syzbot


assert "pmap->pm_type != PMAP_TYPE_EPT" failed in pmap.c (3)

Status: upstream: reported on 2024/04/20 10:28
Reported-by: syzbot+116f728e8f2fd3210d63@syzkaller.appspotmail.com
First crash: 59d, last: 25d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd assert "pmap->pm_type != PMAP_TYPE_EPT" failed in pmap.c (2) 1 191d 191d 0/3 auto-obsoleted due to no activity on 2024/03/09 03:03
openbsd assert "pmap->pm_type != PMAP_TYPE_EPT" failed in pmap.c 1 748d 748d 0/3 auto-obsoleted due to no activity on 2022/08/30 06:16

Sample crash report:
panic: kernel diagnostic assertion "pmap->pm_type != PMAP_TYPE_EPT" failed: file "/syzkaller/managers/multicore/kernel/sys/arch/amd64/amd64/pmap.c", line 412
Starting stack trace...
panic(ffffffff8295855f) at panic+0x16f sys/kern/subr_prf.c:229
__assert(ffffffff8291090e,ffffffff82935957,19c,ffffffff8293e53f) at __assert+0x29 sys/kern/subr_prf.c:157
pmap_page_remove(fffffd80083beae0) at pmap_page_remove+0x5a4 pmap_map_ptes sys/arch/amd64/amd64/pmap.c:426 [inline]
pmap_page_remove(fffffd80083beae0) at pmap_page_remove+0x5a4 sys/arch/amd64/amd64/pmap.c:1950
uvm_anfree_list(fffffd80528db768,0) at uvm_anfree_list+0x98
amap_wipeout(fffffd8068afd280) at amap_wipeout+0x1af sys/uvm/uvm_amap.c:502
uvm_unmap_detach(ffff80002a1550d0,1) at uvm_unmap_detach+0x7d sys/uvm/uvm_map.c:1354
uvm_map_teardown(fffffd806628ba68) at uvm_map_teardown+0x2f8 sys/uvm/uvm_map.c:2554
uvmspace_free(fffffd806628ba68) at uvmspace_free+0xa6 sys/uvm/uvm_map.c:3461
reaper(ffff80002a1491f8) at reaper+0x197 sys/kern/kern_exit.c:475
end trace frame: 0x0, count: 248
End of stack trace.

Crashes (6):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/05/24 11:37 openbsd 6859a790d2a4 8f98448e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pmap->pm_type != PMAP_TYPE_EPT" failed in pmap.c
2024/05/18 00:53 openbsd fea1e5fd692c c0f1611a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pmap->pm_type != PMAP_TYPE_EPT" failed in pmap.c
2024/05/17 22:20 openbsd fea1e5fd692c c0f1611a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pmap->pm_type != PMAP_TYPE_EPT" failed in pmap.c
2024/05/08 02:53 openbsd 7284c0c62173 4cf3f9b3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pmap->pm_type != PMAP_TYPE_EPT" failed in pmap.c
2024/04/29 16:33 openbsd b205d946bc4d 27e33c58 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pmap->pm_type != PMAP_TYPE_EPT" failed in pmap.c
2024/04/20 10:28 openbsd 55906bae5af5 af24b050 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pmap->pm_type != PMAP_TYPE_EPT" failed in pmap.c
* Struck through repros no longer work on HEAD.