|
SYZFAIL: cover_unprotect invokeddenied attempt to set clock back ADDR seconds
|
-1 |
|
|
|
1 |
2d15h |
2d15h
|
2d15h |
|
protection_fault: sysctl_doproc (3)
|
-1 |
|
|
|
1 |
5d00h |
5d00h
|
5d00h |
|
uvm_fault: pciioctl
|
-1 |
|
|
|
1 |
5d01h |
5d01h
|
5d01h |
|
uvm_fault: witness_checkorder (7)
|
-1 |
|
|
|
1 |
9d00h |
9d00h
|
9d00h |
|
SYZFAIL: too much cover (3)
|
-1 |
|
|
|
1 |
16d |
16d
|
16d |
|
uvm_fault: ip6_freemoptions (2)
|
-1 |
|
|
|
2 |
3d01h |
18d
|
18d |
|
assert "info->rti_ifa->ifa_ifp != NULL" failed in route.c (3)
|
-1 |
|
|
|
1 |
22d |
22d
|
22d |
|
uvm_fault: rtable_walk
|
-1 |
|
|
|
2 |
14d |
24d
|
24d |
|
panic: free: size too small NUM <= NUM / NUM (ADDR) type rtable
|
2 |
|
|
|
4 |
3d20h |
25d
|
25d |
|
uvm_fault: uid_find
|
-1 |
|
|
|
1 |
28d |
28d
|
28d |
|
uvm_fault: pfi_xcommit
|
-1 |
|
|
|
2 |
8d10h |
28d
|
28d |
|
uvm_fault: wsmouseopen
|
-1 |
|
|
|
2 |
19d |
29d
|
29d |
|
uvm_fault: malloc
|
-1 |
|
|
|
10 |
2d09h |
32d
|
32d |
|
SYZFAIL: cover_u
|
-1 |
|
|
|
4 |
4d15h |
36d
|
36d |
|
SYZFAIL: cover_unprotect invoked
|
-1 |
|
|
|
2 |
3d10h |
38d
|
38d |
|
uvm_fault: rtable_getsource
|
-1 |
|
|
|
1 |
40d |
40d
|
40d |
|
panic: kernel diagnostic assertion "map->limit ==
|
2 |
|
|
|
1 |
42d |
42d
|
42d |
|
panic: acquiring blockable sleep lock with spinlock or critical section held (rwlock) vmmaplk (4)
|
2 |
|
|
|
3 |
21d |
43d
|
43d |
|
SYZFAIL: cover_unprotect invoked on an unmapped cover_t object
|
-1 |
|
|
|
201954 |
now |
44d
|
44d |
|
panic: uvm_faultWAuRnNINe:lSoPck NOT LOdWEREs nN SYSCALL NUM NUM EXIT NUM c
|
2 |
|
|
|
1 |
47d |
47d
|
47d |
|
uvm_fault: rtable_lookup
|
-1 |
|
|
|
2 |
39d |
49d
|
49d |
|
SYZFAIL: too many calls in output (3)
|
-1 |
|
|
|
11 |
5h45m |
49d
|
49d |
|
malloc: free list modified: UVM
|
-1 |
|
|
|
6 |
25d |
51d
|
51d |
|
malloc: free list modified: ???
