syzbot


kernel: protection fault trap, code=NUM (6)

Status: upstream: reported on 2022/11/10 22:10
Reported-by: syzbot+8eba244a293b9b0a46a3@syzkaller.appspotmail.com
First crash: 554d, last: 8d09h
Similar bugs (5)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd kernel: protection fault trap, code=NUM (3) 1 788d 788d 0/3 closed as invalid on 2022/03/22 11:48
openbsd kernel: protection fault trap, code=NUM (5) 2 628d 629d 0/3 closed as dup on 2022/08/29 15:02
openbsd kernel: protection fault trap, code=NUM (2) C 16 870d 893d 0/3 closed as invalid on 2021/12/31 06:19
openbsd kernel: protection fault trap, code=NUM 1 973d 973d 0/3 closed as invalid on 2021/09/18 05:58
openbsd kernel: protection fault trap, code=NUM (4) 1 751d 751d 0/3 closed as invalid on 2022/04/28 06:52

Sample crash report:
kernel: protection fault trap, code=0
Faulted in DDB; continuing...
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10183   6408K    6419K 166960K     11987        0
            pcb    17     14K      16K 166960K        19        0
         rtable   226      6K       7K 166960K      9196        0
             pf    29      8K       8K 166960K       513        0
         ifaddr    42     16K      17K 166960K      1020        0
        ifgroup    50      2K       2K 166960K      1018        0
         sysctl     4      1K       2K 166960K        12        0
       counters    64     36K      36K 166960K       548        0
       ioctlops     0      0K       2K 166960K       580        0
            iov     0      0K      32K 166960K      1512        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1377     87K      87K 166960K      6677        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K      13K 166960K       627        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      1K       1K 166960K        13        0
        dirhash    12      2K       3K 166960K      1119        0
           ACPI  1697    195K     286K 166960K     12548        0
      file desc    21     77K     109K 166960K     23060        0
          sigio     0      0K       0K 166960K       461        0
           proc    63     91K     127K 166960K      9628        0
        subproc   104      6K       7K 166960K      3406        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K      5256        0
       in_multi    89      6K       7K 166960K      3828        0
    ether_multi     1      0K       0K 166960K       137        0
            mrt     2      0K       0K 166960K        24        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys   115    519K     519K 166960K       115        0
           exec     0      0K       1K 166960K      5772        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   266     75K     110K 166960K    195219        0
       UVM aobj   131      4K       7K 166960K       165        0
     pinsyscall    41     82K     101K 166960K     30722        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K      1917        0
            NDP    11      0K       2K 166960K       751        0
           temp    74   6820K    6948K 166960K     81454        0
         kqueue    12     18K      35K 166960K      3783        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       24    0        0     1     0     1     1     0     8    0
rtpcb      120     3393    0     3390     1     0     1     1     0     8    0
rtentry    112     3067    0     2961     4     0     4     4     0     8    0
unpcb      144    19964    0    19950    58    57     1     4     0     8    0
syncache   336      167    0      167    53    53     0     1     0     8    0
tcpqe       32       83    0       83    19    19     0     1     0     8    0
tcpcb      808    12054    0    12049    58    56     2     8     0     8    1
arp        120      525    0      508     1     0     1     1     0     8    0
ipq         40       92    0       90     8     7     1     1     0     8    0
ipqe        40     1282    0     1280     8     7     1     1     0     8    0
inpcb      384    27835    0    27826   102   100     2    14     0     8    1
ip6q        72       10    0       10    10    10     0     1     0     8    0
ip6af       40       20    0       20    10    10     0     1     0     8    0
nd6        136     1025    0     1000     9     7     2     2     0     8    0
kcovpl      48      262    0      254     1     0     1     1     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256    12432    0    12007    57    26    31    32     0     8    0
art_table   32    12433    0    12007    10     5     5     5     0     8    0
art_node    16     3066    0     2969     1     0     1     1     0     8    0
sysvmsgpl   40       12    0        6     1     0     1     1     0     8    0
