syzbot

 sign-in | mailing list | source | docs
🐞 Open [93]
🐞 Fixed [369]
🐞 Invalid [411]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

Out of 411 bugs, 303 were automatically obsoleted (1 due to revoked reproducers), 108 were invalidated by users.
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported
panic: sleeping thread[ htholredsa d tpuin_dm 2tx ti 2 1 93d 93d
Fatal trap NUM: page fault in in6_selecthlim (4) -1 1 98d 98d
Fatal trap NUM: page fault in link_elf_search_symbol -1 1 102d 102d
panic: deadlres_td_sleep_q: possible deadlock detected for ADDR (syz-executor), blocked for ADDR ticks 2 1 105d 105d
panic: starting DAD on non-tentative address ADDR 2 1 108d 108d
panic: ASan: Invalid access, NUM-byte read at ADDR, MallocRedZone(fb) (4) 2 1 109d 109d
panic: witness_warn (3) 2 1 112d 112d
panic: proc_dtor: non-empty p_ktr 2 1 123d 123d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/i386/kernel/sys/kern/sys_socket.c:LINE (3) 2 3 128d 154d
panic: vm_page_dirty: page is invalid! 2 2 135d 177d
SYZFAIL: ShmemBuilder: too large output offset -1 1 135d 135d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: _callout_stop_safe: Bad link elm ADDR prev->next != 2 2 135d 168d
panic: pmap_demote_pde: a wired mapping is missing PG_A 2 67 97d 323d
freebsd test error: SYZFATAL: image testing failed w/o kernel bug (2) -1 3 137d 173d
panic: Assertion pd->pcksum failed at /syzkaller/managers/main/kernel/sys/netpfil/pf/pf.c:LINE 2 7 138d 175d
panic: /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE: in_pcblbgroup_insert: Bad list head ADDR first->prev ! 2 3 139d 176d
panic: negative vmsize for uid -NUM 2 1 163d 163d
panic: /syzkaller/managers/i386/kernel/sys/kern/kern_timeout.c:LINE: callout_process: Bad tailq NEXT(ADDR->tqh_last) != 2 1 166d 166d
Fatal trap NUM: page fault in witness_checkorder -1 4 166d 181d
panic: mutex so_rcv not owned at /syzkaller/managers/i386/kernel/sys/kern/uipc_usrreq.c:LINE 2 6 167d 169d
panic: /syzkaller/managers/i386/kernel/sys/netinet/in_pcb.c:LINE: in_pcblbgroup_insert: Bad list head ADDR first->prev ! 2 1 169d 169d
panic: pmap_growkernel: no memory to grow kernel (5) 2 457 130d 244d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_process: Bad tailq NEXT(ADDR->tqh_last) != 2 1 170d 170d
freebsd test error: can't ssh into the instance -1 11 130d 131d
panic: /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE: in_pcbremlbgrouphash: Bad link elm ADDR next->prev != 2 1 176d 176d
panic: Assertion pd->pcksum failed at /syzkaller/managers/i386/kernel/sys/netpfil/pf/pf.c:LINE 2 1 178d 178d
Fatal trap NUM: page fault in __mtx_lock_flags (4) -1 1 182d 182d
panic: ip6_deletefraghdr: ext headers not contigous in mbuf ADDR m_len NUM >= offset NUM + NUM 2 686 143d 192d
panic: executing segment marked as unreachable at /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE (in_pcbremlb 2 1 191d 191d
panic: /syzkaller/managers/i386/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h 2 202 152d 182d
panic: tcp_do_segment: sent too much 2 13 178d 211d
panic: Bad list head ADDR first->prev != head (2) 2 113 182d 209d
freebsd test error: lost connection to test machine (7) -1 2 227d 312d
SYZFAIL: coverage filter is full (2) -1 198808 240d 367d
freebsd test error: SYZFATAL: image testing failed w/o kernel bug -1 300 248d 279d
panic: mq notifiers left (2) 2 9 329d 336d
Fatal trap NUM: page fault in __mtx_lock_flags (3) -1 1 330d 330d
Fatal trap NUM: page fault in callout_process (3) -1 1 342d 342d
panic: pf_reassemble6: short mbuf chain 2 1 346d 346d
freebsd build error (19) -1 23 314d 315d
SYZFAIL: posix_spawn failed -1 4902 322d 464d
panic: pmap_growkernel: no memory to grow kernel (4) 2 29 329d 435d
panic: prefix ADDR has referencing addresses (6) 2 3 369d 452d
panic: mtx_lock() of destroyed mutex at sys/netinet/sctp_output.c:LINE (4) 2 1 380d 380d
SYZFAIL: SIGILL -1 101 342d 461d
