syzbot


panic: receive 1a: so ADDR, so_type 3, m ADDR, m_type -343

Status: closed as dup on 2019/12/13 12:37
Reported-by: syzbot+0bf82748d4a7ee25a260@syzkaller.appspotmail.com
First crash: 1806d, last: 1806d
Duplicate of
Title Repro Cause bisect Fix bisect Count Last Reported
panic: receive 1a: so ADDR, so_type 3, m ADDR, m_type 0 syz 299 1729d 1878d

Sample crash report:
login: panic: receive 1a: so 0xfffffd8036fb2480, so_type 3, m 0xfffffd8034f30000, m_type -343
Stopped at      db_enter+0x18:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*439946  64585      0           0          0    0  dhclient
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic(ffffffff82193a56) at panic+0x15c sys/kern/subr_prf.c:207
soreceive(fffffd8036fb2480,0,ffff800014896958,0,0,ffff800014896864) at soreceive+0x170a sys/kern/uipc_socket.c:952
soo_read(fffffd8037ff6708,ffff800014896958,0) at soo_read+0x53 sys/kern/sys_socket.c:70
dofilereadv(ffff8000ffff8ed8,6,ffff800014896958,0,ffff800014896a40) at dofilereadv+0x1a2 sys/kern/sys_generic.c:236
sys_read(ffff8000ffff8ed8,ffff8000148969f0,ffff800014896a40) at sys_read+0x83 sys/kern/sys_generic.c:156
syscall(ffff800014896ac0) at syscall+0x507 sys/arch/amd64/amd64/trap.c:555
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7f7ffffbb5e0, count: 7
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb> 
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
receive 1a: so 0xfffffd8036fb2480, so_type 3, m 0xfffffd8034f30000, m_type -343
ddb> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic(ffffffff82193a56) at panic+0x15c sys/kern/subr_prf.c:207
soreceive(fffffd8036fb2480,0,ffff800014896958,0,0,ffff800014896864) at soreceive+0x170a sys/kern/uipc_socket.c:952
soo_read(fffffd8037ff6708,ffff800014896958,0) at soo_read+0x53 sys/kern/sys_socket.c:70
dofilereadv(ffff8000ffff8ed8,6,ffff800014896958,0,ffff800014896a40) at dofilereadv+0x1a2 sys/kern/sys_generic.c:236
sys_read(ffff8000ffff8ed8,ffff8000148969f0,ffff800014896a40) at sys_read+0x83 sys/kern/sys_generic.c:156
syscall(ffff800014896ac0) at syscall+0x507 sys/arch/amd64/amd64/trap.c:555
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7f7ffffbb5e0, count: -8
ddb> show registers
rdi                                0
rsi                              0x1
rbp               0xffff8000148966a0
rbx               0xffff800014896750
rdx                              0x2
rcx                              0x1
rax                              0x1
r8                0xffff800014896660
r9                               0x1
r10               0xb394a2cb32cd04b1
r11               0x39e94cde134afbcc
r12                     0x3000000008
r13               0xffff8000148966b0
r14                            0x100
r15                              0x1
rip               0xffffffff816a1568    db_enter+0x18
cs                               0x8
rflags                         0x246
rsp               0xffff800014896690
ss                              0x10
db_enter+0x18:  addq    $0x8,%rsp
ddb> show proc
PROC (dhclient) pid=439946 stat=onproc
    flags process=0 proc=0
    pri=50, usrpri=50, nice=20
    forw=0xffffffffffffffff, list=0xffff8000ffff8280,0xffff8000ffff9160
    process=0xffff8000ffff6010 user=0xffff800014891000, vmspace=0xfffffd803f012550
    estcpu=0, cpticks=1, pctcpu=0.0
    user=0, sys=1, intr=0
ddb> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 62925  274952  61899      0  3        0x82  thrsleep      syz-execprog
 62925   65459  61899      0  3   0x4000082  nanosleep     syz-execprog
 62925  375850  61899      0  3   0x4000082  thrsleep      syz-execprog
 62925  321743  61899      0  3   0x4000082  thrsleep      syz-execprog
 62925  506206  61899      0  2   0x4000002                syz-execprog
 62925  496997  61899      0  3   0x4000082  thrsleep      syz-execprog
 62925   17253  61899      0  3   0x4000082  thrsleep      syz-execprog
 61899  114605  26628      0  3    0x10008a  pause         ksh
 26628  293340  96417      0  3        0x92  select        sshd
 35255  200999      1      0  3    0x100083  ttyin         getty
 96417  175274      1      0  3        0x80  select        sshd
 69554  118292  65757     73  3    0x100090  kqread        syslogd
 65757  505011      1      0  3    0x100082  netio         syslogd
 53982  224210      1     77  3    0x100090  poll          dhclient
*64585  439946      1      0  7           0                dhclient
 26969  231843      0      0  3     0x14200  pgzero        zerothread
 61110  117985      0      0  3     0x14200  aiodoned      aiodoned
