uvm_fault(0xfffffd807bb23160, 0x4, 0, 1) -> e kernel: page fault trap, code=0 Stopped at igmp_leavegroup+0xaf: movl 0x4(%rax),%r12d TID PID UID PRFLAGS PFLAGS CPU COMMAND igmp_leavegroup(ffff800000dcfb00,ffff8000006ab000) at igmp_leavegroup+0xaf sys/netinet/igmp.c:512 in_delmulti(ffff800000dcfb00) at in_delmulti+0xd3 sys/netinet/in.c:908 ip_freemoptions(ffff8000006ba9e0) at ip_freemoptions+0x5d sys/netinet/ip_output.c:1737 in_pcbdetach(fffffd807b16c170) at in_pcbdetach+0x97 sys/netinet/in_pcb.c:606 udp_detach(fffffd80788745a8) at udp_detach+0x3f sys/netinet/udp_usrreq.c:1139 soclose(fffffd80788745a8,0) at soclose+0x80 pru_detach sys/sys/protosw.h:283 [inline] soclose(fffffd80788745a8,0) at soclose+0x80 sys/kern/uipc_socket.c:411 soo_close(fffffd806b261968,ffff80002a6e02c0) at soo_close+0x44 fdrop(fffffd806b261968,ffff80002a6e02c0) at fdrop+0xd5 sys/kern/kern_descrip.c:1274 closef(fffffd806b261968,ffff80002a6e02c0) at closef+0x11b sys/kern/kern_descrip.c:1258 fdfree(ffff80002a6e02c0) at fdfree+0xe3 sys/kern/kern_descrip.c:1190 exit1(ffff80002a6e02c0,0,0,1) at exit1+0x371 sys/kern/kern_exit.c:199 sys_exit(ffff80002a6e02c0,ffff8000329bbcb0,ffff8000329bbc00) at sys_exit+0x1a sys/kern/kern_exit.c:89 syscall(ffff8000329bbcb0) at syscall+0x72a sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7d7cd7a86780, count: 1 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xfffffd807bb23160, 0x4, 0, 1) -> e ddb> trace igmp_leavegroup(ffff800000dcfb00,ffff8000006ab000) at igmp_leavegroup+0xaf sys/netinet/igmp.c:512 in_delmulti(ffff800000dcfb00) at in_delmulti+0xd3 sys/netinet/in.c:908 ip_freemoptions(ffff8000006ba9e0) at ip_freemoptions+0x5d sys/netinet/ip_output.c:1737 in_pcbdetach(fffffd807b16c170) at in_pcbdetach+0x97 sys/netinet/in_pcb.c:606 udp_detach(fffffd80788745a8) at udp_detach+0x3f sys/netinet/udp_usrreq.c:1139 soclose(fffffd80788745a8,0) at soclose+0x80 pru_detach sys/sys/protosw.h:283 [inline] soclose(fffffd80788745a8,0) at soclose+0x80 sys/kern/uipc_socket.c:411 soo_close(fffffd806b261968,ffff80002a6e02c0) at soo_close+0x44 fdrop(fffffd806b261968,ffff80002a6e02c0) at fdrop+0xd5 sys/kern/kern_descrip.c:1274 closef(fffffd806b261968,ffff80002a6e02c0) at closef+0x11b sys/kern/kern_descrip.c:1258 fdfree(ffff80002a6e02c0) at fdfree+0xe3 sys/kern/kern_descrip.c:1190 exit1(ffff80002a6e02c0,0,0,1) at exit1+0x371 sys/kern/kern_exit.c:199 sys_exit(ffff80002a6e02c0,ffff8000329bbcb0,ffff8000329bbc00) at sys_exit+0x1a sys/kern/kern_exit.c:89 syscall(ffff8000329bbcb0) at syscall+0x72a sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7d7cd7a86780, count: -14 ddb> show registers rdi 0 rsi 0 rbp 0xffff8000329bb850 rbx 0x9 rdx 0 rcx 0x1 rax 0 r8 0xffff8000329bb9b0 r9 0x20 r10 0x30180a8b25070758 r11 0xb28a166a885c3fbe r12 0 r13 0x3 r14 