syzbot


assert "pg->wire_count == 1" failed in vfs_biomem.c (2)

Status: auto-closed as invalid on 2020/10/08 04:30
Reported-by: syzbot+3ed893b5fcbcae9ca5c6@syzkaller.appspotmail.com
First crash: 1465d, last: 1397d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd assert "pg->wire_count == 1" failed in vfs_biomem.c 66 1633d 1958d 0/3 auto-closed as invalid on 2020/02/15 03:28

Sample crash report:
panic: kernel diagnostic assertion "pg->wire_count == 1" failed: file "/syzkaller/managers/main/kernel/sys/kern/vfs_biomem.c", line 310
Stopped at      db_enter+0x18:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*247295  22590      0           0  0x4000000    0  syz-executor.1
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic(ffffffff823de954) at panic+0x15c sys/kern/subr_prf.c:207
__assert(ffffffff8244783d,ffffffff8245c7b0,136,ffffffff82418cb9) at __assert+0x2b sys/kern/subr_prf.c:154
buf_free_pages(fffffd80534db8f8) at buf_free_pages+0x1d3 sys/kern/vfs_biomem.c:299
buf_dealloc_mem(fffffd80534db8f8) at buf_dealloc_mem+0xe1 sys/kern/vfs_biomem.c:179
buf_put(fffffd80534db8f8) at buf_put+0x16b sys/kern/vfs_bio.c:131
brelse(fffffd80534db8f8) at brelse+0x27d sys/kern/vfs_bio.c:948
vinvalbuf(fffffd806a1459d8,2,ffffffffffffffff,ffff80001d75d618,0,ffffffffffffffff) at vinvalbuf+0x3b1 sys/kern/vfs_subr.c:1981
ffs_truncate(fffffd8057855b48,0,0,ffffffffffffffff) at ffs_truncate+0xeb1 sys/ufs/ffs/ffs_inode.c:326
ufs_inactive(ffff8000205dd5b8) at ufs_inactive+0x155 sys/ufs/ufs/ufs_inode.c:84
VOP_INACTIVE(fffffd806a1459d8,ffff80001d75d618) at VOP_INACTIVE+0xaa sys/kern/vfs_vops.c:573
vrele(fffffd806a1459d8) at vrele+0xca sys/kern/vfs_subr.c:816
ktrsettrace(ffff80001d6c43b0,80000300,fffffd805bf8f0d0,fffffd806c3bfb40) at ktrsettrace+0xb3 sys/kern/kern_ktrace.c:124
ktrops(ffff80001d75d618,ffff80001d6c43b0,0,80000300,fffffd805bf8f0d0,fffffd806c3bfb40) at ktrops+0x1a1 sys/kern/kern_ktrace.c:544
end trace frame: 0xffff8000205dd820, count: 0
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb> 
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
kernel diagnostic assertion "pg->wire_count == 1" failed: file "/syzkaller/managers/main/kernel/sys/kern/vfs_biomem.c", line 310
ddb> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic(ffffffff823de954) at panic+0x15c sys/kern/subr_prf.c:207
__assert(ffffffff8244783d,ffffffff8245c7b0,136,ffffffff82418cb9) at __assert+0x2b sys/kern/subr_prf.c:154
buf_free_pages(fffffd80534db8f8) at buf_free_pages+0x1d3 sys/kern/vfs_biomem.c:299
buf_dealloc_mem(fffffd80534db8f8) at buf_dealloc_mem+0xe1 sys/kern/vfs_biomem.c:179
buf_put(fffffd80534db8f8) at buf_put+0x16b sys/kern/vfs_bio.c:131
brelse(fffffd80534db8f8) at brelse+0x27d sys/kern/vfs_bio.c:948
vinvalbuf(fffffd806a1459d8,2,ffffffffffffffff,ffff80001d75d618,0,ffffffffffffffff) at vinvalbuf+0x3b1 sys/kern/vfs_subr.c:1981
ffs_truncate(fffffd8057855b48,0,0,ffffffffffffffff) at ffs_truncate+0xeb1 sys/ufs/ffs/ffs_inode.c:326
ufs_inactive(ffff8000205dd5b8) at ufs_inactive+0x155 sys/ufs/ufs/ufs_inode.c:84
VOP_INACTIVE(fffffd806a1459d8,ffff80001d75d618) at VOP_INACTIVE+0xaa sys/kern/vfs_vops.c:573
vrele(fffffd806a1459d8) at vrele+0xca sys/kern/vfs_subr.c:816
ktrsettrace(ffff80001d6c43b0,80000300,fffffd805bf8f0d0,fffffd806c3bfb40) at ktrsettrace+0xb3 sys/kern/kern_ktrace.c:124
ktrops(ffff80001d75d618,ffff80001d6c43b0,0,80000300,fffffd805bf8f0d0,fffffd806c3bfb40) at ktrops+0x1a1 sys/kern/kern_ktrace.c:544
doktrace(fffffd805bf8f0d0,4,300,0,ffff80001d75d618) at doktrace+0x60d ktrsetchildren sys/kern/kern_ktrace.c:566 [inline]
doktrace(fffffd805bf8f0d0,4,300,0,ffff80001d75d618) at doktrace+0x60d sys/kern/kern_ktrace.c:488
sys_ktrace(ffff80001d75d618,ffff8000205dd978,ffff8000205dd9c0) at sys_ktrace+0xd5 sys/kern/kern_ktrace.c:529
syscall(ffff8000205dda40) at syscall+0x507 sys/arch/amd64/amd64/trap.c:570
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xec199989db0, count: -18
ddb> show registers
rdi                                0
rsi                              0x1
rbp               0xffff8000205dd0b0
rbx               0xffff8000205dd160
