protection_fault: bpfdetach

Status: upstream: reported on 2025/02/16 16:28
Reported-by: syzbot+47d95e88904ebdae1d04@syzkaller.appspotmail.com
First crash: 600d, last: 17d

Sample crash report:
kernel: protection fault trap, code=0
Stopped at      bpfdetach+0x70: movq    0(%r15),%r12
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
the kernel did not panic
ddb{0}> show kasan
No such command
ddb{0}> trace
bpfdetach(ffff80000162a800) at bpfdetach+0x70 sys/net/bpf.c:1770
if_detach(ffff80000162a800) at if_detach+0x12b sys/net/if.c:1289
tun_clone_destroy(ffff80000162a800) at tun_clone_destroy+0x2ce sys/net/if_tun.c:343
if_clone_destroy(ffff80003c3c9c50) at if_clone_destroy+0x205 sys/net/if.c:1479
ifioctl(ffff800001628ec8,80206979,ffff80003c3c9c50,ffff80003b7a9780) at ifioctl+0x59d sys/net/if.c:2160
sys_ioctl(ffff80003b7a9780,ffff80003c3c9e30,ffff80003c3c9d80) at sys_ioctl+0x674 sys/kern/sys_generic.c:-1
syscall(ffff80003c3c9e30) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003c3c9e30) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:791
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xd5ea8d457e0, count: -8
ddb{0}> show registers
rdi               0xffff8000343a7000
rsi                          0x1dc60    acpi_pdirpa+0x9ad1
rbp               0xffff80003c3c9a70
rbx                       0x80206979    __kernel_virt_to_phys+0x206979
rdx               0xffff8000343a7000
rcx                          0x1dc5f    acpi_pdirpa+0x9ad0
rax               0xffffffff83198439    bpfdetach+0xb9
r8                                 0
r9                0xffffffffffffffff
r10               0xffff80003c3c9910
r11               0x2355a69349635f9a
r12               0xdeaf0002deaf4152
r13               0xffff80000162ae48
r14               0xffff80000162a800
r15               0xdeaf0002deaf4152
rip               0xffffffff831983f0    bpfdetach+0x70
cs                               0x8
rflags                       0x10246    __ALIGN_SIZE+0xf246
rsp               0xffff80003c3c9a40
ss                                 0
bpfdetach+0x70: movq    0(%r15),%r12
ddb{0}> show proc
PROC (syz-executor) tid=410066 pid=50336 tcnt=2 stat=onproc
    flags process=0 proc=4000000<THREAD>
    runpri=32, usrpri=50, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff80003b7a8fb8,0xffff80002a22a028
    process=0xffff800045fe5d30 user=0xffff80003c3c4000, vmspace=0xfffff7006fbc21f0
    estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0
ddb{0}> ps
   PID     TID   PPID   UID  S      PRLAGS     PFLAGS WAIT      COMMAND
 77164   35266  96163     0  2           0          0           syz-executor
 77164  453389  96163     0  2           0  0x4000000           syz-executor
 30356  357053  73087     0  2           0          0           syz-executor
 50336  270395  70778     0  3           0       0x80 nanoslp   syz-executor
*50336  410066  70778     0  7           0  0x4000000           syz-executor
 26199  209131  33039     0  3           0       0x80 nanoslp   syz-executor
 26199  445716  33039     0  3           0  0x4000080 ttyin     syz-executor
 26199    6387  33039     0  3           0  0x4000080 fsleep    syz-executor
 76358  276375  80923     0  3           0       0x80 nanoslp   syz-executor
 76358   80379  80923     0  3           0  0x4000080 netcon    syz-executor
 76358  200039  80923     0  3           0  0x4000080 fsleep    syz-executor
 52543  124389   3179     0  3           0       0x80 nanoslp   syz-executor
 52543  236665   3179     0  3           0  0x4000080 kqpoll    syz-executor
 52543  348234   3179     0  3           0  0x4000080 fsleep    syz-executor
 73087  413397  66351     0  3         0x2       0x80 nanoslp   syz-executor
 70778  241079  66351     0  3         0x2       0x80 nanoslp   syz-executor
 80923  124556  66351     0  3         0x2       0x80 nanoslp   syz-executor
  3179  420979  66351     0  3         0x2       0x80 nanoslp   syz-executor
 33039   21031  66351     0  3         0x2       0x80 nanoslp   syz-executor
 96163  347392  66351     0  3         0x2       0x80 nanoslp   syz-executor
 75017  383873  66351     0  7         0x2          0           syz-executor
