soreceive 1a
0 views
Skip to first unread message
syzbot
Feb 27, 2020, 6:39:14 PM2/27/20
to syzkaller-o...@googlegroups.com
Hello,
syzbot found the following crash on:
HEAD commit: c6faab6d in rdrand() timeout, if the rdrand instruction fa..
git tree: openbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=1236ee65e00000
kernel config: https://syzkaller.appspot.com/x/.config?x=bf87b6915a88cd0d
dashboard link: https://syzkaller.appspot.com/bug?extid=91da988a445013baf925
Unfortunately, I don't have any reproducer for this crash yet.
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+91da98...@syzkaller.appspotmail.com
panic: receive 1a: so 0xfffffd806f6eb4b0, so_type 3, m 0xfffffd8063f6e100, m_type 0
Stopped at db_enter+0x18: addq $0x8,%rsp
TID PID UID PRFLAGS PFLAGS CPU COMMAND
290246 89964 0 0 0x4000000 1 syz-executor.1
*515771 80036 0 0 0 0K dhclient
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic(ffffffff821d6beb) at panic+0x15c sys/kern/subr_prf.c:207
soreceive(fffffd806f6eb4b0,0,ffff800020abd238,0,0,ffff800020abd144) at soreceive+0x174a sys/kern/uipc_socket.c:977
soo_read(fffffd806fc82000,ffff800020abd238,0) at soo_read+0x53 sys/kern/sys_socket.c:70
dofilereadv(ffff800020a7c9c8,6,ffff800020abd238,0,ffff800020abd320) at dofilereadv+0x1a1 sys/kern/sys_generic.c:237
sys_read(ffff800020a7c9c8,ffff800020abd2d0,ffff800020abd320) at sys_read+0x83 sys/kern/sys_generic.c:157
syscall(ffff800020abd3a0) at syscall+0x4a4 mi_syscall sys/sys/syscall_mi.h:102 [inline]
syscall(ffff800020abd3a0) at syscall+0x4a4 sys/arch/amd64/amd64/trap.c:570
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7f7fffff2420, count: 7
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports. Insufficient info makes it difficult to find and fix bugs.
ddb{0}>
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
receive 1a: so 0xfffffd806f6eb4b0, so_type 3, m 0xfffffd8063f6e100, m_type 0
ddb{0}> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic(ffffffff821d6beb) at panic+0x15c sys/kern/subr_prf.c:207
soreceive(fffffd806f6eb4b0,0,ffff800020abd238,0,0,ffff800020abd144) at soreceive+0x174a sys/kern/uipc_socket.c:977
soo_read(fffffd806fc82000,ffff800020abd238,0) at soo_read+0x53 sys/kern/sys_socket.c:70
dofilereadv(ffff800020a7c9c8,6,ffff800020abd238,0,ffff800020abd320) at dofilereadv+0x1a1 sys/kern/sys_generic.c:237
sys_read(ffff800020a7c9c8,ffff800020abd2d0,ffff800020abd320) at sys_read+0x83 sys/kern/sys_generic.c:157
syscall(ffff800020abd3a0) at syscall+0x4a4 mi_syscall sys/sys/syscall_mi.h:102 [inline]
syscall(ffff800020abd3a0) at syscall+0x4a4 sys/arch/amd64/amd64/trap.c:570
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7f7fffff2420, count: -8
ddb{0}> show registers
rdi 0
rsi 0x1
rbp 0xffff800020abcf80
rbx 0xffff800020abd030
rdx 0xffff800020a7c9c8
rcx 0
rax 0
r8 0xffffffff81fb607f kprintf+0x16f
r9 0x1
r10 0x25
r11 0x93ea443d58b51747
r12 0x3000000008
r13 0xffff800020abcf90
r14 0x100
r15 0x1
rip 0xffffffff8219a9e8 db_enter+0x18
cs 0x8
rflags 0x246
rsp 0xffff800020abcf70
ss 0x10
db_enter+0x18: addq $0x8,%rsp
ddb{0}> show proc
PROC (dhclient) pid=515771 stat=onproc
flags process=0 proc=0
pri=24, usrpri=50, nice=20
forw=0xffffffffffffffff, list=0xffff800020a7cc38,0xffff800020a7d128
process=0xffff800020a90010 user=0xffff800020ab8000, vmspace=0xfffffd807f0002e0
estcpu=0, cpticks=0, pctcpu=0.1
user=0, sys=1, intr=0
ddb{0}> ps
PID TID PPID UID S FLAGS WAIT COMMAND
89964 413934 25122 0 2 0 syz-executor.1
89964 290246 25122 0 7 0x4000000 syz-executor.1
56301 389880 33173 0 3 0x80 nanosleep syz-executor.0
56301 100283 33173 0 3 0x4000080 poll syz-executor.0
56301 31102 33173 0 3 0x4000080 fsleep syz-executor.0
33173 418446 32440 0 2 0x482 syz-executor.0
30674 458358 0 0 3 0x14200 bored sosplice
25122 481484 32440 0 2 0x482 syz-executor.1
32440 189737 27276 0 3 0x82 thrsleep syz-fuzzer
32440 489825 27276 0 2 0x4000482 syz-fuzzer
32440 157077 27276 0 3 0x4000082 thrsleep syz-fuzzer
32440 136154 27276 0 3 0x4000082 thrsleep syz-fuzzer
32440 460718 27276 0 3 0x4000082 thrsleep syz-fuzzer
32440 349514 27276 0 3 0x4000082 thrsleep syz-fuzzer
32440 377894 27276 0 3 0x4000082 thrsleep syz-fuzzer
32440 426545 27276 0 3 0x4000082 kqread syz-fuzzer
32440 209490 27276 0 2 0x4000482 syz-fuzzer
32440 363787 27276 0 3 0x4000082 thrsleep syz-fuzzer
27276 402209 69739 0 3 0x10008a pause ksh
69739 291701 93201 0 3 0x92 select sshd
95813 502498 1 0 3 0x100083 ttyin getty
93201 152113 1 0 3 0x80 select sshd
