syzbot

 sign-in | mailing list | source | docs
🐞 Open [43]
🐞 Fixed [374]
🐞 Invalid [477]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

Out of 477 bugs, 369 were automatically obsoleted (1 due to revoked reproducers), 108 were invalidated by users.
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (13) -1 202 65d 147d
panic: Assertion error == NUM || error == EINTR || error == ERESTART failed at /syzkaller/managers/main/kernel/sys/net/i 2 7 110d 217d
SYZFAIL: ioctl init trace write failed -1 2 111d 118d
panic: mld_change_state: bad ifp 2 24 114d 438d
panic: No memory for IFA 2 7 117d 275d
panic: Assertion error == NUM || error == EINTR || error == ERESTART failed at /syzkaller/managers/i386/kernel/sys/net/i 2 1 120d 120d
syzkaller: make host failed: failed to run ["gmake" "host" "ci" "agent"]: exit status 2 -1 70 82d 97d
SYZFAIL: clone failed (2) -1 29 129d 432d
SYZFAIL: repeatedly failed to execute the program -1 22 132d 328d
panic: pfi_kkif_attach: null kif 2 12 134d 353d
panic: failed to r[e ctlhairmea mde pmoidr y8 t 2 1 135d 135d
panic: witness_warn (4) 2 3 136d 157d
Fatal trap NUM: page fault in in6_selecthlim (5) -1 1 140d 140d
Fatal trap NUM: page fault in inm_disconnect -1 2 144d 145d
panic: igmp_change_state: no igmp_ifsoftc for ifp ADDR (2) 2 1 145d 145d
panic: No memory for IFN 2 7 147d 266d
SYZFAIL: cover mmap failed (2) -1 10657 108d 619d
SYZFAIL: posix_spawnp failed -1 161707 108d 470d
SYZFAIL: tun: read failed (4) -1 13755 108d 159d
panic: a thread waited too long to allocate a page 2 65708 108d 1580d
SYZFAIL: open of /dev/kcov failed -1 27124 108d 348d
SYZFAIL: SIGILL (2) -1 1137 108d 440d
SYZFAIL: invalid kcov comp type (4) -1 6983 108d 456d
panic: sleeping thread holds tun_mtx 2 1005 109d 342d
SYZFAIL: SIGFPE (2) -1 975 109d 443d
panic: mq notifiers left (3) 2 1248 109d 432d
SYZFAIL: too much cover (3) -1 5788 109d 508d
panic: ASan: Invalid access, NUM-byte read at ADDR, StackMiddle(f2) (3) 2 162 109d 377d
SYZFAIL: SIGSEGV -1 115 109d 416d
SYZFAIL: SIGBUS (2) -1 139 109d 415d
SYZFAIL: failed to send rpc -1 1034 109d 664d
suppressed report (4) -1 20305 109d 1024d
can't ssh into the instance -1 27462 109d 722d
SYZFAIL: too many calls in output -1 392 110d 663d
SYZFAIL: child stopped (2) -1 147 110d 430d
corrupted report (5) -1 1399 111d 877d
panic: brelse: non-VMIO buffer marked NOREUSE 2 1333 112d 345d
panic: vnode_pager_generic_getpages_done: page ADDR is mapped 2 25 153d 426d
Fatal trap NUM: page fault in igmp_ifdetach -1 1 156d 156d
panic: vm_object_terminate_single_page: page ADDR does not belong to a queue 2 145 127d 568d
Fatal trap NUM: page fault in mld_change_state -1 12 169d 438d
panic: pmap_remove_all: page ADDR is not managed 2 3304 131d 260d
panic: tcp_input_with_port: unspecified destination v4 address 2 29 132d 195d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: _callout_stop_safe: Bad link elm ADDR prev->next != (2) 2 1 191d 191d
panic: vm_page_wire_mapped: wiring unreferenced page ADDR 2 1 195d 195d
Fatal trap NUM: page fault in witness_checkorder (2) -1 6 196d 214d
panic: if_freemulti: refcount -NUM 2 1 199d 199d
panic: negative vmsize for uid NUM 2 36 186d 380d
Fatal trap NUM: general protection fault in pfi_kkif_update (4) -1 1 206d 206d
panic: vm_object_unwire: missing page 2 8 214d 356d
panic: Assertion uio->uio_resid < NUM failed at /syzkaller/managers/i386/kernel/sys/netlink/netlink_domain.c:LINE 2 2 233d 233d
freebsd build error (22) -1 142 194d 222d
Fatal trap NUM: page fault in pfi_kkif_update (4) -1 1 235d 235d
panic: deadlkres: possible deadlock detected on allproc_lock 2 1 235d 235d
panic: /syzkaller/managers/i386/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h (2) 2 216 199d 264d
panic: CURVNET_SET at /syzkaller/managers/main/kernel/sys/netinet6/in6_mcast.c:LINE inp_gcmoptions() curvnet=ADDR vnet=N 2 3 239d 296d
panic: igmp_change_state: no igmp_ifsoftc for ifp ADDR 2 2 240d 292d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (12) -1 226 206d 688d
panic: inconsistent boundary count NUM 2 6 248d 390d
Fatal trap NUM: page fault in in_pcbremhash_locked (2) -1 45 210d 314d
Fatal trap NUM: page fault in ip6_freemoptions -1 1 257d 257d
panic: flush_newblk_dep: Bad newblk ADDR 2 3 258d 258d
panic: vm_page_grab_zero_partial: page ADDR is invalid 2 1 261d 261d
Fatal trap NUM: page fault in in_joingroup_locked -1 2 263d 316d
SYZFAIL: failed to mkdir -1 2 275d 275d
