syzbot

 sign-in | mailing list | source | docs
🐞 Open [95]
🐞 Fixed [368]
🐞 Invalid [407]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

Out of 407 bugs, 299 were automatically obsoleted (1 due to revoked reproducers), 108 were invalidated by users.
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported
panic: starting DAD on non-tentative address ADDR 2 1 91d 91d
panic: ASan: Invalid access, NUM-byte read at ADDR, MallocRedZone(fb) (4) 2 1 91d 91d
panic: witness_warn (3) 2 1 94d 94d
panic: proc_dtor: non-empty p_ktr 2 1 105d 105d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/i386/kernel/sys/kern/sys_socket.c:LINE (3) 2 3 110d 136d
panic: vm_page_dirty: page is invalid! 2 2 117d 159d
SYZFAIL: ShmemBuilder: too large output offset -1 1 117d 117d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: _callout_stop_safe: Bad link elm ADDR prev->next != 2 2 117d 150d
panic: pmap_demote_pde: a wired mapping is missing PG_A 2 67 79d 305d
freebsd test error: SYZFATAL: image testing failed w/o kernel bug (2) -1 3 119d 155d
panic: Assertion pd->pcksum failed at /syzkaller/managers/main/kernel/sys/netpfil/pf/pf.c:LINE 2 7 120d 157d
panic: /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE: in_pcblbgroup_insert: Bad list head ADDR first->prev ! 2 3 121d 158d
panic: negative vmsize for uid -NUM 2 1 145d 145d
panic: /syzkaller/managers/i386/kernel/sys/kern/kern_timeout.c:LINE: callout_process: Bad tailq NEXT(ADDR->tqh_last) != 2 1 148d 148d
Fatal trap NUM: page fault in witness_checkorder -1 4 148d 163d
panic: mutex so_rcv not owned at /syzkaller/managers/i386/kernel/sys/kern/uipc_usrreq.c:LINE 2 6 149d 152d
panic: /syzkaller/managers/i386/kernel/sys/netinet/in_pcb.c:LINE: in_pcblbgroup_insert: Bad list head ADDR first->prev ! 2 1 151d 151d
panic: pmap_growkernel: no memory to grow kernel (5) 2 457 112d 226d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_process: Bad tailq NEXT(ADDR->tqh_last) != 2 1 152d 152d
freebsd test error: can't ssh into the instance -1 11 113d 113d
panic: /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE: in_pcbremlbgrouphash: Bad link elm ADDR next->prev != 2 1 158d 158d
panic: Assertion pd->pcksum failed at /syzkaller/managers/i386/kernel/sys/netpfil/pf/pf.c:LINE 2 1 160d 160d
Fatal trap NUM: page fault in __mtx_lock_flags (4) -1 1 164d 164d
panic: ip6_deletefraghdr: ext headers not contigous in mbuf ADDR m_len NUM >= offset NUM + NUM 2 686 125d 174d
panic: executing segment marked as unreachable at /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE (in_pcbremlb 2 1 173d 173d
panic: /syzkaller/managers/i386/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h 2 202 135d 164d
panic: tcp_do_segment: sent too much 2 13 161d 193d
panic: Bad list head ADDR first->prev != head (2) 2 113 164d 192d
freebsd test error: lost connection to test machine (7) -1 2 209d 294d
SYZFAIL: coverage filter is full (2) -1 198808 223d 350d
freebsd test error: SYZFATAL: image testing failed w/o kernel bug -1 300 230d 261d
panic: mq notifiers left (2) 2 9 311d 318d
Fatal trap NUM: page fault in __mtx_lock_flags (3) -1 1 312d 312d
Fatal trap NUM: page fault in callout_process (3) -1 1 324d 324d
panic: pf_reassemble6: short mbuf chain 2 1 328d 328d
freebsd build error (19) -1 23 296d 297d
SYZFAIL: posix_spawn failed -1 4902 304d 446d
panic: pmap_growkernel: no memory to grow kernel (4) 2 29 311d 417d
panic: prefix ADDR has referencing addresses (6) 2 3 351d 435d
panic: mtx_lock() of destroyed mutex at sys/netinet/sctp_output.c:LINE (4) 2 1 363d 363d
SYZFAIL: SIGILL -1 101 325d 444d
Fatal trap NUM: page fault in in6_selecthlim (3) -1 739 335d 686d
SYZFAIL: child stopped -1 1 392d 392d
SYZFAIL: SIGBUS -1 8 392d 407d
SYZFAIL: clone failed -1 1 398d 398d
panic: strq ADDR not scheduled (4) 2 1 417d 417d
panic: if_ref: ifp ADDR has NUM refs 2 1 418d 418d
