syzbot

 sign-in | mailing list | source | docs
🐞 Open [132] 🐞 Fixed [269] 🐞 Invalid [577] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

assert "pg->wire_count == NUM" failed in vfs_biomem.c (3)

Status: upstream: reported on 2023/12/29 11:04
Reported-by: syzbot+9b8f9974ccb14bdd31cb@syzkaller.appspotmail.com
First crash: 121d, last: 1h27m
▶ ▼ Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd assert "pg->wire_count == NUM" failed in vfs_biomem.c (2) 2 226d 256d 0/3 auto-obsoleted due to no activity on 2023/12/13 15:53
openbsd assert "pg->wire_count == NUM" failed in vfs_biomem.c 10 380d 716d 0/3 auto-obsoleted due to no activity on 2023/07/13 08:24

Sample crash report:
panic: kernel diagnostic assertion "pg->wire_count == 1" failed: file "/syzkaller/managers/main/kernel/sys/kern/vfs_biomem.c", line 310
Starting stack trace...
panic(ffffffff8292d653) at panic+0x159 sys/kern/subr_prf.c:229
__assert(ffffffff828e20b5,ffffffff828f02bf,136,ffffffff8286ed24) at __assert+0x29 sys/kern/subr_prf.c:157
buf_free_pages(fffffd80675e2368) at buf_free_pages+0x1d0 sys/kern/vfs_biomem.c:299
buf_dealloc_mem(fffffd80675e2368) at buf_dealloc_mem+0xe2 sys/kern/vfs_biomem.c:179
buf_put(fffffd80675e2368) at buf_put+0x15e sys/kern/vfs_bio.c:127
brelse(fffffd80675e2368) at brelse+0x26b sys/kern/vfs_bio.c:944
vinvalbuf(fffffd8067027be0,2,ffffffffffffffff,ffff80002a6854a0,0,ffffffffffffffff) at vinvalbuf+0x3b8 sys/kern/vfs_subr.c:2025
ffs_truncate(fffffd806e75e3c8,0,0,ffffffffffffffff) at ffs_truncate+0xb99
ufs_inactive(ffff8000327f9348) at ufs_inactive+0x16a sys/ufs/ufs/ufs_inode.c:84
VOP_INACTIVE(fffffd8067027be0,ffff80002a6854a0) at VOP_INACTIVE+0xbf sys/kern/vfs_vops.c:489
vrele(fffffd8067027be0) at vrele+0xcc sys/kern/vfs_subr.c:827
ktrsettrace(ffff8000ffff90c8,80000112,fffffd807d41de60,fffffd807f7d7208) at ktrsettrace+0xb6 sys/kern/kern_ktrace.c:122
ktrops(ffff80002a6854a0,ffff8000ffff90c8,0,80000112,fffffd807d41de60,fffffd807f7d7208) at ktrops+0x1ae sys/kern/kern_ktrace.c:564
doktrace(fffffd807d41de60,4,112,0,ffff80002a6854a0) at doktrace+0x514 ktrsetchildren sys/kern/kern_ktrace.c:586 [inline]
doktrace(fffffd807d41de60,4,112,0,ffff80002a6854a0) at doktrace+0x514 sys/kern/kern_ktrace.c:508
sys_ktrace(ffff80002a6854a0,ffff8000327f97b0,ffff8000327f9700) at sys_ktrace+0xd6 sys/kern/kern_ktrace.c:549
syscall(ffff8000327f97b0) at syscall+0x72a sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x84a56bd9f60, count: 240
End of stack trace.
syncing disks...panic: kernel diagnostic assertion "pg->wire_count == 1" failed: file "/syzkaller/managers/main/kernel/sys/kern/vfs_biomem.c", line 310
Starting stack trace...
panic(ffffffff8292d653) at panic+0x159 sys/kern/subr_prf.c:229
__assert(ffffffff828e20b5,ffffffff828f02bf,136,ffffffff8286ed24) at __assert+0x29 sys/kern/subr_prf.c:157
buf_free_pages(fffffd80675e2480) at buf_free_pages+0x1d0 sys/kern/vfs_biomem.c:299
