syzbot


panic: bad dir

Status: closed as invalid on 2019/05/12 18:53
Reported-by: syzbot+3a6d90598376a6a69fea@syzkaller.appspotmail.com
First crash: 2023d, last: 2022d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd panic: bad dir (2) 44 1042d 1054d 0/3 auto-closed as invalid on 2022/03/15 02:49
openbsd panic: bad dir (3) C 101 8d11h 947d 0/3 upstream: reported C repro on 2022/04/19 10:50
Last patch testing requests (1)
Created Duration User Patch Repo Result
2019/05/10 06:46 5m dvyukov@google.com https://github.com/openbsd/src.git 2f8707c8 error

Sample crash report:
panic: bad dir
Stopped at      db_enter+0x18:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*195560   7361      0           0          0    0K syz-executor5473
 285159  27159      0         0x2      0x480    1  syz-executor5473
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic() at panic+0x15c sys/kern/subr_prf.c:212
ufs_dirbadentry(ffff800020bb9678,ffff800020bb9678,b5f95c3bdeec69ca) at ufs_dirbadentry
VOP_LOOKUP(fffffd807efca640,ffff800020bb9720,ffff800020bb96e0) at VOP_LOOKUP+0x5b sys/kern/vfs_vops.c:90
unveil_find_cover(fffffd806ec9bbc0,ffff800020b84970) at unveil_find_cover+0x139 sys/kern/kern_unveil.c:290
unveil_add_vnode() at unveil_add_vnode+0x221 sys/kern/kern_unveil.c:471
unveil_add(ffff800020b84970,ffff800020bb9ce8,ffff800020bb9db3) at unveil_add+0x273 sys/kern/kern_unveil.c:597
sys_unveil(ffff800020b84970,ffff800020bb9e28,ffff800020bb9e90) at sys_unveil+0x405 sys/kern/vfs_syscalls.c:937
syscall(ffff800020bb9f00) at syscall+0x552 mi_syscall sys/sys/syscall_mi.h:99 [inline]
syscall(ffff800020bb9f00) at syscall+0x552 sys/arch/amd64/amd64/trap.c:574
Xsyscall(6,0,7f7ffffdf9d8,0,30656c69662f2e,3baafa94648) at Xsyscall+0x128
end trace frame: 0x0, count: 5
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
bad dir
ddb{0}> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic() at panic+0x15c sys/kern/subr_prf.c:212
ufs_dirbadentry(ffff800020bb9678,ffff800020bb9678,b5f95c3bdeec69ca) at ufs_dirbadentry
VOP_LOOKUP(fffffd807efca640,ffff800020bb9720,ffff800020bb96e0) at VOP_LOOKUP+0x5b sys/kern/vfs_vops.c:90
unveil_find_cover(fffffd806ec9bbc0,ffff800020b84970) at unveil_find_cover+0x139 sys/kern/kern_unveil.c:290
unveil_add_vnode() at unveil_add_vnode+0x221 sys/kern/kern_unveil.c:471
unveil_add(ffff800020b84970,ffff800020bb9ce8,ffff800020bb9db3) at unveil_add+0x273 sys/kern/kern_unveil.c:597
sys_unveil(ffff800020b84970,ffff800020bb9e28,ffff800020bb9e90) at sys_unveil+0x405 sys/kern/vfs_syscalls.c:937
syscall(ffff800020bb9f00) at syscall+0x552 mi_syscall sys/sys/syscall_mi.h:99 [inline]
syscall(ffff800020bb9f00) at syscall+0x552 sys/arch/amd64/amd64/trap.c:574
Xsyscall(6,0,7f7ffffdf9d8,0,30656c69662f2e,3baafa94648) at Xsyscall+0x128
end trace frame: 0x0, count: -10
ddb{0}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff800020bb9490
rbx               0xffff800020bb9540
rdx                             0x8b
rcx                              0x2
rax                              0x1
r8                0xffffffff81a425b3    kprintf+0x173
r9                               0x1
r10               0xde9ae3120fd603b1
r11               0xbae544e210691a1c
r12                     0x3000000008
r13               0xffff800020bb94a0
r14                            0x100
r15                              0x1
rip               0xffffffff812575e8    db_enter+0x18
cs                               0x8
rflags                         0x246
rsp               0xffff800020bb9480
ss                              0x10
db_enter+0x18:  addq    $0x8,%rsp
ddb{0}> show proc
PROC (syz-executor5473) pid=195560 stat=onproc
    flags process=0 proc=0
    pri=17, usrpri=53, nice=20
    forw=0xffffffffffffffff, list=0xffff800020b85078,0xffffffff823445b0
    process=0xffff800020b3b078 user=0xffff800020bb4000, vmspace=0xfffffd806f1cd008
    estcpu=3, cpticks=11, pctcpu=0.4
    user=0, sys=1, intr=0
ddb{0}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
* 7361  195560  27159      0  7           0                syz-executor5473
 27159  285159  29228      0  7       0x482                syz-executor5473
 29228  409869  31474      0  3    0x10008a  pause         ksh
 31474  364571  14667      0  3        0x92  select        sshd
 78617  492566      1      0  3    0x100083  ttyin         getty
 14667  459718      1      0  3        0x80  select        sshd
 25232   87488  30864     74  3    0x100092  bpf           pflogd
 30864  118616      1      0  3        0x80  netio         pflogd
 92316  147242  46077     73  2    0x100090                syslogd
 46077  118617      1      0  3    0x100082  netio         syslogd
 59888   76231      1     77  3    0x100090  poll          dhclient
 96737  516322      1      0  3        0x80  poll          dhclient
 79185  487767      0      0  3     0x14200  pgzero        zerothread
