panic: unhandled af 0 Stopped at db_enter+0x18: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *168092 75860 0 0x12 0 0 sshd db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398 panic(ffffffff823d3631) at panic+0x15c sys/kern/subr_prf.c:207 unhandled_af(0) at unhandled_af+0x16 pf_addrcpy(ffff80001d6c9f00,ffff800000bc5240,0) at pf_addrcpy+0x99 sys/net/pf.c:409 pf_map_addr(0,ffff800000bc4ff8,ffff80001d6ca1c8,ffff80001d6c9f00,ffff80001d6c9e10,ffff80001d6ca068) at pf_map_addr+0x3f7 sys/net/pf_lb.c:393 pf_get_sport(ffff80001d6ca1b0,ffff800000bc4ff8,ffff80001d6c9f00,ffff80001d6c9f26,0,0) at pf_get_sport+0xc7 sys/net/pf_lb.c:159 pf_get_transaddr_af(ffff800000bc4ff8,ffff80001d6ca1b0,ffff80001d6ca068) at pf_get_transaddr_af+0x154 sys/net/pf_lb.c:733 pf_get_transaddr(ffff800000bc4ff8,ffff80001d6ca1b0,ffff80001d6ca068,ffff80001d6ca090) at pf_get_transaddr+0x89 sys/net/pf_lb.c:657 pf_test_rule(ffff80001d6ca1b0,ffff80001d6ca2a0,ffff80001d6ca2b0,ffff80001d6ca290,ffff80001d6ca278,3) at pf_test_rule+0x495 sys/net/pf.c:3822 pf_test(2,2,ffff80000017a2a8,ffff80001d6ca3a8) at pf_test+0x1909 sys/net/pf.c:7101 ip_output(fffffd805e445a00,0,fffffd806b6dd2a0,800,0,fffffd806b6dd230) at ip_output+0xc3e sys/netinet/ip_output.c:421 tcp_output(ffff800000abfcc0) at tcp_output+0x2524 sys/netinet/tcp_output.c:1040 tcp_usrreq(fffffd805da6c198,9,fffffd805e445d00,0,0,ffff80001d717c40) at tcp_usrreq+0xa54 sosend(fffffd805da6c198,0,ffff80001d6ca818,0,0,80) at sosend+0x669 sys/kern/uipc_socket.c:549 end trace frame: 0xffff80001d6ca800, count: 0 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic unhandled af 0 ddb> trace db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398 panic(ffffffff823d3631) at panic+0x15c sys/kern/subr_prf.c:207 unhandled_af(0) at unhandled_af+0x16 pf_addrcpy(ffff80001d6c9f00,ffff800000bc5240,0) at pf_addrcpy+0x99 sys/net/pf.c:409 pf_map_addr(0,ffff800000bc4ff8,ffff80001d6ca1c8,ffff80001d6c9f00,ffff80001d6c9e10,ffff80001d6ca068) at pf_map_addr+0x3f7 sys/net/pf_lb.c:393 pf_get_sport(ffff80001d6ca1b0,ffff800000bc4ff8,ffff80001d6c9f00,ffff80001d6c9f26,0,0) at pf_get_sport+0xc7 sys/net/pf_lb.c:159 pf_get_transaddr_af(ffff800000bc4ff8,ffff80001d6ca1b0,ffff80001d6ca068) at pf_get_transaddr_af+0x154 sys/net/pf_lb.c:733 pf_get_transaddr(ffff800000bc4ff8,ffff80001d6ca1b0,ffff80001d6ca068,ffff80001d6ca090) at pf_get_transaddr+0x89 sys/net/pf_lb.c:657 pf_test_rule(ffff80001d6ca1b0,ffff80001d6ca2a0,ffff80001d6ca2b0,ffff80001d6ca290,ffff80001d6ca278,3) at pf_test_rule+0x495 sys/net/pf.c:3822 pf_test(2,2,ffff80000017a2a8,ffff80001d6ca3a8) at pf_test+0x1909 sys/net/pf.c:7101 ip_output(fffffd805e445a00,0,fffffd806b6dd2a0,800,0,fffffd806b6dd230) at ip_output+0xc3e sys/netinet/ip_output.c:421 tcp_output(ffff800000abfcc0) at tcp_output+0x2524 