syzbot


Fatal trap 12: page fault in thread_lock_validate

Status: closed as invalid on 2021/01/02 13:21
Reported-by: syzbot+f8861e2fe73c2ea5ad69@syzkaller.appspotmail.com
First crash: 1879d, last: 1879d

Sample crash report:
#11 0xffffffff815550c4 at vmFatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address	= 0x18
_fault+0x11a4
#12 0xffffffff815fault code		= supervisor read data, page not present
instruction pointer	= 0x20:0xffffffff8102f5b2
stack pointer	        = 0x0:0xfffffe00229ae7e0
frame pointer	        = 0x0:0xfffffe00229ae820
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags	= resume, IOPL = 0
current process		= 792 (syz-executor.0)
trap number		= 12
panic: page fault
cpuid = 0
time = 1570079990
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe00229ae430
vpanic() at vpanic+0x1e0/frame 0xfffffe00229ae490
panic() at panic+0x43/frame 0xfffffe00229ae4f0
trap_fatal() at trap_fatal+0x4de/frame 0xfffffe00229ae570
trap_pfault() at trap_pfault+0xdc/frame 0xfffffe00229ae5f0
trap() at trap+0x44f/frame 0xfffffe00229ae710
calltrap() at calltrap+0x8/frame 0xfffffe00229ae710
--- trap 0xc, rip = 0xffffffff8102f5b2, rsp = 0xfffffe00229ae7e0, rbp = 0xfffffe00229ae820 ---
thread_lock_validate() at thread_lock_validate+0x22/frame 0xfffffe00229ae820
_thread_lock() at _thread_lock+0x6b/frame 0xfffffe00229ae870
thread_single() at thread_single+0x3f4/frame 0xfffffe00229ae8f0
exit1() at exit1+0x112/frame 0xfffffe00229ae960
sys_sys_exit() at sys_sys_exit+0xd/frame 0xfffffe00229ae970
ia32_syscall() at ia32_syscall+0x46a/frame 0xfffffe00229aeab0
int0x80_syscall_common() at int0x80_syscall_common+0x9c
KDB: enter: panic
[ thread pid 792 tid 100072 ]
Stopped at      kdb_enter+0x6a: movq    $0,kdb_why

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/10/03 05:23 freebsd 2e55322e1afc 2e29b534 console log report syz ci-freebsd-i386
* Struck through repros no longer work on HEAD.