failed to run ["ssh" "-p" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "IdentitiesOnly=yes" "-o" "BatchMode=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-i" "/syzkaller/managers/setuid/current/key" "root@10.128.0.128" "pwd"]: exit status 255
ssh: connect to host 10.128.0.128 port 22: Operation timed out
Pseudo-terminal will not be allocated because stdin is not a terminal.
Warning: Permanently added '[us-central1-ssh-serialport.googleapis.com]:9600' (RSA) to the list of known hosts.
SeaBIOS (version 1.8.2-google)
Total RAM Size = 0x0000000080000000 = 2048 MiB
CPUs found: 2     Max CPUs supported: 2
SeaBIOS (version 1.8.2-google)
Machine UUID 21442aeb-d3a6-e744-2e62-d79316c88001
found virtio-scsi at 0:3
virtio-scsi vendor='Google' product='PersistentDisk' rev='1' type=0 removable=0
virtio-scsi blksize=512 sectors=4194304 = 2048 MiB
drive 0x000f27d0: PCHS=0/0/0 translation=lba LCHS=520/128/63 s=4194304
Sending Seabios boot VM event.
Booting from Hard Disk 0...
>> OpenBSD/amd64 BOOT 3.67

boot> 

|/-\|/-\|/booting hd0a:/bsd: -\|/-\36756855|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/+4715528-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/+1077312-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\+0+1409024| [1939697/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\+128+1794720|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/+1234650-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|]=0x2eab6f8

/-\|/-\|entry point at 0xffffffff81001000

[ using 4970232 bytes of bsd ELF symbol table ]

Copyright (c) 1982, 1986, 1989, 1991, 1993

	The Regents of the University of California.  All rights reserved.

Copyright (c) 1995-2025 OpenBSD. All rights reserved.  https://www.OpenBSD.org


OpenBSD 7.6-current (SYZKALLER) #0: Sun Feb 16 06:20:56 PST 2025

    root@ci-openbsd.us-central1-b.c.syzkaller.internal:/syzkaller/managers/setuid/kernel/sys/arch/amd64/compile/SYZKALLER

real mem = 2130694144 (2031MB)

avail mem = 2001047552 (1908MB)

random: good seed from bootblocks

mpath0 at root

scsibus0 at mpath0: 256 targets

mainbus0 at root

bios0 at mainbus0: SMBIOS rev. 2.4 @ 0xf2860 (12 entries)

bios0: vendor Google version "Google" date 12/27/2024

bios0: Google Google Compute Engine

acpi0 at bios0: ACPI 2.0

acpi0: sleep states S3 S4 S5

acpi0: tables DSDT FACP SRAT APIC SSDT WAET

acpi0: wakeup devices

acpitimer0 at acpi0: 3579545 Hz, 24 bits

acpimadt0 at acpi0 addr 0xfee00000: PC-AT compat

cpu0 at mainbus0: apid 0 (boot processor)

cpu0: Intel(R) Xeon(R) CPU @ 2.20GHz, 2200.42 MHz, 06-4f-00

cpu0: cpuid 1 edx=1f8bfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,SS,HTT> ecx=f6fa3223<SSE3,PCLMUL,VMX,SSSE3,FMA3,CX16,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,AES,XSAVE,AVX,F16C,RDRAND,HV>

cpu0: cpuid 6 eax=4<ARAT>

cpu0: cpuid 7.0 ebx=1c2ffb<FSGSBASE,TSC_ADJUST,BMI1,HLE,AVX2,SMEP,BMI2,ERMS,INVPCID,RTM,RDSEED,ADX,SMAP> edx=ac000400<MD_CLEAR,IBRS,IBPB,STIBP,SSBD>

cpu0: cpuid d.1 eax=1<XSAVEOPT>

cpu0: cpuid 80000001 edx=2c100800<NXE,PAGE1GB,RDTSCP,LONG> ecx=121<LAHF,ABM,3DNOWP>

cpu0: cpuid 80000007 edx=100<ITSC>

cpu0: msr 10a=400004c<RSBA,SKIP_L1DFL,IF_PSCHANGE,GDS_NO>

cpu0: MELTDOWN

cpu0: 32KB 64b/line 8-way D-cache, 32KB 64b/line 8-way I-cache, 256KB 64b/line 8-way L2 cache, 55MB 64b/line 20-way L3 cache

cpu0: smt 0, core 0, package 0

mtrr: Pentium Pro MTRR support, 8 var ranges, 88 fixed ranges

cpu0: apic clock running at 1000MHz

cpu1 at mainbus0: apid 1 (application processor)

cpu1: Intel(R) Xeon(R) CPU @ 2.20GHz, 2200.69 MHz, 06-4f-00

cpu1: smt 1, core 0, package 0

ioapic0 at mainbus0: apid 0 pa 0xfec00000, version 11, 24 pins

acpiprt0 at acpi0: bus 0 (PCI0)

