uvm_fault(0xfffffd807effa1d0, 0x4, 0, 1) -> e kernel: page fault trap, code=0 Stopped at igmp_leavegroup+0xaf: movl 0x4(%rax),%r12d TID PID UID PRFLAGS PFLAGS CPU COMMAND igmp_leavegroup(ffff800000d16640,ffff8000006b8000) at igmp_leavegroup+0xaf sys/netinet/igmp.c:512 in_delmulti(ffff800000d16640) at in_delmulti+0xd8 sys/netinet/in.c:908 ip_freemoptions(ffff800000d838e0) at ip_freemoptions+0x5d sys/netinet/ip_output.c:1770 in_pcbdetach(fffffd806f5448a0) at in_pcbdetach+0x97 sys/netinet/in_pcb.c:591 udp_detach(fffffd806ef675c0) at udp_detach+0x3f sys/netinet/udp_usrreq.c:1113 soclose(fffffd806ef675c0,0) at soclose+0x253 pru_detach sys/sys/protosw.h:281 [inline] soclose(fffffd806ef675c0,0) at soclose+0x253 sys/kern/uipc_socket.c:397 soo_close(fffffd806b650140,ffff800022d09608) at soo_close+0x44 fdrop(fffffd806b650140,ffff800022d09608) at fdrop+0xcb sys/kern/kern_descrip.c:1274 closef(fffffd806b650140,ffff800022d09608) at closef+0x120 sys/kern/kern_descrip.c:1258 fdfree(ffff800022d09608) at fdfree+0xf4 sys/kern/kern_descrip.c:1190 exit1(ffff800022d09608,0,0,1) at exit1+0x37d sys/kern/kern_exit.c:197 sys_exit(ffff800022d09608,ffff80002956b9d0,ffff80002956ba20) at sys_exit+0x1a sys/kern/kern_exit.c:89 syscall(ffff80002956baa0) at syscall+0x5e2 mi_syscall sys/sys/syscall_mi.h:110 [inline] syscall(ffff80002956baa0) at syscall+0x5e2 sys/arch/amd64/amd64/trap.c:632 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7a7c3cd99450, count: 1 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: uvm_fault(0xfffffd807effa1d0, 0x4, 0, 1) -> e ddb{0}> trace igmp_leavegroup(ffff800000d16640,ffff8000006b8000) at igmp_leavegroup+0xaf sys/netinet/igmp.c:512 in_delmulti(ffff800000d16640) at in_delmulti+0xd8 sys/netinet/in.c:908 ip_freemoptions(ffff800000d838e0) at ip_freemoptions+0x5d sys/netinet/ip_output.c:1770 in_pcbdetach(fffffd806f5448a0) at in_pcbdetach+0x97 sys/netinet/in_pcb.c:591 udp_detach(fffffd806ef675c0) at udp_detach+0x3f sys/netinet/udp_usrreq.c:1113 soclose(fffffd806ef675c0,0) at soclose+0x253 pru_detach sys/sys/protosw.h:281 [inline] soclose(fffffd806ef675c0,0) at soclose+0x253 sys/kern/uipc_socket.c:397 soo_close(fffffd806b650140,ffff800022d09608) at soo_close+0x44 fdrop(fffffd806b650140,ffff800022d09608) at fdrop+0xcb sys/kern/kern_descrip.c:1274 closef(fffffd806b650140,ffff800022d09608) at closef+0x120 sys/kern/kern_descrip.c:1258 fdfree(ffff800022d09608) at fdfree+0xf4 sys/kern/kern_descrip.c:1190 exit1(ffff800022d09608,0,0,1) at exit1+0x37d sys/kern/kern_exit.c:197 sys_exit(ffff800022d09608,ffff80002956b9d0,ffff80002956ba20) at sys_exit+0x1a sys/kern/kern_exit.c:89 syscall(ffff80002956baa0) at syscall+0x5e2 mi_syscall sys/sys/syscall_mi.h:110 [inline] syscall(ffff80002956baa0) at syscall+0x5e2 sys/arch/amd64/amd64/trap.c:632 