syzbot

 sign-in | mailing list | source | docs
🞠Open [140]
🞠Fixed [274]
🞠Invalid [743]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

uvm_fault: _bpf_mtap

Status: auto-closed as invalid on 2019/06/19 23:03
Reported-by: syzbot+34cebddd84b99fe1f3b6@syzkaller.appspotmail.com
First crash: 2186d, last: 2164d
▶ ▼ Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd uvm_fault: _bpf_mtap (2) 8 1603d 1617d 0/3 auto-closed as invalid on 2020/10/03 15:08

Sample crash report:
¼@gC—¬U[¡ÀÅQÛÿ£'ûOm„qó^jnK§Vç#ôìpÂÜ“>»óèbš;�=Æ{æNlÉ[Õý`âÐuvm_fault(0xffffff003f12b630, 0x6000118, 0, 1) -> e
kernel: page fault trap, code=0
Stopped at      _bpf_mtap+0x68: movl    0x18(%rbx),%r13d
ddb> 
ddb> set $lines = 0
ddb> show panic
kernel page fault
uvm_fault(0xffffff003f12b630, 0x6000118, 0, 1) -> e
_bpf_mtap(ffff800000074340,1,ffff800000074340,ffffff00352df400) at _bpf_mtap+0x68 sys/net/bpf.c:1261
end trace frame: 0xffff800014a9de70, count: 0
ddb> trace
_bpf_mtap(ffff800000074340,1,ffff800000074340,ffffff00352df400) at _bpf_mtap+0x68 sys/net/bpf.c:1261
bpf_mtap_ether(ffff800014a9df18,42,ffff800000074340) at bpf_mtap_ether+0xeb
ifiq_input(ffff800000171050,ffff800000171290,ffffff00352df400) at ifiq_input+0x105 sys/net/ifq.c:500
vio_rxeof(ffff800000171050) at vio_rxeof+0x220 sys/dev/pv/if_vio.c:1045
vio_rx_intr(ffffffff) at vio_rx_intr+0x23 sys/dev/pv/if_vio.c:1057
virtio_check_vqs(ffff80000001c300) at virtio_check_vqs+0x166 sys/dev/pv/virtio.c:228
intr_handler(0,ffff80000024b980) at intr_handler+0x3f sys/arch/amd64/amd64/intr.c:530
Xintr_ioapic_edge19_untramp(0,0,0,0,4495b6f4028,a7e6f) at Xintr_ioapic_edge19_untramp+0x19f
end of kernel
end trace frame: 0x7f7ffffccc30, count: -8
ddb> show registers
rdi               0xffff800000074340
rsi               0xffffff00352df400
rbp               0xffff800014a9dde0
rbx                        0x6000100    __kernel_end_phys+0x4000100
rdx                              0x1
rcx                                0
rax                             0x42
r8                               0x2
r9                                 0
r10                                0
r11               0xffffffff81468f90    _bus_dmamap_unload
r12               0xffff800000074340
r13                             0x42
r14                              0x1
r15                                0
rip               0xffffffff8160af78    _bpf_mtap+0x68
cs                               0x8
rflags                       0x10202    __ALIGN_SIZE+0xf202
rsp               0xffff800014a9dd70
ss                                 0
_bpf_mtap+0x68: movl    0x18(%rbx),%r13d
ddb> show proc
PROC (syz-executor1) pid=457997 stat=onproc
    flags process=0 proc=0
    pri=83, usrpri=83, nice=20
    forw=0xffffffffffffffff, list=0xffff800014a22e80,0xffff800014a230e8
    process=0xffff800014a15cb0 user=0xffff800014a99000, vmspace=0xffffff003f12b630
    estcpu=36, cpticks=1, pctcpu=0.0
    user=0, sys=0, intr=0
ddb> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
*36786  457997  31354      0  7           0                syz-executor1
 36786   82672  31354      0  3   0x4000000  biowait       syz-executor1
 26896  359466      1      0  3    0x100083  ttyin         getty
 31354  508395  39092      0  3        0x82  nanosleep     syz-executor1
 80987  260036      0      0  3     0x14200  bored         sosplice
 64322  211263  39092      0  2         0x2                syz-executor0
 39092   83522  41989      0  3        0x82  thrsleep      syz-fuzzer
 39092  178719  41989      0  3   0x4000082  nanosleep     syz-fuzzer
 39092  236840  41989      0  3   0x4000082  thrsleep      syz-fuzzer
 39092  437369  41989      0  3   0x4000082  thrsleep      syz-fuzzer
 39092  301304  41989      0  3   0x4000082  kqread        syz-fuzzer
 39092  430096  41989      0  3   0x4000082  thrsleep      syz-fuzzer
 39092  224674  41989      0  3   0x4000082  thrsleep      syz-fuzzer
 41989  318304  47818      0  3    0x10008a  pause         ksh
 47818  372868  24955      0  3        0x92  select        sshd
 24955  464528      1      0  3        0x80  select        sshd
 82807  346348  86617     73  2    0x100090                syslogd
 86617  389896      1      0  3    0x100082  netio         syslogd
 58435  269859      1     77  3    0x100090  poll          dhclient
 94944  118546      1      0  3        0x80  poll          dhclient
 45628   61800      0      0  2     0x14200                zerothread
 13145  276593      0      0  3     0x14200  aiodoned      aiodoned
 75077  498674      0      0  3     0x14200  syncer        update
 12229  419314      0      0  3     0x14200  cleaner       cleaner
 15584  134366      0      0  3     0x14200  reaper        reaper
 62975  351920      0      0  3     0x14200  pgdaemon      pagedaemon
 34913  324350      0      0  3     0x14200  bored         crynlk
  5645  321052      0      0  3     0x14200  bored         crypto
 62149   46171      0      0  3  0x40014200  acpi0         acpi0
 69869  486382      0      0  3     0x14200  bored         softnet
 52680   64618      0      0  3     0x14200  bored         systqmp
 60144  255133      0      0  3     0x14200  bored         systq
 56111   19019      0      0  3  0x40014200  bored         softclock
 18744  274845      0      0  3  0x40014200                idle0
     1  325021      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper

Crashes (31):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/12/21 23:02 openbsd 1045a194bdf1 603b5124 .config console log report ci-openbsd-main
2018/12/19 00:48 openbsd 3d7285cf5747 cda92f77 .config console log report ci-openbsd-main
2018/12/18 15:30 openbsd 9257d67bbd0d 1e30dd27 .config console log report ci-openbsd-main
2018/12/17 07:02 openbsd 9257d67bbd0d 1749e412 .config console log report ci-openbsd-main
2018/12/17 04:05 openbsd 4e9c41985603 1749e412 .config console log report ci-openbsd-main
2018/12/13 06:32 openbsd 918267856206 34f73592 .config console log report ci-openbsd-main
2018/12/09 00:34 openbsd 5ed42fc8f61a dabe54a1 .config console log report ci-openbsd-main
2018/12/07 21:45 openbsd 53ac6a98736c 65ed2472 .config console log report ci-openbsd-main
2018/12/07 00:40 openbsd 76d787ec3667 b6709220 .config console log report ci-openbsd-main
2018/12/06 23:04 openbsd 76d787ec3667 b6709220 .config console log report ci-openbsd-main
2018/12/06 22:48 openbsd 76d787ec3667 b6709220 .config console log report ci-openbsd-main
2018/12/06 20:48 openbsd 76d787ec3667 b6709220 .config console log report ci-openbsd-main
2018/12/06 18:35 openbsd 7d03a16b0321 cc3a19d5 console log report ci-openbsd-main
2018/12/06 18:09 openbsd 7d03a16b0321 cc3a19d5 console log report ci-openbsd-main
2018/12/06 16:44 https://github.com/blackgnezdo/src.git multicore 46168e0d3b1d cc3a19d5 console log report ci-openbsd-multicore
2018/12/06 14:09 openbsd 7d03a16b0321 cc3a19d5 console log report ci-openbsd-main
2018/12/06 11:59 openbsd 7d03a16b0321 f162ad97 console log report ci-openbsd-main
2018/12/06 07:10 openbsd 7d03a16b0321 f162ad97 console log report ci-openbsd-main
2018/12/06 05:21 https://github.com/blackgnezdo/src.git multicore 46168e0d3b1d f162ad97 console log report ci-openbsd-multicore
2018/12/06 01:45 openbsd 7d03a16b0321 f162ad97 console log report ci-openbsd-main
2018/12/05 17:39 openbsd 522be8593c5d f162ad97 console log report ci-openbsd-main
2018/12/05 10:57 openbsd 522be8593c5d f162ad97 console log report ci-openbsd-main
2018/12/05 08:54 openbsd 522be8593c5d f162ad97 console log report ci-openbsd-main
2018/12/05 02:32 openbsd f9485e1deed3 03f94a45 console log report ci-openbsd-main
2018/12/04 20:14 openbsd f9485e1deed3 03f94a45 console log report ci-openbsd-main
2018/12/04 17:46 openbsd f939acc2595a 03f94a45 console log report ci-openbsd-main
2018/12/04 17:11 openbsd f939acc2595a 03f94a45 console log report ci-openbsd-main
2018/12/04 07:20 openbsd f939acc2595a 03f94a45 console log report ci-openbsd-main
2018/12/04 06:19 openbsd f939acc2595a 03f94a45 console log report ci-openbsd-main
2018/12/04 04:59 openbsd f939acc2595a 03f94a45 console log report ci-openbsd-main
2018/11/29 21:44 openbsd 25236b556a2d 66071e27 console log report ci-openbsd-main
* Struck through repros no longer work on HEAD.