panic: /syzkaller/managers/i386/kernel/sys/kern/uipc_usrreq.c:LINE: uipc_sosend_stream_or_seqpacket: Empty stailq ADDR-> 2 1298 247d 373d
panic: sleeping thread[ htholredsa d tpuin_dm 2tx ti 2 1 292d 292d
Fatal trap NUM: page fault in in6_selecthlim (4) -1 1 297d 297d
Fatal trap NUM: page fault in link_elf_search_symbol -1 1 300d 300d
panic: deadlres_td_sleep_q: possible deadlock detected for ADDR (syz-executor), blocked for ADDR ticks 2 1 304d 304d
panic: starting DAD on non-tentative address ADDR 2 1 307d 307d
panic: ASan: Invalid access, NUM-byte read at ADDR, MallocRedZone(fb) (4) 2 1 307d 307d
panic: witness_warn (3) 2 1 311d 311d
panic: proc_dtor: non-empty p_ktr 2 1 321d 321d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/i386/kernel/sys/kern/sys_socket.c:LINE (3) 2 3 327d 353d
panic: vm_page_dirty: page is invalid! 2 2 334d 376d
SYZFAIL: ShmemBuilder: too large output offset -1 1 334d 334d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: _callout_stop_safe: Bad link elm ADDR prev->next != 2 2 334d 367d
panic: pmap_demote_pde: a wired mapping is missing PG_A 2 67 295d 521d
freebsd test error: SYZFATAL: image testing failed w/o kernel bug (2) -1 3 335d 372d
panic: Assertion pd->pcksum failed at /syzkaller/managers/main/kernel/sys/netpfil/pf/pf.c:LINE 2 7 337d 373d
panic: /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE: in_pcblbgroup_insert: Bad list head ADDR first->prev ! 2 3 338d 375d
panic: negative vmsize for uid -NUM 2 1 362d 362d
panic: /syzkaller/managers/i386/kernel/sys/kern/kern_timeout.c:LINE: callout_process: Bad tailq NEXT(ADDR->tqh_last) != 2 1 365d 365d
Fatal trap NUM: page fault in witness_checkorder -1 4 365d 380d
panic: mutex so_rcv not owned at /syzkaller/managers/i386/kernel/sys/kern/uipc_usrreq.c:LINE 2 6 365d 368d
panic: /syzkaller/managers/i386/kernel/sys/netinet/in_pcb.c:LINE: in_pcblbgroup_insert: Bad list head ADDR first->prev ! 2 1 367d 367d
panic: pmap_growkernel: no memory to grow kernel (5) 2 457 329d 443d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_process: Bad tailq NEXT(ADDR->tqh_last) != 2 1 369d 369d
freebsd test error: can't ssh into the instance -1 11 329d 330d
panic: /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE: in_pcbremlbgrouphash: Bad link elm ADDR next->prev != 2 1 375d 375d
panic: Assertion pd->pcksum failed at /syzkaller/managers/i386/kernel/sys/netpfil/pf/pf.c:LINE 2 1 377d 377d
Fatal trap NUM: page fault in __mtx_lock_flags (4) -1 1 380d 380d
panic: ip6_deletefraghdr: ext headers not contigous in mbuf ADDR m_len NUM >= offset NUM + NUM 2 686 341d 391d
panic: executing segment marked as unreachable at /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE (in_pcbremlb 2 1 389d 389d
panic: /syzkaller/managers/i386/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h 2 202 351d 380d
panic: tcp_do_segment: sent too much 2 13 377d 410d
panic: Bad list head ADDR first->prev != head (2) 2 113 380d 408d
freebsd test error: lost connection to test machine (7) -1 2 426d 511d
SYZFAIL: coverage filter is full (2) -1 198808 439d 566d
freebsd test error: SYZFATAL: image testing failed w/o kernel bug -1 300 447d 477d
panic: mq notifiers left (2) 2 9 528d 534d
Fatal trap NUM: page fault in __mtx_lock_flags (3) -1 1 528d 528d
Fatal trap NUM: page fault in callout_process (3) -1 1 541d 541d
panic: pf_reassemble6: short mbuf chain 2 1 545d 545d
freebsd build error (19) -1 23 513d 514d
SYZFAIL: posix_spawn failed -1 4902 520d 663d
panic: pmap_growkernel: no memory to grow kernel (4) 2 29 528d 634d
panic: prefix ADDR has referencing addresses (6) 2 3 568d 651d
panic: mtx_lock() of destroyed mutex at sys/netinet/sctp_output.c:LINE (4) 2 1 579d 579d
SYZFAIL: SIGILL -1 101 541d 660d
Fatal trap NUM: page fault in in6_selecthlim (3) -1 739 552d 902d
SYZFAIL: child stopped -1 1 608d 608d
SYZFAIL: SIGBUS -1 8 609d 623d
SYZFAIL: clone failed -1 1 615d 615d
panic: strq ADDR not scheduled (4) 2 1 634d 634d
panic: if_ref: ifp ADDR has NUM refs 2 1 635d 635d
SYZFAIL: invalid kcov comp type (3) -1 1 645d 645d
SYZFAIL: SIGFPE -1 19 609d 649d
Fatal trap NUM: page fault in callout_process (2) -1 1 649d 649d
panic: mq notifiers left 2 21 610d 619d
Fatal trap NUM: pageJul NUM NUM:NUM:NUM fault in ip6_output -1 1 662d 662d
SYZFAIL: coverage filter is full -1 85109 624d 659d
panic: tcp_close: inp_socket NULL 2 4 664d 665d
freebsd test error: panic: ASan: Invalid access, NUM-byte write at ADDR, MallocRedZone(fb) -1 80 650d 656d
