syzbot


assert "pg->wire_count == NUM" failed in vfs_biomem.c (3)

Status: upstream: reported on 2023/12/29 11:04
Reported-by: syzbot+9b8f9974ccb14bdd31cb@syzkaller.appspotmail.com
First crash: 169d, last: 17d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd assert "pg->wire_count == NUM" failed in vfs_biomem.c (2) 2 275d 305d 0/3 auto-obsoleted due to no activity on 2023/12/13 15:53
openbsd assert "pg->wire_count == NUM" failed in vfs_biomem.c 10 428d 764d 0/3 auto-obsoleted due to no activity on 2023/07/13 08:24

Sample crash report:
panic: kernel diagnostic assertion "pg->wire_count == 1" failed: file "/syzkaller/managers/main/kernel/sys/kern/vfs_biomem.c", line 310
Stopped at      db_enter+0x1c:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*317089  50644      0   0x8000000  0x4000000    0  syz-executor.5
db_enter() at db_enter+0x1c sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff829324b7) at panic+0x165 sys/kern/subr_prf.c:198
__assert(ffffffff828e7dc7,ffffffff828f4877,136,ffffffff82873ee0) at __assert+0x29 sys/kern/subr_prf.c:157
buf_free_pages(fffffd8057613480) at buf_free_pages+0x1d0 sys/kern/vfs_biomem.c:299
buf_dealloc_mem(fffffd8057613480) at buf_dealloc_mem+0xe2 sys/kern/vfs_biomem.c:179
buf_put(fffffd8057613480) at buf_put+0x15e sys/kern/vfs_bio.c:127
brelse(fffffd8057613480) at brelse+0x26b sys/kern/vfs_bio.c:944
vinvalbuf(fffffd805aafb0f0,2,ffffffffffffffff,ffff80002a679210,0,ffffffffffffffff) at vinvalbuf+0x3b8 sys/kern/vfs_subr.c:2025
ffs_truncate(fffffd806e7652d0,0,0,ffffffffffffffff) at ffs_truncate+0xb99
ufs_inactive(ffff80002bf07a88) at ufs_inactive+0x16a sys/ufs/ufs/ufs_inode.c:84
VOP_INACTIVE(fffffd805aafb0f0,ffff80002a679210) at VOP_INACTIVE+0xbf sys/kern/vfs_vops.c:495
vrele(fffffd805aafb0f0) at vrele+0xcc sys/kern/vfs_subr.c:827
ktrsettrace(ffff8000ffff8440,a0c7df9b,fffffd805cf0ab40,fffffd807f7d74e0) at ktrsettrace+0xb6 sys/kern/kern_ktrace.c:122
ktrops(ffff80002a679210,ffff8000ffff8440,0,a0c7df9b,fffffd805cf0ab40,fffffd807f7d74e0) at ktrops+0x1ae sys/kern/kern_ktrace.c:564
end trace frame: 0xffff80002bf07cf0, count: 0
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb> 
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
*cpu0: kernel diagnostic assertion "pg->wire_count == 1" failed: file "/syzkaller/managers/main/kernel/sys/kern/vfs_biomem.c", line 310
ddb> trace
db_enter() at db_enter+0x1c sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff829324b7) at panic+0x165 sys/kern/subr_prf.c:198
__assert(ffffffff828e7dc7,ffffffff828f4877,136,ffffffff82873ee0) at __assert+0x29 sys/kern/subr_prf.c:157
buf_free_pages(fffffd8057613480) at buf_free_pages+0x1d0 sys/kern/vfs_biomem.c:299
buf_dealloc_mem(fffffd8057613480) at buf_dealloc_mem+0xe2 sys/kern/vfs_biomem.c:179
buf_put(fffffd8057613480) at buf_put+0x15e sys/kern/vfs_bio.c:127
brelse(fffffd8057613480) at brelse+0x26b sys/kern/vfs_bio.c:944
vinvalbuf(fffffd805aafb0f0,2,ffffffffffffffff,ffff80002a679210,0,ffffffffffffffff) at vinvalbuf+0x3b8 sys/kern/vfs_subr.c:2025
ffs_truncate(fffffd806e7652d0,0,0,ffffffffffffffff) at ffs_truncate+0xb99
ufs_inactive(ffff80002bf07a88) at ufs_inactive+0x16a sys/ufs/ufs/ufs_inode.c:84
VOP_INACTIVE(fffffd805aafb0f0,ffff80002a679210) at VOP_INACTIVE+0xbf sys/kern/vfs_vops.c:495
vrele(fffffd805aafb0f0) at vrele+0xcc sys/kern/vfs_subr.c:827
ktrsettrace(ffff8000ffff8440,a0c7df9b,fffffd805cf0ab40,fffffd807f7d74e0) at ktrsettrace+0xb6 sys/kern/kern_ktrace.c:122
ktrops(ffff80002a679210,ffff8000ffff8440,0,a0c7df9b,fffffd805cf0ab40,fffffd807f7d74e0) at ktrops+0x1ae sys/kern/kern_ktrace.c:564
doktrace(fffffd805cf0ab40,4,20c7df9b,0,ffff80002a679210) at doktrace+0x514 ktrsetchildren sys/kern/kern_ktrace.c:586 [inline]
doktrace(fffffd805cf0ab40,4,20c7df9b,0,ffff80002a679210) at doktrace+0x514 sys/kern/kern_ktrace.c:508
sys_ktrace(ffff80002a679210,ffff80002bf07ef0,ffff80002bf07e40) at sys_ktrace+0xd6 sys/kern/kern_ktrace.c:549
syscall(ffff80002bf07ef0) at syscall+0x72a sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x3c0dbfb3890, count: -18
ddb> show registers
rdi                                0
rsi                              0x1
rbp               0xffff80002bf07590
rbx                                0
