panic: inp_leave_group: imf_sources not empty

Status: fixed on 2019/05/15 06:10
Reported-by: syzbot+ba7c4943547e0604faca@syzkaller.appspotmail.com
Fix commit: 5a1e222bfda7 Close some races in multicast socket option handling.
First crash: 2697d, last: 2676d
▶ ▼ Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
freebsd panic: inp_leave_group: imf_sources not empty (2) 2 syz, C 70 2638d 2672d 0/2 closed as invalid on 2021/01/02 13:11

Sample crash report:
panic: inp_leave_group: imf_sources not empty
cpuid = 0
time = 1555940445
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe0021240520
vpanic() at vpanic+0x1e0/frame 0xfffffe0021240580
panic() at panic+0x43/frame 0xfffffe00212405e0
inp_setmoptions() at inp_setmoptions+0x40bd/frame 0xfffffe00212407c0
ip_ctloutput() at ip_ctloutput+0x80f/frame 0xfffffe0021240810
rip_ctloutput() at rip_ctloutput+0x2c9/frame 0xfffffe0021240850
sosetopt() at sosetopt+0x101/frame 0xfffffe00212408d0
kern_setsockopt() at kern_setsockopt+0x158/frame 0xfffffe0021240950
sys_setsockopt() at sys_setsockopt+0x33/frame 0xfffffe0021240980
amd64_syscall() at amd64_syscall+0x436/frame 0xfffffe0021240ab0
fast_syscall_common() at fast_syscall_common+0x101/frame 0xfffffe0021240ab0
--- syscall (0, FreeBSD ELF64, nosys), rip = 0x45763a, rsp = 0x7fffdffdcf88, rbp = 0x6b5bc0 ---
KDB: enter: panic
[ thread pid 1118 tid 100822 ]
Stopped at      kdb_enter+0x6a: movq    $0,kdb_why

Crashes (6):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/04/22 13:43 freebsd b537b150e374 0a77c33c console log report syz C ci-freebsd-main
2019/05/12 22:31 freebsd 94238055e0a2 5f302c04 console log report ci-freebsd-main
2019/05/03 22:37 freebsd f8eceae59d49 d28f4ce5 console log report ci-freebsd-main
2019/04/30 16:30 freebsd 8d42a256bc31 20f16bef console log report ci-freebsd-main
2019/04/22 12:48 freebsd b537b150e374 0a77c33c console log report ci-freebsd-main
2019/04/22 01:40 freebsd 2b63616933be b0e8efcb console log report ci-freebsd-main
* Struck through repros no longer work on HEAD.