syzbot


panic() at panic+0x15c

Status: closed as dup on 2019/03/21 14:43
Reported-by: syzbot+989f8e27257a60293bf6@syzkaller.appspotmail.com
First crash: 1860d, last: 1647d
Duplicate of
Title Repro Cause bisect Fix bisect Count Last Reported
panic: fifo_badop called C 8841 1641d 1976d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd panic() at panic+0x15c (2) 1 1634d 1634d 0/3 closed as dup on 2019/11/02 14:37
openbsd panic() at panic+0x15c (3) 5 1608d 1625d 0/3 closed as dup on 2019/11/11 08:21

Sample crash report:
panic() at panic+0x15c sys/kern/subr_prf.c:207
ifa_update_broadaddr(ffff800000ab3000,ffff800000a99200,ffff800017b65100) at ifa_update_broadaddr+0x61 sys/net/if.c:2970
in_ioctl(80206913,ffff800017b650f0,ffff800000ab3000,1) at in_ioctl+0x463 sys/netinet/in.c:299
ifioctl(fffffd8029f547e8,80206913,ffff800017b650f0,ffff8000ffff8280) at ifioctl+0xb34 sys/net/if.c:2202
sys_ioctl(ffff8000ffff8280,ffff800017b65208,ffff800017b65250) at sys_ioctl+0x5b9
syscall(ffff800017b652d0) at syscall+0x507 sys/arch/amd64/amd64/trap.c:555
Xsyscall(6,0,ffffffffffffff36,0,3,fea77756010) at Xsyscall+0x128
end of kernel
end trace frame: 0xfec77966d30, count: 7
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb> 
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
ifa_update_broadaddr does not support dynamic length
ddb> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic() at panic+0x15c sys/kern/subr_prf.c:207
ifa_update_broadaddr(ffff800000ab3000,ffff800000a99200,ffff800017b65100) at ifa_update_broadaddr+0x61 sys/net/if.c:2970
in_ioctl(80206913,ffff800017b650f0,ffff800000ab3000,1) at in_ioctl+0x463 sys/netinet/in.c:299
ifioctl(fffffd8029f547e8,80206913,ffff800017b650f0,ffff8000ffff8280) at ifioctl+0xb34 sys/net/if.c:2202
sys_ioctl(ffff8000ffff8280,ffff800017b65208,ffff800017b65250) at sys_ioctl+0x5b9
syscall(ffff800017b652d0) at syscall+0x507 sys/arch/amd64/amd64/trap.c:555
Xsyscall(6,0,ffffffffffffff36,0,3,fea77756010) at Xsyscall+0x128
end of kernel
end trace frame: 0xfec77966d30, count: -8
ddb> show registers
rdi               0xffffffff8182e107    db_enter+0x17
rsi                          0x1ac91    acpi_pdirpa+0x6af9
rbp               0xffff800017b64e90
rbx               0xffff800017b64f40
rdx                          0x1ac92    acpi_pdirpa+0x6afa
rcx               0xffff800016540000
rax               0xffff800016540000
r8                0xffff800017b64e50
r9                               0x1
r10               0xffff800000abbf00
r11               0x5b1888b2489d5cb0
r12                     0x3000000008
r13               0xffff800017b64ea0
r14                            0x100
r15                              0x1
rip               0xffffffff8182e108    db_enter+0x18
cs                               0x8
rflags                         0x246
rsp               0xffff800017b64e80
ss                              0x10
db_enter+0x18:  addq    $0x8,%rsp
ddb> show proc
PROC (syz-executor.0) pid=274285 stat=onproc
    flags process=0 proc=4000000<THREAD>
    pri=83, usrpri=83, nice=20
    forw=0xffffffffffffffff, list=0xffff8000ffff9b30,0xffffffff82562590
    process=0xffff8000ffff7450 user=0xffff800017b60000, vmspace=0xfffffd803f013dd0
    estcpu=33, cpticks=6, pctcpu=0.3
    user=0, sys=8, intr=1
ddb> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 39759  513185  63312      0  2           0                syz-executor.0
*39759  274285  63312      0  7   0x4000000                syz-executor.0
  2690  361648  96381      0  2       0x480                syz-executor.1
  2690  423816  96381      0  3   0x4000080  select        syz-executor.1
  2690  357109  96381      0  3   0x4000080  fsleep        syz-executor.1
 96381  333859  58726      0  2       0x482                syz-executor.1
 63312   24700  58726      0  2       0x482                syz-executor.0
 13649  198097      0      0  3     0x14200  acct          acct
 98005  463224      0      0  3     0x14200  bored         sosplice
 58726  144715  42610      0  3        0x82  thrsleep      syz-fuzzer
 58726  245973  42610      0  2   0x4000482                syz-fuzzer
 58726  103548  42610      0  3   0x4000082  kqread        syz-fuzzer
 58726  481178  42610      0  3   0x4000082  thrsleep      syz-fuzzer
 58726   28160  42610      0  3   0x4000082  thrsleep      syz-fuzzer
 58726  256002  42610      0  3   0x4000082  thrsleep      syz-fuzzer
 58726  482113  42610      0  3   0x4000082  thrsleep      syz-fuzzer
 42610   64616  47372      0  3    0x10008a  pause         ksh
