Warning: Permanently added '10.128.0.232' (ECDSA) to the list of known hosts. 2019/10/15 19:14:14 parsed 1 programs 2019/10/15 19:14:20 executed programs: 0 2019/10/15 19:14:26 executed programs: 6 panic: Data modified on freelist: word 5 of object 0xffff8000006a0800 size 0x100 previous type devbuf (0xd != 0xdeadbeef) Stopped at db_enter+0x18: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND * 59837 74774 0 0 0x4000000 0 syz-executor.0 db_enter() at db_enter+0x18 panic() at panic+0x15c malloc(100,2,a) at malloc+0xa23 bpfopen(31700,1,2000,ffff8000ffff9b30) at bpfopen+0xb5 spec_open_clone(ffff80001492e488) at spec_open_clone+0x241 spec_open(ffff80001492e488) at spec_open+0x40e VOP_OPEN(fffffd8036cdf9c0,1,fffffd803f7c6a80,ffff8000ffff9b30) at VOP_OPEN+0x6a vn_open(ffff80001492e6d8,1,0) at vn_open+0x4eb doopenat(ffff8000ffff9b30,ffffff9c,20000040,0,0,ffff80001492e8d0) at doopenat+0x28b syscall(ffff80001492e950) at syscall+0x507 Xsyscall(6,0,ffffffffffffff9f,0,3,9109ce6b0e0) at Xsyscall+0x128 end of kernel end trace frame: 0x9138cff6760, count: 4 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic Data modified on freelist: word 5 of object 0xffff8000006a0800 size 0x100 previous type devbuf (0xd != 0xdeadbeef) ddb> trace db_enter() at db_enter+0x18 panic() at panic+0x15c malloc(100,2,a) at malloc+0xa23 bpfopen(31700,1,2000,ffff8000ffff9b30) at bpfopen+0xb5 spec_open_clone(ffff80001492e488) at spec_open_clone+0x241 spec_open(ffff80001492e488) at spec_open+0x40e VOP_OPEN(fffffd8036cdf9c0,1,fffffd803f7c6a80,ffff8000ffff9b30) at VOP_OPEN+0x6a vn_open(ffff80001492e6d8,1,0) at vn_open+0x4eb doopenat(ffff8000ffff9b30,ffffff9c,20000040,0,0,ffff80001492e8d0) at doopenat+0x28b syscall(ffff80001492e950) at syscall+0x507 Xsyscall(6,0,ffffffffffffff9f,0,3,9109ce6b0e0) at Xsyscall+0x128 end of kernel end trace frame: 0x9138cff6760, count: -11 ddb> show registers rdi 0 rsi 0x1 rbp 0xffff80001492e190 rbx 0xffff80001492e240 rdx 0x2 rcx 0x1 rax 0x1 r8 0xffff80001492e150 r9 0x1 r10 0x68fee372fa5059eb r11 0xd7948a21fed90169 r12 0x3000000008 r13 0xffff80001492e1a0 r14 0x100 r15 0x1 rip 0xffffffff81e06468 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff80001492e180 ss 0x10 db_enter+0x18: addq $0x8,%rsp ddb> show proc PROC (syz-executor.0) pid=59837 stat=onproc flags process=0 proc=4000000 pri=50, usrpri=50, nice=20 forw=0xffffffffffffffff, list=0xffff8000ffff8280,0xffffffff825a3380 process=0xffff8000148a2a38 user=0xffff800014929000, vmspace=0xfffffd803f013220 estcpu=0, cpticks=1, pctcpu=0.0 user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 74774 222767 71350 0 2 0 syz-executor.0 74774 364052 71350 0 3 0x4000080 kqread syz-executor.0 *74774 59837 71350 0 7 0x4000000 syz-executor.0 71350 432615 58181 0 3 0x82 nanosleep syz-executor.0 58181 107879 79415 0 3 0x82 thrsleep syz-execprog 58181 408205 79415 0 3 0x4000082 thrsleep syz-execprog 58181 318950 79415 0 3 0x4000082 thrsleep syz-execprog 58181 515634 79415 0 3 0x4000082 thrsleep syz-execprog 58181 118833 79415 0 3 0x4000082 kqread syz-execprog 58181 137448 79415 0 3 0x4000082 thrsleep syz-execprog 58181 207775 79415 0 3 0x4000082 thrsleep syz-execprog 79415 434467 94238 0 3 0x10008a pause ksh 94238 349845 22467 0 3 0x92 select sshd 69932 210780 1 0 3 0x100083 ttyin getty 22467 520649 1 0 3 0x80 select sshd 39619 304039 33582 73 3 0x100090 kqread syslogd 33582 225303 1 0 3 0x100082 netio syslogd 95483 59277 1 77 3 0x100090 poll dhclient 33519 450344 1 0 3 0x80 poll dhclient 58110 337863 0 0 3 0x14200 pgzero zerothread 69464 83862 0 0 3 0x14200 aiodoned aiodoned 18763 300936 0 0 3 0x14200 syncer update 28978 213169 0 0 3 0x14200 cleaner cleaner 19973 405275 0 0 3 0x14200 reaper reaper 61023 256917 0 0 3 0x14200 pgdaemon pagedaemon 59024 253562 0 0 3 0x14200 bored crynlk 59140 166191 0 0 3 0x14200 bored crypto 24476 339532 0 0 3 0x40014200 acpi0 acpi0 41052 497423 0 0 3 0x14200 bored softnet 53623 60821 0 0 3 0x14200 bored systqmp 50366 392816 0 0 3 0x14200 bored systq 53369 249905 0 0 3 0x40014200 bored softclock 6619 438447 0 0 3 0x40014200 idle0 68335 297882 0 0 3 0x14200 bored smr 1 297069 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb>