syzbot

 sign-in | mailing list | source | docs
🐞 Open [197]
🐞 Fixed [376]
🐞 Invalid [1339]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

assert failed: !topdown || hint <= orig_hint

Status: fixed on 2022/11/25 01:44
Reported-by: syzbot+3833ae1d38037a263d05@syzkaller.appspotmail.com
Fix commit: 4d78161c33fb mmap(2): Avoid arithmetic overflow in search for free space.
First crash: 934d, last: 762d
▶ ▼ Duplicate bugs (1)
duplicates (1):
Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
panic: l diagnostic assertion "!topdown || hint <= orig_hint" failed: file "/syzkaller/managers/ci2-netbsd-kmsan/kernel/ 1 879d 879d 0/3 closed as dup on 2022/08/01 14:01
▶ ▼ Last patch testing requests (1)
Created Duration User Patch Repo Result
2022/11/22 14:42 21m riastradh@netbsd.org patch https://github.com/NetBSD/src trunk OK log

Sample crash report:
[  36.9178408] panic: kernel diagnostic assertion "!topdown || hint <= orig_hint" failed: file "/syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/uvm/uvm_map.c", line 1795 map=0xffff818fe6a9a458 hint=0xffffffffff002000 orig_hint=0x20ffe000 length=0x20ffe000 uobj=0x0 uoffset=0xffffffffffffffff align=0 flags=0x80010 entry=0xffff818ff1ee8a00 (uvm_map_findspace line 1998)
[  36.9300092] cpu0: Begin traceback...
[  36.9478215] vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293
[  37.0178223] kern_assert() at netbsd:kern_assert+0x65 sys/arch/amd64/amd64/db_disasm.c:1074
[  37.0778241] uvm_findspace_invariants() at netbsd:uvm_findspace_invariants+0x134 sys/uvm/uvm_map.c:1795
[  37.1378217] uvm_map_findspace() at netbsd:uvm_map_findspace+0x3f4 sys/uvm/uvm_map.c:1999
[  37.1878235] uvm_map_prepare() at netbsd:uvm_map_prepare+0x586 sys/uvm/uvm_map.c:1181
[  37.2378220] uvm_map() at netbsd:uvm_map+0xd4 sys/uvm/uvm_map.c:1089
[  37.2878255] uvm_mmap.part.0() at netbsd:uvm_mmap.part.0+0x3b0
[  37.3378232] sys_mmap() at netbsd:sys_mmap+0x9e8 uvm_mmap sys/uvm/uvm_mmap.c:425 [inline]
[  37.3378232] sys_mmap() at netbsd:sys_mmap+0x9e8 sys/uvm/uvm_mmap.c:425
[  37.3878225] compat_43_sys_mmap() at netbsd:compat_43_sys_mmap+0x24a sys/compat/common/vm_43.c:150
[  37.4378216] sys_syscall() at netbsd:sys_syscall+0x1e4 sy_call sys/sys/syscallvar.h:65 [inline]
[  37.4378216] sys_syscall() at netbsd:sys_syscall+0x1e4 sys/kern/sys_syscall.c:90
[  37.4978222] syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline]
[  37.4978222] syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline]
[  37.4978222] syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138
[  37.5078210] --- syscall (number 71 via SYS_syscall) ---
[  37.5278212] netbsd:syscall+0x2da:
[  37.5278212] cpu0: End traceback...
[  37.5278212] fatal breakpoint trap in supervisor mode
[  37.5391546] trap type 1 code 0 rip 0xffffffff80221ab5 cs 0x8 rflags 0x246 cr2 0xffff8680c83b7000 ilevel 0 rsp 0xffff8680c83d49a0
[  37.5524986] curlwp 0xffff818ff094c580 pid 1220.1220 lowest kstack 0xffff8680c83d02c0
[  37.5602165] Skipping crash dump on recursive panic
[  37.5602165] panic: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/dev/wsfb/genfb.c:988:28, member access within null pointer of type 'struct genfb_private'

[  37.5602165] cpu0: Begin traceback...
