panic: malformed IPv4 option passed to ip_optcopy Stopped at db_enter+0x18: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *104459 20228 0 0 0x4000000 0 syz-executor1 db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:399 panic() at panic+0x147 sys/kern/subr_prf.c:208 ip_fragment(722c1d2985f2c30c,ffffff003c9ddc00,ffff800000171290) at ip_fragment+0x551 ip_output(a91e87694e9e17fd,ffffff003c9dd300,ffffff003c9dd300,0,ffffff00370cd000,ffffff002cddc038) at ip_output+0xc06 sys/netinet/ip_output.c:501 udp_output(cc7cdefb50e4d031,130c,ffffff002cddc038,0) at udp_output+0x444 sys/netinet/udp_usrreq.c:1004 sosend(ec9c66b731cf3148,ffffff00306eb4c0,ffff800014acf948,10f4,ffff800014acfa80,0) at sosend+0x472 sys/kern/uipc_socket.c:513 dofilewritev(8a32bfe144f6a0be,0,4,ffff8000ffff8e18,ffff800014acfa80) at dofilewritev+0x14b sys/kern/sys_generic.c:364 sys_writev(f19edd0304911cfa,ffff800014acfb20,ffff8000ffff8e18) at sys_writev+0xdb sys/kern/sys_generic.c:310 syscall(230b9f0f5cc0a734) at syscall+0x3f1 Xsyscall(6,0,d,0,3,50842e93010) at Xsyscall+0x128 end of kernel end trace frame: 0x50abb8e8970, count: 5 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs.