syzbot


assert failed: uvm_page_locked_p(pg) (2)

Status: closed as dup on 2019/08/03 15:40
Reported-by: syzbot+847d7ffda52780fd4327@syzkaller.appspotmail.com
First crash: 1748d, last: 1546d
Duplicate of
Title Repro Cause bisect Fix bisect Count Last Reported
assert failed: uvm_page_locked_p(old_pg) C 232 1555d 1752d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
netbsd assert failed: uvm_page_locked_p(pg) C 44 1748d 1759d 1/3 fixed on 2019/07/12 15:19

Sample crash report:
[  45.0506798] panic: kernel diagnostic assertion "uvm_page_locked_p(pg)" failed: file "/syzkaller/managers/netbsd-kubsan/kernel/sys/arch/x86/x86/pmap.c", line 3533 
[  45.0688254] cpu0: Begin traceback...
[  45.0807223] vpanic() at netbsd:vpanic+0x2aa sys/kern/subr_prf.c:336
[  45.1207902] kern_assert() at netbsd:kern_assert+0x63
[  45.1608590] pmap_remove_pte() at netbsd:pmap_remove_pte+0x408 pmap_remove_pte sys/arch/x86/x86/pmap.c:3533 [inline]
[  45.1608590] pmap_remove_pte() at netbsd:pmap_remove_pte+0x408 sys/arch/x86/x86/pmap.c:3480
[  45.2009462] pmap_remove() at netbsd:pmap_remove+0x239 pmap_remove_ptes sys/arch/x86/x86/pmap.c:3439 [inline]
[  45.2009462] pmap_remove() at netbsd:pmap_remove+0x239 sys/arch/x86/x86/pmap.c:3641
[  45.2410015] uvm_unmap_remove() at netbsd:uvm_unmap_remove+0x7be sys/uvm/uvm_map.c:2317
[  45.2810711] uvmspace_free() at netbsd:uvmspace_free+0x2e8 sys/uvm/uvm_map.c:4301
[  45.3211455] uvm_proc_exit() at netbsd:uvm_proc_exit+0xf6 sys/uvm/uvm_glue.c:443
[  45.3612120] exit1() at netbsd:exit1+0x4cb sys/kern/kern_exit.c:333
[  45.3912644] sys_exit() at netbsd:sys_exit+0xba sys/kern/kern_exit.c:179
[  45.4413549] syscall() at netbsd:syscall+0x29a sy_call sys/sys/syscallvar.h:65 [inline]
[  45.4413549] syscall() at netbsd:syscall+0x29a sy_invoke sys/sys/syscallvar.h:94 [inline]
[  45.4413549] syscall() at netbsd:syscall+0x29a sys/arch/x86/x86/syscall.c:138
[  45.4513690] --- syscall (number 1) ---
[  45.4513690] Skipping crash dump on recursive panic
[  45.4634775] panic: UBSan: Undefined Behavior in /syzkaller/managers/netbsd-kubsan/kernel/sys/arch/amd64/amd64/db_machdep.c:153:24, member access within misaligned address 0xffffffff for type 'struct x86_64_frame' which requires 8 byte alignment

