Warning: Permanently added '10.128.1.95' (ED25519) to the list of known hosts. 2024/11/27 13:02:52 ignoring optional flag "sandboxArg"="0" 2024/11/27 13:02:52 ignoring optional flag "type"="gce" 2024/11/27 13:02:52 parsed 1 programs 2024/11/27 13:02:54 executed programs: 0 panic: ufs_rename: lost dir entry Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 212942 43996 0 0 0x4000000 0 syz-executor.6 * 10789 42739 0 0 0x4000000 1K syz-executor.3 db_enter() at db_enter+0x25 panic(ffffffff8305e806) at panic+0x1e5 ufs_rename(ffff80002a21fd78) at ufs_rename+0x18b2 VOP_RENAME(fffffd807af80cc8,fffffd8067839bf8,ffff80002a21ff48,fffffd8068994b10,0,ffff80002a21fe98) at VOP_RENAME+0x13c dorenameat(ffff8000ffff4048,ffffff9c,200001c0,ffffff9c,20000200) at dorenameat+0x3f8 syscall(ffff80002a2200e0) at syscall+0xaf8 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xf2bb772c9d0, count: 8 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: ufs_rename: lost dir entry ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff8305e806) at panic+0x1e5 ufs_rename(ffff80002a21fd78) at ufs_rename+0x18b2 VOP_RENAME(fffffd807af80cc8,fffffd8067839bf8,ffff80002a21ff48,fffffd8068994b10,0,ffff80002a21fe98) at VOP_RENAME+0x13c dorenameat(ffff8000ffff4048,ffffff9c,200001c0,ffffff9c,20000200) at dorenameat+0x3f8 syscall(ffff80002a2200e0) at syscall+0xaf8 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xf2bb772c9d0, count: -7 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80002a21faf0 rbx 0xffff800029b5cdc7 rdx 0x3fd rcx 0 rax 0x22 r8 0x101010101010101 r9 0x8080808080808080 r10 0xf95b5fe6d2a2d455 r11 0x39faf79154f53d87 r12 0xffff800029b5cbc8 r13 0 r14 0 r15 0x1 rip 0xffffffff826e31c5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80002a21fae0 ss 0 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor.3) tid=10789 pid=42739 tcnt=5 stat=onproc flags process=0 proc=4000000 runpri=17, usrpri=74, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000ffff6ce8,0xffff8000ffff4a78 process=0xffff80002a0be260 user=0xffff80002a21b000, vmspace=0xfffffd80672ea748 estcpu=24, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 43996 444775 5198 0 2 0 syz-executor.6 43996 212942 5198 0 7 0x4000000 syz-executor.6 29532 462178 90451 0 2 0 syz-executor.2 29532 219361 90451 0 2 0x4000080 syz-executor.2 25108 250261 58054 0 2 0 syz-executor.5 25108 112995 58054 0 2 0x4000080 syz-executor.5 25108 106025 58054 0 3 0x4000080 fsleep syz-executor.5 52178 389120 66705 0 2 0 syz-executor.1 52178 236717 66705 0 2 0x4000000 syz-executor.1 42739 106156 5262 0 2 0 syz-executor.3 42739 410344 5262 0 2 0x4000000 syz-executor.3 42739 162363 5262 0 3 0x4000000 inode syz-executor.3 *42739 10789 5262 0 7 0x4000000 syz-executor.3 42739 417549 5262 0 2 0x4000000 syz-executor.3 90451 104625 59364 0 3 0x82 nanoslp syz-executor.2 5198 89779 59364 0 3 0x82 nanoslp syz-executor.6 85139 352115 59364 0 3 0x82 nanoslp syz-executor.4 58054 175129 59364 0 3 0x82 nanoslp syz-executor.5 92263 318343 59364 0 3 0x2 biowait syz-executor.7 5262 213157 59364 0 3 0x82 nanoslp syz-executor.3 48738 381342 59364 0 2 0x2 syz-executor.0 66705 290803 59364 0 3 0x82 nanoslp syz-executor.1 59364 478781 83685 0 3 0x82 wait syz-execprog 59364 306870 83685 0 3 0x4000082 thrsleep syz-execprog 59364 515407 83685 0 3 0x4000082 wait syz-execprog 59364 196752 83685 0 3 0x4000082 thrsleep syz-execprog 59364 394465 83685 0 3 0x4000082 wait syz-execprog 59364 434958 