syzbot


panic: receive 1: so ADDR, so_type 3, sb_cc 177

Status: closed as dup on 2020/02/14 09:05
Reported-by: syzbot+f9e7b4b51236d6f70fb3@syzkaller.appspotmail.com
First crash: 1542d, last: 1542d
Duplicate of
Title Repro Cause bisect Fix bisect Count Last Reported
panic: receive 1: so ADDR, so_type 3, sb_cc 6586 1 1562d 1562d

Sample crash report:
panic: receive 1: so 0xfffffd805e553000, so_type 3, sb_cc 177
Stopped at      db_enter+0x18:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*364020   8183      0           0          0    0  dhclient
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic(ffffffff821a6d4a) at panic+0x15c sys/kern/subr_prf.c:207
soreceive(fffffd805e553000,0,ffff80001d382ce8,0,0,ffff80001d382bf4) at soreceive+0x16ac sys/kern/uipc_socket.c:823
soo_read(fffffd805eb0b3c0,ffff80001d382ce8,0) at soo_read+0x53 sys/kern/sys_socket.c:70
dofilereadv(ffff80001d34a118,6,ffff80001d382ce8,0,ffff80001d382dd0) at dofilereadv+0x1a1 sys/kern/sys_generic.c:236
sys_read(ffff80001d34a118,ffff80001d382d80,ffff80001d382dd0) at sys_read+0x83 sys/kern/sys_generic.c:156
syscall(ffff80001d382e50) at syscall+0x507 sys/arch/amd64/amd64/trap.c:570
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7f7ffffca310, count: 7
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb> 
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
receive 1: so 0xfffffd805e553000, so_type 3, sb_cc 177
ddb> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic(ffffffff821a6d4a) at panic+0x15c sys/kern/subr_prf.c:207
soreceive(fffffd805e553000,0,ffff80001d382ce8,0,0,ffff80001d382bf4) at soreceive+0x16ac sys/kern/uipc_socket.c:823
soo_read(fffffd805eb0b3c0,ffff80001d382ce8,0) at soo_read+0x53 sys/kern/sys_socket.c:70
dofilereadv(ffff80001d34a118,6,ffff80001d382ce8,0,ffff80001d382dd0) at dofilereadv+0x1a1 sys/kern/sys_generic.c:236
sys_read(ffff80001d34a118,ffff80001d382d80,ffff80001d382dd0) at sys_read+0x83 sys/kern/sys_generic.c:156
syscall(ffff80001d382e50) at syscall+0x507 sys/arch/amd64/amd64/trap.c:570
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7f7ffffca310, count: -8
ddb> show registers
rdi                                0
rsi                              0x1
rbp               0xffff80001d382a30
rbx               0xffff80001d382ae0
rdx                              0x2
rcx                                0
rax                                0
r8                0xffff80001d3829f0
r9                               0x1
r10                                0
r11               0xb9d094701ee2a79c
r12                     0x3000000008
r13               0xffff80001d382a40
r14                            0x100
r15                              0x1
rip               0xffffffff816b5468    db_enter+0x18
cs                               0x8
rflags                         0x246
rsp               0xffff80001d382a20
ss                              0x10
db_enter+0x18:  addq    $0x8,%rsp
ddb> show proc
PROC (dhclient) pid=364020 stat=onproc
    flags process=0 proc=0
    pri=24, usrpri=50, nice=20
    forw=0xffffffffffffffff, list=0xffff80001d349008,0xffff80001d34a398
    process=0xffff8000ffffa390 user=0xffff80001d37d000, vmspace=0xfffffd806bc09440
    estcpu=0, cpticks=0, pctcpu=0.0
    user=0, sys=0, intr=0
ddb> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 52135  436648   8488      0  2           0                syz-executor.0
 52135   27550   8488      0  2   0x4000000                syz-executor.0
   961  324365  69222      0  3        0x82  nanosleep     syz-executor.1
  8488  472673  69222      0  3        0x82  nanosleep     syz-executor.0
 91705  346969      0      0  3     0x14200  acct          acct
 56317  417183      0      0  3     0x14200  bored         sosplice
 69222  203519   4969      0  3        0x82  thrsleep      syz-fuzzer
 69222  501013   4969      0  3   0x4000082  thrsleep      syz-fuzzer
 69222   39972   4969      0  3   0x4000082  thrsleep      syz-fuzzer
 69222  413402   4969      0  3   0x4000082  thrsleep      syz-fuzzer
 69222  277060   4969      0  3   0x4000082  thrsleep      syz-fuzzer
