login: uvm_fault(0xfffffd807cb058a8, 0x4, 0, 1) -> e kernel: page fault trap, code=0 Stopped at igmp_leavegroup+0xaf: movl 0x4(%rax),%r12d TID PID UID PRFLAGS PFLAGS CPU COMMAND igmp_leavegroup(ffff800000ce2080,ffff8000006b7000) at igmp_leavegroup+0xaf sys/netinet/igmp.c:512 in_delmulti(ffff800000ce2080) at in_delmulti+0xd3 sys/netinet/in.c:908 ip_freemoptions(ffff800000db60c0) at ip_freemoptions+0x5d sys/netinet/ip_output.c:1770 in_pcbdetach(fffffd80618b46a0) at in_pcbdetach+0x97 sys/netinet/in_pcb.c:589 udp_detach(fffffd8065a93978) at udp_detach+0x3f sys/netinet/udp_usrreq.c:1113 soclose(fffffd8065a93978,0) at soclose+0x253 pru_detach sys/sys/protosw.h:281 [inline] soclose(fffffd8065a93978,0) at soclose+0x253 sys/kern/uipc_socket.c:397 soo_close(fffffd806bf50180,ffff8000217155f0) at soo_close+0x44 fdrop(fffffd806bf50180,ffff8000217155f0) at fdrop+0xcb sys/kern/kern_descrip.c:1274 closef(fffffd806bf50180,ffff8000217155f0) at closef+0x11b sys/kern/kern_descrip.c:1258 fdfree(ffff8000217155f0) at fdfree+0xf3 sys/kern/kern_descrip.c:1190 exit1(ffff8000217155f0,0,0,1) at exit1+0x35d sys/kern/kern_exit.c:197 sys_exit(ffff8000217155f0,ffff80002e8e9860,ffff80002e8e98b0) at sys_exit+0x1a sys/kern/kern_exit.c:89 syscall(ffff80002e8e9930) at syscall+0x4a8 sys/arch/amd64/amd64/trap.c:632 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x796fa1edc7c0, count: 1 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xfffffd807cb058a8, 0x4, 0, 1) -> e ddb> trace igmp_leavegroup(ffff800000ce2080,ffff8000006b7000) at igmp_leavegroup+0xaf sys/netinet/igmp.c:512 in_delmulti(ffff800000ce2080) at in_delmulti+0xd3 sys/netinet/in.c:908 ip_freemoptions(ffff800000db60c0) at ip_freemoptions+0x5d sys/netinet/ip_output.c:1770 in_pcbdetach(fffffd80618b46a0) at in_pcbdetach+0x97 sys/netinet/in_pcb.c:589 udp_detach(fffffd8065a93978) at udp_detach+0x3f sys/netinet/udp_usrreq.c:1113 soclose(fffffd8065a93978,0) at soclose+0x253 pru_detach sys/sys/protosw.h:281 [inline] soclose(fffffd8065a93978,0) at soclose+0x253 sys/kern/uipc_socket.c:397 soo_close(fffffd806bf50180,ffff8000217155f0) at soo_close+0x44 fdrop(fffffd806bf50180,ffff8000217155f0) at fdrop+0xcb sys/kern/kern_descrip.c:1274 closef(fffffd806bf50180,ffff8000217155f0) at closef+0x11b sys/kern/kern_descrip.c:1258 fdfree(ffff8000217155f0) at fdfree+0xf3 sys/kern/kern_descrip.c:1190 exit1(ffff8000217155f0,0,0,1) at exit1+0x35d sys/kern/kern_exit.c:197 sys_exit(ffff8000217155f0,ffff80002e8e9860,ffff80002e8e98b0) at sys_exit+0x1a sys/kern/kern_exit.c:89 syscall(ffff80002e8e9930) at syscall+0x4a8 sys/arch/amd64/amd64/trap.c:632 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x796fa1edc7c0, count: -14 ddb> show registers rdi 0 rsi 0 rbp 0xffff80002e8e94f0 rbx 0x4 rdx 0 rcx 0x1 rax 0 r8 0x8 r9 0 r10 0x8a7f7ac5a57785e1 r11 0xfa3e4f0781728c26 r12 0 r13 0x3 r14 0xffff800000ce2080 r15 0xffff8000006b7000 rip 0xffffffff811cd6ff igmp_leavegroup+0xaf cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80002e8e94c0 ss 0x10 igmp_leavegroup+0xaf: movl 0x4(%rax),%r12d ddb> show proc PROC (syz-executor.6) pid=500900 stat=onproc flags process=1008 proc=2000 pri=32, usrpri=84, nice=20 forw=0xffffffffffffffff, list=0xffff800021714b10,0xffff80002e8ceb38 process=0xffff80002e8dcfc0 user=0xffff80002e8e4000, vmspace=0xfffffd807cb058a8 estcpu=36, cpticks=1, pctcpu=0.0 user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 94014 457619 6619 0 2 0 syz-executor.2 94014 99557 6619 0 3 0x4000080 fsleep syz-executor.2 44857 317554 89139 0 2 0 syz-executor.1 44857 20684 89139 0 3 0x4000080 fsleep syz-executor.1 32740 10962 55977 0 2 0 syz-executor.3 32740 387767 55977 0 3 0x4000080 fsleep syz-executor.3 32740 113048 55977 0 3 0x4000080 fsleep syz-executor.3 9907 227072 1 0 3 0x100083 ttyin getty 55977 26862 1321 0 3 0x82 nanoslp syz-executor.3 89139 234598 1321 0 3 0x82 nanoslp syz-executor.1 52841 418918 1321 0 2 0x2 syz-executor.0 20248 344298 1321 0 2 0x2 syz-executor.5 90681 330386 1321 0 2 0x2 syz-executor.7 47276 517222 1321 0 3 0x82 nanoslp syz-executor.6 12439 138737 0 0 3 0x14280 nfsidl nfsio 40638 441431 0 0 3 0x14280 nfsidl nfsio 55749 102658 0 0 3 0x14280 nfsidl nfsio 37692 310118 0 0 3 0x14280 nfsidl nfsio 99232 505897 0 0 3 0x14280 nfsidl nfsio 42231 193384 0 0 3 0x14280 nfsidl nfsio 25369 489790 0 0 3 0x14280 nfsidl nfsio 6845 508006 0 0 3 0x14280 nfsidl nfsio 39556 154656 0 0 3 0x14280 nfsidl nfsio 10007 29680 0 0 3 0x14280 nfsidl nfsio 25193 143480 0 0 3 0x14280 nfsidl nfsio 94623 240393 0 0 3 0x14280 nfsidl nfsio 79625 240858 0 0 3 0x14280 nfsidl nfsio 13145 179355 0 0 3 0x14280 nfsidl nfsio 27831 39541 0 0 3 0x14280 nfsidl nfsio 47218 313745 0 0 3 0x14280 nfsidl nfsio 28713 359777 0 0 3 0x14280 nfsidl nfsio 42033 57143 0 0 3 0x14280 nfsidl nfsio 6409 279984 0 0 3 0x14280 nfsidl nfsio 17244 468578 0 0 3 0x14280 nfsidl nfsio 6619 237233 1321 0 3 0x82 nanoslp syz-executor.2 17905 506976 0 0 3 0x14200 bored sosplice 84545 151497 1321 0 2 0x2 syz-executor.4 1321 192249 16582 0 3 0x82 thrsleep syz-fuzzer 1321 241257 16582 0 3 0x4000082 nanoslp syz-fuzzer 1321 22607 16582 0 3 0x4000082 wait syz-fuzzer 1321 423490 16582 0 3 0x4000082 wait syz-fuzzer 1321 78704 16582 0 3 0x4000082 thrsleep syz-fuzzer 1321 369137 16582 0 3 0x4000082 wait syz-fuzzer 1321 487102 16582 0 3 0x4000082 thrsleep syz-fuzzer 1321 308653 16582 0 3 0x4000082 wait syz-fuzzer 1321 40001 16582 0 3 0x4000082 wait syz-fuzzer 1321 274121 16582 0 3 0x4000082 thrsleep syz-fuzzer 1321 498678 16582 0 3 0x4000082 wait syz-fuzzer 1321 109794 16582 0 3 0x4000082 wait syz-fuzzer 1321 211657 16582 0 3 0x4000082 wait syz-fuzzer 1321 184844 16582 0 3 0x4000082 kqread syz-fuzzer 16582 68522 60632 0 3 0x10008a sigsusp ksh 60632 35464 13071 0 3 0x9a kqread sshd 13071 189098 1 0 3 0x88 kqread sshd 56261 327003 33288 73 3 0x1100090 kqread syslogd 33288 220357 1 0 3 0x100082 netio