login: uvm_fault(0xfffffd806ae6a420, 0x4, 0, 1) -> e kernel: page fault trap, code=0 Stopped at igmp_leavegroup+0xaf: movl 0x4(%rax),%r12d TID PID UID PRFLAGS PFLAGS CPU COMMAND igmp_leavegroup(ffff800000e14000,ffff8000006ab000) at igmp_leavegroup+0xaf sys/netinet/igmp.c:512 in_delmulti(ffff800000e14000) at in_delmulti+0xd3 sys/netinet/in.c:908 ip_freemoptions(ffff8000006bad90) at ip_freemoptions+0x5d sys/netinet/ip_output.c:1737 in_pcbdetach(fffffd806b0d1718) at in_pcbdetach+0x97 sys/netinet/in_pcb.c:606 udp_detach(fffffd806d38c1f0) at udp_detach+0x3f sys/netinet/udp_usrreq.c:1139 soclose(fffffd806d38c1f0,0) at soclose+0x80 pru_detach sys/sys/protosw.h:283 [inline] soclose(fffffd806d38c1f0,0) at soclose+0x80 sys/kern/uipc_socket.c:411 soo_close(fffffd807a07ed20,ffff80002a6c8540) at soo_close+0x44 fdrop(fffffd807a07ed20,ffff80002a6c8540) at fdrop+0xd5 sys/kern/kern_descrip.c:1274 closef(fffffd807a07ed20,ffff80002a6c8540) at closef+0x11b sys/kern/kern_descrip.c:1258 fdfree(ffff80002a6c8540) at fdfree+0xe3 sys/kern/kern_descrip.c:1190 exit1(ffff80002a6c8540,0,0,1) at exit1+0x371 sys/kern/kern_exit.c:199 sys_exit(ffff80002a6c8540,ffff800035d9fe50,ffff800035d9fda0) at sys_exit+0x1a sys/kern/kern_exit.c:89 syscall(ffff800035d9fe50) at syscall+0x72a sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f089ad57840, count: 1 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xfffffd806ae6a420, 0x4, 0, 1) -> e ddb> trace igmp_leavegroup(ffff800000e14000,ffff8000006ab000) at igmp_leavegroup+0xaf sys/netinet/igmp.c:512 in_delmulti(ffff800000e14000) at in_delmulti+0xd3 sys/netinet/in.c:908 ip_freemoptions(ffff8000006bad90) at ip_freemoptions+0x5d sys/netinet/ip_output.c:1737 in_pcbdetach(fffffd806b0d1718) at in_pcbdetach+0x97 sys/netinet/in_pcb.c:606 udp_detach(fffffd806d38c1f0) at udp_detach+0x3f sys/netinet/udp_usrreq.c:1139 soclose(fffffd806d38c1f0,0) at soclose+0x80 pru_detach sys/sys/protosw.h:283 [inline] soclose(fffffd806d38c1f0,0) at soclose+0x80 sys/kern/uipc_socket.c:411 soo_close(fffffd807a07ed20,ffff80002a6c8540) at soo_close+0x44 fdrop(fffffd807a07ed20,ffff80002a6c8540) at fdrop+0xd5 sys/kern/kern_descrip.c:1274 closef(fffffd807a07ed20,ffff80002a6c8540) at closef+0x11b sys/kern/kern_descrip.c:1258 fdfree(ffff80002a6c8540) at fdfree+0xe3 sys/kern/kern_descrip.c:1190 exit1(ffff80002a6c8540,0,0,1) at exit1+0x371 sys/kern/kern_exit.c:199 sys_exit(ffff80002a6c8540,ffff800035d9fe50,ffff800035d9fda0) at sys_exit+0x1a sys/kern/kern_exit.c:89 syscall(ffff800035d9fe50) at syscall+0x72a sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f089ad57840, count: -14 ddb> show registers rdi 0 rsi 0 rbp 0xffff800035d9f9f0 rbx 0x8 rdx 0 rcx 0x1 rax 0 r8 0 r9 0 r10 0xb0e63a8296b2aa6d r11 0x25a3890bfb9c569c r12 0 r13 0x3 r14 0xffff800000e14000 r15 