 47372   35216  13548      0  3        0x92  select        sshd
 74745  156083      1      0  3    0x100083  ttyin         getty
 13548   16093      1      0  3        0x80  select        sshd
 44013  160054  91609     73  3    0x100090  kqread        syslogd
 91609   96270      1      0  3    0x100082  netio         syslogd
 47670  478461      1     77  3    0x100090  poll          dhclient
 48137  425077      1      0  3        0x80  poll          dhclient
 24183  334938      0      0  2     0x14200                zerothread
 63363  518429      0      0  3     0x14200  aiodoned      aiodoned
 23793  450547      0      0  2     0x14200                update
 84048  383108      0      0  3     0x14200  cleaner       cleaner
 36182  268403      0      0  3     0x14200  reaper        reaper
 67761  113155      0      0  3     0x14200  pgdaemon      pagedaemon
 11516  255670      0      0  3     0x14200  bored         crynlk
 33743  390337      0      0  3     0x14200  bored         crypto
 14703  179393      0      0  3  0x40014200  acpi0         acpi0
 28154  224773      0      0  3     0x14200  bored         softnet
 75970  445820      0      0  3     0x14200  bored         systqmp
  5449  399847      0      0  3     0x14200  bored         systq
 27703  184180      0      0  3  0x40014200  bored         softclock
 86689  130531      0      0  3  0x40014200                idle0
  2776  253477      0      0  2     0x14200                smr
     1   30837      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb> show all locks
No such command
ddb> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim Kern Lim
         devbuf  9583   6446K    7832K  78643K     20705        0        0
            pcb    13     12K      14K  78643K       599        0        0
         rtable    97     11K      12K  78643K      2090        0        0
         ifaddr    84     17K      19K  78643K       465        0        0
       counters    19     16K      16K  78643K        19        0        0
       ioctlops     0      0K       2K  78643K       190        0        0
            iov     0      0K      24K  78643K       692        0        0
          mount     1      1K       1K  78643K         1        0        0
         vnodes  1210     76K      77K  78643K      4794        0        0
      UFS quota     1     32K      32K  78643K         1        0        0
      UFS mount     5     36K      36K  78643K         5        0        0
            shm     2      1K       5K  78643K        44        0        0
         VM map    35      8K       8K  78643K        52        0        0
            sem    12      1K       1K  78643K       590        0        0
        dirhash    12      2K       2K  78643K        12        0        0
           ACPI  1793    195K     288K  78643K     12645        0        0
      file desc     6     17K      25K  78643K      2749        0        0
          sigio     1      0K       0K  78643K        96        0        0
           proc    49     38K      63K  78643K      1330        0        0
        subproc    32      2K       2K  78643K       376        0        0
    NFS srvsock     1      0K       0K  78643K         1        0        0
     NFS daemon     1     16K      16K  78643K         1        0        0
    ip_moptions     0      0K       0K  78643K       682        0        0
       in_multi    23      1K       2K  78643K       426        0        0
    ether_multi     1      0K       0K  78643K        25        0        0
            mrt     0      0K       0K  78643K        26        0        0
    ISOFS mount     1     32K      32K  78643K         1        0        0
  MSDOSFS mount     1     16K      16K  78643K         1        0        0
           ttys   102    450K     450K  78643K       102        0        0
           exec     0      0K       1K  78643K       724        0        0
     pfkey data     0      0K       4K  78643K         2        0        0
        pagedep     1      8K       8K  78643K         1        0        0
       inodedep     1     32K      32K  78643K         1        0        0
         newblk     1      0K       0K  78643K         1        0        0
        VM swap     7     26K      26K  78643K         7        0        0
       UVM amap   154    282K     287K  78643K      8049        0        0
       UVM aobj   130      8K       8K  78643K       141        0        0
        memdesc     1      4K       4K  78643K         1        0        0
    crypto data     1      1K       1K  78643K         1        0        0