|
-1 |
|
|
|
5 |
24d |
51d
|
51d |
|
uvm_fault: mtx_enter (2)
|
-1 |
|
|
|
5 |
5d11h |
55d
|
55d |
|
panic: kernel diagnostic assertion "(p->pfik_flagrefs == NUM) || (p->pfik_flagrefs == NUM)" failed
|
2 |
|
|
|
1 |
56d |
56d
|
56d |
|
uvm_fault: _rb_insert
|
-1 |
|
|
|
1 |
57d |
57d
|
57d |
|
panic: kernel diagnostic assertion "map->limit == rtmap_limit" fai
|
2 |
|
|
|
1 |
60d |
60d
|
60d |
|
assert "rdomain == rtable_l2(rdomain)" failed in route.c (4)
|
-1 |
|
|
|
3 |
29d |
60d
|
60d |
|
uvm_fault: kpageflttrap
|
-1 |
|
|
|
10 |
7d13h |
61d
|
61d |
|
uvm_fault: upageflttrap
|
-1 |
|
|
|
26 |
11d |
61d
|
61d |
|
malloc: free list modified: temp
|
-1 |
|
|
|
5 |
5d21h |
73d
|
73d |
|
uvm_fault: ifiq_enqueue_qlim
|
-1 |
|
|
|
4 |
12d |
74d
|
74d |
|
assert "refs != ~NUM" failed in multico
|
-1 |
|
|
|
1 |
78d |
78d
|
78d |
|
uvm_fault: device_lookup
|
-1 |
|
|
|
2 |
30d |
78d
|
78d |
|
assert "bpfilter_lookup(unit) == NULL" failed in bpf.c (2)
|
-1 |
|
|
|
7 |
45d |
79d
|
79d |
|
witness: lock_object uninitialized: ADDR (6)
|
-1 |
|
|
|
7 |
3d00h |
79d
|
79d |
|
panic: kernel diagnostic assertion "refs != ~NUM" failed: file
|
2 |
|
|
|
2 |
32d |
79d
|
79d |
|
assert "refs != ~NUM" failed in kern
|
-1 |
|
|
|
1 |
79d |
79d
|
79d |
|
uvm_fault: in_pcbhash_insert
|
-1 |
|
|
|
8 |
5d17h |
82d
|
82d |
|
uvm_fault: rtable_exists
|
-1 |
|
|
|
21 |
8d19h |
84d
|
84d |
|
uvm_fault: rtable_match
|
-1 |
|
|
|
28 |
7d18h |
85d
|
85d |
|
uvm_fault: shm_deallocate_segment
|
-1 |
|
|
|
8 |
8d12h |
86d
|
86d |
|
panic: free: size too large NUM > NUM (ADDR) type rtable
|
2 |
|
|
|
63 |
2d09h |
88d
|
88d |
|
uvm_fault: rtable_l2
|
-1 |
|
|
|
85 |
3d01h |
89d
|
89d |
|
uvm_fault: amap_lookups
|
-1 |
|
|
|
65 |
4d14h |
89d
|
89d |
|
protection_fault: malloc (3)
|
-1 |
|
|
|
3457 |
1d13h |
90d
|
90d |
|
panic: init
|
2 |
|
|
|
2 |
63d |
101d
|
101d |
|
witness: reversal: fdlock inode (3)
|
-1 |
|
|
|
4 |
53d |
101d
|
101d |
|
panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock (9)
|
2 |
|
|
|
15 |
10d |
106d
|
106d |
|
uvm_fault: sys_shmat (3)
|
-1 |
|
|
|
46 |
1h00m |
108d
|
108d |
|
uvm_fault: bpfioctl (6)
|
-1 |
|
|
|
2 |
87d |
109d
|
109d |
|
panic: i
|
2 |
|
|
|
3 |
86d |
113d
|
113d |
|
panic: (5)
|
2 |
|
|
|
4 |
28d |
128d
|
128d |
|
assert "rn != NULL" failed in pipex.c (3)
|
-1 |
|
|
|
5 |
80d |
128d
|
128d |
|
panic: amap_pp_adjref: negative reference count (3)
|
2 |
|
|
|
48 |
1d13h |
134d
|
134d |
|
witness: reversal: sbufsnd inode (4)
|
-1 |
|
|
|
16 |
39d |
140d
|
140d |
|
assert "(p->pfik_flagrefs == NUM) || (p->pfik_flagrefs == NUM)" failed in pf_if.c