45781 443270 35710 74 3 0x100092 bpf pflogd
35710 471635 1 0 3 0x80 netio pflogd
57788 191797 76086 73 3 0x100090 kqread syslogd
76086 470799 1 0 3 0x100082 netio syslogd
97115 195159 1 77 3 0x100090 poll dhclient
*80036 515771 1 0 7 0 dhclient
26936 5325 0 0 3 0x14200 bored smr
76769 109886 0 0 3 0x14200 pgzero zerothread
42911 77930 0 0 3 0x14200 aiodoned aiodoned
27097 92242 0 0 2 0x14200 update
967 485656 0 0 3 0x14200 cleaner cleaner
50804 161581 0 0 3 0x14200 reaper reaper
22137 483354 0 0 3 0x14200 pgdaemon pagedaemon
85769 321855 0 0 3 0x14200 bored crynlk
70199 520939 0 0 3 0x14200 bored crypto
31892 160802 0 0 3 0x40014200 acpi0 acpi0
62132 285815 0 0 3 0x40014200 idle1
21260 51793 0 0 3 0x14200 bored softnet
6626 228741 0 0 3 0x14200 bored systqmp
41363 218706 0 0 3 0x14200 bored systq
33540 398877 0 0 2 0x40014200 softclock
77026 357930 0 0 3 0x40014200 idle0
1 219703 0 0 3 0x82 wait init
0 0 -1 0 3 0x10200 scheduler swapper
ddb{0}> show all locks
Process 80036 (dhclient) thread 0xffff800020a7c9c8 (515771)
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff82641eb8)
#0 witness_lock+0x52e sys/kern/subr_witness.c:1164
#1 solock+0x66 sys/kern/uipc_socket2.c:292
#2 soreceive+0x114 sys/kern/uipc_socket.c:731
#3 soo_read+0x53 sys/kern/sys_socket.c:70
#4 dofilereadv+0x1a1 sys/kern/sys_generic.c:237
#5 sys_read+0x83 sys/kern/sys_generic.c:157
#6 syscall+0x4a4 mi_syscall sys/sys/syscall_mi.h:102 [inline]
#6 syscall+0x4a4 sys/arch/amd64/amd64/trap.c:570
#7 Xsyscall+0x128
ddb{0}> show malloc
Type InUse MemUse HighUse Limit Requests Type Lim
devbuf 9585 7132K 8159K 78643K 12076 0
pcb 13 8K 8K 78643K 88 0
rtable 108 3K 4K 78643K 297 0
ifaddr 85 16K 17K 78643K 129 0
counters 43 33K 34K 78643K 51 0
ioctlops 0 0K 4K 78643K 1481 0
iov 0 0K 32K 78643K 160 0
mount 1 1K 1K 78643K 1 0
vnodes 1231 77K 78K 78643K 1593 0
UFS quota 1 32K 32K 78643K 1 0
UFS mount 5 36K 36K 78643K 5 0
shm 2 1K 5K 78643K 3 0
VM map 2 1K 1K 78643K 2 0
sem 12 0K 0K 78643K 67 0
dirhash 12 2K 2K 78643K 12 0
ACPI 1809 196K 290K 78643K 12766 0
file desc 6 17K 25K 78643K 286 0
sigio 0 0K 0K 78643K 16 0
proc 62 63K 83K 78643K 500 0
subproc 32 2K 2K 78643K 51 0
NFS srvsock 1 0K 0K 78643K 1 0
NFS daemon 1 16K 16K 78643K 1 0
ip_moptions 2 0K 0K 78643K 37 0
in_multi 78 4K 4K 78643K 120 0
ether_multi 1 0K 0K 78643K 11 0
mrt 0 0K 0K 78643K 2 0
ISOFS mount 1 32K 32K 78643K 1 0
MSDOSFS mount 1 16K 16K 78643K 1 0
ttys 43 201K 201K 78643K 43 0
exec 0 0K 1K 78643K 232 0
pagedep 1 8K 8K 78643K 1 0
inodedep 1 32K 32K 78643K 1 0
newblk 1 0K 0K 78643K 1 0
VM swap 7 26K 26K 78643K 7 0
UVM amap 109 22K 38K 78643K 1919 0
UVM aobj 19 2K 2K 78643K 21 0
memdesc 1 4K 4K 78643K 1 0
crypto data 1 1K 1K 78643K 1 0
ip6_options 0 0K 0K 78643K 56 0
NDP 14 0K 0K 78643K 24 0
temp 133 3024K 3088K 78643K 6997 0
kqueue 3 4K 20K 78643K 26 0
SYN cache 2 16K 16K 78643K 2 0
ddb{0}> show all pools
Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
arp 64 8 0 2 1 0 1 1 0 8 0
plcache 128 20 0 0 1 0 1 1 0 8 0
rtpcb 80 43 0 41 1 0 1 1 0 8 0
rtentry 112 59 0 15 2 0 2 2 0 8 0
unpcb 120 315 0 305 2 1 1 2 0 8 0
syncache 264 6 0 6 2 2 0 1 0 8 0
tcpqe 32 99 0 99 1 1 0 1 0 8 0
tcpcb 544 201 0 192 1 0 1 1 0 8 0
inpcb 280 704 0 688 2 0 2 2 0 8 0
rttmr 72 1 0 1 1 1 0 1 0 8 0
nd6 48 9 0 3 1 0 1 1 0 8 0
pffrag 232 6 0 6 1 1 0 1 0 482 0
pffrnode 88 6 0 6 1 1 0 1 0 8 0
pffrent 40 270 0 270 1 1 0 1 0 8 0
pfosfp 40 846 0 423 5 0 5 5 0 8 0
pfosfpen 112 1428 0 714 21 0 21 21 0 8 0
pfstitem 24 59 0 5 1 0 1 1 0 8 0
pfstkey 112 59 0 5 2 0 2 2 0 8 0
pfstate 328 59 0 5 5 0 5 5 0 8 0
pfrule 1360 21 0 16 2 1 1 2 0 8 0
art_heap8 4096 1 0 0 1 0 1 1 0 8 0
art_heap4 256 236 0 44 12 0 12 12 0 8 0
art_table 32 237 0 44 2 0 2 2 0 8 0
art_node 16 56 0 16 1 0 1 1 0 8 0
sysvmsgpl 40 10 0 2 1 0 1 1 0 8 0
semupl 112 1 0 1 1 1 0 1 0 8 0
semapl 112 65 0 55 1 0 1 1 0 8 0
shmpl 112 19 0 2 1 0 1 1 0 8 0
dirhash 1024 17 0 0 3 0 3 3 0 8 0
dino1pl 128 1773 0 370 46 0 46 46 0 8 0
ffsino 272 1773 0 370 95 0 95 95 0 8 0
nchpl 144 2415 0 809 61 0 61 61 0 8 0
uvmvnodes 72 2144 0 0 39 0 39 39 0 8 0
vnodes 208 2144 0 0 113 0 113 113 0 8 0
namei 1024 6891 0 6891 1 0 1 1 0 8 1
percpumem 16 36 0 4 1 0 1 1 0 8 0
vmpool 560 4 0 4 1 1 0 1 0 8 0
scxspl 192 7025 0 7025 7 5 2 6 0 8 2
plimitpl 152 34 0 26 1 0 1 1 0 8 0
sigapl 424 499 0 466 4 0 4 4 0 8 0
futexpl 56 5924 0 5923 1 0 1 1 0 8 0
knotepl 112 92 0 73 1 0 1 1 0 8 0
kqueuepl 144 49 0 47 1 0 1 1 0 8 0
pipelkpl 48 129 0 118 1 0 1 1 0 8 0
pipepl 120 258 0 237 1 0 1 1 0 8 0
