last executing test programs: 473.678844ms ago: executing program 3 (id=4): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x33b9) r0 = open(&(0x7f0000000480)='./file0\x00', 0x800, 0x4ebfac6bbaf7900) ioctl$VNDIOCCLR(r0, 0xc0a86b07, &(0x7f0000000200)={0x0, 0x10000, 0x0}) sysctl$net_inet_carp(0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)="e100", 0x2) 470.559769ms ago: executing program 2 (id=3): mknod(&(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x100000000205f, 0x2802) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x10000, 0x0) ioctl$TIOCSETA(r1, 0xc040446c, &(0x7f0000000740)={0x6, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"}) writev(0xffffffffffffffff, &(0x7f0000000440), 0x0) writev(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f0000000440)="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", 0x340}], 0x1) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$TIOCSETA(r2, 0xc0504417, &(0x7f0000000740)={0x0, 0x2000000, 0x0, 0x1, "00000000000000010000b23c8e07e105708a9328", 0xb9, 0x7}) setreuid(0x0, 0x0) ioctl$DIOCIGETIFACES(r0, 0xc0284457, &(0x7f0000000280)={'\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`', &(0x7f0000000240)=""/60, 0x4, 0x5, 0x7}) listen(r0, 0x9) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$DIOCRDELTABLES(r3, 0xc450443e, &(0x7f0000003600)={{'./file0\x00', '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`\x00', 0x1}, 0x0, 0x4, 0x0, 0x1, 0x8, 0x3, 0xffffffff, 0x40, 0x4}) sysctl$net_inet6_icmp6(&(0x7f0000000000)={0x4, 0x18, 0x3a, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$kern(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) 446.471094ms ago: executing program 1 (id=2): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r0, 0x5) setsockopt(r0, 0x6, 0x4, &(0x7f0000000040)="d2674561", 0x4) syz_emit_ethernet(0x52, &(0x7f00000004c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x44, 0x67, 0x0, 0xff, 0x6, 0x0, @local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0x2, 0x8200, 0x0, 0x7fff, {[@timestamp={0x8, 0xa, 0x80000000, 0x80000000}, @md5sig={0x13, 0x12, "d92bb33077d4ce22fc06d4f82b471f26"}]}}}}}}}) 441.032032ms ago: executing program 4 (id=5): r0 = socket(0x11, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) recvfrom(r0, &(0x7f0000000000)=""/26, 0x1a, 0x842, 0x0, 0x0) 385.584389ms ago: executing program 5 (id=6): setresuid(0x0, 0xee00, 0x0) socket$inet(0x2, 0x4, 0x0) socket(0x2, 0x1, 0x0) kill(0xffffffffffffffff, 0xc) 370.075425ms ago: executing program 4 (id=9): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0xfd9f}], 0x2f) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0xfffffe98}], 0x1) execve(0x0, 0x0, 0x0) 361.784935ms ago: executing program 3 (id=10): mknod(&(0x7f0000000480)='./bus\x00', 0x2000, 0x412dff) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000002140)=""/4103, 0x1007}], 0x1) unveil(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)='x\x00') 311.869722ms ago: executing program 1 (id=11): r0 = semget$private(0x0, 0x4, 0x590) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x34, 0x3, 0x0, 0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x1}) setuid(0xffffffffffffffff) semctl$GETZCNT(r0, 0x4, 0x7, &(0x7f00000000c0)=""/77) 280.930905ms ago: executing program 5 (id=12): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2015, r0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 270.991756ms ago: executing program 0 (id=13): setresuid(0xee00, 0xee00, 0x0) r0 = semget(0x0, 0x1, 0x281) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) semop(r0, &(0x7f0000000140)=[{0x1, 0x4, 0x800}], 0x0) 250.571952ms ago: executing program 6 (id=7): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x24, 0x1e, 0x26, 0x1201}, {0x9b1e, 0x7, 0xff, 0x200000}]}) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "008302", 0x8, 0x11, 0x0, @rand_addr="fed38d5ba80b9e61cd0c535a9800", @mcast2, {[], @udp={{0x3, 0x2, 0x8}}}}}}}) 225.59609ms ago: executing program 3 (id=14): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x5cda) setuid(0xee01) chflags(&(0x7f0000000000)='./file0\x00', 0x10001) 225.381681ms ago: executing program 7 (id=8): setuid(0xffffffffffffffff) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x2000, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x1, 0x2, 0x8}, {"b76bf11d5d4ff88eab4e7d94dcf5288151f250627b0e1fb09303834ed31912d28c8b0c85e066cffa0341de445bbf0423"}}}}}}) syz_emit_ethernet(0x1000e, &(0x7f0000000200)={@random="b905f0ffffff", @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x45, 0x0, 0x1, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x1, 0x3, 0x8}, {"e3c4fc107f71ed734b5547194172bf7adeb4d9e8011e314f72d6ee1c78c9623f3ec3a4274c9b8ddaa2"}}}}}}) socket(0x11, 0x3, 0x0) 170.129687ms ago: executing program 0 (id=15): r0 = semget$private(0x0, 0xb, 0x19f) semop(r0, &(0x7f0000000040)=[{0x0, 0x8}, {0x0, 0xfff8, 0x1000}, {0x4, 0x5, 0x1800}], 0x3) semop(r0, &(0x7f0000000080)=[{0x3, 0x47f2, 0x800}, {0x0, 0x6, 0x1000}], 0x2) 161.731229ms ago: executing program 6 (id=16): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$DIOCGETRULESET(r0, 0xc444443b, &(0x7f0000000b80)={0x7, './file0\x00', './file0\x00'}) 156.479206ms ago: executing program 7 (id=17): readv(0xffffffffffffffff, &(0x7f0000000a40)=[{0x0, 0xfffffe88}, {&(0x7f0000000600)=""/251, 0xfb}], 0x10000000000001e3) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x184) mmap(&(0x7f000032a000/0x3000)=nil, 0x3000, 0x1, 0x10, r0, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="ed", 0x1) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$WSMUXIO_INJECTEVENT(r1, 0x80185760, &(0x7f0000000040)={0x4, 0x5, {0x4, 0x7}}) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x68}) r2 = syz_open_pts() close(r2) syz_open_pts() writev(r2, &(0x7f0000000440)=[{0x0}], 0x1) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000040)={{0x2, './file1\x00', [{[@v6=@remote={0xfe, 0x80, '\x00', 0x0}, @v6=@remote={0xfe, 0x80, '\x00', 0x0}], [0x9, 0x40], 0x4000, 0x2}, {[@v4=@remote={0xac, 0x14, 0x0}, @v6=@mcast1], [0x46], 0x4}], {{0x246, 0x48, 0xfa, 0x7ff}, 0x6543, 0x409, 0xfff00000, 0xbe46, 0x8, 0x17, 0x16}, {{0x0, 0x7, 0x1, 0x5}, 0x8001, 0xc86, 0x1000a, 0x2, 0x800, 0xf0}, @v4=@multicast1, 0x4, 0xb, 0x2, 0xf23b, 0x3, [[0xfffffff7, 0x7], [0x2, 0x34c]], [[0xfc000002, 0x401], [0x9]], 0x9, [0xf, 0x79], 0x1, 0x18, 0x1, 0x1, 0x0, 0x40, 0xb, 0x83, 0x5, 0x8, 0x1, 0xce57}}) poll(0x0, 0x0, 0x0) ioctl$TIOCSETA(r3, 0xc1084425, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x3, "210d0000000200000006000000000200007fffff", 0x7effdffe}) execve(0x0, 0x0, 0x0) 151.412318ms ago: executing program 4 (id=18): r0 = semget(0x0, 0x1, 0x281) setuid(0xffffffffffffffff) semctl$GETPID(r0, 0x3, 0x4, 0x0) 127.222192ms ago: executing program 2 (id=19): semget(0x0, 0x1, 0x281) semget(0x0, 0x0, 0x3) select(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 