syzbot


pool: free list modified: rttmr

Status: upstream: reported on 2024/03/22 00:05
Reported-by: syzbot+0160e931eeddc4d24fcd@syzkaller.appspotmail.com
First crash: 527d, last: 5h04m

Sample crash report:
panic: pool_p_free: rttmr free list modified: page 0xfffffd805bfac000; item addr 0xfffffd805bfacee0; offset 0x10=0x83975f10
Starting stack trace...
panic(ffffffff83330d9e) at panic+0x1ba sys/kern/subr_prf.c:229
pool
_p_free(ffffffff83943490,fffffd805bfacf90) at pool_p_free+0x2d1 sys/kern/subr_pool.c:986
pool_reclaim(ffffffff83943490) at pool_reclaim+0x2c2 sys/kern/subr_pool.c:1152
pool_reclaim_all() at pool_reclaim_all+0x48 sys/kern/subr_pool.c:-1
kern_sysctl(ffff80003c96b774,1,0,ffff80003c96b7a8,200000000040,4,29697812f9b441a8) at kern_sysctl+0x1094 sys/kern/kern_sysctl.c:686
sys_sysctl(ffff80003c980560,ffff80003c96b8d0,ffff80003c96b820) at sys_sysctl+0x3e5 sys/kern/kern_sysctl.c:-1
syscall(ffff80003c96b8d0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80003c96b8d0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:746
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xa86f9cd5560, count: 249
End of stack trace.
syncing disks...set $lines = 0
set $maxwidth = 0
show panic
trace
show registers
show proc
ps
show all locks
show malloc
show all pools
machine ddbcpu 0
trace
machine ddbcpu 1
trace

Crashes (96):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/08/31 06:47 openbsd 956d2a6101a0 807a3b61 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main pool: free list modified: rttmr
2025/08/30 16:24 openbsd 4b2601e5b4e0 807a3b61 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2025/08/29 18:38 openbsd 7c5e7ac95d6c 3e1beec6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2025/08/25 11:13 openbsd 4f8e478bcc72 bf27483f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2025/08/25 05:53 openbsd bd153159a117 bf27483f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2025/08/24 05:04 openbsd e872a63396e1 bf27483f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main pool: free list modified: rttmr
2025/08/23 23:03 openbsd e872a63396e1 bf27483f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2025/08/23 20:24 openbsd e872a63396e1 bf27483f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2025/08/23 18:29 openbsd e872a63396e1 bf27483f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2025/08/20 00:17 openbsd 5f352b01c2c4 254a27c1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2025/08/19 18:03 openbsd 5f352b01c2c4 254a27c1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2025/08/18 01:02 openbsd d066b23bbb5a 1804e95e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2025/08/16 13:41 openbsd 0823c7e0b279 1804e95e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2025/08/16 11:35 openbsd 0823c7e0b279 1804e95e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2025/08/16 09:32 openbsd 0823c7e0b279 1804e95e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2025/08/16 00:45 openbsd 1733a114764f 1804e95e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2025/08/15 20:16 openbsd 1733a114764f 1804e95e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2025/08/15 12:13 openbsd bc42849e5050 1804e95e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2025/08/15 03:12 openbsd bc42849e5050 1804e95e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2025/08/14 07:34 openbsd 7a15ea66e78c 22ec1469 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2025/08/14 04:34 openbsd f6ad99933bf1 22ec1469 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2025/08/13 18:50 openbsd f6ad99933bf1 22ec1469 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2025/08/13 12:22 openbsd 304c6f61d3c6 22ec1469 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2025/08/13 09:41 openbsd 304c6f61d3c6 22ec1469 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2025/08/13 07:34 openbsd 304c6f61d3c6 22ec1469 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2025/08/13 06:18 openbsd 304c6f61d3c6 22ec1469 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2025/08/12 23:36 openbsd ca8bfee27b33 22ec1469 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2025/08/12 09:43 openbsd 4f0517bc68fc c06e8995 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2025/08/11 17:15 openbsd 3e54954732e9 32a0e5ed .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2025/08/11 10:35 openbsd 3e54954732e9 32a0e5ed .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main pool: free list modified: rttmr
2025/08/10 01:54 openbsd 6d30732ef287 32a0e5ed .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2025/08/08 16:30 openbsd 297fbc8e674e 32a0e5ed .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2025/08/07 14:15 openbsd 01075e58a8ba 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main pool: free list modified: rttmr
2025/08/06 06:37 openbsd f0bae7c1d04d 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2025/08/05 07:04 openbsd ba714b803396 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2025/08/05 05:41 openbsd ba714b803396 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2025/08/03 07:29 openbsd bf6d80a8c313 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main pool: free list modified: rttmr
2025/08/03 01:26 openbsd abd775332ea5 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main pool: free list modified: rttmr
2025/08/02 12:43 openbsd 4c5c4401a4d8 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main pool: free list modified: rttmr
2025/08/02 08:40 openbsd 4c5c4401a4d8 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main pool: free list modified: rttmr
2025/08/02 07:27 openbsd 4c5c4401a4d8 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2025/07/31 07:13 openbsd 788294299689 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main pool: free list modified: rttmr
2025/07/30 23:48 openbsd e727a61a1a01 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main pool: free list modified: rttmr
2025/07/30 14:27 openbsd 8eeaa0a347fe 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main pool: free list modified: rttmr
2025/07/30 10:22 openbsd 8eeaa0a347fe 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2025/07/29 19:44 openbsd b403f214b97b 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2025/07/29 08:19 openbsd fff03f7679b7 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main pool: free list modified: rttmr
2025/07/28 08:54 openbsd 0897303859b5 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2024/05/24 14:16 openbsd 6859a790d2a4 8f98448e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2024/05/01 23:35 openbsd a6ba80fb8d43 3ba885bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2024/04/27 12:31 openbsd 22bab8566a4f 07b455f9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2024/04/06 21:22 openbsd 85fbf21ae5ae ca620dd8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
2024/03/22 00:04 openbsd 173c810f1a3f 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: rttmr
* Struck through repros no longer work on HEAD.