syzbot


Instances:
Name Active Uptime Corpus Coverage 🛈 Crashes Execs Kernel build syzkaller build
Commit Freshness Status Commit Freshness Status
ci-freebsd-i386 now 4m 46076 826923 195 806467 2694c869ff9f 1h08m d2d6e680 now
ci-freebsd-main now 49m 63608 1046697 279 1383624 f3a3b0612169 19h25m failing d2d6e680 now
upstream (146):
Title Repro Cause bisect Fix bisect Count Last Reported Last activity
freebsd boot error: panic: sleeping without a lock 6 55m 1h36m 1h36m
panic: size_on_reasm_queue is 1412 1 8h42m 8h42m 8h42m
panic: ASan: Invalid access, 8-byte read in sctp_inpcb_bind 1 1d10h 1d10h 1d10h
panic: ASan: Invalid access, 1-byte read in udp6_common_ctlinput 1 5d22h 5d22h 5d22h
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/main/kernel/sys/kern/uipc_socket.c:LINE 1 6d22h 6d22h 6d22h
panic: ASan: Invalid access, 8-byte read in sctp_lower_sosend 2 3d05h 7d18h 7d18h
panic: ASan: Invalid access, 2-byte read in sctp_ss_fcfs_select 2 2d22h 9d11h 9d11h
panic: ASan: Invalid access, 8-byte read in itimer_proc_continue 1 11d 11d 11d
panic: ASan: Invalid access, 2-byte read in g_raid_md_taste_sii C 5 2d03h 11d 2d03h
panic: sctp_timeout_handler of type 5: inp = ADDR, stcb->sctp_ep ADDR 1 14d 14d 14d
panic: ASan: Invalid access, 8-byte read in __mtx_lock_sleep 7 2d00h 15d 15d
panic: ASan: Invalid access, 2-byte read in sctp_chunk_output 1 20d 20d 20d
SYZFAIL: output overflow (2) 2 14d 21d 21d
panic: hpts_sane_input_remove: hpts:ADDR inp:ADDR incorrect CPU 2 5d07h 22d 22d
panic: ASan: Invalid access, 2-byte read in sctp_ss_prio_add 1 23d 23d 23d
panic: 2 chunks left for stream 0. 1 23d 23d 23d
freebsd test error: lost connection to test machine (3) 63 13h43m 24d 24d
panic: ASan: Invalid access, 8-byte read in osd_get 3 10d 24d 24d
freebsd build error (8) 1 25d 24d 24d
panic: ASan: Invalid access, 8-byte read in callout_process 3 13d 24d 24d
panic: ASan: Invalid access, 8-byte read in sctp_ss_fb_add 19 7h57m 24d 24d
panic: ASan: Invalid access, 4-byte read in sctp_sendall_completes 8 7d10h 24d 24d
panic: ASan: Invalid access, 4-byte read in sctp_gather_internal_ifa_flags 7 1d00h 24d 24d
panic: ASan: Invalid access, 2-byte read in sctp_common_input_processing syz 3 2d19h 24d 24d
panic: ASan: Invalid access, 4-byte read in sctp_timer_stop 10 2d10h 25d 25d
panic: ASan: Invalid access, 8-byte read in sctp_inpcb_free 88 7h06m 25d 25d
panic: ASan: Invalid access, 8-byte read in sctp_free_assoc 69 6h56m 25d 25d
panic: ASan: Invalid access, 8-byte read in sctp_ss_default_add 145 6h06m 25d 25d
panic: ASan: Invalid access, 1-byte read in g_raid_md_taste_ddf C 12 1d14h 25d 7d15h
panic: ASan: Invalid access, 8-byte write in sctp_timer_stop syz 144 37m 25d 24d
panic: ASan: Invalid access, 4-byte read in sctp_connectx_helper_find 10 26d 25d 25d
panic: ASan: Invalid access, 1-byte write in sctp_lower_sosend 180 3h19m 25d 25d
panic: ASan: Invalid access, 2-byte read in sctp_inpcb_bind C 53 17h14m 25d 25d
panic: ASan: Invalid access, 4-byte read in in6_sin6_2_sin C 8 8d19h 26d 17d
panic: H:ADDR p_prev_slot:LINE not equal to p_cur_slot:NUM (2) 1 28d 26d 26d
panic: sctp_timer_start of type 5: inp = ADDR, stcb->sctp_ep ADDR 6 2h33m 26d 26d
panic: ASan: Invalid access, 8-byte read in __mtx_lock_flags C 429 2h32m 26d 22d
