syzbot


kernel: protection fault trap, code=0 (8)
Status: fixed on 2021/02/10 20:48
Reported-by: syzbot+f47e8296ebd559f9bbff@syzkaller.appspotmail.com
Fix commit: 44a45654aa78 Interface group names must fit into IFNAMSIZ and be unique. But the kernel made the unique check before trunkating with strlcpy(). So there could be two interface groups with the same name. The kif is created by a name lookup. The trunkated names are equal, so there was only one kif owned by both groups. When the groups got destroyed, the single kif was removed twice from the RB tree. Check length of group name before doing the unique check. The empty group name was allowed and is now invalid. Reported-by: syzbot+f47e8296ebd559f9bbff@syzkaller.appspotmail.com OK deraadt@ gnezdo@ anton@ mvs@ claudio@
First crash: 362d, last: 173d
duplicates (1):
Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
panic: trap type 4, code=0, pc=ADDR 59 208d 361d 0/3 closed as dup on 2020/08/06 08:00
similar bugs (7):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd kernel: protection fault trap, code=0 (6) C 55024 606d 691d 3/3 fixed on 2019/12/05 05:48
openbsd kernel: protection fault trap, code=0 (4) C 759 773d 886d 3/3 fixed on 2019/06/22 17:44
openbsd kernel: protection fault trap, code=0 C 16 972d 977d 1/3 fixed on 2018/12/04 18:27
openbsd kernel: protection fault trap, code=0 (3) C 3 918d 918d 3/3 fixed on 2019/01/27 23:19
openbsd kernel: protection fault trap, code=0 (7) syz 774692 362d 606d 3/3 fixed on 2020/08/05 06:16
openbsd kernel: protection fault trap, code=0 (2) syz 109 923d 947d 3/3 fixed on 2019/01/22 07:18
openbsd kernel: protection fault trap, code=0 (5) C 607 698d 772d 3/3 fixed on 2019/09/05 13:34
Patch testing requests:
Created Duration User Patch Repo Result
2021/02/10 07:15 15m anton@basename.se https://github.com/mptre/openbsd-src syzkaller OK

Sample crash report:

Crashes (1348):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-openbsd-multicore 2020/08/07 03:44 openbsd f232436aca1c cb436c69 .config log report syz
ci-openbsd-multicore 2021/02/10 08:56 openbsd 7471cb3479e4 9c8b8541 .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/02/09 23:04 openbsd 0049eb19c27a 2bd9619f .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/02/09 09:50 openbsd ee570821402e 2bd9619f .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/02/08 20:43 openbsd 0fa8a2f57423 2bd9619f .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/02/08 09:52 openbsd 605ba3c6f07d 2ce644fc .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/02/07 20:32 openbsd 8109099ad627 2ce644fc .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/02/07 07:20 openbsd d1d999610aa4 2ce644fc .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/02/07 07:18 openbsd d1d999610aa4 2ce644fc .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/02/07 01:22 openbsd d1d999610aa4 0655e081 .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/02/06 12:11 openbsd 311d0bea6ec2 0655e081 .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/02/06 01:36 openbsd 344f11213fd3 23a562df .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/02/05 12:27 openbsd 2897a1a84d74 23a562df .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/02/04 23:17 openbsd 1d59cccacc5f 23a562df .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/02/03 23:02 openbsd 5f012d926be7 624dad51 .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/02/03 09:53 openbsd 32fcbdd0e34d 624dad51 .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/02/02 08:25 openbsd 5634c1deffbf 19e09687 .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/02/02 02:33 openbsd 5634c1deffbf e6b95f32 .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/02/01 01:06 openbsd 697029093832 fc9fd31e .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/01/31 11:48 openbsd d5980c09d204 fc9fd31e .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/01/30 22:25 openbsd af9bfb515b25 fc9fd31e .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/01/30 09:06 openbsd eab256a9c28e fc9fd31e .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/01/29 19:53 openbsd 9a0bfaf36500 fc9fd31e .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/01/29 07:25 openbsd ddc6a5392700 6593fd32 .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/01/29 06:21 openbsd ddc6a5392700 7df34f59 .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/01/28 16:59 openbsd ed4744ab1e61 7df34f59 .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/01/27 04:46 openbsd d0bb67025f27 a0ebf917 .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/01/26 16:30 openbsd f8e1ec60098a 55a7d4df .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/01/26 03:05 openbsd 044aaac6d42e 52e37319 .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/01/25 00:36 openbsd 6168d348dfcb 52e37319 .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/01/24 11:25 openbsd 1013d93e4cd2 52e37319 .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/01/23 22:13 openbsd e3ee239e72ff 52e37319 .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/01/23 09:00 openbsd f273e3805353 52e37319 .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/01/22 19:39 openbsd b4e310e160ef 52e37319 .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/01/22 13:30 openbsd b4e310e160ef d4f4eca5 .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/01/22 00:22 openbsd a6d654780e89 d4f4eca5 .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/01/21 11:11 openbsd d075035988bf d4f4eca5 .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/01/20 22:09 openbsd 19b9c9adff0c d4f4eca5 .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/01/20 08:39 openbsd c317fba5c295 d4f4eca5 .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/01/20 05:12 openbsd c317fba5c295 63631df1 .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/01/19 16:04 openbsd 38da627a66fb 63631df1 .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/01/19 16:00 openbsd 38da627a66fb 63631df1 .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/01/19 02:45 openbsd e2b629398376 63631df1 .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/01/18 13:31 openbsd ff78d6edd4ee 63631df1 .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/01/18 11:37 openbsd ff78d6edd4ee fd103621 .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/01/17 22:24 openbsd 677e2e7f3fc5 fd103621 .config log report kernel: protection fault trap, code=0
ci-openbsd-multicore 2021/01/16 16:37 openbsd 4c71f9ca5b54 65a7a854 .config log report
ci-openbsd-multicore 2021/01/16 03:29 openbsd 53e51ee233df 65a7a854 .config log report
ci-openbsd-multicore 2021/01/15 14:20 openbsd 4d1c17a2d2e1 65a7a854 .config log report
ci-openbsd-multicore 2021/01/15 01:09 openbsd 8df0541613dd 65a7a854 .config log report
ci-openbsd-main 2021/01/06 22:21 openbsd a7244e9f7440 c104d4a3 .config log report
ci-openbsd-multicore 2020/08/05 07:41 openbsd 455c25c8b800 02034dac .config log report