syzbot


panic: bad arg kind: <nil>

Status: closed as invalid on 2019/12/25 09:50
Reported-by: syzbot+418a1d7a5bdc5ebec92c@syzkaller.appspotmail.com
First crash: 1581d, last: 1581d
Similar bugs (12)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd panic: bad arg kind: <nil> (9) 1 1491d 1491d 0/3 closed as invalid on 2020/03/25 07:28
openbsd panic: bad arg kind: <nil> (5) 1 1526d 1526d 0/3 closed as invalid on 2020/02/19 07:30
openbsd panic: bad arg kind: <nil> (11) 1 1467d 1467d 0/3 closed as invalid on 2020/04/18 07:57
openbsd panic: bad arg kind: <nil> (10) 1 1488d 1488d 0/3 closed as invalid on 2020/03/28 07:25
openbsd panic: bad arg kind: <nil> (6) 1 1512d 1512d 0/3 closed as invalid on 2020/03/04 07:53
openbsd panic: bad arg kind: <nil> (3) 1 1567d 1567d 0/3 closed as invalid on 2020/01/09 08:12
openbsd panic: bad arg kind: <nil> (12) 24 1359d 1450d 0/3 closed as dup on 2020/05/04 21:03
openbsd panic: bad arg kind: <nil> (13) 1 41d 41d 0/3 upstream: reported on 2024/03/14 00:27
openbsd panic: bad arg kind: <nil> (4) 1 1537d 1537d 0/3 closed as invalid on 2020/02/09 09:06
openbsd panic: bad arg kind: <nil> (2) 1 1578d 1578d 0/3 closed as invalid on 2019/12/29 09:40
openbsd panic: bad arg kind: <nil> (7) 1 1507d 1507d 0/3 closed as invalid on 2020/03/09 08:30
openbsd panic: bad arg kind: <nil> (8) 1 1503d 1503d 0/3 closed as invalid on 2020/03/13 09:30

Sample crash report:
panic: bad arg kind: <nil>

goroutine 23 [running]:
uvm_fault(0xfffffd806bc0acc0, 0xb, 0, 1) -> e
kernel: page fault trap, code=0
Stopped at      in_delmulti+0x8d:       movl    0xc(%r14),%r15d
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
kernel page fault
uvm_fault(0xfffffd806bc0acc0, 0xb, 0, 1) -> e
in_delmulti(ffffffffffffffff) at in_delmulti+0x8d sys/netinet/in.c:914
end trace frame: 0xffff80001d417f90, count: 0
ddb> trace
in_delmulti(ffffffffffffffff) at in_delmulti+0x8d sys/netinet/in.c:914
in_purgeaddr(ffff800000a39c00) at in_purgeaddr+0x156 sys/netinet/in.c:760
in_ifdetach(ffff800000a01000) at in_ifdetach+0x74 sys/netinet/in.c:969
if_detach(ffff800000a01000) at if_detach+0x140 sys/net/if.c:1151
tun_clone_destroy(ffff800000a01000) at tun_clone_destroy+0x172 sys/net/if_tun.c:312
spec_close(ffff80001d418110) at spec_close+0x311 sys/kern/spec_vnops.c:555
VOP_CLOSE(fffffd805d65b9c0,7,fffffd806c3be840,ffff8000ffff8280) at VOP_CLOSE+0xc0 sys/kern/vfs_vops.c:175
vn_closefile(fffffd8054d5ed30,ffff8000ffff8280) at vn_closefile+0xd3 vn_close sys/kern/vfs_vnops.c:298 [inline]
vn_closefile(fffffd8054d5ed30,ffff8000ffff8280) at vn_closefile+0xd3 sys/kern/vfs_vnops.c:610
fdrop(fffffd8054d5ed30,ffff8000ffff8280) at fdrop+0xc2 sys/kern/kern_descrip.c:1273
closef(fffffd8054d5ed30,ffff8000ffff8280) at closef+0x118 sys/kern/kern_descrip.c:1257
fdfree(ffff8000ffff8280) at fdfree+0x100 sys/kern/kern_descrip.c:1189
exit1(ffff8000ffff8280,0,d,1) at exit1+0x334 sys/kern/kern_exit.c:196
postsig(ffff8000ffff8280,d) at postsig+0x4a8 sigexit sys/kern/kern_sig.c:1498 [inline]
postsig(ffff8000ffff8280,d) at postsig+0x4a8 sys/kern/kern_sig.c:1430
userret(ffff8000ffff8280) at userret+0x159 sys/kern/kern_sig.c:1888
syscall(ffff80001d418590) at syscall+0x42e mi_syscall_return sys/sys/syscall_mi.h:115 [inline]
syscall(ffff80001d418590) at syscall+0x42e sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7f7fffff9fd0, count: -16
ddb> show registers
rdi                              0x2
rsi                                0
rbp               0xffff80001d417f40
rbx                                0
rdx                              0x3
rcx                              0x1
rax                                0
r8                0xffff800000a39c00
r9                               0x5
r10               0x12e9337d6b8973b5
r11               0xc00d3d5cc16117e5
r12                                0
r13                              0x3
r14               0xffffffffffffffff
r15                              0x1
rip               0xffffffff81bc8fad    in_delmulti+0x8d
cs                               0x8
rflags                       0x10246    __ALIGN_SIZE+0xf246
rsp               0xffff80001d417ee0
ss                              0x10