panic: ASan: Invalid access, 16-byte read in aesni_encrypt_icm C 224 2d05h 26d 19d
panic: ASan: Invalid access, 4-byte read in sctp6_connect 64 2d08h 26d 26d
panic: ASan: Invalid access, 4-byte read in sctp_sosend C 792 2h37m 26d 25d
panic: hpts_sane_input_insert: hpts:ADDR inp:ADDR incorrect CPU C 41 5h11m 27d 18d
panic: ASan: Invalid access, 2-byte read at ADDR, UMAUseAfterFree(fd) 12 15d 27d 27d
panic: ASan: Invalid access, 16-byte read at ADDR, RedZonePartial(3) 9 27d 27d 27d
panic: ASan: Invalid access, 1-byte read at ADDR, RedZonePartial(1) 10 27d 27d 27d
panic: ASan: Invalid access, 8-byte write at ADDR, UMAUseAfterFree(fd) 19 27d 27d 27d
panic: ASan: Invalid access, 1-byte read at ADDR, RedZonePartial(2) 17 27d 28d 28d
panic: ASan: Invalid access, 8-byte read at ADDR, StackMiddle(f2) 18 27d 28d 28d
panic: ASan: Invalid access, 4-byte write at ADDR, UMAUseAfterFree(fd) 325 26m 28d 28d
panic: ASan: Invalid access, 1-byte write at ADDR, UMAUseAfterFree(fd) 35 26d 28d 28d
panic: ASan: Invalid access, 16-byte read at ADDR, RedZonePartial(7) 28 26d 29d 29d
panic: ASan: Invalid access, 4-byte read at ADDR, RedZonePartial(3) 9 18d 29d 29d
panic: ASan: Invalid access, 4-byte read at ADDR, RedZonePartial(2) 36 19d 29d 29d
panic: ASan: Invalid access, 16-byte read at ADDR, RedZonePartial(6) 20 26d 29d 29d
panic: ASan: Invalid access, 8-byte read at ADDR, UMAUseAfterFree(fd) 88 26d 29d 29d
panic: ASan: Invalid access, 4-byte read at ADDR, UMAUseAfterFree(fd) 300 7h36m 29d 29d
Fatal trap 12: page fault in sctp_ss_default_add (2) 1 30d 30d 30d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/main/kernel/sys/kern/sys_socket.c:LINE 1 33d 33d 33d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-create @ /syzkaller/managers/main/kernel/sys/netinet/sctp_p 1 34d 34d 34d
panic: lock (sleep mutex) sctp-tcb not locked @ /syzkaller/managers/i386/kernel/sys/netinet/sctputil.c:LINE (2) 2 37d 38d 38d
Fatal trap 9: general protection fault in sctp_ss_prio_add 1 40d 40d 40d
Fatal trap 12: page fault in filt_timerdetach 1 41d 41d 41d
Fatal trap 12: page fault in knlist_remove_kq 3 38d 46d 46d
Fatal trap 12: page fault in sctp_add_to_readq 1 51d 51d 51d
panic: seq_out not found rack:ADDR tp:ADDR 15 24d 52d 52d
panic: Assertion lock == sq->sq_lock failed at /syzkaller/managers/i386/kernel/sys/kern/subr_sleepqueue.c:LINE 1 53d 53d 53d
panic: Assertion lock == sq->sq_lock failed at /syzkaller/managers/main/kernel/sys/kern/subr_sleepqueue.c:LINE (2) C 7 31d 54d 54d
panic: size_on_reasm_queue is 1244 1 58d 58d 58d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/kern/sys_socket.c:LINE (2) 63 15d 58d 58d
panic: Going nowhere without my init! C 45 1d14h 60d 60d
Fatal trap 12: page fault in soo_aio_queue C 253 1d11h 61d 61d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/main/kernel/sys/kern/sys_socket.c:LINE (2) C 97 9d23h 61d 61d
panic: H:ADDR p_prev_slot:LINE not equal to p_cur_slot:LINE 1 63d 63d 63d
Fatal trap 9: general protection fault in itimer_proc_continue syz 2 67d 67d 67d
panic: 1 chunks left for stream 0. 1 70d 70d 70d
panic: invalid payload start 5 33d 70d 70d
Fatal trap 12: page fault in __mtx_assert (5) 7 38d 72d 72d
