uvm_fault(0xfffff10070fb7018, 0x6aa5f145, 0, 1) -> e
kernel: page fault trap, code=0
Stopped at ip6_freemoptions+0x65: movq 0x8(%r15),%r13
TID PID UID PRFLAGS PFLAGS CPU COMMAND
ip6_freemoptions(ffff800000c43590) at ip6_freemoptions+0x65 sys/netinet6/ip6_output.c:2147
in_pcbdetach(fffff10065e6d3e8) at in_pcbdetach+0x122 sys/netinet/in_pcb.c:608
udp_detach(ffff800010fe14b0) at udp_detach+0x5a sys/netinet/udp_usrreq.c:1158
soclose(ffff800010fe14b0,0) at soclose+0xb0 pru_detach sys/sys/protosw.h:281 [inline]
soclose(ffff800010fe14b0,0) at soclose+0xb0 sys/kern/uipc_socket.c:403
soo_close(fffff1006dfb9158,ffff800045fe8550) at soo_close+0x56 sys/kern/sys_socket.c:-1
fdrop(fffff1006dfb9158,ffff800045fe8550) at fdrop+0x121 sys/kern/kern_descrip.c:1281
closef(fffff1006dfb9158,ffff800045fe8550) at closef+0x192 sys/kern/kern_descrip.c:1265
fdfree(ffff800045fe8550) at fdfree+0x116 sys/kern/kern_descrip.c:1196
exit1(ffff800045fe8550,0,0,1) at exit1+0x595 sys/kern/kern_exit.c:215
sys_exit(ffff800045fe8550,ffff80002ab8a090,ffff80002ab89fe0) at sys_exit+0x1a sys/kern/kern_exit.c:-1
syscall(ffff80002ab8a090) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80002ab8a090) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:791
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x77207ea554a0, count: 3
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports. Insufficient info makes it difficult to find and fix bugs.
ddb{0}>
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
*cpu0: uvm_fault(0xfffff10070fb7018, 0x6aa5f145, 0, 1) -> e
ddb{0}> show kasan
No such command
ddb{0}> trace
ip6_freemoptions(ffff800000c43590) at ip6_freemoptions+0x65 sys/netinet6/ip6_output.c:2147
in_pcbdetach(fffff10065e6d3e8) at in_pcbdetach+0x122 sys/netinet/in_pcb.c:608
udp_detach(ffff800010fe14b0) at udp_detach+0x5a sys/netinet/udp_usrreq.c:1158
soclose(ffff800010fe14b0,0) at soclose+0xb0 pru_detach sys/sys/protosw.h:281 [inline]
soclose(ffff800010fe14b0,0) at soclose+0xb0 sys/kern/uipc_socket.c:403
soo_close(fffff1006dfb9158,ffff800045fe8550) at soo_close+0x56 sys/kern/sys_socket.c:-1
fdrop(fffff1006dfb9158,ffff800045fe8550) at fdrop+0x121 sys/kern/kern_descrip.c:1281
closef(fffff1006dfb9158,ffff800045fe8550) at closef+0x192 sys/kern/kern_descrip.c:1265
fdfree(ffff800045fe8550) at fdfree+0x116 sys/kern/kern_descrip.c:1196
exit1(ffff800045fe8550,0,0,1) at exit1+0x595 sys/kern/kern_exit.c:215
sys_exit(ffff800045fe8550,ffff80002ab8a090,ffff80002ab89fe0) at sys_exit+0x1a sys/kern/kern_exit.c:-1
