syzbot


panic: bad dir (2)

Status: auto-closed as invalid on 2022/03/15 02:49
Reported-by: syzbot+fbe98aacea5a863963d1@syzkaller.appspotmail.com
First crash: 1057d, last: 1045d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd panic: bad dir C 1390 2025d 2026d 0/3 closed as invalid on 2019/05/12 18:53
openbsd panic: bad dir (3) C 101 11d 950d 0/3 upstream: reported C repro on 2022/04/19 10:50

Sample crash report:
panic: bad dir
Stopped at      db_enter+0x18:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*497675  82927      0           0          0    0K dhcpleased
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:440
panic(ffffffff824821ee) at panic+0x177 sys/kern/subr_prf.c:202
ufs_lookup() at ufs_lookup+0x174c ufs_dirbad sys/ufs/ufs/ufs_lookup.c:609 [inline]
ufs_lookup() at ufs_lookup+0x174c sys/ufs/ufs/ufs_lookup.c:444
VOP_LOOKUP(fffffd806f69b738,ffff8000211dbdc8,ffff8000211dbdf8) at VOP_LOOKUP+0x58 sys/kern/vfs_vops.c:85
vfs_lookup(ffff8000211dbd98) at vfs_lookup+0x6e5 sys/kern/vfs_lookup.c:561
namei(ffff8000211dbd98) at namei+0x36a sys/kern/vfs_lookup.c:245
vn_open(ffff8000211dbd98,1,0) at vn_open+0x105 sys/kern/vfs_vnops.c:146
doopenat(ffff800021193ce8,ffffff9c,7f7ffffd3c60,0,0,ffff8000211dbf80) at doopenat+0x26a sys/kern/vfs_syscalls.c:1128
syscall(ffff8000211dbff0) at syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
syscall(ffff8000211dbff0) at syscall+0x489 sys/arch/amd64/amd64/trap.c:585
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7f7ffffd3c50, count: 5
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
*cpu0: bad dir
ddb{0}> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:440
panic(ffffffff824821ee) at panic+0x177 sys/kern/subr_prf.c:202
ufs_lookup() at ufs_lookup+0x174c ufs_dirbad sys/ufs/ufs/ufs_lookup.c:609 [inline]
ufs_lookup() at ufs_lookup+0x174c sys/ufs/ufs/ufs_lookup.c:444
VOP_LOOKUP(fffffd806f69b738,ffff8000211dbdc8,ffff8000211dbdf8) at VOP_LOOKUP+0x58 sys/kern/vfs_vops.c:85
vfs_lookup(ffff8000211dbd98) at vfs_lookup+0x6e5 sys/kern/vfs_lookup.c:561
namei(ffff8000211dbd98) at namei+0x36a sys/kern/vfs_lookup.c:245
vn_open(ffff8000211dbd98,1,0) at vn_open+0x105 sys/kern/vfs_vnops.c:146
doopenat(ffff800021193ce8,ffffff9c,7f7ffffd3c60,0,0,ffff8000211dbf80) at doopenat+0x26a sys/kern/vfs_syscalls.c:1128
syscall(ffff8000211dbff0) at syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
syscall(ffff8000211dbff0) at syscall+0x489 sys/arch/amd64/amd64/trap.c:585
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7f7ffffd3c50, count: -10
ddb{0}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff8000211db850
rbx               0xffffffff82780bff    cpu_info_full_primary+0x2bff
rdx                                0
rcx                                0
rax               0xffff800021193ce8
r8                 0x101010101010101
r9                0x8080808080808080
r10               0x3135dd6afd9bc027
r11                0x5913495f1ea43f7
r12               0xffffffff82780a00    cpu_info_full_primary+0x2a00
r13                                0
r14                                0
r15                              0x1
rip               0xffffffff81d4f0b8    db_enter+0x18
cs                               0x8
rflags                         0x246
rsp               0xffff8000211db840
ss                              0x10
db_enter+0x18:  addq    $0x8,%rsp
ddb{0}> show proc
PROC (dhcpleased) pid=497675 stat=onproc
    flags process=0 proc=0
    pri=17, usrpri=50, nice=20
    forw=0xffffffffffffffff, list=0xffff800021192fc8,0xffff8000ffff77c0
    process=0xffff8000ffff8858 user=0xffff8000211d7000, vmspace=0xfffffd807f0005c0
    estcpu=0, cpticks=1, pctcpu=0.0
    user=0, sys=1, intr=0
ddb{0}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 99053  492284  92189      0  2           0                syz-executor.0
 99053  163829  92189      0  2   0x4000080                syz-executor.0