 69222  129282   4969      0  3   0x4000082  kqread        syz-fuzzer
 69222   47149   4969      0  3   0x4000082  thrsleep      syz-fuzzer
 69222  288515   4969      0  3   0x4000082  thrsleep      syz-fuzzer
 69222  507876   4969      0  3   0x4000082  thrsleep      syz-fuzzer
  4969   20638  45830      0  3    0x10008a  pause         ksh
 45830  356772  70009      0  3        0x92  select        sshd
 70387   56715      1      0  3    0x100083  ttyin         getty
 70009  228658      1      0  3        0x80  select        sshd
 58434   28918  35210     73  3    0x100090  kqread        syslogd
 35210   75067      1      0  3    0x100082  netio         syslogd
 15070  326563      1     77  2    0x100010                dhclient
* 8183  364020      1      0  7           0                dhclient
 75060  296417      0      0  2     0x14200                zerothread
 85468   83004      0      0  3     0x14200  aiodoned      aiodoned
 26571  461432      0      0  3     0x14200  syncer        update
 52567  350444      0      0  3     0x14200  cleaner       cleaner
 51533  312645      0      0  3     0x14200  reaper        reaper
 43795  217628      0      0  3     0x14200  pgdaemon      pagedaemon
 65639  150638      0      0  3     0x14200  bored         crynlk
 25498  193922      0      0  3     0x14200  bored         crypto
 26897  306570      0      0  3  0x40014200  acpi0         acpi0
 27356  198129      0      0  3     0x14200  bored         softnet
 12712  522994      0      0  2     0x14200                systqmp
 38991  463117      0      0  3     0x14200  bored         systq
 57491  377181      0      0  3  0x40014200  bored         softclock
 82727   44935      0      0  3  0x40014200                idle0
 66418  510908      0      0  3     0x14200  bored         smr
     1  433078      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb> show all locks
No such command
ddb> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf  9548   6379K    6582K  78643K     11237        0
            pcb    13      9K      10K  78643K      1196        0
         rtable   116      4K       5K  78643K      1080        0
         ifaddr   116     23K      23K  78643K       505        0
       counters    21     16K      17K  78643K        87        0
       ioctlops     0      0K       2K  78643K       103        0
            iov     0      0K      16K  78643K       330        0
          mount     1      1K       1K  78643K         1        0
         vnodes  1213     76K      77K  78643K      1698        0
      UFS quota     1     32K      32K  78643K         1        0
      UFS mount     5     36K      36K  78643K         5        0
            shm     2      1K       9K  78643K        23        0
         VM map     2      0K       0K  78643K         2        0
            sem    12      1K       1K  78643K       170        0
        dirhash    12      2K       2K  78643K        12        0
           ACPI  1794    195K     288K  78643K     12646        0
      file desc     5     13K      25K  78643K      1416        0
          sigio     0      0K       0K  78643K        34        0
           proc    57     39K      63K  78643K       698        0
        subproc    32      2K       2K  78643K       136        0
    NFS srvsock     1      0K       0K  78643K         1        0
     NFS daemon     1     16K      16K  78643K         1        0
    ip_moptions     0      0K       0K  78643K       633        0
       in_multi   148      7K       7K  78643K       480        0
    ether_multi     1      0K       0K  78643K        60        0
            mrt     0      0K       0K  78643K        15        0
    ISOFS mount     1     32K      32K  78643K         1        0
  MSDOSFS mount     1     16K      16K  78643K         1        0
           ttys    73    334K     334K  78643K        73        0
           exec     0      0K       1K  78643K       430        0
     pfkey data     0      0K       1K  78643K         4        0
        pagedep     1      8K       8K  78643K         1        0
       inodedep     1     32K      32K  78643K         1        0