0xffff8000006ab000 rip 0xffffffff8212401f igmp_leavegroup+0xaf cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff800035d9f9c0 ss 0x10 igmp_leavegroup+0xaf: movl 0x4(%rax),%r12d ddb> show proc PROC (syz-executor.6) tid=124512 pid=94509 tcnt=1 stat=onproc flags process=8001008 proc=2000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff80002a6c8540 forw=0xffffffffffffffff, list=0xffff80002a6c8cf0,0xffff80002a6c9c60 process=0xffff8000ffff0018 user=0xffff800035d9a000, vmspace=0xfffffd806ae6a420 estcpu=36, cpticks=20, pctcpu=0.23, user=0, sys=20, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 36443 127897 94083 0 2 0x8000000 syz-executor.1 36443 286178 94083 0 2 0xc000000 syz-executor.1 74685 233596 23402 0 2 0x8000000 syz-executor.0 74685 36594 23402 0 3 0xc000080 fsleep syz-executor.0 74685 319524 23402 0 3 0xc000080 fsleep syz-executor.0 55077 207137 51361 0 2 0x8000000 syz-executor.3 55077 75836 51361 0 3 0xc000080 netcon syz-executor.3 55077 226310 51361 0 3 0xc000080 fsleep syz-executor.3 87691 184255 92720 0 2 0x8000000 syz-executor.4 87691 482375 92720 0 3 0xc000080 fsleep syz-executor.4 84431 271230 58782 0 2 0x8000000 syz-executor.5 84431 370996 58782 0 3 0xc000000 smrbar syz-executor.5 14387 298004 47116 0 2 0x8000010 syz-executor.2 14387 364884 47116 0 3 0xc000090 sbwait syz-executor.2 24695 397909 30479 0 2 0x8000480 syz-executor.7 24695 423224 30479 0 3 0xc000080 netcon syz-executor.7 24695 429955 30479 0 3 0xc000080 fsleep syz-executor.7 91024 312596 1 0 3 0x18100083 ttyin getty 92720 129129 96573 0 2 0x8000482 syz-executor.4 44337 315150 96573 0 2 0x8000482 syz-executor.6 30479 126358 96573 0 2 0x8000482 syz-executor.7 4585 121009 0 0 3 0x14200 bored sosplice 94083 425415 96573 0 2 0x8000482 syz-executor.1 51361 135755 96573 0 2 0x8000482 syz-executor.3 47116 27004 96573 0 2 0x8000482 syz-executor.2 58782 266432 96573 0 2 0x8000482 syz-executor.5 23402 398058 96573 0 2 0x8000482 syz-executor.0 96573 297818 73431 0 3 0x1a000082 thrsleep syz-fuzzer 96573 426073 73431 0 2 0x1e000482 syz-fuzzer 96573 496746 73431 0 3 0x1e000082 thrsleep syz-fuzzer 96573 157587 73431 0 3 0x1e000082 wait syz-fuzzer 96573 454713 73431 0 2 0x1e000482 syz-fuzzer 96573 30475 73431 0 3 0x1e000082 wait syz-fuzzer 96573 286059 73431 0 3 0x1e000082 thrsleep syz-fuzzer 96573 339419 73431 0 3 0x1e000082 wait syz-fuzzer 96573 296669 73431 0 3 0x1e000082 wait syz-fuzzer 96573 373230 73431 0 3 0x1e000082 wait syz-fuzzer 96573 98072 73431 0 3 0x1e000082 thrsleep syz-fuzzer 96573 63018 73431 0 3 0x1e000082 wait syz-fuzzer 96573 333456 73431 0 3 0x1e000082 wait syz-fuzzer 96573 2425 73431 0 3 0x1e000082 wait syz-fuzzer 73431 350367 89123 0 3 0x810008a sigsusp ksh 89123 154967 6993 0 3 0x1800009a kqread sshd 6993 424 1 0 3 0x18000088 kqread sshd 1956 