syzbot


Title Repro Cause bisect Fix bisect Count Last Reported
SYZFAIL: invalid kcov comp type (2) 1 90d 90d
panic: ASan: Invalid access, NUM-byte read at ADDR, StackMiddle(f2) 1 91d 91d
panic: Don't own TCB lock 1 94d 94d
Fatal trap NUM: page fault in nd6_dad_timer (2) 1 98d 98d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 (2) 106 20d 82d
freebsd build error (12) 2 60d 60d
panic: pmap_kasan_enter_alloc_4k: no memory to grow shadow map (2) C 602 203d 251d
panic: out of swap space C 15036 124d 367d
panic: ASan: Invalid access, NUM-byte read at ADDR, UseAfterScope(f8) syz 7 99d 180d
panic: Queues are not empty when handling SHUTDOWN-ACK syz 142 132d 702d
SYZFAIL: output overflow (2) syz 14 137d 307d
panic: hpts_sane_input_insert: hpts:ADDR inp:ADDR incorrect CPU C 186 157d 314d
SYZFAIL: tun: can't open device syz 159 258d 451d
panic: m_copydata, offset > size of mbuf chain syz 11 253d 256d
panic: hpts_sane_input_remove: hpts:ADDR inp:ADDR incorrect CPU syz 5 264d 308d
panic: ASan: Invalid access, 2-byte read in sctp_common_input_processing syz 8 263d 311d
panic: mtx_lock() of destroyed mutex at sys/netinet/sctp_pcb.c:LINE syz 24 322d 748d
Fatal trap 9: general protection fault in __mtx_lock_sleep syz 295 316d 990d
Fatal trap 9: general protection fault in sctp_timer_stop syz 232 317d 630d
Fatal trap NUM: page fault in sctp_ss_default_add 1 100d 100d
panic: ASan: Invalid access, 8-byte read in __mtx_lock_sleep syz 23 220d 302d
panic: ASan: Invalid access, 8-byte read in sctp_lower_sosend syz 49 186d 294d
panic: ASan: Invalid access, 1-byte write in sctp_lower_sosend syz 332 208d 312d
Fatal trap 12: page fault in __mtx_lock_sleep syz 151 318d 965d
panic: Warning: Last msg marked incomplete, yet nothing left? C 34 113d 366d
Fatal trap NUM: page fault in pfi_kkif_update (2) 1 123d 123d
panic: TCP stack bbr requested tcp_drop(ADDR) at connect() 1 127d 127d
panic: ASan: Invalid access, NUM-byte read in __mtx_lock_flags C 188 186d 253d
panic: ASan: Invalid access, 8-byte write in sctp_timer_stop C 269 186d 312d
Fatal trap 9: general protection fault in sctp_lower_sosend (2) C 446 316d 636d
panic: ASan: Invalid access, NUM-byte read in sctp_ss_default_select C 1 255d 255d
Fatal trap NUM: page fault while in kernel mode (3) 3 142d 155d
freebsd test error: lost connection to test machine (4) 896 121d 182d
panic: ASan: Invalid access, NUM-byte write at ADDR, StackMiddle(f2) 1 157d 157d
panic: ASan: Invalid access, NUM-byte read at ADDR, StackLeft(f1) 2 164d 174d
Fatal trap NUM: page fault in __mtx_lock_flags 2 165d 170d
freebsd build error (11) 1 85d 85d
panic: lock (sleep mutex) sctp-tcb not locked @ /syzkaller/managers/i386/kernel/sys/netinet/sctputil.c:LINE (3) 1 175d 175d
panic: ASan: Invalid access, 4-byte read in sctp_timer_stop 27 186d 312d
panic: ASan: Invalid access, NUM-byte write in vn_read_from_obj 5 186d 229d
panic: ASan: Invalid access, NUM-byte read in sctp_ss_default_add 27 186d 239d
panic: ASan: Invalid access, NUM-byte read in sctp_free_assoc 3 188d 259d
panic: ASan: Invalid access, NUM-byte read in ip6_input 1 189d 189d
panic: ASan: Invalid access, NUM-byte read in witness_checkorder 3 199d 248d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (10) 2 114d 114d
SYZFAIL: tun: read failed (2) 19 204d 237d
panic: mtx_lock() of destroyed mutex at sys/netinet/sctp_output.c:LINE 1 208d 208d
panic: ASan: Invalid access, 8-byte read in callout_process 5 212d 311d
panic: ASan: Invalid access, NUM-byte write in devfs_get_cdevpriv 1 214d 214d
panic: ASan: Invalid access, NUM-byte read in __cap_rights_is_set 1 219d 219d
