syzbot


protection_fault: done_flush (3)

Status: upstream: reported on 2024/08/07 04:18
Reported-by: syzbot+c351a9d0dac682051c64@syzkaller.appspotmail.com
First crash: 40d, last: 26d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd protection_fault: done_flush 81 633d 990d 0/3 auto-obsoleted due to no activity on 2023/03/23 00:50
openbsd protection_fault: done_flush (2) C 55 123d 310d 0/3 auto-obsoleted due to no activity on 2024/07/05 09:14

Sample crash report:
kernel: protection fault trap, code=0
Stopped at      done_flush+0x38:        movl    %eax,%dr6
ddb> 
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
the kernel did not panic
ddb> trace
end trace frame: 0x0, count: -1
ddb> show registers
rdi                           0x6c14    __ALIGN_SIZE+0x5c14
rsi               0xffff80002a524a60
rbp                                0
rbx                       0x756e6547
rdx                       0x49656e69
rcx                       0x6c65746e
rax                     0x1000000000
r8                                 0
r9                           0x10000    __ALIGN_SIZE+0xf000
r10                                0
r11                                0
r12                                0
r13                                0
r14                                0
r15                                0
rip               0xffffffff82a9c08b    done_flush+0x38
cs                               0x8
rflags                       0x10046    __ALIGN_SIZE+0xf046
rsp               0xffff8000376775c8
ss                              0x10
done_flush+0x38:        movl    %eax,%dr6
ddb> show proc
PROC (syz-executor) tid=255847 pid=46684 tcnt=3 stat=onproc
    flags process=8000000<PIN> proc=4000000<THREAD>
    runpri=32, usrpri=84, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff80002a4a2a38,0xffff80002a4a2cd0
    process=0xffff8000327f4cf0 user=0xffff800037672000, vmspace=0xfffffd80623dc170
    estcpu=34, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0
ddb> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 91637  103951  87802      0  2   0x8000000                syz-executor
 91637  325880  87802      0  3   0xc000080  lockf         syz-executor
 91637   45352  87802      0  2   0xc000000                syz-executor
 51683  497543  13124      0  2   0x8000000                syz-executor
 51683  216436  13124      0  3   0xc000080  netacc        syz-executor
 51683  299324  13124      0  3   0xc000080  fsleep        syz-executor
 42515  102196  11735      0  2   0x8082000                syz-executor
 42515   80370  11735      0  3   0xc002000  suspend       syz-executor
 43398   11177  97284      0  2   0x8000000                syz-executor
 43398   98955  97284      0  3   0xc000080  fsleep        syz-executor
 47683  331189  82953      0  2   0x8000010                syz-executor
 47683  350114  82953      0  3   0xc000090  kqread        syz-executor
 47683  204960  82953      0  2   0xc000010                syz-executor
 46684  425454  38530      0  2   0x8000000                syz-executor
*46684  255847  38530      0  7   0xc000000                syz-executor
 46684  307974  38530      0  3   0xc000080  lockf         syz-executor
 10455  184992  38082      0  3   0x8000080  nanoslp       syz-executor
 10455  122441  38082      0  3   0xc000080  lockf         syz-executor
 10455  134454  38082      0  3   0xc000080  fsleep        syz-executor
 61957  416691  16867      0  3   0x8000080  nanoslp       syz-executor
 61957  305129  16867      0  3   0xc000080  fsleep        syz-executor
 61957  283693  16867      0  3   0xc000080  ttyin         syz-executor
 16867  266393  61888      0  3   0x8000082  nanoslp       syz-executor
 97284  305825  61888      0  3   0x8000082  nanoslp       syz-executor
 82953  477461  61888      0  3   0x8000082  nanoslp       syz-executor
 38530  204925  61888      0  3   0x8000082  nanoslp       syz-executor
 87802  474726  61888      0  3   0x8000082  nanoslp       syz-executor
 13124   78477  61888      0  3   0x8000082  nanoslp       syz-executor
 11735  291886  61888      0  3   0x8000082  nanoslp       syz-executor
 38082  348816  61888      0  3   0x8000082  nanoslp       syz-executor
 25744  199396      0      0  3     0x14280  nfsidl        nfsio
 52662  407059      0      0  3     0x14280  nfsidl        nfsio
 50637  296832      0      0  3     0x14280  nfsidl        nfsio
 17970  375313      0      0  3     0x14280  nfsidl        nfsio
  2191  362885      0      0  3     0x14280  nfsidl        nfsio
 97447   38725      0      0  3     0x14280  nfsidl        nfsio
 20063  277662      0      0  3     0x14280  nfsidl        nfsio
   475   39906      0      0  3     0x14280  nfsidl        nfsio
