syzbot

 sign-in | mailing list | source | docs
🐞 Open [70] 🐞 Fixed [243] 🐞 Invalid [483] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

Out of 483 bugs, 235 were automatically obsoleted (0 due to revoked reproducers), 248 were invalidated by users.
Title Repro Cause bisect Fix bisect Count Last Reported
uvm_fault: NUM TID PID UID PRFLAGS PFLAGS CPU COMMAND*ADDR NUM NUM NUM ADDR NUM 1 96d 96d
panic: voWARNpI_NgGe:n SePLr iNc_ObT adLOoWpE 1 15d 15d
uvm_fault: NUM TID PID UID PRFLAGS PFLAGS CPU COMMANDNUM(NUM,NUM,NUM,NUM,58b,ADDR) at NUMtimeout_ru 1 106d 106d
panic: vpoapn_giecn: ekrice_brnadelop 1 18d 18d
uvm_fault: NUM TID PID UID PRFLAGS PFLAGS CPU COMMAND*ADDR NUM NUM 0x2 ADDR 0K syz 1 111d 111d
syzkaller: make target failed: failed to run ["gmake" "target"]: exit status 2 (2) 12 34d 35d
assert "((flags & PGO_LOCKED) != NUM && rw_lock_held(uobj->vmobjlock)) || (flags & PGO_LOCKED) == NUM" failed in uvm_vno (2) 1 141d 141d
panic: vputonfreelist: lock count is not zero (2) 1 148d 148d
panic: malloc: out of space in kmem_map (2) 1 151d 151d
protection_fault: done_flush 81 161d 518d
assert "dupe == NULL" failed in uvm_page.c (3) 25 164d 533d
assert "ps->ps_uvncount == NUM" failed in kern_unveil.c (2) 5 168d 378d
assert "ifa == rt->rt_ifa" failed in nd6.c (4) 1 169d 169d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 (4) 63 167d 216d
panic: pr_find_pagehead: pdppl: incorrect page 1 183d 183d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 (4) 9 188d 188d
assert "d->bd_in_uiomove == NUM" failed in bpf.c 1 188d 188d
uvm_fault: savectx 1 188d 188d
openbsd boot error: can't ssh into the instance (4) 28 190d 229d
assert "!_kernel_lock_held()" failed in uvm_map.c 6 192d 353d
assert "__mp_lock_held(&sched_lock, curcpu()) == NUM" failed in kern_lock.c (2) 1 193d 193d
pool: free list modified: inpcb (2) 2 194d 248d
panic: vo 1 106d 106d
uvm_fault: uvm_map_teardown 1 199d 199d
panic: ufsdirhash_lookup: bad offset in hash array (2) 1 200d 200d
panic: acquiring blockable sleep lock with spinlock or critical section held (rwlock) vmmaplk (2) 1 201d 201d
multicore test error: no output from test machine 1 202d 202d
malloc: free list modified: counters 9 204d 464d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte ADDR (3) 3 208d 232d
protection_fault: fill_file 2 219d 245d
uvm_fault: hardclock (4) 1 219d 219d
multicore boot error: can't ssh into the instance (4) 51 190d 190d
pool: free list modified: pdppl (3) 1 223d 223d
uvm_fault: pool_gc_pages 4 225d 412d
witness: lock_object uninitialized: ADDR (2) 1 225d 225d
uvm_fault: softclock 1 226d 226d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (21) 12 227d 238d
protection_fault: __llvm_retpoline_r11 1 227d 227d
uvm_fault: pool_do_get (2) 2 228d 251d
uvm_fault: rw_enter 1 232d 232d
panic: amap_pp_adjref: negative reference count (2) 1 232d 232d
assert "((flags & PGO_LOCKED) != NUM && rw_lock_held(uobj->vmobjlock)) || (flags & PGO_LOCKED) == NUM" failed in uvm_vno 1 234d 234d
uvm_fault: ufs_direnter 1 245d 245d
assert "bp->b_data != NULL" failed in vfs_biomem.c (3) 2 245d 262d
uvm_fault: bpfioctl (2) 2 247d 248d
panic: rw_enter: solock locking against myself 5 247d 335d
multicore test error: SYZFATAL: BUG: program execution failed: executor NUM: EOF (2) 78 220d 221d
openbsd test error: SYZFATAL: BUG: program execution failed: executor NUM: EOF 94 220d 225d
uvm_fault: __kernel_phys_end 1 250d 250d
panic: trap type NUM, code=NUM, pc=NUM (2) 1 261d 261d
protection_fault: in6_addmulti 1 262d 262d
panic: wakeup: p_stat is NUM 2 263d 285d
protection_fault: witness_checkorder 1 276d 276d