 21553  156331  59470      0  2           0                syz-executor.1
 21553  395768  59470      0  2   0x4000000                syz-executor.1
 77587  268533  89791      0  2           0                syz-executor.2
 77587  342286  89791      0  3   0x4000000  inode         syz-executor.2
 77587  478789  89791      0  3   0x4000080  netio         syz-executor.2
 59470   11263  74493      0  2       0x482                syz-executor.1
 97195  309855      0      0  3     0x14200  acct          acct
 89791  375196  74493      0  2       0x482                syz-executor.2
 65565  174017  74493      0  2         0x2                syz-executor.3
 92189   19067  74493      0  3        0x82  nanoslp       syz-executor.0
 71846  492351      1      0  3    0x100083  ttyin         getty
 82174  278964      0      0  3     0x14280  nfsidl        nfsio
 47999  409749      0      0  3     0x14280  nfsidl        nfsio
 70713  119185      0      0  3     0x14280  nfsidl        nfsio
 63388    2788      0      0  3     0x14280  nfsidl        nfsio
 68040  282243      0      0  3     0x14280  nfsidl        nfsio
 76332  344553      0      0  3     0x14280  nfsidl        nfsio
 61154   44564      0      0  3     0x14280  nfsidl        nfsio
 92711  184841      0      0  3     0x14280  nfsidl        nfsio
 83700  140601      0      0  3     0x14280  nfsidl        nfsio
 24226   62116      0      0  3     0x14280  nfsidl        nfsio
 81713  447947      0      0  3     0x14280  nfsidl        nfsio
 69280  234554      0      0  3     0x14280  nfsidl        nfsio
 60227  425677      0      0  3     0x14280  nfsidl        nfsio
  4282    9645      0      0  3     0x14280  nfsidl        nfsio
  4045  279870      0      0  3     0x14280  nfsidl        nfsio
 63746   41229      0      0  3     0x14280  nfsidl        nfsio
 39218  488399      0      0  3     0x14280  nfsidl        nfsio
 57468  139274      0      0  3     0x14280  nfsidl        nfsio
 93242  302560      0      0  3     0x14280  nfsidl        nfsio
 35126  310724      0      0  3     0x14280  nfsidl        nfsio
 35422  310042      0      0  3     0x14200  bored         sosplice
 74493  330089  29538      0  3        0x82  thrsleep      syz-fuzzer
 74493  298866  29538      0  2   0x4000482                syz-fuzzer
 74493  267287  29538      0  3   0x4000082  thrsleep      syz-fuzzer
 74493  198516  29538      0  3   0x4000082  thrsleep      syz-fuzzer
 74493  296589  29538      0  3   0x4000082  kqread        syz-fuzzer
 74493  184074  29538      0  3   0x4000082  thrsleep      syz-fuzzer
 74493   11065  29538      0  3   0x4000082  thrsleep      syz-fuzzer
 74493   51005  29538      0  3   0x4000082  thrsleep      syz-fuzzer
 74493  277695  29538      0  3   0x4000082  thrsleep      syz-fuzzer
 29538  362942  77347      0  3    0x10008a  sigsusp       ksh
 77347   79509  10113      0  3        0x9a  poll          sshd
 10113   52347      1      0  3        0x88  poll          sshd
 63151  264406  45181     74  3    0x100092  bpf           pflogd
 45181  524002      1      0  3        0x80  netio         pflogd
 94750  237519  59885     73  3    0x100090  kqread        syslogd
 59885  138042      1      0  3    0x100082  netio         syslogd
 89523  113317      1      0  3    0x100080  kqread        resolvd
 17064  114297  82927     77  3    0x100092  kqread        dhcpleased
 11782  214672  82927     77  3    0x100092  kqread        dhcpleased
*82927  497675      1      0  7           0                dhcpleased
 30087  287759      0      0  3     0x14200  bored         smr
 49345  281530      0      0  2     0x14200                zerothread
 46168   50611      0      0  3     0x14200  aiodoned      aiodoned
 58321  292324      0      0  3     0x14200  syncer        update
 69587  205695      0      0  3     0x14200  cleaner       cleaner
