panic: ip6_getpcbopt: unexpected option Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *347865 34208 0 0 0x4000000 0 syz-executor db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff834eb32a) at panic+0x1cf sys/kern/subr_prf.c:198 ip6_getpcbopt(ffff8000015f5700,33,fffffc0076058c00) at ip6_getpcbopt+0x3e3 ip6_ctloutput(0,ffff800010fdf7c0,29,33,fffffc0076058c00) at ip6_ctloutput+0xfa9 sys/netinet6/ip6_output.c:1487 sogetopt(ffff800010fdf7c0,29,33,fffffc0076058c00) at sogetopt+0x128 sys/kern/uipc_socket.c:2074 sys_getsockopt(ffff80002a7602b8,ffff80003c8e7e30,ffff80003c8e7d80) at sys_getsockopt+0x1eb sys/kern/uipc_syscalls.c:1263 syscall(ffff80003c8e7e30) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c8e7e30) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x8dc8eec1ae0, count: 7 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: ip6_getpcbopt: unexpected option ddb> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff834eb32a) at panic+0x1cf sys/kern/subr_prf.c:198 ip6_getpcbopt(ffff8000015f5700,33,fffffc0076058c00) at ip6_getpcbopt+0x3e3 ip6_ctloutput(0,ffff800010fdf7c0,29,33,fffffc0076058c00) at ip6_ctloutput+0xfa9 sys/netinet6/ip6_output.c:1487 sogetopt(ffff800010fdf7c0,29,33,fffffc0076058c00) at sogetopt+0x128 sys/kern/uipc_socket.c:2074 sys_getsockopt(ffff80002a7602b8,ffff80003c8e7e30,ffff80003c8e7d80) at sys_getsockopt+0x1eb sys/kern/uipc_syscalls.c:1263 syscall(ffff80003c8e7e30) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c8e7e30) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x8dc8eec1ae0, count: -8 ddb> show registers rdi 0 rsi 0x1 rbp 0xffff80003c8e7ab0 rbx 0xfffffc0075aa9668 rdx 0xffff8000015ec1c0 rcx 0 rax 0xffff80002a7602b8 r8 0x101010101010101 r9 0x8080808080808080 r10 0x739d0256a9a877dd r11 0x41658b65422296e3 r12 0 r13 0xffff800010fdf7c0 r14 0 r15 0x1 rip 0xffffffff829fcc95 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c8e7aa0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb> show proc PROC (syz-executor) tid=347865 pid=34208 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a760a80,0xffffffff83a76958 process=0xffff8000314adf98 user=0xffff80003c8e2000, vmspace=0xfffffc004cc91468 estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 34208 411322 74177 0 2 0 syz-executor *34208 347865 74177 0 7 0x4000000 syz-executor 1086 84367 24425 0 2 0 syz-executor 1086 134113 24425 0 3 0x4000080 fsleep syz-executor 1086 375582 24425 0 3 0x4000080 fsleep syz-executor 63608 50502 35632 0 2 0 syz-executor 63608 502639 35632 0 3 0x4000080 fsleep syz-executor 63608 261844 35632 0 2 0x4000000 syz-executor 63028 111562 11693 0 3 0x80 nanoslp syz-executor 63028 206222 11693 0 3 0x4000080 kqsel syz-executor 63028 485018 