syzbot

 sign-in | mailing list | source | docs
🐞 Open [93]
🐞 Fixed [367]
🐞 Invalid [402]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

Out of 402 bugs, 294 were automatically obsoleted (1 due to revoked reproducers), 108 were invalidated by users.
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported
panic: vm_page_dirty: page is invalid! 2 2 96d 138d
SYZFAIL: ShmemBuilder: too large output offset -1 1 96d 96d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: _callout_stop_safe: Bad link elm ADDR prev->next != 2 2 96d 128d
panic: pmap_demote_pde: a wired mapping is missing PG_A 2 67 57d 283d
freebsd test error: SYZFATAL: image testing failed w/o kernel bug (2) -1 3 97d 133d
panic: Assertion pd->pcksum failed at /syzkaller/managers/main/kernel/sys/netpfil/pf/pf.c:LINE 2 7 98d 135d
panic: /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE: in_pcblbgroup_insert: Bad list head ADDR first->prev ! 2 3 99d 137d
panic: negative vmsize for uid -NUM 2 1 124d 124d
panic: /syzkaller/managers/i386/kernel/sys/kern/kern_timeout.c:LINE: callout_process: Bad tailq NEXT(ADDR->tqh_last) != 2 1 127d 127d
Fatal trap NUM: page fault in witness_checkorder -1 4 127d 142d
panic: mutex so_rcv not owned at /syzkaller/managers/i386/kernel/sys/kern/uipc_usrreq.c:LINE 2 6 127d 130d
panic: /syzkaller/managers/i386/kernel/sys/netinet/in_pcb.c:LINE: in_pcblbgroup_insert: Bad list head ADDR first->prev ! 2 1 129d 129d
panic: pmap_growkernel: no memory to grow kernel (5) 2 457 91d 204d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_process: Bad tailq NEXT(ADDR->tqh_last) != 2 1 131d 131d
freebsd test error: can't ssh into the instance -1 11 91d 91d
panic: /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE: in_pcbremlbgrouphash: Bad link elm ADDR next->prev != 2 1 137d 137d
panic: Assertion pd->pcksum failed at /syzkaller/managers/i386/kernel/sys/netpfil/pf/pf.c:LINE 2 1 139d 139d
Fatal trap NUM: page fault in __mtx_lock_flags (4) -1 1 142d 142d
panic: ip6_deletefraghdr: ext headers not contigous in mbuf ADDR m_len NUM >= offset NUM + NUM 2 686 103d 153d
panic: executing segment marked as unreachable at /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE (in_pcbremlb 2 1 151d 151d
panic: /syzkaller/managers/i386/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h 2 202 113d 142d
panic: tcp_do_segment: sent too much 2 13 139d 171d
panic: Bad list head ADDR first->prev != head (2) 2 113 142d 170d
freebsd test error: lost connection to test machine (7) -1 2 188d 272d
SYZFAIL: coverage filter is full (2) -1 198808 201d 328d
freebsd test error: SYZFATAL: image testing failed w/o kernel bug -1 300 208d 239d
panic: mq notifiers left (2) 2 9 290d 296d
Fatal trap NUM: page fault in __mtx_lock_flags (3) -1 1 290d 290d
Fatal trap NUM: page fault in callout_process (3) -1 1 302d 302d
panic: pf_reassemble6: short mbuf chain 2 1 307d 307d
freebsd build error (19) -1 23 274d 275d
SYZFAIL: posix_spawn failed -1 4902 282d 425d
panic: pmap_growkernel: no memory to grow kernel (4) 2 29 290d 396d
panic: prefix ADDR has referencing addresses (6) 2 3 330d 413d
panic: mtx_lock() of destroyed mutex at sys/netinet/sctp_output.c:LINE (4) 2 1 341d 341d
SYZFAIL: SIGILL -1 101 303d 422d
Fatal trap NUM: page fault in in6_selecthlim (3) -1 739 313d 664d
SYZFAIL: child stopped -1 1 370d 370d
SYZFAIL: SIGBUS -1 8 371d 385d
SYZFAIL: clone failed -1 1 377d 377d
panic: strq ADDR not scheduled (4) 2 1 395d 395d
panic: if_ref: ifp ADDR has NUM refs 2 1 396d 396d
SYZFAIL: invalid kcov comp type (3) -1 1 407d 407d
SYZFAIL: SIGFPE -1 19 370d 410d
Fatal trap NUM: page fault in callout_process (2) -1 1 411d 411d
panic: mq notifiers left 2 21 371d 381d
Fatal trap NUM: pageJul NUM NUM:NUM:NUM fault in ip6_output -1 1 424d 424d
SYZFAIL: coverage filter is full -1 85109 386d 421d