in_delmulti+0x8d:       movl    0xc(%r14),%r15d
ddb> show proc
PROC (syz-executor.0) pid=379971 stat=onproc
    flags process=a<EXEC,EXITING> proc=2000<WEXIT>
    pri=72, usrpri=72, nice=20
    forw=0xffffffffffffffff, list=0xffff8000ffff4288,0xffff8000ffff8c70
    process=0xffff80001d39b120 user=0xffff80001d413000, vmspace=0xfffffd806bc0acc0
    estcpu=36, cpticks=2, pctcpu=0.0
    user=0, sys=2, intr=0
ddb> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 43558  368745      0      0  3     0x14200  acct          acct
 13611  218681      0      0  3     0x14200  bored         sosplice
 98302  196383      1      0  2        0x82                syz-executor.1
 19952  403825  69080      0  2    0x10008a                ksh
 69080  232092  88391      0  2        0x12                sshd
 42461  479264      1      0  2    0x100083                getty
 88391  311636      1      0  2        0x80                sshd
 77325  343171  10304     73  3    0x100090  kqread        syslogd
 10304  389336      1      0  3    0x100082  netio         syslogd
 79222  491192      1     77  2    0x100090                dhclient
 68960  198037      1      0  2        0x80                dhclient
 49644  387284      0      0  2     0x14200                zerothread
 52109  332093      0      0  3     0x14200  aiodoned      aiodoned
  2393  392682      0      0  3     0x14200  syncer        update
 79575   97197      0      0  3     0x14200  cleaner       cleaner
 80216  246221      0      0  3     0x14200  reaper        reaper
 68399  202102      0      0  3     0x14200  pgdaemon      pagedaemon
 13130  469353      0      0  3     0x14200  bored         crynlk
 56432  205882      0      0  3     0x14200  bored         crypto
 99243  362175      0      0  3  0x40014200  acpi0         acpi0
 39745   27629      0      0  2     0x14200                softnet
 24406   92378      0      0  2     0x14200                systqmp
   218  238219      0      0  3     0x14200  bored         systq
 84685  213901      0      0  3  0x40014200  bored         softclock
 43255  363510      0      0  3  0x40014200                idle0
 92969  146436      0      0  3     0x14200  bored         smr
     1  446462      0      0  2        0x82                init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb> show all locks
No such command
ddb> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf  9516   6349K    6991K  78643K     12008        0
            pcb    13      8K       8K  78643K       164        0
         rtable    94      3K       4K  78643K       328        0
         ifaddr    78     14K      15K  78643K       137        0
       counters    19     16K      16K  78643K        19        0
       ioctlops     0      0K       2K  78643K        28        0
            iov     0      0K      16K  78643K        91        0
          mount     1      1K       1K  78643K         1        0
         vnodes  1220     77K      77K  78643K      1683        0
      UFS quota     1     32K      32K  78643K         1        0
      UFS mount     5     36K      36K  78643K         5        0
            shm     2      1K       5K  78643K         5        0
         VM map     2      0K       0K  78643K         2        0
            sem    12      1K       1K  78643K        48        0
        dirhash    12      2K       2K  78643K        12        0
           ACPI  1794    195K     288K  78643K     12646        0
      file desc     3      8K      25K  78643K       386        0
          sigio     0      0K       0K  78643K         4        0
           proc    49     38K      63K  78643K       395        0
        subproc    23      1K       2K  78643K        34        0
    NFS srvsock     1      0K       0K  78643K         1        0
     NFS daemon     1     16K      16K  78643K         1        0
    ip_moptions     0      0K       0K  78643K       194        0
       in_multi    50      2K       2K  78643K        87        0
    ether_multi     1      0K       0K  78643K         3        0
    ISOFS mount     1     32K      32K  78643K         1        0
  MSDOSFS mount     1     16K      16K  78643K         1        0