fdescpl 496 483 0 466 3 0 3 3 0 8 0
filepl 152 3665 0 3550 6 0 6 6 0 8 1
lockfpl 104 74 0 73 1 0 1 1 0 8 0
lockfspl 48 22 0 21 1 0 1 1 0 8 0
sessionpl 112 19 0 8 1 0 1 1 0 8 0
pgrppl 48 19 0 8 1 0 1 1 0 8 0
ucredpl 96 286 0 277 1 0 1 1 0 8 0
zombiepl 144 466 0 466 1 0 1 1 0 8 1
processpl 960 499 0 466 5 0 5 5 0 8 0
procpl 624 1103 0 1058 4 0 4 4 0 8 0
sosppl 128 1 0 1 1 1 0 1 0 8 0
sockpl 400 1079 0 1051 8 3 5 7 0 8 2
mcl64k 65536 9 0 0 2 0 2 2 0 8 0
mcl16k 16384 1 0 0 1 0 1 1 0 8 0
mcl12k 12288 3 0 0 1 0 1 1 0 8 0
mcl9k 9216 2 0 0 1 0 1 1 0 8 0
mcl8k 8192 4 0 0 1 0 1 1 0 8 0
mcl4k 4096 13 0 0 2 0 2 2 0 8 0
mcl2k2 2112 2 0 0 1 0 1 1 0 8 0
mcl2k 2048 153 0 0 19 0 19 19 0 8 0
mtagpl 80 24 0 0 1 0 1 1 0 8 0
mbufpl 256 281 0 0 18 0 18 18 0 8 0
bufpl 280 4634 0 173 319 0 319 319 0 8 0
anonpl 16 65286 0 50268 86 4 82 85 0 124 12
amapchunkpl 152 2969 0 2831 12 4 8 11 0 158 1
amappl16 192 2361 0 1409 59 7 52 59 0 8 4
amappl15 184 1 0 0 1 0 1 1 0 8 0
amappl14 176 16 0 11 2 1 1 1 0 8 0
amappl13 168 155 0 152 1 0 1 1 0 8 0
amappl12 160 6 0 4 2 1 1 1 0 8 0
amappl11 152 173 0 155 1 0 1 1 0 8 0
amappl10 144 25 0 20 1 0 1 1 0 8 0
amappl9 136 405 0 400 1 0 1 1 0 8 0
amappl8 128 356 0 332 1 0 1 1 0 8 0
amappl7 120 126 0 112 1 0 1 1 0 8 0
amappl6 112 126 0 122 1 0 1 1 0 8 0
amappl5 104 277 0 260 1 0 1 1 0 8 0
amappl4 96 747 0 711 2 1 1 2 0 8 0
amappl3 88 116 0 110 1 0 1 1 0 8 0
amappl2 80 2891 0 2812 3 1 2 3 0 8 0
amappl1 72 20944 0 20489 25 15 10 20 0 8 0
amappl 80 1376 0 1331 2 0 2 2 0 84 0
dma4096 4096 1 0 1 1 1 0 1 0 8 0
dma256 256 6 0 6 1 1 0 1 0 8 0
dma128 128 253 0 253 1 1 0 1 0 8 0
dma64 64 6 0 6 1 1 0 1 0 8 0
dma32 32 7 0 7 1 1 0 1 0 8 0
dma16 16 18 0 17 1 0 1 1 0 8 0
aobjpl 64 20 0 2 1 0 1 1 0 8 0
uaddrrnd 24 487 0 470 1 0 1 1 0 8 0
uaddrbest 32 2 0 0 1 0 1 1 0 8 0
uaddr 24 487 0 470 1 0 1 1 0 8 0
vmmpekpl 168 7827 0 7794 2 0 2 2 0 8 0
vmmpepl 168 67554 0 65350 136 8 128 128 0 357 32
vmsppl 368 486 0 470 2 0 2 2 0 8 0
pdppl 4096 981 0 940 6 0 6 6 0 8 0
pvpl 32 200327 0 182075 200 3 197 200 0 265 33
pmappl 232 486 0 470 2 1 1 2 0 8 0
extentpl 40 46 0 29 1 0 1 1 0 8 0
phpool 112 180 0 6 6 0 6 6 0 8 0
---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot found the following crash on:
HEAD commit: c6faab6d in rdrand() timeout, if the rdrand instruction fa..
git tree: openbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=1236ee65e00000
kernel config: https://syzkaller.appspot.com/x/.config?x=bf87b6915a88cd0d
dashboard link: https://syzkaller.appspot.com/bug?extid=91da988a445013baf925
Unfortunately, I don't have any reproducer for this crash yet.
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+91da98...@syzkaller.appspotmail.com
panic: receive 1a: so 0xfffffd806f6eb4b0, so_type 3, m 0xfffffd8063f6e100, m_type 0
Stopped at db_enter+0x18: addq $0x8,%rsp
TID PID UID PRFLAGS PFLAGS CPU COMMAND
290246 89964 0 0 0x4000000 1 syz-executor.1
*515771 80036 0 0 0 0K dhclient
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic(ffffffff821d6beb) at panic+0x15c sys/kern/subr_prf.c:207
soreceive(fffffd806f6eb4b0,0,ffff800020abd238,0,0,ffff800020abd144) at soreceive+0x174a sys/kern/uipc_socket.c:977
soo_read(fffffd806fc82000,ffff800020abd238,0) at soo_read+0x53 sys/kern/sys_socket.c:70
dofilereadv(ffff800020a7c9c8,6,ffff800020abd238,0,ffff800020abd320) at dofilereadv+0x1a1 sys/kern/sys_generic.c:237
sys_read(ffff800020a7c9c8,ffff800020abd2d0,ffff800020abd320) at sys_read+0x83 sys/kern/sys_generic.c:157
syscall(ffff800020abd3a0) at syscall+0x4a4 mi_syscall sys/sys/syscall_mi.h:102 [inline]
syscall(ffff800020abd3a0) at syscall+0x4a4 sys/arch/amd64/amd64/trap.c:570
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7f7fffff2420, count: 7
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports. Insufficient info makes it difficult to find and fix bugs.
ddb{0}>
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
receive 1a: so 0xfffffd806f6eb4b0, so_type 3, m 0xfffffd8063f6e100, m_type 0
ddb{0}> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic(ffffffff821d6beb) at panic+0x15c sys/kern/subr_prf.c:207
soreceive(fffffd806f6eb4b0,0,ffff800020abd238,0,0,ffff800020abd144) at soreceive+0x174a sys/kern/uipc_socket.c:977
soo_read(fffffd806fc82000,ffff800020abd238,0) at soo_read+0x53 sys/kern/sys_socket.c:70
dofilereadv(ffff800020a7c9c8,6,ffff800020abd238,0,ffff800020abd320) at dofilereadv+0x1a1 sys/kern/sys_generic.c:237
sys_read(ffff800020a7c9c8,ffff800020abd2d0,ffff800020abd320) at sys_read+0x83 sys/kern/sys_generic.c:157
