syzbot


Fatal trap NUM: page fault in soclose

Status: fixed on 2022/06/28 08:04
Reported-by: syzbot+4b862074650b91e087b4@syzkaller.appspotmail.com
Fix commit: bafe71fd2720 sctp: do not clobber listening socket with sockbuf operations
First crash: 665d, last: 661d

Sample crash report:
Fatal trap 12: page fault while in kernel mode
cpuid = 1; apic id = 01
fault virtual address	= 0x8fe7f368
fault code		= supervisor write data, page not present
instruction pointer	= 0x20:0xffffffff817e9824
stack pointer	        = 0x28:0xfffffe008fd0c7a0
frame pointer	        = 0x28:0xfffffe008fd0c880
code segment		= base 0x0, limit 0xfffff, type 0x1b
executing program
executing program
executing program
			= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags	= interrupt enabled, 

FreeBSD/amd64resume, IOPL = 0
current process		= 8764 (syz-executor1137481)
trap number		= 12
panic: page fault
cpuid = 1
time = 1656113174
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe008fd0bf90
kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe008fd0c0f0
vpanic() at vpanic+0x254/frame 0xfffffe008fd0c1d0
panic() at panic+0xb5/frame 0xfffffe008fd0c290
trap_fatal() at trap_fatal+0x6bd/frame 0xfffffe008fd0c3b0
trap_pfault() at trap_pfault+0x182/frame 0xfffffe008fd0c4f0
trap() at trap+0x5b3/frame 0xfffffe008fd0c6d0
calltrap() at calltrap+0x8/frame 0xfffffe008fd0c6d0
--- trap 0xc, rip = 0xffffffff817e9824, rsp = 0xfffffe008fd0c7a0, rbp = 0xfffffe008fd0c880 ---
soclose() at soclose+0x584/frame 0xfffffe008fd0c880
_fdrop() at _fdrop+0x58/frame 0xfffffe008fd0c8b0
closef() at closef+0x689/frame 0xfffffe008fd0ca90
fdescfree() at fdescfree+0xa84/frame 0xfffffe008fd0cc70
exit1() at exit1+0x915/frame 0xfffffe008fd0cd10
sys_exit() at sys_exit+0x28/frame 0xfffffe008fd0cd30
amd64_syscall() at amd64_syscall+0x410/frame 0xfffffe008fd0cf30
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe008fd0cf30
--- syscall (1, FreeBSD ELF64, sys_exit), rip = 0x29580a, rsp = 0x820ae64c8, rbp = 0x820ae64e0 ---
KDB: enter: panic
[ thread pid 8764 tid 100095 ]
Stopped at      kdb_enter+0x6b: movq    $0,0x275e2ba(%rip)
db> set $lines = 0
db> 

