Extracting prog: 57.450398515s Minimizing prog: 18m32.821298635s Simplifying prog options: 3m13.265952253s Extracting C: 1m2.983061898s Simplifying C: 0s extracting reproducer from 44 programs testing a last program of every proc single: executing 8 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:8 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): shmat-mknod-setitimer-open$dir-ktrace-open-fsync-ioctl$TIOCNXCL-semget-semctl$SETALL-setsockopt detailed listing: executing program 0: shmat(0x0, &(0x7f0000000000/0x800000)=nil, 0x1000) mknod(0x0, 0x2000, 0x8000672) setitimer(0x1, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x814, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0xcf) fsync(r0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x2000740e) r1 = semget(0x1, 0x7, 0x200) semctl$SETALL(r1, 0x0, 0x9, &(0x7f0000000000)=[0xfff]) setsockopt(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000140), 0x0) program crashed: panic: sleep: syz-executor[NUM] slept inside a no-sleep walk bracket (raw pointer held across sleep, wmesg "biowait") single: successfully extracted reproducer found reproducer with 11 syscalls minimizing guilty program testing program (duration=48.825938658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:8 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): shmat-mknod-setitimer-open$dir-ktrace-open-fsync-ioctl$TIOCNXCL-semget-semctl$SETALL detailed listing: executing program 0: shmat(0x0, &(0x7f0000000000/0x800000)=nil, 0x1000) mknod(0x0, 0x2000, 0x8000672) setitimer(0x1, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x814, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0xcf) fsync(r0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x2000740e) r1 = semget(0x1, 0x7, 0x200) semctl$SETALL(r1, 0x0, 0x9, &(0x7f0000000000)=[0xfff]) program crashed: panic: sleep: syz-executor[NUM] slept inside a no-sleep walk bracket (raw pointer held across sleep, wmesg "biowait") testing program (duration=48.825938658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:8 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): shmat-mknod-setitimer-open$dir-ktrace-open-fsync-ioctl$TIOCNXCL-semget detailed listing: executing program 0: shmat(0x0, &(0x7f0000000000/0x800000)=nil, 0x1000) mknod(0x0, 0x2000, 0x8000672) setitimer(0x1, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x814, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0xcf) fsync(r0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x2000740e) semget(0x1, 0x7, 0x200) program crashed: panic: sleep: syz-executor[NUM] slept inside a no-sleep walk bracket (raw pointer held across sleep, wmesg "biowait") testing program (duration=48.825938658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:8 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): shmat-mknod-setitimer-open$dir-ktrace-open-fsync-ioctl$TIOCNXCL detailed listing: executing program 0: shmat(0x0, &(0x7f0000000000/0x800000)=nil, 0x1000) mknod(0x0, 0x2000, 0x8000672) setitimer(0x1, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x814, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0xcf) fsync(r0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x2000740e) program crashed: panic: sleep: syz-executor[NUM] slept inside a no-sleep walk bracket (raw pointer held across sleep, wmesg "biowait") testing program (duration=48.825938658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:8 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): shmat-mknod-setitimer-open$dir-ktrace-open-fsync detailed listing: executing program 0: shmat(0x0, &(0x7f0000000000/0x800000)=nil, 0x1000) mknod(0x0, 0x2000, 0x8000672) setitimer(0x1, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x814, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0xcf) fsync(r0) program crashed: panic: sleep: syz-executor[NUM] slept inside a no-sleep walk bracket (raw pointer held across sleep, wmesg "biowait") testing program (duration=48.825938658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:8 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): shmat-mknod-setitimer-open$dir-ktrace-open detailed listing: executing program 0: shmat(0x0, &(0x7f0000000000/0x800000)=nil, 0x1000) mknod(0x0, 0x2000, 0x8000672) setitimer(0x1, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x814, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x200, 0xcf) program crashed: panic: sleep: syz-executor[NUM] slept inside a no-sleep walk bracket (raw pointer held across sleep, wmesg "biowait") testing program (duration=48.825938658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:8 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): shmat-mknod-setitimer-open$dir-ktrace detailed listing: executing program 0: shmat(0x0, &(0x7f0000000000/0x800000)=nil, 0x1000) mknod(0x0, 0x2000, 0x8000672) setitimer(0x1, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x814, 0x0) program did not crash testing program (duration=48.825938658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:8 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): shmat-mknod-setitimer-open$dir-open detailed listing: executing program 0: shmat(0x0, &(0x7f0000000000/0x800000)=nil, 0x1000) mknod(0x0, 0x2000, 0x8000672) setitimer(0x1, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x200, 0xcf) program did not crash testing program (duration=48.825938658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:8 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): shmat-mknod-setitimer-ktrace-open detailed listing: executing program 0: shmat(0x0, &(0x7f0000000000/0x800000)=nil, 0x1000) mknod(0x0, 0x2000, 0x8000672) setitimer(0x1, 0x0, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x814, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x200, 0xcf) program did not crash testing program (duration=48.825938658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:8 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): shmat-mknod-open$dir-ktrace-open detailed listing: executing program 0: shmat(0x0, &(0x7f0000000000/0x800000)=nil, 0x1000) mknod(0x0, 0x2000, 0x8000672) open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x814, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x200, 0xcf) program crashed: panic: sleep: syz-executor[NUM] slept inside a no-sleep walk bracket (raw pointer held across sleep, wmesg "biowait") testing program (duration=48.825938658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:8 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): shmat-open$dir-ktrace-open detailed listing: executing program 0: shmat(0x0, &(0x7f0000000000/0x800000)=nil, 0x1000) open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x814, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x200, 0xcf) program crashed: panic: sleep: syz-executor[NUM] slept inside a no-sleep walk bracket (raw pointer held across sleep, wmesg "biowait") testing program (duration=48.825938658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:8 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-ktrace-open detailed listing: executing program 0: open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x814, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x200, 0xcf) program crashed: panic: sleep: syz-executor[NUM] slept inside a no-sleep walk bracket (raw pointer held across sleep, wmesg "biowait") testing program (duration=48.825938658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:8 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-ktrace-open detailed listing: executing program 0: open$dir(0x0, 0x200, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x814, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x200, 0xcf) program crashed: panic: sleep: syz-executor[NUM] slept inside a no-sleep walk bracket (raw pointer held across sleep, wmesg "biowait") testing program (duration=48.825938658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:8 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-ktrace-open detailed listing: executing program 0: open$dir(0x0, 0x200, 0x0) ktrace(0x0, 0x4, 0x814, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x200, 0xcf) program did not crash testing program (duration=48.825938658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:8 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-ktrace-open detailed listing: executing program 0: open$dir(0x0, 0x200, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x814, 0x0) open(0x0, 0x200, 0xcf) program did not crash extracting C reproducer testing compiled C program (duration=48.825938658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:8 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-ktrace-open program did not crash simplifying guilty program options testing program (duration=48.825938658s, {Threaded:false Repeat:true RepeatTimes:0 Procs:8 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-ktrace-open detailed listing: executing program 0: open$dir(0x0, 0x200, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x814, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x200, 0xcf) program did not crash testing program (duration=48.825938658s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-ktrace-open detailed listing: executing program 0: open$dir(0x0, 0x200, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x814, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x200, 0xcf) program did not crash testing program (duration=48.825938658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-ktrace-open detailed listing: executing program 0: open$dir(0x0, 0x200, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x814, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x200, 0xcf) program did not crash testing program (duration=48.825938658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:8 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-ktrace-open detailed listing: executing program 0: open$dir(0x0, 0x200, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x814, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x200, 0xcf) program crashed: panic: sleep: syz-executor[NUM] slept inside a no-sleep walk bracket (raw pointer held across sleep, wmesg "biowait") validation run: crashed=true testing program (duration=48.825938658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:8 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-ktrace-open detailed listing: executing program 0: open$dir(0x0, 0x200, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x814, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x200, 0xcf) program crashed: panic: sleep: syz-executor[NUM] slept inside a no-sleep walk bracket (raw pointer held across sleep, wmesg "biowait") validation run: crashed=true testing program (duration=48.825938658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:8 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-ktrace-open detailed listing: executing program 0: open$dir(0x0, 0x200, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x814, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x200, 0xcf) program crashed: panic: sleep: syz-executor[NUM] slept inside a no-sleep walk bracket (raw pointer held across sleep, wmesg "biowait") validation run: crashed=true reproducing took 28m1.88962594s repro crashed as (corrupted=false): panic: sleep: syz-executor[22802] slept inside a no-sleep walk bracket (raw pointer held across sleep, wmesg "biowait") Stopped at db_enter+0x17: popq %rbp TID PID UID PRFLAGS PFLAGS CPU COMMAND * 42981 22802 0 0 0x4000010 0K syz-executor 3707 17362 0 0x2 0 1 syz-executor db_enter() at db_enter+0x17 sys/arch/amd64/amd64/db_interface.c:457 panic(ffffffff84d8d160) at panic+0x270 sys/kern/subr_prf.c:198 sleep_setup(ffff800001eedab0,11,ffffffff84692f80) at sleep_setup+0x3b2 sys/kern/kern_synch.c:296 tsleep_nsec(ffff800001eedab0,11,ffffffff84692f80,ffffffffffffffff) at tsleep_nsec+0x29c sys/kern/kern_synch.c:153 biowait(ffff800001eedab0) at biowait+0xe6 sys/kern/vfs_bio.c:1110 bwrite(ffff800001eedab0) at bwrite+0x4e1 sys/kern/vfs_bio.c:625 ffs_update(ffff80000207a070,1) at ffs_update+0x619 sys/ufs/ffs/ffs_inode.c:111 ffs_truncate(ffff80000207a070,0,0,ffffffffffffffff) at ffs_truncate+0x12f0 sys/ufs/ffs/ffs_inode.c:-1 ufs_inactive(ffff80002d3ab9a0) at ufs_inactive+0x2cb sys/ufs/ufs/ufs_inode.c:84 VOP_INACTIVE(ffff8000020470f8,ffff800029ad6a88) at VOP_INACTIVE+0x1bb sys/kern/vfs_vops.c:498 vrele(ffff8000020470f8) at vrele+0x16a sys/kern/vfs_subr.c:845 ktrsettrace(ffff800029917500,80000814,ffff8000020a6bf0,ffff800000119618) at ktrsettrace+0x16c sys/kern/kern_ktrace.c:123 ktrops(ffff800029ad6a88,ffff800029917500,0,80000814,ffff8000020a6bf0,ffff800000119618) at ktrops+0x338 sys/kern/kern_ktrace.c:578 doktrace(ffff8000020a6bf0,4,814,0,ffff800029ad6a88) at doktrace+0xa72 ktrsetchildren sys/kern/kern_ktrace.c:607 [inline] doktrace(ffff8000020a6bf0,4,814,0,ffff800029ad6a88) at doktrace+0xa72 sys/kern/kern_ktrace.c:522 end trace frame: 0xffff80002d3abe90, count: 0 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: sleep: syz-executor[22802] slept inside a no-sleep walk bracket (raw pointer held across sleep, wmesg "biowait") ddb{0}> show kasan kasan: no report recorded this boot ddb{0}> trace db_enter() at db_enter+0x17 sys/arch/amd64/amd64/db_interface.c:457 panic(ffffffff84d8d160) at panic+0x270 sys/kern/subr_prf.c:198 sleep_setup(ffff800001eedab0,11,ffffffff84692f80) at sleep_setup+0x3b2 sys/kern/kern_synch.c:296 tsleep_nsec(ffff800001eedab0,11,ffffffff84692f80,ffffffffffffffff) at tsleep_nsec+0x29c sys/kern/kern_synch.c:153 biowait(ffff800001eedab0) at biowait+0xe6 sys/kern/vfs_bio.c:1110 bwrite(ffff800001eedab0) at bwrite+0x4e1 sys/kern/vfs_bio.c:625 ffs_update(ffff80000207a070,1) at ffs_update+0x619 sys/ufs/ffs/ffs_inode.c:111 ffs_truncate(ffff80000207a070,0,0,ffffffffffffffff) at ffs_truncate+0x12f0 sys/ufs/ffs/ffs_inode.c:-1 ufs_inactive(ffff80002d3ab9a0) at ufs_inactive+0x2cb sys/ufs/ufs/ufs_inode.c:84 VOP_INACTIVE(ffff8000020470f8,ffff800029ad6a88) at VOP_INACTIVE+0x1bb sys/kern/vfs_vops.c:498 vrele(ffff8000020470f8) at vrele+0x16a sys/kern/vfs_subr.c:845 ktrsettrace(ffff800029917500,80000814,ffff8000020a6bf0,ffff800000119618) at ktrsettrace+0x16c sys/kern/kern_ktrace.c:123 ktrops(ffff800029ad6a88,ffff800029917500,0,80000814,ffff8000020a6bf0,ffff800000119618) at ktrops+0x338 sys/kern/kern_ktrace.c:578 doktrace(ffff8000020a6bf0,4,814,0,ffff800029ad6a88) at doktrace+0xa72 ktrsetchildren sys/kern/kern_ktrace.c:607 [inline] doktrace(ffff8000020a6bf0,4,814,0,ffff800029ad6a88) at doktrace+0xa72 sys/kern/kern_ktrace.c:522 sys_ktrace(ffff800029ad6a88,ffff80002d3ac010,ffff80002d3abf80) at sys_ktrace+0x1f6 sys/kern/kern_ktrace.c:563 syscall(ffff80002d3ac010) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80002d3ac010) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xac335bd1950, count: -17 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff80002d3ab290 rbx 0xffff80002d3ab300 rdx 0 rcx 0xffffffff851e9ff0 cpu_info_full_primary+0x1ff0 rax 0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xffff80002d3ab080 r11 0xffffffff83e54b70 x86_bus_space_io_read_1 r12 0xffffffff84d8d160 .str.9 r13 0xffffffff851eac08 cpu_info_full_primary+0x2c08 r14 0xffffffff851eae07 cpu_info_full_primary+0x2e07 r15 0x1 rip 0xffffffff82f1b577 db_enter+0x17 cs 0x8 rflags 0x246 rsp 0xffff80002d3ab290 ss 0x10 db_enter+0x17: popq %rbp ddb{0}> show proc PROC (syz-executor) tid=42981 pid=22802 tcnt=4 stat=onproc flags process=0 proc=4000010 runpri=73, usrpri=73, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800029ad62c0,0xffff800029ad6fc8 process=0xffff800029b49d00 user=0xffff80002d3a1000, vmspace=0xffff80000202f9a8 estcpu=23, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{0}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 81139 332661 36883 0 2 0 0 syz-executor 81139 380468 36883 0 3 0 0x4000080 fsleep syz-executor 23659 334383 51923 0 2 0 0 syz-executor 23659 303756 51923 0 3 0 0x4000080 fsleep syz-executor 22802 375474 6913 0 3 0 0x80 nanoslp syz-executor 22802 211378 6913 0 2 0 0x4000000 syz-executor *22802 42981 6913 0 7 0 0x4000010 syz-executor 22802 320590 