panic: vop_generic_badop
Stopped at db_enter+0x18: addq $0x8,%rsp
TID PID UID PRFLAGS PFLAGS CPU COMMAND
*302798 21851 0 0x2 0 0 syz-executor.2
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff8271a401) at panic+0x161 sys/kern/subr_prf.c:198
vop_generic_badop(ffff80002c01a828) at vop_generic_badop+0x1b sys/kern/vfs_default.c:133
VOP_STRATEGY(fffffd8077b077e8,fffffd8068569018) at VOP_STRATEGY+0x9b sys/kern/vfs_vops.c:628
bwrite(fffffd8068569018) at bwrite+0x1e7 sys/kern/vfs_bio.c:760
VOP_BWRITE(fffffd8068569018) at VOP_BWRITE+0x4a sys/kern/vfs_vops.c:640
ufs_mkdir(ffff80002c01aac0) at ufs_mkdir+0x6b4 sys/ufs/ufs/ufs_vnops.c:1236
VOP_MKDIR(fffffd8066a93a58,ffff80002c01ac20,ffff80002c01ac50,ffff80002c01ab50) at VOP_MKDIR+0xbf sys/kern/vfs_vops.c:388
domkdirat(ffff800025e21928,ffffff9c,7f7fffffb7d0,1ff) at domkdirat+0x121 sys/kern/vfs_syscalls.c:3112
syscall(ffff80002c01add0) at syscall+0x4e6 sys/arch/amd64/amd64/trap.c:626
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7f7fffffb840, count: 4
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports. Insufficient info makes it difficult to find and fix bugs.
ddb>
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
*cpu0: vop_generic_badop
ddb> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff8271a401) at panic+0x161 sys/kern/subr_prf.c:198
vop_generic_badop(ffff80002c01a828) at vop_generic_badop+0x1b sys/kern/vfs_default.c:133
VOP_STRATEGY(fffffd8077b077e8,fffffd8068569018) at VOP_STRATEGY+0x9b sys/kern/vfs_vops.c:628
bwrite(fffffd8068569018) at bwrite+0x1e7 sys/kern/vfs_bio.c:760
VOP_BWRITE(fffffd8068569018) at VOP_BWRITE+0x4a sys/kern/vfs_vops.c:640
ufs_mkdir(ffff80002c01aac0) at ufs_mkdir+0x6b4 sys/ufs/ufs/ufs_vnops.c:1236
VOP_MKDIR(fffffd8066a93a58,ffff80002c01ac20,ffff80002c01ac50,ffff80002c01ab50) at VOP_MKDIR+0xbf sys/kern/vfs_vops.c:388
domkdirat(ffff800025e21928,ffffff9c,7f7fffffb7d0,1ff) at domkdirat+0x121 sys/kern/vfs_syscalls.c:3112
syscall(ffff80002c01add0) at syscall+0x4e6 sys/arch/amd64/amd64/trap.c:626
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7f7fffffb840, count: -11
ddb> show registers
rdi 0
rsi 0x1
rbp 0xffff80002c01a760
rbx 0x6000010 __kernel_phys_end+0x3200010
rdx 0
rcx 0
rax 0xffff800025e21928
r8 0x101010101010101
r9 0x8080808080808080
r10 0x95ccaf6d23fd7f58
r11 0x6ab512e700fe685
r12 0
r13 0x2000000 __kernel_phys_base+0x1000000
r14 0
r15 0x1
rip 0xffffffff8206d618 db_enter+0x18
cs 0x8
rflags 0x246
rsp 0xffff80002c01a750
ss 0
db_enter+0x18: addq $0x8,%rsp
ddb> show proc
PROC (syz-executor.2) pid=302798 stat=onproc
flags process=2<EXEC> proc=0
pri=17, usrpri=84, nice=20
forw=0xffffffffffffffff, list=0xffff80002c01d8b0,0xffff800027fdb8f0
process=0xffff80002e8743f8 user=0xffff80002c015000, vmspace=0xfffffd807504bef0
estcpu=36, cpticks=0, pctcpu=0.17
user=0, sys=0, intr=0
