syzbot


panic: inconsistent bufpage counts

Status: upstream: reported on 2024/05/16 11:38
Reported-by: syzbot+965cbc60a594b79f2ccd@syzkaller.appspotmail.com
First crash: 114d, last: 12d

Sample crash report:
panic: inconsistent bufpage counts
Starting stack trace...
panic(ffffffff8307b184) at panic+0x1d0 sys/kern/subr_prf.c:229
bufcache_release(fffffd807e16c468) at bufcache_release+0x508 sys/kern/vfs_bio.c:1757
brelse(fffffd807e16c468) at brelse+0x1b2 sys/kern/vfs_bio.c:927
sd_buf_done(fffffd80710160d8) at sd_buf_done+0x2da sys/scsi/sd.c:772
scsi_done(fffffd80710160d8) at scsi_done+0x40 sys/scsi/scsi_base.c:1496
vioscsi_vq_done(ffff8000000a3288) at vioscsi_vq_done+0xe1
intr_handler(ffff80002bb89ff0,ffff80000006bc00) at intr_handler+0x11d sys/arch/amd64/amd64/intr.c:557
Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f
__sanitizer_cov_trace_const_cmp4(0,0) at __sanitizer_cov_trace_const_cmp4+0x54 kd_curproc sys/dev/kcov.c:590 [inline]
__sanitizer_cov_trace_const_cmp4(0,0) at __sanitizer_cov_trace_const_cmp4+0x54 sys/dev/kcov.c:235
syscall(ffff80002bb8a190) at syscall+0x283 mi_syscall sys/sys/syscall_mi.h:153 [inline]
syscall(ffff80002bb8a190) at syscall+0x283 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xc18c9080120, count: 246
End of stack trace.
panic: inconsistent bufpage counts
Starting stack trace...
panic(ffffffff8307b184) at panic+0x1d0 sys/kern/subr_prf.c:229
bufcache_adjust() at bufcache_adjust+0x273
brelse(fffffd8067661118) at brelse+0x31d sys/kern/vfs_bio.c:940
ffs2_balloc(fffffd80702a8008,6d11d,147,fffffd807f7d3138,1,ffff80002a0999e8) at ffs2_balloc+0xe70 sys/ufs/ffs/ffs_balloc.c:428
ffs_write(ffff80002a099a70) at ffs_write+0x4f9 sys/ufs/ffs/ffs_vnops.c:345
VOP_WRITE(fffffd807e19d7d8,ffff80002a099b28,3,fffffd807f7d3138) at VOP_WRITE+0x102 sys/kern/vfs_vops.c:245
ktrwriteraw(ffff80002c57c7f0,fffffd807e19d7d8,fffffd807f7d3138,ffff80002a099bf8,ffff80002a099bd0) at ktrwriteraw+0x1bc sys/kern/kern_ktrace.c:682
ktrstruct(ffff80002c57c7f0,ffffffff830e7d00,ffff80002a099db0,100) at ktrstruct+0x19a sys/kern/kern_ktrace.c:308
sys_kevent(ffff80002c57c7f0,ffff80002a09a040,ffff80002a099f90) at sys_kevent+0x389 sys/kern/kern_event.c:1137
syscall(ffff80002a09a040) at syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
syscall(ffff80002a09a040) at syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x8298362f430, count: 246
End of stack trace.

dump to dev 4,1 not possible
panic: inconsistent bufpage counts
Starting stack trace...
panic(ffffffff8307b184) at panic+0x1d0 sys/kern/subr_prf.c:229
bufcache_adjust() at bufcache_adjust+0x273
brelse(fffffd806c030e60) at brelse+0x31d sys/kern/vfs_bio.c:940
sd_buf_done(fffffd80710161b0) at sd_buf_done+0x2da sys/scsi/sd.c:772
scsi_done(fffffd80710161b0) at scsi_done+0x40 sys/scsi/scsi_base.c:1496
vioscsi_vq_done(ffff8000000a3288) at vioscsi_vq_done+0xe1
virtio_check_vqs(ffff800000024800) at virtio_check_vqs+0x1a9 virtio_check_vq sys/dev/pv/virtio.c:273 [inline]
virtio_check_vqs(ffff800000024800) at virtio_check_vqs+0x1a9 sys/dev/pv/virtio.c:258
virtio_pci_poll_intr(ffff800000024800) at virtio_pci_poll_intr+0x79 sys/dev/pci/virtio_pci.c:1124
vioscsi_scsi_cmd(fffffd80710166c0) at vioscsi_scsi_cmd+0x570 sys/dev/pv/vioscsi.c:270
scsi_xs_sync(fffffd80710166c0) at scsi_xs_sync+0x116 scsi_xs_exec sys/scsi/scsi_base.c:1457 [inline]
scsi_xs_sync(fffffd80710166c0) at scsi_xs_sync+0x116 sys/scsi/scsi_base.c:1526
sdactivate(ffff80000019f000,6) at sdactivate+0x2c4 sys/scsi/sd.c:271
config_suspend(ffff80000019f000,6) at config_suspend+0x62 sys/kern/subr_autoconf.c:831
scsibusactivate(ffff800000049b80,6) at scsibusactivate+0xab scsi_activate_link sys/scsi/scsiconf.c:410 [inline]
scsibusactivate(ffff800000049b80,6) at scsibusactivate+0xab scsi_activate_bus sys/scsi/scsiconf.c:360 [inline]
scsibusactivate(ffff800000049b80,6) at scsibusactivate+0xab sys/scsi/scsiconf.c:259
config_activate_children(ffff8000000a3000,6) at config_activate_children+0x191 config_suspend sys/kern/subr_autoconf.c:831 [inline]
config_activate_children(ffff8000000a3000,6) at config_activate_children+0x191 sys/kern/subr_autoconf.c:893
config_activate_children(ffff800000024800,6) at config_activate_children+0x1b5 sys/kern/subr_autoconf.c:893
config_activate_children(ffff80000002ce00,6) at config_activate_children+0x1b5 sys/kern/subr_autoconf.c:893
pciactivate(ffff80000002ce00,6) at pciactivate+0xb7 sys/dev/pci/pci.c:230
config_activate_children(ffff80000002f080,6) at config_activate_children+0x191 config_suspend sys/kern/subr_autoconf.c:831 [inline]
config_activate_children(ffff80000002f080,6) at config_activate_children+0x191 sys/kern/subr_autoconf.c:893
config_suspend_all(6) at config_suspend_all+0x49a sys/kern/subr_autoconf.c:855
boot(104) at boot+0x240 sys/arch/amd64/amd64/machdep.c:926
reboot(104) at reboot+0xb1
panic(ffffffff8307b184) at panic+0x1f9 sys/kern/subr_prf.c:231
bufcache_adjust() at bufcache_adjust+0x273
brelse(fffffd8067661118) at brelse+0x31d sys/kern/vfs_bio.c:940
ffs2_balloc(fffffd80702a8008,6d11d,147,fffffd807f7d3138,1,ffff80002a0999e8) at ffs2_balloc+0xe70 sys/ufs/ffs/ffs_balloc.c:428
ffs_write(ffff80002a099a70) at ffs_write+0x4f9 sys/ufs/ffs/ffs_vnops.c:345
VOP_WRITE(fffffd807e19d7d8,ffff80002a099b28,3,fffffd807f7d3138) at VOP_WRITE+0x102 sys/kern/vfs_vops.c:245
ktrwriteraw(ffff80002c57c7f0,fffffd807e19d7d8,fffffd807f7d3138,ffff80002a099bf8,ffff80002a099bd0) at ktrwriteraw+0x1bc sys/kern/kern_ktrace.c:682
ktrstruct(ffff80002c57c7f0,ffffffff830e7d00,ffff80002a099db0,100) at ktrstruct+0x19a sys/kern/kern_ktrace.c:308
sys_kevent(ffff80002c57c7f0,ffff80002a09a040,ffff80002a099f90) at sys_kevent+0x389 sys/kern/kern_event.c:1137
syscall(ffff80002a09a040) at syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
syscall(ffff80002a09a040) at syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x8298362f430, count: 225
End of stack trace.

The operating system has halted.
Please press any key to reboot.


Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/08/26 17:40 openbsd acdebe0390e8 9aee4e0b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: inconsistent bufpage counts
2024/05/28 19:18 openbsd 06cae3775af3 34889ee3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: inconsistent bufpage counts
2024/05/16 11:37 openbsd b20edd337af0 ef5d53ed .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: inconsistent bufpage counts
* Struck through repros no longer work on HEAD.