panic: ffs2_balloc: unwind failed
Stopped at db_enter+0x25: addq $0x8,%rsp
TID PID UID PRFLAGS PFLAGS CPU COMMAND
*151543 49143 0 0 0x4000000 0 syz-executor
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff83413d18) at panic+0x1cf sys/kern/subr_prf.c:198
ffs2_balloc(fffffb006f147f00,6001000003,1,fffffb0007ffd410,1,ffff80003c8f3990) at ffs2_balloc+0x1965
ffs_truncate(fffffb006f147f00,6001000004,0,fffffb0007ffd410) at ffs_truncate+0x4f8 sys/ufs/ffs/ffs_inode.c:217
ufs_setattr(ffff80003c8f3ab0) at ufs_setattr+0x8e0 sys/ufs/ufs/ufs_vnops.c:403
VOP_SETATTR(fffffb006ccc66f0,ffff80003c8f3b38,fffffb0007ffd410,ffff800030cac550) at VOP_SETATTR+0x112 sys/kern/vfs_vops.c:210
dotruncate(ffff800030cac550,fffffb006ccc66f0,6001000004) at dotruncate+0x1da sys/kern/vfs_syscalls.c:2812
sys_truncate(ffff800030cac550,ffff80003c8f3e00,ffff80003c8f3d50) at sys_truncate+0x13e sys/kern/vfs_syscalls.c:2836
syscall(ffff80003c8f3e00) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80003c8f3e00) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x92bbf0fbc80, count: 5
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports. Insufficient info makes it difficult to find and fix bugs.
ddb>
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
*cpu0: ffs2_balloc: unwind failed
ddb> show kasan
No such command
ddb> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff83413d18) at panic+0x1cf sys/kern/subr_prf.c:198
ffs2_balloc(fffffb006f147f00,6001000003,1,fffffb0007ffd410,1,ffff80003c8f3990) at ffs2_balloc+0x1965
ffs_truncate(fffffb006f147f00,6001000004,0,fffffb0007ffd410) at ffs_truncate+0x4f8 sys/ufs/ffs/ffs_inode.c:217
ufs_setattr(ffff80003c8f3ab0) at ufs_setattr+0x8e0 sys/ufs/ufs/ufs_vnops.c:403
VOP_SETATTR(fffffb006ccc66f0,ffff80003c8f3b38,fffffb0007ffd410,ffff800030cac550) at VOP_SETATTR+0x112 sys/kern/vfs_vops.c:210
dotruncate(ffff800030cac550,fffffb006ccc66f0,6001000004) at dotruncate+0x1da sys/kern/vfs_syscalls.c:2812
sys_truncate(ffff800030cac550,ffff80003c8f3e00,ffff80003c8f3d50) at sys_truncate+0x13e sys/kern/vfs_syscalls.c:2836
syscall(ffff80003c8f3e00) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80003c8f3e00) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x92bbf0fbc80, count: -10
ddb> show registers
rdi 0
rsi 0x1
rbp 0xffff80003c8f3610
rbx 0xfffffb006f147f00
rdx 0xffff8000015baac0
rcx 0
rax 0xffff800030cac550
r8 0x101010101010101
r9 0x8080808080808080
r10 0x3e97699283dadd7f
r11 0xa009ce1433cd9c47
r12 0
r13 0xffff800000c48800
r14 0
r15 0x1
rip 0xffffffff833e19a5 db_enter+0x25