 27899   33126      0      0  3     0x14200  aiodoned      aiodoned
  6788  319596      0      0  3     0x14200  syncer        update
  4512   64297      0      0  3     0x14200  cleaner       cleaner
 17790  466310      0      0  3     0x14200  reaper        reaper
 99622  404291      0      0  3     0x14200  pgdaemon      pagedaemon
 26082  211113      0      0  3     0x14200  bored         crynlk
 66782  383542      0      0  3     0x14200  bored         crypto
 93992  188778      0      0  3  0x40014200  acpi0         acpi0
 63904   23371      0      0  3  0x40014200                idle1
 28543  209539      0      0  3     0x14200  bored         softnet
 22272   85459      0      0  3     0x14200  bored         systqmp
 79932  163234      0      0  3     0x14200  bored         systq
 29600  458283      0      0  3  0x40014200  bored         softclock
 71952  351582      0      0  3  0x40014200                idle0
 70782  181936      0      0  3     0x14200  bored         smr
     1   93153      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{0}> show all locks
Process 7361 (syz-executor5473) thread 0xffff800020b84970 (195560)
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff82374b68)
#0  witness_lock+0x52e sys/kern/subr_witness.c:1161
#1  __mp_acquire_count+0x51 sys/kern/kern_lock.c:227
#2  mi_switch+0x38c sys/kern/sched_bsd.c:439
#3  sleep_finish+0x110 sys/kern/kern_synch.c:303
#4  sleep_finish_all+0x34 sleep_finish_timeout sys/kern/kern_synch.c:327 [inline]
#4  sleep_finish_all+0x34 sys/kern/kern_synch.c:157
#5  tsleep+0x195 sys/kern/kern_synch.c:149
#6  biowait+0xa1 sys/kern/vfs_bio.c:1228
#7  ffs_bufatoff+0x14f sys/ufs/ffs/ffs_subr.c:71
#8  ufs_lookup+0x48d sys/ufs/ufs/ufs_lookup.c:258
#9  VOP_LOOKUP+0x5b sys/kern/vfs_vops.c:90
#10 unveil_find_cover+0x139 sys/kern/kern_unveil.c:290
#11 unveil_add_vnode+0x221 sys/kern/kern_unveil.c:471
#12 unveil_add+0x273 sys/kern/kern_unveil.c:597
#13 sys_unveil+0x405 sys/kern/vfs_syscalls.c:937
#14 syscall+0x552 mi_syscall sys/sys/syscall_mi.h:99 [inline]
#14 syscall+0x552 sys/arch/amd64/amd64/trap.c:574
#15 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd807ed21d58)
#0  witness_lock+0x52e sys/kern/subr_witness.c:1161
#1  rw_enter+0x414 sys/kern/kern_rwlock.c:278
#2  rrw_enter+0x4f sys/kern/kern_rwlock.c:407
#3  VOP_LOCK+0x4b sys/kern/vfs_vops.c:602
#4  vn_lock+0x6e sys/kern/vfs_vnops.c:549
#5  vget+0x1c3 sys/kern/vfs_subr.c:672
#6  unveil_find_cover+0x10d sys/kern/kern_unveil.c:286
#7  unveil_add_vnode+0x221 sys/kern/kern_unveil.c:471
#8  unveil_add+0x273 sys/kern/kern_unveil.c:597
#9  sys_unveil+0x405 sys/kern/vfs_syscalls.c:937
#10 syscall+0x552 mi_syscall sys/sys/syscall_mi.h:99 [inline]
#10 syscall+0x552 sys/arch/amd64/amd64/trap.c:574
#11 Xsyscall+0x128
ddb{0}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim Kern Lim
         devbuf  9450   6382K    6382K  78643K     10537        0        0
            pcb    25      9K       9K  78643K        57        0        0
         rtable    61      2K       2K  78643K       125        0        0
         ifaddr    25      7K       7K  78643K        26        0        0
       counters    39     33K      33K  78643K        39        0        0
       ioctlops     0      0K       4K  78643K      1467        0        0
          mount     1      1K       1K  78643K         1        0        0
         vnodes  1167     73K      73K  78643K      1173        0        0
      UFS quota     1     32K      32K  78643K         1        0        0
      UFS mount     5     36K      36K  78643K         5        0        0
            shm     2      1K       1K  78643K         2        0        0
         VM map     2      1K       1K  78643K         2        0        0
            sem     2      0K       0K  78643K         2        0        0
        dirhash    12      2K       2K  78643K        12        0        0
           ACPI  1808    196K     290K  78643K     12628        0        0
      file desc     1      0K       0K  78643K         1        0        0
           proc    54     70K      70K  78643K       281        0        0
    NFS srvsock     1      0K       0K  78643K         1        0        0
     NFS daemon     1     16K      16K  78643K         1        0        0
       in_multi    11      0K       0K  78643K        11        0        0
    ether_multi     1      0K       0K  78643K         1        0        0
    ISOFS mount     1     32K      32K  78643K         1        0        0
  MSDOSFS mount     1     16K      16K  78643K         1        0        0
           ttys    18     79K      79K  78643K        18        0        0
           exec     0      0K       1K  78643K       179        0        0
        pagedep     1      8K       8K  78643K         1        0        0
       inodedep     1     32K      32K  78643K         1        0        0
         newblk     1      0K       0K  78643K         1        0        0