  5266  107248  66351     0  3         0x2       0x80 nanoslp   syz-executor
 66351  243734  14109     0  3         0x2       0x80 kqread    syz-executor
 14109    5425  57450     0  3    0x100002       0x88 sigsusp   ksh
 57450  129819  85330     0  3        0x10       0x88 kqread    sshd-session
 85330  199461  86877     0  3        0x12       0x80 kqread    sshd-session
 56014  229370      1     0  3    0x100003       0x80 ttyin     getty
 86877  168732      1     0  3           0       0x88 kqread    sshd
 78937  212188  97044    74  3   0x1100012       0x80 bpf       pflogd
 97044  380442      1     0  3           0       0x80 sbwait    pflogd
  9636  147613  14729    73  3   0x1100010       0x80 kqread    syslogd
 14729  208816      1     0  3    0x100002       0x80 sbwait    syslogd
 23143  196885      1     0  3    0x100000       0x80 kqread    resolvd
  5027   37554  55170    77  2    0x100012          0           dhcpleased
 30554  500429  55170    77  3    0x100012       0x80 kqread    dhcpleased
 55170  297659      1     0  3           0       0x80 kqread    dhcpleased
 43077   44912      0     0  3     0x14000      0x200 bored     smr
 45908  203958      0     0  2     0x14000      0x200           zerothread
 20718  523324      0     0  3     0x14000      0x200 aiodoned  aiodoned
 42126  425062      0     0  3     0x14000      0x200 syncer    update
 74254  372025      0     0  3     0x14000      0x200 cleaner   cleaner
 14015   89286      0     0  3     0x14000      0x200 reaper    reaper
 68542   66175      0     0  3     0x14000      0x200 pgdaemon  pagedaemon
 38069  358270      0     0  3     0x14000      0x200 bored     viomb
 65386  447694      0     0  3     0x14000 0x40000200 acpi0     acpi0
 43456  117384      0     0  3     0x14000 0x40000200           idle1
 55332  265570      0     0  3     0x14000      0x200 bored     softnet1
 16493  386966      0     0  3     0x14000      0x200 bored     softnet0
 47354   82884      0     0  3     0x14000      0x200 bored     systqmp
 27999  303546      0     0  3     0x14000      0x200 bored     systq
 59701   17373      0     0  3     0x14000      0x200 tmoslp    softclockmp
 66189  312530      0     0  3     0x14000 0x40000200 tmoslp    softclock
 28866  451729      0     0  3     0x14000 0x40000200           idle0
     1  237268      0     0  3         0x2       0x80 wait      init
     0       0     -1     0  3     0x10000      0x200 scheduler swapper
ddb{0}> show all locks
Process 50336 (syz-executor) thread 0xffff80003b7a9780 (410066)
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83a2e880)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  __mp_acquire_count+0x58 sys/kern/kern_lock.c:-1
#2  sleep_finish+0x2d8 sys/kern/kern_synch.c:369
#3  rw_do_enter_write+0x1dc sys/kern/kern_rwlock.c:298
#4  bpf_detachd+0x1c2 sys/net/bpf.c:345
#5  bpfclose+0x101 sys/net/bpf.c:417
#6  spec_close+0x466 sys/kern/spec_vnops.c:-1
#7  VOP_CLOSE+0x132 sys/kern/vfs_vops.c:156
#8  vclean+0x352 sys/kern/vfs_subr.c:1099
#9  vgonel+0xb0 sys/kern/vfs_subr.c:1201
#10 vop_generic_revoke+0x3ea sys/kern/vfs_default.c:124
#11 VOP_REVOKE+0x65 sys/kern/vfs_vops.c:291
#12 vdevgone+0x17b sys/kern/vfs_subr.c:-1
#13 bpfsdetach+0x155 sys/net/bpf.c:1794
#14 bpfdetach+0xa6 sys/net/bpf.c:-1
#15 if_detach+0x12b sys/net/if.c:1289
#16 tun_clone_destroy+0x2ce sys/net/if_tun.c:343
#17 if_clone_destroy+0x205 sys/net/if.c:1479
#18 ifioctl+0x59d sys/net/if.c:2160
exclusive rwlock clonelk r = 0 (0xffffffff838e1da8)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  if_clone_destroy+0x93 sys/net/if.c:-1
#3  ifioctl+0x59d sys/net/if.c:2160
#4  sys_ioctl+0x674 sys/kern/sys_generic.c:-1
#5  syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#5  syscall+0xbd4 sys/arch/amd64/amd64/trap.c:791
#6  Xsyscall+0x128
Process 75017 (syz-executor) thread 0xffff800045ffcd00 (383873)
exclusive rrwlock inode r = 0 (0xfffff7006cf01318)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  rrw_enter+0xc6 sys/kern/kern_rwlock.c:621
#3  VOP_LOCK+0xbd sys/kern/vfs_vops.c:527