rdx                              0x2
rcx                                0
rax                              0x1
r8                0xffffffff81a28cbf    kprintf+0x15f
r9                               0x1
r10                              0x2
r11               0x88878de8411ced01
r12                     0x3000000008
r13               0xffff8000205dd0c0
r14                            0x100
r15                              0x1
rip               0xffffffff81eb16e8    db_enter+0x18
cs                               0x8
rflags                         0x246
rsp               0xffff8000205dd0a0
ss                              0x10
db_enter+0x18:  addq    $0x8,%rsp
ddb> show proc
PROC (syz-executor.1) pid=247295 stat=onproc
    flags process=0 proc=4000000<THREAD>
    pri=17, usrpri=86, nice=20
    forw=0xffffffffffffffff, list=0xffff80001d75daf8,0xffffffff827f1be8
    process=0xffff80002059e770 user=0xffff8000205d8000, vmspace=0xfffffd805783e780
    estcpu=36, cpticks=2, pctcpu=0.0
    user=0, sys=2, intr=0
ddb> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 22590  166154  71481      0  2           0                syz-executor.1
*22590  247295  71481      0  7   0x4000000                syz-executor.1
 71481  512906  41670      0  3        0x82  nanosleep     syz-executor.1
 12958  446867      0      0  3     0x14280  nfsidl        nfsio
  1557  364716      0      0  3     0x14280  nfsidl        nfsio
 50570   23117      0      0  3     0x14280  nfsidl        nfsio
 74786   20875      0      0  3     0x14280  nfsidl        nfsio
 93296  221509      0      0  3     0x14280  nfsidl        nfsio
 17839  253034      0      0  3     0x14280  nfsidl        nfsio
 89861  523781      0      0  3     0x14280  nfsidl        nfsio
 30201  290486      0      0  3     0x14280  nfsidl        nfsio
 19440  101798      0      0  3     0x14280  nfsidl        nfsio
 13305  238676      0      0  3     0x14280  nfsidl        nfsio
 88030  415033      0      0  3     0x14280  nfsidl        nfsio
 37988  394244      0      0  3     0x14280  nfsidl        nfsio
  4907  138975      0      0  3     0x14280  nfsidl        nfsio
 40209  283664      0      0  3     0x14280  nfsidl        nfsio
 64825  255705      0      0  3     0x14280  nfsidl        nfsio
 30027  522338      0      0  3     0x14280  nfsidl        nfsio
 64910   44238      0      0  3     0x14280  nfsidl        nfsio
 68349  218191      0      0  3     0x14280  nfsidl        nfsio
 69103  414865      0      0  3     0x14280  nfsidl        nfsio
  7129  272760      0      0  3     0x14280  nfsidl        nfsio
 45366  484236  41670      0  3        0x82  piperd        syz-executor.0
 59479  439516      1      0  3    0x100083  ttyin         getty
 84677   68871      0      0  3     0x14200  bored         sosplice
 41670  214227  99204      0  3        0x82  thrsleep      syz-fuzzer
 41670  109278  99204      0  3   0x4000082  nanosleep     syz-fuzzer
 41670  255452  99204      0  2   0x4000002                syz-fuzzer
 41670   86558  99204      0  3   0x4000082  thrsleep      syz-fuzzer
 41670  182877  99204      0  3   0x4000082  thrsleep      syz-fuzzer
 41670   32509  99204      0  3   0x4000082  thrsleep      syz-fuzzer
 41670   30619  99204      0  3   0x4000082  thrsleep      syz-fuzzer
 41670  465597  99204      0  3   0x4000082  thrsleep      syz-fuzzer
 99204    8845  91894      0  3    0x10008a  pause         ksh
 91894  382674  58699      0  3        0x92  select        sshd
 58699  404995      1      0  3        0x80  select        sshd
 15905  450700  25123     73  3    0x100090  kqread        syslogd
 25123  265623      1      0  3    0x100082  netio         syslogd
 64286  279731      1     77  3    0x100090  poll          dhclient
 64226  236606      1      0  3        0x80  poll          dhclient
 73392   58539      0      0  3     0x14200  bored         smr
  5004   67532      0      0  2     0x14200                zerothread
 66264  458732      0      0  3     0x14200  aiodoned      aiodoned
 85266  379901      0      0  3     0x14200  syncer        update
