syzbot


assert "bp->b_data != NULL" failed in vfs_biomem.c (3)

Status: auto-obsoleted due to no activity on 2022/12/28 15:30
Reported-by: syzbot+bf1f964338f6fb1cd85c@syzkaller.appspotmail.com
First crash: 142d, last: 125d
similar bugs (2):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd assert "bp->b_data != NULL" failed in vfs_biomem.c 1 399d 399d 0/3 auto-closed as invalid on 2022/03/29 13:49
openbsd assert "bp->b_data != NULL" failed in vfs_biomem.c (2) 2 256d 309d 0/3 auto-closed as invalid on 2022/08/19 17:45

Sample crash report:
panic: kernel diagnostic assertion "bp->b_data != NULL" failed: file "/syzkaller/managers/main/kernel/sys/kern/vfs_biomem.c", line 235
Stopped at      db_enter+0x18:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*342827  23787  60929        0x10  0x4000000    0  syz-executor.0
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff82576b14) at panic+0x161 sys/kern/subr_prf.c:198
__assert(ffffffff825ee919,ffffffff8260b2c3,eb,ffffffff826297ea) at __assert+0x25 sys/kern/subr_prf.c:157
buf_unmap(fffffd807684e6e8) at buf_unmap+0x1a8 sys/kern/vfs_biomem.c:235
buf_map(fffffd80688534b8) at buf_map+0x1b7 sys/kern/vfs_biomem.c:117
buf_get(fffffd80658048c8,25,4000) at buf_get+0x739 sys/kern/vfs_bio.c:1179
getblk(fffffd80658048c8,25,4000,0,ffffffffffffffff) at getblk+0xfd sys/kern/vfs_bio.c:1047
ffs2_balloc(fffffd807a8963c8,94000,4000,fffffd807f7d7340,0,ffff800024becf08) at ffs2_balloc+0x156d sys/ufs/ffs/ffs_balloc.c:736
ffs_write(ffff800024becfa0) at ffs_write+0x411 sys/ufs/ffs/ffs_vnops.c:346
VOP_WRITE(fffffd80658048c8,ffff800024bed1c0,13,fffffd807f7d7340) at VOP_WRITE+0xbf sys/kern/vfs_vops.c:245
vn_write(fffffd8071030178,ffff800024bed1c0,0) at vn_write+0x152 sys/kern/vfs_vnops.c:408
dofilewritev(ffff80002178a540,5,ffff800024bed1c0,0,ffff800024bed2c0) at dofilewritev+0x19c sys/kern/sys_generic.c:375
sys_writev(ffff80002178a540,ffff800024bed268,ffff800024bed2c0) at sys_writev+0xa7 sys/kern/sys_generic.c:322
syscall(ffff800024bed330) at syscall+0x447 sys/arch/amd64/amd64/trap.c:585
end trace frame: 0xffff800024bed3b0, count: 0
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb> 
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
*cpu0: kernel diagnostic assertion "bp->b_data != NULL" failed: file "/syzkaller/managers/main/kernel/sys/kern/vfs_biomem.c", line 235
ddb> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff82576b14) at panic+0x161 sys/kern/subr_prf.c:198
__assert(ffffffff825ee919,ffffffff8260b2c3,eb,ffffffff826297ea) at __assert+0x25 sys/kern/subr_prf.c:157
buf_unmap(fffffd807684e6e8) at buf_unmap+0x1a8 sys/kern/vfs_biomem.c:235
buf_map(fffffd80688534b8) at buf_map+0x1b7 sys/kern/vfs_biomem.c:117
buf_get(fffffd80658048c8,25,4000) at buf_get+0x739 sys/kern/vfs_bio.c:1179
getblk(fffffd80658048c8,25,4000,0,ffffffffffffffff) at getblk+0xfd sys/kern/vfs_bio.c:1047
ffs2_balloc(fffffd807a8963c8,94000,4000,fffffd807f7d7340,0,ffff800024becf08) at ffs2_balloc+0x156d sys/ufs/ffs/ffs_balloc.c:736
ffs_write(ffff800024becfa0) at ffs_write+0x411 sys/ufs/ffs/ffs_vnops.c:346
VOP_WRITE(fffffd80658048c8,ffff800024bed1c0,13,fffffd807f7d7340) at VOP_WRITE+0xbf sys/kern/vfs_vops.c:245
vn_write(fffffd8071030178,ffff800024bed1c0,0) at vn_write+0x152 sys/kern/vfs_vnops.c:408
dofilewritev(ffff80002178a540,5,ffff800024bed1c0,0,ffff800024bed2c0) at dofilewritev+0x19c sys/kern/sys_generic.c:375
sys_writev(ffff80002178a540,ffff800024bed268,ffff800024bed2c0) at sys_writev+0xa7 sys/kern/sys_generic.c:322
syscall(ffff800024bed330) at syscall+0x447 sys/arch/amd64/amd64/trap.c:585
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x446c7fa7e70, count: -15
ddb> show registers
rdi                                0
rsi                              0x1
rbp               0xffff800024bec850
rbx                        0x4000001    __kernel_phys_end+0x1400001
rdx               0xffff800000c39e40
rcx                                0
rax               0xffff80002178a540
r8                 0x101010101010101
r9                0x8080808080808080
r10               0xe2c4b2a82e29453b
r11               0x5f364f4278a5b507
r12                                0
r13                                0
r14                                0
r15                              0x1
