kern.securelevel: 0 -> 1 creating runtime link editor directory cache. preserving editor files. starting network daemons: sshd. starting local daemons:. Wed Nov 13 16:34:18 PST 2019 OpenBSD/amd64 (ci-openbsd-main-0.c.syzkaller.internal) (tty00) Warning: Permanently added '10.128.0.71' (ECDSA) to the list of known hosts. 2019/11/13 16:34:34 parsed 1 programs 2019/11/13 16:34:41 executed programs: 0 login: panic: receive 1a: so 0xfffffd8037012480, so_type 3, m 0xfffffd803dd1b200, m_type 0 Stopped at db_enter+0x18: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *510474 97339 0 0 0 0 dhclient db_enter() at db_enter+0x18 panic() at panic+0x15c soreceive(fffffd8037012480,0,ffff8000148866e8,0,0,ffff8000148865f4) at soreceive+0x170a soo_read(fffffd8037563708,ffff8000148866e8,0) at soo_read+0x53 dofilereadv(ffff8000ffff93c8,6,ffff8000148866e8,0,ffff8000148867d0) at dofilereadv+0x1a2 sys_read(ffff8000ffff93c8,ffff800014886780,ffff8000148867d0) at sys_read+0x83 syscall(ffff800014886850) at syscall+0x507 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffc68b0, count: 7 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic receive 1a: so 0xfffffd8037012480, so_type 3, m 0xfffffd803dd1b200, m_type 0 ddb> trace db_enter() at db_enter+0x18 panic() at panic+0x15c soreceive(fffffd8037012480,0,ffff8000148866e8,0,0,ffff8000148865f4) at soreceive+0x170a soo_read(fffffd8037563708,ffff8000148866e8,0) at soo_read+0x53 dofilereadv(ffff8000ffff93c8,6,ffff8000148866e8,0,ffff8000148867d0) at dofilereadv+0x1a2 sys_read(ffff8000ffff93c8,ffff800014886780,ffff8000148867d0) at sys_read+0x83 syscall(ffff800014886850) at syscall+0x507 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffc68b0, count: -8 ddb> show registers rdi 0 rsi 0x1 rbp 0xffff800014886430 rbx 0xffff8000148864e0 rdx 0x2 rcx 0x1 rax 0x1 r8 0xffff8000148863f0 r9 0x1 r10 0x1e1b06564566ade5 r11 0xf2a5fc5dc66735fd r12 0x3000000008 r13 0xffff800014886440 r14 0x100 r15 0x1 rip 0xffffffff814c7838 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff800014886420 ss 0x10 db_enter+0x18: addq $0x8,%rsp ddb> show proc PROC (dhclient) pid=510474 stat=onproc flags process=0 proc=0 pri=50, usrpri=50, nice=20 forw=0xffffffffffffffff, list=0xffff8000ffff8280,0xffff8000ffff9650 process=0xffff8000ffff6010 user=0xffff800014881000, vmspace=0xfffffd803f013660 estcpu=0, cpticks=1, pctcpu=0.0 user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 87778 69352 93672 0 3 0x82 thrsleep syz-execprog 87778 168195 93672 0 3 0x4000082 