panic: unhandled af 0 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 163416 96911 0 0 0 1 syz-executor *522576 96647 0 0x14000 0x200 0 softnet0 db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff834fab6a) at panic+0x1e5 sys/kern/subr_prf.c:198 unhandled_af(0) at unhandled_af+0x1a sys/net/if.c:-1 if_output_tso(ffff800000050858,ffff80002a1d08a0,ffff800000c40e90,fffff8006fe348f0,5dc) at if_output_tso+0x22b ip_output(fffff8006dacd800,0,fffff8006ff911b8,800,0,fffff8006ff91250,8b755f34b86697a1) at ip_output+0x107f sys/netinet/ip_output.c:437 tcp_output(ffff8000015d55c0) at tcp_output+0x36e3 sys/netinet/tcp_output.c:1070 tcp_input_solocked(ffff80002a1d0cf0,ffff80002a1d0cfc,0,2,ffff80002a1d0ce8) at tcp_input_solocked+0x5a65 sys/netinet/tcp_input.c:2050 tcp_input_mlist(ffffffff83b539d0,2) at tcp_input_mlist+0x93 sys/netinet/tcp_input.c:-1 if_input_process(ffff800000050858,ffff80002a1d0dd8,0) at if_input_process+0x526 sys/net/if.c:1086 ifiq_process(ffff800000050d08) at ifiq_process+0xcd sys/net/ifq.c:864 taskq_thread(ffff80000002c000) at taskq_thread+0x157 sys/kern/kern_task.c:446 end trace frame: 0x0, count: 4 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: unhandled af 0 ddb{0}> show kasan No such command ddb{0}> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff834fab6a) at panic+0x1e5 sys/kern/subr_prf.c:198 unhandled_af(0) at unhandled_af+0x1a sys/net/if.c:-1 if_output_tso(ffff800000050858,ffff80002a1d08a0,ffff800000c40e90,fffff8006fe348f0,5dc) at if_output_tso+0x22b ip_output(fffff8006dacd800,0,fffff8006ff911b8,800,0,fffff8006ff91250,8b755f34b86697a1) at ip_output+0x107f sys/netinet/ip_output.c:437 tcp_output(ffff8000015d55c0) at tcp_output+0x36e3 sys/netinet/tcp_output.c:1070 tcp_input_solocked(ffff80002a1d0cf0,ffff80002a1d0cfc,0,2,ffff80002a1d0ce8) at tcp_input_solocked+0x5a65 sys/netinet/tcp_input.c:2050 tcp_input_mlist(ffffffff83b539d0,2) at tcp_input_mlist+0x93 sys/netinet/tcp_input.c:-1 if_input_process(ffff800000050858,ffff80002a1d0dd8,0) at if_input_process+0x526 sys/net/if.c:1086 ifiq_process(ffff800000050d08) at ifiq_process+0xcd sys/net/ifq.c:864 taskq_thread(ffff80000002c000) at taskq_thread+0x157 sys/kern/kern_task.c:446 end trace frame: 0x0, count: -11 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff80002a1d0680 rbx 0xffffffff8399be0f cpu_info_full_primary+0x2e0f rdx 0 rcx 0xffff800045ffea60 rax 0xffffffff8399aff0 cpu_info_full_primary+0x1ff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xe04fb20462a7a67c r11 0x48ff4b43818f0b88 r12 0xffffffff8399bc10 cpu_info_full_primary+0x2c10 r13 0 r14 0 r15 0x1 rip 0xffffffff83297605 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80002a1d0670 ss 0 db_enter+0x25: addq $0x8,%rsp ddb{0}> show proc PROC (softnet0) tid=522576 pid=96647 tcnt=1 stat=onproc flags process=14000 proc=200 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800045ffe298,0xffff800045ffefa0 process=0xffff800045ff8000 user=0xffff80002a1cb000, vmspace=0xffffffff839f3de0 estcpu=0, cpticks=1, pctcpu=0.0, user=0, sys=0, intr=0 ddb{0}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 