panic: ffs_valloc: dup alloc Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *337079 697 0 0 0x4000000 0 syz-executor db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff8346a6ca) at panic+0x1cf sys/kern/subr_prf.c:198 ffs_inode_alloc(fffffd806cf4a600,80c4,fffffd8007ffd7b8,ffff80003c9077f0) at ffs_inode_alloc+0x94e ufs_makeinode(80c4,fffffd8060805438,ffff80003c907b30,ffff80003c907b60) at ufs_makeinode+0xcd sys/ufs/ufs/ufs_vnops.c:1759 ufs_create(ffff80003c9078a0) at ufs_create+0x4e sys/ufs/ufs/ufs_vnops.c:147 VOP_CREATE(fffffd8060805438,ffff80003c907b30,ffff80003c907b60,ffff80003c907920) at VOP_CREATE+0xfe sys/kern/vfs_vops.c:103 vn_open(ffff80003c907b00,207,c4) at vn_open+0x50d sys/kern/vfs_vnops.c:118 doopenat(ffff80002f8b74f0,ffffff9c,200000000480,206,d6,0,71fb8a2f002a8493) at doopenat+0x352 sys/kern/vfs_syscalls.c:1162 sys_open(ffff80002f8b74f0,ffff80003c907da0,ffff80003c907cf0) at sys_open+0x59 sys/kern/vfs_syscalls.c:1064 syscall(ffff80003c907da0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c907da0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xa9853192ea0, count: 4 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: ffs_valloc: dup alloc ddb> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff8346a6ca) at panic+0x1cf sys/kern/subr_prf.c:198 ffs_inode_alloc(fffffd806cf4a600,80c4,fffffd8007ffd7b8,ffff80003c9077f0) at ffs_inode_alloc+0x94e ufs_makeinode(80c4,fffffd8060805438,ffff80003c907b30,ffff80003c907b60) at ufs_makeinode+0xcd sys/ufs/ufs/ufs_vnops.c:1759 ufs_create(ffff80003c9078a0) at ufs_create+0x4e sys/ufs/ufs/ufs_vnops.c:147 VOP_CREATE(fffffd8060805438,ffff80003c907b30,ffff80003c907b60,ffff80003c907920) at VOP_CREATE+0xfe sys/kern/vfs_vops.c:103 vn_open(ffff80003c907b00,207,c4) at vn_open+0x50d sys/kern/vfs_vnops.c:118 doopenat(ffff80002f8b74f0,ffffff9c,200000000480,206,d6,0,71fb8a2f002a8493) at doopenat+0x352 sys/kern/vfs_syscalls.c:1162 sys_open(ffff80002f8b74f0,ffff80003c907da0,ffff80003c907cf0) at sys_open+0x59 sys/kern/vfs_syscalls.c:1064 syscall(ffff80003c907da0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c907da0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xa9853192ea0, count: -11 ddb> show registers rdi 0 rsi 0x1 rbp 0xffff80003c907590 rbx 0x6662 __ALIGN_SIZE+0x5662 rdx 0 rcx 0 rax 0xffff80002f8b74f0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xc111924021be9159 r11 0xd44f4d5c62996ec5 r12 0 r13 0xfffffd80787d1600 r14 0 r15 0x1 rip 0xffffffff82bedc35 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c907580 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb> show proc PROC (syz-executor) tid=337079 pid=697 tcnt=3 stat=onproc flags process=0 proc=4000000 runpri=50, usrpri=86, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002f8b67f8,0xffffffff83ac48c8 process=0xffff80003c96b1a0 user=0xffff80003c902000, vmspace=0xfffffd806cfeea20 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 697 351790 67886 0 2 0 syz-executor 697 122852 67886 0 3 0x4000080 fsleep syz-executor * 697 337079 67886 0 7 0x4000000 syz-executor 72116 500891 65144 0 2 0 syz-executor 