panic: failed to r[e ctlhairmea mde pmoidr y8 t
1 view
Skip to first unread message
syzbot
Dec 29, 2025, 7:49:22 PM (9 days ago) 12/29/25
to syzkaller-f...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: a3394b6a23fb m4: avoid warnings about too-long initializer..
git tree: freebsd-src
console output: https://syzkaller.appspot.com/x/log.txt?x=1263bb92580000
dashboard link: https://syzkaller.appspot.com/bug?extid=cb833acea149f8c802d3
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+cb833a...@syzkaller.appspotmail.com
panic: failed to r[e ctlhairmea mde pmoidr y8 t
icdpu i1d00 0= 771
]tp
aSntiocpp:e Ads satertion curthread->td_pinned > 0 failed at /syzkaller/managers/main/kernel/sys/sys/sched.h:192
cpuid = 1
time = 1767055674
KDB: stack backtrace:
__asan_load4_noabort+0x95db_trace_self_wrapper() at : testl %ecx,%ecx
db>
db> db_trace_self_wrapper+0xc6/frame 0xfffffe0056de0b10
kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056de0c70
vpanic() at vpanic+0x257/frame 0xfffffe0056de0e30
panic() at panic+0xb5/frame 0xfffffe0056de0ef0
DELAY() at DELAY+0x279/frame 0xfffffe0056de0f40
ns8250_putc() at ns8250_putc+0x172/frame 0xfffffe0056de0fa0
uart_cnputc() at uart_cnputc+0xab/frame 0xfffffe0056de0fe0
cnputc() at cnputc+0x130/frame 0xfffffe0056de1010
putchar() at putchar+0xf0/frame 0xfffffe0056de1150
kvprintf() at kvprintf+0x1d5/frame 0xfffffe0056de1330
_vprintf() at _vprintf+0x186/frame 0xfffffe0056de14d0
printf() at printf+0xd5/frame 0xfffffe0056de15d0
vpanic() at vpanic+0x219/frame 0xfffseffte 0$l0i5n6dees1 =79 00
db> panic() at panic+0xb5/frame 0xfffffe0056de1860
vm_pageout_oom() at vm_pageout_oom+0xce4/frame 0xfffffe0056de18f0
vm_pageout_worker() at vm_pageout_worker+0xf9b/frame 0xfffffe0056de1ea0
vm_pageout() at vm_pageout+0x2ce/frame 0xfffffe0056de1ef0
fork_exit() at fork_exit+0xcc/frame 0xfffffe0056de1f30
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0056de1f30
--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
Uptime: 8m8s
SeaBIOS (version 1.8.2-google)
Total RAM Size = 0x0000000080000000 = 2048 MiB
CPUs found: 2 Max CPUs supported: 2
SeaBIOS (version 1.8.2-google)
Machine UUID 3dbf755c-b58d-7328-6820-24604782fa6b
found virtio-scsi at 0:3
virtio-scsi vendor='Google' product='PersistentDisk' rev='1' type=0 removable=0
virtio-scsi blksize=512 sectors=6291456 = 3072 MiB
drive 0x000f26e0: PCHS=0/0/0 translation=lba LCHS=780/128/63 s=6291456
Sending Seabios boot VM event.
Booting from Hard Disk 0...
Loading /boot/loader.conf.local
- \ | / - \ | / - \ | / - \ | / - \ | / - [0;37;40m\ | / - \ | / - \ | / - \ | / - \ | / - \ | / Loading kernel...
- \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | /boot/kernel/kernel text=0x18ba48 / - \ | / - \ | / - \ | / - text=0x1fd90b7 \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | text=0x9731f4 / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | data=0x7530+0xad0 data=0x8f1370+0x50ec90 / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | syms=[0x8+0x3c7740/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ +0x8+0x1ef658| / - \ | / - \ | / - \ | / - ]
Loading configured modules...
\ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - /boot/kernel/cc_cubic.ko \ size 0x7230 at 0x43b7000
| / - \ | / - \ | / - \ | / - \ | / - \ | /boot/kernel/cc_chd.ko / size 0x8490 at 0x43bf000
loading required module 'ertt'
- \ | / - \ | / - \ | / - \ | /boot/kernel/h_ertt.ko size 0x6640 at 0x43c8000
/ - \ | / - \ | / - \ | / - \ | / - \ /boot/kernel/tcp_bbr.ko | / - \ | / size 0x99648 at 0x43cf000
- \ | / - \ | / - \ | / - \ | / - \ | / - /boot/kernel/cc_dctcp.ko \ size 0x7c88 at 0x4469000
| / - \ | / - \ | / - \ | / - /boot/kernel/filemon.ko \ size 0xc108 at 0x4471000
| / - \ | / - \ | / - \ | / - /boot/kernel/cc_vegas.ko size 0x5cd8 at 0x447e000
\ | / - \ | / - \ | / - \ | / - \ | / /boot/kernel/cryptodev.ko size 0xf738 at 0x4484000
- \ | / - \ | / - \ | / - \ | / - \ | /boot/kernel/cc_hd.ko size 0x5a98 at 0x4494000
/ - \ | / - \ | / - \ | / - \ /boot/kernel/cc_cdg.ko | size 0xbee0 at 0x449a000
/ - \ | / - \ | / - /boot/entropy \ size=0x1000
| / - \ | / - \ | / - \ | / - /boot/kernel/tcp_rack.ko \ | / - \ | / - \ size 0xea7b8 at 0x44a7000
| / - \ | / - \ | / - \ | / - /boot/kernel/sem.ko \ size 0xd9a0 at 0x4592000
| / - \ | / - \ | / - \ | / - /boot/kernel/mqueuefs.ko \ size 0x1f340 at 0x45a0000
| / - \ | / - \ | / - \ | / - /boot/kernel/pf.ko \ | / - \ | / - \ | / - \ | / - size 0x1e44c0 at 0x45c0000
\ | / - \ | / - \ | / - \ | / /boot/kernel/sctp.ko - \ | / - \ | / - \ | / - \ | / - \ size 0x219b00 at 0x47a5000
| / - \ | / - \ | / - \ | / - \ | / - \ | /boot/kernel/ipsec.ko / - \ | / - size 0x7f1e0 at 0x49bf000
\ | / - \ | / - \ | / - \ | / /boot/kernel/cc_htcp.ko size 0x5d48 at 0x4a3f000
- \ | / - GDB: no debug ports present
KDB: debugger backends: ddb
KDB: current backend: ddb
---<<BOOT>>---
Copyright (c) 1992-2025 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD is a registered trademark of The FreeBSD Foundation.
FreeBSD 16.0-CURRENT #0 n282712-a3394b6a23fb: Fri Dec 26 09:10:40 UTC 2025
root@freebsd:/syzkaller/managers/main/kernel/obj/syzkaller/managers/main/kernel/amd64.amd64/sys/SYZKALLER amd64
FreeBSD clang version 19.1.7 (https://github.com/llvm/llvm-project.git llvmorg-19.1.7-0-gcd708029e0b2)
WARNING: WITNESS option enabled, expect reduced performance.
WARNING: DIAGNOSTIC option enabled, expect reduced performance.
VT(vga): text 80x25
module cubic already present!
