syzbot


assert failed: to_ticks >= 0 (2)

Status: fixed on 2019/08/25 05:45
Reported-by: syzbot+259675123340bf46a6de@syzkaller.appspotmail.com
Fix commit: 4952945bc9cb Clamp tcp timer quantities to reasonable ranges.
First crash: 2029d, last: 1970d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
netbsd assert failed: to_ticks >= 0 C 2547 2047d 2096d 1/3 fixed on 2019/04/14 22:27

Sample crash report:
[  30.8298560] panic: kernel diagnostic assertion "to_ticks >= 0" failed: file "/syzkaller/managers/netbsd/kernel/sys/kern/kern_timeout.c", line 335 
[  30.8298560] cpu0: Begin traceback...
[  30.8298560] vpanic() at netbsd:vpanic+0x214
[  30.8298560] _GLOBAL__sub_D_65535_0_cpu_configure() at netbsd:_GLOBAL__sub_D_65535_0_cpu_configure
[  30.8298560] callout_schedule_locked() at netbsd:callout_schedule_locked+0x25b
[  30.8298560] change_keepalive() at netbsd:change_keepalive+0x104
[  30.8298560] tcp_ctloutput() at netbsd:tcp_ctloutput+0x410
[  30.8298560] tcp_ctloutput_wrapper() at netbsd:tcp_ctloutput_wrapper+-0x5d22f
[  30.8298560] sosetopt() at netbsd:sosetopt+0x115
[  30.8298560] sys_setsockopt() at netbsd:sys_setsockopt+0x187
[  30.8298560] sys_syscall() at netbsd:sys_syscall+0xe2
[  30.8298560] syscall() at netbsd:syscall+0x348
[  30.8298560] --- syscall (number 0) ---
[  30.8298560] 77428143f4ca:
[  30.8298560] cpu0: End traceback...

[  30.8298560] dumping to dev 4,1 (offset=0, size=0): not possible
[  30.8298560] rebooting...
SeaBIOS (version 1.8.2-20190322_093631-google)
Total RAM Size = 0x00000001e0000000 = 7680 MiB
CPUs found: 2     Max CPUs supported: 2
found virtio-scsi at 0:3
virtio-scsi vendor='Google' product='PersistentDisk' rev='1' type=0 removable=0
virtio-scsi blksize=512 sectors=4194304 = 2048 MiB
drive 0x000f29d0: PCHS=0/0/0 translation=lba LCHS=520/128/63 s=4194304
Booting from Hard Disk 0...

>> NetBSD/x86 BIOS Boot, Revision 5.10 (Tue Jul 17 14:59:51 UTC 2018) (from NetBSD 8.0)
>> Memory: 639/3144640 k