|
-1 |
|
|
|
27 |
2d15h |
153d
|
153d |
|
witness: reversal: pf_lock netlock (4)
|
-1 |
|
|
|
369 |
1d07h |
154d
|
154d |
|
panic: unhandled af (6)
|
2 |
|
|
|
299 |
2d19h |
158d
|
158d |
|
SYZFAIL: repeatedly failed to execute the program (3)
|
-1 |
|
|
|
7 |
8d17h |
164d
|
164d |
|
assert "ISSET(p->p_flag, P_SUSPSIG | P_SUSPSINGLE) == NUM" failed in kern_sig.c
|
-1 |
|
|
|
46 |
1d16h |
164d
|
164d |
|
panic: ffs_valloc: dup alloc (5)
|
2 |
|
|
|
314 |
5h48m |
196d
|
196d |
|
protection_fault: pf_anchor_global_RB_REMOVE (3)
|
-1 |
|
|
|
29 |
56d |
197d
|
197d |
|
uvm_fault: ffs_freefile (3)
|
-1 |
|
|
|
5 |
64d |
197d
|
197d |
|
panic: init died (signal NUM, exit NUM) (2)
|
2 |
|
|
|
3399 |
9m |
198d
|
198d |
|
uvm_fault: ufsdirhash_lookup
|
-1 |
|
|
|
10 |
2d21h |
198d
|
198d |
|
SYZFAIL: SIGFPE
|
-1 |
|
|
|
1634 |
5h19m |
200d
|
200d |
|
SYZFAIL: cover mmap failed
|
-1 |
|
|
|
1370 |
2h29m |
200d
|
200d |
|
SYZFAIL: child failed
|
-1 |
|
|
|
16846 |
14m |
200d
|
200d |
|
SYZFAIL: SIGILL
|
-1 |
|
|
|
1682 |
23m |
200d
|
200d |
|
assert "atomic_load_int(&fdp->fd_nuserevents) == NUM" failed in kern_descrip.c (2)
|
-1 |
|
|
|
7 |
85d |
211d
|
211d |
|
assert "pg->wire_count != NUM" failed in uvm_page.c
|
-1 |
|
|
|
9169 |
20h00m |
293d
|
293d |
|
kernel: protection fault trap, code=NUM (9)
|
-1 |
|
|
|
17 |
15h50m |
317d
|
317d |
|
SYZFAIL: SIGSEGV (2)
|
-1 |
|
|
|
1686 |
10h32m |
325d
|
325d |
|
assert "cifp != NULL" failed in route.c (5)
|
-1 |
|
|
|
16 |
52d |
450d
|
450d |
|
SYZFAIL: can't reallocate
|
-1 |
|
|
|
55 |
1d15h |
531d
|
531d |
|
panic: uvm_fault_unwire_locked: address not in map (5)
|
2 |
|
|
|
224 |
2d02h |
557d
|
557d |
|
panic: chgproccnt: procs < NUM
|
2 |
|
|
|
24 |
6d04h |
596d
|
596d |
|
SYZFAIL: coverage filter is full (3)
|
-1 |
|
|
|
753546 |
4d17h |
600d
|
600d |
|
protection_fault: bpfdetach
|
-1 |
|
|
|
87 |
19d |
602d
|
602d |
|
SYZFAIL: SIGBUS (2)
|
-1 |
|
|
|
3343 |
37m |
606d
|
606d |
|
assert "sc->sc_dev == NUM" failed in if_tun.c (6)
|
-1 |
|
|
|
174 |
10h02m |
608d
|
608d |
|
assert "refs != ~NUM" failed in kern_synch.c
|
-1 |
|
|
|
1326 |
3d08h |
610d
|
610d |
|
SYZFAIL: posix_spawnp failed
|
-1 |
syz |
|
|
7638 |
7d07h |
611d
|
74d |
|
assert "map->limit == rtmap_limit" failed in rtable.c (2)
|
-1 |
|
|
|
538 |
2d20h |
612d
|
612d |
|
uvm_fault: proc_trampoline (2)
|
-1 |
|
|
|
3511 |
17d |
612d
|
612d |
|
protection_fault: witness_checkorder (5)
|
-1 |
|
|
|
56 |
3d01h |
612d
|
612d |
|
uvm_fault: arp_rtrequest (3)
|
-1 |
|
|
|
505 |
3d21h |
613d
|
613d |
|
can't ssh into the instance (2)
|