96911 163416 71988 0 7 0 0 syz-executor 96911 132492 71988 0 2 0 0x4000000 syz-executor 61197 147637 94523 0 2 0 0 syz-executor 61197 302204 94523 0 3 0 0x4000080 fsleep syz-executor 61197 406697 94523 0 3 0 0x4000080 fsleep syz-executor 61197 484204 94523 0 3 0 0x4000080 fsleep syz-executor 60358 292272 51815 0 2 0x100002 0 sh 87377 381812 23634 0 3 0 0x80 nanoslp syz-executor 87377 477612 23634 0 3 0 0x4000080 ttyretype syz-executor 87377 171388 23634 0 3 0 0x4000080 ttyout syz-executor 65905 457300 18322 0 2 0 0 syz-executor 65905 333229 18322 0 3 0 0x4000080 fsleep syz-executor 65905 32201 18322 0 3 0 0x4000080 fsleep syz-executor 65905 523050 18322 0 3 0 0x4000080 fsleep syz-executor 65905 76712 18322 0 3 0 0x4000080 kqread syz-executor 51815 244040 21940 0 3 0x2 0x80 wait syz-executor 62066 506742 21940 0 3 0x2 0x80 piperd syz-executor 39456 192648 1 0 3 0x100003 0x80 ttyin getty 71988 157212 21940 0 3 0x2 0x80 nanoslp syz-executor 15749 176186 21940 0 3 0x2 0x80 piperd syz-executor 23634 47449 21940 0 3 0x2 0x80 nanoslp syz-executor 94523 262007 21940 0 3 0x2 0x80 nanoslp syz-executor 18322 346837 21940 0 3 0x2 0x80 nanoslp syz-executor 21940 388338 1 0 2 0x2 0 syz-executor 20682 171211 89975 0 3 0x10 0x88 kqread sshd-session 89975 190409 1 0 3 0x12 0x80 kqread sshd-session 93530 341050 1 74 3 0x1100012 0x80 bpf pflogd 34250 247405 1 73 3 0x1100010 0x80 kqread syslogd 1090 10743 0 0 3 0x14000 0x200 bored smr 41308 391096 0 0 2 0x14000 0x200 zerothread 18573 289998 0 0 3 0x14000 0x200 aiodoned aiodoned 2238 118141 0 0 3 0x14000 0x200 syncer update 66787 327909 0 0 3 0x14000 0x200 cleaner cleaner 26479 52133 0 0 3 0x14000 0x200 reaper reaper 40273 518044 0 0 3 0x14000 0x200 pgdaemon pagedaemon 39211 256921 0 0 3 0x14000 0x200 bored viomb 3447 53844 0 0 3 0x14000 0x40000200 acpi0 acpi0 69813 242252 0 0 3 0x14000 0x40000200 idle1 51617 37054 0 0 3 0x14000 0x200 bored softnet1 *96647 522576 0 0 7 0x14000 0x200 softnet0 35219 97489 0 0 3 0x14000 0x200 bored systqmp 28000 241450 0 0 3 0x14000 0x200 bored systq 35011 371741 0 0 3 0x14000 0x200 tmoslp softclockmp 73855 191805 0 0 3 0x14000 0x40000200 tmoslp softclock 44905 367323 0 0 3 0x14000 0x40000200 idle0 1 174143 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{0}> show all locks Process 96647 (softnet0) thread 0xffff800045ffea60 (522576) exclusive rwlock inet46 r = 0 (0xffff8000015a8bf0) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320 #2 in_pcbsolock+0xdb sys/netinet/in_pcb.c:631 #3 tcp_input_solocked+0xa9a sys/netinet/tcp_input.c:-1 #4 tcp_input_mlist+0x93 sys/netinet/tcp_input.c:-1 #5 if_input_process+0x526 sys/net/if.c:1086 #6 ifiq_process+0xcd sys/net/ifq.c:864 #7 taskq_thread+0x157 sys/kern/kern_task.c:446 #8 proc_trampoline+0x10 shared rwlock netlock r = 0 (0xffffffff839ec010) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 rw_do_enter_read+0x3e8 sys/kern/kern_rwlock.c:413 #2 if_input_process+0x1c9 sys/net/if.c:1061 #3 ifiq_process+0xcd sys/net/ifq.c:864 #4 taskq_thread+0x157 sys/kern/kern_task.c:446 #5 