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7a7c3cd99450, count: -14 ddb{0}> show registers rdi 0 rsi 0 rbp 0xffff80002956b660 rbx 0x3 rdx 0 rcx 0x1 rax 0 r8 0 r9 0 r10 0x6bacecebcca8293d r11 0x2e6304056c19b615 r12 0 r13 0x3 r14 0xffff800000d16640 r15 0xffff8000006b8000 rip 0xffffffff81ee7b0f igmp_leavegroup+0xaf cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80002956b630 ss 0x10 igmp_leavegroup+0xaf: movl 0x4(%rax),%r12d ddb{0}> show proc PROC (syz-executor.2) pid=343985 stat=onproc flags process=1008 proc=2000 pri=32, usrpri=83, nice=20 forw=0xffffffffffffffff, list=0xffff8000211e4020,0xffff8000211e45a0 process=0xffff80002afd3ac0 user=0xffff800029566000, vmspace=0xfffffd807effa1d0 estcpu=36, cpticks=1, pctcpu=0.0 user=0, sys=1, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 80459 26618 19462 0 2 0 syz-executor.6 80459 361135 19462 0 3 0x4000080 fsleep syz-executor.6 6356 246340 53389 0 2 0 syz-executor.1 6356 293056 53389 0 3 0x4000080 netio syz-executor.1 89672 304823 72618 0 2 0 syz-executor.5 89672 252198 72618 0 3 0x4000080 fsleep syz-executor.5 89672 305193 72618 0 3 0x4000080 fsleep syz-executor.5 97317 151926 27331 0 2 0 syz-executor.4 97317 452619 27331 0 3 0x4000080 fsleep syz-executor.4 97317 68839 27331 0 3 0x4000080 fsleep syz-executor.4 19462 237843 72206 0 3 0x82 nanoslp syz-executor.6 72618 233988 72206 0 3 0x82 nanoslp syz-executor.5 98046 311143 72206 0 3 0x82 nanoslp syz-executor.0 30265 234092 72206 0 3 0x82 nanoslp syz-executor.2 47464 522104 72206 0 3 0x82 piperd syz-executor.3 77988 253116 0 0 3 0x14200 acct acct 51651 313681 72206 0 2 0x2 syz-executor.7 95429 340158 1 0 3 0x100083 ttyin getty 53389 75734 72206 0 3 0x82 nanoslp syz-executor.1 27331 81082 72206 0 3 0x82 nanoslp syz-executor.4 20018 457088 0 0 3 0x14200 bored sosplice 72206 382147 39648 0 3 0x82 wait syz-fuzzer 72206 195613 39648 0 3 0x4000082 nanoslp syz-fuzzer 72206 379521 39648 0 3 0x4000082 wait syz-fuzzer 72206 89020 39648 0 3 0x4000082 thrsleep syz-fuzzer 72206 152928 39648 0 3 0x4000082 thrsleep syz-fuzzer 72206 473320 39648 0 3 0x4000082 wait syz-fuzzer 72206 136271 39648 0 3 0x4000082 kqread syz-fuzzer 72206 72257 39648 0 3 0x4000082 thrsleep syz-fuzzer 72206 275709 39648 0 3 0x4000082 wait syz-fuzzer 72206 149749 39648 0 3 0x4000082 thrsleep syz-fuzzer 72206 488157 39648 0 3 0x4000082 thrsleep syz-fuzzer 72206 236797 39648 0 3 0x4000082 wait syz-fuzzer 72206 367008 39648 0 3 0x4000082 wait syz-fuzzer 72206 413710 39648 0 3 0x4000082 wait syz-fuzzer 72206 315773 39648 0 3 0x4000082 wait syz-fuzzer 72206 294018 39648 0 3 0x4000082 thrsleep syz-fuzzer 39648 396758 79675 0 3 0x10008a sigsusp ksh 79675 459210 49189 0 3 0x9a kqread sshd 49189 423525 1 0 3 0x88 kqread sshd 27284 454087 20679 74 3 0x1100092 bpf pflogd 20679 278670 1 0 3 0x80 netio pflogd 