syzbot


panic: ifa_update_broadaddr does not support dynamic length
Status: fixed on 2019/11/08 00:43
Reported-by: syzbot+5fc6da002fc4e8d994be@syzkaller.appspotmail.com
Fix commit: b36fd3da6fde Do propper kernel input validation for in_control() ioctl(2) SIOCGIFADDR, SIOCGIFNETMASK, SIOCGIFDSTADDR, SIOCGIFBRDADDR, SIOCSIFADDR, SIOCSIFNETMASK, SIOCSIFDSTADDR, and SIOCSIFBRDADDR. Name in_ioctl_set_ifaddr() consistently. Use in_sa2sin() to validate inet address. Combine if_addrlist loops and add comment. Although netmask is not a inet address, length must be valid. Reported-by: syzbot+5fc6da002fc4e8d994be@syzkaller.appspotmail.com OK visa@
First crash: 687d, last: 629d
duplicates (8):
Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
panic() at panic+0x15c (2) 1 635d 635d 0/3 closed as dup on 2019/11/02 14:37
panic: ifa_update_broadaddr does not support dynamic lengtpha 1 649d 649d 0/3 closed as dup on 2019/10/19 11:24
panic: ifa_update_broadaddr does not support pdayninacm:i kc elrnenelg thd 1 660d 660d 0/3 closed as dup on 2019/10/08 07:00
panic: ifa_update_broadaddr does not support dynamicW lAeRnNgIthNG 1 684d 684d 0/3 closed as dup on 2019/09/14 06:59
corrupted report (2) 17 635d 684d 0/3 closed as dup on 2019/09/13 20:10
panic: ifa_update_broadaddr does not support dynaWmAiRNc IlNGen: gSPtLh 1 635d 635d 0/3 closed as dup on 2019/11/02 08:04
panic: ifa_update_broadaddr does not support dypananimicc: l eknegrtnhe 1 661d 661d 0/3 closed as dup on 2019/10/07 13:44
panic: pianfiac_:u pkdeartnee_lb drioaadgandodsrt dioces a nsots serutpipoonr t"!_kernel_lock_held()" failed: file "/syz 1 642d 642d 0/3 closed as dup on 2019/10/27 07:43
similar bugs (1):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd panic: ifa_update_broadaddr does not support dynamic length (2) 13 363d 512d 3/3 fixed on 2020/08/05 06:16

Sample crash report:

Crashes (6780):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-openbsd-multicore 2019/11/02 14:52 openbsd d9601055ff2c 997ccc67 .config log report syz
ci-openbsd-multicore 2019/11/02 06:24 openbsd c2600de8aa52 997ccc67 .config log report syz
ci-openbsd-multicore 2019/10/26 16:00 openbsd c31be7ff34c3 25bb509e .config log report syz
ci-openbsd-main 2019/10/24 15:44 openbsd e22d0083b525 d01bb02a .config log report syz
ci-openbsd-multicore 2019/10/23 17:28 openbsd aaf7ae02776d d894f260 .config log report syz
ci-openbsd-multicore 2019/10/23 16:27 openbsd aaf7ae02776d d894f260 .config log report syz
ci-openbsd-multicore 2019/10/22 19:21 openbsd 2c98785eaaa1 a2bdbd8c .config log report syz
ci-openbsd-main 2019/10/21 23:56 openbsd b29f95ed9151 b24d2b8a .config log report syz
ci-openbsd-multicore 2019/10/19 22:18 openbsd b1a121060c68 8c88c9c1 .config log report syz
ci-openbsd-multicore 2019/10/19 09:16 openbsd 754f2b84d7f3 8c88c9c1 .config log report syz