     1. Boot normally
     2. Boot single user
     3. Disable ACPI
     4. Disable ACPI and SMP
     5. Drop to boot prompt

Crashes (70):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/05/03 13:34 netbsd f865d38b9d4c 1bfa09b9 console log report syz C ci2-netbsd
2019/06/30 21:58 netbsd 2d682570da30 699d6448 console log report ci2-netbsd
2019/06/30 03:30 netbsd 92fe1efb3811 7509bf36 console log report ci2-netbsd
2019/06/29 22:03 netbsd 92fe1efb3811 7509bf36 console log report ci2-netbsd
2019/06/29 19:01 netbsd 92fe1efb3811 7509bf36 console log report ci2-netbsd
2019/06/28 22:42 netbsd dda7795707c5 7509bf36 console log report ci2-netbsd
2019/06/28 16:13 netbsd dda7795707c5 7509bf36 console log report ci2-netbsd
2019/06/28 11:09 netbsd 18949c926c50 7509bf36 console log report ci2-netbsd
2019/06/27 13:22 netbsd 1b7fb429a510 7509bf36 console log report ci2-netbsd
2019/06/27 06:19 netbsd e42f62893479 7509bf36 console log report ci2-netbsd
2019/06/26 15:11 netbsd 1f165a8e6c16 4d342240 console log report ci2-netbsd
2019/06/26 14:16 netbsd 1f165a8e6c16 4d342240 console log report ci2-netbsd
2019/06/26 12:28 netbsd 1f165a8e6c16 4d342240 console log report ci2-netbsd
2019/06/26 03:44 netbsd 13724f5cbeac 0a8d1a96 console log report ci2-netbsd
2019/06/24 20:16 netbsd 39949889b3a5 2873954b console log report ci2-netbsd
2019/06/24 10:25 netbsd 4380d1e47789 472f0082 console log report ci2-netbsd
2019/06/24 03:51 netbsd 4380d1e47789 472f0082 console log report ci2-netbsd
2019/06/23 13:47 netbsd 9a0f552135bc 3efccdd2 console log report ci2-netbsd
2019/06/23 05:45 netbsd 65dff94be83b 34bf9440 console log report ci2-netbsd
2019/06/23 03:18 netbsd 65dff94be83b 34bf9440 console log report ci2-netbsd
2019/06/22 19:12 netbsd d7acc10d0f39 34bf9440 console log report ci2-netbsd
2019/06/21 19:57 netbsd 1f4f83687ee8 34bf9440 console log report ci2-netbsd
2019/06/21 17:53 netbsd 1f4f83687ee8 34bf9440 console log report ci2-netbsd
2019/06/21 13:03 netbsd 1f4f83687ee8 34bf9440 console log report ci2-netbsd
2019/06/21 10:55 netbsd 1f4f83687ee8 34bf9440 console log report ci2-netbsd
2019/06/21 07:15 netbsd b8a18b79975d 34bf9440 console log report ci2-netbsd
2019/06/21 07:03 netbsd b8a18b79975d 34bf9440 console log report ci2-netbsd
2019/06/21 06:56 netbsd b8a18b79975d 34bf9440 console log report ci2-netbsd
2019/06/21 05:51 netbsd b8a18b79975d 34bf9440 console log report ci2-netbsd
2019/06/21 05:33 netbsd b8a18b79975d 34bf9440 console log report ci2-netbsd
2019/06/21 04:37 netbsd b8a18b79975d 34bf9440 console log report ci2-netbsd
2019/06/21 04:21 netbsd b8a18b79975d 34bf9440 console log report ci2-netbsd
2019/06/21 03:50 netbsd b8a18b79975d 34bf9440 console log report ci2-netbsd
2019/06/21 03:24 netbsd b8a18b79975d 34bf9440 console log report ci2-netbsd
2019/06/21 03:09 netbsd b8a18b79975d 34bf9440 console log report ci2-netbsd
2019/06/21 02:35 netbsd b8a18b79975d 34bf9440 console log report ci2-netbsd
2019/06/21 02:12 netbsd b8a18b79975d 34bf9440 console log report ci2-netbsd
2019/06/21 01:48 netbsd b8a18b79975d 34bf9440 console log report ci2-netbsd
2019/06/21 01:17 netbsd b8a18b79975d 34bf9440 console log report ci2-netbsd
2019/06/20 23:29 netbsd b8a18b79975d 34bf9440 console log report ci2-netbsd
2019/06/20 23:10 netbsd b8a18b79975d 34bf9440 console log report ci2-netbsd
2019/06/20 23:04 netbsd b8a18b79975d 34bf9440 console log report ci2-netbsd
2019/06/20 19:40 netbsd b8a18b79975d 34bf9440 console log report ci2-netbsd
2019/06/20 19:01 netbsd b8a18b79975d 34bf9440 console log report ci2-netbsd
2019/06/20 18:52 netbsd b8a18b79975d 34bf9440 console log report ci2-netbsd
2019/06/20 16:26 netbsd 841ec313576b 34bf9440 console log report ci2-netbsd
2019/06/20 15:24 netbsd 841ec313576b 34bf9440 console log report ci2-netbsd
2019/06/20 15:23 netbsd 841ec313576b 34bf9440 console log report ci2-netbsd
2019/06/20 15:06 netbsd 841ec313576b 34bf9440 console log report ci2-netbsd
2019/06/20 14:58 netbsd 841ec313576b 34bf9440 console log report ci2-netbsd
2019/06/20 14:39 netbsd 841ec313576b 34bf9440 console log report ci2-netbsd
2019/06/20 13:32 netbsd 841ec313576b 34bf9440 console log report ci2-netbsd
2019/06/20 13:04 netbsd 841ec313576b 34bf9440 console log report ci2-netbsd
2019/06/20 12:58 netbsd 841ec313576b 34bf9440 console log report ci2-netbsd
2019/06/20 12:34 netbsd 841ec313576b 34bf9440 console log report ci2-netbsd
2019/06/20 11:15 netbsd 841ec313576b 34bf9440 console log report ci2-netbsd
2019/06/20 10:02 netbsd 841ec313576b 34bf9440 console log report ci2-netbsd
2019/06/20 09:04 netbsd 841ec313576b 34bf9440 console log report ci2-netbsd
2019/06/20 08:00 netbsd 841ec313576b 34bf9440 console log report ci2-netbsd
2019/06/20 07:54 netbsd 841ec313576b 34bf9440 console log report ci2-netbsd
2019/06/20 07:28 netbsd 841ec313576b 34bf9440 console log report ci2-netbsd
2019/06/20 07:23 netbsd 841ec313576b 34bf9440 console log report ci2-netbsd
2019/06/20 06:35 netbsd 841ec313576b 34bf9440 console log report ci2-netbsd
2019/06/20 05:27 netbsd 841ec313576b 34bf9440 console log report ci2-netbsd
2019/05/03 12:58 netbsd f865d38b9d4c 1bfa09b9 console log report ci2-netbsd
* Struck through repros no longer work on HEAD.