From nobody Thu Apr 9 20:19:10 2026 X-Original-To: bugs@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4fsB9B6wgcz6YWLq for ; Thu, 09 Apr 2026 20:19:10 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R12" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4fsB9B2jS5z3Wq6 for ; Thu, 09 Apr 2026 20:19:10 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1775765950; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=yd+Y/M7l0fX9S7Ra2RHGUvXq+Qf/i1Ny6LGvKNbCRAw=; b=uJNc/fFcfk85P/ftaqhDDM1oc6ZgQYYaJoqDjAoOBrM7UXdc0xkzqzdRxKzmyg0kwv56fG gR9BSLGr7nXpaT6RsWYUBRD/AflHU20Ct2JH94UhHyk9oLckhKZBMQJNiOwa6XLHqbIEDC FRSaz62o/EdmRTopj+O5tvVOZKErA0WkEO4TEzHyFq+Iro6t9ZVtrC76I42BK5LhI7Ca78 3uhOHMTzJ4hzAiJ5SFNSx/f5HSoEMRaK9DgYzEH3xNQ6ELs+EzTWXs04Ez864T3Lj0VLoB pqPZGeFHIzJsAW3fjMofMB6vUItbEX41MyrNH+y2RpWpFoxbKTqZ774HgRoGBQ== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1775765950; a=rsa-sha256; cv=none; b=ODi0p6pwTS4CrkUyPGjdy3Ev+WBhJczytFrzKgKNjOtaXM/Mpv+y5BTojlfN1Bh3hmkSLA ZleGV+G6WN+m3BsCFhAU3mEuKB++snQuo3DKnaMPkvvt9qQUjMt2uQ/AfXH85FDet31M+B WCbKFb/0oYv81leKt21UEZ0uf6KzLn7EydjtqnbA0acJswsvU2tfzQZEFGiQ4QVjHTFAkA Sxm6BKU77Dv+ginOUqKdoENBnvHZe2Tz5YYGm9XpkHQfVzTylgnADiz9n7JYjwdEmmDnZH CaE61hM9AKH2XAuae5cCmmR+tVE2ZeFVOZ1YIujefVDVf64hJsp1QkTknQd/5g== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1775765950; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=yd+Y/M7l0fX9S7Ra2RHGUvXq+Qf/i1Ny6LGvKNbCRAw=; b=kh4sCaqcoxQV0dI1lrjhogUVJYhOW4/BpNSZtDtjh0vZ3p/sJhRKAXNxU2KZqKIgLHoXrx LesWzoAJyeY2N2yD0InvrP6urYxQuTIVSnBoDHqco31GZaQDOHZojO5aJSDWhkNIQk5mnY ndxCfAf7c2dj7VBvGEPbd9AdhDj5oMRdoEdF5D0J9Cx28SNC/VKAHi7WBlcVgdnl1rX09r E0c/IrmenXjAKnxeQEsGmkWaKG3I5eLBjvoEr1O1QLcwqxuTTJ9zhIK9ayUYhmzAHF86Zg taWvGkyWvfebyLdsAaYN4WVpOzx8xHmjbZ8MpXWe37xeL8NYKrW/vuKVy/eKnQ== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4fsB9B1xZZz1RM0 for ; Thu, 09 Apr 2026 20:19:10 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 639KJA9e054181 for ; Thu, 9 Apr 2026 20:19:10 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 639KJAHW054180 for bugs@FreeBSD.org; Thu, 9 Apr 2026 20:19:10 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: bugs@FreeBSD.org Subject: [Bug 293382] Dead lock and kernel crash around closefp_impl Date: Thu, 09 Apr 2026 20:19:10 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 14.3-STABLE X-Bugzilla-Keywords: crash X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: kib@FreeBSD.org X-Bugzilla-Status: Open X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: bugs@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Bug reports List-Archive: https://lists.freebsd.org/archives/freebsd-bugs List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-bugs@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D293382 --- Comment #50 from Konstantin Belousov --- Please drop any previous patches you have. Then update to the latest main sources, which have several asserts added by Kyle and me. Then apply only the following change and see if the issue is reproducible. diff --git a/sys/kern/kern_event.c b/sys/kern/kern_event.c index bb5203b8cb0b..ff3ae96a452f 100644 --- a/sys/kern/kern_event.c +++ b/sys/kern/kern_event.c @@ -2043,8 +2043,13 @@ kqueue_expand(struct kqueue *kq, const struct filter= ops *fops, uintptr_t ident, to_free =3D list; } else { if (kq->kq_knlist !=3D NULL) { - bcopy(kq->kq_knlist, list, - kq->kq_knlistsize * sizeof(*lis= t)); + volatile char *src, *dst; + src =3D (void *)kq->kq_knlist; + dst =3D (void *)list; + for (size_t i =3D 0; + i < kq->kq_knlistsize * sizeof(*list); + i++) + dst[i] =3D src[i]; to_free =3D kq->kq_knlist; kq->kq_knlist =3D NULL; } --=20 You are receiving this mail because: You are the assignee for the bug.=