Fatal trap 9: general protection fault in sctp_ss_fb_clear 1 78d 78d 78d
Fatal trap 12: page fault in callout_process (3) 1 79d 79d 79d
panic: Warning: Last msg marked incomplete, yet nothing left? C 21 10d 79d 78d
corrupted report (3) 2 43d 79d 79d
Fatal trap 12: page fault in sctp_inpcb_bind (2) 5 44d 80d 80d
panic: out of swap space C 5935 2d14h 80d 80d
Fatal trap 9: general protection fault in m_tag_locate 1 84d 84d 84d
panic: rack_output:NUM: r.start:ADDR < SND.UNA:ADDR; tp:ADDR, rack:ADDR, rsm:ADDR syz 236 5d00h 86d 86d
Fatal trap 9: general protection fault in pfi_kkif_update 3 49d 92d 92d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-tcb @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb. (2) 3 50d 99d 99d
panic: Assertion owner->td_proc->p_magic == P_MAGIC failed at /syzkaller/managers/i386/kernel/sys/kern/subr_turnstile.c: (2) 9 14d 107d 107d
suppressed report 7 23d 124d 124d
SYZFAIL: command failed syz 6 32d 163d 110d
SYZFAIL: tun: can't open device syz 134 3d18h 164d 135d
SYZFAIL: invalid kcov comp type 1443 34d 164d 164d
SYZFAIL: child failed syz 269 11d 164d 163d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (8) 8 16d 165d 165d
panic: H:ADDR p_prev_slot:NUM not equal to p_cur_slot:NUM 15 28d 193d 193d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/netinet/sctputil.c:LINE (3) 6 20d 201d 201d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/main/kernel/sys/modules/tcp/rack/../../../netinet/tcp_stack (2) C 491 2d03h 211d 211d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/modules/tcp/rack/../../../netinet/tcp_stack 182 10d 211d 211d
panic: Bad tailq NEXT(ADDR->tqh_last) != NULL (4) C 147 29d 252d 137d
panic: mutex so_snd not owned at /syzkaller/managers/i386/kernel/sys/kern/uipc_sockbuf.c:LINE syz 1 258d 258d 258d
panic: About to free ctl:ADDR so:ADDR and its in 1 C 15 31d 259d 259d
panic: Queues are not empty when handling SHUTDOWN-COMPLETE syz 14 31d 271d 271d
panic: Assertion owner->td_proc->p_magic == P_MAGIC failed at /syzkaller/managers/main/kernel/sys/kern/subr_turnstile.c: C 46 27d 282d 61d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/netinet/sctp_pcb.c:LINE 23 30d 285d 285d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-tcb @ /syzkaller/managers/i386/kernel/sys/netinet/sctp_pcb. syz 3 83d 286d 286d
panic: sx_try_xlock() of destroyed sx at sys/kern/uipc_sockbuf.c:LINE (2) syz 21 36d 289d 266d
panic: mtx_lock() of destroyed mutex at sys/kern/uipc_sockbuf.c:LINE syz 4 115d 305d 305d
panic: Memory modified after free ADDR(736) val=ADDR @ ADDR syz 95 112d 308d 308d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/netinet/sctp_output.c:NUM syz 8 42d 310d 299d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:LINE (2) syz 10 7d23h 318d 91d
panic: Assertion v != tid failed at /syzkaller/managers/i386/kernel/sys/kern/kern_mutex.c:LINE syz 40 31d 322d 306d
panic: Assertion v != tid failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:LINE syz 87 36d 328d 302d
Fatal trap 9: general protection fault while in kernel mode (3) 41 50d 342d 342d
Fatal trap 9: general protection fault in sctp_free_assoc syz 14 34d 342d 242d
Fatal trap 9: general protection fault in sctp_timer_stop syz 232 30d 344d 343d
panic: sctp: no chunks on the queues (2) syz 682 7h13m 348d 178d
