panic: bad dir Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *261132 98932 0 0x2000 0x4000000 0K syz-executor db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff832e675b) at panic+0x1e5 sys/kern/subr_prf.c:198 ufs_lookup() at ufs_lookup+0x1eda VOP_LOOKUP(fffffd800b039438,ffff80003ac2d678,ffff80003ac2d6a8) at VOP_LOOKUP+0x6e sys/kern/vfs_vops.c:85 vfs_lookup(ffff80003ac2d648) at vfs_lookup+0x93a sys/kern/vfs_lookup.c:566 namei(ffff80003ac2d648) at namei+0x7ca sys/kern/vfs_lookup.c:250 sys_unveil(ffff80002a3f5260,ffff80003ac2d830,ffff80003ac2d780) at sys_unveil+0x329 sys/kern/vfs_syscalls.c:1009 syscall(ffff80003ac2d830) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003ac2d830) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:748 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xc126e6e9750, count: 6 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: bad dir ddb{0}> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff832e675b) at panic+0x1e5 sys/kern/subr_prf.c:198 ufs_lookup() at ufs_lookup+0x1eda VOP_LOOKUP(fffffd800b039438,ffff80003ac2d678,ffff80003ac2d6a8) at VOP_LOOKUP+0x6e sys/kern/vfs_vops.c:85 vfs_lookup(ffff80003ac2d648) at vfs_lookup+0x93a sys/kern/vfs_lookup.c:566 namei(ffff80003ac2d648) at namei+0x7ca sys/kern/vfs_lookup.c:250 sys_unveil(ffff80002a3f5260,ffff80003ac2d830,ffff80003ac2d780) at sys_unveil+0x329 sys/kern/vfs_syscalls.c:1009 syscall(ffff80003ac2d830) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003ac2d830) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:748 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xc126e6e9750, count: -9 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff80003ac2d2e0 rbx 0xffffffff83848ddf cpu_info_full_primary+0x2ddf rdx 0xffff800001453940 rcx 0xffff80002a3f5260 rax 0xffffffff83847ff0 cpu_info_full_primary+0x1ff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x5e41c868834a7739 r11 0xf0f941b35496a698 r12 0xffffffff83848be0 cpu_info_full_primary+0x2be0 r13 0 r14 0 r15 0x1 rip 0xffffffff82d2ae85 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003ac2d2d0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{0}> show proc PROC (syz-executor) tid=261132 pid=98932 tcnt=2 stat=onproc flags process=2000 proc=4000000 runpri=17, usrpri=50, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0xffff80002a3f5260 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a3f4d30,0xffffffff83930db8 process=0xffff80002a3edd68 user=0xffff80003ac28000, vmspace=0xfffffd800c7985f0 estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 98932 214768 29338 0 4 0x82000 syz-executor *98932 261132 29338 0 7 0x4002000 syz-executor 43793 459733 24011 0 3 0x80 fsleep syz-executor 43793 318348 24011 0 3 0x4000080 ttyin syz-executor 20932 71051 19365 0 3 0x80 fsleep syz-executor 20932 191544 19365 0 3 0x4000080 sbwait syz-executor 20932 165474 19365 0 3 0x4000080 fsleep syz-executor 34708 167451 1078 0 3 0x80 fsleep syz-executor 34708 321678 1078 0 2 0x4000000 syz-executor 40388 508742 82278 0 3 0x80 fsleep syz-executor 40388 36594 82278 0 3 0x4000080 ttyin syz-executor 40388 198003 82278 0 3 0x4000080 fsleep syz-executor 33791 367072 17878 0 3 0x80 fsleep syz-executor 33791 280096 17878 0 3 0x4000080 ttyout syz-executor 99019 29284 92904 60928 3 0x90 fsleep