syzbot


panic: receive 1: so ADDR, so_type 3, sb_cc 5794

Status: closed as dup on 2019/12/20 08:49
Reported-by: syzbot+07a36a6f67d8391c4d52@syzkaller.appspotmail.com
First crash: 1582d, last: 1582d
Duplicate of
Title Repro Cause bisect Fix bisect Count Last Reported
panic: receive 1: so ADDR, so_type 3, sb_cc 176 1 1634d 1634d

Sample crash report:
panic: receive 1: so 0xfffffd805e4e3300, so_type 3, sb_cc 5794
Stopped at      db_enter+0x18:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*283173  27344      0           0          0    0  dhclient
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic(ffffffff8219efd5) at panic+0x15c sys/kern/subr_prf.c:207
soreceive(fffffd805e4e3300,0,ffff80001d3767e8,0,0,ffff80001d3766f4) at soreceive+0x16ac sys/kern/uipc_socket.c:798
soo_read(fffffd80675f74b0,ffff80001d3767e8,0) at soo_read+0x53 sys/kern/sys_socket.c:70
dofilereadv(ffff8000ffff9150,6,ffff80001d3767e8,0,ffff80001d3768d0) at dofilereadv+0x1a2 sys/kern/sys_generic.c:236
sys_read(ffff8000ffff9150,ffff80001d376880,ffff80001d3768d0) at sys_read+0x83 sys/kern/sys_generic.c:156
syscall(ffff80001d376950) at syscall+0x507 sys/arch/amd64/amd64/trap.c:555
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7f7ffffc4b70, count: 7
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb> 
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
receive 1: so 0xfffffd805e4e3300, so_type 3, sb_cc 5794
ddb> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic(ffffffff8219efd5) at panic+0x15c sys/kern/subr_prf.c:207
soreceive(fffffd805e4e3300,0,ffff80001d3767e8,0,0,ffff80001d3766f4) at soreceive+0x16ac sys/kern/uipc_socket.c:798
soo_read(fffffd80675f74b0,ffff80001d3767e8,0) at soo_read+0x53 sys/kern/sys_socket.c:70
dofilereadv(ffff8000ffff9150,6,ffff80001d3767e8,0,ffff80001d3768d0) at dofilereadv+0x1a2 sys/kern/sys_generic.c:236
sys_read(ffff8000ffff9150,ffff80001d376880,ffff80001d3768d0) at sys_read+0x83 sys/kern/sys_generic.c:156
syscall(ffff80001d376950) at syscall+0x507 sys/arch/amd64/amd64/trap.c:555
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7f7ffffc4b70, count: -8
ddb> show registers
rdi                                0
rsi                              0x1
rbp               0xffff80001d376530
rbx               0xffff80001d3765e0
rdx                              0x2
rcx                                0
rax                                0
r8                0xffff80001d3764f0
r9                               0x1
r10                                0
r11               0x4f9f6edc76f6c583
r12                     0x3000000008
r13               0xffff80001d376540
r14                            0x100
r15                              0x1
rip               0xffffffff81e4b5a8    db_enter+0x18
cs                               0x8
rflags                         0x246
rsp               0xffff80001d376520
ss                              0x10
db_enter+0x18:  addq    $0x8,%rsp
ddb> show proc
PROC (dhclient) pid=283173 stat=onproc
    flags process=0 proc=0
    pri=50, usrpri=50, nice=20
    forw=0xffffffffffffffff, list=0xffff8000ffff84f8,0xffff8000ffff93d8
    process=0xffff8000ffff6db0 user=0xffff80001d371000, vmspace=0xfffffd806bc12550
    estcpu=0, cpticks=1, pctcpu=0.0
    user=0, sys=1, intr=0
ddb> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 31166  299608      0      0  3     0x14200  acct          acct
 46891  430552  19289      0  2         0x2                syz-executor.0
 22488  371898      0      0  3     0x14200  bored         sosplice
 19289  285651  18734      0  3        0x82  thrsleep      syz-fuzzer
 19289  152264  18734      0  2   0x4000082                syz-fuzzer
 19289  150353  18734      0  3   0x4000082  thrsleep      syz-fuzzer
 19289  350795  18734      0  3   0x4000082  thrsleep      syz-fuzzer
 19289  213087  18734      0  3   0x4000082  thrsleep      syz-fuzzer
 19289  496283  18734      0  2   0x4000002                syz-fuzzer
 19289  457779  18734      0  3   0x4000082  thrsleep      syz-fuzzer
 19289    1013  18734      0  3   0x4000082  thrsleep      syz-fuzzer
 18734  334855  82319      0  3    0x10008a  pause         ksh
 82319  102984  44755      0  3        0x92  select        sshd
 45440  394646      1      0  3    0x100083  ttyin         getty
 44755  183346      1      0  3        0x80  select        sshd
 60981  281982  31098     73  3    0x100090  kqread        syslogd
 31098  155665      1      0  3    0x100082  netio         syslogd
 10901  267015      1     77  2    0x100010                dhclient
*27344  283173      1      0  7           0                dhclient
 78882  263802      0      0  2     0x14200                zerothread
 71839  138704      0      0  3     0x14200  aiodoned      aiodoned
 47246  152780      0      0  3     0x14200  syncer        update
 56514  437616      0      0  3     0x14200  cleaner       cleaner
 85962  413777      0      0  3     0x14200  reaper        reaper
 70692  395665      0      0  3     0x14200  pgdaemon      pagedaemon
 77450  133979      0      0  3     0x14200  bored         crynlk
 69738  373401      0      0  3     0x14200  bored         crypto
 90597  431233      0      0  3  0x40014200  acpi0         acpi0
 23824  151039      0      0  2     0x14200                softnet
 40912  391142      0      0  2     0x14200                systqmp
