1408d 1408d
panic: bad arg kind: <nil> (11) 1 1324d 1324d
kernel: privileged instruction fault trap, code=0 1 1416d 1416d
uvm_fault: ml_enlist 1 1417d 1417d
uvm_fault: tun_init 1 1417d 1417d
uvm_fault returns 14, GPA=ADDR C 2 1330d 1330d
panic: lock (kernel_lock) mbufpl not locked 1 1421d 1421d
panic: bad group arg size 0, should be <= 24 for &prog.GroupArg{ArgCommon:prog.ArgCommon{typ:(*prog.StructType)(ADDR)}, 1 1333d 1333d
panic.go:LINE +0x72 (5) 1 1336d 1336d
assert "pg->wire_count == 0" failed in uvm_page.c 1 1431d 1431d
panic: bad arg kind: <nil> (10) 1 1346d 1346d
panic: bad arg kind: <nil> (9) 1 1349d 1349d
pool: free list modified: art_heap4 2 1444d 1468d
uvm_fault: _bus_dmamap_load_mbuf 1 1447d 1447d
uvm_fault: m_copym 1 1449d 1449d
panic: bad arg kind: <nil> (8) 1 1361d 1361d
panic: pr_find_pagehead: mbufpl: page header missing (2) 1 1451d 1451d
pool: cpu free list modified: mcl2k 1 1452d 1452d
panic: bad arg kind: <nil> (7) 1 1365d 1365d
pool: free list modified: shmpl (2) 1 1459d 1459d
panic: bad arg kind: <nil> (6) 1 1370d 1370d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (7) 1 1371d 1371d
assert "mhead->m_flags & M_PKTHDR" failed in switchctl.c 1 1462d 1462d
pool: double put: mbufpl (2) 2 1463d 1494d
panic: attempt to access user address ADDR in supervisor mode 7 1467d 1517d
kernel: double fault trap, code=0 (2) syz 2 1494d 1494d
uvm_fault: rtable_satoplen (3) syz 237 1502d 1545d
panic: amap_lookups: offset out of range 1 1471d 1471d
panic: bad arg kind: <nil> (5) 1 1384d 1384d
uvm_fault: witness_checkorder (2) 1 1474d 1474d
panic: bad arg kind: &prog.IntType{IntTypeCommon:prog.IntTypeCommon{TypeCommon:prog.TypeCommon{TypeName:"int32", FldName 1 1387d 1387d
panic: bad arg kind (2) 2 1477d 1479d
assert "pg->wire_count == 1" failed in vfs_biomem.c 66 1477d 1802d
assert "ifp != NULL" failed in rtsock.c 2 1478d 1479d
panic.go:LINE +0x72 (4) 1 1388d 1388d
uvm_fault: x86_send_ipi 1 1482d 1482d
uvm_fault: VOP_ISLOCKED 1 1482d 1482d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (10) 3 1392d 1392d
panic: bad arg kind: <nil> (4) 1 1394d 1394d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (6) 1 1395d 1395d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST, va = ADDR, pa = ADDR (2) 1 1486d 1486d
uvm_fault: m_zero 1 1488d 1488d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (5) 1 1402d 1402d
panic: free: non-malloced addr ADDR type in_multi 4 1492d 1514d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (9) 3 1404d 1404d
uvm_fault: pfi_kif_update 6 1495d 1622d
uvm_fault: fifo_write 1 1495d 1495d
panic.go:LINE +0x72 (3) 1 1406d 1406d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (4) 2 1408d 1409d
panic: receive 1: so ADDR, so_type 3, sb_cc 176 1 1497d 1497d
panic: ffs_valloc: dup alloc 2 1498d 1501d
uvm_fault: 0ddb{1}> ddb{1}> set $lines = 0ddb{1}> set $maxwidth = 0ddb{1}> show panickernel page faultattempt to e 1 1411d 1411d
assert "!_kernel_lock_held()" failed in kern_fork.c 15 1502d 1763d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (8) 3 1415d 1415d
panic: WAaRcNqIuNirGi:n g SPbLl NoOcT kLaObWlEReE Ds lOeNe pSY SloCcAkL Lwi 2 t15h7 s79p3i4n4l5o0c kEX IorT 0c rai 1 1415d 1415d
uvm_fault 10 1508d 1523d
panic: free: size too small 24 <= 256 / 2 (ADDR) type in_multi 1 1513d 1513d
panic: bad arg kind: <nil> (3) 1 1425d 1424d
assert "cifp != NULL" failed in route.c 89 1487d 1542d
assert "rt->rt_ifa->ifa_ifp != NULL" failed in route.c 830 1486d 1527d
uvm_fault: in6_purgeaddr 1423 1487d 1527d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (7) 3 1428d 1428d
assert "ifp != NULL" failed in if_ether.c 208 1488d 1543d
assert "ifa == rt->rt_ifa" failed in nd6.c (2) 262 1489d 1526d
uvm_fault: tun_clone_destroy 1 1519d 1519d
panic: bad arg kind: <nil> (2) 1 1436d 1436d
panic: bad arg kind: <nil> 1 1439d 1439d
panic.go:LINE +0x72 (2) 1 1442d 1442d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (6) 3 1443d 1443d
uvm_fault: pmap_page_remove 7 1535d 1792d
openbsd build error (7) 1 1447d 1447d
multicore boot error: can't ssh into the instance (2) 96 1463d 1465d
openbsd boot error: can't ssh into the instance (2) 48 1463d 1465d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (3) 1 1463d 1463d
panic: vref used where vget required 1 1553d 1553d
panic: pfi_dynaddr_update 2 1570d 1650d
uvm_fault: pool_do_put 1 1487d 1487d