ci-openbsd-multicore 2019/10/12 21:13 openbsd b8f72638b638 426631dd .config log report syz
ci-openbsd-multicore 2019/10/11 16:59 openbsd b8fc78b9a375 426631dd .config log report syz
ci-openbsd-multicore 2019/10/07 14:29 openbsd 29a2b068f14b 28ac6e64 .config log report syz
ci-openbsd-multicore 2019/10/07 03:09 openbsd 8b165c1a053b f3f7d9c8 .config log report syz
ci-openbsd-multicore 2019/10/02 14:20 openbsd 65ab43f212c4 2e29b534 .config log report syz
ci-openbsd-multicore 2019/10/01 19:35 openbsd 99bf39cb214a b7a87a83 .config log report syz
ci-openbsd-main 2019/09/26 20:53 openbsd 7a2afd89bbfb 2f1548bc .config log report syz
ci-openbsd-multicore 2019/09/23 07:38 openbsd 0b5401c01acd d96e88f3 .config log report syz
ci-openbsd-main 2019/09/18 22:09 openbsd dd27a1761061 14d41584 .config log report syz
ci-openbsd-multicore 2019/09/15 13:31 openbsd e2edd18482d8 32d59357 .config log report syz
ci-openbsd-multicore 2019/09/14 00:49 openbsd 33d1bf81aaf6 32d59357 .config log report syz
ci-openbsd-main 2019/09/11 00:44 openbsd ce97d859af21 a60cb4cd .config log report syz
ci-openbsd-main 2019/09/11 00:17 openbsd ce97d859af21 a60cb4cd .config log report syz
ci-openbsd-main 2019/09/10 23:56 openbsd ce97d859af21 a60cb4cd .config log report syz
ci-openbsd-main 2019/09/10 23:41 openbsd ce97d859af21 a60cb4cd .config log report syz
ci-openbsd-main 2019/09/10 19:51 openbsd 4f5a6e711025 a60cb4cd .config log report syz
ci-openbsd-multicore 2019/09/10 19:38 openbsd 4f5a6e711025 a60cb4cd .config log report syz
ci-openbsd-main 2019/11/07 21:29 openbsd b50d7ae0ca56 efb49b4d .config log report
ci-openbsd-main 2019/11/07 20:06 openbsd b50d7ae0ca56 efb49b4d .config log report
ci-openbsd-main 2019/11/07 17:12 openbsd b50d7ae0ca56 efb49b4d .config log report
ci-openbsd-main 2019/11/07 15:37 openbsd b50d7ae0ca56 efb49b4d .config log report
ci-openbsd-main 2019/11/07 14:36 openbsd b50d7ae0ca56 efb49b4d .config log report
ci-openbsd-main 2019/11/07 12:38 openbsd b50d7ae0ca56 efb49b4d .config log report
ci-openbsd-main 2019/11/07 06:11 openbsd 36a555e043b4 d797d201 .config log report
ci-openbsd-multicore 2019/11/07 00:47 openbsd 36a555e043b4 d797d201 .config log report
ci-openbsd-main 2019/11/07 00:30 openbsd 36a555e043b4 d797d201 .config log report
ci-openbsd-multicore 2019/11/06 23:07 openbsd 71d558da6271 da505f84 .config log report
ci-openbsd-multicore 2019/11/06 21:58 openbsd 71d558da6271 da505f84 .config log report
ci-openbsd-multicore 2019/11/06 20:47 openbsd 71d558da6271 da505f84 .config log report
ci-openbsd-multicore 2019/11/06 19:25 openbsd 71d558da6271 da505f84 .config log report
ci-openbsd-multicore 2019/11/06 17:48 openbsd 71d558da6271 da505f84 .config log report
ci-openbsd-multicore 2019/11/06 15:31 openbsd 71d558da6271 da505f84 .config log report
ci-openbsd-multicore 2019/11/06 14:08 openbsd 71d558da6271 da505f84 .config log report