Fatal trap NUM: page fault in in6_selecthlim (3) -1 739 353d 704d
SYZFAIL: child stopped -1 1 410d 410d
SYZFAIL: SIGBUS -1 8 410d 425d
SYZFAIL: clone failed -1 1 416d 416d
panic: strq ADDR not scheduled (4) 2 1 435d 435d
panic: if_ref: ifp ADDR has NUM refs 2 1 436d 436d
SYZFAIL: invalid kcov comp type (3) -1 1 447d 447d
SYZFAIL: SIGFPE -1 19 410d 450d
Fatal trap NUM: page fault in callout_process (2) -1 1 450d 450d
panic: mq notifiers left 2 21 411d 420d
Fatal trap NUM: pageJul NUM NUM:NUM:NUM fault in ip6_output -1 1 463d 463d
SYZFAIL: coverage filter is full -1 85109 425d 460d
panic: tcp_close: inp_socket NULL 2 4 466d 466d
freebsd test error: panic: ASan: Invalid access, NUM-byte write at ADDR, MallocRedZone(fb) -1 80 452d 458d
freebsd test error: lost connection to test machine (6) -1 7 514d 515d
panic: ASan: Invalid access, NUM-byte read at ADDR, MallocRedZone(fb) (3) 2 1 524d 524d
freebsd boot error: can't ssh into the instance (4) -1 3 528d 528d
Fatal trap NUM: page fault in sctp_free_assoc -1 35 494d 559d
panic: mtx_lock() of destroyed mutex at sys/netinet/sctp_output.c:LINE (3) 2 3 534d 576d
freebsd test error: SYZFATAL: failed to connect to host: dial tcp IP:NUM: i/o timeout -1 54 521d 523d
panic: rsm:ADDR nrsm:ADDR hit at soff:NUM null m (2) 2 3 562d 562d
Fatal trap NUM: page fault in __asan_load8_noabort (2) -1 8 566d 566d
panic: mb_free_extpg: m ADDR is not multipage! 2 1 566d 566d
Fatal trap NUM: page fault in m_free -1 2 566d 566d
Fatal trap NUM: page fault in kasan_atomic_fetchadd_int -1 1 566d 566d
Fatal trap NUM: page fault in callout_process -1 1 567d 567d
panic: Assertion mtx_unowned(m) failed at /syzkaller/managers/i386/kernel/sys/kern/kern_mutex.c:LINE (4) 2 2 569d 573d
panic: prefix ADDR has referencing addresses (5) 2 4 572d 610d
panic: pmap_growkernel: no memory to grow kernel (3) 2 965 535d 1468d
panic: vm_fault_lookup: fault on nofault entry, addr: ADDR (4) 2 18 538d 601d
syzkaller: make target failed: failed to run ["gmake" "target"]: exit status 2 (2) -1 10 489d 490d
Fatal trap NUM: page fault while in kernel mode (5) -1 15 566d 643d
panic: Assertion v != tid failed at /syzkaller/managers/i386/kernel/sys/kern/kern_mutex.c:LINE (2) 2 72 587d 1209d
panic: lock (sleep mutex) sctp-inp not locked @ /syzkaller/managers/i386/kernel/sys/netinet/sctp_pcb.c:LINE 2 6 588d 591d
Fatal trap NUM: page fault in in6_unlink_ifa (4) -1 1 590d 590d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (11) -1 18 558d 585d
Fatal trap NUM: page fault in sctp_ss_default_add (3) -1 1 603d 603d
Fatal trap NUM: page fault in m_tag_delete_chain -1 21 566d 566d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 (4) -1 118 530d 549d
freebsd build error (18) -1 8 568d 569d
panic: mtx_lock_spin: recursed on non-recursive mutex msgbuf @ /syzkaller/managers/i386/kernel/sys/kern/subr_msgbuf.c:LI 2 6 642d 668d
panic: deadlres_td_on_lock: possible deadlock detected for ADDR (syz-executor), blocked for NUM ticks 2 1 648d 648d
panic: Assertion mtx_unowned(m) failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:LINE (4) 2 1 652d 652d
panic: mtx_lock() of destroyed mutex at sys/netinet/sctp_output.c:LINE (2) 2 1 669d 669d
panic: mtx_lock_spin: recursed on non-recursive mutex msgbuf @ /syzkaller/managers/main/kernel/sys/kern/subr_msgbuf.c:LI (2) 2 12 639d 669d
freebsd test error: lost connection to test machine (5) -1 1 711d 711d
panic: Assertion mtx_unowned(m) failed at /syzkaller/managers/i386/kernel/sys/kern/kern_mutex.c:LINE (3) 2 1 711d 711d
panic: prefix ADDR has referencing addresses (4) 2 2 721d 775d
panic: Assertion curthread->td_wantedlock == NULL failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:LINE 2 4 735d 735d
panic: size_on_reasm_queue is NUM (3) 2 1 738d 738d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/i386/kernel/sys/kern/sys_socket.c:LINE (2) 2 1 762d 762d
corrupted report (4) -1 21 792d 1328d
freebsd build error (17) -1 8 801d 839d
Fatal trap NUM: page fault in in6_unlink_ifa (3) -1 1 811d 811d
Fatal trap NUM: page fault in nd6_dad_timer (5) -1 2 815d 886d
panic: mutex Giant owned at /syzkaller/managers/i386/kernel/sys/kern/kern_thread.c:LINE 2 252 785d 846d
panic: in6_pcblookup_hash_locked: invalid foreign address 2 syz 62 947d 996d
panic: prot 0x3 is not subset of max_prot NUM 2 C 2 804d 804d
SYZFAIL: child failed -1 syz 286 1290d 1709d
SYZFAIL: command failed -1 syz 34 1283d 1708d
panic: _mtx_lock_sleep: recursed on non-recursive mutex process lock @ /syzkaller/managers/main/kernel/sys/kern/kern_for 2 C 2 1174d 1174d
Fatal trap NUM: page fault while in kernel mode (4) -1 C 7 983d 1308d
panic: huh, cumack ADDR greater than high-tsn ADDR in map 2 1 850d 850d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-tcb @ /syzkaller/managers/i386/kernel/sys/netinet/sctp_pcb. (3) 2 1 851d 851d
panic: size_on_reasm_queue is NUM (2) 2 1 857d 857d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 (3) -1 506 831d 976d
Fatal trap NUM: general protection fault in pfi_kkif_update (3) -1 1 883d 883d
Fatal trap NUM: page fault in in6_selecthlim (2) -1 1 905d 905d
Fatal trap NUM: page fault in sctp_ss_default_add (2) -1 1 922d 922d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/main/kernel/sys/kern/sys_socket.c:LINE (3) 2 1 928d 928d
panic: Rack:ADDR sb:ADDR rsm:ADDR -- first rsm mbuf not aligned to sb 2 1 933d 933d
panic: Assertion mtx_unowned(m) failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:LINE (3) 2 1 939d 939d
panic: size_on_reasm_queue is NUM 2 1 963d 963d
panic: vtopde on a uva/gpa 0x1000 2 1 974d 974d
Fatal trap NUM: page fault in nd6_dad_timer (4) -1 2 999d 1060d
suppressed report (3) -1 2 1010d 1095d
freebsd boot error: Fatal trap NUM: page fault while in kernel mode -1 159 984d 986d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 (3) -1 4 1046d 1046d
panic: prefix ADDR has referencing addresses (3) 2 1 1065d 1065d
freebsd boot error: can't ssh into the instance (3) -1 1 1077d 1077d
freebsd build error (15) -1 1099 1004d 1119d
panic: About to free ctl:ADDR so:ADDR and its in 1 2 C 20 1360d 1803d
Fatal trap NUM: page fault in in6_selecthlim -1 15 1122d 1485d
panic: Assertion mtx_unowned(m) failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:LINE (2) 2 1 1128d 1128d
Fatal trap NUM: page fault in nd6_dad_timer (3) -1 3 1165d 1261d
panic: mtx_lock_spin: recursed on non-recursive mutex msgbuf @ /syzkaller/managers/main/kernel/sys/kern/subr_msgbuf.c:LI 2 1 1174d 1174d
freebsd boot error: can't ssh into the instance (2) -1 1 1194d 1194d
freebsd test error: SYZFATAL: BUG: executor version returned bad result: "" -1 52 1166d 1167d
suppressed report (2) -1 2 1214d 1220d
Fatal trap NUM: page fault in pfi_kkif_update (3) -1 1 1215d 1215d
panic: ASan: Invalid access, NUM-byte read at ADDR, StackLeft(f1) (2) 2 1 1217d 1217d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-tcb @ /syzkaller/managers/i386/kernel/sys/netinet/sctp_pcb. (2) 2 1 1219d 1219d
Fatal trap NUM: page fault in knlist_remove_kq -1 1 1223d 1223d
Fatal trap NUM: page fault in sctp_notify_stream_reset_add -1 1 1231d 1231d
freebsd build error (14) -1 18 1214d 1214d
panic: ASan: Invalid access, NUM-byte write at ADDR, UseAfterScope(f8) (2) 2 1 1247d 1247d
panic: ASan: Invalid access, NUM-byte read in kvprintf 2 C 5 1456d 1475d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/i386/kernel/sys/kern/sys_socket.c:LINE 2 1 1260d 1260d
panic: rack_output:NUM: r.start:ADDR < SND.UNA:ADDR; tp:ADDR, rack:ADDR, rsm:ADDR 2 C 270 1234d 1630d
panic: vm_fault_lookup: fault on nofault entry, addr: ADDR (3) 2 1 1269d 1269d
panic: prefix ADDR has referencing addresses (2) 2 3 1275d 1384d
Fatal trap NUM: page fault in sctp_wakeup_the_read_socket (4) -1 1 1278d 1278d
panic: Assertion task->ta_pending == NUM failed at /syzkaller/managers/i386/kernel/sys/kern/sys_socket.c:LINE 2 1 1282d 1282d
