ASan: Unauthorized Access in dkwedge_add

7 views

Skip to first unread message

syzbot

unread,

May 13, 2023, 8:53:59 AM5/13/23

to syzkaller-...@googlegroups.com

Hello,

syzbot found the following issue on:

HEAD commit: ef3f2fc49311 indent: remove code for parsing declarations ..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=16ebc33a280000
kernel config: https://syzkaller.appspot.com/x/.config?x=fab579639ba4bf0a
dashboard link: https://syzkaller.appspot.com/bug?extid=943d1bd5715b02a0014e
compiler: g++ (Debian 10.2.1-6) 10.2.1 20210110

Unfortunately, I don't have any reproducer for this issue yet.

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/e7a230ec8f48/disk-ef3f2fc4.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/e7ab9ddec962/netbsd-ef3f2fc4.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+943d1b...@syzkaller.appspotmail.com

[ 232.5079853] panic: ASan: Unauthorized Access In 0xffffffff81d32691: Addr 0xffffa40012cb9850 [8 bytes, read, PoolUseAfterFree]

[ 232.5243222] cpu0: Begin traceback...
[ 232.5479690] vpanic() at netbsd:vpanic+0x282 sys/kern/subr_prf.c:292
[ 232.6179673] panic() at netbsd:panic+0x9e sys/kern/subr_prf.c:1060
[ 232.6879687] kasan_report() at netbsd:kasan_report+0x8f kasan_code_name sys/kern/subr_asan.c:169 [inline]
[ 232.6879687] kasan_report() at netbsd:kasan_report+0x8f sys/kern/subr_asan.c:201
[ 232.7379675] __asan_load8() at netbsd:__asan_load8+0xac kasan_shadow_8byte_isvalid sys/kern/subr_asan.c:371 [inline]
[ 232.7379675] __asan_load8() at netbsd:__asan_load8+0xac kasan_shadow_check sys/kern/subr_asan.c:421 [inline]
[ 232.7379675] __asan_load8() at netbsd:__asan_load8+0xac sys/kern/subr_asan.c:1208
[ 232.7879674] dkwedge_add() at netbsd:dkwedge_add+0x392 sys/dev/dkwedge/dk.c:586
[ 232.8379698] disk_ioctl() at netbsd:disk_ioctl+0x161 sys/kern/subr_disk.c:634
[ 232.8979686] dk_ioctl() at netbsd:dk_ioctl+0x1b2 sys/dev/dksubr.c:642
[ 232.9479713] sdioctl() at netbsd:sdioctl+0xa12 sys/dev/scsipi/sd.c:1005
[ 232.9979677] cdev_ioctl() at netbsd:cdev_ioctl+0x197 sys/kern/subr_devsw.c:1525
[ 233.0479682] spec_ioctl() at netbsd:spec_ioctl+0x148 sys/miscfs/specfs/spec_vnops.c:1331
[ 233.0979673] VOP_IOCTL() at netbsd:VOP_IOCTL+0x132 sys/kern/vnode_if.c:934
[ 233.1579688] vn_ioctl() at netbsd:vn_ioctl+0x1c4 sys/kern/vfs_vnops.c:892
[ 233.2079697] sys_ioctl() at netbsd:sys_ioctl+0x8f6 sys/kern/sys_generic.c:675
[ 233.2579680] sys___syscall() at netbsd:sys___syscall+0x10e sy_call sys/sys/syscallvar.h:65 [inline]
[ 233.2579680] sys___syscall() at netbsd:sys___syscall+0x10e sys/kern/sys_syscall.c:90
[ 233.3179690] syscall() at netbsd:syscall+0x25a sy_call sys/sys/syscallvar.h:65 [inline]
[ 233.3179690] syscall() at netbsd:syscall+0x25a sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 233.3179690] syscall() at netbsd:syscall+0x25a sys/arch/x86/x86/syscall.c:138
[ 233.3279681] --- syscall (number 54 via SYS_syscall) ---
[ 233.3479682] netbsd:syscall+0x25a:
[ 233.3479682] cpu0: End traceback...
[ 233.3591978] fatal breakpoint trap in supervisor mode
[ 233.3591978] trap type 1 code 0 rip 0xffffffff8023241d cs 0x8 rflags 0x282 cr2 0x79d2e1e31000 ilevel 0 rsp 0xffffa402516cd380
[ 233.3750825] curlwp 0xffffa40012a54340 pid 2176.2189 lowest kstack 0xffffa402516c62c0
Stopped in pid 2176.2189 (syz-executor.3) at netbsd:breakpoint+0x5: leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0x105 sys/ddb/db_panic.c:69
vpanic() at netbsd:vpanic+0x282 sys/kern/subr_prf.c:292
panic() at netbsd:panic+0x9e sys/kern/subr_prf.c:1060
kasan_report() at netbsd:kasan_report+0x8f kasan_code_name sys/kern/subr_asan.c:169 [inline]
kasan_report() at netbsd:kasan_report+0x8f sys/kern/subr_asan.c:201
__asan_load8() at netbsd:__asan_load8+0xac kasan_shadow_8byte_isvalid sys/kern/subr_asan.c:371 [inline]
__asan_load8() at netbsd:__asan_load8+0xac kasan_shadow_check sys/kern/subr_asan.c:421 [inline]
__asan_load8() at netbsd:__asan_load8+0xac sys/kern/subr_asan.c:1208
dkwedge_add() at netbsd:dkwedge_add+0x392 sys/dev/dkwedge/dk.c:586
disk_ioctl() at netbsd:disk_ioctl+0x161 sys/kern/subr_disk.c:634
dk_ioctl() at netbsd:dk_ioctl+0x1b2 sys/dev/dksubr.c:642
sdioctl() at netbsd:sdioctl+0xa12 sys/dev/scsipi/sd.c:1005
cdev_ioctl() at netbsd:cdev_ioctl+0x197 sys/kern/subr_devsw.c:1525
spec_ioctl() at netbsd:spec_ioctl+0x148 sys/miscfs/specfs/spec_vnops.c:1331
VOP_IOCTL() at netbsd:VOP_IOCTL+0x132 sys/kern/vnode_if.c:934
vn_ioctl() at netbsd:vn_ioctl+0x1c4 sys/kern/vfs_vnops.c:892
sys_ioctl() at netbsd:sys_ioctl+0x8f6 sys/kern/sys_generic.c:675
sys___syscall() at netbsd:sys___syscall+0x10e sy_call sys/sys/syscallvar.h:65 [inline]
sys___syscall() at netbsd:sys___syscall+0x10e sys/kern/sys_syscall.c:90
syscall() at netbsd:syscall+0x25a sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x25a sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x25a sys/arch/x86/x86/syscall.c:138
--- syscall (number 54 via SYS_syscall) ---
netbsd:syscall+0x25a:
Panic string: ASan: Unauthorized Access In 0xffffffff81d32691: Addr 0xffffa40012cb9850 [8 bytes, read, PoolUseAfterFree]