rip               0xffffffff821a3328    db_enter+0x18
cs                               0x8
rflags                         0x246
rsp               0xffff800024bec840
ss                                 0
db_enter+0x18:  addq    $0x8,%rsp
ddb> show proc
PROC (syz-executor.0) pid=342827 stat=onproc
    flags process=10<SUGID> proc=4000000<THREAD>
    pri=17, usrpri=83, nice=20
    forw=0xffffffffffffffff, list=0xffff80002178a000,0xffff80002178ba50
    process=0xffff8000225c0ff0 user=0xffff800024be8000, vmspace=0xfffffd807f015aa0
    estcpu=36, cpticks=1, pctcpu=0.0
    user=0, sys=1, intr=0
ddb> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 97922  328526  47896      0  2           0                syz-executor.2
 97922  507941  47896      0  3   0x4000080  fsleep        syz-executor.2
   389  467155  99211      0  2           0                syz-executor.3
   389  410286  99211      0  3   0x4000080  fsleep        syz-executor.3
 23787  113100  51454  60929  2        0x10                syz-executor.0
*23787  342827  51454  60929  7   0x4000010                syz-executor.0
 82743   61599  26944      0  2           0                syz-executor.5
 35041  291715  63426      0  2           0                syz-executor.6
 35041   79043  63426      0  3   0x4000080  fsleep        syz-executor.6
 95157  324214  94972      0  2           0                syz-executor.1
 95157  129913  94972      0  3   0x4000080  fsleep        syz-executor.1
 94972   70896  93515      0  3        0x82  nanoslp       syz-executor.1
 47896   13537  93515      0  3        0x82  nanoslp       syz-executor.2
 99211  259966  93515      0  3        0x82  nanoslp       syz-executor.3
 51454  213422  93515      0  3        0x82  nanoslp       syz-executor.0
 33529  471114      0      0  3     0x14280  nfsidl        nfsio
 56527  516110      0      0  3     0x14280  nfsidl        nfsio
 60346  196840      0      0  3     0x14280  nfsidl        nfsio
 56455  284892      0      0  3     0x14280  nfsidl        nfsio
 50330  422344      0      0  3     0x14280  nfsidl        nfsio
 75133  285525      0      0  3     0x14280  nfsidl        nfsio
 33767  468187      0      0  3     0x14280  nfsidl        nfsio
 70491  359288      0      0  3     0x14280  nfsidl        nfsio
 57304  342186      0      0  3     0x14280  nfsidl        nfsio
 56968   99703      0      0  3     0x14280  nfsidl        nfsio
 24998  520886      0      0  3     0x14280  nfsidl        nfsio
  7521  294435      0      0  3     0x14280  nfsidl        nfsio
 60923  257611      0      0  3     0x14280  nfsidl        nfsio
 74076  459380      0      0  3     0x14280  nfsidl        nfsio
 58669  161801      0      0  3     0x14280  nfsidl        nfsio
 70023  428492      0      0  3     0x14280  nfsidl        nfsio
 68888  311920      0      0  3     0x14280  nfsidl        nfsio
 38498  194126      0      0  3     0x14280  nfsidl        nfsio
 46579  183927      0      0  3     0x14280  nfsidl        nfsio
 10810  280175      0      0  3     0x14280  nfsidl        nfsio
   258   60773  93515      0  3        0x82  nanoslp       syz-executor.4
 73684  318344  93515      0  3        0x82  nanoslp       syz-executor.7
 63426  392228  93515      0  3        0x82  nanoslp       syz-executor.6
 26944  171807  93515      0  3        0x82  nanoslp       syz-executor.5
 14717  106073      0      0  3     0x14200  bored         sosplice
 93515  384994  29035      0  3        0x82  thrsleep      syz-fuzzer
 93515   92676  29035      0  3   0x4000082  nanoslp       syz-fuzzer
 93515  218540  29035      0  3   0x4000082  thrsleep      syz-fuzzer
 93515  395110  29035      0  3   0x4000082  wait          syz-fuzzer
 93515  458943  29035      0  3   0x4000082  thrsleep      syz-fuzzer
 93515  395604  29035      0  3   0x4000082  wait          syz-fuzzer
 93515   97494  29035      0  3   0x4000082  wait          syz-fuzzer
 93515  236974  29035      0  3   0x4000082  thrsleep      syz-fuzzer
 93515  344167  29035      0  3   0x4000082  wait          syz-fuzzer
 93515  114514  29035      0  3   0x4000082  wait          syz-fuzzer
 93515  222921  29035      0  3   0x4000082  wait          syz-fuzzer
 93515  488140  29035      0  3   0x4000082  kqread        syz-fuzzer
 93515  116727  29035      0  3   0x4000082  wait          syz-fuzzer
 93515  423711  29035      0  3   0x4000082  wait          syz-fuzzer
 29035   68645  95412      0  3    0x10008a  sigsusp       ksh
 95412  213503  46739      0  3        0x9a  kqread        sshd
 16610  260762      1      0  3    0x100083  ttyin         getty
 46739  502709      1      0  3        0x88  kqread        sshd
 72199  364349  23259     73  3   0x1100090  kqread        syslogd
 23259  412584      1      0  3    0x100082  netio         syslogd
 49928  247903      1      0  3    0x100080  kqread        resolvd
 43217  457285  36905     77  3    0x100092  kqread        dhcpleased
 10265  346336  36905     77  3    0x100092  kqread        dhcpleased
 36905  444638      1      0  3        0x80  kqread        dhcpleased
 24982  406562      0      0  3     0x14200  bored         smr
 59470   22298      0      0  2     0x14200                zerothread
 87858  381931      0      0  3     0x14200  aiodoned      aiodoned
 71684  101978      0      0  3     0x14200  syncer        update
 63992  435537      0      0  3     0x14200  cleaner       cleaner
 84442  236541      0      0  3     0x14200  reaper        reaper
 77489  130012      0      0  3     0x14200  pgdaemon      pagedaemon
 80842  225647      0      0  3     0x14200  bored         viomb
 46072  243531      0      0  3  0x40014200  acpi0         acpi0
  1861   60889      0      0  3     0x14200  bored         softnet
 34131   53469      0      0  3     0x14200  bored         softnet
 96139  475081      0      0  3     0x14200  bored         softnet
  1076  197064      0      0  3     0x14200  bored         softnet
 85164  120577      0      0  3     0x14200  bored         systqmp
  9581  413671      0      0  3     0x14200  bored         systq
 76557  293279      0      0  3  0x40014200  bored         softclock
 45464  493967      0      0  3  0x40014200                idle0
     1  226001      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb> show all locks
No such command
ddb> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10200   6414K    7126K  78643K     17243        0
            pcb    14     13K      17K  78643K      3247        0
         rtable   221     11K      14K  78643K      1418        0
         ifaddr   108     22K      22K  78643K       473        0
         sysctl     2      0K       2K  78643K         7        0
       counters    27     17K      17K  78643K        75        0
       ioctlops     0      0K       4K  78643K      1201        0
            iov     0      0K      16K  78643K       290        0
          mount     1      1K       1K  78643K         1        0
            log     0      0K       0K  78643K         4        0
         vnodes  1368     85K      86K  78643K      3062        0
      UFS quota     1     32K      32K  78643K         1        0
      UFS mount     5     36K      36K  78643K         5        0
            shm     2      1K       5K  78643K        19        0
         VM map     2      0K       0K  78643K         2        0
            sem    12      0K       0K  78643K       131        0
        dirhash    12      2K       2K  78643K        12        0
           ACPI  1697    195K     286K  78643K     12548        0
      file desc    16     57K      77K  78643K      3196        0
          sigio     0      0K       0K  78643K       180        0
           proc    58     59K      91K  78643K       986        0
        subproc   104      6K       6K  78643K       312        0
    NFS srvsock     1      0K       0K  78643K         1        0
     NFS daemon     1     16K      16K  78643K         1        0
    ip_moptions     0      0K       0K  78643K        37        0
       in_multi    93      6K       6K  78643K       340        0
    ether_multi     1      0K       0K  78643K        11        0
            mrt     1      0K       0K  78643K        19        0
    ISOFS mount     1     32K      32K  78643K         1        0
  MSDOSFS mount     1     16K      16K  78643K         1        0
           ttys   163    731K     731K  78643K       163        0
           exec     0      0K       2K  78643K      1354        0
     pfkey data     0      0K       0K  78643K         3        0
            tdb     3      0K       0K  78643K         3        0
        pagedep     1      8K       8K  78643K         1        0
       inodedep     1     32K      32K  78643K         1        0
         newblk     1      0K       0K  78643K         1        0
        VM swap     8     62K      64K  78643K        10        0
       UVM amap   273    215K     215K  78643K     18297        0
       UVM aobj   113      3K       4K  78643K       122        0
        memdesc     1      4K       4K  78643K         1        0
    crypto data     1      1K       1K  78643K         1        0
    ip6_options     0      0K       0K  78643K        95        0
            NDP    16      0K       2K  78643K       112        0
           temp   139   4726K    5749K  78643K     65399        0
         kqueue    12     18K      24K  78643K       137        0
      SYN cache     2     16K      16K  78643K         2        0
ddb> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
rtpcb      120      210    0      207     2     1     1     2     0     8    0
rtentry    112      349    0      257     4     1     3     4     0     8    0
unpcb      144     2388    0     2373    32    29     3     6     0     8    2
syncache   296       48    0       48     9     8     1     1     0     8    1
tcpqe       32       15   27       15     3     3     0     1     0     8    0
tcpcb      768     1040    0     1032    34    25     9     9     0     8    8
arp         88       51    0       37     1     0     1     1     0     8    0
ipq         40        1    0        1     1     1     0     1     0     8    0
ipqe        40        5    0        5     1     1     0     1     0     8    0
inpcb      336     5230    0     5219    56    47     9    13     0     8    8
ip6q        72        5    0        4     2     1     1     1     0     8    0
ip6af       40        9    0        8     2     1     1     1     0     8    0
nd6         48       79    0       57     1     0     1     1     0     8    0
pkpcb       40        8    0        8     2     2     0     1     0     8    0
kcovpl      48       24    0       16     1     0     1     1     0     8    0
ppxss      1160      29    0       29     5     5     0     1     0     8    0
pfstscr     40       47    0       45     2     1     1     1     0     8    0
pfosfp      40        4    0        2     1     0     1     1     0     8    0
pfosfpen   112        4    0        0     1     0     1     1     0     8    0
pfrke_plain 168      14    0       14     3     3     0     1     0     8    0
pfrktable  1344     195    0      192     1     0     1     1     0     8    0
pfanchor   1280     281    0       35    21     0    21    21     0     8    0
pftag       88        9    0        8     2     1     1     1     0     8    0
pfstitem    24        4    0        0     1     0     1     1     0     8    0
pfstkey    120       58    0       54     2     1     1     1     0     8    0
pfstate    336       47    0       45     2     1     1     1     0     8    0
pfrule     1360     224    0      150     7     0     7     7     0     8    0
rttmr      136        7    0        7     2     2     0     1     0     8    0
art_heap8  4096       8    0        7     4     2     2     3     0     8    1
art_heap4  256     1606    0     1161    36     8    28    30     0     8    0
art_table   32     1614    0     1168     4     0     4     4     0     8    0
art_node    16      348    0      268     1     0     1     1     0     8    0
sysvmsgpl   40       11    0        0     1     0     1     1     0     8    0
semupl     112        5    0        5     2     2     0     1     0     8    0
semapl     112      129    0      119     1     0     1     1     0     8    0
shmpl      112      119    0        9     4     0     4     4     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino2pl    256     5228    0     3785    91     0    91    91     0     8    0
ffsino     240     5228    0     3785    86     0    86    86     0     8    0
nchpl      144     9240    0     7600    63     1    62    63     0     8    0
rtmask      32       33    0       33     3     3     0     1     0     8    0
uvmvnodes   80     5926    0        0   121     0   121   121     0     8    0
