panic: bad dir Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *325636 59498 0 0 0x4000000 0 syz-executor db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff8332e035) at panic+0x1cf sys/kern/subr_prf.c:198 ufs_dirbadentry(ffff80003a53eb48,ffff80003a53eb48,a0b00c71a8082e24) at ufs_dirbadentry VOP_LOOKUP(fffffd806afc68a8,ffff80003a53edc0,ffff80003a53edf0) at VOP_LOOKUP+0x6e sys/kern/vfs_vops.c:85 vfs_lookup(ffff80003a53ed90) at vfs_lookup+0x8e1 sys/kern/vfs_lookup.c:566 namei(ffff80003a53ed90) at namei+0x7aa sys/kern/vfs_lookup.c:250 domknodat(ffff80003c96f9c8,ffffff9c,400000000280,2000,1e61) at domknodat+0xb4 sys/kern/vfs_syscalls.c:1584 syscall(ffff80003a53ef90) at syscall+0x97e sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xd06d7272ba0, count: 6 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: bad dir ddb> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff8332e035) at panic+0x1cf sys/kern/subr_prf.c:198 ufs_dirbadentry(ffff80003a53eb48,ffff80003a53eb48,a0b00c71a8082e24) at ufs_dirbadentry VOP_LOOKUP(fffffd806afc68a8,ffff80003a53edc0,ffff80003a53edf0) at VOP_LOOKUP+0x6e sys/kern/vfs_vops.c:85 vfs_lookup(ffff80003a53ed90) at vfs_lookup+0x8e1 sys/kern/vfs_lookup.c:566 namei(ffff80003a53ed90) at namei+0x7aa sys/kern/vfs_lookup.c:250 domknodat(ffff80003c96f9c8,ffffff9c,400000000280,2000,1e61) at domknodat+0xb4 sys/kern/vfs_syscalls.c:1584 syscall(ffff80003a53ef90) at syscall+0x97e sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xd06d7272ba0, count: -9 ddb> show registers rdi 0 rsi 0x1 rbp 0xffff80003a53e980 rbx 0 rdx 0xffff80000002a580 rcx 0 rax 0xffff80003c96f9c8 r8 0x101010101010101 r9 0x8080808080808080 r10 0x4b280e84f9a6406 r11 0xadebc7a9ed32a559 r12 0 r13 0xfffffd806c23f000 r14 0 r15 0x1 rip 0xffffffff82956fc5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003a53e970 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb> show proc PROC (syz-executor) tid=325636 pid=59498 tcnt=4 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=51, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c96f738,0xffff80003c96e7e8 process=0xffff8000ffff4d08 user=0xffff80003a53a000, vmspace=0xfffffd806c0c5e20 estcpu=1, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 59498 69208 44152 0 2 0 syz-executor *59498 325636 44152 0 7 0x4000000 syz-executor 59498 393554 44152 0 3 0x4000080 fsleep syz-executor 59498 492470 44152 0 3 0x4000080 fsleep syz-executor 61112 189227 95511 60928 3 0x90 nanoslp syz-executor 61112 514562 95511 60928 3 0x4000090 kqread syz-executor 61112 524015 95511 60928 3 0x4000090 fsleep syz-executor 45169 72640 80629 0 3 0x82 piperd syz-executor 41519 426953 0 0 3 0x14200 acct acct 96444 417728 0 0 3 0x14200 bored sosplice 95511 437928 80629 0 3 0x82 nanoslp syz-executor 90653 186575 80629 0 3 0x82 nanoslp syz-executor 3596 247549 80629 0 3 0x82 piperd syz-executor 77406 15855 80629 0 3 0x82 piperd syz-executor 62748 495765 80629 0 3 0x82 piperd syz-executor 44152 228595 80629 0 3 0x82 nanoslp syz-executor 80629 74572 15328 0 3 0x82 wait syz-executor 15328 337948 90917 0 3 0x10008a sigsusp ksh 90917 197082 31625 0 3 0x98 kqread sshd-session 31625 215360 44848 0 3 0x92 kqread sshd-session 5364 282365 1 0 3 0x100083 ttyin getty 44848 126275 1 0 3 0x88 kqread sshd 70948 211637 27839 73 3 0x1100090 kqread syslogd 27839 442194 1 0 3 0x100082 sbwait syslogd 83796 430964 1 0 3 0x100080 kqread resolvd 38993 383479 43631 77 3 