nanosleep syz-execprog 87778 69116 93672 0 3 0x4000082 thrsleep syz-execprog 87778 381738 93672 0 3 0x4000082 thrsleep syz-execprog 87778 26640 93672 0 3 0x4000082 wait syz-execprog 87778 121307 93672 0 3 0x4000082 thrsleep syz-execprog 87778 366728 93672 0 3 0x4000082 thrsleep syz-execprog 93672 79684 46106 0 3 0x10008a pause ksh 46106 202059 25758 0 3 0x92 select sshd 99008 54247 1 0 3 0x100083 ttyin getty 25758 183836 1 0 3 0x80 select sshd 42283 502082 3223 73 3 0x100090 kqread syslogd 3223 301768 1 0 3 0x100082 netio syslogd 89342 467958 1 77 2 0x100010 dhclient *97339 510474 1 0 7 0 dhclient 7476 51450 0 0 3 0x14200 pgzero zerothread 75043 492904 0 0 3 0x14200 aiodoned aiodoned 31570 395122 0 0 3 0x14200 syncer update 44273 244917 0 0 3 0x14200 cleaner cleaner 88231 154659 0 0 3 0x14200 reaper reaper 82829 368687 0 0 3 0x14200 pgdaemon pagedaemon 23763 197268 0 0 3 0x14200 bored crynlk 75954 468277 0 0 3 0x14200 bored crypto 2896 490076 0 0 3 0x40014200 acpi0 acpi0 71015 83620 0 0 2 0x14200 softnet 23001 151565 0 0 2 0x14200 systqmp 60830 345307 0 0 3 0x14200 bored systq 29891 335980 0 0 3 0x40014200 bored softclock 86844 358699 0 0 3 0x40014200 idle0 99273 117539 0 0 3 0x14200 bored smr 1 131539 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim Kern Lim devbuf 9427 6310K 6310K 78643K 10522 0 0 pcb 13 8K 8K 78643K 13 0 0 rtable 63 1K 2K 78643K 155 0 0 ifaddr 26 7K 9K 78643K 34 0 0 counters 19 16K 16K 78643K 19 0 0 ioctlops 0 0K 2K 78643K 14 0 0 mount 1 1K 1K 78643K 1 0 0 vnodes 1180 74K 74K 78643K 1185 0 0 UFS quota 1 32K 32K 78643K 1 0 0 UFS mount 5 36K 36K 78643K 5 0 0 shm 2 1K 1K 78643K 2 0 0 VM map 2 0K 0K 78643K 2 0 0 sem 2 0K 0K 78643K 2 0 0 dirhash 12 2K 2K 78643K 12 0 0 ACPI 1793 195K 288K 78643K 12645 0 0 file desc 2 4K 12K 78643K 18 0 0 proc 47 38K 54K 78643K 318 0 0 NFS srvsock 1 0K 0K 78643K 1 0 0 NFS daemon 1 16K 16K 78643K 1 0 0 in_multi 11 0K 1K 78643K 22 0 0 ether_multi 1 0K 0K 78643K 1 0 0 ISOFS mount 1 32K 32K 78643K 1 0 0 MSDOSFS mount 1 16K 16K 78643K 1 0 0 ttys 18 79K 79K 78643K 18 0 0 exec 0 0K 1K 78643K 171 0 0 pagedep 1 8K 8K 78643K 1 0 0 inodedep 1 32K 32K 78643K 1 0 0 newblk 1 0K 0K 78643K 1 0 0 VM swap 7 26K 26K 78643K 7 0 0 UVM amap 67 11K 12K 78643K 836 0 0 UVM aobj 2 2K 2K 78643K 2 0 0 memdesc 1 4K 4K 78643K 1 0 0 crypto data 1 1K 1K 78643K 1 0 0 NDP 3 0K 0K 78643K 6 0 0 temp 22 3517K 3581K 78643K 3029 0 0 SYN cache 2 16K 16K 78643K 2 0 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 4 0 2 1 0 1 1 0 8 0 rtpcb 