rdx               0xffff800000de1740
rcx                                0
rax               0xffff80002a679210
r8                 0x101010101010101
r9                0x8080808080808080
r10               0x4ef265f84cd777d0
r11               0x70f0f8f3f1b6c2d6
r12                                0
r13               0xfffffd8006382e80
r14                                0
r15                              0x1
rip               0xffffffff8233c53c    db_enter+0x1c
cs                               0x8
rflags                         0x246
rsp               0xffff80002bf07580
ss                                 0
db_enter+0x1c:  addq    $0x8,%rsp
ddb> show proc
PROC (syz-executor.5) tid=317089 pid=50644 tcnt=2 stat=onproc
    flags process=8000000 proc=4000000<THREAD>
    runpri=17, usrpri=86, slppri=17, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff80002a6787d0,0xffff80002a679c60
    process=0xffff8000343c7b38 user=0xffff80002bf02000, vmspace=0xfffffd8058f6ac40
    estcpu=36, cpticks=20, pctcpu=0.0, user=0, sys=20, intr=0
ddb> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 47669  104687  76342      0  2   0x8000000                syz-executor.4
 44808  269585  63199      0  2   0x8000000                syz-executor.3
 39933  366019  24831      0  2   0x8000000                syz-executor.0
 39933  248730  24831      0  3   0xc000080  fsleep        syz-executor.0
 50644  168903  92954      0  2   0x8000000                syz-executor.5
*50644  317089  92954      0  7   0xc000000                syz-executor.5
 61525   37513  60706      0  2   0x8000000                syz-executor.6
 61525  206841  60706      0  3   0xc000080  fsleep        syz-executor.6
 43813   70091  35388      0  2   0x8000000                syz-executor.2
 43813  337009  35388      0  3   0xc000080  fsleep        syz-executor.2
 22917  206405  27185      0  3   0x8000080  nanoslp       syz-executor.1
 22917  128939  27185      0  3   0xc000080  kqsel         syz-executor.1
 22917   60373  27185      0  3   0xc000080  fsleep        syz-executor.1
 35388   96595  40251      0  3   0x8000082  nanoslp       syz-executor.2
 60706  200325  40251      0  3   0x8000082  nanoslp       syz-executor.6
 63199  114208  40251      0  3   0x8000082  nanoslp       syz-executor.3
 24831  135255  40251      0  3   0x8000082  nanoslp       syz-executor.0
 64069  359955  40251      0  3   0x8000082  nanoslp       syz-executor.7
 76342  400777  40251      0  3   0x8000082  nanoslp       syz-executor.4
 27185  448768  40251      0  3   0x8000082  nanoslp       syz-executor.1
 92954  430907  40251      0  3   0x8000082  nanoslp       syz-executor.5
  5504  210139  96776      0  3  0x18100082  netio         arp
 96776  171434      1      0  3   0x810008a  sigsusp       sh
 71374  462585      1      0  3  0x18100083  ttyin         getty
 42006  350904      0      0  3     0x14280  nfsidl        nfsio
 33589  130039      0      0  3     0x14280  nfsidl        nfsio
 72421  263309      0      0  3     0x14280  nfsidl        nfsio
 35189  207080      0      0  3     0x14280  nfsidl        nfsio
 31652  255070      0      0  3     0x14280  nfsidl        nfsio
 79818  405797      0      0  3     0x14280  nfsidl        nfsio
 90064  143323      0      0  3     0x14280  nfsidl        nfsio
 14370  415214      0      0  3     0x14280  nfsidl        nfsio
 53340  190693      0      0  3     0x14280  nfsidl        nfsio
 63245  476785      0      0  3     0x14280  nfsidl        nfsio
 56006  453665      0      0  3     0x14280  nfsidl        nfsio
 42467  458213      0      0  3     0x14280  nfsidl        nfsio
 77302  232382      0      0  3     0x14280  nfsidl        nfsio
 90570  444171      0      0  3     0x14280  nfsidl        nfsio
 66475  283571      0      0  3     0x14280  nfsidl        nfsio
  4798  479286      0      0  3     0x14280  nfsidl        nfsio
 31811  323902      0      0  3     0x14280  nfsidl        nfsio
 77762  441725      0      0  3     0x14280  nfsidl        nfsio
 91527  475549      0      0  3     0x14280  nfsidl        nfsio
 38113  169199      0      0  3     0x14280  nfsidl        nfsio
 77204  130198  79023      0  3  0x18100082  netio         ndp
