panic: sleep: syz-executor[55253] slept inside a no-sleep walk bracket (raw pointer held across sleep, wmesg "getblk") Stopped at db_enter+0x17: popq %rbp TID PID UID PRFLAGS PFLAGS CPU COMMAND *510575 55253 0 0 0x4000010 0K syz-executor 225852 35926 0 0 0 1 syz-executor db_enter() at db_enter+0x17 sys/arch/amd64/amd64/db_interface.c:457 panic(ffffffff84d8d160) at panic+0x270 sys/kern/subr_prf.c:198 sleep_setup(ffff800001bdb000,11,ffffffff84692e40) at sleep_setup+0x3b2 sys/kern/kern_synch.c:296 tsleep_nsec(ffff800001bdb000,11,ffffffff84692e40,ffffffffffffffff) at tsleep_nsec+0x29c sys/kern/kern_synch.c:153 getblk(ffff800000d8e288,65560,4000,0,ffffffffffffffff) at getblk+0x23a sys/kern/vfs_bio.c:882 bread(ffff800000d8e288,65560,4000,ffff800037f1bb40) at bread+0x47 bio_doread sys/kern/vfs_bio.c:295 [inline] bread(ffff800000d8e288,65560,4000,ffff800037f1bb40) at bread+0x47 sys/kern/vfs_bio.c:340 ffs_update(ffff800001d1b748,1) at ffs_update+0x3e4 sys/ufs/ffs/ffs_inode.c:91 ffs_truncate(ffff800001d1b748,0,0,ffffffffffffffff) at ffs_truncate+0x12f0 sys/ufs/ffs/ffs_inode.c:-1 ufs_inactive(ffff800037f1bf20) at ufs_inactive+0x2cb sys/ufs/ufs/ufs_inode.c:84 VOP_INACTIVE(ffff800001c68008,ffff800045ff5250) at VOP_INACTIVE+0x1bb sys/kern/vfs_vops.c:498 vrele(ffff800001c68008) at vrele+0x16a sys/kern/vfs_subr.c:845 ktrsettrace(ffff8000298a6b58,80000300,ffff8000016aacb8,ffff800000119340) at ktrsettrace+0x16c sys/kern/kern_ktrace.c:123 ktrops(ffff800045ff5250,ffff8000298a6b58,0,80000300,ffff8000016aacb8,ffff800000119340) at ktrops+0x338 sys/kern/kern_ktrace.c:578 doktrace(ffff8000016aacb8,4,300,0,ffff800045ff5250) at doktrace+0xa72 ktrsetchildren sys/kern/kern_ktrace.c:607 [inline] doktrace(ffff8000016aacb8,4,300,0,ffff800045ff5250) at doktrace+0xa72 sys/kern/kern_ktrace.c:522 end trace frame: 0xffff800037f1c410, count: 0 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: sleep: syz-executor[55253] slept inside a no-sleep walk bracket (raw pointer held across sleep, wmesg "getblk") ddb{0}> show kasan kasan: no report recorded this boot ddb{0}> trace db_enter() at db_enter+0x17 sys/arch/amd64/amd64/db_interface.c:457 panic(ffffffff84d8d160) at panic+0x270 sys/kern/subr_prf.c:198 sleep_setup(ffff800001bdb000,11,ffffffff84692e40) at sleep_setup+0x3b2 sys/kern/kern_synch.c:296 tsleep_nsec(ffff800001bdb000,11,ffffffff84692e40,ffffffffffffffff) at tsleep_nsec+0x29c sys/kern/kern_synch.c:153 getblk(ffff800000d8e288,65560,4000,0,ffffffffffffffff) at getblk+0x23a sys/kern/vfs_bio.c:882 bread(ffff800000d8e288,65560,4000,ffff800037f1bb40) at bread+0x47 bio_doread sys/kern/vfs_bio.c:295 [inline] bread(ffff800000d8e288,65560,4000,ffff800037f1bb40) at bread+0x47 sys/kern/vfs_bio.c:340 ffs_update(ffff800001d1b748,1) at ffs_update+0x3e4 sys/ufs/ffs/ffs_inode.c:91 ffs_truncate(ffff800001d1b748,0,0,ffffffffffffffff) at ffs_truncate+0x12f0 sys/ufs/ffs/ffs_inode.c:-1 