[  37.5602165] vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293
[  37.5602165] Report() at netbsd:Report+0x3b sys/../common/lib/libc/misc/ubsan.c:1352
[  37.5602165] HandleTypeMismatch() at netbsd:HandleTypeMismatch+0x1fb sys/../common/lib/libc/misc/ubsan.c:429
[  37.5602165] genfb_enable_polling() at netbsd:genfb_enable_polling+0x17e sys/dev/wsfb/genfb.c:988
[  37.5602165] x86_genfb_ddb_trap_callback() at netbsd:x86_genfb_ddb_trap_callback+0x39 sys/arch/x86/x86/genfb_machdep.c:97
[  37.5602165] db_trap() at netbsd:db_trap+0x68 sys/ddb/db_trap.c:73
[  37.5602165] kdb_trap() at netbsd:kdb_trap+0x1aa sys/arch/amd64/amd64/db_interface.c:251
[  37.5602165] trap() at netbsd:trap+0x5b2 sys/arch/amd64/amd64/trap.c:315
[  37.5602165] --- trap (number 1) ---
[  37.5602165] breakpoint() at netbsd:breakpoint+0x5
[  37.5602165] db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:69
[  37.5602165] vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293
[  37.5602165] kern_assert() at netbsd:kern_assert+0x65 sys/arch/amd64/amd64/db_disasm.c:1074
[  37.5602165] uvm_findspace_invariants() at netbsd:uvm_findspace_invariants+0x134 sys/uvm/uvm_map.c:1795
[  37.5602165] uvm_map_findspace() at netbsd:uvm_map_findspace+0x3f4 sys/uvm/uvm_map.c:1999
[  37.5602165] uvm_map_prepare() at netbsd:uvm_map_prepare+0x586 sys/uvm/uvm_map.c:1181
[  37.5602165] uvm_map() at netbsd:uvm_map+0xd4 sys/uvm/uvm_map.c:1089
[  37.5602165] uvm_mmap.part.0() at netbsd:uvm_mmap.part.0+0x3b0
[  37.5602165] sys_mmap() at netbsd:sys_mmap+0x9e8 uvm_mmap sys/uvm/uvm_mmap.c:425 [inline]
[  37.5602165] sys_mmap() at netbsd:sys_mmap+0x9e8 sys/uvm/uvm_mmap.c:425
[  37.5602165] compat_43_sys_mmap() at netbsd:compat_43_sys_mmap+0x24a sys/compat/common/vm_43.c:150
[  37.5602165] sys_syscall() at netbsd:sys_syscall+0x1e4 sy_call sys/sys/syscallvar.h:65 [inline]
[  37.5602165] sys_syscall() at netbsd:sys_syscall+0x1e4 sys/kern/sys_syscall.c:90
[  37.5602165] syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline]
[  37.5602165] syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline]
[  37.5602165] syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138
[  37.5602165] --- syscall (number 71 via SYS_syscall) ---
[  37.5602165] netbsd:syscall+0x2da:
[  37.5602165] cpu0: End traceback...
[  37.5602165] fatal breakpoint trap in supervisor mode
[  37.5602165] trap type 1 code 0 rip 0xffffffff80221ab5 cs 0x8 rflags 0x246 cr2 0xffff8680c83b7000 ilevel 0x8 rsp 0xffff8680c83d4070
[  37.5602165] curlwp 0xffff818ff094c580 pid 1220.1220 lowest kstack 0xffff8680c83d02c0

Crashes (474):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/07/30 13:48 netbsd 94e40a0fa623 fef302b1 .config console log report syz C ci2-netbsd-kubsan assert failed: !topdown || hint <= orig_hint
2022/07/30 13:48 netbsd 94e40a0fa623 fef302b1 .config console log report syz C ci2-netbsd assert failed: !topdown || hint <= orig_hint
2022/07/30 13:31 netbsd 94e40a0fa623 fef302b1 .config console log report syz C ci2-netbsd-kmsan assert failed: !topdown || hint <= orig_hint
2022/06/05 19:23 netbsd 79745337cd5b c8857892 .config console log report syz C ci2-netbsd assert failed: !topdown || hint <= orig_hint
2022/06/05 19:20 netbsd 79745337cd5b c8857892 .config console log report syz C ci2-netbsd-kmsan assert failed: !topdown || hint <= orig_hint
2022/06/05 19:11 netbsd 79745337cd5b c8857892 .config console log report syz C ci2-netbsd-kmsan assert failed: !topdown || hint <= orig_hint
2022/06/05 18:58 netbsd 79745337cd5b c8857892 .config console log report syz C ci2-netbsd-kmsan assert failed: !topdown || hint <= orig_hint
2022/06/05 18:46 netbsd 79745337cd5b c8857892 .config console log report syz C ci2-netbsd-kubsan assert failed: !topdown || hint <= orig_hint
2022/06/05 18:43 netbsd 79745337cd5b c8857892 .config console log report syz C ci2-netbsd assert failed: !topdown || hint <= orig_hint
2022/06/05 18:30 netbsd 79745337cd5b c8857892 .config console log report syz C ci2-netbsd assert failed: !topdown || hint <= orig_hint