panic: tcp_close: inp_socket NULL 2 4 426d 426d
freebsd test error: panic: ASan: Invalid access, NUM-byte write at ADDR, MallocRedZone(fb) -1 80 412d 418d
freebsd test error: lost connection to test machine (6) -1 7 475d 475d
panic: ASan: Invalid access, NUM-byte read at ADDR, MallocRedZone(fb) (3) 2 1 485d 485d
freebsd boot error: can't ssh into the instance (4) -1 3 489d 489d
Fatal trap NUM: page fault in sctp_free_assoc -1 35 454d 520d
panic: mtx_lock() of destroyed mutex at sys/netinet/sctp_output.c:LINE (3) 2 3 494d 537d
freebsd test error: SYZFATAL: failed to connect to host: dial tcp IP:NUM: i/o timeout -1 54 481d 484d
panic: rsm:ADDR nrsm:ADDR hit at soff:NUM null m (2) 2 3 523d 523d
Fatal trap NUM: page fault in __asan_load8_noabort (2) -1 8 527d 527d
panic: mb_free_extpg: m ADDR is not multipage! 2 1 527d 527d
Fatal trap NUM: page fault in m_free -1 2 527d 527d
Fatal trap NUM: page fault in kasan_atomic_fetchadd_int -1 1 527d 527d
Fatal trap NUM: page fault in callout_process -1 1 527d 527d
panic: Assertion mtx_unowned(m) failed at /syzkaller/managers/i386/kernel/sys/kern/kern_mutex.c:LINE (4) 2 2 529d 533d
panic: prefix ADDR has referencing addresses (5) 2 4 532d 570d
panic: pmap_growkernel: no memory to grow kernel (3) 2 965 496d 1428d
panic: vm_fault_lookup: fault on nofault entry, addr: ADDR (4) 2 18 498d 561d
syzkaller: make target failed: failed to run ["gmake" "target"]: exit status 2 (2) -1 10 449d 451d
Fatal trap NUM: page fault while in kernel mode (5) -1 15 527d 603d
panic: Assertion v != tid failed at /syzkaller/managers/i386/kernel/sys/kern/kern_mutex.c:LINE (2) 2 72 548d 1170d
panic: lock (sleep mutex) sctp-inp not locked @ /syzkaller/managers/i386/kernel/sys/netinet/sctp_pcb.c:LINE 2 6 548d 551d
Fatal trap NUM: page fault in in6_unlink_ifa (4) -1 1 550d 550d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (11) -1 18 519d 545d
Fatal trap NUM: page fault in sctp_ss_default_add (3) -1 1 564d 564d
Fatal trap NUM: page fault in m_tag_delete_chain -1 21 527d 527d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 (4) -1 118 490d 509d
freebsd build error (18) -1 8 528d 529d
panic: mtx_lock_spin: recursed on non-recursive mutex msgbuf @ /syzkaller/managers/i386/kernel/sys/kern/subr_msgbuf.c:LI 2 6 602d 628d
panic: deadlres_td_on_lock: possible deadlock detected for ADDR (syz-executor), blocked for NUM ticks 2 1 609d 609d
panic: Assertion mtx_unowned(m) failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:LINE (4) 2 1 612d 612d
panic: mtx_lock() of destroyed mutex at sys/netinet/sctp_output.c:LINE (2) 2 1 629d 629d
panic: mtx_lock_spin: recursed on non-recursive mutex msgbuf @ /syzkaller/managers/main/kernel/sys/kern/subr_msgbuf.c:LI (2) 2 12 600d 630d
freebsd test error: lost connection to test machine (5) -1 1 672d 672d
panic: Assertion mtx_unowned(m) failed at /syzkaller/managers/i386/kernel/sys/kern/kern_mutex.c:LINE (3) 2 1 672d 672d
panic: prefix ADDR has referencing addresses (4) 2 2 682d 735d
panic: Assertion curthread->td_wantedlock == NULL failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:LINE 2 4 695d 696d
panic: size_on_reasm_queue is NUM (3) 2 1 698d 698d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/i386/kernel/sys/kern/sys_socket.c:LINE (2) 2 1 722d 722d
corrupted report (4) -1 21 752d 1288d
freebsd build error (17) -1 8 762d 799d
Fatal trap NUM: page fault in in6_unlink_ifa (3) -1 1 772d 772d
Fatal trap NUM: page fault in nd6_dad_timer (5) -1 2 776d 847d
panic: mutex Giant owned at /syzkaller/managers/i386/kernel/sys/kern/kern_thread.c:LINE 2 252 746d 806d
panic: in6_pcblookup_hash_locked: invalid foreign address 2 syz 62 907d 957d
panic: prot 0x3 is not subset of max_prot NUM 2 C 2 765d 765d
SYZFAIL: child failed -1 syz 286 1251d 1669d
SYZFAIL: command failed -1 syz 34 1244d 1668d