buf_dealloc_mem(fffffd80675e2480) at buf_dealloc_mem+0xe2 sys/kern/vfs_biomem.c:179
buf_put(fffffd80675e2480) at buf_put+0x15e sys/kern/vfs_bio.c:127
brelse(fffffd80675e2480) at brelse+0x26b sys/kern/vfs_bio.c:944
vinvalbuf(fffffd8067027be0,2,ffffffffffffffff,ffff80002a6854a0,0,ffffffffffffffff) at vinvalbuf+0x3b8 sys/kern/vfs_subr.c:2025
ffs_truncate(fffffd806e75e3c8,0,0,ffffffffffffffff) at ffs_truncate+0xb99
ufs_inactive(ffff8000327f8af8) at ufs_inactive+0x16a sys/ufs/ufs/ufs_inode.c:84
VOP_INACTIVE(fffffd8067027be0,ffff80002a6854a0) at VOP_INACTIVE+0xbf sys/kern/vfs_vops.c:489
vrele(fffffd8067027be0) at vrele+0xcc sys/kern/vfs_subr.c:827
ffs_sync_vnode(fffffd8067027be0,ffff8000327f8c58) at ffs_sync_vnode+0x1a2 sys/ufs/ffs/ffs_vfsops.c:1087
vfs_mount_foreach_vnode(ffff8000006cf000,ffffffff81d96c50,ffff8000327f8c58) at vfs_mount_foreach_vnode+0x55 sys/kern/vfs_subr.c:910
ffs_sync(ffff8000006cf000,2,0,fffffd807f7d7208,ffff80002a6854a0) at ffs_sync+0x104 sys/ufs/ffs/ffs_vfsops.c:1131
sys_sync(ffff80002a6854a0,0,0) at sys_sync+0xbc sys/kern/vfs_syscalls.c:536
vfs_syncwait(ffff80002a6854a0,1) at vfs_syncwait+0x3b
vfs_shutdown(ffff80002a6854a0) at vfs_shutdown+0x61 sys/kern/vfs_subr.c:1791
boot(100) at boot+0xe0 sys/arch/amd64/amd64/machdep.c:903
reboot(100) at reboot+0x7b
panic(ffffffff8292d653) at panic+0x179 sys/kern/subr_prf.c:231
__assert(ffffffff828e20b5,ffffffff828f02bf,136,ffffffff8286ed24) at __assert+0x29 sys/kern/subr_prf.c:157
buf_free_pages(fffffd80675e2368) at buf_free_pages+0x1d0 sys/kern/vfs_biomem.c:299
buf_dealloc_mem(fffffd80675e2368) at buf_dealloc_mem+0xe2 sys/kern/vfs_biomem.c:179
buf_put(fffffd80675e2368) at buf_put+0x15e sys/kern/vfs_bio.c:127
brelse(fffffd80675e2368) at brelse+0x26b sys/kern/vfs_bio.c:944
vinvalbuf(fffffd8067027be0,2,ffffffffffffffff,ffff80002a6854a0,0,ffffffffffffffff) at vinvalbuf+0x3b8 sys/kern/vfs_subr.c:2025
ffs_truncate(fffffd806e75e3c8,0,0,ffffffffffffffff) at ffs_truncate+0xb99
ufs_inactive(ffff8000327f9348) at ufs_inactive+0x16a sys/ufs/ufs/ufs_inode.c:84
VOP_INACTIVE(fffffd8067027be0,ffff80002a6854a0) at VOP_INACTIVE+0xbf sys/kern/vfs_vops.c:489
vrele(fffffd8067027be0) at vrele+0xcc sys/kern/vfs_subr.c:827
ktrsettrace(ffff8000ffff90c8,80000112,fffffd807d41de60,fffffd807f7d7208) at ktrsettrace+0xb6 sys/kern/kern_ktrace.c:122
ktrops(ffff80002a6854a0,ffff8000ffff90c8,0,80000112,fffffd807d41de60,fffffd807f7d7208) at ktrops+0x1ae sys/kern/kern_ktrace.c:564
doktrace(fffffd807d41de60,4,112,0,ffff80002a6854a0) at doktrace+0x514 ktrsetchildren sys/kern/kern_ktrace.c:586 [inline]
doktrace(fffffd807d41de60,4,112,0,ffff80002a6854a0) at doktrace+0x514 sys/kern/kern_ktrace.c:508
sys_ktrace(ffff80002a6854a0,ffff8000327f97b0,ffff8000327f9700) at sys_ktrace+0xd6 sys/kern/kern_ktrace.c:549
syscall(ffff8000327f97b0) at syscall+0x72a sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x84a56bd9f60, count: 221
End of stack trace.

