panic: thread 0xffff800020bbabd0 cannot exit while holding sleeplocks Stopped at db_enter+0x18: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *318294 72122 0 0x14000 0x200 1 reaper 474424 269 0 0x14000 0x40000200 0 softclock db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:399 panic() at panic+0x16c sys/kern/subr_prf.c:208 witness_thread_exit(d13a8fb2e5a58cb4) at witness_thread_exit+0x244 sys/kern/subr_witness.c:1377 reaper(0) at reaper+0x14f sys/kern/kern_exit.c:412 end trace frame: 0x0, count: 11 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> show panic thread 0xffff800020bbabd0 cannot exit while holding sleeplocks ddb{1}> trace db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:399 panic() at panic+0x16c sys/kern/subr_prf.c:208 witness_thread_exit(d13a8fb2e5a58cb4) at witness_thread_exit+0x244 sys/kern/subr_witness.c:1377 reaper(0) at reaper+0x14f sys/kern/kern_exit.c:412 end trace frame: 0x0, count: -4 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff800020b67930 rbx 0xffff800020b679d0 rdx 0xffffffff81f3066d apollo_pio_rec+0x86ea rcx 0 rax 0 r8 0xffffffff817c1934 kprintf+0x174 r9 0x1 r10 0xafe3671b56469ea6 r11 0xcb53b79aef41ff63 r12 0x3000000008 r13 0xffff800020b67940 r14 0x100 r15 0x1 rip 0xffffffff81598c38 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff800020b67920 ss 0x10 db_enter+0x18: addq $0x8,%rsp ddb{1}> show proc PROC (reaper) pid=318294 stat=onproc flags process=14000 proc=200 pri=4, usrpri=51, nice=20 forw=0xffffffffffffffff, list=0xffff800020b20bb8,0xffff800020b219d8 process=0xffff800020b5b3b8 user=0xffff800020b62000, vmspace=0xffffffff822f1200 estcpu=1, cpticks=3, pctcpu=0.49 user=0, sys=3, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 89766 487972 1 0 3 0x100083 ttyin getty 39125 333528 0 0 3 0x14200 bored sosplice 90749 222319 80864 0 3 0x82 piperd syz-executor1 22229 93166 80864 0 3 0x82 nanosleep syz-executor0 80864 517134 29279 0 3 0x82 thrsleep syz-fuzzer 80864 371176 29279 0 3 0x4000082 thrsleep syz-fuzzer 80864 214884 29279 0 3 0x4000082 thrsleep syz-fuzzer 80864 296750 29279 0 3 0x4000082 thrsleep syz-fuzzer 80864 524143 29279 0 3 0x4000082 thrsleep syz-fuzzer 80864 328625 29279 0 3 0x4000082 thrsleep syz-fuzzer 80864 245355 29279 0 3 0x4000082 kqread syz-fuzzer 80864 188197 29279 0 3 0x4000082 thrsleep syz-fuzzer 80864 44585 29279 0 3 0x4000082 thrsleep syz-fuzzer 80864 444884 29279 0 3 0x4000082 thrsleep syz-fuzzer 80864 111988 29279 0 3 0x4000082 thrsleep syz-fuzzer 29279 210791 49155 0 3 0x10008a pause ksh 49155 445453 89896 0 3 0x92 select sshd 89896 166449 1 0 3 0x80 select sshd 12766 414500 13610 73 3 0x100010 ffs_fsync syslogd 13610 86281 1 0 3 0x100082 netio syslogd 78608 448421 1 77 3 0x100090 poll dhclient 15561 304836 1 0 3 0x80 poll dhclient 68080 491333 0 0 3 0x14200 pgzero zerothread 77474 409483 0 0 3 0x14200 aiodoned