33330 151914 61644 73 3 0x1100090 kqread syslogd 61644 335974 1 0 3 0x100082 netio syslogd 90692 422626 1 0 3 0x100080 kqread resolvd 4788 312253 0 0 3 0x14200 bored smr 65539 236892 0 0 2 0x14200 zerothread 71304 98180 0 0 3 0x14200 aiodoned aiodoned 34999 34770 0 0 3 0x14200 syncer update 78932 368590 0 0 3 0x14200 cleaner cleaner 87133 413045 0 0 3 0x14200 reaper reaper 1590 487310 0 0 3 0x14200 pgdaemon pagedaemon 73967 234794 0 0 3 0x14200 bored viomb 55798 511918 0 0 3 0x40014200 acpi0 acpi0 64914 157284 0 0 7 0x40014200 idle1 55170 37375 0 0 3 0x14200 bored softnet3 90323 501300 0 0 3 0x14200 bored softnet2 76430 477860 0 0 3 0x14200 bored softnet1 41723 318133 0 0 3 0x14200 bored softnet0 78925 469160 0 0 3 0x14200 bored systqmp 9833 323321 0 0 3 0x14200 bored systq 4297 68184 0 0 3 0x40014200 bored softclock 62498 83398 0 0 3 0x40014200 idle0 1 169895 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10221 6520K 7601K 78643K 18288 0 pcb 14 16K 18K 78643K 2766 0 rtable 228 17K 19K 78643K 19232 0 ifaddr 87 30K 31K 78643K 1657 0 sysctl 2 0K 0K 78643K 2 0 counters 58 35K 37K 78643K 1522 0 ioctlops 0 0K 4K 78643K 3471 0 iov 0 0K 32K 78643K 3012 0 mount 1 1K 1K 78643K 1 0 log 0 0K 0K 78643K 4 0 vnodes 1639 102K 103K 78643K 10803 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 9K 78643K 154 0 VM map 2 1K 1K 78643K 2 0 sem 16 10K 10K 78643K 2425 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1697 195K 286K 78643K 12548 0 file desc 15 53K 85K 78643K 18535 0 sigio 0 0K 0K 78643K 243 0 proc 68 67K 128K 78643K 3121 0 subproc 104 6K 7K 78643K 884 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 2 0K 0K 78643K 1365 0 in_multi 86 5K 7K 78643K 1251 0 ether_multi 1 0K 0K 78643K 110 0 mrt 1 0K 0K 78643K 113 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 235 1049K 1049K 78643K 235 0 exec 0 0K 1K 78643K 9497 0 pfkey data 0 0K 0K 78643K 20 0 tdb 3 0K 0K 78643K 3 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 8 62K 64K 78643K 10 0 UVM amap 453 99K 994K 78643K 175420 0 UVM aobj 131 5K 5K 78643K 132 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 697 0 NDP 17 0K 1K 78643K 554 0 temp 144 5866K 71530K 78643K 128886 0 kqueue 6 10K 28K 78643K 1467 0 SYN cache 2 16K 16K 78643K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 22 0 0 1 0 1 1 0 8 0 rtpcb 120 18480 0 18469 97 94 3 5 0 8 2 rtentry 112 1257 0 1162 4 0 4 4 0 8 0 unpcb 144 18592 0 18549 162 156 6 11 0 8 4 syncache 296 78 0 78 22 22 0 1 0 8 0 tcpqe 32 128 67 128 9 9 0 1 0 8 0 tcpcb 776 5633 0 5627 199 191 8 14 0 8 7 arp 120 179 0 162 1 0 1 1 0 8 0 inpcb 368 16622 0 16615 254 245 9 19 0 8 8 nd6 136 248 0 227 1 0 1 1 0 8 0 pkpcb 40 112 0 112 14 14 0 1 0 8 0 kcovpl 48 67 0 59 1 0 1 1 0 8 0 mppekey 1024 5 0 5 2 2 0 1 0 8 0 ppxss 1256 533 0 533 35 34 1 1 0 8 1 pppxif 1456 121 