panic: malloc: out of space in kmem_map (3)
|
|
|
|
1 |
1d02h |
1d02h
|
1d02h |
panic: ffs_freefile: freeing free inode (2)
|
|
|
|
1 |
2d04h |
2d04h
|
2d04h |
uvm_fault: ffs2_balloc (4)
|
|
|
|
1 |
4d02h |
4d02h
|
4d02h |
panic: trap type NUM, code=NUM, pc=e9509
|
|
|
|
26 |
1h24m |
4d17h
|
4d17h |
uvm_fault: softclock (5)
|
|
|
|
1 |
5d23h |
5d23h
|
5d23h |
kernel: protection fault trap, code=NUM (7)
|
|
|
|
4 |
4d16h |
12d
|
12d |
panic: ffs_valloc: dup alloc (2)
|
|
|
|
46 |
15h44m |
13d
|
13d |
panic: malloc: allocation too large, type = NUM, size = ADDR (2)
|
|
|
|
3 |
14d |
16d
|
16d |
SYZFAIL: too much cover
|
|
|
|
2 |
2d10h |
20d
|
20d |
pool: free list modified: shmpl (5)
|
|
|
|
4 |
2d01h |
21d
|
21d |
panic: trap type NUM, code=NUM, pc=e9429
|
|
|
|
27 |
11d |
21d
|
21d |
witness: reversal: sbufsnd inode
|
|
|
|
3 |
22d |
22d
|
22d |
panic: trap type NUM, code=NUM, pc=e8fb9
|
|
|
|
3 |
23d |
23d
|
23d |
assert "start >= vm_map_min(map) && end <= vm_map_max(map)" failed in uvm_fault.c
|
|
|
|
1 |
25d |
25d
|
25d |
protection_fault: reaper
|
|
|
|
4 |
2d20h |
25d
|
25d |
panic: vpaopni_cg:en keerrinecl_b daidaogpn
|
|
|
|
1 |
25d |
25d
|
25d |
pool: free list modified: inpcb (3)
|
|
|
|
1 |
29d |
29d
|
29d |
SYZFAIL: SIGBUS
|
|
|
|
337 |
1h08m |
31d
|
31d |
witness: reversal: sbufrcv inode
|
|
|
|
2 |
30d |
31d
|
31d |
protection_fault: done_flush (3)
|
|
|
|
5 |
18d |
31d
|
31d |
panic: pmap_remove_ptes: managed page without PG_PVLIST: va ADDR, opte ADDR (2)
|
|
|
|
1 |
33d |
33d
|
33d |
panic: trap type NUM, code=NUM, pc=e8f59
|
|
|
|
1 |
33d |
33d
|
33d |
panic: pmap_remove_pte: unmanaged page marked PG_PVLIST: va ADDR, opte ADDR
|
|
|
|
1 |
37d |
37d
|
37d |
uvm_fault: dopselect
|
|
|
|
1 |
39d |
39d
|
39d |
panic: pr_find_pagehead: pdppl: incorrect page (2)
|
|
|
|
1 |
41d |
41d
|
41d |
panic: trap type NUM, code=NUM, pc=e88b9
|
|
|
|
4 |
40d |
43d
|
43d |
panic: curcpu->ci_proc_pmap didn't point to previous pmap
|
|
|
|
1 |
43d |
43d
|
43d |
uvm_fault: savectx (2)
|
|
|
|
3 |
42d |
44d
|
44d |
panic: vput: ref cnt (2)
|
|
|
|
1 |
45d |
45d
|
45d |
panic: trap type NUM, code=NUM, pc=e7069
|
|
|
|
2 |
46d |
46d
|
46d |
panic: assertwaitok: non-zero mutex count: NUM (2)
|
|
|
|
81 |
21h57m |
47d
|
47d |
assert "kq->kq_nknotes == NUM" failed in kern_event.c
|
|
|
|
1 |
47d |
47d
|
47d |
SYZFAIL: posix_spawn failed
|
|
|
|
24 |
1d21h |
47d
|
47d |
panic: uvm_faulWtARN_IuNGn:w irSeP_Ll oNckOT ed:L OaWdEREdreD OsNs SnYoSCt AiLnL map7
|
|
|
|
1 |
49d |
49d
|
49d |
panic: pool_do_get: rtentry: page empty
|
|
|
|
1 |
54d |
54d
|
54d |
SYZFAIL: failed to mkdtemp
|
|
|
|
14749 |
6m |
54d
|
54d |
SYZFAIL: failed to mkdir
|
|
|
|
2140 |
57m |
55d
|
55d |
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte 0x3edff
|
|
|
|
1 |
55d |
55d
|
55d |
SYZFAIL: pipe failed
|
|
|
|
3 |
3d07h |
55d
|
55d |
assert "kn->kn_kq == kq" failed in kern_event.c
|
|
|
|
1 |
56d |
56d
|
56d |
uvm_fault: vm_terminate
|
|
|
|
4 |
18d |
56d
|
56d |
SYZFAIL: repeatedly failed to execute the program
|
|
|
|
1 |
56d |
56d
|
56d |
panic: vput: null vp
|
|
|
|
1 |
57d |
57d
|
57d |
SYZFAIL: coverage filter is full
|
