panic: receive 3: so 0xfffffd806f6ed4b0, so_type 3, m 0xfffffd806d8cfd00, m_type 0 Stopped at db_enter+0x18: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 518038 49865 0 0 0 0 syz-executor.1 *102745 55641 0 0 0 1K dhclient db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398 panic(ffffffff821cb301) at panic+0x15c sys/kern/subr_prf.c:207 soreceive(fffffd806f6ed4b0,0,ffff800020abd088,0,0,ffff800020abcf94) at soreceive+0x1727 soo_read(fffffd806fc822f8,ffff800020abd088,0) at soo_read+0x53 sys/kern/sys_socket.c:70 dofilereadv(ffff800020a7c278,6,ffff800020abd088,0,ffff800020abd170) at dofilereadv+0x1a1 sys/kern/sys_generic.c:237 sys_read(ffff800020a7c278,ffff800020abd120,ffff800020abd170) at sys_read+0x83 sys/kern/sys_generic.c:157 syscall(ffff800020abd1f0) at syscall+0x4a4 mi_syscall sys/sys/syscall_mi.h:102 [inline] syscall(ffff800020abd1f0) at syscall+0x4a4 sys/arch/amd64/amd64/trap.c:570 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffbe030, count: 7 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic receive 3: so 0xfffffd806f6ed4b0, so_type 3, m 0xfffffd806d8cfd00, m_type 0 ddb{1}> trace db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398 panic(ffffffff821cb301) at panic+0x15c sys/kern/subr_prf.c:207 soreceive(fffffd806f6ed4b0,0,ffff800020abd088,0,0,ffff800020abcf94) at soreceive+0x1727 soo_read(fffffd806fc822f8,ffff800020abd088,0) at soo_read+0x53 sys/kern/sys_socket.c:70 dofilereadv(ffff800020a7c278,6,ffff800020abd088,0,ffff800020abd170) at dofilereadv+0x1a1 sys/kern/sys_generic.c:237 sys_read(ffff800020a7c278,ffff800020abd120,ffff800020abd170) at sys_read+0x83 sys/kern/sys_generic.c:157 syscall(ffff800020abd1f0) at syscall+0x4a4 mi_syscall sys/sys/syscall_mi.h:102 [inline] syscall(ffff800020abd1f0) at syscall+0x4a4 sys/arch/amd64/amd64/trap.c:570 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffbe030, count: -8 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff800020abcdd0 rbx 0xffff800020abce80 rdx 0xffff800020a7c278 rcx 0 rax 0 r8 0xffffffff810edbff kprintf+0x16f r9 0x1 r10 0x25 r11 0x337c840e24cf847e r12 0x3000000008 r13 0xffff800020abcde0 r14 0x100 r15 0x1 rip 0xffffffff81824028 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff800020abcdc0 ss 0x10 db_enter+0x18: addq $0x8,%rsp ddb{1}> show proc PROC (dhclient) pid=102745 stat=onproc flags process=0 proc=0 pri=17, usrpri=50, nice=20 forw=0xffffffffffffffff, list=0xffff800020a7d5f8,0xffff800020a7c018 process=0xffff800020a90f10 user=0xffff800020ab8000, vmspace=0xfffffd807efff000 estcpu=0, cpticks=1, pctcpu=0.0 user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 49865 518038 1741 0 7 0 syz-executor.1 49865 153016 1741 0 2 0x4000000 syz-executor.1 97999 88220 26711 0 2 0 syz-executor.0 97999 62400 26711 0 3 0x4000080 fsleep syz-executor.0 97999 152743 26711 0 3 0x4000080 fsleep syz-executor.0 91017 359005 0 0 3 0x14200 acct acct 58925 156347 0 0 3 0x14200 bored sosplice 1741 363083 56645 0 3 0x82 nanosleep syz-executor.1 26711 43204 56645 0 3 0x82 nanosleep syz-executor.0 56645 437715 36893 0 3 0x82 thrsleep syz-fuzzer 56645 338295 36893 0 3 0x4000082 thrsleep syz-fuzzer 56645 279254 36893 0 3 0x4000082 thrsleep syz-fuzzer 56645 222287 36893 0 3 0x4000082 thrsleep syz-fuzzer 