syzbot


pool: free list modified: pdppl (5)

Status: upstream: reported on 2025/11/23 22:29
Reported-by: syzbot+e5295f4c534d9833a54b@syzkaller.appspotmail.com
First crash: 158d, last: 39d
Similar bugs (4)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd pool: free list modified: pdppl (3) -1 1 1286d 1286d 0/3 auto-obsoleted due to no activity on 2023/01/20 06:59
openbsd pool: free list modified: pdppl -1 1 2371d 2371d 0/3 closed as invalid on 2019/11/03 08:39
openbsd pool: free list modified: pdppl (4) -1 8 555d 732d 0/3 auto-obsoleted due to no activity on 2025/01/21 00:49
openbsd pool: free list modified: pdppl (2) -1 1 1603d 1603d 0/3 auto-closed as invalid on 2022/03/09 08:14

Sample crash report:
panic: pool_do_get: pdppl free list modified: page 0xfffffd806a600000; item addr 0xfffffd806a600000; offset 0x0=0x6e4b32e6861ea92c != 0x6e4b32e6861ea96c
Starting stack trace...
panic(ffffffff834500b5) at panic+0x1ba sys/kern/subr_prf.c:229
pool_do_get(ffffffff839d05e8,1,ffff8000380d99e8) at pool_do_get+0x574 sys/kern/subr_pool.c:747
pool_get(ffffffff839d05e8,1) at pool_get+0x11a sys/kern/subr_pool.c:-1
pmap_create() at pmap_create+0x18c sys/arch/amd64/amd64/pmap.c:1391
uvmspace_fork(ffff8000ffff8498) at uvmspace_fork+0x7f uvmspace_init sys/uvm/uvm_map.c:-1 [inline]
uvmspace_fork(ffff8000ffff8498) at uvmspace_fork+0x7f uvmspace_alloc sys/uvm/uvm_map.c:3258 [inline]
uvmspace_fork(ffff8000ffff8498) at uvmspace_fork+0x7f sys/uvm/uvm_map.c:3743
process_new(ffff8000318c1a08,ffff8000ffff8498,1) at process_new+0x558 sys/kern/kern_fork.c:281
fork1(ffff8000344ccd20,1,ffffffff810bbe00,0,ffff8000380d9c60,0) at fork1+0x3f2 sys/kern/kern_fork.c:-1
syscall(ffff8000380d9d10) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff8000380d9d10) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x795c9b528920, count: 248
End of stack trace.

Crashes (8):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/03/22 07:26 openbsd 67e6794a9e1c 5b92003d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main pool: free list modified: pdppl
2026/03/18 16:28 openbsd 561bf2d2294a 0199f9a1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main pool: free list modified: pdppl
2026/03/17 17:14 openbsd 7b59c65f5490 c8810548 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: pdppl
2026/03/16 04:09 openbsd fd49698d88e5 351cb5cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main pool: free list modified: pdppl
2026/01/24 18:30 openbsd 652212f689da 40acda8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main pool: free list modified: pdppl
2026/01/15 04:17 openbsd ac9e191703f1 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: pdppl
2025/12/27 01:12 openbsd 5ce3a7f811ea 5dc09de1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: pdppl
2025/11/23 22:28 openbsd f4c39256adbf 4fb8ef37 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main pool: free list modified: pdppl
* Struck through repros no longer work on HEAD.