syzbot


Title Repro Cause bisect Fix bisect Count Last Reported
multicore build error (12) 1 105d 105d
uvm_fault: x86_ipi_db (3) 4 112d 129d
panic: runtime error: invalid memory address or nil pointer dereference (6) 276 37d 37d
openbsd test error: lost connection to test machine (2) 3 50d 50d
multicore test error: lost connection to test machine (2) 6 50d 50d
openbsd test error: lost connection to test machine 15 50d 50d
multicore test error: lost connection to test machine 36 50d 50d
corrupted report (4) 21 146d 315d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (17) 3 96d 96d
panic: runtime error: invalid memory address or nil pointer dereference (5) 10821 89d 90d
panic: runtime error: invalid memory address or nil pointer dereference (4) 2753 90d 90d
SYZFAIL: clone failed syz 1 111d 111d
multicore build error (11) 2 112d 112d
multicore build error (10) 2 144d 217d
openbsd build error (13) 1 222d 222d
uvm_fault: x86_ipi_db (2) 1 162d 162d
uvm_fault: x86_ipi_db 1 166d 166d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (16) 21 168d 172d
assert "(key.from) > 0 && (key.from) <= w_max_used_index && (key.from) < witness_count" failed in subr_witness.c 1 269d 269d
uvm_fault: strlen 1 273d 273d
panic: ffs_alloccg: map corrupted 1 274d 274d
uvm_fault: fdcopy 1 278d 278d
panic (2) syz 8 193d 202d
uvm_fault: in6_pcbhashlookup 1 286d 286d
panic 1 205d 205d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 (3) 9 296d 300d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (15) 6 223d 232d
assert "ifp != NULL" failed in if_ether.c (3) 2 307d 312d
uvm_fault: pmap_page_remove (2) 5 312d 488d
uvm_fault: nd6_dad_duplicated 1 312d 312d
soreceive 1 58 318d 474d
pool: free list modified: pvpl 17 319d 574d
panic: runtime error: invalid memory address or nil pointer dereference (3) 28 320d 586d
panic: m_copym0: m == NULL and not COPYALL 306 317d 581d
panic: m_copym0: short mbuf chain 214 321d 580d
witness: reversal: vmmaplk inode (2) C 46771 232d 546d
witness: reversal: inode netlock C 6 232d 232d
witness: reversal: netlock inode C 11 232d 232d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 (3) 3 233d 233d
uvm_fault: tun_dev_read (2) 71 326d 573d
uvm_fault: rtrequest 1 326d 326d
openbsd build error (12) 1 237d 237d
multicore build error (9) 1 237d 237d
uvm_fault: ml_dequeue 2 326d 368d
assert "dupe == NULL" failed in uvm_page.c (2) 1 327d 327d
panic: pr_find_pagehead: mbufpl: incorrect page (2) 20 331d 598d
uvm_fault: memcpy (3) 26 331d 389d
uvm_fault: sbdrop 44 339d 558d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (14) 6 250d 251d
assert "pg->wire_count == 1" failed in vfs_biomem.c (2) 9 341d 409d
panic: in6_cksum: out of data, len 64 1 343d 343d
uvm_fault: _bpf_mtap (2) 8 346d 360d
panic: unhandled af (3) syz 7 342d 351d
uvm_fault: ml_enlist (2) 1 346d 346d
uvm_fault: ml_purge (2) 8 352d 570d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (13) 39 271d 349d
panic: pr_find_pagehead: mbufpl: page header missing (3) 2 355d 389d
uvm_fault: m_free (2) 429 326d 575d
uvm_fault: pool_cache_get 518 327d 605d
pool: free list modified: anonpl 8 359d 581d
panic: amap_lookup: offset out of range 2 362d 409d
uvm_fault: 0x1:uvm_fault(ADDR, 0x1, 0, 1) -> e kernel: page fault trap, code=0Stopped at db_read_bytes 1 274d 274d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 (2) 45 275d 276d
panic: free: size too small 10 <= 4096 / 2 (ADDR) type devbuf 2 365d 370d
pool: free list modified: vcpupl 1 366d 366d
uvm_fault: bpf_mtap 10 366d 593d
pool: free list modified: filepl 1 373d 373d
pool: free list modified: shmpl (3) 1 378d 378d
uvm_fault: uvmfault_anonget 1 381d 381d
uvm_fault: unveil_find_cover 1 382d 382d
assert "mhead->m_flags & M_PKTHDR" failed in switchctl.c (2) 1 383d 383d
malloc: free list modified: free 12 383d 605d