panic: _mtx_lock_sleep: recursed on non-recursive mutex process lock @ /syzkaller/managers/main/kernel/sys/kern/kern_for 2 C 2 1134d 1134d
Fatal trap NUM: page fault while in kernel mode (4) -1 C 7 943d 1269d
panic: huh, cumack ADDR greater than high-tsn ADDR in map 2 1 810d 810d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-tcb @ /syzkaller/managers/i386/kernel/sys/netinet/sctp_pcb. (3) 2 1 812d 812d
panic: size_on_reasm_queue is NUM (2) 2 1 818d 818d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 (3) -1 506 791d 936d
Fatal trap NUM: general protection fault in pfi_kkif_update (3) -1 1 843d 843d
Fatal trap NUM: page fault in in6_selecthlim (2) -1 1 865d 865d
Fatal trap NUM: page fault in sctp_ss_default_add (2) -1 1 882d 882d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/main/kernel/sys/kern/sys_socket.c:LINE (3) 2 1 888d 888d
panic: Rack:ADDR sb:ADDR rsm:ADDR -- first rsm mbuf not aligned to sb 2 1 893d 893d
panic: Assertion mtx_unowned(m) failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:LINE (3) 2 1 900d 900d
panic: size_on_reasm_queue is NUM 2 1 923d 923d
panic: vtopde on a uva/gpa 0x1000 2 1 934d 934d
Fatal trap NUM: page fault in nd6_dad_timer (4) -1 2 960d 1021d
suppressed report (3) -1 2 971d 1056d
freebsd boot error: Fatal trap NUM: page fault while in kernel mode -1 159 944d 947d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 (3) -1 4 1007d 1007d
panic: prefix ADDR has referencing addresses (3) 2 1 1026d 1026d
freebsd boot error: can't ssh into the instance (3) -1 1 1038d 1038d
freebsd build error (15) -1 1099 965d 1080d
panic: About to free ctl:ADDR so:ADDR and its in 1 2 C 20 1320d 1764d
Fatal trap NUM: page fault in in6_selecthlim -1 15 1082d 1445d
panic: Assertion mtx_unowned(m) failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:LINE (2) 2 1 1089d 1089d
Fatal trap NUM: page fault in nd6_dad_timer (3) -1 3 1126d 1222d
panic: mtx_lock_spin: recursed on non-recursive mutex msgbuf @ /syzkaller/managers/main/kernel/sys/kern/subr_msgbuf.c:LI 2 1 1134d 1134d
freebsd boot error: can't ssh into the instance (2) -1 1 1154d 1154d
freebsd test error: SYZFATAL: BUG: executor version returned bad result: "" -1 52 1126d 1127d
suppressed report (2) -1 2 1174d 1180d
Fatal trap NUM: page fault in pfi_kkif_update (3) -1 1 1175d 1175d
panic: ASan: Invalid access, NUM-byte read at ADDR, StackLeft(f1) (2) 2 1 1177d 1177d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-tcb @ /syzkaller/managers/i386/kernel/sys/netinet/sctp_pcb. (2) 2 1 1180d 1180d
Fatal trap NUM: page fault in knlist_remove_kq -1 1 1184d 1184d
Fatal trap NUM: page fault in sctp_notify_stream_reset_add -1 1 1191d 1191d
freebsd build error (14) -1 18 1174d 1175d
panic: ASan: Invalid access, NUM-byte write at ADDR, UseAfterScope(f8) (2) 2 1 1207d 1207d
panic: ASan: Invalid access, NUM-byte read in kvprintf 2 C 5 1416d 1436d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/i386/kernel/sys/kern/sys_socket.c:LINE 2 1 1220d 1220d
panic: rack_output:NUM: r.start:ADDR < SND.UNA:ADDR; tp:ADDR, rack:ADDR, rsm:ADDR 2 C 270 1194d 1591d
panic: vm_fault_lookup: fault on nofault entry, addr: ADDR (3) 2 1 1229d 1229d
panic: prefix ADDR has referencing addresses (2) 2 3 1236d 1344d
Fatal trap NUM: page fault in sctp_wakeup_the_read_socket (4) -1 1 1239d 1239d
panic: Assertion task->ta_pending == NUM failed at /syzkaller/managers/i386/kernel/sys/kern/sys_socket.c:LINE 2 1 1243d 1243d
panic: Assertion mtx_unowned(m) failed at /syzkaller/managers/i386/kernel/sys/kern/kern_mutex.c:LINE (2) 2 2 1247d 1315d
Fatal trap NUM: page fault in kasan_atomic_load_int (2) -1 3 1248d 1317d
Fatal trap NUM: page fault in in6_unlink_ifa (2) -1 1 1257d 1257d
Fatal trap NUM: page fault in __asan_load8_noabort -1 1 1267d 1267d
SYZFAIL: too much cover (2) -1 120 1238d 1295d