364526 70611 73 3 0x19100090 kqread syslogd 70611 396700 1 0 3 0x18100082 sbwait syslogd 6406 313251 1 0 3 0x18100080 kqread resolvd 79809 480416 72402 77 3 0x18100092 kqread dhcpleased 9648 73211 72402 77 3 0x18100092 kqread dhcpleased 72402 129693 1 0 3 0x18000080 kqread dhcpleased 41016 523797 0 0 2 0x14200 smr 56900 303615 0 0 2 0x14200 zerothread 87589 195948 0 0 3 0x14200 aiodoned aiodoned 4195 3628 0 0 3 0x14200 syncer update 6350 255249 0 0 3 0x14200 cleaner cleaner 40038 425736 0 0 3 0x14200 reaper reaper 78247 318213 0 0 3 0x14200 pgdaemon pagedaemon 47697 392651 0 0 3 0x14200 bored viomb 53181 447887 0 0 3 0x40014200 acpi0 acpi0 61031 205393 0 0 3 0x14200 bored softnet3 66728 478962 0 0 3 0x14200 bored softnet2 21412 368436 0 0 3 0x14200 bored softnet1 39830 200582 0 0 3 0x14200 bored softnet0 32242 480396 0 0 3 0x14200 bored systqmp 54793 250808 0 0 3 0x14200 bored systq 95233 507565 0 0 2 0x40014200 softclock 85996 304149 0 0 3 0x40014200 idle0 1 471465 0 0 3 0x8000082 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10178 6593K 7178K 166960K 12641 0 pcb 16 10K 10K 166960K 94 0 rtable 209 8K 10K 166960K 599 0 pf 29 8K 9K 166960K 70 0 ifaddr 38 10K 11K 166960K 76 0 ifgroup 48 2K 2K 166960K 113 0 sysctl 1 0K 0K 166960K 1 0 counters 30 17K 17K 166960K 47 0 ioctlops 0 0K 2K 166960K 61 0 iov 0 0K 18K 166960K 59 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1395 88K 88K 166960K 2008 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 18 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 126 0 dirhash 12 2K 2K 166960K 30 0 ACPI 1697 195K 286K 166960K 12548 0 file desc 18 65K 77K 166960K 839 0 sigio 0 0K 0K 166960K 26 0 proc 58 59K 83K 166960K 609 0 subproc 104 6K 6K 166960K 143 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 2 0K 0K 166960K 112 0 in_multi 87 6K 7K 166960K 168 0 ether_multi 2 0K 0K 166960K 2 0 mrt 3 0K 0K 166960K 6 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 67 307K 307K 166960K 67 0 exec 0 0K 1K 166960K 486 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 325 112K 128K 166960K 9541 0 UVM aobj 33 2K 2K 166960K 35 0 pinsyscall 38 76K 100K 166960K 2048 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 45 0 NDP 11 0K 2K 166960K 50 0 temp 76 6804K 6872K 166960K 15250 0 kqueue 13 20K 26K 166960K 110 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 129 0 126 2 0 2 2 0 8 1 rtentry 112 171 0 78 4 0 4 4 0 8 0 unpcb 144 784 0 764 10 1 9 10 0 8 8 syncache 336 22 0 22 1 0 1 1 0 8 1 sackhl 24 1 0 1 1 0 1 1 0 8 1 tcpqe 32 145 0 145 1 0 1 1 0 8 1 tcpcb 808 319 0 308 3 0 3 3 0 8 1 arp 88 30 0 19 1 0 1 1 0 8 0 ipq 40 1 0 1 1 0 1 1 0 8 1 ipqe 40 2 0 2 1 0 1 1 0 8 1 inpcb 360 880 0 858 3 0 3 3 0 8 1 nd6 104 40 0 17 1 0 1 1 0 8 0 pkpcb 40 3 0 3 1 0 1 1 0 8 1 kcovpl 48 11 0 3 1 0 1 1 0 8 0 ppxss 1072 6 0 5 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 631 0 223 29 0 29 29 0 8 2 art_table 32 632 0 223 4 0 4 4 0 8 0 art_node 16 164 0 81 1 0 1 1 0 8 0 sysvmsgpl 40 32 0 21 1 0 1 1 0 8 0 semupl 112 2 0 2 1 0 1 1 0 8 1 semapl 112 121 0 111 1 0 1 1 0 8 0 shmpl 112 32 0 2 1 0 1 1 0 8 0 dirhash 1024 29 0 12 3 0 3 3 0 8 0 dino2pl 256 2781 0 1268 96 0 96 96 0 8 0 ffsino 240 2781 0 1268 90 0 90 90 0 8 0 nchpl 144 4047 0 2308 66 0 66 66 0 8 0 uvmvnodes 80 3327 0 0 68 0 68 68 0 8 0 vnodes 216 3327 0 0 185 0 185 185 0 8 0 namei 1024 13079 0 13079 3 0 3 3 0 8 3 vcpupl 2048 5 0 0 1 0 1 1 0 8 0 vmpool 664 9 0 4 1 0 1 1 0 8 0 kstatmem 264 56 0 34 2 0 2 2 0 8 0 scsiplug 72 1 0 1 1 0 1 1 0 8 1 scxspl 216 21185 0 21185 8 0 8 8 1 8 8 plimitpl 152 95 0 80 1 0 1 1 0 8 0 sigapl 424 1134 0 1088 6 0 6 6 0 8 0 futexpl 64 12526 0 12521 1 0 1 1 0 8 0 knotepl 120 10086 0 10004 11 0 11 11 0 8 8 kqueuepl 184 269 0 258 4 0 4 4 0 8 3 pipepl 288 200 0 172 3 0 3 3 0 8 0 fdescpl 432 1116 0 1087 4 0 4 4 0 8 0 filepl 120 6233 0 5967 16 0 16 16 0 8 7 lockfpl 104 267 0 264 1 0 1 1 0 8 0 lockfspl 48 114 0 111 1 0 1 1 0 8 0 sessionpl 144 29 0 13 1 0 1 1 0 8 0 pgrppl 48 35 0 19 1 0 1 1 0 8 0 ucredpl 104 650 0 639 1 0 1 1 0 8 0 zombiepl 144 1089 0 1088 1 0 1 1 0 8 0 processpl 1072 1134 0 1088 4 0 4 4 0 8 0 procpl 656 2040 0 1971 7 0 7 7 0 8 0 sosppl 168 21 0 20 1 0 1 1 0 8 0 sockpl 472 1803 0 1758 36 24 12 36 0 8 6 mcl64k 65536 32 0 32 1 0 1 1 0 8 1 mcl16k 16384 28 0 28 1 0 1 1 0 8 1 mcl12k 12288 37 0 37 1 0 1 1 0 8 1 mcl9k 9216 4 0 4 1 0 1 1 0 8 1 mcl8k 8192 60 0 60 1 0 1 1 0 8 1 mcl4k 4096 154 0 154 1 0 1 1 0 8 1 mcl2k2 2112 17 0 17 1 0 1 1 0 8 1 mcl2k 2048 20891 0 20842 28 14 14 28 0 8 4 mtagpl 96 128 0 49 3 0 3 3 0 8 0 mbufpl 256 49298 0 49096 29 2 27 27 0 8 4 bufpl 280 6928 0 599 453 0 453 453 0 8 0 anonpl 24 253008 0 247021 64 0 64 64 0 188 19 amapchunkpl 152 31407 0 30698 40 0 40 40 0 158 12 amappl16 200 5755 0 5610 21 5 16 21 0 8 7 amappl15 192 7 0 7 1 0 1 1 0 8 1 amappl14 184 160 0 148 2 0 2 2 0 8 1 amappl13 176 21 0 21 1 0 1 1 0 8 1 amappl12 168 1797 0 1765 2 0 2 2 0 8 0 amappl11 160 51 0 40 1 0 1 1 0 8 0 amappl10 152 42 0 33 1 0 1 1 0 8 0 amappl9 144 211 0 210 1 0 1 1 0 8 0 amappl8 136 229 0 175 2 0 2 2 0 8 0 amappl7 128 66 0 55 1 0 1 1 0 8 0 amappl6 120 374 0 361 2 0 2 2 0 8 1 amappl5 112 186 0 174 1 0 1 1 0 8 0 amappl4 104 559 0 526 2 0 2 2 0 8 1 amappl3 96 6731 0 6639 3 0 3 3 0 8 0 amappl2 88 1604 0 1531 4 0 4 4 0 8 2 amappl1 80 12348 0 11852 22 3 19 22 0 8 8 amappl 88 8915 0 8700 6 0 6 6 0 92 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 253 0 253 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 34 0 2 1 0 1 1 0 8 0 uaddrrnd 24 1125 0 1091 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1125 0 1091 1 0 1 1 0 8 0 vmmpekpl 