panic: ip6_getpcbopt: unexpected option Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *124664 5636 0 0 0x4000000 0 syz-executor db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff834eb32a) at panic+0x1cf sys/kern/subr_prf.c:198 ip6_getpcbopt(ffff80000002a080,33,fffffc806d72f700) at ip6_getpcbopt+0x3e3 ip6_ctloutput(0,ffff800010fe19e0,29,33,fffffc806d72f700) at ip6_ctloutput+0xfa9 sys/netinet6/ip6_output.c:1487 sogetopt(ffff800010fe19e0,29,33,fffffc806d72f700) at sogetopt+0x128 sys/kern/uipc_socket.c:2074 sys_getsockopt(ffff80002f09bca8,ffff8000314a7a70,ffff8000314a79c0) at sys_getsockopt+0x1eb sys/kern/uipc_syscalls.c:1263 syscall(ffff8000314a7a70) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff8000314a7a70) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xe010475910, count: 7 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: ip6_getpcbopt: unexpected option ddb> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff834eb32a) at panic+0x1cf sys/kern/subr_prf.c:198 ip6_getpcbopt(ffff80000002a080,33,fffffc806d72f700) at ip6_getpcbopt+0x3e3 ip6_ctloutput(0,ffff800010fe19e0,29,33,fffffc806d72f700) at ip6_ctloutput+0xfa9 sys/netinet6/ip6_output.c:1487 sogetopt(ffff800010fe19e0,29,33,fffffc806d72f700) at sogetopt+0x128 sys/kern/uipc_socket.c:2074 sys_getsockopt(ffff80002f09bca8,ffff8000314a7a70,ffff8000314a79c0) at sys_getsockopt+0x1eb sys/kern/uipc_syscalls.c:1263 syscall(ffff8000314a7a70) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff8000314a7a70) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xe010475910, count: -8 ddb> show registers rdi 0 rsi 0x1 rbp 0xffff8000314a76f0 rbx 0xfffffc807097f8f8 rdx 0xffff8000015df900 rcx 0 rax 0xffff80002f09bca8 r8 0x101010101010101 r9 0x8080808080808080 r10 0x709fd137d0d3a36d r11 0xc5eadb4805eace0e r12 0 r13 0xffff800010fe19e0 r14 0 r15 0x1 rip 0xffffffff829fcc95 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff8000314a76e0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb> show proc PROC (syz-executor) tid=124664 pid=5636 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002f09b248,0xffffffff83a76958 process=0xffff80002f09c018 user=0xffff8000314a2000, vmspace=0xfffffc804cc8da28 estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 5636 323685 37745 0 2 0 syz-executor * 5636 124664 37745 0 7 0x4000000 syz-executor 31555 443529 92158 0 2 0 syz-executor 31555 442867 92158 0 3 0x4000080 fsleep syz-executor 31555 7300 92158 0 3 0x4000080 fsleep syz-executor 79772 177831 18626 0 3 0x80 nanoslp syz-executor 79772 474964 18626 0 3 0x4000080 fsleep syz-executor 79772 507715 18626 0 3 0x4000080 fsleep syz-executor 87492 361989 44203 0 3 0x81 nanoslp syz-executor 87492 433938 44203 0 3 0x4000081 fsleep syz-executor 66479 76341 23332 0 3 0x80 nanoslp syz-executor 66479 146108 23332 0 3 0x4000080 fsleep syz-executor 27688 450479 11410 -1 3 0x90 nanoslp syz-executor 27688 511403 11410 -1 3 0x4000090 kqpoll syz-executor 11410 28635 52337 0 3 0x82 nanoslp syz-executor 49099 234550 52337 0 3 0x82 nanoslp syz-executor 92158 270599 52337 0 3 0x82 nanoslp syz-executor 37745 282671 52337 0 3 0x82 nanoslp syz-executor 99348 148948 52337 0 2 0x2 syz-executor 23332 449451 52337 0 3 0x82 nanoslp syz-executor 18626 271421 52337 0 3 0x82 nanoslp syz-executor 44203 430733 52337 0 3 0x82 nanoslp syz-executor 52337 166164 81886 0 3 0x82 kqread syz-executor 