Fatal trap NUM: page fault in memcpy_erms (2) -1 1 1275d 1275d
SYZFAIL: cover mmap failed -1 1 1277d 1277d
panic: ASan: Invalid access, NUM-byte read at ADDR, UMAUseAfterFree(fd) (3) 2 C 58 1192d 1245d
SYZFAIL: tun: read failed (3) -1 1 1290d 1290d
panic: strq ADDR not scheduled (3) 2 1 1291d 1291d
Fatal trap NUM: general protection fault in pfi_kkif_update (2) -1 1 1305d 1305d
panic: spin lock held too long (2) 2 1 1306d 1306d
SYZFAIL: invalid kcov comp type (2) -1 1 1308d 1308d
panic: ASan: Invalid access, NUM-byte read at ADDR, StackMiddle(f2) 2 1 1309d 1309d
panic: Don't own TCB lock 2 1 1312d 1312d
Fatal trap NUM: page fault in nd6_dad_timer (2) -1 1 1316d 1316d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 (2) -1 106 1238d 1300d
freebsd build error (12) -1 2 1278d 1278d
panic: pmap_kasan_enter_alloc_4k: no memory to grow shadow map (2) 2 C 602 1420d 1469d
panic: out of swap space 2 C 15036 1342d 1585d
panic: ASan: Invalid access, NUM-byte read at ADDR, UseAfterScope(f8) 2 syz 7 1317d 1398d
panic: Queues are not empty when handling SHUTDOWN-ACK 2 syz 142 1350d 1920d
SYZFAIL: output overflow (2) -1 syz 14 1355d 1525d
panic: hpts_sane_input_insert: hpts:ADDR inp:ADDR incorrect CPU 2 C 186 1375d 1532d
SYZFAIL: tun: can't open device -1 syz 159 1476d 1669d
panic: m_copydata, offset > size of mbuf chain 2 syz 11 1471d 1474d
panic: hpts_sane_input_remove: hpts:ADDR inp:ADDR incorrect CPU 2 syz 5 1482d 1526d
panic: ASan: Invalid access, 2-byte read in sctp_common_input_processing 2 syz 8 1481d 1529d
panic: mtx_lock() of destroyed mutex at sys/netinet/sctp_pcb.c:LINE 2 syz 24 1540d 1966d
Fatal trap 9: general protection fault in __mtx_lock_sleep -1 syz 295 1534d 2208d
Fatal trap 9: general protection fault in sctp_timer_stop -1 syz 232 1535d 1848d
Fatal trap NUM: page fault in sctp_ss_default_add -1 1 1318d 1318d
panic: ASan: Invalid access, 8-byte read in __mtx_lock_sleep 2 syz 23 1437d 1520d
panic: ASan: Invalid access, 8-byte read in sctp_lower_sosend 2 syz 49 1404d 1512d
panic: ASan: Invalid access, 1-byte write in sctp_lower_sosend 2 syz 332 1426d 1530d
Fatal trap 12: page fault in __mtx_lock_sleep -1 syz 151 1536d 2183d
panic: Warning: Last msg marked incomplete, yet nothing left? 2 C 34 1331d 1584d
Fatal trap NUM: page fault in pfi_kkif_update (2) -1 1 1341d 1341d
panic: TCP stack bbr requested tcp_drop(ADDR) at connect() 2 1 1345d 1345d
panic: ASan: Invalid access, NUM-byte read in __mtx_lock_flags 2 C 188 1404d 1471d
panic: ASan: Invalid access, 8-byte write in sctp_timer_stop 2 C 269 1404d 1530d
Fatal trap 9: general protection fault in sctp_lower_sosend (2) -1 C 446 1534d 1854d
panic: ASan: Invalid access, NUM-byte read in sctp_ss_default_select 2 C 1 1473d 1473d
Fatal trap NUM: page fault while in kernel mode (3) -1 3 1360d 1373d
freebsd test error: lost connection to test machine (4) -1 896 1339d 1400d
panic: ASan: Invalid access, NUM-byte write at ADDR, StackMiddle(f2) 2 1 1375d 1375d
panic: ASan: Invalid access, NUM-byte read at ADDR, StackLeft(f1) 2 2 1382d 1392d
Fatal trap NUM: page fault in __mtx_lock_flags -1 2 1383d 1388d
freebsd build error (11) -1 1 1303d 1303d
panic: lock (sleep mutex) sctp-tcb not locked @ /syzkaller/managers/i386/kernel/sys/netinet/sctputil.c:LINE (3) 2 1 1393d 1393d
panic: ASan: Invalid access, 4-byte read in sctp_timer_stop 2 27 1404d 1530d
panic: ASan: Invalid access, NUM-byte write in vn_read_from_obj 2 5 1404d 1447d
panic: ASan: Invalid access, NUM-byte read in sctp_ss_default_add 2 27 1404d 1457d
panic: ASan: Invalid access, NUM-byte read in sctp_free_assoc 2 3 1406d 1477d
panic: ASan: Invalid access, NUM-byte read in ip6_input 2 1 1407d 1407d
panic: ASan: Invalid access, NUM-byte read in witness_checkorder 2 3 1417d 1466d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (10) -1 2 1332d 1332d
SYZFAIL: tun: read failed (2) -1 19 1422d 1455d