0 121 13 13 0 1 0 8 0 pffrag 232 162 0 159 10 9 1 1 0 482 0 pffrnode 88 162 0 159 10 9 1 1 0 8 0 pffrent 40 343 0 340 11 10 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 706 0 648 1 0 1 1 0 8 0 pfstkey 128 710 0 652 4 2 2 3 0 8 0 pfstate 384 707 0 650 18 12 6 8 0 8 0 pfrule 1344 21 0 16 2 1 1 2 0 8 0 rttmr 136 33 0 33 12 12 0 1 0 8 0 art_heap8 4096 3 0 2 3 2 1 2 0 8 0 art_heap4 256 5846 0 5444 53 24 29 32 0 8 0 art_table 32 5849 0 5446 6 2 4 5 0 8 0 art_node 16 1214 0 1132 1 0 1 1 0 8 0 sysvmsgpl 40 10 0 0 1 0 1 1 0 8 0 semapl 112 2421 0 2407 1 0 1 1 0 8 0 shmpl 112 129 0 1 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 27163 0 25659 95 0 95 95 0 8 0 ffsino 272 27163 0 25659 101 0 101 101 0 8 0 nchpl 144 53995 0 52336 63 0 63 63 0 8 0 rtmask 32 9 0 9 3 3 0 1 0 8 0 uvmvnodes 80 7627 0 0 156 0 156 156 0 8 0 vnodes 216 7627 0 0 424 0 424 424 0 8 0 namei 1024 199937 0 199937 14 13 1 2 0 8 1 percpumem 16 774 0 732 1 0 1 1 0 8 0 kstatmem 264 774 0 744 4 1 3 3 0 8 0 scsiplug 72 34 0 34 9 9 0 1 0 8 0 scxspl 216 170645 0 170645 27 26 1 8 0 8 1 plimitpl 152 2901 0 2885 1 0 1 1 0 8 0 sigapl 424 18795 0 18750 10 2 8 8 0 8 0 futexpl 64 195566 0 195561 14 13 1 1 0 8 0 knotepl 120 1413 0 0 18 0 18 18 0 8 0 kqueuepl 216 3681 0 3676 51 50 1 6 0 8 0 pipepl 320 5622 0 5594 147 144 3 13 0 8 0 fdescpl 496 18731 0 18706 5 0 5 5 0 8 0 filepl 152 163312 0 163038 257 239 18 24 0 8 7 lockfpl 104 6984 0 6983 15 14 1 3 0 8 0 lockfspl 48 2028 0 2027 1 0 1 1 0 8 0 sessionpl 144 94 0 78 1 0 1 1 0 8 0 pgrppl 48 253 0 237 1 0 1 1 0 8 0 ucredpl 104 17969 0 17960 1 0 1 1 0 8 0 zombiepl 144 18752 0 18750 1 0 1 1 0 8 0 processpl 1072 18795 0 18750 5 0 5 5 0 8 0 procpl 696 47730 0 47664 25 16 9 10 0 8 0 srpgc 96 69 0 69 26 25 1 1 0 8 1 sosppl 168 157 0 157 19 18 1 1 0 8 1 sockpl 488 53821 0 53759 1060 1032 28 37 0 8 20 mcl64k 65536 17 0 0 3 0 3 3 0 8 0 mcl16k 16384 17 0 0 3 0 3 3 0 8 0 mcl12k 12288 8 0 0 1 0 1 1 0 8 0 mcl9k 9216 8 0 0 1 0 1 1 0 8 0 mcl8k 8192 18 0 0 3 0 3 3 0 8 0 mcl4k 4096 17 0 0 3 0 3 3 0 8 0 mcl2k2 2112 6 0 0 1 0 1 1 0 8 0 mcl2k 2048 478 0 0 50 22 28 50 0 8 0 mtagpl 96 144 0 0 3 1 2 3 0 8 0 mbufpl 256 9053 0 0 557 0 557 557 0 8 0 bufpl 288 34525 0 26896 546 0 546 546 0 8 0 anonpl 24 2009657 0 1995817 270 152 118 149 0 186 0 amapchunkpl 152 808102 0 807169 4566 4509 57 4427 0 158 17 amappl16 200 38074 0 37487 234 202 32 57 0 8 0 amappl15 192 15 0 14 1 0 1 1 0 8 0 amappl14 184 394 0 383 2 1 1 2 0 8 0 amappl13 176 16 0 16 4 3 1 1 0 8 1 amappl12 168 20339 0 20310 4 2 2 3 0 8 0 amappl11 160 69 0 61 1 0 1 1 0 8 0 amappl10 152 138 0 124 1 0 1 1 0 8 0 amappl9 144 286 0 285 2 1 1 2 0 8 0 amappl8 136 801 0 646 7 1 6 6 0 8 0 amappl7 128 131 0 111 1 0 1 1 0 8 0 amappl6 120 798 0 774 2 1 1 2 0 8 0 amappl5 112 662 0 656 1 0 1 1 0 8 0 amappl4 104 1867 0 1824 3 1 2 