 37653  150614      0      0  3     0x14200  reaper        reaper
 58233   17649      0      0  3     0x14200  pgdaemon      pagedaemon
  1967  217725      0      0  3     0x14200  bored         viomb
 49002  467681      0      0  3  0x40014200  acpi0         acpi0
 87045  514426      0      0  7  0x40014200                idle1
 85155   50774      0      0  3     0x14200  bored         softnet
 82650  333926      0      0  3     0x14200  bored         systqmp
 98137  511264      0      0  3     0x14200  bored         systq
 86000   69468      0      0  2  0x40014200                softclock
 27929   16363      0      0  3  0x40014200                idle0
     1  475495      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{0}> show all locks
Process 77587 (syz-executor.2) thread 0xffff800022c8c540 (342286)
exclusive rrwlock inode r = 0 (0xfffffd80722d55f8)
#0  witness_lock+0x44d
#1  rw_enter+0x3e1 sys/kern/kern_rwlock.c:310
#2  rrw_enter+0x8b sys/kern/kern_rwlock.c:461
#3  VOP_LOCK+0x87 sys/kern/vfs_vops.c:534
#4  vn_lock+0x84 sys/kern/vfs_vnops.c:579
#5  vfs_lookup+0xd1 sys/kern/vfs_lookup.c:413
#6  namei+0x36a sys/kern/vfs_lookup.c:245
#7  dorenameat+0x7b sys/kern/vfs_syscalls.c:2977
#8  syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
#8  syscall+0x489 sys/arch/amd64/amd64/trap.c:585
#9  Xsyscall+0x128
Process 77587 (syz-executor.2) thread 0xffff800022c8d7a0 (478789)
exclusive rrwlock inode r = 0 (0xfffffd8066333c48)
#0  witness_lock+0x44d
#1  rw_enter+0x3e1 sys/kern/kern_rwlock.c:310
#2  rrw_enter+0x8b sys/kern/kern_rwlock.c:461
#3  VOP_LOCK+0x87 sys/kern/vfs_vops.c:534
#4  ufs_ihashins+0x42 sys/ufs/ufs/ufs_ihash.c:140
#5  ffs_vget+0x141 sys/ufs/ffs/ffs_vfsops.c:1347
#6  ufs_lookup+0x122c sys/ufs/ufs/ufs_lookup.c:582
#7  VOP_LOOKUP+0x58 sys/kern/vfs_vops.c:85
#8  vfs_lookup+0x6e5 sys/kern/vfs_lookup.c:561
#9  namei+0x36a sys/kern/vfs_lookup.c:245
#10 vn_open+0x105 sys/kern/vfs_vnops.c:146
#11 vndioctl+0xa07 sys/dev/vnd.c:459
#12 VOP_IOCTL+0x96 sys/kern/vfs_vops.c:264
#13 vn_ioctl+0xbc sys/kern/vfs_vnops.c:531
#14 sys_ioctl+0x4a2
#15 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
#15 syscall+0x489 sys/arch/amd64/amd64/trap.c:585
#16 Xsyscall+0x128
Process 65565 (syz-executor.3) thread 0xffff80002125a540 (174017)
exclusive rrwlock inode r = 0 (0xfffffd8066333b38)
#0  witness_lock+0x44d
#1  rw_enter+0x3e1 sys/kern/kern_rwlock.c:310
#2  rrw_enter+0x8b sys/kern/kern_rwlock.c:461
#3  VOP_LOCK+0x87 sys/kern/vfs_vops.c:534
#4  ufs_ihashins+0x42 sys/ufs/ufs/ufs_ihash.c:140
#5  ffs_vget+0x141 sys/ufs/ffs/ffs_vfsops.c:1347
#6  ffs_inode_alloc+0x1be sys/ufs/ffs/ffs_alloc.c:394
#7  ufs_mkdir+0xf4 sys/ufs/ufs/ufs_vnops.c:1162
#8  VOP_MKDIR+0xbf sys/kern/vfs_vops.c:404
#9  domkdirat+0x121 sys/kern/vfs_syscalls.c:3100
#10 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
#10 syscall+0x489 sys/arch/amd64/amd64/trap.c:585
#11 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd80722d5c58)
#0  witness_lock+0x44d
#1  rw_enter+0x3e1 sys/kern/kern_rwlock.c:310
#2  rrw_enter+0x8b sys/kern/kern_rwlock.c:461
#3  VOP_LOCK+0x87 sys/kern/vfs_vops.c:534
#4  vn_lock+0x84 sys/kern/vfs_vnops.c:579
#5  vfs_lookup+0xd1 sys/kern/vfs_lookup.c:413
#6  namei+0x36a sys/kern/vfs_lookup.c:245
#7  domkdirat+0x75 sys/kern/vfs_syscalls.c:3085
#8  syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
#8  syscall+0x489 sys/arch/amd64/amd64/trap.c:585
#9  Xsyscall+0x128
Process 82927 (dhcpleased) thread 0xffff800021193ce8 (497675)
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff8293aef8)
#0  witness_lock+0x44d
#1  __mp_acquire_count+0x48 sys/kern/kern_lock.c:227
#2  mi_switch+0x3d3 sys/kern/sched_bsd.c:416
#3  sleep_finish+0x1b2 sys/kern/kern_synch.c:433
#4  tsleep+0x12c sys/kern/kern_synch.c:158
#5  biowait+0x91 sys/kern/vfs_bio.c:1271
#6  ffs_bufatoff+0x125 sys/ufs/ffs/ffs_subr.c:71
