syzbot

 sign-in | mailing list | source | docs
🐞 Open [86]
🐞 Fixed [373]
🐞 Invalid [423]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

Out of 423 bugs, 315 were automatically obsoleted (1 due to revoked reproducers), 108 were invalidated by users.
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported
panic: /syzkaller/managers/i386/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h (2) 2 216 51d 116d
panic: CURVNET_SET at /syzkaller/managers/main/kernel/sys/netinet6/in6_mcast.c:LINE inp_gcmoptions() curvnet=ADDR vnet=N 2 3 91d 148d
panic: igmp_change_state: no igmp_ifsoftc for ifp ADDR 2 2 92d 143d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (12) -1 226 57d 539d
panic: inconsistent boundary count NUM 2 6 100d 242d
Fatal trap NUM: page fault in in_pcbremhash_locked (2) -1 45 61d 166d
Fatal trap NUM: page fault in ip6_freemoptions -1 1 108d 108d
panic: flush_newblk_dep: Bad newblk ADDR 2 3 110d 110d
panic: vm_page_grab_zero_partial: page ADDR is invalid 2 1 112d 112d
Fatal trap NUM: page fault in in_joingroup_locked -1 2 115d 168d
SYZFAIL: failed to mkdir -1 2 127d 127d
panic: /syzkaller/managers/i386/kernel/sys/kern/uipc_usrreq.c:LINE: uipc_sosend_stream_or_seqpacket: Empty stailq ADDR-> 2 1298 98d 225d
panic: sleeping thread[ htholredsa d tpuin_dm 2tx ti 2 1 144d 144d
Fatal trap NUM: page fault in in6_selecthlim (4) -1 1 148d 148d
Fatal trap NUM: page fault in link_elf_search_symbol -1 1 152d 152d
panic: deadlres_td_sleep_q: possible deadlock detected for ADDR (syz-executor), blocked for ADDR ticks 2 1 156d 156d
panic: starting DAD on non-tentative address ADDR 2 1 159d 159d
panic: ASan: Invalid access, NUM-byte read at ADDR, MallocRedZone(fb) (4) 2 1 159d 159d
panic: witness_warn (3) 2 1 162d 162d
panic: proc_dtor: non-empty p_ktr 2 1 173d 173d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/i386/kernel/sys/kern/sys_socket.c:LINE (3) 2 3 179d 205d
panic: vm_page_dirty: page is invalid! 2 2 186d 228d
SYZFAIL: ShmemBuilder: too large output offset -1 1 186d 186d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: _callout_stop_safe: Bad link elm ADDR prev->next != 2 2 186d 218d
panic: pmap_demote_pde: a wired mapping is missing PG_A 2 67 147d 373d
freebsd test error: SYZFATAL: image testing failed w/o kernel bug (2) -1 3 187d 223d
panic: Assertion pd->pcksum failed at /syzkaller/managers/main/kernel/sys/netpfil/pf/pf.c:LINE 2 7 188d 225d
panic: /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE: in_pcblbgroup_insert: Bad list head ADDR first->prev ! 2 3 189d 227d
panic: negative vmsize for uid -NUM 2 1 214d 214d
panic: /syzkaller/managers/i386/kernel/sys/kern/kern_timeout.c:LINE: callout_process: Bad tailq NEXT(ADDR->tqh_last) != 2 1 217d 217d
Fatal trap NUM: page fault in witness_checkorder -1 4 217d 232d
panic: mutex so_rcv not owned at /syzkaller/managers/i386/kernel/sys/kern/uipc_usrreq.c:LINE 2 6 217d 220d
panic: /syzkaller/managers/i386/kernel/sys/netinet/in_pcb.c:LINE: in_pcblbgroup_insert: Bad list head ADDR first->prev ! 2 1 219d 219d
panic: pmap_growkernel: no memory to grow kernel (5) 2 457 181d 294d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_process: Bad tailq NEXT(ADDR->tqh_last) != 2 1 221d 221d
freebsd test error: can't ssh into the instance -1 11 181d 181d
panic: /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE: in_pcbremlbgrouphash: Bad link elm ADDR next->prev != 2 1 227d 227d
panic: Assertion pd->pcksum failed at /syzkaller/managers/i386/kernel/sys/netpfil/pf/pf.c:LINE 2 1 229d 229d
Fatal trap NUM: page fault in __mtx_lock_flags (4) -1 1 232d 232d
panic: ip6_deletefraghdr: ext headers not contigous in mbuf ADDR m_len NUM >= offset NUM + NUM 2 686 193d 243d
panic: executing segment marked as unreachable at /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE (in_pcbremlb 2 1 241d 241d
panic: /syzkaller/managers/i386/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h 2 202 203d 232d
panic: tcp_do_segment: sent too much 2 13 229d 261d
panic: Bad list head ADDR first->prev != head (2) 2 113 232d 260d