uvm_fault: nd6_ns_output 1 391d 391d
uvm_fault: x86_send_ipi (2) 2 393d 404d
panic.go:LINE +0x72 (7) syz 3 312d 313d
assert "ifp != NULL" failed in rtsock.c (2) 26 371d 374d
panic: vref used where vget required (2) 2 402d 406d
panic: amap_lookups: offset out of range (2) 1 403d 403d
pool: free list modified: pffrnode 7 403d 541d
uvm_fault: uvm_map_clean 1 405d 405d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (8) 10 357d 428d
uvm_fault: igmp_leavegroup 1 407d 407d
syzkaller: make target failed: failed to run ["gmake" "target"]: exit status 2 3 318d 318d
panic(ADDR) at panic+0x164 1 320d 320d
openbsd boot error: can't ssh into the instance (3) 18 321d 322d
multicore boot error: can't ssh into the instance (3) 15 321d 322d
kernel: privileged instruction fault trap, code=0 (2) 1 412d 412d
assert "!_kernel_lock_held()" failed in kern_fork.c (2) 1 412d 412d
uvm_fault(ADDR, 0xa, 0, 1) -> e (2) 1 327d 327d
assert "!ISSET(rt->rt_flags, RTF_LOCAL)" failed in nd6.c (2) 1 416d 416d
no output from test machine (4) syz 14713 330d 336d
panic: amap_wipeout: corrupt amap 6 421d 510d
uvm_fault(ADDR, 0x7b8, 0, 1) -> e 1 338d 338d
uvm_fault(ADDR, 0x3, 0, 1) -> e (2) 1 343d 343d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 (2) 21 345d 347d
uvm_fault(ADDR, 0xa, 0, 1) -> e 1 345d 345d
pool: free list modified: tcpqe 4 436d 553d
uvm_fault(ADDR, 0x3, 0, 1) -> e 1 348d 348d
no output from test machine (2) C 89865 351d 404d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (12) 9 360d 362d
assert "sb->sb_cc == 0" failed in uipc_socket2.c 2 441d 486d
pool: free list modified: vmsppl 1 353d 353d
uvm_fault(ADDR, 0xbef, 0, 1) -> e (2) 1 353d 353d
uvm_fault(ADDR, 0x10b, 0, 1) -> e (2) 1 359d 359d
uvm_fault(ADDR, 0xbef, 0, 1) -> e 1 361d 361d
pool: free list modified: vnodes 1 455d 455d
uvm_fault(ADDR, 0x10b, 0, 1) -> e 1 374d 374d
kernel: page fault trap, code=0 (3) 1 375d 375d
panic: bad group arg size 29, should be <= 32 for &prog.GroupArg{ArgCommon:prog.ArgCommon{ref:LINEx328, dir:LINEx0}, Inn 1 377d 377d
assert "ps->ps_uvncount == 0" failed in kern_unveil.c (2) 1 473d 473d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (11) 6 384d 407d
pool: free list modified: uvmvnodes 1 475d 475d
pool: free list modified: sockpl 2 477d 487d
uvm_fault(ADDR, ADDR, 0, 1) -> e 1 387d 387d
panic: bad group arg size 29, should be <= 32 for &prog.GroupArg{ArgCommon:prog.ArgCommon{ref:LINEx2c0, dir:LINEx0}, Inn 1 391d 391d
uvm_fault: memcpy (2) syz 2168 396d 644d
uvm_fault: vio_start 1 487d 487d
uvm_fault: syscall 1 489d 489d
panic: broken type ref 1 404d 404d
pool: free list modified: mtagpl 1 490d 490d
assert "dupe == NULL" failed in uvm_page.c 4 491d 604d
pool: free list modified: art_table 1 494d 494d
assert "ifp != NULL" failed in if_ether.c (2) 1 501d 501d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 3 411d 411d
kqueue: knote !ACTIVE 2 504d 508d
uvm_fault: in4_cksum 1 508d 508d
panic: bad arg kind: <nil> (11) 1 424d 424d
kernel: privileged instruction fault trap, code=0 1 516d 516d
uvm_fault: ml_enlist 1 516d 516d
uvm_fault: tun_init 1 517d 517d
uvm_fault returns 14, GPA=ADDR C 2 430d 430d
panic: lock (kernel_lock) mbufpl not locked 1 520d 520d
panic: bad group arg size 0, should be <= 24 for &prog.GroupArg{ArgCommon:prog.ArgCommon{typ:(*prog.StructType)(ADDR)}, 1 433d 433d
panic.go:LINE +0x72 (5) 1 435d 435d
assert "pg->wire_count == 0" failed in uvm_page.c 1 531d 531d
panic: bad arg kind: <nil> (10) 1 445d 445d
panic: bad arg kind: <nil> (9) 1 448d 448d
pool: free list modified: art_heap4 2 544d 568d
uvm_fault: _bus_dmamap_load_mbuf 1 547d 547d
uvm_fault: m_copym 1 548d 548d
panic: bad arg kind: <nil> (8) 1 460d 460d
panic: pr_find_pagehead: mbufpl: page header missing (2) 1 551d 551d
pool: cpu free list modified: mcl2k 1 552d 552d