81886 107945 55837 0 3 0x10008a sigsusp ksh 55837 42801 4098 0 3 0x98 kqread sshd-session 4098 196600 82262 0 3 0x92 kqread sshd-session 98773 516508 1 0 3 0x100083 ttyin getty 82262 12551 1 0 3 0x88 kqread sshd 25790 197726 26260 73 3 0x1100090 kqread syslogd 26260 188353 1 0 3 0x100082 sbwait syslogd 98894 252133 1 0 3 0x100080 kqread resolvd 36327 419644 21598 77 3 0x100092 kqread dhcpleased 39064 365156 21598 77 3 0x100092 kqread dhcpleased 21598 161754 1 0 3 0x80 kqread dhcpleased 13005 462701 0 0 3 0x14200 bored smr 13530 480349 0 0 2 0x14200 zerothread 75304 373035 0 0 3 0x14200 aiodoned aiodoned 7899 340581 0 0 3 0x14200 syncer update 6656 224142 0 0 3 0x14200 cleaner cleaner 4975 175219 0 0 3 0x14200 reaper reaper 35656 60132 0 0 3 0x14200 pgdaemon pagedaemon 69337 390385 0 0 3 0x14200 bored viomb 65848 339460 0 0 3 0x40014200 acpi0 acpi0 1187 20249 0 0 3 0x14200 bored softnet0 75529 79669 0 0 3 0x14200 bored systqmp 35093 362667 0 0 3 0x14200 bored systq 83577 123183 0 0 3 0x40014200 tmoslp softclock 62749 458999 0 0 3 0x40014200 idle0 1 52993 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11039 12135K 12200K 166960K 12148 0 pcb 17 12K 12K 166960K 18 0 rtable 242 7K 8K 166960K 360 0 pf 31 13K 16K 166960K 38 0 ifaddr 42 7K 7K 166960K 45 0 ifgroup 50 2K 2K 166960K 55 0 sysctl 1 1K 9K 166960K 5 0 counters 33 17K 17K 166960K 34 0 ioctlops 0 0K 4K 166960K 30 0 iov 0 0K 8K 166960K 4 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1292 81K 82K 166960K 1368 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 4 0K 0K 166960K 4 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 85K 166960K 159 0 proc 58 59K 91K 166960K 496 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 3 0 in_multi 99 7K 7K 166960K 102 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 2 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 61 281K 281K 166960K 61 0 exec 0 0K 1K 166960K 367 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 217 150K 157K 166960K 3088 0 UVM aobj 3 2K 2K 166960K 3 0 pinsyscall 38 76K 90K 166960K 1259 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 1 0K 0K 166960K 1 0 NDP 27 2K 2K 166960K 28 0 temp 34 9106K 9112K 166960K 3642 0 kqueue 15 22K 22K 166960K 30 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 36 0 33 1 0 1 1 0 8 0 rtentry 136 111 0 1 4 0 4 4 0 8 0 unpcb 144 51 0 36 1 0 1 1 0 8 0 syncache 336 4 0 4 1 0 1 1 0 8 1 tcpcb 736 15 0 10 1 0 1 1 0 8 0 arp 96 18 0 0 1 0 1 1 0 8 0 inpcb 328 67 0 59 1 0 1 1 0 8 0 nd6 112 24 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 pfrktable 1344 3 0 1 1 0 1 1 0 8 0 pfanchor 1288 1 0 0 1 0 1 1 0 8 0 pfrule 1360 1 0 0 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 452 0 0 29 0 29 29 0 8 0 art_table 40 453 0 0 5 0 5 5 0 8 0 art_node 32 111 0 11 1 0 1 1 0 8 0 semapl 72 2 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1590 0 130 92 0 92 92 0 8 0 ffsino 256 1590 0 130 92 0 92 92 0 8 0 nchpl 144 1808 0 118 63 0 63 63 0 8 0 vnodes 216 1679 0 0 94 0 94 94 0 8 0 namei 1024 5305 0 5304 2 0 2 2 0 8 1 pfiaddrpl 120 1 0 0 1 0 1 1 0 8 0 kstatmem 264 25 0 2 2 0 2 2 0 8 0 scxspl 216 6076 0 6076 4 0 4 4 1 8 4 plimitpl 152 34 0 15 1 0 1 1 0 8 0 sigapl 424 454 0 412 6 0 6 6 0 8 1 knotepl 120 3325 0 3278 10 0 10 10 0 8 8 kqueuepl 184 27 0 16 1 0 1 1 0 8 0 pipepl 304 124 0 97 3 0 3 3 0 8 0 fdescpl 448 441 0 412 4 0 4 4 0 8 0 filepl 120 