 79023  174850      1      0  3   0x810008a  sigsusp       sh
 91557  326754      0      0  3     0x14200  bored         sosplice
 40251  340590  14543      0  3  0x1a000082  thrsleep      syz-fuzzer
 40251  509202  14543      0  3  0x1e000082  nanoslp       syz-fuzzer
 40251   51294  14543      0  3  0x1e000082  wait          syz-fuzzer
 40251  261675  14543      0  3  0x1e000082  wait          syz-fuzzer
 40251  397177  14543      0  3  0x1e000082  wait          syz-fuzzer
 40251  253403  14543      0  3  0x1e000082  wait          syz-fuzzer
 40251  235668  14543      0  3  0x1e000082  wait          syz-fuzzer
 40251  280093  14543      0  3  0x1e000082  thrsleep      syz-fuzzer
 40251  477483  14543      0  3  0x1e000082  kqread        syz-fuzzer
 40251  217645  14543      0  3  0x1e000082  thrsleep      syz-fuzzer
 40251  137318  14543      0  3  0x1e000082  wait          syz-fuzzer
 40251  144741  14543      0  3  0x1e000082  thrsleep      syz-fuzzer
 40251  490221  14543      0  3  0x1e000082  wait          syz-fuzzer
 40251  276812  14543      0  3  0x1e000082  wait          syz-fuzzer
 14543  421191  44748      0  3   0x810008a  sigsusp       ksh
 44748   28511  72522      0  3  0x1800009a  kqread        sshd
 72522  521609      1      0  3  0x18000088  kqread        sshd
 18822  346925   8667     73  3  0x19100010  biowait       syslogd
  8667  513920      1      0  3  0x18100082  sbwait        syslogd
  2889   23245      1      0  3  0x18100080  kqread        resolvd
 20964  132450  38094     77  3  0x18100092  kqread        dhcpleased
 48150  472152  38094     77  3  0x18100092  kqread        dhcpleased
 38094  386687      1      0  3  0x18000080  kqread        dhcpleased
 32329  489066      0      0  3     0x14200  bored         smr
  6767  299110      0      0  2     0x14200                zerothread
 57140  478494      0      0  3     0x14200  aiodoned      aiodoned
  7021    9463      0      0  3     0x14200  syncer        update
 19306  202083      0      0  3     0x14200  cleaner       cleaner
 21743  392871      0      0  3     0x14200  reaper        reaper
 45710  168001      0      0  3     0x14200  pgdaemon      pagedaemon
 80784  517233      0      0  3     0x14200  bored         viomb
 29087  313224      0      0  3  0x40014200  acpi0         acpi0
 85786  523618      0      0  3     0x14200  bored         softnet3
 33767  482067      0      0  3     0x14200  bored         softnet2
 25139  212031      0      0  3     0x14200  bored         softnet1
 11588  146253      0      0  3     0x14200  bored         softnet0
 98153  229553      0      0  3     0x14200  bored         systqmp
 98748  193717      0      0  3     0x14200  bored         systq
 81731  505241      0      0  3  0x40014200  tmoslp        softclock
 48033  240051      0      0  3  0x40014200                idle0
     1  354246      0      0  3   0x8000082  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb> show all locks
No such command
ddb> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10219   6632K   10715K 166960K     15907        0
            pcb    18     12K      12K 166960K       318        0
         rtable   229      9K      10K 166960K      4421        0
             pf    35      9K      11K 166960K       387        0
         ifaddr    46     13K      13K 166960K       610        0
        ifgroup    62      2K       2K 166960K       716        0
         sysctl     4      1K       1K 166960K         8        0
       counters    33     17K      18K 166960K       196        0
       ioctlops     0      0K       2K 166960K       274        0
            iov     0      0K      28K 166960K       165        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1448     91K      91K 166960K      5030        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       9K 166960K        45        0
         VM map     2      1K       1K 166960K         2        0
            sem    19     41K      41K 166960K       202        0
        dirhash    12      2K       2K 166960K        54        0
           ACPI  1697    195K     286K 166960K     12548        0
      file desc    21     77K     113K 166960K      3700        0