72116 101975 65144 0 3 0x4000080 fsleep syz-executor 57870 123712 45047 0 2 0x2 ndp 45047 464856 39020 0 3 0x10008a sigsusp sh 66036 230512 94132 0 2 0 syz-executor 66036 479672 94132 0 3 0x4000080 fsleep syz-executor 25613 515788 0 0 3 0x14280 nfsidl nfsio 91772 220451 0 0 3 0x14280 nfsidl nfsio 30708 123673 0 0 3 0x14280 nfsidl nfsio 62757 160835 0 0 3 0x14280 nfsidl nfsio 30235 13958 0 0 3 0x14280 nfsidl nfsio 32308 497642 0 0 3 0x14280 nfsidl nfsio 65223 512850 0 0 3 0x14280 nfsidl nfsio 89756 371361 0 0 3 0x14280 nfsidl nfsio 11871 407498 0 0 3 0x14280 nfsidl nfsio 19696 227395 0 0 3 0x14280 nfsidl nfsio 81128 454211 0 0 3 0x14280 nfsidl nfsio 16702 80124 0 0 3 0x14280 nfsidl nfsio 91786 227103 0 0 3 0x14280 nfsidl nfsio 6394 394956 0 0 3 0x14280 nfsidl nfsio 48449 419597 0 0 3 0x14280 nfsidl nfsio 19890 521242 0 0 3 0x14280 nfsidl nfsio 8733 286054 0 0 3 0x14280 nfsidl nfsio 81306 440288 0 0 3 0x14280 nfsidl nfsio 20493 329707 0 0 3 0x14280 nfsidl nfsio 83326 224197 0 0 3 0x14280 nfsidl nfsio 60286 453797 9511 0 3 0x80 nanoslp syz-executor 60286 173037 9511 0 3 0x4000080 kqsel syz-executor 60286 351857 9511 0 3 0x4000080 fsleep syz-executor 85383 444051 84833 0 2 0 syz-executor 85383 278538 84833 0 3 0x4000080 fsleep syz-executor 39020 239860 31452 0 3 0x82 wait syz-executor 84833 130283 31452 0 3 0x82 nanoslp syz-executor 67886 454366 31452 0 3 0x82 nanoslp syz-executor 65144 59262 31452 0 3 0x82 nanoslp syz-executor 84951 96219 31452 0 3 0x82 wait syz-executor 94132 350762 31452 0 3 0x82 nanoslp syz-executor 9511 296771 31452 0 3 0x82 nanoslp syz-executor 31452 151005 40334 0 3 0x82 wait syz-executor 40334 367201 92501 0 3 0x10008a sigsusp ksh 92501 196581 76765 0 3 0x98 kqread sshd-session 76765 371869 49195 0 3 0x92 kqread sshd-session 39666 197896 1 0 3 0x100083 ttyin getty 49195 480563 1 0 3 0x88 kqread sshd 51812 204416 4259 73 3 0x1100090 kqread syslogd 4259 344657 1 0 3 0x100082 sbwait syslogd 3340 115347 1 0 3 0x100080 kqread resolvd 76661 748 23953 77 3 0x100092 kqread dhcpleased 87042 74937 23953 77 3 0x100092 kqread dhcpleased 23953 418251 1 0 3 0x80 kqread dhcpleased 61371 437634 0 0 3 0x14200 bored smr 38459 473482 0 0 2 0x14200 zerothread 53665 131446 0 0 3 0x14200 aiodoned aiodoned 9429 447737 0 0 3 0x14200 syncer update 56436 92825 0 0 3 0x14200 cleaner cleaner 80389 151258 0 0 3 0x14200 reaper reaper 83099 305330 0 0 3 0x14200 pgdaemon pagedaemon 16300 89877 0 0 3 0x14200 bored viomb 83514 440194 0 0 3 0x40014200 acpi0 acpi0 8553 444762 0 0 3 0x14200 bored softnet0 22717 455050 0 0 3 0x14200 smrbar systqmp 92058 47190 0 0 3 0x14200 bored systq 45823 416610 0 0 3 0x40014200 tmoslp softclock 8275 63615 0 0 3 0x40014200 idle0 1 230560 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11040 12184K 12459K 166960K 12297 0 pcb 17 16K 21K 166960K 178 0 rtable 239 6K 6K 166960K 417 0 pf 31 13K 19K 166960K 46 0 ifaddr 43 7K 8K 166960K 54 0 ifgroup 50 2K 2K 166960K 58 0 sysctl 3 1K 9K 166960K 8 0 counters 33 17K 17K 166960K 35 0 ioctlops 0 0K 2K 166960K 44 0 iov 0 0K 12K 166960K 3 