[ 61.0237130] panic: kernel diagnostic assertion "uvm_page_locked_p(old_pg)" failed: file "/syzkaller/managers/netbsd-kubsan/kernel/sys/arch/x86/x86/pmap.c", line 4353 [ 61.0437312] cpu1: Begin traceback... [ 61.0637671] vpanic() at netbsd:vpanic+0x2aa sys/kern/subr_prf.c:336 [ 61.1238712] kern_assert() at netbsd:kern_assert+0x63 [ 61.1839736] pmap_enter_ma() at netbsd:pmap_enter_ma+0x1f10 sys/arch/x86/x86/pmap.c:4353 [ 61.2440773] pmap_enter_default() at netbsd:pmap_enter_default+0x7a sys/arch/x86/x86/pmap.c:4170 [ 61.3142011] uvm_fault_lower_enter() at netbsd:uvm_fault_lower_enter+0x283 sys/uvm/uvm_fault.c:2271 [ 61.3743043] uvm_fault_internal() at netbsd:uvm_fault_internal+0x2a32 uvm_fault_lower_promote sys/uvm/uvm_fault.c:2229 [inline] [ 61.3743043] uvm_fault_internal() at netbsd:uvm_fault_internal+0x2a32 uvm_fault_lower sys/uvm/uvm_fault.c:1771 [inline] [ 61.3743043] uvm_fault_internal() at netbsd:uvm_fault_internal+0x2a32 sys/uvm/uvm_fault.c:923 [ 61.4444202] trap() at Mutex error:ne tmbsudte:txr_vape+c0xt1o2r_15e [ [6 1.641.544454364366] 6n] t-e-r-,7 3tr1:a p a(snsuemrtbiero n 6)fa i--l-e [ [ 6 1.614.544454364636] 6d] :S kMUipTpEXin_gOW cNrEaR(shm tdxu->mmp txon_ orwneceurr)s =iv= e cpuratnhicr [ [ 61 6.145.445444336666]] epaadn[ 6[1. 4 6541.43465644]366 i] cl: oUckB Sadadn:r esUns d:ef 0ixneffd ffBef3ha4vei3bobr 3fibnc /0s tyzykpae ll e r /:m an a ge srls/eenept/basdad-ptkuibvesa [ [ 6 61.14.4545444336666] n] /kineritnieal/lsizyesd/a r:ch /0xamffd6f4f/ffafmdf8642/28db4_ema1c4h [[ 6 16.1.4545444433666]6 ]d esp.hacr:e15d 3:h2o4ld, s m:e mb er a cc e ss w it h in 0 m eisxaclliugsnieved: a d dr e s s 0 x1 fo r ty 0p[ [ 61 .641.544454346636] 6]e 'sshtarruesc tw ax8n6t_ed6:4_ f r a me ' w h i c h r e q u0ir eesxc l8 usbyivtee : a l i gn m e nt [ 6[1 .46154.44354646]36 6 ] Fa u l t0 [ [ 61 6.41.54445346463]66 e]d c iurn remintd- tcrpau ce :ba c k ; a bo r t in g . . . [[ 6 16.1.44554444336666] ] f a0t all asbrte ahkelpdoi:n t t ra p i n s u pe r vi s0o [ [ 6 61.14.544544346366]6 ]r c muorrdeen [ [ 6 611..44554444363666]] t t lrawpp t y:p e0 x1f fcffodfe3 4e0 3r9eibp7 06x6f0 fflfafsftf hf8e0l2d1:dd b00d 0c00s0 00x080 0r0f0l00a0gs0 000 [ [6 16.41.544454364636] 6x] 2l86as tcr 2l o0ckx2ed0 00 1:f 400xf iflfefvffelf f08 2r2s9pac 08fx ffufnflbo0c8k0ebd*3a:7 02xb7f0f f [[ 6 161.4.544544346366]6] cfurfflwffp8 20x2f9affcbff63 [[ 6 16.1.4544544343666]6 ]4 oew4an5e5r b8fie0el dpi d : 7 02.010 00l0ow00e0s0t 0k0s00t0a0ck00 0 xwaffitff/bs0pi80nb: 3 a7 0 2 c 0 [ Stopped in pid 72.1 (syz-executor.2) at netbsd:breakpoint+0x5: leave ? breakpoint() at netbsd:breakpoint+0x5 db_panic() at netbsd:db_panic+0xd1 sys/ddb/db_panic.c:67 vpanic() at netbsd:vpanic+0x2aa sys/kern/subr_prf.c:336 isAlreadyReported() at netbsd:isAlreadyReported HandleTypeMismatch.part.1() at netbsd:HandleTypeMismatch.part.1+0xcc HandleTypeMismatch() at netbsd:HandleTypeMismatch+0x7b sys/../common/lib/libc/misc/ubsan.c:408 db_nextframe() at netbsd:db_nextframe+0x6f6 sys/arch/amd64/amd64/db_machdep.c:153 db_stack_trace_print() at netbsd:db_stack_trace_print+0x2c4 sys/arch/x86/x86/db_trace.c:277 db_panic() at netbsd:db_panic+0x8b x86_curcpu sys/arch/amd64/compile/obj/GENERIC_SYZKALLER/./machine/cpu.h:67 [inline] db_panic() at netbsd:db_panic+0x8b sys/ddb/db_panic.c:57 vpanic() at netbsd:vpanic+0x2aa sys/kern/subr_prf.c:336 kern_assert() at netbsd:kern_assert+0x63 pmap_enter_ma() at netbsd:pmap_enter_ma+0x1f10 sys/arch/x86/x86/pmap.c:4353 pmap_enter_default() at netbsd:pmap_enter_default+0x7a sys/arch/x86/x86/pmap.c:4170 uvm_fault_lower_enter() at netbsd:uvm_fault_lower_enter+0x283 sys/uvm/uvm_fault.c:2271 uvm_fault_internal() at netbsd:uvm_fault_internal+0x2a32 uvm_fault_lower_promote sys/uvm/uvm_fault.c:2229 [inline] uvm_fault_internal() at netbsd:uvm_fault_internal+0x2a32 uvm_fault_lower sys/uvm/uvm_fault.c:1771 [inline] uvm_fault_internal() at netbsd:uvm_fault_internal+0x2a32 sys/uvm/uvm_fault.c:923 trap() at netbsd:trap+0x1215 sys/arch/amd64/amd64/trap.c:534 --- trap (number 6) --- [ 61.4544366] Skipping crash dump on recursive panic [ 61.4544366] panic: UBSan: Undefined Behavior in /syzkaller/managers/netbsd-kubsan/kernel/sys/arch/amd64/amd64/db_machdep.c:154:14, member access within misaligned address 0x1 for type 'struct x86_64_frame' which requires 8 byte alignment [ 61.4544366] Faulted in mid-traceback; aborting... [ 61.4544366] fatal breakpoint trap in supervisor mode [ 61.4544366] trap type 1 code 0 rip 0xffffffff8021ddbd cs 0x8 rflags 0x286 cr2 0x20001f40 ilevel 0x8 rsp 0xffffb080b3a71870 [ 61.4544366] curlwp 0xfffff34e4a55b8e0 pid 72.1 lowest kstack 0xffffb080b3a702c0 Stopped in pid 72.1 (syz-executor.2) at netbsd:breakpoint+0x5: leave