Hello,
syzbot found the following crash on:
HEAD commit: 85eaade9 Fix integer overflow in r346386.
git tree: freebsd
console output:
https://syzkaller.appspot.com/x/log.txt?x=10951e9ca00000
dashboard link:
https://syzkaller.appspot.com/bug?extid=fd317bf832b72a6e43cf
Unfortunately, I don't have any reproducer for this crash yet.
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by:
syzbot+fd317b...@syzkaller.appspotmail.com
panic: inp_leave_group: imf_sources not empty
cpuid = 1
time = 1558084352
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame
0xfffffe001fb82520
vpanic() at vpanic+0x1e0/frame 0xfffffe001fb82580
panic() at panic+0x43/frame 0xfffffe001fb825e0
inp_setmoptions() at inp_setmoptions+0x40bd/frame 0xfffffe001fb827c0
ip_ctloutput() at ip_ctloutput+0x80f/frame 0xfffffe001fb82810
rip_ctloutput() at rip_ctloutput+0x2c9/frame 0xfffffe001fb82850
sosetopt() at sosetopt+0x101/frame 0xfffffe001fb828d0
kern_setsockopt() at kern_setsockopt+0x158/frame 0xfffffe001fb82950
sys_setsockopt() at sys_setsockopt+0x33/frame 0xfffffe001fb82980
amd64_syscall() at amd64_syscall+0x436/frame 0xfffffe001fb82ab0
fast_syscall_common() at fast_syscall_common+0x101/frame 0xfffffe001fb82ab0
--- syscall (198, FreeBSD ELF64, nosys), rip = 0x41309a, rsp =
0x7fffdff9af38, rbp = 0x5 ---
KDB: enter: panic
[ thread pid 1871 tid 100525 ]
Stopped at kdb_enter+0x6a: movq $0,kdb_why
---
This bug is generated by a bot. It may contain errors.
See
https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at
syzk...@googlegroups.com.
syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.