syzbot


protection_fault: done_flush (2)

Status: upstream: reported C repro on 2023/11/11 05:12
Reported-by: syzbot+adc8ab0eb63fadc97a68@syzkaller.appspotmail.com
First crash: 168d, last: 10d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd protection_fault: done_flush 81 491d 848d 0/3 auto-obsoleted due to no activity on 2023/03/23 00:50

Sample crash report:
kernel: protection fault trap, code=0
Stopped at      done_flush+0x38:        movl    %eax,%dr6
ddb> 
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
the kernel did not panic
ddb> trace
end trace frame: 0x0, count: -1
ddb> show registers
rdi                           0x6c14    __ALIGN_SIZE+0x5c14
rsi               0xffff80002a668e30
rbp                                0
rbx                       0x756e6547
rdx                       0x49656e69
rcx                       0x6c65746e
rax               0xffffffffffffffe1
r8                                 0
r9                           0x10000    __ALIGN_SIZE+0xf000
r10                                0
r11                                0
r12                                0
r13                                0
r14                                0
r15                                0
rip               0xffffffff82169bfb    done_flush+0x38
cs                               0x8
rflags                       0x10046    __ALIGN_SIZE+0xf046
rsp               0xffff80002a62ac18
ss                              0x10
done_flush+0x38:        movl    %eax,%dr6
ddb> show proc
PROC (syz-executor3525907187) tid=35719 pid=84810 tcnt=1 stat=onproc
    flags process=8000000 proc=0
    runpri=51, usrpri=51, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0
    forw=0xffffffffffffffff, list=0xffff80002a5d6298,0xffffffff82e24af0
    process=0xffff80002a65c010 user=0xffff80002a626000, vmspace=0xfffffd807c3e7818
    estcpu=4, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0
ddb> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
*84810   35719  45492      0  7   0x8000000                syz-executor3525907187
 45492  225298  93830      0  3   0x8000082  nanoslp       syz-executor3525907187
 93830    4798  22605      0  3   0x810008a  sigsusp       ksh
 22605   60819    362      0  2  0x18000012                sshd
 24845   57205      1      0  3  0x18100083  ttyin         getty
   362   97044      1      0  3  0x18000088  kqread        sshd
 39845   13960  94024     73  3  0x19100090  kqread        syslogd
 94024  320600      1      0  3  0x18100082  sbwait        syslogd
 75392  125420      1      0  3  0x18100080  kqread        resolvd
 60958   49068  13075     77  3  0x18100092  kqread        dhcpleased
 89622   11978  13075     77  3  0x18100092  kqread        dhcpleased
 13075   13831      1      0  3  0x18000080  kqread        dhcpleased
 43141  260209      0      0  3     0x14200  bored         smr
 30466  113987      0      0  2     0x14200                zerothread
 94404  222225      0      0  3     0x14200  aiodoned      aiodoned
 32968  406936      0      0  3     0x14200  syncer        update
 35258  144344      0      0  3     0x14200  cleaner       cleaner
 97300  224151      0      0  3     0x14200  reaper        reaper
 98748  475081      0      0  3     0x14200  pgdaemon      pagedaemon
 76191  474143      0      0  3     0x14200  bored         viomb
 48357  412359      0      0  3  0x40014200  acpi0         acpi0
  4146  198323      0      0  3     0x14200  bored         softnet3
 19061  331216      0      0  3     0x14200  bored         softnet2
 82074   80065      0      0  3     0x14200  bored         softnet1
 26611   49641      0      0  3     0x14200  bored         softnet0
 22704  231011      0      0  3     0x14200  bored         systqmp
 94187  338803      0      0  3     0x14200  bored         systq
 59309   22439      0      0  3  0x40014200  tmoslp        softclock
 31180  376001      0      0  3  0x40014200                idle0
     1  400743      0      0  3   0x8000082  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb> show all locks
No such command
ddb> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10131   6381K    6412K 166960K     11209        0
            pcb    15     10K      10K 166960K        15        0
         rtable    58      1K       2K 166960K       112        0
             pf    12      6K       6K 166960K        12        0
         ifaddr    11      5K       5K 166960K        11        0
        ifgroup    17      1K       1K 166960K        17        0
       counters    22     16K      16K 166960K        22        0
