syzbot


panic: Caught invalid memory access at ADDR size NUM op NUM

Status: upstream: reported on 2026/07/06 07:56
Reported-by: syzbot+f028f6e8a734a5e8de11@syzkaller.appspotmail.com
First crash: 6d19h, last: 1h20m

Sample crash report:
panic: Caught invalid memory access at ffff800001ddc3b0 size 104 op 1
Stopped at      db_enter+0x17:  popq    %rbp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
 287359  35802      0           0          0    0  syz-executor
*377408  86352      0        0x10  0x4000000    1K syz-executor
db_enter() at db_enter+0x17 sys/arch/amd64/amd64/db_interface.c:457
panic(ffffffff84635b4e) at panic+0x270 sys/kern/subr_prf.c:198
kasan_memcpy(ffff800001ddc3b0,ffff800001cc44e8,68) at kasan_memcpy+0x1ec
sysctl_sysvipc(ffff800038b10a88,1,200000000040,ffff800038b10a60) at sysctl_sysvipc+0x422 sys/kern/kern_sysctl.c:2777
kern_sysctl_dirs(33,ffff800038b10a88,1,200000000040,ffff800038b10a60,0,1,1ffff000071620c8) at kern_sysctl_dirs+0x407 sys/kern/kern_sysctl.c:445
kern_sysctl(ffff800038b10a84,2,200000000040,ffff800038b10a60,0,0,ffff800038b10ce0) at kern_sysctl+0x1ce sys/kern/kern_sysctl.c:529
sys_sysctl(ffff800045ff6a80,ffff800038b10ce0,ffff800038b10c40) at sys_sysctl+0x54f sys/kern/kern_sysctl.c:309
syscall(ffff800038b10ce0) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff800038b10ce0) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x37f1455020, count: 6
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: Caught invalid memory access at ffff800001ddc3b0 size 104 op 1
ddb{1}> trace
db_enter() at db_enter+0x17 sys/arch/amd64/amd64/db_interface.c:457
panic(ffffffff84635b4e) at panic+0x270 sys/kern/subr_prf.c:198
kasan_memcpy(ffff800001ddc3b0,ffff800001cc44e8,68) at kasan_memcpy+0x1ec
sysctl_sysvipc(ffff800038b10a88,1,200000000040,ffff800038b10a60) at sysctl_sysvipc+0x422 sys/kern/kern_sysctl.c:2777
kern_sysctl_dirs(33,ffff800038b10a88,1,200000000040,ffff800038b10a60,0,1,1ffff000071620c8) at kern_sysctl_dirs+0x407 sys/kern/kern_sysctl.c:445
kern_sysctl(ffff800038b10a84,2,200000000040,ffff800038b10a60,0,0,ffff800038b10ce0) at kern_sysctl+0x1ce sys/kern/kern_sysctl.c:529
sys_sysctl(ffff800045ff6a80,ffff800038b10ce0,ffff800038b10c40) at sys_sysctl+0x54f sys/kern/kern_sysctl.c:309
syscall(ffff800038b10ce0) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff800038b10ce0) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x37f1455020, count: -9
ddb{1}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff800038b10290
rbx               0xffff800038b10300
rdx                                0
rcx               0xffff800028fe3ff0
rax               0xffff800000168080
r8                 0x101010101010101
r9                0x8080808080808080
r10               0xffff800038b10078
r11               0xffffffff83f284c0    x86_bus_space_io_read_1
r12               0xffffffff84635b4e    .str.23+0x9d50e
r13               0xffff800028fe4c08
r14               0xffff800028fe4e07
r15                              0x1
rip               0xffffffff818a32b7    db_enter+0x17
cs                               0x8
rflags                         0x246
rsp               0xffff800038b10290
ss                              0x10
db_enter+0x17:  popq    %rbp
ddb{1}> show proc
PROC (syz-executor) tid=377408 pid=86352 tcnt=3 stat=onproc
    flags process=10<SUGID> proc=4000000<THREAD>
    runpri=32, usrpri=81, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff800045ff74e0,0xffff800045ff6030
    process=0xffff8000299149b0 user=0xffff800038b05000, vmspace=0xffff800001c7b7c0
    estcpu=31, cpticks=19, pctcpu=0.0, user=0, sys=19, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 33725  459628  69051      0  3        0x80  nanoslp       syz-executor
 33725  513627  69051      0  2   0x4000000                syz-executor
 33725  116541  69051      0  3   0x4000080  fsleep        syz-executor
 35802  287359  38429      0  7           0                syz-executor
 35802   13212  38429      0  3   0x4000080  kqsel         syz-executor
 35802  156517  38429      0  3   0x4000080  kqsel         syz-executor
 35802   57657  38429      0  3   0x4000080  fsleep        syz-executor
 86352  259093  52188      0  2        0x10                syz-executor
 86352  315258  52188      0  3   0x4000090  kqsel         syz-executor
*86352  377408  52188      0  7   0x4000010                syz-executor
 13047  137588      1      0  3    0x100083  ttyin         getty
 69051  463939  63201      0  3        0x82  nanoslp       syz-executor
 22836  116483  63201      0  3        0x82  piperd        syz-executor
 52188   96955  63201      0  3        0x82  nanoslp       syz-executor
   460  118203  63201      0  3        0x82  piperd        syz-executor
 81001  286427  63201      0  3        0x82  piperd        syz-executor
 38429  496405  63201      0  3        0x82  nanoslp       syz-executor
 17433  462772  63201      0  3        0x82  wait          syz-executor
 63201  303928      1      0  3        0x82  wait          syz-executor
 64317  477384      1     74  3   0x1100092  bpf           pflogd
 91768  294789      1     73  3   0x1100090  kqread        syslogd
 56765  255834      0      0  3     0x14200  bored         smr
 91336  217578      0      0  2     0x14200                zerothread
 37465  497379      0      0  3     0x14200  aiodoned      aiodoned
 21409  404961      0      0  3     0x14200  syncer        update
 90977  511207      0      0  3     0x14200  cleaner       cleaner
  9718  351880      0      0  3     0x14200  reaper        reaper
 22545  104772      0      0  3     0x14200  pgdaemon      pagedaemon
 17139  152601      0      0  3     0x14200  bored         viomb
 36242  414419      0      0  3  0x40014200  acpi0         acpi0
 21287  270561      0      0  3  0x40014200                idle1
 68301  368186      0      0  3     0x14200  bored         softnet1
 83566   46745      0      0  3     0x14200  bored         softnet0
 74348  121408      0      0  3     0x14200  bored         systqmp
 93707  411014      0      0  3     0x14200  bored         systq
 36256  321618      0      0  3     0x14200  tmoslp        softclockmp
 26414  272868      0      0  3  0x40014200  tmoslp        softclock
 49955  403709      0      0  3  0x40014200                idle0
     1  188278      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{1}> 