syscall(ffff800020abd3a0) at syscall+0x4a4 mi_syscall sys/sys/syscall_mi.h:102 [inline]
syscall(ffff800020abd3a0) at syscall+0x4a4 sys/arch/amd64/amd64/trap.c:570
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7f7fffff2420, count: -8
ddb{0}> show registers
rdi 0
rsi 0x1
rbp 0xffff800020abcf80
rbx 0xffff800020abd030
rdx 0xffff800020a7c9c8
rcx 0
rax 0
r8 0xffffffff81fb607f kprintf+0x16f
r9 0x1
r10 0x25
r11 0x93ea443d58b51747
r12 0x3000000008
r13 0xffff800020abcf90
r14 0x100
r15 0x1
rip 0xffffffff8219a9e8 db_enter+0x18
cs 0x8
rflags 0x246
rsp 0xffff800020abcf70
ss 0x10
db_enter+0x18: addq $0x8,%rsp
ddb{0}> show proc
PROC (dhclient) pid=515771 stat=onproc
flags process=0 proc=0
pri=24, usrpri=50, nice=20
forw=0xffffffffffffffff, list=0xffff800020a7cc38,0xffff800020a7d128
process=0xffff800020a90010 user=0xffff800020ab8000, vmspace=0xfffffd807f0002e0
estcpu=0, cpticks=0, pctcpu=0.1
user=0, sys=1, intr=0
ddb{0}> ps
PID TID PPID UID S FLAGS WAIT COMMAND
89964 413934 25122 0 2 0 syz-executor.1
89964 290246 25122 0 7 0x4000000 syz-executor.1
56301 389880 33173 0 3 0x80 nanosleep syz-executor.0
56301 100283 33173 0 3 0x4000080 poll syz-executor.0
56301 31102 33173 0 3 0x4000080 fsleep syz-executor.0
33173 418446 32440 0 2 0x482 syz-executor.0
30674 458358 0 0 3 0x14200 bored sosplice
25122 481484 32440 0 2 0x482 syz-executor.1
32440 189737 27276 0 3 0x82 thrsleep syz-fuzzer
32440 489825 27276 0 2 0x4000482 syz-fuzzer
32440 157077 27276 0 3 0x4000082 thrsleep syz-fuzzer
32440 136154 27276 0 3 0x4000082 thrsleep syz-fuzzer
32440 460718 27276 0 3 0x4000082 thrsleep syz-fuzzer
32440 349514 27276 0 3 0x4000082 thrsleep syz-fuzzer
32440 377894 27276 0 3 0x4000082 thrsleep syz-fuzzer
32440 426545 27276 0 3 0x4000082 kqread syz-fuzzer
32440 209490 27276 0 2 0x4000482 syz-fuzzer
32440 363787 27276 0 3 0x4000082 thrsleep syz-fuzzer
27276 402209 69739 0 3 0x10008a pause ksh
69739 291701 93201 0 3 0x92 select sshd
95813 502498 1 0 3 0x100083 ttyin getty
93201 152113 1 0 3 0x80 select sshd
45781 443270 35710 74 3 0x100092 bpf pflogd
35710 471635 1 0 3 0x80 netio pflogd
57788 191797 76086 73 3 0x100090 kqread syslogd
76086 470799 1 0 3 0x100082 netio syslogd
97115 195159 1 77 3 0x100090 poll dhclient
*80036 515771 1 0 7 0 dhclient
26936 5325 0 0 3 0x14200 bored smr
76769 109886 0 0 3 0x14200 pgzero zerothread
42911 77930 0 0 3 0x14200 aiodoned aiodoned
27097 92242 0 0 2 0x14200 update
967 485656 0 0 3 0x14200 cleaner cleaner
50804 161581 0 0 3 0x14200 reaper reaper
22137 483354 0 0 3 0x14200 pgdaemon pagedaemon
85769 321855 0 0 3 0x14200 bored crynlk
70199 520939 0 0 3 0x14200 bored crypto
31892 160802 0 0 3 0x40014200 acpi0 acpi0
62132 285815 0 0 3 0x40014200 idle1
21260 51793 0 0 3 0x14200 bored softnet
6626 228741 0 0 3 0x14200 bored systqmp
41363 218706 0 0 3 0x14200 bored systq
33540 398877 0 0 2 0x40014200 softclock
77026 357930 0 0 3 0x40014200 idle0
1 219703 0 0 3 0x82 wait init
0 0 -1 0 3 0x10200 scheduler swapper
ddb{0}> show all locks
Process 80036 (dhclient) thread 0xffff800020a7c9c8 (515771)
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff82641eb8)
#0 witness_lock+0x52e sys/kern/subr_witness.c:1164
#1 solock+0x66 sys/kern/uipc_socket2.c:292
#2 soreceive+0x114 sys/kern/uipc_socket.c:731
#3 soo_read+0x53 sys/kern/sys_socket.c:70
#4 dofilereadv+0x1a1 sys/kern/sys_generic.c:237
#5 sys_read+0x83 sys/kern/sys_generic.c:157
#6 syscall+0x4a4 mi_syscall sys/sys/syscall_mi.h:102 [inline]
#6 syscall+0x4a4 sys/arch/amd64/amd64/trap.c:570
#7 Xsyscall+0x128
ddb{0}> show malloc
Type InUse MemUse HighUse Limit Requests Type Lim
devbuf 9585 7132K 8159K 78643K 12076 0
pcb 13 8K 8K 78643K 88 0
rtable 108 3K 4K 78643K 297 0
ifaddr 85 16K 17K 78643K 129 0
counters 43 33K 34K 78643K 51 0
ioctlops 0 0K 4K 78643K 1481 0
iov 0 0K 32K 78643K 160 0
mount 1 1K 1K 78643K 1 0
vnodes 1231 77K 78K 78643K 1593 0
UFS quota 1 32K 32K 78643K 1 0
UFS mount 5 36K 36K 78643K 5 0
shm 2 1K 5K 78643K 3 0
VM map 2 1K 1K 78643K 2 0
sem 12 0K 0K 78643K 67 0
dirhash 12 2K 2K 78643K 12 0
ACPI 1809 196K 290K 78643K 12766 0
file desc 6 17K 25K 78643K 286 0
sigio 0 0K 0K 78643K 16 0
proc 62 63K 83K 78643K 500 0
subproc 32 2K 2K 78643K 51 0
NFS srvsock 1 0K 0K 78643K 1 0
NFS daemon 1 16K 16K 78643K 1 0
ip_moptions 2 0K 0K 78643K 37 0
in_multi 78 4K 4K 78643K 120 0
ether_multi 1 0K 0K 78643K 11 0
mrt 0 0K 0K 78643K 2 0
ISOFS mount 1 32K 32K 78643K 1 0
MSDOSFS mount 1 16K 16K 78643K 1 0