semapl     112       10    0        0     1     0     1     1     0     8    0
shmpl      112      162    0       34     5     1     4     4     0     8    0
dirhash    1024     755    0      738     3     0     3     3     0     8    0
dino2pl    256    32842    0    31266   100     0   100   100     0     8    0
ffsino     272    32842    0    31266   107     0   107   107     0     8    0
nchpl      144    64292    0    62545    67     1    66    66     0     8    0
uvmvnodes   80     8790    0        0   180     0   180   180     0     8    0
vnodes     216     8790    0        0   489     0   489   489     0     8    0
namei      1024  240017    0   240015    23    22     1     2     0     8    0
percpumem   16      288    0      242     1     0     1     1     0     8    0
kstatmem   264      506    0      484     2     0     2     2     0     8    0
scxspl     216   298860    0   298858   113   110     3     8     1     8    2
plimitpl   152     5508    0     5484     2     0     2     2     0     8    0
sigapl     424    22855    0    22803     7     0     7     7     0     8    0
futexpl     64   339092    0   339091    26    25     1     1     0     8    0
knotepl    120     1975    0        0    20     0    20    20     0     8    0
kqueuepl   216     7092    0     7084    20    19     1     5     0     8    0
pipepl     320     3825    0     3797    19    15     4     4     0     8    1
fdescpl    496    22836    0    22804    13     8     5     6     0     8    0
filepl     152   150961    0   150724    57    46    11    15     0     8    0
lockfpl    104     5846    0     5844     1     0     1     1     0     8    0
lockfspl    48     2159    0     2157     1     0     1     1     0     8    0
sessionpl  144      265    0      249     1     0     1     1     0     8    0
pgrppl      48      781    0      765     1     0     1     1     0     8    0
ucredpl    104    32892    0    32875     1     0     1     1     0     8    0
zombiepl   144    22804    0    22803     1     0     1     1     0     8    0
processpl  1136   22855    0    22803     5     0     5     5     0     8    0
procpl     656    46994    0    46926    14     6     8     8     0     8    0
srpgc       96        2    0        2     1     1     0     1     0     8    0
sosppl     168      570    0      570    56    55     1     1     0     8    1
sockpl     664    51820    0    51794   154   150     4    14     0     8    1
mcl64k     65536     23    0        0     3     0     3     3     0     8    0
mcl16k     16384      2    0        0     1     0     1     1     0     8    0
mcl12k     12288      2    0        0     1     0     1     1     0     8    0
mcl9k      9216       2    0        0     1     0     1     1     0     8    0
mcl8k      8192      13    0        0     2     0     2     2     0     8    0
mcl4k      4096      10    0        0     2     0     2     2     0     8    0
mcl2k2     2112       2    0        0     1     0     1     1     0     8    0
mcl2k      2048    1512    0        0    48    17    31    43     0     8    0
mtagpl      96        5    0        0     1     0     1     1     0     8    0
mbufpl     256     2574    0        0    70     1    69    70     0     8    0
bufpl      280    44054    0    35264   629     0   629   629     0     8    0
anonpl      24  2970885    0  2964381   319   244    75   116     0   186    0
amapchunkpl 152  635635    0   635000   352   315    37    57     0   158    1
amappl16   200    82533    0    82418   458   439    19    45     0     8    1
amappl15   192      290    0      289     1     0     1     1     0     8    0
amappl14   184     1207    0     1191     3     2     1     2     0     8    0
amappl13   176       25    0       25    14    14     0     1     0     8    0
amappl12   168    27383    0    27346     6     3     3     3     0     8    0
amappl11   160       60    0       50     1     0     1     1     0     8    0
amappl10   152      556    0      544     1     0     1     1     0     8    0
amappl9    144      201    0      200     1     0     1     1     0     8    0
amappl8    136     1382    0     1335     3     0     3     3     0     8    0
amappl7    128      107    0       89     1     0     1     1     0     8    0
amappl6    120     3859    0     3841     2     1     1     2     0     8    0
amappl5    112     1147    0     1134     1     0     1     1     0     8    0
amappl4    104     2374    0     2340     2     0     2     2     0     8    0
amappl3     96   115927    0   115860     5     2     3     4     0     8    0
amappl2     88    24038    0    23962     5     3     2     5     0     8    0
amappl1     80    94856    0    94353    22    10    12    22     0     8    0