panic: prefix ADDR has referencing addresses 1 220d 220d
panic: strq ADDR not scheduled (2) 1 224d 224d
Fatal trap NUM: page fault in sctp_wakeup_the_read_socket 2 224d 240d
Fatal trap NUM: page fault in in6_unlink_ifa 1 227d 227d
Fatal trap NUM: page fault in pfi_kkif_update 1 230d 230d
Fatal trap NUM: general protection fault in pfi_kkif_update 1 234d 234d
panic: ASan: Invalid access, 4-byte read in sctp_gather_internal_ifa_flags 14 240d 311d
Fatal trap NUM: page fault in nd6_dad_timer 1 240d 240d
freebsd build error (10) 1 156d 156d
corrupted report (3) 3 252d 366d
panic: sctp_timer_start of type 5: inp = ADDR, stcb->sctp_ep ADDR 10 261d 313d
panic: ASan: Invalid access, 2-byte read in sctp_chunk_output 4 262d 306d
panic: ASan: Invalid access, 2-byte read in sctp_ss_fcfs_select 3 268d 296d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/netinet/sctputil.c:LINE (3) 7 268d 487d
panic: sctp_timeout_handler of type 5: inp = ADDR, stcb->sctp_ep ADDR 2 269d 301d
panic: ASan: Invalid access, NUM-byte read in sctp_ss_default_remove 1 270d 270d
panic: ASan: Invalid access, NUM-byte read in callout_cc_add 1 276d 276d
panic: ASan: Invalid access, NUM-byte read in smp_targeted_tlb_shootdown 2 230d 231d
panic: ASan: Invalid access, NUM-byte read in smp_masked_invlpg_range C 1 206d 206d
panic: size_on_reasm_queue is 1412 1 287d 287d
freebsd test error: lost connection to test machine (3) 105 259d 311d
panic: ASan: Invalid access, 4-byte read at ADDR, RedZonePartial(3) 9 305d 316d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (9) 6 223d 225d
panic: 2 chunks left for stream 0. 1 310d 310d
panic: H:ADDR p_prev_slot:NUM not equal to p_cur_slot:NUM 15 315d 480d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/netinet/sctp_pcb.c:LINE 23 316d 572d
panic: ASan: Invalid access, 4-byte read at ADDR, UMAUseAfterFree(fd) 300 287d 316d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-create @ /syzkaller/managers/main/kernel/sys/netinet/sctp_p 1 321d 321d
panic: lock (sleep mutex) sctp-tcb not locked @ /syzkaller/managers/i386/kernel/sys/netinet/sctputil.c:LINE (2) 2 324d 325d
Fatal trap 12: page fault in __mtx_assert (5) 7 325d 358d
panic: rsm:ADDR nrsm:ADDR rack:ADDR -- rsm->m is NULL? C 25 371d 377d
panic: ASan: Invalid access, 4-byte read in in6_sin6_2_sin C 8 295d 313d
panic: ASan: Invalid access, 4-byte read in sctp_connectx_helper_find 10 312d 312d
panic: Most recently used by in6_mfilter 3 377d 377d
panic: Most recently used by tcp_fsb C 149 376d 377d
panic: rack_output: IP version incorrect: 0 C 31 376d 377d
panic: Most recently used by xform C 115 376d 377d
Fatal trap 9: general protection fault in pfi_kkif_update 3 336d 378d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-tcb @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb. (2) 3 337d 386d
Fatal trap 12: page fault in sctp_add_to_readq 1 338d 338d
Fatal trap 12: page fault in in6_unlink_ifa (2) syz 20 323d 711d
suppressed report 8 275d 411d
panic: ASan: Invalid access, 8-byte read at ADDR, UMAUseAfterFree(fd) 88 313d 316d
panic: ASan: Invalid access, 8-byte write at ADDR, UMAUseAfterFree(fd) 19 313d 314d
panic: size_on_reasm_queue is 1244 1 345d 345d
panic: H:ADDR p_prev_slot:LINE not equal to p_cur_slot:LINE 1 349d 349d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (8) 10 279d 452d
freebsd build error (8) 1 312d 311d
SYZFAIL: invalid kcov comp type 1443 321d 451d
panic: 1 chunks left for stream 0. 1 356d 356d
Fatal trap 9: general protection fault in sctp_ss_fb_clear 1 365d 365d