vnodes     216     5926    0        0   330     0   330   330     0     8    0
namei      1024   33569    0    33569     4     3     1     2     0     8    1
vcpupl     2048      13    0        1     2     0     2     2     0     8    0
vmpool     536       16    0        4     1     0     1     1     0     8    0
pfiaddrpl  120       56    0       56     4     4     0     1     0     8    0
kstatmem   264      114    0       86     2     0     2     2     0     8    0
scxspl     216    26486    0    26477    16    13     3     8     0     8    2
plimitpl   152      649    0      633     1     0     1     1     0     8    0
sigapl     424     3476    0     3410     8     0     8     8     0     8    0
futexpl     64    28839    0    28835     1     0     1     1     0     8    0
knotepl    120    33996    0    33916    16     9     7    11     0     8    3
kqueuepl   184      413    0      405     9     8     1     4     0     8    0
pipepl     288      535    0      507    11     8     3     5     0     8    0
fdescpl    432     3439    0     3412     4     0     4     4     0     8    0
filepl     120    23018    0    22777    39    28    11    16     0     8    2
lockfpl    104      807    0      805     2     1     1     2     0     8    0
lockfspl    48      251    0      249     1     0     1     1     0     8    0
sessionpl  144       39    0       23     1     0     1     1     0     8    0
pgrppl      48       53    0       37     1     0     1     1     0     8    0
ucredpl    104     2701    0     2690     1     0     1     1     0     8    0
zombiepl   144     3412    0     3410     1     0     1     1     0     8    0
processpl  1000    3476    0     3410    11     2     9     9     0     8    0
procpl     672     7942    0     7858    12     2    10    10     0     8    2
sosppl     168       16    0       16     3     3     0     1     0     8    0
sockpl     456     7852    0     7823   190   178    12    33     0     8    8
mcl64k     65536     85    0       85     4     3     1     1     0     8    1
mcl16k     16384     40    0       40     7     6     1     1     0     8    1
mcl12k     12288     90    0       90     4     3     1     1     0     8    1
mcl9k      9216      37    0       37     6     6     0     1     0     8    0
mcl8k      8192     372    0      372     4     3     1     1     0     8    1
mcl4k      4096     357    0      357     2     1     1     1     0     8    1
mcl2k2     2112      15    0       15     6     5     1     1     0     8    1
mcl2k      2048   75910    0    75847    15     5    10    11     0     8    0
mtagpl      96      990    0      668    14     3    11    12     0     8    0
mbufpl     256   151169    0   150654   107    62    45    75     0     8    1
bufpl      288     8229    0     1816   459     0   459   459     0     8    0
anonpl      24   599645    0   585065   131    27   104   117     0   188    0
amapchunkpl 152   58156    0    57554    48    21    27    38     0   158    0
amappl16   200     8306    0     7712    48    15    33    44     0     8    0
amappl15   192      160    0      157     2     1     1     1     0     8    0
amappl14   184      558    0      555     1     0     1     1     0     8    0
amappl13   176      245    0      242     1     0     1     1     0     8    0
amappl12   168       80    0       78     1     0     1     1     0     8    0
amappl11   160      821    0      804     1     0     1     1     0     8    0
amappl10   152      395    0      389     1     0     1     1     0     8    0
amappl9    144     1279    0     1265     1     0     1     1     0     8    0
amappl8    136     1081    0     1021     3     0     3     3     0     8    0
amappl7    128      495    0      470     1     0     1     1     0     8    0
amappl6    120     1028    0     1010     2     1     1     2     0     8    0
amappl5    112     2531    0     2516     1     0     1     1     0     8    0
amappl4    104     2700    0     2666     4     3     1     2     0     8    0
amappl3     96     9050    0     9002     2     0     2     2     0     8    0
amappl2     88     3631    0     3568     2     0     2     2     0     8    0
