syzbot


pool: cpu free list modified: mbufpl (3)

Status: auto-obsoleted due to no activity on 2024/01/22 11:03
Reported-by: syzbot+0f9390c5f3f75976996f@syzkaller.appspotmail.com
First crash: 192d, last: 192d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd pool: cpu free list modified: mbufpl syz 15863 1367d 1654d 3/3 fixed on 2020/08/05 06:16
openbsd pool: cpu free list modified: mbufpl (2) 1 679d 679d 0/3 auto-obsoleted due to no activity on 2022/09/22 19:57
openbsd pool: cpu free list modified: mbufpl (4) 1 18d 18d 0/3 upstream: reported on 2024/04/15 20:42

Sample crash report:
panic: pool_cache_item_magic_check: mbufpl cpu free list modified: item addr 0xfffffd8060246c00+16 0x0!=0x790190691e4b9908
Starting stack trace...
panic(ffffffff827ac4ec) at panic+0x16f sys/kern/subr_prf.c:229
pool_cache_get(ffffffff82d1bd78) at pool_cache_get+0x313 sys/kern/subr_pool.c:1897
pool_get(ffffffff82d1bd78,1) at pool_get+0x93 sys/kern/subr_pool.c:573
m_gethdr(1,1) at m_gethdr+0x67 sys/kern/uipc_mbuf.c:277
m_getuio(ffff800028796cc8,1,1f1b,ffff800028796d90) at m_getuio+0xa4 sys/kern/uipc_socket.c:685
sosend(fffffd805a1573d0,0,ffff800028796d90,0,0,0) at sosend+0x4f4 sys/kern/uipc_socket.c:639
sendit(ffff80002128b7f0,4,ffff800028796f28,0,ffff800028796f18) at sendit+0x65d sys/kern/uipc_syscalls.c:786
sys_sendmmsg(ffff80002128b7f0,ffff800028797000,ffff800028797050) at sys_sendmmsg+0x344 sys/kern/uipc_syscalls.c:677
syscall(ffff8000287970d0) at syscall+0x606 mi_syscall sys/sys/syscall_mi.h:110 [inline]
syscall(ffff8000287970d0) at syscall+0x606 sys/arch/amd64/amd64/trap.c:623
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xcae4a669930, count: 247
End of stack trace.

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/10/24 11:02 openbsd 5fd2bbf05546 af8d2e46 .config console log report ci-openbsd-multicore pool: cpu free list modified: mbufpl
* Struck through repros no longer work on HEAD.