freebsd test error: lost connection to test machine (7) -1 2 278d 362d
SYZFAIL: coverage filter is full (2) -1 198808 291d 418d
freebsd test error: SYZFATAL: image testing failed w/o kernel bug -1 300 298d 329d
panic: mq notifiers left (2) 2 9 380d 386d
Fatal trap NUM: page fault in __mtx_lock_flags (3) -1 1 380d 380d
Fatal trap NUM: page fault in callout_process (3) -1 1 392d 392d
panic: pf_reassemble6: short mbuf chain 2 1 397d 397d
freebsd build error (19) -1 23 364d 365d
SYZFAIL: posix_spawn failed -1 4902 372d 515d
panic: pmap_growkernel: no memory to grow kernel (4) 2 29 380d 486d
panic: prefix ADDR has referencing addresses (6) 2 3 420d 503d
panic: mtx_lock() of destroyed mutex at sys/netinet/sctp_output.c:LINE (4) 2 1 431d 431d
SYZFAIL: SIGILL -1 101 393d 512d
Fatal trap NUM: page fault in in6_selecthlim (3) -1 739 403d 754d
SYZFAIL: child stopped -1 1 460d 460d
SYZFAIL: SIGBUS -1 8 461d 475d
SYZFAIL: clone failed -1 1 467d 467d
panic: strq ADDR not scheduled (4) 2 1 485d 485d
panic: if_ref: ifp ADDR has NUM refs 2 1 486d 486d
SYZFAIL: invalid kcov comp type (3) -1 1 497d 497d
SYZFAIL: SIGFPE -1 19 460d 500d
Fatal trap NUM: page fault in callout_process (2) -1 1 501d 501d
panic: mq notifiers left 2 21 461d 471d
Fatal trap NUM: pageJul NUM NUM:NUM:NUM fault in ip6_output -1 1 514d 514d
SYZFAIL: coverage filter is full -1 85109 476d 511d
panic: tcp_close: inp_socket NULL 2 4 516d 516d
freebsd test error: panic: ASan: Invalid access, NUM-byte write at ADDR, MallocRedZone(fb) -1 80 502d 508d
freebsd test error: lost connection to test machine (6) -1 7 565d 565d
panic: ASan: Invalid access, NUM-byte read at ADDR, MallocRedZone(fb) (3) 2 1 575d 575d
freebsd boot error: can't ssh into the instance (4) -1 3 579d 579d
Fatal trap NUM: page fault in sctp_free_assoc -1 35 544d 610d
panic: mtx_lock() of destroyed mutex at sys/netinet/sctp_output.c:LINE (3) 2 3 584d 627d
freebsd test error: SYZFATAL: failed to connect to host: dial tcp IP:NUM: i/o timeout -1 54 571d 574d
panic: rsm:ADDR nrsm:ADDR hit at soff:NUM null m (2) 2 3 613d 613d
Fatal trap NUM: page fault in __asan_load8_noabort (2) -1 8 617d 617d
panic: mb_free_extpg: m ADDR is not multipage! 2 1 617d 617d
Fatal trap NUM: page fault in m_free -1 2 617d 617d
Fatal trap NUM: page fault in kasan_atomic_fetchadd_int -1 1 617d 617d
Fatal trap NUM: page fault in callout_process -1 1 617d 617d
panic: Assertion mtx_unowned(m) failed at /syzkaller/managers/i386/kernel/sys/kern/kern_mutex.c:LINE (4) 2 2 619d 623d
panic: prefix ADDR has referencing addresses (5) 2 4 622d 660d
panic: pmap_growkernel: no memory to grow kernel (3) 2 965 586d 1518d
panic: vm_fault_lookup: fault on nofault entry, addr: ADDR (4) 2 18 588d 651d
syzkaller: make target failed: failed to run ["gmake" "target"]: exit status 2 (2) -1 10 539d 541d
Fatal trap NUM: page fault while in kernel mode (5) -1 15 617d 693d
panic: Assertion v != tid failed at /syzkaller/managers/i386/kernel/sys/kern/kern_mutex.c:LINE (2) 2 72 638d 1260d
panic: lock (sleep mutex) sctp-inp not locked @ /syzkaller/managers/i386/kernel/sys/netinet/sctp_pcb.c:LINE 2 6 638d 641d
Fatal trap NUM: page fault in in6_unlink_ifa (4) -1 1 640d 640d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (11) -1 18 609d 635d
Fatal trap NUM: page fault in sctp_ss_default_add (3) -1 1 654d 654d
Fatal trap NUM: page fault in m_tag_delete_chain -1 21 617d 617d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 (4) -1 118 580d 599d
freebsd build error (18) -1 8 618d 619d
panic: mtx_lock_spin: recursed on non-recursive mutex msgbuf @ /syzkaller/managers/i386/kernel/sys/kern/subr_msgbuf.c:LI 2 6 692d 718d
panic: deadlres_td_on_lock: possible deadlock detected for ADDR (syz-executor), blocked for NUM ticks 2 1 699d 699d
panic: Assertion mtx_unowned(m) failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:LINE (4) 2 1 702d 702d
panic: mtx_lock() of destroyed mutex at sys/netinet/sctp_output.c:LINE (2) 2 1 719d 719d