|
|
|
383316 |
10d |
58d
|
57d |
witness: denied attempt to set clock forward to ADDR
|
|
|
|
1 |
58d |
58d
|
58d |
SYZFAIL: SIGSEGV
|
|
|
|
9 |
28d |
58d
|
58d |
panic: trap type NUM, code=NUM, pc=e6d89
|
|
|
|
1 |
59d |
59d
|
59d |
SYZFAIL: tun: can't open device (4)
|
|
|
|
6 |
1d12h |
59d
|
59d |
witness: reversal: lock order data missing (4)
|
|
|
|
15532 |
9m |
59d
|
59d |
SYZFAIL: ioctl remote attach failed (5)
|
|
|
|
58 |
1h49m |
59d
|
59d |
SYZFAIL: too many calls in output
|
|
|
|
36 |
20h56m |
59d
|
59d |
SYZFAIL: failed to send rpc
|
|
|
|
2478 |
8m |
60d
|
60d |
multicore test error: SYZFAIL: setsid failed
|
|
|
|
8 |
60d |
60d
|
60d |
multicore test error: SYZFAIL: failed to recv rpc
|
|
|
|
5162 |
now |
61d
|
61d |
multicore test error: no output from test machine (3)
|
|
|
|
31 |
12d |
61d
|
61d |
panic: kernel diagnostic assertion "dupe == NULL" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uvm_page.c"
|
|
|
|
2 |
43d |
74d
|
74d |
pool: free list modified: pmappl
|
|
|
|
3 |
17d |
103d
|
103d |
can't ssh into the instance
|
|
|
|
434 |
1d22h |
109d
|
81d |
protection_fault: nd6_timer
|
|
|
|
8 |
21d |
109d
|
109d |
panic: inconsistent bufpage counts
|
|
|
|
3 |
12d |
114d
|
114d |
uvm_fault: rw_enter (3)
|
|
|
|
2 |
39d |
116d
|
116d |
assert "rw_write_held(uobj->vmobjlock)" failed in uvm_vnode.c
|
|
|
|
3 |
39d |
116d
|
116d |
panic: ffs_blkfree: bad size (4)
|
|
|
|
5 |
22d |
120d
|
120d |
pool: free list modified: pdppl (4)
|
|
|
|
7 |
41d |
132d
|
132d |
panic: vrele: ref cnt
|
|
|
|
4 |
16d |
139d
|
139d |
assert "pmap->pm_type != PMAP_TYPE_EPT" failed in pmap.c (3)
|
|
|
|
8 |
13d |
140d
|
140d |
assert "!ISSET(rt->rt_flags, RTF_LOCAL)" failed in nd6.c (3)
|
|
|
|
4 |
14d |
141d
|
141d |
uvm_fault: VOP_LOCK (2)
|
|
|
|
5 |
56d |
144d
|
144d |
uvm_fault: arp_rtrequest (2)
|
|
|
|
8 |
3d19h |
144d
|
144d |
pool: cpu free list modified: mbufpl (4)
|
|
|
|
5 |
26d |
145d
|
145d |
uvm_fault: pool_do_get (3)
|
|
|
|
2 |
57d |
145d
|
145d |
panic: ifa_update_broadaddr does not support dynamic length (3)
|
|
|
|
32 |
1d19h |
145d
|
145d |
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte 0x3efff
|
|
|
|
11 |
14d |
145d
|
145d |
panic: vref used where vget required (4)
|
|
|
|
9 |
26d |
150d
|
150d |
uvm_fault: checkalias
|
|
|
|
8 |
25d |
151d
|
151d |
uvm_fault: proc_trampoline
|
|
|
|
4 |
27d |
153d
|
153d |
uvm_fault: witness_checkorder (5)
|
|
|
|
4 |
58d |
166d
|
166d |
pool: free list modified: rttmr
|
|
|
|
8 |
2d06h |
170d
|
170d |
protection_fault: lf_advlock (4)
|
C |
|
|
2 |
18d |
172d
|
172d |
assert "((flags & PGO_LOCKED) != NUM && rw_lock_held(uobj->vmobjlock)) || (flags & PGO_LOCKED) == NUM" failed in uvm_vno (4)
|
|
|
|
8 |
2d19h |
178d
|
178d |
assert "nlevel >= IPL_NONE" failed in intr.c (2)
|
|
|
|
27 |
3h19m |
186d
|
186d |
panic: softclock: invalid to_clock: NUM
|
|
|
|
12 |
37d |
188d
|
188d |
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte ADDR (4)
|
|
|
|
65 |
15d |
188d
|
188d |
panic: softclock: invalid to_clock: -ADDR
|
|
|
|
19 |
1d06h |
191d
|
191d |
assert "ps->ps_uvncount == NUM" failed in kern_unveil.c (4)
|
C |
|
|
1294 |