CPU: Intel(R) Xeon(R) CPU @ 2.20GHz (2198.54-MHz K8-class CPU)
Origin="GenuineIntel" Id=0x406f0 Family=0x6 Model=0x4f Stepping=0
Features=0x1f83fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE,SSE2,SS,HTT>
Features2=0xfefa3223<SSE3,PCLMULQDQ,VMX,SSSE3,FMA,CX16,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,AESNI,XSAVE,OSXSAVE,AVX,F16C,RDRAND,HV>
AMD Features=0x2c100800<SYSCALL,NX,Page1GB,RDTSCP,LM>
AMD Features2=0x121<LAHF,ABM,Prefetch>
Structured Extended Features=0x1c2ffb<FSGSBASE,TSCADJ,BMI1,HLE,AVX2,FDPEXC,SMEP,BMI2,ERMS,INVPCID,RTM,NFPUSG,RDSEED,ADX,SMAP>
Structured Extended Features3=0xac000400<MD_CLEAR,IBPB,STIBP,ARCH_CAP,SSBD>
XSAVE Features=0x1<XSAVEOPT>
IA32_ARCH_CAPS=0x400004c<RSBA,SKIP_L1DFL_VME>
VT-x: PAT,HLT,MTF,PAUSE,EPT,UG,VPID,VID
TSC: P-state invariant
Hypervisor: Origin = "KVMKVMKVM"
real memory = 2147483648 (2048 MB)
avail memory = 1803386880 (1719 MB)
Event timer "LAPIC" quality 600
ACPI APIC Table: <Google GOOGAPIC>
FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs
FreeBSD/SMP: 1 package(s) x 1 core(s) x 2 hardware threads
random: registering fast source Intel Secure Key Seed
random: fast provider: "Intel Secure Key Seed"
random: unblocking device.
ioapic0 <Version 1.1> irqs 0-23
Launching APs: 1
TCP_ratelimit: Is now initialized
TCP HPTS started 2 ((unbounded)) swi interrupt threads
random: entropy device external interface
kbd1 at kbdmux0
vtvga0: <VT VGA driver>
kvmclock0: <KVM paravirtual clock>
Timecounter "kvmclock" frequency 1000000000 Hz quality 975
kvmclock0: registered as a time-of-day clock, resolution 0.000001s
smbios0: <System Management BIOS> at iomem 0xf2750-0xf276e
smbios0: Entry point: v2.1 (32-bit), Version: 2.4, BCD Revision: 2.4
aesni0: <AES-CBC,AES-CCM,AES-GCM,AES-ICM,AES-XTS>
acpi0: <Google GOOGRSDT>
acpi0: Power Button (fixed)
acpi0: Sleep Button (fixed)
cpu0: <ACPI CPU> on acpi0
atrtc0: <AT realtime clock> port 0x70-0x71,0x72-0x77 irq 8 on acpi0
atrtc0: registered as a time-of-day clock, resolution 1.000000s
Event timer "RTC" frequency 32768 Hz quality 0
Timecounter "ACPI-fast" frequency 3579545 Hz quality 900
acpi_timer0: <24-bit timer at 3.579545MHz> port 0xb008-0xb00b on acpi0
pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
pci0: <ACPI PCI bus> on pcib0
isab0: <PCI-ISA bridge> at device 1.0 on pci0
isa0: <ISA bus> on isab0
pci0: <bridge> at device 1.3 (no driver attached)
virtio_pci0: <VirtIO PCI (legacy) SCSI adapter> port 0xc000-0xc03f mem 0xfe800000-0xfe80007f irq 11 at device 3.0 on pci0
vtscsi0: <VirtIO SCSI Adapter> on virtio_pci0
virtio_pci1: <VirtIO PCI (legacy) Network adapter> port 0xc040-0xc07f mem 0xfe801000-0xfe80107f irq 11 at device 4.0 on pci0
vtnet0: <VirtIO Networking Adapter> on virtio_pci1
vtnet0: Ethernet address: 42:01:0a:80:01:54
vtnet0: netmap queues/slots: TX 2/2048, RX 2/2048
000.000122 [ 452] vtnet_netmap_attach vtnet attached txq=2, txd=2048 rxq=2, rxd=2048
vgapci0: <VGA-compatible display> mem 0xfe000000-0xfe7fffff irq 10 at device 5.0 on pci0
vgapci0: Boot video device
virtio_pci2: <VirtIO PCI (legacy) Balloon adapter> port 0xc080-0xc09f irq 10 at device 6.0 on pci0
vtballoon0: <VirtIO Balloon Adapter> on virtio_pci2
virtio_pci3: <VirtIO PCI (legacy) Entropy adapter> port 0xc0a0-0xc0bf mem 0xfe802000-0xfe80203f irq 11 at device 7.0 on pci0
atkbdc0: <Keyboard controller (i8042)> port 0x60,0x64 irq 1 on acpi0
atkbd0: <AT Keyboard> irq 1 on atkbdc0
kbd0 at atkbd0
atkbd0: [GIANT-LOCKED]
psm0: <PS/2 Mouse> irq 12 on atkbdc0
psm0: [GIANT-LOCKED]
WARNING: Device "psm" is Giant locked and may be deleted before FreeBSD 16.0.