panic: Assertion mtx_unowned(m) failed at /syzkaller/managers/i386/kernel/sys/kern/kern_mutex.c:LINE (2) 2 2 1286d 1354d
Fatal trap NUM: page fault in kasan_atomic_load_int (2) -1 3 1287d 1357d
Fatal trap NUM: page fault in in6_unlink_ifa (2) -1 1 1297d 1297d
Fatal trap NUM: page fault in __asan_load8_noabort -1 1 1306d 1306d
SYZFAIL: too much cover (2) -1 120 1277d 1334d
Fatal trap NUM: page fault in memcpy_erms (2) -1 1 1315d 1315d
SYZFAIL: cover mmap failed -1 1 1317d 1317d
panic: ASan: Invalid access, NUM-byte read at ADDR, UMAUseAfterFree(fd) (3) 2 C 58 1232d 1285d
SYZFAIL: tun: read failed (3) -1 1 1330d 1330d
panic: strq ADDR not scheduled (3) 2 1 1330d 1330d
Fatal trap NUM: general protection fault in pfi_kkif_update (2) -1 1 1344d 1344d
panic: spin lock held too long (2) 2 1 1345d 1345d
SYZFAIL: invalid kcov comp type (2) -1 1 1347d 1347d
panic: ASan: Invalid access, NUM-byte read at ADDR, StackMiddle(f2) 2 1 1349d 1349d
panic: Don't own TCB lock 2 1 1352d 1352d
Fatal trap NUM: page fault in nd6_dad_timer (2) -1 1 1356d 1356d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 (2) -1 106 1278d 1340d
freebsd build error (12) -1 2 1318d 1318d
panic: pmap_kasan_enter_alloc_4k: no memory to grow shadow map (2) 2 C 602 1460d 1509d
panic: out of swap space 2 C 15036 1381d 1625d
panic: ASan: Invalid access, NUM-byte read at ADDR, UseAfterScope(f8) 2 syz 7 1356d 1437d
panic: Queues are not empty when handling SHUTDOWN-ACK 2 syz 142 1389d 1959d
SYZFAIL: output overflow (2) -1 syz 14 1395d 1565d
panic: hpts_sane_input_insert: hpts:ADDR inp:ADDR incorrect CPU 2 C 186 1414d 1571d
SYZFAIL: tun: can't open device -1 syz 159 1516d 1708d
panic: m_copydata, offset > size of mbuf chain 2 syz 11 1510d 1514d
panic: hpts_sane_input_remove: hpts:ADDR inp:ADDR incorrect CPU 2 syz 5 1521d 1566d
panic: ASan: Invalid access, 2-byte read in sctp_common_input_processing 2 syz 8 1521d 1568d
panic: mtx_lock() of destroyed mutex at sys/netinet/sctp_pcb.c:LINE 2 syz 24 1580d 2005d
Fatal trap 9: general protection fault in __mtx_lock_sleep -1 syz 295 1573d 2247d
Fatal trap 9: general protection fault in sctp_timer_stop -1 syz 232 1574d 1888d
Fatal trap NUM: page fault in sctp_ss_default_add -1 1 1358d 1358d
panic: ASan: Invalid access, 8-byte read in __mtx_lock_sleep 2 syz 23 1477d 1559d
panic: ASan: Invalid access, 8-byte read in sctp_lower_sosend 2 syz 49 1444d 1551d
panic: ASan: Invalid access, 1-byte write in sctp_lower_sosend 2 syz 332 1465d 1569d
Fatal trap 12: page fault in __mtx_lock_sleep -1 syz 151 1575d 2223d
panic: Warning: Last msg marked incomplete, yet nothing left? 2 C 34 1370d 1624d
Fatal trap NUM: page fault in pfi_kkif_update (2) -1 1 1381d 1381d
panic: TCP stack bbr requested tcp_drop(ADDR) at connect() 2 1 1385d 1385d
panic: ASan: Invalid access, NUM-byte read in __mtx_lock_flags 2 C 188 1444d 1510d
panic: ASan: Invalid access, 8-byte write in sctp_timer_stop 2 C 269 1444d 1569d
Fatal trap 9: general protection fault in sctp_lower_sosend (2) -1 C 446 1573d 1894d
panic: ASan: Invalid access, NUM-byte read in sctp_ss_default_select 2 C 1 1513d 1513d
Fatal trap NUM: page fault while in kernel mode (3) -1 3 1399d 1413d
freebsd test error: lost connection to test machine (4) -1 896 1378d 1440d
panic: ASan: Invalid access, NUM-byte write at ADDR, StackMiddle(f2) 2 1 1414d 1414d
panic: ASan: Invalid access, NUM-byte read at ADDR, StackLeft(f1) 2 2 1422d 1431d
Fatal trap NUM: page fault in __mtx_lock_flags -1 2 1423d 1427d
freebsd build error (11) -1 1 1342d 1342d
panic: lock (sleep mutex) sctp-tcb not locked @ /syzkaller/managers/i386/kernel/sys/netinet/sctputil.c:LINE (3) 2 1 1432d 1432d
panic: ASan: Invalid access, 4-byte read in sctp_timer_stop 2 27 1443d 1569d
panic: ASan: Invalid access, NUM-byte write in vn_read_from_obj 2 5 1443d 1487d
panic: ASan: Invalid access, NUM-byte read in sctp_ss_default_add 2 27 1443d 1497d
