syzbot


panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte 0x3efff

Status: upstream: reported on 2024/04/15 06:39
Reported-by: syzbot+09f33fb71a11cf753c46@syzkaller.appspotmail.com
First crash: 61d, last: 18d

Sample crash report:
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va 0x19013a60000, opte 0x3efff
Starting stack trace...
panic(ffffffff828f6d11) at panic+0x16f sys/kern/subr_prf.c:229
pmap_remove_ptes(fffffd806b7ac5e0,fffffd8007e2aa20,7f80c809d288,19013a51000,19013a91000,0,f956e154ff5f0885) at pmap_remove_ptes+0x33e
pmap_do_remove(fffffd806b7ac5e0,19013a51000,19013a91000,0) at pmap_do_remove+0x410 sys/arch/amd64/amd64/pmap.c:1896
uvm_unmap_kill_entry_withlock(fffffd8065f08540,fffffd807d633540,0) at uvm_unmap_kill_entry_withlock+0x1b1 sys/uvm/uvm_map.c:1897
uvm_map_teardown(fffffd8065f08540) at uvm_map_teardown+0x1c7 uvm_map_addr_RBT_LEFT sys/uvm/uvm_map.h:176 [inline]
uvm_map_teardown(fffffd8065f08540) at uvm_map_teardown+0x1c7 sys/uvm/uvm_map.c:2534
uvmspace_free(fffffd8065f08540) at uvmspace_free+0xa6 sys/uvm/uvm_map.c:3461
reaper(ffff80002a1487b8) at reaper+0x197 sys/kern/kern_exit.c:475
end trace frame: 0x0, count: 250
End of stack trace.

Crashes (7):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/05/28 07:16 openbsd 98f39564523a f550015e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte 0x3efff
2024/05/18 17:11 openbsd 1b2581db680c c0f1611a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte 0x3efff
2024/05/17 03:44 openbsd b20edd337af0 ad5321c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte 0x3efff
2024/05/16 19:20 openbsd b20edd337af0 ad5321c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte 0x3efff
2024/05/14 01:21 openbsd aa47c49a2e9a fdb4c10c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte 0x3efff
2024/05/13 05:39 openbsd 30293cdc5e30 9026e142 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte 0x3efff
2024/04/15 06:39 openbsd 7019ae976ad9 c8349e48 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte 0x3efff
* Struck through repros no longer work on HEAD.