 21061  271845      0      0  3     0x14200  syncer        update
  9744  474906      0      0  3     0x14200  cleaner       cleaner
 87459  375537      0      0  3     0x14200  reaper        reaper
 48169  281084      0      0  3     0x14200  pgdaemon      pagedaemon
 29690  232307      0      0  3     0x14200  bored         crynlk
 56253  268957      0      0  3     0x14200  bored         crypto
 98577  273584      0      0  3  0x40014200  acpi0         acpi0
 34157   96941      0      0  3     0x14200  bored         softnet
 82461  139844      0      0  3     0x14200  bored         systqmp
 11313  459996      0      0  3     0x14200  bored         systq
 55827   20793      0      0  3  0x40014200  bored         softclock
  9201  516726      0      0  3  0x40014200                idle0
 78418  181759      0      0  3     0x14200  bored         smr
     1  376280      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb> show all locks
No such command
ddb> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf  9438   6318K    6320K  78643K     10539        0
            pcb    13      8K       8K  78643K        13        0
         rtable    63      1K       2K  78643K       159        0
         ifaddr    24      7K       9K  78643K        33        0
       counters    19     16K      16K  78643K        19        0
       ioctlops     0      0K       2K  78643K        14        0
          mount     1      1K       1K  78643K         1        0
         vnodes  1180     74K      74K  78643K      1185        0
      UFS quota     1     32K      32K  78643K         1        0
      UFS mount     5     36K      36K  78643K         5        0
            shm     2      1K       1K  78643K         2        0
         VM map     2      0K       0K  78643K         2        0
            sem     2      0K       0K  78643K         2        0
        dirhash    12      2K       2K  78643K        12        0
           ACPI  1794    195K     288K  78643K     12646        0
      file desc     1      0K      12K  78643K        18        0
           proc    47     38K      54K  78643K       318        0
    NFS srvsock     1      0K       0K  78643K         1        0
     NFS daemon     1     16K      16K  78643K         1        0
       in_multi    11      0K       1K  78643K        22        0
    ether_multi     1      0K       0K  78643K         1        0
    ISOFS mount     1     32K      32K  78643K         1        0
  MSDOSFS mount     1     16K      16K  78643K         1        0
           ttys    18     79K      79K  78643K        18        0
           exec     0      0K       1K  78643K       171        0
        pagedep     1      8K       8K  78643K         1        0
       inodedep     1     32K      32K  78643K         1        0
         newblk     1      0K       0K  78643K         1        0
        VM swap     7     26K      26K  78643K         7        0
       UVM amap    68      3K      12K  78643K       859        0
       UVM aobj     2      2K       2K  78643K         2        0
        memdesc     1      4K       4K  78643K         1        0
    crypto data     1      1K       1K  78643K         1        0
            NDP     3      0K       0K  78643K         6        0
           temp    22   3013K    3077K  78643K      3064        0
      SYN cache     2     16K      16K  78643K         2        0
ddb> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
arp         64        4    0        2     1     0     1     1     0     8    0
rtpcb       80       17    0       15     1     0     1     1     0     8    0
rtentry    112       34    0       11     1     0     1     1     0     8    0
unpcb      120       27    0       19     1     0     1     1     0     8    0
syncache   264        5    0        5     1     1     0     1     0     8    0
tcpcb      544        8    0        5     1     0     1     1     0     8    0
inpcb      280       27    0       21     1     0     1     1     0     8    0
nd6         48        2    0        2     1     0     1     1     0     8    1
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256      167    0       47    11     0    11    11     0     8    2
art_table   32      168    0       47     2     0     2     2     0     8    0
art_node    16       33    0       12     1     0     1     1     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino1pl    128     1415    0       20    46     0    46    46     0     8    1
ffsino     240     1415    0       20    83     0    83    83     0     8    0