#7  ufs_lookup+0x466 sys/ufs/ufs/ufs_lookup.c:258
#8  VOP_LOOKUP+0x58 sys/kern/vfs_vops.c:85
#9  vfs_lookup+0x6e5 sys/kern/vfs_lookup.c:561
#10 namei+0x36a sys/kern/vfs_lookup.c:245
#11 vn_open+0x105 sys/kern/vfs_vnops.c:146
#12 doopenat+0x26a sys/kern/vfs_syscalls.c:1128
#13 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
#13 syscall+0x489 sys/arch/amd64/amd64/trap.c:585
#14 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd806f104810)
#0  witness_lock+0x44d
#1  rw_enter+0x3e1 sys/kern/kern_rwlock.c:310
#2  rrw_enter+0x8b sys/kern/kern_rwlock.c:461
#3  VOP_LOCK+0x87 sys/kern/vfs_vops.c:534
#4  vn_lock+0x84 sys/kern/vfs_vnops.c:579
#5  vget+0x1d3 sys/kern/vfs_subr.c:677
#6  cache_lookup+0x2b4 sys/kern/vfs_cache.c:224
#7  ufs_lookup+0x1ac sys/ufs/ufs/ufs_lookup.c:162
#8  VOP_LOOKUP+0x58 sys/kern/vfs_vops.c:85
#9  vfs_lookup+0x6e5 sys/kern/vfs_lookup.c:561
#10 namei+0x36a sys/kern/vfs_lookup.c:245
#11 vn_open+0x105 sys/kern/vfs_vnops.c:146
#12 doopenat+0x26a sys/kern/vfs_syscalls.c:1128
#13 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
#13 syscall+0x489 sys/arch/amd64/amd64/trap.c:585
#14 Xsyscall+0x128
ddb{0}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10223   6509K    7353K  78643K     40483        0
            pcb    13     20K      23K  78643K      2781        0
         rtable   157     22K      23K  78643K      5920        0
         ifaddr    77     24K      28K  78643K      1722        0
         sysctl     3      1K       1K  78643K         3        0
       counters    48     34K      35K  78643K       570        0
       ioctlops     0      0K       4K  78643K      4916        0
            iov     0      0K      32K  78643K      1667        0
          mount     1      1K       1K  78643K         1        0
            log     0      0K       0K  78643K         5        0
         vnodes  1433     90K      91K  78643K     12022        0
      UFS quota     1     32K      32K  78643K         1        0
      UFS mount     5     36K      36K  78643K         5        0
            shm     2      1K       9K  78643K       146        0
         VM map     2      1K       1K  78643K         2        0
            sem    11     10K      20K  78643K        21        0
        dirhash    12      2K       2K  78643K        12        0
           ACPI  1697    195K     286K  78643K     12598        0
      file desc     9     29K      49K  78643K     16302        0
          sigio     0      0K       0K  78643K       394        0
           proc    74     87K     111K  78643K      3386        0
        subproc    52      6K       8K  78643K      1079        0
    NFS srvsock     1      0K       0K  78643K         1        0
     NFS daemon     1     16K      16K  78643K         1        0
    ip_moptions     0      0K       0K  78643K       836        0
       in_multi    43      2K       3K  78643K      1735        0
    ether_multi     1      0K       0K  78643K       203        0
            mrt     1      0K       0K  78643K        80        0
    ISOFS mount     1     32K      32K  78643K         1        0
  MSDOSFS mount     1     16K      16K  78643K         1        0
           ttys   277   1235K    1235K  78643K       277        0
           exec     0      0K       2K  78643K      4199        0
     pfkey data     0      0K       0K  78643K        12        0
            tdb     3      0K       0K  78643K         3        0
        pagedep     1      8K       8K  78643K         1        0
       inodedep     1     32K      32K  78643K         1        0
         newblk     1      0K       0K  78643K         1        0
        VM swap     7     26K      26K  78643K         7        0
       UVM amap   569   1238K    1238K  78643K    198459        0
       UVM aobj   131      4K       4K  78643K       153        0
        memdesc     1      4K       4K  78643K         1        0
