syzbot


panic: ASan: Invalid access, 2-byte read in sctp_inpcb_bind

Status: closed as dup on 2021/09/08 20:39
Reported-by: syzbot+fde589afd0ac8e26bdf4@syzkaller.appspotmail.com
First crash: 1022d, last: 971d
Duplicate of
Title Repro Cause bisect Fix bisect Count Last Reported
panic: Bad list head ADDR first->prev != head C 3409 970d 1867d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
freebsd panic: ASan: Invalid access, 8-byte read in sctp_inpcb_bind 1 997d 997d 0/2 closed as dup on 2021/09/09 13:00

Sample crash report:
panic: ASan: Invalid access, 2-byte read at 0xfffffe00929dbae6, UMAUseAfterFree(fd)
cpuid = 1
time = 1626178719
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe008f6fd1f0
kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe008f6fd350
vpanic() at vpanic+0x2c5/frame 0xfffffe008f6fd430
panic() at panic+0xb5/frame 0xfffffe008f6fd4f0
__asan_load2_noabort() at __asan_load2_noabort+0x167/frame 0xfffffe008f6fd5b0
sctp_inpcb_bind() at sctp_inpcb_bind+0x67d/frame 0xfffffe008f6fd6f0
sctp6_connect() at sctp6_connect+0x3e9/frame 0xfffffe008f6fd870
soconnectat() at soconnectat+0x213/frame 0xfffffe008f6fd8d0
kern_connectat() at kern_connectat+0x299/frame 0xfffffe008f6fd9b0
sys_connect() at sys_connect+0xfb/frame 0xfffffe008f6fd9f0
amd64_syscall() at amd64_syscall+0x425/frame 0xfffffe008f6fdbf0
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe008f6fdbf0
--- syscall (0, FreeBSD ELF64, nosys), rip = 0x2b459a, rsp = 0x7fffdfffdf78, rbp = 0x7fffdfffdfb0 ---
KDB: enter: panic
[ thread pid 7971 tid 110222 ]
Stopped at      kdb_enter+0x6b: movq    $0,0x28fa0fa(%rip)
db> 
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs                        0x20
ds                        0x3b
es                        0x3b
fs                        0x13
gs                        0x1b
ss                        0x28
rax                       0x12
rcx         0x758ea3680047b394
rdx         0xdffff7c000000000
rbx                          0
rsp         0xfffffe008f6fd330
rbp         0xfffffe008f6fd350
rsi                        0x1
rdi         0xffffffff840860c0  cov_trace_pc
r8                         0x3
r9          0xfffffe008f6fce88
r10                          0
r11         0xfffffe009207f510
r12         0xfffffe009207f000
r13         0xfffffe008f6fd301
r14         0xffffffff82c418c0  .str.18
r15         0xffffffff82c418c0  .str.18
rip         0xffffffff8178e93b  kdb_enter+0x6b
rflags                    0x46
kdb_enter+0x6b: movq    $0,0x28fa0fa(%rip)
db> 

Crashes (98):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/07/13 12:23 freebsd-src 9c1c02093b90 f415556d console log report syz C ci-freebsd-main panic: ASan: Invalid access, 2-byte read in sctp_inpcb_bind
2021/07/13 07:41 freebsd-src 9c1c02093b90 f415556d console log report syz C ci-freebsd-main panic: ASan: Invalid access, 2-byte read in sctp_inpcb_bind
2021/07/12 16:51 freebsd-src 9c1c02093b90 a4869c92 console log report syz C ci-freebsd-main panic: ASan: Invalid access, 2-byte read in sctp_inpcb_bind
2021/07/11 09:01 freebsd-src 58080fbca09f 8f5a7b8c console log report syz C ci-freebsd-main panic: ASan: Invalid access, 2-byte read in sctp_inpcb_bind
2021/07/10 22:16 freebsd-src 58080fbca09f 8f5a7b8c console log report syz C ci-freebsd-main panic: ASan: Invalid access, 2-byte read in sctp_inpcb_bind
2021/08/08 18:43 freebsd-src 9748eb742791 6972b106 console log report syz ci-freebsd-main panic: ASan: Invalid access, 2-byte read in sctp_inpcb_bind
2021/07/30 14:35 freebsd-src 9d3b47abbba7 c585c7b0 console log report syz ci-freebsd-main panic: ASan: Invalid access, 2-byte read in sctp_inpcb_bind
2021/07/11 09:46 freebsd-src 58080fbca09f 8f5a7b8c console log report syz ci-freebsd-main panic: ASan: Invalid access, 2-byte read in sctp_inpcb_bind
2021/07/11 02:41 freebsd-src 58080fbca09f 8f5a7b8c console log report syz ci-freebsd-main panic: ASan: Invalid access, 2-byte read in sctp_inpcb_bind
2021/08/20 02:02 freebsd-src a313b5240a47 e2da378b console log report syz ci-freebsd-main panic: ASan: Invalid access, NUM-byte read in sctp_inpcb_bind
2021/08/11 21:21 freebsd-src 95c51fafa40d 6972b106 console log report ci-freebsd-main panic: ASan: Invalid access, 2-byte read in sctp_inpcb_bind
2021/08/07 10:54 freebsd-src c18c74a87c15 6972b106 console log report ci-freebsd-main panic: ASan: Invalid access, 2-byte read in sctp_inpcb_bind
2021/08/06 00:15 freebsd-src 2694c869ff9f d2d6e680 console log report ci-freebsd-main panic: ASan: Invalid access, 2-byte read in sctp_inpcb_bind
2021/08/03 18:07 freebsd-src 0fa5403d493b 6c236867 console log report ci-freebsd-main panic: ASan: Invalid access, 2-byte read in sctp_inpcb_bind
2021/08/01 12:39 freebsd-src 60fb9e10c74c 6c236867 console log report ci-freebsd-main panic: ASan: Invalid access, 2-byte read in sctp_inpcb_bind
2021/07/29 22:42 freebsd-src cbf6f55e77a9 8a799410 console log report ci-freebsd-main panic: ASan: Invalid access, 2-byte read in sctp_inpcb_bind
2021/08/12 12:48 freebsd-src fc37be246021 6972b106 console log report ci-freebsd-i386 panic: ASan: Invalid access, 2-byte read in sctp_inpcb_bind
2021/08/12 11:40 freebsd-src fc37be246021 6972b106 console log report ci-freebsd-i386 panic: ASan: Invalid access, 2-byte read in sctp_inpcb_bind
2021/08/10 07:26 freebsd-src 4a5a67fe679d 6972b106 console log report ci-freebsd-i386 panic: ASan: Invalid access, 2-byte read in sctp_inpcb_bind
2021/08/09 17:07 freebsd-src 6bddade6114a 6972b106 console log report ci-freebsd-i386 panic: ASan: Invalid access, 2-byte read in sctp_inpcb_bind
2021/08/09 00:36 freebsd-src e5018628e76a 6972b106 console log report ci-freebsd-i386 panic: ASan: Invalid access, 2-byte read in sctp_inpcb_bind
2021/08/08 09:58 freebsd-src 04389c855e56 6972b106 console log report ci-freebsd-i386 panic: ASan: Invalid access, 2-byte read in sctp_inpcb_bind
2021/08/07 23:14 freebsd-src 5668a155cbe6 6972b106 console log report ci-freebsd-i386 panic: ASan: Invalid access, 2-byte read in sctp_inpcb_bind
2021/08/06 12:24 freebsd-src b3e87f133454 2f537099 console log report ci-freebsd-i386 panic: ASan: Invalid access, 2-byte read in sctp_inpcb_bind
2021/08/05 01:03 freebsd-src 21d854658801 b97d64c9 console log report ci-freebsd-i386 panic: ASan: Invalid access, 2-byte read in sctp_inpcb_bind
2021/08/03 09:12 freebsd-src 04cc0c393c31 6c236867 console log report ci-freebsd-i386 panic: ASan: Invalid access, 2-byte read in sctp_inpcb_bind
2021/08/03 00:12 freebsd-src 1b1bb6f17880 6c236867 console log report ci-freebsd-i386 panic: ASan: Invalid access, 2-byte read in sctp_inpcb_bind
2021/08/01 14:15 freebsd-src 99feb137f5f6 6c236867 console log report ci-freebsd-i386 panic: ASan: Invalid access, 2-byte read in sctp_inpcb_bind
2021/08/01 08:15 freebsd-src ff01d6343f1f 6c236867 console log report ci-freebsd-i386 panic: ASan: Invalid access, 2-byte read in sctp_inpcb_bind
2021/07/31 19:49 freebsd-src f7f76c200a8c 6c236867 console log report ci-freebsd-i386 panic: ASan: Invalid access, 2-byte read in sctp_inpcb_bind
2021/07/28 20:04 freebsd-src ac959cf54421 9a4781d4 console log report ci-freebsd-i386 panic: ASan: Invalid access, 2-byte read in sctp_inpcb_bind
2021/08/29 13:25 freebsd-src 22f5f4a14e97 be2c130d console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte read in sctp_inpcb_bind
2021/08/28 10:37 freebsd-src 08b9cc316a31 d5a29e53 console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte read in sctp_inpcb_bind
2021/08/27 21:48 freebsd-src b54eec836660 57b01c6e console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte read in sctp_inpcb_bind
2021/08/27 19:25 freebsd-src b54eec836660 57b01c6e console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte read in sctp_inpcb_bind
2021/08/26 01:27 freebsd-src e62175df4ec2 b599f2fc console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte read in sctp_inpcb_bind
2021/08/25 14:00 freebsd-src e62175df4ec2 b599f2fc console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte read in sctp_inpcb_bind
2021/08/25 11:20 freebsd-src 71fbc6faed62 b599f2fc console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte read in sctp_inpcb_bind
2021/08/23 14:57 freebsd-src ddce862ad859 b599f2fc console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte read in sctp_inpcb_bind
2021/08/23 11:03 freebsd-src ddce862ad859 b599f2fc console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte read in sctp_inpcb_bind
2021/08/23 07:33 freebsd-src ddce862ad859 b599f2fc console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte read in sctp_inpcb_bind
2021/08/22 18:50 freebsd-src 3904e7966eb3 b599f2fc console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte read in sctp_inpcb_bind
2021/08/22 16:57 freebsd-src 3904e7966eb3 b599f2fc console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte read in sctp_inpcb_bind
2021/08/22 07:00 freebsd-src efa485d5c390 b599f2fc console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte read in sctp_inpcb_bind
2021/08/22 04:56 freebsd-src efa485d5c390 b599f2fc console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte read in sctp_inpcb_bind
2021/08/21 19:40 freebsd-src ce71a0fa99cc b599f2fc console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte read in sctp_inpcb_bind
2021/08/18 08:13 freebsd-src 045001075ed1 a2fe1cb5 console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte read in sctp_inpcb_bind
2021/08/18 05:02 freebsd-src 045001075ed1 a2fe1cb5 console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte read in sctp_inpcb_bind
2021/08/16 20:02 freebsd-src cc1345056b11 6652437d console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte read in sctp_inpcb_bind
2021/08/16 15:55 freebsd-src cc1345056b11 6652437d console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte read in sctp_inpcb_bind
2021/08/16 11:26 freebsd-src cc1345056b11 6652437d console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte read in sctp_inpcb_bind
2021/08/30 01:30 freebsd-src d98954e22981 be2c130d console log report ci-freebsd-i386 panic: ASan: Invalid access, NUM-byte read in sctp_inpcb_bind
2021/08/28 18:32 freebsd-src 5bdf58e19609 be2c130d console log report ci-freebsd-i386 panic: ASan: Invalid access, NUM-byte read in sctp_inpcb_bind
2021/08/27 08:01 freebsd-src bb958dcf3d8a b318694d console log report ci-freebsd-i386 panic: ASan: Invalid access, NUM-byte read in sctp_inpcb_bind
2021/08/27 00:07 freebsd-src da3a09d8941d b318694d console log report ci-freebsd-i386 panic: ASan: Invalid access, NUM-byte read in sctp_inpcb_bind
2021/08/25 18:10 freebsd-src e62175df4ec2 b599f2fc console log report ci-freebsd-i386 panic: ASan: Invalid access, NUM-byte read in sctp_inpcb_bind
2021/08/24 19:34 freebsd-src 5c1428d2c4a6 b599f2fc console log report ci-freebsd-i386 panic: ASan: Invalid access, NUM-byte read in sctp_inpcb_bind
2021/08/20 17:22 freebsd-src f12b1b8b47bf b599f2fc console log report ci-freebsd-i386 panic: ASan: Invalid access, NUM-byte read in sctp_inpcb_bind
2021/08/19 08:55 freebsd-src 35b253d9d238 a2fe1cb5 console log report ci-freebsd-i386 panic: ASan: Invalid access, NUM-byte read in sctp_inpcb_bind
2021/08/16 14:16 freebsd-src cc1345056b11 6652437d console log report ci-freebsd-i386 panic: ASan: Invalid access, NUM-byte read in sctp_inpcb_bind
2021/08/15 17:38 freebsd-src 8afe9481cfa3 2489ab88 console log report ci-freebsd-i386 panic: ASan: Invalid access, NUM-byte read in sctp_inpcb_bind
* Struck through repros no longer work on HEAD.