amappl      88   190496    0   190310     7     0     7     7     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72      164    0       34     3     0     3     3     0     8    0
uaddrrnd    24    22836    0    22804     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24    22836    0    22804     1     0     1     1     0     8    0
vmmpekpl   168   155665    0   155593     4     0     4     4     0     8    0
vmmpepl    168  1396226    0  1394325   520   413   107   130     0   357    1
vmsppl     440    22835    0    22804     5     0     5     5     0     8    0
rwobjpl     56   332771    0   322785   199    53   146   152     0     8    0
pdppl      4096   45679    0    45608   949   870    79    87     0     8    8
pvpl        32    47591    0        0   384     0   384   384     0   265    0
pmappl     248    22835    0    22804     4     1     3     3     0     8    0
extentpl    40       56    0       38     1     0     1     1     0     8    0
phpool     112     1480    0     1047    13     0    13    13     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x1e:        addq    $0x8,%rsp
x86_ipi_db(ffffffff82ce5ff0) at x86_ipi_db+0x1e sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x68
savectx() at savectx+0xae
end of kernel
end trace frame: 0x79483a9ed6d0, count: 10
ddb{0}> trace
x86_ipi_db(ffffffff82ce5ff0) at x86_ipi_db+0x1e sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x68
savectx() at savectx+0xae
end of kernel
end trace frame: 0x79483a9ed6d0, count: -5
ddb{0}> machine ddbcpu 1
Stopped at      db_enter+0x1c:  addq    $0x8,%rsp
db_enter() at db_enter+0x1c sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff82893e33) at panic+0x17b sys/kern/subr_prf.c:198
vop_generic_badop(ffff80002d8da3b8) at vop_generic_badop+0x1f sys/kern/vfs_default.c:133
VOP_STRATEGY(fffffd805dd45980,fffffd805d5a3e60) at VOP_STRATEGY+0x9f sys/kern/vfs_vops.c:628
bwrite(fffffd805d5a3e60) at bwrite+0x1d3 sys/kern/vfs_bio.c:757
VOP_BWRITE(fffffd805d5a3e60) at VOP_BWRITE+0x4e sys/kern/vfs_vops.c:640
ufs_mkdir(ffff80002d8da630) at ufs_mkdir+0x445 sys/ufs/ufs/ufs_vnops.c:1165
VOP_MKDIR(fffffd8077be1be8,ffff80002d8da790,ffff80002d8da7c0,ffff80002d8da6c0) at VOP_MKDIR+0xc3 sys/kern/vfs_vops.c:388
domkdirat(ffff800034f99c60,ffffff9c,7f7a2305a2d0,1ff) at domkdirat+0x125 sys/kern/vfs_syscalls.c:3077
syscall(ffff80002d8da940) at syscall+0x854 mi_syscall sys/sys/syscall_mi.h:180 [inline]
syscall(ffff80002d8da940) at syscall+0x854 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7f7a2305a340, count: 4
ddb{1}> trace
db_enter() at db_enter+0x1c sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff82893e33) at panic+0x17b sys/kern/subr_prf.c:198
vop_generic_badop(ffff80002d8da3b8) at vop_generic_badop+0x1f sys/kern/vfs_default.c:133
VOP_STRATEGY(fffffd805dd45980,fffffd805d5a3e60) at VOP_STRATEGY+0x9f sys/kern/vfs_vops.c:628
bwrite(fffffd805d5a3e60) at bwrite+0x1d3 sys/kern/vfs_bio.c:757
VOP_BWRITE(fffffd805d5a3e60) at VOP_BWRITE+0x4e sys/kern/vfs_vops.c:640
ufs_mkdir(ffff80002d8da630) at ufs_mkdir+0x445 sys/ufs/ufs/ufs_vnops.c:1165
VOP_MKDIR(fffffd8077be1be8,ffff80002d8da790,ffff80002d8da7c0,ffff80002d8da6c0) at VOP_MKDIR+0xc3 sys/kern/vfs_vops.c:388
domkdirat(ffff800034f99c60,ffffff9c,7f7a2305a2d0,1ff) at domkdirat+0x125 sys/kern/vfs_syscalls.c:3077
syscall(ffff80002d8da940) at syscall+0x854 mi_syscall sys/sys/syscall_mi.h:180 [inline]
syscall(ffff80002d8da940) at syscall+0x854 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7f7a2305a340, count: -11

Crashes (42):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/05/10 04:32 openbsd fbadb84b3757 de979bc2 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid kernel: protection fault trap, code=NUM
2024/05/08 02:50 openbsd 7284c0c62173 4cf3f9b3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid kernel: protection fault trap, code=NUM
2024/04/17 23:29 openbsd 456e8b6ad58e acc528cb .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore kernel: protection fault trap, code=NUM
2024/04/11 16:01 openbsd 123b2274d92c 3023abf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid kernel: protection fault trap, code=NUM
2024/04/08 08:15 openbsd c112ccd4e935 ca620dd8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid kernel: protection fault trap, code=NUM
2024/04/07 10:30 openbsd 424974cc1f1f ca620dd8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore kernel: protection fault trap, code=NUM
2024/04/07 03:23 openbsd 85fbf21ae5ae ca620dd8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid kernel: protection fault trap, code=NUM
2024/04/07 03:06 openbsd 85fbf21ae5ae ca620dd8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid kernel: protection fault trap, code=NUM
2024/04/06 11:26 openbsd cd55b6bd00f2 ca620dd8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid kernel: protection fault trap, code=NUM