          sigio     0      0K       0K 166960K        31        0
           proc    58     59K     124K 166960K      4253        0
        subproc   130      8K       8K 166960K      1898        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K       549        0
       in_multi    99      7K       7K 166960K      1679        0
    ether_multi     1      0K       0K 166960K        28        0
            mrt     0      0K       0K 166960K         4        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys   217    970K     970K 166960K       217        0
           exec     0      0K       1K 166960K      2292        0
     pfkey data     0      0K       0K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   357    548K     586K 166960K     27653        0
       UVM aobj    73      3K       3K 166960K        76        0
     pinsyscall    43     86K     111K 166960K      8367        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     2      0K       0K 166960K       147        0
            NDP    16      0K       2K 166960K       451        0
           temp    75   6800K    6872K 166960K     83046        0
         kqueue    12     18K      26K 166960K       285        0
      SYN cache     2     16K      16K 166960K         2        0
ddb> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
rtpcb      120      524    0      518     2     0     2     2     0     8    1
rtentry    112     1581    0     1480     4     0     4     4     0     8    1
unpcb      144     1744    0     1731     7     1     6     6     0     8    5
syncache   336       10    0       10     2     1     1     1     0     8    1
sackhl      24        2    0        2     2     1     1     1     0     8    1
tcpqe       32        1    0        1     1     1     0     1     0     8    0
tcpcb      808      691    0      685     6     1     5     5     0     8    4
arp         88      286    0      268     1     0     1     1     0     8    0
ipq         40        6    0        6     1     0     1     1     0     8    1
ipqe        40       51    0       51     1     0     1     1     0     8    1
inpcb      352     2470    0     2458     5     0     5     5     0     8    3
nd6        104      421    0      397     1     0     1     1     0     8    0
pkpcb       40       10    0       10     2     1     1     1     0     8    1
kcovpl      48      146    0      136     1     0     1     1     0     8    0
ppxss      1072      15    0       15     2     1     1     1     0     8    1
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256     6359    0     5911    87    59    28    30     0     8    0
art_table   32     6360    0     5911     4     0     4     4     0     8    0
art_node    16     1565    0     1475     1     0     1     1     0     8    0
sysvmsgpl   40        9    0        3     1     0     1     1     0     8    0
semapl     112      198    0      181     1     0     1     1     0     8    0
shmpl      112       73    0        3     2     0     2     2     0     8    0
dirhash    1024      45    0       28     3     0     3     3     0     8    0
dino2pl    256     4899    0     3389    96     0    96    96     0     8    0
ffsino     240     4899    0     3389    90     0    90    90     0     8    0
nchpl      144     8737    0     7011    66     0    66    66     0     8    0
uvmvnodes   80     8125    0        0   166     0   166   166     0     8    0
vnodes     216     8125    0        0   452     0   452   452     0     8    0
namei      1024   43190    0    43190     4     2     2     3     0     8    2
vcpupl     3904      35    0        1     5     0     5     5     0     8    0
vmpool     664       39    0        5     3     0     3     3     0     8    0
kstatmem   264      354    0      326     4     1     3     3     0     8    1
scsiplug    72        1    0        1     1     0     1     1     0     8    1
scxspl     216    59547    0    59546    11     7     4     8     1     8    3
plimitpl   152      403    0      386     1     0     1     1     0     8    0
sigapl     424     3749    0     3679     9     0     9     9     0     8    0
futexpl     64    35784    0    35780     1     0     1     1     0     8    0
