syzbot


assert "pg->wire_count == NUM" failed in uvm_page.c

Status: upstream: reported on 2025/12/19 11:17
Reported-by: syzbot+53685bdd9a03f0636a7a@syzkaller.appspotmail.com
First crash: 2d18h, last: now

Sample crash report:
#!panic: kernel diagnostic assertion "pg->wire_count == 0" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uvm_page.c", line 1326
Starting stack trace...
panic(ffffffff833b2750) at panic+0x1d0 sys/kern/subr_prf.c:229
__assert(ffffffff833ef9fe,ffffffff833e5731,52e,ffffffff83406f81) at __assert+0x29 sys/kern/subr_prf.c:-1
uvm_pagedequeue(fffffd8008ddc2e8) at uvm_pagedequeue+0x2dd sys/uvm/uvm_page.c:1324
uvn_flush(fffffd80730b25b8,0,0,19) at uvn_flush+0x4fc sys/uvm/uvm_vnode.c:683
uvn_detach(fffffd80730b25b8) at uvn_detach+0xcf sys/uvm/uvm_vnode.c:344
uvm_unmap_detach(ffff80003c46b4f0,0) at uvm_unmap_detach+0x15e sys/uvm/uvm_map.c:1364
sys_munmap(ffff8000fffe9778,ffff80003c46b630,ffff80003c46b580) at sys_munmap+0x329 sys/uvm/uvm_mmap.c:544
syscall(ffff80003c46b630) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003c46b630) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:775
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xf3580fcd8f0, count: 248
End of stack trace.

Crashes (3078):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/12/22 04:59 openbsd 40385d83a6c6 49b0fb03 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/22 04:21 openbsd 40385d83a6c6 49b0fb03 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/22 04:05 openbsd 40385d83a6c6 49b0fb03 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/22 03:28 openbsd 40385d83a6c6 49b0fb03 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/22 03:16 openbsd 40385d83a6c6 49b0fb03 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/22 02:15 openbsd 83a64bde9847 e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/22 02:03 openbsd 83a64bde9847 e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/22 01:33 openbsd 83a64bde9847 e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/22 01:10 openbsd 83a64bde9847 e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/22 00:36 openbsd 83a64bde9847 e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/22 00:14 openbsd 83a64bde9847 e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/21 23:42 openbsd 83a64bde9847 e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/21 23:09 openbsd 83a64bde9847 e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/21 22:44 openbsd 83a64bde9847 e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/21 22:23 openbsd 83a64bde9847 e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/21 21:58 openbsd 83a64bde9847 e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/21 21:30 openbsd 83a64bde9847 e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/21 21:08 openbsd 83a64bde9847 e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/21 20:43 openbsd 83a64bde9847 e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/21 20:19 openbsd 83a64bde9847 e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/21 19:54 openbsd 83a64bde9847 e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/21 19:25 openbsd 83a64bde9847 e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/21 18:57 openbsd 83a64bde9847 e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/21 18:39 openbsd 83a64bde9847 e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/21 18:16 openbsd 83a64bde9847 e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/21 17:48 openbsd 83a64bde9847 e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/21 17:24 openbsd 83a64bde9847 e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/21 17:03 openbsd 83a64bde9847 e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/21 16:41 openbsd 83a64bde9847 e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/21 15:49 openbsd 668f1f05e71c e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/21 15:26 openbsd 668f1f05e71c e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/21 15:07 openbsd 668f1f05e71c e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/21 14:36 openbsd 668f1f05e71c e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/21 14:19 openbsd 668f1f05e71c e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/21 14:02 openbsd 668f1f05e71c e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/21 13:38 openbsd 668f1f05e71c e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/21 13:06 openbsd 668f1f05e71c e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/21 12:38 openbsd 668f1f05e71c e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/21 12:04 openbsd 668f1f05e71c e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/21 11:38 openbsd 668f1f05e71c e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/21 11:06 openbsd 668f1f05e71c e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/21 10:49 openbsd 668f1f05e71c e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/21 10:20 openbsd 668f1f05e71c e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/21 09:56 openbsd 668f1f05e71c e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in uvm_page.c
2025/12/19 11:17 openbsd d11ef3f2eb06 e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in uvm_page.c
* Struck through repros no longer work on HEAD.