syscall(ffff80002ab8a090) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80002ab8a090) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:791
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x77207ea554a0, count: -12
ddb{0}> show registers
rdi 0xffff800000c43590
rsi 0x100
rbp 0xffff80002ab89cf0
rbx 0x3
rdx 0
rcx 0xffff800045fe8550
rax 0xffffffff839c2ff0 cpu_info_full_primary+0x1ff0
r8 0x90
r9 0
r10 0x4c68f3d0cc04747
r11 0x8f3638ec0cf39bfc
r12 0
r13 0x100
r14 0xffff800000c43590
r15 0x6aa5f13d
rip 0xffffffff828283c5 ip6_freemoptions+0x65
cs 0x8
rflags 0x10202 __ALIGN_SIZE+0xf202
rsp 0xffff80002ab89cb0
ss 0x10
ip6_freemoptions+0x65: movq 0x8(%r15),%r13
ddb{0}> show proc
PROC (syz-executor) tid=67667 pid=64417 tcnt=0 stat=onproc
flags process=1018<EXITING,SUGID,SINGLEEXIT> proc=2000<WEXIT>
runpri=32, usrpri=86, slppri=32, nice=20
wchan=0x0, wmesg=, ps_single=0xffff800045fe8550 scnt=-1 ecnt=1
forw=0xffffffffffffffff, list=0xffff80002a22bca0,0xffffffff83af6938
process=0xffff800045fe7040 user=0xffff80002ab85000, vmspace=0xfffff10070fb7018
estcpu=36, cpticks=3, pctcpu=0.0, user=0, sys=1, intr=0
ddb{0}> ps
PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND
98359 415986 30059 32767 3 0x10 0x80 nanoslp syz-executor
30059 438312 38777 0 3 0x2 0x80 wait syz-executor
93600 370496 19785 32767 3 0x10 0x80 piperd syz-executor
19785 499341 38777 0 3 0x2 0x80 wait syz-executor
5772 57503 69355 32767 3 0x10 0x80 piperd syz-executor
69355 14779 38777 0 3 0x2 0x80 wait syz-executor
21870 191231 77366 32767 3 0x10 0x80 piperd syz-executor
77366 90001 38777 0 3 0x2 0x80 wait syz-executor
52982 27088 14111 32767 3 0x10 0x80 piperd syz-executor
14111 410687 38777 0 3 0x2 0x80 wait syz-executor
24303 64870 65656 32767 3 0x10 0x80 piperd syz-executor
35758 277747 15922 32767 3 0x10 0x80 piperd syz-executor
65656 179408 38777 0 3 0x2 0x80 wait syz-executor
15922 173120 38777 0 3 0x2 0x80 wait syz-executor
38777 316276 49248 0 3 0x2 0x80 nanoslp syz-executor
49248 234589 79206 0 3 0x100002 0x88 sigsusp ksh
79206 237554 40790 0 3 0x10 0x88 kqread sshd-session
40790 434742 38691 0 3 0x12 0x80 kqread sshd-session
73673 36600 1 0 3 0x100003 0x80 ttyin getty
38691 380301 1 0 3 0 0x88 kqread sshd
30393 440722 51101 73 3 0x1100010 0x80 kqread syslogd
51101 382617 1 0 3 0x100002 0x80 sbwait syslogd
80514 256392 1 0 3 0x100000 0x80 kqread resolvd
78972 358703 71178 77 3 0x100012 0x80 kqread dhcpleased
59819 299262 71178 77 3 0x100012 0x80 kqread dhcpleased
71178 380393 1 0 3 0 0x80 kqread dhcpleased
96420 199438 0 0 3 0x14000 0x200 bored smr