panic: runtime error: invalid memory address or nil pointer dereference (2) 1 1489d 1489d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST, va = ADDR, pa = ADDR 1 1492d 1492d
pool: free list modified: pdppl 1 1492d 1492d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (5) 3 1492d 1492d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (2) 1 1492d 1492d
panic.go:LINE +0x72 1 1493d 1493d
witness: reversal: inode fdlock C 523 1560d 1773d
panic: runtime error: invalid memory address or nil pointer dereference 1 1498d 1498d
panic: fifo_badop called C 8841 1499d 1834d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR 1 1514d 1514d
panic: ffs_blkfree: bad size 2 1614d 1618d
kernel: double fault trap, code=0 1 1662d 1662d
assert "la != NULL" failed in if_ether.c 3 1647d 1649d
uvm_fault: ml_purge 6 1645d 1651d
panic: in_cksum: out of data, len 63 1 1631d 1631d
uvm_fault: pfi_ifhead_RB_REMOVE 1 1652d 1652d
panic: uvm_fault_unwire_locked: address not in map (2) 7 1642d 1770d
panicConnection to ssh-serialport.googleapis.com closed by remote host. 1 1501d 1501d
uvm_fault: vfs_lookup 1 1686d 1686d
panic: Data modified on freelist: word 4 of object ADDR size 0x84 previous type free (ADDR != ADDR) 1 1513d 1513d
panic: Data modified on freelist: word 5 of object ADDR size 0xa0 previous type devbuf (0xd != ADDR) 1 1513d 1513d
panic: Data modified on freelist: word 5 of object ADDR size 0xc0 previous type devbuf (0xd != ADDR) 1 1520d 1520d
panic: Data modified on freelist: word 5 of object ADDR size 0x100 previous type devbuf (0xd != ADDR) syz 7 1513d 1543d
panic: attempt WtAoR eNIxNeGc:u tSeP uL seNOrT a LddOrWEesRsE D 0Ox0N iSYn SCsAuLpLe rv3i 4s orEX ImTo d0 e9 1 1513d 1513d
panic: bad arg kind 1 1524d 1524d
uvm_fault: ADDR: movl $ADDR,0(%rdi)ddb> ddb> set $lines = 0ddb> set $maxwidth = 0ddb> show panickernel page 1 1528d 1528d
uvm_fault: ADDR: jmp ADDR 1 1530d 1530d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (4) 9 1537d 1538d
uvm_fault: pmap_enter syz 3 1778d 1784d
panic: malloc: allocation tooWA RlNaIrNGge: ,SPL NOT LOWERED ON SYSCALL 3 4 EXIT 0 9 1 1557d 1557d
multicore test error: timed out 43 1675d 1712d
panic: amap_add: slot in use 2 1765d 1770d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (3) 12 1594d 1595d
panic: vput: v_writecount != 0 C 2 1596d 1596d
uvm_fault: _bpf_mtap 31 1808d 1830d
panic: pool_cache_item_magic_check: mcl2k cpu free list modified: item addr ADDR+24 ADDR!=ADDR 1 1811d 1811d
panic: rw_enter: vmmaplk locking against myself 3 1821d 1823d
uvm_fault: tun_dev_read 2 1822d 1823d
openbsd test error: timed out 19 1680d 1740d
panic: bpf_mcopy 1 1825d 1825d
multicore build error (4) 2 1669d 1669d
openbsd build error (6) 1 1669d 1669d
pool: double put: mcl2k 4 1827d 1829d
pool: double put: mcl64k 1 1828d 1828d
panic: missing alias 1 1832d 1832d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (2) 3 1663d 1663d
panic: bad dir C 1390 1668d 1669d
multicore build error (2) 10 1694d 1695d
openbsd build error (4) 5 1694d 1695d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 12 1703d 1704d
multicore build error 26 1704d 1705d
openbsd build error (3) 13 1704d 1705d
multicore boot error: can't ssh into the instance 6 1704d 1704d
openbsd boot error: can't ssh into the instance 3 1704d 1704d
panic: ffs_read: type 0 1 1842d 1842d
panic: serialport: VM disconnected. 1 1713d 1713d
panic: kserialport: VM disconnected. 1 1713d 1713d
panic: kernel diagnostic serialport: VM disconnected. 1 1713d 1713d
panic: kernel diserialport: VM disconnected. 1 1792d 1792d
openbsd build error 1 1757d 1757d
lost connection to test machine C 276 1805d 1879d
https://github.com/openbsd/src.git boot error: uvm_fault: memcmp 6 1811d 1811d
https://github.com/openbsd/src.git test error 16 1819d 1840d
multicore boot error: uvm_fault: smbios_find 12 1811d 1811d
kernel: kernel relinking fa 1 1900d 1879d
https://github.com/openbsd/src.git boot error 479 1834d 1879d
panic: sandbox escaping file name "../file0" 111 1834d 1835d
multicore test error (2) 3 1820d 1820d
multicore test error 3 1820d 1820d
panic: sandbox escaping file name "../file0/file0", Files are map[./file0:true ../file0:true] 1 1834d 1834d
panic: sandbox escaping file name "../file0", Files are map[../file0:true] 11 1834d 1834d
panic: sandbox escaping file name "../file0", Files are map[./file0:true ../file0:true] 1 1834d 1834d
panic: sandbox escaping file name "../file0/file0" 2 1834d 1834d