syzbot


panic: unhandled af 152

Status: closed as dup on 2020/01/03 12:49
Reported-by: syzbot+80754707234fc344c628@syzkaller.appspotmail.com
First crash: 1787d, last: 1787d
Duplicate of
Title Repro Cause bisect Fix bisect Count Last Reported
panic: unhandled af C 21 1785d 1787d

Sample crash report:
login: panic: unhandled af 152
Stopped at      db_enter+0x18:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*283542  10637      0         0x2  0x4000000    0  syz-executor5693
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic(ffffffff821b8616) at panic+0x15c sys/kern/subr_prf.c:207
unhandled_af(98) at unhandled_af+0x16
pf_addrcpy(ffff80001d3d8298,ffff80001d3d8590,98) at pf_addrcpy+0x99 sys/net/pf.c:409
pfioctl(4900,c0504417,ffff80001d3d8590,1,ffff8000ffff4288) at pfioctl+0x43c0 sys/net/pf_ioctl.c:1827
VOP_IOCTL(fffffd80669e38f0,c0504417,ffff80001d3d8590,1,fffffd806c3becc0,ffff8000ffff4288) at VOP_IOCTL+0x88 sys/kern/vfs_vops.c:291
vn_ioctl(fffffd805d738878,c0504417,ffff80001d3d8590,ffff8000ffff4288) at vn_ioctl+0xb7 sys/kern/vfs_vnops.c:533
sys_ioctl(ffff8000ffff4288,ffff80001d3d86a8,ffff80001d3d86f0) at sys_ioctl+0x5b9
syscall(ffff80001d3d8770) at syscall+0x507 sys/arch/amd64/amd64/trap.c:555
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x8e2ee3d67c0, count: 5
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb> 
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
unhandled af 152
ddb> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic(ffffffff821b8616) at panic+0x15c sys/kern/subr_prf.c:207
unhandled_af(98) at unhandled_af+0x16
pf_addrcpy(ffff80001d3d8298,ffff80001d3d8590,98) at pf_addrcpy+0x99 sys/net/pf.c:409
pfioctl(4900,c0504417,ffff80001d3d8590,1,ffff8000ffff4288) at pfioctl+0x43c0 sys/net/pf_ioctl.c:1827
VOP_IOCTL(fffffd80669e38f0,c0504417,ffff80001d3d8590,1,fffffd806c3becc0,ffff8000ffff4288) at VOP_IOCTL+0x88 sys/kern/vfs_vops.c:291
vn_ioctl(fffffd805d738878,c0504417,ffff80001d3d8590,ffff8000ffff4288) at vn_ioctl+0xb7 sys/kern/vfs_vnops.c:533
sys_ioctl(ffff8000ffff4288,ffff80001d3d86a8,ffff80001d3d86f0) at sys_ioctl+0x5b9
syscall(ffff80001d3d8770) at syscall+0x507 sys/arch/amd64/amd64/trap.c:555
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x8e2ee3d67c0, count: -10
ddb> show registers
rdi                                0
rsi                              0x1
rbp               0xffff80001d3d8150
rbx               0xffff80001d3d8200
rdx                              0x2
rcx                              0x1
rax                              0x1
r8                0xffff80001d3d8110
r9                               0x1
r10               0xeb3eb6375632ee8e
r11               0x9092cf7434697cea
r12                     0x3000000008
r13               0xffff80001d3d8160
r14                            0x100
r15                              0x1
rip               0xffffffff81f91018    db_enter+0x18
cs                               0x8
rflags                         0x246
rsp               0xffff80001d3d8140
ss                              0x10
db_enter+0x18:  addq    $0x8,%rsp
ddb> show proc
PROC (syz-executor5693) pid=283542 stat=onproc
    flags process=2<EXEC> proc=4000000<THREAD>
    pri=50, usrpri=50, nice=20
    forw=0xffffffffffffffff, list=0xffff8000ffff5648,0xffff8000ffff4a00
    process=0xffff80001d39a380 user=0xffff80001d3d3000, vmspace=0xfffffd806bc0a000
    estcpu=0, cpticks=0, pctcpu=0.0
    user=0, sys=0, intr=0
ddb> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 10637  430264  48879      0  2         0x2                syz-executor5693
*10637  283542  48879      0  7   0x4000002                syz-executor5693
 10637    1698  48879      0  3   0x4000082  fsleep        syz-executor5693
 48879   77157  94488      0  3    0x10008a  pause         ksh
 94488  350160  38504      0  3        0x92  select        sshd
 15066  408001      1      0  3    0x100083  ttyin         getty
 38504  208527      1      0  3        0x80  select        sshd
  9831   34254  13543     73  3    0x100090  kqread        syslogd
 13543  121193      1      0  3    0x100082  netio         syslogd
 26719  456587      1     77  3    0x100090  poll          dhclient
 68530  220604      1      0  3        0x80  poll          dhclient
  3797  412332      0      0  2     0x14200                zerothread
 87822   18883      0      0  3     0x14200  aiodoned      aiodoned
 94383  383757      0      0  3     0x14200  syncer        update
 66552  521809      0      0  3     0x14200  cleaner       cleaner
 94026  177594      0      0  3     0x14200  reaper        reaper
