syzbot


protection_fault: __llvm_retpoline_r11

Status: auto-obsoleted due to no activity on 2023/01/15 19:45
Reported-by: syzbot+e37f6d84a38bf67a52be@syzkaller.appspotmail.com
First crash: 112d, last: 112d

Sample crash report:
kernel: protection fault trap, code=0
Stopped at      __llvm_retpoline_r11+0x14:      ret
ddb> 
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
the kernel did not panic
ddb> trace
__llvm_retpoline_r11() at __llvm_retpoline_r11+0x14
softclock_process_tick_timeout(fffffd8071782f20,0) at softclock_process_tick_timeout+0x1ac sys/kern/kern_timeout.c:725
softclock(0) at softclock+0x11a sys/kern/kern_timeout.c:756
softintr_dispatch(0) at softintr_dispatch+0xd1 sys/arch/amd64/amd64/softintr.c:90
Xsoftclock() at Xsoftclock+0x1f
end of kernel
end trace frame: 0x7f7ffffd2a70, count: -5
ddb> show registers
rdi               0x3365643635623363
rsi                                0
rbp               0xffff80002e8cba60
rbx                                0
rdx                                0
rcx               0xffffffff82a0e1f0    timeout_todo
rax                              0x9
r8                              0x2b
r9                              0x2b
r10                0x2551bf3716df710
r11               0x3462383433636466
r12               0x3365643635623363
r13               0xffffffff82933ff0    cpu_info_full_primary+0x1ff0
r14               0x6263393638303763
r15               0x3462383433636466
rip               0xffffffff81003fe4    __llvm_retpoline_r11+0x14
cs                               0x8
rflags                       0x10246    __ALIGN_SIZE+0xf246
rsp               0xffff80002e8cba20
ss                                 0
__llvm_retpoline_r11+0x14:      ret
ddb> show proc
PROC (syz-executor.2) pid=325158 stat=onproc
    flags process=0 proc=0
    pri=78, usrpri=78, nice=20
    forw=0xffffffffffffffff, list=0xffff8000231cca88,0xffff8000231cc7f8
    process=0xffff8000225c6c00 user=0xffff80002e8c6000, vmspace=0xfffffd807ac4fdd0
    estcpu=28, cpticks=1, pctcpu=0.1
    user=1, sys=0, intr=0
ddb> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 41857   29448  87129      0  2           0                syz-executor.5
 58886  208482  74562      0  2           0                syz-executor.0
 58886  480385  74562      0  3   0x4000080  fsleep        syz-executor.0
*35514  325158  91053      0  7           0                syz-executor.2
 35514   51925  91053      0  3   0x4000080  fsleep        syz-executor.2
 36410  198422  85536      0  2         0x2                syz-executor.1
  4748  280498  85536      0  3        0x82  nanoslp       syz-executor.6
 91053   83103  85536      0  2       0x482                syz-executor.2
 87129   32547  85536      0  3        0x82  nanoslp       syz-executor.5
 70872  458863  85536      0  2         0x2                syz-executor.4
 74562  249903  85536      0  2       0x482                syz-executor.0
 81152  490977  85536      0  2         0x2                syz-executor.7
 21929  358089  85536      0  2       0x482                syz-executor.3
 47927  353099      1      0  3    0x100083  ttyin         getty
 45771  377333      0      0  3     0x14200  acct          acct
 76241  140092      0      0  3     0x14200  bored         sosplice
 85536   35260  59435      0  3        0x82  wait          syz-fuzzer
 85536  210494  59435      0  3   0x4000082  nanoslp       syz-fuzzer
 85536  172701  59435      0  3   0x4000082  wait          syz-fuzzer
 85536  128144  59435      0  3   0x4000082  wait          syz-fuzzer
 85536  372078  59435      0  3   0x4000082  thrsleep      syz-fuzzer
 85536   81702  59435      0  3   0x4000082  thrsleep      syz-fuzzer
 85536  379891  59435      0  3   0x4000082  wait          syz-fuzzer
 85536  418574  59435      0  3   0x4000082  wait          syz-fuzzer
 85536  502722  59435      0  3   0x4000082  thrsleep      syz-fuzzer
 85536  286412  59435      0  3   0x4000082  thrsleep      syz-fuzzer
 85536  476454  59435      0  3   0x4000082  wait          syz-fuzzer
 85536  386155  59435      0  3   0x4000082  wait          syz-fuzzer
 85536  187322  59435      0  3   0x4000082  wait          syz-fuzzer
 85536    1898  59435      0  3   0x4000082  kqread        syz-fuzzer
 59435  452319  29945      0  3    0x10008a  sigsusp       ksh
 29945  334631  27944      0  3        0x9a  kqread        sshd
 27944  486682      1      0  3        0x88  kqread        sshd
 44924  193782  88473     73  3   0x1100090  kqread        syslogd
 88473   30301      1      0  3    0x100082  netio         syslogd
  2767  509451      1      0  3    0x100080  kqread        resolvd
 24289  365846  73343     77  3    0x100092  kqread        dhcpleased
 73035   26843  73343     77  3    0x100092  kqread        dhcpleased