uvm_fault: NUM TID PID UID PRFLAGS PFLAGS CPU COMMAND*ADDR NUM NUM NUM ADDR 0K s 1 292d 292d
malloc: free list modified: free (3) 1 299d 299d
multicore test error: SYZFATAL: BUG: program execution failed: executor NUM: EOF 108 221d 223d
uvm_fault: km_free 6 324d 512d
panic:client_loop: send disconnect: Broken pipe 4 327d 466d
panic: vopclient_loop: send disconnect: Broken pipe (3) 3 330d 377d
panic: vopConnection to ssh-serialport.googleapis.com closed by remote host. 1 251d 251d
pool: free list modified: inpcb 2 339d 366d
pool: cpu free list modified: mbufpl (2) 1 342d 342d
protection_fault: lf_advlock (2) 4 346d 395d
pool: free list modified: art_heap4 (3) 1 353d 353d
uvm_fault: solock 1 355d 355d
panic: trap type NUM, code=NUM, pc=NUM 1 358d 358d
uvm_fault: hardclock (3) 1 362d 362d
assert "pmap->pm_type != PMAP_TYPE_EPT" failed in pmap.c 1 366d 366d
panic: tcpp_nucp t 1 276d 276d
pool: free list modified: bufpl 1 366d 366d
panic: vop_gene 1 276d 276d
panic: vop_generic_bclient_loop: send disconnect: Broken pipe 1 278d 278d
panic: vop_generic_bapdoapn 1 286d 286d
kernel: page fault trap, code=NUM syz 1 285d 285d
panic: vop_client_loop: send disconnect: Broken pipe (2) 1 293d 293d
panic: vop_gpeanneicri:c _kbeardonpe 1 294d 294d
panic: vop_geneclient_loop: send disconnect: Broken pipe 1 289d 289d
panic: voclient_loop: send disconnect: Broken pipe 1 375d 375d
protection_fault: tun_enqueue 1 376d 376d
assert "bp->b_data != NULL" failed in vfs_biomem.c (2) 2 376d 428d
witness: lock_object uninitialized: ADDR 71 382d 521d
panic: ufsdirhash_lookup: bad offset in hash array 1 382d 382d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte ADDR (2) 1 384d 384d
panic: vop_client_loop: send disconnect: Broken pipe 1 297d 297d
panic: vop_generic_bpaadonipc 1 302d 302d
pool: free list modified: sockpl (2) 3 394d 449d
malloc: free list modified: free (2) 1 399d 399d
SYZFAIL: ioctl remote attach failed (4) 68 402d 516d
uvm_fault: pmap_page_remove (4) 1 407d 407d
protection_fault: pool_do_put 1 419d 419d
panic: vpopa_ngiecn:kerericn_elba diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/setuid/k 1 338d 338d
panic: vpoanp_igc:en e r i c _ b ad op 1 339d 339d
panic: pmap_enter: PG_PVLIST mapping with unmanaged page: va ADDR, opte ADDR, pa ADDR 2 430d 507d
panic: pool_do_get: pfiaddrpl: page empty 1 431d 431d
panic: vop_generclient_loop: send disconnect: Broken pipe 1 345d 345d
uvm_fault: putc 2 435d 439d
uvm_fault: pf_anchor_global_RB_INSERT_COLOR 1 437d 437d
panic: vop_pganeince:ri kce_rbandelo p 1 355d 355d
panic: vop_genericp_anbaidc:o p 1 354d 354d
panic: vop_generic_baclient_loop: send disconnect: Broken pipe 1 353d 353d
panic: runtime error: invalid memory address or nil pointer dereference (8) 1 355d 355d
uvm_fault: ffs2_balloc 1 442d 442d
assert "ifa == rt->rt_ifa" failed in nd6.c (3) 2 443d 470d
uvm_fault: VOP_ISLOCKED (2) 1 444d 444d
panic: vpoapn_igc:e kernel diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/setuid/kernel/s 1 357d 357d
panic: vclient_loop: send disconnect: Broken pipe (2) 1 356d 356d
uvm_fault: db_enter (3) 1 356d 356d
uvm_fault: pool_do_get 1 451d 451d
panic: vclient_loop: send disconnect: Broken pipe 1 362d 362d
uvm_fault: ktrops 1 453d 453d
panic: vop_genericp_baandiocp: 1 412d 412d
panic: vop_geneprianci_c: kernel diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/multicore 1 375d 375d
panic: broken type ref (3) 1 366d 366d
panic: vop_generic_badpoapn 1 365d 365d
panic: vop_genepranici_c:bakdeorpn 1 367d 367d
uvm_fault: memcpy (4) 2 455d 524d
multicore test error: SYZFATAL: BUG: program execution failed: bad reply magic ADDR 1 373d 373d