freebsd test error: lost connection to test machine (6) -1 7 713d 713d
panic: ASan: Invalid access, NUM-byte read at ADDR, MallocRedZone(fb) (3) 2 1 723d 723d
freebsd boot error: can't ssh into the instance (4) -1 3 727d 727d
Fatal trap NUM: page fault in sctp_free_assoc -1 35 692d 758d
panic: mtx_lock() of destroyed mutex at sys/netinet/sctp_output.c:LINE (3) 2 3 732d 775d
freebsd test error: SYZFATAL: failed to connect to host: dial tcp IP:NUM: i/o timeout -1 54 720d 722d
panic: rsm:ADDR nrsm:ADDR hit at soff:NUM null m (2) 2 3 761d 761d
Fatal trap NUM: page fault in __asan_load8_noabort (2) -1 8 765d 765d
panic: mb_free_extpg: m ADDR is not multipage! 2 1 765d 765d
Fatal trap NUM: page fault in m_free -1 2 765d 765d
Fatal trap NUM: page fault in kasan_atomic_fetchadd_int -1 1 765d 765d
Fatal trap NUM: page fault in callout_process -1 1 765d 765d
panic: Assertion mtx_unowned(m) failed at /syzkaller/managers/i386/kernel/sys/kern/kern_mutex.c:LINE (4) 2 2 767d 771d
panic: prefix ADDR has referencing addresses (5) 2 4 770d 809d
panic: pmap_growkernel: no memory to grow kernel (3) 2 965 734d 1667d
panic: vm_fault_lookup: fault on nofault entry, addr: ADDR (4) 2 18 736d 800d
syzkaller: make target failed: failed to run ["gmake" "target"]: exit status 2 (2) -1 10 688d 689d
Fatal trap NUM: page fault while in kernel mode (5) -1 15 765d 841d
panic: Assertion v != tid failed at /syzkaller/managers/i386/kernel/sys/kern/kern_mutex.c:LINE (2) 2 72 786d 1408d
panic: lock (sleep mutex) sctp-inp not locked @ /syzkaller/managers/i386/kernel/sys/netinet/sctp_pcb.c:LINE 2 6 786d 789d
Fatal trap NUM: page fault in in6_unlink_ifa (4) -1 1 788d 788d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (11) -1 18 757d 783d
Fatal trap NUM: page fault in sctp_ss_default_add (3) -1 1 802d 802d
Fatal trap NUM: page fault in m_tag_delete_chain -1 21 765d 765d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 (4) -1 118 729d 747d
freebsd build error (18) -1 8 766d 767d
panic: mtx_lock_spin: recursed on non-recursive mutex msgbuf @ /syzkaller/managers/i386/kernel/sys/kern/subr_msgbuf.c:LI 2 6 840d 867d
panic: deadlres_td_on_lock: possible deadlock detected for ADDR (syz-executor), blocked for NUM ticks 2 1 847d 847d
panic: Assertion mtx_unowned(m) failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:LINE (4) 2 1 851d 851d
panic: mtx_lock() of destroyed mutex at sys/netinet/sctp_output.c:LINE (2) 2 1 867d 867d
panic: mtx_lock_spin: recursed on non-recursive mutex msgbuf @ /syzkaller/managers/main/kernel/sys/kern/subr_msgbuf.c:LI (2) 2 12 838d 868d
freebsd test error: lost connection to test machine (5) -1 1 910d 910d
panic: Assertion mtx_unowned(m) failed at /syzkaller/managers/i386/kernel/sys/kern/kern_mutex.c:LINE (3) 2 1 910d 910d
panic: prefix ADDR has referencing addresses (4) 2 2 920d 974d
panic: Assertion curthread->td_wantedlock == NULL failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:LINE 2 4 933d 934d
panic: size_on_reasm_queue is NUM (3) 2 1 936d 936d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/i386/kernel/sys/kern/sys_socket.c:LINE (2) 2 1 960d 960d
corrupted report (4) -1 21 991d 1526d
freebsd build error (17) -1 8 1000d 1037d
Fatal trap NUM: page fault in in6_unlink_ifa (3) -1 1 1010d 1010d
Fatal trap NUM: page fault in nd6_dad_timer (5) -1 2 1014d 1085d
panic: mutex Giant owned at /syzkaller/managers/i386/kernel/sys/kern/kern_thread.c:LINE 2 252 984d 1044d
panic: in6_pcblookup_hash_locked: invalid foreign address 2 syz 62 1146d 1195d
panic: prot 0x3 is not subset of max_prot NUM 2 C 2 1003d 1003d
SYZFAIL: child failed -1 syz 286 1489d 1907d
SYZFAIL: command failed -1 syz 34 1482d 1906d
panic: _mtx_lock_sleep: recursed on non-recursive mutex process lock @ /syzkaller/managers/main/kernel/sys/kern/kern_for 2 C 2 1373d 1373d
Fatal trap NUM: page fault while in kernel mode (4) -1 C 7 1182d 1507d
panic: huh, cumack ADDR greater than high-tsn ADDR in map 2 1 1049d 1049d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-tcb @ /syzkaller/managers/i386/kernel/sys/netinet/sctp_pcb. (3) 2 1 1050d 1050d
panic: size_on_reasm_queue is NUM (2) 2 1 1056d 1056d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 (3) -1 506 1029d 1174d
Fatal trap NUM: general protection fault in pfi_kkif_update (3) -1 1 1081d 1081d
Fatal trap NUM: page fault in in6_selecthlim (2) -1 1 1103d 1103d