         newblk     1      0K       0K  78643K         1        0
        VM swap     7     26K      26K  78643K         7        0
       UVM amap   144    153K     153K  78643K      4415        0
       UVM aobj    50      2K       2K  78643K        62        0
        memdesc     1      4K       4K  78643K         1        0
    crypto data     1      1K       1K  78643K         1        0
    ip6_options     0      0K       0K  78643K       275        0
            NDP    19      0K       0K  78643K       120        0
           temp   155   3015K    3091K  78643K     52931        0
         kqueue     3      4K      36K  78643K       376        0
      SYN cache     2     16K      16K  78643K         2        0
ddb> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
arp         64       19    0       13     1     0     1     1     0     8    0
rtpcb       80      168    0      166     1     0     1     1     0     8    0
rtentry    112      200    0      155     2     0     2     2     0     8    0
unpcb      120     2089    0     2080     7     6     1     2     0     8    0
syncache   264       22    0       22     7     6     1     1     0     8    1
tcpqe       32      319    0      319     4     4     0     1     0     8    0
tcpcb      544     1141    0     1135     4     3     1     2     0     8    0
ipq         40       10    0       10     5     5     0     1     0     8    0
ipqe        40      156    0      156     5     5     0     1     0     8    0
inpcb      280     3271    0     3262    10     8     2     4     0     8    1
rttmr       72        6    0        6     4     4     0     1     0     8    0
nd6         48       37    0       34     1     0     1     1     0     8    0
pkpcb       40       14    0       14     4     4     0     1     0     8    0
ppxss      1128       8    0        8     5     5     0     1     0     8    0
art_heap8  4096       2    0        0     2     0     2     2     0     8    0
art_heap4  256     1085    0      866    19     3    16    16     0     8    0
art_table   32     1087    0      866     2     0     2     2     0     8    0
art_node    16      199    0      154     1     0     1     1     0     8    0
sysvmsgpl   40       48    0       36     1     0     1     1     0     8    0
semapl     112      168    0      158     1     0     1     1     0     8    0
shmpl      112       60    0       12     2     0     2     2     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino1pl    128     3569    0     2170    46     0    46    46     0     8    0
ffsino     240     3569    0     2170    83     0    83    83     0     8    0
nchpl      144     6164    0     4571    60     0    60    60     0     8    0
uvmvnodes   72     3782    0        0    69     0    69    69     0     8    0
vnodes     208     3782    0        0   200     0   200   200     0     8    0
namei      1024   20125    0    20125     4     3     1     1     0     8    1
vcpupl     1984      13    0        0     2     0     2     2     0     8    0
vmpool     528       19    0        6     1     0     1     1     0     8    0
scsiplug    64        3    0        3     3     3     0     1     0     8    0
scxspl     192    23386    0    23386     1     0     1     1     0     8    1
plimitpl   152      130    0      123     1     0     1     1     0     8    0
sigapl     432     1569    0     1556     2     0     2     2     0     8    0
futexpl     56    39795    0    39795     6     5     1     1     0     8    1
knotepl    112     1180    0     1161     5     4     1     3     0     8    0
kqueuepl   104      820    0      818     1     0     1     1     0     8    0
pipelkpl    16      473    0      463     1     0     1     1     0     8    0
pipepl     120      946    0      927     4     3     1     2     0     8    0
fdescpl    432     1570    0     1556     2     0     2     2     0     8    0
filepl     120    16248    0    16152    11     6     5     5     0     8    2
lockfpl    104      344    0      343     1     0     1     1     0     8    0
lockfspl    48      116    0      115     1     0     1     1     0     8    0