61334 395542 0 0 3 0x14000 0x200 pgzero zerothread
97502 437696 0 0 3 0x14000 0x200 aiodoned aiodoned
13960 277618 0 0 3 0x14000 0x200 syncer update
86929 398487 0 0 3 0x14000 0x200 cleaner cleaner
9756 194167 0 0 3 0x14000 0x200 reaper reaper
40635 443138 0 0 3 0x14000 0x200 pgdaemon pagedaemon
93721 292983 0 0 3 0x14000 0x200 bored viomb
26364 20635 0 0 3 0x14000 0x40000200 acpi0 acpi0
73027 520352 0 0 7 0x14000 0x40000200 idle1
67394 154277 0 0 3 0x14000 0x200 bored softnet1
20455 222373 0 0 3 0x14000 0x200 bored softnet0
39932 13622 0 0 3 0x14000 0x200 bored systqmp
87201 422379 0 0 3 0x14000 0x200 bored systq
32985 212784 0 0 3 0x14000 0x200 tmoslp softclockmp
15352 299015 0 0 3 0x14000 0x40000200 tmoslp softclock
32824 93957 0 0 3 0x14000 0x40000200 idle0
1 137883 0 0 3 0x2 0x80 wait init
0 0 -1 0 3 0x10000 0x200 scheduler swapper
ddb{0}> show all locks
ddb{0}> show malloc
Type InUse MemUse HighUse Limit Requests Type Lim
devbuf 11047 12016K 12034K 166960K 12165 0
pcb 17 12K 12K 166960K 17 0
rtable 217 6K 7K 166960K 592 0
pf 29 16K 16K 166960K 47 0
ifaddr 39 7K 7K 166960K 78 0
ifgroup 46 2K 2K 166960K 82 0
sysctl 1 1K 9K 166960K 5 0
counters 68 36K 37K 166960K 86 0
ioctlops 0 0K 2K 166960K 42 0
iov 0 0K 12K 166960K 5 0
mount 1 1K 1K 166960K 1 0
log 0 0K 0K 166960K 4 0
vnodes 1287 81K 81K 166960K 1597 0
UFS quota 1 32K 32K 166960K 1 0
UFS mount 5 36K 36K 166960K 5 0
shm 2 1K 5K 166960K 8 0
VM map 2 1K 1K 166960K 2 0
sem 18 1K 1K 166960K 19 0
dirhash 12 2K 2K 166960K 18 0
ACPI 1734 201K 291K 166960K 11964 0
file desc 17 61K 121K 166960K 465 0
sigio 0 0K 0K 166960K 3 0
proc 58 99K 147K 166960K 737 0
subproc 63 3K 4K 166960K 270 0
NFS srvsock 1 0K 0K 166960K 1 0
NFS daemon 1 16K 16K 166960K 1 0
ip_moptions 1 0K 0K 166960K 42 0
in_multi 88 5K 6K 166960K 194 0
ether_multi 1 0K 0K 166960K 1 0
mrt 1 0K 0K 166960K 17 0
ISOFS mount 1 32K 32K 166960K 1 0
MSDOSFS mount 1 16K 16K 166960K 1 0
ttys 61 281K 281K 166960K 61 0
exec 0 0K 1K 166960K 483 0
fusefs mount 1 32K 32K 166960K 1 0
tdb 3 0K 0K 166960K 3 0
VM swap 8 62K 64K 166960K 10 0
UVM amap 191 152K 173K 166960K 5018 0
UVM aobj 14 2K 2K 166960K 16 0
pinsyscall 38 76K 111K 166960K 1743 0
memdesc 1 4K 4K 166960K 1 0
crypto data 1 1K 1K 166960K 1 0
ip6_options 0 0K 0K 166960K 9 0
NDP 10 0K 2K 166960K 51 0
temp 33 9114K 9134K 166960K 5443 0
kqueue 13 20K 24K 166960K 55 0
SYN cache 2 16K 16K 166960K 2 0
ddb{0}> show all pools
Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache 128 28 0 0 1 0 1 1 0 8 0