11693 0 3 0x4000080 fsleep syz-executor 58333 224443 65249 0 3 0x80 nanoslp syz-executor 58333 219783 65249 0 3 0x4000080 bpf syz-executor 58333 196127 65249 0 3 0x4000000 smrbar syz-executor 51436 489746 86449 0 2 0 syz-executor 51436 477634 86449 0 3 0x4000080 fsleep syz-executor 3065 326978 1 0 3 0x82 nanoslp getty 32403 404070 29938 0 3 0x80 nanoslp syz-executor 32403 283778 29938 0 3 0x4000088 kqpoll syz-executor 32403 462450 29938 0 3 0x4000080 fsleep syz-executor 27976 513246 80697 0 2 0x2 syz-executor 86449 100120 80697 0 3 0x82 nanoslp syz-executor 74177 449628 80697 0 3 0x82 nanoslp syz-executor 35632 461360 80697 0 3 0x82 nanoslp syz-executor 24425 201282 80697 0 3 0x82 nanoslp syz-executor 11693 421210 80697 0 3 0x82 nanoslp syz-executor 65249 340811 80697 0 3 0x82 nanoslp syz-executor 29938 443732 80697 0 3 0x82 nanoslp syz-executor 80697 78756 90441 0 3 0x82 kqread syz-executor 90441 92974 2844 0 3 0x10008a sigsusp ksh 2844 425562 37225 0 3 0x98 kqread sshd-session 37225 170830 67426 0 3 0x92 kqread sshd-session 67426 446413 1 0 3 0x88 kqread sshd 87834 119156 60935 73 3 0x1100090 kqread syslogd 60935 103990 1 0 3 0x100082 sbwait syslogd 4279 324915 1 0 3 0x100080 kqread resolvd 49375 426250 92294 77 3 0x100092 kqread dhcpleased 87736 468254 92294 77 3 0x100092 kqread dhcpleased 92294 426264 1 0 3 0x80 kqread dhcpleased 12035 162133 0 0 3 0x14200 bored smr 12176 504648 0 0 2 0x14200 zerothread 42313 498310 0 0 3 0x14200 aiodoned aiodoned 71089 87570 0 0 3 0x14200 syncer update 86342 444381 0 0 3 0x14200 cleaner cleaner 97214 399822 0 0 3 0x14200 reaper reaper 60319 68438 0 0 3 0x14200 pgdaemon pagedaemon 5430 352312 0 0 3 0x14200 bored viomb 37406 296711 0 0 3 0x40014200 acpi0 acpi0 38270 228313 0 0 3 0x14200 bored softnet0 4163 513011 0 0 3 0x14200 smrbar systqmp 93375 135469 0 0 3 0x14200 bored systq 90367 337522 0 0 3 0x40014200 tmoslp softclock 69885 169456 0 0 3 0x40014200 idle0 1 62713 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11042 12246K 12397K 166960K 12349 0 pcb 17 12K 12K 166960K 46 0 rtable 134 5K 9K 166960K 467 0 pf 30 13K 20K 166960K 84 0 ifaddr 25 3K 7K 166960K 66 0 ifgroup 46 2K 2K 166960K 81 0 sysctl 1 1K 9K 166960K 5 0 counters 32 17K 18K 166960K 47 0 ioctlops 0 0K 4K 166960K 86 0 iov 0 0K 8K 166960K 3 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1297 82K 82K 166960K 1519 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 5 0 VM map 2 1K 1K 166960K 2 0 sem 9 0K 0K 166960K 10 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 93K 166960K 389 0 sigio 0 0K 0K 166960K 2 0 proc 59 59K 100K 166960K 544 0 subproc 72 4K 4K 166960K 81 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 12 0 in_multi 34 2K 6K 166960K 