uvm_fault(0xfffffd806b9899a0, 0x4, 0, 1) -> e
kernel: page fault trap, code=0
Stopped at igmp_leavegroup+0xaf: movl 0x4(%rax),%r12d
TID PID UID PRFLAGS PFLAGS CPU COMMAND
igmp_leavegroup(ffff800000cead00,ffff8000006b6000) at igmp_leavegroup+0xaf sys/netinet/igmp.c:512
in_delmulti(ffff800000cead00) at in_delmulti+0xd4 sys/netinet/in.c:934
ip_freemoptions(ffff800000e56d20) at ip_freemoptions+0x4d sys/netinet/ip_output.c:1770
in_pcbdetach(fffffd80733c8ac0) at in_pcbdetach+0x93 sys/netinet/in_pcb.c:591
udp_detach(fffffd807153bcc0) at udp_detach+0x3b sys/netinet/udp_usrreq.c:1113
soclose(fffffd807153bcc0,0) at soclose+0x243 pru_detach sys/sys/protosw.h:281 [inline]
soclose(fffffd807153bcc0,0) at soclose+0x243 sys/kern/uipc_socket.c:389
soo_close(fffffd8067e8d5a8,ffff8000fffea2f0) at soo_close+0x40
fdrop(fffffd8067e8d5a8,ffff8000fffea2f0) at fdrop+0xc7 sys/kern/kern_descrip.c:1274
closef(fffffd8067e8d5a8,ffff8000fffea2f0) at closef+0x117 sys/kern/kern_descrip.c:1258
fdfree(ffff8000fffea2f0) at fdfree+0xe3 sys/kern/kern_descrip.c:1190
exit1(ffff8000fffea2f0,0,0,1) at exit1+0x35d sys/kern/kern_exit.c:196
sys_exit(ffff8000fffea2f0,ffff80002659e9f0,ffff80002659ea40) at sys_exit+0x16 sys/kern/kern_exit.c:89
syscall(ffff80002659eac0) at syscall+0x4e6 sys/arch/amd64/amd64/trap.c:626
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7f7ffffd6a50, count: 1
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports. Insufficient info makes it difficult to find and fix bugs.
ddb>
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
*cpu0: uvm_fault(0xfffffd806b9899a0, 0x4, 0, 1) -> e
ddb> trace
igmp_leavegroup(ffff800000cead00,ffff8000006b6000) at igmp_leavegroup+0xaf sys/netinet/igmp.c:512
in_delmulti(ffff800000cead00) at in_delmulti+0xd4 sys/netinet/in.c:934
ip_freemoptions(ffff800000e56d20) at ip_freemoptions+0x4d sys/netinet/ip_output.c:1770
in_pcbdetach(fffffd80733c8ac0) at in_pcbdetach+0x93 sys/netinet/in_pcb.c:591
udp_detach(fffffd807153bcc0) at udp_detach+0x3b sys/netinet/udp_usrreq.c:1113
soclose(fffffd807153bcc0,0) at soclose+0x243 pru_detach sys/sys/protosw.h:281 [inline]
soclose(fffffd807153bcc0,0) at soclose+0x243 sys/kern/uipc_socket.c:389
soo_close(fffffd8067e8d5a8,ffff8000fffea2f0) at soo_close+0x40
fdrop(fffffd8067e8d5a8,ffff8000fffea2f0) at fdrop+0xc7 sys/kern/kern_descrip.c:1274
closef(fffffd8067e8d5a8,ffff8000fffea2f0) at closef+0x117 sys/kern/kern_descrip.c:1258
fdfree(ffff8000fffea2f0) at fdfree+0xe3 sys/kern/kern_descrip.c:1190
exit1(ffff8000fffea2f0,0,0,1) at exit1+0x35d sys/kern/kern_exit.c:196
sys_exit(ffff8000fffea2f0,ffff80002659e9f0,ffff80002659ea40) at sys_exit+0x16 sys/kern/kern_exit.c:89
syscall(ffff80002659eac0) at syscall+0x4e6 sys/arch/amd64/amd64/trap.c:626
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7f7ffffd6a50, count: -14
ddb> show registers
rdi 0
rsi 0
rbp 0xffff80002659e680
rbx 0x86
rdx 0
rcx 0x1
rax 0
r8 0
r9 0
r10 0xe60b344d2e599fe3
r11 0xef07c860d214dad2
r12 0
r13 0x3
r14 0xffff800000cead00
r15 0xffff8000006b6000
rip 0xffffffff812216cf igmp_leavegroup+0xaf
cs 0x8
rflags 0x10246 __ALIGN_SIZE+0xf246
rsp 0xffff80002659e650
ss 0x10
igmp_leavegroup+0xaf: movl 0x4(%rax),%r12d
ddb> show proc
PROC (syz-executor.4) pid=421459 stat=onproc
flags process=1008<EXITING,SINGLEEXIT> proc=2000<WEXIT>
pri=32, usrpri=84, nice=20
forw=0xffffffffffffffff, list=0xffff8000fffeadd0,0xffff8000216dd5f8
process=0xffff8000ffff6010 user=0xffff800026599000, vmspace=0xfffffd806b9899a0
estcpu=36, cpticks=2, pctcpu=0.0
user=0, sys=1, intr=0
ddb> ps
PID TID PPID UID S FLAGS WAIT COMMAND
64435 228350 41711 0 2 0 syz-executor.0
9103 505020 52822 0 2 0 syz-executor.6
9103 10837 52822 0 2 0x4000480 syz-executor.6
94718 390079 56744 0 2 0x480 syz-executor.1
94718 203575 56744 0 3 0x4000080 netio syz-executor.1
94718 280605 56744 0 3 0x4000080 fsleep syz-executor.1
84178 196078 45768 0 2 0x2 syz-executor.3
96629 352434 0 0 3 0x14200 acct acct
91534 16742 45768 0 3 0x82 nanoslp syz-executor.2
56744 497188 45768 0 2 0x482 syz-executor.1
7149 408622 45768 0 2 0x482 syz-executor.4
41711 185109 45768 0 3 0x82 nanoslp syz-executor.0
52822 474687 45768 0 3 0x82 nanoslp syz-executor.6
97771 17021 45768 0 2 0x2 syz-executor.5
79330 363065 1 0 3 0x100083 ttyin getty
14348 286986 45768 0 2 0x482 syz-executor.7
87851 60841 0 0 3 0x14280 nfsidl nfsio
24713 280945 0 0 3 0x14280 nfsidl nfsio
34192 383192 0 0 3 0x14280 nfsidl nfsio
91402 82519 0 0 3 0x14280 nfsidl nfsio
7908 87426 0 0 3 0x14280 nfsidl nfsio
36222 404789 0 0 3 0x14280 nfsidl nfsio
10210 349092 0 0 3 0x14280 nfsidl nfsio
91136 239389 0 0 3 0x14280 nfsidl nfsio
90635 278677 0 0 3 0x14280 nfsidl nfsio
74368 503447 0 0 3 0x14280 nfsidl nfsio
71403 369246 0 0 3 0x14280 nfsidl nfsio
35647 45131 0 0 3 0x14280 nfsidl nfsio
2351 147091 0 0 3 0x14280 nfsidl nfsio
63010 401076 0 0 3 0x14280 nfsidl nfsio
91884 192887 0 0 3 0x14280 nfsidl nfsio
53868 469027 0 0 3 0x14280 nfsidl nfsio
92954 505295 0 0 3 0x14280 nfsidl nfsio
60638 192471 0 0 3 0x14280 nfsidl nfsio
62382 509912 0 0 3 0x14280 nfsidl nfsio
87171 249657 0 0 3 0x14280 nfsidl nfsio
