syzbot


SYZFAIL: tun_id out of range (4)

Status: upstream: reported on 2025/02/03 09:05
Reported-by: syzbot+63dfa677f3247949ec5e@syzkaller.appspotmail.com
First crash: 160d, last: now
Similar bugs (3)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd SYZFAIL: tun_id out of range -1 109 1298d 1298d 0/3 closed as invalid on 2021/12/23 10:56
openbsd SYZFAIL: tun_id out of range (3) -1 253765 235d 262d 0/3 auto-obsoleted due to no activity on 2025/01/09 12:08
openbsd SYZFAIL: tun_id out of range (2) -1 182 1276d 1276d 0/3 closed as invalid on 2022/01/15 08:41

Sample crash report:
SYZFAIL: tun_id out of range
tun_id=8 (errno 1: Operation not permitted)
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
SYZFAIL: tun_id out of range
tun_id=8 (errno 1: Operation not permitted)
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
SYZFAIL: tun_id out of range
tun_id=8 (errno 1: Operation not permitted)
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
SYZFAIL: tun_id out of range
tun_id=8 (errno 1: Operation not permitted)
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
SYZFAIL: tun_id out of range
tun_id=8 (errno 1: Operation not permitted)
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
SYZFAIL: tun_id out of range
tun_id=8 (errno 1: Operation not permitted)
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
SYZFAIL: tun_id out of range
tun_id=8 (errno 1: Operation not permitted)
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
SYZFAIL: tun_id out of range
tun_id=8 (errno 1: Operation not permitted)
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
SYZFAIL: tun_id out of range
tun_id=8 (errno 1: Operation not permitted)
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
SYZFAIL: tun_id out of range
tun_id=8 (errno 1: Operation not permitted)
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
SYZFAIL: tun_id out of range
tun_id=8 (errno 1: Operation not permitted)
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
SYZFAIL: tun_id out of range
tun_id=8 (errno 1: Operation not permitted)
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
SYZFAIL: tun_id out of range
tun_id=8 (errno 1: Operation not permitted)
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
SYZFAIL: tun_id out of range
tun_id=8 (errno 1: Operation not permitted)
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
SYZFAIL: tun_id out of range
tun_id=8 (errno 1: Operation not permitted)
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
SYZFAIL: tun_id out of range
tun_id=8 (errno 1: Operation not permitted)
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
SYZFAIL: tun_id out of range
tun_id=8 (errno 1: Operation not permitted)
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
SYZFAIL: tun_id out of range
tun_id=8 (errno 1: Operation not permitted)
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
SYZFAIL: tun_id out of range
tun_id=8 (errno 1: Operation not permitted)
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
SYZFAIL: tun_id out of range
tun_id=8 (errno 1: Operation not permitted)
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
SYZFAIL: tun_id out of range
tun_id=8 (errno 1: Operation not permitted)
SYZFAIL: repeatedly failed to execute the program
proc=8 req=1466 state=1 status=67 (errno 4: Interrupted system call)


OpenBSD/amd64 (Amnesiac) (tty00)

login: uvn_flush: obj=0xfffffd806d6fd610, offset=0x3ff000.  error during pageout.
uvn_flush: WARNING: changes to page may be lost!
set $lines = 0
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
Password:
Login incorrect
login: show panic
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
Password:
Login incorrect
login: show registers
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
Password:uvn_flush: obj=0xfffffd806d6fd340, offset=0x3ff000.  error during pageout.
uvn_flush: WARNING: changes to page may be lost!

Login incorrect
login: ps
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
Password:
Login incorrect
show malloc
login: malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
malloc() warning: unknown char in MALLOC_OPTIONS
Password:
Login incorrect