       ioctlops     0      0K       2K 166960K        27        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1259     79K      79K 166960K      1275        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     3      5K       5K 166960K         5        0
         VM map     2      1K       1K 166960K         2        0
            sem     2      0K       0K 166960K         2        0
        dirhash    12      2K       2K 166960K        12        0
           ACPI  1697    195K     286K 166960K     12548        0
      file desc     1      0K       0K 166960K         1        0
           proc    55     58K      59K 166960K       246        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
       in_multi    11      0K       0K 166960K        11        0
    ether_multi     1      0K       0K 166960K         1        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    25    122K     122K 166960K        25        0
           exec     0      0K       1K 166960K       246        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   101     52K      52K 166960K      2272        0
       UVM aobj     6      2K       2K 166960K         6        0
     pinsyscall    22     44K      48K 166960K       852        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
            NDP     3      0K       0K 166960K         3        0
           temp     1   6788K    6852K 166960K      2915        0
         kqueue    11     16K      18K 166960K        24        0
      SYN cache     2     16K      16K 166960K         2        0
ddb> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
rtpcb      120       21    0       18     1     0     1     1     0     8    0
rtentry    112       23    0        1     1     0     1     1     0     8    0
unpcb      144       39    0       26     1     0     1     1     0     8    0
syncache   336        5    0        5     1     0     1     1     0     8    1
tcpqe       32      153    0      153     1     0     1     1     0     8    1
tcpcb      808        8    0        5     1     0     1     1     0     8    0
arp         88        2    0        0     1     0     1     1     0     8    0
inpcb      360       26    0       20     1     0     1     1     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256       96    0        0     6     0     6     6     0     8    0
art_table   32       97    0        0     1     0     1     1     0     8    0
art_node    16       22    0        2     1     0     1     1     0     8    0
shmpl      112        3    0        0     1     0     1     1     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino2pl    256     1502    0       40    92     0    92    92     0     8    0
ffsino     240     1502    0       40    86     0    86    86     0     8    0
nchpl      144     1686    0       47    61     0    61    61     0     8    0
uvmvnodes   80     1511    0        0    31     0    31    31     0     8    0
vnodes     216     1511    0        0    84     0    84    84     0     8    0
namei      1024    4365    0     4365     1     0     1     1     0     8    1
vcpupl     2048       3    0        0     1     0     1     1     0     8    0
vmpool     664        3    0        0     1     0     1     1     0     8    0
kstatmem   264        6    0        0     1     0     1     1     0     8    0
scxspl     216     5166    0     5166     3     0     3     3     1     8    3
plimitpl   152       16    0       10     1     0     1     1     0     8    0
sigapl     424      314    0      284     4     0     4     4     0     8    0
knotepl    120     4419    0     4389     2     0     2     2     0     8    1
kqueuepl   184       20    0       13     1     0     1     1     0     8    0
pipepl     288       88    0       85     1     0     1     1     0     8    0
fdescpl    432      298    0      284     2     0     2     2     0     8    0
filepl     120     1151    0     1095     2     0     2     2     0     8    0
lockfpl    104        6    0        4     1     0     1     1     0     8    0
lockfspl    48        4    0        2     1     0     1     1     0     8    0
sessionpl  144       17    0        9     1     0     1     1     0     8    0
pgrppl      48       17    0        9     1     0     1     1     0     8    0
ucredpl    104       66    0       56     1     0     1     1     0     8    0
zombiepl   144      284    0      284     1     0     1     1     0     8    1
processpl  1072     314    0      284     3     0     3     3     0     8    0
procpl     656      314    0      284     3     0     3     3     0     8    0
sockpl     488       86    0       64     4     0     4     4     0     8    1
mcl8k      8192       4    0        4     1     0     1     1     0     8    1
