freebsd boot error: Fatal trap 12: page fault while in kernel mode

82 views
Skip to first unread message

syzbot

unread,
Apr 20, 2021, 5:52:18 PM4/20/21
to syzkaller-f...@googlegroups.com
Hello,

syzbot found the following issue on:

HEAD commit: e15bf05e bhyve: Be explicit that setting config.dump will ..
git tree: https://github.com/freebsd/freebsd-src.git main
console output: https://syzkaller.appspot.com/x/log.txt?x=12d68339d00000
dashboard link: https://syzkaller.appspot.com/bug?extid=16c9bc0d0d58bc728a45
userspace arch: i386

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+16c9bc...@syzkaller.appspotmail.com

Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address = 0x378
fault code = supervisor read data, page not present
instruction pointer = 0x20:0xffffffff81395f5c
stack pointer = 0x28:0xfffffe00516a99a0
frame pointer = 0x28:0xfffffe00516a99f0
code segment = base 0x0, limit 0xfffff, type 0x1b
= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags = interrupt enabled, resume, IOPL = 0
current process = 12 (irq29: virtio_pci1)
trap number = 12
panic: page fault
cpuid = 0
time = 1618954992
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe00516a9600
vpanic() at vpanic+0x1c7/frame 0xfffffe00516a9660
panic() at panic+0x43/frame 0xfffffe00516a96c0
trap_fatal() at trap_fatal+0x4cd/frame 0xfffffe00516a9740
trap_pfault() at trap_pfault+0xd4/frame 0xfffffe00516a97b0
trap() at trap+0x41d/frame 0xfffffe00516a98d0
calltrap() at calltrap+0x8/frame 0xfffffe00516a98d0
--- trap 0xc, rip = 0xffffffff81395f5c, rsp = 0xfffffe00516a99a0, rbp = 0xfffffe00516a99f0 ---
tcp_lro_flush_all() at tcp_lro_flush_all+0x1c/frame 0xfffffe00516a99f0
vtnet_rxq_eof() at vtnet_rxq_eof+0x1022/frame 0xfffffe00516a9ad0
vtnet_rx_vq_process() at vtnet_rx_vq_process+0xe1/frame 0xfffffe00516a9b10
ithread_loop() at ithread_loop+0x33f/frame 0xfffffe00516a9bb0
fork_exit() at fork_exit+0xb3/frame 0xfffffe00516a9bf0
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe00516a9bf0
--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
KDB: enter: panic
[ thread pid 12 tid 100050 ]
Stopped at kdb_enter+0x67: movq $0,0x163c1be(%rip)
db>


---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

Mark Johnston

unread,
May 11, 2021, 4:38:50 PM5/11/21
to syzbot, syzkaller-f...@googlegroups.com
#syz invalid

>
>
> ---
> This report is generated by a bot. It may contain errors.
> See https://goo.gl/tpsmEJ for more information about syzbot.
> syzbot engineers can be reached at syzk...@googlegroups.com.
>
> syzbot will keep track of this issue. See:
> https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
>
> --
> You received this message because you are subscribed to the Google Groups "syzkaller-freebsd-bugs" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to syzkaller-freebsd...@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/msgid/syzkaller-freebsd-bugs/000000000000a32f4305c06e756b%40google.com.
Reply all
Reply to author
Forward
0 new messages