dump to dev 4,1 not possible
rebooting...
SeaBIOS (version 1.8.2-google)
Total RAM Size = 0x0000000080000000 = 2048 MiB
CPUs found: 2     Max CPUs supported: 2
SeaBIOS (version 1.8.2-google)
Machine UUID 8a8635c2-f252-d190-235a-0f50a6ed73cd
found virtio-scsi at 0:3
virtio-scsi vendor='Google' product='PersistentDisk' rev='1' type=0 removable=0
virtio-scsi blksize=512 sectors=4194304 = 2048 MiB
drive 0x000f27f0: PCHS=0/0/0 translation=lba LCHS=520/128/63 s=4194304
Sending Seabios boot VM event.
Booting from Hard Disk 0...
>> OpenBSD/amd64 BOOT 3.65
boot> show panic
boot: illegal argument panic
boot> trace
boot> show registers
boot> show proc
boot> ps
boot> show all locks
boot> show malloc
boot> show all pools
boot> machine ddbcpu 0
machine: syntax error
boot> trace
boot> machine ddbcpu 1
machine: syntax error
boot> trace

Crashes (37):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/04/28 12:22 openbsd 4a1a463e112f 07b455f9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/04/28 09:25 openbsd 4a1a463e112f 07b455f9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/04/28 08:55 openbsd 4a1a463e112f 07b455f9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/04/27 16:31 openbsd 22bab8566a4f 07b455f9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/04/27 00:56 openbsd 9d895d273374 07b455f9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/04/24 08:08 openbsd e6c7c102cf5d 21339d7b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/04/24 04:25 openbsd e6c7c102cf5d 21339d7b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/04/23 21:59 openbsd 8cc1b8fa16e2 21339d7b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/04/23 10:05 openbsd 19e99d061340 21339d7b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/04/23 03:57 openbsd 19e99d061340 21339d7b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/04/22 16:38 openbsd 5af821209fa3 36c961ad .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/04/21 00:01 openbsd a0c63bf7b3c7 af24b050 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/04/20 12:32 openbsd 55906bae5af5 af24b050 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/04/20 12:18 openbsd 55906bae5af5 af24b050 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/04/19 11:44 openbsd 78aef4a0e2ce af24b050 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/04/18 02:10 openbsd 456e8b6ad58e acc528cb .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/04/17 19:02 openbsd 456e8b6ad58e acc528cb .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/04/17 09:02 openbsd 489289b76a3a 18f6e127 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/04/16 03:44 openbsd 9dcb0c6dfd57 0d592ce4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/04/15 09:11 openbsd 7019ae976ad9 c8349e48 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/04/14 22:27 openbsd 56d65d052d3a c8349e48 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/04/14 17:34 openbsd 56d65d052d3a c8349e48 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/04/13 18:28 openbsd 3a5505f27483 c8349e48 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/04/11 22:51 openbsd 123b2274d92c 3023abf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/04/11 11:56 openbsd 123b2274d92c 3023abf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/04/09 04:25 openbsd 7e284d508f03 f3234354 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/04/07 20:40 openbsd 424974cc1f1f ca620dd8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/03/26 01:12 openbsd e226f85ad9fb 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/03/23 01:35 openbsd 97ca6483dad3 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/03/20 12:07 openbsd 10309c388f04 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/03/03 16:45 openbsd a60241574931 25905f5d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/02/26 03:29 openbsd 872522346897 8d446f15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/02/23 18:32 openbsd 2ac4c7caf11d 8d446f15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/02/08 12:06 openbsd 2df6d81d8aa9 e8e30238 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/02/01 17:02 openbsd fcae193a71fb 81024119 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/01/27 04:30 openbsd d4c9bc7e07bc cc4a4020 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2023/12/29 11:03 openbsd 4600b3a1e352 fb427a07 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in vfs_biomem.c
* Struck through repros no longer work on HEAD.