panic: bad arg kind: <nil> (7) 1 464d 464d
pool: free list modified: shmpl (2) 1 558d 558d
panic: bad arg kind: <nil> (6) 1 470d 470d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (7) 1 470d 470d
assert "mhead->m_flags & M_PKTHDR" failed in switchctl.c 1 561d 561d
pool: double put: mbufpl (2) 2 562d 594d
panic: attempt to access user address ADDR in supervisor mode 7 567d 617d
kernel: double fault trap, code=0 (2) syz 2 593d 593d
uvm_fault: rtable_satoplen (3) syz 237 601d 644d
panic: amap_lookups: offset out of range 1 571d 571d
panic: bad arg kind: <nil> (5) 1 483d 483d
uvm_fault: witness_checkorder (2) 1 574d 574d
panic: bad arg kind: &prog.IntType{IntTypeCommon:prog.IntTypeCommon{TypeCommon:prog.TypeCommon{TypeName:"int32", FldName 1 486d 486d
panic: bad arg kind (2) 2 576d 578d
assert "pg->wire_count == 1" failed in vfs_biomem.c 66 577d 902d
assert "ifp != NULL" failed in rtsock.c 2 577d 579d
panic.go:LINE +0x72 (4) 1 488d 488d
uvm_fault: x86_send_ipi 1 581d 581d
uvm_fault: VOP_ISLOCKED 1 582d 582d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (10) 3 492d 492d
panic: bad arg kind: <nil> (4) 1 494d 494d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (6) 1 494d 494d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST, va = ADDR, pa = ADDR (2) 1 586d 586d
uvm_fault: m_zero 1 588d 588d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (5) 1 502d 502d
panic: free: non-malloced addr ADDR type in_multi 4 592d 614d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (9) 3 504d 504d
uvm_fault: pfi_kif_update 6 595d 721d
uvm_fault: fifo_write 1 595d 595d
panic.go:LINE +0x72 (3) 1 506d 506d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (4) 2 508d 509d
panic: receive 1: so ADDR, so_type 3, sb_cc 176 1 597d 597d
panic: ffs_valloc: dup alloc 2 598d 601d
uvm_fault: 0ddb{1}> ddb{1}> set $lines = 0ddb{1}> set $maxwidth = 0ddb{1}> show panickernel page faultattempt to e 1 510d 510d
assert "!_kernel_lock_held()" failed in kern_fork.c 15 602d 862d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (8) 3 514d 514d
panic: WAaRcNqIuNirGi:n g SPbLl NoOcT kLaObWlEReE Ds lOeNe pSY SloCcAkL Lwi 2 t15h7 s79p3i4n4l5o0c kEX IorT 0c rai 1 515d 515d
uvm_fault 10 608d 623d
panic: free: size too small 24 <= 256 / 2 (ADDR) type in_multi 1 613d 613d
panic: bad arg kind: <nil> (3) 1 524d 524d
assert "cifp != NULL" failed in route.c 89 587d 642d
assert "rt->rt_ifa->ifa_ifp != NULL" failed in route.c 830 586d 627d
uvm_fault: in6_purgeaddr 1423 586d 627d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (7) 3 528d 528d
assert "ifp != NULL" failed in if_ether.c 208 588d 642d
assert "ifa == rt->rt_ifa" failed in nd6.c (2) 262 588d 626d
uvm_fault: tun_clone_destroy 1 619d 619d
panic: bad arg kind: <nil> (2) 1 536d 536d
panic: bad arg kind: <nil> 1 539d 539d
panic.go:LINE +0x72 (2) 1 541d 541d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (6) 3 543d 543d
uvm_fault: pmap_page_remove 7 635d 892d
openbsd build error (7) 1 547d 547d
multicore boot error: can't ssh into the instance (2) 96 563d 564d
openbsd boot error: can't ssh into the instance (2) 48 563d 564d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (3) 1 563d 563d
panic: vref used where vget required 1 653d 653d
panic: pfi_dynaddr_update 2 669d 750d
uvm_fault: pool_do_put 1 587d 587d
panic: runtime error: invalid memory address or nil pointer dereference (2) 1 588d 588d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST, va = ADDR, pa = ADDR 1 592d 592d
pool: free list modified: pdppl 1 592d 592d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (5) 3 591d 591d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (2) 1 592d 592d
panic.go:LINE +0x72 1 593d 593d
witness: reversal: inode fdlock C 523 660d 873d
panic: runtime error: invalid memory address or nil pointer dereference 1 597d 597d