 33950  406405      0      0  3     0x14200  cleaner       cleaner
 17132   24771      0      0  3     0x14200  reaper        reaper
 66963  302259      0      0  3     0x14200  pgdaemon      pagedaemon
 52160  388413      0      0  3     0x14200  bored         crynlk
 98268  272024      0      0  3     0x14200  bored         crypto
 80200  436427      0      0  3  0x40014200  acpi0         acpi0
 17470  191356      0      0  3     0x14200  bored         softnet
  6983  168697      0      0  3     0x14200  bored         systqmp
 75526  147516      0      0  3     0x14200  bored         systq
 15398   83109      0      0  3  0x40014200  bored         softclock
 62030  238705      0      0  3  0x40014200                idle0
     1  231233      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb> show all locks
No such command
ddb> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf  9533   6507K    7205K  78643K     13591        0
            pcb    13      8K       8K  78643K       180        0
         rtable   132     14K      17K  78643K       965        0
         ifaddr   102     20K      21K  78643K       321        0
         sysctl     2      0K       0K  78643K         2        0
       counters    21     16K      17K  78643K        45        0
       ioctlops     0      0K       4K  78643K       228        0
            iov     0      0K      16K  78643K       175        0
          mount     1      1K       1K  78643K         1        0
         vnodes  1220     77K      77K  78643K      2266        0
      UFS quota     1     32K      32K  78643K         1        0
      UFS mount     5     36K      36K  78643K         5        0
            shm     2      1K       5K  78643K         8        0
         VM map     2      0K       0K  78643K         2        0
            sem    12      1K       1K  78643K       121        0
        dirhash    12      2K       2K  78643K        12        0
           ACPI  1809    195K     288K  78643K     12938        0
      file desc     5     13K      25K  78643K      1194        0
          sigio     0      0K       0K  78643K        18        0
           proc    52     38K      55K  78643K       604        0
        subproc    32      2K       2K  78643K        85        0
    NFS srvsock     1      0K       0K  78643K         1        0
     NFS daemon     1     16K      16K  78643K         1        0
    ip_moptions     0      0K       0K  78643K       107        0
       in_multi    66      3K       3K  78643K       247        0
    ether_multi     1      0K       0K  78643K        31        0
            mrt     0      0K       0K  78643K         4        0
    ISOFS mount     1     32K      32K  78643K         1        0
  MSDOSFS mount     1     16K      16K  78643K         1        0
           ttys    55    254K     254K  78643K        55        0
           exec     0      0K       1K  78643K       356        0
     pfkey data     0      0K       0K  78643K         2        0
        pagedep     1      8K       8K  78643K         1        0
       inodedep     1     32K      32K  78643K         1        0
         newblk     1      0K       0K  78643K         1        0
        VM swap     7     26K      26K  78643K         7        0
       UVM amap   151    121K     130K  78643K      3637        0
       UVM aobj    57      6K       6K  78643K        68        0
        memdesc     1      4K       4K  78643K         1        0
    crypto data     1      1K       1K  78643K         1        0
    ip6_options     0      0K       1K  78643K       178        0
            NDP    15      0K       0K  78643K        57        0
           temp   157   3890K    3964K  78643K     63739        0
         kqueue     3      4K      12K  78643K        61        0
      SYN cache     2     16K      16K  78643K         2        0
ddb> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
arp         64       17    0        9     1     0     1     1     0     8    0
rtpcb       80       91    0       89     1     0     1     1     0     8    0
