failed to run ["ssh" "-p" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-i" "/syzkaller/managers/setuid/latest.tmp/key" "root@10.128.1.108" "pwd"]: exit status 255
ssh: connect to host 10.128.1.108 port 22: Operation timed out
Pseudo-terminal will not be allocated because stdin is not a terminal.
Warning: Permanently added '[ssh-serialport.googleapis.com]:9600' (RSA) to the list of known hosts.
serialport: Connected to syzkaller.us-central1-c.ci-openbsd-setuid-test-2 port 1 (session ID: 9c4f3cdc97dc5fecbce004f17679e4215b57f0f0100ab3e455e1b22ae0119786, active connections: 1).
SeaBIOS (version 1.8.2-google)
Total RAM Size = 0x0000000080000000 = 2048 MiB
CPUs found: 2     Max CPUs supported: 2
SeaBIOS (version 1.8.2-google)
Machine UUID 303d12bd-bf91-b213-a59b-7d81da1919eb
found virtio-scsi at 0:3
virtio-scsi vendor='Google' product='PersistentDisk' rev='1' type=0 removable=0
virtio-scsi blksize=512 sectors=4194304 = 2048 MiB
drive 0x000f2500: PCHS=0/0/0 translation=lba LCHS=520/128/63 s=4194304
Sending Seabios boot VM event.
Booting from Hard Disk 0...
>> OpenBSD/amd64 BOOT 3.53

boot> 

|/-\|/-\|/booting hd0a:/bsd: -\|/-\22288257|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|+3720208/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\+905248|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\+0+1867776| [1128733/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/+128+1469136-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\+955237|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/]=0x1ed8bd8

-\|/-\|/entry point at 0xffffffff81001000

[ using 3554264 bytes of bsd ELF symbol table ]

Copyright (c) 1982, 1986, 1989, 1991, 1993

	The Regents of the University of California.  All rights reserved.

Copyright (c) 1995-2022 OpenBSD. All rights reserved.  https://www.OpenBSD.org


OpenBSD 7.0-current (SYZKALLER) #0: Mon Feb 14 20:02:23 PST 2022

    root@ci-openbsd.c.syzkaller.internal:/syzkaller/managers/setuid/kernel/sys/arch/amd64/compile/SYZKALLER

real mem = 2130694144 (2031MB)

avail mem = 2017800192 (1924MB)

random: good seed from bootblocks

mpath0 at root

scsibus0 at mpath0: 256 targets

mainbus0 at root

bios0 at mainbus0: SMBIOS rev. 2.4 @ 0xf2590 (12 entries)

bios0: vendor Google version "Google" date 01/01/2011

bios0: Google Google Compute Engine

acpi0 at bios0: ACPI 2.0

acpi0: sleep states S3 S4 S5

acpi0: tables DSDT FACP SRAT APIC SSDT WAET

acpi0: wakeup devices

acpitimer0 at acpi0: 3579545 Hz, 24 bits

acpimadt0 at acpi0 addr 0xfee00000: PC-AT compat

cpu0 at mainbus0: apid 0 (boot processor)

cpu0: Intel(R) Xeon(R) CPU @ 2.20GHz, 2200.08 MHz, 06-4f-00

cpu0: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,SS,HTT,SSE3,PCLMUL,VMX,SSSE3,FMA3,CX16,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,AES,XSAVE,AVX,F16C,RDRAND,HV,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,ITSC,FSGSBASE,TSC_ADJUST,BMI1,HLE,AVX2,SMEP,BMI2,ERMS,INVPCID,RTM,RDSEED,ADX,SMAP,MD_CLEAR,IBRS,IBPB,STIBP,SSBD,ARAT,XSAVEOPT,MELTDOWN

cpu0: 256KB 64b/line 8-way L2 cache

cpu0: smt 0, core 0, package 0

mtrr: Pentium Pro MTRR support, 8 var ranges, 88 fixed ranges

cpu0: apic clock running at 950MHz

cpu1 at mainbus0: apid 1 (application processor)

cpu1: Intel(R) Xeon(R) CPU @ 2.20GHz, 2090.10 MHz, 06-4f-00

cpu1: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,SS,HTT,SSE3,PCLMUL,VMX,SSSE3,FMA3,CX16,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,AES,XSAVE,AVX,F16C,RDRAND,HV,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,ITSC,FSGSBASE,TSC_ADJUST,BMI1,HLE,AVX2,SMEP,BMI2,ERMS,INVPCID,RTM,RDSEED,ADX,SMAP,MD_CLEAR,IBRS,IBPB,STIBP,SSBD,ARAT,XSAVEOPT,MELTDOWN

cpu1: 256KB 64b/line 8-way L2 cache

cpu1: smt 1, core 0, package 0

ioapic0 at mainbus0: apid 0 pa 0xfec00000, version 11, 24 pins

acpiprt0 at acpi0: bus 0 (PCI0)