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1331 84K 84K 166960K 1502 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 7 0K 0K 166960K 7 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1734 201K 291K 166960K 11964 0 file desc 18 65K 89K 166960K 234 0 sigio 0 0K 0K 166960K 2 0 proc 60 59K 91K 166960K 559 0 subproc 72 4K 4K 166960K 90 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 in_multi 99 7K 7K 166960K 121 0 ether_multi 1 0K 0K 166960K 2 0 mrt 0 0K 0K 166960K 8 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 67 307K 307K 166960K 67 0 exec 0 0K 1K 166960K 399 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 217 143K 159K 166960K 3617 0 UVM aobj 4 2K 2K 166960K 5 0 pinsyscall 39 78K 94K 166960K 1375 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 1 0K 0K 166960K 5 0 NDP 13 0K 2K 166960K 33 0 temp 35 9102K 9166K 166960K 5308 0 kqueue 13 20K 26K 166960K 38 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 41 0 38 1 0 1 1 0 8 0 rtentry 136 138 0 27 4 0 4 4 0 8 0 unpcb 144 67 0 52 1 0 1 1 0 8 0 syncache 336 6 0 6 1 0 1 1 0 8 1 tcpcb 736 35 0 29 2 0 2 2 0 8 0 arp 96 23 0 4 1 0 1 1 0 8 0 inpcb 328 263 0 251 9 0 9 9 0 8 7 nd6 112 30 0 6 1 0 1 1 0 8 0 pkpcb 40 3 0 3 1 0 1 1 0 8 1 kcovpl 48 10 0 2 1 0 1 1 0 8 0 pfstscr 40 2 0 0 1 0 1 1 0 8 0 pfanchor 1288 2 0 0 1 0 1 1 0 8 0 pfstitem 24 2 0 0 1 0 1 1 0 8 0 pfstkey 128 2 0 0 1 0 1 1 0 8 0 pfstate 384 1 0 0 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 546 0 91 29 0 29 29 0 8 0 art_table 40 547 0 91 5 0 5 5 0 8 0 art_node 32 138 0 37 1 0 1 1 0 8 0 sysvmsgpl 40 1 0 0 1 0 1 1 0 8 0 semapl 72 5 0 0 1 0 1 1 0 8 0 shmpl 112 2 0 1 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1705 0 235 92 0 92 92 0 8 0 ffsino 256 1706 0 236 92 0 92 92 0 8 0 nchpl 144 2008 0 308 64 0 64 64 0 8 0 vnodes 216 1885 0 0 105 0 105 105 0 8 0 namei 1024 6190 0 6189 2 0 2 2 0 8 1 kstatmem 264 27 0 4 2 0 2 2 0 8 0 scxspl 216 8050 0 8050 3 0 3 3 1 8 3 plimitpl 152 51 0 34 1 0 1 1 0 8 0 sigapl 424 542 0 479 8 0 8 8 0 8 0 knotepl 120 4679 0 4632 10 0 10 10 0 8 8 kqueuepl 184 47 0 36 1 0 1 1 0 8 0 pipepl 304 128 0 101 3 0 3 3 0 8 0 fdescpl 448 509 0 479 5 0 5 5 0 8 1 filepl 120 2186 0 1964 11 0 11 11 0 8 3 lockfpl 104 52 0 49 1 0 1 1 0 8 0 lockfspl 48 26 0 23 1 0 1 1 0 8 0 sessionpl 144 30 0 22 1 0 1 1 0 8 0 pgrppl 48 40 0 24 1 0 1 1 0 8 0 ucredpl 104 275 0 264 1 0 1 1 0 8 0 zombiepl 144 481 0 479 1 0 1 1 0 8 0 processpl 1152 542 0 479 5 0 5 5 0 8 0 procpl 664 657 0 587 7 0 7 7 0 8 0 sockpl 552 377 0 347 9 0 9 9 0 8 6 mcl64k 65536 12 0 12 1 0 1 1 0 8 1 mcl16k 16384 5 0 5 1 0 1 1 0 8 1 mcl12k 12288 3 0 3 1 0 1 1 0 8 1 mcl8k 8192 8 0 8 1 0 1 1 0 8 1 mcl4k 4096 2606 0 2552 16 1 15 16 0 8 8 mcl2k 2048 225 0 225 1 0 1 1 0 8 1 mtagpl 96 5 0 4 1 0 1 1 0 8 0 mbufpl 256 5096 0 4962 10 0 10 10 0 8 0 bufpl 272 3149 0 102 204 0 204 204 0 8 0 anonpl 24 89696 0 86523 39 0 39 39 0 187 5 amapchunkpl 152 9781 0 9341 20 0 20 20 0 158 1 amappl16 200 1416 0 1394 12 0 12 12 0 8 7 amappl15 192 2 0 2 1 0 1 1 0 8 1 amappl14 184 433 0 431 1 0 1 1 0 8 0 amappl13 176 131 0 121 1 0 1 1 0 8 0 amappl12 168 755 0 727 2 0 2 