6913 0 3 0 0x4000080 fsleep syz-executor 17362 3707 51004 0 7 0x2 0 syz-executor 87862 350363 51004 0 3 0x2 0x80 piperd syz-executor 91606 390045 51004 0 3 0x2 0x80 piperd syz-executor 81458 456496 51004 0 3 0x2 0x80 piperd syz-executor 6913 234479 51004 0 3 0x2 0x80 nanoslp syz-executor 36883 21208 51004 0 3 0x2 0x80 nanoslp syz-executor 79293 7827 51004 0 3 0x2 0x80 piperd syz-executor 51923 143939 51004 0 3 0x2 0x80 nanoslp syz-executor 51004 160400 45843 0 2 0x2 0 syz-executor 45843 500411 21796 0 3 0x2 0x80 thrsleep syz-execprog 45843 176693 21796 0 3 0x2 0x4000080 nanoslp syz-execprog 45843 500750 21796 0 3 0x2 0x4000080 thrsleep syz-execprog 45843 519583 21796 0 3 0x2 0x4000080 kqread syz-execprog 45843 523899 21796 0 3 0x2 0x4000080 thrsleep syz-execprog 45843 49997 21796 0 3 0x2 0x4000080 thrsleep syz-execprog 45843 39374 21796 0 3 0x2 0x4000080 thrsleep syz-execprog 45843 104177 21796 0 3 0x2 0x4000080 thrsleep syz-execprog 45843 251655 21796 0 3 0x2 0x4000080 thrsleep syz-execprog 45843 302225 21796 0 3 0x2 0x4000080 thrsleep syz-execprog 45843 173560 21796 0 3 0x2 0x4000080 thrsleep syz-execprog 45843 37750 21796 0 3 0x2 0x4000080 thrsleep syz-execprog 21796 222906 92208 0 3 0x100002 0x88 sigsusp ksh 92208 92736 76741 0 3 0x10 0x88 kqread sshd-session 76741 3797 92894 0 3 0x12 0x80 kqread sshd-session 21340 317310 1 0 3 0x100003 0x80 ttyin getty 92894 16471 1 0 3 0 0x88 kqread sshd 14520 452948 66658 74 3 0x1100012 0x80 bpf pflogd 66658 122669 1 0 3 0 0x80 sbwait pflogd 80722 329531 46589 73 3 0x1100010 0x80 kqread syslogd 46589 404962 1 0 3 0x100002 0x80 sbwait syslogd 27889 429854 1 0 3 0x100000 0x80 kqread resolvd 85143 218887 71196 77 3 0x100012 0x80 kqread dhcpleased 21695 465149 71196 77 3 0x100012 0x80 kqread dhcpleased 71196 243612 1 0 3 0 0x80 kqread dhcpleased 93306 117137 0 0 3 0x14000 0x200 bored smr 58742 40150 0 0 2 0x14000 0x200 zerothread 98415 150653 0 0 3 0x14000 0x200 aiodoned aiodoned 49940 467363 0 0 3 0x14000 0x200 syncer update 25204 409158 0 0 3 0x14000 0x200 cleaner cleaner 9723 124023 0 0 3 0x14000 0x200 reaper reaper 86460 460447 0 0 3 0x14000 0x200 pgdaemon pagedaemon 97000 486607 0 0 3 0x14000 0x200 bored viomb 54045 346004 0 0 3 0x14000 0x40000200 acpi0 acpi0 95957 389396 0 0 3 0x14000 0x40000200 idle1 22761 490479 0 0 3 0x14000 0x200 bored softnet1 63127 195301 0 0 3 0x14000 0x200 bored softnet0 1008 354978 0 0 3 0x14000 0x200 bored systqmp 84161 230782 0 0 3 0x14000 0x200 bored systq 52638 99914 0 0 3 0x14000 0x200 tmoslp softclockmp 25195 379009 0 0 3 0x14000 0x40000200 tmoslp softclock 82449 270809 0 0 3 0x14000 0x40000200 idle0 1 481906 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{0}> show all locks Process 22802 (syz-executor) thread 0xffff800029ad6a88 (42981) exclusive rrwlock inode r = 0 (0xffff80000207a110) #0 witness_lock+0x632 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x632 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x53e sys/kern/kern_rwlock.c:320 #2 rrw_enter+0xf0 sys/kern/kern_rwlock.c:621 #3 VOP_LOCK+0x17e sys/kern/vfs_vops.c:527 #4 vn_lock+0xca sys/kern/vfs_vnops.c:576 #5 vrele+0x113 sys/kern/vfs_subr.c:836 #6 ktrsettrace+0x16c sys/kern/kern_ktrace.c:123 #7 ktrops+0x338 sys/kern/kern_ktrace.c:578 #8 doktrace+0xa72 ktrsetchildren sys/kern/kern_ktrace.c:607 [inline] #8 doktrace+0xa72 sys/kern/kern_ktrace.c:522 #9 sys_ktrace+0x1f6 sys/kern/kern_ktrace.c:563 #10 syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline] #10 syscall+0x1089 sys/arch/amd64/amd64/trap.c:783 #11 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff85d52380) #0 witness_lock+0x632 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x632 sys/kern/subr_witness.c:1160 #1 syscall+0x1048 mi_syscall sys/sys/syscall_mi.h:175 [inline] #1 syscall+0x1048 sys/arch/amd64/amd64/trap.c:783 #2 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11050 12242K 12242K 166960K 12144 0 pcb 17 24K 24K 166960K 17 0 rtable 237 12K 13K 166960K 381 0 pf 34 22K 22K 166960K 48 0 ifaddr 43 12K 12K 166960K 49 0 ifgroup 55 2K 2K 166960K 60 0 sysctl 1 1K 13K 166960K 5 0 counters 70 42K 42K 166960K 72 0 ioctlops 0 0K 4K 166960K 1484 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1247 80K 80K 166960K 1315 0 UFS quota 1 36K 36K 166960K 1 0 UFS mount 5 44K 44K 166960K 5 0 shm 2 2K 2K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 2 0K 0K 166960K 2 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1734 201K 292K 166960K 11964 0 file desc 14 46K 94K 166960K 385 0 proc 70 128K 177K 166960K 580 0 subproc 0 0K 3K 166960K 30 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 20K 20K 166960K 1 0 in_multi 99 7K 7K 166960K 110 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 6 0 ISOFS mount 1 36K 36K 166960K 1 0 MSDOSFS mount 1 20K 20K 166960K 1 0 ttys 25 182K 182K 166960K 25 0 exec 0 0K 2K 166960K 443 0 fusefs mount 1 36K 36K 166960K 1 0 tdb 3 1K 1K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 282 252K 331K 166960K 5398 0 UVM aobj 3 4K 4K 166960K 3 0 pinsyscall 1064 1836K 1840K 166960K 1728 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 12 0K 1K 166960K 31 0 temp 5 9160K 9172K 166960K 8296 0 kqueue 14 44K 44K 166960K 40 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 35 0 32 1 0 1 1 0 8 0 rtentry 176 122 0 12 5 0 5 5 0 8 0 unpcb 144 63 0 46 1 0 1 1 0 8 0 syncache 336 9 0 9 1 0 1 1 0 8 1 tcpcb 736 16 0 10 1 0 1 1 0 