psm0: model IntelliMouse Explorer, device ID 4
uart0: <16550 or compatible> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0
uart0: console (9600,n,8,1)
uart1: <16550 or compatible> port 0x2f8-0x2ff irq 3 on acpi0
uart2: <16550 or compatible> port 0x3e8-0x3ef irq 6 on acpi0
uart3: <16550 or compatible> port 0x2e8-0x2ef irq 7 on acpi0
orm0: <ISA Option ROM> at iomem 0xeb800-0xeffff pnpid ORM0000 on isa0
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff pnpid PNP0900 on isa0
attimer0: <AT timer> at port 0x40 on isa0
Timecounter "i8254" frequency 1193182 Hz quality 0
attimer0: Can't map interrupt.
NULL mp in getnewvnode(9), tag crossmp
Timecounter "TSC-low" frequency 1099999814 Hz quality 1000
Timecounters tick every 10.000 msec
Attempting to load tcp_bbr
tcp_bbr is now available
usb_needs_explore_all: no devclass
Trying to mount root from ufs:/dev/gpt/rootfs [rw]...
WARNING: WITNESS option enabled, expect reduced performance.
WARNING: DIAGNOSTIC option enabled, expect reduced performance.
da0 at vtscsi0 bus 0 scbus0 target 1 lun 0
da0: <Google PersistentDisk 1> Fixed Direct Access SPC-4 SCSI device
da0: 300.000MB/s transfers
da0: Command Queueing enabled
da0: 3072MB (6291456 512 byte sectors)
GEOM: da0: the secondary GPT header is not in the last LBA.
GEOM: warning: da0 lba_start 3 < required min 34
WARNING: / was not properly dismounted
Setting hostuuid: c5737494-45a4-11e9-9216-00a0980e0293.
Setting hostid: 0xdcc40b08.
No suitable dump device was found.
Starting file system checks:
/dev/gpt/rootfs: INODE 72: FILE SIZE 4294967506 BEYOND END OF ALLOCATED FILE, SIZE SHOULD BE 402685952 (ADJUSTED)
/dev/gpt/rootfs: INODE 76: FILE SIZE 2147483650 BEYOND END OF ALLOCATED FILE, SIZE SHOULD BE 402685952 (ADJUSTED)
/dev/gpt/rootfs: INODE 86: FILE SIZE 2147487746 BEYOND END OF ALLOCATED FILE, SIZE SHOULD BE 268468224 (ADJUSTED)
/dev/gpt/rootfs: INODE 94: FILE SIZE 2147487747 BEYOND END OF ALLOCATED FILE, SIZE SHOULD BE 268468224 (ADJUSTED)
/dev/gpt/rootfs: INODE 100: FILE SIZE 2147487746 BEYOND END OF ALLOCATED FILE, SIZE SHOULD BE 268468224 (ADJUSTED)
/dev/gpt/rootfs: INODE 102: FILE SIZE 2147483650 BEYOND END OF ALLOCATED FILE, SIZE SHOULD BE 268468224 (ADJUSTED)
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup
syzbot found the following issue on:
HEAD commit: a3394b6a23fb m4: avoid warnings about too-long initializer..