        VM swap     7     26K      26K  78643K         7        0        0
       UVM amap    55      3K       3K  78643K       767        0        0
       UVM aobj     2      2K       2K  78643K         2        0        0
        memdesc     1      4K       4K  78643K         1        0        0
    crypto data     1      1K       1K  78643K         1        0        0
            NDP     4      0K       0K  78643K         4        0        0
           temp    39   2712K    2776K  78643K      2811        0        0
      SYN cache     2     16K      16K  78643K         2        0        0
ddb{0}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
arp         64        2    0        0     1     0     1     1     0     8    0
inpcbpl    280       29    0       23     1     0     1     1     0     8    0
plimitpl   152       14    0        8     1     0     1     1     0     8    0
plcache    128       20    0        0     1     0     1     1     0     8    0
rtentry    112       23    0        1     1     0     1     1     0     8    0
syncache   264        5    0        5     1     0     1     1     0     8    1
tcpcb      544        8    0        5     1     0     1     1     0     8    0
pfosfp      40      846    0      423     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfstitem    24        8    0        1     1     0     1     1     0     8    0
pfstkey    112        8    0        1     1     0     1     1     0     8    0
pfstate    328        8    0        1     1     0     1     1     0     8    0
pfrule     1360      21    0       16     2     1     1     2     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256       96    0        0     6     0     6     6     0     8    0
art_table   32       97    0        0     1     0     1     1     0     8    0
art_node    16       22    0        2     1     0     1     1     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino1pl    128     1395    0       19    45     0    45    45     0     8    0
ffsino     272     1395    0       19    92     0    92    92     0     8    0
nchpl      144     1569    0       32    57     0    57    57     0     8    0
uvmvnodes   72     1405    0        0    26     0    26    26     0     8    0
vnodes     200     1405    0        0    74     0    74    74     0     8    0
namei      1024    3557    0     3556     2     1     1     1     0     8    0
percpumem   16       30    0        0     1     0     1     1     0     8    0
scxspl     192     5533    0     5533     7     1     6     6     0     8    6
sigapl     432      206    0      193     2     0     2     2     0     8    0
knotepl    112        5    0        0     1     0     1     1     0     8    0
kqueuepl   104        1    0        0     1     0     1     1     0     8    0
pipepl     112      134    0      127     2     1     1     1     0     8    0
fdescpl    488      207    0      193     3     1     2     3     0     8    0
filepl     152      960    0      912     2     0     2     2     0     8    0
lockfpl    104        6    0        6     1     1     0     1     0     8    0
lockfspl    48        3    0        3     1     1     0     1     0     8    0
sessionpl  112       18    0        9     1     0     1     1     0     8    0
pgrppl      48       18    0        9     1     0     1     1     0     8    0
ucredpl     96       52    0       43     1     0     1     1     0     8    0
zombiepl   144      193    0      193     2     1     1     1     0     8    1
processpl  840      222    0      193     4     0     4     4     0     8    0
procpl     600      222    0      193     3     0     3     3     0     8    0
sockpl     384       73    0       55     2     0     2     2     0     8    0
mcl4k      4096       3    0        0     1     0     1     1     0     8    0
mcl2k      2048      74    0        0    10     0    10    10     0     8    0
mtagpl      80        1    0        0     1     0     1     1     0     8    0
mbufpl     256       97    0        0     6     0     6     6     0     8    0
bufpl      256     7023    0     2584   278     0   278   278     0     8    0
anonpl      16    23378    0    18060    24     2    22    22     0   125    0
amapchunkpl 152     570    0      517     3     0     3     3     0   158    0
amappl16   192      328    0       83    13     0    13    13     0     8    0
amappl14   176       16    0       15     2     1     1     1     0     8    0
amappl12   160        4    0        4     1     1     0     1     0     8    0
amappl11   152       48    0       30     1     0     1     1     0     8    0
amappl10   144       58    0       56     1     0     1     1     0     8    0
amappl9    136      419    0      418     1     0     1     1     0     8    0
amappl8    128       99    0       95     1     0     1     1     0     8    0