sys/netinet/tcp_output.c:1040 tcp_usrreq(fffffd805da6c198,9,fffffd805e445d00,0,0,ffff80001d717c40) at tcp_usrreq+0xa54 sosend(fffffd805da6c198,0,ffff80001d6ca818,0,0,80) at sosend+0x669 sys/kern/uipc_socket.c:549 dofilewritev(ffff80001d717c40,4,ffff80001d6ca818,0,ffff80001d6ca900) at dofilewritev+0x1ab sys/kern/sys_generic.c:365 sys_write(ffff80001d717c40,ffff80001d6ca8b0,ffff80001d6ca900) at sys_write+0x83 sys/kern/sys_generic.c:285 syscall(ffff80001d6ca980) at syscall+0x507 sys/arch/amd64/amd64/trap.c:570 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffba2a0, count: -18 ddb> show registers rdi 0 rsi 0x1 rbp 0xffff80001d6c9ba0 rbx 0xffff80001d6c9c50 rdx 0x2 rcx 0 rax 0x1 r8 0xffffffff8218079f kprintf+0x15f r9 0x1 r10 0x2 r11 0x34056d48b07b07b1 r12 0x3000000008 r13 0xffff80001d6c9bb0 r14 0x100 r15 0x1 rip 0xffffffff81c223d8 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff80001d6c9b90 ss 0x10 db_enter+0x18: addq $0x8,%rsp ddb> show proc PROC (sshd) pid=168092 stat=onproc flags process=12 proc=0 pri=24, usrpri=50, nice=20 forw=0xffffffffffffffff, list=0xffff80001d718870,0xffff80001d717770 process=0xffff8000ffff9210 user=0xffff80001d6c5000, vmspace=0xfffffd806bc0a990 estcpu=0, cpticks=0, pctcpu=0.0 user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 260 244853 0 0 3 0x14200 acct acct 36712 431299 0 0 3 0x14200 bored sosplice 99215 215854 44 0 3 0x82 piperd syz-executor.0 8802 439022 44 0 3 0x82 piperd syz-executor.1 44 458139 52238 0 3 0x82 thrsleep syz-fuzzer 44 165125 52238 0 3 0x4000082 nanosleep syz-fuzzer 44 412647 52238 0 2 0x4000002 syz-fuzzer 44 34352 52238 0 3 0x4000082 thrsleep syz-fuzzer 44 30716 52238 0 3 0x4000082 thrsleep syz-fuzzer 44 94367 52238 0 3 0x4000082 thrsleep syz-fuzzer 44 88850 52238 0 3 0x4000082 thrsleep syz-fuzzer 44 476658 52238 0 3 0x4000082 thrsleep syz-fuzzer 52238 244593 75860 0 3 0x10008a pause ksh *75860 168092 22711 0 7 0x12 sshd 11693 210648 1 0 3 0x100083 ttyin getty 22711 207528 1 0 3 0x80 select sshd 48809 407248 55754 73 3 0x100090 kqread syslogd 55754 80935 1 0 3 0x100082 netio syslogd 33586 182052 1 77 3 0x100090 poll dhclient 3041 371461 1 0 3 0x80 poll dhclient 35433 326441 0 0 3 0x14200 bored smr 70574 161669 0 0 2 0x14200 zerothread 29640 411478 0 0 3 0x14200 aiodoned aiodoned 13965 102509 0 0 3 0x14200 syncer update 31707 48942 0 0 3 0x14200 cleaner cleaner 89834 484236 0 0 3 0x14200 reaper reaper 19727 184504 0 0 3 0x14200 pgdaemon pagedaemon 53732 404819 0 0 3 0x14200 bored crynlk 71041 336271 0 0 3 0x14200 bored crypto 89159 98820 0 0 3 0x40014200 acpi0 acpi0 42526 24400 0 0 3 0x14200 bored softnet 45533 483773 0 0 3 0x14200 bored systqmp 3831 144122 0 0 3 0x14200 bored systq 37929 452270 0 0 3 0x40014200 bored softclock 76713 33292 0 0 3 0x40014200 idle0 1 151542 