aiodoned 50160 132262 0 0 3 0x14200 syncer update 88322 236286 0 0 3 0x14200 cleaner cleaner *72122 318294 0 0 7 0x14200 reaper 84177 521361 0 0 3 0x14200 pgdaemon pagedaemon 70460 100204 0 0 3 0x14200 bored crynlk 75600 357967 0 0 3 0x14200 bored crypto 65957 497506 0 0 3 0x40014200 acpi0 acpi0 48183 286153 0 0 3 0x40014200 idle1 94405 296100 0 0 3 0x14200 bored softnet 24144 225238 0 0 3 0x14200 bored systqmp 36050 23609 0 0 3 0x14200 bored systq 269 474424 0 0 7 0x40014200 softclock 47195 51844 0 0 3 0x40014200 idle0 1 46546 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 12766 (syslogd) thread 0xffff800020be59d8 (414500) exclusive rrwlock inode r = 0 (0xfffffd806eb8c1a8) locked @ /syzkaller/managers/multicore/kernel/sys/ufs/ufs/ufs_vnops.c:1547 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim Kern Lim devbuf 9589 10472K 10488K 78643K 14708 0 0 pcb 23 9K 11K 78643K 9086 0 0 rtable 100 3K 4K 78643K 1866 0 0 ifaddr 74 22K 26K 78643K 1077 0 0 counters 39 33K 33K 78643K 39 0 0 ioctlops 0 0K 2K 78643K 155 0 0 iov 0 0K 32K 78643K 1749 0 0 mount 1 1K 1K 78643K 1 0 0 vnodes 1188 74K 76K 78643K 12814 0 0 UFS quota 1 32K 32K 78643K 1 0 0 UFS mount 5 36K 36K 78643K 5 0 0 shm 2 1K 5K 78643K 288 0 0 VM map 2 1K 1K 78643K 2 0 0 sem 12 0K 0K 78643K 1869 0 0 dirhash 12 2K 2K 78643K 12 0 0 ACPI 1792 194K 288K 78643K 12592 0 0 file desc 5 13K 25K 78643K 17879 0 0 sigio 1 0K 0K 78643K 355 0 0 proc 42 38K 70K 78643K 3197 0 0 subproc 64 65538K 67586K 78643K 169 0 0 NFS srvsock 1 0K 0K 78643K 1 0 0 NFS daemon 1 16K 16K 78643K 1 0 0 ip_moptions 0 0K 0K 78643K 2548 0 0 in_multi 33 2K 2K 78643K 740 0 0 ether_multi 1 0K 0K 78643K 101 0 0 ISOFS mount 1 32K 32K 78643K 1 0 0 MSDOSFS mount 1 16K 16K 78643K 1 0 0 ttys 156 689K 689K 78643K 156 0 0 exec 0 0K 1K 78643K 1499 0 0 pfkey data 0 0K 4K 78643K 6 0 0 pagedep 1 8K 8K 78643K 1 0 0 inodedep 1 32K 32K 78643K 1 0 0 newblk 1 0K 0K 78643K 1 0 0 VM swap 7 26K 26K 78643K 7 0 0 UVM amap 133 23K 62K 78643K 58206 0 0 UVM aobj 130 6K 6K 78643K 152 0 0 memdesc 1 4K 4K 78643K 1 0 0 crypto data 1 1K 1K 78643K 1 0 0 ip6_options 0 0K 1K 78643K 428 0 0 NDP 17 0K 0K 78643K 302 0 0 temp 205 2368K 2443K 78643K 49977 0 0 kqueue 0 0K 0K 78643K 207 0 0 SYN cache 2 16K 16K 78643K 2 0 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 4 0 0 1 0 1 1 0 8 0 inpcbpl 280 7859 0 7852 2 1 1 2 0 8 0 plimitpl 152 250 0 243 1 0 1 1 0 8 0 plcache 128 20 0 0 1 0 1 1 0 8 0 rtentry 112 41 0 1 2 0 2 2 0 8 0 syncache 264 4 0 4 1 1 0 1 0 8 0 sackhl 24 1 0 1 1 1 0 1 0 8 0 tcpcb 544 2775 0 2771 1 0 1 1 0 8 0 nd6 48 4 0 0 1 0 1 1 0 8 0 ppxss 1128 188 0 188 84 83 1 1 0 8 1 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 185 0 0 12 0 12 12 0 8 0 art_table 32 186 0 0 2 0 2 2 0 8 0 art_node 16 40 0 6 1 0 1 1 0 8 0 sysvmsgpl 40 24 0 15 1 0 1 1 0 8 0 semupl 112 1 0 1 1 1 0 1 0 8 0 semapl 112 1867 0 1857 1 0 1 