Fatal trap NUM: page fault in sctp_ss_default_add (2) -1 1 1120d 1120d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/main/kernel/sys/kern/sys_socket.c:LINE (3) 2 1 1127d 1127d
panic: Rack:ADDR sb:ADDR rsm:ADDR -- first rsm mbuf not aligned to sb 2 1 1132d 1132d
panic: Assertion mtx_unowned(m) failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:LINE (3) 2 1 1138d 1138d
panic: size_on_reasm_queue is NUM 2 1 1162d 1162d
panic: vtopde on a uva/gpa 0x1000 2 1 1172d 1172d
Fatal trap NUM: page fault in nd6_dad_timer (4) -1 2 1198d 1259d
suppressed report (3) -1 2 1209d 1294d
freebsd boot error: Fatal trap NUM: page fault while in kernel mode -1 159 1182d 1185d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 (3) -1 4 1245d 1245d
panic: prefix ADDR has referencing addresses (3) 2 1 1264d 1264d
freebsd boot error: can't ssh into the instance (3) -1 1 1276d 1276d
freebsd build error (15) -1 1099 1203d 1318d
panic: About to free ctl:ADDR so:ADDR and its in 1 2 C 20 1558d 2002d
Fatal trap NUM: page fault in in6_selecthlim -1 15 1320d 1684d
panic: Assertion mtx_unowned(m) failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:LINE (2) 2 1 1327d 1327d
Fatal trap NUM: page fault in nd6_dad_timer (3) -1 3 1364d 1460d
panic: mtx_lock_spin: recursed on non-recursive mutex msgbuf @ /syzkaller/managers/main/kernel/sys/kern/subr_msgbuf.c:LI 2 1 1372d 1372d
freebsd boot error: can't ssh into the instance (2) -1 1 1392d 1392d
freebsd test error: SYZFATAL: BUG: executor version returned bad result: "" -1 52 1364d 1365d
suppressed report (2) -1 2 1412d 1418d
Fatal trap NUM: page fault in pfi_kkif_update (3) -1 1 1413d 1413d
panic: ASan: Invalid access, NUM-byte read at ADDR, StackLeft(f1) (2) 2 1 1415d 1415d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-tcb @ /syzkaller/managers/i386/kernel/sys/netinet/sctp_pcb. (2) 2 1 1418d 1418d
Fatal trap NUM: page fault in knlist_remove_kq -1 1 1422d 1422d
Fatal trap NUM: page fault in sctp_notify_stream_reset_add -1 1 1430d 1430d
freebsd build error (14) -1 18 1413d 1413d
panic: ASan: Invalid access, NUM-byte write at ADDR, UseAfterScope(f8) (2) 2 1 1446d 1446d
panic: ASan: Invalid access, NUM-byte read in kvprintf 2 C 5 1654d 1674d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/i386/kernel/sys/kern/sys_socket.c:LINE 2 1 1458d 1458d
panic: rack_output:NUM: r.start:ADDR < SND.UNA:ADDR; tp:ADDR, rack:ADDR, rsm:ADDR 2 C 270 1432d 1829d
panic: vm_fault_lookup: fault on nofault entry, addr: ADDR (3) 2 1 1467d 1467d
panic: prefix ADDR has referencing addresses (2) 2 3 1474d 1583d
Fatal trap NUM: page fault in sctp_wakeup_the_read_socket (4) -1 1 1477d 1477d
panic: Assertion task->ta_pending == NUM failed at /syzkaller/managers/i386/kernel/sys/kern/sys_socket.c:LINE 2 1 1481d 1481d
panic: Assertion mtx_unowned(m) failed at /syzkaller/managers/i386/kernel/sys/kern/kern_mutex.c:LINE (2) 2 2 1485d 1553d
Fatal trap NUM: page fault in kasan_atomic_load_int (2) -1 3 1486d 1556d
Fatal trap NUM: page fault in in6_unlink_ifa (2) -1 1 1496d 1496d
Fatal trap NUM: page fault in __asan_load8_noabort -1 1 1505d 1505d
SYZFAIL: too much cover (2) -1 120 1476d 1533d
Fatal trap NUM: page fault in memcpy_erms (2) -1 1 1514d 1514d
SYZFAIL: cover mmap failed -1 1 1515d 1515d
panic: ASan: Invalid access, NUM-byte read at ADDR, UMAUseAfterFree(fd) (3) 2 C 58 1431d 1484d
SYZFAIL: tun: read failed (3) -1 1 1529d 1529d
panic: strq ADDR not scheduled (3) 2 1 1529d 1529d
Fatal trap NUM: general protection fault in pfi_kkif_update (2) -1 1 1543d 1543d
panic: spin lock held too long (2) 2 1 1544d 1544d
SYZFAIL: invalid kcov comp type (2) -1 1 1546d 1546d
panic: ASan: Invalid access, NUM-byte read at ADDR, StackMiddle(f2) 2 1 1548d 1548d
panic: Don't own TCB lock 2 1 1550d 1550d
Fatal trap NUM: page fault in nd6_dad_timer (2) -1 1 1555d 1555d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 (2) -1 106 1477d 1538d
freebsd build error (12) -1 2 1516d 1516d
panic: pmap_kasan_enter_alloc_4k: no memory to grow shadow map (2) 2 C 602 1659d 1708d
panic: out of swap space 2 C 15036 1580d 1823d
panic: ASan: Invalid access, NUM-byte read at ADDR, UseAfterScope(f8) 2 syz 7 1555d 1636d
panic: Queues are not empty when handling SHUTDOWN-ACK 2 syz 142 1588d 2158d
SYZFAIL: output overflow (2) -1 syz 14 1593d 1764d
panic: hpts_sane_input_insert: hpts:ADDR inp:ADDR incorrect CPU 2 C 186 1613d 1770d
SYZFAIL: tun: can't open device -1 syz 159 1714d 1907d
panic: m_copydata, offset > size of mbuf chain 2 syz 11 1709d 1713d