knotepl    120     8930    0     8848    25    14    11    19     0     8    7
kqueuepl   184      554    0      545     1     0     1     1     0     8    0
pipepl     288      932    0      898     5     0     5     5     0     8    2
fdescpl    432     3710    0     3678     5     0     5     5     0     8    0
filepl     120    19850    0    19572    17     3    14    14     0     8    5
lockfpl    104      759    0      756     2     1     1     2     0     8    0
lockfspl    48      284    0      281     1     0     1     1     0     8    0
sessionpl  144      159    0      141     1     0     1     1     0     8    0
pgrppl      48      181    0      163     1     0     1     1     0     8    0
ucredpl    104     2326    0     2316     1     0     1     1     0     8    0
zombiepl   144     3680    0     3679     2     1     1     1     0     8    0
processpl  1080    3749    0     3679     6     0     6     6     0     8    0
procpl     656     5835    0     5746     8     0     8     8     0     8    0
sosppl     168        7    0        7     2     1     1     1     0     8    1
sockpl     504     4777    0     4744    37    24    13    26     0     8    8
mcl64k     65536     71    0       71     2     1     1     1     0     8    1
mcl16k     16384     17    0       17     2     1     1     1     0     8    1
mcl12k     12288     25    0       25     2     1     1     1     0     8    1
mcl9k      9216       7    0        7     2     1     1     1     0     8    1
mcl8k      8192      98    0       98     2     1     1     1     0     8    1
mcl4k      4096      24    0       24     2     1     1     1     0     8    1
mcl2k      2048   24047    0    23952    42    26    16    39     0     8    3
mtagpl      96       62    0       62     1     0     1     1     0     8    1
mbufpl     256    69769    0    69567   126   104    22    67     0     8    0
bufpl      280    15443    0     7082   598     0   598   598     0     8    0
anonpl      24   562727    0   556146   112    42    70    92     0   188    0
amapchunkpl 152   89823    0    89124    54    14    40    44     0   158   10
amappl16   200     9880    0     9748    30    18    12    21     0     8    3
amappl15   192       17    0       17     1     1     0     1     0     8    0
amappl14   184      618    0      605     2     1     1     2     0     8    0
amappl13   176        9    0        9     1     1     0     1     0     8    0
amappl12   168     6300    0     6263     3     0     3     3     0     8    0
amappl11   160      197    0      179     1     0     1     1     0     8    0
amappl10   152      207    0      204     1     0     1     1     0     8    0
amappl9    144      203    0      203     1     1     0     1     0     8    0
amappl8    136      480    0      447     2     0     2     2     0     8    0
amappl7    128       56    0       42     1     0     1     1     0     8    0
amappl6    120     1870    0     1854     2     1     1     2     0     8    0
amappl5    112      706    0      693     1     0     1     1     0     8    0
amappl4    104     1435    0     1401     3     1     2     2     0     8    0
amappl3     96    16095    0    16006     3     0     3     3     0     8    0
amappl2     88     4700    0     4620     5     2     3     4     0     8    1
amappl1     80    29010    0    28468    23     9    14    22     0     8    0
amappl      88    26047    0    25817     6     0     6     6     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72       75    0        3     2     0     2     2     0     8    0
uaddrrnd    24     3749    0     3683     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     3749    0     3683     1     0     1     1     0     8    0
vmmpekpl   168    32553    0    32484     5     1     4     4     0     8    0
vmmpepl    168   278424    0   276385   126    24   102   111     0   357    9
vmsppl     344     3748    0     3683     7     0     7     7     0     8    0
rwobjpl     24    74845    0    65457    57     0    57    57     0     8    0
pdppl      4096    7504    0     7400   442   336   106   122     0     8    2