83685 0 3 0x4000082 wait syz-execprog 59364 151707 83685 0 3 0x4000082 wait syz-execprog 59364 202613 83685 0 3 0x4000082 thrsleep syz-execprog 59364 257375 83685 0 3 0x4000082 wait syz-execprog 59364 19317 83685 0 3 0x4000082 wait syz-execprog 59364 198970 83685 0 3 0x4000082 wait syz-execprog 59364 141994 83685 0 3 0x4000082 thrsleep syz-execprog 59364 336096 83685 0 3 0x4000082 thrsleep syz-execprog 59364 464316 83685 0 3 0x4000082 thrsleep syz-execprog 59364 492823 83685 0 3 0x4000082 kqread syz-execprog 83685 409064 91970 0 3 0x10008a sigsusp ksh 91970 3488 57340 0 3 0x98 kqread sshd-session 57340 49659 90436 0 3 0x92 kqread sshd-session 73423 77544 1 0 3 0x100083 ttyin getty 90436 436171 1 0 3 0x88 kqread sshd 71086 259011 21739 74 3 0x1100092 bpf pflogd 21739 38153 1 0 3 0x80 sbwait pflogd 89637 439643 42904 73 3 0x1100090 kqread syslogd 42904 346904 1 0 3 0x100082 sbwait syslogd 14298 230933 1 0 3 0x100080 kqread resolvd 81271 253511 32491 77 3 0x100092 kqread dhcpleased 90778 5580 32491 77 3 0x100092 kqread dhcpleased 32491 331772 1 0 3 0x80 kqread dhcpleased 34168 287153 0 0 3 0x14200 bored smr 31949 427015 0 0 3 0x14200 pgzero zerothread 87770 394992 0 0 3 0x14200 aiodoned aiodoned 4875 512976 0 0 3 0x14200 syncer update 84627 471871 0 0 3 0x14200 cleaner cleaner 15138 4463 0 0 3 0x14200 reaper reaper 9929 303891 0 0 3 0x14200 pgdaemon pagedaemon 49373 232634 0 0 3 0x14200 bored viomb 17739 176458 0 0 3 0x40014200 acpi0 acpi0 83572 206227 0 0 3 0x40014200 idle1 21476 466833 0 0 3 0x14200 bored softnet3 47481 55148 0 0 3 0x14200 bored softnet2 37664 88997 0 0 3 0x14200 bored softnet1 14498 420352 0 0 3 0x14200 bored softnet0 31306 290054 0 0 3 0x14200 bored systqmp 96406 167335 0 0 3 0x14200 bored systq 80843 153721 0 0 3 0x14200 tmoslp softclockmp 20345 326112 0 0 3 0x40014200 tmoslp softclock 73664 142139 0 0 3 0x40014200 idle0 1 493989 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 52178 (syz-executor.1) thread 0xffff80002a0071e8 (236717) exclusive rrwlock inode r = 0 (0xfffffd8067c4e850) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3bd #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x283 #7 ufs_mkdir+0x113 #8 VOP_MKDIR+0x102 #9 domkdirat+0x179 #10 syscall+0xaf8 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd8067c4e3f0) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3bd #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vget+0x2bd #6 ufs_ihashget+0x192 #7 ffs_vget+0x8c #8 ufs_lookup+0x16bc #9 VOP_LOOKUP+0x6e #10 vfs_lookup+0x8fa #11 namei+0x7aa #12 domkdirat+0x8b #13 syscall+0xaf8 #14 Xsyscall+0x128 Process 42739 (syz-executor.3) thread 0xffff8000ffff8ce0 (410344) exclusive rrwlock inode r = 0 (0xfffffd806febbb90) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3bd #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vfs_lookup+0x109 #6 namei+0x7aa #7 domkdirat+0x8b #8 syscall+0xaf8 #9 Xsyscall+0x128 Process 42739 (syz-executor.3) thread 0xffff8000ffff4048 (10789) exclusive rrwlock inode r = 0 (0xfffffd806febb618) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3bd #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vget+0x2bd #6 ufs_ihashget+0x192 #7 ffs_vget+0x8c #8 ufs_lookup+0x19f8 #9 VOP_LOOKUP+0x6e #10 vfs_relookup+0xd4 #11 ufs_rename+0x15e4 #12 VOP_RENAME+0x13c #13 dorenameat+0x3f8 #14 syscall+0xaf8 #15 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806febbed8) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3bd #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vfs_relookup+0x5c #6 ufs_rename+0x15e4 #7 VOP_RENAME+0x13c #8 dorenameat+0x3f8 #9 syscall+0xaf8 #10 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff8369a9b8) #0 witness_lock+0x5bb #1 __mp_acquire_count+0x58 #2 mi_switch+0x4b7 #3 sleep_finish+0x2f2 #4 biowait+0xc1 #5 bwrite+0x2e5 #6 VOP_BWRITE+0x60 #7 ufs_direnter+0x7d1 #8 ufs_rename+0xe54 #9 VOP_RENAME+0x13c #10 dorenameat+0x3f8 #11 syscall+0xaf8 #12 Xsyscall+0x128 Process 92263 (syz-executor.7) thread 0xffff8000ffff9988 (318343) exclusive rrwlock inode r = 0 (0xfffffd8067c4e508) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3bd #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x283 #7 ufs_mkdir+0x113 #8 VOP_MKDIR+0x102 #9 domkdirat+0x179 #10 syscall+0xaf8 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd8068df8420) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3bd #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vfs_lookup+0x109 #6 namei+0x7aa #7 domkdirat+0x8b #8 syscall+0xaf8 #9 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10181 11113K 11113K 166960K 11262 0 pcb 17 12K 12K 166960K 17 0 rtable 234 6K 6K 166960K 380 0 pf 34 17K 18K 166960K 48 0 ifaddr 43 7K 7K 166960K 49 0 ifgroup 55 2K 2K 166960K 60 0 counters 64 36K 36K 166960K 66 0 ioctlops 0 0K 4K 166960K 1484 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1262 79K 80K 166960K 1281 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 2 0K 0K 166960K 2 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1690 195K 286K 166960K 12468 0 file desc 15 53K 77K 166960K 232 0 proc 69 91K 128K 166960K 556 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 in_multi 99 7K 7K 166960K 110 0 ether_multi 1 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 25 122K 122K 166960K 25 0 exec 0 0K 1K 166960K 426 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 266 75K 76K 166960K 5078 0 UVM aobj 3 2K 2K 166960K 3 0 pinsyscall 41 82K 112K 166960K 1613 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 12 0K 2K 166960K 31 0 temp 1 6868K 6932K 166960K 5532 0 kqueue 13 20K 20K 166960K 46 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 24 0 0 1 0 1 1 0 8 0 rtpcb 120 36 0 33 1 0 1 1 0 8 0 rtentry 112 122 0 12 4 0 4 4 0 8 0 unpcb 144 69 0 52 1 0 1 1 0 8 0 syncache 336 9 0 9 2 1 1 1 0 8 1 tcpcb 808 12 0 9 1 0 1 1 0 8 0 arp 120 20 0 2 1 0 1 1 0 8 0 inpcb 336 73 0 67 1 0 1 1 0 8 0 nd6 136 27 0 3 2 1 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 27 0 4 1 0 1 1 0 8 0 pfstkey 128 27 0 4 1 0 1 1 0 8 0 pfstate 376 27 0 4 3 0 3 3 0 8 0 pfrule 1344 21 0 15 2 0 2 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 501 0 48 32 3 29 29 0 8 0 art_table 32 502 0 48 5 1 4 4 0 8 0 art_node 16 121 0 21 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1966 0 419 98 0 98 98 0 8 1 ffsino 280 1967 0 419 111 0 111 111 0 8 0 nchpl 144 2717 0 918 69 1 68 68 0 8 0 uvmvnodes 80 1981 0 0 41 0 41 41 0 8 0 vnodes 216 1981 0 0 111 0 111 111 0 8 0 namei 1024 19351 0 19345 4 2 2 2 0 8 1 percpumem 16 47 0 1 1 0 1 1 0 8 0 kstatmem 264 26 0 2 2 0 2 2 0 8 0 scxspl 216 11120 0 11119 11 10 1 8 1 8 0 plimitpl 152 59 0 42 1 0 1 1 0 8 0 sigapl 424 591 0 543 9 3 6 6 0 8 0 futexpl 64 578 0 577 2 1 1 1 0 8 0 knotepl 120 111 0 0 4 0 4 4 0 8 0 kqueuepl 216 42 0 33 1 0 1 1 0 8 0 pipepl 328 188 0 160 5 2 3 3 0 8 0 fdescpl 504 573 0 544 6 1 5 5 0 8 0 filepl 152 2464 0 2327 7 1 6 6 0 8 0 lockfpl 104 6 0 4 1 0 1 