rtentry    112      139    0      106     2     0     2     2     0     8    0
unpcb      120      391    0      381     1     0     1     1     0     8    0
syncache   264        8    0        8     3     3     0     1     0     8    0
tcpqe       32       39    0       39     1     1     0     1     0     8    0
tcpcb      544      376    0      372     1     0     1     1     0     8    0
ipq         40       11    0       11     3     3     0     1     0     8    0
ipqe        40      200    0      200     3     3     0     1     0     8    0
inpcb      296     2277    0     2270     6     4     2     2     0     8    1
nd6         48       28    0       25     3     2     1     1     0     8    0
pkpcb       40       12    0       12     3     3     0     1     0     8    0
ppxss      1128       4    0        4     3     3     0     1     0     8    0
pfosfp      40        1    0        0     1     0     1     1     0     8    0
pfosfpen   112        1    0        0     1     0     1     1     0     8    0
pfrktable  1344     147    0      126     4     2     2     3     0     8    0
pftag       88       25    0       18     1     0     1     1     0     8    0
pfqueue    264        2    0        2     1     1     0     1     0     8    0
pfstitem    24        2    0        0     1     0     1     1     0     8    0
pfstkey    112       10    0        8     2     1     1     1     0     8    0
pfstate    328        5    0        4     2     1     1     1     0     8    0
pfrule     1360      76    0       38     5     1     4     4     0     8    0
art_heap8  4096       2    0        0     2     0     2     2     0     8    0
art_heap4  256      615    0      460    16     6    10    13     0     8    0
art_table   32      617    0      460     2     0     2     2     0     8    0
art_node    16      131    0      105     1     0     1     1     0     8    0
sysvmsgpl   40       45    0       22     1     0     1     1     0     8    0
semupl     112        1    0        1     1     1     0     1     0     8    0
semapl     112      113    0      103     1     0     1     1     0     8    0
shmpl      112       65    0       11     2     0     2     2     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino2pl    256     2987    0     1594    88     0    88    88     0     8    0
ffsino     240     2987    0     1594    83     0    83    83     0     8    0
nchpl      144     4884    0     3298    60     0    60    60     0     8    0
uvmvnodes   72     3902    0        0    71     0    71    71     0     8    0
vnodes     208     3902    0        0   206     0   206   206     0     8    0
namei      1024   15144    0    15144     7     6     1     1     0     8    1
vcpupl     1984      11    0        0     2     0     2     2     0     8    0
vmpool     528       23    0       12     1     0     1     1     0     8    0
pfiaddrpl  120       72    0       44     1     0     1     1     0     8    0
scsiplug    64        1    0        1     1     1     0     1     0     8    0
scxspl     192    33448    0    33447     5     4     1     1     0     8    0
plimitpl   152      101    0       94     1     0     1     1     0     8    0
sigapl     424     1395    0     1346     6     0     6     6     0     8    0
futexpl     56    24656    0    24656     6     5     1     1     0     8    1
knotepl    112      152    0      133     1     0     1     1     0     8    0
kqueuepl   144      156    0      153     1     0     1     1     0     8    0
pipepl     272      207    0      197     1     0     1     1     0     8    0
fdescpl    432     1359    0     1345     2     0     2     2     0     8    0
filepl     120     9246    0     9148     6     2     4     4     0     8    1
lockfpl    104      214    0      212     1     0     1     1     0     8    0
lockfspl    48       73    0       71     1     0     1     1     0     8    0
sessionpl  112       22    0       12     1     0     1     1     0     8    0
pgrppl      48       50    0       40     1     0     1     1     0     8    0
