syzbot


panic: pool_do_get: pfstate: page empty

Status: upstream: reported on 2024/05/28 00:52
Reported-by: syzbot+8f618565e046951f910d@syzkaller.appspotmail.com
First crash: 49d, last: 49d

Sample crash report:
panic: pool_do_get: pfstate: page empty
Starting stack trace...
panic(ffffffff8294b4f9) at panic+0x16f sys/kern/subr_prf.c:229
pool_do_get(ffffffff82d6a330,a,ffff80002a10ace8) at pool_do_get+0x40f sys/kern/subr_pool.c:726
pool_get(ffffffff82d6a330,a) at pool_get+0xf0 sys/kern/subr_pool.c:582
pf_create_state(ffff80002a10afa8,ffff800000db0fc8,0,0,ffff80002a10ae18,ffff80002a10ae20,a60ff3f8dcb067bf,ffff80002a10ae30,ffff80002a10afa8,ffffffff,0,ffff800000db0fc8) at pf_create_state+0x58 sys/net/pf.c:4599
pf_test_rule(ffff80002a10afa8,ffff80002a10b0a0,ffff80002a10b0a8,ffff80002a10b090,ffff80002a10b080,1) at pf_test_rule+0xe59 sys/net/pf.c:4522
pf_test(18,2,ffff800000de7000,ffff80002a10b220) at pf_test+0x1994 sys/net/pf.c:7710
ip6_output(fffffd806809da00,ffffffff82e530c8,0,0,ffff80002a10b2b0,0) at ip6_output+0x137d sys/netinet6/ip6_output.c:622
mld6_sendpkt(ffff800000e16e80,83,0) at mld6_sendpkt+0x2da sys/netinet6/mld6.c:473
mld6_fasttimeo() at mld6_fasttimeo+0x162 mld6_checktimer sys/netinet6/mld6.c:371 [inline]
mld6_fasttimeo() at mld6_fasttimeo+0x162 sys/netinet6/mld6.c:350
pffasttimo(ffffffff82ea0610) at pffasttimo+0x10b sys/kern/uipc_domain.c:284
timeout_run(ffffffff82ea0610) at timeout_run+0xd0 sys/kern/kern_timeout.c:666
softclock_thread(ffff8000ffffef60) at softclock_thread+0x113 sys/kern/kern_timeout.c:814
end trace frame: 0x0, count: 245
End of stack trace.

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/05/28 00:51 openbsd 98f39564523a f550015e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: pool_do_get: pfstate: page empty
* Struck through repros no longer work on HEAD.