0xffff800000dcfb00 r15 0xffff8000006ab000 rip 0xffffffff8212401f igmp_leavegroup+0xaf cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff8000329bb820 ss 0x10 igmp_leavegroup+0xaf: movl 0x4(%rax),%r12d ddb> show proc PROC (syz-executor.4) tid=515570 pid=22231 tcnt=1 stat=onproc flags process=8001008 proc=2000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff80002a6e02c0 forw=0xffffffffffffffff, list=0xffff80002a6e07e0,0xffff80002a6d1228 process=0xffff8000ffff1508 user=0xffff8000329b6000, vmspace=0xfffffd807bb23160 estcpu=36, cpticks=5, pctcpu=0.0, user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 98176 379978 85881 0 3 0x8000080 nanoslp syz-executor.7 98176 423607 85881 0 3 0xc000080 pipewr syz-executor.7 98176 53943 85881 0 3 0xc000080 fsleep syz-executor.7 98865 219445 0 0 3 0x14200 acct acct 86908 103169 1 0 3 0x18100083 ttyin getty 85881 202530 1841 0 3 0x8000082 nanoslp syz-executor.7 88906 27302 1841 0 3 0x8000082 nanoslp syz-executor.1 33940 99147 0 0 3 0x14280 nfsidl nfsio 26031 99974 0 0 3 0x14280 nfsidl nfsio 26061 37394 0 0 3 0x14280 nfsidl nfsio 44030 329706 0 0 3 0x14280 nfsidl nfsio 74508 199649 0 0 3 0x14280 nfsidl nfsio 66513 306746 0 0 3 0x14280 nfsidl nfsio 35815 169779 0 0 3 0x14280 nfsidl nfsio 55873 439084 0 0 3 0x14280 nfsidl nfsio 25281 510539 0 0 3 0x14280 nfsidl nfsio 14117 381801 0 0 3 0x14280 nfsidl nfsio 40612 380890 0 0 3 0x14280 nfsidl nfsio 14057 6819 0 0 3 0x14280 nfsidl nfsio 63860 451231 0 0 3 0x14280 nfsidl nfsio 28250 397322 0 0 3 0x14280 nfsidl nfsio 37471 180113 0 0 3 0x14280 nfsidl nfsio 9480 68054 0 0 3 0x14280 nfsidl nfsio 641 297088 0 0 3 0x14280 nfsidl nfsio 48379 76522 0 0 3 0x14280 nfsidl nfsio 12773 108484 0 0 3 0x14280 nfsidl nfsio 64266 273111 0 0 3 0x14280 nfsidl nfsio 6477 381442 0 0 3 0x14200 bored sosplice 91941 152403 1841 0 3 0x8000082 piperd syz-executor.2 67976 217420 1841 0 3 0x8000082 piperd syz-executor.5 44115 460893 1841 0 3 0x8000082 piperd syz-executor.6 76506 111687 1841 0 3 0x8000082 piperd syz-executor.3 37450 229432 1841 0 3 0x8000082 nanoslp syz-executor.4 19020 307657 1841 0 3 0x8000082 piperd syz-executor.0 1841 133098 9902 0 3 0x1a000082 thrsleep syz-fuzzer 1841 488598 9902 0 3 0x1e000082 thrsleep syz-fuzzer 1841 512495 9902 0 3 0x1e000082 thrsleep syz-fuzzer 1841 231130 9902 0 3 0x1e000082 wait syz-fuzzer 1841 425172 9902 0 3 0x1e000082 wait syz-fuzzer 1841 246310 9902 0 3 0x1e000082 wait syz-fuzzer 1841 290835 9902 0 3 0x1e000082 wait syz-fuzzer 1841 62693 9902 0 3 0x1e000082 wait syz-fuzzer 1841 382965 9902 0 3 0x1e000082 wait syz-fuzzer 1841 6086 9902 0 3 0x1e000082 wait syz-fuzzer 1841 327933 9902 0 3 0x1e000082 thrsleep syz-fuzzer 1841 329214 9902 0 3 0x1e000082 kqread syz-fuzzer 1841 141773 9902 0 3 0x1e000082 wait syz-fuzzer 1841 466068 9902 0 3 