panic: ifa_update_broadaddr does not support dynamic length Stopped at db_enter+0x18: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *499793 26347 0 0 0x4000000 0 syz-executor.0 db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398 panic() at panic+0x15c sys/kern/subr_prf.c:207 ifa_update_broadaddr(ffff800000aa0800,ffff800000aa1d00,ffff8000149273e0) at ifa_update_broadaddr+0x61 sys/net/if.c:3034 in_ioctl(80206913,ffff8000149273d0,ffff800000aa0800,1) at in_ioctl+0x463 sys/netinet/in.c:311 ifioctl(fffffd8037012300,80206913,ffff8000149273d0,ffff80001488d658) at ifioctl+0xb3c sys/net/if.c:2266 sys_ioctl(ffff80001488d658,ffff8000149274e8,ffff800014927530) at sys_ioctl+0x5b9 syscall(ffff8000149275b0) at syscall+0x507 sys/arch/amd64/amd64/trap.c:555 Xsyscall(6,0,ffffffffffffff36,0,3,478f6cfe010) at Xsyscall+0x128 end of kernel end trace frame: 0x47b87d5a9f0, count: 7 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic ifa_update_broadaddr does not support dynamic length ddb> trace db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398 panic() at panic+0x15c sys/kern/subr_prf.c:207 ifa_update_broadaddr(ffff800000aa0800,ffff800000aa1d00,ffff8000149273e0) at ifa_update_broadaddr+0x61 sys/net/if.c:3034 in_ioctl(80206913,ffff8000149273d0,ffff800000aa0800,1) at in_ioctl+0x463 sys/netinet/in.c:311 ifioctl(fffffd8037012300,80206913,ffff8000149273d0,ffff80001488d658) at ifioctl+0xb3c sys/net/if.c:2266 sys_ioctl(ffff80001488d658,ffff8000149274e8,ffff800014927530) at sys_ioctl+0x5b9 syscall(ffff8000149275b0) at syscall+0x507 sys/arch/amd64/amd64/trap.c:555 Xsyscall(6,0,ffffffffffffff36,0,3,478f6cfe010) at Xsyscall+0x128 end of kernel end trace frame: 0x47b87d5a9f0, count: -8 ddb> show registers rdi 0xffffffff82049277 db_enter+0x17 rsi 0x1826 __ALIGN_SIZE+0x826 rbp 0xffff800014927170 rbx 0xffff800014927220 rdx 0x1827 __ALIGN_SIZE+0x827 rcx 0xffff800017364000 rax 0xffff800017364000 r8 0xffff800014927130 r9 0x1 r10 0xffff800000a717c0 r11 0x434768072e47bed9 r12 0x3000000008 r13 0xffff800014927180 r14 0x100 r15 0x1 rip 0xffffffff82049278 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff800014927160 ss 0x10 db_enter+0x18: addq $0x8,%rsp ddb> show proc PROC (syz-executor.0) pid=499793 stat=onproc flags process=0 proc=4000000 pri=82, usrpri=82, nice=20 forw=0xffffffffffffffff, list=0xffff80001488cef0,0xffffffff8258bb98 process=0xffff8000ffff6010 user=0xffff800014922000, vmspace=0xfffffd803f011dd0 estcpu=36, cpticks=0, pctcpu=0.0 user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 26347 20940 49750 0 2 0 syz-executor.0 *26347 499793 49750 0 7 0x4000000 syz-executor.0 86630 204126 82154 0 2 0 syz-executor.1 86630 311513 82154 0 3 0x4000080 tunread syz-executor.1 82154 383028 20929 0 3 0x82 nanosleep syz-executor.1 49750 281362 20929 0 3 0x82 nanosleep syz-executor.0 68643 91434 0 0 3 0x14200 acct acct 54709 35453 0 0 3 0x14200 bored sosplice 20929 304345 15081 0 3 0x82 thrsleep syz-fuzzer 20929 349651 15081 0 3 0x4000082 thrsleep syz-fuzzer 20929 331615 15081 0 3 0x4000082 kqread syz-fuzzer 20929 522105 15081 0 3 0x4000082 thrsleep