120.004966ms ago: executing program 0 (id=20): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SPKRTONE(r0, 0x80085301, &(0x7f0000001fc0)={0x0, 0x8}) 114.106291ms ago: executing program 6 (id=21): r0 = semget$private(0x0, 0x1, 0x10) semctl$GETZCNT(r0, 0x0, 0x7, 0x0) 110.871721ms ago: executing program 4 (id=22): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000900)="e89fb31bfcdbd7f31e004aed030000006cc53af1a393f8ad764d73dc", 0x1c}], 0x1) execve(0x0, 0x0, 0x0) 59.885126ms ago: executing program 2 (id=23): r0 = semget$private(0x0, 0xb, 0x7f9463001373bd94) semop(r0, &(0x7f0000000000)=[{0x4, 0x0, 0x1800}, {0x2, 0x1, 0x800}, {0x0, 0x40, 0x1800}, {0x0, 0x80, 0x2000}], 0x4) 52.459103ms ago: executing program 0 (id=24): r0 = semget$private(0x0, 0xb, 0x19f) semop(r0, &(0x7f0000000140)=[{0x1, 0x142, 0x1c00}, {0x0, 0x8}, {0x3, 0x4c69, 0x800}, {0x0, 0x100}, {0x3, 0xffc0, 0x1000}, {0x3, 0xa7, 0x1000}], 0x6) 48.203522ms ago: executing program 2 (id=25): r0 = openat$wskbd(0xffffffffffffff9c, 0x0, 0x10, 0x0) ioctl$WSKBDIO_GETMAP(r0, 0xc010570d, &(0x7f00000002c0)={0x5, 0x0}) ioctl$TIOCSTSTAMP(0xffffffffffffffff, 0x8008745a, 0x0) mknod(0x0, 0x2000, 0x1e5f) open(0x0, 0x80, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200), 0x0) execve(0x0, 0x0, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0x88000148, {[0x3, 0x40, 0x6, 0x6, 0x3, 0xd, 0x5, 0x40000000000, 0x6, 0x2, 0x9, 0x91c, 0x8, 0x2000180, 0x0, 0xd3, 0x74, 0xffffffffffffbff7], [0x5438b950, 0x5, 0x1004, 0x5, 0x1, 0x1, 0x9, 0x78a, 0x1, 0x9bb], [0x6, 0x6, 0x8000000008, 0x8000000008, 0x10000, 0x210, 0x1000002], [0x100000000, 0x10801, 0x0, 0x5, 0x3], [{0x5, 0x1, 0xfffffbfb, 0x80000000005}, {0x2, 0x925, 0x20003, 0x338}, {0x1000, 0x7fffffff, 0x0, 0x5}, {0xb, 0xffff, 0x6, 0x594b}, {0x4, 0x9, 0x2, 0x8}, {0x1f, 0x4, 0x0, 0x7}, {0xe4, 0xffffff81, 0x1ff, 0x1}, {0x3, 0x10000, 0x8005, 0x5}], {0x6123, 0x0, 0x501, 0x8}, {0xfffe, 0x7f, 0x8, 0x4}}}) r1 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$FIONREAD(r1, 0x8020699f, &(0x7f0000000100)) socket(0x2, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0) r2 = socket(0x2, 0x3, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r2, 0xc0206921, 0x0) r3 = socket(0x2, 0x1, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x4c, 0x7, 0x3, 0x4}, {0x20, 0xf0, 0xcf}, {0x6, 0x80, 0x3, 0x10000}]}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write(0xffffffffffffffff, 0x0, 0x0) ioctl$FIONREAD(r3, 0x8020690c, &(0x7f00000001c0)) 38.168039ms ago: executing program 4 (id=26): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) r1 = socket$inet(0x2, 0x3, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$BIOCSBLEN(r2, 0xc0044266, &(0x7f00000000c0)=0x34) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000500)={'tap', 0x0}) pread(r2, &(0x7f0000000600)="e7077b6629e0397383eaeac9193e79db7bbbad786e7bbb921dff532158d0b49a3e7de9f2d8fdefa9e6fddc16bcd369b9fc28dc5e", 0x34, 0x5) ioctl$FIONREAD(r1, 0x80206979, &(0x7f0000000100)) 25.604801ms ago: executing program 0 (id=27): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TIOCSETA(r0, 0xcd604406, &(0x7f0000000240)={0x8, 0x7c, 0x5, 0xffc00000, "d6a24901b178927c79486b46c1d100", 0x5, 0x808}) ioctl$DIOCXEND(r0, 0xc0044464, &(0x7f0000000100)=0x20d4) 24.391623ms ago: executing program 5 (id=28): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x1, 0x0) connect$unix(r0, &(0x7f0000000000), 0x10) setrlimit(0x4, 