ucredpl     96     1352    0     1345     1     0     1     1     0     8    0
zombiepl   144     1346    0     1346     3     2     1     1     0     8    1
processpl  928     1395    0     1346     7     0     7     7     0     8    0
procpl     624     2753    0     2696     6     1     5     5     0     8    0
sosppl     128       17    0       17     5     5     0     1     0     8    0
sockpl     400     2773    0     2754    10     7     3     4     0     8    1
mcl64k     65536    341    0      341    38    38     0    33     0     8    0
mcl16k     16384      3    0        3     2     1     1     1     0     8    1
mcl12k     12288     35    0       35     6     5     1     1     0     8    1
mcl9k      9216      14    0       14     6     6     0     1     0     8    0
mcl8k      8192      44    0       44     5     5     0     1     0     8    0
mcl4k      4096      93    0       93     7     6     1     1     0     8    1
mcl2k2     2112       7    0        7     4     4     0     1     0     8    0
mcl2k      2048   72159    0    72106    17     9     8    12     0     8    0
mtagpl      96      101    0       85     3     2     1     2     0     8    0
mbufpl     256   124651    0   124446    56    38    18    30     0     8    0
bufpl      280     8122    0     2770   383     0   383   383     0     8    0
anonpl      16   171238    0   154843   126    47    79    88     0   107    5
amapchunkpl 152    6957    0     6779    43    31    12    18     0   158    4
amappl16   192     7217    0     6251    96    39    57    61     0     8    8
amappl15   184        2    0        0     1     0     1     1     0     8    0
amappl14   176      445    0      439     1     0     1     1     0     8    0
amappl13   168      417    0      413     1     0     1     1     0     8    0
amappl12   160      375    0      374     3     2     1     1     0     8    0
amappl11   152       53    0       43     1     0     1     1     0     8    0
amappl10   144       12    0        6     1     0     1     1     0     8    0
amappl9    136      713    0      710     1     0     1     1     0     8    0
amappl8    128      740    0      698     2     0     2     2     0     8    0
amappl7    120      129    0      117     1     0     1     1     0     8    0
amappl6    112       26    0       21     1     0     1     1     0     8    0
amappl5    104      948    0      935     1     0     1     1     0     8    0
amappl4     96      854    0      828     1     0     1     1     0     8    0
amappl3     88      923    0      917     1     0     1     1     0     8    0
amappl2     80     9873    0     9805     2     0     2     2     0     8    0
amappl1     72    32775    0    32363    23    13    10    17     0     8    0
amappl      80     3024    0     2970     3     1     2     2     0    84    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      64       67    0       11     1     0     1     1     0     8    0
uaddrrnd    24     1382    0     1357     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     1382    0     1357     1     0     1     1     0     8    0
vmmpekpl   168    10524    0    10490     2     0     2     2     0     8    0
vmmpepl    168   168395    0   166281   220   117   103   129     0   357    5
vmsppl     272     1381    0     1357     3     1     2     2     0     8    0
pdppl      4096    2770    0     2725     8     2     6     6     0     8    0
pvpl        32   497975    0   478953   401   185   216   309     0   265   50
pmappl     200     1381    0     1357     2     0     2     2     0     8    0
extentpl    40       53    0       36     1     0     1     1     0     8    0
phpool     112      360    0      123     9     2     7     9     0     8    0
ddb> machine ddbcpu 0
No such command
ddb> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic(ffffffff823de954) at panic+0x15c sys/kern/subr_prf.c:207
__assert(ffffffff8244783d,ffffffff8245c7b0,136,ffffffff82418cb9) at __assert+0x2b sys/kern/subr_prf.c:154
buf_free_pages(fffffd80534db8f8) at buf_free_pages+0x1d3 sys/kern/vfs_biomem.c:299