proc_trampoline+0x10 shared rwlock softnet0 r = 0 (0xffff80000002c078) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 taskq_thread+0x12a sys/kern/kern_task.c:442 #2 proc_trampoline+0x10 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11119 12114K 12151K 166960K 12290 0 pcb 17 14K 16K 166960K 114 0 rtable 167 13K 14K 166960K 765 0 pf 36 18K 24K 166960K 103 0 ifaddr 34 5K 7K 166960K 102 0 ifgroup 55 2K 2K 166960K 120 0 sysctl 3 1K 9K 166960K 7 0 counters 70 37K 37K 166960K 104 0 ioctlops 0 0K 4K 166960K 1616 0 iov 0 0K 16K 166960K 10 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1360 86K 86K 166960K 1615 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 10 0K 0K 166960K 21 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 15 53K 93K 166960K 437 0 sigio 0 0K 0K 166960K 2 0 proc 20 33K 148K 166960K 937 0 subproc 72 4K 4K 166960K 189 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 9 0 in_multi 66 4K 6K 166960K 239 0 ether_multi 1 0K 0K 166960K 2 0 mrt 0 0K 0K 166960K 7 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 55 254K 254K 166960K 55 0 exec 0 0K 1K 166960K 555 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 156 100K 168K 166960K 5151 0 UVM aobj 5 4K 4K 166960K 7 0 pinsyscall 25 50K 106K 166960K 1923 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 12 0K 2K 166960K 69 0 temp 39 9118K 9138K 166960K 15798 0 kqueue 7 12K 26K 166960K 45 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 64 0 64 1 0 1 1 0 8 1 rtentry 176 251 0 184 6 0 6 6 0 8 0 unpcb 144 414 0 341 6 0 6 6 0 8 3 syncache 336 4 0 4 1 1 0 1 0 8 0 tcpcb 736 137 0 135 7 0 7 7 0 8 6 arp 136 43 0 32 1 0 1 1 0 8 0 inpcb 328 438 0 436 7 0 7 7 0 8 6 nd6 152 60 0 45 1 0 1 1 0 8 0 pkpcb 40 4 0 4 1 0 1 1 0 8 1 kcovpl 48 21 0 13 1 0 1 1 0 8 0 ppxss 1192 2 0 2 1 0 1 1 0 8 1 pfstscr 40 1 0 0 1 0 1 1 0 8 0 pffrag 232 1 0 0 1 0 1 1 0 482 0 pffrnode 88 1 0 0 1 0 1 1 0 8 0 pffrent 40 1 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfanchor 1288 7 0 5 1 0 1 1 0 8 0 pfstitem 24 38 0 0 1 0 1 1 0 8 0 pfstkey 128 38 0 0 2 0 2 2 0 8 0 pfstate 448 37 0 0 5 0 5 5 0 8 0 pfrule 1360 26 0 19 2 1 1 2 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 1026 0 714 29 1 28 29 0 8 5 art_table 40 1028 0 714 5 0 5 5 0 8 0 art_node 32 251 0 191 1 0 1 1 0 8 0 semupl 112 5 0 5 1 0 1 1 0 8 1 semapl 72 13 0 5 1 0 1 1 0 8 0 shmpl 120 4 0 2 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1783 0 284 94 0 94 94 0 8 0 ffsino 296 1783 0 284 116 0 116 116 0 8 0 nchpl 144 2145 0 395 65 0 65 65 0 8 0 vnodes 216 2094 0 0 117 0 117 117 0 8 0 namei 1024 9239 0 9239 2 1 1 2 0 8 1 percpumem 16 68 0 17 1 0 1 1 0 8 0 kstatmem 264 63 0 34 2 0 2 2 0 8 0 scxspl 216 7304 0 7304 4 3 1 3 1 8 1 plimitpl 152 58 0 43 1 0 1 1 0 8 0 sigapl 424 729 0 692 7 0 7 7 0 8 1 knotepl 120 104 0 0 4 0 4 4 0 8 0 kqueuepl 224 61 0 55 1 0 1 1 0 8 0 pipepl 344 180 0 153 3 0 3 3 0 8 0 fdescpl 528 713 0 692 3 0 3 3 0 8 0 filepl 160 3265 0 3018 17 0 17 17 0 8 4 lockfpl 104 84 0 83 1 0 1 1 0 8 0 lockfspl 48 25 0 24 1 0 1 1 0 8 0 sessionpl 144 39 0 33 1 0 1 1 0 8 0 pgrppl 48 