syzbot

 sign-in | mailing list | source | docs
🐞 Open [144]
🐞 Fixed [274]
🐞 Invalid [739]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

pool: free list modified: pdppl (4)

Status: upstream: reported on 2024/04/28 16:05
Reported-by: syzbot+1a3f5900c4cc24e98d1d@syzkaller.appspotmail.com
First crash: 207d, last: 29d
▶ ▼ Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd pool: free list modified: pdppl (3) 1 761d 761d 0/3 auto-obsoleted due to no activity on 2023/01/20 06:59
openbsd pool: free list modified: pdppl 1 1846d 1846d 0/3 closed as invalid on 2019/11/03 08:39
openbsd pool: free list modified: pdppl (2) 1 1078d 1078d 0/3 auto-closed as invalid on 2022/03/09 08:14

Sample crash report:
pmap_panic: pool_do_get: pdppl free list modified: page 0xfffffd80522f9000; item addr 0xfffffd80522f9000; offset 0x0=0x4ece1e92d8dd7f98 != 0x4ece1e92d8dd7fda
Starting stack trace...
panic(ffffffff8301131c) at panic+0x1d0 sys/kern/subr_prf.c:229
pool_do_get(ffffffff83539fc8,1,ffff80002f554938) at pool_do_get+0x59d
pool_get(ffffffff83539fc8,1) at pool_get+0x141
pmap_create() at pmap_create+0x197 sys/arch/amd64/amd64/pmap.c:1391
uvmspace_fork(ffff8000359adb50) at uvmspace_fork+0x7f uvmspace_alloc sys/uvm/uvm_map.c:3242 [inline]
uvmspace_fork(ffff8000359adb50) at uvmspace_fork+0x7f sys/uvm/uvm_map.c:3813
process_new(ffff800032d9d1e0,ffff8000359adb50,1) at process_new+0x553 sys/kern/kern_fork.c:279
fork1(ffff8000357ac048,1,ffffffff82676f20,0,ffff80002f554bc0,0) at fork1+0x3ea sys/kern/kern_fork.c:405
syscall(ffff80002f554c70) at syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:179 [inline]
syscall(ffff80002f554c70) at syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7dbee576ad20, count: 248
End of stack trace.
unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d1b000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d1c000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d1d000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d1e000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d1f000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d20000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d21000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d22000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d23000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d24000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d25000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d26000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d27000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d28000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d29000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d2a000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d2b000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d2c000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d2d000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d2e000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d2f000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d30000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d31000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d32000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d33000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d34000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d35000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d36000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d37000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d38000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d39000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d3a000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d3b000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d3c000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d3d000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d3e000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d3f000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d40000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d41000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d42000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d43000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d44000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d45000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d46000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d47000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d48000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d49000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d4a000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d4b000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d4c000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d4d000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d4e000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d4f000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d50000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d51000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d52000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d53000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d54000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d55000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d56000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d57000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d58000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d59000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d5a000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d5b000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d5c000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d5d000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d5e000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d5f000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d60000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d61000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d62000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d63000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d64000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d65000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d66000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d67000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d68000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d69000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d6a000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d6b000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d6c000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d6d000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d6e000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d6f000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d70000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d71000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d72000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d73000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebe4d7pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebae8b9000 didn't change!
pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebae8ba000 didn't change!pmap_unwire: wiring for pmap 0xfffffd806e645ab0 va 0xfebcdc1f000 didn't change!

Crashes (8):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/10/23 00:48 openbsd 1a81a8e6e44b 9d74f456 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: pdppl
2024/07/28 11:07 openbsd 5ccef5843652 46eb10b7 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: pdppl
2024/05/17 00:38 openbsd b20edd337af0 ad5321c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: pdppl
2024/05/07 12:34 openbsd debf255c65d9 cb2dcc0e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main pool: free list modified: pdppl
2024/05/07 07:48 openbsd 21e142091427 fa7a5cf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: pdppl
2024/05/04 12:30 openbsd c604ab84837e 610f2a54 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main pool: free list modified: pdppl
2024/05/01 02:26 openbsd ab0363c32c56 3ba885bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main pool: free list modified: pdppl
2024/04/28 16:04 openbsd b98581f594cd 07b455f9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: pdppl
* Struck through repros no longer work on HEAD.