syzbot


panic: timeout_add: to_ticks < 0
Status: fixed on 2019/02/20 21:58
Reported-by: syzbot+23089c40a85aa70bed6f@syzkaller.appspotmail.com
Fix commit: 3cfc9cae Reject negative input from userland in spkrioctl(). One of the arguments are later passed to timeout_add() which panics if the given ticks are negative. While here, clamp arguments in pcppi_bell() in order to prevent overflow.
First crash: 130d, last: 126d
duplicates (1):
Title Repro Bisected Count Last Reported Patched Status
panic: timeout_add: to_ticks (-ADDR) < 0 C 5 131d 131d 0/3 closed as dup on 2019/02/16 08:24
similar bugs (2):
Kernel Title Repro Bisected Count Last Reported Patched Status
openbsd panic: timeout_add: to_ticks < 0 (2) syz 12 83d 85d 3/3 fixed on 2019/04/04 06:46
openbsd panic: timeout_add: to_ticks < 0 (3) 1 73d 73d 3/3 fixed on 2019/04/26 02:50

Sample crash report:

All crashes (66):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro
ci-openbsd-multicore 2019/02/16 01:27 openbsd 9a029001 f42dee6d .config log report syz C
ci-openbsd-multicore 2019/02/16 01:11 openbsd 9a029001 f42dee6d .config log report
ci-openbsd-main 2019/02/20 21:21 openbsd a3a69817 c95f0707 .config log report
ci-openbsd-multicore 2019/02/20 17:48 openbsd a3a69817 c95f0707 .config log report
ci-openbsd-main 2019/02/20 15:43 openbsd a3a69817 c95f0707 .config log report
ci-openbsd-multicore 2019/02/20 14:23 openbsd a3a69817 c95f0707 .config log report
ci-openbsd-multicore 2019/02/20 10:10 openbsd a3a69817 c95f0707 .config log report
ci-openbsd-multicore 2019/02/20 06:27 openbsd a3a69817 4df543c9 .config log report
ci-openbsd-main 2019/02/20 04:25 openbsd a3a69817 4df543c9 .config log report
ci-openbsd-main 2019/02/20 00:41 openbsd 77a2d566 4df543c9 .config log report
ci-openbsd-main 2019/02/19 23:16 openbsd 77a2d566 4df543c9 .config log report
ci-openbsd-main 2019/02/19 21:31 openbsd 77a2d566 4df543c9 .config log report
ci-openbsd-main 2019/02/19 18:25 openbsd 77a2d566 4df543c9 .config log report
ci-openbsd-main 2019/02/19 15:55 openbsd 77a2d566 4df543c9 .config log report
ci-openbsd-multicore 2019/02/19 11:02 openbsd 644ac04b 59f36113 .config log report
ci-openbsd-multicore 2019/02/19 09:52 openbsd 644ac04b 59f36113 .config log report
ci-openbsd-multicore 2019/02/19 07:26 openbsd 644ac04b 59f36113 .config log report
ci-openbsd-multicore 2019/02/19 01:48 openbsd 9c4fc159 59f36113 .config log report
ci-openbsd-main 2019/02/18 20:37 openbsd 9c4fc159 59f36113 .config log report
ci-openbsd-multicore 2019/02/18 19:33 openbsd 9c4fc159 59f36113 .config log report
ci-openbsd-multicore 2019/02/18 18:33 openbsd 9c4fc159 59f36113 .config log report
ci-openbsd-main 2019/02/18 18:22 openbsd 9c4fc159 59f36113 .config log report
ci-openbsd-multicore 2019/02/18 17:06 openbsd 9c4fc159 59f36113 .config log report
ci-openbsd-main 2019/02/18 16:17 openbsd 9c4fc159 59f36113 .config log report
ci-openbsd-multicore 2019/02/18 15:39 openbsd 9a540fb6 59f36113 .config log report
ci-openbsd-main 2019/02/18 12:25 openbsd 9a540fb6 59f36113 .config log report
ci-openbsd-main 2019/02/18 08:21 openbsd 9a540fb6 59f36113 .config log report
ci-openbsd-multicore 2019/02/18 08:20 openbsd 9a540fb6 59f36113 .config log report
ci-openbsd-main 2019/02/18 07:33 openbsd 9a540fb6 59f36113 .config log report
ci-openbsd-main 2019/02/18 06:26 openbsd 9a540fb6 59f36113 .config log report
ci-openbsd-multicore 2019/02/18 06:09 openbsd 9a540fb6 59f36113 .config log report
ci-openbsd-multicore 2019/02/18 05:15 openbsd 9a540fb6 59f36113 .config log report
ci-openbsd-main 2019/02/18 00:58 openbsd 3748d632 3e98cc30 .config log report
ci-openbsd-multicore 2019/02/18 00:20 openbsd 3748d632 3e98cc30 .config log report
ci-openbsd-main 2019/02/17 20:18 openbsd 3748d632 3e98cc30 .config log report
ci-openbsd-main 2019/02/17 19:53 openbsd 3748d632 3e98cc30 .config log report
ci-openbsd-multicore 2019/02/17 19:43 openbsd 3748d632 3e98cc30 .config log report
ci-openbsd-multicore 2019/02/17 10:09 openbsd 395e1e44 f42dee6d .config log report
ci-openbsd-multicore 2019/02/17 09:58 openbsd 395e1e44 f42dee6d .config log report
ci-openbsd-multicore 2019/02/17 09:53 openbsd 395e1e44 f42dee6d .config log report
ci-openbsd-multicore 2019/02/17 09:27 openbsd 395e1e44 f42dee6d .config log report
ci-openbsd-main 2019/02/17 07:45 openbsd 7fa57c5b f42dee6d .config log report
ci-openbsd-multicore 2019/02/17 07:40 openbsd 395e1e44 f42dee6d .config log report
ci-openbsd-main 2019/02/17 06:35 openbsd 7fa57c5b f42dee6d .config log report
ci-openbsd-main 2019/02/17 04:08 openbsd 7fa57c5b f42dee6d .config log report
ci-openbsd-multicore 2019/02/17 02:27 openbsd 395e1e44 f42dee6d .config log report
ci-openbsd-main 2019/02/16 22:11 openbsd f4f0873d f42dee6d .config log report
ci-openbsd-multicore 2019/02/16 21:27 openbsd f4f0873d f42dee6d .config log report
ci-openbsd-multicore 2019/02/16 18:03 openbsd f4f0873d f42dee6d .config log report
ci-openbsd-multicore 2019/02/16 16:30 openbsd f4f0873d f42dee6d .config log report
ci-openbsd-main 2019/02/16 16:03 openbsd f4f0873d f42dee6d .config log report
ci-openbsd-multicore 2019/02/16 14:21 openbsd f4f0873d f42dee6d .config log report
ci-openbsd-multicore 2019/02/16 13:16 openbsd f4f0873d f42dee6d .config log report
ci-openbsd-multicore 2019/02/16 12:55 openbsd f4f0873d f42dee6d .config log report
ci-openbsd-main 2019/02/16 12:51 openbsd f4f0873d f42dee6d .config log report
ci-openbsd-multicore 2019/02/16 04:57 openbsd 9a029001 f42dee6d .config log report