8 0 arp 136 20 0 2 1 0 1 1 0 8 0 inpcb 328 77 0 68 2 0 2 2 0 8 1 nd6 152 27 0 3 1 0 1 1 0 8 0 kcovpl 48 4 0 4 1 0 1 1 0 8 1 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 23 0 2 1 0 1 1 0 8 0 pfstkey 128 23 0 2 1 0 1 1 0 8 0 pfstate 448 23 0 2 3 0 3 3 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 501 0 48 29 0 29 29 0 8 0 art_table 40 502 0 48 5 0 5 5 0 8 0 art_node 32 122 0 22 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1980 0 469 95 0 95 95 0 8 0 ffsino 296 1980 0 469 117 0 117 117 0 8 0 nchpl 144 2743 0 988 66 0 66 66 0 8 0 vnodes 216 2024 0 0 113 0 113 113 0 8 0 namei 1024 8113 0 8113 2 1 1 2 0 8 1 percpumem 16 52 0 1 1 0 1 1 0 8 0 kstatmem 264 29 0 2 2 0 2 2 0 8 0 scxspl 216 13493 0 13492 11 3 8 8 1 8 7 plimitpl 152 62 0 44 1 0 1 1 0 8 0 sigapl 424 705 0 661 7 0 7 7 0 8 1 knotepl 120 70 0 0 3 0 3 3 0 8 0 kqueuepl 224 36 0 26 1 0 1 1 0 8 0 pipepl 344 206 0 178 4 0 4 4 0 8 0 fdescpl 528 689 0 661 3 0 3 3 0 8 0 filepl 160 2552 0 2409 7 0 7 7 0 8 0 lockfpl 104 6 0 4 1 0 1 1 0 8 0 lockfspl 48 4 0 2 1 0 1 1 0 8 0 sessionpl 144 45 0 36 1 0 1 1 0 8 0 pgrppl 48 68 0 51 1 0 1 1 0 8 0 ucredpl 104 141 0 128 1 0 1 1 0 8 0 zombiepl 144 661 0 661 1 0 1 1 0 8 1 processpl 1232 705 0 661 5 0 5 5 0 8 0 procpl 664 918 0 858 6 0 6 6 0 8 0 sockpl 752 175 0 146 4 0 4 4 0 8 1 mcl64k 65536 3 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 126 0 0 16 0 16 16 0 8 0 mcl2k 2048 17 0 0 3 0 3 3 0 8 0 mextrefs 64 14 0 0 1 0 1 1 0 8 0 mtagpl 96 1 0 0 1 0 1 1 0 8 0 mbufpl 256 156 0 0 9 0 9 9 0 8 0 bufpl 272 7554 0 408 477 0 477 477 0 8 0 anonpl 32 11040 0 0 89 0 89 89 0 222 0 amapchunkpl 152 17100 0 16438 33 0 33 33 0 158 5 amappl16 200 4386 0 4236 9 0 9 9 0 8 1 amappl15 192 17 0 17 1 1 0 1 0 8 0 amappl14 184 460 0 458 1 0 1 1 0 8 0 amappl13 176 210 0 195 3 1 2 3 0 8 1 amappl12 168 1000 0 973 2 0 2 2 0 8 0 amappl11 160 11 0 11 1 1 0 1 0 8 0 amappl10 152 95 0 80 2 0 2 2 0 8 1 amappl9 144 1754 0 1753 1 0 1 1 0 8 0 amappl8 136 172 0 140 2 0 2 2 0 8 0 amappl7 128 221 0 200 2 0 2 2 0 8 0 amappl6 120 207 0 205 1 0 1 1 0 8 0 amappl5 112 327 0 317 1 0 1 1 0 8 0 amappl4 104 388 0 368 2 0 2 2 0 8 1 amappl3 96 2825 0 2732 3 0 3 3 0 8 0 amappl2 88 873 0 804 5 0 5 5 0 8 2 amappl1 80 16996 0 16374 24 2 22 24 0 8 7 amappl 88 4398 0 4213 5 0 5 5 0 92 0 uvmvnodes 80 102 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 689 0 661 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 689 0 661 1 0 1 1 0 8 0 vmmpekpl 168 10528 0 10484 3 0 3 3 0 8 0 vmmpepl 168 67603 0 65677 130 0 130 130 0 357 39 vmsppl 488 688 0 661 5 0 5 5 0 8 0 rwobjpl 80 26453 0 25237 41 8 33 41 0 8 5 pdppl 4096 1386 0 1322 104 30 74 88 0 8 10 pvpl 32 56929 0 0 460 0 460 460 0 265 0 pmappl 256 688 0 661 3 0 3 3 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 120 754 0 34 23 0 23 23 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x17 sys/arch/amd64/amd64/db_interface.c:457 panic(ffffffff84d8d160) at panic+0x270 sys/kern/subr_prf.c:198 sleep_setup(ffff800001eedab0,11,ffffffff84692f80) at sleep_setup+0x3b2 sys/kern/kern_synch.c:296 tsleep_nsec(ffff800001eedab0,11,ffffffff84692f80,ffffffffffffffff) at tsleep_nsec+0x29c sys/kern/kern_synch.c:153 biowait(ffff800001eedab0) at biowait+0xe6 sys/kern/vfs_bio.c:1110 bwrite(ffff800001eedab0) at bwrite+0x4e1 sys/kern/vfs_bio.c:625 ffs_update(ffff80000207a070,1) at ffs_update+0x619 sys/ufs/ffs/ffs_inode.c:111 ffs_truncate(ffff80000207a070,0,0,ffffffffffffffff) at ffs_truncate+0x12f0 sys/ufs/ffs/ffs_inode.c:-1 ufs_inactive(ffff80002d3ab9a0) at ufs_inactive+0x2cb sys/ufs/ufs/ufs_inode.c:84 VOP_INACTIVE(ffff8000020470f8,ffff800029ad6a88) at VOP_INACTIVE+0x1bb sys/kern/vfs_vops.c:498 vrele(ffff8000020470f8) at vrele+0x16a sys/kern/vfs_subr.c:845 ktrsettrace(ffff800029917500,80000814,ffff8000020a6bf0,ffff800000119618) at ktrsettrace+0x16c sys/kern/kern_ktrace.c:123 ktrops(ffff800029ad6a88,ffff800029917500,0,80000814,ffff8000020a6bf0,ffff800000119618) at ktrops+0x338 sys/kern/kern_ktrace.c:578 doktrace(ffff8000020a6bf0,4,814,0,ffff800029ad6a88) at doktrace+0xa72 ktrsetchildren sys/kern/kern_ktrace.c:607 [inline] doktrace(ffff8000020a6bf0,4,814,0,ffff800029ad6a88) at doktrace+0xa72 sys/kern/kern_ktrace.c:522 sys_ktrace(ffff800029ad6a88,ffff80002d3ac010,ffff80002d3abf80) at sys_ktrace+0x1f6 sys/kern/kern_ktrace.c:563 syscall(ffff80002d3ac010) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80002d3ac010) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xac335bd1950, count: -17 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x19: leave x86_ipi_db(ffff800028fe3ff0) at x86_ipi_db+0x19 sys/arch/amd64/amd64/db_interface.c:412 x86_ipi_handler() at x86_ipi_handler+0x112 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff85d51b80) at __mp_lock+0x272 __mp_lock_spin sys/kern/kern_lock.c:142 [inline] __mp_lock(ffffffff85d51b80) at __mp_lock+0x272 sys/kern/kern_lock.c:173 syscall(ffff80002d388490) at syscall+0x1048 mi_syscall sys/sys/syscall_mi.h:175 [inline] syscall(ffff80002d388490) at syscall+0x1048 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x74d375cafca0, count: 9 ddb{1}> trace x86_ipi_db(ffff800028fe3ff0) at x86_ipi_db+0x19 sys/arch/amd64/amd64/db_interface.c:412 x86_ipi_handler() at x86_ipi_handler+0x112 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff85d51b80) at __mp_lock+0x272 __mp_lock_spin sys/kern/kern_lock.c:142 [inline] __mp_lock(ffffffff85d51b80) at __mp_lock+0x272 sys/kern/kern_lock.c:173 syscall(ffff80002d388490) at syscall+0x1048 mi_syscall sys/sys/syscall_mi.h:175 [inline] syscall(ffff80002d388490) at syscall+0x1048 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x74d375cafca0, count: -6 final repro crashed as (corrupted=false): panic: sleep: syz-executor[22802] slept inside a no-sleep walk bracket (raw pointer held across sleep, wmesg "biowait") Stopped at db_enter+0x17: popq %rbp TID PID UID PRFLAGS PFLAGS CPU COMMAND * 42981 22802 0 0 0x4000010 0K syz-executor 3707 17362 0 0x2 0 1 syz-executor db_enter() at db_enter+0x17 sys/arch/amd64/amd64/db_interface.c:457 panic(ffffffff84d8d160) at panic+0x270 sys/kern/subr_prf.c:198 sleep_setup(ffff800001eedab0,11,ffffffff84692f80) at sleep_setup+0x3b2 sys/kern/kern_synch.c:296 tsleep_nsec(ffff800001eedab0,11,ffffffff84692f80,ffffffffffffffff) at tsleep_nsec+0x29c sys/kern/kern_synch.c:153 biowait(ffff800001eedab0) at biowait+0xe6 sys/kern/vfs_bio.c:1110 bwrite(ffff800001eedab0) at bwrite+0x4e1 sys/kern/vfs_bio.c:625 ffs_update(ffff80000207a070,1) at ffs_update+0x619 sys/ufs/ffs/ffs_inode.c:111 ffs_truncate(ffff80000207a070,0,0,ffffffffffffffff) at ffs_truncate+0x12f0 sys/ufs/ffs/ffs_inode.c:-1 ufs_inactive(ffff80002d3ab9a0) at ufs_inactive+0x2cb sys/ufs/ufs/ufs_inode.c:84 VOP_INACTIVE(ffff8000020470f8,ffff800029ad6a88) at VOP_INACTIVE+0x1bb sys/kern/vfs_vops.c:498 vrele(ffff8000020470f8) at vrele+0x16a sys/kern/vfs_subr.c:845 ktrsettrace(ffff800029917500,80000814,ffff8000020a6bf0,ffff800000119618) at ktrsettrace+0x16c sys/kern/kern_ktrace.c:123 ktrops(ffff800029ad6a88,ffff800029917500,0,80000814,ffff8000020a6bf0,ffff800000119618) at ktrops+0x338 sys/kern/kern_ktrace.c:578 doktrace(ffff8000020a6bf0,4,814,0,ffff800029ad6a88) at doktrace+0xa72 ktrsetchildren sys/kern/kern_ktrace.c:607 [inline] doktrace(ffff8000020a6bf0,4,814,0,ffff800029ad6a88) at doktrace+0xa72 sys/kern/kern_ktrace.c:522 end trace frame: 0xffff80002d3abe90, count: 0 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: sleep: syz-executor[22802] slept inside a no-sleep walk bracket (raw pointer held across sleep, wmesg "biowait") ddb{0}> show kasan kasan: no report recorded this boot ddb{0}> trace db_enter() at db_enter+0x17 sys/arch/amd64/amd64/db_interface.c:457 panic(ffffffff84d8d160) at panic+0x270 sys/kern/subr_prf.c:198 sleep_setup(ffff800001eedab0,11,ffffffff84692f80) at sleep_setup+0x3b2 sys/kern/kern_synch.c:296 tsleep_nsec(ffff800001eedab0,11,ffffffff84692f80,ffffffffffffffff) at tsleep_nsec+0x29c sys/kern/kern_synch.c:153 biowait(ffff800001eedab0) at biowait+0xe6 sys/kern/vfs_bio.c:1110 bwrite(ffff800001eedab0) at bwrite+0x4e1 sys/kern/vfs_bio.c:625 ffs_update(ffff80000207a070,1) at ffs_update+0x619 sys/ufs/ffs/ffs_inode.c:111 ffs_truncate(ffff80000207a070,0,0,ffffffffffffffff) at ffs_truncate+0x12f0 sys/ufs/ffs/ffs_inode.c:-1 ufs_inactive(ffff80002d3ab9a0) at ufs_inactive+0x2cb sys/ufs/ufs/ufs_inode.c:84 VOP_INACTIVE(ffff8000020470f8,ffff800029ad6a88) at VOP_INACTIVE+0x1bb sys/kern/vfs_vops.c:498 vrele(ffff8000020470f8) at vrele+0x16a sys/kern/vfs_subr.c:845 ktrsettrace(ffff800029917500,80000814,ffff8000020a6bf0,ffff800000119618) at ktrsettrace+0x16c sys/kern/kern_ktrace.c:123 ktrops(ffff800029ad6a88,ffff800029917500,0,80000814,ffff8000020a6bf0,ffff800000119618) at ktrops+0x338 sys/kern/kern_ktrace.c:578 doktrace(ffff8000020a6bf0,4,814,0,ffff800029ad6a88) at doktrace+0xa72 ktrsetchildren sys/kern/kern_ktrace.c:607 [inline] doktrace(ffff8000020a6bf0,4,814,0,ffff800029ad6a88) at doktrace+0xa72 sys/kern/kern_ktrace.c:522 sys_ktrace(ffff800029ad6a88,ffff80002d3ac010,ffff80002d3abf80) at sys_ktrace+0x1f6 sys/kern/kern_ktrace.c:563 syscall(ffff80002d3ac010) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80002d3ac010) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xac335bd1950, count: -17 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff80002d3ab290 rbx 0xffff80002d3ab300 rdx 0 rcx 0xffffffff851e9ff0 cpu_info_full_primary+0x1ff0 rax 0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xffff80002d3ab080 r11 0xffffffff83e54b70 x86_bus_space_io_read_1 r12 0xffffffff84d8d160 .str.9 r13 0xffffffff851eac08 cpu_info_full_primary+0x2c08 r14 0xffffffff851eae07 cpu_info_full_primary+0x2e07 r15 0x1 rip 0xffffffff82f1b577 db_enter+0x17 cs 0x8 rflags 0x246 rsp 0xffff80002d3ab290 ss 0x10 db_enter+0x17: popq %rbp ddb{0}> show proc PROC (syz-executor) tid=42981 pid=22802 tcnt=4 stat=onproc flags process=0 proc=4000010 runpri=73, usrpri=73, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800029ad62c0,0xffff800029ad6fc8 process=0xffff800029b49d00 user=0xffff80002d3a1000, vmspace=0xffff80000202f9a8 estcpu=23, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{0}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 81139 332661 36883 0 2 0 0 syz-executor 81139 380468 36883 0 3 0 0x4000080 fsleep syz-executor 23659 334383 51923 0 2 0 0 syz-executor 23659 303756 51923 0 3 0 0x4000080 fsleep syz-executor 22802 375474 6913 0 3 0 0x80 nanoslp syz-executor 22802 211378 6913 0 2 0 0x4000000 syz-executor *22802 42981 6913 0 7 0 0x4000010 syz-executor 22802 320590 6913 0 3 0 0x4000080 fsleep syz-executor 17362 3707 51004 0 7 0x2 0 syz-executor 87862 350363 51004 0 3 0x2 0x80 piperd syz-executor 91606 390045 51004 0 3 0x2 0x80 piperd syz-executor 81458 456496 51004 0 3 0x2 0x80 piperd syz-executor 6913 234479 