syzbot


netbsd boot error: panic: UBSan: Undefined Behavior in /syzkaller/managers/netbsd-kubsan/kernel/sys/arch/x86/x86/intr.c:LINE, member access

Status: fixed on 2020/05/05 09:23
Reported-by: syzbot+f1e1561ed739db869d44@syzkaller.appspotmail.com
Fix commit: 37beba86ee63 Explicitly align to 8 bytes, found by kUBSan.
First crash: 1449d, last: 1447d

Sample crash report:
[   1.0000030] panic: UBSan: Undefined Behavior in /syzkaller/managers/netbsd-kubsan/kernel/sys/arch/x86/x86/intr.c:739:28, member access within misaligned address 0xffffffff83801d1d for type 'struct intrstub' which requires 8 byte alignment

[   1.0000030] cpu0: Begin traceback...
[   1.0000030] vpanic() at netbsd:vpanic+0x2af sys/kern/subr_prf.c:290
[   1.0000030] isAlreadyReported() at netbsd:isAlreadyReported
[   1.0000030] HandleTypeMismatch.part.1() at netbsd:HandleTypeMismatch.part.1+0xcc
[   1.0000030] HandleTypeMismatch() at netbsd:HandleTypeMismatch+0x7b sys/../common/lib/libc/misc/ubsan.c:417
[   1.0000030] intr_establish_xcall() at netbsd:intr_establish_xcall+0x5a6 sys/arch/x86/x86/intr.c:739
[   1.0000030] intr_establish_xname() at netbsd:intr_establish_xname+0x849 sys/arch/x86/x86/intr.c:912
[   1.0000030] acpi_md_intr_establish() at netbsd:acpi_md_intr_establish+0x509 sys/arch/x86/acpi/acpi_machdep.c:343
[   1.0000030] acpi_md_OsInstallInterruptHandler() at netbsd:acpi_md_OsInstallInterruptHandler+0x44 sys/arch/x86/acpi/acpi_machdep.c:215
[   1.0000030] AcpiOsInstallInterruptHandler_xname.part.0() at netbsd:AcpiOsInstallInterruptHandler_xname.part.0+0xb2
[   1.0000030] AcpiOsInstallInterruptHandler() at netbsd:AcpiOsInstallInterruptHandler+0x48 AcpiOsInstallInterruptHandler_xname sys/dev/acpi/acpica/OsdInterrupt.c:102 [inline]
[   1.0000030] AcpiOsInstallInterruptHandler() at netbsd:AcpiOsInstallInterruptHandler+0x48 sys/dev/acpi/acpica/OsdInterrupt.c:89
[   1.0000030] AcpiEvInstallXruptHandlers() at netbsd:AcpiEvInstallXruptHandlers+0x31 sys/external/bsd/acpica/dist/events/evevent.c:149
[   1.0000030] AcpiEnableSubsystem() at netbsd:AcpiEnableSubsystem+0xf5 sys/external/bsd/acpica/dist/utilities/utxfinit.c:238
[   1.0000030] acpi_attach() at netbsd:acpi_attach+0x344 sys/dev/acpi/acpi.c:481
[   1.0000030] config_attach_loc() at netbsd:config_attach_loc+0x42b sys/kern/subr_autoconf.c:1629
[   1.0000030] config_found_sm_loc() at netbsd:config_found_sm_loc+0x62 sys/kern/subr_autoconf.c:1123
[   1.0000030] amd64_mainbus_attach() at netbsd:amd64_mainbus_attach+0x214 sys/arch/amd64/amd64/amd64_mainbus.c:182
[   1.0000030] mainbus_attach() at netbsd:mainbus_attach+0xc5 sys/arch/x86/x86/mainbus.c:244
[   1.0000030] config_attach_loc() at netbsd:config_attach_loc+0x42b sys/kern/subr_autoconf.c:1629
[   1.0000030] config_rootfound() at netbsd:config_rootfound+0x44 config_attach sys/kern/subr_autoconf.c:1644 [inline]
[   1.0000030] config_rootfound() at netbsd:config_rootfound+0x44 sys/kern/subr_autoconf.c:1165
[   1.0000030] cpu_configure() at netbsd:cpu_configure+0x33 sys/arch/amd64/amd64/autoconf.c:105
[   1.0000030] main() at netbsd:main+0x39d sys/kern/init_main.c:532
[   1.0000030] cpu0: End traceback...
[   1.0000030] fatal breakpoint trap in supervisor mode
[   1.0000030] trap type 1 code 0 rip 0xffffffff802219fd cs 0x8 rflags 0x2 cr2 0 ilevel 0x8 rsp 0xffffffff8626a2c0
[   1.0000030] curlwp 0xffffffff85aea840 pid 0.0 lowest kstack 0xffffffff862662c0
Stopped in pid 0.0 (system) at  netbsd:breakpoint+0x5:  leave
db{0}> 

Crashes (15):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/05/02 23:01 netbsd d2addc28cf77 5457883a .config console log report ci2-netbsd-kubsan
2020/05/02 23:01 netbsd d2addc28cf77 5457883a .config console log report ci2-netbsd-kubsan
2020/05/02 23:01 netbsd d2addc28cf77 5457883a .config console log report ci2-netbsd-kubsan
2020/05/02 11:43 netbsd d2addc28cf77 58da4c35 .config console log report ci2-netbsd-kubsan
2020/05/02 11:43 netbsd d2addc28cf77 58da4c35 .config console log report ci2-netbsd-kubsan
2020/05/02 11:43 netbsd d2addc28cf77 58da4c35 .config console log report ci2-netbsd-kubsan
2020/05/01 22:10 netbsd d2addc28cf77 bc734e7a .config console log report ci2-netbsd-kubsan
2020/05/01 22:10 netbsd d2addc28cf77 bc734e7a .config console log report ci2-netbsd-kubsan
2020/05/01 22:10 netbsd d2addc28cf77 bc734e7a .config console log report ci2-netbsd-kubsan
2020/05/01 09:24 netbsd d2addc28cf77 143a10e9 .config console log report ci2-netbsd-kubsan
2020/05/01 09:24 netbsd d2addc28cf77 143a10e9 .config console log report ci2-netbsd-kubsan
2020/05/01 09:24 netbsd d2addc28cf77 143a10e9 .config console log report ci2-netbsd-kubsan
2020/04/30 22:31 netbsd d2addc28cf77 3698959a .config console log report ci2-netbsd-kubsan
2020/04/30 22:31 netbsd d2addc28cf77 3698959a .config console log report ci2-netbsd-kubsan
2020/04/30 22:31 netbsd d2addc28cf77 3698959a .config console log report ci2-netbsd-kubsan
* Struck through repros no longer work on HEAD.