syzbot


panic: timeout_add: to_ticks < 0 (2)
Status: fixed on 2019/04/04 06:46
Reported-by: syzbot+82cb4dfe6a1fc3d8b490@syzkaller.appspotmail.com
Fix commit: bf201847 Reject negative and too large timeouts passed to BIOCSRTIMEOUT. Since the timeout converted to ticks is later passed timeout_add(), it could cause a panic if the timeout is negative.
First crash: 75d, last: 74d
similar bugs (2):
Kernel Title Repro Bisected Count Last Reported Patched Status
openbsd panic: timeout_add: to_ticks < 0 C 66 116d 121d 3/3 fixed on 2019/02/20 21:58
openbsd panic: timeout_add: to_ticks < 0 (3) 1 63d 63d 3/3 fixed on 2019/04/26 02:50

Sample crash report:

All crashes (12):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro
ci-openbsd-multicore 2019/04/02 15:19 openbsd a99eef19 dfd3394d .config log report syz
ci-openbsd-main 2019/04/03 22:03 openbsd a99eef19 dfd3394d .config log report syz
ci-openbsd-multicore 2019/04/03 21:13 openbsd a99eef19 dfd3394d .config log report syz
ci-openbsd-multicore 2019/04/03 13:17 openbsd a99eef19 dfd3394d .config log report syz
ci-openbsd-main 2019/04/02 10:55 openbsd e8e42339 a9ca43d4 .config log report
ci-openbsd-multicore 2019/04/03 20:44 openbsd a99eef19 dfd3394d .config log report
ci-openbsd-main 2019/04/03 18:42 openbsd a99eef19 dfd3394d .config log report
ci-openbsd-main 2019/04/03 18:33 openbsd a99eef19 dfd3394d .config log report
ci-openbsd-multicore 2019/04/03 12:19 openbsd a99eef19 dfd3394d .config log report
ci-openbsd-multicore 2019/04/02 14:58 openbsd a99eef19 dfd3394d .config log report
ci-openbsd-main 2019/04/02 14:57 openbsd a99eef19 dfd3394d .config log report
ci-openbsd-main 2019/04/02 11:17 openbsd e8e42339 a9ca43d4 .config log report