Crashes (245):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/06/24 23:30 freebsd-src 235d960aae75 a371c43c console log report syz C ci-freebsd-main Fatal trap NUM: page fault in soclose
2022/06/24 23:29 freebsd-src 235d960aae75 a371c43c console log report syz C ci-freebsd-main Fatal trap NUM: page fault in soclose
2022/06/27 17:02 freebsd-src d78bef0ebefd a371c43c console log report ci-freebsd-main Fatal trap NUM: page fault in soclose
2022/06/27 15:24 freebsd-src d78bef0ebefd a371c43c console log report ci-freebsd-main Fatal trap NUM: page fault in soclose
2022/06/27 14:06 freebsd-src d78bef0ebefd a371c43c console log report ci-freebsd-main Fatal trap NUM: page fault in soclose
2022/06/27 13:05 freebsd-src d78bef0ebefd a371c43c console log report ci-freebsd-main Fatal trap NUM: page fault in soclose
2022/06/27 10:10 freebsd-src d78bef0ebefd a371c43c console log report ci-freebsd-main Fatal trap NUM: page fault in soclose
2022/06/27 08:40 freebsd-src d78bef0ebefd a371c43c console log report ci-freebsd-main Fatal trap NUM: page fault in soclose
2022/06/27 04:49 freebsd-src d78bef0ebefd a371c43c console log report ci-freebsd-main Fatal trap NUM: page fault in soclose
2022/06/26 22:43 freebsd-src fdfeaa66b58a a371c43c console log report ci-freebsd-main Fatal trap NUM: page fault in soclose
2022/06/26 20:10 freebsd-src fdfeaa66b58a a371c43c console log report ci-freebsd-main Fatal trap NUM: page fault in soclose
2022/06/26 18:50 freebsd-src fdfeaa66b58a a371c43c console log report ci-freebsd-main Fatal trap NUM: page fault in soclose
2022/06/26 15:29 freebsd-src fdfeaa66b58a a371c43c console log report ci-freebsd-main Fatal trap NUM: page fault in soclose
2022/06/26 13:41 freebsd-src 0e87bab6b44b a371c43c console log report ci-freebsd-main Fatal trap NUM: page fault in soclose
2022/06/26 08:42 freebsd-src 0e87bab6b44b a371c43c console log report ci-freebsd-main Fatal trap NUM: page fault in soclose
2022/06/26 08:00 freebsd-src 0e87bab6b44b a371c43c console log report ci-freebsd-main Fatal trap NUM: page fault in soclose
2022/06/26 06:29 freebsd-src 0e87bab6b44b a371c43c console log report ci-freebsd-main Fatal trap NUM: page fault in soclose
2022/06/26 04:04 freebsd-src 0e87bab6b44b a371c43c console log report ci-freebsd-main Fatal trap NUM: page fault in soclose
2022/06/26 00:33 freebsd-src 0e87bab6b44b a371c43c console log report ci-freebsd-main Fatal trap NUM: page fault in soclose
2022/06/25 19:51 freebsd-src 61c74fb66f1b a371c43c console log report ci-freebsd-main Fatal trap NUM: page fault in soclose
2022/06/25 18:44 freebsd-src 61c74fb66f1b a371c43c console log report ci-freebsd-main Fatal trap NUM: page fault in soclose
2022/06/25 17:25 freebsd-src 61c74fb66f1b a371c43c console log report ci-freebsd-main Fatal trap NUM: page fault in soclose
2022/06/25 12:29 freebsd-src 61c74fb66f1b a371c43c console log report ci-freebsd-main Fatal trap NUM: page fault in soclose
2022/06/25 11:25 freebsd-src 61c74fb66f1b a371c43c console log report ci-freebsd-main Fatal trap NUM: page fault in soclose
2022/06/25 10:22 freebsd-src 235d960aae75 a371c43c console log report ci-freebsd-main Fatal trap NUM: page fault in soclose
2022/06/25 06:57 freebsd-src 235d960aae75 a371c43c console log report ci-freebsd-main Fatal trap NUM: page fault in soclose
2022/06/25 05:34 freebsd-src 235d960aae75 a371c43c console log report ci-freebsd-main Fatal trap NUM: page fault in soclose
2022/06/25 03:48 freebsd-src 235d960aae75 a371c43c console log report ci-freebsd-main Fatal trap NUM: page fault in soclose
2022/06/24 22:29 freebsd-src 235d960aae75 a371c43c console log report ci-freebsd-main Fatal trap NUM: page fault in soclose
2022/06/24 22:04 freebsd-src 235d960aae75 a371c43c console log report ci-freebsd-main Fatal trap NUM: page fault in soclose
2022/06/28 07:13 freebsd-src 7927452ac4e9 ef82eb2c console log report ci-freebsd-i386 Fatal trap NUM: page fault in soclose
2022/06/28 05:20 freebsd-src 7927452ac4e9 ef82eb2c console log report ci-freebsd-i386 Fatal trap NUM: page fault in soclose
2022/06/28 02:48 freebsd-src 7927452ac4e9 ef82eb2c console log report ci-freebsd-i386 Fatal trap NUM: page fault in soclose
2022/06/28 01:25 freebsd-src 7927452ac4e9 ef82eb2c console log report ci-freebsd-i386 Fatal trap NUM: page fault in soclose
2022/06/28 01:24 freebsd-src 7927452ac4e9 ef82eb2c console log report ci-freebsd-i386 Fatal trap NUM: page fault in soclose
2022/06/28 00:03 freebsd-src 7927452ac4e9 ef82eb2c console log report ci-freebsd-i386 Fatal trap NUM: page fault in soclose
2022/06/27 20:42 freebsd-src 7927452ac4e9 ef82eb2c console log report ci-freebsd-i386 Fatal trap NUM: page fault in soclose
2022/06/27 06:02 freebsd-src d78bef0ebefd a371c43c console log report ci-freebsd-i386 Fatal trap NUM: page fault in soclose
2022/06/27 03:07 freebsd-src fdfeaa66b58a a371c43c console log report ci-freebsd-i386 Fatal trap NUM: page fault in soclose
2022/06/26 16:58 freebsd-src fdfeaa66b58a a371c43c console log report ci-freebsd-i386 Fatal trap NUM: page fault in soclose
2022/06/26 05:06 freebsd-src 76179e400a03 a371c43c console log report ci-freebsd-i386 Fatal trap NUM: page fault in soclose
2022/06/25 23:12 freebsd-src 61c74fb66f1b a371c43c console log report ci-freebsd-i386 Fatal trap NUM: page fault in soclose
2022/06/25 15:34 freebsd-src 61c74fb66f1b a371c43c console log report ci-freebsd-i386 Fatal trap NUM: page fault in soclose
2022/06/25 14:47 freebsd-src 61c74fb66f1b a371c43c console log report ci-freebsd-i386 Fatal trap NUM: page fault in soclose
2022/06/25 13:47 freebsd-src 61c74fb66f1b a371c43c console log report ci-freebsd-i386 Fatal trap NUM: page fault in soclose
2022/06/25 00:27 freebsd-src 235d960aae75 a371c43c console log report ci-freebsd-i386 Fatal trap NUM: page fault in soclose
2022/06/24 23:20 freebsd-src 235d960aae75 a371c43c console log report ci-freebsd-i386 Fatal trap NUM: page fault in soclose
2022/06/24 22:53 freebsd-src 235d960aae75 a371c43c console log report ci-freebsd-i386 Fatal trap NUM: page fault in soclose
2022/06/24 20:32 freebsd-src 235d960aae75 a371c43c console log report ci-freebsd-i386 Fatal trap NUM: page fault in soclose
* Struck through repros no longer work on HEAD.