ttys 43 201K 201K 78643K 43 0
exec 0 0K 1K 78643K 232 0
pagedep 1 8K 8K 78643K 1 0
inodedep 1 32K 32K 78643K 1 0
newblk 1 0K 0K 78643K 1 0
VM swap 7 26K 26K 78643K 7 0
UVM amap 109 22K 38K 78643K 1919 0
UVM aobj 19 2K 2K 78643K 21 0
memdesc 1 4K 4K 78643K 1 0
crypto data 1 1K 1K 78643K 1 0
ip6_options 0 0K 0K 78643K 56 0
NDP 14 0K 0K 78643K 24 0
temp 133 3024K 3088K 78643K 6997 0
kqueue 3 4K 20K 78643K 26 0
SYN cache 2 16K 16K 78643K 2 0
ddb{0}> show all pools
Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
arp 64 8 0 2 1 0 1 1 0 8 0
plcache 128 20 0 0 1 0 1 1 0 8 0
rtpcb 80 43 0 41 1 0 1 1 0 8 0
rtentry 112 59 0 15 2 0 2 2 0 8 0
unpcb 120 315 0 305 2 1 1 2 0 8 0
syncache 264 6 0 6 2 2 0 1 0 8 0
tcpqe 32 99 0 99 1 1 0 1 0 8 0
tcpcb 544 201 0 192 1 0 1 1 0 8 0
inpcb 280 704 0 688 2 0 2 2 0 8 0
rttmr 72 1 0 1 1 1 0 1 0 8 0
nd6 48 9 0 3 1 0 1 1 0 8 0
pffrag 232 6 0 6 1 1 0 1 0 482 0
pffrnode 88 6 0 6 1 1 0 1 0 8 0
pffrent 40 270 0 270 1 1 0 1 0 8 0
pfosfp 40 846 0 423 5 0 5 5 0 8 0
pfosfpen 112 1428 0 714 21 0 21 21 0 8 0
pfstitem 24 59 0 5 1 0 1 1 0 8 0
pfstkey 112 59 0 5 2 0 2 2 0 8 0
pfstate 328 59 0 5 5 0 5 5 0 8 0
pfrule 1360 21 0 16 2 1 1 2 0 8 0
art_heap8 4096 1 0 0 1 0 1 1 0 8 0
art_heap4 256 236 0 44 12 0 12 12 0 8 0
art_table 32 237 0 44 2 0 2 2 0 8 0
art_node 16 56 0 16 1 0 1 1 0 8 0
sysvmsgpl 40 10 0 2 1 0 1 1 0 8 0
semupl 112 1 0 1 1 1 0 1 0 8 0
semapl 112 65 0 55 1 0 1 1 0 8 0
shmpl 112 19 0 2 1 0 1 1 0 8 0
dirhash 1024 17 0 0 3 0 3 3 0 8 0
dino1pl 128 1773 0 370 46 0 46 46 0 8 0
ffsino 272 1773 0 370 95 0 95 95 0 8 0
nchpl 144 2415 0 809 61 0 61 61 0 8 0
uvmvnodes 72 2144 0 0 39 0 39 39 0 8 0
vnodes 208 2144 0 0 113 0 113 113 0 8 0
namei 1024 6891 0 6891 1 0 1 1 0 8 1
percpumem 16 36 0 4 1 0 1 1 0 8 0
vmpool 560 4 0 4 1 1 0 1 0 8 0
scxspl 192 7025 0 7025 7 5 2 6 0 8 2
plimitpl 152 34 0 26 1 0 1 1 0 8 0
sigapl 424 499 0 466 4 0 4 4 0 8 0
futexpl 56 5924 0 5923 1 0 1 1 0 8 0
knotepl 112 92 0 73 1 0 1 1 0 8 0
kqueuepl 144 49 0 47 1 0 1 1 0 8 0
pipelkpl 48 129 0 118 1 0 1 1 0 8 0
pipepl 120 258 0 237 1 0 1 1 0 8 0
fdescpl 496 483 0 466 3 0 3 3 0 8 0
filepl 152 3665 0 3550 6 0 6 6 0 8 1
lockfpl 104 74 0 73 1 0 1 1 0 8 0
lockfspl 48 22 0 21 1 0 1 1 0 8 0
sessionpl 112 19 0 8 1 0 1 1 0 8 0
pgrppl 48 19 0 8 1 0 1 1 0 8 0
ucredpl 96 286 0 277 1 0 1 1 0 8 0
zombiepl 144 466 0 466 1 0 1 1 0 8 1
processpl 960 499 0 466 5 0 5 5 0 8 0
procpl 624 1103 0 1058 4 0 4 4 0 8 0
sosppl 128 1 0 1 1 1 0 1 0 8 0
sockpl 400 1079 0 1051 8 3 5 7 0 8 2
mcl64k 65536 9 0 0 2 0 2 2 0 8 0
mcl16k 16384 1 0 0 1 0 1 1 0 8 0
mcl12k 12288 3 0 0 1 0 1 1 0 8 0
mcl9k 9216 2 0 0 1 0 1 1 0 8 0
mcl8k 8192 4 0 0 1 0 1 1 0 8 0
mcl4k 4096 13 0 0 2 0 2 2 0 8 0
mcl2k2 2112 2 0 0 1 0 1 1 0 8 0
mcl2k 2048 153 0 0 19 0 19 19 0 8 0
mtagpl 80 24 0 0 1 0 1 1 0 8 0
mbufpl 256 281 0 0 18 0 18 18 0 8 0
bufpl 280 4634 0 173 319 0 319 319 0 8 0
anonpl 16 65286 0 50268 86 4 82 85 0 124 12
amapchunkpl 152 2969 0 2831 12 4 8 11 0 158 1
amappl16 192 2361 0 1409 59 7 52 59 0 8 4
amappl15 184 1 0 0 1 0 1 1 0 8 0
amappl14 176 16 0 11 2 1 1 1 0 8 0
amappl13 168 155 0 152 1 0 1 1 0 8 0
amappl12 160 6 0 4 2 1 1 1 0 8 0
amappl11 152 173 0 155 1 0 1 1 0 8 0
amappl10 144 25 0 20 1 0 1 1 0 8 0
amappl9 136 405 0 400 1 0 1 1 0 8 0
amappl8 128 356 0 332 1 0 1 1 0 8 0
amappl7 120 126 0 112 1 0 1 1 0 8 0
amappl6 112 126 0 122 1 0 1 1 0 8 0
amappl5 104 277 0 260 1 0 1 1 0 8 0
amappl4 96 747 0 711 2 1 1 2 0 8 0
amappl3 88 116 0 110 1 0 1 1 0 8 0
amappl2 80 2891 0 2812 3 1 2 3 0 8 0
amappl1 72 20944 0 20489 25 15 10 20 0 8 0
amappl 80 1376 0 1331 2 0 2 2 0 84 0
dma4096 4096 1 0 1 1 1 0 1 0 8 0
dma256 256 6 0 6 1 1 0 1 0 8 0
dma128 128 253 0 253 1 1 0 1 0 8 0
dma64 64 6 0 6 1 1 0 1 0 8 0
dma32 32 7 0 7 1 1 0 1 0 8 0
dma16 16 18 0 17 1 0 1 1 0 8 0
aobjpl 64 20 0 2 1 0 1 1 0 8 0
uaddrrnd 24 487 0 470 1 0 1 1 0 8 0
uaddrbest 32 2 0 0 1 0 1 1 0 8 0
uaddr 24 487 0 470 1 0 1 1 0 8 0
vmmpekpl 168 7827 0 7794 2 0 2 2 0 8 0
vmmpepl 168 67554 0 65350 136 8 128 128 0 357 32
vmsppl 368 486 0 470 2 0 2 2 0 8 0
pdppl 4096 981 0 940 6 0 6 6 0 8 0
pvpl 32 200327 0 182075 200 3 197 200 0 265 33
pmappl 232 486 0 470 2 1 1 2 0 8 0
extentpl 40 46 0 29 1 0 1 1 0 8 0
phpool 112 180 0 6 6 0 6 6 0 8 0
---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot
Feb 27, 2020, 7:29:11 PM2/27/20
to syzkaller-o...@googlegroups.com
syzbot has found a reproducer for the following crash on:
HEAD commit: c6faab6d in rdrand() timeout, if the rdrand instruction fa..
