syzbot


pool: free list modified: rttmr

Status: upstream: reported on 2024/03/22 00:05
Reported-by: syzbot+0160e931eeddc4d24fcd@syzkaller.appspotmail.com
First crash: 84d, last: 21d

Sample crash report:
panic: pool_p_free: rttmr free list modified: page 0xfffffd806b1d2000; item addr 0xfffffd806b1d2e60; offset 0x10=0x82dfa950
Stopped at      db_enter+0x1c:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
* 36474   7436      0     0x14000      0x200    0  systqmp
db_enter() at db_enter+0x1c sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff828d80b3) at panic+0x17b sys/kern/subr_prf.c:198
pool_p_free(ffffffff82d66438,fffffd806b1d2f90) at pool_p_free+0x20f sys/kern/subr_pool.c:984
pool_gc_pages(0) at pool_gc_pages+0x255 sys/kern/subr_pool.c:1583
taskq_thread(ffffffff82d3df30) at taskq_thread+0xf5 sys/kern/kern_task.c:448
end trace frame: 0x0, count: 10
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.

Crashes (5):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/05/24 14:16 openbsd 6859a790d2a4 8f98448e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2024/05/01 23:35 openbsd a6ba80fb8d43 3ba885bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2024/04/27 12:31 openbsd 22bab8566a4f 07b455f9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2024/04/06 21:22 openbsd 85fbf21ae5ae ca620dd8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2024/03/22 00:04 openbsd 173c810f1a3f 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
* Struck through repros no longer work on HEAD.