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
2186 2411 2 0 0 ffffa400133d7240 syz-executor.2
2186 2198 2 0 0 ffffa4001405c980 syz-executor.2
2186 2200 2 0 0 ffffa4001405c100 syz-executor.2
2186 12748 2 0 0 ffffa400140989c0 syz-executor.2
2186 2192 2 0 0 ffffa4001347d540 syz-executor.2
2186 2199 2 0 0 ffffa40012abc080 syz-executor.2
2186 2044 2 0 100 ffffa40012c5b700 syz-executor.2
2186 2186 2 1 10000000 ffffa40012cb4480 syz-executor.2
2191 2191 2 0 0 ffffa40012a21740 syz-executor.0
2195 2195 2 0 40000 ffffa400133819c0 syz-executor.5
2201 2184 5 1 100100 ffffa40012bdca00 syz-executor.4
2201 2201 2 0 10040040 ffffa40012da28c0 syz-executor.4
13789 14034 3 0 180 ffffa40012a76480 syz-executor.1 parked
13789 13789 2 0 10040000 ffffa40013f26480 syz-executor.1
2176 >2189 7 0 100 ffffa40012a54340 syz-executor.3
2176 2176 2 0 10040140 ffffa40012c3cb00 syz-executor.3
12857 12857 2 0 140 ffffa40013efd780 syz-executor.2
12987 12987 3 0 180 ffffa40013381580 syz-executor.5 parked
1017 1017 3 1 180 ffffa40012cb48c0 syz-executor.5 parked
11049 11049 2 0 140 ffffa40013f9e500 syz-executor.4
10826 10220 2 1 1140100 ffffa40012cef9c0 syz-executor.4
10826 10826 3 1 11000000 ffffa40012d33b00 syz-executor.4 lwpwait
4176 4176 2 0 140 ffffa40012ccf940 syz-executor.1
1384 1384 2 0 140 ffffa40013e16b00 syz-executor.5
1376 1376 2 0 140 ffffa40013e166c0 syz-executor.3
1243 1243 2 0 140 ffffa40013cf6a40 syz-executor.0
1080 3795 3 0 180 ffffa40012df5940 syz-fuzzer parked
1080 1074 3 1 180 ffffa40013e562c0 syz-fuzzer parked
1080 801 3 0 180 ffffa40013e16280 syz-fuzzer parked
1080 941 3 1 180 ffffa40013df0ac0 syz-fuzzer wait
1080 991 3 1 180 ffffa40013df0240 syz-fuzzer wait
1080 449 2 0 140 ffffa40013dc2a80 syz-fuzzer
1080 1244 3 1 180 ffffa40012adf0c0 syz-fuzzer wait
1080 930 3 1 180 ffffa40013cf61c0 syz-fuzzer wait
1080 829 3 0 180 ffffa4001343cb40 syz-fuzzer parked
1080 942 3 1 180 ffffa4001343c700 syz-fuzzer wait
1080 1096 3 1 180 ffffa4001343c2c0 syz-fuzzer parked
1080 1233 3 0 180 ffffa400133c9a80 syz-fuzzer wait
1080 >1231 7 1 140 ffffa400133c9640 syz-fuzzer
1080 1080 3 0 180 ffffa40013370540 syz-fuzzer parked
1237 1237 3 1 180 ffffa40012abc4c0 sshd select
1151 1151 3 1 180 ffffa400126e7740 getty nanoslp
1222 1222 3 0 180 ffffa400134b0180 getty nanoslp
1216 1216 3 1 180 ffffa400126ea340 getty nanoslp
1184 1184 3 0 1c0 ffffa40012978ac0 getty ttyraw
1095 1095 3 0 180 ffffa400133c9200 sshd select
983 983 3 1 180 ffffa40012d85bc0 powerd kqueue
700 700 3 0 180 ffffa40013448b80 syslogd kqueue
746 746 3 0 180 ffffa40012c25680 dhcpcd poll
747 747 3 0 180 ffffa40012ccf0c0 dhcpcd poll
742 742 3 1 180 ffffa40012c5bb40 dhcpcd poll
602 602 3 0 180 ffffa40012c3c280 dhcpcd poll
487 487 3 0 180 ffffa40012dbb900 dhcpcd poll
292 292 3 0 180 ffffa40012dbb4c0 dhcpcd poll
485 485 3 1 180 ffffa40012dbb080 dhcpcd poll
1 1 3 0 180 ffffa4001286b9c0 init wait
0 6484 5 1 200 ffffa4001347d100 (zombie)
0 815 3 1 200 ffffa400129a2280 physiod physiod
0 196 3 0 200 ffffa400129a32c0 pooldrain pooldrain
0 195 3 1 200 ffffa400129a2b00 ioflush syncer
0 194 3 1 200 ffffa400129a26c0 pgdaemon pgdaemon
0 167 3 1 200 ffffa40012978680 usb7 usbevt
0 172 3 0 200 ffffa40012978240 usb6 usbevt
0 170 3 0 200 ffffa4001292da80 usb5 usbevt
0 168 3 1 200 ffffa4001292d640 usb4 usbevt
0 166 3 0 200 ffffa4001292d200 usb3 usbevt
0 165 3 0 200 ffffa400128e1a40 usb2 usbevt
0 31 3 1 200 ffffa400128e1600 usb1 usbevt
0 63 3 1 200 ffffa400128e11c0 usb0 usbevt
0 126 3 0 200 ffffa4001287ea00 usbtask-dr usbtsk
0 125 3 1 200 ffffa4001287e5c0 usbtask-hc usbtsk
0 124 3 0 200 ffffa40010d76b00 swwreboot swwreboot
0 123 2 0 240 ffffa4001287e180 npfgc0
0 122 3 0 200 ffffa4001286b580 rt_free rt_free
0 121 3 0 200 ffffa4001286b140 unpgc unpgc
0 120 2 0 200 ffffa40012863980 key_timehandler
0 119 3 1 200 ffffa40012863540 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 ffffa40012863100 icmp6_wqinput/0 icmp6_wqinput
0 117 2 0 200 ffffa40012713940 nd6_timer
0 116 3 1 200 ffffa40012713500 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 ffffa400127130c0 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 ffffa40012704900 carp_wqinput/1 carp_wqinput
0 113 3 0 200 ffffa400127044c0 carp_wqinput/0 carp_wqinput
0 112 3 1 200 ffffa40012704080 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 ffffa400126eb8c0 icmp_wqinput/0 icmp_wqinput
0 110 2 0 200 ffffa400126eb040 rt_timer
0 109 3 0 200 ffffa400126ea780 vmem_rehash vmem_rehash
0 100 3 0 200 ffffa400126e7300 entbutler entropy
0 99 3 0 200 ffffa400120bcb40 viomb balloon
0 98 3 1 200 ffffa400120bc700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 ffffa400120bc2c0 vioif0_txrx/0 vioif0_txrx
0 30 3 0 200 ffffa40010d766c0 scsibus0 sccomp
0 29 3 0 200 ffffa40010d76280 pms0 pmsreset
0 28 3 1 200 ffffa40010cbcac0 xcall/1 xcall
0 27 1 1 200 ffffa40010cbc680 softser/1
0 26 1 1 200 ffffa40010cbc240 softclk/1
0 25 1 1 200 ffffa40010cb9a80 softbio/1
0 24 1 1 200 ffffa40010cb9640 softnet/1
0 23 1 1 201 ffffa40010cb9200 idle/1
0 22 3 0 200 ffffa4000fb56a40 lnxsyswq lnxsyswq
0 21 3 0 200 ffffa4000fb56600 lnxubdwq lnxubdwq
0 20 3 0 200 ffffa4000fb561c0 lnxpwrwq lnxpwrwq
0 19 3 0 200 ffffa4000fb55a00 lnxlngwq lnxlngwq
0 18 3 0 200 ffffa4000fb555c0 lnxhipwq lnxhipwq
0 17 3 0 200 ffffa4000fb55180 lnxrcugc lnxrcugc
0 16 3 0 200 ffffa4000fb4e9c0 sysmon smtaskq
0 15 3 0 200 ffffa4000fb4e580 pmfsuspend pmfsuspend
0 14 3 0 200 ffffa4000fb4e140 pmfevent pmfevent
0 13 3 0 200 ffffa4000fb49980 sopendfree sopendfr
0 12 3 0 200 ffffa4000fb49540 ifwdog ifwdog
0 11 3 0 200 ffffa4000fb49100 iflnkst iflnkst
0 10 3 0 200 ffffa4000fb3c940 nfssilly nfssilly
0 9 3 0 200 ffffa4000fb3c500 vdrain vdrain
0 8 3 1 200 ffffa4000fb3c0c0 modunload mod_unld
0 7 3 0 200 ffffa4000fb33900 xcall/0 xcall
0 6 1 0 200 ffffa4000fb334c0 softser/0
0 5 1 0 200 ffffa4000fb33080 softclk/0
0 4 1 0 200 ffffa4000fb318c0 softbio/0
0 3 1 0 200 ffffa4000fb31480 softnet/0
0 2 1 0 201 ffffa4000fb31040 idle/0
0 0 2 0 240 ffffffff8334b800 swapper
[Locks tracked through LWPs]

****** LWP 2186.2044 (syz-executor.2) @ 0xffffa40012c5b700, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:config_init+0x54 sys/kern/subr_autoconf.c:366)
lock address : netbsd:config_misc_lock
type : sleep/adaptive
initialized : netbsd:config_init+0x54
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffa40012c5b700 last held: 000000000000000000
last locked : netbsd:device_lookup_acquire+0x2c
unlocked* : netbsd:device_lookup_acquire+0x1e1
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 2191.2191 (syz-executor.0) @ 0xffffa40012a21740, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:amap_ctor+0x112 sys/uvm/uvm_amap.c:270)
lock address : ffffa40013d02700
type : sleep/adaptive
initialized : netbsd:amap_ctor+0x112
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffa40012a21740 last held: 0xffffa40012a21740
last locked* : netbsd:uvm_fault_internal+0x88a
unlocked : netbsd:uvm_fault_upper_enter+0x366
owner/count : 0xffffa40012a21740 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 2195.2195 (syz-executor.5) @ 0xffffa400133819c0, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:amap_ctor+0x39 sys/uvm/uvm_amap.c:265)
lock address : ffffa40012a7f540
type : sleep/adaptive
initialized : netbsd:amap_ctor+0x39
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffa400133819c0 last held: 0xffffa400133819c0
last locked* : netbsd:uvm_fault_internal+0x88a
unlocked : netbsd:amap_copy+0x4dc
owner/count : 0xffffa400133819c0 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 13789.14034 (syz-executor.1) @ 0xffffa40012a76480, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:config_init+0x54 sys/kern/subr_autoconf.c:366)
lock address : netbsd:config_misc_lock
type : sleep/adaptive
initialized : netbsd:config_init+0x54
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffa40012a76480 last held: 000000000000000000
last locked : netbsd:device_lookup_acquire+0x2c
unlocked* : netbsd:device_lookup_acquire+0x1e1
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 747.747 (dhcpcd) @ 0xffffa40012ccf0c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffa40012ccf0c0 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 742.742 (dhcpcd) @ 0xffffa40012c5bb40, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffa40012c5bb40 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 292.292 (dhcpcd) @ 0xffffa40012dbb4c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffa40012dbb4c0 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 485.485 (dhcpcd) @ 0xffffa40012dbb080, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffa40012dbb080 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.26 (softclk/1) @ 0xffffa40010cbc240, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffa40010cbc240 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffffa4000fb49100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffa4000fb49100 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff8334b800, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffffff8334b800 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu0:

* Lock 0 (initialized at netbsd:kprintf_init+0x61 sys/kern/subr_prf.c:156)
lock address : netbsd:kprintf_mtx
type : spin
initialized : netbsd:kprintf_init+0x61
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffa40012a54340 last held: 0xffffa40012a54340
last locked* : netbsd:kprintf_lock+0x33
unlocked : netbsd:kprintf_unlock+0x53
owner field : 0x0000000000000800 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON
0xffffa40000017180 0041 00000000 0x0 0x0
0xffffa40000017200 0041 00000000 0x0 0x0
0xffffa40000017280 0041 00000000 0x0 0x0
0xffffa40000017300 0041 00000000 0x0 0x0
0xffffa40000017380 0041 00000000 0x0 0x0
0xffffa40000017400 0041 00000000 0x0 0x0
0xffffa40000017480 0041 00000000 0x0 0x0
0xffffa40000017500 0041 00000000 0x0 0x0
0xffffa40000017580 0041 00000000 0x0 0x0
0xffffa40000017600 0041 00000000 0x0 0x0
0xffffa40000017680 0041 00000000 0x0 0x0
0xffffa40000017700 0041 00000000 0x0 0x0
0xffffa40000017780 0041 00000000 0x0 0x0
0xffffa40000017800 0041 00000000 0x0 0x0
0xffffa40000017880 0041 00000000 0x0 0x0
0xffffa40000017900 0041 00000000 0x0 0x0
0xffffa40000017980 0041 00000000 0x0 0x0
0xffffa40000017a00 0041 00000000 0x0 0x0
0xffffa40000017a80 0041 00000000 0x0 0x0
0xffffa40000017b00 0041 00000000 0x0 0x0
0xffffa40000017b80 0041 00000000 0x0 0x0
0xffffa40000017c00 0041 00000000 0x0 0x0
0xffffa40000017c80 0041 00000000 0x0 0x0
0xffffa40000017d00 0041 00000000 0x0 0x0
0xffffa40000017d80 0041 00000000 0x0 0x0
0xffffa40000017e00 0041 00000000 0x0 0x0
0xffffa40000017e80 0041 00000000 0x0 0x0
0xffffa40000017f00 0041 00000000 0x0 0x0
0xffffa40000017f80 0041 00000000 0x0 0x0
0xffffa40000018000 0041 00000000 0x0 0x0
0xffffa40000018080 0041 00000000 0x0 0x0
0xffffa40000018100 0041 00000000 0x0 0x0
0xffffa40000018180 0041 00000000 0x0 0x0
0xffffa40000018200 0041 00000000 0x0 0x0
0xffffa40000018280 0041 00000000 0x0 0x0
0xffffa40000018300 0041 00000000 0x0 0x0
0xffffa40000018380 0041 00000000 0x0 0x0
0xffffa40000018400 0041 00000000 0x0 0x0
0xffffa40000018480 0041 00000000 0x0 0x0
0xffffa40000018500 0041 00000000 0x0 0x0
0xffffa40000018580 0041 00000000 0x0 0x0
0xffffa40000018600 0041 00000000 0x0 0x0
0xffffa40000018680 0041 00000000 0x0 0x0
0xffffa40000018700 0041 00000000 0x0 0x0
0xffffa40000018780 0041 00000000 0x0 0x0
0xffffa40000018800 0041 00000000 0x0 0x0
0xffffa40000018880 0041 00000000 0x0 0x0
0xffffa40000018900 0041 00000000 0x0 0x0
0xffffa40000018980 0041 00000000 0x0 0x0
0xffffa40000018a00 0041 00000000 0x0 0x0
0xffffa40000018a80 0041 00000000 0x0 0x0
0xffffa40000018b00 0041 00000000 0x0 0x0
0xffffa40000018b80 0041 00000000 0x0 0x0
0xffffa40000018c00 0041 00000000 0x0 0x0
0xffffa40000018c80 0041 00000000 0x0 0x0
0xffffa40000018d00 0041 00000000 0x0 0x0
0xffffa40000018d80 0041 00000000 0x0 0x0
0xffffa40000018e00 0041 00000000 0x0 0x0
0xffffa40000018e80 0041 00000000 0x0 0x0
0xffffa40000018f00 0041 00000000 0x0 0x0
0xffffa40000018f80 0041 00000000 0x0 0x0
0xffffa40000019000 0041 00000000 0x0 0x0
0xffffa40000019080 0041 00000000 0x0 0x0
0xffffa40000019100 0041 00000000 0x0 0x0
0xffffa40000019180 0041 00000000 0x0 0x0
0xffffa40000019200 0041 00000000 0x0 0x0
0xffffa40000019280 0041 00000000 0x0 0x0
0xffffa40000019300 0041 00000000 0x0 0x0
0xffffa40000019380 0041 00000000 0x0 0x0
0xffffa40000019400 0041 00000000 0x0 0x0
0xffffa40000019480 0041 00000000 0x0 0x0
0xffffa40000019500 0041 00000000 0x0 0x0
0xffffa40000019580 0041 00000000 0x0 0x0
0xffffa40000019600 0041 00000000 0x0 0x0
0xffffa40000019680 0041 00000000 0x0 0x0
0xffffa40000019700 0041 00000000 0x0 0x0
0xffffa40000019780 0041 00000000 0x0 0x0
0xffffa40000019800 0041 00000000 0x0 0x0
0xffffa40000019880 0041 00000000 0x0 0x0
0xffffa40000019900 0041 00000000 0x0 0x0
0xffffa40000019980 0041 00000000 0x0 0x0
0xffffa40000019a00 0041 00000000 0x0 0x0
0xffffa40000019a80 0041 00000000 0x0 0x0
0xffffa40000019b00 0041 00000000 0x0 0x0
0xffffa40000019b80 0041 00000000 0x0 0x0
0xffffa40000019c00 0041 00000000 0x0 0x0
0xffffa40000019c80 0041 00000000 0x0 0x0
0xffffa40000019d00 0041 00000000 0x0 0x0
0xffffa40000019d80 0041 00000000 0x0 0x0
0xffffa40000019e00 0041 00000000 0x0 0x0
0xffffa40000019e80 0041 00000000 0x0 0x0
0xffffa40000019f00 0041 00000000 0x0 0x0
0xffffa40000019f80 0041 00000000 0x0 0x0
0xffffa4000001a000 0041 00000000 0x0 0x0
0xffffa4000001a080 0041 00000000 0x0 0x0
0xffffa4000001a100 0041 00000000 0x0 0x0
0xffffa4000001a180 0041 00000000 0x0 0x0
0xffffa4000001a200 0041 00000000 0x0 0x0
0xffffa4000001a280 0041 00000000 0x0 0x0
0xffffa4000001a300 0041 00000000 0x0 0x0
0xffffa4000001a380 0041 00000000 0x0 0x0
0xffffa4000001a400 0041 00000000 0x0 0x0
0xffffa4000001a480 0041 00000000 0x0 0x0
0xffffa4000001a500 0041 00000000 0x0 0x0
0xffffa4000001a580 0041 00000000 0x0 0x0
0xffffa4000001a600 0041 00000000 0x0 0x0
0xffffa4000001a680 0041 00000000 0x0 0x0
0xffffa4000001a700 0041 00000000 0x0 0x0
0xffffa4000001a780 0041 00000000 0x0 0x0
0xffffa4000001a800 0041 00000000 0x0 0x0
0xffffa4000001a880 0041 00000000 0x0 0x0
0xffffa4000001a900 0041 00000000 0x0 0x0
0xffffa4000001a980 0041 00000000 0x0 0x0
0xffffa4000001aa00 0041 00000000 0x0 0x0
0xffffa4000001aa80 0041 00000000 0x0 0x0
0xffffa4000001ab00 0041 00000000 0x0 0x0
0xffffa4000001ab80 0041 00000000 0x0 0x0
0xffffa4000001ac00 0041 00000000 0x0 0x0
0xffffa4000001ac80 0041 00000000 0x0 0x0
0xffffa4000001ad00 0041 00000000 0x0 0x0
0xffffa4000001ad80 0041 00000000 0x0 0x0
0xffffa4000001ae00 0041 00000000 0x0 0x0
0xffffa4000001ae80 0041 00000000 0x0 0x0
0xffffa4000001af00 0041 00000000 0x0 0x0
0xffffa4000001af80 0041 00000000 0x0 0x0
0xffffa4000001b000 0041 00000000 0x0 0x0
0xffffa4000001b080 0041 00000000 0x0 0x0
0xffffa4000001b100 0041 00000000 0x0 0x0
0xffffa4000001b180 0041 00000000 0x0 0x0
0xffffa4000001b200 0041 00000000 0x0 0x0
0xffffa4000001b280 0041 00000000 0x0 0x0
0xffffa4000001b300 0041 00000000 0x0 0x0
0xffffa4000001b380 0041 00000000 0x0 0x0
0xffffa4000001b400 0041 00000000 0x0 0x0
0xffffa4000001b480 0041 00000000 0x0 0x0
0xffffa4000001b500 0041 00000000 0x0 0x0
0xffffa4000001b580 0041 00000000 0x0 0x0
0xffffa4000001b600 0041 00000000 0x0 0x0
0xffffa4000001b680 0041 00000000 0x0 0x0
0xffffa4000001b700 0041 00000000 0x0 0x0
0xffffa4000001b780 0041 00000000 0x0 0x0
0xffffa4000001b800 0041 00000000 0x0 0x0
0xffffa4000001b880 0041 00000000 0x0 0x0
0xffffa4000001b900 0041 00000000 0x0 0x0
0xffffa4000001b980 0041 00000000 0x0 0x0
0xffffa4000001ba00 0041 00000000 0x0 0x0
0xffffa4000001ba80 0041 00000000 0x0 0x0