[  45.4850843] Faulted in mid-traceback; aborting...
[  45.4850843] fatal breakpoint trap in supervisor mode
[  45.4930645] trap type 1 code 0 rip 0xffffffff8021e7cd cs 0x8 rflags 0x286 cr2 0x76cc7961e9e5 ilevel 0 rsp 0xffff8c80b2001da0
[  45.5060855] curlwp 0xffffaea1b60060a0 pid 73.1 lowest kstack 0xffff8c80b1fff2c0
Stopped in pid 73.1 (syz-executor.2) at netbsd:breakpoint+0x5:  leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xd1 sys/ddb/db_panic.c:67
vpanic() at netbsd:vpanic+0x2aa sys/kern/subr_prf.c:336
isAlreadyReported() at netbsd:isAlreadyReported
HandleTypeMismatch.part.1() at netbsd:HandleTypeMismatch.part.1+0xcc
HandleTypeMismatch() at netbsd:HandleTypeMismatch+0x7b sys/../common/lib/libc/misc/ubsan.c:408
db_nextframe() at netbsd:db_nextframe+0x6f6 sys/arch/amd64/amd64/db_machdep.c:153
db_stack_trace_print() at netbsd:db_stack_trace_print+0x2c4 sys/arch/x86/x86/db_trace.c:277
db_panic() at netbsd:db_panic+0x8b x86_curcpu sys/arch/amd64/compile/obj/GENERIC_SYZKALLER/./machine/cpu.h:56 [inline]
db_panic() at netbsd:db_panic+0x8b sys/ddb/db_panic.c:57
vpanic() at netbsd:vpanic+0x2aa sys/kern/subr_prf.c:336
kern_assert() at netbsd:kern_assert+0x63
pmap_remove_pte() at netbsd:pmap_remove_pte+0x408 pmap_remove_pte sys/arch/x86/x86/pmap.c:3533 [inline]
pmap_remove_pte() at netbsd:pmap_remove_pte+0x408 sys/arch/x86/x86/pmap.c:3480
pmap_remove() at netbsd:pmap_remove+0x239 pmap_remove_ptes sys/arch/x86/x86/pmap.c:3439 [inline]
pmap_remove() at netbsd:pmap_remove+0x239 sys/arch/x86/x86/pmap.c:3641
uvm_unmap_remove() at netbsd:uvm_unmap_remove+0x7be sys/uvm/uvm_map.c:2317
uvmspace_free() at netbsd:uvmspace_free+0x2e8 sys/uvm/uvm_map.c:4301
uvm_proc_exit() at netbsd:uvm_proc_exit+0xf6 sys/uvm/uvm_glue.c:443
exit1() at netbsd:exit1+0x4cb sys/kern/kern_exit.c:333
sys_exit() at netbsd:sys_exit+0xba sys/kern/kern_exit.c:179
syscall() at netbsd:syscall+0x29a sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x29a sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x29a sys/arch/x86/x86/syscall.c:138
--- syscall (number 1) ---
[  45.5133764] Skipping crash dump on recursive panic
[  45.5133764] panic: UBSan: Undefined Behavior in /syzkaller/managers/netbsd-kubsan/kernel/sys/arch/amd64/amd64/db_machdep.c:154:14, member access within misaligned address 0xffffffff for type 'struct x86_64_frame' which requires 8 byte alignment

[  45.5133764] Faulted in mid-traceback; aborting...
[  45.5133764] fatal breakpoint trap in supervisor mode
[  45.5133764] trap type 1 code 0 rip 0xffffffff8021e7cd cs 0x8 rflags 0x286 cr2 0x76cc7961e9e5 ilevel 0x8 rsp 0xffff8c80b2000aa0
[  45.5133764] curlwp 0xffffaea1b60060a0 pid 73.1 lowest kstack 0xffff8c80b1fff2c0
Stopped in pid 73.1 (syz-executor.2) at netbsd:breakpoint+0x5:  leave

