panic: ip6_getpcbopt: unexpected option Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *143140 70630 0 0 0x4000000 0 syz-executor db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff834eb32a) at panic+0x1cf sys/kern/subr_prf.c:198 ip6_getpcbopt(ffff8000015e0ec0,33,fffffa806cafd300) at ip6_getpcbopt+0x3e3 ip6_ctloutput(0,ffff800010fde8a8,29,33,fffffa806cafd300) at ip6_ctloutput+0xfa9 sys/netinet6/ip6_output.c:1487 sogetopt(ffff800010fde8a8,29,33,fffffa806cafd300) at sogetopt+0x128 sys/kern/uipc_socket.c:2074 sys_getsockopt(ffff80003a4ea550,ffff80002a78b200,ffff80002a78b150) at sys_getsockopt+0x1eb sys/kern/uipc_syscalls.c:1263 syscall(ffff80002a78b200) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80002a78b200) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x41198a99d90, count: 7 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: ip6_getpcbopt: unexpected option ddb> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff834eb32a) at panic+0x1cf sys/kern/subr_prf.c:198 ip6_getpcbopt(ffff8000015e0ec0,33,fffffa806cafd300) at ip6_getpcbopt+0x3e3 ip6_ctloutput(0,ffff800010fde8a8,29,33,fffffa806cafd300) at ip6_ctloutput+0xfa9 sys/netinet6/ip6_output.c:1487 sogetopt(ffff800010fde8a8,29,33,fffffa806cafd300) at sogetopt+0x128 sys/kern/uipc_socket.c:2074 sys_getsockopt(ffff80003a4ea550,ffff80002a78b200,ffff80002a78b150) at sys_getsockopt+0x1eb sys/kern/uipc_syscalls.c:1263 syscall(ffff80002a78b200) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80002a78b200) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x41198a99d90, count: -8 ddb> show registers rdi 0 rsi 0x1 rbp 0xffff80002a78ae80 rbx 0xfffffa8070c92e18 rdx 0xffff80000002ac40 rcx 0 rax 0xffff80003a4ea550 r8 0x101010101010101 r9 0x8080808080808080 r10 0x77f9a488cef99858 r11 0x7133cbd4c1dc5431 r12 0 r13 0xffff800010fde8a8 r14 0 r15 0x1 rip 0xffffffff829fcc95 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80002a78ae70 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb> show proc PROC (syz-executor) tid=143140 pid=70630 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003a4eb778,0xffffffff83a76958 process=0xffff807fffff9b18 user=0xffff80002a786000, vmspace=0xfffffa8069042b98 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 70630 212912 14837 0 2 0 syz-executor *70630 143140 14837 0 7 0x4000000 syz-executor 4778 150362 5687 0 2 0 syz-executor 4778 73223 5687 0 3 0x4000088 kqpoll syz-executor 1367 3478 52241 0 2 0 syz-executor 1367 327142 52241 0 2 0x4000000 syz-executor 78838 165877 78650 0 2 0 syz-executor 78838 82370 78650 0 3 0x4000080 fsleep syz-executor 68121 335574 36322 0 2 0 syz-executor 68121 130685 36322 0 3 0x4000080 fsleep syz-executor 68121 417059 36322 0 3 0x4000080 fsleep syz-executor 52732 3874 1083 0 2 0 syz-executor 52732 512261 1083 0 3 0x4000080 fsleep syz-executor 90453 481836 83666 0 2 0 syz-executor 90453 84232 83666 0 3 0x4000080 fsleep syz-executor 14837 519102 48984 0 3 0x82 nanoslp syz-executor 42393 361058 1 0 3 0x82 nanoslp getty 56539 324685 48984 0 2 0x2 syz-executor 36322 173336 48984 0 3 0x82 nanoslp syz-executor 52241 286326 48984 0 3 0x82 nanoslp syz-executor 83666 366970 48984 0 3 0x82 nanoslp syz-executor 5687 445276 48984 0 3 0x82 nanoslp syz-executor 78650 133457 48984 0 3 0x82 nanoslp syz-executor 1083 419952 48984 0 3 0x82 nanoslp syz-executor 48984 75387 1 0 2 0x2 syz-executor 19407 181882 0 0 3 0x14200 bored smr 5559 514673 0 0 2 0x14200 zerothread 36972 456114 0 0 3 0x14200 aiodoned aiodoned 3496 124676 0 0 3 0x14200 syncer update 19816 404643 0 0 3 0x14200 cleaner cleaner 10578 160520 0 0 3 0x14200 reaper reaper 56582 376989 0 0 3 0x14200 pgdaemon pagedaemon 88567 101927 0 0 3 0x14200 bored viomb 60253 228017 0 0 3 0x40014200 acpi0 acpi0 68188 502669 0 0 3 0x14200 bored softnet0 11248 229639 0 0 3 0x14200 bored systqmp 32005 99471 0 0 3 0x14200 bored systq 78453 312898 0 0 3 0x40014200 tmoslp softclock 75635 308717 0 0 3 0x40014200 idle0 1 13778 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11039 12114K 12307K 166960K 12899 0 pcb 17 12K 12K 166960K 66 0 rtable 237 12K 12K 166960K 540 0 pf 36 14K 17K 166960K 166 0 ifaddr 40 7K 8K 166960K 106 0 ifgroup 50 2K 2K 166960K 171 0 sysctl 3 1K 9K 166960K 9 0 counters 33 17K 18K 166960K 96 0 ioctlops 0 0K 4K 166960K 134 0 iov 0 0K 16K 166960K 15 0 mount 1 1K 1K 166960K 1 0 log 1 0K 0K 166960K 5 0 vnodes 1297 82K 82K 166960K 1809 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 6 0 VM map 2 1K 1K 166960K 2 0 sem 5 0K 0K 166960K 14 0 dirhash 12 2K 2K 166960K 24 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 16 61K 236K 166960K 639 0 sigio 0 0K 0K 166960K 13 0 proc 20 25K 108K 166960K 585 0 subproc 72 4K 4K 166960K 90 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 22 0 in_multi 92 6K 7K 166960K 146 0 ether_multi 1 0K 0K 166960K 5 0 mrt 0 0K 0K 166960K 28 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 121 546K 546K 166960K 121 0 exec 0 0K 1K 166960K 414 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 129 82K 159K 166960K 6974 0 UVM aobj 9 2K 2K 166960K 9 0 pinsyscall 19 38K 92K 166960K 1792 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 1 0K 0K 166960K 25 0 NDP 13 0K 2K 166960K 68 0 temp 37 9110K 9158K 166960K 6982 0 kqueue 1 2K 29K 166960K 148 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 57 0 57 1 0 1 1 0 8 1 rtentry 136 160 0 68 4 0 4 4 0 8 0 unpcb 144 165 0 165 1 0 1 1 0 8 1 syncache 336 6 0 6 1 0 1 1 0 8 1 tcpcb 736 47 0 45 1 0 1 1 0 8 0 arp 96 23 0 7 1 0 1 1 0 8 0 inpcb 328 216 0 213 2 0 2 2 0 8 1 nd6 112 31 0 9 1 0 1 1 0 8 0 pkpcb 40 3 0 3 1 0 1 1 0 8 1 kcovpl 48 10 0 2 1 0 1 1 0 8 0 mppekey 1024 4 0 4 1 0 1 1 0 8 1 ppxss 1072 47 0 47 1 0 1 1 0 8 1 pppxif 1416 14 0 14 1 0 1 1 0 8 1 pfstscr 40 4 0 1 1 0 1 1 0 8 0 pfrktable 1344 19 0 11 1 0 1 1 0 8 0 pfsrclim 320 2 0 2 1 0 1 1 0 8 1 pfanchor 1288 3 0 1 1 0 1 1 0 8 0 pftag 88 9 0 6 1 0 1 1 0 8 0 pfstitem 24 4 0 0 1 0 1 1 0 8 0 pfstkey 128 6 0 2 1 0 1 1 0 8 0 pfstate 384 3 0 1 1 0 1 1 0 8 0 pfrule 1360 13 0 10 1 0 1 1 0 8 0 rttmr 136 4 0 4 1 0 1 1 0 8 1 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 718 0 283 29 0 29 29 0 8 1 art_table 40 720 0 283 5 0 5 5 0 8 0 art_node 32 158 0 75 1 0 1 1 0 8 0 sysvmsgpl 40 2 0 1 1 0 1 1 0 8 0 semupl 112 2 0 2 1 0 1 1 0 8 1 semapl 72 11 0 8 1 0 1 1 0 8 0 shmpl 112 6 0 0 1 0 1 1 0 8 0 dirhash 1024 25 0 8 3 0 3 3 0 8 0 dino2pl 256 2482 0 1021 92 0 92 92 0 8 0 ffsino 256 2482 0 1021 92 0 92 92 0 8 0 nchpl 144 3200 0 1506 64 0 64 64 0 8 0 rtmask 32 5 0 5 1 0 1 1 0 8 1 vnodes 216 2766 0 0 154 0 154 154 0 8 0 namei 1024 9199 0 9199 1 0 1 1 0 8 1 pfiaddrpl 120 5 0 2 1 0 1 1 0 8 0 kstatmem 264 97 0 74 3 0 3 3 0 8 1 scsiplug 72 1 0 1 1 0 1 1 0 8 1 scxspl 216 12670 0 12670 3 0 3 3 1 8 3 plimitpl 152 138 0 124 1 0 1 1 0 8 0 sigapl 424 921 0 889 6 0 6 6 0 8 1 knotepl 120 19187 0 19170 18 8 10 18 0 8 7 kqueuepl 184 153 0 151 1 0 1 1 0 8 0 pipepl 304 135 0 108 3 0 3 3 0 8 0 fdescpl 448 908 0 889 5 0 5 5 0 8 1 filepl 120 3181 0 3017 7 0 7 7 0 8 0 lockfpl 