    crypto data     1      1K       1K  78643K         1        0
    ip6_options     0      0K       0K  78643K       925        0
            NDP    10      0K       1K  78643K       472        0
           temp   117   4220K    8310K  78643K    188470        0
         kqueue    10     14K      22K  78643K       696        0
      SYN cache     2      8K      16K  78643K         3        0
ddb{0}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       22    0        0     1     0     1     1     0     8    0
rtpcb      120     1384    0     1381    22    21     1     3     0     8    0
rtentry    112     1374    0     1331     2     0     2     2     0     8    0
unpcb      136    30513    0    30496   167   161     6     9     0     8    5
syncache   296       54    0       54    14    14     0     1     0     8    0
tcpqe       32       64    0       64     7     7     0     1     0     8    0
tcpcb      736     6167    0     6150   216   214     2    14     0     8    0
arp        120      192    0      184     1     0     1     1     0     8    0
inpcb      304    17967    0    17959   242   234     8    16     0     8    7
rttmr       72       13    0       13     4     4     0     1     0     8    0
nd6         48      355    0      347     1     0     1     1     0     8    0
pkpcb       40      180    0      180    13    13     0     1     0     8    0
kcovpl      48       83    0       79     1     0     1     1     0     8    0
ppxss      1248      57    0       57    15    15     0     1     0     8    0
pfstscr     40       29    0       29     8     8     0     1     0     8    0
pffrag     232      171    0      168    10     9     1     1     0   482    0
pffrnode    88      171    0      168    10     9     1     1     0     8    0
pffrent     40     3347    0     3344    11    10     1     1     0     8    0
pfosfp      40     1444    0     1020     5     0     5     5     0     8    0
pfosfpen   112     1444    0      723    21     0    21    21     0     8    0
pfrke_plain 168       3    0        3     2     2     0     1     0     8    0
pfrktable  1344     965    0      946     8     6     2     2     0     8    0
pftag       88       15    0        8     2     1     1     1     0     8    0
pfstitem    24       62    0       60     1     0     1     1     0     8    0
pfstkey    112      115    0      113     1     0     1     1     0     8    0
pfstate    320       89    0       87     3     2     1     3     0     8    0
pfrule     1360     772    0      632    14     2    12    12     0     8    0
art_heap8  4096       4    0        3     4     3     1     2     0     8    0
art_heap4  256     5432    0     5242    49    33    16    19     0     8    0
art_table   32     5436    0     5245     4     1     3     3     0     8    0
art_node    16     1369    0     1333     1     0     1     1     0     8    0
sysvmsgpl   40       58    0       26     2     1     1     1     0     8    0
semupl     112        5    0        5     2     2     0     1     0     8    0
semapl     112        9    0        0     1     0     1     1     0     8    0
shmpl      112      150    0       22     4     0     4     4     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino2pl    256    23520    0    22048    93     0    93    93     0     8    0
ffsino     272    23520    0    22048    99     0    99    99     0     8    0
nchpl      144    47331    0    45737    61     0    61    61     0     8    0
rtmask      32        6    0        6     2     2     0     1     0     8    0
uvmvnodes   80     6174    0        0   126     0   126   126     0     8    0
vnodes     224     6174    0        0   364     0   364   364     0     8    0
namei      1024  167717    0   167714     9     8     1     1     0     8    0
percpumem   16      297    0      261     1     0     1     1     0     8    0