1 0 8 0 shmpl 112 150 0 22 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 36731 0 34952 58 0 58 58 0 8 0 ffsino 272 36731 0 34952 123 4 119 119 0 8 0 nchpl 144 62826 0 61252 60 0 60 60 0 8 0 uvmvnodes 72 5926 0 0 108 0 108 108 0 8 0 vnodes 200 5926 0 0 312 0 312 312 0 8 0 namei 1024 200971 0 200971 6 5 1 1 0 8 1 percpumem 16 30 0 0 1 0 1 1 0 8 0 scsiplug 64 61 0 61 39 39 0 1 0 8 0 scxspl 192 171615 0 171614 42 39 3 6 0 8 2 sigapl 432 18089 0 18076 2 0 2 2 0 8 0 futexpl 56 222027 0 222027 6 5 1 1 0 8 1 knotepl 112 4867 0 4840 43 42 1 2 0 8 0 kqueuepl 104 6150 0 6148 1 0 1 1 0 8 0 pipepl 112 11756 0 11737 43 42 1 2 0 8 0 fdescpl 488 18090 0 18076 3 1 2 3 0 8 0 filepl 152 116648 0 116551 46 41 5 7 0 8 1 lockfpl 96 5665 0 5665 36 35 1 1 0 8 1 lockfspl 24 9240 0 9240 32 31 1 1 0 8 1 sessionpl 112 60 0 50 1 0 1 1 0 8 0 pgrppl 48 235 0 225 1 0 1 1 0 8 0 ucredpl 96 39512 0 39505 1 0 1 1 0 8 0 zombiepl 144 18077 0 18076 8 7 1 1 0 8 0 processpl 840 18105 0 18076 4 0 4 4 0 8 0 procpl 600 56658 0 56617 8 4 4 5 0 8 0 sosppl 128 379 0 379 83 83 0 1 0 8 0 sockpl 384 16524 0 16507 30 27 3 4 0 8 1 mcl64k 65536 2102 0 0 143 94 49 66 0 8 1 mcl16k 16384 22 0 0 3 1 2 3 0 8 0 mcl12k 12288 61 0 0 2 0 2 2 0 8 0 mcl9k 9216 58 0 0 2 1 1 2 0 8 0 mcl8k 8192 55 0 0 4 2 2 3 0 8 0 mcl4k 4096 81 0 0 9 6 3 3 0 8 0 mcl2k2 2112 12 0 0 1 0 1 1 0 8 0 mcl2k 2048 144 0 0 14 3 11 14 0 8 0 mtagpl 80 1 0 0 1 0 1 1 0 8 0 mbufpl 256 2146 0 0 35 1 34 35 0 8 0 bufpl 256 31809 0 24840 436 0 436 436 0 8 0 anonpl 16 1933464 0 1925622 540 492 48 65 0 125 6 amapchunkpl 152 120471 0 120353 533 527 6 190 0 158 0 amappl16 192 107189 0 106800 804 775 29 43 0 8 8 amappl15 184 8968 0 8965 1 0 1 1 0 8 0 amappl14 176 11 0 8 2 1 1 1 0 8 0 amappl13 168 23 0 20 1 0 1 1 0 8 0 amappl12 160 16 0 15 1 0 1 1 0 8 0 amappl11 152 9065 0 9055 1 0 1 1 0 8 0 amappl10 144 106 0 104 2 1 1 1 0 8 0 amappl9 136 9251 0 9247 1 0 1 1 0 8 0 amappl8 128 372 0 313 2 0 2 2 0 8 0 amappl7 120 35 0 29 1 0 1 1 0 8 0 amappl6 112 52 0 45 1 0 1 1 0 8 0 amappl5 104 9251 0 9240 1 0 1 1 0 8 0 amappl4 96 621 0 599 2 1 1 2 0 8 0 amappl3 88 875 0 870 1 0 1 1 0 8 0 amappl2 80 180249 0 180196 2 0 2 2 0 8 0 amappl1 72 396274 0 395844 24 14 10 19 0 8 0 amappl 72 57195 0 57152 1 0 1 1 0 75 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma64 64 259 0 259 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 17 0 17 1 1 0 1 0 8 0 aobjpl 64 151 0 22 3 0 3 3 0 8 0 uaddrrnd 24 18090 0 18076 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 18090 0 18076 1 0 1 1 0 8 0 vmmpekpl 168 156417 0 156391 2 0 2 2 0 8 0 vmmpepl 168 1926866 0 1925464 556 485 71 85 0 357 3 vmsppl 360 18089 0 18076 2 0 2 2 0 8 0 pdppl 4096 36187 0 36152 6 1 5 6 0 8 0 pvpl 32 4897863 0 4886405 1033 907 126 162 0 265 28 pmappl 224 18089 0 18076 1 0 1 1 0 8 0 extentpl 40 39 0 25 1 0 1 1 0 8 0 phpool 112 798 0 119 20 0 20 20 0 8 0