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 9496 6349K 6811K 78643K 11514 0 pcb 13 8K 8K 78643K 78 0 rtable 111 4K 7K 78643K 431 0 ifaddr 69 13K 15K 78643K 134 0 counters 21 16K 16K 78643K 21 0 ioctlops 0 0K 4K 78643K 4872 0 iov 0 0K 14K 78643K 57 0 mount 1 1K 1K 78643K 1 0 vnodes 1225 77K 77K 78643K 1496 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 5K 78643K 4 0 VM map 2 0K 0K 78643K 2 0 sem 12 0K 0K 78643K 123 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1809 195K 288K 78643K 12938 0 file desc 4 9K 25K 78643K 1832 0 sigio 0 0K 0K 78643K 8 0 proc 50 38K 54K 78643K 371 0 subproc 32 2K 2K 78643K 34 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 33 0 in_multi 47 2K 3K 78643K 82 0 ether_multi 1 0K 0K 78643K 15 0 mrt 0 0K 0K 78643K 2 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 43 201K 201K 78643K 43 0 exec 0 0K 1K 78643K 202 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 116 22K 38K 78643K 4697 0 UVM aobj 24 2K 2K 78643K 24 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 56 0 NDP 11 0K 0K 78643K 15 0 temp 118 3863K 3927K 78643K 11286 0 kqueue 3 4K 12K 78643K 18 0 SYN cache 2 16K 16K 78643K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 6 0 0 1 0 1 1 0 8 0 rtpcb 80 31 0 29 1 0 1 1 0 8 0 rtentry 112 45 0 1 2 0 2 2 0 8 0 unpcb 120 723 0 715 1 0 1 1 0 8 0 syncache 264 12 0 12 4 4 0 1 0 8 0 sackhl 24 1 0 1 1 1 0 1 0 8 0 tcpqe 32 77 0 77 2 2 0 1 0 8 0 tcpcb 544 170 0 166 1 0 1 1 0 8 0 inpcb 280 343 0 336 3 2 1 2 0 8 0 nd6 48 6 0 0 1 0 1 1 0 8 0 pfosfp 40 3 0 2 1 0 1 1 0 8 0 pfosfpen 112 3 0 2 1 0 1 1 0 8 0 pfrke_plain 160 6 0 4 1 0 1 1 0 8 0 pfrktable 1344 103 0 101 2 1 1 1 0 8 0 pftag 88 19 0 18 1 0 1 1 0 8 0 pfqueue 264 2 0 0 1 0 1 1 0 8 0 pfstitem 24 2 0 2 1 1 0 1 0 8 0 pfstkey 112 4 0 4 1 1 0 1 0 8 0 pfstate 328 2 0 2 1 1 0 1 0 8 0 pfrule 1360 614 0 33 49 0 49 49 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 189 0 0 12 0 12 12 0 8 0 art_table 32 190 0 0 2 0 2 2 0 8 0 art_node 16 44 0 4 1 0 1 1 0 8 0 sysvmsgpl 40 52 0 32 1 0 1 1 0 8 0 semupl 112 1 0 1 1 1 0 1 0 8 0 semapl 112 121 0 111 1 0 1 1 0 8 0 shmpl 112 22 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 3317 0 1919 88 0 88 88 0 8 0 ffsino 240 3317 0 1919 83 0 83 83 0 8 0 nchpl 144 5549 0 3961 60 0 60 60 0 8 0 rtmask 32 12 0 10 1 0 1 1 0 8 0 uvmvnodes 72 3607 0 0 66 0 66 66 0 8 0 vnodes 208 3607 0 0 190 0 190 190 0 8 0 namei 1024 19154 0 19154 1 0 1 1 0 8 1 vmpool 528 2 0 2 1 1 0 1 0 8 0 pfiaddrpl 120 30 0 28 2 1 1 1 0 8 0 scxspl 192 16341 0 16341 1 0 1 1 0 8 1 plimitpl 152 34 0 27 1 0 1 1 0 8 0 sigapl 424 2020 0 1991 4 0 4 4 0 8 0 futexpl 56 23915 0 23915 1 0 1 1 0 8 1 knotepl 112 79 0 60 1 0 1 1 0 8 0 kqueuepl 144 54 0 52 1 0 1 1 0 8 0 pipelkpl 16 177 0 167 1 0 1 1 0 8 0 pipepl 120 354 0 335 1 0 1 1 0 8 0 