panic: mtx_lock_spin: recursed on non-recursive mutex msgbuf @ /syzkaller/managers/main/kernel/sys/kern/subr_msgbuf.c:LI (2) 2 12 690d 720d
freebsd test error: lost connection to test machine (5) -1 1 762d 762d
panic: Assertion mtx_unowned(m) failed at /syzkaller/managers/i386/kernel/sys/kern/kern_mutex.c:LINE (3) 2 1 762d 762d
panic: prefix ADDR has referencing addresses (4) 2 2 772d 825d
panic: Assertion curthread->td_wantedlock == NULL failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:LINE 2 4 785d 786d
panic: size_on_reasm_queue is NUM (3) 2 1 788d 788d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/i386/kernel/sys/kern/sys_socket.c:LINE (2) 2 1 812d 812d
corrupted report (4) -1 21 842d 1378d
freebsd build error (17) -1 8 852d 889d
Fatal trap NUM: page fault in in6_unlink_ifa (3) -1 1 862d 862d
Fatal trap NUM: page fault in nd6_dad_timer (5) -1 2 866d 937d
panic: mutex Giant owned at /syzkaller/managers/i386/kernel/sys/kern/kern_thread.c:LINE 2 252 836d 896d
panic: in6_pcblookup_hash_locked: invalid foreign address 2 syz 62 997d 1047d
panic: prot 0x3 is not subset of max_prot NUM 2 C 2 855d 855d
SYZFAIL: child failed -1 syz 286 1341d 1759d
SYZFAIL: command failed -1 syz 34 1334d 1758d
panic: _mtx_lock_sleep: recursed on non-recursive mutex process lock @ /syzkaller/managers/main/kernel/sys/kern/kern_for 2 C 2 1224d 1224d
Fatal trap NUM: page fault while in kernel mode (4) -1 C 7 1033d 1359d
panic: huh, cumack ADDR greater than high-tsn ADDR in map 2 1 900d 900d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-tcb @ /syzkaller/managers/i386/kernel/sys/netinet/sctp_pcb. (3) 2 1 902d 902d
panic: size_on_reasm_queue is NUM (2) 2 1 908d 908d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 (3) -1 506 881d 1026d
Fatal trap NUM: general protection fault in pfi_kkif_update (3) -1 1 933d 933d
Fatal trap NUM: page fault in in6_selecthlim (2) -1 1 955d 955d
Fatal trap NUM: page fault in sctp_ss_default_add (2) -1 1 972d 972d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/main/kernel/sys/kern/sys_socket.c:LINE (3) 2 1 978d 978d
panic: Rack:ADDR sb:ADDR rsm:ADDR -- first rsm mbuf not aligned to sb 2 1 983d 983d
panic: Assertion mtx_unowned(m) failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:LINE (3) 2 1 990d 990d
panic: size_on_reasm_queue is NUM 2 1 1013d 1013d
panic: vtopde on a uva/gpa 0x1000 2 1 1024d 1024d
Fatal trap NUM: page fault in nd6_dad_timer (4) -1 2 1050d 1111d
suppressed report (3) -1 2 1061d 1146d
freebsd boot error: Fatal trap NUM: page fault while in kernel mode -1 159 1034d 1037d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 (3) -1 4 1097d 1097d
panic: prefix ADDR has referencing addresses (3) 2 1 1116d 1116d
freebsd boot error: can't ssh into the instance (3) -1 1 1128d 1128d
freebsd build error (15) -1 1099 1055d 1170d
panic: About to free ctl:ADDR so:ADDR and its in 1 2 C 20 1410d 1854d
Fatal trap NUM: page fault in in6_selecthlim -1 15 1172d 1535d
panic: Assertion mtx_unowned(m) failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:LINE (2) 2 1 1179d 1179d
Fatal trap NUM: page fault in nd6_dad_timer (3) -1 3 1216d 1312d
panic: mtx_lock_spin: recursed on non-recursive mutex msgbuf @ /syzkaller/managers/main/kernel/sys/kern/subr_msgbuf.c:LI 2 1 1224d 1224d
freebsd boot error: can't ssh into the instance (2) -1 1 1244d 1244d
freebsd test error: SYZFATAL: BUG: executor version returned bad result: "" -1 52 1216d 1217d
suppressed report (2) -1 2 1264d 1270d
Fatal trap NUM: page fault in pfi_kkif_update (3) -1 1 1265d 1265d
panic: ASan: Invalid access, NUM-byte read at ADDR, StackLeft(f1) (2) 2 1 1267d 1267d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-tcb @ /syzkaller/managers/i386/kernel/sys/netinet/sctp_pcb. (2) 2 1 1270d 1270d
Fatal trap NUM: page fault in knlist_remove_kq -1 1 1274d 1274d
Fatal trap NUM: page fault in sctp_notify_stream_reset_add -1 1 1281d 1281d
freebsd build error (14) -1 18 1264d 1265d
panic: ASan: Invalid access, NUM-byte write at ADDR, UseAfterScope(f8) (2) 2 1 1297d 1297d