#4  ufs_ihashins+0x4f ufs_ihash sys/ufs/ufs/ufs_ihash.c:-1 [inline]
#4  ufs_ihashins+0x4f sys/ufs/ufs/ufs_ihash.c:150
#5  ffs_vget+0x187 sys/ufs/ffs/ffs_vfsops.c:1232
#6  ffs_inode_alloc+0x279 sys/ufs/ffs/ffs_alloc.c:393
#7  ufs_mkdir+0xfc sys/ufs/ufs/ufs_vnops.c:1112
#8  VOP_MKDIR+0x101 sys/kern/vfs_vops.c:394
#9  domkdirat+0x179 sys/kern/vfs_syscalls.c:3063
#10 syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#10 syscall+0xb17 sys/arch/amd64/amd64/trap.c:791
#11 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffff7007c243428)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  rrw_enter+0xc6 sys/kern/kern_rwlock.c:621
#3  VOP_LOCK+0xbd sys/kern/vfs_vops.c:527
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:576
#5  vfs_lookup+0x12b sys/kern/vfs_lookup.c:431
#6  namei+0x7c1 sys/kern/vfs_lookup.c:250
#7  domkdirat+0x8b sys/kern/vfs_syscalls.c:3048
#8  syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#8  syscall+0xb17 sys/arch/amd64/amd64/trap.c:791
#9  Xsyscall+0x128
ddb{0}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 11092  12170K   12311K 166960K     12269        0
            pcb    17     12K      12K 166960K        48        0
         rtable   259     10K      10K 166960K       394        0
             pf    41     19K      26K 166960K       108        0
         ifaddr    46      8K       8K 166960K        54        0
        ifgroup    60      2K       2K 166960K        77        0
         sysctl     3      1K       9K 166960K         7        0
       counters    74     37K      37K 166960K        82        0
       ioctlops     0      0K       4K 166960K      1508        0
            iov     0      0K      24K 166960K         7        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1289     81K      81K 166960K      1454        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       5K 166960K         3        0
         VM map     2      1K       1K 166960K         2        0
            sem     9      0K       0K 166960K         9        0
        dirhash    12      2K       2K 166960K        15        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    17     61K      93K 166960K       346        0
          sigio     0      0K       0K 166960K         4        0
           proc    72    115K     180K 166960K       570        0
        subproc    72      4K       4K 166960K        72        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K        11        0
       in_multi   100      6K       6K 166960K       114        0
    ether_multi     1      0K       0K 166960K         5        0
            mrt     0      0K       0K 166960K         7        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    79    360K     360K 166960K        79        0
           exec     0      0K       1K 166960K       386        0
   fusefs mount     1     32K      32K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   234    167K     178K 166960K      4756        0
       UVM aobj     4      2K       2K 166960K         4        0
     pinsyscall    42     84K     108K 166960K      1512        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K        14        0
            NDP    13      0K       2K 166960K        33        0
           temp    36   9114K    9134K 166960K      7794        0
         kqueue    14     22K      26K 166960K        71        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{0}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       28    0        0     1     0     1     1     0     8    0
rtpcb      120       36    0       33     1     0     1     1     0     8    0
rtentry    176      115    0        1     6     0     6     6     0     8    0
unpcb      144       80    0       63     1     0     1     1     0     8    0
syncache   336        5    0        5     1     0     1     1     0     8    1
tcpcb      736       30    0       24     1     0     1     1     0     8    0
arp        136       19    0        0     1     0     1     1     0     8    0
inpcb      328      147    0      137     2     0     2     2     0     8    0