panic: mtx_lock() of destroyed mutex at sys/netinet/sctp_output.c:LINE 2 1 1426d 1426d
panic: ASan: Invalid access, 8-byte read in callout_process 2 5 1430d 1529d
panic: ASan: Invalid access, NUM-byte write in devfs_get_cdevpriv 2 1 1432d 1432d
panic: ASan: Invalid access, NUM-byte read in __cap_rights_is_set 2 1 1437d 1437d
panic: prefix ADDR has referencing addresses 2 1 1438d 1438d
panic: strq ADDR not scheduled (2) 2 1 1442d 1442d
Fatal trap NUM: page fault in sctp_wakeup_the_read_socket -1 2 1442d 1458d
Fatal trap NUM: page fault in in6_unlink_ifa -1 1 1445d 1445d
Fatal trap NUM: page fault in pfi_kkif_update -1 1 1448d 1448d
Fatal trap NUM: general protection fault in pfi_kkif_update -1 1 1452d 1452d
panic: ASan: Invalid access, 4-byte read in sctp_gather_internal_ifa_flags 2 14 1458d 1529d
Fatal trap NUM: page fault in nd6_dad_timer -1 1 1458d 1458d
freebsd build error (10) -1 1 1374d 1374d
corrupted report (3) -1 3 1470d 1584d
panic: sctp_timer_start of type 5: inp = ADDR, stcb->sctp_ep ADDR 2 10 1479d 1531d
panic: ASan: Invalid access, 2-byte read in sctp_chunk_output 2 4 1480d 1524d
panic: ASan: Invalid access, 2-byte read in sctp_ss_fcfs_select 2 3 1486d 1514d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/netinet/sctputil.c:LINE (3) 2 7 1486d 1705d
panic: sctp_timeout_handler of type 5: inp = ADDR, stcb->sctp_ep ADDR 2 2 1487d 1519d
panic: ASan: Invalid access, NUM-byte read in sctp_ss_default_remove 2 1 1488d 1488d
panic: ASan: Invalid access, NUM-byte read in callout_cc_add 2 1 1494d 1494d
panic: ASan: Invalid access, NUM-byte read in smp_targeted_tlb_shootdown 2 2 1447d 1449d
panic: ASan: Invalid access, NUM-byte read in smp_masked_invlpg_range 2 C 1 1424d 1424d
panic: size_on_reasm_queue is 1412 2 1 1505d 1505d
freebsd test error: lost connection to test machine (3) -1 105 1477d 1529d
panic: ASan: Invalid access, 4-byte read at ADDR, RedZonePartial(3) 2 9 1523d 1534d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (9) -1 6 1441d 1443d
panic: 2 chunks left for stream 0. 2 1 1528d 1528d
panic: H:ADDR p_prev_slot:NUM not equal to p_cur_slot:NUM 2 15 1533d 1698d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/netinet/sctp_pcb.c:LINE 2 23 1534d 1790d
panic: ASan: Invalid access, 4-byte read at ADDR, UMAUseAfterFree(fd) 2 300 1505d 1534d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-create @ /syzkaller/managers/main/kernel/sys/netinet/sctp_p 2 1 1539d 1539d
panic: lock (sleep mutex) sctp-tcb not locked @ /syzkaller/managers/i386/kernel/sys/netinet/sctputil.c:LINE (2) 2 2 1542d 1543d
Fatal trap 12: page fault in __mtx_assert (5) -1 7 1543d 1576d
panic: rsm:ADDR nrsm:ADDR rack:ADDR -- rsm->m is NULL? 2 C 25 1589d 1595d
panic: ASan: Invalid access, 4-byte read in in6_sin6_2_sin 2 C 8 1513d 1531d
panic: ASan: Invalid access, 4-byte read in sctp_connectx_helper_find 2 10 1530d 1530d
panic: Most recently used by in6_mfilter 2 3 1595d 1595d
panic: Most recently used by tcp_fsb 2 C 149 1594d 1595d
panic: rack_output: IP version incorrect: 0 2 C 31 1594d 1595d
panic: Most recently used by xform 2 C 115 1594d 1595d
Fatal trap 9: general protection fault in pfi_kkif_update -1 3 1554d 1596d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-tcb @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb. (2) 2 3 1555d 1604d
Fatal trap 12: page fault in sctp_add_to_readq -1 1 1556d 1556d
Fatal trap 12: page fault in in6_unlink_ifa (2) -1 syz 20 1541d 1929d
suppressed report -1 8 1493d 1629d
panic: ASan: Invalid access, 8-byte read at ADDR, UMAUseAfterFree(fd) 2 88 1531d 1534d
panic: ASan: Invalid access, 8-byte write at ADDR, UMAUseAfterFree(fd) 2 19 1531d 1532d
panic: size_on_reasm_queue is 1244 2 1 1563d 1563d
panic: H:ADDR p_prev_slot:LINE not equal to p_cur_slot:LINE 2 1 1567d 1567d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (8) -1 10 1497d 1670d
