kern.securelevel: 0 -> 1
creating runtime link editor directory cache.
preserving editor files.
starting network daemons: sshd.
starting local daemons:.
Tue Jul 30 20:40:58 PDT 2019

OpenBSD/amd64 (ci-openbsd-main-9.c.syzkaller.internal) (tty00)

Warning: Permanently added '10.128.0.167' (ECDSA) to the list of known hosts.
2019/07/30 20:41:12 parsed 1 programs
2019/07/30 20:41:17 executed programs: 0
2019/07/30 20:41:22 executed programs: 276
2019/07/30 20:41:27 executed programs: 561
login: panic: fifo_badop called

Stopped at      db_enter+0x18:  addq    $0x8,%rsp

    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND

*212084  54159      0         0x2          0    0  syz-executor.1

db_enter() at db_enter+0x18

panic() at panic+0x15c

fifo_badop(ffff8000149ee128) at fifo_badop+0x14

VOP_STRATEGY(fffffd803275ba00) at VOP_STRATEGY+0x99

bwrite(fffffd803275ba00) at bwrite+0x203

VOP_BWRITE(fffffd803275ba00) at VOP_BWRITE+0x4a

ufs_mkdir(ffff8000149ee3b8) at ufs_mkdir+0x6c0

VOP_MKDIR(fffffd803c56b598,ffff8000149ee510,ffff8000149ee560,ffff8000149ee440) at VOP_MKDIR+0x6a

domkdirat(ffff8000ffff9b30,ffffff9c,7f7ffffd26e0,1ff) at domkdirat+0x121

syscall(ffff8000149ee6e0) at syscall+0x508

Xsyscall(6,88,7f7ffffd26e0,88,0,7f7ffffd2704) at Xsyscall+0x128

end of kernel

end trace frame: 0x7f7ffffd2750, count: 4

https://www.openbsd.org/ddb.html describes the minimum info required in bug

reports.  Insufficient info makes it difficult to find and fix bugs.

ddb> 

ddb> set $lines = 0

ddb> set $maxwidth = 0

ddb> show panic

fifo_badop called

ddb> trace

db_enter() at db_enter+0x18

panic() at panic+0x15c

fifo_badop(ffff8000149ee128) at fifo_badop+0x14

VOP_STRATEGY(fffffd803275ba00) at VOP_STRATEGY+0x99

bwrite(fffffd803275ba00) at bwrite+0x203

VOP_BWRITE(fffffd803275ba00) at VOP_BWRITE+0x4a

ufs_mkdir(ffff8000149ee3b8) at ufs_mkdir+0x6c0

VOP_MKDIR(fffffd803c56b598,ffff8000149ee510,ffff8000149ee560,ffff8000149ee440) at VOP_MKDIR+0x6a

domkdirat(ffff8000ffff9b30,ffffff9c,7f7ffffd26e0,1ff) at domkdirat+0x121

syscall(ffff8000149ee6e0) at syscall+0x508

Xsyscall(6,88,7f7ffffd26e0,88,0,7f7ffffd2704) at Xsyscall+0x128

end of kernel

end trace frame: 0x7f7ffffd2750, count: -11

ddb>