cs 0x8
rflags 0x246
rsp 0xffff80003c8f3600
ss 0x10
db_enter+0x25: addq $0x8,%rsp
ddb> show proc
PROC (syz-executor) tid=151543 pid=49143 tcnt=3 stat=onproc
flags process=0 proc=4000000<THREAD>
runpri=17, usrpri=76, slppri=17, nice=20
wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
forw=0xffffffffffffffff, list=0xffff80002a736f98,0xffff800030cac7f8
process=0xffff800045ffa898 user=0xffff80003c8ee000, vmspace=0xfffffb006d2ea010
estcpu=26, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0
ddb> ps
PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND
82038 120811 37114 0 3 0 0x80 fsleep syz-executor
82038 310200 37114 0 3 0 0x4000080 ttyout syz-executor
13895 293275 75241 0 2 0 0 syz-executor
13895 109859 75241 0 3 0 0x4000080 fifow syz-executor
97025 164996 67920 0 2 0x2 0 sh
13388 56588 83529 0 3 0 0x80 fsleep syz-executor
13388 141896 83529 0 2 0 0x4000000 syz-executor
13388 422985 83529 0 3 0 0x4000080 fsleep syz-executor
13450 311917 95752 0 3 0 0x80 fsleep syz-executor
13450 375153 95752 0 2 0 0x4000000 syz-executor
13450 480433 95752 0 2 0 0x4000000 syz-executor
4711 61991 45985 0 3 0 0x80 nanoslp syz-executor
4711 515125 45985 0 3 0 0x4000080 fsleep syz-executor
49143 454363 54574 0 3 0 0x80 fsleep syz-executor
*49143 151543 54574 0 7 0 0x4000000 syz-executor
49143 457617 54574 0 3 0 0x4000080 fsleep syz-executor
67920 296874 50343 0 3 0x2 0x80 wait syz-executor
95752 422447 50343 0 3 0x2 0x80 nanoslp syz-executor
37114 34303 50343 0 2 0x2 0xc80 syz-executor
83529 171027 50343 0 3 0x2 0x80 nanoslp syz-executor
75241 196662 50343 0 3 0x2 0x80 nanoslp syz-executor
45985 383536 50343 0 3 0x2 0x80 nanoslp syz-executor
57215 12563 50343 0 2 0x2 0 syz-executor
54574 180282 50343 0 3 0x2 0x80 nanoslp syz-executor
50343 27245 96681 0 3 0x2 0x80 kqread syz-executor
96681 31795 46305 0 3 0x100002 0x88 sigsusp ksh
46305 365606 44687 0 3 0x10 0x88 kqread sshd-session
44687 38369 24882 0 3 0x12 0x80 kqread sshd-session
44014 141906 1 0 3 0x100003 0x80 ttyin getty
24882 153600 1 0 3 0 0x88 kqread sshd
47789 7840 32432 73 3 0x1100010 0x80 kqread syslogd
32432 236024 1 0 3 0x100002 0x80 sbwait syslogd
26510 252696 1 0 3 0x100000 0x80 kqread resolvd
20883 276533 31887 77 3 0x100012 0x80 kqread dhcpleased
22679 72234 31887 77 3 0x100012 0x80 kqread dhcpleased
31887 13851 1 0 3 0 0x80 kqread dhcpleased
65159 446898 0 0 3 0x14000 0x200 bored smr
93728 118855 0 0 2 0x14000 0x200 zerothread
53580 103985 0 0 3 0x14000 0x200 aiodoned aiodoned
90001 66814 0 0 3 0x14000 0x200 syncer update