nchpl      144     1642    0       40    60     0    60    60     0     8    0
uvmvnodes   72     1424    0        0    26     0    26    26     0     8    0
vnodes     208     1424    0        0    75     0    75    75     0     8    0
namei      1024    3874    0     3874     1     0     1     1     0     8    1
scxspl     192     3997    0     3997     2     1     1     2     0     8    1
plimitpl   152       14    0        9     1     0     1     1     0     8    0
sigapl     432      197    0      187     2     0     2     2     0     8    0
knotepl    112       39    0       28     1     0     1     1     0     8    0
kqueuepl   104        2    0        0     1     0     1     1     0     8    0
pipepl     128      134    0      124     1     0     1     1     0     8    0
fdescpl    424      198    0      187     2     0     2     2     0     8    0
filepl     120     1001    0      950     2     0     2     2     0     8    0
lockfpl    104        5    0        4     1     0     1     1     0     8    0
lockfspl    48        3    0        2     1     0     1     1     0     8    0
sessionpl  112       18    0       10     1     0     1     1     0     8    0
pgrppl      48       18    0       10     1     0     1     1     0     8    0
ucredpl     96       47    0       40     1     0     1     1     0     8    0
zombiepl   144      187    0      187     1     0     1     1     0     8    1
processpl  872      212    0      187     4     0     4     4     0     8    0
procpl     632      218    0      187     3     0     3     3     0     8    0
sockpl     384       71    0       55     2     0     2     2     0     8    0
mcl4k      4096      10    0       10     1     1     0     1     0     8    0
mcl2k      2048    5478    0     5446     7     2     5     7     0     8    0
mtagpl      80        2    0        2     1     1     0     1     0     8    0
mbufpl     256     9519    0     9435     8     1     7     7     0     8    0
bufpl      280     5846    0     1354   321     0   321   321     0     8    0
anonpl      16    20228    0    18777    14     1    13    13     0    62    6
amapchunkpl 152     774    0      716     5     0     5     5     0   158    2
amappl16   192       80    0       58     2     0     2     2     0     8    0
amappl15   184       52    0       48     1     0     1     1     0     8    0
amappl14   176       21    0       19     1     0     1     1     0     8    0
amappl12   160        7    0        5     1     0     1     1     0     8    0
amappl11   152       47    0       35     1     0     1     1     0     8    0
amappl10   144       11    0       11     1     0     1     1     0     8    1
amappl9    136      394    0      393     1     0     1     1     0     8    0
amappl8    128       88    0       77     1     0     1     1     0     8    0
amappl7    120       87    0       76     1     0     1     1     0     8    0
amappl6    112       60    0       53     1     0     1     1     0     8    0
amappl5    104      130    0      120     1     0     1     1     0     8    0
amappl4     96      425    0      401     1     0     1     1     0     8    0
amappl3     88      125    0      117     1     0     1     1     0     8    0
amappl2     80      848    0      794     3     0     3     3     0     8    1
amappl1     72    13385    0    12988    26     8    18    20     0     8    8
amappl      80      419    0      396     1     0     1     1     0    84    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      64        1    0        0     1     0     1     1     0     8    0
uaddrrnd    24      198    0      187     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      198    0      187     1     0     1     1     0     8    0
vmmpekpl   168     6055    0     6039     1     0     1     1     0     8    0
vmmpepl    168    29363    0    28520    83     4    79    79     0   357   40
vmsppl     272      197    0      187     1     0     1     1     0     8    0
pdppl      4096     402    0      374     5     0     5     5     0     8    0
pvpl        32   103502    0    99870   113     0   113   113     0   265   81
pmappl     200      197    0      187     1     0     1     1     0     8    0
extentpl    40       46    0       29     1     0     1     1     0     8    0
phpool     112      124    0        6     4     0     4     4     0     8    0
ddb> 

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/12/13 11:13 openbsd 757f1589f1b9 2a752b7c .config console log report syz ci-openbsd-main
* Struck through repros no longer work on HEAD.