panic: bad dir Starting stack trace... panic(ffffffff833c6460) at panic+0x1d0 sys/kern/subr_prf.c:229 ufs_lookup() at ufs_lookup+0x1eda VOP_LOOKUP(fffffd807915f888,ffff800031b95738,ffff800031b956d0) at VOP_LOOKUP+0x6e sys/kern/vfs_vops.c:85 unveil_find_cover(fffffd807915f888,ffff80003c3e27f0) at unveil_find_cover+0x17c sys/kern/kern_unveil.c:277 unveil_add_vnode(ffff80003c3e27f0,fffffd807915f888) at unveil_add_vnode+0xcb sys/kern/kern_unveil.c:378 unveil_add(ffff80003c3e27f0,ffff800031b958c8,ffff800031b95983) at unveil_add+0x3e0 sys/kern/kern_unveil.c:475 sys_unveil(ffff80003c3e27f0,ffff800031b95ab0,ffff800031b95a00) at sys_unveil+0x61c sys/kern/vfs_syscalls.c:1032 syscall(ffff800031b95ab0) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff800031b95ab0) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f624f2c410, count: 248 End of stack trace. WARNING: SPL NOT LOWERED ON SYSCALL 83 -173729312 EXIT 0 3 Stopped at savectx+0xae: movl $0,%gs:0x688 TID PID UID PRFLAGS PFLAGS CPU COMMAND * 99634 62365 0 0 0x4000000 1 syz-executor 365330 74645 73 0x1100010 0x1 0 syslogd savectx() at savectx+0xae end of kernel end trace frame: 0xf80b4857540, count: 14 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: bad dir ddb{1}> trace savectx() at savectx+0xae end of kernel end trace frame: 0xf80b4857540, count: -1 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff80003c3cf1f0 rbx 0 rdx 0xffff8000015eae40 rcx 0xffff80002a232fa0 rax 0x3b r8 0xffff80003c3cf120 r9 0x1 r10 0x680bd40a2cfdcb4 r11 0xaa78b263a787eac0 r12 0 r13 0 r14 0xffff80002a232fa0 r15 0 rip 0xffffffff82d813ee savectx+0xae cs 0x8 rflags 0x46 rsp 0xffff80003c3cf170 ss 0x10 savectx+0xae: movl $0,%gs:0x688 ddb{1}> show proc PROC (syz-executor) tid=99634 pid=62365 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a233768,0xffffffff839c3fd0 process=0xffff80002a38dcf8 user=0xffff80003c3ca000, vmspace=0xfffffd806261c028 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 62365 282603 71977 0 2 0 syz-executor *62365 99634 71977 0 7 0x4000000 syz-executor 76772 61728 1 0 3 0x82 nanoslp getty 20055 140733 29527 0 2 0 syz-executor 20055 53803 29527 0 2 0x4000000 syz-executor 5330 24599 94967 0 4 0x82000 syz-executor 5330 96292 94967 0 2 0x4002000 syz-executor 5330 71648 94967 0 4 0x4082000 syz-executor 48345 162229 67144 0 2 0 syz-executor 48345 299446 67144 0 3 0x4000080 lockf syz-executor 48345 277109 67144 0 2 0x4000000 syz-executor 94967 221240 63383 0 2 0xc82 syz-executor 30016 458626 63383 0 2 0x2 syz-executor 3284 492665 0 0 3 0x14200 acct acct 96621 117922 63383 0 2 0x3 syz-executor 29527 425054 63383 0 2 0xc82 syz-executor 71977 104584 63383 0 2 0xc82 syz-executor 32108 495174 63383 0 3 0x82 wait syz-executor 67144 514854 63383 0 2 0xc82 syz-executor 63383 426514 1 0 3 0x82 wait syz-executor 50990 9618 10376 74 3 0x1100092 bpf pflogd 10376 395076 1 0 3 0x80 sbwait pflogd 74645 365330 1 73 7 0x1100011 syslogd 99332 133651 0 0 2 0x40014200 smr 75170 79974 0 0 2 0x14200 zerothread 38372 350279 0 0 3 0x14200 aiodoned aiodoned 1677 318291 0 0 3 0x14200 syncer update 8008 12485 0 0 3 0x14200 cleaner cleaner 61001 444106 0 0 3 0x14200 reaper reaper 9040 279769 0 0 3 0x14200 pgdaemon pagedaemon 86396 109543 0 0 3 0x14200 bored viomb 13588 455631 0 0 3 0x40014200 acpi0 acpi0 12820 317397 0 0 3 0x40014200 idle1 62259 162823 0 0 3 0x14200 bored softnet1 64121 405738 0 0 2 0x14200 softnet0 3662 65384 0 0 3 0x14200 bored systqmp 53166 96059 0 0 3 0x14200 bored systq 4434 85845 0 0 3 0x14200 tmoslp softclockmp 42173 171844 0 0 3 0x40014200 tmoslp softclock 93457 209697 0 0 3 0x40014200 idle0 1 492000 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks Process 5330 (syz-executor) thread 0xffff80003c3e27f0 (96292) Process 48345 (syz-executor) thread 0xffff80003c3e2558 (277109) ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11083 12094K 12397K 166960K 12814 0 pcb 18 13K 14K 166960K 106 0 rtable 236 9K 10K 166960K 505 0 pf 36 18K 24K 166960K 111 0 ifaddr 42 7K 7K 166960K 73 0 ifgroup 55 2K 2K 166960K 113 0 sysctl 4 1K 9K 166960K 11 0 counters 70 37K 37K 166960K 116 0 ioctlops 1 2K 4K 166960K 1767 0 iov 0 0K 12K 166960K 25 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1325 83K 83K 166960K 1832 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 3 5K 9K 166960K 12 0 VM map 2 1K 1K 166960K 2 0 sem 17 1K 1K 166960K 20 0 dirhash 12 2K 2K 166960K 21 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 15 53K 89K 166960K 673 0 sigio 0 0K 0K 166960K 11 0 proc 33 66K 164K 166960K 716 0 subproc 72 4K 4K 166960K 99 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 46 0 in_multi 96 7K 7K 166960K 143 0 ether_multi 1 0K 0K 166960K 3 0 mrt 0 0K 0K 166960K 22 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 229 1023K 1023K 166960K 229 0 exec 0 0K 1K 166960K 522 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 153 91K 165K 166960K 8206 0 UVM aobj 19 6K 6K 166960K 22 0 pinsyscall 23 46K 106K 166960K 1936 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 23 0 NDP 12 0K 2K 166960K 51 0 temp 54 9078K 9206K 166960K 29279 0 kqueue 4 6K 34K 166960K 145 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}>