nd6        152       24    0        0     1     0     1     1     0     8    0
pkpcb       40        2    0        1     1     0     1     1     0     8    0
kcovpl      48        8    0        0     1     0     1     1     0     8    0
ppxss      1192       2    0        1     1     0     1     1     0     8    0
pppxif     1576       1    0        0     1     0     1     1     0     8    0
pfstscr     40       10    0        7     1     0     1     1     0     8    0
pffrent     40        1    0        1     1     0     1     1     0     8    1
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfsrclim   320        3    0        3     1     0     1     1     0     8    1
pfanchor   1288       6    0        6     1     0     1     1     0     8    1
pfstitem    24       40    0        0     1     0     1     1     0     8    0
pfstkey    128       47    0        7     2     0     2     2     0     8    0
pfstate    448       43    0        4     5     0     5     5     0     8    0
pfrule     1360      26    0       20     2     0     2     2     0     8    0
art_heap8  4096       2    0        0     2     0     2     2     0     8    0
art_heap4  256      464    0        0    29     0    29    29     0     8    0
art_table   40      466    0        0     5     0     5     5     0     8    0
art_node    32      115    0       12     1     0     1     1     0     8    0
sysvmsgpl   40        2    0        0     1     0     1     1     0     8    0
semapl      72        7    0        0     1     0     1     1     0     8    0
shmpl      120        1    0        0     1     0     1     1     0     8    0
dirhash    1024      19    0        2     3     0     3     3     0     8    0
dino2pl    256     1881    0      418    92     0    92    92     0     8    0
ffsino     296     1881    0      418   114     0   114   114     0     8    0
nchpl      144     2302    0      600    64     0    64    64     0     8    0
vnodes     216     2023    0        0   113     0   113   113     0     8    0
namei      1024    7753    0     7752     4     1     3     3     0     8    2
percpumem   16       57    0        4     1     0     1     1     0     8    0
kstatmem   264       37    0        8     2     0     2     2     0     8    0
scsiplug    72        2    0        2     1     0     1     1     0     8    1
scxspl     216     7938    0     7938     4     3     1     3     1     8    1
plimitpl   152       70    0       52     1     0     1     1     0     8    0
sigapl     424      666    0      619     7     0     7     7     0     8    1
knotepl    120      560    0        0    17     0    17    17     0     8    0
kqueuepl   224       61    0       51     1     0     1     1     0     8    0
pipepl     344      130    0      102     3     0     3     3     0     8    0
fdescpl    528      650    0      619     3     0     3     3     0     8    0
filepl     160     2330    0     2106    10     0    10    10     0     8    0
lockfpl    104       62    0       60     1     0     1     1     0     8    0
lockfspl    48       27    0       25     1     0     1     1     0     8    0
sessionpl  144       34    0       25     1     0     1     1     0     8    0
pgrppl      48       42    0       25     1     0     1     1     0     8    0
ucredpl    104      402    0      389     1     0     1     1     0     8    0
zombiepl   144      620    0      619     1     0     1     1     0     8    0
processpl  1240     666    0      619     5     0     5     5     0     8    0
procpl     664      918    0      863     6     0     6     6     0     8    0
sosppl     176        5    0        4     1     0     1     1     0     8    0
sockpl     752      266    0      235     4     0     4     4     0     8    0
mcl64k     65536     13    0        0     2     0     2     2     0     8    0
mcl16k     16384      5    0        0     1     0     1     1     0     8    0
mcl12k     12288      6    0        0     1     0     1     1     0     8    0
mcl9k128   9344       7    0        0     1     0     1     1     0     8    0
mcl8k      8192      12    0        0     2     0     2     2     0     8    0