0x0) getpeername$unix(r0, 0x0, &(0x7f0000001340)) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x35}, 0x4, 0x0, 0x0, 0x0, 0x0) ktrace(0x0, 0x1, 0xf0bf9083fffffeef, 0x0) 1.154636ms ago: executing program 0 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9) mkdir(&(0x7f0000000180)='./file0\x00', 0x25) unveil(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000000)='r\x00') unveil(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000002c0)='x\x00') unveil(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='r\x00') openat$pf(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) 0s ago: executing program 5 (id=30): r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x33, 0x0, 0x0) getsockopt(r0, 0x29, 0x33, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.63' (ED25519) to the list of known hosts. panic: ip6_getpcbopt: unexpected option Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *293686 46438 0 0 0x4000000 0 syz-executor db_enter() at db_enter+0x25 panic(ffffffff834eb32a) at panic+0x1cf ip6_getpcbopt(ffff8000015f05c0,33,fffff58076058d00) at ip6_getpcbopt+0x3e3 ip6_ctloutput(0,ffff800010fdcf28,29,33,fffff58076058d00) at ip6_ctloutput+0xfa9 sogetopt(ffff800010fdcf28,29,33,fffff58076058d00) at sogetopt+0x128 sys_getsockopt(ffff80002f0a1ca0,ffff80003c8dfdf0,ffff80003c8dfd40) at sys_getsockopt+0x1eb syscall(ffff80003c8dfdf0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x981d6ab3a60, count: 7 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: ip6_getpcbopt: unexpected option ddb> trace db_enter() at db_enter+0x25 panic(ffffffff834eb32a) at panic+0x1cf ip6_getpcbopt(ffff8000015f05c0,33,fffff58076058d00) at ip6_getpcbopt+0x3e3 ip6_ctloutput(0,ffff800010fdcf28,29,33,fffff58076058d00) at ip6_ctloutput+0xfa9 sogetopt(ffff800010fdcf28,29,33,fffff58076058d00) at sogetopt+0x128 sys_getsockopt(ffff80002f0a1ca0,ffff80003c8dfdf0,ffff80003c8dfd40) at sys_getsockopt+0x1eb syscall(ffff80003c8dfdf0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x981d6ab3a60, count: -8 ddb> show registers rdi 0 rsi 0x1 rbp 0xffff80003c8dfa70 rbx 0xfffff5806b9e3900 rdx 0xffff8000015e5200 rcx 0 rax 0xffff80002f0a1ca0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x715775792a4a1605 r11 0x2e165faf5c4cc00b r12 0 r13 0xffff800010fdcf28 r14 0 r15 0x1 rip 0xffffffff829fcc95 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c8dfa60 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb> show proc PROC (syz-executor) tid=293686 pid=46438 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002f0a14d8,0xffffffff83a76958 process=0xffff807fffff9698 user=0xffff80003c8da000, vmspace=0xfffff5804cc93468 estcpu=0, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 46438 126299 6331 0 2 0 syz-executor *46438 293686 6331 0 7 0x4000000 syz-executor 63069 269862 27878 0 2 0 syz-executor 63069 50066 27878 0 2 0x4000000 syz-executor 93175 372017 34781 0 2 0 syz-executor 93175 84071 34781 0 3 0x4000080 bpf syz-executor 35410 251385 10363 0 2 0 syz-executor 35410 403858 10363 0 3 0x4000080 fsleep syz-executor 87993 255854 73987 0 2 0 syz-executor 87993 303009 73987 0 3 0x4000080 fsleep syz-executor 85949 505960 53987 0 2 0x82000 syz-executor 85949 335611 53987 0 3 0x4002000 suspend syz-executor 28767 204811 30302 0 2 0 syz-executor 28767 53490 30302 0 3 0x4000080 fsleep syz-executor 33552 274096 33683 0 2 0 syz-executor 33552 19970 33683 0 3 0x4000080 fsleep syz-executor 53987 514313 25194 0 3 0x82 nanoslp syz-executor 73987 255046 25194 0 3 0x82 nanoslp syz-executor 6331 277511 25194 0 3 0x82 nanoslp syz-executor 34781 510562 25194 0 3 0x82 nanoslp syz-executor 30302 237722 25194 0 3 0x82 nanoslp syz-executor 10363 215391 25194 0 3 0x82 nanoslp syz-executor 33683 367511 25194 0 3 0x82 nanoslp syz-executor 27878 485930 25194 0 3 0x82 nanoslp syz-executor 25194 160427 1 0 3 0x82 kqread syz-executor 91169 522332 18048 0 3 0x98 kqread sshd-session 18048 22138 19433 0 3 0x92 kqread sshd-session 89088 242701 1 0 2 0x102803 getty 19433 281702 1 0 2 0x2808 sshd 45793 81300 89671 73 3 0x1100090 kqread syslogd 89671 96452 1 0 2 0x102802 syslogd 86579 20334 1 0 2 0x102800 resolvd 28783 371266 44732 77 3 0x100092 kqread dhcpleased 87477 90285 44732 77 3 0x100092 kqread dhcpleased 44732 351670 1 0 2 0x2800 dhcpleased 54419 291838 0 0 3 0x14200 bored smr 8449 167411 0 0 2 0x14200 zerothread 68790 518112 0 0 3 0x14200 aiodoned aiodoned 33365 169845 0 0 3 0x14200 syncer update 97392 75720 0 0 3 0x14200 cleaner cleaner 23456 38533 0 0 3 0x14200 reaper reaper 43911 512057 0 0 3 0x14200 pgdaemon pagedaemon 50642 450868 0 0 3 0x14200 bored viomb 7387 338212 0 0 3 0x40014200 acpi0 acpi0 87462 504598 0 0 3 0x14200 bored softnet0 35423 92444 0 0 3 0x14200 smrbar systqmp 84023 285914 0 0 3 0x14200 bored systq 2432 464548 0 0 3 0x40014200 tmoslp softclock 44773 89090 0 0 3 0x40014200 idle0 1 58897 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11038 12177K 12177K 166960K 12128 0 pcb 18 12K 12K 166960K 18 0 rtable 221 6K 6K 166960K 367 0 pf 33 13K 14K 166960K 35 0 ifaddr 40 6K 7K 166960K 45 0 ifgroup 54 2K 2K 166960K 54 0 sysctl 1 1K 9K 166960K 5 0 counters 34 17K 17K 166960K 34 0 ioctlops 0 0K 4K 166960K 33 0 iov 0 0K 8K 166960K 2 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1291 81K 81K 166960K 1362 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 11 1K 1K 166960K 11 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 93K 166960K 160 0 proc 59 59K 108K 166960K 500 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 in_multi 88 6K 7K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 2 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 37 175K 175K 166960K 37 0 exec 0 0K 1K 166960K 368 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 224 144K 166K 166960K 3121 0 UVM aobj 3 2K 2K 166960K 3 0 pinsyscall 38 76K 94K 166960K 1260 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 1 0K 0K 166960K 1 0 NDP 26 1K 2K 166960K 28 0 temp 39 9138K 9141K 166960K 3630 0 kqueue 13 20K 20K 166960K 25 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 38 0 35 1 0 1 1 0 8 0 rtentry 136 111 0 12 4 0 4 4 0 8 0 unpcb 144 39 0 24 1 0 1 1 0 8 0 syncache 336 5 0 5 1 0 1 1 0 8 1 tcpcb 736 13 0 6 1 0 1 1 0 8 0 arp 96 18 0 2 1 0 1 1 0 8 0 ipq 40 1 0 1 1 0 1 1 0 8 1 ipqe 40 2 0 2 1 0 1 1 0 8 1 inpcb 328 66 0 53 2 0 2 2 0 8 0 nd6 112 24 0 3 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 pfstscr 40 2 0 0 1 0 1 1 0 8 0 pfstitem 24 2 0 0 1 0 1 1 0 8 0 pfstkey 128 2 0 0 1 0 1 1 0 8 0 pfstate 384 1 0 0 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 452 0 0 29 0 29 29 0 8 0 art_table 40 453 0 0 5 0 5 5 0 8 0 art_node 32 111 0 11 1 0 1 1 0 8 0 semupl 112 3 0 3 1 0 1 1 0 8 1 semapl 72 9 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1589 0 120 92 0 92 92 0 8 0 ffsino 256 1589 0 120 92 0 92 92 0 8 0 nchpl 144 1798 0 108 63 0 63 63 0 8 0 vnodes 