syz-executor 99019 89397 92904 60928 3 0x4000090 pipewr syz-executor 67153 448823 42987 0 3 0x80 fsleep syz-executor 67153 380808 42987 0 3 0x4000080 kqpoll syz-executor 17878 397997 57857 0 3 0x82 nanoslp syz-executor 24011 212363 57857 0 3 0x82 nanoslp syz-executor 89712 58633 1 0 3 0x100083 ttyopn getty 8048 237785 0 0 3 0x14280 nfsidl nfsio 80155 518724 0 0 3 0x14280 nfsidl nfsio 39014 38319 0 0 3 0x14280 nfsidl nfsio 82792 30634 0 0 3 0x14280 nfsidl nfsio 55631 108937 0 0 3 0x14280 nfsidl nfsio 84322 266789 0 0 3 0x14280 nfsidl nfsio 60531 86648 0 0 3 0x14280 nfsidl nfsio 81941 471987 0 0 3 0x14280 nfsidl nfsio 14469 356302 0 0 3 0x14280 nfsidl nfsio 24505 409095 0 0 3 0x14280 nfsidl nfsio 79111 219996 0 0 3 0x14280 nfsidl nfsio 9054 151819 0 0 3 0x14280 nfsidl nfsio 81956 368500 0 0 3 0x14280 nfsidl nfsio 69991 256306 0 0 3 0x14280 nfsidl nfsio 48727 100335 0 0 3 0x14280 nfsidl nfsio 45811 163705 0 0 3 0x14280 nfsidl nfsio 35260 263577 0 0 3 0x14280 nfsidl nfsio 42858 140934 0 0 3 0x14280 nfsidl nfsio 1866 366269 0 0 3 0x14280 nfsidl nfsio 53293 179009 0 0 3 0x14280 nfsidl nfsio 7075 174291 0 0 3 0x14200 bored sosplice 1078 198599 57857 0 3 0x82 nanoslp syz-executor 92904 263805 57857 0 3 0x82 nanoslp syz-executor 19365 68298 57857 0 3 0x82 nanoslp syz-executor 82278 133589 57857 0 3 0x82 nanoslp syz-executor 42987 340837 57857 0 3 0x82 nanoslp syz-executor 29338 29837 57857 0 3 0x82 nanoslp syz-executor 57857 68111 10120 0 3 0x82 kqread syz-executor 10120 236912 1792 0 3 0x10008a sigsusp ksh 1792 122998 4959 0 3 0x98 kqread sshd-session 4959 215132 65540 0 3 0x92 kqread sshd-session 65540 317459 1 0 3 0x88 kqread sshd 46056 191138 72122 74 3 0x1100092 bpf pflogd 72122 193714 1 0 3 0x80 sbwait pflogd 35464 371964 88835 73 3 0x1100090 kqread syslogd 88835 87113 1 0 3 0x100082 sbwait syslogd 53564 262853 1 0 3 0x100080 kqread resolvd 45287 374490 9638 77 3 0x100092 kqread dhcpleased 45883 345505 9638 77 3 0x100092 kqread dhcpleased 9638 1916 1 0 3 0x80 kqread dhcpleased 75017 255312 0 0 3 0x14200 bored smr 49991 196473 0 0 3 0x14200 pgzero zerothread 40875 266156 0 0 3 0x14200 aiodoned aiodoned 40111 392851 0 0 3 0x14200 syncer update 89062 518864 0 0 3 0x14200 cleaner cleaner 75300 65723 0 0 3 0x14200 reaper reaper 66767 234774 0 0 3 0x14200 pgdaemon pagedaemon 96878 354792 0 0 3 0x14200 bored viomb 61885 140927 0 0 3 0x40014200 acpi0 acpi0 67438 294588 0 0 7 0x40014200 idle1 56566 23306 0 0 3 0x14200 bored softnet7 36516 27874 0 0 3 0x14200 bored softnet6 27927 92967 0 0 3 0x14200 bored softnet5 94319 181844 0 0 3 0x14200 bored softnet4 69300 466003 0 0 3 0x14200 bored softnet3 98589 33709 0 0 3 0x14200 bored softnet2 79626 413916 0 0 3 0x14200 bored softnet1 67716 220345 0 0 3 0x14200 bored softnet0 63497 356443 0 0 3 0x14200 bored systqmp 59085 263635 0 0 3 0x14200 bored systq 82706 407970 0 0 3 0x14200 tmoslp softclockmp 86022 344443 0 0 3 0x40014200 tmoslp softclock 268 306618 0 0 3 0x40014200 idle0 1 112709 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{0}> show all locks Process 98932 (syz-executor) thread 0xffff80002a3f5260 (261132) Process 34708 (syz-executor) thread 0xffff800038c107f0 (321678) ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10232 11050K 11552K 166960K 15067 0 pcb 17 15K 17K 166960K 666 0 rtable 211 11K 11K 166960K 922 0 pf 42 19K 82K 166960K 474 0 ifaddr 38 7K 8K 166960K 175 0 ifgroup 59 2K 3K 166960K 329 0 sysctl 4 1K 9K 166960K 24 0 counters 70 37K 38K 166960K 354 0 ioctlops 0 0K 4K 166960K 2140 0 iov 2 20K 28K 166960K 176 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1456 92K 92K 166960K 3971 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 120 0 dirhash 12 2K 2K 166960K 51 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 240K 166960K 2568 0 sigio 1 0K 0K 166960K 60 0 proc 72 115K 164K 166960K 870 0 subproc 72 4K 4K 166960K 100 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 2 0K 0K 166960K 439 0 in_multi 80 6K 7K 166960K 223 0 ether_multi 1 0K 0K 166960K 18 0 mrt 1 0K 0K 166960K 21 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 121 546K 546K 166960K 121 0 exec 0 0K 1K 166960K 802 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 7 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 258 178K 194K 166960K 24163 0 UVM aobj 129 6K 6K 166960K 134 0 pinsyscall 43 86K 102K 166960K 3775 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 175 0 NDP 13 0K 2K 166960K 126 0 temp 148 8653K 8909K 166960K 144896 0 kqueue 13 20K 34K 166960K 605 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 338 0 335 4 3 1 3 0 8 0 rtentry 176 279 0 198 5 0 5 5 0 8 0 unpcb 144 2168 0 2148 21 17 4 9 0 8 3 syncache 336 11 0 11 6 5 1 1 0 8 1 tcpqe 32 1 5 1 1 1 0 1 0 8 0 tcpcb 736 1006 0 999 29 27 2 7 0 8 1 arp 128 28 0 18 1 0 1 1 0 8 0 inpcb 328 3555 0 3544 35 30 5 12 0 8 3 nd6 144 34 0 15 1 0 1 1 0 8 0 pkpcb 40 25 0 25 6 5 1 1 0 8 1 kcovpl 48 11 0 3 1 0 1 1 0 8 0 mppekey 1024 2 0 2 2 1 1 1 0 8 1 ppxss 1192 110 0 110 5 4 1 1 0 8 1 pppxif 1504 15 0 15 6 5 1 1 0 8 1 pfstscr 40 3 0 3 2 2 0 1 0 8 0 pffrag 232 15 0 8 1 0 1 1 0 482 0 pffrnode 88 11 0 5 1 0 1 1 0 8 0 pffrent 40 22 0 15 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 2 0 2 2 2 0 1 0 8 0 pfanchor 1288 1 0 0 1 0 1 1 0 8 0 pftag 88 2 0 1 1 0 1 1 0 8 0 pfstitem 24 208 0 88 1 0 1 1 0 8 0 pfstkey 128 218 0 98 4 0 4 4 0 8 0 pfstate 384 209 0 92 13 1 12 13 0 8 0 pfrule 1344 37 0 32 2 1 1 2 0 8 0 rttmr 136 5 0 5 5 4 1 1 0 8 1 art_heap8 4096 5 0 0 5 0 5 5 0 8 0 art_heap4 256 850 0 449 36 6 30 30 0 8 1 art_table 40 855 0 449 5 0 5 5 0 8 0 art_node 32 208 0 138 1 0 1 1 0 8 0 sysvmsgpl 40 39 0 12 1 0 1 1 0 8 0 semupl 112 6 0 6 5 4 1 1 0 8 1 semapl 112 116 0 106 1 0 1 1 0 8 0 shmpl 112 131 0 5 4 0 4 4 0 8 0 dirhash 1024 43 0 26 3 0 3 3 0 8 0 dino2pl 256 6268 0 4764 96 1 95 96 0 8 0 ffsino 296 6268 0 4764 118 1 117 118 0 8 0 nchpl 144 9888 0 8181 64 0 64 64 0 8 0 rtmask 32 20 0 20 5 4 1 1 0 8 1 uvmvnodes 80 5926 0 0 121 0 121 121 0 8 0 vnodes 216 5926 0 0 330 0 330 330 0 8 0 namei 1024 35528 0 35526 5 4 1 2 0 8 0 percpumem 16 192 0 142 1 0 1 1 0 8 0 kstatmem 264 212 0 182 5 2 3 3 0 8 0 scsiplug 72 13 0 13 4 3 1 1 0 8 1 scxspl 216 80462 0 80462 14 13 1 8 1 8 1 plimitpl 152 786 0 764 1 0 1 1 0 8 0 sigapl 424 2880 0 2805 9 0 9 9 0 8 0 knotepl 120 799 0 0 24 0 24 24 0 8 0 kqueuepl 224 1451 0 1440 25 23 2 7 0 8 1 pipepl 344 386 0 357 6 3 3 6 0 8 0 fdescpl 528 2835 0 2803 3 0 3 3 0 8 0 filepl 160 20815 0 20575 44 31 13 20 0 8 2 lockfpl 104 2092 0 2090 5 3 2 2 0 8 1 lockfspl 48 742 0 740 1 0 1 1 0 8 0 sessionpl 144 35 0 26 1 0 1 1 0 8 0 pgrppl 48 129 0 112 