pvpl        32  1618413    0  1604957   426   240   186   368     0   265   37
pmappl     216     3748    0     3683     5     0     5     5     0     8    0
extentpl    40       56    0       38     1     0     1     1     0     8    0
phpool     112      952    0      559    13     0    13    13     0     8    0
ddb> machine ddbcpu 0
No such command
ddb> trace
db_enter() at db_enter+0x1c sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff829324b7) at panic+0x165 sys/kern/subr_prf.c:198
__assert(ffffffff828e7dc7,ffffffff828f4877,136,ffffffff82873ee0) at __assert+0x29 sys/kern/subr_prf.c:157
buf_free_pages(fffffd8057613480) at buf_free_pages+0x1d0 sys/kern/vfs_biomem.c:299
buf_dealloc_mem(fffffd8057613480) at buf_dealloc_mem+0xe2 sys/kern/vfs_biomem.c:179
buf_put(fffffd8057613480) at buf_put+0x15e sys/kern/vfs_bio.c:127
brelse(fffffd8057613480) at brelse+0x26b sys/kern/vfs_bio.c:944
vinvalbuf(fffffd805aafb0f0,2,ffffffffffffffff,ffff80002a679210,0,ffffffffffffffff) at vinvalbuf+0x3b8 sys/kern/vfs_subr.c:2025
ffs_truncate(fffffd806e7652d0,0,0,ffffffffffffffff) at ffs_truncate+0xb99
ufs_inactive(ffff80002bf07a88) at ufs_inactive+0x16a sys/ufs/ufs/ufs_inode.c:84
VOP_INACTIVE(fffffd805aafb0f0,ffff80002a679210) at VOP_INACTIVE+0xbf sys/kern/vfs_vops.c:495
vrele(fffffd805aafb0f0) at vrele+0xcc sys/kern/vfs_subr.c:827
ktrsettrace(ffff8000ffff8440,a0c7df9b,fffffd805cf0ab40,fffffd807f7d74e0) at ktrsettrace+0xb6 sys/kern/kern_ktrace.c:122
ktrops(ffff80002a679210,ffff8000ffff8440,0,a0c7df9b,fffffd805cf0ab40,fffffd807f7d74e0) at ktrops+0x1ae sys/kern/kern_ktrace.c:564
doktrace(fffffd805cf0ab40,4,20c7df9b,0,ffff80002a679210) at doktrace+0x514 ktrsetchildren sys/kern/kern_ktrace.c:586 [inline]
doktrace(fffffd805cf0ab40,4,20c7df9b,0,ffff80002a679210) at doktrace+0x514 sys/kern/kern_ktrace.c:508
sys_ktrace(ffff80002a679210,ffff80002bf07ef0,ffff80002bf07e40) at sys_ktrace+0xd6 sys/kern/kern_ktrace.c:549
syscall(ffff80002bf07ef0) at syscall+0x72a sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x3c0dbfb3890, count: -18
ddb> machine ddbcpu 1
No such command
ddb> trace
db_enter() at db_enter+0x1c sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff829324b7) at panic+0x165 sys/kern/subr_prf.c:198
__assert(ffffffff828e7dc7,ffffffff828f4877,136,ffffffff82873ee0) at __assert+0x29 sys/kern/subr_prf.c:157
buf_free_pages(fffffd8057613480) at buf_free_pages+0x1d0 sys/kern/vfs_biomem.c:299
buf_dealloc_mem(fffffd8057613480) at buf_dealloc_mem+0xe2 sys/kern/vfs_biomem.c:179
buf_put(fffffd8057613480) at buf_put+0x15e sys/kern/vfs_bio.c:127
brelse(fffffd8057613480) at brelse+0x26b sys/kern/vfs_bio.c:944
vinvalbuf(fffffd805aafb0f0,2,ffffffffffffffff,ffff80002a679210,0,ffffffffffffffff) at vinvalbuf+0x3b8 sys/kern/vfs_subr.c:2025
ffs_truncate(fffffd806e7652d0,0,0,ffffffffffffffff) at ffs_truncate+0xb99
ufs_inactive(ffff80002bf07a88) at ufs_inactive+0x16a sys/ufs/ufs/ufs_inode.c:84
VOP_INACTIVE(fffffd805aafb0f0,ffff80002a679210) at VOP_INACTIVE+0xbf sys/kern/vfs_vops.c:495
vrele(fffffd805aafb0f0) at vrele+0xcc sys/kern/vfs_subr.c:827
ktrsettrace(ffff8000ffff8440,a0c7df9b,fffffd805cf0ab40,fffffd807f7d74e0) at ktrsettrace+0xb6 sys/kern/kern_ktrace.c:122
ktrops(ffff80002a679210,ffff8000ffff8440,0,a0c7df9b,fffffd805cf0ab40,fffffd807f7d74e0) at ktrops+0x1ae sys/kern/kern_ktrace.c:564
doktrace(fffffd805cf0ab40,4,20c7df9b,0,ffff80002a679210) at doktrace+0x514 ktrsetchildren sys/kern/kern_ktrace.c:586 [inline]
doktrace(fffffd805cf0ab40,4,20c7df9b,0,ffff80002a679210) at doktrace+0x514 sys/kern/kern_ktrace.c:508
sys_ktrace(ffff80002a679210,ffff80002bf07ef0,ffff80002bf07e40) at sys_ktrace+0xd6 sys/kern/kern_ktrace.c:549
syscall(ffff80002bf07ef0) at syscall+0x72a sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x3c0dbfb3890, count: -18

