SYZFAIL: SIGSEGV

[syzbot]

Hello,

syzbot found the following issue on:

HEAD commit: 574816356834 socket: Fix a race in the SO_SPLICE state mac..
git tree: freebsd-src
console output: https://syzkaller.appspot.com/x/log.txt?x=13aebc4c580000
dashboard link: https://syzkaller.appspot.com/bug?extid=3412e5ba8717deb6fdac

Unfortunately, I don't have any reproducer for this issue yet.

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+3412e5...@syzkaller.appspotmail.com

SYZFAIL: SIGSEGV
Connection to 10.128.0.222 closed by remote host.
if_delmulti_locked: detaching ifnet instance 0xfffffe0059db1800
if_delmulti_locked: detaching ifnet instance 0xfffffe0059db1800
if_delmulti_locked: detaching ifnet instance 0xfffffe0059db1800
if_delmulti_locked: detaching ifnet instance 0xfffffe005a0e3000
if_delmulti_locked: detaching ifnet instance 0xfffffe005a0e3000
if_delmulti_locked: detaching ifnet instance 0xfffffe005a0e3000
if_delmulti_locked: detaching ifnet instance 0xfffffe0059db4000
if_delmulti_locked: detaching ifnet instance 0xfffffe0059db4000
if_delmulti_locked: detaching ifnet instance 0xfffffe0059db4000
if_delmulti_locked: detaching ifnet instance 0xfffffe0059e0d800
if_delmulti_locked: detaching ifnet instance 0xfffffe0059e0d800
if_delmulti_locked: detaching ifnet instance 0xfffffe0059e0d800
pid 1066 (sh), jid 0, uid 0: exited on signal 11 (core dumped)
pid 1088 (dhclient), jid 0, uid 0: exited on signal 11 (core dumped)
pid 736 (sh), jid 0, uid 0: exited on signal 11 (core dumped)
pid 338 (dhclient), jid 0, uid 0: exited on signal 11 (core dumped)
pid 335 (dhclient), jid 0, uid 0: exited on signal 11 (core dumped)
if_delmulti_locked: detaching ifnet instance 0xfffffe0059e0d800
if_delmulti_locked: detaching ifnet instance 0xfffffe0059e0d800
if_delmulti_locked: detaching ifnet instance 0xfffffe0059e0d800
pid 1081 (dhclient), jid 0, uid 0: exited on signal 11 (core dumped)
if_delmulti_locked: detaching ifnet instance 0xfffffe005a0e3000
if_delmulti_locked: detaching ifnet instance 0xfffffe005a0e3000
if_delmulti_locked: detaching ifnet instance 0xfffffe005a0e3000
if_delmulti_locked: detaching ifnet instance 0xfffffe0059db4000
if_delmulti_locked: detaching ifnet instance 0xfffffe0059db4000
if_delmulti_locked: detaching ifnet instance 0xfffffe0059db4000
if_delmulti_locked: detaching ifnet instance 0xfffffe0059db1800
if_delmulti_locked: detaching ifnet instance 0xfffffe0059db1800
if_delmulti_locked: detaching ifnet instance 0xfffffe0059db1800


---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title

If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)

If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report

If you want to undo deduplication, reply with:
#syz undup