3 0 8 0 amappl3 96 108295 0 108208 5 2 3 4 0 8 0 amappl2 88 19672 0 19616 3 1 2 3 0 8 0 amappl1 80 79585 0 79126 24 11 13 23 0 8 0 amappl 88 173900 0 173638 9 2 7 7 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 131 0 1 3 0 3 3 0 8 0 uaddrrnd 24 18731 0 18706 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 18731 0 18706 1 0 1 1 0 8 0 vmmpekpl 168 143272 0 143211 4 0 4 4 0 8 0 vmmpepl 168 1124220 0 1121823 437 301 136 138 0 357 10 vmsppl 464 18730 0 18706 5 1 4 5 0 8 0 rwobjpl 56 266394 0 256973 158 24 134 137 0 8 0 pdppl 4096 37470 0 37412 874 812 62 80 0 8 4 pvpl 32 5519747 0 5500401 702 498 204 350 0 265 0 pmappl 248 18730 0 18706 3 1 2 3 0 8 0 extentpl 40 56 0 38 1 0 1 1 0 8 0 phpool 112 2602 0 1156 42 0 42 42 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace igmp_leavegroup(ffff800000d16640,ffff8000006b8000) at igmp_leavegroup+0xaf sys/netinet/igmp.c:512 in_delmulti(ffff800000d16640) at in_delmulti+0xd8 sys/netinet/in.c:908 ip_freemoptions(ffff800000d838e0) at ip_freemoptions+0x5d sys/netinet/ip_output.c:1770 in_pcbdetach(fffffd806f5448a0) at in_pcbdetach+0x97 sys/netinet/in_pcb.c:591 udp_detach(fffffd806ef675c0) at udp_detach+0x3f sys/netinet/udp_usrreq.c:1113 soclose(fffffd806ef675c0,0) at soclose+0x253 pru_detach sys/sys/protosw.h:281 [inline] soclose(fffffd806ef675c0,0) at soclose+0x253 sys/kern/uipc_socket.c:397 soo_close(fffffd806b650140,ffff800022d09608) at soo_close+0x44 fdrop(fffffd806b650140,ffff800022d09608) at fdrop+0xcb sys/kern/kern_descrip.c:1274 closef(fffffd806b650140,ffff800022d09608) at closef+0x120 sys/kern/kern_descrip.c:1258 fdfree(ffff800022d09608) at fdfree+0xf4 sys/kern/kern_descrip.c:1190 exit1(ffff800022d09608,0,0,1) at exit1+0x37d sys/kern/kern_exit.c:197 sys_exit(ffff800022d09608,ffff80002956b9d0,ffff80002956ba20) at sys_exit+0x1a sys/kern/kern_exit.c:89 syscall(ffff80002956baa0) at syscall+0x5e2 mi_syscall sys/sys/syscall_mi.h:110 [inline] syscall(ffff80002956baa0) at syscall+0x5e2 sys/arch/amd64/amd64/trap.c:632 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7a7c3cd99450, count: -14 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x1e: addq $0x8,%rsp x86_ipi_db(ffff800020d58ff0) at x86_ipi_db+0x1e sys/arch/amd64/amd64/db_interface.c:393 x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23 acpicpu_idle() at acpicpu_idle+0x312 sys/dev/acpi/acpicpu.c:1206 sched_idle(ffff800020d58ff0) at sched_idle+0x427 sys/kern/kern_sched.c:175 end trace frame: 0x0, count: 10 ddb{1}> trace x86_ipi_db(ffff800020d58ff0) at x86_ipi_db+0x1e sys/arch/amd64/amd64/db_interface.c:393 x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23 acpicpu_idle() at acpicpu_idle+0x312 sys/dev/acpi/acpicpu.c:1206 sched_idle(ffff800020d58ff0) at sched_idle+0x427 sys/kern/kern_sched.c:175 end trace frame: 0x0, count: -5