freebsd build error (8) -1 1 1530d 1529d
SYZFAIL: invalid kcov comp type -1 1443 1539d 1669d
panic: 1 chunks left for stream 0. 2 1 1574d 1574d
Fatal trap 9: general protection fault in sctp_ss_fb_clear -1 1 1582d 1582d
Fatal trap 12: page fault in callout_process (3) -1 1 1584d 1584d
Fatal trap 9: general protection fault in m_tag_locate -1 1 1589d 1589d
Fatal trap 12: page fault in sctp_inpcb_free -1 4 1607d 1708d
panic: mtx_unlock() of destroyed mutex at sys/netinet/sctp_usrreq.c:LINE 2 1 1609d 1609d
Fatal trap 12: page fault in exit1 -1 1 1622d 1622d
freebsd boot error: panic: ASan: Invalid access, 8-byte write at ADDR, MallocRedZone(fb) -1 18 1534d 1534d
freebsd build error (7) -1 2 1534d 1534d
Fatal trap 12: page fault in sctp_free_assoc -1 2 1631d 1686d
SYZFAIL: too much cover -1 2 1634d 1635d
freebsd build error (6) -1 6 1568d 1568d
panic: interrupts enabled 2 C 191 1569d 1569d
Fatal trap 12: page fault in sctp_is_vtag_good -1 1 1666d 1666d
panic: H:ADDR p_prev_slot:LINE not equal to p_cur_slot:NUM 2 1 1671d 1671d
Fatal trap 9: general protection fault in sctp_cmpaddr -1 13 1673d 1809d
Fatal trap 12: page fault in __mtx_assert (4) -1 2 1674d 1689d
panic: Memory modified after free ADDR(736) val=0 @ ADDR 2 21 1675d 1809d
SYZFAIL: output overflow -1 syz 38 1591d 1669d
SYZFAIL: tun: read failed -1 syz 1040 1588d 1669d
panic: sbflush_internal: ccc 0 mb 0 mbcnt 256 2 C 23 2284d 2374d
freebsd build error (5) -1 12 1665d 1695d
freebsd boot error: Fatal trap 12: page fault while in kernel mode -1 78 1610d 1611d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-create @ /syzkaller/managers/i386/kernel/sys/netinet/sctp_p 2 1 1682d 1682d
panic: Counter goes negative (2) 2 2 1686d 1707d
panic: lock (sleep mutex) sctp-tcb not locked @ /syzkaller/managers/i386/kernel/sys/netinet/sctputil.c:LINE 2 1 1691d 1691d
Fatal trap 9: general protection fault in sctp_chunk_output -1 17 1693d 1810d
freebsd test error: lost connection to test machine (2) -1 45 1605d 1605d
panic: Most recently used by sctp_stro 2 1 1702d 1702d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/kern/uipc_socket.c:LINE 2 1 1703d 1703d
panic: H:ADDR p_prev_slot:NUM not equal to p_cur_slot:ADDR 2 1 1707d 1707d
Fatal trap 12: page fault in sctp_ss_default_add -1 1 1711d 1711d
Fatal trap 9: general protection fault in sctp_is_vtag_good -1 2 1719d 1798d
panic: Assertion owner->td_proc->p_magic == P_MAGIC failed at /syzkaller/managers/i386/kernel/sys/kern/subr_turnstile.c: 2 3 1731d 1779d
Fatal trap 9: general protection fault in udp6_common_ctlinput (2) -1 1 1746d 1746d
panic: size_on_reasm_queue is 4 2 1 1752d 1752d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-tcb @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb. 2 3 1752d 1784d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (7) -1 8 1671d 1689d
Fatal trap 9: general protection fault in ck_epoch_poll_deferred (2) -1 4 1772d 1949d
Fatal trap 12: page fault in __mtx_assert (3) -1 3 1784d 1818d
panic: pfi_dynaddr_setup: non-NULL dyn 2 C 35 1724d 1966d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/netinet/sctputil.c:LINE (2) 2 2 1798d 1799d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/kern/uipc_ktls.c:LINE 2 C 6 1719d 1920d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (6) -1 34 1725d 1822d
Fatal trap 9: general protection fault in memcmp (2) -1 1 1769d 1769d
freebsd build error (4) -1 6 1714d 1744d
panic: Most recently used by kdtrace 2 5 1801d 1801d
panic: Flight size-express incorrect? 2 2 1805d 1807d
panic: sleepq_add: td ADDR to sleep on wchan ADDR with sleeping prohibited 2 C 6804 1796d 1834d
panic: pfi_kif_unref: ADDR has zero refs 2 C 2 1801d 1801d
panic: thread with borrowed priority returning to userland 2 syz 8 1924d 1958d