0x1e000082 thrsleep syz-fuzzer 9902 333405 57345 0 3 0x810008a sigsusp ksh 57345 116570 49066 0 3 0x1800009a kqread sshd 49066 419309 1 0 3 0x18000088 kqread sshd 75726 1308 50200 73 2 0x19100010 syslogd 50200 314240 1 0 3 0x18100082 sbwait syslogd 796 362605 1 0 3 0x18100080 kqread resolvd 96902 336848 63299 77 3 0x18100092 kqread dhcpleased 75873 23328 63299 77 3 0x18100092 kqread dhcpleased 63299 319213 1 0 3 0x18000080 kqread dhcpleased 9164 473524 0 0 3 0x14200 bored smr 52618 421535 0 0 3 0x14200 pgzero zerothread 90409 280812 0 0 3 0x14200 aiodoned aiodoned 73940 88297 0 0 3 0x14200 syncer update 27906 108728 0 0 3 0x14200 cleaner cleaner 58159 291102 0 0 3 0x14200 reaper reaper 35113 17753 0 0 3 0x14200 pgdaemon pagedaemon 83904 93216 0 0 3 0x14200 bored viomb 28336 37288 0 0 3 0x40014200 acpi0 acpi0 813 86950 0 0 3 0x14200 bored softnet3 73641 501425 0 0 3 0x14200 bored softnet2 43171 167103 0 0 3 0x14200 bored softnet1 76065 331280 0 0 3 0x14200 bored softnet0 95578 222561 0 0 3 0x14200 bored systqmp 85497 309714 0 0 3 0x14200 bored systq 69605 385818 0 0 3 0x40014200 tmoslp softclock 83854 234721 0 0 3 0x40014200 idle0 1 492184 0 0 3 0x8000082 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10169 6410K 6922K 166960K 12130 0 pcb 15 10K 10K 166960K 70 0 rtable 221 7K 8K 166960K 490 0 pf 31 9K 9K 166960K 47 0 ifaddr 41 10K 11K 166960K 61 0 ifgroup 54 2K 2K 166960K 82 0 counters 31 17K 17K 166960K 38 0 ioctlops 0 0K 2K 166960K 51 0 iov 0 0K 12K 166960K 19 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1372 86K 86K 166960K 1761 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 13K 166960K 22 0 VM map 2 1K 1K 166960K 2 0 sem 12 1K 1K 166960K 35 0 dirhash 12 2K 2K 166960K 27 0 ACPI 1697 195K 286K 166960K 12548 0 file desc 13 45K 73K 166960K 676 0 sigio 0 0K 0K 166960K 8 0 proc 58 59K 83K 166960K 595 0 subproc 104 6K 6K 166960K 130 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 2 0K 0K 166960K 114 0 in_multi 89 6K 7K 166960K 150 0 ether_multi 1 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 67 307K 307K 166960K 67 0 exec 0 0K 1K 166960K 494 0 pfkey data 0 0K 0K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 271 79K 101K 166960K 8047 0 UVM aobj 44 4K 4K 166960K 52 0 pinsyscall 33 66K 100K 166960K 1870 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 19 0 NDP 12 0K 2K 166960K 39 0 temp 73 6803K 6876K 166960K 44167 0 kqueue 12 18K 24K 166960K 77 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 77 0 74 1 0 1 1 0 8 0 rtentry 112 152 0 52 4 0 4 4 0 8 0 unpcb 144 357 0 342 2 0 2 2 0 8 1 syncache 336 11 0 11 1 0 1 1 0 8 1 tcpqe 32 188 0 188 1 0 1 1 0 8 1 tcpcb 808 191 0 182 2 0 2 2 0 8 0 arp 88 28 0 12 1 0 1 1 0 8 0 inpcb 360 640 0 626 3 0 3 3 0 8 1 nd6 104 33 0 11 1 0 1 1 0 8 0 pkpcb 40 7 0 7 