-1 |
|
|
|
35745 |
3d07h |
614d
|
614d |
|
suppressed report (2)
|
-1 |
|
|
|
22036 |
16h35m |
614d
|
614d |
|
panic: missing alias (6)
|
2 |
|
|
|
1498 |
11m |
614d
|
614d |
|
SYZFAIL: failed to recv rpc (4)
|
-1 |
|
|
|
5185 |
1h27m |
614d
|
614d |
|
panic: trap type NUM, code=NUM, pc=ADDR (3)
|
2 |
|
|
|
4970 |
2d15h |
614d
|
614d |
|
corrupted report (7)
|
-1 |
|
|
|
62013 |
1d07h |
615d
|
615d |
|
witness: reversal: lock order data missing (5)
|
-1 |
|
|
|
236955 |
13m |
615d
|
615d |
|
SYZFAIL: ioctl remote attach failed (6)
|
-1 |
|
|
|
94638 |
now |
615d
|
615d |
|
SYZFAIL: failed to mkdtemp (2)
|
-1 |
|
|
|
329420 |
8m |
615d
|
615d |
|
SYZFAIL: failed to send rpc (2)
|
-1 |
|
|
|
38943 |
13m |
615d
|
615d |
|
SYZFAIL: tun_id out of range (4)
|
-1 |
|
|
|
4348206 |
now |
615d
|
615d |
|
SYZFAIL: failed to mkdir (2)
|
-1 |
|
|
|
56907 |
11m |
615d
|
615d |
|
SYZFAIL: pipe failed
|
-1 |
|
|
|
7811 |
2d06h |
819d
|
819d |
|
protection_fault: lf_advlock (4)
|
-1 |
syz, C |
|
|
69 |
11d |
936d
|
936d |
|
uvm_fault: ktrops (2)
|
-1 |
syz, C |
|
|
699 |
20h58m |
1108d
|
1108d |
|
malloc: free list modified: free (4)
|
-1 |
syz, C |
|
|
48 |
4d14h |
1186d
|
1185d |
|
panic: ufsdirhash_lookup: bad offset in hash array (3)
|
2 |
syz, C |
|
|
107 |
3d09h |
1329d
|
1034d |
|
uvm_fault: memcpy (5)
|
-1 |
syz, C |
|
|
112 |
94d |
1463d
|
1463d |
|
panic: pmap_unwire: invalid PDE
|
2 |
syz |
|
|
6 |
878d |
1521d
|
1463d |
|
no output from test machine (8)
|
-1 |
syz, C |
|
|
926869 |
now |
1531d
|
1527d |
|
uvm_fault: ffs_indirtrunc
|
-1 |
syz, C |
|
|
43 |
65d |
1575d
|
1575d |
|
witness: reversal: vmmaplk inode (3)
|
-1 |
syz, C |
|
|
1068 |
1d02h |
1607d
|
1557d |
|
SYZFATAL: executor NUM failed NUM times: executor NUM: exit status NUM
|
-1 |
syz |
|
|
175427 |
3d02h |
1630d
|
1629d |
|
panic: bad dir (3)
|
2 |
syz, C |
|
|
223 |
128d |
1636d
|
1464d |
|
uvm_fault: ufs_lookup
|
-1 |
syz, C |
|
|
746 |
65d |
1731d
|
1083d |
|
kernel: double fault trap, code=NUM (2)
|
-1 |
syz, C |
|
|
41 |
141d |
1731d
|
1683d |
|
protection_fault: ktrops
|
-1 |
syz, C |
|
|
259 |
792d |
1741d
|
1721d |
|
protection_fault: sblock
|
-1 |
syz |
|
|
38 |
1565d |
1744d
|
1744d |
|
uvm_fault: fifo_write (2)
|
-1 |
syz, C |
|
|
3430 |
766d |
1752d
|
1437d |
|
SYZFAIL: tun: read failed
|
-1 |
syz |
|
|
599529 |
now |
1769d
|
1738d |
|
SYZFAIL: command failed
|
-1 |
syz |
|
|
15843 |
16d |
2057d
|
1740d |
|
panic: ufs_rename: lost dir entry
|
2 |
syz, C |
|
|
151 |
1d11h |
2431d
|
1669d |
|
lost connection to test machine (2)
|
-1 |
|
|
|
2020237 |
now |
2848d
|
never |