syslogd 58354 406759 1 0 3 0x100080 kqread resolvd 47313 406337 13379 77 3 0x100092 kqread dhcpleased 98831 234035 13379 77 3 0x100092 kqread dhcpleased 13379 309092 1 0 3 0x80 kqread dhcpleased 86227 162580 0 0 3 0x14200 bored smr 32926 321320 0 0 2 0x14200 zerothread 9642 317605 0 0 3 0x14200 aiodoned aiodoned 45561 383399 0 0 2 0x14600 update 73349 492383 0 0 3 0x14200 cleaner cleaner 47311 325983 0 0 3 0x14200 reaper reaper 95979 177563 0 0 3 0x14200 pgdaemon pagedaemon 11077 461040 0 0 3 0x14200 bored viomb 98072 477072 0 0 3 0x40014200 acpi0 acpi0 18035 305742 0 0 3 0x14200 bored softnet3 25403 210210 0 0 3 0x14200 bored softnet2 44550 138009 0 0 3 0x14200 bored softnet1 32885 268101 0 0 3 0x14200 bored softnet0 31446 299951 0 0 3 0x14200 bored systqmp 3536 357855 0 0 3 0x14200 bored systq 8795 309409 0 0 2 0x40014200 softclock 17629 470053 0 0 3 0x40014200 idle0 1 430432 0 0 3 0x80082 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10184 6437K 7757K 78643K 18627 0 pcb 20 12K 14K 78643K 2626 0 rtable 193 7K 7K 78643K 7019 0 pf 45 12K 1034K 78643K 5018 0 ifaddr 39 12K 13K 78643K 254 0 ifgroup 54 2K 2K 78643K 543 0 sysctl 2 0K 0K 78643K 2 0 counters 28 17K 17K 78643K 190 0 ioctlops 0 0K 4K 78643K 1060 0 iov 0 0K 24K 78643K 761 0 mount 1 1K 1K 78643K 1 0 log 0 0K 0K 78643K 4 0 vnodes 1444 90K 91K 78643K 5837 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 13K 78643K 126 0 VM map 2 1K 1K 78643K 2 0 sem 10 1K 1K 78643K 10 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1697 195K 286K 78643K 12548 0 file desc 14 49K 65K 78643K 13205 0 sigio 0 0K 0K 78643K 75 0 proc 62 59K 91K 78643K 1270 0 subproc 104 6K 6K 78643K 286 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 2 0K 0K 78643K 1282 0 in_multi 77 5K 7K 78643K 631 0 ether_multi 1 0K 0K 78643K 90 0 mrt 3 0K 0K 78643K 80 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 133 599K 599K 78643K 133 0 exec 0 0K 1K 78643K 1267 0 tdb 3 0K 0K 78643K 3 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 8 62K 64K 78643K 10 0 UVM amap 364 92K 99K 78643K 117507 0 UVM aobj 131 4K 5K 78643K 135 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 762 0 NDP 12 0K 2K 78643K 192 0 temp 74 5856K 5932K 78643K 60279 0 kqueue 14 22K 30K 78643K 792 0 SYN cache 2 16K 16K 78643K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 7938 0 7930 30 27 3 5 0 8 2 rtentry 112 750 0 665 4 0 4 4 0 8 0 unpcb 144 7303 0 7290 53 47 6 8 0 8 5 syncache 296 54 0 54 6 6 0 1 0 8 0 tcpqe 32 116 0 116 7 7 0 1 0 8 0 tcpcb 776 3753 0 3747 59 55 4 8 0 8 3 arp 88 55 0 38 1 0 1 1 0 8 0 ipq 40 7 0 7 3 3 0 1 0 8 0 ipqe 40 14 0 14 3 3 0 1 0 8 0 inpcb 336 14049 0 14027 69 62 7 13 0 8 4 nd6 104 72 0 53 1 0 1 1 0 8 0 pkpcb 40 48 0 48 4 4 0 1 0 8 0 kcovpl 48 22 0 14 1 0 1 1 0 8 0 mppekey 1024 6 0 6 3 3 0 1 0 8 0 ppxss 1160 89 0 89 12 12 0 1 0 8 0 pppxif 1360 15 0 15 4 4 0 1 0 8 0 pfstscr 40 50 0 43 1 0 1 1 0 8 0 pfosfp 40 3 0 1 1 0 1 1 0 8 0 pfosfpen 