git tree: openbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=16ddebede00000
kernel config: https://syzkaller.appspot.com/x/.config?x=fe55924c11e64b0a
dashboard link: https://syzkaller.appspot.com/bug?extid=91da988a445013baf925
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=15fd0d29e00000
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+91da98...@syzkaller.appspotmail.com
login: panic: receive 1a: so 0xfffffd805e56b320, so_type 3, m 0xfffffd805a81e200, m_type 0
soreceive(fffffd805e56b320,0,ffff80001d372138,0,0,ffff80001d372044) at soreceive+0x170a sys/kern/uipc_socket.c:977
soo_read(fffffd8062cc12d0,ffff80001d372138,0) at soo_read+0x53 sys/kern/sys_socket.c:70
dofilereadv(ffff80001d339758,6,ffff80001d372138,0,ffff80001d372220) at dofilereadv+0x1a1 sys/kern/sys_generic.c:237
sys_read(ffff80001d339758,ffff80001d3721d0,ffff80001d372220) at sys_read+0x83 sys/kern/sys_generic.c:157
syscall(ffff80001d3722a0) at syscall+0x507 sys/arch/amd64/amd64/trap.c:570
ddb> set $maxwidth = 0
ddb> show panic
receive 1a: so 0xfffffd805e56b320, so_type 3, m 0xfffffd805a81e200, m_type 0
ddb> trace
soreceive(fffffd805e56b320,0,ffff80001d372138,0,0,ffff80001d372044) at soreceive+0x170a sys/kern/uipc_socket.c:977
soo_read(fffffd8062cc12d0,ffff80001d372138,0) at soo_read+0x53 sys/kern/sys_socket.c:70
dofilereadv(ffff80001d339758,6,ffff80001d372138,0,ffff80001d372220) at dofilereadv+0x1a1 sys/kern/sys_generic.c:237
sys_read(ffff80001d339758,ffff80001d3721d0,ffff80001d372220) at sys_read+0x83 sys/kern/sys_generic.c:157
syscall(ffff80001d3722a0) at syscall+0x507 sys/arch/amd64/amd64/trap.c:570
ddb> show registers
rdi 0
rsi 0x1
rbp 0xffff80001d371e80
rbx 0xffff80001d371f30
rdx 0x2
rcx 0x1
rax 0x1
r8 0xffff80001d371e40
r9 0x1
r10 0x1a136cc1b8d02c0e
r11 0xf57ea870faa44ccc
r12 0x3000000008
r13 0xffff80001d371e90
r14 0x100
r15 0x1
rip 0xffffffff81129e08 db_enter+0x18
cs 0x8
rflags 0x246
rsp 0xffff80001d371e70
PROC (dhclient) pid=151735 stat=onproc
process=0xffff8000ffffa390 user=0xffff80001d36d000, vmspace=0xfffffd806bc09440
estcpu=0, cpticks=0, pctcpu=0.0
user=0, sys=0, intr=0
ddb> ps
61203 451717 80677 0 3 0x4000082 thrsleep syz-execprog
61203 305161 80677 0 3 0x4000082 thrsleep syz-execprog
61203 52968 80677 0 3 0x4000082 thrsleep syz-execprog
61203 32977 80677 0 3 0x4000082 thrsleep syz-execprog
61203 383254 80677 0 3 0x4000082 kqread syz-execprog
61203 401883 80677 0 3 0x4000082 thrsleep syz-execprog
80677 299533 62209 0 3 0x10008a pause ksh
62209 107113 14526 0 3 0x92 select sshd
22976 153807 1 0 3 0x100083 ttyin getty
14526 474172 1 0 3 0x80 select sshd
32595 410979 89251 73 3 0x100090 kqread syslogd
89251 857 1 0 3 0x100082 netio syslogd
71630 110595 1 77 2 0x100010 dhclient
*43092 151735 1 0 7 0 dhclient
85631 355820 0 0 3 0x14200 bored smr
36424 329417 0 0 3 0x14200 pgzero zerothread
98800 93347 0 0 3 0x14200 aiodoned aiodoned
37350 421469 0 0 3 0x14200 syncer update
98372 96239 0 0 3 0x14200 cleaner cleaner
22977 186780 0 0 3 0x14200 reaper reaper
68430 152639 0 0 3 0x14200 pgdaemon pagedaemon
8934 514651 0 0 3 0x14200 bored crynlk
41039 142614 0 0 3 0x14200 bored crypto
27378 142605 0 0 3 0x40014200 acpi0 acpi0
12468 322866 0 0 2 0x14200 softnet
47972 320521 0 0 2 0x14200 systqmp
99022 465215 0 0 3 0x14200 bored systq
74574 86003 0 0 3 0x40014200 bored softclock
60925 242951 0 0 3 0x40014200 idle0
1 458623 0 0 3 0x82 wait init
No such command
ddb> show malloc
pcb 13 8K 8K 78643K 13 0
rtable 61 1K 2K 78643K 155 0
ifaddr 24 7K 9K 78643K 33 0
counters 19 16K 16K 78643K 20 0
ioctlops 0 0K 2K 78643K 14 0
VM map 2 0K 0K 78643K 2 0
sem 2 0K 0K 78643K 2 0
file desc 2 4K 12K 78643K 18 0
proc 47 38K 54K 78643K 318 0
ether_multi 1 0K 0K 78643K 1 0
exec 0 0K 1K 78643K 171 0
UVM aobj 2 2K 2K 78643K 2 0
temp 18 3005K 3069K 78643K 1665 0
kqueue 3 4K 4K 78643K 3 0
rtpcb 80 17 0 15 1 0 1 1 0 8 0
rtentry 112 34 0 12 1 0 1 1 0 8 0
unpcb 120 27 0 19 1 0 1 1 0 8 0
syncache 264 5 0 5 1 0 1 1 0 8 1
tcpcb 544 8 0 5 1 0 1 1 0 8 0
inpcb 280 27 0 21 1 0 1 1 0 8 0
nd6 48 3 0 3 1 0 1 1 0 8 1
art_table 32 145 0 0 2 0 2 2 0 8 0
art_node 16 33 0 3 1 0 1 1 0 8 0
ffsino 240 1414 0 20 83 0 83 83 0 8 1
nchpl 144 1639 0 38 60 0 60 60 0 8 0
uvmvnodes 72 1423 0 0 26 0 26 26 0 8 0
vnodes 208 1423 0 0 75 0 75 75 0 8 0
namei 1024 3833 0 3833 1 0 1 1 0 8 1
scxspl 192 4331 0 4331 1 0 1 1 0 8 1
plimitpl 152 14 0 8 1 0 1 1 0 8 0
sigapl 424 212 0 186 4 0 4 4 0 8 0
knotepl 112 39 0 30 1 0 1 1 0 8 0
kqueuepl 144 2 0 0 1 0 1 1 0 8 0
pipelkpl 16 67 0 61 1 0 1 1 0 8 0
pipepl 120 134 0 123 1 0 1 1 0 8 0
fdescpl 432 198 0 186 2 0 2 2 0 8 0
filepl 120 964 0 913 2 0 2 2 0 8 0
lockfpl 104 5 0 4 1 0 1 1 0 8 0
lockfspl 48 3 0 2 1 0 1 1 0 8 0
sessionpl 112 18 0 9 1 0 1 1 0 8 0
pgrppl 48 18 0 9 1 0 1 1 0 8 0
ucredpl 96 47 0 40 1 0 1 1 0 8 0
zombiepl 144 187 0 186 1 0 1 1 0 8 0
processpl 896 212 0 186 4 0 4 4 0 8 0
procpl 624 218 0 186 3 0 3 3 0 8 0
sockpl 400 71 0 55 2 0 2 2 0 8 0
mcl4k 4096 10 0 10 1 0 1 1 0 8 1
mcl2k 2048 5511 0 5483 6 2 4 6 0 8 0
mtagpl 80 2 0 2 1 1 0 1 0 8 0
mbufpl 256 9618 0 9539 8 1 7 7 0 8 0
bufpl 280 3648 0 160 250 0 250 250 0 8 0
anonpl 16 22339 0 20899 16 3 13 13 0 107 6
amapchunkpl 152 884 0 823 5 0 5 5 0 158 2
amappl16 192 138 0 112 2 0 2 2 0 8 0
amappl13 168 18 0 17 2 1 1 1 0 8 0
amappl12 160 9 0 6 1 0 1 1 0 8 0
amappl11 152 66 0 53 1 0 1 1 0 8 0
amappl10 144 16 0 12 1 0 1 1 0 8 0
amappl9 136 225 0 223 1 0 1 1 0 8 0
amappl8 128 229 0 223 1 0 1 1 0 8 0
amappl7 120 102 0 92 1 0 1 1 0 8 0
amappl6 112 25 0 20 1 0 1 1 0 8 0
amappl5 104 130 0 121 1 0 1 1 0 8 0
amappl4 96 447 0 419 1 0 1 1 0 8 0
amappl3 88 113 0 107 1 0 1 1 0 8 0
amappl2 80 802 0 747 3 0 3 3 0 8 1
amappl1 72 13664 0 13286 27 10 17 20 0 8 8
amappl 80 446 0 421 1 0 1 1 0 84 0
uaddrrnd 24 198 0 186 1 0 1 1 0 8 0
vmmpekpl 168 6039 0 6019 1 0 1 1 0 8 0
vmmpepl 168 29002 0 28172 86 10 76 76 0 357 37
vmsppl 272 197 0 186 1 0 1 1 0 8 0
pdppl 4096 402 0 372 5 0 5 5 0 8 0
pvpl 32 105427 0 101745 113 0 113 113 0 265 81
pmappl 200 197 0 186 1 0 1 1 0 8 0
ddb>
HEAD commit: c6faab6d in rdrand() timeout, if the rdrand instruction fa..
