syzbot


pool: free list modified: fdescpl (4)

Status: upstream: reported on 2023/09/04 09:48
Reported-by: syzbot+4d9ac021f7ec741cfa9b@syzkaller.appspotmail.com
First crash: 295d, last: 34d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd pool: free list modified: fdescpl 1 886d 886d 0/3 auto-closed as invalid on 2022/04/21 05:57
openbsd pool: free list modified: fdescpl (2) C 6 734d 779d 3/3 fixed on 2022/06/27 15:33
openbsd pool: free list modified: fdescpl (3) 10 425d 718d 0/3 auto-obsoleted due to no activity on 2023/07/25 18:20

Sample crash report:
panic: pool_do_get: fdescpl free list modified: page 0xfffffd80666be000; item addr 0xfffffd80666be5e0; offset 0x48=0xdead4113
Starting stack trace...
panic(ffffffff828db730) at panic+0x16f sys/kern/subr_prf.c:229
pool_do_get(ffffffff82dedbb0,9,ffff80003596d4b8) at pool_do_get+0x483 sys/kern/subr_pool.c:739
pool_get(ffffffff82dedbb0,9) at pool_get+0xf0 sys/kern/subr_pool.c:582
fdcopy(ffff8000373d2ce0) at fdcopy+0x44 fdinit sys/kern/kern_descrip.c:1067 [inline]
fdcopy(ffff8000373d2ce0) at fdcopy+0x44 sys/kern/kern_descrip.c:1106
process_new(ffff80002a214a60,ffff8000373d2ce0,1) at process_new+0x390 sys/kern/kern_fork.c:273
fork1(ffff80003739dc68,1,ffffffff81dddec0,0,ffff80003596d6e0,0) at fork1+0x2ef sys/kern/kern_fork.c:399
syscall(ffff80003596d790) at syscall+0x854 mi_syscall sys/sys/syscall_mi.h:180 [inline]
syscall(ffff80003596d790) at syscall+0x854 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x716135f02ab0, count: 249
End of stack trace.

Crashes (14):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/05/21 17:01 openbsd 6fb00c133d1f 4c0d3ee3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: fdescpl
2024/02/29 20:07 openbsd b0ca02faf19d 352ab904 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: fdescpl
2024/02/05 06:58 openbsd ea15225f4d09 a67b2c42 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid pool: free list modified: fdescpl
2024/02/02 11:47 openbsd e3bed6ebde89 60bf9982 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid pool: free list modified: fdescpl
2024/01/24 08:28 openbsd 9cf6efbe4e96 1e153dc8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: fdescpl
2024/01/23 21:08 openbsd c96eac122127 74d5594c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: fdescpl
2024/01/19 17:00 openbsd 59674edd175d 9bd8dcda .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: fdescpl
2024/01/12 14:06 openbsd 2d01bf8aac77 f6fa7c28 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: fdescpl
2023/10/20 13:13 openbsd 77568e37aedd a42250d2 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid pool: free list modified: fdescpl
2023/09/27 18:30 openbsd 903579bcb1af 2895a507 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid pool: free list modified: fdescpl
2023/09/12 15:29 openbsd b49820e16fba 59da8366 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid pool: free list modified: fdescpl
2023/09/10 01:00 openbsd 027215cf0916 6654cf89 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid pool: free list modified: fdescpl
2023/09/08 21:10 openbsd 13095e6dd073 6654cf89 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: fdescpl
2023/09/04 09:47 openbsd 1c33b230a824 696ea0d2 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid pool: free list modified: fdescpl
* Struck through repros no longer work on HEAD.