           ttys    61    281K     281K  78643K        61        0
           exec     0      0K       1K  78643K       223        0
        pagedep     1      8K       8K  78643K         1        0
       inodedep     1     32K      32K  78643K         1        0
         newblk     1      0K       0K  78643K         1        0
        VM swap     7     26K      26K  78643K         7        0
       UVM amap    73     19K      43K  78643K      1821        0
       UVM aobj    24      6K       6K  78643K        25        0
        memdesc     1      4K       4K  78643K         1        0
    crypto data     1      1K       1K  78643K         1        0
    ip6_options     0      0K       0K  78643K       135        0
            NDP    14      0K       0K  78643K        28        0
           temp   145   3017K    3083K  78643K     19167        0
         kqueue     0      0K       0K  78643K         6        0
      SYN cache     2     16K      16K  78643K         2        0
ddb> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
arp         64        8    0        4     1     0     1     1     0     8    0
rtpcb       80       99    0       97     1     0     1     1     0     8    0
rtentry    112       62    0       25     2     0     2     2     0     8    0
unpcb      120      229    0      221     1     0     1     1     0     8    0
syncache   264       10    0       10     4     3     1     1     0     8    1
tcpqe       32      114    0      114     3     2     1     1     0     8    1
tcpcb      544      280    0      276     2     1     1     2     0     8    0
ipq         40        6    0        6     2     1     1     1     0     8    1
ipqe        40       98    0       98     2     1     1     1     0     8    1
inpcb      280      904    0      897     4     1     3     3     0     8    2
nd6         48        8    0        6     1     0     1     1     0     8    0
pkpcb       40        2    0        2     1     0     1     1     0     8    1
ppxss      1128       6    0        6     2     1     1     1     0     8    1
art_heap8  4096       2    0        0     2     0     2     2     0     8    0
art_heap4  256      290    0       99    15     0    15    15     0     8    0
art_table   32      292    0       99     2     0     2     2     0     8    0
art_node    16       61    0       22     1     0     1     1     0     8    0
sysvmsgpl   40       22    0       14     1     0     1     1     0     8    0
semupl     112        3    0        3     1     1     0     1     0     8    0
semapl     112       46    0       36     1     0     1     1     0     8    0
shmpl      112       23    0        1     1     0     1     1     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino1pl    128     2043    0      647    46     0    46    46     0     8    0
ffsino     240     2043    0      647    83     0    83    83     0     8    0
nchpl      144     2846    0     1233    60     0    60    60     0     8    0
uvmvnodes   72     2398    0        0    44     0    44    44     0     8    0
vnodes     208     2398    0        0   127     0   127   127     0     8    0
namei      1024    9242    0     9242     1     0     1     1     0     8    1
vmpool     528        4    0        4     2     1     1     1     0     8    1
scxspl     192     8645    0     8645     1     0     1     1     0     8    1
plimitpl   152       42    0       35     1     0     1     1     0     8    0
sigapl     432      557    0      546     2     0     2     2     0     8    0
futexpl     56    13854    0    13854     1     0     1     1     0     8    1
knotepl    112      123    0      118     2     0     2     2     0     8    1
kqueuepl   104      156    0      155     1     0     1     1     0     8    0
pipepl     128      342    0      330     2     1     1     2     0     8    0
fdescpl    424      558    0      546     2     0     2     2     0     8    0
filepl     120     5618    0     5545     7     1     6     6     0     8    3
lockfpl    104      196    0      195     1     0     1     1     0     8    0