git tree: freebsd-src
console output: https://syzkaller.appspot.com/x/log.txt?x=1263bb92580000
dashboard link: https://syzkaller.appspot.com/bug?extid=cb833acea149f8c802d3
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+cb833a...@syzkaller.appspotmail.com
panic: failed to r[e ctlhairmea mde pmoidr y8 t
icdpu i1d00 0= 771
]tp
aSntiocpp:e Ads satertion curthread->td_pinned > 0 failed at /syzkaller/managers/main/kernel/sys/sys/sched.h:192
cpuid = 1
time = 1767055674
KDB: stack backtrace:
__asan_load4_noabort+0x95db_trace_self_wrapper() at : testl %ecx,%ecx
db>
db> db_trace_self_wrapper+0xc6/frame 0xfffffe0056de0b10
kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056de0c70
vpanic() at vpanic+0x257/frame 0xfffffe0056de0e30
panic() at panic+0xb5/frame 0xfffffe0056de0ef0
DELAY() at DELAY+0x279/frame 0xfffffe0056de0f40
ns8250_putc() at ns8250_putc+0x172/frame 0xfffffe0056de0fa0
uart_cnputc() at uart_cnputc+0xab/frame 0xfffffe0056de0fe0
cnputc() at cnputc+0x130/frame 0xfffffe0056de1010
putchar() at putchar+0xf0/frame 0xfffffe0056de1150
kvprintf() at kvprintf+0x1d5/frame 0xfffffe0056de1330
_vprintf() at _vprintf+0x186/frame 0xfffffe0056de14d0
printf() at printf+0xd5/frame 0xfffffe0056de15d0
vpanic() at vpanic+0x219/frame 0xfffseffte 0$l0i5n6dees1 =79 00
db> panic() at panic+0xb5/frame 0xfffffe0056de1860
vm_pageout_oom() at vm_pageout_oom+0xce4/frame 0xfffffe0056de18f0
vm_pageout_worker() at vm_pageout_worker+0xf9b/frame 0xfffffe0056de1ea0
vm_pageout() at vm_pageout+0x2ce/frame 0xfffffe0056de1ef0
fork_exit() at fork_exit+0xcc/frame 0xfffffe0056de1f30
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0056de1f30
--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
Uptime: 8m8s
SeaBIOS (version 1.8.2-google)
Total RAM Size = 0x0000000080000000 = 2048 MiB
CPUs found: 2 Max CPUs supported: 2
SeaBIOS (version 1.8.2-google)
Machine UUID 3dbf755c-b58d-7328-6820-24604782fa6b
found virtio-scsi at 0:3
virtio-scsi vendor='Google' product='PersistentDisk' rev='1' type=0 removable=0
virtio-scsi blksize=512 sectors=6291456 = 3072 MiB
drive 0x000f26e0: PCHS=0/0/0 translation=lba LCHS=780/128/63 s=6291456
Sending Seabios boot VM event.
Booting from Hard Disk 0...
Loading /boot/loader.conf.local
- \ | / - \ | / - \ | / - \ | / - \ | / - [0;37;40m\ | / - \ | / - \ | / - \ | / - \ | / - \ | / Loading kernel...
- \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | /boot/kernel/kernel text=0x18ba48 / - \ | / - \ | / - \ | / - text=0x1fd90b7 \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | text=0x9731f4 / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | data=0x7530+0xad0 data=0x8f1370+0x50ec90 / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | syms=[0x8+0x3c7740/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ +0x8+0x1ef658| / - \ | / - \ | / - \ | / - ]
Loading configured modules...
\ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - /boot/kernel/cc_cubic.ko \ size 0x7230 at 0x43b7000
| / - \ | / - \ | / - \ | / - \ | / - \ | /boot/kernel/cc_chd.ko / size 0x8490 at 0x43bf000
loading required module 'ertt'
- \ | / - \ | / - \ | / - \ | /boot/kernel/h_ertt.ko size 0x6640 at 0x43c8000
/ - \ | / - \ | / - \ | / - \ | / - \ /boot/kernel/tcp_bbr.ko | / - \ | / size 0x99648 at 0x43cf000
- \ | / - \ | / - \ | / - \ | / - \ | / - /boot/kernel/cc_dctcp.ko \ size 0x7c88 at 0x4469000
| / - \ | / - \ | / - \ | / - /boot/kernel/filemon.ko \ size 0xc108 at 0x4471000
| / - \ | / - \ | / - \ | / - /boot/kernel/cc_vegas.ko size 0x5cd8 at 0x447e000
\ | / - \ | / - \ | / - \ | / - \ | / /boot/kernel/cryptodev.ko size 0xf738 at 0x4484000
- \ | / - \ | / - \ | / - \ | / - \ | /boot/kernel/cc_hd.ko size 0x5a98 at 0x4494000
/ - \ | / - \ | / - \ | / - \ /boot/kernel/cc_cdg.ko | size 0xbee0 at 0x449a000
/ - \ | / - \ | / - /boot/entropy \ size=0x1000
| / - \ | / - \ | / - \ | / - /boot/kernel/tcp_rack.ko \ | / - \ | / - \ size 0xea7b8 at 0x44a7000
| / - \ | / - \ | / - \ | / - /boot/kernel/sem.ko \ size 0xd9a0 at 0x4592000
| / - \ | / - \ | / - \ | / - /boot/kernel/mqueuefs.ko \ size 0x1f340 at 0x45a0000
| / - \ | / - \ | / - \ | / - /boot/kernel/pf.ko \ | / - \ | / - \ | / - \ | / - size 0x1e44c0 at 0x45c0000
\ | / - \ | / - \ | / - \ | / /boot/kernel/sctp.ko - \ | / - \ | / - \ | / - \ | / - \ size 0x219b00 at 0x47a5000
| / - \ | / - \ | / - \ | / - \ | / - \ | /boot/kernel/ipsec.ko / - \ | / - size 0x7f1e0 at 0x49bf000
\ | / - \ | / - \ | / - \ | / /boot/kernel/cc_htcp.ko size 0x5d48 at 0x4a3f000
- \ | / - GDB: no debug ports present
KDB: debugger backends: ddb
KDB: current backend: ddb
---<<BOOT>>---
Copyright (c) 1992-2025 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD is a registered trademark of The FreeBSD Foundation.
FreeBSD 16.0-CURRENT #0 n282712-a3394b6a23fb: Fri Dec 26 09:10:40 UTC 2025
root@freebsd:/syzkaller/managers/main/kernel/obj/syzkaller/managers/main/kernel/amd64.amd64/sys/SYZKALLER amd64
FreeBSD clang version 19.1.7 (https://github.com/llvm/llvm-project.git llvmorg-19.1.7-0-gcd708029e0b2)
WARNING: WITNESS option enabled, expect reduced performance.
WARNING: DIAGNOSTIC option enabled, expect reduced performance.
VT(vga): text 80x25
module cubic already present!