ddb> ps
PID TID PPID UID S FLAGS WAIT COMMAND
16463 400472 72532 0 2 0 syz-executor.5
16463 340915 72532 0 2 0x4000000 syz-executor.5
16463 180780 72532 0 3 0x4000080 fsleep syz-executor.5
16463 296111 72532 0 3 0x4000080 fsleep syz-executor.5
27109 197465 54214 60928 2 0x10 syz-executor.7
27109 403587 54214 60928 3 0x4000090 fsleep syz-executor.7
27109 431609 54214 60928 2 0x4000010 syz-executor.7
*21851 302798 86368 0 7 0x2 syz-executor.2
93181 298948 1 0 3 0x100083 ttyin getty
67923 51621 86368 0 2 0x2 syz-executor.0
87006 440368 86368 0 2 0x2 syz-executor.4
1330 334717 86368 0 2 0x2 syz-executor.1
79472 58327 0 0 3 0x14280 nfsidl nfsio
11726 18235 0 0 3 0x14280 nfsidl nfsio
57542 445178 0 0 3 0x14280 nfsidl nfsio
76355 391260 0 0 3 0x14280 nfsidl nfsio
59737 18474 0 0 3 0x14280 nfsidl nfsio
91531 229414 0 0 3 0x14280 nfsidl nfsio
87744 208837 0 0 3 0x14280 nfsidl nfsio
58135 248425 0 0 3 0x14280 nfsidl nfsio
97629 292056 0 0 3 0x14280 nfsidl nfsio
2901 167795 0 0 3 0x14280 nfsidl nfsio
15480 194776 0 0 3 0x14280 nfsidl nfsio
45040 64695 0 0 3 0x14280 nfsidl nfsio
1485 377623 0 0 3 0x14280 nfsidl nfsio
56571 317134 0 0 3 0x14280 nfsidl nfsio
35223 253867 0 0 3 0x14280 nfsidl nfsio
79858 307751 0 0 3 0x14280 nfsidl nfsio
16193 58304 0 0 3 0x14280 nfsidl nfsio
68025 365297 0 0 3 0x14280 nfsidl nfsio
75869 193254 0 0 3 0x14280 nfsidl nfsio
8393 473488 0 0 3 0x14280 nfsidl nfsio
84225 198443 86368 0 3 0x82 nanoslp syz-executor.3
72532 395270 86368 0 3 0x82 nanoslp syz-executor.5
23584 312264 86368 0 2 0x2 syz-executor.6
54214 413719 86368 0 3 0x82 nanoslp syz-executor.7
39303 472791 0 0 3 0x14200 acct acct
50054 8955 0 0 3 0x14200 bored sosplice
86368 513238 98528 0 3 0x82 wait syz-fuzzer
86368 267265 98528 0 3 0x4000082 nanoslp syz-fuzzer
86368 424553 98528 0 3 0x4000082 thrsleep syz-fuzzer
86368 512082 98528 0 3 0x4000082 thrsleep syz-fuzzer
86368 187268 98528 0 3 0x4000082 wait syz-fuzzer
86368 69167 98528 0 3 0x4000082 thrsleep syz-fuzzer
86368 178388 98528 0 3 0x4000082 kqread syz-fuzzer
86368 142203 98528 0 3 0x4000082 wait syz-fuzzer
86368 134585 98528 0 3 0x4000082 thrsleep syz-fuzzer
86368 443603 98528 0 3 0x4000082 wait syz-fuzzer
86368 226753 98528 0 3 0x4000082 wait syz-fuzzer
86368 76829 98528 0 3 0x4000082 thrsleep syz-fuzzer
86368 341989 98528 0 3 0x4000082 wait syz-fuzzer
86368 397764 98528 0 3 0x4000082 wait syz-fuzzer
86368 277767 98528 0 3 0x4000082 wait syz-fuzzer
98528 96978 98099 0 3 0x10008a sigsusp ksh
98099 439006 32459 0 3 0x9a kqread sshd
32459 184660 1 0 3 0x88 kqread sshd
62081 324650 60771 73 3 0x1100090 kqread syslogd
60771 388585 1 0 3 0x100082 netio syslogd
35610 232512 1 0 3 0x100080 kqread resolvd
67522 513136 0 0 3 0x14200 bored smr
53837 396065 0 0 2 0x14200 zerothread
5241 484412 0 0 3 0x14200 aiodoned aiodoned
46702 49781 0 0 3 0x14200 syncer update
598 378640 0 0 3 0x14200 cleaner cleaner
87120 185605 0 0 3 0x14200 reaper reaper
22282 505321 0 0 3 0x14200 pgdaemon pagedaemon
35675 217996 0 0 3 0x14200 bored viomb
28936 429846 0 0 3 0x40014200 acpi0 acpi0
65018 32576 0 0 3 0x14200 bored softnet
84312 351457 0 0 3 0x14200 bored softnet
28447 403173 0 0 3 0x14200 bored softnet
81677 482235 0 0 3 0x14200 bored softnet
99418 210953 0 0 3 0x14200 bored systqmp
97724 48594 0 0 3 0x14200 bored systq
27603 355563 0 0 3 0x40014200 bored softclock
79703 404321 0 0 3 0x40014200 idle0
1 68238 0 0 3 0x82 wait init
0 0 -1 0 3 0x10200 scheduler swapper
ddb> show all locks
No such command
ddb> show malloc
Type InUse MemUse HighUse Limit Requests Type Lim
devbuf 10228 6438K 7695K 78643K 45094 0
pcb 13 20K 24K 78643K 3330 0
rtable 206 16K 18K 78643K 4971 0
ifaddr 90 26K 29K 78643K 2219 0
sysctl 2 0K 2K 78643K 44 0
counters 29 17K 17K 78643K 672 0
ioctlops 0 0K 4K 78643K 7263 0
iov 0 0K 32K 78643K 3097 0
mount 1 1K 1K 78643K 1 0
log 0 0K 0K 78643K 4 0
vnodes 1652 103K 104K 78643K 19859 0
UFS quota 1 32K 32K 78643K 1 0
UFS mount 5 36K 36K 78643K 5 0
shm 3 5K 13K 78643K 142 0
VM map 2 0K 0K 78643K 2 0
sem 12 0K 0K 78643K 2597 0
dirhash 12 2K 2K 78643K 12 0
ACPI 1697 195K 286K 78643K 12548 0
file desc 12 41K 77K 78643K 13681 0
sigio 1 0K 0K 78643K 212 0
proc 59 43K 75K 78643K 3275 0
subproc 104 6K 6K 78643K 1123 0
NFS srvsock 1 0K 0K 78643K 1 0
NFS daemon 1 16K 16K 78643K 1 0
ip_moptions 0 0K 0K 78643K 1115 0
in_multi 76 5K 6K 78643K 1574 0
ether_multi 1 0K 0K 78643K 47 0
mrt 1 0K 0K 78643K 47 0
ISOFS mount 1 32K 32K 78643K 1 0
MSDOSFS mount 1 16K 16K 78643K 1 0
ttys 241 1076K 1076K 78643K 241 0
exec 0 0K 1K 78643K 3895 0
pfkey data 0 0K 0K 78643K 75 0
tdb 3 0K 0K 78643K 3 0
pagedep 1 8K 8K 78643K 1 0
inodedep 1 32K 32K 78643K 1 0
newblk 1 0K 0K 78643K 1 0
VM swap 8 62K 64K 78643K 10 0
UVM amap 309 90K 104K 78643K 88999 0
UVM aobj 131 4K 4K 78643K 139 0
memdesc 1 4K 4K 78643K 1 0
crypto data 1 1K 1K 78643K 1 0
ip6_options 0 0K 0K 78643K 590 0
NDP 16 0K 2K 78643K 734 0
temp 144 5770K 6810K 78643K 225949 0
kqueue 6 10K 24K 78643K 1092 0
SYN cache 2 16K 16K 78643K 2 0
ddb> show all pools
Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
rtpcb 120 1979 0 1978 22 21 1 3 0 8 0
rtentry 112 1426 0 1342 7 4 3 4 0 8 0
unpcb 144 16412 0 16335 167 163 4 10 0 8 1
syncache 296 136 0 136 27 26 1 1 0 8 1
sackhl 24 1 0 1 1 1 0 1 0 8 0
tcpqe 32 154 100 154 14 14 0 1 0 8 0
tcpcb 776 5827 0 5818 190 182 8 14 0 8 5
arp 88 190 0 174 1 0 1 1 0 8 0
ipq 40 25 0 25 8 8 0 1 0 8 0
ipqe 40 75 0 75 8 8 0 1 0 8 0
inpcb 336 16032 0 15991 219 212 7 12 0 8 3
ip6q 72 5 0 5 2 2 0 1 0 8 0
ip6af 40 9 0 9 2 2 0 1 0 8 0
nd6 48 340 0 322 1 0 1 1 0 8 0
pkpcb 40 32 0 32 8 8 0 1 0 8 0
kcovpl 48 86 0 78 1 0 1 1 0 8 0
mppekey 1024 45 0 45 4 4 0 1 0 8 0