56645 289657 36893 0 3 0x4000082 thrsleep syz-fuzzer 56645 103820 36893 0 3 0x4000082 thrsleep syz-fuzzer 56645 30951 36893 0 3 0x4000082 thrsleep syz-fuzzer 56645 148484 36893 0 3 0x4000082 thrsleep syz-fuzzer 56645 232783 36893 0 3 0x4000082 kqread syz-fuzzer 56645 383817 36893 0 3 0x4000082 thrsleep syz-fuzzer 36893 255918 84759 0 3 0x10008a pause ksh 84759 219917 50528 0 3 0x92 select sshd 12376 325491 1 0 3 0x100083 ttyin getty 50528 510257 1 0 3 0x80 select sshd 70239 358765 76017 74 3 0x100092 bpf pflogd 76017 99973 1 0 3 0x80 netio pflogd 3050 519907 45708 73 3 0x100090 kqread syslogd 45708 446855 1 0 3 0x100082 netio syslogd 53453 167737 1 77 3 0x100090 poll dhclient *55641 102745 1 0 7 0 dhclient 6443 44948 0 0 2 0x14200 zerothread 65287 217843 0 0 3 0x14200 aiodoned aiodoned 48967 456079 0 0 3 0x14200 syncer update 84908 318083 0 0 3 0x14200 cleaner cleaner 7346 380195 0 0 3 0x14200 reaper reaper 74526 388203 0 0 3 0x14200 pgdaemon pagedaemon 30878 427357 0 0 3 0x14200 bored crynlk 5698 90787 0 0 3 0x14200 bored crypto 22904 379172 0 0 3 0x40014200 acpi0 acpi0 46201 108749 0 0 3 0x40014200 idle1 69002 114983 0 0 3 0x14200 bored softnet 54138 326603 0 0 3 0x14200 bored systqmp 40435 233072 0 0 3 0x14200 bored systq 74514 388547 0 0 3 0x40014200 bored softclock 5348 446483 0 0 3 0x40014200 idle0 66438 209152 0 0 3 0x14200 bored smr 1 425300 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 55641 (dhclient) thread 0xffff800020a7c278 (102745) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff82675f38) #0 witness_lock+0x52e sys/kern/subr_witness.c:1164 #1 solock+0x66 sys/kern/uipc_socket2.c:292 #2 soreceive+0x114 sys/kern/uipc_socket.c:731 #3 soo_read+0x53 sys/kern/sys_socket.c:70 #4 dofilereadv+0x1a1 sys/kern/sys_generic.c:237 #5 sys_read+0x83 sys/kern/sys_generic.c:157 #6 syscall+0x4a4 mi_syscall sys/sys/syscall_mi.h:102 [inline] #6 syscall+0x4a4 sys/arch/amd64/amd64/trap.c:570 #7 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 9507 6536K 6923K 78643K 10839 0 pcb 17 8K 8K 78643K 86 0 rtable 102 3K 4K 78643K 276 0 ifaddr 62 13K 13K 78643K 89 0 counters 43 33K 34K 78643K 51 0 ioctlops 0 0K 4K 78643K 1482 0 iov 0 0K 16K 78643K 11 0 mount 1 1K 1K 78643K 1 0 vnodes 1222 77K 77K 78643K 1293 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 5K 78643K 4 0 VM map 2 1K 1K 78643K 2 0 sem 12 0K 0K 78643K 37 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1809 196K 290K 78643K 12766 0 file desc 6 17K 25K 78643K 136 0 proc 61 63K 95K 78643K 459 0 subproc 32 2K 2K 78643K 34 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 11 0 in_multi 45 2K 2K 78643K 63 0 ether_multi 1 0K 0K 78643K 4 0 mrt 0 0K 0K 78643K 13 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 43 201K 201K 78643K 43 0 exec 0 0K 1K 78643K 209 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 111 38K 38K 78643K 1378 0 UVM aobj 14 2K 2K 78643K 14 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 4 0K 0K 78643K 68 0 NDP 9 0K 0K 78643K 17 0 temp 93 3015K 3079K 78643K 3509 0 kqueue 3 4K 8K 78643K 8 0 SYN cache 2 16K 16K 78643K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 7 0 0 1 0 1 1 0 8 0 plcache 128 20 0 0 1 0 1 1 0 8 0 rtpcb 80 27 0 25 1 0 1 1 0 8 0 rtentry 112 55 0 14 2 0 2 2 0 8 0 