 73343  519769      1      0  3        0x80  kqread        dhcpleased
 14486   71684      0      0  3     0x14200  bored         smr
  7929  146737      0      0  2     0x14200                zerothread
 45477   68231      0      0  3     0x14200  aiodoned      aiodoned
 23878  431962      0      0  2     0x14600                update
 55910  443153      0      0  3     0x14200  cleaner       cleaner
 85310  117147      0      0  3     0x14200  reaper        reaper
 39125  281988      0      0  3     0x14200  pgdaemon      pagedaemon
 72511  340137      0      0  3     0x14200  bored         viomb
 58305   75152      0      0  3  0x40014200  acpi0         acpi0
 89432   61055      0      0  3     0x14200  bored         softnet
 62456  236923      0      0  3     0x14200  bored         softnet
 22657  364713      0      0  3     0x14200  bored         softnet
 56868    9047      0      0  3     0x14200  bored         softnet
 45929  375618      0      0  3     0x14200  bored         systqmp
  9952  523733      0      0  3     0x14200  bored         systq
  2247  431465      0      0  3  0x40014200  bored         softclock
 80931  492741      0      0  3  0x40014200                idle0
     1   72571      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb> show all locks
No such command
ddb> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10240   6631K   10855K  78643K    105618        0
            pcb    13     22K      27K  78643K      5236        0
         rtable   198     10K      13K  78643K      5006        0
         ifaddr   237     62K      62K  78643K      2214        0
         sysctl     3      1K       1K  78643K         5        0
       counters    27     17K      17K  78643K       549        0
       ioctlops     0      0K       4K  78643K      3671        0
            iov     0      0K      28K  78643K      2922        0
          mount     1      1K       1K  78643K         1        0
            log     0      0K       0K  78643K         4        0
         vnodes  1827    114K     114K  78643K     23390        0
      UFS quota     1     32K      32K  78643K         1        0
      UFS mount     5     36K      36K  78643K         5        0
            shm     3      5K       9K  78643K       110        0
         VM map     2      0K       0K  78643K         2        0
            sem    24     16K      32K  78643K      2938        0
        dirhash    12      2K       2K  78643K        12        0
           ACPI  1697    195K     286K  78643K     12548        0
      file desc    14     49K      81K  78643K     18851        0
          sigio     0      0K       0K  78643K       384        0
           proc    59     59K      75K  78643K      3433        0
        subproc   104      6K       6K  78643K      1112        0
    NFS srvsock     1      0K       0K  78643K         1        0
     NFS daemon     1     16K      16K  78643K         1        0
    ip_moptions     0      0K       0K  78643K       929        0
       in_multi    78      5K       7K  78643K      1652        0
    ether_multi     1      0K       0K  78643K       127        0
            mrt     1      0K       0K  78643K       393        0
    ISOFS mount     1     32K      32K  78643K         1        0
  MSDOSFS mount     1     16K      16K  78643K         1        0
           ttys   253   1129K    1129K  78643K       253        0
           exec     0      0K       2K  78643K      4721        0
     pfkey data     0      0K       0K  78643K        88        0
            tdb     3      0K       0K  78643K         3        0
        pagedep     1      8K       8K  78643K         1        0
       inodedep     1     32K      32K  78643K         1        0
         newblk     1      0K       0K  78643K         1        0
        VM swap     8     62K      64K  78643K        10        0
       UVM amap   306    185K     202K  78643K    102049        0
       UVM aobj   131      4K       4K  78643K       137        0
        memdesc     1      4K       4K  78643K         1        0
    crypto data     1      1K       1K  78643K         1        0
    ip6_options     0      0K       0K  78643K       724        0
            NDP    13      0K       2K  78643K       616        0
           temp   134   4730K    5754K  78643K    185252        0
         kqueue    12     18K      26K  78643K      1386        0
      SYN cache     2     16K      16K  78643K         2        0
ddb> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
rtpcb      120     1558    0     1555    17    16     1     4     0     8    0
rtentry    112     1551    0     1469     5     2     3     4     0     8    0
unpcb      144    17347    0    17328   157   156     1     9     0     8    0