panic: ASan: Invalid access, NUM-byte read in kvprintf 2 C 5 1506d 1526d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/i386/kernel/sys/kern/sys_socket.c:LINE 2 1 1310d 1310d
panic: rack_output:NUM: r.start:ADDR < SND.UNA:ADDR; tp:ADDR, rack:ADDR, rsm:ADDR 2 C 270 1284d 1681d
panic: vm_fault_lookup: fault on nofault entry, addr: ADDR (3) 2 1 1319d 1319d
panic: prefix ADDR has referencing addresses (2) 2 3 1326d 1434d
Fatal trap NUM: page fault in sctp_wakeup_the_read_socket (4) -1 1 1329d 1329d
panic: Assertion task->ta_pending == NUM failed at /syzkaller/managers/i386/kernel/sys/kern/sys_socket.c:LINE 2 1 1333d 1333d
panic: Assertion mtx_unowned(m) failed at /syzkaller/managers/i386/kernel/sys/kern/kern_mutex.c:LINE (2) 2 2 1337d 1405d
Fatal trap NUM: page fault in kasan_atomic_load_int (2) -1 3 1338d 1407d
Fatal trap NUM: page fault in in6_unlink_ifa (2) -1 1 1347d 1347d
Fatal trap NUM: page fault in __asan_load8_noabort -1 1 1357d 1357d
SYZFAIL: too much cover (2) -1 120 1328d 1385d
Fatal trap NUM: page fault in memcpy_erms (2) -1 1 1365d 1365d
SYZFAIL: cover mmap failed -1 1 1367d 1367d
panic: ASan: Invalid access, NUM-byte read at ADDR, UMAUseAfterFree(fd) (3) 2 C 58 1282d 1335d
SYZFAIL: tun: read failed (3) -1 1 1380d 1380d
panic: strq ADDR not scheduled (3) 2 1 1381d 1381d
Fatal trap NUM: general protection fault in pfi_kkif_update (2) -1 1 1395d 1395d
panic: spin lock held too long (2) 2 1 1396d 1396d
SYZFAIL: invalid kcov comp type (2) -1 1 1398d 1398d
panic: ASan: Invalid access, NUM-byte read at ADDR, StackMiddle(f2) 2 1 1399d 1399d
panic: Don't own TCB lock 2 1 1402d 1402d
Fatal trap NUM: page fault in nd6_dad_timer (2) -1 1 1406d 1406d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 (2) -1 106 1328d 1390d
freebsd build error (12) -1 2 1368d 1368d
panic: pmap_kasan_enter_alloc_4k: no memory to grow shadow map (2) 2 C 602 1510d 1559d
panic: out of swap space 2 C 15036 1432d 1675d
panic: ASan: Invalid access, NUM-byte read at ADDR, UseAfterScope(f8) 2 syz 7 1407d 1488d
panic: Queues are not empty when handling SHUTDOWN-ACK 2 syz 142 1440d 2010d
SYZFAIL: output overflow (2) -1 syz 14 1445d 1615d
panic: hpts_sane_input_insert: hpts:ADDR inp:ADDR incorrect CPU 2 C 186 1465d 1622d
SYZFAIL: tun: can't open device -1 syz 159 1566d 1759d
panic: m_copydata, offset > size of mbuf chain 2 syz 11 1561d 1564d
panic: hpts_sane_input_remove: hpts:ADDR inp:ADDR incorrect CPU 2 syz 5 1572d 1616d
panic: ASan: Invalid access, 2-byte read in sctp_common_input_processing 2 syz 8 1571d 1619d
panic: mtx_lock() of destroyed mutex at sys/netinet/sctp_pcb.c:LINE 2 syz 24 1630d 2056d
Fatal trap 9: general protection fault in __mtx_lock_sleep -1 syz 295 1624d 2298d
Fatal trap 9: general protection fault in sctp_timer_stop -1 syz 232 1625d 1938d
Fatal trap NUM: page fault in sctp_ss_default_add -1 1 1408d 1408d
panic: ASan: Invalid access, 8-byte read in __mtx_lock_sleep 2 syz 23 1527d 1610d
panic: ASan: Invalid access, 8-byte read in sctp_lower_sosend 2 syz 49 1494d 1602d
panic: ASan: Invalid access, 1-byte write in sctp_lower_sosend 2 syz 332 1516d 1620d
Fatal trap 12: page fault in __mtx_lock_sleep -1 syz 151 1626d 2273d
panic: Warning: Last msg marked incomplete, yet nothing left? 2 C 34 1421d 1674d
Fatal trap NUM: page fault in pfi_kkif_update (2) -1 1 1431d 1431d
panic: TCP stack bbr requested tcp_drop(ADDR) at connect() 2 1 1435d 1435d
panic: ASan: Invalid access, NUM-byte read in __mtx_lock_flags 2 C 188 1494d 1561d
panic: ASan: Invalid access, 8-byte write in sctp_timer_stop 2 C 269 1494d 1620d
Fatal trap 9: general protection fault in sctp_lower_sosend (2) -1 C 446 1624d 1944d
panic: ASan: Invalid access, NUM-byte read in sctp_ss_default_select 2 C 1 1563d 1563d
Fatal trap NUM: page fault while in kernel mode (3) -1 3 1450d 1463d
freebsd test error: lost connection to test machine (4) -1 896 1429d 1490d
panic: ASan: Invalid access, NUM-byte write at ADDR, StackMiddle(f2) 2 1 1465d 1465d
panic: ASan: Invalid access, NUM-byte read at ADDR, StackLeft(f1) 2 2 1472d 1482d