openbsd test error: SYZFATAL: BUG: program execution failed: bad reply magic ADDR 3 373d 373d
assert "la != NULL" failed in if_ether.c (2) 1 462d 462d
protection_fault: sys_msgrcv 1 468d 468d
panic: vop_geneprainci_cb:a kdeoprn 1 469d 469d
panic:p a nic: kernel diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/setuid/kernel/sys/ke 1 380d 380d
openbsd build error (18) 1 380d 380d
uvm_fault: db_enter (2) 1 386d 386d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte ADDR 3 478d 527d
panic: vpoapn_igc:en keerricn_elba d o dpi 1 478d 478d
kernel: privileged instruction fault trap, code=NUM 1 480d 480d
uvm_fault: hardclock (2) 1 481d 481d
panic: vop_generic_bad 1 393d 393d
panic: vop_genclient_loop: send disconnect: Broken pipe (2) 1 398d 398d
kernel: protection fault trap, code=NUM (4) 1 400d 400d
panic: vop_genclient_loop: send disconnect: Broken pipe 1 401d 401d
panic: vop_generic_client_loop: send disconnect: Broken pipe 1 402d 402d
uvm_fault: ffs_nodealloccg 1 493d 493d
assert "dtlookup(unit) == NULL" failed in dt_dev.c 1 494d 494d
panic: vop_generic_pbaandiopc 1 405d 405d
pool: free list modified: fdescpl 1 497d 497d
assert "ifp != NULL" failed in if_ether.c (4) 2 497d 541d
panic: vopclient_loop: send disconnect: Broken pipe (2) 1 408d 408d
assert "ps->ps_uvncount == NUM" failed in kern_unveil.c 2 509d 521d
panic: pmap_remove_ptes: managed page without PG_PVLIST: va ADDR, opte ADDR 1 518d 518d
assert "bp->b_data != NULL" failed in vfs_biomem.c 1 519d 519d
panic: runtime error: invalid memory address or nil pointer dereference (7) 1 520d 520d
panic: missing alias (2) 2 521d 521d
panic: vref used where vget required (3) 1 521d 521d
panic: client_loop: send disconnect: Broken pipe (2) 1 432d 432d
panic: vop_generic_WbAaRdNopI 1 436d 436d
panic: apcaqniuci:r kinegr nbleol c kdaiblage snloesteipc laosscke r t io n " ! _ ke r n e l_ l o wcikt_hh s 1 436d 436d
panic: acqupirainincg: b lo c kkaerblneel s l e ep l o c k d i a gwintohs tsipc i nl oc k o r c r it i c a l 1 436d 436d
panic: vop_gclient_loop: send disconnect: Broken pipe 1 436d 436d
panic: acquipraniincg: k e brnleolck daibaleg nsolseteip lc oacsks weirttiho n s "pi!nl_okecrkn oelr_ l corcik_thiec 1 436d 436d
panic: acpquainriic:n g bl o ck a b le s l e e p l o c k w i t h s p in l o c k o r c ri t i ca l s 1 436d 436d
panic: acquiring blpocankaicb:l e s l e keerp lnoecl k w i t h s p i nl oc k o r cr i t ic a l s e c ti o n 1 437d 437d
panic: apcaqnuiic:ri nkg ebrloncekla b l e sl ee p l o c k w i t h s p i n l oc k o r cr i ti c a l 1 437d 437d
panic: acquiring blockable sleep lock with spinlock or criticapl saneictci:o nk ehrenled (lk deriangenlo_lsotickc) 1 437d 437d
panic: acquiring blocpkaanbilec: k er snleele p lo c k w i th s p i nl o c k or c r i ti ca l s ec t 1 437d 437d
kernel: protection fault trap, code=NUM (3) 1 437d 437d
panic: acquirpinagni c :b l koecrknaebll ed silageneop slotickc a ss e r t i o n " ! _ k e r n el _ l o ckwi_t 1 437d 437d
panic: acquiring bplaoncikca:b l e sl e e p l okcek rwnielt h s p i n dloicak gonro scrtiitci c a l s e cati 1 437d 437d
panic: acquiring blockabplaen i sc:le e p l kocek rn e l d ia g no s t i wci t ha s s e r t i o n "s!_pkienlro 1 437d 437d
panic: acquiringp abnlioc:c k ab l e sl e e p lo c k w it h s p i n l oc k o rk er n e l d i agn o s 1 437d 437d
panic: acpqauniicr:in g bl kocerknaeblle d ia g no s t i cs alseseeprt i lonoc k w it"h!_ k seprninell_olckoc 1 437d 437d
panic: acquirinpgan bilco:c kkaeblrne esll e ep lo ck wi t h s p in l oc k o r c r i ti c a l s ec t 1 437d 437d
panic: acquiring blockablep a ni c : k er ne l d ia gn o s t i c as s e r stleieopn l oc k w i t h s 1 437d 437d