Crashes (1127991):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/07/14 08:03 openbsd 9c5d53a61b43 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: tun_id out of range
2025/07/14 08:00 openbsd 40f26cfbae82 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: tun_id out of range
2025/07/14 07:57 openbsd 9c5d53a61b43 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid SYZFAIL: tun_id out of range
2025/07/14 07:52 openbsd 9c5d53a61b43 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid SYZFAIL: tun_id out of range
2025/07/14 07:48 openbsd 9c5d53a61b43 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid SYZFAIL: tun_id out of range
2025/07/14 07:43 openbsd 9c5d53a61b43 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid SYZFAIL: tun_id out of range
2025/07/14 07:39 openbsd 9c5d53a61b43 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid SYZFAIL: tun_id out of range
2025/07/14 07:35 openbsd 9c5d53a61b43 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid SYZFAIL: tun_id out of range
2025/07/14 07:32 openbsd 40f26cfbae82 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: tun_id out of range
2025/07/14 07:27 openbsd 9c5d53a61b43 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid SYZFAIL: tun_id out of range
2025/07/14 07:23 openbsd 9c5d53a61b43 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid SYZFAIL: tun_id out of range
2025/07/14 07:20 openbsd 9c5d53a61b43 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid SYZFAIL: tun_id out of range
2025/07/14 07:17 openbsd 9c5d53a61b43 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid SYZFAIL: tun_id out of range
2025/07/14 07:13 openbsd 9c5d53a61b43 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid SYZFAIL: tun_id out of range
2025/07/14 07:09 openbsd 9c5d53a61b43 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid SYZFAIL: tun_id out of range
2025/07/14 07:05 openbsd 9c5d53a61b43 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid SYZFAIL: tun_id out of range
2025/07/14 07:02 openbsd 9c5d53a61b43 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid SYZFAIL: tun_id out of range
2025/07/14 06:58 openbsd 9c5d53a61b43 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid SYZFAIL: tun_id out of range
2025/07/14 06:55 openbsd 9c5d53a61b43 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid SYZFAIL: tun_id out of range
2025/07/14 06:51 openbsd 9c5d53a61b43 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid SYZFAIL: tun_id out of range
2025/07/14 06:49 openbsd 9c5d53a61b43 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid SYZFAIL: tun_id out of range
2025/07/14 06:45 openbsd 9c5d53a61b43 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid SYZFAIL: tun_id out of range
2025/07/14 06:41 openbsd 9c5d53a61b43 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid SYZFAIL: tun_id out of range
2025/07/14 06:37 openbsd 9c5d53a61b43 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid SYZFAIL: tun_id out of range
2025/07/14 06:34 openbsd 9c5d53a61b43 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid SYZFAIL: tun_id out of range
2025/07/14 06:30 openbsd 9c5d53a61b43 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid SYZFAIL: tun_id out of range
2025/07/14 06:25 openbsd 9c5d53a61b43 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: tun_id out of range
2025/07/14 06:21 openbsd 9c5d53a61b43 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid SYZFAIL: tun_id out of range
2025/07/14 06:17 openbsd 9c5d53a61b43 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid SYZFAIL: tun_id out of range
2025/07/14 06:13 openbsd 9c5d53a61b43 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid SYZFAIL: tun_id out of range
2025/07/14 06:08 openbsd 9c5d53a61b43 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid SYZFAIL: tun_id out of range
2025/07/14 06:05 openbsd 9c5d53a61b43 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid SYZFAIL: tun_id out of range
2025/07/14 06:01 openbsd 9c5d53a61b43 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid SYZFAIL: tun_id out of range
2025/07/14 05:58 openbsd 40f26cfbae82 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: tun_id out of range
2025/07/14 05:54 openbsd 9c5d53a61b43 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid SYZFAIL: tun_id out of range
2025/07/14 05:50 openbsd 9c5d53a61b43 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid SYZFAIL: tun_id out of range
2025/07/14 05:45 openbsd 9c5d53a61b43 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid SYZFAIL: tun_id out of range
2025/07/14 05:41 openbsd 9c5d53a61b43 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid SYZFAIL: tun_id out of range
2025/07/14 05:38 openbsd 9c5d53a61b43 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid SYZFAIL: tun_id out of range
2025/07/14 05:34 openbsd 9c5d53a61b43 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore SYZFAIL: tun_id out of range
2025/07/14 05:30 openbsd 9c5d53a61b43 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid SYZFAIL: tun_id out of range
2025/07/14 05:26 openbsd 9c5d53a61b43 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid SYZFAIL: tun_id out of range
2025/07/14 05:22 openbsd 9c5d53a61b43 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid SYZFAIL: tun_id out of range
2025/07/14 05:19 openbsd 9c5d53a61b43 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid SYZFAIL: tun_id out of range
2025/02/03 09:05 openbsd db5d28f093d6 568559e4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main SYZFAIL: tun_id out of range
* Struck through repros no longer work on HEAD.