104 113 0 113 1 0 1 1 0 8 1 lockfspl 48 53 0 53 1 0 1 1 0 8 1 sessionpl 144 35 0 33 1 0 1 1 0 8 0 pgrppl 48 46 0 36 1 0 1 1 0 8 0 ucredpl 104 636 0 633 1 0 1 1 0 8 0 zombiepl 144 889 0 889 1 0 1 1 0 8 1 processpl 1152 921 0 889 4 0 4 4 0 8 0 procpl 664 1480 0 1440 6 0 6 6 0 8 1 sosppl 176 3 0 3 1 0 1 1 0 8 1 sockpl 552 445 0 442 3 0 3 3 0 8 2 mcl64k 65536 381 0 381 1 0 1 1 0 8 1 mcl16k 16384 105 0 105 1 0 1 1 0 8 1 mcl12k 12288 52 0 52 1 0 1 1 0 8 1 mcl9k128 9344 22 0 22 1 0 1 1 0 8 1 mcl8k 8192 107 0 107 1 0 1 1 0 8 1 mcl4k 4096 3502 0 3447 14 0 14 14 0 8 6 mcl2k2 2112 2 0 2 1 0 1 1 0 8 1 mcl2k 2048 306 0 301 2 0 2 2 0 8 1 mtagpl 96 9 0 5 1 0 1 1 0 8 0 mbufpl 256 10820 0 10676 13 0 13 13 0 8 2 bufpl 272 4372 0 103 285 0 285 285 0 8 0 anonpl 24 134266 0 132682 45 0 45 45 0 88 22 amapchunkpl 152 21262 0 20917 24 0 24 24 0 158 9 amappl16 200 2409 0 2384 19 6 13 15 0 8 8 amappl15 192 8 0 8 1 0 1 1 0 8 1 amappl14 184 436 0 436 1 0 1 1 0 8 1 amappl13 176 122 0 121 1 0 1 1 0 8 0 amappl12 168 1156 0 1138 2 0 2 2 0 8 0 amappl11 160 3 0 3 1 0 1 1 0 8 1 amappl10 152 55 0 55 1 0 1 1 0 8 1 amappl9 144 270 0 270 1 0 1 1 0 8 1 amappl8 136 105 0 105 1 0 1 1 0 8 1 amappl7 128 145 0 143 1 0 1 1 0 8 0 amappl6 120 167 0 167 1 0 1 1 0 8 1 amappl5 112 95 0 95 1 0 1 1 0 8 1 amappl4 104 269 0 267 1 0 1 1 0 8 0 amappl3 96 4412 0 4334 4 0 4 4 0 8 0 amappl2 88 543 0 538 2 0 2 2 0 8 0 amappl1 80 12181 0 12065 13 0 13 13 0 8 8 amappl 88 6207 0 6092 5 0 5 5 0 92 1 uvmvnodes 80 105 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 253 0 253 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 19 0 18 1 0 1 1 0 8 0 aobjpl 72 8 0 0 1 0 1 1 0 8 0 uaddrrnd 24 908 0 889 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 908 0 889 1 0 1 1 0 8 0 vmmpekpl 168 8313 0 8273 2 0 2 2 0 8 0 vmmpepl 168 63807 0 62977 90 0 90 90 0 357 51 vmsppl 368 907 0 889 4 0 4 4 0 8 1 rwobjpl 40 19438 0 19021 13 0 13 13 0 8 1 pdppl 4096 1822 0 1778 94 46 48 78 0 8 4 pvpl 32 447547 0 441447 123 0 123 123 0 265 59 pmappl 216 907 0 889 2 0 2 2 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 646 0 46 18 0 18 18 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff834eb32a) at panic+0x1cf sys/kern/subr_prf.c:198 ip6_getpcbopt(ffff8000015e0ec0,33,fffffa806cafd300) at ip6_getpcbopt+0x3e3 ip6_ctloutput(0,ffff800010fde8a8,29,33,fffffa806cafd300) at ip6_ctloutput+0xfa9 sys/netinet6/ip6_output.c:1487 sogetopt(ffff800010fde8a8,29,33,fffffa806cafd300) at sogetopt+0x128 sys/kern/uipc_socket.c:2074 sys_getsockopt(ffff80003a4ea550,ffff80002a78b200,ffff80002a78b150) at sys_getsockopt+0x1eb sys/kern/uipc_syscalls.c:1263 syscall(ffff80002a78b200) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80002a78b200) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x41198a99d90, count: -8 ddb> machine ddbcpu 1 No such command ddb> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff834eb32a) at panic+0x1cf sys/kern/subr_prf.c:198 ip6_getpcbopt(ffff8000015e0ec0,33,fffffa806cafd300) at ip6_getpcbopt+0x3e3 ip6_ctloutput(0,ffff800010fde8a8,29,33,fffffa806cafd300) at ip6_ctloutput+0xfa9 sys/netinet6/ip6_output.c:1487 sogetopt(ffff800010fde8a8,29,33,fffffa806cafd300) at sogetopt+0x128 sys/kern/uipc_socket.c:2074 sys_getsockopt(ffff80003a4ea550,ffff80002a78b200,ffff80002a78b150) at sys_getsockopt+0x1eb sys/kern/uipc_syscalls.c:1263 syscall(ffff80002a78b200) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80002a78b200) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x41198a99d90, count: -8 ddb>