1 0 8 0 lockfspl 48 4 0 2 1 0 1 1 0 8 0 sessionpl 144 35 0 18 1 0 1 1 0 8 0 pgrppl 48 35 0 18 1 0 1 1 0 8 0 ucredpl 104 116 0 103 1 0 1 1 0 8 0 zombiepl 144 544 0 543 2 1 1 1 0 8 0 processpl 1168 591 0 543 5 1 4 4 0 8 0 procpl 648 712 0 641 10 3 7 7 0 8 0 sockpl 688 178 0 152 4 1 3 3 0 8 0 mcl8k 8192 4 0 0 1 0 1 1 0 8 0 mcl4k 4096 177 0 0 21 0 21 21 0 8 0 mcl2k 2048 18 0 0 3 0 3 3 0 8 0 mtagpl 96 1 0 0 1 0 1 1 0 8 0 mbufpl 256 197 0 0 11 0 11 11 0 8 0 bufpl 280 4715 0 160 326 0 326 326 0 8 0 anonpl 24 349397 0 345069 60 17 43 56 0 185 14 amapchunkpl 152 19041 0 18423 42 15 27 28 0 158 1 amappl16 200 10282 0 10193 9 4 5 5 0 8 0 amappl15 192 20 0 20 2 2 0 1 0 8 0 amappl14 184 241 0 226 3 1 2 2 0 8 0 amappl13 176 28 0 28 2 2 0 1 0 8 0 amappl12 168 1308 0 1277 4 2 2 2 0 8 0 amappl11 160 72 0 57 1 0 1 1 0 8 0 amappl10 152 87 0 78 2 1 1 1 0 8 0 amappl9 144 469 0 468 2 1 1 1 0 8 0 amappl8 136 198 0 169 2 0 2 2 0 8 0 amappl7 128 233 0 212 3 1 2 2 0 8 0 amappl6 120 322 0 317 2 1 1 1 0 8 0 amappl5 112 216 0 205 1 0 1 1 0 8 0 amappl4 104 538 0 512 3 1 2 2 0 8 1 amappl3 96 4065 0 3973 4 1 3 3 0 8 0 amappl2 88 1338 0 1257 6 2 4 4 0 8 1 amappl1 80 15095 0 14506 33 12 21 24 0 8 7 amappl 88 4311 0 4131 8 3 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 573 0 544 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 573 0 544 1 0 1 1 0 8 0 vmmpekpl 168 11549 0 11505 3 0 3 3 0 8 0 vmmpepl 168 72505 0 70621 129 15 114 125 0 357 27 vmsppl 456 572 0 544 6 1 5 5 0 8 0 rwobjpl 64 33221 0 30183 64 12 52 55 0 8 0 pdppl 4096 1153 0 1088 119 48 71 77 0 8 6 pvpl 32 47957 0 0 387 0 387 387 0 265 0 pmappl 248 572 0 544 3 0 3 3 0 8 0 extentpl 40 55 0 38 1 0 1 1 0 8 0 phpool 112 311 0 58 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff834c5ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff8369a7b0) at __mp_lock+0x192 intr_handler(ffff80002a225dc0,ffff800000079f80) at intr_handler+0xe1 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f __mp_lock(ffffffff8369a7b0) at __mp_lock+0x192 syscall(ffff80002a225f90) at syscall+0xad6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xa2779dbd6c0, count: 6 ddb{0}> trace x86_ipi_db(ffffffff834c5ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff8369a7b0) at __mp_lock+0x192 intr_handler(ffff80002a225dc0,ffff800000079f80) at intr_handler+0xe1 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f __mp_lock(ffffffff8369a7b0) at __mp_lock+0x192 syscall(ffff80002a225f90) at syscall+0xad6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xa2779dbd6c0, count: -9 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff8305e806) at panic+0x1e5 ufs_rename(ffff80002a21fd78) at ufs_rename+0x18b2 VOP_RENAME(fffffd807af80cc8,fffffd8067839bf8,ffff80002a21ff48,fffffd8068994b10,0,ffff80002a21fe98) at VOP_RENAME+0x13c dorenameat(ffff8000ffff4048,ffffff9c,200001c0,ffffff9c,20000200) at dorenameat+0x3f8 syscall(ffff80002a2200e0) at syscall+0xaf8 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xf2bb772c9d0, count: 8 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff8305e806) at panic+0x1e5 ufs_rename(ffff80002a21fd78) at ufs_rename+0x18b2 VOP_RENAME(fffffd807af80cc8,fffffd8067839bf8,ffff80002a21ff48,fffffd8068994b10,0,ffff80002a21fe98) at VOP_RENAME+0x13c dorenameat(ffff8000ffff4048,ffffff9c,200001c0,ffffff9c,20000200) at dorenameat+0x3f8 syscall(ffff80002a2200e0) at syscall+0xaf8 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xf2bb772c9d0, count: -7