unpcb 120 191 0 176 1 0 1 1 0 8 0 syncache 264 8 0 8 2 1 1 1 0 8 1 tcpqe 32 11 0 11 1 1 0 1 0 8 0 tcpcb 544 237 0 230 2 0 2 2 0 8 1 inpcb 280 466 0 454 2 0 2 2 0 8 1 rttmr 72 6 0 6 1 0 1 1 0 8 1 nd6 48 7 0 3 1 0 1 1 0 8 0 pkpcb 40 1 0 1 1 0 1 1 0 8 1 pfosfp 40 846 0 423 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 29 0 0 1 0 1 1 0 8 0 pfstkey 112 29 0 0 1 0 1 1 0 8 0 pfstate 328 29 0 0 3 0 3 3 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 196 0 18 13 0 13 13 0 8 0 art_table 32 197 0 18 2 0 2 2 0 8 0 art_node 16 54 0 17 1 0 1 1 0 8 0 semapl 112 33 0 23 1 0 1 1 0 8 0 shmpl 112 12 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 1577 0 167 46 0 46 46 0 8 0 ffsino 272 1577 0 167 95 0 95 95 0 8 0 nchpl 144 1946 0 325 61 0 61 61 0 8 0 uvmvnodes 72 1676 0 0 31 0 31 31 0 8 0 vnodes 208 1676 0 0 89 0 89 89 0 8 0 namei 1024 5182 0 5182 1 0 1 1 0 8 1 percpumem 16 36 0 4 1 0 1 1 0 8 0 vcpupl 1984 2 0 0 1 0 1 1 0 8 0 vmpool 560 4 0 2 1 0 1 1 0 8 0 scxspl 192 5785 0 5785 8 1 7 7 0 8 7 plimitpl 152 23 0 15 1 0 1 1 0 8 0 sigapl 432 335 0 319 3 1 2 3 0 8 0 futexpl 56 2710 0 2708 1 0 1 1 0 8 0 knotepl 112 58 0 39 1 0 1 1 0 8 0 kqueuepl 144 19 0 17 1 0 1 1 0 8 0 pipelkpl 48 128 0 118 1 0 1 1 0 8 0 pipepl 120 256 0 237 2 0 2 2 0 8 1 fdescpl 496 336 0 319 3 0 3 3 0 8 0 filepl 152 2299 0 2184 6 0 6 6 0 8 1 lockfpl 104 29 0 28 1 0 1 1 0 8 0 lockfspl 48 13 0 12 1 0 1 1 0 8 0 sessionpl 112 18 0 7 1 0 1 1 0 8 0 pgrppl 48 20 0 9 1 0 1 1 0 8 0 ucredpl 96 131 0 122 1 0 1 1 0 8 0 zombiepl 144 319 0 319 1 0 1 1 0 8 1 processpl 960 353 0 319 5 0 5 5 0 8 0 procpl 624 615 0 569 4 0 4 4 0 8 0 sosppl 128 3 0 3 1 0 1 1 0 8 1 sockpl 400 691 0 662 5 0 5 5 0 8 2 mcl64k 65536 2 0 0 1 0 1 1 0 8 0 mcl16k 16384 1 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl9k 9216 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 1 0 0 1 0 1 1 0 8 0 mcl4k 4096 4 0 0 1 0 1 1 0 8 0 mcl2k2 2112 1 0 0 1 0 1 1 0 8 0 mcl2k 2048 159 0 0 19 0 19 19 0 8 0 mtagpl 80 13 0 0 1 0 1 1 0 8 0 mbufpl 256 174 0 0 11 0 11 11 0 8 0 bufpl 280 4206 0 173 289 0 289 289 0 8 0 anonpl 16 49905 0 33038 86 1 85 85 0 124 17 amapchunkpl 152 1774 0 1619 10 0 10 10 0 158 2 amappl16 192 1626 0 715 54 0 54 54 0 8 8 amappl15 184 1 0 1 1 1 0 1 0 8 0 amappl14 176 58 0 52 2 1 1 1 0 8 0 amappl13 168 33 0 31 1 0 1 1 0 8 0 amappl12 160 6 0 6 1 1 0 1 0 8 0 amappl11 152 69 0 51 1 0 1 1 0 8 0 amappl10 144 70 0 62 1 0 1 1 0 8 0 amappl9 136 399 0 394 1 0 1 1 0 8 0 amappl8 128 323 0 302 1 0 1 1 0 8 0 amappl7 120 168 0 157 1 0 1 1 0 8 0 amappl6 112 26 0 21 1 0 1 1 0 8 0 amappl5 104 233 0 217 1 0 1 1 0 8 0 amappl4 96 511 0 475 2 1 1 2 0 8 0 amappl3 88 157 0 150 1 0 1 1 0 8 0 amappl2 80 1770 0 1691 3 1 2 3 0 8 0 amappl1 72 17449 0 16993 25 15 10 20 0 8 0 amappl 80 875 0 825 2 0 2 2 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 64 13 0 0 1 0 1 1 0 8 0 uaddrrnd 24 340 0 321 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 340 0 321 1 0 1 1 0 8 0 vmmpekpl 168 6713 0 6680 2 0 2 2 0 8 0 vmmpepl 168 48557 0 46392 116 3 113 115 0 357 18 vmsppl 368 339 0 321 2 0 2 2 0 8 0 pdppl 4096 687 0 644 6 0 6 6 0 8 0 pvpl 32 159762 0 139658 199 0 199 199 0 265 36 pmappl 232 339 0 321 2 0 2 2 0 8 0 extentpl 40 46 0 29 1 0 1 1 0 8 0 phpool 112 170 0 3 5 0 5 5 0 8 0