 19410  419674      0      0  3     0x14200  bored         systq
 95095    8505      0      0  3  0x40014200  bored         softclock
 43153  366229      0      0  3  0x40014200                idle0
 54855  260003      0      0  3     0x14200  bored         smr
     1   95979      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb> show all locks
No such command
ddb> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf  9534   7023K    7656K  78643K     12447        0
            pcb    13     10K      12K  78643K       250        0
         rtable    87      3K       4K  78643K       646        0
         ifaddr   100     19K      21K  78643K       262        0
       counters    19     16K      16K  78643K        19        0
       ioctlops     0      0K       2K  78643K       241        0
            iov     0      0K      24K  78643K       180        0
          mount     1      1K       1K  78643K         1        0
         vnodes  1214     76K      77K  78643K      1873        0
      UFS quota     1     32K      32K  78643K         1        0
      UFS mount     5     36K      36K  78643K         5        0
            shm     2      1K       5K  78643K        11        0
         VM map     2      0K       0K  78643K         2        0
            sem    12      0K       0K  78643K       142        0
        dirhash    12      2K       2K  78643K        12        0
           ACPI  1794    195K     288K  78643K     12646        0
      file desc     4      9K      25K  78643K      1836        0
          sigio     0      0K       0K  78643K         4        0
           proc    49     38K      55K  78643K       495        0
        subproc    23      1K       2K  78643K        68        0
    NFS srvsock     1      0K       0K  78643K         1        0
     NFS daemon     1     16K      16K  78643K         1        0
    ip_moptions     0      0K       0K  78643K       182        0
       in_multi   121      5K       6K  78643K       224        0
    ether_multi     1      0K       0K  78643K        10        0
            mrt     0      0K       0K  78643K        29        0
    ISOFS mount     1     32K      32K  78643K         1        0
  MSDOSFS mount     1     16K      16K  78643K         1        0
           ttys    60    265K     265K  78643K        60        0
           exec     0      0K       1K  78643K       284        0
        pagedep     1      8K       8K  78643K         1        0
       inodedep     1     32K      32K  78643K         1        0
         newblk     1      0K       0K  78643K         1        0
        VM swap     7     26K      26K  78643K         7        0
       UVM amap   134    152K     161K  78643K      4868        0
       UVM aobj    47      4K       4K  78643K        49        0
        memdesc     1      4K       4K  78643K         1        0
    crypto data     1      1K       1K  78643K         1        0
    ip6_options     0      0K       0K  78643K       165        0
            NDP    15      0K       0K  78643K        59        0
           temp   146   3031K    3665K  78643K     29797        0
         kqueue     0      0K       0K  78643K        30        0
      SYN cache     2     16K      16K  78643K         2        0
ddb> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
arp         64       14    0       10     1     0     1     1     0     8    0
rtpcb       80      137    0      135     1     0     1     1     0     8    0
rtentry    112      128    0       96     2     0     2     2     0     8    0
unpcb      120      450    0      442     1     0     1     1     0     8    0
syncache   264        5    0        5     2     2     0     1     0     8    0
sackhl      24        3    0        3     2     1     1     1     0     8    1
tcpqe       32      117    0      117     2     2     0     1     0     8    0
tcpcb      544      500    0      496    15     1    14    14     0     8   13
ipq         40        8    0        8     3     3     0     1     0     8    0
ipqe        40      360    0      360     3     3     0     1     0     8    0
inpcb      280     2490    0     2483    10     1     9     9     0     8    8
rttmr       72        7    0        7     2     2     0     1     0     8    0
ip6q        72        1    0        1     1     1     0     1     0     8    0
ip6af       40        3    0        3     1     1     0     1     0     8    0
nd6         48       19    0       18     1     0     1     1     0     8    0
ppxss      1128      20    0       20     5     5     0     1     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256      651    0      438    18     2    16    17     0     8    0
art_table   32      652    0      438     3     0     3     3     0     8    0
art_node    16      126    0       87     1     0     1     1     0     8    0
sysvmsgpl   40       20    0        5     1     0     1     1     0     8    0
semapl     112      140    0      130     1     0     1     1     0     8    0
shmpl      112       47    0        2     3     1     2     2     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino1pl    128     3667    0     2268    46     0    46    46     0     8    0
ffsino     240     3667    0     2268    83     0    83    83     0     8    0
nchpl      144     6026    0     4424    60     0    60    60     0     8    0