ufs_inactive(ffff800037f1bf20) at ufs_inactive+0x2cb sys/ufs/ufs/ufs_inode.c:84 VOP_INACTIVE(ffff800001c68008,ffff800045ff5250) at VOP_INACTIVE+0x1bb sys/kern/vfs_vops.c:498 vrele(ffff800001c68008) at vrele+0x16a sys/kern/vfs_subr.c:845 ktrsettrace(ffff8000298a6b58,80000300,ffff8000016aacb8,ffff800000119340) at ktrsettrace+0x16c sys/kern/kern_ktrace.c:123 ktrops(ffff800045ff5250,ffff8000298a6b58,0,80000300,ffff8000016aacb8,ffff800000119340) at ktrops+0x338 sys/kern/kern_ktrace.c:578 doktrace(ffff8000016aacb8,4,300,0,ffff800045ff5250) at doktrace+0xa72 ktrsetchildren sys/kern/kern_ktrace.c:607 [inline] doktrace(ffff8000016aacb8,4,300,0,ffff800045ff5250) at doktrace+0xa72 sys/kern/kern_ktrace.c:522 sys_ktrace(ffff800045ff5250,ffff800037f1c590,ffff800037f1c500) at sys_ktrace+0x1f6 sys/kern/kern_ktrace.c:563 syscall(ffff800037f1c590) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff800037f1c590) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x4b3d7cca3e0, count: -17 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff800037f1b5f0 rbx 0xffff800037f1b660 rdx 0 rcx 0xffffffff851e9ff0 cpu_info_full_primary+0x1ff0 rax 0xffff800000164980 r8 0x101010101010101 r9 0x8080808080808080 r10 0 r11 0xffffffff83e54b70 x86_bus_space_io_read_1 r12 0xffffffff84d8d160 .str.9 r13 0xffffffff851eac08 cpu_info_full_primary+0x2c08 r14 0xffffffff851eae07 cpu_info_full_primary+0x2e07 r15 0x1 rip 0xffffffff82f1b577 db_enter+0x17 cs 0x8 rflags 0x246 rsp 0xffff800037f1b5f0 ss 0x10 db_enter+0x17: popq %rbp ddb{0}> show proc PROC (syz-executor) tid=510575 pid=55253 tcnt=2 stat=onproc flags process=0 proc=4000010 runpri=32, usrpri=73, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000298959f8,0xffffffff85deb120 process=0xffff800045ff89b8 user=0xffff800037f11000, vmspace=0xffff8000017bd3d8 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{0}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 55253 45762 58455 0 2 0 0 syz-executor *55253 510575 58455 0 7 0 0x4000010 syz-executor 48169 180205 26997 0 2 0 0 syz-executor 48169 516129 26997 0 3 0 0x4000080 bell syz-executor 35926 225852 39068 0 7 0 0 syz-executor 35926 38326 39068 0 3 0 0x4000080 fsleep syz-executor 35926 306601 39068 0 3 0 0x4000080 lockf syz-executor 35926 47349 39068 0 2 0 0x4000000 syz-executor 27754 318876 1 0 3 0x2 0x80 nanoslp getty 38621 64557 12611 0 3 0 0x80 nanoslp syz-executor 38621 120554 12611 0 2 0 0x4000000 syz-executor 38621 522606 12611 0 3 0 0x4000080 fsleep syz-executor 25099 367667 31471 0 3 0x10 0x80 nanoslp syz-executor 25099 271482 31471 0 3 0x10 0x4000080 kqread syz-executor 25099 129694 31471 0 3 0x10 0x4000080 fsleep syz-executor 69499 15986 19361 0 2 0 0 syz-executor 69499 320279 19361 0 3 0 0x4000080 fsleep syz-executor 49263 511095 63908 0 2 0 0 syz-executor 49263 166222 63908 0 3 0 0x4000080 sbwait syz-executor 49263 248623 63908 0 2 0 0x4000000 syz-executor 