panic: acquiring bl o c kpaablniec s:le e p l o c k wi t h s p i n l o c k o r c ri t i c a l s e c t i 1 437d 437d
panic: apcqauniircin:g b lkeorcknaelbldei saglenoepst ilc o c k w i th sp i n l o c k a s s oerrt ciorint i"c! 1 437d 437d
kernel: protection fSeaBIOS (version NUM.NUM.NUM-google) syz 1 442d 442d
panic: vop_generic_bado 1 447d 447d
panic: bad dir (2) 44 504d 516d
pool: free list modified: pdppl (2) 1 540d 540d
panic: client_loop: send disconnect: Broken pipe 1 464d 464d
assert "next != NULL && next->start <= entry->end" failed in uvm_fault.c (2) syz 2 535d 535d
witness: reversal: lock order data missing (2) C 173 599d 749d
openbsd build error (16) 1 470d 470d
multicore boot error: witness: reversal: vmmaplk inode 60 471d 472d
uvm_fault: pmap_page_remove (3) 1 476d 476d
multicore boot error: kernel: protection fault trap, code=NUM 57 475d 476d
panic: acquiring blockable sleep lock with spinlock or critical section held (rwlock) kmmaplk (2) 2 571d 631d
panic: vopclient_loop: send disconnect: Broken pipe 1 490d 490d
panic: vop_generipac_nibac:do kpe 1 490d 490d
panic: vop 1 497d 497d
SYZFAIL: tun: can't open device (3) 86 503d 503d
SYZFAIL: tun_id out of range (2) 182 503d 503d
panic: trap type NUM, code=NUM, pc=ADDR 1 514d 514d
kernel: protection fault trap, code=NUM (2) C 16 519d 542d
panic: 1 518d 518d
SYZFAIL: dup2(NUM, kInPipeFd) failed syz 4 524d 541d
SYZFAIL: tun_id out of range 109 525d 525d
panic: vop_generic_badop 1 606d 606d
multicore build error (14) 58 528d 531d
kernel: double fault trap, code=NUM 1 529d 529d
SYZFAIL: ioctl remote attach failed (2) 6 529d 549d
uvm_fault: hardclock 1 631d 631d
SYZFAIL: open of /dev/kcov failed 3 545d 545d
SYZFAIL: ioctl remote attach failed 3 647d 699d
kernel: page fault trap, code=0 (4) 2 648d 677d
SYZFAIL: tun: can't open device (2) 1 677d 677d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (20) 24 603d 623d
openbsd test error: timed out (3) 72 609d 613d
multicore test error: timed out (3) 150 609d 613d
kernel: protection fault trap, code=NUM 1 622d 622d
uvm_fault: x86_ipi_db (6) 1 644d 644d
panic: wakeup: p_stat iSeaBIOS (version NUM.NUM.NUM-google) 1 645d 645d
uvm_fault: x86_ipi_db (5) 1 649d 649d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (19) 3 658d 658d
uvm_fault: x86_ipi_db (4) 1 663d 663d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (18) 6 681d 682d
panic: acquiring blockable sleep lock with spinlock or critical section held (rwlock) kmmaplk 11 780d 943d
multicore build error (12) 1 820d 820d
uvm_fault: x86_ipi_db (3) 4 828d 845d
panic: runtime error: invalid memory address or nil pointer dereference (6) 276 752d 752d
openbsd test error: lost connection to test machine (2) 3 766d 766d
multicore test error: lost connection to test machine (2) 6 766d 766d
openbsd test error: lost connection to test machine 15 766d 766d
multicore test error: lost connection to test machine 36 766d 766d
corrupted report (4) 21 862d 1030d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (17) 3 812d 812d
panic: runtime error: invalid memory address or nil pointer dereference (5) 10821 805d 805d
panic: runtime error: invalid memory address or nil pointer dereference (4) 2753 805d 805d
SYZFAIL: clone failed syz 1 826d 826d
multicore build error (11) 2 828d 828d
multicore build error (10) 2 859d 932d
openbsd build error (13) 1 938d 938d
uvm_fault: x86_ipi_db (2) 1 878d 878d
uvm_fault: x86_ipi_db 1 881d 881d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (16) 21 884d 888d
assert "(key.from) > 0 && (key.from) <= w_max_used_index && (key.from) < witness_count" failed in subr_witness.c 1 984d 984d