amappl7    120       19    0       17     1     0     1     1     0     8    0
amappl6    112       47    0       41     1     0     1     1     0     8    0
amappl5    104      126    0      113     1     0     1     1     0     8    0
amappl4     96      449    0      423     1     0     1     1     0     8    0
amappl3     88      106    0      101     1     0     1     1     0     8    0
amappl2     80      629    0      587     1     0     1     1     0     8    0
amappl1     72    13483    0    13064    15     5    10    15     0     8    0
amappl      72      429    0      406     1     0     1     1     0    75    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma64       64      259    0      259     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       17    0       17     1     1     0     1     0     8    0
aobjpl      64        1    0        0     1     0     1     1     0     8    0
uaddrrnd    24      207    0      193     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      207    0      193     1     0     1     1     0     8    0
vmmpekpl   168     5646    0     5627     2     0     2     2     0     8    0
vmmpepl    168    28102    0    27086    55    10    45    45     0   357    0
vmsppl     360      206    0      193     2     0     2     2     0     8    0
pdppl      4096     422    0      386     6     1     5     6     0     8    0
pvpl        32    88921    0    81837    61     3    58    58     0   265    0
pmappl     232      206    0      193     1     0     1     1     0     8    0
extentpl    40       39    0       25     1     0     1     1     0     8    0
phpool     112      410    0        5    12     0    12    12     0     8    0

Crashes (1390):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/05/09 12:41 openbsd 2f8707c8a257 1ab4c999 .config console log report syz C ci-openbsd-multicore
2019/05/09 10:20 openbsd 2f8707c8a257 1ab4c999 .config console log report syz C ci-openbsd-multicore
2019/05/10 07:55 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/10 07:37 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/10 07:18 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/10 07:03 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/10 06:50 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/10 06:24 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/10 06:07 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-multicore
2019/05/10 05:48 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/10 05:28 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/10 05:11 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/10 04:53 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/10 04:28 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/10 04:09 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/10 03:51 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/10 03:27 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/10 03:10 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-multicore
2019/05/10 02:50 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/10 02:28 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/10 02:12 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-multicore
2019/05/10 01:56 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/10 01:30 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-multicore
2019/05/10 00:59 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/10 00:39 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/10 00:17 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/09 23:55 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/09 23:42 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/09 23:27 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/09 23:10 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/09 22:55 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/09 22:38 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/09 22:22 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-multicore
2019/05/09 22:04 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/09 21:50 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/09 21:33 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-multicore
2019/05/09 21:16 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/09 21:01 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/09 20:45 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/09 20:19 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/09 20:00 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/09 19:43 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/09 19:22 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/09 19:02 openbsd 8d0369da87f8 214bf476 .config console log report ci-openbsd-main
2019/05/09 07:57 openbsd 2f8707c8a257 1ab4c999 .config console log report ci-openbsd-main
* Struck through repros no longer work on HEAD.