Fatal trap NUM: page fault in __mtx_lock_flags -1 2 1473d 1478d
freebsd build error (11) -1 1 1393d 1393d
panic: lock (sleep mutex) sctp-tcb not locked @ /syzkaller/managers/i386/kernel/sys/netinet/sctputil.c:LINE (3) 2 1 1483d 1483d
panic: ASan: Invalid access, 4-byte read in sctp_timer_stop 2 27 1494d 1620d
panic: ASan: Invalid access, NUM-byte write in vn_read_from_obj 2 5 1494d 1537d
panic: ASan: Invalid access, NUM-byte read in sctp_ss_default_add 2 27 1494d 1547d
panic: ASan: Invalid access, NUM-byte read in sctp_free_assoc 2 3 1496d 1567d
panic: ASan: Invalid access, NUM-byte read in ip6_input 2 1 1497d 1497d
panic: ASan: Invalid access, NUM-byte read in witness_checkorder 2 3 1506d 1556d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (10) -1 2 1422d 1422d
SYZFAIL: tun: read failed (2) -1 19 1512d 1545d
panic: mtx_lock() of destroyed mutex at sys/netinet/sctp_output.c:LINE 2 1 1516d 1516d
panic: ASan: Invalid access, 8-byte read in callout_process 2 5 1520d 1619d
panic: ASan: Invalid access, NUM-byte write in devfs_get_cdevpriv 2 1 1522d 1522d
panic: ASan: Invalid access, NUM-byte read in __cap_rights_is_set 2 1 1527d 1527d
panic: prefix ADDR has referencing addresses 2 1 1528d 1528d
panic: strq ADDR not scheduled (2) 2 1 1532d 1532d
Fatal trap NUM: page fault in sctp_wakeup_the_read_socket -1 2 1532d 1548d
Fatal trap NUM: page fault in in6_unlink_ifa -1 1 1535d 1535d
Fatal trap NUM: page fault in pfi_kkif_update -1 1 1538d 1538d
Fatal trap NUM: general protection fault in pfi_kkif_update -1 1 1542d 1542d
panic: ASan: Invalid access, 4-byte read in sctp_gather_internal_ifa_flags 2 14 1548d 1619d
Fatal trap NUM: page fault in nd6_dad_timer -1 1 1548d 1548d
freebsd build error (10) -1 1 1464d 1464d
corrupted report (3) -1 3 1560d 1674d
panic: sctp_timer_start of type 5: inp = ADDR, stcb->sctp_ep ADDR 2 10 1569d 1621d
panic: ASan: Invalid access, 2-byte read in sctp_chunk_output 2 4 1570d 1614d
panic: ASan: Invalid access, 2-byte read in sctp_ss_fcfs_select 2 3 1576d 1604d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/netinet/sctputil.c:LINE (3) 2 7 1576d 1795d
panic: sctp_timeout_handler of type 5: inp = ADDR, stcb->sctp_ep ADDR 2 2 1577d 1609d
panic: ASan: Invalid access, NUM-byte read in sctp_ss_default_remove 2 1 1578d 1578d
panic: ASan: Invalid access, NUM-byte read in callout_cc_add 2 1 1584d 1584d
panic: ASan: Invalid access, NUM-byte read in smp_targeted_tlb_shootdown 2 2 1537d 1539d
panic: ASan: Invalid access, NUM-byte read in smp_masked_invlpg_range 2 C 1 1514d 1514d
panic: size_on_reasm_queue is 1412 2 1 1595d 1595d
freebsd test error: lost connection to test machine (3) -1 105 1567d 1619d
panic: ASan: Invalid access, 4-byte read at ADDR, RedZonePartial(3) 2 9 1613d 1624d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (9) -1 6 1531d 1533d
panic: 2 chunks left for stream 0. 2 1 1618d 1618d
panic: H:ADDR p_prev_slot:NUM not equal to p_cur_slot:NUM 2 15 1623d 1788d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/netinet/sctp_pcb.c:LINE 2 23 1624d 1880d
panic: ASan: Invalid access, 4-byte read at ADDR, UMAUseAfterFree(fd) 2 300 1595d 1624d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-create @ /syzkaller/managers/main/kernel/sys/netinet/sctp_p 2 1 1629d 1629d
panic: lock (sleep mutex) sctp-tcb not locked @ /syzkaller/managers/i386/kernel/sys/netinet/sctputil.c:LINE (2) 2 2 1632d 1633d
Fatal trap 12: page fault in __mtx_assert (5) -1 7 1633d 1666d
panic: rsm:ADDR nrsm:ADDR rack:ADDR -- rsm->m is NULL? 2 C 25 1679d 1685d
panic: ASan: Invalid access, 4-byte read in in6_sin6_2_sin 2 C 8 1603d 1621d
panic: ASan: Invalid access, 4-byte read in sctp_connectx_helper_find 2 10 1620d 1620d
panic: Most recently used by in6_mfilter 2 3 1685d 1685d
panic: Most recently used by tcp_fsb 2 C 149 1684d 1685d
panic: rack_output: IP version incorrect: 0 2 C 31 1684d 1685d
panic: Most recently used by xform 2 C 115 1684d 1685d
Fatal trap 9: general protection fault in pfi_kkif_update -1 3 1644d 1686d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-tcb @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb. (2) 2 3 1645d 1694d