uvm_fault: strlen 1 988d 988d
panic: ffs_alloccg: map corrupted 1 989d 989d
uvm_fault: fdcopy 1 994d 994d
panic (2) syz 8 908d 918d
uvm_fault: in6_pcbhashlookup 1 1001d 1001d
panic 1 920d 920d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 (3) 9 1012d 1016d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (15) 6 939d 948d
assert "ifp != NULL" failed in if_ether.c (3) 2 1023d 1028d
uvm_fault: pmap_page_remove (2) 5 1028d 1204d
uvm_fault: nd6_dad_duplicated 1 1028d 1028d
soreceive 1 58 1033d 1189d
pool: free list modified: pvpl 17 1034d 1289d
panic: runtime error: invalid memory address or nil pointer dereference (3) 28 1035d 1302d
panic: m_copym0: m == NULL and not COPYALL 306 1032d 1296d
panic: m_copym0: short mbuf chain 214 1036d 1295d
witness: reversal: vmmaplk inode (2) C 46771 947d 1261d
witness: reversal: inode netlock C 6 948d 948d
witness: reversal: netlock inode C 11 948d 948d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 (3) 3 948d 948d
uvm_fault: tun_dev_read (2) 71 1041d 1288d
uvm_fault: rtrequest 1 1041d 1041d
openbsd build error (12) 1 952d 952d
multicore build error (9) 1 952d 952d
uvm_fault: ml_dequeue 2 1042d 1084d
assert "dupe == NULL" failed in uvm_page.c (2) 1 1043d 1043d
panic: pr_find_pagehead: mbufpl: incorrect page (2) 20 1047d 1314d
uvm_fault: memcpy (3) 26 1047d 1105d
uvm_fault: sbdrop 44 1054d 1274d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (14) 6 965d 966d
assert "pg->wire_count == 1" failed in vfs_biomem.c (2) 9 1057d 1125d
panic: in6_cksum: out of data, len 64 1 1058d 1058d
uvm_fault: _bpf_mtap (2) 8 1061d 1076d
panic: unhandled af (3) syz 7 1057d 1067d
uvm_fault: ml_enlist (2) 1 1062d 1062d
uvm_fault: ml_purge (2) 8 1067d 1286d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (13) 39 986d 1065d
panic: pr_find_pagehead: mbufpl: page header missing (3) 2 1071d 1104d
uvm_fault: m_free (2) 429 1041d 1291d
uvm_fault: pool_cache_get 518 1042d 1320d
pool: free list modified: anonpl 8 1075d 1297d
panic: amap_lookup: offset out of range 2 1078d 1124d
uvm_fault: 0x1:uvm_fault(ADDR, 0x1, 0, 1) -> e kernel: page fault trap, code=0Stopped at db_read_bytes 1 989d 989d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 (2) 45 990d 992d
panic: free: size too small 10 <= 4096 / 2 (ADDR) type devbuf 2 1081d 1086d
pool: free list modified: vcpupl 1 1082d 1082d
uvm_fault: bpf_mtap 10 1082d 1309d
pool: free list modified: filepl 1 1088d 1088d
pool: free list modified: shmpl (3) 1 1093d 1093d
uvm_fault: uvmfault_anonget 1 1096d 1096d
uvm_fault: unveil_find_cover 1 1097d 1097d
assert "mhead->m_flags & M_PKTHDR" failed in switchctl.c (2) 1 1098d 1098d
malloc: free list modified: free 12 1099d 1321d
uvm_fault: nd6_ns_output 1 1107d 1107d
uvm_fault: x86_send_ipi (2) 2 1108d 1120d
panic.go:LINE +0x72 (7) syz 3 1027d 1029d
assert "ifp != NULL" failed in rtsock.c (2) 26 1086d 1089d
panic: vref used where vget required (2) 2 1118d 1121d
panic: amap_lookups: offset out of range (2) 1 1119d 1119d
pool: free list modified: pffrnode 7 1119d 1257d
uvm_fault: uvm_map_clean 1 1120d 1120d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (8) 10 1073d 1144d
uvm_fault: igmp_leavegroup 1 1123d 1123d
syzkaller: make target failed: failed to run ["gmake" "target"]: exit status 2 3 1034d 1034d
panic(ADDR) at panic+0x164 1 1036d 1036d
openbsd boot error: can't ssh into the instance (3) 18 1037d 1037d
multicore boot error: can't ssh into the instance (3) 15 1037d 1037d
kernel: privileged instruction fault trap, code=0 (2) 1 1128d 1128d
assert "!_kernel_lock_held()" failed in kern_fork.c (2) 1 1128d 1128d