  3053  473767      0      0  3     0x14200  pgdaemon      pagedaemon
 93904  198745      0      0  3     0x14200  bored         crynlk
  3071   32270      0      0  3     0x14200  bored         crypto
 59657  135616      0      0  3  0x40014200  acpi0         acpi0
 79038   51363      0      0  3     0x14200  bored         softnet
  8268   39222      0      0  3     0x14200  bored         systqmp
 55510  407009      0      0  3     0x14200  bored         systq
 10091  420479      0      0  3  0x40014200  bored         softclock
 67192   44286      0      0  3  0x40014200                idle0
 84826  216253      0      0  3     0x14200  bored         smr
     1   60778      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb> show all locks
No such command
ddb> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf  9438   6319K    6320K  78643K     10535        0
            pcb    13      8K       8K  78643K        13        0
         rtable    61      1K       2K  78643K       118        0
         ifaddr    24      7K       7K  78643K        24        0
       counters    19     16K      16K  78643K        19        0
       ioctlops     0      0K       2K  78643K        13        0
          mount     1      1K       1K  78643K         1        0
         vnodes  1180     74K      74K  78643K      1185        0
      UFS quota     1     32K      32K  78643K         1        0
      UFS mount     5     36K      36K  78643K         5        0
            shm     2      1K       1K  78643K         2        0
         VM map     2      0K       0K  78643K         2        0
            sem     2      0K       0K  78643K         2        0
        dirhash    12      2K       2K  78643K        12        0
           ACPI  1794    195K     288K  78643K     12646        0
      file desc     1      0K       0K  78643K         1        0
           proc    47     38K      46K  78643K       278        0
    NFS srvsock     1      0K       0K  78643K         1        0
     NFS daemon     1     16K      16K  78643K         1        0
       in_multi    11      0K       0K  78643K        11        0
    ether_multi     1      0K       0K  78643K         1        0
    ISOFS mount     1     32K      32K  78643K         1        0
  MSDOSFS mount     1     16K      16K  78643K         1        0
           ttys    19     95K      95K  78643K        19        0
           exec     0      0K       1K  78643K       151        0
        pagedep     1      8K       8K  78643K         1        0
       inodedep     1     32K      32K  78643K         1        0
         newblk     1      0K       0K  78643K         1        0
        VM swap     7     26K      26K  78643K         7        0
       UVM amap    64      3K       3K  78643K       711        0
       UVM aobj     2      2K       2K  78643K         2        0
        memdesc     1      4K       4K  78643K         1        0
    crypto data     1      1K       1K  78643K         1        0
            NDP     3      0K       0K  78643K         3        0
           temp    20   3003K    3067K  78643K      1711        0
      SYN cache     2     16K      16K  78643K         2        0
ddb> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
arp         64        2    0        0     1     0     1     1     0     8    0
rtpcb       80       15    0       13     1     0     1     1     0     8    0
rtentry    112       23    0        1     1     0     1     1     0     8    0
unpcb      120       27    0       19     1     0     1     1     0     8    0
syncache   264        5    0        5     2     1     1     1     0     8    1
tcpcb      544        8    0        5     1     0     1     1     0     8    0
inpcb      280       22    0       16     1     0     1     1     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256       96    0        0     6     0     6     6     0     8    0
art_table   32       97    0        0     1     0     1     1     0     8    0
art_node    16       22    0        2     1     0     1     1     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino1pl    128     1392    0       15    45     0    45    45     0     8    0
ffsino     240     1392    0       15    81     0    81    81     0     8    0
nchpl      144     1567    0       31    57     0    57    57     0     8    0
uvmvnodes   72     1401    0        0    26     0    26    26     0     8    0
vnodes     208     1401    0        0    74     0    74    74     0     8    0
namei      1024    3482    0     3482     2     1     1     1     0     8    1
