[Bug 293382] Dead lock and kernel crash around closefp_impl

From: <bugzilla-noreply_at_freebsd.org>
Date: Tue, 14 Apr 2026 13:48:57 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=293382

--- Comment #71 from Kyle Evans <kevans@freebsd.org> ---
(In reply to Paul from comment #69)

fd reuse wouldn't really cause this, the kq_knlist is indexed purely by the
identifier in the stashed in the knote's copy of the kevent.  That identifier
is effectively write-once, after an EV_ADD nothing will touch that part of it. 
The only real explanations I can see here, however likely or not, are one of:

1.) bcopy messed up
2.) bzero messed up
3.) malloc(9) is handing out overlapping regions that are consistently being
used for knlists

#3 seems pretty unlikely, kib's patch touched on #1 but didn't touch #2 (and
maybe it should have to be safe).  Depending on how large of a gap we have
between last fd and next, we could be doing a large bzero to clear out the
overlapping segments and ended up with this when portions of it don't get
zeroe\d.  It seems pretty rare that we'd have valid knotes in those slots every
single time if that were the case, though.

-- 
You are receiving this mail because:
You are the assignee for the bug.