52681 165112 0 0 3 0x14200 bored sosplice
45768 380532 24571 0 3 0x82 thrsleep syz-fuzzer
45768 187607 24571 0 3 0x4000082 nanoslp syz-fuzzer
45768 431205 24571 0 3 0x4000082 wait syz-fuzzer
45768 215269 24571 0 3 0x4000082 wait syz-fuzzer
45768 223101 24571 0 3 0x4000082 thrsleep syz-fuzzer
45768 309532 24571 0 3 0x4000082 kqread syz-fuzzer
45768 209964 24571 0 3 0x4000082 wait syz-fuzzer
45768 125347 24571 0 3 0x4000082 wait syz-fuzzer
45768 241929 24571 0 3 0x4000082 thrsleep syz-fuzzer
45768 133354 24571 0 3 0x4000082 wait syz-fuzzer
45768 126318 24571 0 3 0x4000082 wait syz-fuzzer
45768 427201 24571 0 3 0x4000082 wait syz-fuzzer
45768 479624 24571 0 3 0x4000082 thrsleep syz-fuzzer
45768 361355 24571 0 3 0x4000082 wait syz-fuzzer
24571 115708 29725 0 3 0x10008a sigsusp ksh
29725 14728 33778 0 3 0x9a kqread sshd
33778 88735 1 0 3 0x88 kqread sshd
72203 234764 42127 73 3 0x1100090 kqread syslogd
42127 517376 1 0 3 0x100082 netio syslogd
33131 479718 1 0 3 0x100080 kqread resolvd
79031 191297 0 0 3 0x14200 bored smr
66902 271970 0 0 2 0x14200 zerothread
51600 278576 0 0 3 0x14200 aiodoned aiodoned
18625 338561 0 0 3 0x14200 syncer update
60079 80318 0 0 3 0x14200 cleaner cleaner
17785 167290 0 0 3 0x14200 reaper reaper
76858 404836 0 0 3 0x14200 pgdaemon pagedaemon
7179 370436 0 0 3 0x14200 bored viomb
45095 515847 0 0 3 0x40014200 acpi0 acpi0
30771 345768 0 0 3 0x14200 bored softnet
85711 480246 0 0 3 0x14200 bored softnet
16942 141526 0 0 3 0x14200 bored softnet
30685 52897 0 0 3 0x14200 bored softnet
3563 220020 0 0 3 0x14200 bored systqmp
30141 131612 0 0 3 0x14200 bored systq
79272 476050 0 0 2 0x40014200 softclock
89694 239309 0 0 3 0x40014200 idle0
1 293624 0 0 3 0x82 wait init
0 0 -1 0 3 0x10200 scheduler swapper
ddb> show all locks
No such command
ddb> show malloc
Type InUse MemUse HighUse Limit Requests Type Lim
devbuf 10219 6433K 6996K 78643K 20229 0
pcb 14 22K 26K 78643K 2153 0
rtable 242 17K 18K 78643K 3168 0
ifaddr 102 27K 28K 78643K 1041 0
sysctl 2 0K 2K 78643K 37 0
counters 28 17K 17K 78643K 280 0
ioctlops 0 0K 4K 78643K 1189 0
iov 0 0K 32K 78643K 1894 0
mount 1 1K 1K 78643K 1 0
log 0 0K 0K 78643K 4 0
vnodes 1576 99K 99K 78643K 7650 0
UFS quota 1 32K 32K 78643K 1 0
UFS mount 5 36K 36K 78643K 5 0
shm 2 1K 5K 78643K 86 0
VM map 2 0K 0K 78643K 2 0
sem 19 2K 2K 78643K 253 0
dirhash 12 2K 2K 78643K 12 0
ACPI 1697 195K 286K 78643K 12548 0
file desc 14 49K 81K 78643K 10410 0
sigio 0 0K 0K 78643K 319 0
proc 55 43K 83K 78643K 2344 0
subproc 104 6K 6K 78643K 806 0
NFS srvsock 1 0K 0K 78643K 1 0
NFS daemon 1 16K 16K 78643K 1 0
ip_moptions 2 0K 0K 78643K 9104 0
in_multi 100 6K 7K 78643K 1719 0
ether_multi 2 0K 0K 78643K 49 0
mrt 2 0K 0K 78643K 55 0
ISOFS mount 1 32K 32K 78643K 1 0
MSDOSFS mount 1 16K 16K 78643K 1 0
ttys 181 811K 811K 78643K 181 0
exec 0 0K 1K 78643K 2151 0
pfkey data 0 0K 0K 78643K 67 0
tdb 3 0K 0K 78643K 3 0
pagedep 1 8K 8K 78643K 1 0
inodedep 1 32K 32K 78643K 1 0
newblk 1 0K 0K 78643K 1 0
VM swap 8 62K 64K 78643K 10 0
UVM amap 313 93K 109K 78643K 67907 0
UVM aobj 130 4K 4K 78643K 145 0
memdesc 1 4K 4K 78643K 1 0
crypto data 1 1K 1K 78643K 1 0
ip6_options 0 0K 0K 78643K 487 0
NDP 18 0K 2K 78643K 338 0
temp 180 5771K 6798K 78643K 160492 0
kqueue 6 10K 29K 78643K 1010 0
SYN cache 2 16K 16K 78643K 2 0
ddb> show all pools
Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
rtpcb 120 1812 0 1811 24 22 2 3 0 8 1
rtentry 112 936 0 835 4 1 3 4 0 8 0
unpcb 144 11767 0 11761 109 101 8 10 0 8 7
syncache 296 79 0 79 20 19 1 1 0 8 1
tcpqe 32 395 0 395 18 17 1 2 0 8 1
tcpcb 776 5299 0 5291 126 119 7 8 0 8 6
arp 88 137 0 118 1 0 1 1 0 8 0
ipq 40 76 0 75 8 7 1 1 0 8 0
ipqe 40 162 0 161 8 7 1 1 0 8 0
inpcb 336 23864 0 23851 207 199 8 20 0 8 5
nd6 48 200 0 177 1 0 1 1 0 8 0
pkpcb 40 21 0 21 5 5 0 1 0 8 0
kcovpl 48 62 0 54 1 0 1 1 0 8 0
mppekey 1024 15 0 15 4 4 0 1 0 8 0
ppxss 1160 113 0 113 19 18 1 1 0 8 1
pppxif 1360 54 0 54 13 13 0 1 0 8 0
pfstscr 40 26 0 17 1 0 1 1 0 8 0
pfosfp 40 8 0 5 1 0 1 1 0 8 0
pfosfpen 112 8 0 2 1 0 1 1 0 8 0
pfanchor 1280 512 117 0 43 0 43 43 0 8 0
pfqueue 264 5 0 5 2 2 0 1 0 8 0
pfstitem 24 18 0 0 1 0 1 1 0 8 0
pfstkey 128 52 0 45 1 0 1 1 0 8 0
pfstate 352 26 0 17 1 0 1 1 0 8 0
rttmr 136 15 0 15 4 4 0 1 0 8 0
art_heap8 4096 2 0 0 2 0 2 2 0 8 0
art_heap4 256 3766 0 3293 56 25 31 32 0 8 0
art_table 32 3768 0 3293 5 0 5 5 0 8 0
art_node 16 863 0 773 1 0 1 1 0 8 0
sysvmsgpl 40 3 0 0 1 0 1 1 0 8 0
semupl 112 7 0 7 2 2 0 1 0 8 0
semapl 112 249 0 232 1 0 1 1 0 8 0
shmpl 112 142 0 15 4 0 4 4 0 8 0
dirhash 1024 17 0 0 3 0 3 3 0 8 0
dino2pl 256 14951 0 13490 92 0 92 92 0 8 0
ffsino 240 14951 0 13490 87 0 87 87 0 8 0
nchpl 144 28988 0 27352 63 0 63 63 0 8 0
rtmask 32 1 0 1 1 1 0 1 0 8 0
uvmvnodes 80 5926 0 0 121 0 121 121 0 8 0
vnodes 216 5926 0 0 330 0 330 330 0 8 0
namei 1024 114313 0 114312 4 3 1 2 0 8 0
vmpool 664 28 0 28 7 6 1 1 0 8 1
kstatmem 264 412 0 380 7 4 3 3 0 8 0
scsiplug 72 6 0 6 2 2 0 1 0 8 0
scxspl 216 80257 0 80257 27 26 1 8 0 8 1
plimitpl 152 1672 0 1657 1 0 1 1 0 8 0
sigapl 424 10618 0 10556 8 0 8 8 0 8 0
futexpl 64 111852 0 111851 1 0 1 1 0 8 0
knotepl 120 215040 0 214976 87 80 7 16 0 8 3
kqueuepl 184 3923 0 3917 45 41 4 4 0 8 3
pipepl 288 9251 0 9221 154 143 11 14 0 8 7
fdescpl 432 10579 0 10557 5 2 3 4 0 8 0
filepl 120 106458 0 106228 175 158 17 25 0 8 6
lockfpl 104 4792 0 4791 10 9 1 2 0 8 0
lockfspl 48 1124 0 1123 1 0 1 1 0 8 0
sessionpl 144 84 0 69 1 0 1 1 0 8 0
pgrppl 48 178 0 163 1 0 1 1 0 8 0
ucredpl 104 8855 0 8848 1 0 1 1 0 8 0
zombiepl 144 10559 0 10556 1 0 1 1 0 8 0
processpl 1008 10618 0 10556 10 1 9 9 0 8 0
procpl 696 26581 0 26503 17 8 9 10 0 8 0
sosppl 168 136 0 135 15 14 1 1 0 8 0
sockpl 456 37646 0 37629 792 780 12 36 0 8 8
mcl64k 65536 450 0 450 20 19 1 1 0 8 1
mcl16k 16384 187 0 187 31 30 1 1 0 8 1
mcl12k 12288 401 0 401 24 23 1 1 0 8 1
mcl9k 9216 163 0 163 27 26 1 1 0 8 1
mcl8k 8192 669 0 669 16 15 1 1 0 8 1
mcl4k 4096 1290 0 1290 9 8 1 1 0 8 1
mcl2k2 2112 73 0 73 27 27 0 1 0 8 0
mcl2k 2048 98181 0 98134 69 61 8 30 0 8 1
mtagpl 96 763 0 763 16 16 0 11 0 8 0
mbufpl 256 310818 0 310697 1528 1509 19 558 0 8 8
bufpl 288 19282 0 12885 458 0 458 458 0 8 0
anonpl 24 2039068 0 2021614 208 89 119 133 0 188 1
amapchunkpl 152 203228 0 202573 107 78 29 41 0 158 0
amappl16 200 18999 0 18381 98 62 36 47 0 8 0
amappl15 192 81 0 79 1 0 1 1 0 8 0
amappl14 184 380 0 369 2 0 2 2 0 8 0
amappl13 176 7 0 7 2 2 0 1 0 8 0
amappl12 168 1066 0 1060 1 0 1 1 0 8 0
amappl11 160 44 0 40 1 0 1 1 0 8 0
amappl10 152 96 0 85 1 0 1 1 0 8 0
amappl9 144 989 0 986 1 0 1 1 0 8 0
amappl8 136 613 0 513 4 0 4 4 0 8 0
amappl7 128 268 0 247 2 1 1 2 0 8 0
amappl6 120 462 0 443 1 0 1 1 0 8 0
amappl5 112 450 0 447 1 0 1 1 0 8 0
amappl4 104 1157 0 1132 2 0 2 2 0 8 0
amappl3 96 29661 0 29624 2 0 2 2 0 8 0
amappl2 88 11615 0 11563 3 1 2 3 0 8 0
amappl1 80 238625 0 238081 22 7 15 22 0 8 0
amappl 88 66721 0 66559 5 0 5 5 0 92 0
dma4096 4096 1 0 1 1 1 0 1 0 8 0
dma1024 1024 1 0 0 1 0 1 1 0 8 0
dma256 256 6 0 6 1 1 0 1 0 8 0
dma128 128 253 0 253 1 1 0 1 0 8 0
dma64 64 6 0 6 1 1 0 1 0 8 0
dma32 32 7 0 7 1 1 0 1 0 8 0
dma16 16 18 0 17 1 0 1 1 0 8 0
aobjpl 72 144 0 15 3 0 3 3 0 8 0
uaddrrnd 24 10607 0 10585 1 0 1 1 0 8 0
uaddrbest 32 2 0 0 1 0 1 1 0 8 0
uaddr 24 10607 0 10585 1 0 1 1 0 8 0
vmmpekpl 168 107504 0 107446 4 1 3 4 0 8 0
vmmpepl 168 982091 0 979751 339 209 130 159 0 357 8
vmsppl 272 10606 0 10585 4 2 2 3 0 8 0
rwobjpl 24 253733 0 246130 49 1 48 49 0 8 0
pdppl 4096 21220 0 21170 646 588 58 72 0 8 8
pvpl 32 3971311 0 3949305 403 201 202 253 0 265 4
pmappl 216 10606 0 10585 2 0 2 2 0 8 0
extentpl 40 56 0 38 1 0 1 1 0 8 0
phpool 112 3406 0 2621 40 13 27 36 0 8 0
ddb> machine ddbcpu 0
No such command
ddb> trace
igmp_leavegroup(ffff800000cead00,ffff8000006b6000) at igmp_leavegroup+0xaf sys/netinet/igmp.c:512
in_delmulti(ffff800000cead00) at in_delmulti+0xd4 sys/netinet/in.c:934
ip_freemoptions(ffff800000e56d20) at ip_freemoptions+0x4d sys/netinet/ip_output.c:1770
in_pcbdetach(fffffd80733c8ac0) at in_pcbdetach+0x93 sys/netinet/in_pcb.c:591
udp_detach(fffffd807153bcc0) at udp_detach+0x3b sys/netinet/udp_usrreq.c:1113
soclose(fffffd807153bcc0,0) at soclose+0x243 pru_detach sys/sys/protosw.h:281 [inline]
soclose(fffffd807153bcc0,0) at soclose+0x243 sys/kern/uipc_socket.c:389
soo_close(fffffd8067e8d5a8,ffff8000fffea2f0) at soo_close+0x40
fdrop(fffffd8067e8d5a8,ffff8000fffea2f0) at fdrop+0xc7 sys/kern/kern_descrip.c:1274
closef(fffffd8067e8d5a8,ffff8000fffea2f0) at closef+0x117 sys/kern/kern_descrip.c:1258
fdfree(ffff8000fffea2f0) at fdfree+0xe3 sys/kern/kern_descrip.c:1190
exit1(ffff8000fffea2f0,0,0,1) at exit1+0x35d sys/kern/kern_exit.c:196
sys_exit(ffff8000fffea2f0,ffff80002659e9f0,ffff80002659ea40) at sys_exit+0x16 sys/kern/kern_exit.c:89
syscall(ffff80002659eac0) at syscall+0x4e6 sys/arch/amd64/amd64/trap.c:626
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7f7ffffd6a50, count: -14
ddb> machine ddbcpu 1
No such command
ddb> trace
igmp_leavegroup(ffff800000cead00,ffff8000006b6000) at igmp_leavegroup+0xaf sys/netinet/igmp.c:512
in_delmulti(ffff800000cead00) at in_delmulti+0xd4 sys/netinet/in.c:934
ip_freemoptions(ffff800000e56d20) at ip_freemoptions+0x4d sys/netinet/ip_output.c:1770
in_pcbdetach(fffffd80733c8ac0) at in_pcbdetach+0x93 sys/netinet/in_pcb.c:591
udp_detach(fffffd807153bcc0) at udp_detach+0x3b sys/netinet/udp_usrreq.c:1113
soclose(fffffd807153bcc0,0) at soclose+0x243 pru_detach sys/sys/protosw.h:281 [inline]
soclose(fffffd807153bcc0,0) at soclose+0x243 sys/kern/uipc_socket.c:389
soo_close(fffffd8067e8d5a8,ffff8000fffea2f0) at soo_close+0x40
fdrop(fffffd8067e8d5a8,ffff8000fffea2f0) at fdrop+0xc7 sys/kern/kern_descrip.c:1274
closef(fffffd8067e8d5a8,ffff8000fffea2f0) at closef+0x117 sys/kern/kern_descrip.c:1258
fdfree(ffff8000fffea2f0) at fdfree+0xe3 sys/kern/kern_descrip.c:1190
exit1(ffff8000fffea2f0,0,0,1) at exit1+0x35d sys/kern/kern_exit.c:196
sys_exit(ffff8000fffea2f0,ffff80002659e9f0,ffff80002659ea40) at sys_exit+0x16 sys/kern/kern_exit.c:89
syscall(ffff80002659eac0) at syscall+0x4e6 sys/arch/amd64/amd64/trap.c:626
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7f7ffffd6a50, count: -14