syzbot


panic: ifa_update_broadaddr does not support dynamic length (3)

Status: upstream: reported on 2024/04/15 14:23
Reported-by: syzbot+d8a59be0580bb3f635ed@syzkaller.appspotmail.com
First crash: 70d, last: 35d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd panic: ifa_update_broadaddr does not support dynamic length syz 6780 1691d 1749d 3/3 fixed on 2019/11/08 00:43
openbsd panic: ifa_update_broadaddr does not support dynamic length (2) 13 1424d 1574d 3/3 fixed on 2020/08/05 06:16

Sample crash report:
pmap_unwire: wiring for pmap 0xfffffd806ac7a290 va 0x77301e50000pmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpmap_unwire: wirpanic: ifa_update_broadaddr does not support dynamic length
Starting stack trace...
panic(ffffffff8283441d) at panic+0x159 sys/kern/subr_prf.c:229
ifa_update_broadaddr(ffff800000dd8800,ffff800000db7700,ffff80002a6e1c60) at ifa_update_broadaddr+0x6a sys/net/if.c:3315
in_ioctl(80206913,ffff80002a6e1c50,ffff800000dd8800,1) at in_ioctl+0x5cf sys/netinet/in.c:313
ifioctl(fffffd8067e9f430,80206913,ffff80002a6e1c50,ffff80002a6c3c58) at ifioctl+0x104c pru_control sys/sys/protosw.h:378 [inline]
ifioctl(fffffd8067e9f430,80206913,ffff80002a6e1c50,ffff80002a6c3c58) at ifioctl+0x104c sys/net/if.c:2449
sys_ioctl(ffff80002a6c3c58,ffff80002a6e1e30,ffff80002a6e1d80) at sys_ioctl+0x4a5
syscall(ffff80002a6e1e30) at syscall+0x72a sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x16f5c9dc040, count: 250
End of stack trace.

Crashes (19):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/05/21 05:24 openbsd d0fe8eba4c8c c0f1611a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main panic: ifa_update_broadaddr does not support dynamic length
2024/05/20 10:48 openbsd ab5fd4cb8341 c0f1611a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main panic: ifa_update_broadaddr does not support dynamic length
2024/05/19 23:47 openbsd 676865473293 c0f1611a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: ifa_update_broadaddr does not support dynamic length
2024/05/19 21:54 openbsd 676865473293 c0f1611a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: ifa_update_broadaddr does not support dynamic length
2024/05/19 02:33 openbsd 088a2cd995ac c0f1611a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: ifa_update_broadaddr does not support dynamic length
2024/05/19 00:35 openbsd 088a2cd995ac c0f1611a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: ifa_update_broadaddr does not support dynamic length
2024/05/17 01:26 openbsd b20edd337af0 ad5321c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: ifa_update_broadaddr does not support dynamic length
2024/05/16 19:23 openbsd b20edd337af0 ad5321c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: ifa_update_broadaddr does not support dynamic length
2024/05/14 05:15 openbsd 5dea098c4cfa fdb4c10c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: ifa_update_broadaddr does not support dynamic length
2024/05/13 17:12 openbsd aa47c49a2e9a fdb4c10c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main panic: ifa_update_broadaddr does not support dynamic length
2024/05/08 03:47 openbsd 7284c0c62173 4cf3f9b3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main panic: ifa_update_broadaddr does not support dynamic length
2024/05/04 18:52 openbsd c604ab84837e 610f2a54 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main panic: ifa_update_broadaddr does not support dynamic length
2024/05/01 08:04 openbsd ab0363c32c56 3ba885bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: ifa_update_broadaddr does not support dynamic length
2024/04/26 20:15 openbsd 85e00e3040cd 3f914d6b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: ifa_update_broadaddr does not support dynamic length
2024/04/25 15:38 openbsd 53a4f4198df9 8bdc0f22 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: ifa_update_broadaddr does not support dynamic length
2024/04/22 12:23 openbsd 5af821209fa3 36c961ad .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: ifa_update_broadaddr does not support dynamic length
2024/04/22 10:17 openbsd 5af821209fa3 36c961ad .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main panic: ifa_update_broadaddr does not support dynamic length
2024/04/21 16:45 openbsd 8a9424f8c5c9 af24b050 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: ifa_update_broadaddr does not support dynamic length
2024/04/15 14:22 openbsd 7019ae976ad9 459f4b00 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: ifa_update_broadaddr does not support dynamic length
* Struck through repros no longer work on HEAD.