syzbot


pool: free list modified: fdescpl (4)

Status: upstream: reported on 2023/09/04 09:48
Reported-by: syzbot+4d9ac021f7ec741cfa9b@syzkaller.appspotmail.com
First crash: 236d, last: 58d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd pool: free list modified: fdescpl 1 827d 827d 0/3 auto-closed as invalid on 2022/04/21 05:57
openbsd pool: free list modified: fdescpl (2) C 6 676d 721d 3/3 fixed on 2022/06/27 15:33
openbsd pool: free list modified: fdescpl (3) 10 367d 660d 0/3 auto-obsoleted due to no activity on 2023/07/25 18:20

Sample crash report:
login: panic: pool_do_get: fdescpl free list modified: page 0xfffffd8008bdb000; item addr 0xfffffd8008bdb5d0; offset 0x48=0xdeaf4153
Starting stack trace...
panic(ffffffff82917ec9) at panic+0x16f sys/kern/subr_prf.c:229
pool_do_get(ffffffff82ebeb98,9,ffff80002bc84638) at pool_do_get+0x484 sys/kern/subr_pool.c:739
pool_get(ffffffff82ebeb98,9) at pool_get+0xed sys/kern/subr_pool.c:582
fdcopy(ffff8000373991e8) at fdcopy+0x48 fdinit sys/kern/kern_descrip.c:1067 [inline]
fdcopy(ffff8000373991e8) at fdcopy+0x48 sys/kern/kern_descrip.c:1106
process_new(ffff800030cf9d58,ffff8000373991e8,1) at process_new+0x390 sys/kern/kern_fork.c:273
fork1(ffff80002a20ad58,1,ffffffff82626e90,0,ffff80002bc84860,0) at fork1+0x318 sys/kern/kern_fork.c:399
syscall(ffff80002bc84910) at syscall+0x533 mi_syscall sys/sys/syscall_mi.h:183 [inline]
syscall(ffff80002bc84910) at syscall+0x533 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x77b8614406b0, count: 249
End of stack trace.

Crashes (13):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/02/29 20:07 openbsd b0ca02faf19d 352ab904 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: fdescpl
2024/02/05 06:58 openbsd ea15225f4d09 a67b2c42 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid pool: free list modified: fdescpl
2024/02/02 11:47 openbsd e3bed6ebde89 60bf9982 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid pool: free list modified: fdescpl
2024/01/24 08:28 openbsd 9cf6efbe4e96 1e153dc8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: fdescpl
2024/01/23 21:08 openbsd c96eac122127 74d5594c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: fdescpl
2024/01/19 17:00 openbsd 59674edd175d 9bd8dcda .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: fdescpl
2024/01/12 14:06 openbsd 2d01bf8aac77 f6fa7c28 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: fdescpl
2023/10/20 13:13 openbsd 77568e37aedd a42250d2 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid pool: free list modified: fdescpl
2023/09/27 18:30 openbsd 903579bcb1af 2895a507 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid pool: free list modified: fdescpl
2023/09/12 15:29 openbsd b49820e16fba 59da8366 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid pool: free list modified: fdescpl
2023/09/10 01:00 openbsd 027215cf0916 6654cf89 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid pool: free list modified: fdescpl
2023/09/08 21:10 openbsd 13095e6dd073 6654cf89 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: fdescpl
2023/09/04 09:47 openbsd 1c33b230a824 696ea0d2 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid pool: free list modified: fdescpl
* Struck through repros no longer work on HEAD.