112 3 0 1 1 0 1 1 0 8 0 pfanchor 1288 517 194 5 43 0 43 43 0 8 0 pfqueue 264 4 0 4 1 1 0 1 0 8 0 pfstitem 24 52 0 24 1 0 1 1 0 8 0 pfstkey 128 119 0 85 2 0 2 2 0 8 0 pfstate 352 60 0 46 2 0 2 2 0 8 0 rttmr 136 17 0 17 4 4 0 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 1404 0 1003 40 14 26 30 0 8 0 art_table 32 1405 0 1003 4 0 4 4 0 8 0 art_node 16 735 0 660 1 0 1 1 0 8 0 sysvmsgpl 40 40 0 0 1 0 1 1 0 8 0 semapl 112 8 0 0 1 0 1 1 0 8 0 shmpl 112 132 0 4 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 17319 0 15864 92 0 92 92 0 8 0 ffsino 240 17319 0 15864 86 0 86 86 0 8 0 nchpl 144 33563 0 31922 63 0 63 63 0 8 0 rtmask 32 3 0 3 1 1 0 1 0 8 0 uvmvnodes 80 5926 0 0 121 0 121 121 0 8 0 vnodes 216 5926 0 0 330 0 330 330 0 8 0 namei 1024 90583 0 90580 8 6 2 2 0 8 1 kstatmem 264 286 0 262 2 0 2 2 0 8 0 scsiplug 72 10 0 10 2 2 0 1 0 8 0 scxspl 216 102275 0 102275 17 16 1 8 0 8 1 plimitpl 152 454 0 439 1 0 1 1 0 8 0 sigapl 424 13504 0 13442 8 0 8 8 0 8 0 futexpl 64 113679 0 113675 2 1 1 1 0 8 0 knotepl 120 172231 0 172145 89 77 12 16 0 8 8 kqueuepl 184 1072 0 1062 3 2 1 2 0 8 0 pipepl 288 1036 0 1008 24 21 3 7 0 8 0 fdescpl 432 13465 0 13440 4 0 4 4 0 8 0 filepl 120 65460 0 65204 58 44 14 16 0 8 4 lockfpl 104 1966 0 1963 3 2 1 2 0 8 0 lockfspl 48 803 0 800 1 0 1 1 0 8 0 sessionpl 144 42 0 26 1 0 1 1 0 8 0 pgrppl 48 84 0 68 1 0 1 1 0 8 0 ucredpl 104 5129 0 5119 1 0 1 1 0 8 0 zombiepl 144 13443 0 13442 2 1 1 1 0 8 0 processpl 1008 13504 0 13442 10 1 9 9 0 8 0 procpl 696 29956 0 29877 15 6 9 10 0 8 1 sosppl 168 150 0 150 11 11 0 1 0 8 0 sockpl 456 29352 0 29314 406 377 29 37 0 8 23 mcl64k 65536 232 0 232 17 16 1 1 0 8 1 mcl16k 16384 119 0 119 18 18 0 1 0 8 0 mcl12k 12288 318 0 318 19 18 1 1 0 8 1 mcl9k 9216 124 0 124 19 18 1 1 0 8 1 mcl8k 8192 592 0 592 13 12 1 1 0 8 1 mcl4k 4096 972 0 972 9 8 1 1 0 8 1 mcl2k2 2112 79 0 79 17 17 0 1 0 8 0 mcl2k 2048 61948 0 61897 86 76 10 26 0 8 3 mtagpl 96 665 0 439 8 1 7 7 0 8 0 mbufpl 256 740405 0 739946 8284 7946 338 883 0 8 262 bufpl 288 22947 0 16562 457 0 457 457 0 8 0 anonpl 24 1260465 0 1249538 155 63 92 92 0 188 16 amapchunkpl 152 371929 0 371228 87 55 32 39 0 158 1 amappl16 200 26235 0 25908 105 79 26 30 0 8 8 amappl15 192 34 0 33 1 0 1 1 0 8 0 amappl14 184 228 0 212 2 1 1 2 0 8 0 amappl13 176 6 0 6 2 2 0 1 0 8 0 amappl12 168 14304 0 14278 2 0 2 2 0 8 0 amappl11 160 49 0 39 1 0 1 1 0 8 0 amappl10 152 41 0 33 2 1 1 1 0 8 0 amappl9 144 200 0 199 3 2 1 2 0 8 0 amappl8 136 459 0 332 5 0 5 5 0 8 0 amappl7 128 70 0 54 1 0 1 1 0 8 0 amappl6 120 399 0 374 2 1 1 2 0 8 0 amappl5 112 272 0 266 1 0 1 1 0 8 0 amappl4 104 866 0 830 4 2 2 2 0 8 0 amappl3 96 74269 0 74196 3 0 3 3 0 8 0 amappl2 88 14036 0 13976 4 2 2 3 0 8 0 amappl1 80 55499 0 54993 22 10 12 22 0 8 0 amappl 88 116541 0 116341 6 0 6 6 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 134 0 4 3 0 3 3 0 8 0 uaddrrnd 24 13465 0 13440 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 