Crashes (235):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/01/30 18:27 netbsd fd34b2d2587c 5ed23f9a .config console log report ci2-netbsd-kubsan
2020/01/24 20:34 netbsd fd34b2d2587c 2e95ab33 .config console log report ci2-netbsd-kubsan
2020/01/24 10:24 netbsd fd34b2d2587c 2e95ab33 .config console log report ci2-netbsd-kubsan
2020/01/22 14:28 netbsd fd34b2d2587c 8eda0b95 .config console log report ci2-netbsd-kubsan
2020/01/20 22:50 netbsd fd34b2d2587c 8eda0b95 .config console log report ci2-netbsd-kubsan
2020/01/11 06:47 netbsd fd34b2d2587c 4c04afaa .config console log report ci2-netbsd-kubsan
2019/12/31 18:42 netbsd fd34b2d2587c 25a0186e .config console log report ci2-netbsd-kubsan
2019/12/30 21:34 netbsd 978dd95f817d 6b36d338 .config console log report ci2-netbsd
2019/12/22 14:56 netbsd add389a76b89 8b967267 .config console log report ci2-netbsd
2019/12/21 21:50 netbsd efc5c488c777 bc586918 .config console log report ci2-netbsd
2019/12/18 14:58 netbsd ed8c5b436716 64ca0a37 .config console log report ci2-netbsd-kubsan
2019/12/18 05:31 netbsd ed8c5b436716 64ca0a37 .config console log report ci2-netbsd
2019/12/16 23:26 netbsd 70e2ddde644c 0ae38e44 .config console log report ci2-netbsd-kubsan
2019/12/15 12:37 netbsd cdbef540f612 eef6e580 .config console log report ci2-netbsd
2019/12/14 21:07 netbsd cae2e291e7cc eef6e580 .config console log report ci2-netbsd-kubsan
2019/12/10 01:56 netbsd 53e3dce9545d b31eda3d .config console log report ci2-netbsd-kubsan
2019/12/06 06:54 netbsd b617cb6c886b 98b4ef2d .config console log report ci2-netbsd-kubsan
2019/12/05 19:59 netbsd 19d192ead99b 9fd5a512 .config console log report ci2-netbsd-kubsan
2019/12/05 18:50 netbsd 19d192ead99b 9fd5a512 .config console log report ci2-netbsd
2019/12/05 10:23 netbsd b410fad480ae b2088328 .config console log report ci2-netbsd-kubsan
2019/12/05 06:20 netbsd b410fad480ae b2088328 .config console log report ci2-netbsd-kubsan
2019/12/05 01:18 netbsd f5499760069e b2088328 .config console log report ci2-netbsd
2019/12/04 05:33 netbsd 9720c64e8643 0ecb9746 .config console log report ci2-netbsd-kubsan
2019/12/04 04:20 netbsd 9720c64e8643 0ecb9746 .config console log report ci2-netbsd
2019/12/04 02:57 netbsd 9720c64e8643 0ecb9746 .config console log report ci2-netbsd
2019/12/02 16:39 netbsd 2ae3e939786f f879db37 .config console log report ci2-netbsd-kubsan
2019/12/02 14:02 netbsd 2ae3e939786f f879db37 .config console log report ci2-netbsd
2019/12/02 10:02 netbsd 2ae3e939786f f879db37 .config console log report ci2-netbsd
2019/12/02 08:52 netbsd 2ae3e939786f f879db37 .config console log report ci2-netbsd
2019/12/02 04:24 netbsd 2ae3e939786f f879db37 .config console log report ci2-netbsd
2019/12/02 00:07 netbsd 2ae3e939786f f879db37 .config console log report ci2-netbsd
2019/12/01 22:32 netbsd 2ae3e939786f f879db37 .config console log report ci2-netbsd
2019/12/01 21:23 netbsd 2ae3e939786f f879db37 .config console log report ci2-netbsd
2019/12/01 15:20 netbsd 2ae3e939786f a76bf83f .config console log report ci2-netbsd
2019/12/01 06:29 netbsd 725671df253c a76bf83f .config console log report ci2-netbsd
2019/12/01 03:33 netbsd 725671df253c a76bf83f .config console log report ci2-netbsd-kubsan
2019/11/30 23:28 netbsd 725671df253c a76bf83f .config console log report ci2-netbsd
2019/11/30 18:46 netbsd 67f70f1d08aa 3a75be00 .config console log report ci2-netbsd
2019/11/30 09:21 netbsd 67f70f1d08aa 3a75be00 .config console log report ci2-netbsd
2019/11/30 05:04 netbsd 67f70f1d08aa 3a75be00 .config console log report ci2-netbsd
2019/11/29 22:21 netbsd 67f70f1d08aa 4f7e1d0f .config console log report ci2-netbsd-kubsan
2019/11/29 15:32 netbsd 67f70f1d08aa 4f7e1d0f .config console log report ci2-netbsd
2019/11/29 11:40 netbsd 67f70f1d08aa 4f7e1d0f .config console log report ci2-netbsd
2019/11/29 02:20 netbsd 67964b7d49b3 76357d6f .config console log report ci2-netbsd
2019/11/28 23:42 netbsd 67964b7d49b3 76357d6f .config console log report ci2-netbsd
2019/11/28 20:24 netbsd 67964b7d49b3 97264cb1 .config console log report ci2-netbsd
2019/07/13 03:41 netbsd 9c2c94baea93 baa5258a console log report ci2-netbsd
* Struck through repros no longer work on HEAD.