14m |
197d
|
162d |
assert "sc->sc_dev == NUM" failed in if_tun.c (5)
|
|
|
|
347 |
2d17h |
197d
|
197d |
uvm_fault: db_read_bytes
|
|
|
|
44 |
1d13h |
200d
|
200d |
assert "cifp != NULL" failed in route.c (3)
|
|
|
|
83 |
1d20h |
205d
|
205d |
uvm_fault: pool_gc_pages (2)
|
|
|
|
9 |
17d |
205d
|
205d |
assert "ISSET(bp->b_flags, B_BC)" failed in vfs_bio.c
|
|
|
|
8 |
58d |
222d
|
222d |
assert "pg->wire_count == NUM" failed in vfs_biomem.c (3)
|
|
|
|
565 |
35m |
253d
|
253d |
uvm_fault: pmap_page_remove (5)
|
|
|
|
13 |
12d |
273d
|
273d |
uvm_fault: km_free (2)
|
|
|
|
10 |
27d |
275d
|
275d |
assert "dupe == NULL" failed in uvm_page.c (4)
|
|
|
|
209 |
6d09h |
303d
|
303d |
panic: acquiring blockable sleep lock with spinlock or critical section held (rwlock) vmmaplk (3)
|
|
|
|
69 |
3h46m |
319d
|
319d |
uvm_fault: ktrops (2)
|
C |
|
|
19 |
8d21h |
344d
|
344d |
uvm_fault: db_enter (5)
|
|
|
|
168 |
19h25m |
362d
|
362d |
kernel: page fault trap, code=NUM (3)
|
C |
|
|
66 |
14d |
401d
|
158d |
malloc: free list modified: free (4)
|
C |
|
|
16 |
5d01h |
422d
|
421d |
panic: trap type NUM, code=NUM, pc=NUM (3)
|
|
|
|
166 |
1d17h |
452d
|
452d |
witness: lock_object uninitialized: ADDR (3)
|
C |
|
|
464 |
10m |
525d
|
383d |
panic: ufsdirhash_lookup: bad offset in hash array (3)
|
C |
|
|
79 |
4d19h |
565d
|
271d |
protection_fault: sys_msgrcv (2)
|
C |
|
|
31 |
125d |
696d
|
452d |
uvm_fault: memcpy (5)
|
C |
|
|
6 |
173d |
700d
|
700d |
protection_fault: pool_do_put (2)
|
syz |
|
|
36 |
28d |
724d
|
401d |
panic: vop_generic_badop (2)
|
|
|
|
91 |
3d07h |
734d
|
734d |
panic: pmap_unwire: invalid PDE
|
syz |
|
|
6 |
114d |
758d
|
699d |
no output from test machine (8)
|
C |
|
|
452685 |
now |
767d
|
763d |
uvm_fault: ffs_indirtrunc
|
C |
|
|
4 |
523d |
811d
|
811d |
witness: reversal: vmmaplk inode (3)
|
C |
|
|
704 |
19h51m |
843d
|
793d |
SYZFATAL: executor NUM failed NUM times: executor NUM: exit status NUM
|
syz |
|
|
175427 |
2d19h |
866d
|
866d |
panic: bad dir (3)
|
C |
|
|
36 |
16d |
872d
|
700d |
panic: uvm_fault_unwire_locked: address not in map (4)
|
C |
|
|
246 |
6h16m |
888d
|
869d |
uvm_fault: x86_ipi_db (8)
|
|
|
|
280 |
3d02h |
931d
|
931d |
uvm_fault: ufs_lookup
|
C |
|
|
46 |
1d15h |
967d
|
319d |
kernel: double fault trap, code=NUM (2)
|
C |
|
|
34 |
24d |
967d
|
919d |
panic: trap type NUM, code=NUM, pc=ADDR (2)
|
|
|
|
420 |
11h16m |
974d
|
974d |
protection_fault: ktrops
|
C |
|
|
259 |
28d |
977d
|
957d |
protection_fault: sblock
|
syz |
|
|
38 |
801d |
981d
|
980d |
assert "uvm_page_owner_locked_p(pg)" failed in uvm_page.c
|
|
|
|
3205 |
17m |
985d
|
985d |
uvm_fault: fifo_write (2)
|
C |
|
|
3430 |
2d23h |
988d
|
673d |
SYZFAIL: tun: read failed
|
syz |
|
|
51633 |
16m |
1006d
|
974d |
corrupted report (6)
|
|
|
|
1780 |
1h12m |
1085d
|
1085d |
uvm_fault: memset
|
C |
|
|
45 |
4d10h |
1126d
|
1126d |
SYZFAIL: command failed
|
syz |
|
|
3552 |
38m |
1294d
|
976d |
suppressed report
|
|
|
|
333017 |
1h34m |
1294d
|
1283d |
panic: ufs_rename: lost dir entry
|
C |
|
|
77 |
23h29m |
1667d
|
906d |
lost connection to test machine (2)
|
|
|
|
844094 |
1h42m |
2084d
|
never |