syzbot


panic: tcp_output: mbuf chain shorter than expected: 0 + 60 + 12 - 0 != 60

Status: fixed on 2019/03/23 14:21
Reported-by: syzbot+d25a5352bcdf40acdbb8@syzkaller.appspotmail.com
Fix commit: 05fb056c068d Fix a KASSERT() in tcp_output().
First crash: 1862d, last: 1862d

Sample crash report:
panic: tcp_output: mbuf chain shorter than expected: 0 + 60 + 12 - 0 != 60
cpuid = 0
time = 3571
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe00212685a0
vpanic() at vpanic+0x1e0/frame 0xfffffe0021268600
panic() at panic+0x43/frame 0xfffffe0021268660
tcp_output() at tcp_output+0x3fe2/frame 0xfffffe0021268830
tcp_usr_connect() at tcp_usr_connect+0x25c/frame 0xfffffe0021268880
soconnectat() at soconnectat+0x183/frame 0xfffffe00212688e0
kern_connectat() at kern_connectat+0x1ff/frame 0xfffffe0021268940
sys_connect() at sys_connect+0xd9/frame 0xfffffe0021268980
amd64_syscall() at amd64_syscall+0x436/frame 0xfffffe0021268ab0
fast_syscall_common() at fast_syscall_common+0x101/frame 0xfffffe0021268ab0
--- syscall (198, FreeBSD ELF64, nosys), rip = 0x412e5a, rsp = 0x7fffdffdcf38, rbp = 0x3 ---
KDB: enter: panic
[ thread pid 14964 tid 100293 ]
Stopped at      kdb_enter+0x6a: movq    $0,kdb_why

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/03/15 22:51 freebsd 84b9791bcc2c bab43553 console log report ci-freebsd-main
* Struck through repros no longer work on HEAD.