syncache   296       49    0       49    15    15     0     1     0     8    0
sackhl      24        1    0        1     1     1     0     1     0     8    0
tcpqe       32      129    0      129     4     4     0     1     0     8    0
tcpcb      768     5655    0     5647   237   229     8    15     0     8    6
arp         88      188    0      172     1     0     1     1     0     8    0
ipq         40       25    0       25     9     9     0     1     0     8    0
ipqe        40       87    0       87     9     9     0     1     0     8    0
inpcb      336    19932    0    19920   271   264     7    18     0     8    5
ip6q        72       12    0       11     5     4     1     1     0     8    0
ip6af       40       21    0       20     5     4     1     1     0     8    0
nd6         48      322    0      304     1     0     1     1     0     8    0
pkpcb       40       50    0       50    10    10     0     1     0     8    0
kcovpl      48       85    0       77     1     0     1     1     0     8    0
ppxss      1160     277    0      277    33    33     0     1     0     8    0
pppxif     1608      67    0       67    17    17     0     1     0     8    0
pfstscr     40        8    0        2     1     0     1     1     0     8    0
pfrktable  1344      30    0       30     1     1     0     1     0     8    0
pfanchor   1280     215    0       33    16     0    16    16     0     8    0
pftag       88        3    0        2     1     0     1     1     0     8    0
pfstitem    24        6    0        0     1     0     1     1     0     8    0
pfstkey    120        8    0        6     1     0     1     1     0     8    0
pfstate    336        4    0        1     1     0     1     1     0     8    0
pfrule     1360      46    0       43     2     1     1     1     0     8    0
rttmr      136      182    0      182     6     6     0     1     0     8    0
art_heap8  4096       2    0        1     2     1     1     2     0     8    0
art_heap4  256     6645    0     6274    65    41    24    32     0     8    0
art_table   32     6647    0     6275     6     2     4     5     0     8    0
art_node    16     1535    0     1464     1     0     1     1     0     8    0
sysvmsgpl   40       27    0       18     1     0     1     1     0     8    0
semupl     112        3    0        3     1     1     0     1     0     8    0
semapl     112     2926    0     2904     1     0     1     1     0     8    0
shmpl      112      134    0        6     4     0     4     4     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino2pl    256    25317    0    23819    94     0    94    94     0     8    0
ffsino     240    25317    0    23819    89     0    89    89     0     8    0
nchpl      144    49571    0    49014    63    41    22    63     0     8    0
rtmask      32       18    0       18     6     6     0     1     0     8    0
uvmvnodes   80     6209    0        0   127     0   127   127     0     8    0
vnodes     216     6209    0        0   345     0   345   345     0     8    0
namei      1024  209944    0   209943    10     9     1     2     0     8    0
vcpupl     2048       6    0        0     1     0     1     1     0     8    0
vmpool     536        6    0        0     1     0     1     1     0     8    0
pfiaddrpl  120        9    0        9     1     1     0     1     0     8    0
kstatmem   264      776    0      750     6     4     2     3     0     8    0
scsiplug    72       15    0       15     3     3     0     1     0     8    0
scxspl     216   146150    0   146150    39    38     1     8     0     8    1
plimitpl   152     2148    0     2133     1     0     1     1     0     8    0
sigapl     424    19010    0    18966     8     2     6     8     0     8    0
futexpl     64   217594    0   217592     3     2     1     1     0     8    0
knotepl    120   297958    0   297878   116   111     5    15     0     8    0
kqueuepl   184     4130    0     4122    55    54     1     7     0     8    0
pipepl     288     3820    0     3792    87    84     3     7     0     8    0
fdescpl    432    18972    0    18947     4     0     4     4     0     8    0
filepl     120   156753    0   156509   207   197    10    17     0     8    1
lockfpl    104     5313    0     5311    11    10     1     3     0     8    0
lockfspl    48     1315    0     1313     1     0     1     1     0     8    0
sessionpl  144      107    0       91     1     0     1     1     0     8    0
pgrppl      48      361    0      345     1     0     1     1     0     8    0
ucredpl    104    18813    0    18799     1     0     1     1     0     8    0
zombiepl   144    18968    0    18966     2     1     1     1     0     8    0
processpl  1000   19010    0    18966    10     4     6     9     0     8    0