uvm_fault(ADDR, 0xa, 0, 1) -> e (2) 1 1042d 1042d
assert "!ISSET(rt->rt_flags, RTF_LOCAL)" failed in nd6.c (2) 1 1131d 1131d
no output from test machine (4) syz 14713 1045d 1052d
panic: amap_wipeout: corrupt amap 6 1137d 1225d
uvm_fault(ADDR, 0x7b8, 0, 1) -> e 1 1054d 1054d
uvm_fault(ADDR, 0x3, 0, 1) -> e (2) 1 1058d 1058d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 (2) 21 1060d 1062d
uvm_fault(ADDR, 0xa, 0, 1) -> e 1 1061d 1061d
pool: free list modified: tcpqe 4 1151d 1268d
uvm_fault(ADDR, 0x3, 0, 1) -> e 1 1063d 1063d
no output from test machine (2) C 89865 1067d 1119d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (12) 9 1075d 1078d
assert "sb->sb_cc == 0" failed in uipc_socket2.c 2 1157d 1201d
pool: free list modified: vmsppl 1 1068d 1068d
uvm_fault(ADDR, 0xbef, 0, 1) -> e (2) 1 1069d 1069d
uvm_fault(ADDR, 0x10b, 0, 1) -> e (2) 1 1075d 1075d
uvm_fault(ADDR, 0xbef, 0, 1) -> e 1 1076d 1076d
pool: free list modified: vnodes 1 1171d 1171d
uvm_fault(ADDR, 0x10b, 0, 1) -> e 1 1089d 1089d
kernel: page fault trap, code=0 (3) 1 1090d 1090d
panic: bad group arg size 29, should be <= 32 for &prog.GroupArg{ArgCommon:prog.ArgCommon{ref:LINEx328, dir:LINEx0}, Inn 1 1093d 1093d
assert "ps->ps_uvncount == 0" failed in kern_unveil.c (2) 1 1189d 1189d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (11) 6 1100d 1122d
pool: free list modified: uvmvnodes 1 1190d 1190d
pool: free list modified: sockpl 2 1192d 1203d
uvm_fault(ADDR, ADDR, 0, 1) -> e 1 1103d 1103d
panic: bad group arg size 29, should be <= 32 for &prog.GroupArg{ArgCommon:prog.ArgCommon{ref:LINEx2c0, dir:LINEx0}, Inn 1 1107d 1107d
uvm_fault: memcpy (2) syz 2168 1112d 1360d
uvm_fault: vio_start 1 1202d 1202d
uvm_fault: syscall 1 1205d 1205d
panic: broken type ref 1 1119d 1119d
pool: free list modified: mtagpl 1 1206d 1206d
assert "dupe == NULL" failed in uvm_page.c 4 1207d 1320d
pool: free list modified: art_table 1 1209d 1209d
assert "ifp != NULL" failed in if_ether.c (2) 1 1217d 1217d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 3 1127d 1127d
kqueue: knote !ACTIVE 2 1219d 1223d
uvm_fault: in4_cksum 1 1223d 1223d
panic: bad arg kind: <nil> (11) 1 1140d 1140d
kernel: privileged instruction fault trap, code=0 1 1232d 1232d
uvm_fault: ml_enlist 1 1232d 1232d
uvm_fault: tun_init 1 1233d 1233d
uvm_fault returns 14, GPA=ADDR C 2 1146d 1146d
panic: lock (kernel_lock) mbufpl not locked 1 1236d 1236d
panic: bad group arg size 0, should be <= 24 for &prog.GroupArg{ArgCommon:prog.ArgCommon{typ:(*prog.StructType)(ADDR)}, 1 1148d 1148d
panic.go:LINE +0x72 (5) 1 1151d 1151d
assert "pg->wire_count == 0" failed in uvm_page.c 1 1246d 1246d
panic: bad arg kind: <nil> (10) 1 1161d 1161d
panic: bad arg kind: <nil> (9) 1 1164d 1164d
pool: free list modified: art_heap4 2 1259d 1284d
uvm_fault: _bus_dmamap_load_mbuf 1 1263d 1263d
uvm_fault: m_copym 1 1264d 1264d
panic: bad arg kind: <nil> (8) 1 1176d 1176d
panic: pr_find_pagehead: mbufpl: page header missing (2) 1 1266d 1266d
pool: cpu free list modified: mcl2k 1 1267d 1267d
panic: bad arg kind: <nil> (7) 1 1180d 1180d
pool: free list modified: shmpl (2) 1 1274d 1274d
panic: bad arg kind: <nil> (6) 1 1185d 1185d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (7) 1 1186d 1186d
assert "mhead->m_flags & M_PKTHDR" failed in switchctl.c 1 1277d 1277d
pool: double put: mbufpl (2) 2 1278d 1310d
panic: attempt to access user address ADDR in supervisor mode 7 1283d 1332d
kernel: double fault trap, code=0 (2) syz 2 1309d 1309d
uvm_fault: rtable_satoplen (3) syz 237 1317d 1360d
panic: amap_lookups: offset out of range 1 1287d 1287d
panic: bad arg kind: <nil> (5) 1 1199d 1199d