panic: hpts_sane_input_remove: hpts:ADDR inp:ADDR incorrect CPU 2 syz 5 1720d 1764d
panic: ASan: Invalid access, 2-byte read in sctp_common_input_processing 2 syz 8 1719d 1767d
panic: mtx_lock() of destroyed mutex at sys/netinet/sctp_pcb.c:LINE 2 syz 24 1778d 2204d
Fatal trap 9: general protection fault in __mtx_lock_sleep -1 syz 295 1772d 2446d
Fatal trap 9: general protection fault in sctp_timer_stop -1 syz 232 1773d 2087d
Fatal trap NUM: page fault in sctp_ss_default_add -1 1 1556d 1556d
panic: ASan: Invalid access, 8-byte read in __mtx_lock_sleep 2 syz 23 1676d 1758d
panic: ASan: Invalid access, 8-byte read in sctp_lower_sosend 2 syz 49 1642d 1750d
panic: ASan: Invalid access, 1-byte write in sctp_lower_sosend 2 syz 332 1664d 1768d
Fatal trap 12: page fault in __mtx_lock_sleep -1 syz 151 1774d 2422d
panic: Warning: Last msg marked incomplete, yet nothing left? 2 C 34 1569d 1822d
Fatal trap NUM: page fault in pfi_kkif_update (2) -1 1 1579d 1579d
panic: TCP stack bbr requested tcp_drop(ADDR) at connect() 2 1 1583d 1583d
panic: ASan: Invalid access, NUM-byte read in __mtx_lock_flags 2 C 188 1642d 1709d
panic: ASan: Invalid access, 8-byte write in sctp_timer_stop 2 C 269 1642d 1768d
Fatal trap 9: general protection fault in sctp_lower_sosend (2) -1 C 446 1772d 2093d
panic: ASan: Invalid access, NUM-byte read in sctp_ss_default_select 2 C 1 1711d 1711d
Fatal trap NUM: page fault while in kernel mode (3) -1 3 1598d 1612d
freebsd test error: lost connection to test machine (4) -1 896 1577d 1639d
panic: ASan: Invalid access, NUM-byte write at ADDR, StackMiddle(f2) 2 1 1613d 1613d
panic: ASan: Invalid access, NUM-byte read at ADDR, StackLeft(f1) 2 2 1620d 1630d
Fatal trap NUM: page fault in __mtx_lock_flags -1 2 1622d 1626d
freebsd build error (11) -1 1 1541d 1541d
panic: lock (sleep mutex) sctp-tcb not locked @ /syzkaller/managers/i386/kernel/sys/netinet/sctputil.c:LINE (3) 2 1 1631d 1631d
panic: ASan: Invalid access, 4-byte read in sctp_timer_stop 2 27 1642d 1768d
panic: ASan: Invalid access, NUM-byte write in vn_read_from_obj 2 5 1642d 1685d
panic: ASan: Invalid access, NUM-byte read in sctp_ss_default_add 2 27 1642d 1696d
panic: ASan: Invalid access, NUM-byte read in sctp_free_assoc 2 3 1644d 1715d
panic: ASan: Invalid access, NUM-byte read in ip6_input 2 1 1645d 1645d
panic: ASan: Invalid access, NUM-byte read in witness_checkorder 2 3 1655d 1704d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (10) -1 2 1571d 1571d
SYZFAIL: tun: read failed (2) -1 19 1660d 1693d
panic: mtx_lock() of destroyed mutex at sys/netinet/sctp_output.c:LINE 2 1 1665d 1665d
panic: ASan: Invalid access, 8-byte read in callout_process 2 5 1669d 1767d
panic: ASan: Invalid access, NUM-byte write in devfs_get_cdevpriv 2 1 1670d 1670d
panic: ASan: Invalid access, NUM-byte read in __cap_rights_is_set 2 1 1676d 1676d
panic: prefix ADDR has referencing addresses 2 1 1677d 1677d
panic: strq ADDR not scheduled (2) 2 1 1680d 1680d
Fatal trap NUM: page fault in sctp_wakeup_the_read_socket -1 2 1681d 1696d
Fatal trap NUM: page fault in in6_unlink_ifa -1 1 1683d 1683d
Fatal trap NUM: page fault in pfi_kkif_update -1 1 1686d 1686d
Fatal trap NUM: general protection fault in pfi_kkif_update -1 1 1691d 1691d
panic: ASan: Invalid access, 4-byte read in sctp_gather_internal_ifa_flags 2 14 1696d 1767d
Fatal trap NUM: page fault in nd6_dad_timer -1 1 1696d 1696d
freebsd build error (10) -1 1 1613d 1613d
corrupted report (3) -1 3 1708d 1822d
panic: sctp_timer_start of type 5: inp = ADDR, stcb->sctp_ep ADDR 2 10 1717d 1769d
panic: ASan: Invalid access, 2-byte read in sctp_chunk_output 2 4 1718d 1762d
panic: ASan: Invalid access, 2-byte read in sctp_ss_fcfs_select 2 3 1724d 1752d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/netinet/sctputil.c:LINE (3) 2 7 1725d 1944d
panic: sctp_timeout_handler of type 5: inp = ADDR, stcb->sctp_ep ADDR 2 2 1726d 1757d
panic: ASan: Invalid access, NUM-byte read in sctp_ss_default_remove 2 1 1726d 1726d
panic: ASan: Invalid access, NUM-byte read in callout_cc_add 2 1 1732d 1732d
panic: ASan: Invalid access, NUM-byte read in smp_targeted_tlb_shootdown 2 2 1686d 1688d
panic: ASan: Invalid access, NUM-byte read in smp_masked_invlpg_range 2 C 1 1662d 1662d
panic: size_on_reasm_queue is 1412 2 1 1743d 1743d
freebsd test error: lost connection to test machine (3) -1 105 1715d 1767d
panic: ASan: Invalid access, 4-byte read at ADDR, RedZonePartial(3) 2 9 1761d 1772d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (9) -1 6 1680d 1682d
