syzbot


panic: invalid dst page ADDR

Status: fixed on 2019/03/21 00:11
Reported-by: syzbot+514d40ce757a3f8b15bc@syzkaller.appspotmail.com
Fix commit: 45d72c7d7fca vm_fault_copy_entry: accept invalid source pages.
First crash: 2080d, last: 2075d

Sample crash report:
login: panic: invalid dst page 0xfffff8007f14af98
cpuid = 0
time = 1552754985
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe002126d750
vpanic() at vpanic+0x1e0/frame 0xfffffe002126d7b0
panic() at panic+0x43/frame 0xfffffe002126d810
vm_fault_copy_entry() at vm_fault_copy_entry+0x808/frame 0xfffffe002126d8d0
vm_map_protect() at vm_map_protect+0x5f9/frame 0xfffffe002126d940
sys_mprotect() at sys_mprotect+0xcc/frame 0xfffffe002126d980
amd64_syscall() at amd64_syscall+0x436/frame 0xfffffe002126dab0
fast_syscall_common() at fast_syscall_common+0x101/frame 0xfffffe002126dab0
--- syscall (0, FreeBSD ELF64, nosys), rip = 0x45781a, rsp = 0x7fffdfffdf88, rbp = 0x6b60c8 ---
KDB: enter: panic
[ thread pid 777 tid 100134 ]
Stopped at      kdb_enter+0x6a: movq    $0,kdb_why

Crashes (33):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/03/16 16:53 freebsd 4ccae8165c74 bab43553 console log report syz C ci-freebsd-main
2019/03/16 09:27 freebsd 4d504c5762fd bab43553 console log report syz ci-freebsd-main
2019/03/15 22:42 freebsd 84b9791bcc2c bab43553 console log report syz ci-freebsd-main
2019/03/20 05:51 freebsd 90d8cba8606b 2458c1c6 console log report ci-freebsd-main
2019/03/19 21:18 freebsd 5d2bb1696724 e4549234 console log report ci-freebsd-main
2019/03/19 18:55 freebsd 5d2bb1696724 e4549234 console log report ci-freebsd-main
2019/03/19 16:44 freebsd 5d2bb1696724 e4549234 console log report ci-freebsd-main
2019/03/19 11:20 freebsd 8bfcb839fd2f 46264c32 console log report ci-freebsd-main
2019/03/19 00:43 freebsd 8bfcb839fd2f 46264c32 console log report ci-freebsd-main
2019/03/18 17:30 freebsd b24a98cb7ea8 4656beca console log report ci-freebsd-main
2019/03/18 10:29 freebsd 8b17fbc25c73 f8757044 console log report ci-freebsd-main
2019/03/18 09:26 freebsd 8b17fbc25c73 f8757044 console log report ci-freebsd-main
2019/03/18 08:34 freebsd 8b17fbc25c73 f8757044 console log report ci-freebsd-main
2019/03/18 08:32 freebsd 8b17fbc25c73 f8757044 console log report ci-freebsd-main
2019/03/18 05:41 freebsd 8b17fbc25c73 f8757044 console log report ci-freebsd-main
2019/03/18 05:13 freebsd 8b17fbc25c73 f8757044 console log report ci-freebsd-main
2019/03/18 05:10 freebsd 8b17fbc25c73 f8757044 console log report ci-freebsd-main
2019/03/18 05:05 freebsd 8b17fbc25c73 f8757044 console log report ci-freebsd-main
2019/03/18 01:55 freebsd 8b17fbc25c73 f8757044 console log report ci-freebsd-main
2019/03/18 01:11 freebsd 8b17fbc25c73 f8757044 console log report ci-freebsd-main
2019/03/17 22:07 freebsd 8f6fafa8690d ba18afea console log report ci-freebsd-main
2019/03/17 22:00 freebsd 8f6fafa8690d ba18afea console log report ci-freebsd-main
2019/03/17 18:38 freebsd 8f6fafa8690d ba18afea console log report ci-freebsd-main
2019/03/17 16:41 freebsd 8f6fafa8690d ba18afea console log report ci-freebsd-main
2019/03/17 14:47 freebsd 8f6fafa8690d ba18afea console log report ci-freebsd-main
2019/03/17 13:50 freebsd 8f6fafa8690d ba18afea console log report ci-freebsd-main
2019/03/17 09:39 freebsd 310a121be6b8 bab43553 console log report ci-freebsd-main
2019/03/17 00:58 freebsd 4ccae8165c74 bab43553 console log report ci-freebsd-main
2019/03/16 22:07 freebsd 4ccae8165c74 bab43553 console log report ci-freebsd-main
2019/03/16 20:45 freebsd 4ccae8165c74 bab43553 console log report ci-freebsd-main
2019/03/16 16:33 freebsd 4ccae8165c74 bab43553 console log report ci-freebsd-main
2019/03/16 09:07 freebsd 4d504c5762fd bab43553 console log report ci-freebsd-main
2019/03/15 22:20 freebsd 84b9791bcc2c bab43553 console log report ci-freebsd-main
* Struck through repros no longer work on HEAD.