2 0 8 0 amappl11 160 3 0 2 1 0 1 1 0 8 0 amappl10 152 56 0 46 1 0 1 1 0 8 0 amappl9 144 269 0 269 1 0 1 1 0 8 1 amappl8 136 111 0 110 1 0 1 1 0 8 0 amappl7 128 142 0 131 1 0 1 1 0 8 0 amappl6 120 183 0 180 1 0 1 1 0 8 0 amappl5 112 90 0 83 1 0 1 1 0 8 0 amappl4 104 260 0 244 1 0 1 1 0 8 0 amappl3 96 1863 0 1762 3 0 3 3 0 8 0 amappl2 88 536 0 481 2 0 2 2 0 8 0 amappl1 80 10499 0 9950 13 0 13 13 0 8 0 amappl 88 2894 0 2741 4 0 4 4 0 92 0 uvmvnodes 80 98 0 0 2 0 2 2 0 8 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 253 0 253 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 4 0 1 1 0 1 1 0 8 0 uaddrrnd 24 509 0 479 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 509 0 479 1 0 1 1 0 8 0 vmmpekpl 168 5963 0 5931 2 0 2 2 0 8 0 vmmpepl 168 41068 0 39325 88 0 88 88 0 357 3 vmsppl 368 508 0 479 4 0 4 4 0 8 1 rwobjpl 40 14647 0 13708 12 0 12 12 0 8 0 pdppl 4096 1024 0 958 94 26 68 78 0 8 2 pvpl 32 236275 0 227309 107 0 107 107 0 265 8 pmappl 216 508 0 479 2 0 2 2 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 112 562 0 27 16 0 16 16 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff8346a6ca) at panic+0x1cf sys/kern/subr_prf.c:198 ffs_inode_alloc(fffffd806cf4a600,80c4,fffffd8007ffd7b8,ffff80003c9077f0) at ffs_inode_alloc+0x94e ufs_makeinode(80c4,fffffd8060805438,ffff80003c907b30,ffff80003c907b60) at ufs_makeinode+0xcd sys/ufs/ufs/ufs_vnops.c:1759 ufs_create(ffff80003c9078a0) at ufs_create+0x4e sys/ufs/ufs/ufs_vnops.c:147 VOP_CREATE(fffffd8060805438,ffff80003c907b30,ffff80003c907b60,ffff80003c907920) at VOP_CREATE+0xfe sys/kern/vfs_vops.c:103 vn_open(ffff80003c907b00,207,c4) at vn_open+0x50d sys/kern/vfs_vnops.c:118 doopenat(ffff80002f8b74f0,ffffff9c,200000000480,206,d6,0,71fb8a2f002a8493) at doopenat+0x352 sys/kern/vfs_syscalls.c:1162 sys_open(ffff80002f8b74f0,ffff80003c907da0,ffff80003c907cf0) at sys_open+0x59 sys/kern/vfs_syscalls.c:1064 syscall(ffff80003c907da0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c907da0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xa9853192ea0, count: -11 ddb> machine ddbcpu 1 No such command ddb> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff8346a6ca) at panic+0x1cf sys/kern/subr_prf.c:198 ffs_inode_alloc(fffffd806cf4a600,80c4,fffffd8007ffd7b8,ffff80003c9077f0) at ffs_inode_alloc+0x94e ufs_makeinode(80c4,fffffd8060805438,ffff80003c907b30,ffff80003c907b60) at ufs_makeinode+0xcd sys/ufs/ufs/ufs_vnops.c:1759 ufs_create(ffff80003c9078a0) at ufs_create+0x4e sys/ufs/ufs/ufs_vnops.c:147 VOP_CREATE(fffffd8060805438,ffff80003c907b30,ffff80003c907b60,ffff80003c907920) at VOP_CREATE+0xfe sys/kern/vfs_vops.c:103 vn_open(ffff80003c907b00,207,c4) at vn_open+0x50d sys/kern/vfs_vnops.c:118 doopenat(ffff80002f8b74f0,ffffff9c,200000000480,206,d6,0,71fb8a2f002a8493) at doopenat+0x352 sys/kern/vfs_syscalls.c:1162 sys_open(ffff80002f8b74f0,ffff80003c907da0,ffff80003c907cf0) at sys_open+0x59 sys/kern/vfs_syscalls.c:1064 syscall(ffff80003c907da0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c907da0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xa9853192ea0, count: -11