scxspl     192     2560    0     2560     2     1     1     1     0     8    1
plimitpl   152       13    0        8     1     0     1     1     0     8    0
sigapl     432      176    0      166     2     0     2     2     0     8    0
futexpl     56        7    0        6     1     0     1     1     0     8    0
knotepl    112        5    0        0     1     0     1     1     0     8    0
kqueuepl   104        1    0        0     1     0     1     1     0     8    0
pipepl     112      114    0      107     2     1     1     1     0     8    0
fdescpl    424      177    0      166     2     0     2     2     0     8    0
filepl     120      861    0      814     2     0     2     2     0     8    0
lockfpl    104        5    0        4     1     0     1     1     0     8    0
lockfspl    48        3    0        2     1     0     1     1     0     8    0
sessionpl  112       17    0        9     1     0     1     1     0     8    0
pgrppl      48       17    0        9     1     0     1     1     0     8    0
ucredpl     96       47    0       40     1     0     1     1     0     8    0
zombiepl   144      166    0      166     2     1     1     1     0     8    1
processpl  872      191    0      166     4     0     4     4     0     8    0
procpl     632      193    0      166     3     0     3     3     0     8    0
sockpl     384       64    0       48     2     0     2     2     0     8    0
mcl4k      4096      10    0       10     2     1     1     1     0     8    1
mcl2k      2048    5917    0     5884     8     2     6     8     0     8    0
mtagpl      80        2    0        2     1     1     0     1     0     8    0
mbufpl     256    10155    0    10113     5     1     4     5     0     8    0
bufpl      280     2106    0      258   132     0   132   132     0     8    0
anonpl      16    17490    0    16309     8     2     6     7     0   107    1
amapchunkpl 152     470    0      430     2     0     2     2     0   158    0
amappl16   192       28    0       26     1     0     1     1     0     8    0
amappl15   184       42    0       38     1     0     1     1     0     8    0
amappl14   176       13    0       12     2     1     1     1     0     8    0
amappl13   168        1    0        1     1     1     0     1     0     8    0
amappl12   160        4    0        4     1     1     0     1     0     8    0
amappl11   152       47    0       36     1     0     1     1     0     8    0
amappl10   144        1    0        1     1     1     0     1     0     8    0
amappl9    136      383    0      382     1     0     1     1     0     8    0
amappl8    128       67    0       62     1     0     1     1     0     8    0
amappl7    120       65    0       56     1     0     1     1     0     8    0
amappl6    112       44    0       42     1     0     1     1     0     8    0
amappl5    104      138    0      129     1     0     1     1     0     8    0
amappl4     96      394    0      372     1     0     1     1     0     8    0
amappl3     88      111    0      102     1     0     1     1     0     8    0
amappl2     80      731    0      671     3     1     2     2     0     8    0
amappl1     72    12323    0    11917    16     7     9    16     0     8    0
amappl      80      355    0      334     1     0     1     1     0    84    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      64        1    0        0     1     0     1     1     0     8    0
uaddrrnd    24      177    0      166     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      177    0      166     1     0     1     1     0     8    0
vmmpekpl   168     5223    0     5209     1     0     1     1     0     8    0
vmmpepl    168    26263    0    25440    55    17    38    48     0   357    2
vmsppl     272      176    0      166     1     0     1     1     0     8    0
pdppl      4096     360    0      332     5     0     5     5     0     8    0
pvpl        32    70924    0    68105    35     8    27    27     0   265    4
pmappl     200      176    0      166     1     0     1     1     0     8    0
extentpl    40       46    0       29     1     0     1     1     0     8    0
phpool     112      117    0        7     4     0     4     4     0     8    0

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/01/03 02:49 openbsd 8864b42271c4 25a0186e .config console log report syz C ci-openbsd-main
2020/01/03 02:20 openbsd 8864b42271c4 25a0186e .config console log report ci-openbsd-main
* Struck through repros no longer work on HEAD.