syzbot


panic: timeout_add: to_ticks < 0 (2)
Status: fixed on 2019/04/04 06:46
Reported-by: syzbot+82cb4dfe6a1fc3d8b490@syzkaller.appspotmail.com
Fix commit: bf2018479c9a Reject negative and too large timeouts passed to BIOCSRTIMEOUT. Since the timeout converted to ticks is later passed timeout_add(), it could cause a panic if the timeout is negative.
First crash: 849d, last: 847d
similar bugs (2):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd panic: timeout_add: to_ticks < 0 C 66 889d 894d 3/3 fixed on 2019/02/20 21:58
openbsd panic: timeout_add: to_ticks < 0 (3) 1 837d 837d 3/3 fixed on 2019/04/26 02:50

Sample crash report:

Crashes (12):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-openbsd-main 2019/04/03 22:03 openbsd a99eef19e79d dfd3394d .config log report syz
ci-openbsd-multicore 2019/04/03 21:13 openbsd a99eef19e79d dfd3394d .config log report syz
ci-openbsd-multicore 2019/04/03 13:17 openbsd a99eef19e79d dfd3394d .config log report syz
ci-openbsd-multicore 2019/04/02 15:19 openbsd a99eef19e79d dfd3394d .config log report syz
ci-openbsd-multicore 2019/04/03 20:44 openbsd a99eef19e79d dfd3394d .config log report
ci-openbsd-main 2019/04/03 18:42 openbsd a99eef19e79d dfd3394d .config log report
ci-openbsd-main 2019/04/03 18:33 openbsd a99eef19e79d dfd3394d .config log report
ci-openbsd-multicore 2019/04/03 12:19 openbsd a99eef19e79d dfd3394d .config log report
ci-openbsd-multicore 2019/04/02 14:58 openbsd a99eef19e79d dfd3394d .config log report
ci-openbsd-main 2019/04/02 14:57 openbsd a99eef19e79d dfd3394d .config log report
ci-openbsd-main 2019/04/02 11:17 openbsd e8e4233962da a9ca43d4 .config log report
ci-openbsd-main 2019/04/02 10:55 openbsd e8e4233962da a9ca43d4 .config log report