sessionpl  112       23    0       13     1     0     1     1     0     8    0
pgrppl      48       39    0       29     1     0     1     1     0     8    0
ucredpl     96     1858    0     1851     1     0     1     1     0     8    0
zombiepl   144     1556    0     1555     1     0     1     1     0     8    0
processpl  896     1586    0     1555     4     0     4     4     0     8    0
procpl     624     3320    0     3280     5     1     4     4     0     8    0
sosppl     128       26    0       26     7     6     1     1     0     8    1
sockpl     400     5566    0     5546    21    16     5     7     0     8    2
mcl64k     65536    145    0      145     4     3     1     1     0     8    1
mcl16k     16384     16    0       16     5     5     0     1     0     8    0
mcl12k     12288     30    0       30     8     7     1     1     0     8    1
mcl9k      9216      27    0       27     5     5     0     1     0     8    0
mcl8k      8192      49    0       49     3     3     0     1     0     8    0
mcl4k      4096     172    0      172     5     4     1     1     0     8    1
mcl2k2     2112      12    0       12     8     8     0     1     0     8    0
mcl2k      2048   67288    0    67232    23    14     9    19     0     8    0
mtagpl      80       13    0       13     2     2     0     1     0     8    0
mbufpl     256   121123    0   120930    41    22    19    24     0     8    0
bufpl      280    10347    0     3980   455     0   455   455     0     8    0
anonpl      16   240920    0   223941   119    46    73    85     0   107    3
amapchunkpl 152    8981    0     8782    39    30     9    20     0   158    0
amappl16   192    11958    0    11047    94    45    49    59     0     8    2
amappl15   184       64    0       60     1     0     1     1     0     8    0
amappl14   176      277    0      275     1     0     1     1     0     8    0
amappl13   168        9    0        9     2     2     0     1     0     8    0
amappl12   160      137    0      137     2     2     0     1     0     8    0
amappl11   152      228    0      217     1     0     1     1     0     8    0
amappl10   144      131    0      129     1     0     1     1     0     8    0
amappl9    136     1217    0     1211     1     0     1     1     0     8    0
amappl8    128      755    0      725     2     0     2     2     0     8    1
amappl7    120      244    0      230     1     0     1     1     0     8    0
amappl6    112      227    0      218     1     0     1     1     0     8    0
amappl5    104      321    0      311     1     0     1     1     0     8    0
amappl4     96     1491    0     1462     1     0     1     1     0     8    0
amappl3     88      706    0      699     1     0     1     1     0     8    0
amappl2     80    11394    0    11323     3     1     2     3     0     8    0
amappl1     72    37933    0    37517    25    16     9    20     0     8    0
amappl      80     3681    0     3625     2     0     2     2     0    84    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      64       61    0       12     1     0     1     1     0     8    0
uaddrrnd    24     1589    0     1562     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     1589    0     1562     1     0     1     1     0     8    0
vmmpekpl   168    13895    0    13862     2     0     2     2     0     8    0
vmmpepl    168   197456    0   195406   209    98   111   125     0   357   18
vmsppl     272     1588    0     1562     3     1     2     2     0     8    0
pdppl      4096    3184    0     3137     9     2     7     7     0     8    1
pvpl        32   655836    0   636450   320   114   206   304     0   265   44
pmappl     200     1588    0     1562     2     0     2     2     0     8    0
extentpl    40       46    0       29     1     0     1     1     0     8    0
phpool     112      236    0       82     5     0     5     5     0     8    0

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/02/13 22:05 openbsd f1dacf2550c1 e6247653 .config console log report ci-openbsd-main
* Struck through repros no longer work on HEAD.