80 17 0 15 1 0 1 1 0 8 0 rtentry 112 34 0 11 1 0 1 1 0 8 0 unpcb 120 27 0 19 1 0 1 1 0 8 0 syncache 264 5 0 5 1 0 1 1 0 8 1 tcpcb 544 8 0 5 1 0 1 1 0 8 0 inpcb 280 27 0 21 1 0 1 1 0 8 0 nd6 48 2 0 2 1 0 1 1 0 8 1 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 167 0 0 11 0 11 11 0 8 0 art_table 32 168 0 0 2 0 2 2 0 8 0 art_node 16 33 0 3 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 1412 0 20 45 0 45 45 0 8 0 ffsino 240 1412 0 20 82 0 82 82 0 8 0 nchpl 144 1651 0 53 60 0 60 60 0 8 0 uvmvnodes 72 1421 0 0 26 0 26 26 0 8 0 vnodes 208 1421 0 0 75 0 75 75 0 8 0 namei 1024 3837 0 3837 1 0 1 1 0 8 1 scxspl 192 3982 0 3982 2 1 1 2 0 8 1 plimitpl 152 14 0 8 1 0 1 1 0 8 0 sigapl 432 196 0 185 2 0 2 2 0 8 0 knotepl 112 39 0 28 1 0 1 1 0 8 0 kqueuepl 104 2 0 0 1 0 1 1 0 8 0 pipepl 128 134 0 122 1 0 1 1 0 8 0 fdescpl 424 197 0 185 2 0 2 2 0 8 0 filepl 120 974 0 922 2 0 2 2 0 8 0 lockfpl 104 5 0 4 1 0 1 1 0 8 0 lockfspl 48 3 0 2 1 0 1 1 0 8 0 sessionpl 112 18 0 9 1 0 1 1 0 8 0 pgrppl 48 18 0 9 1 0 1 1 0 8 0 ucredpl 96 47 0 40 1 0 1 1 0 8 0 zombiepl 144 186 0 185 1 0 1 1 0 8 0 processpl 864 211 0 185 4 0 4 4 0 8 0 procpl 632 217 0 185 3 0 3 3 0 8 0 sockpl 384 71 0 55 2 0 2 2 0 8 0 mcl4k 4096 10 0 10 1 0 1 1 0 8 1 mcl2k 2048 5473 0 5444 6 1 5 6 0 8 1 mtagpl 80 2 0 2 1 1 0 1 0 8 0 mbufpl 256 9528 0 9451 7 0 7 7 0 8 0 bufpl 256 5784 0 1323 279 0 279 279 0 8 0 anonpl 16 19926 0 18484 15 2 13 13 0 62 6 amapchunkpl 152 694 0 635 5 0 5 5 0 158 2 amappl16 192 125 0 95 2 0 2 2 0 8 0 amappl14 176 47 0 41 1 0 1 1 0 8 0 amappl12 160 3 0 2 2 1 1 1 0 8 0 amappl11 152 44 0 33 1 0 1 1 0 8 0 amappl10 144 9 0 8 2 1 1 1 0 8 0 amappl9 136 397 0 394 1 0 1 1 0 8 0 amappl8 128 120 0 110 1 0 1 1 0 8 0 amappl7 120 28 0 26 1 0 1 1 0 8 0 amappl6 112 58 0 52 1 0 1 1 0 8 0 amappl5 104 128 0 118 1 0 1 1 0 8 0 amappl4 96 427 0 400 1 0 1 1 0 8 0 amappl3 88 116 0 110 1 0 1 1 0 8 0 amappl2 80 836 0 782 3 0 3 3 0 8 1 amappl1 72 13251 0 12865 28 12 16 20 0 8 8 amappl 80 417 0 392 1 0 1 1 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 17 0 17 1 1 0 1 0 8 0 aobjpl 64 1 0 0 1 0 1 1 0 8 0 uaddrrnd 24 197 0 185 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 197 0 185 1 0 1 1 0 8 0 vmmpekpl 168 6163 0 6147 1 0 1 1 0 8 0 vmmpepl 168 28613 0 27777 87 10 77 77 0 357 39 vmsppl 272 196 0 185 1 0 1 1 0 8 0 pdppl 4096 400 0 370 5 0 5 5 0 8 0 pvpl 32 103049 0 99344 113 0 113 113 0 265 81 pmappl 200 196 0 185 1 0 1 1 0 8 0 extentpl 40 41 0 26 1 0 1 1 0 8 0 phpool 112 400 0 3 12 0 12 12 0 8 0