vcpupl     2048     124    0        0    16     0    16    16     0     8    0
vmpool     560      235    0      111    10     1     9     9     0     8    0
pfiaddrpl  120      502    0      451     5     3     2     2     0     8    0
scsiplug    72       14    0       14     3     3     0     1     0     8    0
scxspl     216   133051    0   133051    22    21     1     8     0     8    1
plimitpl   152     1424    0     1413     1     0     1     1     0     8    0
sigapl     424    16336    0    16278     8     1     7     7     0     8    0
futexpl     64   162216    0   162216     9     8     1     1     0     8    1
knotepl    112      160    0        0     3     0     3     3     0     8    0
kqueuepl   216     3384    0     3378    77    76     1     6     0     8    0
pipepl     336     3527    0     3511    89    87     2     7     0     8    0
fdescpl    496    16295    0    16273     5     2     3     4     0     8    0
filepl     152   134857    0   134702   226   212    14    16     0     8    7
lockfpl    104     5402    0     5400     7     6     1     2     0     8    0
lockfspl    48     1869    0     1867     1     0     1     1     0     8    0
sessionpl  144      105    0       92     1     0     1     1     0     8    0
pgrppl      48      173    0      160     1     0     1     1     0     8    0
ucredpl     96    13665    0    13646     1     0     1     1     0     8    0
zombiepl   144    16278    0    16278     1     0     1     1     0     8    1
processpl  1064   16336    0    16278     4     0     4     4     0     8    0
procpl     672    42595    0    42525    26    19     7     8     0     8    0
srpgc       96      100    0      100    18    18     0     1     0     8    0
sosppl     168      148    0      148    26    25     1     1     0     8    1
sockpl     480    50060    0    50032  1095  1083    12    34     0     8    8
mcl64k     65536     38    0        0     4     0     4     4     0     8    0
mcl16k     16384      9    0        0     2     0     2     2     0     8    0
mcl12k     12288     17    0        0     2     0     2     2     0     8    0
mcl9k      9216       3    0        0     1     0     1     1     0     8    0
mcl8k      8192      17    0        0     3     1     2     3     0     8    0
mcl4k      4096      17    0        0     3     0     3     3     0     8    0
mcl2k2     2112       4    0        0     1     0     1     1     0     8    0
mcl2k      2048     278    0        0    22     3    19    22     0     8    0
mtagpl      96      771    0        0    16     1    15    16     0     8    0
mbufpl     256     1793    0        0    97     1    96    97     0     8    0
bufpl      288    33152    0    26841   454     0   454   454     0     8    0
anonpl      24  4862323    0  4836817   508   331   177   200     0   186   19
amapchunkpl 152  491893    0   491066   111    77    34    46     0   158    0
amappl16   200    62841    0    61856   357   295    62    76     0     8    7
amappl15   192     2415    0     2412     6     5     1     1     0     8    0
amappl14   184      595    0      592     1     0     1     1     0     8    0
amappl13   176     2186    0     2185     1     0     1     1     0     8    0
amappl12   168     3075    0     3070     1     0     1     1     0     8    0
amappl11   160     3351    0     3335     1     0     1     1     0     8    0
amappl10   152     2731    0     2719     1     0     1     1     0     8    0
amappl9    144     1683    0     1678     1     0     1     1     0     8    0
amappl8    136     3000    0     2886     7     3     4     4     0     8    0
amappl7    128     1463    0     1452     1     0     1     1     0     8    0
amappl6    120     1879    0     1855     1     0     1     1     0     8    0
amappl5    112    15199    0    15165     2     0     2     2     0     8    0