2024/03/01 15:23 openbsd 609b293af4bd 83acf9e0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid kernel: protection fault trap, code=NUM
2024/02/18 03:24 openbsd 246baf2dfc61 578f7538 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid kernel: protection fault trap, code=NUM
2024/01/25 20:19 openbsd e4b6dfd5d051 cc4a4020 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore kernel: protection fault trap, code=NUM
2024/01/20 20:27 openbsd e7a417afe28e 9bd8dcda .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid kernel: protection fault trap, code=NUM
2024/01/18 19:44 openbsd d1ecb0c52710 239abf84 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid kernel: protection fault trap, code=NUM
2023/12/10 07:58 openbsd 2da541025cd9 28b24332 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid kernel: protection fault trap, code=NUM
2023/11/29 18:26 openbsd 9f01a767b73c 6e78f9ce .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid kernel: protection fault trap, code=NUM
2023/11/21 23:07 openbsd 075cc07cd6bf cb976f63 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid kernel: protection fault trap, code=NUM
2023/11/11 20:36 openbsd ec6cc5260a38 6d6dbf8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid kernel: protection fault trap, code=NUM
2023/09/15 17:55 openbsd b065c5c7a8df 0b6a67ac .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid kernel: protection fault trap, code=NUM
2023/09/11 04:08 openbsd 53e9b61ae4ba 6654cf89 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid kernel: protection fault trap, code=NUM
2023/08/28 15:12 openbsd 32167f8f3f4d 7ba13a15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore kernel: protection fault trap, code=NUM
2023/08/24 23:56 openbsd 5db6d8bd4d7e 6f19564f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid kernel: protection fault trap, code=NUM
2023/07/26 09:19 openbsd 13a991eac7a5 4d1a770f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid kernel: protection fault trap, code=NUM
2023/07/16 22:16 openbsd bd027751b05c 35d9ecc5 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore kernel: protection fault trap, code=NUM
2023/07/16 01:38 openbsd 4d951e9375c9 35d9ecc5 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid kernel: protection fault trap, code=NUM
2023/07/14 04:20 openbsd 996ed212dfaa d624500f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore kernel: protection fault trap, code=NUM
2023/07/06 11:50 openbsd acf644016ec1 ba5dba36 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid kernel: protection fault trap, code=NUM
2023/07/03 17:06 openbsd 8f881a559448 49fef1e5 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid kernel: protection fault trap, code=NUM
2023/07/01 15:26 openbsd 79a7ca0d25b8 bfc47836 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid kernel: protection fault trap, code=NUM
2023/05/30 21:12 openbsd 08ac1330e795 09898419 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid kernel: protection fault trap, code=NUM
2023/05/29 12:50 openbsd 83af2fa26020 cf184559 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid kernel: protection fault trap, code=NUM
2023/04/22 08:52 openbsd 1e5b016c5082 2b32bd34 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid kernel: protection fault trap, code=NUM
2023/04/21 13:44 openbsd 1e5b016c5082 2b32bd34 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid kernel: protection fault trap, code=NUM
2023/03/12 08:21 openbsd 1e5b016c5082 5205ef30 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid kernel: protection fault trap, code=NUM
2023/02/22 07:41 openbsd 1e5b016c5082 42a4d508 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid kernel: protection fault trap, code=NUM
2023/02/20 08:06 openbsd 1e5b016c5082 bcdf85f8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid kernel: protection fault trap, code=NUM
2023/02/09 21:41 openbsd 0b18df416c37 07980f9d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid kernel: protection fault trap, code=NUM
2023/02/06 18:34 openbsd 6c1aad9dfe4c 0a9c11b6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid kernel: protection fault trap, code=NUM
2023/02/02 05:58 openbsd b6a2b665f44a 16d19e30 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid kernel: protection fault trap, code=NUM
2023/01/17 13:40 openbsd c6918e3c7e44 aedf5331 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid kernel: protection fault trap, code=NUM
2022/12/22 12:41 openbsd 6a5148d0c915 c692fab1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid kernel: protection fault trap, code=NUM
2022/11/10 22:09 openbsd f799f30eb9db 3ead01ad .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid kernel: protection fault trap, code=NUM
* Struck through repros no longer work on HEAD.