procpl     672    47591    0    47532    36    29     7     9     0     8    0
sosppl     168      196    0      196    17    17     0     1     0     8    0
sockpl     456    38974    0    38940   768   756    12    37     0     8    7
mcl64k     65536    787    0      787    40    39     1     1     0     8    1
mcl16k     16384    234    0      234    42    41     1     1     0     8    1
mcl12k     12288    674    0      674    35    35     0     1     0     8    0
mcl9k      9216     226    0      226    50    50     0     1     0     8    0
mcl8k      8192    1537    0     1537    26    25     1     1     0     8    1
mcl4k      4096    3220    0     3220    40    39     1     3     0     8    1
mcl2k2     2112     123    0      123    46    46     0     1     0     8    0
mcl2k      2048  115789    0   115631    79    55    24    28     0     8    0
mtagpl      96    18466    0    17316    82    48    34    38     0     8    0
mbufpl     256   396663    0   395326   956   860    96   160     0     8    0
bufpl      288    32492    0    26089   458     0   458   458     0     8    0
anonpl      24  3540405    0  3524636   253   131   122   140     0   188    0
amapchunkpl 152  332496    0   331851   162   132    30    44     0   158    0
amappl16   200    49982    0    49321   213   176    37    54     0     8    0
amappl15   192     4803    0     4793     1     0     1     1     0     8    0
amappl14   184     2184    0     2179     1     0     1     1     0     8    0
amappl13   176     4648    0     4641     1     0     1     1     0     8    0
amappl12   168     1356    0     1349     1     0     1     1     0     8    0
amappl11   160     2164    0     2152     1     0     1     1     0     8    0
amappl10   152      985    0      981     1     0     1     1     0     8    0
amappl9    144     4241    0     4229     1     0     1     1     0     8    0
amappl8    136     3397    0     3299     5     1     4     4     0     8    0
amappl7    128     1640    0     1620     1     0     1     1     0     8    0
amappl6    120     4036    0     4011     2     1     1     2     0     8    0
amappl5    112    13483    0    13472     1     0     1     1     0     8    0
amappl4    104     7346    0     7316     2     0     2     2     0     8    0
amappl3     96    56406    0    56353     2     0     2     2     0     8    0
amappl2     88    24439    0    24369     3     1     2     3     0     8    0
amappl1     80   443684    0   443012    26    10    16    21     0     8    0
amappl      88   100083    0    99916     7     2     5     5     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72      136    0        6     3     0     3     3     0     8    0
uaddrrnd    24    18978    0    18947     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24    18978    0    18947     1     0     1     1     0     8    0
vmmpekpl   168   135841    0   135792     3     0     3     3     0     8    0
vmmpepl    168  1852404    0  1849731   395   254   141   164     0   357    0
vmsppl     272    18977    0    18947     4     1     3     3     0     8    0
rwobjpl     24   437548    0   429439    55     5    50    51     0     8    0
pdppl      4096   37962    0    37900  1027   957    70    78     0     8    8
pvpl        32  7206121    0  7184755   528   323   205   255     0   265    0
pmappl     216    18977    0    18947     3     1     2     3     0     8    0
extentpl    40       56    0       38     1     0     1     1     0     8    0
phpool     112     3300    0     2419    28     1    27    28     0     8    0
ddb> machine ddbcpu 0
No such command
ddb> trace
__llvm_retpoline_r11() at __llvm_retpoline_r11+0x14
softclock_process_tick_timeout(fffffd8071782f20,0) at softclock_process_tick_timeout+0x1ac sys/kern/kern_timeout.c:725
softclock(0) at softclock+0x11a sys/kern/kern_timeout.c:756
softintr_dispatch(0) at softintr_dispatch+0xd1 sys/arch/amd64/amd64/softintr.c:90
Xsoftclock() at Xsoftclock+0x1f
end of kernel
end trace frame: 0x7f7ffffd2a70, count: -5
ddb> machine ddbcpu 1
No such command
ddb> trace
__llvm_retpoline_r11() at __llvm_retpoline_r11+0x14
softclock_process_tick_timeout(fffffd8071782f20,0) at softclock_process_tick_timeout+0x1ac sys/kern/kern_timeout.c:725
softclock(0) at softclock+0x11a sys/kern/kern_timeout.c:756
softintr_dispatch(0) at softintr_dispatch+0xd1 sys/arch/amd64/amd64/softintr.c:90
Xsoftclock() at Xsoftclock+0x1f
end of kernel
end trace frame: 0x7f7ffffd2a70, count: -5

Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets Title
ci-openbsd-main 2022/10/17 19:45 openbsd 65b39cd17cf3 94744d21 .config console log report [disk image] [bsd.gdb] [kernel image] protection_fault: __llvm_retpoline_r11
* Struck through repros no longer work on HEAD.