uvm_fault: witness_checkorder (2) 1 1289d 1289d
panic: bad arg kind: &prog.IntType{IntTypeCommon:prog.IntTypeCommon{TypeCommon:prog.TypeCommon{TypeName:"int32", FldName 1 1202d 1202d
panic: bad arg kind (2) 2 1292d 1294d
assert "pg->wire_count == 1" failed in vfs_biomem.c 66 1293d 1618d
assert "ifp != NULL" failed in rtsock.c 2 1293d 1295d
panic.go:LINE +0x72 (4) 1 1204d 1204d
uvm_fault: x86_send_ipi 1 1297d 1297d
uvm_fault: VOP_ISLOCKED 1 1297d 1297d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (10) 3 1207d 1207d
panic: bad arg kind: <nil> (4) 1 1210d 1210d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (6) 1 1210d 1210d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST, va = ADDR, pa = ADDR (2) 1 1302d 1302d
uvm_fault: m_zero 1 1303d 1303d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (5) 1 1217d 1217d
panic: free: non-malloced addr ADDR type in_multi 4 1308d 1330d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (9) 3 1219d 1219d
uvm_fault: pfi_kif_update 6 1310d 1437d
uvm_fault: fifo_write 1 1310d 1310d
panic.go:LINE +0x72 (3) 1 1222d 1222d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (4) 2 1224d 1224d
panic: receive 1: so ADDR, so_type 3, sb_cc 176 1 1312d 1312d
panic: ffs_valloc: dup alloc 2 1313d 1316d
uvm_fault: 0ddb{1}> ddb{1}> set $lines = 0ddb{1}> set $maxwidth = 0ddb{1}> show panickernel page faultattempt to e 1 1226d 1226d
assert "!_kernel_lock_held()" failed in kern_fork.c 15 1317d 1578d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (8) 3 1230d 1230d
panic: WAaRcNqIuNirGi:n g SPbLl NoOcT kLaObWlEReE Ds lOeNe pSY SloCcAkL Lwi 2 t15h7 s79p3i4n4l5o0c kEX IorT 0c rai 1 1231d 1231d
uvm_fault 10 1323d 1338d
panic: free: size too small 24 <= 256 / 2 (ADDR) type in_multi 1 1329d 1329d
panic: bad arg kind: <nil> (3) 1 1240d 1240d
assert "cifp != NULL" failed in route.c 89 1302d 1357d
assert "rt->rt_ifa->ifa_ifp != NULL" failed in route.c 830 1302d 1343d
uvm_fault: in6_purgeaddr 1423 1302d 1343d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (7) 3 1243d 1243d
assert "ifp != NULL" failed in if_ether.c 208 1304d 1358d
assert "ifa == rt->rt_ifa" failed in nd6.c (2) 262 1304d 1341d
uvm_fault: tun_clone_destroy 1 1335d 1335d
panic: bad arg kind: <nil> (2) 1 1251d 1251d
panic: bad arg kind: <nil> 1 1254d 1254d
panic.go:LINE +0x72 (2) 1 1257d 1257d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (6) 3 1259d 1259d
uvm_fault: pmap_page_remove 7 1351d 1607d
openbsd build error (7) 1 1262d 1262d
multicore boot error: can't ssh into the instance (2) 96 1279d 1280d
openbsd boot error: can't ssh into the instance (2) 48 1279d 1280d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (3) 1 1279d 1279d
panic: vref used where vget required 1 1368d 1368d
panic: pfi_dynaddr_update 2 1385d 1465d
uvm_fault: pool_do_put 1 1303d 1303d
panic: runtime error: invalid memory address or nil pointer dereference (2) 1 1304d 1304d
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST, va = ADDR, pa = ADDR 1 1307d 1307d
pool: free list modified: pdppl 1 1308d 1308d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (5) 3 1307d 1307d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (2) 1 1308d 1308d
panic.go:LINE +0x72 1 1308d 1308d
witness: reversal: inode fdlock C 523 1375d 1588d
panic: runtime error: invalid memory address or nil pointer dereference 1 1313d 1313d
panic: fifo_badop called C 8841 1315d 1649d
panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR 1 1329d 1329d
panic: ffs_blkfree: bad size 2 1429d 1434d
kernel: double fault trap, code=0 1 1477d 1477d
assert "la != NULL" failed in if_ether.c 3 1462d 1464d