Fatal trap 12: page fault in callout_process (3) 1 366d 366d
Fatal trap 9: general protection fault in m_tag_locate 1 371d 371d
Fatal trap 12: page fault in sctp_inpcb_free 4 389d 490d
panic: mtx_unlock() of destroyed mutex at sys/netinet/sctp_usrreq.c:LINE 1 391d 391d
Fatal trap 12: page fault in exit1 1 404d 404d
freebsd boot error: panic: ASan: Invalid access, 8-byte write at ADDR, MallocRedZone(fb) 18 316d 316d
freebsd build error (7) 2 316d 316d
Fatal trap 12: page fault in sctp_free_assoc 2 413d 468d
SYZFAIL: too much cover 2 416d 417d
freebsd build error (6) 6 350d 350d
panic: interrupts enabled C 191 351d 351d
Fatal trap 12: page fault in sctp_is_vtag_good 1 449d 449d
panic: H:ADDR p_prev_slot:LINE not equal to p_cur_slot:NUM 1 453d 453d
Fatal trap 9: general protection fault in sctp_cmpaddr 13 455d 591d
Fatal trap 12: page fault in __mtx_assert (4) 2 456d 471d
panic: Memory modified after free ADDR(736) val=0 @ ADDR 21 457d 591d
SYZFAIL: output overflow syz 38 373d 451d
SYZFAIL: tun: read failed syz 1040 370d 451d
panic: sbflush_internal: ccc 0 mb 0 mbcnt 256 C 23 1066d 1156d
freebsd build error (5) 12 447d 477d
freebsd boot error: Fatal trap 12: page fault while in kernel mode 78 392d 393d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-create @ /syzkaller/managers/i386/kernel/sys/netinet/sctp_p 1 464d 464d
panic: Counter goes negative (2) 2 468d 490d
panic: lock (sleep mutex) sctp-tcb not locked @ /syzkaller/managers/i386/kernel/sys/netinet/sctputil.c:LINE 1 473d 473d
Fatal trap 9: general protection fault in sctp_chunk_output 17 475d 592d
freebsd test error: lost connection to test machine (2) 45 387d 387d
panic: Most recently used by sctp_stro 1 484d 484d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/kern/uipc_socket.c:LINE 1 485d 485d
panic: H:ADDR p_prev_slot:NUM not equal to p_cur_slot:ADDR 1 489d 489d
Fatal trap 12: page fault in sctp_ss_default_add 1 493d 493d
Fatal trap 9: general protection fault in sctp_is_vtag_good 2 501d 580d
panic: Assertion owner->td_proc->p_magic == P_MAGIC failed at /syzkaller/managers/i386/kernel/sys/kern/subr_turnstile.c: 3 513d 561d
Fatal trap 9: general protection fault in udp6_common_ctlinput (2) 1 528d 528d
panic: size_on_reasm_queue is 4 1 534d 534d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-tcb @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb. 3 534d 566d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (7) 8 453d 471d
Fatal trap 9: general protection fault in ck_epoch_poll_deferred (2) 4 554d 731d
Fatal trap 12: page fault in __mtx_assert (3) 3 566d 600d
panic: pfi_dynaddr_setup: non-NULL dyn C 35 507d 748d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/netinet/sctputil.c:LINE (2) 2 580d 581d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/kern/uipc_ktls.c:LINE C 6 501d 702d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (6) 34 507d 604d
Fatal trap 9: general protection fault in memcmp (2) 1 551d 551d
freebsd build error (4) 6 496d 526d
panic: Most recently used by kdtrace 5 583d 583d
panic: Flight size-express incorrect? 2 587d 590d
panic: sleepq_add: td ADDR to sleep on wchan ADDR with sleeping prohibited C 6804 578d 616d
panic: pfi_kif_unref: ADDR has zero refs C 2 583d 583d
panic: thread with borrowed priority returning to userland syz 8 706d 740d
panic: tp:ADDR rc_sacked:LINE > out:LINE C 185 733d 744d
panic: m_copydata, length > size of mbuf chain C 93 744d 764d
panic: sbsndptr_noadv: sb_mb is NULL C 686 744d 764d