216 1678 0 0 94 0 94 94 0 8 0 namei 1024 5270 0 5264 3 0 3 3 0 8 1 kstatmem 264 25 0 0 2 0 2 2 0 8 0 scxspl 216 6260 0 6260 4 0 4 4 1 8 4 plimitpl 152 29 0 13 1 0 1 1 0 8 0 sigapl 424 455 0 413 6 0 6 6 0 8 1 knotepl 120 2858 0 2811 2 0 2 2 0 8 0 kqueuepl 184 22 0 12 1 0 1 1 0 8 0 pipepl 304 123 0 96 3 0 3 3 0 8 0 fdescpl 448 442 0 413 5 0 5 5 0 8 1 filepl 120 1479 0 1264 7 0 7 7 0 8 0 lockfpl 104 6 0 4 1 0 1 1 0 8 0 lockfspl 48 4 0 2 1 0 1 1 0 8 0 sessionpl 144 23 0 15 1 0 1 1 0 8 0 pgrppl 48 31 0 15 1 0 1 1 0 8 0 ucredpl 104 93 0 77 1 0 1 1 0 8 0 zombiepl 144 413 0 413 1 0 1 1 0 8 1 processpl 1152 455 0 413 4 0 4 4 0 8 0 procpl 664 486 0 436 5 0 5 5 0 8 0 sockpl 552 143 0 112 3 0 3 3 0 8 0 mcl64k 65536 7 0 7 1 0 1 1 0 8 1 mcl16k 16384 4 0 4 1 0 1 1 0 8 1 mcl12k 12288 2 0 2 1 0 1 1 0 8 1 mcl9k128 9344 1 0 1 1 0 1 1 0 8 1 mcl8k 8192 14 0 14 1 0 1 1 0 8 1 mcl4k 4096 2492 0 2437 14 0 14 14 0 8 6 mcl2k2 2112 1 0 1 1 0 1 1 0 8 1 mcl2k 2048 130 0 130 1 0 1 1 0 8 1 mtagpl 96 4 0 4 1 0 1 1 0 8 1 mbufpl 256 4363 0 4225 10 0 10 10 0 8 0 bufpl 272 2429 0 102 156 0 156 156 0 8 0 anonpl 24 86309 0 83610 44 0 44 44 0 88 21 amapchunkpl 152 8640 0 8193 31 0 31 31 0 158 10 amappl16 200 1177 0 1157 4 0 4 4 0 8 2 amappl15 192 2 0 2 1 0 1 1 0 8 1 amappl14 184 440 0 440 1 0 1 1 0 8 1 amappl13 176 115 0 105 1 0 1 1 0 8 0 amappl12 168 684 0 655 2 0 2 2 0 8 0 amappl11 160 4 0 4 1 0 1 1 0 8 1 amappl10 152 59 0 49 1 0 1 1 0 8 0 amappl9 144 271 0 271 1 0 1 1 0 8 1 amappl8 136 92 0 91 1 0 1 1 0 8 0 amappl7 128 138 0 131 1 0 1 1 0 8 0 amappl6 120 150 0 149 1 0 1 1 0 8 0 amappl5 112 93 0 86 1 0 1 1 0 8 0 amappl4 104 266 0 251 1 0 1 1 0 8 0 amappl3 96 1537 0 1436 3 0 3 3 0 8 0 amappl2 88 521 0 485 2 0 2 2 0 8 0 amappl1 80 10185 0 9752 13 0 13 13 0 8 0 amappl 88 2404 0 2250 4 0 4 4 0 92 0 uvmvnodes 80 99 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 253 0 253 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 442 0 413 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 442 0 413 1 0 1 1 0 8 0 vmmpekpl 168 5526 0 5495 2 0 2 2 0 8 0 vmmpepl 168 37175 0 35554 79 0 79 79 0 357 2 vmsppl 368 441 0 413 4 0 4 4 0 8 1 rwobjpl 40 13702 0 12931 11 0 11 11 0 8 1 pdppl 4096 890 0 826 94 14 80 80 0 8 16 pvpl 32 213767 0 204866 114 0 114 114 0 265 34 pmappl 216 441 0 413 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 512 0 14 15 0 15 15 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace db_enter() at db_enter+0x25 panic(ffffffff834eb32a) at panic+0x1cf ip6_getpcbopt(ffff8000015f05c0,33,fffff58076058d00) at ip6_getpcbopt+0x3e3 ip6_ctloutput(0,ffff800010fdcf28,29,33,fffff58076058d00) at ip6_ctloutput+0xfa9 sogetopt(ffff800010fdcf28,29,33,fffff58076058d00) at sogetopt+0x128 sys_getsockopt(ffff80002f0a1ca0,ffff80003c8dfdf0,ffff80003c8dfd40) at sys_getsockopt+0x1eb syscall(ffff80003c8dfdf0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x981d6ab3a60, count: -8 ddb> machine ddbcpu 1 No such command ddb> trace db_enter() at db_enter+0x25 panic(ffffffff834eb32a) at panic+0x1cf ip6_getpcbopt(ffff8000015f05c0,33,fffff58076058d00) at ip6_getpcbopt+0x3e3 ip6_ctloutput(0,ffff800010fdcf28,29,33,fffff58076058d00) at ip6_ctloutput+0xfa9 sogetopt(ffff800010fdcf28,29,33,fffff58076058d00) at sogetopt+0x128 sys_getsockopt(ffff80002f0a1ca0,ffff80003c8dfdf0,ffff80003c8dfd40) at sys_getsockopt+0x1eb syscall(ffff80003c8dfdf0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x981d6ab3a60, count: -8