git tree: openbsd
kernel config: https://syzkaller.appspot.com/x/.config?x=fe55924c11e64b0a
dashboard link: https://syzkaller.appspot.com/bug?extid=91da988a445013baf925
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=15fd0d29e00000
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+91da98...@syzkaller.appspotmail.com
Stopped at db_enter+0x18: addq $0x8,%rsp
TID PID UID PRFLAGS PFLAGS CPU COMMAND
*151735 43092 0 0 0 0 dhclient
TID PID UID PRFLAGS PFLAGS CPU COMMAND
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic(ffffffff821b60b2) at panic+0x15c sys/kern/subr_prf.c:207
soreceive(fffffd805e56b320,0,ffff80001d372138,0,0,ffff80001d372044) at soreceive+0x170a sys/kern/uipc_socket.c:977
soo_read(fffffd8062cc12d0,ffff80001d372138,0) at soo_read+0x53 sys/kern/sys_socket.c:70
dofilereadv(ffff80001d339758,6,ffff80001d372138,0,ffff80001d372220) at dofilereadv+0x1a1 sys/kern/sys_generic.c:237
sys_read(ffff80001d339758,ffff80001d3721d0,ffff80001d372220) at sys_read+0x83 sys/kern/sys_generic.c:157
syscall(ffff80001d3722a0) at syscall+0x507 sys/arch/amd64/amd64/trap.c:570
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7f7ffffd5b10, count: 7
end of kernel
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports. Insufficient info makes it difficult to find and fix bugs.
ddb>
ddb> set $lines = 0
reports. Insufficient info makes it difficult to find and fix bugs.
ddb>
ddb> set $maxwidth = 0
ddb> show panic
receive 1a: so 0xfffffd805e56b320, so_type 3, m 0xfffffd805a81e200, m_type 0
ddb> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic(ffffffff821b60b2) at panic+0x15c sys/kern/subr_prf.c:207
soreceive(fffffd805e56b320,0,ffff80001d372138,0,0,ffff80001d372044) at soreceive+0x170a sys/kern/uipc_socket.c:977
soo_read(fffffd8062cc12d0,ffff80001d372138,0) at soo_read+0x53 sys/kern/sys_socket.c:70
dofilereadv(ffff80001d339758,6,ffff80001d372138,0,ffff80001d372220) at dofilereadv+0x1a1 sys/kern/sys_generic.c:237
sys_read(ffff80001d339758,ffff80001d3721d0,ffff80001d372220) at sys_read+0x83 sys/kern/sys_generic.c:157
syscall(ffff80001d3722a0) at syscall+0x507 sys/arch/amd64/amd64/trap.c:570
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7f7ffffd5b10, count: -8
end of kernel
ddb> show registers
rdi 0
rsi 0x1
rbp 0xffff80001d371e80
rbx 0xffff80001d371f30
rdx 0x2
rcx 0x1
rax 0x1
r8 0xffff80001d371e40
r9 0x1
r10 0x1a136cc1b8d02c0e
r11 0xf57ea870faa44ccc
r12 0x3000000008
r13 0xffff80001d371e90
r14 0x100
r15 0x1
rip 0xffffffff81129e08 db_enter+0x18
cs 0x8
rflags 0x246
rsp 0xffff80001d371e70
ss 0x10
db_enter+0x18: addq $0x8,%rsp
ddb> show proc
db_enter+0x18: addq $0x8,%rsp
PROC (dhclient) pid=151735 stat=onproc
flags process=0 proc=0
pri=24, usrpri=50, nice=20
forw=0xffffffffffffffff, list=0xffff80001d33a388,0xffff80001d3399d8
pri=24, usrpri=50, nice=20
process=0xffff8000ffffa390 user=0xffff80001d36d000, vmspace=0xfffffd806bc09440
estcpu=0, cpticks=0, pctcpu=0.0
user=0, sys=0, intr=0
ddb> ps
PID TID PPID UID S FLAGS WAIT COMMAND
61203 480622 80677 0 3 0x82 wait syz-execprog
61203 451717 80677 0 3 0x4000082 thrsleep syz-execprog
61203 305161 80677 0 3 0x4000082 thrsleep syz-execprog
61203 52968 80677 0 3 0x4000082 thrsleep syz-execprog
61203 32977 80677 0 3 0x4000082 thrsleep syz-execprog
61203 383254 80677 0 3 0x4000082 kqread syz-execprog
61203 401883 80677 0 3 0x4000082 thrsleep syz-execprog
80677 299533 62209 0 3 0x10008a pause ksh
62209 107113 14526 0 3 0x92 select sshd
22976 153807 1 0 3 0x100083 ttyin getty
14526 474172 1 0 3 0x80 select sshd
32595 410979 89251 73 3 0x100090 kqread syslogd
89251 857 1 0 3 0x100082 netio syslogd
71630 110595 1 77 2 0x100010 dhclient
*43092 151735 1 0 7 0 dhclient
85631 355820 0 0 3 0x14200 bored smr
36424 329417 0 0 3 0x14200 pgzero zerothread
98800 93347 0 0 3 0x14200 aiodoned aiodoned
37350 421469 0 0 3 0x14200 syncer update
98372 96239 0 0 3 0x14200 cleaner cleaner
22977 186780 0 0 3 0x14200 reaper reaper
68430 152639 0 0 3 0x14200 pgdaemon pagedaemon
8934 514651 0 0 3 0x14200 bored crynlk
41039 142614 0 0 3 0x14200 bored crypto
27378 142605 0 0 3 0x40014200 acpi0 acpi0
12468 322866 0 0 2 0x14200 softnet
47972 320521 0 0 2 0x14200 systqmp
99022 465215 0 0 3 0x14200 bored systq
74574 86003 0 0 3 0x40014200 bored softclock
60925 242951 0 0 3 0x40014200 idle0
1 458623 0 0 3 0x82 wait init
0 0 -1 0 3 0x10200 scheduler swapper
ddb> show all locks
No such command
ddb> show malloc