0xffffa4000001bb00 0041 00000000 0x0 0x0
0xffffa4000001bb80 0001 00000000 0x0 0x0
0xffffa4000001bc00 0001 00000000 0x0 0x0
0xffffa4000001bc80 0001 00000000 0x0 0x0
0xffffa4000001bd00 0001 00000000 0x0 0x0
0xffffa4000001bd80 0001 00000000 0x0 0x0
0xffffa4000001be00 0001 00000000 0x0 0x0
0xffffa4000001be80 0001 00000000 0x0 0x0
0xffffa4000001bf00 0001 00000000 0x0 0x0
0xffffa4000001bf80 0001 00000000 0x0 0x0
0xffffa4000001c000 0001 00000000 0x0 0x0
0xffffa4000001c080 0001 00000000 0x0 0x0
0xffffa4000001c100 0001 00000000 0x0 0x0
0xffffa4000001c180 0001 00000000 0x0 0x0
0xffffa4000001c200 0001 00000000 0x0 0x0
0xffffa4000001c280 0001 00000000 0x0 0x0
0xffffa4000001c300 0001 00000000 0x0 0x0
0xffffa4000001c380 0001 00000000 0x0 0x0
0xffffa4000001c400 0001 00000000 0x0 0x0
0xffffa4000001c480 0001 00000000 0x0 0x0
0xffffa4000001c500 0001 00000000 0x0 0x0
0xffffa4000001c580 0001 00000000 0x0 0x0
0xffffa4000001c600 0001 00000000 0x0 0x0
0xffffa4000001c680 0001 00000000 0x0 0x0
0xffffa4000001c700 0001 00000000 0x0 0x0
0xffffa4000001c780 0001 00000000 0x0 0x0
0xffffa4000001c800 0001 00000000 0x0 0x0
0xffffa4000001c880 0001 00000000 0x0 0x0
0xffffa4000001c900 0001 00000000 0x0 0x0
0xffffa4000001c980 0001 00000000 0x0 0x0
0xffffa4000001ca00 0001 00000000 0x0 0x0
0xffffa4000001ca80 0001 00000000 0x0 0x0
0xffffa4000001cb00 0001 00000000 0x0 0x0
0xffffa4000001cb80 0001 00000000 0x0 0x0
0xffffa4000001cc00 0001 00000000 0x0 0x0
0xffffa4000001cc80 0001 00000000 0x0 0x0
0xffffa4000001cd00 0001 00000000 0x0 0x0
0xffffa4000001cd80 0001 00000000 0x0 0x0
0xffffa4000001ce00 0001 00000000 0x0 0x0
0xffffa4000001ce80 0001 00000000 0x0 0x0
0xffffa4000001cf00 0001 00000000 0x0 0x0
0xffffa4000001cf80 0001 00000000 0x0 0x0
0xffffa4000001d000 0001 00000000 0x0 0x0
0xffffa4000001d080 0001 00000000 0x0 0x0
0xffffa4000001d100 0001 00000000 0x0 0x0
0xffffa4000001d180 0001 00000000 0x0 0x0
0xffffa4000001d200 0001 00000000 0x0 0x0
0xffffa4000001d280 0001 00000000 0x0 0x0
0xffffa4000001d300 0001 00000000 0x0 0x0
0xffffa4000001d380 0001 00000000 0x0 0x0
0xffffa4000001d400 0001 00000000 0x0 0x0
0xffffa4000001d480 0001 00000000 0x0 0x0
0xffffa4000001d500 0001 00000000 0x0 0x0
0xffffa4000001d580 0001 00000000 0x0 0x0
0xffffa4000001d600 0001 00000000 0x0 0x0
0xffffa4000001d680 0001 00000000 0x0 0x0
0xffffa4000001d700 0001 00000000 0x0 0x0
0xffffa4000001d780 0001 00000000 0x0 0x0
0xffffa4000001d800 0001 00000000 0x0 0x0
0xffffa4000001d880 0001 00000000 0x0 0x0
0xffffa4000001d900 0001 00000000 0x0 0x0
0xffffa4000001d980 0001 00000000 0x0 0x0
0xffffa4000001da00 0001 00000000 0x0 0x0
0xffffa4000001da80 0001 00000000 0x0 0x0
0xffffa4000001db00 0001 00000000 0x0 0x0
0xffffa4000001db80 0001 00000000 0x0 0x0
0xffffa4000001dc00 0001 00000000 0x0 0x0
0xffffa4000001dc80 0001 00000000 0x0 0x0
0xffffa4000001dd00 0001 00000000 0x0 0x0
0xffffa4000001dd80 0001 00000000 0x0 0x0
0xffffa4000001de00 0001 00000000 0x0 0x0
0xffffa4000001de80 0001 00000000 0x0 0x0
0xffffa4000001df00 0001 00000000 0x0 0x0
0xffffa4000001df80 0001 00000000 0x0 0x0
0xffffa4000001e000 0001 00000000 0x0 0x0
0xffffa4000001e080 0001 00000000 0x0 0x0
0xffffa4000001e100 0001 00000000 0x0 0x0
0xffffa4000001e180 0001 00000000 0x0 0x0
0xffffa4000001e200 0001 00000000 0x0 0x0
0xffffa4000001e280 0001 00000000 0x0 0x0
0xffffa4000001e300 0001 00000000 0x0 0x0
0xffffa4000001e380 0001 00000000 0x0 0x0
0xffffa4000001e400 0001 00000000 0x0 0x0
0xffffa4000001e480 0001 00000000 0x0 0x0
0xffffa4000001e500 0001 00000000 0x0 0x0
0xffffa4000001e580 0001 00000000 0x0 0x0
0xffffa4000001e600 0001 00000000 0x0 0x0
0xffffa4000001e680 0001 00000000 0x0 0x0
0xffffa4000001e700 0001 00000000 0x0 0x0
0xffffa4000001e780 0001 00000000 0x0 0x0
0xffffa4000001e800 0001 00000000 0x0 0x0
0xffffa4000001e880 0001 00000000 0x0 0x0
0xffffa4000001e900 0001 00000000 0x0 0x0
0xffffa4000001e980 0001 00000000 0x0 0x0
0xffffa4000001ea00 0001 00000000 0x0 0x0
0xffffa4000001ea80 0001 00000000 0x0 0x0
0xffffa4000001eb00 0001 00000000 0x0 0x0
0xffffa4000001eb80 0001 00000000 0x0 0x0
0xffffa4000001ec00 0001 00000000 0x0 0x0
0xffffa4000001ec80 0001 00000000 0x0 0x0
0xffffa4000001ed00 0001 00000000 0x0 0x0
0xffffa4000001ed80 0001 00000000 0x0 0x0
0xffffa4000001ee00 0001 00000000 0x0 0x0
0xffffa4000001ee80 0001 00000000 0x0 0x0
0xffffa4000001ef00 0001 00000000 0x0 0x0
0xffffa4000001ef80 0001 00000000 0x0 0x0
0xffffa4000001f000 0001 00000000 0x0 0x0
0xffffa4000001f080 0001 00000000 0x0 0x0
0xffffa4000001f100 0001 00000000 0x0 0x0
0xffffa4000001f180 0001 00000000 0x0 0x0
0xffffa4000001f200 0001 00000000 0x0 0x0
0xffffa4000001f280 0001 00000000 0x0 0x0
0xffffa4000001f300 0001 00000000 0x0 0x0
0xffffa4000001f380 0001 00000000 0x0 0x0
0xffffa4000001f400 0001 00000000 0x0 0x0
0xffffa4000001f480 0001 00000000 0x0 0x0
0xffffa4000001f500 0001 00000000 0x0 0x0
0xffffa4000001f580 0001 00000000 0x0 0x0
0xffffa4000001f600 0001 00000000 0x0 0x0
0xffffa4000001f680 0001 00000000 0x0 0x0
0xffffa4000001f700 0001 00000000 0x0 0x0
0xffffa4000001f780 0001 00000000 0x0 0x0
0xffffa4000001f800 0001 00000000 0x0 0x0
0xffffa4000001f880 0001 00000000 0x0 0x0
0xffffa4000001f900 0001 00000000 0x0 0x0
0xffffa4000001f980 0001 00000000 0x0 0x0
0xffffa4000001fa00 0001 00000000 0x0 0x0
0xffffa4000001fa80 0001 00000000 0x0 0x0
0xffffa4000001fb00 0001 00000000 0x0 0x0
0xffffa4000001fb80 0001 00000000 0x0 0x0
0xffffa4000001fc00 0001 00000000 0x0 0x0
0xffffa4000001fc80 0001 00000000 0x0 0x0
0xffffa4000001fd00 0001 00000000 0x0 0x0
0xffffa4000001fd80 0001 00000000 0x0 0x0
0xffffa4000001fe00 0001 00000000 0x0 0x0
0xffffa4000001fe80 0001 00000000 0x0 0x0
0xffffa4000001ff00 0001 00000000 0x0 0x0
0xffffa4000001ff80 0001 00000000 0x0 0x0
0xffffa40000020000 0001 00000000 0x0 0x0
0xffffa40000020080 0001 00000000 0x0 0x0
0xffffa40000020100 0001 00000000 0x0 0x0
0xffffa40000020180 0001 00000000 0x0 0x0
0xffffa40000020200 0001 00000000 0x0 0x0
0xffffa40000020280 0001 00000000 0x0 0x0
0xffffa40000020300 0001 00000000 0x0 0x0
0xffffa40000020380 0001 00000000 0x0 0x0
0xffffa40000020400 0001 00000000 0x0 0x0
0xffffa40000020480 0001 00000000 0x0 0x0
0xffffa40000020500 0001 00000000 0x0 0x0
0xffffa40000020580 0001 00000000 0x0 0x0
0xffffa40000020600 0001 00000000 0x0 0x0
0xffffa40000020680 0001 00000000 0x0 0x0
0xffffa40000020700 0001 00000000 0x0 0x0
0xffffa40000020780 0001 00000000 0x0 0x0
0xffffa40000020800 0001 00000000 0x0 0x0
0xffffa40000020880 0001 00000000 0x0 0x0
0xffffa40000020900 0001 00000000 0x0 0x0
0xffffa40000020980 0001 00000000 0x0 0x0