 86118  345327      0      0  3     0x14280  nfsidl        nfsio
 30510   12037      0      0  3     0x14280  nfsidl        nfsio
 93880   56628      0      0  3     0x14280  nfsidl        nfsio
 76621  116389      0      0  3     0x14280  nfsidl        nfsio
 77156   54920      0      0  3     0x14280  nfsidl        nfsio
 43782  220387      0      0  3     0x14280  nfsidl        nfsio
 85209  281957      0      0  3     0x14280  nfsidl        nfsio
 66453  312440      0      0  3     0x14280  nfsidl        nfsio
 47805  155321      0      0  3     0x14280  nfsidl        nfsio
 31021  461093      0      0  3     0x14280  nfsidl        nfsio
  4759   94135      0      0  3     0x14280  nfsidl        nfsio
 31783  387777      0      0  3     0x14280  nfsidl        nfsio
 77512  408525      0      0  3     0x14200  acct          acct
 63697    2616      0      0  3     0x14200  bored         sosplice
 61888  425841  84044      0  3   0x8000082  kqread        syz-executor
 84044  157976   8341      0  3   0x810008a  sigsusp       ksh
  8341  149182  11189      0  3  0x18000098  kqread        sshd-session
 11189  298753  48005      0  3  0x18000092  kqread        sshd-session
 55292   68295      1      0  3  0x18100083  ttyin         getty
 48005  219694      1      0  3  0x18000088  kqread        sshd
 38573  305703  43940     73  2  0x19100010                syslogd
 43940   34133      1      0  3  0x18100082  sbwait        syslogd
 91942  497030      1      0  3  0x18100080  kqread        resolvd
 91675  457580  75676     77  3  0x18100092  kqread        dhcpleased
 24327  484696  75676     77  3  0x18100092  kqread        dhcpleased
 75676  130776      1      0  3  0x18000080  kqread        dhcpleased
 71942  203864      0      0  3     0x14200  bored         smr
 48339   46104      0      0  2     0x14200                zerothread
 85070  349327      0      0  3     0x14200  aiodoned      aiodoned
 58599  226874      0      0  3     0x14200  syncer        update
 93324  403101      0      0  3     0x14200  cleaner       cleaner
 41171  219930      0      0  3     0x14200  reaper        reaper
 50896  489823      0      0  3     0x14200  pgdaemon      pagedaemon
 89883  387890      0      0  3     0x14200  bored         viomb
 33024   55698      0      0  3  0x40014200  acpi0         acpi0
 15003  402006      0      0  3     0x14200  bored         softnet3
 45869  205220      0      0  3     0x14200  bored         softnet2
 15033  283196      0      0  3     0x14200  bored         softnet1
  9737  280163      0      0  3     0x14200  bored         softnet0
 14478  469566      0      0  3     0x14200  bored         systqmp
 61108  111233      0      0  3     0x14200  bored         systq
 59072   72879      0      0  3  0x40014200  tmoslp        softclock
 62378  390649      0      0  3  0x40014200                idle0
     1  461176      0      0  3   0x8080082  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb> show all locks
No such command
ddb> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10183  10208K   10475K 166960K     12190        0
            pcb    17     15K      17K 166960K       114        0
         rtable   190      7K       8K 166960K      1148        0
             pf    32     13K      21K 166960K       110        0
         ifaddr    38      6K       7K 166960K       156        0
        ifgroup    50      2K       2K 166960K       181        0
         sysctl     3      1K       1K 166960K         3        0
       counters    30     17K      18K 166960K        64        0
       ioctlops     0      0K       4K 166960K       135        0
            iov     0      0K      16K 166960K       116        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1428     90K      90K 166960K      2338        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     3      5K       9K 166960K        20        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       0K 166960K        26        0
        dirhash    12      2K       2K 166960K        21        0
           ACPI  1697    195K     286K 166960K     12548        0
      file desc    18     65K      97K 166960K      1056        0
          sigio     0      0K       0K 166960K         9        0
           proc    58     59K     124K 166960K      1189        0
        subproc   104      6K       6K 166960K       416        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K       288        0
       in_multi    85      6K       7K 166960K       387        0
    ether_multi     1      0K       0K 166960K        13        0
            mrt     1      0K       0K 166960K         5        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    73    334K     334K 166960K        73        0