0x100092 kqread dhcpleased 1796 29365 43631 77 3 0x100092 kqread dhcpleased 43631 494614 1 0 3 0x80 kqread dhcpleased 41363 302812 0 0 3 0x14200 bored smr 85400 483578 0 0 2 0x14200 zerothread 3034 331359 0 0 3 0x14200 aiodoned aiodoned 51344 418877 0 0 3 0x14200 syncer update 78836 241564 0 0 3 0x14200 cleaner cleaner 5861 50268 0 0 3 0x14200 reaper reaper 43278 63064 0 0 3 0x14200 pgdaemon pagedaemon 41722 111600 0 0 3 0x14200 bored viomb 1014 396752 0 0 3 0x40014200 acpi0 acpi0 8168 205076 0 0 3 0x14200 bored softnet3 49299 458208 0 0 3 0x14200 bored softnet2 99750 443408 0 0 3 0x14200 bored softnet1 20553 76376 0 0 3 0x14200 bored softnet0 72818 137766 0 0 3 0x14200 bored systqmp 3606 42446 0 0 3 0x14200 bored systq 3713 183963 0 0 3 0x40014200 tmoslp softclock 50721 263760 0 0 3 0x40014200 idle0 1 171077 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10181 11106K 11243K 166960K 11575 0 pcb 17 12K 12K 166960K 43 0 rtable 243 7K 8K 166960K 562 0 pf 31 13K 15K 166960K 65 0 ifaddr 42 7K 8K 166960K 81 0 ifgroup 50 2K 2K 166960K 98 0 sysctl 1 1K 1K 166960K 1 0 counters 30 17K 17K 166960K 47 0 ioctlops 0 0K 4K 166960K 56 0 iov 0 0K 16K 166960K 9 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1404 88K 89K 166960K 1607 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 6 0 VM map 2 1K 1K 166960K 2 0 sem 8 0K 0K 166960K 9 0 dirhash 12 2K 2K 166960K 15 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 13 45K 244K 166960K 467 0 sigio 0 0K 0K 166960K 139 0 proc 60 59K 108K 166960K 672 0 subproc 72 4K 4K 166960K 126 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 38 0 in_multi 99 7K 7K 166960K 171 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 73 334K 334K 166960K 73 0 exec 0 0K 1K 166960K 536 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 178 71K 87K 166960K 5178 0 UVM aobj 10 2K 2K 166960K 10 0 pinsyscall 34 68K 100K 166960K 1632 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 20 0 NDP 13 0K 2K 166960K 54 0 temp 50 8633K 8697K 166960K 7206 0 kqueue 14 22K 28K 166960K 67 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 133 0 129 3 0 3 3 0 8 2 rtentry 112 183 0 71 4 0 4 4 0 8 0 unpcb 144 242 0 225 4 0 4 4 0 8 3 syncache 336 3 0 3 1 0 1 1 0 8 1 tcpcb 808 136 0 132 8 0 8 8 0 8 7 arp 88 30 0 12 1 0 1 1 0 8 0 inpcb 344 392 0 385 8 0 8 8 0 8 7 ip6q 72 1 0 1 1 0 1 1 0 8 1 ip6af 40 2 0 2 1 0 1 1 0 8 1 nd6 104 45 0 20 1 0 1 1 0 8 0 pkpcb 40 3 0 3 1 0 1 1 0 8 1 kcovpl 48 14 0 6 1 0 1 1 0 8 0 ppxss 1072 9 0 9 1 0 1 1 0 8 1 pppxif 1376 2 0 2 1 0 1 1 0 8 1 pfrule 1344 2 0 2 1 0 1 1 0 8 1 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 757 0 299 30 0 30 30 0 8 0 art_table 32 758 0 299 4 0 4 4 0 8 0 art_node 16 182 0 80 1 0 1 1 0 8 0 sysvmsgpl 40 6 0 4 1 0 1 1 0 8 0 semupl 112 1 0 1 1 0 1 1 0 8 1 semapl 112 7 0 1 1 0 1 1 0 8 0 shmpl 112 7 0 0 1 0 1 1 0 8 0 dirhash 1024 19 0 2 3 0 3 3 0 8 0 dino2pl 256 1981 0 467 95 0 95 95 0 8 0 ffsino 248 1981 0 467 95 0 95 95 0 8 0 nchpl 144 2484 0 791 64 0 64 64 0 8 0 uvmvnodes 80 2246 0 0 46 0 46 46 0 8 0 vnodes 216 2246 0 0 125 0 125 125 0 8 0 namei 1024 8513 0 8512 2 0 2 2 0 8 1 kstatmem 264 52 0 30 2 0 2 2 0 8 0 scxspl 216 8851 0 8851 8 0 8 8 1 8 8 plimitpl 152 95 0 79 1 0 1 1 0 8 0 sigapl 424 721 0 678 7 0 7 7 0 8 1 futexpl 64 3724 0 3721 1 0 1 1 0 8 0 knotepl 120 11153 0 11106 10 0 10 10 0 8 8 kqueuepl 184 87 0 77 1 0 1 1 0 8 0 pipepl 296 136 0 109 3 0 3 3 0 8 0 fdescpl 440 703 0 678 