mcl4k      4096     112    0        0    14     0    14    14     0     8    0
mcl2k2     2112       1    0        0     1     0     1     1     0     8    0
mcl2k      2048      24    0        0     3     0     3     3     0     8    0
mextrefs    64       20    0        0     1     0     1     1     0     8    0
mtagpl      96        7    0        0     1     0     1     1     0     8    0
mbufpl     256      223    0        0    14     0    14    14     0     8    0
bufpl      272     2729    0      106   175     0   175   175     0     8    0
anonpl      32     3763    0        0    31     0    31    31     0   247    0
amapchunkpl 152   13710    0    13222    22     0    22    22     0   158    0
amappl16   200     1398    0     1367     5     2     3     4     0     8    0
amappl15   192        9    0        9     2     2     0     1     0     8    0
amappl14   184      432    0      431     1     0     1     1     0     8    0
amappl13   176      123    0      111     1     0     1     1     0     8    0
amappl12   168      899    0      869     2     0     2     2     0     8    0
amappl11   160        6    0        6     2     2     0     1     0     8    0
amappl10   152       66    0       52     1     0     1     1     0     8    0
amappl9    144      275    0      275     1     1     0     1     0     8    0
amappl8    136       98    0       96     1     0     1     1     0     8    0
amappl7    128      145    0      132     1     0     1     1     0     8    0
amappl6    120      155    0      153     1     0     1     1     0     8    0
amappl5    112       96    0       86     1     0     1     1     0     8    0
amappl4    104      293    0      273     1     0     1     1     0     8    0
amappl3     96     2547    0     2447     3     0     3     3     0     8    0
amappl2     88      768    0      689     2     0     2     2     0     8    0
amappl1     80    11312    0    10701    16     0    16    16     0     8    3
amappl      88     4022    0     3859     5     0     5     5     0    92    0
uvmvnodes   80      102    0        0     3     0     3     3     0     8    0
dma32768   32768      1    0        1     1     0     1     1     0     8    1
dma4096    4096       2    0        2     2     1     1     1     0     8    1
dma2048    2048       1    0        1     1     0     1     1     0     8    1
dma1024    1024       2    0        1     1     0     1     1     0     8    0
dma512     512        1    0        1     1     0     1     1     0     8    1
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      254    0      254     2     1     1     1     0     8    1
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       19    0       18     1     0     1     1     0     8    0
aobjpl      72        3    0        0     1     0     1     1     0     8    0
uaddrrnd    24      650    0      619     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      650    0      619     1     0     1     1     0     8    0
vmmpekpl   168     6939    0     6902     2     0     2     2     0     8    0
vmmpepl    168    48633    0    46681    89     0    89    89     0   357    0
vmsppl     488      649    0      619     5     0     5     5     0     8    1
rwobjpl     80    16067    0    15023    26     1    25    25     0     8    1
pdppl      4096    1307    0     1238   103    32    71    87     0     8    2
pvpl        32    12645    0        0   102     0   102   102     0   265    0
pmappl     256      649    0      619     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      463    0       35    13     0    13    13     0     8    0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
bpfdetach(ffff80000162a800) at bpfdetach+0x70 sys/net/bpf.c:1770
if_detach(ffff80000162a800) at if_detach+0x12b sys/net/if.c:1289
tun_clone_destroy(ffff80000162a800) at tun_clone_destroy+0x2ce sys/net/if_tun.c:343
if_clone_destroy(ffff80003c3c9c50) at if_clone_destroy+0x205 sys/net/if.c:1479
ifioctl(ffff800001628ec8,80206979,ffff80003c3c9c50,ffff80003b7a9780) at ifioctl+0x59d sys/net/if.c:2160
sys_ioctl(ffff80003b7a9780,ffff80003c3c9e30,ffff80003c3c9d80) at sys_ioctl+0x674 sys/kern/sys_generic.c:-1
syscall(ffff80003c3c9e30) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003c3c9e30) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:791
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xd5ea8d457e0, count: -8
ddb{0}> machine ddbcpu 1
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
ddb{1}> trace
x86_ipi_db(ffff80002999dff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc
__mp_acquire_count(ffffffff83a2e080,1) at __mp_acquire_count+0x58 sys/kern/kern_lock.c:-1
sleep_finish(ffffffffffffffff,1) at sleep_finish+0x2d8 sys/kern/kern_synch.c:369
biowait(fffff70060db5cc0) at biowait+0xc6 sys/kern/vfs_bio.c:1110
bwrite(fffff70060db5cc0) at bwrite+0x359 sys/kern/vfs_bio.c:625
VOP_BWRITE(fffff70060db5cc0) at VOP_BWRITE+0x60 sys/kern/vfs_vops.c:648
ufs_mkdir(ffff80002a2ce990) at ufs_mkdir+0x547 sys/ufs/ufs/ufs_vnops.c:1160
VOP_MKDIR(fffff700706d2db8,ffff80002a2ceaf0,ffff80002a2ceb20,ffff80002a2cea20) at VOP_MKDIR+0x101 sys/kern/vfs_vops.c:394
domkdirat(ffff800045ffcd00,ffffff9c,7972b364a220,1ff) at domkdirat+0x179 sys/kern/vfs_syscalls.c:3063
syscall(ffff80002a2ceca0) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80002a2ceca0) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:791
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7972b364a2c0, count: -14

Crashes (87):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/09/22 04:39 openbsd 4acae101ea91 e12281bd .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2026/08/18 01:17 openbsd caeb0e649bb8 1e72964b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2026/07/21 10:20 openbsd 20200149c668 7c5de9c3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2026/07/05 02:44 openbsd f9c9bf9f9903 fcece630 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2026/06/23 23:19 openbsd 26c6eebc6662 042555ff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2026/06/18 03:00 openbsd 135881df8fe2 62cc6db3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2026/06/16 23:09 openbsd 2f229140c828 62cc6db3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2026/06/11 22:43 openbsd 28cce1e713d0 d93a6ab6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2026/06/09 21:27 openbsd d89bad393cda c36c07f6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2026/06/04 05:57 openbsd e8e5aa2db9cf 197909be .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: bpfdetach
2026/06/04 01:58 openbsd e8e5aa2db9cf 197909be .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: bpfdetach
2026/05/15 22:45 openbsd 25d4b1a85733 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2026/05/07 21:50 openbsd d8525c0ee876 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: bpfdetach
2026/04/30 08:43 openbsd 04e2410ca848 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2026/04/28 06:18 openbsd 623596ce970b ce741359 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2026/04/22 04:14 openbsd 9a8e8d261fbe 0b6ab7ec .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: bpfdetach
2026/04/06 15:37 openbsd 8a4a3a78bbe7 4b3d9a38 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2026/03/23 20:42 openbsd ccfcb3e6ef18 5e3db351 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2026/03/17 17:31 openbsd 7b59c65f5490 c8810548 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: bpfdetach
2026/03/13 17:09 openbsd 7210d95da7cb 351cb5cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2026/03/12 12:48 openbsd 7210d95da7cb 4efadf07 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2026/03/12 11:09 openbsd 7210d95da7cb 4efadf07 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2026/03/12 06:56 openbsd 73e77b6607d4 2d88ab01 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: bpfdetach
2026/02/13 12:26 openbsd 7d8bc7d2b639 018ebef2 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2026/02/12 12:49 openbsd 012cf974ca6d 018ebef2 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: bpfdetach
2026/02/09 23:36 openbsd a82d9bb4a825 018ebef2 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2026/02/02 18:11 openbsd 28dc9acc561e 018ebef2 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: bpfdetach