           exec     0      0K       1K 166960K      1020        0
     pfkey data     0      0K       0K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   235     76K     102K 166960K      9936        0
       UVM aobj    21      2K       2K 166960K        26        0
     pinsyscall    39     78K     100K 166960K      2693        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     2      0K       0K 166960K        34        0
            NDP    11      0K       2K 166960K       109        0
           temp    62   6812K    6935K 166960K     32724        0
         kqueue    14     22K      30K 166960K       127        0
      SYN cache     2     16K      16K 166960K         2        0
ddb> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
rtpcb      120      208    0      204     3     2     1     3     0     8    0
rtentry    112      388    0      303     4     1     3     4     0     8    0
unpcb      144      576    0      559     4     3     1     4     0     8    0
syncache   336        3    0        3     1     1     0     1     0     8    0
tcpcb      808      429    0      422    20    13     7    14     0     8    6
arp         88       69    0       53     1     0     1     1     0     8    0
ipq         40        2    0        0     1     0     1     1     0     8    0
ipqe        40        4    0        2     1     0     1     1     0     8    0
inpcb      336     1135    0     1121    17    10     7    12     0     8    5
nd6        104      100    0       79     1     0     1     1     0     8    0
pkpcb       40        3    0        3     1     1     0     1     0     8    0
kcovpl      48       32    0       24     1     0     1     1     0     8    0
ppxss      1072       4    0        4     1     1     0     1     0     8    0
pfstscr     40        2    0        2     1     1     0     1     0     8    0
pfstkey    128        2    0        2     1     1     0     1     0     8    0
pfstate    344        2    0        2     1     1     0     1     0     8    0
pfrule     1344       1    0        1     1     1     0     1     0     8    0
art_heap8  4096       3    0        0     3     0     3     3     0     8    0
art_heap4  256     1574    0     1200    30     2    28    29     0     8    1
art_table   32     1577    0     1200     4     0     4     4     0     8    0
art_node    16      387    0      311     1     0     1     1     0     8    0
sysvmsgpl   40       14    0        7     1     0     1     1     0     8    0
semapl     112       24    0       14     1     0     1     1     0     8    0
shmpl      112       23    0        5     1     0     1     1     0     8    0
dirhash    1024      23    0        6     3     0     3     3     0     8    0
dino2pl    256     2833    0     1300    97     0    97    97     0     8    0
ffsino     240     2833    0     1300    91     0    91    91     0     8    0
nchpl      144     3869    0     2160    64     0    64    64     0     8    0
uvmvnodes   80     3576    0        0    73     0    73    73     0     8    0
vnodes     216     3576    0        0   199     0   199   199     0     8    0
namei      1024   16081    0    16081     2     1     1     2     0     8    1
vcpupl     3904       4    0        1     1     0     1     1     0     8    0
vmpool     664        7    0        4     1     0     1     1     0     8    0
kstatmem   264       90    0       68     3     0     3     3     0     8    0
scsiplug    72        6    0        6     2     1     1     1     0     8    1
scxspl     216    20794    0    20794     8     7     1     8     1     8    1
plimitpl   152      248    0      231     1     0     1     1     0     8    0
sigapl     424     1307    0     1239     8     0     8     8     0     8    0
futexpl     64    10812    0    10808     1     0     1     1     0     8    0
knotepl    120    23117    0    23066    16     8     8    10     0     8    6
kqueuepl   184      392    0      381     7     6     1     7     0     8    0
pipepl     288      281    0      253     3     0     3     3     0     8    0
fdescpl    432     1269    0     1239     5     1     4     5     0     8    0
filepl     120     8606    0     8337    21     5    16    16     0     8    6
lockfpl    104      456    0      446     2     1     1     2     0     8    0
lockfspl    48      117    0      111     1     0     1     1     0     8    0
sessionpl  144       45    0       37     1     0     1     1     0     8    0
pgrppl      48       80    0       64     1     0     1     1     0     8    0
ucredpl    104     1266    0     1253     1     0     1     1     0     8    0
zombiepl   144     1239    0     1239     1     0     1     1     0     8    1