uvmvnodes   72     4166    0        0    76     0    76    76     0     8    0
vnodes     208     4166    0        0   220     0   220   220     0     8    0
namei      1024   18643    0    18643     1     0     1     1     0     8    1
vcpupl     1984      16    0        2     2     0     2     2     0     8    0
vmpool     528       20    0        6     1     0     1     1     0     8    0
scsiplug    64        2    0        2     1     1     0     1     0     8    0
scxspl     192    18510    0    18510     1     0     1     1     0     8    1
plimitpl   152       75    0       68     1     0     1     1     0     8    0
sigapl     432     2001    0     1989     2     0     2     2     0     8    0
futexpl     56    29983    0    29983     1     0     1     1     0     8    1
knotepl    112      695    0      676     2     1     1     2     0     8    0
kqueuepl   104     1030    0     1028     4     0     4     4     0     8    3
pipepl     128      538    0      520     4     3     1     2     0     8    0
fdescpl    424     2002    0     1989     2     0     2     2     0     8    0
filepl     120    12638    0    12553    13     2    11    11     0     8    8
lockfpl    104      288    0      287     1     0     1     1     0     8    0
lockfspl    48       99    0       98     1     0     1     1     0     8    0
sessionpl  112       19    0        9     1     0     1     1     0     8    0
pgrppl      48       25    0       15     1     0     1     1     0     8    0
ucredpl     96      838    0      831     1     0     1     1     0     8    0
zombiepl   144     1992    0     1990     1     0     1     1     0     8    0
processpl  872     2020    0     1990     4     0     4     4     0     8    0
procpl     632     4037    0     4000     4     0     4     4     0     8    0
sosppl     128      385    0      385     1     0     1     1     0     8    1
sockpl     384     3081    0     3064    17     3    14    14     0     8   12
mcl64k     65536    327    0      327    33    32     1    32     0     8    1
mcl16k     16384      6    0        6     3     3     0     1     0     8    0
mcl12k     12288     17    0       17     4     4     0     1     0     8    0
mcl9k      9216      13    0       13     4     3     1     1     0     8    1
mcl8k      8192      35    0       35     3     2     1     1     0     8    1
mcl4k      4096     135    0      135     2     1     1     1     0     8    1
mcl2k2     2112      11    0       11     5     5     0     1     0     8    0
mcl2k      2048   67144    0    67091    18    10     8    16     0     8    1
mtagpl      80       57    0        8     2     1     1     1     0     8    0
mbufpl     256   120974    0   120629    61    36    25    33     0     8    0
bufpl      280     9572    0     3388   443     0   443   443     0     8    0
anonpl      16   178421    0   158799   112    30    82    94     0   107    1
amapchunkpl 152    7648    0     7499    21    14     7    16     0   158    0
amappl16   192     9959    0     8884    82    27    55    66     0     8    1
amappl15   184       63    0       58     1     0     1     1     0     8    0
amappl14   176       46    0       43     1     0     1     1     0     8    0
amappl12   160       16    0       13     1     0     1     1     0     8    0
amappl11   152      614    0      601     1     0     1     1     0     8    0
amappl10   144     1053    0     1050     1     0     1     1     0     8    0
amappl9    136      751    0      748     1     0     1     1     0     8    0
amappl8    128      323    0      291     2     0     2     2     0     8    0
amappl7    120     1143    0     1132     1     0     1     1     0     8    0
amappl6    112      609    0      600     1     0     1     1     0     8    0
amappl5    104      186    0      176     1     0     1     1     0     8    0
amappl4     96     2227    0     2199     1     0     1     1     0     8    0
amappl3     88      140    0      129     1     0     1     1     0     8    0
amappl2     80    15131    0    15068     3     1     2     3     0     8    0
amappl1     72    40356    0    39959    26    17     9    20     0     8    0
amappl      80     4301    0     4250     2     0     2     2     0    84    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      64       48    0        2     1     0     1     1     0     8    0
uaddrrnd    24     2022    0     1995     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     2022    0     1995     1     0     1     1     0     8    0
vmmpekpl   168    12762    0    12735     2     0     2     2     0     8    0
vmmpepl    168   235080    0   232982   180    70   110   137     0   357   13
vmsppl     272     2021    0     1995     2     0     2     2     0     8    0
pdppl      4096    4050    0     4004     8     1     7     7     0     8    0
pvpl        32   497384    0   474814   248    49   199   219     0   265   13
pmappl     200     2021    0     1995     3     1     2     2     0     8    0
extentpl    40       46    0       29     1     0     1     1     0     8    0
phpool     112      253    0       90     6     0     6     6     0     8    0

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/12/19 22:19 openbsd aff390a7af92 36650b4b .config console log report ci-openbsd-main
* Struck through repros no longer work on HEAD.