panic: mtx_lock() of destroyed mutex at sys/kern/sys_socket.c:LINE syz 43 793d 1104d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/kern/sys_socket.c:LINE syz 3 827d 843d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE C 9 847d 847d
panic: _mtx_lock_sleep: recursed on non-recursive mutex rtentry @ /syzkaller/managers/main/kernel/sys/net/route.c:LINE C 4 893d 1080d
panic: mutex pcbinfohash not owned at /syzkaller/managers/i386/kernel/sys/netinet6/in6_pcb.c:LINE syz 6 922d 922d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/main/kernel/sys/netinet6/in6_ifattach.c:LINE syz 4 944d 945d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/i386/kernel/sys/netinet6/in6_ifattach.c:LINE (2) syz 1 945d 945d
Fatal trap 12: page fault in thread_lock_validate syz 1 959d 959d
panic: inp_leave_group: imf_sources not empty (2) C 70 1064d 1098d
panic: non-kernel pmap pmap ADDR cpu 0 pcid 0 syz 1 1074d 1074d
panic: _mtx_lock_sleep: recursed on non-recursive mutex rtentry @ /syzkaller/managers/i386/kernel/sys/net/route.c:LINE syz 1 1080d 1080d
panic: sbflush_internal: ccc 0 mb 0 mbcnt 512 syz 5 1080d 1139d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/main/kernel/sys/kern/sys_socket.c:LINE syz 5 1094d 1104d
panic: Memory modified after free ADDR(256) val=0 @ ADDR syz 6 1097d 1104d
panic: m_uiotombuf: progress != total syz 2 1156d 1156d
panic: Bad tailq NEXT(ADDR->tqh_last) != NULL (2) C 2194 541d 763d
panic: sx_try_xlock() of destroyed sx at sys/kern/uipc_sockbuf.c:LINE 8 677d 846d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/netinet/sctputil.c:LINE 1 682d 682d
corrupted report (2) 4 688d 720d
Fatal trap 12: page fault in tdq_notify 1 694d 694d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (5) 2 643d 643d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 (2) 28 611d 613d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:LINE 1 714d 714d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/main/kernel/sys/dev/hyperv/hvsock/hv_sock.c:LINE 2 726d 727d
panic: _mtx_lock_sleep: recursed on non-recursive mutex so_snd @ /syzkaller/managers/main/kernel/sys/kern/uipc_socket.c: 1 727d 727d
panic: size_on_all_streams smaller than control length 1 731d 731d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (4) 4 644d 644d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (3) 222 649d 974d
freebsd test error: lost connection to test machine 1269 707d 778d
freebsd build error (3) 13 713d 733d
Fatal trap 9: general protection fault in route_output 5 752d 753d
Fatal trap 9: general protection fault in fib4_lookup_nh_ext 4 753d 753d
Fatal trap 9: general protection fault in fib6_lookup_nh_basic 2 753d 753d
Fatal trap 9: general protection fault in pfi_kif_update 1 753d 753d
panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/main/kernel/sys/modules/tcp/rack/../../../netinet/tcp_stack 1 759d 759d
panic: refcount ADDR wraparound (2) 3883 752d 753d
Fatal trap 9: general protection fault in fib6_lookup 1494 752d 753d
Fatal trap 9: general protection fault in ip_output 624 752d 753d
Fatal trap 9: general protection fault in fib4_lookup 826 752d 753d
Fatal trap 9: general protection fault in nhop_free 110 752d 753d
Fatal trap 9: general protection fault while in kernel mode (2) 18 752d 753d
Fatal trap 9: general protection fault in sctp_source_address_selection 23 752d 753d
freebsd test error: timed out (3) 1 803d 803d
freebsd build error (2) 10 832d 888d
syzkaller: make host failed: failed to run ["gmake" "host" "ci"]: exit status 2 2 748d 748d
panic: Memory modified after free ADDR(112) val=ADDR @ ADDR 1 842d 842d