60 0 46 1 0 1 1 0 8 0 ucredpl 104 209 0 200 1 0 1 1 0 8 0 zombiepl 144 693 0 692 1 0 1 1 0 8 0 processpl 1240 729 0 692 5 1 4 5 0 8 0 procpl 664 964 0 917 6 0 6 6 0 8 1 sosppl 176 1 0 1 1 0 1 1 0 8 1 sockpl 752 922 0 847 21 6 15 16 0 8 7 mcl64k 65536 3 0 0 1 0 1 1 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 141 0 0 18 0 18 18 0 8 0 mcl2k 2048 47 0 0 6 0 6 6 0 8 0 mextrefs 64 47 0 0 1 0 1 1 0 8 0 mtagpl 96 1 0 0 1 0 1 1 0 8 0 mbufpl 256 288 0 0 18 0 18 18 0 8 0 bufpl 272 2589 0 105 166 0 166 166 0 8 0 anonpl 32 7282 0 0 59 0 59 59 0 247 0 amapchunkpl 152 14357 0 13991 23 0 23 23 0 158 5 amappl16 200 1950 0 1939 14 3 11 14 0 8 8 amappl15 192 47 0 47 1 1 0 1 0 8 0 amappl14 184 578 0 577 1 0 1 1 0 8 0 amappl13 176 155 0 150 1 0 1 1 0 8 0 amappl12 168 1022 0 1001 2 0 2 2 0 8 0 amappl11 160 2 0 2 1 1 0 1 0 8 0 amappl10 152 68 0 63 1 0 1 1 0 8 0 amappl9 144 277 0 277 1 1 0 1 0 8 0 amappl8 136 151 0 149 1 0 1 1 0 8 0 amappl7 128 178 0 172 1 0 1 1 0 8 0 amappl6 120 306 0 305 1 0 1 1 0 8 0 amappl5 112 96 0 91 1 0 1 1 0 8 0 amappl4 104 353 0 345 1 0 1 1 0 8 0 amappl3 96 2590 0 2529 3 0 3 3 0 8 0 amappl2 88 781 0 740 2 0 2 2 0 8 0 amappl1 80 12479 0 12143 15 1 14 15 0 8 0 amappl 88 4186 0 4062 5 0 5 5 0 92 1 uvmvnodes 80 110 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 6 0 2 1 0 1 1 0 8 0 uaddrrnd 24 713 0 692 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 713 0 692 1 0 1 1 0 8 0 vmmpekpl 168 7741 0 7685 4 0 4 4 0 8 0 vmmpepl 168 54896 0 53729 91 0 91 91 0 357 22 vmsppl 488 712 0 692 5 0 5 5 0 8 0 rwobjpl 80 18633 0 17994 26 0 26 26 0 8 2 pdppl 4096 1433 0 1384 103 46 57 85 0 8 8 pvpl 32 13059 0 0 106 0 106 106 0 265 0 pmappl 256 712 0 692 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 464 0 52 13 0 13 13 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff834fab6a) at panic+0x1e5 sys/kern/subr_prf.c:198 unhandled_af(0) at unhandled_af+0x1a sys/net/if.c:-1 if_output_tso(ffff800000050858,ffff80002a1d08a0,ffff800000c40e90,fffff8006fe348f0,5dc) at if_output_tso+0x22b ip_output(fffff8006dacd800,0,fffff8006ff911b8,800,0,fffff8006ff91250,8b755f34b86697a1) at ip_output+0x107f sys/netinet/ip_output.c:437 tcp_output(ffff8000015d55c0) at tcp_output+0x36e3 sys/netinet/tcp_output.c:1070 tcp_input_solocked(ffff80002a1d0cf0,ffff80002a1d0cfc,0,2,ffff80002a1d0ce8) at tcp_input_solocked+0x5a65 sys/netinet/tcp_input.c:2050 tcp_input_mlist(ffffffff83b539d0,2) at tcp_input_mlist+0x93 sys/netinet/tcp_input.c:-1 if_input_process(ffff800000050858,ffff80002a1d0dd8,0) at if_input_process+0x526 sys/net/if.c:1086 ifiq_process(ffff800000050d08) at ifiq_process+0xcd sys/net/ifq.c:864 taskq_thread(ffff80000002c000) at taskq_thread+0x157 sys/kern/kern_task.c:446 end trace frame: 0x0, count: -11 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffff80002999dff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 end of kernel end trace frame: 0x78bb468c3ca0, count: 12 ddb{1}> trace x86_ipi_db(ffff80002999dff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 end of kernel end trace frame: 0x78bb468c3ca0, count: -3