2026/01/31 10:02 openbsd ffeb3c477d3b c75a2f6e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2026/01/30 20:18 openbsd dfcd5193b8f0 ae7dc18c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2026/01/19 14:23 openbsd 665aeba05e03 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: bpfdetach
2026/01/15 16:51 openbsd c600931321c7 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2026/01/13 13:20 openbsd 67ddd48175b9 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2026/01/10 23:59 openbsd 7ae91379da7d 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2026/01/08 05:04 openbsd d77c41cf8f5a c1f5c7d0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2025/12/30 06:40 openbsd 163664d81c58 17e6c961 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: bpfdetach
2025/12/20 21:09 openbsd df8f251ef5f9 e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: bpfdetach
2025/12/20 06:14 openbsd ddef1afac53e e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2025/12/15 18:56 openbsd 2c50c5af38ad a066d2bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: bpfdetach
2025/12/15 07:26 openbsd b46de5080dd7 a066d2bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2025/12/11 08:06 openbsd d004c0aeba6f 48b27acc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: bpfdetach
2025/12/11 06:57 openbsd d004c0aeba6f 48b27acc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2025/12/07 05:48 openbsd e763f357d7fa cee4cb10 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: bpfdetach
2025/11/19 16:23 openbsd 809b9478d116 82d7b894 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2025/11/18 01:38 openbsd 8720e5dd1696 ef766cd7 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: bpfdetach
2025/11/16 09:27 openbsd 9c41abc406e3 f7988ea4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2025/11/09 13:02 openbsd e187005a6767 4e1406b4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2025/10/29 11:37 openbsd 9abc5df53d8a fd2207e7 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2025/10/28 20:13 openbsd 46d840b2b363 fd2207e7 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2025/10/18 07:49 openbsd 47c08dbbd8a3 1c8c8cd8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2025/07/12 10:45 openbsd 36cc672466d3 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: bpfdetach
2025/06/29 14:17 openbsd b4d1cb14c459 fc9d8ee5 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: bpfdetach
2025/06/17 14:03 openbsd 154de61c2e99 a5686133 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: bpfdetach
2025/06/16 12:43 openbsd b38eaba60654 d1716036 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: bpfdetach
2025/06/10 05:28 openbsd eb252dbb8be6 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2025/06/09 16:58 openbsd 1ccd80029b5d 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2025/06/06 05:41 openbsd b57dcb7bc7e3 6b6b5f21 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2025/06/03 20:25 openbsd e4273848146a a30356b7 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2025/05/17 18:02 openbsd 007267a8c99a f41472b0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2025/05/16 05:41 openbsd 84d74105a289 cfde8269 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2025/04/11 09:46 openbsd 5990a1963d9d 94486846 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2025/04/01 07:11 openbsd 6cbbb384a28a e2826670 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: bpfdetach
2025/03/08 12:51 openbsd 083866324387 7e3bd60d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: bpfdetach
2025/03/04 05:09 openbsd 4602d4e06be3 c3901742 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: bpfdetach
2025/02/23 19:47 openbsd c8d1658b9cef d34966d1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2025/02/17 13:02 openbsd c48feb9479a9 4121cf9d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
2025/02/16 16:27 openbsd 3411e7e2a484 40a34ec9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: bpfdetach
* Struck through repros no longer work on HEAD.