    ip6_options     0      0K       0K  78643K       537        0        0
            NDP    20      0K       0K  78643K       159        0        0
           temp   226   3544K    4184K  78643K    180843        0        0
         kqueue     0      0K       0K  78643K        43        0        0
      SYN cache     2     16K      16K  78643K         2        0        0
ddb> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
arp         64       99    0       94     1     0     1     1     0     8    0
rtpcb       80      330    0      328     1     0     1     1     0     8    0
rtentry    112      406    0      372     2     0     2     2     0     8    0
unpcb      120     3726    0     3714     1     0     1     1     0     8    0
syncache   264       17    0       17     7     7     0     1     0     8    0
sackhl      24        2    0        2     2     2     0     1     0     8    0
tcpqe       32      111    0      111     5     5     0     1     0     8    0
tcpcb      544     1586    0     1582    18    17     1    15     0     8    0
ipq         40       18    0       18     7     7     0     1     0     8    0
ipqe        40      339    0      339     7     7     0     1     0     8    0
inpcb      280     6504    0     6495    29    28     1    13     0     8    0
rttmr       72        9    0        8     3     2     1     1     0     8    0
ip6q        72        1    0        1     1     1     0     1     0     8    0
ip6af       40        3    0        3     1     1     0     1     0     8    0
nd6         48       52    0       50     1     0     1     1     0     8    0
pkpcb       40       14    0       14     5     5     0     1     0     8    0
swfcl       56        2    0        0     1     0     1     1     0     8    0
ppxss      1128      46    0       46    12    12     0     1     0     8    0
art_heap8  4096       5    0        4     4     3     1     3     0     8    0
art_heap4  256     1538    0     1340    28    15    13    16     0     8    0
art_table   32     1543    0     1344     3     0     3     3     0     8    0
art_node    16      405    0      374     1     0     1     1     0     8    0
sysvmsgpl   40       72    0       52     1     0     1     1     0     8    0
semupl     112        1    0        1     1     1     0     1     0     8    0
semapl     112      586    0      576     1     0     1     1     0     8    0
shmpl      112      139    0       11     4     0     4     4     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino1pl    128     5637    0     4238    46     0    46    46     0     8    0
ffsino     240     5637    0     4238    83     0    83    83     0     8    0
nchpl      144     9875    0     9403    60    40    20    60     0     8    0
uvmvnodes   72     7232    0        0   132     0   132   132     0     8    0
vnodes     208     7232    0        0   381     0   381   381     0     8    0
namei      1024   34856    0    34856     3     2     1     1     0     8    1
vcpupl     1984      33    0        0     5     0     5     5     0     8    0
vmpool     520       50    0       17     3     0     3     3     0     8    0
scsiplug    64        1    0        1     1     1     0     1     0     8    0
scxspl     192    37263    0    37263    26    25     1     7     0     8    1
plimitpl   152      259    0      252     1     0     1     1     0     8    0
sigapl     432     2860    0     2846     2     0     2     2     0     8    0
futexpl     56    78900    0    78899     3     2     1     1     0     8    0
knotepl    112      864    0      845     4     3     1     3     0     8    0
kqueuepl   104      786    0      784     4     3     1     4     0     8    0
pipepl     112     1828    0     1809     5     3     2     2     0     8    1
fdescpl    424     2861    0     2846     2     0     2     2     0     8    0
filepl     120    28680    0    28583    28    24     4    11     0     8    0
lockfpl    104     1160    0     1159     1     0     1     1     0     8    0
lockfspl    48      351    0      350     1     0     1     1     0     8    0
sessionpl  112       37    0       27     1     0     1     1     0     8    0
pgrppl      48      145    0      135     1     0     1     1     0     8    0
ucredpl     96     3022    0     3015     1     0     1     1     0     8    0
zombiepl   144     2847    0     2847     1     0     1     1     0     8    1
processpl  864     2878    0     2847     4     0     4     4     0     8    0
