syzbot


freebsd boot error: Fatal trap NUM: page fault while in kernel mode (3)

Status: fixed on 2023/12/10 08:58
Reported-by: syzbot+5397f4d39219b85a9409@syzkaller.appspotmail.com
Fix commit: ae77041e0714 kthread: Set *newtdp earlier in kthread_add1()
First crash: 146d, last: 146d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
freebsd freebsd boot error: Fatal trap NUM: page fault while in kernel mode 159 442d 444d 0/2 auto-obsoleted due to no activity on 2023/04/17 21:00
freebsd freebsd boot error: Fatal trap NUM: page fault while in kernel mode (4) 1 16d 16d 2/2 fixed on 2024/04/25 19:36
freebsd freebsd boot error: Fatal trap NUM: page fault while in kernel mode (2) 51 273d 274d 2/2 fixed on 2023/08/09 22:10

Sample crash report:
Fatal trap 12: page fault while in kernel mode
cpuid = 1; apic id = 01
fault virtual address	= 0x0
fault code		= supervisor read data, page not present
instruction pointer	= 0x20:0xffffffff814a8204
stack pointer	        = 0x28:0xfffffe0007a7de90
frame pointer	        = 0x28:0xfffffe0007a7ded0
code segment		= base 0x0, limit 0xfffff, type 0x1b
kbd1 at kbdmux0
			= DPL 0, pres 1, long 1, def32 0, gran serialport: Connected to syzkaller.us-central1-b.ci-freebsd-main-test-2 port 1 (session ID: 9228dff20c11478c733b136544508cc5e5bcee6a73776d916d7affc116141885, active connections: 1).
1
processor eflags	= resume, IOPL = 0
current process		= 13 (g_event)
rdi: 0000000000000000 rsi: 0000000000000000 rdx: ffffffff8269ffe0
rcx: fffffe00033eee30  r8: 0000000000000000  r9: fffffe0007a7e000
rax: fffffe00033eee30 rbx: 0000000000000000 rbp: fffffe0007a7ded0
r10: 0000000000000000 r11: 0000000000000001 r12: 0000000000000000
r13: 0000000000000000 r14: 0000000000000074 r15: ffffffff8269ffe0
trap number		= 12
panic: page fault
cpuid = 1
time = 1
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0007a7d5d0
kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0007a7d730
vpanic() at vpanic+0x271/frame 0xfffffe0007a7d8d0
panic() at panic+0xb5/frame 0xfffffe0007a7d990
trap_fatal() at trap_fatal+0x7f1/frame 0xfffffe0007a7dab0
trap_pfault() at trap_pfault+0x179/frame 0xfffffe0007a7dbd0
trap() at trap+0x5f3/frame 0xfffffe0007a7ddc0
calltrap() at calltrap+0x8/frame 0xfffffe0007a7ddc0
--- trap 0xc, rip = 0xffffffff814a8204, rsp = 0xfffffe0007a7de90, rbp = 0xfffffe0007a7ded0 ---
_thread_lock() at _thread_lock+0x64/frame 0xfffffe0007a7ded0
g_event_procbody() at g_event_procbody+0x25/frame 0xfffffe0007a7def0
fork_exit() at fork_exit+0xcc/frame 0xfffffe0007a7df30
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0007a7df30
--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
KDB: enter: panic
[ thread pid 13 tid 100035 ]
Stopped at      kdb_enter+0x6e: movq    $0,0x2196cf7(%rip)
db> 

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/12/09 06:15 freebsd-src 6abee52e0d79 28b24332 console log report ci-freebsd-main freebsd boot error: Fatal trap NUM: page fault while in kernel mode
* Struck through repros no longer work on HEAD.