0xffffa40000020a00 0001 00000000 0x0 0x0
0xffffa40000020a80 0001 00000000 0x0 0x0
0xffffa40000020b00 0001 00000000 0x0 0x0
0xffffa40000020b80 0001 00000000 0x0 0x0
0xffffa40000020c00 0001 00000000 0x0 0x0
0xffffa40000020c80 0001 00000000 0x0 0x0
0xffffa40000020d00 0001 00000000 0x0 0x0
0xffffa40000020d80 0001 00000000 0x0 0x0
0xffffa40000020e00 0001 00000000 0x0 0x0
0xffffa40000020e80 0001 00000000 0x0 0x0
0xffffa40000020f00 0001 00000000 0x0 0x0
0xffffa40000020f80 0001 00000000 0x0 0x0
0xffffa40000021000 0001 00000000 0x0 0x0
0xffffa40000021080 0001 00000000 0x0 0x0
0xffffa40000021100 0001 00000000 0x0 0x0
0xffffa40000021180 0001 00000000 0x0 0x0
0xffffa40000021200 0001 00000000 0x0 0x0
0xffffa40000021280 0001 00000000 0x0 0x0
0xffffa40000021300 0001 00000000 0x0 0x0
0xffffa40000021380 0001 00000000 0x0 0x0
0xffffa40000021400 0001 00000000 0x0 0x0
0xffffa40000021480 0001 00000000 0x0 0x0
0xffffa40000021500 0001 00000000 0x0 0x0
0xffffa40000021580 0001 00000000 0x0 0x0
0xffffa40000021600 0001 00000000 0x0 0x0
0xffffa40000021680 0001 00000000 0x0 0x0
0xffffa40000021700 0001 00000000 0x0 0x0
0xffffa40000021780 0001 00000000 0x0 0x0
0xffffa40000021800 0001 00000000 0x0 0x0
0xffffa40000021880 0001 00000000 0x0 0x0
0xffffa40000021900 0001 00000000 0x0 0x0
0xffffa40000021980 0001 00000000 0x0 0x0
0xffffa40000021a00 0001 00000000 0x0 0x0
0xffffa40000021a80 0001 00000000 0x0 0x0
0xffffa40000021b00 0001 00000000 0x0 0x0
0xffffa40000021b80 0001 00000000 0x0 0x0
0xffffa40000021c00 0001 00000000 0x0 0x0
0xffffa40000021c80 0001 00000000 0x0 0x0
0xffffa40000021d00 0001 00000000 0x0 0x0
0xffffa40000021d80 0001 00000000 0x0 0x0
0xffffa40000021e00 0001 00000000 0x0 0x0
0xffffa40000021e80 0001 00000000 0x0 0x0
0xffffa40000021f00 0001 00000000 0x0 0x0
0xffffa40000021f80 0001 00000000 0x0 0x0
0xffffa40000022000 0001 00000000 0x0 0x0
0xffffa40000022080 0001 00000000 0x0 0x0
0xffffa40000022100 0001 00000000 0x0 0x0
0xffffa40000022180 0001 00000000 0x0 0x0
0xffffa40000022200 0001 00000000 0x0 0x0
0xffffa40000022280 0001 00000000 0x0 0x0
0xffffa40000022300 0001 00000000 0x0 0x0
0xffffa40000022380 0001 00000000 0x0 0x0
0xffffa40000022400 0001 00000000 0x0 0x0
0xffffa40000022480 0001 00000000 0x0 0x0
0xffffa40000022500 0001 00000000 0x0 0x0
0xffffa40000022580 0001 00000000 0x0 0x0
0xffffa40000022600 0001 00000000 0x0 0x0
0xffffa40000022680 0001 00000000 0x0 0x0
0xffffa40000022700 0001 00000000 0x0 0x0
0xffffa40000022780 0001 00000000 0x0 0x0
0xffffa40000022800 0001 00000000 0x0 0x0
0xffffa40000022880 0001 00000000 0x0 0x0
0xffffa40000022900 0001 00000000 0x0 0x0
0xffffa40000022980 0001 00000000 0x0 0x0
0xffffa40000022a00 0001 00000000 0x0 0x0
0xffffa40000022a80 0001 00000000 0x0 0x0
0xffffa40000022b00 0001 00000000 0x0 0x0
0xffffa40000022b80 0001 00000000 0x0 0x0
0xffffa40000022c00 0001 00000000 0x0 0x0
0xffffa40000022c80 0001 00000000 0x0 0x0
0xffffa40000022d00 0001 00000000 0x0 0x0
0xffffa40000022d80 0001 00000000 0x0 0x0
0xffffa40000022e00 0001 00000000 0x0 0x0
0xffffa40000022e80 0001 00000000 0x0 0x0
0xffffa40000022f00 0001 00000000 0x0 0x0
0xffffa40000022f80 0001 00000000 0x0 0x0
0xffffa40000023000 0001 00000000 0x0 0x0
0xffffa40000023080 0001 00000000 0x0 0x0
0xffffa40000023100 0001 00000000 0x0 0x0
0xffffa40000023180 0001 00000000 0x0 0x0
0xffffa40000023200 0001 00000000 0x0 0x0
0xffffa40000023280 0001 00000000 0x0 0x0
0xffffa40000023300 0001 00000000 0x0 0x0
0xffffa40000023380 0001 00000000 0x0 0x0
0xffffa40000023400 0001 00000000 0x0 0x0
0xffffa40000023480 0001 00000000 0x0 0x0
0xffffa40000023500 0001 00000000 0x0 0x0
0xffffa40000023580 0001 00000000 0x0 0x0
0xffffa40000023600 0001 00000000 0x0 0x0
0xffffa40000023680 0001 00000000 0x0 0x0
0xffffa40000023700 0001 00000000 0x0 0x0
0xffffa40000023780 0001 00000000 0x0 0x0
0xffffa40000023800 0001 00000000 0x0 0x0
0xffffa40000023880 0001 00000000 0x0 0x0
0xffffa40000023900 0001 00000000 0x0 0x0
0xffffa40000023980 0001 00000000 0x0 0x0
0xffffa40000023a00 0001 00000000 0x0 0x0
0xffffa40000023a80 0001 00000000 0x0 0x0
0xffffa40000023b00 0001 00000000 0x0 0x0
0xffffa40000023b80 0001 00000000 0x0 0x0
0xffffa40000023c00 0001 00000000 0x0 0x0
0xffffa40000023c80 0001 00000000 0x0 0x0
0xffffa40000023d00 0001 00000000 0x0 0x0
0xffffa40000023d80 0001 00000000 0x0 0x0
0xffffa40000023e00 0001 00000000 0x0 0x0
0xffffa40000023e80 0001 00000000 0x0 0x0
0xffffa40000023f00 0001 00000000 0x0 0x0
0xffffa40000023f80 0001 00000000 0x0 0x0
0xffffa40000024000 0001 00000000 0x0 0x0
0xffffa40000024080 0001 00000000 0x0 0x0
0xffffa40000024100 0001 00000000 0x0 0x0
0xffffa40000024180 0001 00000000 0x0 0x0
0xffffa40000024200 0001 00000000 0x0 0x0
0xffffa40000024280 0001 00000000 0x0 0x0
0xffffa40000024300 0001 00000000 0x0 0x0
0xffffa40000024380 0001 00000000 0x0 0x0
0xffffa40000024400 0001 00000000 0x0 0x0
0xffffa40000024480 0001 00000000 0x0 0x0
0xffffa40000024500 0001 00000000 0x0 0x0
0xffffa40000024580 0001 00000000 0x0 0x0
0xffffa40000024600 0001 00000000 0x0 0x0
0xffffa40000024680 0001 00000000 0x0 0x0
0xffffa40000024700 0001 00000000 0x0 0x0
0xffffa40000024780 0001 00000000 0x0 0x0
0xffffa40000024800 0001 00000000 0x0 0x0
0xffffa40000024880 0001 00000000 0x0 0x0
0xffffa40000024900 0001 00000000 0x0 0x0
0xffffa40000024980 0001 00000000 0x0 0x0
0xffffa40000024a00 0001 00000000 0x0 0x0
0xffffa40000024a80 0001 00000000 0x0 0x0
0xffffa40000024b00 0001 00000000 0x0 0x0
0xffffa40000024b80 0001 00000000 0x0 0x0
0xffffa40000024c00 0001 00000000 0x0 0x0
0xffffa40000024c80 0001 00000000 0x0 0x0
0xffffa40000024d00 0001 00000000 0x0 0x0
0xffffa40000024d80 0001 00000000 0x0 0x0
0xffffa40000024e00 0001 00000000 0x0 0x0
0xffffa40000024e80 0001 00000000 0x0 0x0
0xffffa40000024f00 0001 00000000 0x0 0x0
0xffffa40000024f80 0001 00000000 0x0 0x0
0xffffa40000025000 0001 00000000 0x0 0x0
0xffffa40000025080 0001 00000000 0x0 0x0
0xffffa40000025100 0001 00000000 0x0 0x0
0xffffa40000025180 0001 00000000 0x0 0x0
0xffffa40000025200 0001 00000000 0x0 0x0
0xffffa40000025280 0001 00000000 0x0 0x0
0xffffa40000025300 0001 00000000 0x0 0x0
0xffffa40000025380 0001 00000000 0x0 0x0
0xffffa40000025400 0001 00000000 0x0 0x0
0xffffa40000025480 0001 00000000 0x0 0x0
0xffffa40000025500 0001 00000000 0x0 0x0
0xffffa40000025580 0001 00000000 0x0 0x0
0xffffa40000025600 0001 00000000 0x0 0x0
0xffffa40000025680 0001 00000000 0x0 0x0
0xffffa40000025700 0001 00000000 0x0 0x0
0xffffa40000025780 0001 00000000 0x0 0x0
0xffffa40000025800 0001 00000000 0x0 0x0
0xffffa40000025880 0001 00000000 0x0 0x0