mcl4k      4096      10    0       10     1     0     1     1     0     8    1
mcl2k      2048   12280    0    12235    39    25    14    39     0     8    8
mtagpl      96        4    0        4     1     0     1     1     0     8    1
mbufpl     256    19856    0    19806    21     9    12    21     0     8    8
bufpl      280     2510    0       95   173     0   173   173     0     8    0
anonpl      24   176198    0   174415    23     0    23    23     0   188   12
amapchunkpl 152    8384    0     8251     7     0     7     7     0   158    1
amappl16   200     5108    0     5105     5     0     5     5     0     8    4
amappl15   192       12    0       12     1     0     1     1     0     8    1
amappl14   184      104    0       95     1     0     1     1     0     8    0
amappl13   176        5    0        5     1     0     1     1     0     8    1
amappl12   168      868    0      856     2     0     2     2     0     8    1
amappl11   160       47    0       37     1     0     1     1     0     8    0
amappl10   152       15    0       15     1     0     1     1     0     8    1
amappl9    144      171    0      171     1     0     1     1     0     8    1
amappl8    136       30    0       28     1     0     1     1     0     8    0
amappl7    128       35    0       34     1     0     1     1     0     8    0
amappl6    120      160    0      150     1     0     1     1     0     8    0
amappl5    112      155    0      143     1     0     1     1     0     8    0
amappl4    104      400    0      373     1     0     1     1     0     8    0
amappl3     96     2213    0     2189     1     0     1     1     0     8    0
amappl2     88      591    0      538     2     0     2     2     0     8    0
amappl1     80     8850    0     8439    11     0    11    11     0     8    1
amappl      88     1961    0     1909     2     0     2     2     0    92    0
dma4096    4096       1    0        1     1     0     1     1     0     8    1
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     0     1     1     0     8    1
dma128     128      253    0      253     1     0     1     1     0     8    1
dma64       64        6    0        6     1     0     1     1     0     8    1
dma32       32        7    0        7     1     0     1     1     0     8    1
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72        5    0        0     1     0     1     1     0     8    0
uaddrrnd    24      301    0      284     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      301    0      284     1     0     1     1     0     8    0
vmmpekpl   168     5558    0     5539     1     0     1     1     0     8    0
vmmpepl    168    34506    0    33582    46     0    46    46     0   357    5
vmsppl     344      300    0      284     2     0     2     2     0     8    0
rwobjpl     24    18798    0    16674    14     0    14    14     0     8    0
pdppl      4096     608    0      571    52    14    38    40     0     8    1
pvpl        32   269766    0   265642    52     0    52    52     0   265   16
pmappl     216      300    0      284     1     0     1     1     0     8    0
extentpl    40       56    0       38     1     0     1     1     0     8    0
phpool     112      310    0       48     9     0     9     9     0     8    0
ddb> machine ddbcpu 0
No such command
ddb> trace
end trace frame: 0x0, count: -1
ddb> machine ddbcpu 1
No such command
ddb> trace
end trace frame: 0x0, count: -1

Crashes (51):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/04/07 22:20 openbsd 424974cc1f1f ca620dd8 .config console log report syz C [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: done_flush
2024/04/17 15:32 openbsd 456e8b6ad58e acc528cb .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: done_flush
2024/04/13 08:27 openbsd 93536db294f5 c8349e48 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: done_flush
2024/04/08 01:52 openbsd c112ccd4e935 ca620dd8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: done_flush
2024/04/03 17:48 openbsd 2ee472d028ec 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: done_flush
2024/03/28 09:47 openbsd 2ee472d028ec 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: done_flush
2024/03/25 18:58 openbsd e226f85ad9fb 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: done_flush
2024/03/19 02:04 openbsd a69db6767cfd 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: done_flush
2024/03/12 04:39 openbsd b2d77cef2d2b 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: done_flush
2024/03/05 11:52 openbsd 20110d46fc7f 9ed46f64 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: done_flush