CPU: Intel(R) Xeon(R) CPU @ 2.20GHz (2198.54-MHz K8-class CPU)
Origin="GenuineIntel" Id=0x406f0 Family=0x6 Model=0x4f Stepping=0
Features=0x1f83fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE,SSE2,SS,HTT>
Features2=0xfefa3223<SSE3,PCLMULQDQ,VMX,SSSE3,FMA,CX16,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,AESNI,XSAVE,OSXSAVE,AVX,F16C,RDRAND,HV>
AMD Features=0x2c100800<SYSCALL,NX,Page1GB,RDTSCP,LM>
AMD Features2=0x121<LAHF,ABM,Prefetch>
Structured Extended Features=0x1c2ffb<FSGSBASE,TSCADJ,BMI1,HLE,AVX2,FDPEXC,SMEP,BMI2,ERMS,INVPCID,RTM,NFPUSG,RDSEED,ADX,SMAP>
Structured Extended Features3=0xac000400<MD_CLEAR,IBPB,STIBP,ARCH_CAP,SSBD>
XSAVE Features=0x1<XSAVEOPT>
IA32_ARCH_CAPS=0x400004c<RSBA,SKIP_L1DFL_VME>
VT-x: PAT,HLT,MTF,PAUSE,EPT,UG,VPID,VID
TSC: P-state invariant
Hypervisor: Origin = "KVMKVMKVM"
real memory = 2147483648 (2048 MB)
avail memory = 1803386880 (1719 MB)
Event timer "LAPIC" quality 600
ACPI APIC Table: <Google GOOGAPIC>
FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs
FreeBSD/SMP: 1 package(s) x 1 core(s) x 2 hardware threads
random: registering fast source Intel Secure Key Seed
random: fast provider: "Intel Secure Key Seed"
random: unblocking device.
ioapic0 <Version 1.1> irqs 0-23
Launching APs: 1
TCP_ratelimit: Is now initialized
TCP HPTS started 2 ((unbounded)) swi interrupt threads
random: entropy device external interface
kbd1 at kbdmux0
vtvga0: <VT VGA driver>
kvmclock0: <KVM paravirtual clock>
Timecounter "kvmclock" frequency 1000000000 Hz quality 975
kvmclock0: registered as a time-of-day clock, resolution 0.000001s
smbios0: <System Management BIOS> at iomem 0xf2750-0xf276e
smbios0: Entry point: v2.1 (32-bit), Version: 2.4, BCD Revision: 2.4
aesni0: <AES-CBC,AES-CCM,AES-GCM,AES-ICM,AES-XTS>
acpi0: <Google GOOGRSDT>
acpi0: Power Button (fixed)
acpi0: Sleep Button (fixed)
cpu0: <ACPI CPU> on acpi0
atrtc0: <AT realtime clock> port 0x70-0x71,0x72-0x77 irq 8 on acpi0
atrtc0: registered as a time-of-day clock, resolution 1.000000s
Event timer "RTC" frequency 32768 Hz quality 0
Timecounter "ACPI-fast" frequency 3579545 Hz quality 900
acpi_timer0: <24-bit timer at 3.579545MHz> port 0xb008-0xb00b on acpi0
pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
pci0: <ACPI PCI bus> on pcib0
isab0: <PCI-ISA bridge> at device 1.0 on pci0
isa0: <ISA bus> on isab0
pci0: <bridge> at device 1.3 (no driver attached)
virtio_pci0: <VirtIO PCI (legacy) SCSI adapter> port 0xc000-0xc03f mem 0xfe800000-0xfe80007f irq 11 at device 3.0 on pci0
vtscsi0: <VirtIO SCSI Adapter> on virtio_pci0
virtio_pci1: <VirtIO PCI (legacy) Network adapter> port 0xc040-0xc07f mem 0xfe801000-0xfe80107f irq 11 at device 4.0 on pci0
vtnet0: <VirtIO Networking Adapter> on virtio_pci1
vtnet0: Ethernet address: 42:01:0a:80:01:54
vtnet0: netmap queues/slots: TX 2/2048, RX 2/2048
000.000122 [ 452] vtnet_netmap_attach vtnet attached txq=2, txd=2048 rxq=2, rxd=2048
vgapci0: <VGA-compatible display> mem 0xfe000000-0xfe7fffff irq 10 at device 5.0 on pci0
vgapci0: Boot video device
virtio_pci2: <VirtIO PCI (legacy) Balloon adapter> port 0xc080-0xc09f irq 10 at device 6.0 on pci0
vtballoon0: <VirtIO Balloon Adapter> on virtio_pci2
virtio_pci3: <VirtIO PCI (legacy) Entropy adapter> port 0xc0a0-0xc0bf mem 0xfe802000-0xfe80203f irq 11 at device 7.0 on pci0
atkbdc0: <Keyboard controller (i8042)> port 0x60,0x64 irq 1 on acpi0
atkbd0: <AT Keyboard> irq 1 on atkbdc0
kbd0 at atkbd0
atkbd0: [GIANT-LOCKED]
psm0: <PS/2 Mouse> irq 12 on atkbdc0
psm0: [GIANT-LOCKED]
WARNING: Device "psm" is Giant locked and may be deleted before FreeBSD 16.0.
