panic: sbfree: m ADDR !M_NOTREADY

Status: fixed on 2020/04/12 09:05
Reported-by: syzbot+bf0ad5e1143a68572a42@syzkaller.appspotmail.com
Fix commit: dde1b5985fcc Properly handle disconnected sockets in uipc_ready().
First crash: 2711d, last: 2686d
▶ ▼ Duplicate bugs (1)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
Fatal trap 9: general protection fault in unp_dispose -1 syz, C 14 2687d 2707d 0/2 closed as dup on 2020/03/19 20:43

Sample crash report:
login: panic: sbfree: m 0xfffff80012817b00 !M_NOTREADY
cpuid = 1
time = 1553138944
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe0020ded4c0
vpanic() at vpanic+0x1e0/frame 0xfffffe0020ded520
panic() at panic+0x43/frame 0xfffffe0020ded580
sbfree() at sbfree+0x1f4/frame 0xfffffe0020ded5c0
sbcut_internal() at sbcut_internal+0xf0/frame 0xfffffe0020ded610
sbrelease_internal() at sbrelease_internal+0x9c/frame 0xfffffe0020ded650
sofree() at sofree+0x492/frame 0xfffffe0020ded6b0
soclose() at soclose+0x5b3/frame 0xfffffe0020ded730
_fdrop() at _fdrop+0x3a/frame 0xfffffe0020ded760
closef() at closef+0x27d/frame 0xfffffe0020ded7f0
fdescfree_fds() at fdescfree_fds+0xbd/frame 0xfffffe0020ded840
fdescfree() at fdescfree+0x58a/frame 0xfffffe0020ded900
exit1() at exit1+0x780/frame 0xfffffe0020ded970
sys_sys_exit() at sys_sys_exit+0xd/frame 0xfffffe0020ded980
amd64_syscall() at amd64_syscall+0x436/frame 0xfffffe0020dedab0
fast_syscall_common() at fast_syscall_common+0x101/frame 0xfffffe0020dedab0
--- syscall (1, FreeBSD ELF64, sys_sys_exit), rip = 0x40cb7a, rsp = 0x7fffffffea98, rbp = 0x7fffffffeab0 ---
KDB: enter: panic
[ thread pid 14241 tid 100090 ]
Stopped at      kdb_enter+0x6a: movq    $0,kdb_why

Crashes (32):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/03/21 03:39 freebsd f61d24052aac 427ea487 console log report syz C ci-freebsd-main
2019/04/10 09:58 freebsd fc127242ec6d 65b612b7 console log report ci-freebsd-main
2019/04/08 05:02 freebsd f574a39e6a7f c34fde03 console log report ci-freebsd-main
2019/04/08 04:56 freebsd f574a39e6a7f c34fde03 console log report ci-freebsd-main
2019/04/07 18:28 freebsd f574a39e6a7f c34fde03 console log report ci-freebsd-main
2019/04/07 01:39 freebsd 83655cf0aa78 c34fde03 console log report ci-freebsd-main
2019/04/06 14:27 freebsd 83655cf0aa78 c34fde03 console log report ci-freebsd-main
2019/04/04 16:45 freebsd 1b2f05a216c3 6a475fff console log report ci-freebsd-main
2019/03/31 11:31 freebsd 942f34746abe 0c624d4d console log report ci-freebsd-main
2019/03/29 23:23 freebsd 0b0688a91cb0 934bb8ca console log report ci-freebsd-main
2019/03/29 10:03 freebsd fb7a2f4237ac 934bb8ca console log report ci-freebsd-main
2019/03/29 06:29 freebsd fb7a2f4237ac 14c58f8d console log report ci-freebsd-main
2019/03/28 20:54 freebsd f5682a5ff578 14c58f8d console log report ci-freebsd-main
2019/03/28 10:21 freebsd f5682a5ff578 f94f56fe console log report ci-freebsd-main
2019/03/28 07:27 freebsd 562ca52ecd5a f94f56fe console log report ci-freebsd-main
2019/03/26 10:04 freebsd 35c0b5f4dd4f 55684ce1 console log report ci-freebsd-main
2019/03/23 18:19 freebsd 0e6bf0c478cd a2cef203 console log report ci-freebsd-main
2019/03/23 05:48 freebsd 0d79d351f864 3361bde5 console log report ci-freebsd-main
2019/03/22 23:45 freebsd 8b8564b522e6 028c0951 console log report ci-freebsd-main
2019/03/22 18:24 freebsd 8b8564b522e6 028c0951 console log report ci-freebsd-main
2019/03/22 03:12 freebsd 434f008798f2 dce6e62f console log report ci-freebsd-main
2019/03/21 01:04 freebsd f61d24052aac 427ea487 console log report ci-freebsd-main
2019/03/20 17:49 freebsd 3d80c6291b89 142c38ee console log report ci-freebsd-main
2019/03/20 16:48 freebsd 3d80c6291b89 142c38ee console log report ci-freebsd-main
2019/03/20 03:15 freebsd 90d8cba8606b 2458c1c6 console log report ci-freebsd-main
2019/03/19 23:28 freebsd 5d2bb1696724 e4549234 console log report ci-freebsd-main
2019/03/18 18:07 freebsd b24a98cb7ea8 4656beca console log report ci-freebsd-main
2019/03/18 08:51 freebsd 8b17fbc25c73 f8757044 console log report ci-freebsd-main
2019/03/18 03:36 freebsd 8b17fbc25c73 f8757044 console log report ci-freebsd-main
2019/03/18 02:16 freebsd 8b17fbc25c73 f8757044 console log report ci-freebsd-main
2019/03/17 23:18 freebsd 8b17fbc25c73 f8757044 console log report ci-freebsd-main
2019/03/16 06:57 freebsd 4d504c5762fd bab43553 console log report ci-freebsd-main
* Struck through repros no longer work on HEAD.