5 0 5 5 0 8 1 filepl 120 3240 0 3030 11 0 11 11 0 8 4 lockfpl 104 58 0 56 1 0 1 1 0 8 0 lockfspl 48 28 0 26 1 0 1 1 0 8 0 sessionpl 144 27 0 19 1 0 1 1 0 8 0 pgrppl 48 43 0 27 1 0 1 1 0 8 0 ucredpl 104 312 0 300 1 0 1 1 0 8 0 zombiepl 144 680 0 678 1 0 1 1 0 8 0 processpl 1104 721 0 678 4 0 4 4 0 8 0 procpl 656 1065 0 1017 6 0 6 6 0 8 1 sosppl 168 2 0 2 1 0 1 1 0 8 1 sockpl 528 778 0 750 7 0 7 7 0 8 4 mcl64k 65536 4 0 4 1 0 1 1 0 8 1 mcl8k 8192 12 0 12 1 0 1 1 0 8 1 mcl4k 4096 2683 0 2633 13 0 13 13 0 8 5 mcl2k 2048 430 0 429 5 0 5 5 0 8 4 mtagpl 96 8 0 5 1 0 1 1 0 8 0 mbufpl 256 6899 0 6752 19 0 19 19 0 8 2 bufpl 280 3826 0 128 265 0 265 265 0 8 0 anonpl 24 137096 0 134242 45 0 45 45 0 187 22 amapchunkpl 152 16545 0 16180 32 0 32 32 0 158 14 amappl16 200 2847 0 2825 18 7 11 14 0 8 8 amappl15 192 6 0 6 1 0 1 1 0 8 1 amappl14 184 116 0 106 1 0 1 1 0 8 0 amappl13 176 25 0 25 1 0 1 1 0 8 1 amappl12 168 1427 0 1402 3 0 3 3 0 8 1 amappl11 160 44 0 34 1 0 1 1 0 8 0 amappl10 152 9 0 9 1 0 1 1 0 8 1 amappl9 144 248 0 248 1 0 1 1 0 8 1 amappl8 136 26 0 25 1 0 1 1 0 8 0 amappl7 128 109 0 99 1 0 1 1 0 8 0 amappl6 120 236 0 233 1 0 1 1 0 8 0 amappl5 112 149 0 143 1 0 1 1 0 8 0 amappl4 104 296 0 282 1 0 1 1 0 8 0 amappl3 96 2888 0 2804 4 0 4 4 0 8 1 amappl2 88 691 0 635 2 0 2 2 0 8 0 amappl1 80 8809 0 8301 14 0 14 14 0 8 2 amappl 88 4778 0 4648 5 0 5 5 0 92 1 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma2048 2048 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 7 0 7 1 0 1 1 0 8 1 dma128 128 253 0 253 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 9 0 0 1 0 1 1 0 8 0 uaddrrnd 24 703 0 678 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 703 0 678 1 0 1 1 0 8 0 vmmpekpl 168 6883 0 6841 3 0 3 3 0 8 0 vmmpepl 168 49117 0 47607 88 0 88 88 0 357 11 vmsppl 360 702 0 678 4 0 4 4 0 8 1 rwobjpl 32 18850 0 15797 26 0 26 26 0 8 0 pdppl 4096 1412 0 1356 112 44 68 82 0 8 12 pvpl 32 326151 0 318632 114 0 114 114 0 265 38 pmappl 216 702 0 678 3 0 3 3 0 8 0 extentpl 40 55 0 38 1 0 1 1 0 8 0 phpool 112 295 0 44 8 0 8 8 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff8332e035) at panic+0x1cf sys/kern/subr_prf.c:198 ufs_dirbadentry(ffff80003a53eb48,ffff80003a53eb48,a0b00c71a8082e24) at ufs_dirbadentry VOP_LOOKUP(fffffd806afc68a8,ffff80003a53edc0,ffff80003a53edf0) at VOP_LOOKUP+0x6e sys/kern/vfs_vops.c:85 vfs_lookup(ffff80003a53ed90) at vfs_lookup+0x8e1 sys/kern/vfs_lookup.c:566 namei(ffff80003a53ed90) at namei+0x7aa sys/kern/vfs_lookup.c:250 domknodat(ffff80003c96f9c8,ffffff9c,400000000280,2000,1e61) at domknodat+0xb4 sys/kern/vfs_syscalls.c:1584 syscall(ffff80003a53ef90) at syscall+0x97e sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xd06d7272ba0, count: -9 ddb> machine ddbcpu 1 No such command ddb> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff8332e035) at panic+0x1cf sys/kern/subr_prf.c:198 ufs_dirbadentry(ffff80003a53eb48,ffff80003a53eb48,a0b00c71a8082e24) at ufs_dirbadentry VOP_LOOKUP(fffffd806afc68a8,ffff80003a53edc0,ffff80003a53edf0) at VOP_LOOKUP+0x6e sys/kern/vfs_vops.c:85 vfs_lookup(ffff80003a53ed90) at vfs_lookup+0x8e1 sys/kern/vfs_lookup.c:566 namei(ffff80003a53ed90) at namei+0x7aa sys/kern/vfs_lookup.c:250 domknodat(ffff80003c96f9c8,ffffff9c,400000000280,2000,1e61) at domknodat+0xb4 sys/kern/vfs_syscalls.c:1584 syscall(ffff80003a53ef90) at syscall+0x97e sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xd06d7272ba0, count: -9