Crashes (136):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/05/29 19:09 openbsd cd5e2f786e13 34889ee3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/29 09:59 openbsd f475ad27b09c 34889ee3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/28 19:55 openbsd 06cae3775af3 34889ee3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/28 15:45 openbsd 06cae3775af3 34889ee3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/28 06:22 openbsd 98f39564523a f550015e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/27 23:35 openbsd 98f39564523a f550015e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/26 15:41 openbsd b0131f08c3a2 a10a183e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/25 20:20 openbsd c57a2cde1c3e a10a183e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/25 13:07 openbsd 92850d3aeacc a10a183e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/25 11:15 openbsd 92850d3aeacc a10a183e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/25 09:48 openbsd 92850d3aeacc a10a183e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/25 07:39 openbsd 92850d3aeacc a10a183e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/25 02:58 openbsd 4aaef610e0a6 a10a183e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/24 21:09 openbsd 4aaef610e0a6 a10a183e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/24 11:33 openbsd 6859a790d2a4 8f98448e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/24 04:35 openbsd 6859a790d2a4 8f98448e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/23 21:40 openbsd 6859a790d2a4 8f98448e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/23 02:32 openbsd 6859a790d2a4 4d098039 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/23 01:09 openbsd 6859a790d2a4 4d098039 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/22 02:29 openbsd 6859a790d2a4 1014eca7 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/21 23:15 openbsd 6859a790d2a4 1014eca7 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/21 15:00 openbsd d0fe8eba4c8c 4c0d3ee3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/20 21:41 openbsd ab5fd4cb8341 c0f1611a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/20 18:18 openbsd ab5fd4cb8341 c0f1611a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/20 06:14 openbsd 676865473293 c0f1611a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/20 04:46 openbsd 676865473293 c0f1611a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/20 01:39 openbsd 676865473293 c0f1611a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/19 10:31 openbsd 63371a7f711d c0f1611a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/19 09:21 openbsd 63371a7f711d c0f1611a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/19 04:03 openbsd 088a2cd995ac c0f1611a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/18 02:17 openbsd fea1e5fd692c c0f1611a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/17 14:54 openbsd 77ba8c170614 c2e07261 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/17 10:22 openbsd 77ba8c170614 c2e07261 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/16 14:32 openbsd b20edd337af0 ef5d53ed .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/16 06:07 openbsd e298eee01736 ef5d53ed .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/14 04:47 openbsd aa47c49a2e9a fdb4c10c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/14 03:36 openbsd aa47c49a2e9a fdb4c10c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/13 17:25 openbsd aa47c49a2e9a fdb4c10c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/13 05:11 openbsd 30293cdc5e30 9026e142 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/12 23:43 openbsd bae657104f70 9026e142 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/12 09:03 openbsd 73556a19205d 9026e142 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/11 21:20 openbsd 1b9599294b30 9026e142 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/11 20:11 openbsd 1b9599294b30 9026e142 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/11 15:29 openbsd 1b9599294b30 9026e142 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/10 23:05 openbsd f63e15d85063 9026e142 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/10 14:20 openbsd 898e5d067977 375932ce .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in vfs_biomem.c
2024/05/10 01:48 openbsd fbadb84b3757 de979bc2 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in vfs_biomem.c
2023/12/29 11:03 openbsd 4600b3a1e352 fb427a07 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "pg->wire_count == NUM" failed in vfs_biomem.c
* Struck through repros no longer work on HEAD.