73640 216236 0 0 3 0x14000 0x200 cleaner cleaner
68270 442393 0 0 3 0x14000 0x200 reaper reaper
25245 385526 0 0 3 0x14000 0x200 pgdaemon pagedaemon
92673 296792 0 0 3 0x14000 0x200 bored viomb
26091 209280 0 0 3 0x14000 0x40000200 acpi0 acpi0
22726 137662 0 0 3 0x14000 0x200 bored softnet0
20554 167646 0 0 3 0x14000 0x200 bored systqmp
90894 434129 0 0 3 0x14000 0x200 bored systq
74773 289397 0 0 3 0x14000 0x40000200 tmoslp softclock
45555 346146 0 0 3 0x14000 0x40000200 idle0
1 353803 0 0 3 0x2 0x80 wait init
0 0 -1 0 3 0x10000 0x200 scheduler swapper
ddb> show all locks
No such command
ddb> show malloc
Type InUse MemUse HighUse Limit Requests Type Lim
devbuf 11036 12177K 12444K 166960K 12407 0
pcb 20 12K 12K 166960K 45 0
rtable 227 7K 7K 166960K 437 0
pf 32 13K 17K 166960K 112 0
ifaddr 39 6K 7K 166960K 55 0
ifgroup 50 2K 2K 166960K 67 0
sysctl 1 1K 9K 166960K 5 0
counters 33 17K 18K 166960K 38 0
ioctlops 0 0K 4K 166960K 123 0
iov 0 0K 12K 166960K 4 0
mount 1 1K 1K 166960K 1 0
log 0 0K 0K 166960K 4 0
vnodes 1329 84K 84K 166960K 1528 0
UFS quota 1 32K 32K 166960K 1 0
UFS mount 5 36K 36K 166960K 5 0
shm 2 1K 5K 166960K 3 0
VM map 2 1K 1K 166960K 2 0
sem 4 0K 0K 166960K 4 0
dirhash 12 2K 2K 166960K 18 0
ACPI 1734 201K 291K 166960K 11964 0
file desc 17 61K 89K 166960K 305 0
sigio 0 0K 0K 166960K 1 0
proc 60 59K 83K 166960K 570 0
subproc 72 4K 4K 166960K 99 0
NFS srvsock 1 0K 0K 166960K 1 0
NFS daemon 1 16K 16K 166960K 1 0
ip_moptions 0 0K 0K 166960K 13 0
in_multi 88 6K 7K 166960K 126 0
ether_multi 1 0K 0K 166960K 2 0
mrt 0 0K 0K 166960K 5 0
ISOFS mount 1 32K 32K 166960K 1 0
MSDOSFS mount 1 16K 16K 166960K 1 0
ttys 49 228K 228K 166960K 49 0
exec 0 0K 1K 166960K 396 0
fusefs mount 1 32K 32K 166960K 1 0
tdb 3 0K 0K 166960K 3 0
VM swap 8 62K 64K 166960K 10 0
UVM amap 210 158K 177K 166960K 4157 0
UVM aobj 6 2K 2K 166960K 7 0
pinsyscall 38 76K 91K 166960K 1453 0
memdesc 1 4K 4K 166960K 1 0
crypto data 1 1K 1K 166960K 1 0
ip6_options 0 0K 0K 166960K 3 0
NDP 13 0K 1K 166960K 35 0
temp 44 9108K 9170K 166960K 5023 0
kqueue 13 20K 28K 166960K 54 0
SYN cache 2 16K 16K 166960K 2 0
ddb> show all pools
Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
rtpcb 120 43 0 40 1 0 1 1 0 8 0
rtentry 136 137 0 36 4 0 4 4 0 8 0
unpcb 144 87 0 68 1 0 1 1 0 8 0
syncache 336 4 0 4 1 0 1 1 0 8 1
tcpcb 736 78 0 74 4 0 4 4 0 8 3
arp 96 22 0 6 1 0 1 1 0 8 0
ipq 40 1 0 0 1 0 1 1 0 8 0
ipqe 40 1 0 0 1 0 1 1 0 8 0
inpcb 328 199 0 189 4 0 4 4 0 8 3
nd6 112 32 0 9 1 0 1 1 0 8 0