Fatal trap 12: page fault in sctp_add_to_readq -1 1 1646d 1646d
Fatal trap 12: page fault in in6_unlink_ifa (2) -1 syz 20 1631d 2019d
suppressed report -1 8 1583d 1719d
panic: ASan: Invalid access, 8-byte read at ADDR, UMAUseAfterFree(fd) 2 88 1621d 1624d
panic: ASan: Invalid access, 8-byte write at ADDR, UMAUseAfterFree(fd) 2 19 1621d 1622d
panic: size_on_reasm_queue is 1244 2 1 1653d 1653d
panic: H:ADDR p_prev_slot:LINE not equal to p_cur_slot:LINE 2 1 1657d 1657d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (8) -1 10 1587d 1760d
freebsd build error (8) -1 1 1620d 1619d
SYZFAIL: invalid kcov comp type -1 1443 1629d 1759d
panic: 1 chunks left for stream 0. 2 1 1664d 1664d
Fatal trap 9: general protection fault in sctp_ss_fb_clear -1 1 1672d 1672d
Fatal trap 12: page fault in callout_process (3) -1 1 1674d 1674d
Fatal trap 9: general protection fault in m_tag_locate -1 1 1679d 1679d
Fatal trap 12: page fault in sctp_inpcb_free -1 4 1697d 1798d
panic: mtx_unlock() of destroyed mutex at sys/netinet/sctp_usrreq.c:LINE 2 1 1699d 1699d
Fatal trap 12: page fault in exit1 -1 1 1712d 1712d
freebsd boot error: panic: ASan: Invalid access, 8-byte write at ADDR, MallocRedZone(fb) -1 18 1624d 1624d
freebsd build error (7) -1 2 1624d 1624d
Fatal trap 12: page fault in sctp_free_assoc -1 2 1721d 1776d
SYZFAIL: too much cover -1 2 1724d 1725d
freebsd build error (6) -1 6 1658d 1658d
panic: interrupts enabled 2 C 191 1659d 1659d
Fatal trap 12: page fault in sctp_is_vtag_good -1 1 1756d 1756d
panic: H:ADDR p_prev_slot:LINE not equal to p_cur_slot:NUM 2 1 1761d 1761d
Fatal trap 9: general protection fault in sctp_cmpaddr -1 13 1763d 1899d
Fatal trap 12: page fault in __mtx_assert (4) -1 2 1764d 1779d
panic: Memory modified after free ADDR(736) val=0 @ ADDR 2 21 1765d 1899d
SYZFAIL: output overflow -1 syz 38 1681d 1759d
SYZFAIL: tun: read failed -1 syz 1040 1678d 1759d
panic: sbflush_internal: ccc 0 mb 0 mbcnt 256 2 C 23 2374d 2464d
freebsd build error (5) -1 12 1755d 1785d
freebsd boot error: Fatal trap 12: page fault while in kernel mode -1 78 1700d 1701d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-create @ /syzkaller/managers/i386/kernel/sys/netinet/sctp_p 2 1 1772d 1772d
panic: Counter goes negative (2) 2 2 1776d 1797d
panic: lock (sleep mutex) sctp-tcb not locked @ /syzkaller/managers/i386/kernel/sys/netinet/sctputil.c:LINE 2 1 1781d 1781d
Fatal trap 9: general protection fault in sctp_chunk_output -1 17 1783d 1900d
freebsd test error: lost connection to test machine (2) -1 45 1695d 1695d
panic: Most recently used by sctp_stro 2 1 1792d 1792d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/kern/uipc_socket.c:LINE 2 1 1793d 1793d
panic: H:ADDR p_prev_slot:NUM not equal to p_cur_slot:ADDR 2 1 1797d 1797d
Fatal trap 12: page fault in sctp_ss_default_add -1 1 1801d 1801d
Fatal trap 9: general protection fault in sctp_is_vtag_good -1 2 1809d 1888d
panic: Assertion owner->td_proc->p_magic == P_MAGIC failed at /syzkaller/managers/i386/kernel/sys/kern/subr_turnstile.c: 2 3 1821d 1869d
Fatal trap 9: general protection fault in udp6_common_ctlinput (2) -1 1 1836d 1836d
panic: size_on_reasm_queue is 4 2 1 1842d 1842d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-tcb @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb. 2 3 1842d 1874d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (7) -1 8 1761d 1779d
Fatal trap 9: general protection fault in ck_epoch_poll_deferred (2) -1 4 1862d 2039d
Fatal trap 12: page fault in __mtx_assert (3) -1 3 1874d 1908d
panic: pfi_dynaddr_setup: non-NULL dyn 2 C 35 1814d 2056d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/netinet/sctputil.c:LINE (2) 2 2 1888d 1889d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/kern/uipc_ktls.c:LINE 2 C 6 1809d 2010d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (6) -1 34 1815d 1912d
Fatal trap 9: general protection fault in memcmp (2) -1 1 1859d 1859d