uvm_fault: ml_purge 6 1461d 1467d
panic: in_cksum: out of data, len 63 1 1447d 1447d
uvm_fault: pfi_ifhead_RB_REMOVE 1 1468d 1468d
panic: uvm_fault_unwire_locked: address not in map (2) 7 1458d 1585d
panicConnection to ssh-serialport.googleapis.com closed by remote host. 1 1316d 1316d
uvm_fault: vfs_lookup 1 1502d 1502d
panic: Data modified on freelist: word 4 of object ADDR size 0x84 previous type free (ADDR != ADDR) 1 1328d 1328d
panic: Data modified on freelist: word 5 of object ADDR size 0xa0 previous type devbuf (0xd != ADDR) 1 1328d 1328d
panic: Data modified on freelist: word 5 of object ADDR size 0xc0 previous type devbuf (0xd != ADDR) 1 1335d 1335d
panic: Data modified on freelist: word 5 of object ADDR size 0x100 previous type devbuf (0xd != ADDR) syz 7 1328d 1358d
panic: attempt WtAoR eNIxNeGc:u tSeP uL seNOrT a LddOrWEesRsE D 0Ox0N iSYn SCsAuLpLe rv3i 4s orEX ImTo d0 e9 1 1328d 1328d
panic: bad arg kind 1 1339d 1339d
uvm_fault: ADDR: movl $ADDR,0(%rdi)ddb> ddb> set $lines = 0ddb> set $maxwidth = 0ddb> show panickernel page 1 1343d 1343d
uvm_fault: ADDR: jmp ADDR 1 1345d 1345d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (4) 9 1352d 1353d
uvm_fault: pmap_enter syz 3 1593d 1599d
panic: malloc: allocation tooWA RlNaIrNGge: ,SPL NOT LOWERED ON SYSCALL 3 4 EXIT 0 9 1 1372d 1372d
multicore test error: timed out 43 1490d 1528d
panic: amap_add: slot in use 2 1581d 1586d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (3) 12 1410d 1410d
panic: vput: v_writecount != 0 C 2 1412d 1412d
uvm_fault: _bpf_mtap 31 1623d 1645d
panic: pool_cache_item_magic_check: mcl2k cpu free list modified: item addr ADDR+24 ADDR!=ADDR 1 1626d 1626d
panic: rw_enter: vmmaplk locking against myself 3 1636d 1638d
uvm_fault: tun_dev_read 2 1637d 1638d
openbsd test error: timed out 19 1496d 1555d
panic: bpf_mcopy 1 1641d 1641d
multicore build error (4) 2 1485d 1485d
openbsd build error (6) 1 1485d 1485d
pool: double put: mcl2k 4 1643d 1645d
pool: double put: mcl64k 1 1643d 1643d
panic: missing alias 1 1648d 1648d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (2) 3 1478d 1478d
panic: bad dir C 1390 1484d 1485d
multicore build error (2) 10 1510d 1510d
openbsd build error (4) 5 1510d 1510d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 12 1518d 1519d
multicore build error 26 1520d 1521d
openbsd build error (3) 13 1520d 1521d
multicore boot error: can't ssh into the instance 6 1520d 1520d
openbsd boot error: can't ssh into the instance 3 1520d 1520d
panic: ffs_read: type 0 1 1657d 1657d
panic: serialport: VM disconnected. 1 1528d 1528d
panic: kserialport: VM disconnected. 1 1528d 1528d
panic: kernel diagnostic serialport: VM disconnected. 1 1528d 1528d
panic: kernel diserialport: VM disconnected. 1 1607d 1607d
openbsd build error 1 1573d 1573d
lost connection to test machine C 276 1621d 1694d
https://github.com/openbsd/src.git boot error: uvm_fault: memcmp 6 1626d 1626d
https://github.com/openbsd/src.git test error 16 1634d 1655d
multicore boot error: uvm_fault: smbios_find 12 1626d 1626d
kernel: kernel relinking fa 1 1715d 1694d
https://github.com/openbsd/src.git boot error 479 1649d 1694d
panic: sandbox escaping file name "../file0" 111 1649d 1650d
multicore test error (2) 3 1636d 1636d
multicore test error 3 1636d 1636d
panic: sandbox escaping file name "../file0/file0", Files are map[./file0:true ../file0:true] 1 1649d 1649d
panic: sandbox escaping file name "../file0", Files are map[../file0:true] 11 1649d 1649d
panic: sandbox escaping file name "../file0", Files are map[./file0:true ../file0:true] 1 1649d 1649d
panic: sandbox escaping file name "../file0/file0" 2 1649d 1649d