kcovpl 48 11 0 3 1 0 1 1 0 8 0
ppxss 1072 1 0 1 1 0 1 1 0 8 1
pppxif 1416 1 0 1 1 0 1 1 0 8 1
pfstscr 40 6 0 2 1 0 1 1 0 8 0
pfstitem 24 4 0 2 1 0 1 1 0 8 0
pfstkey 128 6 0 3 1 0 1 1 0 8 0
pfstate 384 3 0 1 1 0 1 1 0 8 0
pfrule 1360 2 0 2 1 0 1 1 0 8 1
art_heap8 4096 1 0 0 1 0 1 1 0 8 0
art_heap4 256 561 0 138 30 0 30 30 0 8 0
art_table 40 562 0 138 5 0 5 5 0 8 0
art_node 32 136 0 44 1 0 1 1 0 8 0
sysvmsgpl 40 7 0 1 1 0 1 1 0 8 0
semapl 72 2 0 0 1 0 1 1 0 8 0
shmpl 112 4 0 1 1 0 1 1 0 8 0
dirhash 1024 21 0 4 3 0 3 3 0 8 0
dino2pl 256 1801 0 336 92 0 92 92 0 8 0
ffsino 256 1801 0 336 92 0 92 92 0 8 0
nchpl 144 2171 0 459 64 0 64 64 0 8 0
vnodes 216 2006 0 0 112 0 112 112 0 8 0
namei 1024 6501 0 6501 2 0 2 2 0 8 2
kstatmem 264 31 0 8 2 0 2 2 0 8 0
scxspl 216 7271 0 7271 3 0 3 3 1 8 3
plimitpl 152 46 0 28 1 0 1 1 0 8 0
sigapl 424 591 0 549 6 0 6 6 0 8 1
knotepl 120 8455 0 8408 16 6 10 16 0 8 8
kqueuepl 184 58 0 49 1 0 1 1 0 8 0
pipepl 304 133 0 106 3 0 3 3 0 8 0
fdescpl 448 578 0 549 5 0 5 5 0 8 1
filepl 120 2152 0 1936 9 0 9 9 0 8 2
lockfpl 104 117 0 113 1 0 1 1 0 8 0
lockfspl 48 59 0 55 1 0 1 1 0 8 0
sessionpl 144 30 0 22 1 0 1 1 0 8 0
pgrppl 48 41 0 25 1 0 1 1 0 8 0
ucredpl 104 182 0 170 1 0 1 1 0 8 0
zombiepl 144 549 0 549 1 0 1 1 0 8 1
processpl 1152 591 0 549 4 0 4 4 0 8 0
procpl 664 784 0 733 5 0 5 5 0 8 0
sockpl 552 335 0 303 5 0 5 5 0 8 2
mcl64k 65536 11 0 11 1 0 1 1 0 8 1
mcl12k 12288 2 0 2 1 0 1 1 0 8 1
mcl8k 8192 69 0 69 1 0 1 1 0 8 1
mcl4k 4096 2669 0 2619 13 0 13 13 0 8 6
mcl2k 2048 248 0 248 1 0 1 1 0 8 1
mextrefs 64 103 0 103 1 0 1 1 0 8 1
mtagpl 96 4 0 4 1 0 1 1 0 8 1
mbufpl 256 5850 0 5691 17 0 17 17 0 8 5
bufpl 272 2601 0 102 167 0 167 167 0 8 0
anonpl 24 95318 0 92269 32 0 32 32 0 187 10
amapchunkpl 152 12213 0 11786 26 0 26 26 0 158 8
amappl16 200 1346 0 1328 4 0 4 4 0 8 2
amappl15 192 1 0 1 1 0 1 1 0 8 1
amappl14 184 431 0 430 1 0 1 1 0 8 0
amappl13 176 118 0 107 1 0 1 1 0 8 0
amappl12 168 820 0 793 2 0 2 2 0 8 0
amappl11 160 10 0 9 1 0 1 1 0 8 0
amappl10 152 60 0 50 1 0 1 1 0 8 0
amappl9 144 272 0 272 1 0 1 1 0 8 1
amappl8 136 99 0 98 1 0 1 1 0 8 0
amappl7 128 162 0 150 1 0 1 1 0 8 0
amappl6 120 181 0 179 1 0 1 1 0 8 0
amappl5 112 105 0 97 1 0 1 1 0 8 0
amappl4 104 276 0 260 1 0 1 1 0 8 0
amappl3 96 2334 0 2236 3 0 3 3 0 8 0
amappl2 88 529 0 476 2 0 2 2 0 8 0
amappl1 80 10824 0 10279 13 0 13 13 0 8 1
amappl 88 3428 0 3281 4 0 4 4 0 92 0
uvmvnodes 80 98 0 0 2 0 2 2 0 8 0
dma4096 4096 1 0 1 1 0 1 1 0 8 1
dma1024 1024 1 0 0 1 0 1 1 0 8 0
dma256 256 6 0 6 1 0 1 1 0 8 1