panic: fifo_badop called C 8841 599d 934d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR 1 614d 614d
panic: ffs_blkfree: bad size 2 714d 718d
kernel: double fault trap, code=0 1 762d 762d
assert "la != NULL" failed in if_ether.c 3 746d 749d
uvm_fault: ml_purge 6 745d 751d
panic: in_cksum: out of data, len 63 1 731d 731d
uvm_fault: pfi_ifhead_RB_REMOVE 1 752d 752d
panic: uvm_fault_unwire_locked: address not in map (2) 7 742d 870d
panicConnection to ssh-serialport.googleapis.com closed by remote host. 1 601d 601d
uvm_fault: vfs_lookup 1 786d 786d
panic: Data modified on freelist: word 4 of object ADDR size 0x84 previous type free (ADDR != ADDR) 1 612d 612d
panic: Data modified on freelist: word 5 of object ADDR size 0xa0 previous type devbuf (0xd != ADDR) 1 613d 613d
panic: Data modified on freelist: word 5 of object ADDR size 0xc0 previous type devbuf (0xd != ADDR) 1 620d 620d
panic: Data modified on freelist: word 5 of object ADDR size 0x100 previous type devbuf (0xd != ADDR) syz 7 613d 643d
panic: attempt WtAoR eNIxNeGc:u tSeP uL seNOrT a LddOrWEesRsE D 0Ox0N iSYn SCsAuLpLe rv3i 4s orEX ImTo d0 e9 1 613d 613d
panic: bad arg kind 1 624d 624d
uvm_fault: ADDR: movl $ADDR,0(%rdi)ddb> ddb> set $lines = 0ddb> set $maxwidth = 0ddb> show panickernel page 1 628d 628d
uvm_fault: ADDR: jmp ADDR 1 630d 630d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (4) 9 637d 637d
uvm_fault: pmap_enter syz 3 878d 884d
panic: malloc: allocation tooWA RlNaIrNGge: ,SPL NOT LOWERED ON SYSCALL 3 4 EXIT 0 9 1 656d 656d
multicore test error: timed out 43 775d 812d
panic: amap_add: slot in use 2 865d 870d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (3) 12 694d 695d
panic: vput: v_writecount != 0 C 2 696d 696d
uvm_fault: _bpf_mtap 31 907d 929d
panic: pool_cache_item_magic_check: mcl2k cpu free list modified: item addr ADDR+24 ADDR!=ADDR 1 911d 911d
panic: rw_enter: vmmaplk locking against myself 3 921d 923d
uvm_fault: tun_dev_read 2 921d 923d
openbsd test error: timed out 19 780d 840d
panic: bpf_mcopy 1 925d 925d
multicore build error (4) 2 769d 769d
openbsd build error (6) 1 769d 769d
pool: double put: mcl2k 4 927d 929d
pool: double put: mcl64k 1 928d 928d
panic: missing alias 1 932d 932d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (2) 3 763d 763d
panic: bad dir C 1390 768d 769d
multicore build error (2) 10 794d 794d
openbsd build error (4) 5 794d 794d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 12 803d 804d
multicore build error 26 804d 805d
openbsd build error (3) 13 804d 805d
multicore boot error: can't ssh into the instance 6 804d 804d
openbsd boot error: can't ssh into the instance 3 804d 804d
panic: ffs_read: type 0 1 941d 941d
panic: serialport: VM disconnected. 1 812d 812d
panic: kserialport: VM disconnected. 1 813d 813d
panic: kernel diagnostic serialport: VM disconnected. 1 813d 813d
panic: kernel diserialport: VM disconnected. 1 892d 892d
openbsd build error 1 857d 857d
lost connection to test machine C 276 905d 979d
https://github.com/openbsd/src.git boot error: uvm_fault: memcmp 6 911d 911d
https://github.com/openbsd/src.git test error 16 919d 940d
multicore boot error: uvm_fault: smbios_find 12 911d 911d
kernel: kernel relinking fa 1 1000d 979d
https://github.com/openbsd/src.git boot error 479 934d 979d
panic: sandbox escaping file name "../file0" 111 933d 935d
multicore test error (2) 3 920d 920d
multicore test error 3 920d 920d
panic: sandbox escaping file name "../file0/file0", Files are map[./file0:true ../file0:true] 1 933d 933d
panic: sandbox escaping file name "../file0", Files are map[../file0:true] 11 933d 933d
panic: sandbox escaping file name "../file0", Files are map[./file0:true ../file0:true] 1 933d 933d
panic: sandbox escaping file name "../file0/file0" 2 933d 933d