syzbot


panic: ifa_update_broadaddr does not support dynamic length (3)

Status: upstream: reported on 2024/04/15 14:23
Reported-by: syzbot+d8a59be0580bb3f635ed@syzkaller.appspotmail.com
First crash: 16d, last: 17h52m
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd panic: ifa_update_broadaddr does not support dynamic length syz 6780 1637d 1695d 3/3 fixed on 2019/11/08 00:43
openbsd panic: ifa_update_broadaddr does not support dynamic length (2) 13 1370d 1520d 3/3 fixed on 2020/08/05 06:16

Sample crash report:
panic: ifa_update_broadaddr does not support dynamic length
Starting stack trace...
panic(ffffffff82852da4) at panic+0x16f sys/kern/subr_prf.c:229
ifa_update_broadaddr(ffff800000dac000,ffff800000e26300,ffff80002a6d78e0) at ifa_update_broadaddr+0x6a sys/net/if.c:3315
in_ioctl(80206913,ffff80002a6d78d0,ffff800000dac000,1) at in_ioctl+0x5cf sys/netinet/in.c:313
ifioctl(ffff800000e7afd8,80206913,ffff80002a6d78d0,ffff8000372074c8) at ifioctl+0x106c pru_control sys/sys/protosw.h:378 [inline]
ifioctl(ffff800000e7afd8,80206913,ffff80002a6d78d0,ffff8000372074c8) at ifioctl+0x106c sys/net/if.c:2449
sys_ioctl(ffff8000372074c8,ffff80002a6d7ab0,ffff80002a6d7a00) at sys_ioctl+0x4a9
syscall(ffff80002a6d7ab0) at syscall+0x8cf mi_syscall sys/sys/syscall_mi.h:180 [inline]
syscall(ffff80002a6d7ab0) at syscall+0x8cf sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x6d4a958e660, count: 250
End of stack trace.

Crashes (7):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/05/01 08:04 openbsd ab0363c32c56 3ba885bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: ifa_update_broadaddr does not support dynamic length
2024/04/26 20:15 openbsd 85e00e3040cd 3f914d6b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: ifa_update_broadaddr does not support dynamic length
2024/04/25 15:38 openbsd 53a4f4198df9 8bdc0f22 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: ifa_update_broadaddr does not support dynamic length
2024/04/22 12:23 openbsd 5af821209fa3 36c961ad .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: ifa_update_broadaddr does not support dynamic length
2024/04/22 10:17 openbsd 5af821209fa3 36c961ad .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main panic: ifa_update_broadaddr does not support dynamic length
2024/04/21 16:45 openbsd 8a9424f8c5c9 af24b050 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: ifa_update_broadaddr does not support dynamic length
2024/04/15 14:22 openbsd 7019ae976ad9 459f4b00 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: ifa_update_broadaddr does not support dynamic length
* Struck through repros no longer work on HEAD.