fdescpl 432 2004 0 1991 2 0 2 2 0 8 0 filepl 120 11416 0 11321 6 2 4 4 0 8 1 lockfpl 104 146 0 145 1 0 1 1 0 8 0 lockfspl 48 54 0 53 1 0 1 1 0 8 0 sessionpl 112 17 0 7 1 0 1 1 0 8 0 pgrppl 48 21 0 11 1 0 1 1 0 8 0 ucredpl 96 423 0 416 1 0 1 1 0 8 0 zombiepl 144 1991 0 1991 1 0 1 1 0 8 1 processpl 920 2020 0 1991 4 0 4 4 0 8 0 procpl 624 3984 0 3948 4 0 4 4 0 8 0 sosppl 128 9 0 9 2 2 0 1 0 8 0 sockpl 400 1098 0 1081 8 4 4 4 0 8 2 mcl64k 65536 295 0 295 38 37 1 33 0 8 1 mcl16k 16384 6 0 6 3 2 1 1 0 8 1 mcl12k 12288 29 0 29 7 6 1 1 0 8 1 mcl9k 9216 28 0 28 7 7 0 1 0 8 0 mcl8k 8192 15 0 15 4 4 0 1 0 8 0 mcl4k 4096 63 0 63 9 8 1 1 0 8 1 mcl2k2 2112 4 0 4 4 4 0 1 0 8 0 mcl2k 2048 75270 0 75218 20 13 7 15 0 8 0 mtagpl 80 30 0 8 2 1 1 1 0 8 0 mbufpl 256 126467 0 126326 26 16 10 24 0 8 0 bufpl 280 5343 0 128 373 0 373 373 0 8 0 anonpl 16 161244 0 144585 81 12 69 79 0 107 0 amapchunkpl 152 7125 0 6979 15 8 7 15 0 158 0 amappl16 192 8856 0 7851 71 20 51 58 0 8 0 amappl15 184 583 0 581 1 0 1 1 0 8 0 amappl14 176 23 0 18 1 0 1 1 0 8 0 amappl13 168 26 0 23 1 0 1 1 0 8 0 amappl12 160 1228 0 1226 1 0 1 1 0 8 0 amappl11 152 632 0 620 1 0 1 1 0 8 0 amappl10 144 19 0 13 1 0 1 1 0 8 0 amappl9 136 374 0 372 1 0 1 1 0 8 0 amappl8 128 327 0 291 2 0 2 2 0 8 0 amappl7 120 105 0 93 1 0 1 1 0 8 0 amappl6 112 603 0 598 1 0 1 1 0 8 0 amappl5 104 2590 0 2579 1 0 1 1 0 8 0 amappl4 96 1005 0 978 1 0 1 1 0 8 0 amappl3 88 161 0 156 1 0 1 1 0 8 0 amappl2 80 15224 0 15165 2 0 2 2 0 8 0 amappl1 72 39628 0 39237 24 15 9 17 0 8 0 amappl 80 4227 0 4187 1 0 1 1 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 64 23 0 0 1 0 1 1 0 8 0 uaddrrnd 24 2006 0 1993 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 2006 0 1993 1 0 1 1 0 8 0 vmmpekpl 168 13825 0 13800 2 0 2 2 0 8 0 vmmpepl 168 229764 0 227787 120 28 92 109 0 357 4 vmsppl 272 2005 0 1993 2 1 1 2 0 8 0 pdppl 4096 4018 0 3986 6 1 5 6 0 8 0 pvpl 32 445452 0 425867 189 26 163 187 0 265 0 pmappl 200 2005 0 1993 1 0 1 1 0 8 0 extentpl 40 53 0 36 1 0 1 1 0 8 0 phpool 112 360 0 88 8 0 8 8 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398 panic(ffffffff823d3631) at panic+0x15c sys/kern/subr_prf.c:207 unhandled_af(0) at unhandled_af+0x16 pf_addrcpy(ffff80001d6c9f00,ffff800000bc5240,0) at pf_addrcpy+0x99 sys/net/pf.c:409 pf_map_addr(0,ffff800000bc4ff8,ffff80001d6ca1c8,ffff80001d6c9f00,ffff80001d6c9e10,ffff80001d6ca068) at pf_map_addr+0x3f7 sys/net/pf_lb.c:393 pf_get_sport(ffff80001d6ca1b0,ffff800000bc4ff8,ffff80001d6c9f00,ffff80001d6c9f26,0,0) at pf_get_sport+0xc7 sys/net/pf_lb.c:159 pf_get_transaddr_af(ffff800000bc4ff8,ffff80001d6ca1b0,ffff80001d6ca068) at pf_get_transaddr_af+0x154 sys/net/pf_lb.c:733 pf_get_transaddr(ffff800000bc4ff8,ffff80001d6ca1b0,ffff80001d6ca068,ffff80001d6ca090) at pf_get_transaddr+0x89 