syzbot


Fatal trap 12: page fault in __mtx_assert (2)

Status: auto-closed as invalid on 2019/10/25 08:47
Reported-by: syzbot+866e19dcb0187e17d10b@syzkaller.appspotmail.com
First crash: 2017d, last: 2017d
Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
freebsd Fatal trap 12: page fault in __mtx_assert (3) 3 1483d 1517d 0/2 auto-closed as invalid on 2021/01/28 09:02
freebsd Fatal trap 12: page fault in __mtx_assert (4) 2 1374d 1389d 0/2 auto-closed as invalid on 2021/05/17 14:41
freebsd Fatal trap 12: page fault in __mtx_assert (5) 7 1242d 1276d 0/2 auto-closed as invalid on 2021/09/26 00:34
freebsd Fatal trap 12: page fault in __mtx_assert syz 4 2069d 2070d 1/2 fixed on 2019/03/26 17:44

Sample crash report:
Fatal trap 12: page fault while in kernel mode
cpuid = 1; apic id = 01
fault virtual address	= 0x170
fault code		= supervisor read data, page not present
instruction pointer	= 0x20:0xffffffff8103e5c9
stack pointer	        = 0x0:0xfffffe0016ad46d0
frame pointer	        = 0x0:0xfffffe0016ad4700
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 12 (swi4: clock (0))
trap number		= 12
panic: page fault
cpuid = 1
time = 1557942071
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe0016ad4330
vpanic() at vpanic+0x1e0/frame 0xfffffe0016ad4390
panic() at panic+0x43/frame 0xfffffe0016ad43f0
trap_fatal() at trap_fatal+0x4c6/frame 0xfffffe0016ad4470
trap_pfault() at trap_pfault+0x9f/frame 0xfffffe0016ad44e0
trap() at trap+0x44d/frame 0xfffffe0016ad4600
calltrap() at calltrap+0x8/frame 0xfffffe0016ad4600
--- trap 0xc, rip = 0xffffffff8103e5c9, rsp = 0xfffffe0016ad46d0, rbp = 0xfffffe0016ad4700 ---
__mtx_assert() at __mtx_assert+0xb9/frame 0xfffffe0016ad4700
sctp_add_to_readq() at sctp_add_to_readq+0x642/frame 0xfffffe0016ad4780
sctp_notify_assoc_change() at sctp_notify_assoc_change+0x427/frame 0xfffffe0016ad4810
sctp_abort_an_association() at sctp_abort_an_association+0xff/frame 0xfffffe0016ad4850
sctp_timeout_handler() at sctp_timeout_handler+0x167f/frame 0xfffffe0016ad48e0
softclock_call_cc() at softclock_call_cc+0x1dd/frame 0xfffffe0016ad49b0
softclock() at softclock+0xa3/frame 0xfffffe0016ad49f0
ithread_loop() at ithread_loop+0x2f2/frame 0xfffffe0016ad4a60
fork_exit() at fork_exit+0xb0/frame 0xfffffe0016ad4ab0
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0016ad4ab0
--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
KDB: enter: panic
[ thread pid 12 tid 100017 ]
Stopped at      kdb_enter+0x6a: movq    $0,kdb_why

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/05/15 17:41 freebsd 5834f8720468 bd4e3ac7 console log report ci-freebsd-main
* Struck through repros no longer work on HEAD.