125 0 ether_multi 1 0K 0K 166960K 2 0 mrt 1 0K 0K 166960K 10 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 49 228K 228K 166960K 49 0 exec 0 0K 1K 166960K 405 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 216 150K 167K 166960K 4859 0 UVM aobj 6 2K 2K 166960K 7 0 pinsyscall 38 76K 94K 166960K 1539 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 1 0K 0K 166960K 1 0 NDP 10 0K 1K 166960K 39 0 temp 35 9106K 9122K 166960K 9216 0 kqueue 13 20K 29K 166960K 53 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 43 0 40 1 0 1 1 0 8 0 rtentry 136 139 0 90 4 0 4 4 0 8 0 unpcb 144 96 0 81 1 0 1 1 0 8 0 syncache 336 6 0 6 1 0 1 1 0 8 1 tcpcb 736 46 0 41 1 0 1 1 0 8 0 arp 96 21 0 15 1 0 1 1 0 8 0 ipq 40 1 0 1 1 0 1 1 0 8 1 ipqe 40 2 0 2 1 0 1 1 0 8 1 inpcb 328 159 0 149 2 0 2 2 0 8 1 nd6 112 29 0 22 1 0 1 1 0 8 0 pkpcb 40 1 0 1 1 0 1 1 0 8 1 kcovpl 48 9 0 1 1 0 1 1 0 8 0 ppxss 1072 9 0 9 1 0 1 1 0 8 1 pppxif 1416 1 0 1 1 0 1 1 0 8 1 pfstscr 40 8 0 8 1 0 1 1 0 8 1 pfrktable 1344 4 0 4 1 0 1 1 0 8 1 pfsrclim 320 3 0 3 1 0 1 1 0 8 1 pfanchor 1288 3 0 1 1 0 1 1 0 8 0 pftag 88 1 0 0 1 0 1 1 0 8 0 pfstitem 24 2 0 0 1 0 1 1 0 8 0 pfstkey 128 10 0 8 1 0 1 1 0 8 0 pfstate 384 5 0 4 1 0 1 1 0 8 0 pfrule 1360 6 0 6 1 0 1 1 0 8 1 art_heap8 4096 4 0 1 4 0 4 4 0 8 1 art_heap4 256 522 0 280 29 3 26 29 0 8 8 art_table 40 526 0 281 5 0 5 5 0 8 0 art_node 32 139 0 94 1 0 1 1 0 8 0 semapl 72 8 0 1 1 0 1 1 0 8 0 shmpl 112 4 0 1 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1907 0 447 92 0 92 92 0 8 0 ffsino 256 1907 0 447 92 0 92 92 0 8 0 nchpl 144 2374 0 680 64 0 64 64 0 8 0 rtmask 32 1 0 1 1 0 1 1 0 8 1 vnodes 216 2097 0 0 117 0 117 117 0 8 0 namei 1024 6839 0 6837 1 0 1 1 0 8 0 pfiaddrpl 120 1 0 1 1 0 1 1 0 8 1 kstatmem 264 41 0 20 2 0 2 2 0 8 0 scxspl 216 7911 0 7911 5 0 5 5 1 8 5 plimitpl 152 45 0 28 1 0 1 1 0 8 0 sigapl 424 688 0 646 6 0 6 6 0 8 1 knotepl 120 11196 0 11149 16 6 10 16 0 8 8 kqueuepl 184 58 0 47 1 0 1 1 0 8 0 pipepl 304 129 0 102 3 0 3 3 0 8 0 fdescpl 448 675 0 646 5 0 5 5 0 8 1 filepl 120 2196 0 1984 7 0 7 7 0 8 0 lockfpl 104 65 0 63 1 0 1 1 0 8 0 lockfspl 48 30 0 28 1 0 1 1 0 8 0 sessionpl 144 30 0 23 1 0 1 1 0 8 0 pgrppl 48 39 0 24 1 0 1 1 0 8 0 ucredpl 104 206 0 195 1 0 1 1 0 8 0 zombiepl 144 646 0 646 1 0 1 1 0 8 1 processpl 1152 688 0 646 4 0 4 4 0 8 0 procpl 664 957 0 903 5 0 5 5 0 8 0 sockpl 552 299 0 271 3 0 3 3 0 8 1 mcl64k 65536 58 0 58 1 0 1 1 0 8 1 mcl16k 16384 37 0 37 1 0 1 1 0 8 1 mcl12k 12288 26 0 26 1 0 1 1 0 8 1 mcl9k128 9344 13 0 13 1 0 1 1 0 8 1 mcl8k 8192 60 0 60 1 0 1 1 0 8 1 mcl4k 4096 2917 0 2860 16 0 16 16 0 8 8 mcl2k 2048 283 0 281 2 0 2 2 0 8 1 mtagpl 96 8 0 8 1 0 1 1 0 8 1 mbufpl 256 7116 0 7005 12 0 12 12 0 8 1 bufpl 272 