syzbot

 sign-in | mailing list | source | docs

[openbsd] uvm_fault: wsmux_detach_sc
Status: fixed on 2019/02/19 05:10
Reported-by: syzbot+03f7377a9848d7d008c9@syzkaller.appspotmail.com
Fix commit: 0c0bf631 Serialize access to the list of attached child devices belonging to a wsmux. When invoking wsevsrc_* functions on a attached child device, underlying driver can sleep; this introduces a race where another thread is able to modify the list leading to all kinds of corruptions.
First crash: 14d, last: 3d02h
duplicates:
Title Repro Count Last Reported Patched Status
uvm_fault: wsmux_do_ioctl (3) C 2 1d20h 9d19h 0/3 closed as dup on 2019/02/10 09:16
uvm_fault: wsmux_mux_close 1 23d 23d 0/3 closed as dup on 2019/02/08 09:54

Sample crash report:

All crashes (10):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro
ci-openbsd-multicore 2019/02/10 01:14 openbsd 4071f800 d75f7686 .config log report syz
ci-openbsd-multicore 2019/02/12 19:52 openbsd 9a16e850 6ecc6d0f .config log report syz
ci-openbsd-multicore 2019/02/05 07:14 openbsd 6e31582a d672172c .config log report
ci-openbsd-multicore 2019/02/16 16:56 openbsd f4f0873d f42dee6d .config log report
ci-openbsd-multicore 2019/02/15 19:14 openbsd 64a70754 f6f233c0 .config log report
ci-openbsd-multicore 2019/02/12 19:21 openbsd 9a16e850 6ecc6d0f .config log report
ci-openbsd-multicore 2019/02/10 00:56 openbsd 4071f800 d75f7686 .config log report
ci-openbsd-multicore 2019/02/09 23:20 openbsd 4071f800 d75f7686 .config log report
ci-openbsd-multicore 2019/02/08 13:25 openbsd e11291e4 aa4feb03 .config log report
ci-openbsd-multicore 2019/02/05 15:22 openbsd 6e31582a d672172c .config log report