2024/03/02 00:18 openbsd 609b293af4bd 83acf9e0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: done_flush
2024/03/01 19:20 openbsd 609b293af4bd 83acf9e0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: done_flush
2024/02/27 20:11 openbsd 17712d2fc01b d367cbe5 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: done_flush
2024/02/26 07:27 openbsd c737cf90c555 8d446f15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: done_flush
2024/02/16 18:27 openbsd 844e213d50c7 578f7538 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: done_flush
2024/02/12 16:34 openbsd 6cbac32f9ea2 77b23aa1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: done_flush
2024/02/10 02:12 openbsd 06bc238730aa 77b23aa1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: done_flush
2024/02/09 16:48 openbsd 06bc238730aa 77b23aa1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: done_flush
2024/02/05 11:20 openbsd 889f10797414 e23e8c20 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: done_flush
2024/01/25 05:06 openbsd 13e262cf2871 1e153dc8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: done_flush
2024/01/20 19:59 openbsd e7a417afe28e 9bd8dcda .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: done_flush
2024/01/04 05:40 openbsd 234e51327de9 28c42cff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: done_flush
2024/01/01 15:47 openbsd e006e8e6ce55 fb427a07 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: done_flush
2023/12/30 18:08 openbsd e4056f64f0a5 fb427a07 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: done_flush
2023/12/30 15:28 openbsd e4056f64f0a5 fb427a07 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: done_flush
2023/12/30 15:08 openbsd e4056f64f0a5 fb427a07 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: done_flush
2023/12/30 10:24 openbsd e4056f64f0a5 fb427a07 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: done_flush
2023/12/30 09:57 openbsd e4056f64f0a5 fb427a07 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: done_flush
2023/12/30 01:06 openbsd 8dfe214903ce fb427a07 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: done_flush
2023/12/29 23:29 openbsd 8dfe214903ce fb427a07 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: done_flush
2023/12/29 08:00 openbsd b7075e6d1687 fb427a07 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: done_flush
2023/12/29 07:50 openbsd b7075e6d1687 fb427a07 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: done_flush
2023/12/29 01:05 openbsd 8f0d13a134d6 fb427a07 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: done_flush
2023/12/28 23:23 openbsd 8f0d13a134d6 fb427a07 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: done_flush
2023/12/28 23:17 openbsd 8f0d13a134d6 fb427a07 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: done_flush
2023/12/28 21:55 openbsd 8f0d13a134d6 fb427a07 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: done_flush
2023/12/28 17:59 openbsd 8f0d13a134d6 fb427a07 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: done_flush
2023/12/28 17:44 openbsd 8f0d13a134d6 fb427a07 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: done_flush
2023/12/28 15:40 openbsd e1825d0cf879 fb427a07 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: done_flush
2023/12/28 13:11 openbsd e1825d0cf879 fb427a07 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: done_flush
2023/12/28 12:29 openbsd e1825d0cf879 fb427a07 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: done_flush
2023/12/28 12:08 openbsd e1825d0cf879 fb427a07 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: done_flush
2023/12/28 09:56 openbsd e1825d0cf879 fb427a07 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: done_flush
2023/12/28 08:38 openbsd e1825d0cf879 fb427a07 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: done_flush
2023/12/28 04:41 openbsd e1825d0cf879 fb427a07 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: done_flush
2023/12/28 03:53 openbsd e1825d0cf879 fb427a07 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: done_flush
2023/11/30 05:33 openbsd 592331b2f9bb f819d6f7 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: done_flush
2023/11/27 03:35 openbsd 2551e57700ef 5b429f39 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: done_flush
2023/11/18 13:38 openbsd 0a5044de2e52 cb976f63 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: done_flush
2023/11/18 03:48 openbsd f364934ec89e cb976f63 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: done_flush
2023/11/11 05:12 openbsd b202fd010d79 d80eec66 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: done_flush
* Struck through repros no longer work on HEAD.