panic: ASan: Invalid access, NUM-byte read in sctp_free_assoc 2 3 1445d 1516d
panic: ASan: Invalid access, NUM-byte read in ip6_input 2 1 1447d 1447d
panic: ASan: Invalid access, NUM-byte read in witness_checkorder 2 3 1456d 1506d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (10) -1 2 1372d 1372d
SYZFAIL: tun: read failed (2) -1 19 1461d 1494d
panic: mtx_lock() of destroyed mutex at sys/netinet/sctp_output.c:LINE 2 1 1466d 1466d
panic: ASan: Invalid access, 8-byte read in callout_process 2 5 1470d 1568d
panic: ASan: Invalid access, NUM-byte write in devfs_get_cdevpriv 2 1 1471d 1471d
panic: ASan: Invalid access, NUM-byte read in __cap_rights_is_set 2 1 1477d 1477d
panic: prefix ADDR has referencing addresses 2 1 1478d 1478d
panic: strq ADDR not scheduled (2) 2 1 1481d 1481d
Fatal trap NUM: page fault in sctp_wakeup_the_read_socket -1 2 1482d 1498d
Fatal trap NUM: page fault in in6_unlink_ifa -1 1 1484d 1484d
Fatal trap NUM: page fault in pfi_kkif_update -1 1 1488d 1488d
Fatal trap NUM: general protection fault in pfi_kkif_update -1 1 1492d 1492d
panic: ASan: Invalid access, 4-byte read in sctp_gather_internal_ifa_flags 2 14 1498d 1568d
Fatal trap NUM: page fault in nd6_dad_timer -1 1 1498d 1498d
freebsd build error (10) -1 1 1414d 1414d
corrupted report (3) -1 3 1509d 1624d
panic: sctp_timer_start of type 5: inp = ADDR, stcb->sctp_ep ADDR 2 10 1518d 1570d
panic: ASan: Invalid access, 2-byte read in sctp_chunk_output 2 4 1519d 1564d
panic: ASan: Invalid access, 2-byte read in sctp_ss_fcfs_select 2 3 1525d 1553d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/netinet/sctputil.c:LINE (3) 2 7 1526d 1745d
panic: sctp_timeout_handler of type 5: inp = ADDR, stcb->sctp_ep ADDR 2 2 1527d 1558d
panic: ASan: Invalid access, NUM-byte read in sctp_ss_default_remove 2 1 1527d 1527d
panic: ASan: Invalid access, NUM-byte read in callout_cc_add 2 1 1533d 1533d
panic: ASan: Invalid access, NUM-byte read in smp_targeted_tlb_shootdown 2 2 1487d 1489d
panic: ASan: Invalid access, NUM-byte read in smp_masked_invlpg_range 2 C 1 1463d 1463d
panic: size_on_reasm_queue is 1412 2 1 1544d 1544d
freebsd test error: lost connection to test machine (3) -1 105 1516d 1568d
panic: ASan: Invalid access, 4-byte read at ADDR, RedZonePartial(3) 2 9 1562d 1573d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (9) -1 6 1481d 1483d
panic: 2 chunks left for stream 0. 2 1 1567d 1567d
panic: H:ADDR p_prev_slot:NUM not equal to p_cur_slot:NUM 2 15 1572d 1737d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/netinet/sctp_pcb.c:LINE 2 23 1574d 1829d
panic: ASan: Invalid access, 4-byte read at ADDR, UMAUseAfterFree(fd) 2 300 1544d 1573d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-create @ /syzkaller/managers/main/kernel/sys/netinet/sctp_p 2 1 1578d 1578d
panic: lock (sleep mutex) sctp-tcb not locked @ /syzkaller/managers/i386/kernel/sys/netinet/sctputil.c:LINE (2) 2 2 1581d 1582d
Fatal trap 12: page fault in __mtx_assert (5) -1 7 1582d 1616d
panic: rsm:ADDR nrsm:ADDR rack:ADDR -- rsm->m is NULL? 2 C 25 1629d 1634d
panic: ASan: Invalid access, 4-byte read in in6_sin6_2_sin 2 C 8 1552d 1570d
panic: ASan: Invalid access, 4-byte read in sctp_connectx_helper_find 2 10 1570d 1569d
panic: Most recently used by in6_mfilter 2 3 1634d 1634d
panic: Most recently used by tcp_fsb 2 C 149 1634d 1634d
panic: rack_output: IP version incorrect: 0 2 C 31 1634d 1634d
panic: Most recently used by xform 2 C 115 1634d 1634d
Fatal trap 9: general protection fault in pfi_kkif_update -1 3 1594d 1636d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-tcb @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb. (2) 2 3 1594d 1643d
Fatal trap 12: page fault in sctp_add_to_readq -1 1 1595d 1595d
Fatal trap 12: page fault in in6_unlink_ifa (2) -1 syz 20 1580d 1968d
suppressed report -1 8 1532d 1669d
panic: ASan: Invalid access, 8-byte read at ADDR, UMAUseAfterFree(fd) 2 88 1571d 1573d
