syzbot


panic: UBSan: Undefined Behavior in /syzkaller/managers/netbsd-kubsan/kernel/sys/arch/amd64/amd64/machdep.c:LINE, pointe

Status: closed as invalid on 2020/05/25 05:39
Reported-by: syzbot+34175d90db8744ccbffc@syzkaller.appspotmail.com
First crash: 1799d, last: 1752d

Sample crash report:
login: [  40.8716280] panic: UBSan: Undefined Behavior in /syzkaller/managers/netbsd-kubsan/kernel/sys/arch/amd64/amd64/machdep.c:625:5, pointer expression with base 0 overflowed to 0xfffffffffffffc68

[  40.8846852] cpu0: Begin traceback...
[  40.8916466] vpanic() at netbsd:vpanic+0x2aa sys/kern/subr_prf.c:336
[  40.9216967] isAlreadyReported() at netbsd:isAlreadyReported
[  40.9617612] HandlePointerOverflow() at netbsd:HandlePointerOverflow+0xf7 sys/../common/lib/libc/misc/ubsan.c:693
[  40.9918177] sendsig_siginfo() at netbsd:sendsig_siginfo+0x872 sys/arch/amd64/amd64/machdep.c:625
[  41.0218549] sendsig() at netbsd:sendsig+0x116 sys/kern/kern_sig.c:2163
[  41.0519038] trapsignal() at netbsd:trapsignal+0xb11 sys/kern/kern_sig.c:972
[  41.0819522] trap() at netbsd:trap+0x156e sys/arch/amd64/amd64/trap.c:665
[  41.0923241] --- trap (number 6) ---
[  41.0923241] Skipping crash dump on recursive panic
[  41.0923241] panic: UBSan: Undefined Behavior in /syzkaller/managers/netbsd-kubsan/kernel/sys/arch/amd64/amd64/db_machdep.c:153:24, member access within misaligned address 0x3 for type 'struct x86_64_frame' which requires 8 byte alignment

[  41.1223422] Faulted in mid-traceback; aborting...
[  41.1223422] fatal breakpoint trap in supervisor mode
[  41.1321524] trap type 1 code 0 rip 0xffffffff8021e7cd cs 0x8 rflags 0x282 cr2 0x80 ilevel 0 rsp 0xffffb900a5f97690
[  41.1424820] curlwp 0xffffacc9f016a0e0 pid 205.3 lowest kstack 0xffffb900a5f952c0
Stopped in pid 205.3 (syz-executor.0) at        netbsd:breakpoint+0x5:  leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xd1 sys/ddb/db_panic.c:67
vpanic() at netbsd:vpanic+0x2aa sys/kern/subr_prf.c:336
isAlreadyReported() at netbsd:isAlreadyReported
HandleTypeMismatch.part.1() at netbsd:HandleTypeMismatch.part.1+0xcc
HandleTypeMismatch() at netbsd:HandleTypeMismatch+0x7b sys/../common/lib/libc/misc/ubsan.c:408
db_nextframe() at netbsd:db_nextframe+0x6f6 sys/arch/amd64/amd64/db_machdep.c:153
db_stack_trace_print() at netbsd:db_stack_trace_print+0x2c4 sys/arch/x86/x86/db_trace.c:277
db_panic() at netbsd:db_panic+0x8b x86_curcpu sys/arch/amd64/compile/obj/GENERIC_SYZKALLER/./machine/cpu.h:56 [inline]
db_panic() at netbsd:db_panic+0x8b sys/ddb/db_panic.c:57
vpanic() at netbsd:vpanic+0x2aa sys/kern/subr_prf.c:336
isAlreadyReported() at netbsd:isAlreadyReported
HandlePointerOverflow() at netbsd:HandlePointerOverflow+0xf7 sys/../common/lib/libc/misc/ubsan.c:693
sendsig_siginfo() at netbsd:sendsig_siginfo+0x872 sys/arch/amd64/amd64/machdep.c:625
sendsig() at netbsd:sendsig+0x116 sys/kern/kern_sig.c:2163
trapsignal() at netbsd:trapsignal+0xb11 sys/kern/kern_sig.c:972
trap() at netbsd:trap+0x156e sys/arch/amd64/amd64/trap.c:665
--- trap (number 6) ---
[  41.1424820] Skipping crash dump on recursive panic
[  41.1424820] panic: UBSan: Undefined Behavior in /syzkaller/managers/netbsd-kubsan/kernel/sys/arch/amd64/amd64/db_machdep.c:154:14, member access within misaligned address 0x3 for type 'struct x86_64_frame' which requires 8 byte alignment

[  41.1424820] Faulted in mid-traceback; aborting...
[  41.1424820] fatal breakpoint trap in supervisor mode
[  41.1424820] trap type 1 code 0 rip 0xffffffff8021e7cd cs 0x8 rflags 0x282 cr2 0x80 ilevel 0x8 rsp 0xffffb900a5f96390
[  41.1424820] curlwp 0xffffacc9f016a0e0 pid 205.3 lowest kstack 0xffffb900a5f952c0
Stopped in pid 205.3 (syz-executor.0) at        netbsd:breakpoint+0x5:  leave

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/02/06 19:06 netbsd fd34b2d2587c 5be3a391 .config console log report syz ci2-netbsd-kubsan
2020/02/06 18:52 netbsd fd34b2d2587c 5be3a391 .config console log report ci2-netbsd-kubsan
2019/12/22 00:09 netbsd efc5c488c777 bc586918 .config console log report ci2-netbsd-kubsan
* Struck through repros no longer work on HEAD.