syz-fuzzer 20929 497787 15081 0 3 0x4000082 thrsleep syz-fuzzer 20929 360105 15081 0 3 0x4000082 thrsleep syz-fuzzer 20929 434573 15081 0 3 0x4000082 thrsleep syz-fuzzer 20929 337604 15081 0 3 0x4000082 thrsleep syz-fuzzer 15081 238007 93617 0 3 0x10008a pause ksh 93617 429742 9927 0 3 0x92 select sshd 71063 501633 1 0 3 0x100083 ttyin getty 9927 21334 1 0 3 0x80 select sshd 56033 466659 39500 73 3 0x100090 kqread syslogd 39500 512954 1 0 3 0x100082 netio syslogd 40074 287876 0 0 2 0x14200 zerothread 89339 353470 0 0 3 0x14200 aiodoned aiodoned 70143 314685 0 0 3 0x14200 syncer update 80324 121750 0 0 3 0x14200 cleaner cleaner 27131 177344 0 0 3 0x14200 reaper reaper 63438 470221 0 0 3 0x14200 pgdaemon pagedaemon 21984 35922 0 0 3 0x14200 bored crynlk 81664 38762 0 0 3 0x14200 bored crypto 36210 153712 0 0 3 0x40014200 acpi0 acpi0 37461 156627 0 0 3 0x14200 bored softnet 90899 423309 0 0 3 0x14200 bored systqmp 58388 248384 0 0 3 0x14200 bored systq 34921 416433 0 0 3 0x40014200 bored softclock 71354 298449 0 0 3 0x40014200 idle0 3470 18196 0 0 3 0x14200 bored smr 1 152845 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim Kern Lim devbuf 9576 6970K 8384K 78643K 30846 0 0 pcb 13 10K 12K 78643K 774 0 0 rtable 120 4K 5K 78643K 1357 0 0 ifaddr 88 20K 20K 78643K 708 0 0 counters 19 16K 16K 78643K 19 0 0 ioctlops 0 0K 2K 78643K 282 0 0 iov 0 0K 32K 78643K 974 0 0 mount 1 1K 1K 78643K 1 0 0 vnodes 1231 77K 78K 78643K 7280 0 0 UFS quota 1 32K 32K 78643K 1 0 0 UFS mount 5 36K 36K 78643K 5 0 0 shm 2 1K 9K 78643K 49 0 0 VM map 26 6K 7K 78643K 39 0 0 sem 12 0K 1K 78643K 856 0 0 dirhash 12 2K 2K 78643K 12 0 0 ACPI 1794 195K 288K 78643K 12646 0 0 file desc 6 17K 25K 78643K 3781 0 0 sigio 0 0K 0K 78643K 47 0 0 proc 44 30K 54K 78643K 1638 0 0 subproc 32 2K 2K 78643K 442 0 0 NFS srvsock 1 0K 0K 78643K 1 0 0 NFS daemon 1 16K 16K 78643K 1 0 0 ip_moptions 0 0K 0K 78643K 1903 0 0 in_multi 36 2K 2K 78643K 708 0 0 ether_multi 1 0K 0K 78643K 18 0 0 mrt 1 0K 0K 78643K 14 0 0 ISOFS mount 1 32K 32K 78643K 1 0 0 MSDOSFS mount 1 16K 16K 78643K 1 0 0 ttys 108 477K 477K 78643K 108 0 0 exec 0 0K 1K 78643K 932 0 0 pagedep 1 8K 8K 78643K 1 0 0 inodedep 1 32K 32K 78643K 1 0 0 newblk 1 0K 0K 78643K 1 0 0 VM swap 7 26K 26K 78643K 7 0 0 UVM amap 152 202K 208K 78643K 10503 0 0 UVM aobj 130 6K 6K 78643K 136 0 0 memdesc 1 4K 4K 78643K 1 0 0 crypto data 1 1K 1K 78643K 1 0 0 ip6_options 0 0K 1K 78643K 808 0 0 NDP 22 0K 1K 78643K 232 0 0 temp 187 3544K 4183K 78643K 158121 0 0 kqueue 0 0K 0K 78643K 42 0 0 SYN cache 2 16K 16K 78643K 2 0 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 96 0 90 1 0 1 1 0 8 0 rtpcb 80 386 0 386 7 6 1 1 0 8 1 rtentry 112 489 0 442 2 0 2 2 0 8 0 unpcb 120 4284 0 4276 1 0 1 1 0 8 0 syncache 264 15 0 15 6 6 0 1 0 8 0 tcpqe 32 112 0 112 3 3 0 1 0 8 0 tcpcb 544 2052 0 2048 23 22 1 15 0 8 0 ipq 40 48 0 48 17 16 1 1 0 8 1 ipqe 40 1520 0 1520 17 16 1 1 0 8 1 inpcb 280 6765 0 6760 18 16 2 9 0 8 1 rttmr 72 3 0 3 2 2 0 1 0 8 0 ip6q 72 2 0 2 1 1 0 1 0 8 0 ip6af 40 6 0 6 1 1 0 1 0 8 0 nd6 48 63 0 59 2 1 1 1 0 8 0 pkpcb 40 4 0 4 2 2 0 1 0 8 0 swfcl 56 11 0 