0xffffa40000025900 0001 00000000 0x0 0x0
0xffffa40000025980 0001 00000000 0x0 0x0
0xffffa40000025a00 0001 00000000 0x0 0x0
0xffffa40000025a80 0001 00000000 0x0 0x0
0xffffa40000025b00 0001 00000000 0x0 0x0
0xffffa40000025b80 0001 00000000 0x0 0x0
0xffffa40000025c00 0001 00000000 0x0 0x0
0xffffa40000025c80 0001 00000000 0x0 0x0
0xffffa40000025d00 0001 00000000 0x0 0x0
0xffffa40000025d80 0001 00000000 0x0 0x0
0xffffa40000025e00 0001 00000000 0x0 0x0
0xffffa40000025e80 0001 00000000 0x0 0x0
0xffffa40000025f00 0001 00000000 0x0 0x0
0xffffa40000025f80 0001 00000000 0x0 0x0
0xffffa40000026000 0001 00000000 0x0 0x0
0xffffa40000026080 0001 00000000 0x0 0x0
0xffffa40000026100 0001 00000000 0x0 0x0
0xffffa40000026180 0001 00000000 0x0 0x0
0xffffa40000026200 0001 00000000 0x0 0x0
0xffffa40000026280 0001 00000000 0x0 0x0
0xffffa40000026300 0001 00000000 0x0 0x0
0xffffa40000026380 0001 00000000 0x0 0x0
0xffffa40000026400 0001 00000000 0x0 0x0
0xffffa40000026480 0001 00000000 0x0 0x0
0xffffa40000026500 0001 00000000 0x0 0x0
0xffffa40000026580 0001 00000000 0x0 0x0
0xffffa40000026600 0001 00000000 0x0 0x0
0xffffa40000026680 0001 00000000 0x0 0x0
0xffffa40000026700 0001 00000000 0x0 0x0
0xffffa40000026780 0001 00000000 0x0 0x0
0xffffa40000026800 0001 00000000 0x0 0x0
0xffffa40000026880 0001 00000000 0x0 0x0
0xffffa40000026900 0001 00000000 0x0 0x0
0xffffa40000026980 0001 00000000 0x0 0x0
0xffffa40000026a00 0001 00000000 0x0 0x0
0xffffa40000026a80 0001 00000000 0x0 0x0
0xffffa40000026b00 0001 00000000 0x0 0x0
0xffffa40000026b80 0001 00000000 0x0 0x0
0xffffa40000026c00 0001 00000000 0x0 0x0
0xffffa40000026c80 0001 00000000 0x0 0x0
0xffffa40000026d00 0001 00000000 0x0 0x0
0xffffa40000026d80 0001 00000000 0x0 0x0
0xffffa40000026e00 0001 00000000 0x0 0x0
0xffffa40000026e80 0001 00000000 0x0 0x0
0xffffa40000026f00 0001 00000000 0x0 0x0
0xffffa40000026f80 0001 00000000 0x0 0x0
0xffffa40000027000 0001 00000000 0x0 0x0
0xffffa40000027080 0001 00000000 0x0 0x0
0xffffa40000027100 0001 00000000 0x0 0x0
0xffffa40000027180 0001 00000000 0x0 0x0
0xffffa40000027200 0001 00000000 0x0 0x0
0xffffa40000027280 0001 00000000 0x0 0x0
0xffffa40000027300 0001 00000000 0x0 0x0
0xffffa40000027380 0001 00000000 0x0 0x0
0xffffa40000027400 0001 00000000 0x0 0x0
0xffffa40000027480 0001 00000000 0x0 0x0
0xffffa40000027500 0001 00000000 0x0 0x0
0xffffa40000027580 0001 00000000 0x0 0x0
0xffffa40000027600 0001 00000000 0x0 0x0
0xffffa40000027680 0001 00000000 0x0 0x0
0xffffa40000027700 0001 00000000 0x0 0x0
0xffffa40000027780 0001 00000000 0x0 0x0
0xffffa40000027800 0001 00000000 0x0 0x0
0xffffa40000027880 0001 00000000 0x0 0x0
0xffffa40000027900 0001 00000000 0x0 0x0
0xffffa40000027980 0001 00000000 0x0 0x0
0xffffa40000027a00 0001 00000000 0x0 0x0
0xffffa40000027a80 0001 00000000 0x0 0x0
0xffffa40000027b00 0001 00000000 0x0 0x0
0xffffa40000027b80 0001 00000000 0x0 0x0
0xffffa40000027c00 0001 00000000 0x0 0x0
0xffffa40000027c80 0001 00000000 0x0 0x0
0xffffa40000027d00 0001 00000000 0x0 0x0
0xffffa40000027d80 0001 00000000 0x0 0x0
0xffffa40000027e00 0001 00000000 0x0 0x0
0xffffa40000027e80 0001 00000000 0x0 0x0
0xffffa40000027f00 0001 00000000 0x0 0x0
0xffffa40000027f80 0001 00000000 0x0 0x0
0xffffa40000028000 0001 00000000 0x0 0x0
0xffffa40000028080 0001 00000000 0x0 0x0
0xffffa40000028100 0001 00000000 0x0 0x0
0xffffa40000028180 0001 00000000 0x0 0x0
0xffffa40000028200 0001 00000000 0x0 0x0
0xffffa40000028280 0001 00000000 0x0 0x0
0xffffa40000028300 0001 00000000 0x0 0x0
0xffffa40000028380 0001 00000000 0x0 0x0
0xffffa40000028400 0001 00000000 0x0 0x0
0xffffa40000028480 0001 00000000 0x0 0x0
0xffffa40000028500 0001 00000000 0x0 0x0
0xffffa40000028580 0001 00000000 0x0 0x0
0xffffa40000028600 0001 00000000 0x0 0x0
0xffffa40000028680 0001 00000000 0x0 0x0
0xffffa40000028700 0001 00000000 0x0 0x0
0xffffa40000028780 0001 00000000 0x0 0x0
0xffffa40000028800 0001 00000000 0x0 0x0
0xffffa40000028880 0001 00000000 0x0 0x0
0xffffa40000028900 0001 00000000 0x0 0x0
0xffffa40000028980 0001 00000000 0x0 0x0
0xffffa40000028a00 0001 00000000 0x0 0x0
0xffffa40000028a80 0001 00000000 0x0 0x0
0xffffa40000028b00 0001 00000000 0x0 0x0
0xffffa40000028b80 0001 00000000 0x0 0x0
0xffffa40000028c00 0001 00000000 0x0 0x0
0xffffa40000028c80 0001 00000000 0x0 0x0
0xffffa40000028d00 0001 00000000 0x0 0x0
0xffffa40000028d80 0001 00000000 0x0 0x0
0xffffa40000028e00 0001 00000000 0x0 0x0
0xffffa40000028e80 0001 00000000 0x0 0x0
0xffffa40000028f00 0001 00000000 0x0 0x0
0xffffa40000028f80 0001 00000000 0x0 0x0
0xffffa40000029000 0001 00000000 0x0 0x0
0xffffa40000029080 0001 00000000 0x0 0x0
0xffffa40000029100 0001 00000000 0x0 0x0
0xffffa40000029180 0001 00000000 0x0 0x0
0xffffa40000029200 0001 00000000 0x0 0x0
0xffffa40000029280 0001 00000000 0x0 0x0
0xffffa40000029300 0001 00000000 0x0 0x0
0xffffa40000029380 0001 00000000 0x0 0x0
0xffffa40000029400 0001 00000000 0x0 0x0
0xffffa40000029480 0001 00000000 0x0 0x0
0xffffa40000029500 0001 00000000 0x0 0x0
0xffffa40000029580 0001 00000000 0x0 0x0
0xffffa40000029600 0001 00000000 0x0 0x0
0xffffa40000029680 0001 00000000 0x0 0x0
0xffffa40000029700 0001 00000000 0x0 0x0
0xffffa40000029780 0001 00000000 0x0 0x0
0xffffa40000029800 0001 00000000 0x0 0x0
0xffffa40000029880 0001 00000000 0x0 0x0
0xffffa40000029900 0001 00000000 0x0 0x0
0xffffa40000029980 0001 00000000 0x0 0x0
0xffffa40000029a00 0001 00000000 0x0 0x0
0xffffa40000029a80 0001 00000000 0x0 0x0
0xffffa40000029b00 0001 00000000 0x0 0x0
0xffffa40000029b80 0001 00000000 0x0 0x0
0xffffa40000029c00 0001 00000000 0x0 0x0
0xffffa40000029c80 0001 00000000 0x0 0x0
0xffffa40000029d00 0001 00000000 0x0 0x0
0xffffa40000029d80 0001 00000000 0x0 0x0
0xffffa40000029e00 0001 00000000 0x0 0x0
0xffffa40000029e80 0001 00000000 0x0 0x0
0xffffa40000029f00 0001 00000000 0x0 0x0
0xffffa40000029f80 0001 00000000 0x0 0x0
0xffffa4000002a000 0001 00000000 0x0 0x0
0xffffa4000002a080 0001 00000000 0x0 0x0
0xffffa4000002a100 0001 00000000 0x0 0x0
0xffffa4000002a180 0001 00000000 0x0 0x0
0xffffa4000002a200 0001 00000000 0x0 0x0
0xffffa4000002a280 0001 00000000 0x0 0x0
0xffffa4000002a300 0001 00000000 0x0 0x0
0xffffa4000002a380 0001 00000000 0x0 0x0
0xffffa4000002a400 0001 00000000 0x0 0x0
0xffffa4000002a480 0001 00000000 0x0 0x0
0xffffa4000002a500 0001 00000000 0x0 0x0
0xffffa4000002a580 0001 00000000 0x0 0x0
0xffffa4000002a600 0001 00000000 0x0 0x0
0xffffa4000002a680 0001 00000000 0x0 0x0
0xffffa4000002a700 0001 00000000 0x0 0x0
0xffffa4000002a780 0001 00000000 0x0 0x