Type InUse MemUse HighUse Limit Requests Type Lim
devbuf 9441 6321K 6321K 78643K 10540 0
pcb 13 8K 8K 78643K 13 0
rtable 61 1K 2K 78643K 155 0
ifaddr 24 7K 9K 78643K 33 0
counters 19 16K 16K 78643K 20 0
ioctlops 0 0K 2K 78643K 14 0
mount 1 1K 1K 78643K 1 0
vnodes 1182 74K 74K 78643K 1187 0
UFS quota 1 32K 32K 78643K 1 0
UFS mount 5 36K 36K 78643K 5 0
shm 2 1K 1K 78643K 2 0
UFS mount 5 36K 36K 78643K 5 0
VM map 2 0K 0K 78643K 2 0
sem 2 0K 0K 78643K 2 0
dirhash 12 2K 2K 78643K 12 0
ACPI 1794 195K 288K 78643K 12646 0
file desc 2 4K 12K 78643K 18 0
proc 47 38K 54K 78643K 318 0
NFS srvsock 1 0K 0K 78643K 1 0
NFS daemon 1 16K 16K 78643K 1 0
in_multi 11 0K 1K 78643K 22 0
NFS daemon 1 16K 16K 78643K 1 0
ether_multi 1 0K 0K 78643K 1 0
ISOFS mount 1 32K 32K 78643K 1 0
MSDOSFS mount 1 16K 16K 78643K 1 0
ttys 19 95K 95K 78643K 19 0
MSDOSFS mount 1 16K 16K 78643K 1 0
exec 0 0K 1K 78643K 171 0
pagedep 1 8K 8K 78643K 1 0
inodedep 1 32K 32K 78643K 1 0
newblk 1 0K 0K 78643K 1 0
VM swap 7 26K 26K 78643K 7 0
UVM amap 69 11K 12K 78643K 870 0
inodedep 1 32K 32K 78643K 1 0
newblk 1 0K 0K 78643K 1 0
VM swap 7 26K 26K 78643K 7 0
UVM aobj 2 2K 2K 78643K 2 0
memdesc 1 4K 4K 78643K 1 0
crypto data 1 1K 1K 78643K 1 0
NDP 3 0K 0K 78643K 6 0
crypto data 1 1K 1K 78643K 1 0
temp 18 3005K 3069K 78643K 1665 0
kqueue 3 4K 4K 78643K 3 0
SYN cache 2 16K 16K 78643K 2 0
ddb> show all pools
Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
arp 64 4 0 2 1 0 1 1 0 8 0
rtpcb 80 17 0 15 1 0 1 1 0 8 0
rtentry 112 34 0 12 1 0 1 1 0 8 0
unpcb 120 27 0 19 1 0 1 1 0 8 0
syncache 264 5 0 5 1 0 1 1 0 8 1
tcpcb 544 8 0 5 1 0 1 1 0 8 0
inpcb 280 27 0 21 1 0 1 1 0 8 0
nd6 48 3 0 3 1 0 1 1 0 8 1
art_heap8 4096 1 0 0 1 0 1 1 0 8 0
art_heap4 256 144 0 0 9 0 9 9 0 8 0
art_table 32 145 0 0 2 0 2 2 0 8 0
art_node 16 33 0 3 1 0 1 1 0 8 0
dirhash 1024 17 0 0 3 0 3 3 0 8 0
dino1pl 128 1414 0 20 45 0 45 45 0 8 0
ffsino 240 1414 0 20 83 0 83 83 0 8 1
nchpl 144 1639 0 38 60 0 60 60 0 8 0
uvmvnodes 72 1423 0 0 26 0 26 26 0 8 0
vnodes 208 1423 0 0 75 0 75 75 0 8 0
namei 1024 3833 0 3833 1 0 1 1 0 8 1
scxspl 192 4331 0 4331 1 0 1 1 0 8 1
plimitpl 152 14 0 8 1 0 1 1 0 8 0
sigapl 424 212 0 186 4 0 4 4 0 8 0
knotepl 112 39 0 30 1 0 1 1 0 8 0
kqueuepl 144 2 0 0 1 0 1 1 0 8 0
pipelkpl 16 67 0 61 1 0 1 1 0 8 0
pipepl 120 134 0 123 1 0 1 1 0 8 0
fdescpl 432 198 0 186 2 0 2 2 0 8 0
filepl 120 964 0 913 2 0 2 2 0 8 0
lockfpl 104 5 0 4 1 0 1 1 0 8 0
lockfspl 48 3 0 2 1 0 1 1 0 8 0
sessionpl 112 18 0 9 1 0 1 1 0 8 0
pgrppl 48 18 0 9 1 0 1 1 0 8 0
ucredpl 96 47 0 40 1 0 1 1 0 8 0
zombiepl 144 187 0 186 1 0 1 1 0 8 0
processpl 896 212 0 186 4 0 4 4 0 8 0
procpl 624 218 0 186 3 0 3 3 0 8 0
sockpl 400 71 0 55 2 0 2 2 0 8 0
mcl4k 4096 10 0 10 1 0 1 1 0 8 1
mcl2k 2048 5511 0 5483 6 2 4 6 0 8 0
mtagpl 80 2 0 2 1 1 0 1 0 8 0
mbufpl 256 9618 0 9539 8 1 7 7 0 8 0
bufpl 280 3648 0 160 250 0 250 250 0 8 0
anonpl 16 22339 0 20899 16 3 13 13 0 107 6
amapchunkpl 152 884 0 823 5 0 5 5 0 158 2
amappl16 192 138 0 112 2 0 2 2 0 8 0
amappl15 184 1 0 0 1 0 1 1 0 8 0
amappl14 176 5 0 4 2 1 1 1 0 8 0
amappl13 168 18 0 17 2 1 1 1 0 8 0
amappl12 160 9 0 6 1 0 1 1 0 8 0
amappl11 152 66 0 53 1 0 1 1 0 8 0
amappl10 144 16 0 12 1 0 1 1 0 8 0
amappl9 136 225 0 223 1 0 1 1 0 8 0
amappl8 128 229 0 223 1 0 1 1 0 8 0
amappl7 120 102 0 92 1 0 1 1 0 8 0
amappl6 112 25 0 20 1 0 1 1 0 8 0
amappl5 104 130 0 121 1 0 1 1 0 8 0
amappl4 96 447 0 419 1 0 1 1 0 8 0
amappl3 88 113 0 107 1 0 1 1 0 8 0
amappl2 80 802 0 747 3 0 3 3 0 8 1
amappl1 72 13664 0 13286 27 10 17 20 0 8 8
amappl 80 446 0 421 1 0 1 1 0 84 0
dma4096 4096 1 0 1 1 1 0 1 0 8 0
dma256 256 6 0 6 1 1 0 1 0 8 0
dma128 128 253 0 253 1 1 0 1 0 8 0
dma64 64 6 0 6 1 1 0 1 0 8 0
dma32 32 7 0 7 1 1 0 1 0 8 0
dma16 16 18 0 17 1 0 1 1 0 8 0
aobjpl 64 1 0 0 1 0 1 1 0 8 0
dma256 256 6 0 6 1 1 0 1 0 8 0
dma128 128 253 0 253 1 1 0 1 0 8 0
dma64 64 6 0 6 1 1 0 1 0 8 0
dma32 32 7 0 7 1 1 0 1 0 8 0
dma16 16 18 0 17 1 0 1 1 0 8 0
uaddrrnd 24 198 0 186 1 0 1 1 0 8 0
uaddrbest 32 2 0 0 1 0 1 1 0 8 0
uaddr 24 198 0 186 1 0 1 1 0 8 0
vmmpekpl 168 6039 0 6019 1 0 1 1 0 8 0
vmmpepl 168 29002 0 28172 86 10 76 76 0 357 37
vmsppl 272 197 0 186 1 0 1 1 0 8 0
pdppl 4096 402 0 372 5 0 5 5 0 8 0
pvpl 32 105427 0 101745 113 0 113 113 0 265 81
pmappl 200 197 0 186 1 0 1 1 0 8 0
extentpl 40 46 0 29 1 0 1 1 0 8 0
phpool 112 126 0 5 4 0 4 4 0 8 0
ddb>
Reply all
Reply to author
Forward
0 new messages