syzbot


Fatal trap 12: page fault in pmap_remove_pte

Status: auto-closed as invalid on 2019/10/25 08:36
Reported-by: syzbot+d0ed948e4ec6c701bcd3@syzkaller.appspotmail.com
First crash: 2010d, last: 2010d

Sample crash report:
Fatal trap 12: page fault while in kernel mode
cpuid = 1; apic id = 01
fault virtual address	= 0x0
fault code		= supervisor read data, page not present
instruction pointer	= 0x20:0xffffffff816be59b
stack pointer	        = 0x0:0xfffffe0016bfc810
frame pointer	        = 0x0:0xfffffe0016bfc870
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 18 (vmdaemon)
trap number		= 12
panic: page fault
cpuid = 1
time = 126
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe0016bfc470
vpanic() at vpanic+0x1e0/frame 0xfffffe0016bfc4d0
panic() at panic+0x43/frame 0xfffffe0016bfc530
trap_fatal() at trap_fatal+0x4c6/frame 0xfffffe0016bfc5b0
trap_pfault() at trap_pfault+0x9f/frame 0xfffffe0016bfc620
trap() at trap+0x44d/frame 0xfffffe0016bfc740
calltrap() at calltrap+0x8/frame 0xfffffe0016bfc740
--- trap 0xc, rip = 0xffffffff816be59b, rsp = 0xfffffe0016bfc810, rbp = 0xfffffe0016bfc870 ---
pmap_remove_pte() at pmap_remove_pte+0x32b/frame 0xfffffe0016bfc870
pmap_remove_ptes() at pmap_remove_ptes+0x1b5/frame 0xfffffe0016bfc8f0
pmap_remove() at pmap_remove+0x4a5/frame 0xfffffe0016bfc980
vm_swapout_map_deactivate_pages() at vm_swapout_map_deactivate_pages+0x310/frame 0xfffffe0016bfc9e0
vm_daemon() at vm_daemon+0xbe0/frame 0xfffffe0016bfca60
fork_exit() at fork_exit+0xb0/frame 0xfffffe0016bfcab0
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0016bfcab0
--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
KDB: enter: panic
[ thread pid 18 tid 100062 ]
Stopped at      kdb_enter+0x6a: movq    $0,kdb_why

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/05/22 13:41 freebsd e2abb7b27ea6 40046286 console log report ci-freebsd-main
* Struck through repros no longer work on HEAD.