1 0 1 1 0 8 1 kcovpl 48 10 0 2 1 0 1 1 0 8 0 ppxss 1072 1 0 1 1 0 1 1 0 8 1 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 563 0 151 29 0 29 29 0 8 1 art_table 32 564 0 151 4 0 4 4 0 8 0 art_node 16 151 0 60 1 0 1 1 0 8 0 sysvmsgpl 40 45 0 39 1 0 1 1 0 8 0 semupl 112 2 0 2 1 0 1 1 0 8 1 semapl 112 28 0 18 1 0 1 1 0 8 0 shmpl 112 49 0 8 2 0 2 2 0 8 0 dirhash 1024 27 0 10 3 0 3 3 0 8 0 dino2pl 256 2470 0 954 96 0 96 96 0 8 0 ffsino 240 2470 0 954 90 0 90 90 0 8 0 nchpl 144 3561 0 1835 66 0 66 66 0 8 0 uvmvnodes 80 2848 0 0 59 0 59 59 0 8 0 vnodes 216 2848 0 0 159 0 159 159 0 8 0 namei 1024 11562 0 11562 3 0 3 3 0 8 3 vcpupl 2048 1 0 0 1 0 1 1 0 8 0 vmpool 664 2 0 1 1 0 1 1 0 8 0 kstatmem 264 38 0 14 2 0 2 2 0 8 0 scxspl 216 12865 0 12865 8 0 8 8 1 8 8 plimitpl 152 91 0 76 1 0 1 1 0 8 0 sigapl 424 998 0 936 8 0 8 8 0 8 0 futexpl 64 9791 0 9790 1 0 1 1 0 8 0 knotepl 120 8738 0 8656 11 0 11 11 0 8 7 kqueuepl 184 135 0 127 1 0 1 1 0 8 0 pipepl 288 188 0 159 3 0 3 3 0 8 0 fdescpl 432 960 0 936 4 0 4 4 0 8 0 filepl 120 4926 0 4677 9 0 9 9 0 8 0 lockfpl 104 194 0 192 1 0 1 1 0 8 0 lockfspl 48 81 0 79 1 0 1 1 0 8 0 sessionpl 144 28 0 12 1 0 1 1 0 8 0 pgrppl 48 36 0 20 1 0 1 1 0 8 0 ucredpl 104 679 0 668 1 0 1 1 0 8 0 zombiepl 144 938 0 936 1 0 1 1 0 8 0 processpl 1072 998 0 936 5 0 5 5 0 8 0 procpl 656 1704 0 1627 9 0 9 9 0 8 1 sosppl 168 23 0 22 1 0 1 1 0 8 0 sockpl 472 1087 0 1055 7 0 7 7 0 8 1 mcl64k 65536 17 0 17 1 0 1 1 0 8 1 mcl16k 16384 11 0 11 1 0 1 1 0 8 1 mcl12k 12288 20 0 20 1 0 1 1 0 8 1 mcl9k 9216 5 0 5 1 0 1 1 0 8 1 mcl8k 8192 36 0 36 1 0 1 1 0 8 1 mcl4k 4096 124 0 124 1 0 1 1 0 8 1 mcl2k2 2112 9 0 9 1 0 1 1 0 8 1 mcl2k 2048 19973 0 19926 32 18 14 32 0 8 7 mtagpl 96 65 0 25 2 0 2 2 0 8 0 mbufpl 256 47867 0 47666 24 5 19 19 0 8 2 bufpl 280 6353 0 183 441 0 441 441 0 8 0 anonpl 24 244620 0 238919 66 0 66 66 0 188 21 amapchunkpl 152 26548 0 25955 44 0 44 44 0 158 13 amappl16 200 6191 0 6074 24 4 20 20 0 8 13 amappl15 192 12 0 12 1 0 1 1 0 8 1 amappl14 184 159 0 147 2 0 2 2 0 8 1 amappl13 176 10 0 10 1 0 1 1 0 8 1 amappl12 168 1627 0 1600 2 0 2 2 0 8 0 amappl11 160 55 0 45 1 0 1 1 0 8 0 amappl10 152 49 0 38 1 0 1 1 0 8 0 amappl9 144 177 0 174 1 0 1 1 0 8 0 amappl8 136 162 0 116 2 0 2 2 0 8 0 amappl7 128 67 0 57 1 0 1 1 0 8 0 amappl6 120 371 0 356 2 0 2 2 0 8 1 amappl5 112 181 0 169 1 0 1 1 0 8 0 amappl4 104 532 0 502 2 0 2 2 0 8 1 amappl3 96 5737 0 5672 3 0 3 3 0 8 0 amappl2 88 1416 0 1346 4 0 4 4 0 8 2 amappl1 80 11736 0 11251 22 2 20 22 0 8 8 amappl 88 7454 0 7278 6 0 6 6 0 92 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 253 0 253 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 51 0 8 1 0 1 1 0 8 0 uaddrrnd 24 962 0 937 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 962 0 937 1 0 1 1 0 8 0 vmmpekpl 168 