amappl4    104     7470    0     7436     1     0     1     1     0     8    0
amappl3     96     5160    0     5134     1     0     1     1     0     8    0
amappl2     88     3780    0     3726     2     0     2     2     0     8    0
amappl1     80   288791    0   288284    14     2    12    13     0     8    0
amappl      88   196395    0   196094    11     3     8     8     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72      152    0       22     4     1     3     3     0     8    0
uaddrrnd    24    16530    0    16384     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24    16530    0    16384     1     0     1     1     0     8    0
vmmpekpl   168   111123    0   111069     3     0     3     3     0     8    0
vmmpepl    168  1525223    0  1522381   609   455   154   154     0   357   19
vmsppl     368    16529    0    16384    15     1    14    14     0     8    0
rwobjpl     56   370384    0   362040   174    53   121   124     0     8    0
pdppl      4096   33068    0    32892   306   128   178   178     0     8    2
pvpl        32  8059724    0  8035565   692   460   232   263     0   265   26
pmappl     248    16529    0    16384    10     0    10    10     0     8    0
extentpl    40       57    0       38     1     0     1     1     0     8    0
phpool     112     1501    0      483    30     0    30    30     0     8    0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:440
panic(ffffffff824821ee) at panic+0x177 sys/kern/subr_prf.c:202
ufs_lookup() at ufs_lookup+0x174c ufs_dirbad sys/ufs/ufs/ufs_lookup.c:609 [inline]
ufs_lookup() at ufs_lookup+0x174c sys/ufs/ufs/ufs_lookup.c:444
VOP_LOOKUP(fffffd806f69b738,ffff8000211dbdc8,ffff8000211dbdf8) at VOP_LOOKUP+0x58 sys/kern/vfs_vops.c:85
vfs_lookup(ffff8000211dbd98) at vfs_lookup+0x6e5 sys/kern/vfs_lookup.c:561
namei(ffff8000211dbd98) at namei+0x36a sys/kern/vfs_lookup.c:245
vn_open(ffff8000211dbd98,1,0) at vn_open+0x105 sys/kern/vfs_vnops.c:146
doopenat(ffff800021193ce8,ffffff9c,7f7ffffd3c60,0,0,ffff8000211dbf80) at doopenat+0x26a sys/kern/vfs_syscalls.c:1128
syscall(ffff8000211dbff0) at syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
syscall(ffff8000211dbff0) at syscall+0x489 sys/arch/amd64/amd64/trap.c:585
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7f7ffffd3c50, count: -10
ddb{0}> machine ddbcpu 1
Stopped at      x86_ipi_db+0x1a:        addq    $0x8,%rsp
x86_ipi_db(ffff800020d38ff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23
acpicpu_idle() at acpicpu_idle+0x312 sys/dev/acpi/acpicpu.c:1206
sched_idle(ffff800020d38ff0) at sched_idle+0x417 sys/kern/kern_sched.c:178
end trace frame: 0x0, count: 10
ddb{1}> trace
x86_ipi_db(ffff800020d38ff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23
acpicpu_idle() at acpicpu_idle+0x312 sys/dev/acpi/acpicpu.c:1206
sched_idle(ffff800020d38ff0) at sched_idle+0x417 sys/kern/kern_sched.c:178
end trace frame: 0x0, count: -5

Crashes (44):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/01/14 02:48 openbsd a5505455aa34 b8d780ab .config console log report ci-openbsd-multicore panic: bad dir
2022/01/13 22:42 openbsd faa1737afaee b8d780ab .config console log report ci-openbsd-main panic: bad dir
2022/01/13 10:11 openbsd 5e6f4d1273cf 44d1319a .config console log report ci-openbsd-multicore panic: bad dir
2022/01/13 09:37 openbsd 5e6f4d1273cf 44d1319a .config console log report ci-openbsd-multicore panic: bad dir
2022/01/13 08:21 openbsd 5e6f4d1273cf 44d1319a .config console log report ci-openbsd-multicore panic: bad dir
2022/01/13 07:44 openbsd 5e6f4d1273cf 44d1319a .config console log report ci-openbsd-multicore panic: bad dir
2022/01/13 06:21 openbsd 5e6f4d1273cf 44d1319a .config console log report ci-openbsd-multicore panic: bad dir
2022/01/12 12:17 openbsd 7b05f821b4fe 44d1319a .config console log report ci-openbsd-multicore panic: bad dir