rtpcb 120 54 0 51 1 0 1 1 0 8 0
rtentry 176 199 0 99 6 0 6 6 0 8 0
unpcb 144 130 0 115 1 0 1 1 0 8 0
syncache 336 5 0 5 1 1 0 1 0 8 0
tcpcb 736 241 0 237 6 0 6 6 0 8 5
arp 136 34 0 18 1 0 1 1 0 8 0
inpcb 328 568 0 559 7 1 6 7 0 8 4
ip6q 80 1 0 0 1 0 1 1 0 8 0
ip6af 40 1 0 0 1 0 1 1 0 8 0
nd6 152 48 0 27 1 0 1 1 0 8 0
kcovpl 48 30 0 23 1 0 1 1 0 8 0
art_heap8 4096 1 0 0 1 0 1 1 0 8 0
art_heap4 256 807 0 396 29 0 29 29 0 8 2
art_table 40 808 0 396 5 0 5 5 0 8 0
art_node 32 199 0 109 1 0 1 1 0 8 0
sysvmsgpl 40 2 0 2 1 0 1 1 0 8 1
semupl 112 2 0 2 1 0 1 1 0 8 1
semapl 72 17 0 1 1 0 1 1 0 8 0
shmpl 112 13 0 2 1 0 1 1 0 8 0
dirhash 1024 21 0 4 3 0 3 3 0 8 0
dino2pl 256 1826 0 326 94 0 94 94 0 8 0
ffsino 296 1826 0 326 116 0 116 116 0 8 0
nchpl 144 2221 0 498 65 0 65 65 0 8 0
vnodes 216 2105 0 0 117 0 117 117 0 8 0
namei 1024 8521 0 8521 4 2 2 3 0 8 2
percpumem 16 59 0 9 1 0 1 1 0 8 0
kstatmem 264 41 0 18 2 0 2 2 0 8 0
scxspl 216 7848 0 7848 5 3 2 3 1 8 2
plimitpl 152 168 0 146 2 0 2 2 0 8 1
sigapl 424 710 0 665 7 0 7 7 0 8 0
knotepl 120 115 0 0 4 0 4 4 0 8 0
kqueuepl 224 54 0 45 1 0 1 1 0 8 0
pipepl 344 198 0 171 3 0 3 3 0 8 0
fdescpl 528 694 0 665 3 0 3 3 0 8 0
filepl 160 2965 0 2772 12 0 12 12 0 8 2
lockfpl 104 39 0 37 1 0 1 1 0 8 0
lockfspl 48 18 0 16 1 0 1 1 0 8 0
sessionpl 144 55 0 40 1 0 1 1 0 8 0
pgrppl 48 88 0 66 1 0 1 1 0 8 0
ucredpl 104 494 0 476 1 0 1 1 0 8 0
zombiepl 144 666 0 665 1 0 1 1 0 8 0
processpl 1232 710 0 665 5 0 5 5 0 8 0
procpl 664 949 0 904 7 1 6 7 0 8 0
sockpl 752 756 0 729 10 1 9 10 0 8 5
mcl64k 65536 2 0 0 1 0 1 1 0 8 0
mcl9k128 9344 1 0 0 1 0 1 1 0 8 0
mcl8k 8192 4 0 0 1 0 1 1 0 8 0
mcl4k 4096 124 0 0 16 0 16 16 0 8 0
mcl2k 2048 20 0 0 3 0 3 3 0 8 0
mextrefs 64 21 0 0 1 0 1 1 0 8 0
mtagpl 96 1 0 0 1 0 1 1 0 8 0
mbufpl 256 221 0 0 14 0 14 14 0 8 0
bufpl 272 2575 0 102 165 0 165 165 0 8 0
anonpl 32 3936 0 0 32 0 32 32 0 247 0
amapchunkpl 152 14671 0 14179 26 0 26 26 0 158 7
amappl16 200 2067 0 2052 5 1 4 5 0 8 1
amappl15 192 20 0 19 1 0 1 1 0 8 0
amappl14 184 499 0 498 1 0 1 1 0 8 0
amappl13 176 136 0 126 1 0 1 1 0 8 0
amappl12 168 1029 0 1001 2 0 2 2 0 8 0
amappl11 160 36 0 36 2 2 0 1 0 8 0
amappl10 152 60 0 50 1 0 1 1 0 8 0
amappl9 144 272 0 272 1 1 0 1 0 8 0
amappl8 136 124 0 123 1 0 1 1 0 8 0
amappl7 128 181 0 170 1 0 1 1 0 8 0
amappl6 120 226 0 225 1 0 1 1 0 8 0
amappl5 112 89 0 82 1 0 1 1 0 8 0
amappl4 104 278 0 263 1 0 1 1 0 8 0
amappl3 96 2594 0 2521 4 1 3 3 0 8 0
amappl2 88 773 0 706 2 0 2 2 0 8 0
amappl1 80 11864 0 11333 14 1 13 14 0 8 0
amappl 88 4174 0 4046 5 0 5 5 0 92 0