SYZFAIL: invalid kcov comp type (3) -1 1 429d 429d
SYZFAIL: SIGFPE -1 19 392d 432d
Fatal trap NUM: page fault in callout_process (2) -1 1 433d 433d
panic: mq notifiers left 2 21 393d 402d
Fatal trap NUM: pageJul NUM NUM:NUM:NUM fault in ip6_output -1 1 446d 446d
SYZFAIL: coverage filter is full -1 85109 407d 443d
panic: tcp_close: inp_socket NULL 2 4 448d 448d
freebsd test error: panic: ASan: Invalid access, NUM-byte write at ADDR, MallocRedZone(fb) -1 80 434d 440d
freebsd test error: lost connection to test machine (6) -1 7 497d 497d
panic: ASan: Invalid access, NUM-byte read at ADDR, MallocRedZone(fb) (3) 2 1 506d 506d
freebsd boot error: can't ssh into the instance (4) -1 3 511d 511d
Fatal trap NUM: page fault in sctp_free_assoc -1 35 476d 541d
panic: mtx_lock() of destroyed mutex at sys/netinet/sctp_output.c:LINE (3) 2 3 516d 558d
freebsd test error: SYZFATAL: failed to connect to host: dial tcp IP:NUM: i/o timeout -1 54 503d 505d
panic: rsm:ADDR nrsm:ADDR hit at soff:NUM null m (2) 2 3 544d 544d
Fatal trap NUM: page fault in __asan_load8_noabort (2) -1 8 548d 549d
panic: mb_free_extpg: m ADDR is not multipage! 2 1 549d 549d
Fatal trap NUM: page fault in m_free -1 2 549d 549d
Fatal trap NUM: page fault in kasan_atomic_fetchadd_int -1 1 549d 549d
Fatal trap NUM: page fault in callout_process -1 1 549d 549d
panic: Assertion mtx_unowned(m) failed at /syzkaller/managers/i386/kernel/sys/kern/kern_mutex.c:LINE (4) 2 2 551d 555d
panic: prefix ADDR has referencing addresses (5) 2 4 554d 592d
panic: pmap_growkernel: no memory to grow kernel (3) 2 965 517d 1450d
panic: vm_fault_lookup: fault on nofault entry, addr: ADDR (4) 2 18 520d 583d
syzkaller: make target failed: failed to run ["gmake" "target"]: exit status 2 (2) -1 10 471d 472d
Fatal trap NUM: page fault while in kernel mode (5) -1 15 548d 625d
panic: Assertion v != tid failed at /syzkaller/managers/i386/kernel/sys/kern/kern_mutex.c:LINE (2) 2 72 570d 1191d
panic: lock (sleep mutex) sctp-inp not locked @ /syzkaller/managers/i386/kernel/sys/netinet/sctp_pcb.c:LINE 2 6 570d 573d
Fatal trap NUM: page fault in in6_unlink_ifa (4) -1 1 572d 572d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (11) -1 18 541d 567d
Fatal trap NUM: page fault in sctp_ss_default_add (3) -1 1 585d 585d
Fatal trap NUM: page fault in m_tag_delete_chain -1 21 548d 549d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 (4) -1 118 512d 531d
freebsd build error (18) -1 8 550d 551d
panic: mtx_lock_spin: recursed on non-recursive mutex msgbuf @ /syzkaller/managers/i386/kernel/sys/kern/subr_msgbuf.c:LI 2 6 624d 650d
panic: deadlres_td_on_lock: possible deadlock detected for ADDR (syz-executor), blocked for NUM ticks 2 1 630d 630d
panic: Assertion mtx_unowned(m) failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:LINE (4) 2 1 634d 634d
panic: mtx_lock() of destroyed mutex at sys/netinet/sctp_output.c:LINE (2) 2 1 651d 651d
panic: mtx_lock_spin: recursed on non-recursive mutex msgbuf @ /syzkaller/managers/main/kernel/sys/kern/subr_msgbuf.c:LI (2) 2 12 621d 651d
freebsd test error: lost connection to test machine (5) -1 1 693d 693d
panic: Assertion mtx_unowned(m) failed at /syzkaller/managers/i386/kernel/sys/kern/kern_mutex.c:LINE (3) 2 1 694d 694d
panic: prefix ADDR has referencing addresses (4) 2 2 703d 757d
panic: Assertion curthread->td_wantedlock == NULL failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:LINE 2 4 717d 717d
panic: size_on_reasm_queue is NUM (3) 2 1 720d 720d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/i386/kernel/sys/kern/sys_socket.c:LINE (2) 2 1 744d 744d
corrupted report (4) -1 21 774d 1310d
freebsd build error (17) -1 8 783d 821d
Fatal trap NUM: page fault in in6_unlink_ifa (3) -1 1 794d 794d
Fatal trap NUM: page fault in nd6_dad_timer (5) -1 2 797d 869d
panic: mutex Giant owned at /syzkaller/managers/i386/kernel/sys/kern/kern_thread.c:LINE 2 252 767d 828d