freebsd build error (4) -1 6 1804d 1834d
panic: Most recently used by kdtrace 2 5 1891d 1891d
panic: Flight size-express incorrect? 2 2 1894d 1897d
panic: sleepq_add: td ADDR to sleep on wchan ADDR with sleeping prohibited 2 C 6804 1886d 1924d
panic: pfi_kif_unref: ADDR has zero refs 2 C 2 1891d 1891d
panic: thread with borrowed priority returning to userland 2 syz 8 2014d 2048d
panic: tp:ADDR rc_sacked:LINE > out:LINE 2 C 185 2041d 2052d
panic: m_copydata, length > size of mbuf chain 2 C 93 2052d 2072d
panic: sbsndptr_noadv: sb_mb is NULL 2 C 686 2052d 2072d
panic: mtx_lock() of destroyed mutex at sys/kern/sys_socket.c:LINE 2 syz 43 2101d 2412d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/kern/sys_socket.c:LINE 2 syz 3 2135d 2150d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE 2 C 9 2155d 2155d
panic: _mtx_lock_sleep: recursed on non-recursive mutex rtentry @ /syzkaller/managers/main/kernel/sys/net/route.c:LINE 2 C 4 2201d 2388d
panic: mutex pcbinfohash not owned at /syzkaller/managers/i386/kernel/sys/netinet6/in6_pcb.c:LINE 2 syz 6 2230d 2230d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/main/kernel/sys/netinet6/in6_ifattach.c:LINE 2 syz 4 2252d 2253d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/i386/kernel/sys/netinet6/in6_ifattach.c:LINE (2) 2 syz 1 2253d 2253d
Fatal trap 12: page fault in thread_lock_validate -1 syz 1 2267d 2267d
panic: inp_leave_group: imf_sources not empty (2) 2 C 70 2372d 2406d
panic: non-kernel pmap pmap ADDR cpu 0 pcid 0 2 syz 1 2382d 2382d
panic: _mtx_lock_sleep: recursed on non-recursive mutex rtentry @ /syzkaller/managers/i386/kernel/sys/net/route.c:LINE 2 syz 1 2388d 2388d
panic: sbflush_internal: ccc 0 mb 0 mbcnt 512 2 syz 5 2388d 2446d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/main/kernel/sys/kern/sys_socket.c:LINE 2 syz 5 2402d 2412d
panic: Memory modified after free ADDR(256) val=0 @ ADDR 2 syz 6 2405d 2412d
panic: m_uiotombuf: progress != total 2 syz 2 2464d 2464d
panic: Bad tailq NEXT(ADDR->tqh_last) != NULL (2) 2 C 2194 1849d 2071d
panic: sx_try_xlock() of destroyed sx at sys/kern/uipc_sockbuf.c:LINE 2 8 1985d 2154d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/netinet/sctputil.c:LINE 2 1 1990d 1990d
corrupted report (2) -1 4 1996d 2028d
Fatal trap 12: page fault in tdq_notify -1 1 2002d 2002d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (5) -1 2 1951d 1951d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 (2) -1 28 1919d 1921d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:LINE 2 1 2022d 2022d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/main/kernel/sys/dev/hyperv/hvsock/hv_sock.c:LINE 2 2 2034d 2035d
panic: _mtx_lock_sleep: recursed on non-recursive mutex so_snd @ /syzkaller/managers/main/kernel/sys/kern/uipc_socket.c: 2 1 2035d 2035d
panic: size_on_all_streams smaller than control length 2 1 2039d 2039d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (4) -1 4 1951d 1951d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (3) -1 222 1957d 2282d
freebsd test error: lost connection to test machine -1 1269 2014d 2086d
freebsd build error (3) -1 13 2021d 2041d
Fatal trap 9: general protection fault in route_output -1 5 2060d 2061d
Fatal trap 9: general protection fault in fib4_lookup_nh_ext -1 4 2061d 2061d
Fatal trap 9: general protection fault in fib6_lookup_nh_basic -1 2 2061d 2061d
Fatal trap 9: general protection fault in pfi_kif_update -1 1 2061d 2061d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/main/kernel/sys/modules/tcp/rack/../../../netinet/tcp_stack 2 1 2067d 2067d
panic: refcount ADDR wraparound (2) 2 3883 2060d 2061d
Fatal trap 9: general protection fault in fib6_lookup -1 1494 2060d 2061d
Fatal trap 9: general protection fault in ip_output -1 624 2060d 2061d
Fatal trap 9: general protection fault in fib4_lookup -1 826 2060d 2061d
Fatal trap 9: general protection fault in nhop_free -1 110 2060d 2061d
Fatal trap 9: general protection fault while in kernel mode (2) -1 18 2060d 2061d