13465 0 13440 1 0 1 1 0 8 0 vmmpekpl 168 78601 0 78542 3 0 3 3 0 8 0 vmmpepl 168 766517 0 764432 217 107 110 111 0 357 10 vmsppl 368 13464 0 13440 3 0 3 3 0 8 0 rwobjpl 24 175038 0 167618 47 0 47 47 0 8 0 pdppl 4096 26936 0 26880 407 343 64 64 0 8 8 pvpl 32 3821724 0 3805264 479 304 175 340 0 265 25 pmappl 216 13464 0 13440 2 0 2 2 0 8 0 extentpl 40 56 0 38 1 0 1 1 0 8 0 phpool 112 9627 0 8531 90 52 38 47 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace igmp_leavegroup(ffff800000ce2080,ffff8000006b7000) at igmp_leavegroup+0xaf sys/netinet/igmp.c:512 in_delmulti(ffff800000ce2080) at in_delmulti+0xd3 sys/netinet/in.c:908 ip_freemoptions(ffff800000db60c0) at ip_freemoptions+0x5d sys/netinet/ip_output.c:1770 in_pcbdetach(fffffd80618b46a0) at in_pcbdetach+0x97 sys/netinet/in_pcb.c:589 udp_detach(fffffd8065a93978) at udp_detach+0x3f sys/netinet/udp_usrreq.c:1113 soclose(fffffd8065a93978,0) at soclose+0x253 pru_detach sys/sys/protosw.h:281 [inline] soclose(fffffd8065a93978,0) at soclose+0x253 sys/kern/uipc_socket.c:397 soo_close(fffffd806bf50180,ffff8000217155f0) at soo_close+0x44 fdrop(fffffd806bf50180,ffff8000217155f0) at fdrop+0xcb sys/kern/kern_descrip.c:1274 closef(fffffd806bf50180,ffff8000217155f0) at closef+0x11b sys/kern/kern_descrip.c:1258 fdfree(ffff8000217155f0) at fdfree+0xf3 sys/kern/kern_descrip.c:1190 exit1(ffff8000217155f0,0,0,1) at exit1+0x35d sys/kern/kern_exit.c:197 sys_exit(ffff8000217155f0,ffff80002e8e9860,ffff80002e8e98b0) at sys_exit+0x1a sys/kern/kern_exit.c:89 syscall(ffff80002e8e9930) at syscall+0x4a8 sys/arch/amd64/amd64/trap.c:632 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x796fa1edc7c0, count: -14 ddb> machine ddbcpu 1 No such command ddb> trace igmp_leavegroup(ffff800000ce2080,ffff8000006b7000) at igmp_leavegroup+0xaf sys/netinet/igmp.c:512 in_delmulti(ffff800000ce2080) at in_delmulti+0xd3 sys/netinet/in.c:908 ip_freemoptions(ffff800000db60c0) at ip_freemoptions+0x5d sys/netinet/ip_output.c:1770 in_pcbdetach(fffffd80618b46a0) at in_pcbdetach+0x97 sys/netinet/in_pcb.c:589 udp_detach(fffffd8065a93978) at udp_detach+0x3f sys/netinet/udp_usrreq.c:1113 soclose(fffffd8065a93978,0) at soclose+0x253 pru_detach sys/sys/protosw.h:281 [inline] soclose(fffffd8065a93978,0) at soclose+0x253 sys/kern/uipc_socket.c:397 soo_close(fffffd806bf50180,ffff8000217155f0) at soo_close+0x44 fdrop(fffffd806bf50180,ffff8000217155f0) at fdrop+0xcb sys/kern/kern_descrip.c:1274 closef(fffffd806bf50180,ffff8000217155f0) at closef+0x11b sys/kern/kern_descrip.c:1258 fdfree(ffff8000217155f0) at fdfree+0xf3 sys/kern/kern_descrip.c:1190 exit1(ffff8000217155f0,0,0,1) at exit1+0x35d sys/kern/kern_exit.c:197 sys_exit(ffff8000217155f0,ffff80002e8e9860,ffff80002e8e98b0) at sys_exit+0x1a sys/kern/kern_exit.c:89 syscall(ffff80002e8e9930) at syscall+0x4a8 sys/arch/amd64/amd64/trap.c:632 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x796fa1edc7c0, count: -14