panic: in6_pcblookup_hash_locked: invalid foreign address 2 syz 62 929d 978d
panic: prot 0x3 is not subset of max_prot NUM 2 C 2 786d 786d
SYZFAIL: child failed -1 syz 286 1273d 1691d
SYZFAIL: command failed -1 syz 34 1265d 1690d
panic: _mtx_lock_sleep: recursed on non-recursive mutex process lock @ /syzkaller/managers/main/kernel/sys/kern/kern_for 2 C 2 1156d 1156d
Fatal trap NUM: page fault while in kernel mode (4) -1 C 7 965d 1290d
panic: huh, cumack ADDR greater than high-tsn ADDR in map 2 1 832d 832d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-tcb @ /syzkaller/managers/i386/kernel/sys/netinet/sctp_pcb. (3) 2 1 834d 834d
panic: size_on_reasm_queue is NUM (2) 2 1 839d 839d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 (3) -1 506 813d 958d
Fatal trap NUM: general protection fault in pfi_kkif_update (3) -1 1 865d 865d
Fatal trap NUM: page fault in in6_selecthlim (2) -1 1 887d 887d
Fatal trap NUM: page fault in sctp_ss_default_add (2) -1 1 904d 904d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/main/kernel/sys/kern/sys_socket.c:LINE (3) 2 1 910d 910d
panic: Rack:ADDR sb:ADDR rsm:ADDR -- first rsm mbuf not aligned to sb 2 1 915d 915d
panic: Assertion mtx_unowned(m) failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:LINE (3) 2 1 921d 921d
panic: size_on_reasm_queue is NUM 2 1 945d 945d
panic: vtopde on a uva/gpa 0x1000 2 1 956d 956d
Fatal trap NUM: page fault in nd6_dad_timer (4) -1 2 981d 1042d
suppressed report (3) -1 2 993d 1077d
freebsd boot error: Fatal trap NUM: page fault while in kernel mode -1 159 966d 968d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 (3) -1 4 1028d 1028d
panic: prefix ADDR has referencing addresses (3) 2 1 1047d 1047d
freebsd boot error: can't ssh into the instance (3) -1 1 1060d 1060d
freebsd build error (15) -1 1099 987d 1101d
panic: About to free ctl:ADDR so:ADDR and its in 1 2 C 20 1342d 1785d
Fatal trap NUM: page fault in in6_selecthlim -1 15 1104d 1467d
panic: Assertion mtx_unowned(m) failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:LINE (2) 2 1 1110d 1110d
Fatal trap NUM: page fault in nd6_dad_timer (3) -1 3 1148d 1243d
panic: mtx_lock_spin: recursed on non-recursive mutex msgbuf @ /syzkaller/managers/main/kernel/sys/kern/subr_msgbuf.c:LI 2 1 1156d 1156d
freebsd boot error: can't ssh into the instance (2) -1 1 1176d 1176d
freebsd test error: SYZFATAL: BUG: executor version returned bad result: "" -1 52 1148d 1149d
suppressed report (2) -1 2 1196d 1202d
Fatal trap NUM: page fault in pfi_kkif_update (3) -1 1 1197d 1197d
panic: ASan: Invalid access, NUM-byte read at ADDR, StackLeft(f1) (2) 2 1 1199d 1199d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-tcb @ /syzkaller/managers/i386/kernel/sys/netinet/sctp_pcb. (2) 2 1 1202d 1202d
Fatal trap NUM: page fault in knlist_remove_kq -1 1 1205d 1205d
Fatal trap NUM: page fault in sctp_notify_stream_reset_add -1 1 1213d 1213d
freebsd build error (14) -1 18 1196d 1197d
panic: ASan: Invalid access, NUM-byte write at ADDR, UseAfterScope(f8) (2) 2 1 1229d 1229d
panic: ASan: Invalid access, NUM-byte read in kvprintf 2 C 5 1438d 1457d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/i386/kernel/sys/kern/sys_socket.c:LINE 2 1 1242d 1242d
panic: rack_output:NUM: r.start:ADDR < SND.UNA:ADDR; tp:ADDR, rack:ADDR, rsm:ADDR 2 C 270 1216d 1612d
panic: vm_fault_lookup: fault on nofault entry, addr: ADDR (3) 2 1 1251d 1251d
panic: prefix ADDR has referencing addresses (2) 2 3 1258d 1366d
Fatal trap NUM: page fault in sctp_wakeup_the_read_socket (4) -1 1 1260d 1260d
panic: Assertion task->ta_pending == NUM failed at /syzkaller/managers/i386/kernel/sys/kern/sys_socket.c:LINE 2 1 1264d 1264d
panic: Assertion mtx_unowned(m) failed at /syzkaller/managers/i386/kernel/sys/kern/kern_mutex.c:LINE (2) 2 2 1268d 1336d
Fatal trap NUM: page fault in kasan_atomic_load_int (2) -1 3 1270d 1339d