processpl  1096    1307    0     1239     6     0     6     6     0     8    1
procpl     648     2263    0     2181     8     0     8     8     0     8    0
sosppl     168        6    0        6     1     1     0     1     0     8    0
sockpl     504     1933    0     1898    35    23    12    22     0     8    7
mcl64k     65536      6    0        6     2     1     1     1     0     8    1
mcl16k     16384      1    0        1     1     1     0     1     0     8    0
mcl8k      8192      19    0       19     2     1     1     1     0     8    1
mcl4k      4096       3    0        3     1     1     0     1     0     8    0
mcl2k2     2112       1    0        1     1     0     1     1     0     8    1
mcl2k      2048    6970    0     6875    27    12    15    26     0     8    0
mtagpl      96       24    0       18     1     0     1     1     0     8    0
mbufpl     256    15225    0    15025    18     2    16    18     0     8    0
bufpl      280     7333    0     1088   447     0   447   447     0     8    0
anonpl      24   284393    0   281002   100    50    50    78     0   187   25
amapchunkpl 152   33893    0    33382    76    41    35    62     0   158   15
amappl16   200     7407    0     7387    47    38     9    27     0     8    7
amappl15   192       33    0       33     1     1     0     1     0     8    0
amappl14   184      158    0      148     1     0     1     1     0     8    0
amappl13   176       26    0       26     1     1     0     1     0     8    0
amappl12   168     2256    0     2226     3     1     2     3     0     8    0
amappl11   160       53    0       43     1     0     1     1     0     8    0
amappl10   152       12    0       12     1     1     0     1     0     8    0
amappl9    144      114    0      114     1     1     0     1     0     8    0
amappl8    136       43    0       42     1     0     1     1     0     8    0
amappl7    128      154    0      143     1     0     1     1     0     8    0
amappl6    120      401    0      400     1     0     1     1     0     8    0
amappl5    112      226    0      218     1     0     1     1     0     8    0
amappl4    104      359    0      344     1     0     1     1     0     8    0
amappl3     96     6428    0     6310     4     0     4     4     0     8    1
amappl2     88      940    0      883     2     0     2     2     0     8    0
amappl1     80    11632    0    11097    14     2    12    14     0     8    0
amappl      88     9370    0     9191     5     0     5     5     0    92    0
dma65536   65536      2    0        2     2     1     1     1     0     8    1
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        7    0        7     1     1     0     1     0     8    0
dma128     128      254    0      254     2     1     1     1     0     8    1
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        8    0        8     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72       25    0        5     1     0     1     1     0     8    0
uaddrrnd    24     1276    0     1243     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     1276    0     1243     1     0     1     1     0     8    0
vmmpekpl   168    11576    0    11520     3     0     3     3     0     8    0
vmmpepl    168    87114    0    85312   110    20    90   100     0   357   11
vmsppl     344     1275    0     1243     5     1     4     4     0     8    1
rwobjpl     24    32498    0    28040    28     1    27    27     0     8    0
pdppl      4096    2558    0     2489   144    73    71    82     0     8    2
pvpl        32   698676    0   688396   486   261   225   355     0   265  136
pmappl     216     1275    0     1243     3     1     2     3     0     8    0
extentpl    40       56    0       38     1     0     1     1     0     8    0
phpool     112      502    0      144    12     1    11    12     0     8    0
ddb> machine ddbcpu 0
No such command
ddb> trace
end trace frame: 0x0, count: -1
ddb> machine ddbcpu 1
No such command
ddb> trace
end trace frame: 0x0, count: -1

Crashes (5):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/08/20 20:43 openbsd c476ff4431c1 9f0ab3fb .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: done_flush
2024/08/18 11:56 openbsd 076a4f8b5857 dbc93b08 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: done_flush
2024/08/14 16:21 openbsd 58911fd131d0 890d2dda .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: done_flush
2024/08/10 06:09 openbsd 6d453ff9e2fb 6f4edef4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: done_flush
2024/08/07 04:17 openbsd 3920ff05e7c8 1ef9fe42 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: done_flush
* Struck through repros no longer work on HEAD.