procpl     632     6178    0     6138     4     0     4     4     0     8    0
sosppl     128       51    0       51    10    10     0     1     0     8    0
sockpl     384    10613    0    10590    41    37     4    21     0     8    0
mcl64k     65536    526    0      526    35    35     0    33     0     8    0
mcl16k     16384     30    0       30    10    10     0     1     0     8    0
mcl12k     12288     84    0       84     7     7     0     1     0     8    0
mcl9k      9216      47    0       47     7     7     0     1     0     8    0
mcl8k      8192     115    0      115     4     4     0     1     0     8    0
mcl4k      4096     292    0      292     4     3     1     1     0     8    1
mcl2k2     2112      29    0       29    13    13     0     1     0     8    0
mcl2k      2048   73045    0    72997    19    11     8    14     0     8    0
mtagpl      80      133    0      123     3     2     1     1     0     8    0
mbufpl     256   143640    0   143514    61    49    12    24     0     8    0
bufpl      256    18940    0    11707   453     0   453   453     0     8    0
anonpl      16   403160    0   384355   181    89    92    95     0    62   13
amapchunkpl 152   18022    0    17904    65    56     9    19     0   158    3
amappl16   192    18310    0    17210   178   115    63    68     0     8    7
amappl15   184      222    0      218     5     4     1     1     0     8    0
amappl14   176      250    0      245     1     0     1     1     0     8    0
amappl13   168       80    0       80     5     5     0     1     0     8    0
amappl12   160      776    0      774     1     0     1     1     0     8    0
amappl11   152      449    0      437     1     0     1     1     0     8    0
amappl10   144      561    0      558     1     0     1     1     0     8    0
amappl9    136      893    0      886     1     0     1     1     0     8    0
amappl8    128      430    0      390     2     0     2     2     0     8    0
amappl7    120      663    0      656     1     0     1     1     0     8    0
amappl6    112      429    0      418     1     0     1     1     0     8    0
amappl5    104     1053    0     1043     1     0     1     1     0     8    0
amappl4     96     2387    0     2359     1     0     1     1     0     8    0
amappl3     88     1017    0     1010     1     0     1     1     0     8    0
amappl2     80    21046    0    20966     3     1     2     3     0     8    0
amappl1     72    63339    0    62899    27    18     9    20     0     8    0
amappl      80     6924    0     6864     3     1     2     2     0    84    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       17    0       17     1     1     0     1     0     8    0
aobjpl      64      140    0       11     3     0     3     3     0     8    0
uaddrrnd    24     2911    0     2846     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     2911    0     2846     1     0     1     1     0     8    0
vmmpekpl   168    21103    0    21069     2     0     2     2     0     8    0
vmmpepl    168   360302    0   357941   265   143   122   139     0   357   18
vmsppl     272     2860    0     2846     2     1     1     2     0     8    0
pdppl      4096    5828    0     5759    11     2     9     9     0     8    0
pvpl        32  1062058    0  1040561   442   175   267   318     0   265   89
pmappl     200     2910    0     2863     3     0     3     3     0     8    0
extentpl    40       41    0       26     1     0     1     1     0     8    0
phpool     112      740    0      154    17     0    17    17     0     8    0

Crashes (63):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/10/20 04:06 openbsd 8b95a59bc25b 8c88c9c1 .config console log report ci-openbsd-main
2019/10/18 16:49 openbsd 1463ff3c9b45 8c88c9c1 .config console log report ci-openbsd-main
2019/10/18 08:25 openbsd 1463ff3c9b45 8c88c9c1 .config console log report ci-openbsd-main
2019/10/11 16:54 openbsd b8fc78b9a375 426631dd .config console log report ci-openbsd-main
2019/10/09 21:21 openbsd 3aad80730281 312c6a5a .config console log report ci-openbsd-main
2019/10/09 07:42 openbsd 70f1de17401b b1ebbfef .config console log report ci-openbsd-main
2019/09/25 01:05 openbsd 5fb9eef93de4 0942eab8 .config console log report ci-openbsd-main
2019/09/24 13:50 openbsd 1be6ca1c7524 c68252d2 .config console log report ci-openbsd-multicore
2019/09/23 03:43 openbsd 2f346d2b6595 d96e88f3 .config console log report ci-openbsd-main
2019/09/16 14:43 openbsd c8f0e7027fe0 55c50e70 .config console log report ci-openbsd-main