Crashes (384):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/07/13 02:10 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan dbfd7807b1e0 d78ea535 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/13 00:47 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan dbfd7807b1e0 d78ea535 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/12 23:14 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan dbfd7807b1e0 d78ea535 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/12 22:10 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan dbfd7807b1e0 d78ea535 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/12 20:47 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan dbfd7807b1e0 d78ea535 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/12 19:42 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan dbfd7807b1e0 d78ea535 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/12 16:33 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan ee17f2e90ad4 d78ea535 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/12 14:56 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan ee17f2e90ad4 d78ea535 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/12 13:36 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan ee17f2e90ad4 d78ea535 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/12 12:24 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan ee17f2e90ad4 d78ea535 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/12 10:51 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan ee17f2e90ad4 d78ea535 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/12 09:26 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan ee17f2e90ad4 d78ea535 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/12 09:11 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan ee17f2e90ad4 d78ea535 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/12 07:36 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan ee17f2e90ad4 d78ea535 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/12 06:33 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan ee17f2e90ad4 d78ea535 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/12 05:30 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan ee17f2e90ad4 d78ea535 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/12 04:17 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 1ca7fe8378ec d78ea535 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/12 01:19 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 1ca7fe8378ec d78ea535 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/12 00:08 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 1ca7fe8378ec d78ea535 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/11 23:53 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 1ca7fe8378ec d78ea535 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/11 22:15 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 1ca7fe8378ec d78ea535 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/11 19:05 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 1ca7fe8378ec d78ea535 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/11 16:47 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 1ca7fe8378ec d78ea535 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/11 14:16 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 275dedaf93b0 d78ea535 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/11 13:06 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 275dedaf93b0 d78ea535 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/11 10:48 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 275dedaf93b0 d78ea535 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/11 08:51 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 275dedaf93b0 d78ea535 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/11 01:05 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 275dedaf93b0 99e64375 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/10 23:59 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 275dedaf93b0 99e64375 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/10 22:49 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 275dedaf93b0 99e64375 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/10 21:37 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 275dedaf93b0 99e64375 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/10 20:54 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 275dedaf93b0 99e64375 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/10 19:51 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 275dedaf93b0 99e64375 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/10 18:39 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 275dedaf93b0 99e64375 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/10 17:55 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 275dedaf93b0 99e64375 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/10 16:54 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 275dedaf93b0 99e64375 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/10 15:37 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 275dedaf93b0 99e64375 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/10 14:23 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 275dedaf93b0 99e64375 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/10 13:35 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 275dedaf93b0 99e64375 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/10 12:32 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 275dedaf93b0 4167ee25 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/10 11:02 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 275dedaf93b0 4167ee25 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/10 09:51 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 275dedaf93b0 4167ee25 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/10 08:51 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 275dedaf93b0 4167ee25 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
2026/07/06 07:55 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 5f617609345c fcece630 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: Caught invalid memory access at ADDR size NUM op NUM
* Struck through repros no longer work on HEAD.