2022/06/05 18:23 netbsd 79745337cd5b c8857892 .config console log report syz C ci2-netbsd-kubsan assert failed: !topdown || hint <= orig_hint
2022/11/24 20:37 netbsd 906ee7c6149c ff68ff8f .config console log report ci2-netbsd assert failed: !topdown || hint <= orig_hint
2022/11/23 14:51 netbsd 44f82ff59f06 52fdf57a .config console log report ci2-netbsd assert failed: !topdown || hint <= orig_hint
2022/11/23 13:06 netbsd 44f82ff59f06 52fdf57a .config console log report ci2-netbsd assert failed: !topdown || hint <= orig_hint
2022/11/23 00:31 netbsd 44f82ff59f06 9da37ae8 .config console log report ci2-netbsd-kubsan assert failed: !topdown || hint <= orig_hint
2022/11/22 10:18 netbsd 44f82ff59f06 1c576c23 .config console log report ci2-netbsd assert failed: !topdown || hint <= orig_hint
2022/11/22 00:07 netbsd 44f82ff59f06 1c576c23 .config console log report ci2-netbsd-kmsan assert failed: !topdown || hint <= orig_hint
2022/11/21 20:31 netbsd 44f82ff59f06 1c576c23 .config console log report ci2-netbsd-kmsan assert failed: !topdown || hint <= orig_hint
2022/11/21 03:44 netbsd 44f82ff59f06 5bb70014 .config console log report ci2-netbsd assert failed: !topdown || hint <= orig_hint
2022/11/19 16:56 netbsd 44f82ff59f06 5bb70014 .config console log report ci2-netbsd assert failed: !topdown || hint <= orig_hint
2022/11/19 11:13 netbsd 44f82ff59f06 5bb70014 .config console log report [disk image] [netbsd.gdb] ci2-netbsd-kmsan assert failed: !topdown || hint <= orig_hint
2022/11/19 04:07 netbsd 44f82ff59f06 5bb70014 .config console log report ci2-netbsd assert failed: !topdown || hint <= orig_hint
2022/11/17 12:47 netbsd 51dc07ec94dd 3a127a31 .config console log report ci2-netbsd-kmsan assert failed: !topdown || hint <= orig_hint
2022/11/17 08:10 netbsd 51dc07ec94dd 3a127a31 .config console log report ci2-netbsd-kubsan assert failed: !topdown || hint <= orig_hint
2022/11/17 01:40 netbsd e234b948ff02 3a127a31 .config console log report [disk image] [netbsd.gdb] ci2-netbsd-kmsan assert failed: !topdown || hint <= orig_hint
2022/11/16 19:07 netbsd e234b948ff02 3a127a31 .config console log report [disk image] [netbsd.gdb] ci2-netbsd-kmsan assert failed: !topdown || hint <= orig_hint
2022/11/16 07:50 netbsd 996806fb1939 3a127a31 .config console log report ci2-netbsd-kmsan assert failed: !topdown || hint <= orig_hint
2022/11/16 04:50 netbsd 996806fb1939 3a127a31 .config console log report ci2-netbsd-kmsan assert failed: !topdown || hint <= orig_hint
2022/11/15 08:26 netbsd 12447a03d4d8 97de9cfc .config console log report [disk image] [netbsd.gdb] ci2-netbsd-kmsan assert failed: !topdown || hint <= orig_hint
2022/11/14 13:37 netbsd 1a1fa11b0731 943f4cb8 .config console log report ci2-netbsd-kmsan assert failed: !topdown || hint <= orig_hint
2022/11/13 22:56 netbsd 5fc343d0d60e 7ba4d859 .config console log report ci2-netbsd-kmsan assert failed: !topdown || hint <= orig_hint
2022/11/13 13:22 netbsd 750965886b9b f42ee5d8 .config console log report ci2-netbsd-kmsan assert failed: !topdown || hint <= orig_hint
2022/11/13 10:41 netbsd 750965886b9b f42ee5d8 .config console log report ci2-netbsd-kmsan assert failed: !topdown || hint <= orig_hint
2022/11/12 01:46 netbsd 55d8ee0bbff7 f42ee5d8 .config console log report ci2-netbsd-kmsan assert failed: !topdown || hint <= orig_hint
2022/11/11 22:40 netbsd 55d8ee0bbff7 f42ee5d8 .config console log report ci2-netbsd-kmsan assert failed: !topdown || hint <= orig_hint
2022/11/11 21:22 netbsd 55d8ee0bbff7 f42ee5d8 .config console log report ci2-netbsd-kmsan assert failed: !topdown || hint <= orig_hint
2022/11/11 19:31 netbsd 55d8ee0bbff7 f42ee5d8 .config console log report ci2-netbsd-kmsan assert failed: !topdown || hint <= orig_hint
2022/11/11 13:12 netbsd a14660ac22b5 f42ee5d8 .config console log report [disk image] [netbsd.gdb] ci2-netbsd-kmsan assert failed: !topdown || hint <= orig_hint
2022/11/11 11:04 netbsd a14660ac22b5 f42ee5d8 .config console log report ci2-netbsd assert failed: !topdown || hint <= orig_hint
