panic: mtx_lock_spin: recursed on non-recursive mutex msgbuf @ /syzkaller/managers/main/kernel/sys/kern/subr_msgbuf.c:198 cpuid = 0 time = 1704893496 KDB: stack backtrace: SeaBIOS (version 1.8.2-google) Total RAM Size = 0x0000000080000000 = 2048 MiB CPUs found: 2 Max CPUs supported: 2 SeaBIOS (version 1.8.2-google) Machine UUID e2da8d5f-9a05-b5f6-3feb-186da846b506 found virtio-scsi at 0:3 virtio-scsi vendor='Google' product='PersistentDisk' rev='1' type=0 removable=0 virtio-scsi blksize=512 sectors=6291456 = 3072 MiB drive 0x000f28a0: PCHS=0/0/0 translation=lba LCHS=780/128/63 s=6291456 Sending Seabios boot VM event. Booting from Hard Disk 0... Loading /boot/loader.conf.local -\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/Loading kernel... -\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|//boot/kernel/kernel text=0x1796c0 -\|/-\|/-\|/-text=0x1eec927 \|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/text=0x8febf4 -\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/data=0x71a0 data=0x878a70+0x57f590 -\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-syms=[0x8+0x39bc88\|/-\|/-\|/-\|/-\|/-\|/-\|/-\+0x8+0x1cec68|/-\|/-\|/-\|/] Loading configured modules... -\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|//boot/kernel/sctp.ko -\|/-\|/-\|/-\|/-\|/-\|/size 0x2e2038 at 0x3f6b000 -\|/-\|/-\|/-\|/boot/kernel/pf.ko /-\|/-\|/-\|/-\|/-size 0x212488 at 0x424e000 \|/-\|/-\|/-\|//boot/kernel/tcp_rack.ko -\|/-\|/-\|size 0x12e190 at 0x4461000 /-\|/-\|/-\|/-\/boot/kernel/mqueuefs.ko |size 0x268c8 at 0x4590000 /-\|/-\|/-\|/-\|/-\/boot/kernel/filemon.ko size 0xd920 at 0x45b7000 |/-\|/-\|/-\|/-\|/-/boot/kernel/cryptodev.ko \size 0x15910 at 0x45c5000 |/-\|/-\|/-\|/-/boot/kernel/cc_vegas.ko size 0x62d8 at 0x45db000 \|/-\|/-\|/boot/entropy /size=0x1000 -\|/-\|/-\|/-\|/boot/kernel/cc_htcp.ko size 0x7960 at 0x45e3000 /-\|/-\|/-\|/-\|/-\/boot/kernel/cc_hd.ko size 0x60b0 at 0x45eb000 |/-\|/-\|/-\|/-/boot/kernel/sem.ko \size 0x10bc0 at 0x45f2000 |/-\|/-\|/-\|/-/boot/kernel/cc_cubic.ko \size 0x9788 at 0x4603000 |/-\|/-\|/-\|/-/boot/kernel/cc_dctcp.ko \size 0x87a8 at 0x460d000 |/-\|/-\|/-\|/-\|/-\|/boot/kernel/cc_chd.ko /size 0x8f30 at 0x4616000 -\|/-\|/-\|/-\|/-\|/-/boot/kernel/tcp_bbr.ko \|/-\|/-size 0xd5638 at 0x461f000 \|/-\|/-\|/-\|//boot/kernel/cc_cdg.ko -size 0xdb98 at 0x46f5000 \|/-\|/-\|/-\|//boot/kernel/ipsec.ko -\|/-size 0x7eac0 at 0x4703000 \|/-\|GDB: no debug ports present KDB: debugger backends: ddb KDB: current backend: ddb ---<>--- Copyright (c) 1992-2024 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD is a registered trademark of The FreeBSD Foundation. FreeBSD 15.0-CURRENT #0 n267481-1fa4ddcc6de6: Wed Jan 10 12:53:22 UTC 2024 root@freebsd:/syzkaller/managers/main/kernel/obj/syzkaller/managers/main/kernel/amd64.amd64/sys/SYZKALLER amd64 FreeBSD clang version 17.0.6 (https://github.com/llvm/llvm-project.git llvmorg-17.0.6-0-g6009708b4367) WARNING: WITNESS option enabled, expect reduced performance. WARNING: DIAGNOSTIC option enabled, expect reduced performance. VT(vga): text 80x25 module cubic already present! CPU: Intel(R) Xeon(R) CPU @ 2.20GHz (2200.01-MHz K8-class CPU) Origin="GenuineIntel" Id=0x406f0 Family=0x6 Model=0x4f Stepping=0 Features=0x1f83fbff Features2=0xfefa3223 AMD Features=0x2c100800 AMD Features2=0x121 Structured Extended Features=0x1c2ffb Structured Extended Features3=0xac000400 XSAVE Features=0x1 IA32_ARCH_CAPS=0x400004c VT-x: PAT,HLT,MTF,PAUSE,EPT,UG,VPID,VID TSC: P-state invariant Hypervisor: Origin = "KVMKVMKVM" real memory = 2147483648 (2048 MB) avail memory = 1799462912 (1716 MB) Event timer "LAPIC" quality 600 ACPI APIC Table: FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs FreeBSD/SMP: 1 package(s) x 1 core(s) x 2 hardware threads random: registering fast source Intel Secure Key RNG random: fast provider: "Intel Secure Key RNG" random: unblocking device. ioapic0 irqs 0-23 Launching APs: 1 TCP_ratelimit: Is now initialized TCP Hpts created 2 swi interrupt threads and bound 0 to cpus random: entropy device