"ACPI0006" at acpi0 not configured

acpipci0 at acpi0 PCI0

acpicmos0 at acpi0

com0 at acpi0 COM1 addr 0x3f8/0x8 irq 4: ns16550a, 16 byte fifo

com0: console

com1 at acpi0 COM2 addr 0x2f8/0x8 irq 3: ns16550a, 16 byte fifo

com2 at acpi0 COM3 addr 0x3e8/0x8 irq 6: ns16550a, 16 byte fifo

com3 at acpi0 COM4 addr 0x2e8/0x8 irq 7: ns16550a, 16 byte fifo

"QEMU0001" at acpi0 not configured

"ACPI0007" at acpi0 not configured

"ACPI0007" at acpi0 not configured

acpicpu0 at acpi0: C1(@1 halt!)

acpicpu1 at acpi0: C1(@1 halt!)

cpu0: using VERW MDS workaround

pvbus0 at mainbus0: KVM

pvclock0 at pvbus0

pci0 at mainbus0 bus 0

pchb0 at pci0 dev 0 function 0 "Intel 82441FX" rev 0x02

pcib0 at pci0 dev 1 function 0 "Intel 82371AB PIIX4 ISA" rev 0x03

piixpm0 at pci0 dev 1 function 3 "Intel 82371AB Power" rev 0x03: SMBus disabled

virtio0 at pci0 dev 3 function 0 "Qumranet Virtio SCSI" rev 0x00

vioscsi0 at virtio0: qsize 8192

scsibus1 at vioscsi0: 253 targets

sd0 at scsibus1 targ 1 lun 0: <Google, PersistentDisk, 1> serial.Google_PersistentDisk_

sd0: 2048MB, 512 bytes/sector, 4194304 sectors, thin

virtio0: msix shared

virtio1 at pci0 dev 4 function 0 "Qumranet Virtio Network" rev 0x00

vio0 at virtio1: address 42:01:0a:80:01:6c

virtio1: msix per-VQ

unknown vendor 0x1ae0 product 0xa002 (class display subclass VGA, rev 0x01) at pci0 dev 5 function 0 not configured

virtio2 at pci0 dev 6 function 0 "Qumranet Virtio Memory Balloon" rev 0x00

viomb0 at virtio2

virtio2: msix per-VQ

virtio3 at pci0 dev 7 function 0 "Qumranet Virtio RNG" rev 0x00

viornd0 at virtio3

virtio3: msix shared

isa0 at pcib0

isadma0 at isa0

pckbc0 at isa0 port 0x60/5 irq 1 irq 12

pckbd0 at pckbc0 (kbd slot)

wskbd0 at pckbd0 mux 1

pms0 at pckbc0 (aux slot)

wsmouse0 at pms0 mux 0

pcppi0 at isa0 port 0x61

spkr0 at pcppi0

vmm0 at mainbus0: VMX/EPT (using slow L1TF mitigation)

vscsi0 at root

scsibus2 at vscsi0: 256 targets

softraid0 at root

scsibus3 at softraid0: 256 targets

root on sd0a (5ec49b3ad23eb2d4.a) swap on sd0b dump on sd0b

Automatic boot in progress: starting file system checks.
/dev/sd0a (5ec49b3ad23eb2d4.a): file system is clean; not checking
ddb.max_line: 24 -> 0
ddb.max_width: 80 -> 0
hw.smt: 0 -> 1
kern.allowdt: 0 -> 1
starting network
witness: lock order reversal:

 1st 0xfffffd807effe468 vmmaplk (&map->lock)

 2nd 0xfffffd80744d73d8 inode (&ip->i_lock)

lock order "&ip->i_lock"(rrwlock) -> "&map->lock"(rwlock) first seen at:

#0  rw_enter_read+0x66

#1  uvmfault_lookup+0xd9

#2  uvm_fault_check+0x3a

#3  uvm_fault+0x102

#4  kpageflttrap+0x209

#5  kerntrap+0xef

#6  alltraps_kern_meltdown+0x7b

#7  copyout+0x53

#8  ffs_read+0x3c2

#9  VOP_READ+0xbf

#10 vn_rdwr+0x105

#11 vmcmd_map_readvn+0xd4

#12 exec_process_vmcmds+0xc2

#13 sys_execve+0x8fa

#14 syscall+0x489

#15 Xsyscall+0x128

lock order data w1 -> w2 missing

Stopped at      db_enter+0x18:  addq    $0x8,%rsp

ddb{1}>