51004 0 3 0x2 0x80 nanoslp syz-executor 36883 21208 51004 0 3 0x2 0x80 nanoslp syz-executor 79293 7827 51004 0 3 0x2 0x80 piperd syz-executor 51923 143939 51004 0 3 0x2 0x80 nanoslp syz-executor 51004 160400 45843 0 2 0x2 0 syz-executor 45843 500411 21796 0 3 0x2 0x80 thrsleep syz-execprog 45843 176693 21796 0 3 0x2 0x4000080 nanoslp syz-execprog 45843 500750 21796 0 3 0x2 0x4000080 thrsleep syz-execprog 45843 519583 21796 0 3 0x2 0x4000080 kqread syz-execprog 45843 523899 21796 0 3 0x2 0x4000080 thrsleep syz-execprog 45843 49997 21796 0 3 0x2 0x4000080 thrsleep syz-execprog 45843 39374 21796 0 3 0x2 0x4000080 thrsleep syz-execprog 45843 104177 21796 0 3 0x2 0x4000080 thrsleep syz-execprog 45843 251655 21796 0 3 0x2 0x4000080 thrsleep syz-execprog 45843 302225 21796 0 3 0x2 0x4000080 thrsleep syz-execprog 45843 173560 21796 0 3 0x2 0x4000080 thrsleep syz-execprog 45843 37750 21796 0 3 0x2 0x4000080 thrsleep syz-execprog 21796 222906 92208 0 3 0x100002 0x88 sigsusp ksh 92208 92736 76741 0 3 0x10 0x88 kqread sshd-session 76741 3797 92894 0 3 0x12 0x80 kqread sshd-session 21340 317310 1 0 3 0x100003 0x80 ttyin getty 92894 16471 1 0 3 0 0x88 kqread sshd 14520 452948 66658 74 3 0x1100012 0x80 bpf pflogd 66658 122669 1 0 3 0 0x80 sbwait pflogd 80722 329531 46589 73 3 0x1100010 0x80 kqread syslogd 46589 404962 1 0 3 0x100002 0x80 sbwait syslogd 27889 429854 1 0 3 0x100000 0x80 kqread resolvd 85143 218887 71196 77 3 0x100012 0x80 kqread dhcpleased 21695 465149 71196 77 3 0x100012 0x80 kqread dhcpleased 71196 243612 1 0 3 0 0x80 kqread dhcpleased 93306 117137 0 0 3 0x14000 0x200 bored smr 58742 40150 0 0 2 0x14000 0x200 zerothread 98415 150653 0 0 3 0x14000 0x200 aiodoned aiodoned 49940 467363 0 0 3 0x14000 0x200 syncer update 25204 409158 0 0 3 0x14000 0x200 cleaner cleaner 9723 124023 0 0 3 0x14000 0x200 reaper reaper 86460 460447 0 0 3 0x14000 0x200 pgdaemon pagedaemon 97000 486607 0 0 3 0x14000 0x200 bored viomb 54045 346004 0 0 3 0x14000 0x40000200 acpi0 acpi0 95957 389396 0 0 3 0x14000 0x40000200 idle1 22761 490479 0 0 3 0x14000 0x200 bored softnet1 63127 195301 0 0 3 0x14000 0x200 bored softnet0 1008 354978 0 0 3 0x14000 0x200 bored systqmp 84161 230782 0 0 3 0x14000 0x200 bored systq 52638 99914 0 0 3 0x14000 0x200 tmoslp softclockmp 25195 379009 0 0 3 0x14000 0x40000200 tmoslp softclock 82449 270809 0 0 3 0x14000 0x40000200 idle0 1 481906 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{0}> show all locks Process 22802 (syz-executor) thread 0xffff800029ad6a88 (42981) exclusive rrwlock inode r = 0 (0xffff80000207a110) #0 witness_lock+0x632 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x632 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x53e sys/kern/kern_rwlock.c:320 #2 rrw_enter+0xf0 sys/kern/kern_rwlock.c:621 #3 VOP_LOCK+0x17e sys/kern/vfs_vops.c:527 #4 vn_lock+0xca sys/kern/vfs_vnops.c:576 #5 vrele+0x113 sys/kern/vfs_subr.c:836 #6 ktrsettrace+0x16c sys/kern/kern_ktrace.c:123 #7 ktrops+0x338 sys/kern/kern_ktrace.c:578 #8 doktrace+0xa72 ktrsetchildren sys/kern/kern_ktrace.c:607 [inline] #8 doktrace+0xa72 sys/kern/kern_ktrace.c:522 #9 sys_ktrace+0x1f6 sys/kern/kern_ktrace.c:563 #10 syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline] #10 syscall+0x1089 sys/arch/amd64/amd64/trap.c:783 #11 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff85d52380) #0 witness_lock+0x632 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x632 sys/kern/subr_witness.c:1160 #1 syscall+0x1048 mi_syscall sys/sys/syscall_mi.h:175 [inline] #1 syscall+0x1048 sys/arch/amd64/amd64/trap.c:783 #2 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11050 12242K 12242K 166960K 12144 0 pcb 17 24K 24K 166960K 17 0 rtable 237 12K 13K 166960K 381 0 pf 34 22K 22K 166960K 48 0 ifaddr 43 12K 12K 166960K 49 0 ifgroup 55 2K 2K 166960K 60 0 sysctl 1 1K 13K 166960K 5 0 counters 70 42K 42K 166960K 72 0 ioctlops 0 0K 4K 166960K 1484 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1247 80K 80K 166960K 1315 0 UFS quota 1 36K 36K 166960K 1 0 UFS mount 5 44K 44K 166960K 5 0 shm 2 2K 2K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 2 0K 0K 166960K 2 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1734 201K 292K 166960K 11964 0 file desc 14 46K 94K 166960K 385 0 proc 70 128K 177K 166960K 580 0 subproc 0 0K 3K 166960K 30 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 20K 20K 166960K 1 0 in_multi 99 7K 7K 166960K 110 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 6 0 ISOFS mount 1 36K 36K 166960K 1 0 MSDOSFS mount 1 20K 20K 166960K 1 0 ttys 25 182K 182K 166960K 25 0 exec 0 0K 2K 166960K 443 0 fusefs mount 1 36K 36K 166960K 1 0 tdb 3 1K 1K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 282 252K 331K 166960K 5398 0 UVM aobj 3 4K 4K 166960K 3 0 pinsyscall 1064 1836K 1840K 166960K 1728 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 12 0K 1K 166960K 31 0 temp 5 9160K 9172K 166960K 8296 0 kqueue 14 44K 44K 166960K 40 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 35 0 32 1 0 1 1 0 8 0 rtentry 176 122 0 12 5 0 5 5 0 8 0 unpcb 144 63 0 46 1 0 1 1 0 8 0 syncache 336 9 0 9 1 0 1 1 0 8 1 tcpcb 736 16 0 10 1 0 1 1 0 8 0 arp 136 20 0 2 1 0 1 1 0 8 0 inpcb 328 77 0 68 2 0 2 2 0 8 1 nd6 152 27 0 3 1 0 1 1 0 8 0 kcovpl 48 4 0 4 1 0 1 1 0 8 1 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 23 0 2 1 0 1 1 0 8 0 pfstkey 128 23 0 2 1 0 1 1 0 8 0 pfstate 448 23 0 2 