0 1 0 1 1 0 8 0 ppxss 1128 84 0 83 13 12 1 1 0 8 0 art_heap8 4096 4 0 2 4 2 2 3 0 8 0 art_heap4 256 1841 0 1608 25 10 15 16 0 8 0 art_table 32 1845 0 1610 3 1 2 3 0 8 0 art_node 16 488 0 445 1 0 1 1 0 8 0 sysvmsgpl 40 61 0 36 1 0 1 1 0 8 0 semupl 112 2 0 2 1 1 0 1 0 8 0 semapl 112 848 0 838 1 0 1 1 0 8 0 shmpl 112 134 0 6 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 7420 0 6024 46 0 46 46 0 8 0 ffsino 240 7420 0 6024 83 0 83 83 0 8 0 nchpl 144 13263 0 12817 60 40 20 60 0 8 0 uvmvnodes 72 7794 0 0 142 0 142 142 0 8 0 vnodes 208 7794 0 0 411 0 411 411 0 8 0 namei 1024 47744 0 47744 3 2 1 1 0 8 1 vcpupl 1984 26 0 2 4 0 4 4 0 8 0 vmpool 520 37 0 13 2 0 2 2 0 8 0 scsiplug 64 4 0 4 2 2 0 1 0 8 0 scxspl 192 50821 0 50821 24 23 1 7 0 8 1 plimitpl 152 369 0 363 1 0 1 1 0 8 0 sigapl 432 3879 0 3867 2 0 2 2 0 8 0 futexpl 56 111309 0 111309 4 3 1 1 0 8 1 knotepl 112 952 0 933 2 1 1 2 0 8 0 kqueuepl 104 1148 0 1146 4 3 1 4 0 8 0 pipepl 112 2484 0 2465 6 5 1 2 0 8 0 fdescpl 424 3880 0 3867 2 0 2 2 0 8 0 filepl 120 37600 0 37511 18 14 4 10 0 8 1 lockfpl 104 1418 0 1418 3 2 1 1 0 8 1 lockfspl 48 464 0 464 3 2 1 1 0 8 1 sessionpl 112 41 0 33 1 0 1 1 0 8 0 pgrppl 48 69 0 61 1 0 1 1 0 8 0 ucredpl 96 3884 0 3877 1 0 1 1 0 8 0 zombiepl 144 3875 0 3875 1 0 1 1 0 8 1 processpl 864 3904 0 3875 4 0 4 4 0 8 0 procpl 632 8492 0 8454 5 1 4 5 0 8 0 sosppl 128 62 0 62 10 9 1 1 0 8 1 sockpl 384 11501 0 11488 29 25 4 13 0 8 2 mcl64k 65536 670 0 670 36 35 1 33 0 8 1 mcl16k 16384 52 0 52 15 14 1 1 0 8 1 mcl12k 12288 125 0 125 9 8 1 1 0 8 1 mcl9k 9216 58 0 58 18 17 1 1 0 8 1 mcl8k 8192 167 0 167 4 3 1 1 0 8 1 mcl4k 4096 513 0 513 4 3 1 1 0 8 1 mcl2k2 2112 43 0 43 15 15 0 1 0 8 0 mcl2k 2048 71683 0 71632 24 17 7 17 0 8 0 mtagpl 80 137 0 136 5 4 1 1 0 8 0 mbufpl 256 153422 0 153326 191 175 16 33 0 8 8 bufpl 256 23570 0 14991 537 0 537 537 0 8 0 anonpl 16 531660 0 514060 197 103 94 117 0 62 2 amapchunkpl 152 22320 0 22170 72 64 8 31 0 158 0 amappl16 192 24903 0 23640 187 113 74 85 0 8 8 amappl15 184 407 0 403 3 2 1 1 0 8 0 amappl14 176 775 0 767 1 0 1 1 0 8 0 amappl13 168 287 0 285 1 0 1 1 0 8 0 amappl12 160 390 0 390 5 4 1 1 0 8 1 amappl11 152 656 0 652 1 0 1 1 0 8 0 amappl10 144 484 0 482 1 0 1 1 0 8 0 amappl9 136 1203 0 1200 1 0 1 1 0 8 0 amappl8 128 786 0 741 3 1 2 2 0 8 0 amappl7 120 618 0 612 1 0 1 1 0 8 0 amappl6 112 616 0 604 1 0 1 1 0 8 0 amappl5 104 761 0 754 1 0 1 1 0 8 0 amappl4 96 3720 0 3689 1 0 1 1 0 8 0 amappl3 88 1127 0 1120 1 0 1 1 0 8 0 amappl2 80 29417 0 29346 3 1 2 3 0 8 0 amappl1 72 81901 0 81506 25 16 9 20 0 8 0 amappl 80 9168 0 9113 2 0 2 2 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 64 135 0 6 3 0 3 3 0 8 0 uaddrrnd 24 3917 0 3867 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 3917 0 3867 1 0 1 1 0 8 0 vmmpekpl 168 28526 0 28495 2 0 2 2 0 8 0 vmmpepl 168 485494 0 483037 322 172 150 162 0 357 35 vmsppl 272 3879 0 3867 2 1 1 2 0 8 0 pdppl 4096 7840 0 7784 9 1 8 8 0 8 0 pvpl 32 1390581 0 1371097 505 217 288 330 0 265 89 pmappl 200 3916 0 3880 2 0 2 2 0 8 0 extentpl 40 46 0 29 1 0 1 1 0 8 0 phpool 112 965 0 287 20 0 20 20 0 8 0