panic: tp:ADDR rc_sacked:LINE > out:LINE 2 C 185 1951d 1962d
panic: m_copydata, length > size of mbuf chain 2 C 93 1962d 1982d
panic: sbsndptr_noadv: sb_mb is NULL 2 C 686 1962d 1982d
panic: mtx_lock() of destroyed mutex at sys/kern/sys_socket.c:LINE 2 syz 43 2011d 2322d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/kern/sys_socket.c:LINE 2 syz 3 2045d 2060d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE 2 C 9 2065d 2065d
panic: _mtx_lock_sleep: recursed on non-recursive mutex rtentry @ /syzkaller/managers/main/kernel/sys/net/route.c:LINE 2 C 4 2111d 2298d
panic: mutex pcbinfohash not owned at /syzkaller/managers/i386/kernel/sys/netinet6/in6_pcb.c:LINE 2 syz 6 2140d 2140d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/main/kernel/sys/netinet6/in6_ifattach.c:LINE 2 syz 4 2162d 2163d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/i386/kernel/sys/netinet6/in6_ifattach.c:LINE (2) 2 syz 1 2163d 2163d
Fatal trap 12: page fault in thread_lock_validate -1 syz 1 2177d 2177d
panic: inp_leave_group: imf_sources not empty (2) 2 C 70 2282d 2316d
panic: non-kernel pmap pmap ADDR cpu 0 pcid 0 2 syz 1 2292d 2292d
panic: _mtx_lock_sleep: recursed on non-recursive mutex rtentry @ /syzkaller/managers/i386/kernel/sys/net/route.c:LINE 2 syz 1 2298d 2298d
panic: sbflush_internal: ccc 0 mb 0 mbcnt 512 2 syz 5 2298d 2356d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/main/kernel/sys/kern/sys_socket.c:LINE 2 syz 5 2312d 2322d
panic: Memory modified after free ADDR(256) val=0 @ ADDR 2 syz 6 2315d 2322d
panic: m_uiotombuf: progress != total 2 syz 2 2374d 2374d
panic: Bad tailq NEXT(ADDR->tqh_last) != NULL (2) 2 C 2194 1759d 1981d
panic: sx_try_xlock() of destroyed sx at sys/kern/uipc_sockbuf.c:LINE 2 8 1895d 2064d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/netinet/sctputil.c:LINE 2 1 1900d 1900d
corrupted report (2) -1 4 1906d 1938d
Fatal trap 12: page fault in tdq_notify -1 1 1912d 1912d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (5) -1 2 1861d 1861d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 (2) -1 28 1829d 1831d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:LINE 2 1 1932d 1932d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/main/kernel/sys/dev/hyperv/hvsock/hv_sock.c:LINE 2 2 1944d 1945d
panic: _mtx_lock_sleep: recursed on non-recursive mutex so_snd @ /syzkaller/managers/main/kernel/sys/kern/uipc_socket.c: 2 1 1945d 1945d
panic: size_on_all_streams smaller than control length 2 1 1949d 1949d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (4) -1 4 1861d 1861d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (3) -1 222 1867d 2192d
freebsd test error: lost connection to test machine -1 1269 1925d 1996d
freebsd build error (3) -1 13 1931d 1951d
Fatal trap 9: general protection fault in route_output -1 5 1970d 1971d
Fatal trap 9: general protection fault in fib4_lookup_nh_ext -1 4 1971d 1971d
Fatal trap 9: general protection fault in fib6_lookup_nh_basic -1 2 1971d 1971d
Fatal trap 9: general protection fault in pfi_kif_update -1 1 1971d 1971d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/main/kernel/sys/modules/tcp/rack/../../../netinet/tcp_stack 2 1 1977d 1977d
panic: refcount ADDR wraparound (2) 2 3883 1970d 1971d
Fatal trap 9: general protection fault in fib6_lookup -1 1494 1970d 1971d
Fatal trap 9: general protection fault in ip_output -1 624 1970d 1971d
Fatal trap 9: general protection fault in fib4_lookup -1 826 1970d 1971d
Fatal trap 9: general protection fault in nhop_free -1 110 1970d 1971d
Fatal trap 9: general protection fault while in kernel mode (2) -1 18 1970d 1971d
Fatal trap 9: general protection fault in sctp_source_address_selection -1 23 1970d 1971d
freebsd test error: timed out (3) -1 1 2021d 2021d
freebsd build error (2) -1 10 2050d 2106d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 -1 2 1966d 1966d
