panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock (9)

Status: upstream: reported on 2026/06/27 04:34
Reported-by: syzbot+de885339faa7e0a8cb83@syzkaller.appspotmail.com
First crash: 75d, last: 14d
Similar bugs (8)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock (5) 2 syz, C 104 1632d never 3/4 fixed on 2022/03/22 22:28
openbsd panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock (3) 2 syz, C 2 1831d 1834d 3/4 fixed on 2021/09/07 20:47
openbsd panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock (4) 2 syz, C 249 1633d 1634d 3/4 fixed on 2022/03/22 10:24
openbsd panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock 2 33 2571d 2575d 3/4 fixed on 2019/08/27 19:45
openbsd panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock (2) 2 syz, C 152 1835d 2556d 3/4 fixed on 2021/09/01 16:54
openbsd panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock (8) 2 syz, C 175 846d 860d 0/4 auto-obsoleted due to no activity on 2024/08/09 07:23
openbsd panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock (6) 2 syz, C 80 1632d 1632d 3/4 fixed on 2022/03/24 08:53
openbsd panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock (7) 2 syz 9 1349d 1364d 3/4 fixed on 2023/01/12 22:01

Sample crash report:
panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
Starting stack trace...
panic(ffffffff8355e62e) at panic+0x1d0 sys/kern/subr_prf.c:229
witness_checkorder(ffffffff83acbf00,9,0) at witness_checkorder+0x11ee sys/kern/subr_witness.c:847
__mp_lock(ffffffff83acb700) at __mp_lock+0xe1 read_rflags sys/arch/amd64/compile/SYZKALLER/obj/machine/cpufunc.h:212 [inline]
__mp_lock(ffffffff83acb700) at __mp_lock+0xe1 intr_disable sys/arch/amd64/compile/SYZKALLER/obj/machine/cpufunc.h:233 [inline]
__mp_lock(ffffffff83acb700) at __mp_lock+0xe1 sys/kern/kern_lock.c:168
selwakeup(ffff800001625a90) at selwakeup+0x23 sys/kern/sys_generic.c:836
ptsstart(ffff8000015a5c00) at ptsstart+0x120 ptcwakeup sys/kern/tty_pty.c:391 [inline]
ptsstart(ffff8000015a5c00) at ptsstart+0x120 sys/kern/tty_pty.c:358
tputchar(70,ffff8000015a5c00) at tputchar+0x17b ttstart sys/kern/tty.c:1369 [inline]
tputchar(70,ffff8000015a5c00) at tputchar+0x17b sys/kern/tty.c:2303
kputchar(70,1,0) at kputchar+0x10e sys/kern/subr_prf.c:360
kprintf() at kprintf+0x223 sys/kern/subr_prf.c:723
log(5,ffffffff835275fc) at log+0x1f8 sys/kern/subr_prf.c:292
pf_purge_expired_fragments() at pf_purge_expired_fragments+0x148 sys/net/pf_norm.c:218
pf_purge(0) at pf_purge+0x248 sys/net/pf.c:1986
taskq_thread(ffffffff839b8210) at taskq_thread+0x157 sys/kern/kern_task.c:446
end trace frame: 0x0, count: 245
End of stack trace.
syncing disks...

Crashes (11):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/08/27 13:00 openbsd eaf6a50527ed c53a1b9c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2026/08/22 00:54 openbsd d8ab52b87c98 1e72964b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2026/08/21 04:05 openbsd 66ffe5599e58 1e72964b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2026/08/04 00:53 openbsd 3ee0646fca13 9451e17e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2026/08/04 00:52 openbsd 3ee0646fca13 9451e17e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2026/08/01 22:44 openbsd 59ec3ab4d107 e611ffe1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2026/07/24 09:31 openbsd 691001c74c47 544adce9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2026/07/18 20:38 openbsd bc321d44d2f5 72524a66 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2026/06/28 07:09 openbsd 2194060d1c40 fb92f11c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2026/06/27 04:33 openbsd 309f6120392c fb92f11c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2026/08/25 22:52 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 18607adc5162 6a91adb4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
* Struck through repros no longer work on HEAD.