panic: 2 chunks left for stream 0. 2 1 1766d 1766d
panic: H:ADDR p_prev_slot:NUM not equal to p_cur_slot:NUM 2 15 1771d 1936d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/netinet/sctp_pcb.c:LINE 2 23 1773d 2028d
panic: ASan: Invalid access, 4-byte read at ADDR, UMAUseAfterFree(fd) 2 300 1743d 1772d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-create @ /syzkaller/managers/main/kernel/sys/netinet/sctp_p 2 1 1777d 1777d
panic: lock (sleep mutex) sctp-tcb not locked @ /syzkaller/managers/i386/kernel/sys/netinet/sctputil.c:LINE (2) 2 2 1780d 1781d
Fatal trap 12: page fault in __mtx_assert (5) -1 7 1781d 1815d
panic: rsm:ADDR nrsm:ADDR rack:ADDR -- rsm->m is NULL? 2 C 25 1827d 1833d
panic: ASan: Invalid access, 4-byte read in in6_sin6_2_sin 2 C 8 1751d 1769d
panic: ASan: Invalid access, 4-byte read in sctp_connectx_helper_find 2 10 1769d 1768d
panic: Most recently used by in6_mfilter 2 3 1833d 1833d
panic: Most recently used by tcp_fsb 2 C 149 1832d 1833d
panic: rack_output: IP version incorrect: 0 2 C 31 1833d 1833d
panic: Most recently used by xform 2 C 115 1833d 1833d
Fatal trap 9: general protection fault in pfi_kkif_update -1 3 1792d 1835d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-tcb @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb. (2) 2 3 1793d 1842d
Fatal trap 12: page fault in sctp_add_to_readq -1 1 1794d 1794d
Fatal trap 12: page fault in in6_unlink_ifa (2) -1 syz 20 1779d 2167d
suppressed report -1 8 1731d 1867d
panic: ASan: Invalid access, 8-byte read at ADDR, UMAUseAfterFree(fd) 2 88 1769d 1772d
panic: ASan: Invalid access, 8-byte write at ADDR, UMAUseAfterFree(fd) 2 19 1770d 1770d
panic: size_on_reasm_queue is 1244 2 1 1801d 1801d
panic: H:ADDR p_prev_slot:LINE not equal to p_cur_slot:LINE 2 1 1806d 1806d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (8) -1 10 1736d 1908d
freebsd build error (8) -1 1 1768d 1767d
SYZFAIL: invalid kcov comp type -1 1443 1777d 1907d
panic: 1 chunks left for stream 0. 2 1 1812d 1812d
Fatal trap 9: general protection fault in sctp_ss_fb_clear -1 1 1821d 1821d
Fatal trap 12: page fault in callout_process (3) -1 1 1822d 1822d
Fatal trap 9: general protection fault in m_tag_locate -1 1 1827d 1827d
Fatal trap 12: page fault in sctp_inpcb_free -1 4 1845d 1946d
panic: mtx_unlock() of destroyed mutex at sys/netinet/sctp_usrreq.c:LINE 2 1 1847d 1847d
Fatal trap 12: page fault in exit1 -1 1 1860d 1860d
freebsd boot error: panic: ASan: Invalid access, 8-byte write at ADDR, MallocRedZone(fb) -1 18 1772d 1772d
freebsd build error (7) -1 2 1772d 1772d
Fatal trap 12: page fault in sctp_free_assoc -1 2 1869d 1924d
SYZFAIL: too much cover -1 2 1872d 1874d
freebsd build error (6) -1 6 1806d 1806d
panic: interrupts enabled 2 C 191 1807d 1808d
Fatal trap 12: page fault in sctp_is_vtag_good -1 1 1905d 1905d
panic: H:ADDR p_prev_slot:LINE not equal to p_cur_slot:NUM 2 1 1910d 1910d
Fatal trap 9: general protection fault in sctp_cmpaddr -1 13 1911d 2047d
Fatal trap 12: page fault in __mtx_assert (4) -1 2 1913d 1927d
panic: Memory modified after free ADDR(736) val=0 @ ADDR 2 21 1913d 2047d
SYZFAIL: output overflow -1 syz 38 1829d 1907d
SYZFAIL: tun: read failed -1 syz 1040 1826d 1907d
panic: sbflush_internal: ccc 0 mb 0 mbcnt 256 2 C 23 2522d 2613d
freebsd build error (5) -1 12 1904d 1933d
freebsd boot error: Fatal trap 12: page fault while in kernel mode -1 78 1848d 1849d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-create @ /syzkaller/managers/i386/kernel/sys/netinet/sctp_p 2 1 1920d 1920d
panic: Counter goes negative (2) 2 2 1924d 1946d
panic: lock (sleep mutex) sctp-tcb not locked @ /syzkaller/managers/i386/kernel/sys/netinet/sctputil.c:LINE 2 1 1929d 1929d
Fatal trap 9: general protection fault in sctp_chunk_output -1 17 1931d 2048d
freebsd test error: lost connection to test machine (2) -1 45 1843d 1843d
panic: Most recently used by sctp_stro 2 1 1940d 1940d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/kern/uipc_socket.c:LINE 2 1 1941d 1941d
panic: H:ADDR p_prev_slot:NUM not equal to p_cur_slot:ADDR 2 1 1945d 1945d
Fatal trap 12: page fault in sctp_ss_default_add -1 1 1949d 1949d
Fatal trap 9: general protection fault in sctp_is_vtag_good -1 2 1957d 2036d
panic: Assertion owner->td_proc->p_magic == P_MAGIC failed at /syzkaller/managers/i386/kernel/sys/kern/subr_turnstile.c: 2 3 1969d 2017d
Fatal trap 9: general protection fault in udp6_common_ctlinput (2) -1 1 1984d 1984d