ci-openbsd-multicore 2019/11/06 14:05 openbsd 71d558da6271 da505f84 .config log report
ci-openbsd-multicore 2019/11/06 12:35 openbsd 71d558da6271 da505f84 .config log report
ci-openbsd-multicore 2019/11/06 08:55 openbsd 38dc29e6b4c8 bc2c6e45 .config log report
ci-openbsd-multicore 2019/11/06 07:53 openbsd 38dc29e6b4c8 bc2c6e45 .config log report
ci-openbsd-multicore 2019/11/06 06:32 openbsd 38dc29e6b4c8 bc2c6e45 .config log report
ci-openbsd-multicore 2019/11/06 04:12 openbsd 38dc29e6b4c8 bc2c6e45 .config log report
ci-openbsd-multicore 2019/11/06 03:03 openbsd 38dc29e6b4c8 bc2c6e45 .config log report
ci-openbsd-multicore 2019/11/06 00:29 openbsd 38dc29e6b4c8 bc2c6e45 .config log report
ci-openbsd-main 2019/11/05 23:23 openbsd 1f857ec20594 0f3ec414 .config log report
ci-openbsd-multicore 2019/11/05 22:09 openbsd 1f857ec20594 0f3ec414 .config log report
ci-openbsd-main 2019/11/05 20:44 openbsd 1f857ec20594 0f3ec414 .config log report
ci-openbsd-multicore 2019/11/05 19:42 openbsd 1f857ec20594 0f3ec414 .config log report
ci-openbsd-main 2019/11/05 18:34 openbsd 1f857ec20594 0f3ec414 .config log report
ci-openbsd-multicore 2019/11/05 17:21 openbsd 1f857ec20594 0f3ec414 .config log report
ci-openbsd-main 2019/11/05 16:30 openbsd 1f857ec20594 0f3ec414 .config log report
ci-openbsd-main 2019/11/05 15:24 openbsd 1f857ec20594 0f3ec414 .config log report
ci-openbsd-main 2019/11/05 13:49 openbsd 1f857ec20594 0f3ec414 .config log report
ci-openbsd-main 2019/11/05 12:24 openbsd 1f857ec20594 0f3ec414 .config log report
ci-openbsd-main 2019/11/05 11:23 openbsd 67035d4b95d6 76630fc9 .config log report
ci-openbsd-multicore 2019/11/05 10:09 openbsd 67035d4b95d6 76630fc9 .config log report
ci-openbsd-multicore 2019/11/05 09:18 openbsd 67035d4b95d6 76630fc9 .config log report
ci-openbsd-main 2019/11/05 08:09 openbsd 67035d4b95d6 76630fc9 .config log report
ci-openbsd-main 2019/11/05 07:02 openbsd 67035d4b95d6 76630fc9 .config log report
ci-openbsd-multicore 2019/11/05 05:34 openbsd 67035d4b95d6 76630fc9 .config log report
ci-openbsd-multicore 2019/11/05 02:54 openbsd 67035d4b95d6 76630fc9 .config log report
ci-openbsd-main 2019/11/05 01:12 openbsd 67035d4b95d6 76630fc9 .config log report
ci-openbsd-multicore 2019/11/05 00:07 openbsd 67035d4b95d6 76630fc9 .config log report
ci-openbsd-main 2019/11/04 22:32 openbsd 8e2343b4ffae 18e12644 .config log report
ci-openbsd-multicore 2019/11/04 21:21 openbsd 38a870a3a941 18e12644 .config log report
ci-openbsd-multicore 2019/11/04 19:36 openbsd 38a870a3a941 18e12644 .config log report
ci-openbsd-multicore 2019/11/04 19:25 openbsd 38a870a3a941 18e12644 .config log report
ci-openbsd-main 2019/11/04 18:16 openbsd 8e2343b4ffae 18e12644 .config log report
ci-openbsd-multicore 2019/11/04 16:53 openbsd 38a870a3a941 18e12644 .config log report
ci-openbsd-main 2019/09/10 18:53 openbsd 4f5a6e711025 a60cb4cd .config log report