Fatal trap 9: general protection fault in sctp_lower_sosend (2) C 446 29d 350d 331d
panic: size_on_all_streams smaller than control length (2) C 630 10d 351d 351d
panic: Bad link elm ADDR next->prev != elm (3) syz 63 12h55m 396d 396d
panic: Queues are not empty when handling SHUTDOWN-ACK syz 125 1d08h 415d 325d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/modules/tcp/bbr/../../../netinet/tcp_stacks C 409 18d 419d 419d
Fatal trap 12: page fault in in6_unlink_ifa (2) syz 20 36d 424d 304d
Fatal trap 12: page fault in __mtx_lock_flags C 846 8h21m 461d 351d
panic: mtx_lock() of destroyed mutex at sys/netinet/sctp_pcb.c:LINE syz 24 35d 461d 461d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/main/kernel/sys/modules/tcp/bbr/../../../netinet/tcp_stacks C 896 3d14h 473d 473d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/main/kernel/sys/netinet/sctp_output.c:NUM syz 10 29d 476d 476d
panic: sbflush_internal: residual data C 367 1d11h 539d 417d
panic: Bad link elm ADDR prev->next != elm C 997 11m 554d 296d
Fatal trap 12: page fault while in kernel mode (3) C 102 9d19h 563d 60d
panic: sx lock still held in solisten_proto syz 1691 4d14h 568d 566d
panic: Assertion mtx_unowned(m) failed at /syzkaller/managers/i386/kernel/sys/kern/kern_mutex.c:LINE syz 19 66d 630d 544d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/kern/uipc_sockbuf.c:LINE syz 198 7d02h 678d 678d
Fatal trap 12: page fault in __mtx_lock_sleep syz 151 31d 679d 679d
Fatal trap 9: general protection fault in __mtx_lock_sleep syz 295 29d 703d 697d
Fatal trap 9: general protection fault in strlen C 1506 29d 787d 314d
panic: Assertion mtx_unowned(m) failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:LINE C 18 36d 794d 544d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/netinet/tcp_output.c:LINE syz 296 3d19h 798d 797d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/main/kernel/sys/kern/uipc_sockbuf.c:LINE syz 664 17d 823d 658d
Fatal trap 12: page fault in _sx_xlock_hard C 115 48d 827d 440d
Fatal trap 9: general protection fault in sctp_inpcb_bind C 1131 29d 864d 306d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/main/kernel/sys/netinet/sctputil.c:LINE C 106 13h05m 867d 823d
panic: Bad list head ADDR first->prev != head C 2894 18m 871d 409d
lost connection to test machine (2) 419082 17m 872d 794d
panic: sx lock still held C 133 190d 873d 872d
panic: sx_xlock() of destroyed sx at sys/kern/uipc_sockbuf.c:LINE syz 180 31d 873d 872d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/main/kernel/sys/netinet/tcp_output.c:LINE syz 705 5d08h 874d 874d
no output from test machine C 99523 now 874d 358d
fix pending (7):
Title Repro Cause bisect Fix bisect Count Last Reported Last activity Patched
panic: ASan: Invalid access, 4-byte read in tcp_usr_bind C 50 3h09m 24d 24d 1/2
panic: ASan: Invalid access, 4-byte read in udp_bind C 69 3h28m 25d 25d 1/2
panic: Most recently used by in6_mfilter 3 90d 90d 89d 0/2
panic: rsm:ADDR nrsm:ADDR rack:ADDR -- rsm->m is NULL? C 25 85d 90d 84d 0/2
panic: rack_output: IP version incorrect: 0 C 31 90d 90d 89d 0/2
panic: Most recently used by tcp_fsb C 149 90d 90d 89d 0/2
panic: Most recently used by xform C 115 90d 90d 26d 0/2