panic: size_on_reasm_queue is 4 2 1 1990d 1990d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-tcb @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb. 2 3 1990d 2022d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (7) -1 8 1910d 1927d
Fatal trap 9: general protection fault in ck_epoch_poll_deferred (2) -1 4 2010d 2187d
Fatal trap 12: page fault in __mtx_assert (3) -1 3 2022d 2056d
panic: pfi_dynaddr_setup: non-NULL dyn 2 C 35 1963d 2204d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/netinet/sctputil.c:LINE (2) 2 2 2036d 2037d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/kern/uipc_ktls.c:LINE 2 C 6 1958d 2158d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (6) -1 34 1964d 2060d
Fatal trap 9: general protection fault in memcmp (2) -1 1 2007d 2007d
freebsd build error (4) -1 6 1952d 1982d
panic: Most recently used by kdtrace 2 5 2039d 2039d
panic: Flight size-express incorrect? 2 2 2043d 2046d
panic: sleepq_add: td ADDR to sleep on wchan ADDR with sleeping prohibited 2 C 6804 2034d 2072d
panic: pfi_kif_unref: ADDR has zero refs 2 C 2 2039d 2039d
panic: thread with borrowed priority returning to userland 2 syz 8 2162d 2196d
panic: tp:ADDR rc_sacked:LINE > out:LINE 2 C 185 2189d 2200d
panic: m_copydata, length > size of mbuf chain 2 C 93 2200d 2220d
panic: sbsndptr_noadv: sb_mb is NULL 2 C 686 2200d 2221d
panic: mtx_lock() of destroyed mutex at sys/kern/sys_socket.c:LINE 2 syz 43 2249d 2561d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/kern/sys_socket.c:LINE 2 syz 3 2283d 2299d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE 2 C 9 2303d 2304d
panic: _mtx_lock_sleep: recursed on non-recursive mutex rtentry @ /syzkaller/managers/main/kernel/sys/net/route.c:LINE 2 C 4 2349d 2537d
panic: mutex pcbinfohash not owned at /syzkaller/managers/i386/kernel/sys/netinet6/in6_pcb.c:LINE 2 syz 6 2378d 2378d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/main/kernel/sys/netinet6/in6_ifattach.c:LINE 2 syz 4 2400d 2401d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/i386/kernel/sys/netinet6/in6_ifattach.c:LINE (2) 2 syz 1 2401d 2401d
Fatal trap 12: page fault in thread_lock_validate -1 syz 1 2415d 2415d
panic: inp_leave_group: imf_sources not empty (2) 2 C 70 2520d 2554d
panic: non-kernel pmap pmap ADDR cpu 0 pcid 0 2 syz 1 2530d 2530d
panic: _mtx_lock_sleep: recursed on non-recursive mutex rtentry @ /syzkaller/managers/i386/kernel/sys/net/route.c:LINE 2 syz 1 2537d 2537d
panic: sbflush_internal: ccc 0 mb 0 mbcnt 512 2 syz 5 2536d 2595d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/main/kernel/sys/kern/sys_socket.c:LINE 2 syz 5 2550d 2561d
panic: Memory modified after free ADDR(256) val=0 @ ADDR 2 syz 6 2554d 2560d
panic: m_uiotombuf: progress != total 2 syz 2 2613d 2613d
panic: Bad tailq NEXT(ADDR->tqh_last) != NULL (2) 2 C 2194 1998d 2219d
panic: sx_try_xlock() of destroyed sx at sys/kern/uipc_sockbuf.c:LINE 2 8 2133d 2302d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/netinet/sctputil.c:LINE 2 1 2138d 2138d
corrupted report (2) -1 4 2144d 2177d
Fatal trap 12: page fault in tdq_notify -1 1 2150d 2150d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (5) -1 2 2099d 2099d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 (2) -1 28 2068d 2069d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:LINE 2 1 2170d 2170d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/main/kernel/sys/dev/hyperv/hvsock/hv_sock.c:LINE 2 2 2182d 2183d
panic: _mtx_lock_sleep: recursed on non-recursive mutex so_snd @ /syzkaller/managers/main/kernel/sys/kern/uipc_socket.c: 2 1 2183d 2183d
panic: size_on_all_streams smaller than control length 2 1 2187d 2187d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (4) -1 4 2100d 2100d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (3) -1 222 2106d 2430d
freebsd test error: lost connection to test machine -1 1269 2163d 2235d
freebsd build error (3) -1 13 2169d 2189d
Fatal trap 9: general protection fault in route_output -1 5 2208d 2209d
Fatal trap 9: general protection fault in fib4_lookup_nh_ext -1 4 2209d 2209d
Fatal trap 9: general protection fault in fib6_lookup_nh_basic -1 2 2209d 2209d
Fatal trap 9: general protection fault in pfi_kif_update -1 1 2209d 2209d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/main/kernel/sys/modules/tcp/rack/../../../netinet/tcp_stack 2 1 2215d 2215d
panic: refcount ADDR wraparound (2) 2 3883 2208d 2209d