panic: ASan: Invalid access, 8-byte write at ADDR, UMAUseAfterFree(fd) 2 19 1571d 1571d
panic: size_on_reasm_queue is 1244 2 1 1602d 1602d
panic: H:ADDR p_prev_slot:LINE not equal to p_cur_slot:LINE 2 1 1607d 1607d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (8) -1 10 1537d 1710d
freebsd build error (8) -1 1 1570d 1568d
SYZFAIL: invalid kcov comp type -1 1443 1578d 1709d
panic: 1 chunks left for stream 0. 2 1 1614d 1614d
Fatal trap 9: general protection fault in sctp_ss_fb_clear -1 1 1622d 1622d
Fatal trap 12: page fault in callout_process (3) -1 1 1623d 1623d
Fatal trap 9: general protection fault in m_tag_locate -1 1 1628d 1628d
Fatal trap 12: page fault in sctp_inpcb_free -1 4 1646d 1747d
panic: mtx_unlock() of destroyed mutex at sys/netinet/sctp_usrreq.c:LINE 2 1 1648d 1648d
Fatal trap 12: page fault in exit1 -1 1 1661d 1661d
freebsd boot error: panic: ASan: Invalid access, 8-byte write at ADDR, MallocRedZone(fb) -1 18 1573d 1574d
freebsd build error (7) -1 2 1574d 1574d
Fatal trap 12: page fault in sctp_free_assoc -1 2 1670d 1725d
SYZFAIL: too much cover -1 2 1673d 1675d
freebsd build error (6) -1 6 1607d 1608d
panic: interrupts enabled 2 C 191 1608d 1609d
Fatal trap 12: page fault in sctp_is_vtag_good -1 1 1706d 1706d
panic: H:ADDR p_prev_slot:LINE not equal to p_cur_slot:NUM 2 1 1711d 1711d
Fatal trap 9: general protection fault in sctp_cmpaddr -1 13 1713d 1848d
Fatal trap 12: page fault in __mtx_assert (4) -1 2 1714d 1729d
panic: Memory modified after free ADDR(736) val=0 @ ADDR 2 21 1714d 1848d
SYZFAIL: output overflow -1 syz 38 1630d 1708d
SYZFAIL: tun: read failed -1 syz 1040 1627d 1709d
panic: sbflush_internal: ccc 0 mb 0 mbcnt 256 2 C 23 2323d 2414d
freebsd build error (5) -1 12 1705d 1734d
freebsd boot error: Fatal trap 12: page fault while in kernel mode -1 78 1649d 1651d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-create @ /syzkaller/managers/i386/kernel/sys/netinet/sctp_p 2 1 1721d 1721d
panic: Counter goes negative (2) 2 2 1725d 1747d
panic: lock (sleep mutex) sctp-tcb not locked @ /syzkaller/managers/i386/kernel/sys/netinet/sctputil.c:LINE 2 1 1731d 1731d
Fatal trap 9: general protection fault in sctp_chunk_output -1 17 1733d 1850d
freebsd test error: lost connection to test machine (2) -1 45 1644d 1645d
panic: Most recently used by sctp_stro 2 1 1741d 1741d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/kern/uipc_socket.c:LINE 2 1 1742d 1742d
panic: H:ADDR p_prev_slot:NUM not equal to p_cur_slot:ADDR 2 1 1746d 1746d
Fatal trap 12: page fault in sctp_ss_default_add -1 1 1750d 1750d
Fatal trap 9: general protection fault in sctp_is_vtag_good -1 2 1759d 1837d
panic: Assertion owner->td_proc->p_magic == P_MAGIC failed at /syzkaller/managers/i386/kernel/sys/kern/subr_turnstile.c: 2 3 1770d 1819d
Fatal trap 9: general protection fault in udp6_common_ctlinput (2) -1 1 1785d 1785d
panic: size_on_reasm_queue is 4 2 1 1791d 1791d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-tcb @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb. 2 3 1792d 1824d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (7) -1 8 1711d 1728d
Fatal trap 9: general protection fault in ck_epoch_poll_deferred (2) -1 4 1811d 1988d
Fatal trap 12: page fault in __mtx_assert (3) -1 3 1823d 1857d
panic: pfi_dynaddr_setup: non-NULL dyn 2 C 35 1764d 2005d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/netinet/sctputil.c:LINE (2) 2 2 1838d 1838d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/kern/uipc_ktls.c:LINE 2 C 6 1759d 1960d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (6) -1 34 1765d 1861d
Fatal trap 9: general protection fault in memcmp (2) -1 1 1809d 1809d
freebsd build error (4) -1 6 1753d 1784d
panic: Most recently used by kdtrace 2 5 1840d 1841d
panic: Flight size-express incorrect? 2 2 1844d 1847d
panic: sleepq_add: td ADDR to sleep on wchan ADDR with sleeping prohibited 2 C 6804 1835d 1874d
