syzbot
panic: invalid dst page ADDR
Status:
fixed on 2019/03/21 00:11
Reported-by: syzbot+514d40ce757a3f8b15bc@syzkaller.appspotmail.com
Fix commit:
45d72c7d7fca
vm_fault_copy_entry: accept invalid source pages.
First crash: 2706d, last: 2702d
Sample crash report:
login: panic: invalid dst page 0xfffff8007f14af98
cpuid = 0
time = 1552754985
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe002126d750
vpanic() at vpanic+0x1e0/frame 0xfffffe002126d7b0
panic() at panic+0x43/frame 0xfffffe002126d810
vm_fault_copy_entry() at vm_fault_copy_entry+0x808/frame 0xfffffe002126d8d0
vm_map_protect() at vm_map_protect+0x5f9/frame 0xfffffe002126d940
sys_mprotect() at sys_mprotect+0xcc/frame 0xfffffe002126d980
amd64_syscall() at amd64_syscall+0x436/frame 0xfffffe002126dab0
fast_syscall_common() at fast_syscall_common+0x101/frame 0xfffffe002126dab0
--- syscall (0, FreeBSD ELF64, nosys), rip = 0x45781a, rsp = 0x7fffdfffdf88, rbp = 0x6b60c8 ---
KDB: enter: panic
[ thread pid 777 tid 100134 ]
Stopped at kdb_enter+0x6a: movq $0,kdb_why
* Struck through repros no longer work on HEAD.