ppxss 1160 251 0 251 27 27 0 1 0 8 0
pppxif 1360 108 0 108 15 15 0 1 0 8 0
pfstscr 40 17 0 14 1 0 1 1 0 8 0
pfosfp 40 2446 0 2390 1 0 1 1 0 8 0
pfosfpen 112 2446 0 2164 9 0 9 9 0 8 0
pfanchor 1280 89 0 82 2 1 1 1 0 8 0
pfstitem 24 12 0 6 1 0 1 1 0 8 0
pfstkey 128 133 0 129 1 0 1 1 0 8 0
pfstate 352 116 0 113 1 0 1 1 0 8 0
rttmr 136 8 0 8 3 3 0 1 0 8 0
art_heap8 4096 6 0 4 4 2 2 3 0 8 0
art_heap4 256 7687 0 7336 79 54 25 30 0 8 0
art_table 32 7693 0 7340 7 3 4 4 0 8 0
art_node 16 1419 0 1346 1 0 1 1 0 8 0
sysvmsgpl 40 3 0 3 1 1 0 1 0 8 0
semupl 112 6 0 6 1 1 0 1 0 8 0
semapl 112 2595 0 2585 1 0 1 1 0 8 0
shmpl 112 136 0 8 4 0 4 4 0 8 0
dirhash 1024 17 0 0 3 0 3 3 0 8 0
dino2pl 256 20691 0 19190 96 1 95 95 0 8 0
ffsino 240 20692 0 19190 89 0 89 89 0 8 0
nchpl 144 39636 0 38006 63 0 63 63 0 8 0
rtmask 32 15 0 15 4 4 0 1 0 8 0
uvmvnodes 80 5926 0 0 121 0 121 121 0 8 0
vnodes 216 5926 0 0 330 0 330 330 0 8 0
namei 1024 168225 0 168222 6 5 1 2 0 8 0
vmpool 664 102 0 102 15 15 0 1 0 8 0
kstatmem 264 972 0 940 10 7 3 3 0 8 0
scsiplug 72 26 0 26 8 8 0 1 0 8 0
scxspl 216 114949 0 114949 28 27 1 8 0 8 1
plimitpl 152 1523 0 1509 1 0 1 1 0 8 0
sigapl 424 14043 0 13984 10 2 8 8 0 8 0
futexpl 64 151339 0 151336 4 3 1 1 0 8 0
knotepl 120 214838 0 214774 134 127 7 14 0 8 4
kqueuepl 184 3282 0 3277 48 47 1 6 0 8 0
pipepl 288 3644 0 3615 70 67 3 8 0 8 0
fdescpl 432 13805 0 13785 4 0 4 4 0 8 0
filepl 120 128552 0 128225 179 167 12 18 0 8 0
lockfpl 104 4596 0 4595 10 9 1 2 0 8 0
lockfspl 48 1368 0 1367 1 0 1 1 0 8 0
sessionpl 144 111 0 96 1 0 1 1 0 8 0
pgrppl 48 241 0 226 1 0 1 1 0 8 0
ucredpl 104 14137 0 14126 1 0 1 1 0 8 0
zombiepl 144 13985 0 13984 2 1 1 1 0 8 0
processpl 1008 14043 0 13984 11 2 9 9 0 8 0
procpl 696 35426 0 35348 23 14 9 10 0 8 0
sosppl 168 172 0 171 19 18 1 1 0 8 0
sockpl 456 34472 0 34353 742 726 16 36 0 8 0
mcl64k 65536 919 0 919 36 35 1 1 0 8 1
mcl16k 16384 290 0 290 39 38 1 1 0 8 1
mcl12k 12288 486 0 486 37 36 1 1 0 8 1
mcl9k 9216 127 0 127 41 40 1 1 0 8 1
mcl8k 8192 1003 0 1003 26 25 1 1 0 8 1
mcl4k 4096 1827 0 1827 14 13 1 1 0 8 1
mcl2k2 2112 108 0 108 43 43 0 1 0 8 0
mcl2k 2048 105378 0 105331 88 80 8 31 0 8 1
mtagpl 96 6214 0 6214 62 62 0 33 0 8 0
mbufpl 256 346562 0 346469 1246 1230 16 241 0 8 7
bufpl 288 26639 0 20236 458 0 458 458 0 8 0
anonpl 24 2632366 0 2615350 248 127 121 145 0 188 0
amapchunkpl 152 260639 0 259995 118 86 32 43 0 158 0
amappl16 200 23020 0 22351 153 117 36 48 0 8 0
amappl15 192 101 0 100 1 0 1 1 0 8 0
amappl14 184 436 0 425 2 0 2 2 0 8 0
amappl13 176 8 0 8 2 2 0 1 0 8 0
amappl12 168 1402 0 1397 1 0 1 1 0 8 0
amappl11 160 54 0 48 1 0 1 1 0 8 0
amappl10 152 122 0 111 1 0 1 1 0 8 0
amappl9 144 1000 0 999 1 0 1 1 0 8 0
amappl8 136 929 0 822 4 0 4 4 0 8 0
amappl7 128 329 0 306 2 0 2 2 0 8 0
amappl6 120 618 0 601 1 0 1 1 0 8 0