amappl1     80    82270    0    81561    26    10    16    21     0     8    0
amappl      88    17523    0    17364     4     0     4     4     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72      121    0        9     3     0     3     3     0     8    0
uaddrrnd    24     3455    0     3416     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     3455    0     3416     1     0     1     1     0     8    0
vmmpekpl   168    27679    0    27624     3     0     3     3     0     8    0
vmmpepl    168   338121    0   335415   173    39   134   135     0   357    7
vmsppl     272     3454    0     3416     5     2     3     3     0     8    0
rwobjpl     24    84457    0    76760    47     0    47    47     0     8    0
pdppl      4096    6916    0     6844   321   245    76    76     0     8    4
pvpl        32  1289104    0  1269507   313   135   178   259     0   265    0
pmappl     216     3454    0     3416     3     0     3     3     0     8    0
extentpl    40       56    0       38     1     0     1     1     0     8    0
phpool     112     1229    0      398    24     0    24    24     0     8    0
ddb> machine ddbcpu 0
No such command
ddb> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff82576b14) at panic+0x161 sys/kern/subr_prf.c:198
__assert(ffffffff825ee919,ffffffff8260b2c3,eb,ffffffff826297ea) at __assert+0x25 sys/kern/subr_prf.c:157
buf_unmap(fffffd807684e6e8) at buf_unmap+0x1a8 sys/kern/vfs_biomem.c:235
buf_map(fffffd80688534b8) at buf_map+0x1b7 sys/kern/vfs_biomem.c:117
buf_get(fffffd80658048c8,25,4000) at buf_get+0x739 sys/kern/vfs_bio.c:1179
getblk(fffffd80658048c8,25,4000,0,ffffffffffffffff) at getblk+0xfd sys/kern/vfs_bio.c:1047
ffs2_balloc(fffffd807a8963c8,94000,4000,fffffd807f7d7340,0,ffff800024becf08) at ffs2_balloc+0x156d sys/ufs/ffs/ffs_balloc.c:736
ffs_write(ffff800024becfa0) at ffs_write+0x411 sys/ufs/ffs/ffs_vnops.c:346
VOP_WRITE(fffffd80658048c8,ffff800024bed1c0,13,fffffd807f7d7340) at VOP_WRITE+0xbf sys/kern/vfs_vops.c:245
vn_write(fffffd8071030178,ffff800024bed1c0,0) at vn_write+0x152 sys/kern/vfs_vnops.c:408
dofilewritev(ffff80002178a540,5,ffff800024bed1c0,0,ffff800024bed2c0) at dofilewritev+0x19c sys/kern/sys_generic.c:375
sys_writev(ffff80002178a540,ffff800024bed268,ffff800024bed2c0) at sys_writev+0xa7 sys/kern/sys_generic.c:322
syscall(ffff800024bed330) at syscall+0x447 sys/arch/amd64/amd64/trap.c:585
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x446c7fa7e70, count: -15
ddb> machine ddbcpu 1
No such command
ddb> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff82576b14) at panic+0x161 sys/kern/subr_prf.c:198
__assert(ffffffff825ee919,ffffffff8260b2c3,eb,ffffffff826297ea) at __assert+0x25 sys/kern/subr_prf.c:157
buf_unmap(fffffd807684e6e8) at buf_unmap+0x1a8 sys/kern/vfs_biomem.c:235
buf_map(fffffd80688534b8) at buf_map+0x1b7 sys/kern/vfs_biomem.c:117
buf_get(fffffd80658048c8,25,4000) at buf_get+0x739 sys/kern/vfs_bio.c:1179
getblk(fffffd80658048c8,25,4000,0,ffffffffffffffff) at getblk+0xfd sys/kern/vfs_bio.c:1047
ffs2_balloc(fffffd807a8963c8,94000,4000,fffffd807f7d7340,0,ffff800024becf08) at ffs2_balloc+0x156d sys/ufs/ffs/ffs_balloc.c:736
ffs_write(ffff800024becfa0) at ffs_write+0x411 sys/ufs/ffs/ffs_vnops.c:346
VOP_WRITE(fffffd80658048c8,ffff800024bed1c0,13,fffffd807f7d7340) at VOP_WRITE+0xbf sys/kern/vfs_vops.c:245
vn_write(fffffd8071030178,ffff800024bed1c0,0) at vn_write+0x152 sys/kern/vfs_vnops.c:408
dofilewritev(ffff80002178a540,5,ffff800024bed1c0,0,ffff800024bed2c0) at dofilewritev+0x19c sys/kern/sys_generic.c:375
sys_writev(ffff80002178a540,ffff800024bed268,ffff800024bed2c0) at sys_writev+0xa7 sys/kern/sys_generic.c:322
syscall(ffff800024bed330) at syscall+0x447 sys/arch/amd64/amd64/trap.c:585
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x446c7fa7e70, count: -15

Crashes (2):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets Title
ci-openbsd-main 2022/09/29 15:29 openbsd cc17eeafc2ef 45fd7169 .config console log report [disk image] [bsd.gdb] [kernel image] assert "bp->b_data != NULL" failed in vfs_biomem.c
ci-openbsd-main 2022/09/13 06:14 openbsd 8db72fe4e92e f371ed7e .config console log report [disk image] [bsd.gdb] [kernel image] assert "bp->b_data != NULL" failed in vfs_biomem.c
* Struck through repros no longer work on HEAD.