syzbot


SYZFAIL: tun: can't open device
Status: fixed on 2021/03/10 05:59
Reported-by: syzbot+2ca11c73711a1d0b5c6c@syzkaller.appspotmail.com
Fix commit: 43dfcaac64e4 Issuing FIOSETOWN and TIOCSPGRP ioctl commands on a tun(4) device leaks device references causing a hang while trying to remove the same interface since the reference count will never reach zero. Instead of returning, break out of the switch in order to ensure that tun_put() gets called.
First crash: 147d, last: 147d
similar bugs (1):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd SYZFAIL: tun: can't open device (2) 1 5d05h 5d05h 0/3 upstream: reported on 2021/07/24 18:00
Patch testing requests:
Created Duration User Patch Repo Result
2021/03/09 07:43 12m anton@basename.se https://github.com/mptre/openbsd-src tun error

Sample crash report:

Crashes (4):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-openbsd-main 2021/03/04 07:34 openbsd 659bd6317af8 d7e4e604 .config log report syz SYZFAIL: tun: can't open device
ci-openbsd-multicore 2021/03/04 07:21 openbsd 659bd6317af8 d7e4e604 .config log report syz SYZFAIL: tun: can't open device
ci-openbsd-main 2021/03/04 06:26 openbsd 659bd6317af8 d7e4e604 .config log report SYZFAIL: tun: can't open device
ci-openbsd-multicore 2021/03/04 06:18 openbsd 659bd6317af8 d7e4e604 .config log report SYZFAIL: tun: can't open device