sys/net/pf_lb.c:657 pf_test_rule(ffff80001d6ca1b0,ffff80001d6ca2a0,ffff80001d6ca2b0,ffff80001d6ca290,ffff80001d6ca278,3) at pf_test_rule+0x495 sys/net/pf.c:3822 pf_test(2,2,ffff80000017a2a8,ffff80001d6ca3a8) at pf_test+0x1909 sys/net/pf.c:7101 ip_output(fffffd805e445a00,0,fffffd806b6dd2a0,800,0,fffffd806b6dd230) at ip_output+0xc3e sys/netinet/ip_output.c:421 tcp_output(ffff800000abfcc0) at tcp_output+0x2524 sys/netinet/tcp_output.c:1040 tcp_usrreq(fffffd805da6c198,9,fffffd805e445d00,0,0,ffff80001d717c40) at tcp_usrreq+0xa54 sosend(fffffd805da6c198,0,ffff80001d6ca818,0,0,80) at sosend+0x669 sys/kern/uipc_socket.c:549 dofilewritev(ffff80001d717c40,4,ffff80001d6ca818,0,ffff80001d6ca900) at dofilewritev+0x1ab sys/kern/sys_generic.c:365 sys_write(ffff80001d717c40,ffff80001d6ca8b0,ffff80001d6ca900) at sys_write+0x83 sys/kern/sys_generic.c:285 syscall(ffff80001d6ca980) at syscall+0x507 sys/arch/amd64/amd64/trap.c:570 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffba2a0, count: -18 ddb> machine ddbcpu 1 No such command ddb> trace db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398 panic(ffffffff823d3631) at panic+0x15c sys/kern/subr_prf.c:207 unhandled_af(0) at unhandled_af+0x16 pf_addrcpy(ffff80001d6c9f00,ffff800000bc5240,0) at pf_addrcpy+0x99 sys/net/pf.c:409 pf_map_addr(0,ffff800000bc4ff8,ffff80001d6ca1c8,ffff80001d6c9f00,ffff80001d6c9e10,ffff80001d6ca068) at pf_map_addr+0x3f7 sys/net/pf_lb.c:393 pf_get_sport(ffff80001d6ca1b0,ffff800000bc4ff8,ffff80001d6c9f00,ffff80001d6c9f26,0,0) at pf_get_sport+0xc7 sys/net/pf_lb.c:159 pf_get_transaddr_af(ffff800000bc4ff8,ffff80001d6ca1b0,ffff80001d6ca068) at pf_get_transaddr_af+0x154 sys/net/pf_lb.c:733 pf_get_transaddr(ffff800000bc4ff8,ffff80001d6ca1b0,ffff80001d6ca068,ffff80001d6ca090) at pf_get_transaddr+0x89 sys/net/pf_lb.c:657 pf_test_rule(ffff80001d6ca1b0,ffff80001d6ca2a0,ffff80001d6ca2b0,ffff80001d6ca290,ffff80001d6ca278,3) at pf_test_rule+0x495 sys/net/pf.c:3822 pf_test(2,2,ffff80000017a2a8,ffff80001d6ca3a8) at pf_test+0x1909 sys/net/pf.c:7101 ip_output(fffffd805e445a00,0,fffffd806b6dd2a0,800,0,fffffd806b6dd230) at ip_output+0xc3e sys/netinet/ip_output.c:421 tcp_output(ffff800000abfcc0) at tcp_output+0x2524 sys/netinet/tcp_output.c:1040 tcp_usrreq(fffffd805da6c198,9,fffffd805e445d00,0,0,ffff80001d717c40) at tcp_usrreq+0xa54 sosend(fffffd805da6c198,0,ffff80001d6ca818,0,0,80) at sosend+0x669 sys/kern/uipc_socket.c:549 dofilewritev(ffff80001d717c40,4,ffff80001d6ca818,0,ffff80001d6ca900) at dofilewritev+0x1ab sys/kern/sys_generic.c:365 sys_write(ffff80001d717c40,ffff80001d6ca8b0,ffff80001d6ca900) at sys_write+0x83 sys/kern/sys_generic.c:285 syscall(ffff80001d6ca980) at syscall+0x507 sys/arch/amd64/amd64/trap.c:570 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffba2a0, count: -18