Fatal trap NUM: page fault in in6_unlink_ifa (2) -1 1 1279d 1279d
Fatal trap NUM: page fault in __asan_load8_noabort -1 1 1288d 1288d
SYZFAIL: too much cover (2) -1 120 1259d 1316d
Fatal trap NUM: page fault in memcpy_erms (2) -1 1 1297d 1297d
SYZFAIL: cover mmap failed -1 1 1299d 1299d
panic: ASan: Invalid access, NUM-byte read at ADDR, UMAUseAfterFree(fd) (3) 2 C 58 1214d 1267d
SYZFAIL: tun: read failed (3) -1 1 1312d 1312d
panic: strq ADDR not scheduled (3) 2 1 1313d 1313d
Fatal trap NUM: general protection fault in pfi_kkif_update (2) -1 1 1326d 1326d
panic: spin lock held too long (2) 2 1 1327d 1327d
SYZFAIL: invalid kcov comp type (2) -1 1 1329d 1329d
panic: ASan: Invalid access, NUM-byte read at ADDR, StackMiddle(f2) 2 1 1331d 1331d
panic: Don't own TCB lock 2 1 1334d 1334d
Fatal trap NUM: page fault in nd6_dad_timer (2) -1 1 1338d 1338d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 (2) -1 106 1260d 1322d
freebsd build error (12) -1 2 1300d 1300d
panic: pmap_kasan_enter_alloc_4k: no memory to grow shadow map (2) 2 C 602 1442d 1491d
panic: out of swap space 2 C 15036 1363d 1607d
panic: ASan: Invalid access, NUM-byte read at ADDR, UseAfterScope(f8) 2 syz 7 1338d 1420d
panic: Queues are not empty when handling SHUTDOWN-ACK 2 syz 142 1371d 1941d
SYZFAIL: output overflow (2) -1 syz 14 1377d 1547d
panic: hpts_sane_input_insert: hpts:ADDR inp:ADDR incorrect CPU 2 C 186 1396d 1554d
SYZFAIL: tun: can't open device -1 syz 159 1498d 1690d
panic: m_copydata, offset > size of mbuf chain 2 syz 11 1493d 1496d
panic: hpts_sane_input_remove: hpts:ADDR inp:ADDR incorrect CPU 2 syz 5 1503d 1548d
panic: ASan: Invalid access, 2-byte read in sctp_common_input_processing 2 syz 8 1503d 1551d
panic: mtx_lock() of destroyed mutex at sys/netinet/sctp_pcb.c:LINE 2 syz 24 1562d 1988d
Fatal trap 9: general protection fault in __mtx_lock_sleep -1 syz 295 1556d 2230d
Fatal trap 9: general protection fault in sctp_timer_stop -1 syz 232 1556d 1870d
Fatal trap NUM: page fault in sctp_ss_default_add -1 1 1340d 1340d
panic: ASan: Invalid access, 8-byte read in __mtx_lock_sleep 2 syz 23 1459d 1542d
panic: ASan: Invalid access, 8-byte read in sctp_lower_sosend 2 syz 49 1426d 1534d
panic: ASan: Invalid access, 1-byte write in sctp_lower_sosend 2 syz 332 1447d 1552d
Fatal trap 12: page fault in __mtx_lock_sleep -1 syz 151 1557d 2205d
panic: Warning: Last msg marked incomplete, yet nothing left? 2 C 34 1352d 1606d
Fatal trap NUM: page fault in pfi_kkif_update (2) -1 1 1363d 1363d
panic: TCP stack bbr requested tcp_drop(ADDR) at connect() 2 1 1367d 1367d
panic: ASan: Invalid access, NUM-byte read in __mtx_lock_flags 2 C 188 1426d 1492d
panic: ASan: Invalid access, 8-byte write in sctp_timer_stop 2 C 269 1426d 1552d
Fatal trap 9: general protection fault in sctp_lower_sosend (2) -1 C 446 1556d 1876d
panic: ASan: Invalid access, NUM-byte read in sctp_ss_default_select 2 C 1 1495d 1495d
Fatal trap NUM: page fault while in kernel mode (3) -1 3 1381d 1395d
freebsd test error: lost connection to test machine (4) -1 896 1360d 1422d
panic: ASan: Invalid access, NUM-byte write at ADDR, StackMiddle(f2) 2 1 1396d 1396d
panic: ASan: Invalid access, NUM-byte read at ADDR, StackLeft(f1) 2 2 1404d 1414d
Fatal trap NUM: page fault in __mtx_lock_flags -1 2 1405d 1409d
freebsd build error (11) -1 1 1325d 1325d
panic: lock (sleep mutex) sctp-tcb not locked @ /syzkaller/managers/i386/kernel/sys/netinet/sctputil.c:LINE (3) 2 1 1415d 1415d
panic: ASan: Invalid access, 4-byte read in sctp_timer_stop 2 27 1425d 1552d
panic: ASan: Invalid access, NUM-byte write in vn_read_from_obj 2 5 1426d 1469d
panic: ASan: Invalid access, NUM-byte read in sctp_ss_default_add 2 27 1426d 1479d
panic: ASan: Invalid access, NUM-byte read in sctp_free_assoc 2 3 1427d 1499d
panic: ASan: Invalid access, NUM-byte read in ip6_input 2 1 1429d 1429d
panic: ASan: Invalid access, NUM-byte read in witness_checkorder 2 3 1438d 1488d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (10) -1 2 1354d 1354d
SYZFAIL: tun: read failed (2) -1 19 1443d 1476d
panic: mtx_lock() of destroyed mutex at sys/netinet/sctp_output.c:LINE 2 1 1448d 1448d
panic: ASan: Invalid access, 8-byte read in callout_process 2 5 1452d 1551d
panic: ASan: Invalid access, NUM-byte write in devfs_get_cdevpriv 2 1 1453d 1453d
panic: ASan: Invalid access, NUM-byte read in __cap_rights_is_set 2 1 1459d 1459d
panic: prefix ADDR has referencing addresses 2 1 1460d 1460d
panic: strq ADDR not scheduled (2) 2 1 1463d 1463d
Fatal trap NUM: page fault in sctp_wakeup_the_read_socket -1 2 1464d 1480d
Fatal trap NUM: page fault in in6_unlink_ifa -1 1 1467d 1467d
Fatal trap NUM: page fault in pfi_kkif_update -1 1 1470d 1470d
Fatal trap NUM: general protection fault in pfi_kkif_update -1 1 1474d 1474d
panic: ASan: Invalid access, 4-byte read in sctp_gather_internal_ifa_flags 2 14 1480d 1551d
Fatal trap NUM: page fault in nd6_dad_timer -1 1 1480d 1480d
freebsd build error (10) -1 1 1396d 1396d
corrupted report (3) -1 3 1491d 1606d
panic: sctp_timer_start of type 5: inp = ADDR, stcb->sctp_ep ADDR 2 10 1500d 1553d
panic: ASan: Invalid access, 2-byte read in sctp_chunk_output 2 4 1502d 1546d
panic: ASan: Invalid access, 2-byte read in sctp_ss_fcfs_select 2 3 1507d 1535d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/netinet/sctputil.c:LINE (3) 2 7 1508d 1727d
panic: sctp_timeout_handler of type 5: inp = ADDR, stcb->sctp_ep ADDR 2 2 1509d 1540d
panic: ASan: Invalid access, NUM-byte read in sctp_ss_default_remove 2 1 1510d 1510d
panic: ASan: Invalid access, NUM-byte read in callout_cc_add 2 1 1515d 1515d
panic: ASan: Invalid access, NUM-byte read in smp_targeted_tlb_shootdown 2 2 1469d 1471d
panic: ASan: Invalid access, NUM-byte read in smp_masked_invlpg_range 2 C 1 1445d 1445d
panic: size_on_reasm_queue is 1412 2 1 1526d 1526d
freebsd test error: lost connection to test machine (3) -1 105 1498d 1551d
panic: ASan: Invalid access, 4-byte read at ADDR, RedZonePartial(3) 2 9 1544d 1555d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (9) -1 6 1463d 1465d
panic: 2 chunks left for stream 0. 2 1 1549d 1549d
panic: H:ADDR p_prev_slot:NUM not equal to p_cur_slot:NUM 2 15 1554d 1720d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/netinet/sctp_pcb.c:LINE 2 23 1556d 1811d
panic: ASan: Invalid access, 4-byte read at ADDR, UMAUseAfterFree(fd) 2 300 1526d 1555d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-create @ /syzkaller/managers/main/kernel/sys/netinet/sctp_p 2 1 1561d 1561d
panic: lock (sleep mutex) sctp-tcb not locked @ /syzkaller/managers/i386/kernel/sys/netinet/sctputil.c:LINE (2) 2 2 1563d 1564d
Fatal trap 12: page fault in __mtx_assert (5) -1 7 1565d 1598d
panic: rsm:ADDR nrsm:ADDR rack:ADDR -- rsm->m is NULL? 2 C 25 1611d 1616d
panic: ASan: Invalid access, 4-byte read in in6_sin6_2_sin 2 C 8 1535d 1553d
panic: ASan: Invalid access, 4-byte read in sctp_connectx_helper_find 2 10 1552d 1552d
panic: Most recently used by in6_mfilter 2 3 1616d 1616d
panic: Most recently used by tcp_fsb 2 C 149 1616d 1616d
panic: rack_output: IP version incorrect: 0 2 C 31 1616d 1616d
panic: Most recently used by xform 2 C 115 1616d 1616d
Fatal trap 9: general protection fault in pfi_kkif_update -1 3 1576d 1618d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-tcb @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb. (2) 2 3 1577d 1626d
Fatal trap 12: page fault in sctp_add_to_readq -1 1 1577d 1577d
Fatal trap 12: page fault in in6_unlink_ifa (2) -1 syz 20 1562d 1950d
suppressed report -1 8 1514d 1651d
panic: ASan: Invalid access, 8-byte read at ADDR, UMAUseAfterFree(fd) 2 88 1553d 1555d
panic: ASan: Invalid access, 8-byte write at ADDR, UMAUseAfterFree(fd) 2 19 1553d 1554d
panic: size_on_reasm_queue is 1244 2 1 1584d 1584d