psm0: model IntelliMouse Explorer, device ID 4
uart0: <16550 or compatible> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0
uart0: console (9600,n,8,1)
uart1: <16550 or compatible> port 0x2f8-0x2ff irq 3 on acpi0
uart2: <16550 or compatible> port 0x3e8-0x3ef irq 6 on acpi0
uart3: <16550 or compatible> port 0x2e8-0x2ef irq 7 on acpi0
orm0: <ISA Option ROM> at iomem 0xeb800-0xeffff pnpid ORM0000 on isa0
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff pnpid PNP0900 on isa0
attimer0: <AT timer> at port 0x40 on isa0
Timecounter "i8254" frequency 1193182 Hz quality 0
attimer0: Can't map interrupt.
NULL mp in getnewvnode(9), tag crossmp
Timecounter "TSC-low" frequency 1099999814 Hz quality 1000
Timecounters tick every 10.000 msec
Attempting to load tcp_bbr
tcp_bbr is now available
usb_needs_explore_all: no devclass
Trying to mount root from ufs:/dev/gpt/rootfs [rw]...
WARNING: WITNESS option enabled, expect reduced performance.
WARNING: DIAGNOSTIC option enabled, expect reduced performance.
da0 at vtscsi0 bus 0 scbus0 target 1 lun 0
da0: <Google PersistentDisk 1> Fixed Direct Access SPC-4 SCSI device
da0: 300.000MB/s transfers
da0: Command Queueing enabled
da0: 3072MB (6291456 512 byte sectors)
GEOM: da0: the secondary GPT header is not in the last LBA.
GEOM: warning: da0 lba_start 3 < required min 34
WARNING: / was not properly dismounted
Setting hostuuid: c5737494-45a4-11e9-9216-00a0980e0293.
Setting hostid: 0xdcc40b08.
No suitable dump device was found.
Starting file system checks:
/dev/gpt/rootfs: INODE 72: FILE SIZE 4294967506 BEYOND END OF ALLOCATED FILE, SIZE SHOULD BE 402685952 (ADJUSTED)
/dev/gpt/rootfs: INODE 76: FILE SIZE 2147483650 BEYOND END OF ALLOCATED FILE, SIZE SHOULD BE 402685952 (ADJUSTED)
/dev/gpt/rootfs: INODE 86: FILE SIZE 2147487746 BEYOND END OF ALLOCATED FILE, SIZE SHOULD BE 268468224 (ADJUSTED)
/dev/gpt/rootfs: INODE 94: FILE SIZE 2147487747 BEYOND END OF ALLOCATED FILE, SIZE SHOULD BE 268468224 (ADJUSTED)
/dev/gpt/rootfs: INODE 100: FILE SIZE 2147487746 BEYOND END OF ALLOCATED FILE, SIZE SHOULD BE 268468224 (ADJUSTED)
/dev/gpt/rootfs: INODE 102: FILE SIZE 2147483650 BEYOND END OF ALLOCATED FILE, SIZE SHOULD BE 268468224 (ADJUSTED)
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup
Reply all
Reply to author
Forward
0 new messages