2019/09/10 18:22 openbsd 4f5a6e711025 a60cb4cd .config console log report ci-openbsd-main
2019/09/06 07:24 openbsd 87bcbcf52bc3 c16be727 .config console log report ci-openbsd-multicore
2019/09/04 02:59 openbsd 9b0b1e37334d 526709ff .config console log report ci-openbsd-multicore
2019/09/03 18:30 openbsd 196a4743c6fd 48448e71 .config console log report ci-openbsd-main
2019/09/03 09:36 openbsd 0abf16dec3ff 14544a56 .config console log report ci-openbsd-multicore
2019/09/02 22:24 openbsd d599800f4f20 14544a56 .config console log report ci-openbsd-multicore
2019/09/02 17:50 openbsd d599800f4f20 14544a56 .config console log report ci-openbsd-main
2019/09/01 09:10 openbsd 7c0958186614 bad3cce2 .config console log report ci-openbsd-main
2019/08/31 23:02 openbsd d9ff79beba61 bad3cce2 .config console log report ci-openbsd-main
2019/08/31 20:55 openbsd d9ff79beba61 bad3cce2 .config console log report ci-openbsd-multicore
2019/08/31 17:45 openbsd d9ff79beba61 bad3cce2 .config console log report ci-openbsd-main
2019/08/31 13:15 openbsd 2ff3873d0ce9 bcd7bcc2 .config console log report ci-openbsd-multicore
2019/08/31 07:27 openbsd 2ff3873d0ce9 bcd7bcc2 .config console log report ci-openbsd-main
2019/08/30 21:13 openbsd 704010f9f112 9adfa876 .config console log report ci-openbsd-multicore
2019/08/29 22:19 openbsd 5bbf75670cd8 cd626f3b .config console log report ci-openbsd-main
2019/08/29 19:18 openbsd 5bbf75670cd8 cd626f3b .config console log report ci-openbsd-main
2019/08/28 07:30 openbsd aafa0abd391e fd37b39e .config console log report ci-openbsd-main
2019/08/28 05:41 openbsd aafa0abd391e fd37b39e .config console log report ci-openbsd-main
2019/08/27 13:27 openbsd f26588393b60 d21c5d9d .config console log report ci-openbsd-main
2019/08/26 11:17 openbsd 56a8f046bf24 d21c5d9d .config console log report ci-openbsd-main
2019/08/26 03:49 openbsd 56a8f046bf24 d21c5d9d .config console log report ci-openbsd-main
2019/08/25 23:26 openbsd a1d6d12691b4 d21c5d9d .config console log report ci-openbsd-main
2019/08/24 17:47 openbsd 1507cfe1d6a4 78ded196 .config console log report ci-openbsd-multicore
2019/08/12 09:37 openbsd 4e6b438a7e45 8620c2c2 .config console log report ci-openbsd-main
2019/08/04 12:05 openbsd e4f599ca6879 6affd8e8 .config console log report ci-openbsd-main
2019/08/03 02:39 openbsd f7c95aac3abf 3faab807 .config console log report ci-openbsd-main
2019/08/01 06:22 openbsd e9c83ba3b557 c692b5bd .config console log report ci-openbsd-multicore
2019/07/31 03:47 openbsd 75866a61bd74 7c7ded69 .config console log report ci-openbsd-main
2019/07/22 14:59 openbsd 7524c6dcc1ee b3c615f5 .config console log report ci-openbsd-main
2019/06/10 16:36 openbsd 85c5a5c1ec6b 0159583c .config console log report ci-openbsd-main
2019/06/10 04:01 openbsd 806c0a15e46e 0159583c .config console log report ci-openbsd-main
2019/06/09 20:48 openbsd 841516aa3fae 0159583c .config console log report ci-openbsd-main
2019/05/19 05:57 openbsd 41b007386b53 5a4461b0 .config console log report ci-openbsd-main
2019/05/10 07:43 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/10 06:04 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-multicore
2019/05/10 02:43 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/10 02:00 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/10 00:04 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/09 23:55 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/09 23:37 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/09 23:33 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/09 22:47 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/09 22:09 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/09 21:04 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-multicore
2019/05/09 17:58 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/09 17:05 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/09 15:22 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/09 15:21 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/09 12:38 openbsd 2f8707c8a257 1ab4c999 .config console log report ci-openbsd-main
2019/05/09 10:48 openbsd 2f8707c8a257 1ab4c999 .config console log report ci-openbsd-multicore
2019/04/14 09:56 openbsd 62302bca6881 505ab413 .config console log report ci-openbsd-main
2019/03/24 21:30 openbsd b3dbd5f2ca08 2c86e0a5 .config console log report ci-openbsd-main
2019/03/21 13:53 openbsd f475d39eb98b f6094a8c .config console log report ci-openbsd-main
* Struck through repros no longer work on HEAD.