2772 0 104 178 0 178 178 0 8 0 anonpl 24 103150 0 99989 38 0 38 38 0 88 15 amapchunkpl 152 14650 0 14202 25 0 25 25 0 158 6 amappl16 200 1329 0 1308 4 0 4 4 0 8 2 amappl15 192 6 0 6 1 0 1 1 0 8 1 amappl14 184 427 0 426 1 0 1 1 0 8 0 amappl13 176 151 0 140 1 0 1 1 0 8 0 amappl12 168 917 0 889 2 0 2 2 0 8 0 amappl11 160 2 0 1 1 0 1 1 0 8 0 amappl10 152 56 0 46 1 0 1 1 0 8 0 amappl9 144 280 0 280 1 0 1 1 0 8 1 amappl8 136 99 0 98 1 0 1 1 0 8 0 amappl7 128 148 0 137 1 0 1 1 0 8 0 amappl6 120 157 0 156 1 0 1 1 0 8 0 amappl5 112 94 0 87 1 0 1 1 0 8 0 amappl4 104 274 0 260 1 0 1 1 0 8 0 amappl3 96 3018 0 2915 3 0 3 3 0 8 0 amappl2 88 549 0 497 2 0 2 2 0 8 0 amappl1 80 11817 0 11274 15 0 15 15 0 8 3 amappl 88 4122 0 3969 4 0 4 4 0 92 0 uvmvnodes 80 99 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 253 0 253 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 6 0 1 1 0 1 1 0 8 0 uaddrrnd 24 675 0 646 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 675 0 646 1 0 1 1 0 8 0 vmmpekpl 168 7078 0 7043 2 0 2 2 0 8 0 vmmpepl 168 50595 0 48849 88 0 88 88 0 357 9 vmsppl 368 674 0 646 4 0 4 4 0 8 1 rwobjpl 40 16547 0 15628 12 0 12 12 0 8 1 pdppl 4096 1356 0 1292 94 28 66 80 0 8 2 pvpl 32 306985 0 298130 106 0 106 106 0 265 19 pmappl 216 674 0 646 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 541 0 31 15 0 15 15 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff834eb32a) at panic+0x1cf sys/kern/subr_prf.c:198 ip6_getpcbopt(ffff8000015f5700,33,fffffc0076058c00) at ip6_getpcbopt+0x3e3 ip6_ctloutput(0,ffff800010fdf7c0,29,33,fffffc0076058c00) at ip6_ctloutput+0xfa9 sys/netinet6/ip6_output.c:1487 sogetopt(ffff800010fdf7c0,29,33,fffffc0076058c00) at sogetopt+0x128 sys/kern/uipc_socket.c:2074 sys_getsockopt(ffff80002a7602b8,ffff80003c8e7e30,ffff80003c8e7d80) at sys_getsockopt+0x1eb sys/kern/uipc_syscalls.c:1263 syscall(ffff80003c8e7e30) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c8e7e30) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x8dc8eec1ae0, count: -8 ddb> machine ddbcpu 1 No such command ddb> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff834eb32a) at panic+0x1cf sys/kern/subr_prf.c:198 ip6_getpcbopt(ffff8000015f5700,33,fffffc0076058c00) at ip6_getpcbopt+0x3e3 ip6_ctloutput(0,ffff800010fdf7c0,29,33,fffffc0076058c00) at ip6_ctloutput+0xfa9 sys/netinet6/ip6_output.c:1487 sogetopt(ffff800010fdf7c0,29,33,fffffc0076058c00) at sogetopt+0x128 sys/kern/uipc_socket.c:2074 sys_getsockopt(ffff80002a7602b8,ffff80003c8e7e30,ffff80003c8e7d80) at sys_getsockopt+0x1eb sys/kern/uipc_syscalls.c:1263 syscall(ffff80003c8e7e30) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c8e7e30) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x8dc8eec1ae0, count: -8