2022/01/12 08:32 openbsd b3f16bd23df6 44d1319a .config console log report ci-openbsd-multicore panic: bad dir
2022/01/12 08:08 openbsd b3f16bd23df6 44d1319a .config console log report ci-openbsd-multicore panic: bad dir
2022/01/12 06:33 openbsd b3f16bd23df6 44d1319a .config console log report ci-openbsd-multicore panic: bad dir
2022/01/11 16:22 openbsd 8e544e80ad05 1884f55a .config console log report ci-openbsd-multicore panic: bad dir
2022/01/11 13:47 openbsd 8e544e80ad05 1884f55a .config console log report ci-openbsd-multicore panic: bad dir
2022/01/11 11:34 openbsd 8e544e80ad05 1884f55a .config console log report ci-openbsd-multicore panic: bad dir
2022/01/11 11:31 openbsd 8e544e80ad05 1884f55a .config console log report ci-openbsd-multicore panic: bad dir
2022/01/11 09:05 openbsd 8e544e80ad05 1884f55a .config console log report ci-openbsd-multicore panic: bad dir
2022/01/11 04:31 openbsd 49e0d069cc8b ddb0ab8c .config console log report ci-openbsd-multicore panic: bad dir
2022/01/11 00:55 openbsd 49e0d069cc8b ddb0ab8c .config console log report ci-openbsd-main panic: bad dir
2022/01/10 21:37 openbsd 49e0d069cc8b ddb0ab8c .config console log report ci-openbsd-multicore panic: bad dir
2022/01/10 15:05 openbsd c5a78bee8a8d 2ca0d385 .config console log report ci-openbsd-multicore panic: bad dir
2022/01/10 07:55 openbsd c010faf502fa 2ca0d385 .config console log report ci-openbsd-main panic: bad dir
2022/01/10 04:59 openbsd c010faf502fa 2ca0d385 .config console log report ci-openbsd-multicore panic: bad dir
2022/01/10 03:25 openbsd c010faf502fa 2ca0d385 .config console log report ci-openbsd-multicore panic: bad dir
2022/01/09 20:38 openbsd c010faf502fa 2ca0d385 .config console log report ci-openbsd-multicore panic: bad dir
2022/01/09 19:09 openbsd d83d3c9f7b36 2ca0d385 .config console log report ci-openbsd-multicore panic: bad dir
2022/01/09 15:05 openbsd d83d3c9f7b36 2ca0d385 .config console log report ci-openbsd-multicore panic: bad dir
2022/01/09 10:32 openbsd d83d3c9f7b36 2ca0d385 .config console log report ci-openbsd-multicore panic: bad dir
2022/01/09 01:52 openbsd c9b8d2f60ecb 2ca0d385 .config console log report ci-openbsd-multicore panic: bad dir
2022/01/08 08:54 openbsd 9dd2bbd118d9 2ca0d385 .config console log report ci-openbsd-multicore panic: bad dir
2022/01/08 06:41 openbsd 9dd2bbd118d9 2ca0d385 .config console log report ci-openbsd-multicore panic: bad dir
2022/01/08 06:18 openbsd 9dd2bbd118d9 2ca0d385 .config console log report ci-openbsd-multicore panic: bad dir
2022/01/07 23:34 openbsd 4b3400b047aa 2ca0d385 .config console log report ci-openbsd-multicore panic: bad dir
2022/01/07 16:43 openbsd 4b3400b047aa 2ca0d385 .config console log report ci-openbsd-multicore panic: bad dir
2022/01/07 10:34 openbsd 3fed8fd5e758 6acc789a .config console log report ci-openbsd-multicore panic: bad dir
2022/01/07 09:34 openbsd 3fed8fd5e758 6acc789a .config console log report ci-openbsd-multicore panic: bad dir
2022/01/06 14:49 openbsd 64094178f050 6acc789a .config console log report ci-openbsd-multicore panic: bad dir
2022/01/06 11:45 openbsd 64094178f050 6acc789a .config console log report ci-openbsd-multicore panic: bad dir
2022/01/06 11:22 openbsd 64094178f050 6acc789a .config console log report ci-openbsd-multicore panic: bad dir
2022/01/05 17:30 openbsd bce33954026f 6acc789a .config console log report ci-openbsd-multicore panic: bad dir
2022/01/05 16:27 openbsd bce33954026f 6acc789a .config console log report ci-openbsd-multicore panic: bad dir
2022/01/05 01:41 openbsd 9ccbb9b1bfb3 0a2584dd .config console log report ci-openbsd-multicore panic: bad dir
2022/01/04 06:19 openbsd 5cd0c9a55ccf 7f723fbe .config console log report ci-openbsd-main panic: bad dir
2022/01/02 06:18 openbsd 17a80e6ed03a e1768e9c .config console log report ci-openbsd-main panic: bad dir
* Struck through repros no longer work on HEAD.