1519 0 1301 7 0 7 7 0 8 0 lockfpl 104 8 0 6 1 0 1 1 0 8 0 lockfspl 48 5 0 3 1 0 1 1 0 8 0 sessionpl 144 25 0 15 1 0 1 1 0 8 0 pgrppl 48 33 0 15 1 0 1 1 0 8 0 ucredpl 104 117 0 105 1 0 1 1 0 8 0 zombiepl 144 413 0 412 1 0 1 1 0 8 0 processpl 1152 454 0 412 4 0 4 4 0 8 0 procpl 664 491 0 441 5 0 5 5 0 8 0 sockpl 552 154 0 128 3 0 3 3 0 8 1 mcl64k 65536 8 0 8 1 0 1 1 0 8 1 mcl16k 16384 2 0 2 1 0 1 1 0 8 1 mcl12k 12288 1 0 1 1 0 1 1 0 8 1 mcl9k128 9344 1 0 1 1 0 1 1 0 8 1 mcl8k 8192 6 0 6 1 0 1 1 0 8 1 mcl4k 4096 2493 0 2438 15 0 15 15 0 8 7 mcl2k 2048 120 0 120 1 0 1 1 0 8 1 mtagpl 96 5 0 5 1 0 1 1 0 8 1 mbufpl 256 4333 0 4191 10 0 10 10 0 8 0 bufpl 272 2262 0 102 144 0 144 144 0 8 0 anonpl 24 86566 0 83166 22 0 22 22 0 88 0 amapchunkpl 152 8545 0 8074 20 0 20 20 0 158 1 amappl16 200 1368 0 1330 4 0 4 4 0 8 1 amappl15 192 20 0 20 1 0 1 1 0 8 1 amappl14 184 410 0 409 1 0 1 1 0 8 0 amappl13 176 117 0 107 1 0 1 1 0 8 0 amappl12 168 679 0 651 2 0 2 2 0 8 0 amappl11 160 2 0 2 1 0 1 1 0 8 1 amappl10 152 57 0 47 1 0 1 1 0 8 0 amappl9 144 270 0 270 1 0 1 1 0 8 1 amappl8 136 91 0 90 1 0 1 1 0 8 0 amappl7 128 140 0 129 1 0 1 1 0 8 0 amappl6 120 152 0 151 1 0 1 1 0 8 0 amappl5 112 102 0 95 1 0 1 1 0 8 0 amappl4 104 276 0 261 1 0 1 1 0 8 0 amappl3 96 1546 0 1437 3 0 3 3 0 8 0 amappl2 88 518 0 469 2 0 2 2 0 8 0 amappl1 80 10192 0 9635 13 0 13 13 0 8 0 amappl 88 2404 0 2249 4 0 4 4 0 92 0 uvmvnodes 80 97 0 0 2 0 2 2 0 8 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 253 0 253 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 441 0 412 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 441 0 412 1 0 1 1 0 8 0 vmmpekpl 168 5537 0 5506 2 0 2 2 0 8 0 vmmpepl 168 37303 0 35519 81 0 81 81 0 357 0 vmsppl 368 440 0 412 4 0 4 4 0 8 0 rwobjpl 40 13894 0 12945 11 0 11 11 0 8 0 pdppl 4096 888 0 824 90 14 76 76 0 8 12 pvpl 32 213456 0 204265 77 0 77 77 0 265 0 pmappl 216 440 0 412 2 0 2 2 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 496 0 14 14 0 14 14 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff834eb32a) at panic+0x1cf sys/kern/subr_prf.c:198 ip6_getpcbopt(ffff80000002a080,33,fffffc806d72f700) at ip6_getpcbopt+0x3e3 ip6_ctloutput(0,ffff800010fe19e0,29,33,fffffc806d72f700) at ip6_ctloutput+0xfa9 sys/netinet6/ip6_output.c:1487 sogetopt(ffff800010fe19e0,29,33,fffffc806d72f700) at sogetopt+0x128 sys/kern/uipc_socket.c:2074 sys_getsockopt(ffff80002f09bca8,ffff8000314a7a70,ffff8000314a79c0) at sys_getsockopt+0x1eb sys/kern/uipc_syscalls.c:1263 syscall(ffff8000314a7a70) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff8000314a7a70) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xe010475910, count: -8 ddb> machine ddbcpu 1 No such command ddb> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff834eb32a) at panic+0x1cf sys/kern/subr_prf.c:198 ip6_getpcbopt(ffff80000002a080,33,fffffc806d72f700) at ip6_getpcbopt+0x3e3 ip6_ctloutput(0,ffff800010fe19e0,29,33,fffffc806d72f700) at ip6_ctloutput+0xfa9 sys/netinet6/ip6_output.c:1487 sogetopt(ffff800010fe19e0,29,33,fffffc806d72f700) at sogetopt+0x128 sys/kern/uipc_socket.c:2074 sys_getsockopt(ffff80002f09bca8,ffff8000314a7a70,ffff8000314a79c0) at sys_getsockopt+0x1eb sys/kern/uipc_syscalls.c:1263 syscall(ffff8000314a7a70) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff8000314a7a70) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xe010475910, count: -8