2022/11/11 06:54 netbsd a14660ac22b5 f42ee5d8 .config console log report [disk image] [netbsd.gdb] ci2-netbsd-kmsan assert failed: !topdown || hint <= orig_hint
2022/11/10 10:06 netbsd c9c05b705dee b2488a87 .config console log report ci2-netbsd assert failed: !topdown || hint <= orig_hint
2022/11/09 12:57 netbsd 0ed3461d79f2 5fa28208 .config console log report ci2-netbsd-kmsan assert failed: !topdown || hint <= orig_hint
2022/11/09 05:32 netbsd 0ed3461d79f2 5fa28208 .config console log report ci2-netbsd assert failed: !topdown || hint <= orig_hint
2022/11/08 17:48 netbsd 630674080360 060f945e .config console log report [disk image] [netbsd.gdb] ci2-netbsd assert failed: !topdown || hint <= orig_hint
2022/11/08 14:19 netbsd 630674080360 060f945e .config console log report ci2-netbsd-kmsan assert failed: !topdown || hint <= orig_hint
2022/11/08 10:48 netbsd b43fdafab841 6feb842b .config console log report ci2-netbsd-kmsan assert failed: !topdown || hint <= orig_hint
2022/11/08 07:34 netbsd b43fdafab841 6feb842b .config console log report ci2-netbsd-kubsan assert failed: !topdown || hint <= orig_hint
2022/11/07 14:12 netbsd c79a9c633cb4 a779b11a .config console log report ci2-netbsd assert failed: !topdown || hint <= orig_hint
2022/11/06 22:53 netbsd 52e9c1428cf3 6d752409 .config console log report [disk image] [netbsd.gdb] ci2-netbsd assert failed: !topdown || hint <= orig_hint
2022/11/05 21:55 netbsd 6484656ffebb 6d752409 .config console log report ci2-netbsd assert failed: !topdown || hint <= orig_hint
2022/11/05 05:06 netbsd eeb87362659b 6d752409 .config console log report [disk image] [netbsd.gdb] ci2-netbsd-kubsan assert failed: !topdown || hint <= orig_hint
2022/11/04 17:56 netbsd 20b0d5919d8e 6d752409 .config console log report ci2-netbsd assert failed: !topdown || hint <= orig_hint
2022/11/04 12:51 netbsd 20b0d5919d8e 6d752409 .config console log report ci2-netbsd-kubsan assert failed: !topdown || hint <= orig_hint
2022/11/04 02:09 netbsd a4c87ba1c020 6d752409 .config console log report [disk image] [netbsd.gdb] ci2-netbsd assert failed: !topdown || hint <= orig_hint
2022/11/04 00:55 netbsd a4c87ba1c020 6d752409 .config console log report [disk image] [netbsd.gdb] ci2-netbsd assert failed: !topdown || hint <= orig_hint
2022/11/02 20:44 netbsd ad5f04fb07f6 08977f5d .config console log report [disk image] [netbsd.gdb] ci2-netbsd assert failed: !topdown || hint <= orig_hint
2022/11/02 14:46 netbsd d4c9987c965e 08977f5d .config console log report ci2-netbsd-kubsan assert failed: !topdown || hint <= orig_hint
2022/11/02 11:36 netbsd d4c9987c965e 08977f5d .config console log report ci2-netbsd-kmsan assert failed: !topdown || hint <= orig_hint
2022/11/02 07:36 netbsd d4c9987c965e 08977f5d .config console log report ci2-netbsd assert failed: !topdown || hint <= orig_hint
2022/11/02 00:15 netbsd d4c9987c965e 08977f5d .config console log report ci2-netbsd-kmsan assert failed: !topdown || hint <= orig_hint
2022/11/01 02:24 netbsd adc7b5ab56de a1d8560a .config console log report [disk image] [netbsd.gdb] ci2-netbsd-kmsan assert failed: !topdown || hint <= orig_hint
2022/10/30 20:01 netbsd b0421b4f4eba 2a71366b .config console log report [disk image] [netbsd.gdb] ci2-netbsd-kubsan assert failed: !topdown || hint <= orig_hint
2022/10/30 18:38 netbsd b0421b4f4eba 2a71366b .config console log report [disk image] [netbsd.gdb] ci2-netbsd assert failed: !topdown || hint <= orig_hint
2022/10/29 16:59 netbsd b0421b4f4eba 2a71366b .config console log report [disk image] [netbsd.gdb] ci2-netbsd-kubsan assert failed: !topdown || hint <= orig_hint
2022/10/28 05:55 netbsd 31be938365c2 5c716ff6 .config console log report [disk image] [netbsd.gdb] ci2-netbsd-kubsan assert failed: !topdown || hint <= orig_hint
2022/06/05 17:40 netbsd 79745337cd5b c8857892 .config console log report ci2-netbsd-kmsan assert failed: !topdown || hint <= orig_hint
* Struck through repros no longer work on HEAD.