1 0 1 1 0 8 0 ucredpl 104 3030 0 3016 1 0 1 1 0 8 0 zombiepl 144 3319 0 3319 1 0 1 1 0 8 1 processpl 1248 2880 0 2805 6 0 6 6 0 8 0 procpl 664 6806 0 6721 8 0 8 8 0 8 0 sosppl 168 17 0 17 6 5 1 1 0 8 1 sockpl 752 6215 0 6181 76 65 11 24 0 8 6 mcl64k 65536 17 0 0 3 0 3 3 0 8 0 mcl16k 16384 3 0 0 1 0 1 1 0 8 0 mcl12k 12288 3 0 0 1 0 1 1 0 8 0 mcl9k 9216 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 10 0 0 2 0 2 2 0 8 0 mcl4k 4096 111 0 0 14 0 14 14 0 8 0 mcl2k2 2112 1 0 0 1 0 1 1 0 8 0 mcl2k 2048 72 0 0 9 0 9 9 0 8 0 mtagpl 96 21 0 0 1 0 1 1 0 8 0 mbufpl 256 1164 0 0 73 0 73 73 0 8 0 bufpl 280 33482 0 27339 440 0 440 440 0 8 0 anonpl 32 18457 0 0 149 0 149 149 0 246 0 amapchunkpl 152 84745 0 84128 69 42 27 38 0 158 1 amappl16 200 12921 0 12508 100 64 36 38 0 8 6 amappl15 192 6 0 6 1 1 0 1 0 8 0 amappl14 184 137 0 125 1 0 1 1 0 8 0 amappl13 176 6 0 6 1 1 0 1 0 8 0 amappl12 168 3584 0 3552 3 1 2 2 0 8 0 amappl11 160 49 0 35 1 0 1 1 0 8 0 amappl10 152 10 0 10 2 2 0 1 0 8 0 amappl9 144 250 0 250 1 1 0 1 0 8 0 amappl8 136 26 0 22 1 0 1 1 0 8 0 amappl7 128 144 0 132 1 0 1 1 0 8 0 amappl6 120 217 0 213 1 0 1 1 0 8 0 amappl5 112 140 0 130 1 0 1 1 0 8 0 amappl4 104 412 0 391 1 0 1 1 0 8 0 amappl3 96 17541 0 17416 4 0 4 4 0 8 0 amappl2 88 783 0 717 2 0 2 2 0 8 0 amappl1 80 20136 0 19522 15 0 15 15 0 8 0 amappl 88 22886 0 22705 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 258 0 258 5 4 1 1 0 8 1 dma64 64 7 0 7 2 2 0 1 0 8 0 dma32 32 8 0 8 2 1 1 1 0 8 1 dma16 16 19 0 18 1 0 1 1 0 8 0 aobjpl 72 133 0 5 3 0 3 3 0 8 0 uaddrrnd 24 2835 0 2803 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 2835 0 2803 1 0 1 1 0 8 0 vmmpekpl 168 23561 0 23515 3 0 3 3 0 8 0 vmmpepl 168 187505 0 185012 163 43 120 123 0 357 2 vmsppl 488 2834 0 2803 8 3 5 5 0 8 0 rwobjpl 80 56252 0 48844 162 5 157 158 0 8 1 pdppl 4096 5677 0 5606 113 40 73 83 0 8 2 pvpl 32 24909 0 0 200 0 200 200 0 265 0 pmappl 256 2834 0 2803 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 403 0 86 10 0 10 10 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff832e675b) at panic+0x1e5 sys/kern/subr_prf.c:198 ufs_lookup() at ufs_lookup+0x1eda VOP_LOOKUP(fffffd800b039438,ffff80003ac2d678,ffff80003ac2d6a8) at VOP_LOOKUP+0x6e sys/kern/vfs_vops.c:85 vfs_lookup(ffff80003ac2d648) at vfs_lookup+0x93a sys/kern/vfs_lookup.c:566 namei(ffff80003ac2d648) at namei+0x7ca sys/kern/vfs_lookup.c:250 sys_unveil(ffff80002a3f5260,ffff80003ac2d830,ffff80003ac2d780) at sys_unveil+0x329 sys/kern/vfs_syscalls.c:1009 syscall(ffff80003ac2d830) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003ac2d830) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:748 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xc126e6e9750, count: -9 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffff8000299edff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 acpicpu_idle() at acpicpu_idle+0x457 sys/dev/acpi/acpicpu_x86.c:1224 sched_idle(ffff8000299edff0) at sched_idle+0x391 sys/kern/kern_sched.c:191 end trace frame: 0x0, count: 10 ddb{1}> trace x86_ipi_db(ffff8000299edff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 acpicpu_idle() at acpicpu_idle+0x457 sys/dev/acpi/acpicpu_x86.c:1224 sched_idle(ffff8000299edff0) at sched_idle+0x391 sys/kern/kern_sched.c:191 end trace frame: 0x0, count: -5