168 12465 0 12410 3 0 3 3 0 8 0 vmmpepl 168 87726 0 85730 111 0 111 111 0 357 20 vmsppl 344 1124 0 1091 4 0 4 4 0 8 0 rwobjpl 24 31149 0 26672 27 0 27 27 0 8 0 pdppl 4096 2256 0 2187 119 50 69 71 0 8 0 pvpl 32 619289 0 607031 361 12 349 361 0 265 239 pmappl 216 1124 0 1091 2 0 2 2 0 8 0 extentpl 40 56 0 38 1 0 1 1 0 8 0 phpool 112 413 0 66 10 0 10 10 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace igmp_leavegroup(ffff800000e14000,ffff8000006ab000) at igmp_leavegroup+0xaf sys/netinet/igmp.c:512 in_delmulti(ffff800000e14000) at in_delmulti+0xd3 sys/netinet/in.c:908 ip_freemoptions(ffff8000006bad90) at ip_freemoptions+0x5d sys/netinet/ip_output.c:1737 in_pcbdetach(fffffd806b0d1718) at in_pcbdetach+0x97 sys/netinet/in_pcb.c:606 udp_detach(fffffd806d38c1f0) at udp_detach+0x3f sys/netinet/udp_usrreq.c:1139 soclose(fffffd806d38c1f0,0) at soclose+0x80 pru_detach sys/sys/protosw.h:283 [inline] soclose(fffffd806d38c1f0,0) at soclose+0x80 sys/kern/uipc_socket.c:411 soo_close(fffffd807a07ed20,ffff80002a6c8540) at soo_close+0x44 fdrop(fffffd807a07ed20,ffff80002a6c8540) at fdrop+0xd5 sys/kern/kern_descrip.c:1274 closef(fffffd807a07ed20,ffff80002a6c8540) at closef+0x11b sys/kern/kern_descrip.c:1258 fdfree(ffff80002a6c8540) at fdfree+0xe3 sys/kern/kern_descrip.c:1190 exit1(ffff80002a6c8540,0,0,1) at exit1+0x371 sys/kern/kern_exit.c:199 sys_exit(ffff80002a6c8540,ffff800035d9fe50,ffff800035d9fda0) at sys_exit+0x1a sys/kern/kern_exit.c:89 syscall(ffff800035d9fe50) at syscall+0x72a sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f089ad57840, count: -14 ddb> machine ddbcpu 1 No such command ddb> trace igmp_leavegroup(ffff800000e14000,ffff8000006ab000) at igmp_leavegroup+0xaf sys/netinet/igmp.c:512 in_delmulti(ffff800000e14000) at in_delmulti+0xd3 sys/netinet/in.c:908 ip_freemoptions(ffff8000006bad90) at ip_freemoptions+0x5d sys/netinet/ip_output.c:1737 in_pcbdetach(fffffd806b0d1718) at in_pcbdetach+0x97 sys/netinet/in_pcb.c:606 udp_detach(fffffd806d38c1f0) at udp_detach+0x3f sys/netinet/udp_usrreq.c:1139 soclose(fffffd806d38c1f0,0) at soclose+0x80 pru_detach sys/sys/protosw.h:283 [inline] soclose(fffffd806d38c1f0,0) at soclose+0x80 sys/kern/uipc_socket.c:411 soo_close(fffffd807a07ed20,ffff80002a6c8540) at soo_close+0x44 fdrop(fffffd807a07ed20,ffff80002a6c8540) at fdrop+0xd5 sys/kern/kern_descrip.c:1274 closef(fffffd807a07ed20,ffff80002a6c8540) at closef+0x11b sys/kern/kern_descrip.c:1258 fdfree(ffff80002a6c8540) at fdfree+0xe3 sys/kern/kern_descrip.c:1190 exit1(ffff80002a6c8540,0,0,1) at exit1+0x371 sys/kern/kern_exit.c:199 sys_exit(ffff80002a6c8540,ffff800035d9fe50,ffff800035d9fda0) at sys_exit+0x1a sys/kern/kern_exit.c:89 syscall(ffff800035d9fe50) at syscall+0x72a sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f089ad57840, count: -14