dma128 128 253 0 253 1 0 1 1 0 8 1
dma64 64 6 0 6 1 0 1 1 0 8 1
dma32 32 7 0 7 1 0 1 1 0 8 1
dma16 16 18 0 17 1 0 1 1 0 8 0
aobjpl 72 6 0 1 1 0 1 1 0 8 0
uaddrrnd 24 578 0 549 1 0 1 1 0 8 0
uaddrbest 32 2 0 0 1 0 1 1 0 8 0
uaddr 24 578 0 549 1 0 1 1 0 8 0
vmmpekpl 168 6375 0 6339 2 0 2 2 0 8 0
vmmpepl 168 44756 0 43039 82 0 82 82 0 357 5
vmsppl 368 577 0 549 4 0 4 4 0 8 1
rwobjpl 40 15272 0 14351 11 0 11 11 0 8 0
pdppl 4096 1162 0 1098 94 26 68 78 0 8 4
pvpl 32 256066 0 247734 94 0 94 94 0 265 19
pmappl 216 577 0 549 2 0 2 2 0 8 0
extentpl 40 46 0 28 1 0 1 1 0 8 0
phpool 112 532 0 26 15 0 15 15 0 8 0
ddb> machine ddbcpu 0
No such command
ddb> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff83413d18) at panic+0x1cf sys/kern/subr_prf.c:198
ffs2_balloc(fffffb006f147f00,6001000003,1,fffffb0007ffd410,1,ffff80003c8f3990) at ffs2_balloc+0x1965
ffs_truncate(fffffb006f147f00,6001000004,0,fffffb0007ffd410) at ffs_truncate+0x4f8 sys/ufs/ffs/ffs_inode.c:217
ufs_setattr(ffff80003c8f3ab0) at ufs_setattr+0x8e0 sys/ufs/ufs/ufs_vnops.c:403
VOP_SETATTR(fffffb006ccc66f0,ffff80003c8f3b38,fffffb0007ffd410,ffff800030cac550) at VOP_SETATTR+0x112 sys/kern/vfs_vops.c:210
dotruncate(ffff800030cac550,fffffb006ccc66f0,6001000004) at dotruncate+0x1da sys/kern/vfs_syscalls.c:2812
sys_truncate(ffff800030cac550,ffff80003c8f3e00,ffff80003c8f3d50) at sys_truncate+0x13e sys/kern/vfs_syscalls.c:2836
syscall(ffff80003c8f3e00) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80003c8f3e00) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x92bbf0fbc80, count: -10
ddb> machine ddbcpu 1
No such command
ddb> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff83413d18) at panic+0x1cf sys/kern/subr_prf.c:198
ffs2_balloc(fffffb006f147f00,6001000003,1,fffffb0007ffd410,1,ffff80003c8f3990) at ffs2_balloc+0x1965
ffs_truncate(fffffb006f147f00,6001000004,0,fffffb0007ffd410) at ffs_truncate+0x4f8 sys/ufs/ffs/ffs_inode.c:217
ufs_setattr(ffff80003c8f3ab0) at ufs_setattr+0x8e0 sys/ufs/ufs/ufs_vnops.c:403
VOP_SETATTR(fffffb006ccc66f0,ffff80003c8f3b38,fffffb0007ffd410,ffff800030cac550) at VOP_SETATTR+0x112 sys/kern/vfs_vops.c:210
dotruncate(ffff800030cac550,fffffb006ccc66f0,6001000004) at dotruncate+0x1da sys/kern/vfs_syscalls.c:2812
sys_truncate(ffff800030cac550,ffff80003c8f3e00,ffff80003c8f3d50) at sys_truncate+0x13e sys/kern/vfs_syscalls.c:2836
syscall(ffff80003c8f3e00) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80003c8f3e00) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x92bbf0fbc80, count: -10