panic: pfi_kif_unref: ADDR has zero refs 2 C 2 1841d 1841d
panic: thread with borrowed priority returning to userland 2 syz 8 1964d 1997d
panic: tp:ADDR rc_sacked:LINE > out:LINE 2 C 185 1990d 2001d
panic: m_copydata, length > size of mbuf chain 2 C 93 2001d 2022d
panic: sbsndptr_noadv: sb_mb is NULL 2 C 686 2001d 2022d
panic: mtx_lock() of destroyed mutex at sys/kern/sys_socket.c:LINE 2 syz 43 2050d 2362d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/kern/sys_socket.c:LINE 2 syz 3 2085d 2100d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE 2 C 9 2104d 2105d
panic: _mtx_lock_sleep: recursed on non-recursive mutex rtentry @ /syzkaller/managers/main/kernel/sys/net/route.c:LINE 2 C 4 2150d 2338d
panic: mutex pcbinfohash not owned at /syzkaller/managers/i386/kernel/sys/netinet6/in6_pcb.c:LINE 2 syz 6 2179d 2180d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/main/kernel/sys/netinet6/in6_ifattach.c:LINE 2 syz 4 2201d 2202d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/i386/kernel/sys/netinet6/in6_ifattach.c:LINE (2) 2 syz 1 2202d 2202d
Fatal trap 12: page fault in thread_lock_validate -1 syz 1 2216d 2216d
panic: inp_leave_group: imf_sources not empty (2) 2 C 70 2321d 2355d
panic: non-kernel pmap pmap ADDR cpu 0 pcid 0 2 syz 1 2331d 2331d
panic: _mtx_lock_sleep: recursed on non-recursive mutex rtentry @ /syzkaller/managers/i386/kernel/sys/net/route.c:LINE 2 syz 1 2338d 2338d
panic: sbflush_internal: ccc 0 mb 0 mbcnt 512 2 syz 5 2338d 2396d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/main/kernel/sys/kern/sys_socket.c:LINE 2 syz 5 2351d 2362d
panic: Memory modified after free ADDR(256) val=0 @ ADDR 2 syz 6 2355d 2361d
panic: m_uiotombuf: progress != total 2 syz 2 2414d 2414d
panic: Bad tailq NEXT(ADDR->tqh_last) != NULL (2) 2 C 2194 1799d 2021d
panic: sx_try_xlock() of destroyed sx at sys/kern/uipc_sockbuf.c:LINE 2 8 1934d 2104d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/netinet/sctputil.c:LINE 2 1 1940d 1940d
corrupted report (2) -1 4 1946d 1978d
Fatal trap 12: page fault in tdq_notify -1 1 1951d 1951d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (5) -1 2 1900d 1900d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 (2) -1 28 1869d 1870d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:LINE 2 1 1971d 1971d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/main/kernel/sys/dev/hyperv/hvsock/hv_sock.c:LINE 2 2 1984d 1984d
panic: _mtx_lock_sleep: recursed on non-recursive mutex so_snd @ /syzkaller/managers/main/kernel/sys/kern/uipc_socket.c: 2 1 1985d 1985d
panic: size_on_all_streams smaller than control length 2 1 1988d 1988d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (4) -1 4 1901d 1901d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (3) -1 222 1907d 2231d
freebsd test error: lost connection to test machine -1 1269 1964d 2036d
freebsd build error (3) -1 13 1971d 1991d
Fatal trap 9: general protection fault in route_output -1 5 2010d 2010d
Fatal trap 9: general protection fault in fib4_lookup_nh_ext -1 4 2010d 2011d
Fatal trap 9: general protection fault in fib6_lookup_nh_basic -1 2 2010d 2010d
Fatal trap 9: general protection fault in pfi_kif_update -1 1 2011d 2011d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/main/kernel/sys/modules/tcp/rack/../../../netinet/tcp_stack 2 1 2017d 2017d
panic: refcount ADDR wraparound (2) 2 3883 2010d 2011d
Fatal trap 9: general protection fault in fib6_lookup -1 1494 2010d 2011d
Fatal trap 9: general protection fault in ip_output -1 624 2010d 2011d
Fatal trap 9: general protection fault in fib4_lookup -1 826 2010d 2011d
Fatal trap 9: general protection fault in nhop_free -1 110 2010d 2011d
Fatal trap 9: general protection fault while in kernel mode (2) -1 18 2010d 2011d
Fatal trap 9: general protection fault in sctp_source_address_selection -1 23 2010d 2011d
freebsd test error: timed out (3) -1 1 2061d 2061d