panic: Bad link elm ADDR next->prev != elm (2) 1 846d 846d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/i386/kernel/sys/netinet/in_pcb.c:LINE 7 847d 847d
corrupted report 1 847d 847d
panic: uma_zalloc: Bucket pointer mangled. 1 849d 849d
panic: vm_page_free_prep: freeing wired page ADDR C 2 1097d 1097d
freebsd boot error: Fatal trap 12: page fault in _thread_lock 1 795d 795d
Fatal trap 12: page fault in sctp_inpcb_bind 1 878d 878d
Fatal trap 9: general protection fault in ck_epoch_poll_deferred 1 885d 885d
Fatal trap 12: page fault in in6_unlink_ifa 1 898d 898d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/main/kernel/sys/netinet6/in6.c:LINE 1 930d 930d
freebsd test error: timed out (2) 3 940d 940d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/i386/kernel/sys/netinet6/in6.c:LINE 1 949d 949d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/main/kernel/sys/netinet/igmp.c:LINE 2 952d 953d
panic: uma: Freed item ADDR did not belong to zone mbuf_cluster 1 958d 958d
Fatal trap 12: page fault in callout_process 2 959d 1074d
Fatal trap 12: page fault while in kernel mode (2) 2 959d 1076d
panic: map ADDR end = ADDR, next->start = 0 1 963d 963d
Fatal trap 12: page fault in pmap_activate_sw 1 981d 981d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/main/kernel/sys/netinet/in_mcast.c:LINE 15 952d 952d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/i386/kernel/sys/netinet/in_mcast.c:LINE 21 952d 952d
panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/i386/kernel/sys/net/if.c:LINE 1669 953d 953d
freebsd boot error: panic: Assertion in_epoch(net_epoch_preempt) failed at /syzkaller/managers/main/kernel/sys/net/if.c:LINE 24 953d 954d
panic: cap_rights_is_vset:LINE (2) 1 994d 994d
Fatal trap 9: general protection fault in udp6_common_ctlinput 1 1000d 1000d
freebsd build error 4 1002d 1003d
panic: pmap_growkernel: no memory to grow kernel 4 1092d 1113d
panic: Most recently used by temp 4 1101d 1105d
panic: Bad tailq NEXT(ADDR->tqh_last) != NULL 1 1106d 1106d
panic: Assertion lock == sq->sq_lock failed at /syzkaller/managers/main/kernel/sys/kern/subr_sleepqueue.c:LINE 1 1104d 1104d
panic: Duplicate free of ADDR from zone ADDR(16) slab ADDR(241) 1 1099d 1099d
Fatal trap 12: page fault in fifo_close 58 1092d 1103d
Fatal trap 12: page fault in __mtx_assert (2) 1 1099d 1099d
panic: pmap_demote_pde: firstpte and newpte map different physical addresses 2 1085d 1085d
panic: Bad link elm ADDR next->prev != elm 11 1095d 1112d
panic: Most recently used by ip6opt 3 1078d 1109d
Fatal trap 12: page fault in uma_dbg_free 1 1099d 1099d
Fatal trap 12: page fault in uma_dbg_alloc 1 1104d 1104d
Fatal trap 9: general protection fault in sys_nlm_syscall 2 1100d 1102d
panic: sctp: no chunks on the queues 188 1062d 1153d
Fatal trap 12: page fault in ip_output 2 1104d 1105d
Fatal trap 9: general protection fault in memcmp 23 1093d 1115d
Fatal trap 12: page fault in link_elf_search_symbol 5 1065d 1105d
Fatal trap 12: page fault in pmap_remove_pte 1 1092d 1092d
freebsd test error: timed out 14 1121d 1149d
Fatal trap 9: general protection fault in sbfree 2 1141d 1148d
Fatal trap 9: general protection fault in unp_gc 1 1155d 1155d
panic: sbready: sb ADDR NULL fnrdy 1 1157d 1157d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 2 4 1140d 1140d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (2) 2 1083d 1083d
syzkaller: make target failed: failed to run ["gmake" "target"]: exit status 2 4 1085d 1085d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 1 1146d 1146d
lost connection to test machine 10 1160d 1160d