panic: H:ADDR p_prev_slot:LINE not equal to p_cur_slot:LINE 2 1 1589d 1589d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (8) -1 10 1519d 1692d
freebsd build error (8) -1 1 1552d 1551d
SYZFAIL: invalid kcov comp type -1 1443 1560d 1691d
panic: 1 chunks left for stream 0. 2 1 1596d 1596d
Fatal trap 9: general protection fault in sctp_ss_fb_clear -1 1 1604d 1604d
Fatal trap 12: page fault in callout_process (3) -1 1 1605d 1605d
Fatal trap 9: general protection fault in m_tag_locate -1 1 1611d 1611d
Fatal trap 12: page fault in sctp_inpcb_free -1 4 1629d 1729d
panic: mtx_unlock() of destroyed mutex at sys/netinet/sctp_usrreq.c:LINE 2 1 1630d 1630d
Fatal trap 12: page fault in exit1 -1 1 1644d 1644d
freebsd boot error: panic: ASan: Invalid access, 8-byte write at ADDR, MallocRedZone(fb) -1 18 1556d 1556d
freebsd build error (7) -1 2 1556d 1556d
Fatal trap 12: page fault in sctp_free_assoc -1 2 1652d 1707d
SYZFAIL: too much cover -1 2 1655d 1657d
freebsd build error (6) -1 6 1590d 1590d
panic: interrupts enabled 2 C 191 1590d 1591d
Fatal trap 12: page fault in sctp_is_vtag_good -1 1 1688d 1688d
panic: H:ADDR p_prev_slot:LINE not equal to p_cur_slot:NUM 2 1 1693d 1693d
Fatal trap 9: general protection fault in sctp_cmpaddr -1 13 1695d 1830d
Fatal trap 12: page fault in __mtx_assert (4) -1 2 1696d 1711d
panic: Memory modified after free ADDR(736) val=0 @ ADDR 2 21 1697d 1830d
SYZFAIL: output overflow -1 syz 38 1613d 1691d
SYZFAIL: tun: read failed -1 syz 1040 1610d 1691d
panic: sbflush_internal: ccc 0 mb 0 mbcnt 256 2 C 23 2305d 2396d
freebsd build error (5) -1 12 1687d 1716d
freebsd boot error: Fatal trap 12: page fault while in kernel mode -1 78 1632d 1633d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-create @ /syzkaller/managers/i386/kernel/sys/netinet/sctp_p 2 1 1704d 1704d
panic: Counter goes negative (2) 2 2 1708d 1729d
panic: lock (sleep mutex) sctp-tcb not locked @ /syzkaller/managers/i386/kernel/sys/netinet/sctputil.c:LINE 2 1 1713d 1713d
Fatal trap 9: general protection fault in sctp_chunk_output -1 17 1715d 1832d
freebsd test error: lost connection to test machine (2) -1 45 1626d 1627d
panic: Most recently used by sctp_stro 2 1 1723d 1723d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/kern/uipc_socket.c:LINE 2 1 1724d 1724d
panic: H:ADDR p_prev_slot:NUM not equal to p_cur_slot:ADDR 2 1 1728d 1728d
Fatal trap 12: page fault in sctp_ss_default_add -1 1 1733d 1733d
Fatal trap 9: general protection fault in sctp_is_vtag_good -1 2 1741d 1819d
panic: Assertion owner->td_proc->p_magic == P_MAGIC failed at /syzkaller/managers/i386/kernel/sys/kern/subr_turnstile.c: 2 3 1752d 1801d
Fatal trap 9: general protection fault in udp6_common_ctlinput (2) -1 1 1767d 1767d
panic: size_on_reasm_queue is 4 2 1 1773d 1773d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-tcb @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb. 2 3 1774d 1806d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (7) -1 8 1693d 1710d
Fatal trap 9: general protection fault in ck_epoch_poll_deferred (2) -1 4 1793d 1970d
Fatal trap 12: page fault in __mtx_assert (3) -1 3 1805d 1840d
panic: pfi_dynaddr_setup: non-NULL dyn 2 C 35 1746d 1987d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/netinet/sctputil.c:LINE (2) 2 2 1820d 1821d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/kern/uipc_ktls.c:LINE 2 C 6 1741d 1942d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (6) -1 34 1747d 1843d
Fatal trap 9: general protection fault in memcmp (2) -1 1 1791d 1791d
freebsd build error (4) -1 6 1736d 1766d
panic: Most recently used by kdtrace 2 5 1822d 1823d
panic: Flight size-express incorrect? 2 2 1826d 1829d
panic: sleepq_add: td ADDR to sleep on wchan ADDR with sleeping prohibited 2 C 6804 1818d 1856d
panic: pfi_kif_unref: ADDR has zero refs 2 C 2 1823d 1823d