11474 0 11416 3 0 3 3 0 8 0 vmmpepl 168 78206 0 76498 111 0 111 111 0 357 24 vmsppl 344 961 0 937 3 0 3 3 0 8 0 rwobjpl 24 29221 0 25279 26 0 26 26 0 8 0 pdppl 4096 1930 0 1875 111 46 65 68 0 8 10 pvpl 32 574387 0 562893 361 15 346 361 0 265 233 pmappl 216 961 0 937 2 0 2 2 0 8 0 extentpl 40 56 0 38 1 0 1 1 0 8 0 phpool 112 403 0 69 10 0 10 10 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace igmp_leavegroup(ffff800000dcfb00,ffff8000006ab000) at igmp_leavegroup+0xaf sys/netinet/igmp.c:512 in_delmulti(ffff800000dcfb00) at in_delmulti+0xd3 sys/netinet/in.c:908 ip_freemoptions(ffff8000006ba9e0) at ip_freemoptions+0x5d sys/netinet/ip_output.c:1737 in_pcbdetach(fffffd807b16c170) at in_pcbdetach+0x97 sys/netinet/in_pcb.c:606 udp_detach(fffffd80788745a8) at udp_detach+0x3f sys/netinet/udp_usrreq.c:1139 soclose(fffffd80788745a8,0) at soclose+0x80 pru_detach sys/sys/protosw.h:283 [inline] soclose(fffffd80788745a8,0) at soclose+0x80 sys/kern/uipc_socket.c:411 soo_close(fffffd806b261968,ffff80002a6e02c0) at soo_close+0x44 fdrop(fffffd806b261968,ffff80002a6e02c0) at fdrop+0xd5 sys/kern/kern_descrip.c:1274 closef(fffffd806b261968,ffff80002a6e02c0) at closef+0x11b sys/kern/kern_descrip.c:1258 fdfree(ffff80002a6e02c0) at fdfree+0xe3 sys/kern/kern_descrip.c:1190 exit1(ffff80002a6e02c0,0,0,1) at exit1+0x371 sys/kern/kern_exit.c:199 sys_exit(ffff80002a6e02c0,ffff8000329bbcb0,ffff8000329bbc00) at sys_exit+0x1a sys/kern/kern_exit.c:89 syscall(ffff8000329bbcb0) at syscall+0x72a sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7d7cd7a86780, count: -14 ddb> machine ddbcpu 1 No such command ddb> trace igmp_leavegroup(ffff800000dcfb00,ffff8000006ab000) at igmp_leavegroup+0xaf sys/netinet/igmp.c:512 in_delmulti(ffff800000dcfb00) at in_delmulti+0xd3 sys/netinet/in.c:908 ip_freemoptions(ffff8000006ba9e0) at ip_freemoptions+0x5d sys/netinet/ip_output.c:1737 in_pcbdetach(fffffd807b16c170) at in_pcbdetach+0x97 sys/netinet/in_pcb.c:606 udp_detach(fffffd80788745a8) at udp_detach+0x3f sys/netinet/udp_usrreq.c:1139 soclose(fffffd80788745a8,0) at soclose+0x80 pru_detach sys/sys/protosw.h:283 [inline] soclose(fffffd80788745a8,0) at soclose+0x80 sys/kern/uipc_socket.c:411 soo_close(fffffd806b261968,ffff80002a6e02c0) at soo_close+0x44 fdrop(fffffd806b261968,ffff80002a6e02c0) at fdrop+0xd5 sys/kern/kern_descrip.c:1274 closef(fffffd806b261968,ffff80002a6e02c0) at closef+0x11b sys/kern/kern_descrip.c:1258 fdfree(ffff80002a6e02c0) at fdfree+0xe3 sys/kern/kern_descrip.c:1190 exit1(ffff80002a6e02c0,0,0,1) at exit1+0x371 sys/kern/kern_exit.c:199 sys_exit(ffff80002a6e02c0,ffff8000329bbcb0,ffff8000329bbc00) at sys_exit+0x1a sys/kern/kern_exit.c:89 syscall(ffff8000329bbcb0) at syscall+0x72a sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7d7cd7a86780, count: -14