amappl5 112 593 0 590 1 0 1 1 0 8 0
amappl4 104 1599 0 1570 2 1 1 2 0 8 0
amappl3 96 38892 0 38857 2 0 2 2 0 8 0
amappl2 88 15093 0 15041 3 1 2 3 0 8 0
amappl1 80 312372 0 311851 24 10 14 22 0 8 0
amappl 88 87460 0 87306 5 0 5 5 0 92 0
dma4096 4096 1 0 1 1 1 0 1 0 8 0
dma1024 1024 1 0 0 1 0 1 1 0 8 0
dma256 256 6 0 6 1 1 0 1 0 8 0
dma128 128 253 0 253 1 1 0 1 0 8 0
dma64 64 6 0 6 1 1 0 1 0 8 0
dma32 32 7 0 7 1 1 0 1 0 8 0
dma16 16 18 0 17 1 0 1 1 0 8 0
aobjpl 72 138 0 8 3 0 3 3 0 8 0
uaddrrnd 24 13907 0 13887 1 0 1 1 0 8 0
uaddrbest 32 2 0 0 1 0 1 1 0 8 0
uaddr 24 13907 0 13887 1 0 1 1 0 8 0
vmmpekpl 168 107605 0 107551 4 0 4 4 0 8 0
vmmpepl 168 1289696 0 1287413 394 259 135 159 0 357 1
vmsppl 272 13906 0 13887 4 2 2 3 0 8 0
rwobjpl 24 328784 0 321139 52 3 49 50 0 8 0
pdppl 4096 27820 0 27774 970 912 58 70 0 8 12
pvpl 32 5260152 0 5238352 471 264 207 269 0 265 0
pmappl 216 13906 0 13887 2 0 2 2 0 8 0
extentpl 40 56 0 38 1 0 1 1 0 8 0
phpool 112 3469 0 2697 29 2 27 29 0 8 0
ddb> machine ddbcpu 0
No such command
ddb> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff8271a401) at panic+0x161 sys/kern/subr_prf.c:198
vop_generic_badop(ffff80002c01a828) at vop_generic_badop+0x1b sys/kern/vfs_default.c:133
VOP_STRATEGY(fffffd8077b077e8,fffffd8068569018) at VOP_STRATEGY+0x9b sys/kern/vfs_vops.c:628
bwrite(fffffd8068569018) at bwrite+0x1e7 sys/kern/vfs_bio.c:760
VOP_BWRITE(fffffd8068569018) at VOP_BWRITE+0x4a sys/kern/vfs_vops.c:640
ufs_mkdir(ffff80002c01aac0) at ufs_mkdir+0x6b4 sys/ufs/ufs/ufs_vnops.c:1236
VOP_MKDIR(fffffd8066a93a58,ffff80002c01ac20,ffff80002c01ac50,ffff80002c01ab50) at VOP_MKDIR+0xbf sys/kern/vfs_vops.c:388
domkdirat(ffff800025e21928,ffffff9c,7f7fffffb7d0,1ff) at domkdirat+0x121 sys/kern/vfs_syscalls.c:3112
syscall(ffff80002c01add0) at syscall+0x4e6 sys/arch/amd64/amd64/trap.c:626
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7f7fffffb840, count: -11
ddb> machine ddbcpu 1
No such command
ddb> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff8271a401) at panic+0x161 sys/kern/subr_prf.c:198
vop_generic_badop(ffff80002c01a828) at vop_generic_badop+0x1b sys/kern/vfs_default.c:133
VOP_STRATEGY(fffffd8077b077e8,fffffd8068569018) at VOP_STRATEGY+0x9b sys/kern/vfs_vops.c:628
bwrite(fffffd8068569018) at bwrite+0x1e7 sys/kern/vfs_bio.c:760
VOP_BWRITE(fffffd8068569018) at VOP_BWRITE+0x4a sys/kern/vfs_vops.c:640
ufs_mkdir(ffff80002c01aac0) at ufs_mkdir+0x6b4 sys/ufs/ufs/ufs_vnops.c:1236
VOP_MKDIR(fffffd8066a93a58,ffff80002c01ac20,ffff80002c01ac50,ffff80002c01ab50) at VOP_MKDIR+0xbf sys/kern/vfs_vops.c:388
domkdirat(ffff800025e21928,ffffff9c,7f7fffffb7d0,1ff) at domkdirat+0x121 sys/kern/vfs_syscalls.c:3112
syscall(ffff80002c01add0) at syscall+0x4e6 sys/arch/amd64/amd64/trap.c:626
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7f7fffffb840, count: -11