28244 167119 0 0 3 0x14000 0x200 acct acct 31471 309486 44241 0 3 0x2 0x80 nanoslp syz-executor 58455 415195 44241 0 3 0x2 0x80 nanoslp syz-executor 26997 200161 44241 0 3 0x2 0x80 nanoslp syz-executor 63908 500958 44241 0 2 0x2 0 syz-executor 12611 197419 44241 0 3 0x2 0x80 nanoslp syz-executor 39068 24838 44241 0 3 0x2 0x80 nanoslp syz-executor 19361 303704 44241 0 2 0x2 0 syz-executor 36709 196119 44241 0 3 0x2 0 biowait syz-executor 44241 400257 1 0 3 0x2 0x80 kqread syz-executor 64222 291817 1 74 3 0x1100012 0x80 bpf pflogd 61025 326635 1 73 3 0x1100010 0x80 kqread syslogd 87755 359896 0 0 3 0x14000 0x200 bored smr 70919 140594 0 0 2 0x14000 0x200 zerothread 55325 332510 0 0 3 0x14000 0x200 aiodoned aiodoned 8746 77792 0 0 3 0x14000 0x200 syncer update 17750 299041 0 0 3 0x14000 0x200 cleaner cleaner 52851 242089 0 0 3 0x14000 0x200 reaper reaper 45185 103135 0 0 3 0x14000 0x200 pgdaemon pagedaemon 96635 133499 0 0 3 0x14000 0x200 bored viomb 10557 88634 0 0 3 0x14000 0x40000200 acpi0 acpi0 65810 112975 0 0 3 0x14000 0x40000200 idle1 74810 329080 0 0 3 0x14000 0x200 bored softnet1 74857 516928 0 0 3 0x14000 0x200 bored softnet0 70853 128741 0 0 3 0x14000 0x200 bored systqmp 48929 280193 0 0 3 0x14000 0x200 bored systq 21106 381156 0 0 3 0x14000 0x200 tmoslp softclockmp 27662 66378 0 0 3 0x14000 0x40000200 tmoslp softclock 86388 140655 0 0 3 0x14000 0x40000200 idle0 1 312820 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{0}> show all locks ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11056 12310K 12464K 166960K 12194 0 pcb 17 24K 24K 166960K 29 0 rtable 215 11K 13K 166960K 351 0 pf 34 22K 24K 166960K 51 0 ifaddr 40 11K 12K 166960K 47 0 ifgroup 53 2K 2K 166960K 59 0 sysctl 1 1K 13K 166960K 6 0 counters 70 42K 43K 166960K 74 0 ioctlops 0 0K 4K 166960K 1495 0 iov 1 12K 12K 166960K 4 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1297 83K 84K 166960K 1400 0 UFS quota 1 36K 36K 166960K 1 0 UFS mount 5 44K 44K 166960K 5 0 shm 2 2K 6K 166960K 5 0 VM map 2 1K 1K 166960K 2 0 sem 3 0K 0K 166960K 3 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1734 201K 292K 166960K 11964 0 file desc 17 61K 93K 166960K 186 0 sigio 0 0K 0K 166960K 1 0 proc 21 46K 177K 166960K 570 0 subproc 72 9K 9K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 20K 20K 166960K 1 0 ip_moptions 0 0K 0K 166960K 2 0 in_multi 88 6K 7K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 8 0 ISOFS mount 1 36K 36K 166960K 1 0 MSDOSFS mount 1 20K 20K 166960K 1 0 ttys 55 384K 384K 166960K 55 0 exec 0 0K 2K 166960K 387 0 fusefs mount 1 36K 36K 166960K 1 0 tdb 3 1K 1K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 165 143K 263K 166960K 3496 0 UVM aobj 7 8K 8K 166960K 8 0 pinsyscall 1047 1707K 1735K 166960K 1349 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 12 0K 2K 166960K 30 0 temp 35 9162K 9174K 166960K 4043 0 kqueue 5 17K 61K 166960K 45 