syzbot


pool: free list modified: rttmr

Status: upstream: reported on 2024/03/22 00:05
Reported-by: syzbot+0160e931eeddc4d24fcd@syzkaller.appspotmail.com
First crash: 36d, last: 9h23m

Sample crash report:
panic: pool_p_free: rttmr free list modified: page 0xfffffd806fcef000; item addr 0xfffffd806fcefee0; offset 0x10=0x82e94e90
Starting stack trace...
panic(ffffffff828d1716) at panic+0x16f sys/kern/subr_prf.c:229
pool_p_free(ffffffff82e29798,fffffd806fceff90) at pool_p_free+0x20f sys/kern/subr_pool.c:984
pool_gc_pages(0) at pool_gc_pages+0x255 sys/kern/subr_pool.c:1583
taskq_thread(ffffffff82cf33f0) at taskq_thread+0xf5 sys/kern/kern_task.c:450
end trace frame: 0x0, count: 253
End of stack trace.

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/04/27 12:31 openbsd 22bab8566a4f 07b455f9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2024/04/06 21:22 openbsd 85fbf21ae5ae ca620dd8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2024/03/22 00:04 openbsd 173c810f1a3f 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
* Struck through repros no longer work on HEAD.