panic: Memory modified after free ADDR(112) val=ADDR @ ADDR 2 1 2060d 2060d
panic: Bad link elm ADDR next->prev != elm (2) 2 1 2064d 2064d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/i386/kernel/sys/netinet/in_pcb.c:LINE 2 7 2065d 2065d
corrupted report -1 1 2065d 2065d
panic: uma_zalloc: Bucket pointer mangled. 2 1 2067d 2067d
panic: vm_page_free_prep: freeing wired page ADDR 2 C 2 2315d 2315d
freebsd boot error: Fatal trap 12: page fault in _thread_lock -1 1 2012d 2012d
Fatal trap 12: page fault in sctp_inpcb_bind -1 1 2096d 2096d
Fatal trap 9: general protection fault in ck_epoch_poll_deferred -1 1 2103d 2103d
Fatal trap 12: page fault in in6_unlink_ifa -1 1 2116d 2116d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/main/kernel/sys/netinet6/in6.c:LINE 2 1 2148d 2148d
freebsd test error: timed out (2) -1 3 2158d 2158d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/i386/kernel/sys/netinet6/in6.c:LINE 2 1 2167d 2167d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/main/kernel/sys/netinet/igmp.c:LINE 2 2 2170d 2170d
panic: uma: Freed item ADDR did not belong to zone mbuf_cluster 2 1 2176d 2176d
Fatal trap 12: page fault in callout_process -1 2 2177d 2292d
Fatal trap 12: page fault while in kernel mode (2) -1 2 2177d 2294d
panic: map ADDR end = ADDR, next->start = 0 2 1 2181d 2181d
Fatal trap 12: page fault in pmap_activate_sw -1 1 2199d 2199d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/main/kernel/sys/netinet/in_mcast.c:LINE 2 15 2170d 2170d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/i386/kernel/sys/netinet/in_mcast.c:LINE 2 21 2170d 2170d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/i386/kernel/sys/net/if.c:LINE 2 1669 2171d 2171d
freebsd boot error: panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/main/kernel/sys/net/if.c:LINE -1 24 2171d 2172d
panic: cap_rights_is_vset:LINE (2) 2 1 2212d 2212d
Fatal trap 9: general protection fault in udp6_common_ctlinput -1 1 2218d 2218d
freebsd build error -1 4 2220d 2221d
panic: pmap_growkernel: no memory to grow kernel 2 4 2310d 2331d
panic: Most recently used by temp 2 4 2319d 2323d
panic: Bad tailq NEXT(ADDR->tqh_last) != NULL 2 1 2324d 2324d
panic: Assertion lock == sq->sq_lock failed at /syzkaller/managers/main/kernel/sys/kern/subr_sleepqueue.c:LINE 2 1 2322d 2322d
panic: Duplicate free of ADDR from zone ADDR(16) slab ADDR(241) 2 1 2317d 2317d
Fatal trap 12: page fault in fifo_close -1 58 2310d 2321d
Fatal trap 12: page fault in __mtx_assert (2) -1 1 2317d 2317d
panic: pmap_demote_pde: firstpte and newpte map different physical addresses 2 2 2303d 2303d
panic: Bad link elm ADDR next->prev != elm 2 11 2313d 2330d
panic: Most recently used by ip6opt 2 3 2296d 2327d
Fatal trap 12: page fault in uma_dbg_free -1 1 2317d 2317d
Fatal trap 12: page fault in uma_dbg_alloc -1 1 2322d 2322d
Fatal trap 9: general protection fault in sys_nlm_syscall -1 2 2318d 2320d
panic: sctp: no chunks on the queues 2 188 2280d 2371d
Fatal trap 12: page fault in ip_output -1 2 2322d 2323d
Fatal trap 9: general protection fault in memcmp -1 23 2310d 2333d
Fatal trap 12: page fault in link_elf_search_symbol -1 5 2283d 2322d
Fatal trap 12: page fault in pmap_remove_pte -1 1 2310d 2310d
freebsd test error: timed out -1 14 2339d 2367d
Fatal trap 9: general protection fault in sbfree -1 2 2359d 2365d
Fatal trap 9: general protection fault in unp_gc -1 1 2373d 2373d
panic: sbready: sb ADDR NULL fnrdy 2 1 2375d 2375d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 -1 4 2358d 2358d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (2) -1 2 2301d 2301d
syzkaller: make target failed: failed to run ["gmake" "target"]: exit status 2 -1 4 2303d 2303d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 -1 1 2364d 2364d
lost connection to test machine -1 10 2378d 2378d