buf_dealloc_mem(fffffd80534db8f8) at buf_dealloc_mem+0xe1 sys/kern/vfs_biomem.c:179
buf_put(fffffd80534db8f8) at buf_put+0x16b sys/kern/vfs_bio.c:131
brelse(fffffd80534db8f8) at brelse+0x27d sys/kern/vfs_bio.c:948
vinvalbuf(fffffd806a1459d8,2,ffffffffffffffff,ffff80001d75d618,0,ffffffffffffffff) at vinvalbuf+0x3b1 sys/kern/vfs_subr.c:1981
ffs_truncate(fffffd8057855b48,0,0,ffffffffffffffff) at ffs_truncate+0xeb1 sys/ufs/ffs/ffs_inode.c:326
ufs_inactive(ffff8000205dd5b8) at ufs_inactive+0x155 sys/ufs/ufs/ufs_inode.c:84
VOP_INACTIVE(fffffd806a1459d8,ffff80001d75d618) at VOP_INACTIVE+0xaa sys/kern/vfs_vops.c:573
vrele(fffffd806a1459d8) at vrele+0xca sys/kern/vfs_subr.c:816
ktrsettrace(ffff80001d6c43b0,80000300,fffffd805bf8f0d0,fffffd806c3bfb40) at ktrsettrace+0xb3 sys/kern/kern_ktrace.c:124
ktrops(ffff80001d75d618,ffff80001d6c43b0,0,80000300,fffffd805bf8f0d0,fffffd806c3bfb40) at ktrops+0x1a1 sys/kern/kern_ktrace.c:544
doktrace(fffffd805bf8f0d0,4,300,0,ffff80001d75d618) at doktrace+0x60d ktrsetchildren sys/kern/kern_ktrace.c:566 [inline]
doktrace(fffffd805bf8f0d0,4,300,0,ffff80001d75d618) at doktrace+0x60d sys/kern/kern_ktrace.c:488
sys_ktrace(ffff80001d75d618,ffff8000205dd978,ffff8000205dd9c0) at sys_ktrace+0xd5 sys/kern/kern_ktrace.c:529
syscall(ffff8000205dda40) at syscall+0x507 sys/arch/amd64/amd64/trap.c:570
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xec199989db0, count: -18
ddb> machine ddbcpu 1
No such command
ddb> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic(ffffffff823de954) at panic+0x15c sys/kern/subr_prf.c:207
__assert(ffffffff8244783d,ffffffff8245c7b0,136,ffffffff82418cb9) at __assert+0x2b sys/kern/subr_prf.c:154
buf_free_pages(fffffd80534db8f8) at buf_free_pages+0x1d3 sys/kern/vfs_biomem.c:299
buf_dealloc_mem(fffffd80534db8f8) at buf_dealloc_mem+0xe1 sys/kern/vfs_biomem.c:179
buf_put(fffffd80534db8f8) at buf_put+0x16b sys/kern/vfs_bio.c:131
brelse(fffffd80534db8f8) at brelse+0x27d sys/kern/vfs_bio.c:948
vinvalbuf(fffffd806a1459d8,2,ffffffffffffffff,ffff80001d75d618,0,ffffffffffffffff) at vinvalbuf+0x3b1 sys/kern/vfs_subr.c:1981
ffs_truncate(fffffd8057855b48,0,0,ffffffffffffffff) at ffs_truncate+0xeb1 sys/ufs/ffs/ffs_inode.c:326
ufs_inactive(ffff8000205dd5b8) at ufs_inactive+0x155 sys/ufs/ufs/ufs_inode.c:84
VOP_INACTIVE(fffffd806a1459d8,ffff80001d75d618) at VOP_INACTIVE+0xaa sys/kern/vfs_vops.c:573
vrele(fffffd806a1459d8) at vrele+0xca sys/kern/vfs_subr.c:816
ktrsettrace(ffff80001d6c43b0,80000300,fffffd805bf8f0d0,fffffd806c3bfb40) at ktrsettrace+0xb3 sys/kern/kern_ktrace.c:124
ktrops(ffff80001d75d618,ffff80001d6c43b0,0,80000300,fffffd805bf8f0d0,fffffd806c3bfb40) at ktrops+0x1a1 sys/kern/kern_ktrace.c:544
doktrace(fffffd805bf8f0d0,4,300,0,ffff80001d75d618) at doktrace+0x60d ktrsetchildren sys/kern/kern_ktrace.c:566 [inline]
doktrace(fffffd805bf8f0d0,4,300,0,ffff80001d75d618) at doktrace+0x60d sys/kern/kern_ktrace.c:488
sys_ktrace(ffff80001d75d618,ffff8000205dd978,ffff8000205dd9c0) at sys_ktrace+0xd5 sys/kern/kern_ktrace.c:529
syscall(ffff8000205dda40) at syscall+0x507 sys/arch/amd64/amd64/trap.c:570
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xec199989db0, count: -18

Crashes (9):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/07/10 04:29 openbsd 04a2240bd8f4 edf162e8 .config console log report ci-openbsd-main
2020/07/07 02:24 openbsd 56c392bf0c09 bed10395 .config console log report ci-openbsd-main
2020/06/14 21:35 openbsd 498b1e7a765a 2a22c77a .config console log report ci-openbsd-main
2020/06/05 22:18 openbsd d21ef8e00906 d36418e9 .config console log report ci-openbsd-main
2020/05/28 02:59 openbsd 0025f5bb9c9b fdf90f62 .config console log report ci-openbsd-main
2020/05/22 10:06 openbsd abbe6f26473c 5afa2ddd .config console log report ci-openbsd-main
2020/05/21 22:34 openbsd 2061a77758dc 1f30020f .config console log report ci-openbsd-main
2020/05/15 19:17 openbsd 435df7980549 d7f9fffa .config console log report ci-openbsd-main
2020/05/03 05:02 openbsd 3207ab994999 5457883a .config console log report ci-openbsd-main
* Struck through repros no longer work on HEAD.