freebsd build error (2) -1 10 2089d 2145d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 -1 2 2006d 2005d
panic: Memory modified after free ADDR(112) val=ADDR @ ADDR 2 1 2099d 2099d
panic: Bad link elm ADDR next->prev != elm (2) 2 1 2104d 2104d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/i386/kernel/sys/netinet/in_pcb.c:LINE 2 7 2104d 2105d
corrupted report -1 1 2104d 2104d
panic: uma_zalloc: Bucket pointer mangled. 2 1 2107d 2107d
panic: vm_page_free_prep: freeing wired page ADDR 2 C 2 2355d 2355d
freebsd boot error: Fatal trap 12: page fault in _thread_lock -1 1 2052d 2052d
Fatal trap 12: page fault in sctp_inpcb_bind -1 1 2136d 2136d
Fatal trap 9: general protection fault in ck_epoch_poll_deferred -1 1 2142d 2142d
Fatal trap 12: page fault in in6_unlink_ifa -1 1 2155d 2155d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/main/kernel/sys/netinet6/in6.c:LINE 2 1 2188d 2188d
freebsd test error: timed out (2) -1 3 2197d 2197d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/i386/kernel/sys/netinet6/in6.c:LINE 2 1 2206d 2206d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/main/kernel/sys/netinet/igmp.c:LINE 2 2 2210d 2210d
panic: uma: Freed item ADDR did not belong to zone mbuf_cluster 2 1 2215d 2215d
Fatal trap 12: page fault in callout_process -1 2 2216d 2331d
Fatal trap 12: page fault while in kernel mode (2) -1 2 2217d 2333d
panic: map ADDR end = ADDR, next->start = 0 2 1 2221d 2221d
Fatal trap 12: page fault in pmap_activate_sw -1 1 2238d 2238d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/main/kernel/sys/netinet/in_mcast.c:LINE 2 15 2210d 2210d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/i386/kernel/sys/netinet/in_mcast.c:LINE 2 21 2210d 2210d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/i386/kernel/sys/net/if.c:LINE 2 1669 2210d 2211d
freebsd boot error: panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/main/kernel/sys/net/if.c:LINE -1 24 2211d 2211d
panic: cap_rights_is_vset:LINE (2) 2 1 2251d 2251d
Fatal trap 9: general protection fault in udp6_common_ctlinput -1 1 2257d 2257d
freebsd build error -1 4 2260d 2260d
panic: pmap_growkernel: no memory to grow kernel 2 4 2349d 2370d
panic: Most recently used by temp 2 4 2358d 2363d
panic: Bad tailq NEXT(ADDR->tqh_last) != NULL 2 1 2363d 2363d
panic: Assertion lock == sq->sq_lock failed at /syzkaller/managers/main/kernel/sys/kern/subr_sleepqueue.c:LINE 2 1 2361d 2361d
panic: Duplicate free of ADDR from zone ADDR(16) slab ADDR(241) 2 1 2357d 2357d
Fatal trap 12: page fault in fifo_close -1 58 2349d 2361d
Fatal trap 12: page fault in __mtx_assert (2) -1 1 2357d 2357d
panic: pmap_demote_pde: firstpte and newpte map different physical addresses 2 2 2342d 2343d
panic: Bad link elm ADDR next->prev != elm 2 11 2352d 2369d
panic: Most recently used by ip6opt 2 3 2336d 2366d
Fatal trap 12: page fault in uma_dbg_free -1 1 2356d 2356d
Fatal trap 12: page fault in uma_dbg_alloc -1 1 2361d 2361d
Fatal trap 9: general protection fault in sys_nlm_syscall -1 2 2357d 2360d
panic: sctp: no chunks on the queues 2 188 2319d 2411d
Fatal trap 12: page fault in ip_output -1 2 2362d 2362d
Fatal trap 9: general protection fault in memcmp -1 23 2350d 2372d
Fatal trap 12: page fault in link_elf_search_symbol -1 5 2322d 2362d
Fatal trap 12: page fault in pmap_remove_pte -1 1 2350d 2350d
freebsd test error: timed out -1 14 2379d 2406d
Fatal trap 9: general protection fault in sbfree -1 2 2398d 2405d
Fatal trap 9: general protection fault in unp_gc -1 1 2413d 2413d
panic: sbready: sb ADDR NULL fnrdy 2 1 2415d 2415d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 -1 4 2397d 2398d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (2) -1 2 2340d 2340d
syzkaller: make target failed: failed to run ["gmake" "target"]: exit status 2 -1 4 2343d 2343d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 -1 1 2404d 2404d
lost connection to test machine -1 10 2418d 2418d