external interface kbd1 at kbdmux0 vtvga0: kvmclock0: Timecounter "kvmclock" frequency 1000000000 Hz quality 975 kvmclock0: registered as a time-of-day clock, resolution 0.000001s smbios0: at iomem 0xf2910-0xf292e smbios0: Version: 2.4, BCD Revision: 2.4 aesni0: acpi0: acpi0: Power Button (fixed) acpi0: Sleep Button (fixed) cpu0: on acpi0 atrtc0: port 0x70-0x71,0x72-0x77 irq 8 on acpi0 atrtc0: registered as a time-of-day clock, resolution 1.000000s Event timer "RTC" frequency 32768 Hz quality 0 Timecounter "ACPI-fast" frequency 3579545 Hz quality 900 acpi_timer0: <24-bit timer at 3.579545MHz> port 0xb008-0xb00b on acpi0 pcib0: port 0xcf8-0xcff on acpi0 pci0: on pcib0 isab0: at device 1.0 on pci0 isa0: on isab0 pci0: at device 1.3 (no driver attached) virtio_pci0: port 0xc000-0xc03f mem 0xfe800000-0xfe80007f irq 11 at device 3.0 on pci0 vtscsi0: on virtio_pci0 virtio_pci1: port 0xc040-0xc07f mem 0xfe801000-0xfe80107f irq 11 at device 4.0 on pci0 vtnet0: on virtio_pci1 vtnet0: Ethernet address: 42:01:0a:80:00:03 vtnet0: netmap queues/slots: TX 2/2048, RX 2/2048 000.000127 [ 452] vtnet_netmap_attach vtnet attached txq=2, txd=2048 rxq=2, rxd=2048 vgapci0: mem 0xfe000000-0xfe7fffff irq 10 at device 5.0 on pci0 vgapci0: Boot video device virtio_pci2: port 0xc080-0xc09f mem 0xfe802000-0xfe80207f irq 10 at device 6.0 on pci0 vtballoon0: on virtio_pci2 virtio_pci3: port 0xc0a0-0xc0bf mem 0xfe803000-0xfe80303f irq 11 at device 7.0 on pci0 atkbdc0: port 0x60,0x64 irq 1 on acpi0 atkbd0: irq 1 on atkbdc0 kbd0 at atkbd0 atkbd0: [GIANT-LOCKED] psm0: irq 12 on atkbdc0 psm0: [GIANT-LOCKED] WARNING: Device "psm" is Giant locked and may be deleted before FreeBSD 15.0. psm0: model IntelliMouse Explorer, device ID 4 uart0: <16550 or compatible> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0 uart0: console (9600,n,8,1) uart1: <16550 or compatible> port 0x2f8-0x2ff irq 3 on acpi0 uart2: <16550 or compatible> port 0x3e8-0x3ef irq 6 on acpi0 uart3: <16550 or compatible> port 0x2e8-0x2ef irq 7 on acpi0 orm0: at iomem 0xeb800-0xeffff pnpid ORM0000 on isa0 vga0: at port 0x3c0-0x3df iomem 0xa0000-0xbffff pnpid PNP0900 on isa0 attimer0: at port 0x40 on isa0 Timecounter "i8254" frequency 1193182 Hz quality 0 attimer0: Can't map interrupt. NULL mp in getnewvnode(9), tag crossmp Timecounter "TSC-low" frequency 1099994963 Hz quality 1000 Timecounters tick every 10.000 msec Attempting to load tcp_bbr tcp_bbr is now available usb_needs_explore_all: no devclass Trying to mount root from ufs:/dev/gpt/rootfs [rw]... Expensive callout(9) function: 0xffffffff810feb50(0xffffffff82f87820) 0.021068619 s WARNING: WITNESS option enabled, expect reduced performance. WARNING: DIAGNOSTIC option enabled, expect reduced performance. da0 at vtscsi0 bus 0 scbus0 target 1 lun 0 da0: Fixed Direct Access SPC-4 SCSI device da0: 300.000MB/s transfers da0: Command Queueing enabled da0: 3072MB (6291456 512 byte sectors) GEOM: da0: the secondary GPT header is not in the last LBA. WARNING: / was not properly dismounted WARNING: /: mount pending error: blocks 2136 files 6 Setting hostuuid: c5737494-45a4-11e9-9216-00a0980e0293. Setting hostid: 0xdcc40b08. No suitable dump device was found. Starting file system checks: /dev/gpt/rootfs: INCORRECT BLOCK COUNT I=511 (8 should be 0) (CORRECTED) /dev/gpt/rootfs: INCORRECT BLOCK COUNT I=739 (8 should be 0) (CORRECTED) /dev/gpt/rootfs: INCORRECT BLOCK COUNT I=745 (1984 should be 1856) (CORRECTED) /dev/gpt/rootfs: INODE 745: FILE SIZE 983040 BEYOND END OF ALLOCATED FILE, SIZE SHOULD BE 917504 (ADJUSTED) /dev/gpt/rootfs: INCORRECT BLOCK COUNT I=760 (8 should be 0) (CORRECTED) /dev/gpt/rootfs: INCORRECT BLOCK COUNT I=762 (2112 should be 1216) (CORRECTED) /dev/gpt/rootfs: INODE 762: FILE SIZE 1048576 BEYOND END OF ALLOCATED FILE, SIZE SHOULD BE 589824 (ADJUSTED) /dev/gpt/rootfs: INCORRECT BLOCK COUNT I=765 (8 should be 0) (CORRECTED) /dev/gpt/rootfs: INCORRECT BLOCK COUNT I=767 (384 should be 192) (CORRECTED) /dev/gpt/rootfs: INCORRECT BLOCK COUNT I=804 (128 should be 0) (CORRECTED)