Fatal trap 9: general protection fault in sctp_source_address_selection -1 23 2060d 2061d
freebsd test error: timed out (3) -1 1 2111d 2111d
freebsd build error (2) -1 10 2140d 2196d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 -1 2 2056d 2056d
panic: Memory modified after free ADDR(112) val=ADDR @ ADDR 2 1 2150d 2150d
panic: Bad link elm ADDR next->prev != elm (2) 2 1 2154d 2154d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/i386/kernel/sys/netinet/in_pcb.c:LINE 2 7 2155d 2155d
corrupted report -1 1 2155d 2155d
panic: uma_zalloc: Bucket pointer mangled. 2 1 2157d 2157d
panic: vm_page_free_prep: freeing wired page ADDR 2 C 2 2405d 2405d
freebsd boot error: Fatal trap 12: page fault in _thread_lock -1 1 2102d 2102d
Fatal trap 12: page fault in sctp_inpcb_bind -1 1 2186d 2186d
Fatal trap 9: general protection fault in ck_epoch_poll_deferred -1 1 2193d 2193d
Fatal trap 12: page fault in in6_unlink_ifa -1 1 2206d 2206d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/main/kernel/sys/netinet6/in6.c:LINE 2 1 2238d 2238d
freebsd test error: timed out (2) -1 3 2248d 2248d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/i386/kernel/sys/netinet6/in6.c:LINE 2 1 2257d 2257d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/main/kernel/sys/netinet/igmp.c:LINE 2 2 2260d 2260d
panic: uma: Freed item ADDR did not belong to zone mbuf_cluster 2 1 2266d 2266d
Fatal trap 12: page fault in callout_process -1 2 2267d 2382d
Fatal trap 12: page fault while in kernel mode (2) -1 2 2267d 2384d
panic: map ADDR end = ADDR, next->start = 0 2 1 2271d 2271d
Fatal trap 12: page fault in pmap_activate_sw -1 1 2289d 2289d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/main/kernel/sys/netinet/in_mcast.c:LINE 2 15 2260d 2260d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/i386/kernel/sys/netinet/in_mcast.c:LINE 2 21 2260d 2260d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/i386/kernel/sys/net/if.c:LINE 2 1669 2261d 2261d
freebsd boot error: panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/main/kernel/sys/net/if.c:LINE -1 24 2261d 2262d
panic: cap_rights_is_vset:LINE (2) 2 1 2302d 2302d
Fatal trap 9: general protection fault in udp6_common_ctlinput -1 1 2308d 2308d
freebsd build error -1 4 2310d 2311d
panic: pmap_growkernel: no memory to grow kernel 2 4 2400d 2421d
panic: Most recently used by temp 2 4 2409d 2413d
panic: Bad tailq NEXT(ADDR->tqh_last) != NULL 2 1 2414d 2414d
panic: Assertion lock == sq->sq_lock failed at /syzkaller/managers/main/kernel/sys/kern/subr_sleepqueue.c:LINE 2 1 2412d 2412d
panic: Duplicate free of ADDR from zone ADDR(16) slab ADDR(241) 2 1 2407d 2407d
Fatal trap 12: page fault in fifo_close -1 58 2400d 2411d
Fatal trap 12: page fault in __mtx_assert (2) -1 1 2407d 2407d
panic: pmap_demote_pde: firstpte and newpte map different physical addresses 2 2 2393d 2393d
panic: Bad link elm ADDR next->prev != elm 2 11 2403d 2420d
panic: Most recently used by ip6opt 2 3 2386d 2417d
Fatal trap 12: page fault in uma_dbg_free -1 1 2407d 2407d
Fatal trap 12: page fault in uma_dbg_alloc -1 1 2412d 2412d
Fatal trap 9: general protection fault in sys_nlm_syscall -1 2 2408d 2410d
panic: sctp: no chunks on the queues 2 188 2370d 2461d
Fatal trap 12: page fault in ip_output -1 2 2412d 2413d
Fatal trap 9: general protection fault in memcmp -1 23 2400d 2423d
Fatal trap 12: page fault in link_elf_search_symbol -1 5 2373d 2412d
Fatal trap 12: page fault in pmap_remove_pte -1 1 2400d 2400d
freebsd test error: timed out -1 14 2429d 2457d
Fatal trap 9: general protection fault in sbfree -1 2 2449d 2455d
Fatal trap 9: general protection fault in unp_gc -1 1 2463d 2463d
panic: sbready: sb ADDR NULL fnrdy 2 1 2465d 2465d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 -1 4 2448d 2448d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (2) -1 2 2391d 2391d
syzkaller: make target failed: failed to run ["gmake" "target"]: exit status 2 -1 4 2393d 2393d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 -1 1 2454d 2454d
lost connection to test machine -1 10 2468d 2468d