panic: thread with borrowed priority returning to userland 2 syz 8 1946d 1980d
panic: tp:ADDR rc_sacked:LINE > out:LINE 2 C 185 1973d 1983d
panic: m_copydata, length > size of mbuf chain 2 C 93 1983d 2004d
panic: sbsndptr_noadv: sb_mb is NULL 2 C 686 1983d 2004d
panic: mtx_lock() of destroyed mutex at sys/kern/sys_socket.c:LINE 2 syz 43 2032d 2344d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/kern/sys_socket.c:LINE 2 syz 3 2067d 2082d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE 2 C 9 2086d 2087d
panic: _mtx_lock_sleep: recursed on non-recursive mutex rtentry @ /syzkaller/managers/main/kernel/sys/net/route.c:LINE 2 C 4 2133d 2320d
panic: mutex pcbinfohash not owned at /syzkaller/managers/i386/kernel/sys/netinet6/in6_pcb.c:LINE 2 syz 6 2161d 2162d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/main/kernel/sys/netinet6/in6_ifattach.c:LINE 2 syz 4 2183d 2185d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/i386/kernel/sys/netinet6/in6_ifattach.c:LINE (2) 2 syz 1 2185d 2185d
Fatal trap 12: page fault in thread_lock_validate -1 syz 1 2198d 2198d
panic: inp_leave_group: imf_sources not empty (2) 2 C 70 2304d 2337d
panic: non-kernel pmap pmap ADDR cpu 0 pcid 0 2 syz 1 2313d 2313d
panic: _mtx_lock_sleep: recursed on non-recursive mutex rtentry @ /syzkaller/managers/i386/kernel/sys/net/route.c:LINE 2 syz 1 2320d 2320d
panic: sbflush_internal: ccc 0 mb 0 mbcnt 512 2 syz 5 2320d 2378d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/main/kernel/sys/kern/sys_socket.c:LINE 2 syz 5 2333d 2344d
panic: Memory modified after free ADDR(256) val=0 @ ADDR 2 syz 6 2337d 2344d
panic: m_uiotombuf: progress != total 2 syz 2 2396d 2396d
panic: Bad tailq NEXT(ADDR->tqh_last) != NULL (2) 2 C 2194 1781d 2003d
panic: sx_try_xlock() of destroyed sx at sys/kern/uipc_sockbuf.c:LINE 2 8 1916d 2086d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/netinet/sctputil.c:LINE 2 1 1922d 1922d
corrupted report (2) -1 4 1928d 1960d
Fatal trap 12: page fault in tdq_notify -1 1 1934d 1934d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (5) -1 2 1883d 1883d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 (2) -1 28 1851d 1853d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:LINE 2 1 1953d 1953d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/main/kernel/sys/dev/hyperv/hvsock/hv_sock.c:LINE 2 2 1966d 1966d
panic: _mtx_lock_sleep: recursed on non-recursive mutex so_snd @ /syzkaller/managers/main/kernel/sys/kern/uipc_socket.c: 2 1 1967d 1967d
panic: size_on_all_streams smaller than control length 2 1 1971d 1971d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (4) -1 4 1883d 1883d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (3) -1 222 1889d 2214d
freebsd test error: lost connection to test machine -1 1269 1946d 2018d
freebsd build error (3) -1 13 1953d 1973d
Fatal trap 9: general protection fault in route_output -1 5 1992d 1993d
Fatal trap 9: general protection fault in fib4_lookup_nh_ext -1 4 1992d 1993d
Fatal trap 9: general protection fault in fib6_lookup_nh_basic -1 2 1992d 1993d
Fatal trap 9: general protection fault in pfi_kif_update -1 1 1993d 1993d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/main/kernel/sys/modules/tcp/rack/../../../netinet/tcp_stack 2 1 1999d 1999d
panic: refcount ADDR wraparound (2) 2 3883 1992d 1993d
Fatal trap 9: general protection fault in fib6_lookup -1 1494 1992d 1993d
Fatal trap 9: general protection fault in ip_output -1 624 1992d 1993d
Fatal trap 9: general protection fault in fib4_lookup -1 826 1992d 1993d
Fatal trap 9: general protection fault in nhop_free -1 110 1992d 1993d
Fatal trap 9: general protection fault while in kernel mode (2) -1 18 1992d 1993d
Fatal trap 9: general protection fault in sctp_source_address_selection -1 23 1992d 1993d
freebsd test error: timed out (3) -1 1 2043d 2043d
