syzbot


Instances:
Name Active Uptime Corpus Coverage 🛈 Crashes Execs Kernel build syzkaller build
Commit Freshness Status Commit Freshness Status
ci-freebsd-i386 now 9h26m 87847 632232 93 3731384 effad35e 11h01m 63631df1 22h11m
ci-freebsd-main now 8h55m 121821 1026568 117 5219111 effad35e 11h01m 63631df1 22h11m
upstream (70):
Title Repro Cause bisect Fix bisect Count Last Reported
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/kern/uipc_socket.c:LINE 1 7h50m 7h50m
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/netinet/sctputil.c:LINE (3) 1 2d21h 2d21h
panic: H:ADDR p_prev_slot:NUM not equal to p_cur_slot:ADDR 1 4d01h 4d01h
panic: Counter goes negative (2) 1 5d00h 5d00h
Fatal trap 12: page fault in sctp_inpcb_free 2 1d14h 5d04h
Fatal trap 12: page fault in sctp_ss_default_add 1 8d12h 8d12h
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/main/kernel/sys/modules/tcp/rack/../../../netinet/tcp_stack (2) C 38 11h45m 13d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/modules/tcp/rack/../../../netinet/tcp_stack 16 1d02h 13d
Fatal trap 9: general protection fault in udp6_common_ctlinput (2) 1 43d 43d
panic: size_on_reasm_queue is 4 1 49d 49d
panic: Bad tailq NEXT(ADDR->tqh_last) != NULL (4) 10 1d18h 54d
panic: mutex so_snd not owned at /syzkaller/managers/i386/kernel/sys/kern/uipc_sockbuf.c:LINE syz 1 60d 60d
panic: About to free ctl:ADDR so:ADDR and its in 1 C 6 4d06h 61d
panic: Queues are not empty when handling SHUTDOWN-COMPLETE syz 6 38d 72d
panic: Assertion owner->td_proc->p_magic == P_MAGIC failed at /syzkaller/managers/i386/kernel/sys/kern/subr_turnstile.c: 3 28d 76d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-tcb @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb. 3 49d 81d
panic: Assertion owner->td_proc->p_magic == P_MAGIC failed at /syzkaller/managers/main/kernel/sys/kern/subr_turnstile.c: syz 13 12d 84d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/netinet/sctp_pcb.c:LINE 5 12d 87d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-tcb @ /syzkaller/managers/i386/kernel/sys/netinet/sctp_pcb. syz 1 88d 88d
panic: sx_try_xlock() of destroyed sx at sys/kern/uipc_sockbuf.c:LINE (2) syz 12 8d02h 90d
Fatal trap 9: general protection fault in sctp_is_vtag_good 2 16d 95d
Fatal trap 9: general protection fault in sctp_cmpaddr 10 21d 106d
panic: Memory modified after free ADDR(736) val=0 @ ADDR 19 27d 106d
panic: mtx_lock() of destroyed mutex at sys/kern/uipc_sockbuf.c:LINE syz 2 94d 106d
Fatal trap 9: general protection fault in sctp_chunk_output 15 44d 107d
panic: Memory modified after free ADDR(736) val=ADDR @ ADDR syz 88 39d 110d
Fatal trap 12: page fault in sctp_find_alternate_net syz 88 8h14m 110d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/netinet/sctp_output.c:NUM syz 2 101d 112d
Fatal trap 12: page fault in __mtx_assert (3) 3 81d 115d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:LINE (2) 2 36d 120d
panic: Assertion v != tid failed at /syzkaller/managers/i386/kernel/sys/kern/kern_mutex.c:LINE syz 18 5d10h 124d
panic: Assertion v != tid failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:LINE syz 43 3d07h 130d
Fatal trap 9: general protection fault while in kernel mode (3) 20 11h04m 144d
Fatal trap 9: general protection fault in sctp_free_assoc syz 6 13d 144d
Fatal trap 9: general protection fault in sctp_timer_stop syz 227 2d02h 145d
panic: sctp: no chunks on the queues (2) 282 6h26m 149d
Fatal trap 9: general protection fault in sctp_lower_sosend (2) C 76 7h34m 151d
panic: size_on_all_streams smaller than control length (2) C 293 5h25m 153d
panic: Bad link elm ADDR next->prev != elm (3) syz 14 2d13h 198d
panic: Queues are not empty when handling SHUTDOWN-ACK syz 53 7h56m 217d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/modules/tcp/bbr/../../../netinet/tcp_stacks C 156 1h05m 221d
Fatal trap 12: page fault in in6_unlink_ifa (2) syz 18 20d 226d
Fatal trap 9: general protection fault in ck_epoch_poll_deferred (2) 4 69d 246d
Fatal trap 12: page fault in __mtx_lock_flags C 332 7h05m 263d
panic: mtx_lock() of destroyed mutex at sys/netinet/sctp_pcb.c:LINE syz 14 29d 263d
panic: pmap_growkernel: no memory to grow kernel (2) syz 110 2h57m 264d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/main/kernel/sys/modules/tcp/bbr/../../../netinet/tcp_stacks C 532 5h40m 275d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/main/kernel/sys/netinet/sctp_output.c:NUM syz 7 34d 278d
panic: sbflush_internal: residual data C 145 6h22m 341d
panic: Bad link elm ADDR prev->next != elm C 350 46m 356d
Fatal trap 12: page fault while in kernel mode (3) syz 7 33d 364d
panic: sx lock still held in solisten_proto syz 1247 4h34m 370d
panic: Assertion mtx_unowned(m) failed at /syzkaller/managers/i386/kernel/sys/kern/kern_mutex.c:LINE syz 15 11d 432d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/kern/uipc_sockbuf.c:LINE syz 77 1d23h 480d
Fatal trap 12: page fault in __mtx_lock_sleep syz 81 2d12h 480d
Fatal trap 9: general protection fault in __mtx_lock_sleep syz 150 3h49m 505d
Fatal trap 9: general protection fault in strlen C 1002 1d11h 589d
panic: Assertion mtx_unowned(m) failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:LINE C 13 13d 595d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/netinet/tcp_output.c:LINE syz 252 3d04h 599d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/main/kernel/sys/kern/uipc_sockbuf.c:LINE syz 302 2h06m 625d
Fatal trap 12: page fault in _sx_xlock_hard C 95 5d18h 628d
Fatal trap 9: general protection fault in sctp_inpcb_bind C 707 4h13m 665d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/main/kernel/sys/netinet/sctputil.c:LINE C 78 1d07h 669d
panic: sbflush_internal: ccc 0 mb 0 mbcnt 256 C 23 581d 671d
panic: Bad list head ADDR first->prev != head C 1018 6h37m 673d
lost connection to test machine (2) 392842 now 674d
panic: sx lock still held C 132 384d 675d
panic: sx_xlock() of destroyed sx at sys/kern/uipc_sockbuf.c:LINE syz 150 11h02m 675d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/main/kernel/sys/netinet/tcp_output.c:LINE syz 631 1d08h 675d
no output from test machine C 62297 7m 675d