Fatal trap 9: general protection fault in fib6_lookup -1 1494 2208d 2209d
Fatal trap 9: general protection fault in ip_output -1 624 2208d 2209d
Fatal trap 9: general protection fault in fib4_lookup -1 826 2208d 2209d
Fatal trap 9: general protection fault in nhop_free -1 110 2208d 2209d
Fatal trap 9: general protection fault while in kernel mode (2) -1 18 2208d 2209d
Fatal trap 9: general protection fault in sctp_source_address_selection -1 23 2208d 2209d
freebsd test error: timed out (3) -1 1 2259d 2259d
freebsd build error (2) -1 10 2288d 2344d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 -1 2 2204d 2204d
panic: Memory modified after free ADDR(112) val=ADDR @ ADDR 2 1 2298d 2298d
panic: Bad link elm ADDR next->prev != elm (2) 2 1 2303d 2303d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/i386/kernel/sys/netinet/in_pcb.c:LINE 2 7 2303d 2304d
corrupted report -1 1 2303d 2303d
panic: uma_zalloc: Bucket pointer mangled. 2 1 2306d 2306d
panic: vm_page_free_prep: freeing wired page ADDR 2 C 2 2554d 2554d
freebsd boot error: Fatal trap 12: page fault in _thread_lock -1 1 2251d 2251d
Fatal trap 12: page fault in sctp_inpcb_bind -1 1 2334d 2334d
Fatal trap 9: general protection fault in ck_epoch_poll_deferred -1 1 2341d 2341d
Fatal trap 12: page fault in in6_unlink_ifa -1 1 2354d 2354d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/main/kernel/sys/netinet6/in6.c:LINE 2 1 2387d 2387d
freebsd test error: timed out (2) -1 3 2396d 2396d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/i386/kernel/sys/netinet6/in6.c:LINE 2 1 2405d 2405d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/main/kernel/sys/netinet/igmp.c:LINE 2 2 2408d 2409d
panic: uma: Freed item ADDR did not belong to zone mbuf_cluster 2 1 2414d 2414d
Fatal trap 12: page fault in callout_process -1 2 2415d 2530d
Fatal trap 12: page fault while in kernel mode (2) -1 2 2415d 2532d
panic: map ADDR end = ADDR, next->start = 0 2 1 2419d 2419d
Fatal trap 12: page fault in pmap_activate_sw -1 1 2437d 2437d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/main/kernel/sys/netinet/in_mcast.c:LINE 2 15 2408d 2409d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/i386/kernel/sys/netinet/in_mcast.c:LINE 2 21 2408d 2409d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/i386/kernel/sys/net/if.c:LINE 2 1669 2409d 2409d
freebsd boot error: panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/main/kernel/sys/net/if.c:LINE -1 24 2409d 2410d
panic: cap_rights_is_vset:LINE (2) 2 1 2450d 2450d
Fatal trap 9: general protection fault in udp6_common_ctlinput -1 1 2456d 2456d
freebsd build error -1 4 2459d 2459d
panic: pmap_growkernel: no memory to grow kernel 2 4 2548d 2569d
panic: Most recently used by temp 2 4 2557d 2562d
panic: Bad tailq NEXT(ADDR->tqh_last) != NULL 2 1 2562d 2562d
panic: Assertion lock == sq->sq_lock failed at /syzkaller/managers/main/kernel/sys/kern/subr_sleepqueue.c:LINE 2 1 2560d 2560d
panic: Duplicate free of ADDR from zone ADDR(16) slab ADDR(241) 2 1 2555d 2555d
Fatal trap 12: page fault in fifo_close -1 58 2548d 2559d
Fatal trap 12: page fault in __mtx_assert (2) -1 1 2555d 2555d
panic: pmap_demote_pde: firstpte and newpte map different physical addresses 2 2 2541d 2541d
panic: Bad link elm ADDR next->prev != elm 2 11 2551d 2568d
panic: Most recently used by ip6opt 2 3 2535d 2565d
Fatal trap 12: page fault in uma_dbg_free -1 1 2555d 2555d
Fatal trap 12: page fault in uma_dbg_alloc -1 1 2560d 2560d
Fatal trap 9: general protection fault in sys_nlm_syscall -1 2 2556d 2559d
panic: sctp: no chunks on the queues 2 188 2518d 2609d
Fatal trap 12: page fault in ip_output -1 2 2560d 2561d
Fatal trap 9: general protection fault in memcmp -1 23 2549d 2571d
Fatal trap 12: page fault in link_elf_search_symbol -1 5 2521d 2561d
Fatal trap 12: page fault in pmap_remove_pte -1 1 2549d 2549d
freebsd test error: timed out -1 14 2578d 2605d
Fatal trap 9: general protection fault in sbfree -1 2 2597d 2604d
Fatal trap 9: general protection fault in unp_gc -1 1 2612d 2612d
panic: sbready: sb ADDR NULL fnrdy 2 1 2614d 2614d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 -1 4 2596d 2596d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (2) -1 2 2539d 2539d
syzkaller: make target failed: failed to run ["gmake" "target"]: exit status 2 -1 4 2542d 2542d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 -1 1 2602d 2602d
lost connection to test machine -1 10 2617d 2617d