uvmvnodes 80 100 0 0 3 0 3 3 0 8 0
dma4096 4096 1 0 1 1 1 0 1 0 8 0
dma1024 1024 1 0 0 1 0 1 1 0 8 0
dma256 256 6 0 6 1 1 0 1 0 8 0
dma128 128 253 0 253 1 1 0 1 0 8 0
dma64 64 6 0 6 1 1 0 1 0 8 0
dma32 32 7 0 7 1 1 0 1 0 8 0
dma16 16 18 0 17 1 0 1 1 0 8 0
aobjpl 72 15 0 2 1 0 1 1 0 8 0
uaddrrnd 24 694 0 665 1 0 1 1 0 8 0
uaddrbest 32 2 0 0 1 0 1 1 0 8 0
uaddr 24 694 0 665 1 0 1 1 0 8 0
vmmpekpl 168 7524 0 7471 3 0 3 3 0 8 0
vmmpepl 168 53293 0 51643 95 1 94 95 0 357 9
vmsppl 488 693 0 665 7 2 5 6 0 8 0
rwobjpl 80 17750 0 16873 22 1 21 22 0 8 0
pdppl 4096 1395 0 1330 115 34 81 95 0 8 16
pvpl 32 11000 0 0 90 1 89 90 0 265 0
pmappl 256 693 0 665 4 1 3 3 0 8 0
extentpl 40 46 0 28 1 0 1 1 0 8 0
phpool 112 460 0 40 13 0 13 13 0 8 0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
ip6_freemoptions(ffff800000c43590) at ip6_freemoptions+0x65 sys/netinet6/ip6_output.c:2147
in_pcbdetach(fffff10065e6d3e8) at in_pcbdetach+0x122 sys/netinet/in_pcb.c:608
udp_detach(ffff800010fe14b0) at udp_detach+0x5a sys/netinet/udp_usrreq.c:1158
soclose(ffff800010fe14b0,0) at soclose+0xb0 pru_detach sys/sys/protosw.h:281 [inline]
soclose(ffff800010fe14b0,0) at soclose+0xb0 sys/kern/uipc_socket.c:403
soo_close(fffff1006dfb9158,ffff800045fe8550) at soo_close+0x56 sys/kern/sys_socket.c:-1
fdrop(fffff1006dfb9158,ffff800045fe8550) at fdrop+0x121 sys/kern/kern_descrip.c:1281
closef(fffff1006dfb9158,ffff800045fe8550) at closef+0x192 sys/kern/kern_descrip.c:1265
fdfree(ffff800045fe8550) at fdfree+0x116 sys/kern/kern_descrip.c:1196
exit1(ffff800045fe8550,0,0,1) at exit1+0x595 sys/kern/kern_exit.c:215
sys_exit(ffff800045fe8550,ffff80002ab8a090,ffff80002ab89fe0) at sys_exit+0x1a sys/kern/kern_exit.c:-1
syscall(ffff80002ab8a090) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80002ab8a090) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:791
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x77207ea554a0, count: -12
ddb{0}> machine ddbcpu 1
Stopped at x86_ipi_db+0x27: addq $0x8,%rsp
x86_ipi_db(ffff80002999dff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
acpicpu_idle() at acpicpu_idle+0x457 sys/dev/acpi/acpicpu_x86.c:1224
sched_idle(ffff80002999dff0) at sched_idle+0x371 sys/kern/kern_sched.c:192
end trace frame: 0x0, count: 10
ddb{1}> trace
x86_ipi_db(ffff80002999dff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
acpicpu_idle() at acpicpu_idle+0x457 sys/dev/acpi/acpicpu_x86.c:1224
sched_idle(ffff80002999dff0) at sched_idle+0x371 sys/kern/kern_sched.c:192
end trace frame: 0x0, count: -5