syzbot

 sign-in | mailing list | source | docs
🐞 Open [131] 🐞 Fixed [119] 🐞 Invalid [553]

page fault in statvfs_to_statfs12_copy
Status: fixed on 2020/06/27 18:40
Reported-by: syzbot+b05096f3114b2820d81c@syzkaller.appspotmail.com
Fix commit: 62420ac5f72b Yet another idiotic compat syscall that was developed with literally zero test made. Simply invoking this syscall with _valid parameters_ triggers a fatal fault, because the kernel tries to write to userland addresses.
First crash: 392d, last: 391d
duplicates (8):
Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
panic: kmsan_md_addr_to_shad: impossible, va=0x0 C 3 391d 392d 0/3 closed as dup on 2020/06/27 07:04
UBSan: Undefined Behavior in compat_20_sys_statfs C 13 391d 392d 0/3 closed as dup on 2020/06/27 07:13
ASan: Unauthorized Access in statvfs_to_statfs12_copy 1 391d 391d 0/3 closed as dup on 2020/06/27 19:11
panic: kmsan_md_addr_to_shad: impossible, va=ADDR C 125 391d 392d 0/3 closed as dup on 2020/06/27 07:03
page fault in compat_20_sys_fstatfs 7 391d 392d 0/3 closed as dup on 2020/06/27 07:13
page fault in compat_20_sys_statfs 1 391d 391d 0/3 closed as dup on 2020/06/27 19:11
UBSan: Undefined Behavior in compat_20_sys_fstatfs C 5 391d 391d 0/3 closed as dup on 2020/06/27 07:14
page fault in __asan_store2 C 274 391d 392d 0/3 closed as dup on 2020/06/27 07:04

Sample crash report:

Crashes (5):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-netbsd-kubsan 2020/06/27 04:41 netbsd 5f8d4fbddc4b ffec44b5 .config log report syz C
ci2-netbsd-kubsan 2020/06/27 08:09 netbsd 5f8d4fbddc4b ffec44b5 .config log report
ci2-netbsd-kubsan 2020/06/27 06:56 netbsd 5f8d4fbddc4b ffec44b5 .config log report
ci2-netbsd-kubsan 2020/06/27 05:08 netbsd 5f8d4fbddc4b ffec44b5 .config log report
ci2-netbsd-kubsan 2020/06/27 04:22 netbsd 5f8d4fbddc4b ffec44b5 .config log report