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

If the bug is already fixed, let syzbot know by replying with:
#syz fix: exact-commit-title

If you want to change bug's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)

If the bug is a duplicate of another bug, reply with:
#syz dup: exact-subject-of-another-report

If you want to undo deduplication, reply with:
#syz undup

syzbot

unread,

Jun 24, 2023, 10:47:42 AM6/24/23

to syzkaller-...@googlegroups.com

syzbot has found a reproducer for the following issue on:

HEAD commit: ff64ec040733 tsleep: Comment out kernel lock assertion for..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=126c4557280000

kernel config: https://syzkaller.appspot.com/x/.config?x=fab579639ba4bf0a
dashboard link: https://syzkaller.appspot.com/bug?extid=943d1bd5715b02a0014e
compiler: g++ (Debian 10.2.1-6) 10.2.1 20210110

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=11362b3f280000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=14f0803b280000

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/8633f9ff8dd4/disk-ff64ec04.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/c7eb9e4ad451/netbsd-ff64ec04.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+943d1b...@syzkaller.appspotmail.com

[ 53.1659737] panic: ASan: Unauthorized Access In 0xffffffff81d34561: Addr 0xffffdd8012e0d590 [8 bytes, read, PoolUseAfterFree]

[ 53.1775448] cpu0: Begin traceback...
[ 53.1959488] vpanic() at netbsd:vpanic+0x282 sys/kern/subr_prf.c:292
[ 53.2559502] panic() at netbsd:panic+0x9e sys/kern/subr_prf.c:1060
[ 53.3059649] kasan_report() at netbsd:kasan_report+0x8f kasan_code_name sys/kern/subr_asan.c:169 [inline]
[ 53.3059649] kasan_report() at netbsd:kasan_report+0x8f sys/kern/subr_asan.c:201
[ 53.3559506] __asan_load8() at netbsd:__asan_load8+0xac kasan_shadow_8byte_isvalid sys/kern/subr_asan.c:371 [inline]
[ 53.3559506] __asan_load8() at netbsd:__asan_load8+0xac kasan_shadow_check sys/kern/subr_asan.c:421 [inline]
[ 53.3559506] __asan_load8() at netbsd:__asan_load8+0xac sys/kern/subr_asan.c:1208
[ 53.3959513] dkwedge_add() at netbsd:dkwedge_add+0x48a sys/dev/dkwedge/dk.c:639
[ 53.4459464] disk_ioctl() at netbsd:disk_ioctl+0x161 sys/kern/subr_disk.c:634
[ 53.4859474] dk_ioctl() at netbsd:dk_ioctl+0x1b2 sys/dev/dksubr.c:642
[ 53.5360146] sdioctl() at netbsd:sdioctl+0xa12 sys/dev/scsipi/sd.c:1005
[ 53.5759481] cdev_ioctl() at netbsd:cdev_ioctl+0x197 sys/kern/subr_devsw.c:1525
[ 53.6259593] spec_ioctl() at netbsd:spec_ioctl+0x148 sys/miscfs/specfs/spec_vnops.c:1331
[ 53.6659483] VOP_IOCTL() at netbsd:VOP_IOCTL+0x132 sys/kern/vnode_if.c:933
[ 53.7159507] vn_ioctl() at netbsd:vn_ioctl+0x1c4 sys/kern/vfs_vnops.c:892
[ 53.7659486] sys_ioctl() at netbsd:sys_ioctl+0x8f6 sys/kern/sys_generic.c:675
[ 53.8059688] sys_syscall() at netbsd:sys_syscall+0x10e sy_call sys/sys/syscallvar.h:65 [inline]
[ 53.8059688] sys_syscall() at netbsd:sys_syscall+0x10e sys/kern/sys_syscall.c:90
[ 53.8559516] syscall() at netbsd:syscall+0x25a sy_call sys/sys/syscallvar.h:65 [inline]
[ 53.8559516] syscall() at netbsd:syscall+0x25a sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 53.8559516] syscall() at netbsd:syscall+0x25a sys/arch/x86/x86/syscall.c:138
[ 53.8659491] --- syscall (number 54 via SYS_syscall) ---
[ 53.8859483] netbsd:syscall+0x25a:
[ 53.8859483] cpu0: End traceback...
[ 53.8968517] fatal breakpoint trap in supervisor mode
[ 53.8968517] trap type 1 code 0 rip 0xffffffff8023241d cs 0x8 rflags 0x286 cr2 0x7748d587cc50 ilevel 0 rsp 0xffffdd8248601390
[ 53.9127831] curlwp 0xffffdd8013d4e6c0 pid 1243.1204 lowest kstack 0xffffdd82485fa2c0
Stopped in pid 1243.1204 (syz-executor3206) at netbsd:breakpoint+0x5: leave

?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0x105 sys/ddb/db_panic.c:69
vpanic() at netbsd:vpanic+0x282 sys/kern/subr_prf.c:292
panic() at netbsd:panic+0x9e sys/kern/subr_prf.c:1060
kasan_report() at netbsd:kasan_report+0x8f kasan_code_name sys/kern/subr_asan.c:169 [inline]
kasan_report() at netbsd:kasan_report+0x8f sys/kern/subr_asan.c:201
__asan_load8() at netbsd:__asan_load8+0xac kasan_shadow_8byte_isvalid sys/kern/subr_asan.c:371 [inline]
__asan_load8() at netbsd:__asan_load8+0xac kasan_shadow_check sys/kern/subr_asan.c:421 [inline]
__asan_load8() at netbsd:__asan_load8+0xac sys/kern/subr_asan.c:1208

dkwedge_add() at netbsd:dkwedge_add+0x48a sys/dev/dkwedge/dk.c:639

disk_ioctl() at netbsd:disk_ioctl+0x161 sys/kern/subr_disk.c:634
dk_ioctl() at netbsd:dk_ioctl+0x1b2 sys/dev/dksubr.c:642
sdioctl() at netbsd:sdioctl+0xa12 sys/dev/scsipi/sd.c:1005
cdev_ioctl() at netbsd:cdev_ioctl+0x197 sys/kern/subr_devsw.c:1525
spec_ioctl() at netbsd:spec_ioctl+0x148 sys/miscfs/specfs/spec_vnops.c:1331

VOP_IOCTL() at netbsd:VOP_IOCTL+0x132 sys/kern/vnode_if.c:933

vn_ioctl() at netbsd:vn_ioctl+0x1c4 sys/kern/vfs_vnops.c:892
sys_ioctl() at netbsd:sys_ioctl+0x8f6 sys/kern/sys_generic.c:675

sys_syscall() at netbsd:sys_syscall+0x10e sy_call sys/sys/syscallvar.h:65 [inline]
sys_syscall() at netbsd:sys_syscall+0x10e sys/kern/sys_syscall.c:90

syscall() at netbsd:syscall+0x25a sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x25a sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x25a sys/arch/x86/x86/syscall.c:138
--- syscall (number 54 via SYS_syscall) ---
netbsd:syscall+0x25a:

Panic string: ASan: Unauthorized Access In 0xffffffff81d34561: Addr 0xffffdd8012e0d590 [8 bytes, read, PoolUseAfterFree]