lockfspl    48       59    0       58     1     0     1     1     0     8    0
sessionpl  112       17    0        7     1     0     1     1     0     8    0
pgrppl      48       19    0        9     1     0     1     1     0     8    0
ucredpl     96     1447    0     1440     1     0     1     1     0     8    0
zombiepl   144      547    0      545     1     0     1     1     0     8    0
processpl  872      574    0      545     4     0     4     4     0     8    0
procpl     632     1075    0     1046     4     0     4     4     0     8    0
sosppl     128        2    0        2     1     0     1     1     0     8    1
sockpl     384     1236    0     1219     6     0     6     6     0     8    4
mcl64k     65536    261    0      261    29    21     8    29     0     8    8
mcl16k     16384     14    0       14     1     0     1     1     0     8    1
mcl12k     12288     11    0       11     1     0     1     1     0     8    1
mcl9k      9216       6    0        6     2     1     1     1     0     8    1
mcl8k      8192      15    0       15     1     0     1     1     0     8    1
mcl4k      4096      59    0       59     2     1     1     1     0     8    1
mcl2k2     2112       8    0        8     1     0     1     1     0     8    1
mcl2k      2048   67689    0    67642    17     7    10    12     0     8    3
mtagpl      80       16    0       10     2     1     1     1     0     8    0
mbufpl     256   112024    0   111902    32    13    19    25     0     8    6
bufpl      280     7557    0     1373   442     0   442   442     0     8    0
anonpl      16    96665    0    95435   104     8    96    96     0   107   82
amapchunkpl 152    3126    0     3089    20     3    17    17     0   158   14
amappl16   192     4087    0     4070    74    19    55    65     0     8   48
amappl15   184       50    0       46     1     0     1     1     0     8    0
amappl14   176      208    0      206     1     0     1     1     0     8    0
amappl13   168      176    0      175     1     0     1     1     0     8    0
amappl12   160        5    0        5     1     1     0     1     0     8    0
amappl11   152       46    0       35     1     0     1     1     0     8    0
amappl10   144       15    0       15     1     0     1     1     0     8    1
amappl9    136      565    0      561     1     0     1     1     0     8    0
amappl8    128      137    0      132     2     0     2     2     0     8    1
amappl7    120       91    0       83     1     0     1     1     0     8    0
amappl6    112       53    0       51     1     0     1     1     0     8    0
amappl5    104      145    0      134     1     0     1     1     0     8    0
amappl4     96      791    0      765     1     0     1     1     0     8    0
amappl3     88      138    0      131     1     0     1     1     0     8    0
amappl2     80     3868    0     3807     3     1     2     3     0     8    0
amappl1     72    19836    0    19426    26    16    10    20     0     8    0
amappl      80     1314    0     1292     2     0     2     2     0    84    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      64       24    0        1     1     0     1     1     0     8    0
uaddrrnd    24      562    0      550     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      562    0      550     1     0     1     1     0     8    0
vmmpekpl   168     7651    0     7624     2     0     2     2     0     8    0
vmmpepl    168    75193    0    74272   134    26   108   128     0   357   59
vmsppl     272      561    0      550     3     1     2     2     0     8    1
pdppl      4096    1130    0     1100     6     1     5     6     0     8    0
pvpl        32   240170    0   237206   228     7   221   221     0   265  175
pmappl     200      561    0      550     1     0     1     1     0     8    0
extentpl    40       46    0       29     1     0     1     1     0     8    0
phpool     112      199    0       47     5     0     5     5     0     8    0

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/12/25 09:45 openbsd b4dcb8dabafe be5c2c81 .config console log report ci-openbsd-main
* Struck through repros no longer work on HEAD.