syzbot

 sign-in | mailing list | source | docs
🐞 Open [89]
🐞 Fixed [277]
🐞 Invalid [849]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

pool: free list modified: shmpl (6)

Status: upstream: reported on 2025/02/04 10:40
Reported-by: syzbot+640f5b53834a8559e680@syzkaller.appspotmail.com
First crash: 18d, last: 22h01m
▶ ▼ Similar bugs (5)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd pool: free list modified: shmpl (3) 1 1725d 1725d 0/3 auto-closed as invalid on 2020/09/01 15:24
openbsd pool: free list modified: shmpl C 22 2089d 2184d 3/3 fixed on 2019/10/29 17:45
openbsd pool: free list modified: shmpl (5) 43 97d 189d 0/3 auto-obsoleted due to no activity on 2025/01/07 01:02
openbsd pool: free list modified: shmpl (2) 1 1906d 1906d 0/3 auto-closed as invalid on 2020/03/04 23:09
openbsd pool: free list modified: shmpl (4) 1 467d 467d 0/3 auto-obsoleted due to no activity on 2024/02/11 22:36

Sample crash report:
panic: pool_do_get: shmpl free list modified: page 0xfffffd805f62f000; item addr 0xfffffd805f62f2b8; offset 0x0=0x0 != 0x2a442be593d2887a
Starting stack trace...
panic(ffffffff8334cb8d) at panic+0x1d0 sys/kern/subr_prf.c:229
pool_do_get(ffffffff8393abf8,1,ffff8000364e8528) at pool_do_get+0x592
pool_get(ffffffff8393abf8,1) at pool_get+0x149
shmget_allocate_segment(ffff8000ffffc010,ffff8000364e8780,181,ffff8000364e86d0) at shmget_allocate_segment+0x1a7
sys_shmget(ffff8000ffffc010,ffff8000364e8780,ffff8000364e86d0) at sys_shmget+0x1b2 sys/kern/sysv_shm.c:482
syscall(ffff8000364e8780) at syscall+0xb08 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff8000364e8780) at syscall+0xb08 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x50440f5c30, count: 250
End of stack trace.

Crashes (33):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/02/22 07:00 openbsd 6a403588e274 d34966d1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: shmpl
2025/02/22 03:09 openbsd 6a403588e274 d34966d1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid pool: free list modified: shmpl
2025/02/21 09:53 openbsd a0f27e02d4cc 0808a665 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid pool: free list modified: shmpl
2025/02/20 07:40 openbsd 483a78e15aaa 50668798 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid pool: free list modified: shmpl
2025/02/19 07:30 openbsd 181c8b93219b 9a14138f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid pool: free list modified: shmpl
2025/02/18 10:33 openbsd 6065620d7782 c37c7249 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid pool: free list modified: shmpl
2025/02/17 12:20 openbsd c48feb9479a9 4121cf9d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid pool: free list modified: shmpl
2025/02/16 23:35 openbsd 3411e7e2a484 40a34ec9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid pool: free list modified: shmpl
2025/02/16 22:38 openbsd 3411e7e2a484 40a34ec9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid pool: free list modified: shmpl
2025/02/15 22:16 openbsd ecbcc43a65c0 40a34ec9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: shmpl
2025/02/15 17:41 openbsd ecbcc43a65c0 40a34ec9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid pool: free list modified: shmpl
2025/02/15 09:50 openbsd 8d2464095911 40a34ec9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid pool: free list modified: shmpl
2025/02/15 00:09 openbsd 8d2464095911 40a34ec9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: shmpl
2025/02/14 18:33 openbsd 4b5fa14926a1 fe17639f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid pool: free list modified: shmpl
2025/02/14 16:10 openbsd 4b5fa14926a1 fe17639f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid pool: free list modified: shmpl
2025/02/13 20:28 openbsd bd92615b0406 7320a65f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid pool: free list modified: shmpl
2025/02/13 20:17 openbsd bd92615b0406 7320a65f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid pool: free list modified: shmpl
2025/02/12 18:48 openbsd 705b70e045d6 b27c2402 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid pool: free list modified: shmpl
2025/02/12 16:28 openbsd 705b70e045d6 b27c2402 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid pool: free list modified: shmpl
2025/02/12 15:17 openbsd 705b70e045d6 b27c2402 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid pool: free list modified: shmpl
2025/02/12 03:30 openbsd d800967ee04b f2baddf5 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid pool: free list modified: shmpl
2025/02/11 13:02 openbsd c7df606a226b 43f51a00 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: shmpl
2025/02/11 01:19 openbsd 4f6ac7630c0c 43f51a00 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: shmpl
2025/02/09 16:32 openbsd d2e1daa0feb7 ef44b750 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid pool: free list modified: shmpl
2025/02/08 11:23 openbsd a57a16499ccf ef44b750 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main pool: free list modified: shmpl
2025/02/07 21:38 openbsd 307723971475 a4f327c2 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid pool: free list modified: shmpl
2025/02/07 19:25 openbsd 307723971475 a4f327c2 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid pool: free list modified: shmpl
2025/02/07 10:54 openbsd 307723971475 a4f327c2 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid pool: free list modified: shmpl
2025/02/06 19:52 openbsd 4a7e1005694f 1e1faf27 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main pool: free list modified: shmpl
2025/02/06 06:51 openbsd 4a7e1005694f 5896748e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: shmpl
2025/02/05 22:43 openbsd 52d5bc939dc8 5896748e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid pool: free list modified: shmpl
2025/02/05 01:58 openbsd 4dc45f023929 44c01590 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: shmpl
2025/02/04 10:39 openbsd 1eab3ea7ad62 8f267cef .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore pool: free list modified: shmpl
* Struck through repros no longer work on HEAD.