3 0 3 3 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 501 0 48 29 0 29 29 0 8 0 art_table 40 502 0 48 5 0 5 5 0 8 0 art_node 32 122 0 22 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1980 0 469 95 0 95 95 0 8 0 ffsino 296 1980 0 469 117 0 117 117 0 8 0 nchpl 144 2743 0 988 66 0 66 66 0 8 0 vnodes 216 2024 0 0 113 0 113 113 0 8 0 namei 1024 8113 0 8113 2 1 1 2 0 8 1 percpumem 16 52 0 1 1 0 1 1 0 8 0 kstatmem 264 29 0 2 2 0 2 2 0 8 0 scxspl 216 13493 0 13492 11 3 8 8 1 8 7 plimitpl 152 62 0 44 1 0 1 1 0 8 0 sigapl 424 705 0 661 7 0 7 7 0 8 1 knotepl 120 70 0 0 3 0 3 3 0 8 0 kqueuepl 224 36 0 26 1 0 1 1 0 8 0 pipepl 344 206 0 178 4 0 4 4 0 8 0 fdescpl 528 689 0 661 3 0 3 3 0 8 0 filepl 160 2552 0 2409 7 0 7 7 0 8 0 lockfpl 104 6 0 4 1 0 1 1 0 8 0 lockfspl 48 4 0 2 1 0 1 1 0 8 0 sessionpl 144 45 0 36 1 0 1 1 0 8 0 pgrppl 48 68 0 51 1 0 1 1 0 8 0 ucredpl 104 141 0 128 1 0 1 1 0 8 0 zombiepl 144 661 0 661 1 0 1 1 0 8 1 processpl 1232 705 0 661 5 0 5 5 0 8 0 procpl 664 918 0 858 6 0 6 6 0 8 0 sockpl 752 175 0 146 4 0 4 4 0 8 1 mcl64k 65536 3 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 126 0 0 16 0 16 16 0 8 0 mcl2k 2048 17 0 0 3 0 3 3 0 8 0 mextrefs 64 14 0 0 1 0 1 1 0 8 0 mtagpl 96 1 0 0 1 0 1 1 0 8 0 mbufpl 256 156 0 0 9 0 9 9 0 8 0 bufpl 272 7554 0 408 477 0 477 477 0 8 0 anonpl 32 11040 0 0 89 0 89 89 0 222 0 amapchunkpl 152 17100 0 16438 33 0 33 33 0 158 5 amappl16 200 4386 0 4236 9 0 9 9 0 8 1 amappl15 192 17 0 17 1 1 0 1 0 8 0 amappl14 184 460 0 458 1 0 1 1 0 8 0 amappl13 176 210 0 195 3 1 2 3 0 8 1 amappl12 168 1000 0 973 2 0 2 2 0 8 0 amappl11 160 11 0 11 1 1 0 1 0 8 0 amappl10 152 95 0 80 2 0 2 2 0 8 1 amappl9 144 1754 0 1753 1 0 1 1 0 8 0 amappl8 136 172 0 140 2 0 2 2 0 8 0 amappl7 128 221 0 200 2 0 2 2 0 8 0 amappl6 120 207 0 205 1 0 1 1 0 8 0 amappl5 112 327 0 317 1 0 1 1 0 8 0 amappl4 104 388 0 368 2 0 2 2 0 8 1 amappl3 96 2825 0 2732 3 0 3 3 0 8 0 amappl2 88 873 0 804 5 0 5 5 0 8 2 amappl1 80 16996 0 16374 24 2 22 24 0 8 7 amappl 88 4398 0 4213 5 0 5 5 0 92 0 uvmvnodes 80 102 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 689 0 661 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 689 0 661 1 0 1 1 0 8 0 vmmpekpl 168 10528 0 10484 3 0 3 3 0 8 0 vmmpepl 168 67603 0 65677 130 0 130 130 0 357 39 vmsppl 488 688 0 661 5 0 5 5 0 8 0 rwobjpl 80 26453 0 25237 41 8 33 41 0 8 5 pdppl 4096 1386 0 1322 104 30 74 88 0 8 10 pvpl 32 56929 0 0 460 0 460 460 0 265 0 pmappl 256 688 0 661 3 0 3 3 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 120 754 0 34 23 0 23 23 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x17 sys/arch/amd64/amd64/db_interface.c:457 panic(ffffffff84d8d160) at panic+0x270 sys/kern/subr_prf.c:198 sleep_setup(ffff800001eedab0,11,ffffffff84692f80) at sleep_setup+0x3b2 sys/kern/kern_synch.c:296 tsleep_nsec(ffff800001eedab0,11,ffffffff84692f80,ffffffffffffffff) at tsleep_nsec+0x29c sys/kern/kern_synch.c:153 biowait(ffff800001eedab0) at biowait+0xe6 sys/kern/vfs_bio.c:1110 bwrite(ffff800001eedab0) at bwrite+0x4e1 sys/kern/vfs_bio.c:625 ffs_update(ffff80000207a070,1) at ffs_update+0x619 sys/ufs/ffs/ffs_inode.c:111 ffs_truncate(ffff80000207a070,0,0,ffffffffffffffff) at ffs_truncate+0x12f0 sys/ufs/ffs/ffs_inode.c:-1 ufs_inactive(ffff80002d3ab9a0) at ufs_inactive+0x2cb sys/ufs/ufs/ufs_inode.c:84 VOP_INACTIVE(ffff8000020470f8,ffff800029ad6a88) at VOP_INACTIVE+0x1bb sys/kern/vfs_vops.c:498 vrele(ffff8000020470f8) at vrele+0x16a sys/kern/vfs_subr.c:845 ktrsettrace(ffff800029917500,80000814,ffff8000020a6bf0,ffff800000119618) at ktrsettrace+0x16c sys/kern/kern_ktrace.c:123 ktrops(ffff800029ad6a88,ffff800029917500,0,80000814,ffff8000020a6bf0,ffff800000119618) at ktrops+0x338 sys/kern/kern_ktrace.c:578 doktrace(ffff8000020a6bf0,4,814,0,ffff800029ad6a88) at doktrace+0xa72 ktrsetchildren sys/kern/kern_ktrace.c:607 [inline] doktrace(ffff8000020a6bf0,4,814,0,ffff800029ad6a88) at doktrace+0xa72 sys/kern/kern_ktrace.c:522 sys_ktrace(ffff800029ad6a88,ffff80002d3ac010,ffff80002d3abf80) at sys_ktrace+0x1f6 sys/kern/kern_ktrace.c:563 syscall(ffff80002d3ac010) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80002d3ac010) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xac335bd1950, count: -17 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x19: leave x86_ipi_db(ffff800028fe3ff0) at x86_ipi_db+0x19 sys/arch/amd64/amd64/db_interface.c:412 x86_ipi_handler() at x86_ipi_handler+0x112 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff85d51b80) at __mp_lock+0x272 __mp_lock_spin sys/kern/kern_lock.c:142 [inline] __mp_lock(ffffffff85d51b80) at __mp_lock+0x272 sys/kern/kern_lock.c:173 syscall(ffff80002d388490) at syscall+0x1048 mi_syscall sys/sys/syscall_mi.h:175 [inline] syscall(ffff80002d388490) at syscall+0x1048 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x74d375cafca0, count: 9 ddb{1}> trace x86_ipi_db(ffff800028fe3ff0) at x86_ipi_db+0x19 sys/arch/amd64/amd64/db_interface.c:412 x86_ipi_handler() at x86_ipi_handler+0x112 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff85d51b80) at __mp_lock+0x272 __mp_lock_spin sys/kern/kern_lock.c:142 [inline] __mp_lock(ffffffff85d51b80) at __mp_lock+0x272 sys/kern/kern_lock.c:173 syscall(ffff80002d388490) at syscall+0x1048 mi_syscall sys/sys/syscall_mi.h:175 [inline] syscall(ffff80002d388490) at syscall+0x1048 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x74d375cafca0, count: -6