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT

1200 1200 2 0 0 ffffdd80133ea280 syz-executor3206
1205 1205 2 0 0 ffffdd8012bc4a00 syz-executor3206
1109 1074 3 0 180 ffffdd8013d4eb00 syz-executor3206 parked
1109 1109 2 0 10000000 ffffdd8013d33680 syz-executor3206
1246 1206 2 0 100 ffffdd8013d62700 syz-executor3206
1246 1246 2 0 10000000 ffffdd8013d13a80 syz-executor3206
930 1073 3 1 0 ffffdd8012bc4180 syz-executor3206 cfgmisc
930 930 2 1 10000000 ffffdd8013d13640 syz-executor3206
1243 >1204 7 0 100 ffffdd8013d4e6c0 syz-executor3206
1243 1243 2 0 10000000 ffffdd8013cf3a40 syz-executor3206
1240 1240 2 1 140 ffffdd8013cf3600 syz-executor3206
1065 1065 2 1 140 ffffdd8013cf31c0 syz-executor3206
1244 1244 2 1 140 ffffdd801342f700 syz-executor3206
829 829 2 0 40 ffffdd80133c7a80 syz-executor3206
991 > 991 7 1 140 ffffdd80133d3ac0 syz-executor3206
449 449 2 1 140 ffffdd80133d3240 syz-executor3206
942 942 3 0 180 ffffdd8012b74100 syz-executor3206 nanoslp
1080 1080 3 0 180 ffffdd8012b74540 sshd select
1225 1225 3 0 180 ffffdd80126eb480 getty nanoslp
1082 1082 3 0 180 ffffdd80134b35c0 getty nanoslp
1128 1128 3 0 180 ffffdd80134b3180 getty nanoslp
1184 1184 3 0 1c0 ffffdd80126eabc0 getty ttyraw
1103 1103 3 0 180 ffffdd80133b6600 sshd select
1096 1096 3 1 180 ffffdd8012d91040 powerd kqueue
699 699 3 1 180 ffffdd801344fbc0 syslogd kqueue
559 559 3 0 180 ffffdd8012c20ac0 dhcpcd poll
746 746 3 0 180 ffffdd8012cd6100 dhcpcd poll
745 745 3 0 180 ffffdd8012c8ebc0 dhcpcd poll
599 599 3 0 180 ffffdd8012c326c0 dhcpcd poll
487 487 3 0 180 ffffdd8012dd40c0 dhcpcd poll
292 292 3 0 180 ffffdd8012dbc900 dhcpcd poll
485 485 3 1 180 ffffdd8012dbc4c0 dhcpcd poll
1 1 3 0 180 ffffdd8012877180 init wait
0 673 3 0 200 ffffdd80129a16c0 physiod physiod
0 196 3 0 200 ffffdd80129a3700 pooldrain pooldrain
0 195 2 0 240 ffffdd80129a32c0 ioflush
0 194 3 1 200 ffffdd80129a1b00 pgdaemon pgdaemon
0 167 3 1 200 ffffdd8012961ac0 usb7 usbevt
0 172 3 1 200 ffffdd8012961680 usb6 usbevt
0 170 3 1 200 ffffdd8012961240 usb5 usbevt
0 168 3 0 200 ffffdd8012915a80 usb4 usbevt
0 166 3 0 200 ffffdd8012915640 usb3 usbevt
0 165 3 0 200 ffffdd8012915200 usb2 usbevt
0 31 3 0 200 ffffdd80128d9a40 usb1 usbevt
0 63 3 0 200 ffffdd80128d9600 usb0 usbevt
0 126 3 1 200 ffffdd80128d91c0 usbtask-dr usbtsk
0 125 3 1 200 ffffdd8012877a00 usbtask-hc usbtsk
0 124 3 0 200 ffffdd8010d76b00 swwreboot swwreboot
0 123 3 0 200 ffffdd80128775c0 npfgc0 npfgcw
0 122 3 1 200 ffffdd801286a9c0 rt_free rt_free
0 121 3 1 200 ffffdd801286a580 unpgc unpgc
0 120 2 0 200 ffffdd801286a140 key_timehandler
0 119 3 1 200 ffffdd801271b980 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 ffffdd801271b540 icmp6_wqinput/0 icmp6_wqinput
0 117 2 0 200 ffffdd801271b100 nd6_timer
0 116 3 1 200 ffffdd8012713940 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 ffffdd8012713500 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 ffffdd80127130c0 carp_wqinput/1 carp_wqinput
0 113 3 0 200 ffffdd8012703900 carp_wqinput/0 carp_wqinput
0 112 3 1 200 ffffdd80127034c0 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 ffffdd8012703080 icmp_wqinput/0 icmp_wqinput
0 110 2 0 200 ffffdd80126eb8c0 rt_timer
0 109 3 0 200 ffffdd80126eb040 vmem_rehash vmem_rehash
0 100 3 0 200 ffffdd80126e7300 entbutler entropy
0 99 3 1 200 ffffdd80120bcb40 viomb balloon
0 98 3 1 200 ffffdd80120bc700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 ffffdd80120bc2c0 vioif0_txrx/0 vioif0_txrx
0 30 3 0 200 ffffdd8010d766c0 scsibus0 sccomp
0 29 3 0 200 ffffdd8010d76280 pms0 pmsreset
0 28 3 1 200 ffffdd8010cbcac0 xcall/1 xcall
0 27 1 1 200 ffffdd8010cbc680 softser/1
0 26 1 1 200 ffffdd8010cbc240 softclk/1
0 25 1 1 200 ffffdd8010cb9a80 softbio/1
0 24 1 1 200 ffffdd8010cb9640 softnet/1
0 23 1 1 201 ffffdd8010cb9200 idle/1
0 22 3 0 200 ffffdd800fb56a40 lnxsyswq lnxsyswq
0 21 3 0 200 ffffdd800fb56600 lnxubdwq lnxubdwq
0 20 3 0 200 ffffdd800fb561c0 lnxpwrwq lnxpwrwq
0 19 3 0 200 ffffdd800fb55a00 lnxlngwq lnxlngwq
0 18 3 0 200 ffffdd800fb555c0 lnxhipwq lnxhipwq
0 17 3 0 200 ffffdd800fb55180 lnxrcugc lnxrcugc
0 16 3 0 200 ffffdd800fb4e9c0 sysmon smtaskq
0 15 3 0 200 ffffdd800fb4e580 pmfsuspend pmfsuspend
0 14 3 0 200 ffffdd800fb4e140 pmfevent pmfevent
0 13 3 0 200 ffffdd800fb49980 sopendfree sopendfr
0 12 3 0 200 ffffdd800fb49540 ifwdog ifwdog
0 11 3 0 200 ffffdd800fb49100 iflnkst iflnkst
0 10 3 0 200 ffffdd800fb3c940 nfssilly nfssilly
0 9 3 0 200 ffffdd800fb3c500 vdrain vdrain
0 8 3 0 200 ffffdd800fb3c0c0 modunload mod_unld
0 7 3 0 200 ffffdd800fb33900 xcall/0 xcall
0 6 1 0 200 ffffdd800fb334c0 softser/0
0 5 1 0 200 ffffdd800fb33080 softclk/0
0 4 1 0 200 ffffdd800fb318c0 softbio/0
0 3 1 0 200 ffffdd800fb31480 softnet/0
0 2 1 0 201 ffffdd800fb31040 idle/0
0 0 2 0 240 ffffffff8334b900 swapper
[Locks tracked through LWPs]

****** LWP 1205.1205 (syz-executor3206) @ 0xffffdd8012bc4a00, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:uvmspace_alloc+0x174 uvm_map_setup sys/uvm/uvm_map.c:4789 [inline])
* Lock 0 (initialized at netbsd:uvmspace_alloc+0x174 uvmspace_init sys/uvm/uvm_map.c:4132 [inline])
* Lock 0 (initialized at netbsd:uvmspace_alloc+0x174 sys/uvm/uvm_map.c:4111)
lock address : ffffdd80133d14b0
type : sleep/adaptive
initialized : netbsd:uvmspace_alloc+0x174

shared holds : 0 exclusive: 0

shares wanted: 0 exclusive: 1
relevant cpu : 0 last held: 65535
relevant lwp : 0xffffdd8012bc4a00 last held: 000000000000000000
last locked : netbsd:uvm_fault_internal+0x344
unlocked* : netbsd:uvm_fault_internal+0x31f0
owner/count : 000000000000000000 flags : 000000000000000000

Turnstile: no active turnstile for this lock.

****** LWP 1109.1074 (syz-executor3206) @ 0xffffdd8013d4eb00, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:config_init+0x54 sys/kern/subr_autoconf.c:366)
lock address : netbsd:config_misc_lock
type : sleep/adaptive
initialized : netbsd:config_init+0x54
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0

relevant cpu : 0 last held: 1
relevant lwp : 0xffffdd8013d4eb00 last held: 000000000000000000
last locked : netbsd:localcount_drain+0xe4
unlocked* : netbsd:cv_enter+0x245

owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 1246.1206 (syz-executor3206) @ 0xffffdd8013d62700, l_stat=2

relevant cpu : 0 last held: 1
relevant lwp : 0xffffdd8013d62700 last held: 000000000000000000
last locked : netbsd:localcount_drain+0xe4
unlocked* : netbsd:cv_enter+0x245

owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 829.829 (syz-executor3206) @ 0xffffdd80133c7a80, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:procinit+0x5c sys/kern/kern_proc.c:386)
lock address : netbsd:proc_lock
type : sleep/adaptive
initialized : netbsd:procinit+0x5c

shared holds : 0 exclusive: 0

shares wanted: 0 exclusive: 1
relevant cpu : 0 last held: 1
relevant lwp : 0xffffdd80133c7a80 last held: 000000000000000000
last locked : netbsd:do_sys_waitid+0xed
unlocked* : netbsd:do_sys_waitid+0xdd8

owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 746.746 (dhcpcd) @ 0xffffdd8012cd6100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffffdd8012cd6100 last held: 000000000000000000