freebsd build error (2) -1 10 2072d 2128d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 -1 2 1988d 1988d
panic: Memory modified after free ADDR(112) val=ADDR @ ADDR 2 1 2082d 2082d
panic: Bad link elm ADDR next->prev != elm (2) 2 1 2086d 2086d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/i386/kernel/sys/netinet/in_pcb.c:LINE 2 7 2086d 2087d
corrupted report -1 1 2087d 2087d
panic: uma_zalloc: Bucket pointer mangled. 2 1 2089d 2089d
panic: vm_page_free_prep: freeing wired page ADDR 2 C 2 2337d 2337d
freebsd boot error: Fatal trap 12: page fault in _thread_lock -1 1 2034d 2034d
Fatal trap 12: page fault in sctp_inpcb_bind -1 1 2118d 2118d
Fatal trap 9: general protection fault in ck_epoch_poll_deferred -1 1 2125d 2125d
Fatal trap 12: page fault in in6_unlink_ifa -1 1 2138d 2138d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/main/kernel/sys/netinet6/in6.c:LINE 2 1 2170d 2170d
freebsd test error: timed out (2) -1 3 2180d 2180d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/i386/kernel/sys/netinet6/in6.c:LINE 2 1 2189d 2189d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/main/kernel/sys/netinet/igmp.c:LINE 2 2 2192d 2192d
panic: uma: Freed item ADDR did not belong to zone mbuf_cluster 2 1 2197d 2197d
Fatal trap 12: page fault in callout_process -1 2 2198d 2313d
Fatal trap 12: page fault while in kernel mode (2) -1 2 2199d 2315d
panic: map ADDR end = ADDR, next->start = 0 2 1 2203d 2203d
Fatal trap 12: page fault in pmap_activate_sw -1 1 2220d 2220d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/main/kernel/sys/netinet/in_mcast.c:LINE 2 15 2192d 2192d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/i386/kernel/sys/netinet/in_mcast.c:LINE 2 21 2192d 2192d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/i386/kernel/sys/net/if.c:LINE 2 1669 2192d 2193d
freebsd boot error: panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/main/kernel/sys/net/if.c:LINE -1 24 2193d 2193d
panic: cap_rights_is_vset:LINE (2) 2 1 2233d 2233d
Fatal trap 9: general protection fault in udp6_common_ctlinput -1 1 2239d 2239d
freebsd build error -1 4 2242d 2242d
panic: pmap_growkernel: no memory to grow kernel 2 4 2332d 2352d
panic: Most recently used by temp 2 4 2341d 2345d
panic: Bad tailq NEXT(ADDR->tqh_last) != NULL 2 1 2346d 2346d
panic: Assertion lock == sq->sq_lock failed at /syzkaller/managers/main/kernel/sys/kern/subr_sleepqueue.c:LINE 2 1 2343d 2343d
panic: Duplicate free of ADDR from zone ADDR(16) slab ADDR(241) 2 1 2339d 2339d
Fatal trap 12: page fault in fifo_close -1 58 2331d 2343d
Fatal trap 12: page fault in __mtx_assert (2) -1 1 2339d 2339d
panic: pmap_demote_pde: firstpte and newpte map different physical addresses 2 2 2325d 2325d
panic: Bad link elm ADDR next->prev != elm 2 11 2334d 2352d
panic: Most recently used by ip6opt 2 3 2318d 2349d
Fatal trap 12: page fault in uma_dbg_free -1 1 2338d 2338d
Fatal trap 12: page fault in uma_dbg_alloc -1 1 2344d 2344d
Fatal trap 9: general protection fault in sys_nlm_syscall -1 2 2339d 2342d
panic: sctp: no chunks on the queues 2 188 2301d 2393d
Fatal trap 12: page fault in ip_output -1 2 2344d 2345d
Fatal trap 9: general protection fault in memcmp -1 23 2332d 2355d
Fatal trap 12: page fault in link_elf_search_symbol -1 5 2305d 2344d
Fatal trap 12: page fault in pmap_remove_pte -1 1 2332d 2332d
freebsd test error: timed out -1 14 2361d 2388d
Fatal trap 9: general protection fault in sbfree -1 2 2381d 2387d
Fatal trap 9: general protection fault in unp_gc -1 1 2395d 2395d
panic: sbready: sb ADDR NULL fnrdy 2 1 2397d 2397d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 -1 4 2379d 2380d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (2) -1 2 2323d 2323d
syzkaller: make target failed: failed to run ["gmake" "target"]: exit status 2 -1 4 2325d 2325d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 -1 1 2386d 2386d
lost connection to test machine -1 10 2400d 2400d