"ACPI0006" at acpi0 not configured

acpipci0 at acpi0 PCI0

acpicmos0 at acpi0

"PNP0303" at acpi0 not configured

"PNP0F13" at acpi0 not configured

com0 at acpi0 COM1 addr 0x3f8/0x8 irq 4: ns16550a, 16 byte fifo

com0: console

com1 at acpi0 COM2 addr 0x2f8/0x8 irq 3: ns16550a, 16 byte fifo

com2 at acpi0 COM3 addr 0x3e8/0x8 irq 6: ns16550a, 16 byte fifo

com3 at acpi0 COM4 addr 0x2e8/0x8 irq 7: ns16550a, 16 byte fifo

"QEMU0001" at acpi0 not configured

acpicpu0 at acpi0: C1(@1 halt!)

acpicpu1 at acpi0: C1(@1 halt!)

cpu0: using VERW MDS workaround

pvbus0 at mainbus0: KVM

pvclock0 at pvbus0

pci0 at mainbus0 bus 0

pchb0 at pci0 dev 0 function 0 "Intel 82441FX" rev 0x02

pcib0 at pci0 dev 1 function 0 "Intel 82371AB PIIX4 ISA" rev 0x03

piixpm0 at pci0 dev 1 function 3 "Intel 82371AB Power" rev 0x03: SMBus disabled

virtio0 at pci0 dev 3 function 0 "Qumranet Virtio SCSI" rev 0x00

vioscsi0 at virtio0: qsize 8192

virtio0: msix per-VQ

scsibus1 at vioscsi0: 253 targets

sd0 at scsibus1 targ 1 lun 0: <Google, PersistentDisk, 1> serial.Google_PersistentDisk_

sd0: 2048MB, 512 bytes/sector, 4194304 sectors, thin

virtio1 at pci0 dev 4 function 0 "Qumranet Virtio Network" rev 0x00

vio0 at virtio1: 1 queue, address 42:01:0a:80:00:80

virtio1: msix

unknown vendor 0x1ae0 product 0xa002 (class display subclass VGA, rev 0x01) at pci0 dev 5 function 0 not configured

virtio2 at pci0 dev 6 function 0 "Qumranet Virtio Memory Balloon" rev 0x00

viomb0 at virtio2

virtio2: apic 0 int 10

virtio3 at pci0 dev 7 function 0 "Qumranet Virtio RNG" rev 0x00

viornd0 at virtio3

virtio3: msix per-VQ

isa0 at pcib0

isadma0 at isa0

pckbc0 at isa0 port 0x60/5 irq 1 irq 12

pckbd0 at pckbc0 (kbd slot)

wskbd0 at pckbd0 mux 1

pms0 at pckbc0 (aux slot)

wsmouse0 at pms0 mux 0

pcppi0 at isa0 port 0x61

spkr0 at pcppi0

vmm0 at mainbus0: VMX/EPT (using slow L1TF mitigation)

vscsi0 at root

scsibus2 at vscsi0: 256 targets

softraid0 at root

scsibus3 at softraid0: 256 targets

root on sd0a (89cc299d24461a1a.a) swap on sd0b dump on sd0b

Automatic boot in progress: starting file system checks.
/dev/sd0a (89cc299d24461a1a.a): file system is clean; not checking
ddb.max_line: 24 -> 0
ddb.max_width: 80 -> 0
hw.smt: 0 -> 1
kern.allowdt: 0 -> 1
kernel: protection fault trap, code=0

Stopped at      witness_checkorder+0xa9:        movl    0x18(%r14),%r15d

ddb{0}> serialport: Connected to syzkaller.us-central1-b.ci-openbsd-setuid-5 port 1 (session ID: 5c5cbcbf4ec8391390757522be4b59f1590380ea03630a7a9f358421d4b5e71c, active connections: 1).