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 33 0 33 1 0 1 1 0 8 1 rtentry 176 111 0 12 5 0 5 5 0 8 0 unpcb 144 149 0 142 1 0 1 1 0 8 0 syncache 336 4 0 4 2 1 1 1 0 8 1 tcpcb 736 12 0 11 1 0 1 1 0 8 0 arp 136 18 0 2 1 0 1 1 0 8 0 inpcb 328 95 0 94 2 0 2 2 0 8 1 nd6 152 24 0 3 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1192 2 0 1 1 0 1 1 0 8 0 pffrag 232 1 0 0 1 0 1 1 0 482 0 pffrnode 88 1 0 0 1 0 1 1 0 8 0 pffrent 40 1 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 23 0 0 1 0 1 1 0 8 0 pfstkey 128 23 0 0 1 0 1 1 0 8 0 pfstate 448 23 0 0 3 0 3 3 0 8 0 pfrule 1360 22 0 17 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 453 0 44 29 0 29 29 0 8 0 art_table 40 454 0 44 5 0 5 5 0 8 0 art_node 32 111 0 21 1 0 1 1 0 8 0 semapl 72 1 0 0 1 0 1 1 0 8 0 shmpl 112 5 0 1 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1653 0 180 93 0 93 93 0 8 0 ffsino 296 1653 0 180 114 0 114 114 0 8 0 nchpl 144 1925 0 219 64 0 64 64 0 8 0 vnodes 216 1769 0 0 99 0 99 99 0 8 0 namei 1024 6065 0 6065 2 0 2 2 0 8 2 percpumem 16 53 0 2 1 0 1 1 0 8 0 kstatmem 264 31 0 4 2 0 2 2 0 8 0 scxspl 216 7012 0 7011 3 2 1 2 1 8 0 plimitpl 152 33 0 21 1 0 1 1 0 8 0 sigapl 424 506 0 468 7 0 7 7 0 8 0 knotepl 120 182 0 0 6 0 6 6 0 8 0 kqueuepl 224 113 0 108 5 0 5 5 0 8 4 pipepl 344 135 0 108 3 0 3 3 0 8 0 fdescpl 528 489 0 468 3 0 3 3 0 8 0 filepl 160 2091 0 1905 12 0 12 12 0 8 3 lockfpl 104 19 0 16 1 0 1 1 0 8 0 lockfspl 48 8 0 6 1 0 1 1 0 8 0 sessionpl 144 28 0 24 1 0 1 1 0 8 0 pgrppl 48 36 0 24 1 0 1 1 0 8 0 ucredpl 104 161 0 153 1 0 1 1 0 8 0 zombiepl 144 468 0 468 1 0 1 1 0 8 1 processpl 1232 506 0 468 5 0 5 5 0 8 0 procpl 664 594 0 544 6 0 6 6 0 8 1 sosppl 176 2 0 2 1 0 1 1 0 8 1 sockpl 752 278 0 270 4 0 4 4 0 8 2 mcl64k 65536 9 0 0 2 0 2 2 0 8 0 mcl16k 16384 5 0 0 1 0 1 1 0 8 0 mcl12k 12288 4 0 0 1 0 1 1 0 8 0 mcl9k128 9344 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 128 0 0 16 0 16 16 0 8 0 mcl2k2 2112 1 0 0 1 0 1 1 0 8 0 mcl2k 2048 17 0 0 3 0 3 3 0 8 0 mextrefs 64 21 0 0 1 0 1 1 0 8 0 mtagpl 96 1 0 0 1 0 1 1 0 8 0 mbufpl 256 162 0 0 11 0 11 11 0 8 0 bufpl 272 2479 0 105 159 0 159 159 0 8 0 anonpl 32 3856 0 0 32 0 32 32 0 222 0 amapchunkpl 152 9827 0 9363 20 0 20 20 0 158 0 amappl16 200 2002 0 1983 5 2 3 5 0 8 0 amappl15 192 4 0 4 1 1 0 1 0 8 0 amappl14 184 470 0 470 1 0 1 1 0 8 1 amappl13 176 181 0 178 1 0 1 1 0 8 0 amappl12 168 745 0 725 2 0 2 2 0 8 0 amappl11 160 17 0 17 3 2 1 1 0 8 1 amappl10 152 67 0 62 1 0 1 1 0 8 0 amappl9 144 273 0 273 1 1 0 1 0 8 0 amappl8 136 125 0 124 1 0 1 1 0 8 0 amappl7 128 149 0 143 1 0 1 1 0 8 0 amappl6 120 188 0 188 1 0 1 1 0 8 1 amappl5 112 123 0 121 1 0 1 1 0 8 0 amappl4 104 300 0 289 1 0 1 1 0 8 0 amappl3 96 1778 0 1690 3 0 3 3 0 8 0 amappl2 88 543 0 522 2 0 2 2 0 8 0 amappl1 80 10740 0 10560 15 0 15 15 0 8 3 amappl 88 2755 0 2616 4 0 4 4 0 92 0 uvmvnodes 80 101 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 7 0 1 1 0 1 1 0 8 0 uaddrrnd 24 489 0 468 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 489 0 468 1 0 1 1 0 8 0 vmmpekpl 168 6097 0 6062 2 0 2 2 0 8 0 vmmpepl 168 40968 0 39946 87 0 87 87 0 357 27 vmsppl 488 488 0 468 5 0 5 5 0 8 1 rwobjpl 80 15360 0 14829 25 1 24 24 0 8 2 pdppl 4096 986 0 936 100 42 58 86 0 8 8 pvpl 32 11198 0 0 93 2 91 92 0 265 0 pmappl 256 488 0 468 3 0 3 3 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 120 435 0 46 13 0 13 13 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x17 sys/arch/amd64/amd64/db_interface.c:457 panic(ffffffff84d8d160) at panic+0x270 sys/kern/subr_prf.c:198 sleep_setup(ffff800001bdb000,11,ffffffff84692e40) at sleep_setup+0x3b2 sys/kern/kern_synch.c:296 tsleep_nsec(ffff800001bdb000,11,ffffffff84692e40,ffffffffffffffff) at tsleep_nsec+0x29c sys/kern/kern_synch.c:153 getblk(ffff800000d8e288,65560,4000,0,ffffffffffffffff) at getblk+0x23a sys/kern/vfs_bio.c:882 bread(ffff800000d8e288,65560,4000,ffff800037f1bb40) at bread+0x47 bio_doread sys/kern/vfs_bio.c:295 [inline] bread(ffff800000d8e288,65560,4000,ffff800037f1bb40) at bread+0x47 sys/kern/vfs_bio.c:340 ffs_update(ffff800001d1b748,1) at ffs_update+0x3e4 sys/ufs/ffs/ffs_inode.c:91 ffs_truncate(ffff800001d1b748,0,0,ffffffffffffffff) at ffs_truncate+0x12f0 sys/ufs/ffs/ffs_inode.c:-1 ufs_inactive(ffff800037f1bf20) at ufs_inactive+0x2cb sys/ufs/ufs/ufs_inode.c:84 VOP_INACTIVE(ffff800001c68008,ffff800045ff5250) at VOP_INACTIVE+0x1bb sys/kern/vfs_vops.c:498 vrele(ffff800001c68008) at vrele+0x16a sys/kern/vfs_subr.c:845 ktrsettrace(ffff8000298a6b58,80000300,ffff8000016aacb8,ffff800000119340) at ktrsettrace+0x16c sys/kern/kern_ktrace.c:123 ktrops(ffff800045ff5250,ffff8000298a6b58,0,80000300,ffff8000016aacb8,ffff800000119340) at ktrops+0x338 sys/kern/kern_ktrace.c:578 doktrace(ffff8000016aacb8,4,300,0,ffff800045ff5250) at doktrace+0xa72 ktrsetchildren sys/kern/kern_ktrace.c:607 [inline] doktrace(ffff8000016aacb8,4,300,0,ffff800045ff5250) at doktrace+0xa72 sys/kern/kern_ktrace.c:522 sys_ktrace(ffff800045ff5250,ffff800037f1c590,ffff800037f1c500) at sys_ktrace+0x1f6 sys/kern/kern_ktrace.c:563 syscall(ffff800037f1c590) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff800037f1c590) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x4b3d7cca3e0, count: -17 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x19: leave x86_ipi_db(ffff800028fe3ff0) at x86_ipi_db+0x19 sys/arch/amd64/amd64/db_interface.c:412 x86_ipi_handler() at x86_ipi_handler+0x112 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 end of kernel end trace frame: 0x76c786cab550, count: 12 ddb{1}> trace x86_ipi_db(ffff800028fe3ff0) at x86_ipi_db+0x19 sys/arch/amd64/amd64/db_interface.c:412 x86_ipi_handler() at x86_ipi_handler+0x112 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 end of kernel end trace frame: 0x76c786cab550, count: -3 ddb{1}>