MSan: Uninitialized Memory in ip6_hopopts_input

0 views

Skip to first unread message

syzbot

unread,

Apr 16, 2024, 2:49:22 PMApr 16

to syzkaller-...@googlegroups.com

Hello,

syzbot found the following issue on:

HEAD commit: 124fe5e84c3f Mipsn64* has no 64bit compat, its userland is..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=14c3a61b180000
kernel config: https://syzkaller.appspot.com/x/.config?x=739e57438eb9ed9e
dashboard link: https://syzkaller.appspot.com/bug?extid=587e3b707bdfe533283f
compiler: Debian clang version 15.0.6

Unfortunately, I don't have any reproducer for this issue yet.

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/1d58370f534a/disk-124fe5e8.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/e2a7ff09b5a0/netbsd-124fe5e8.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+587e3b...@syzkaller.appspotmail.com

[ 335.8847541] panic: MSan: Uninitialized Variable 'dummy1' From ip6_output()

[ 335.8947165] cpu1: Begin traceback...
[ 335.9347188] vpanic() at netbsd:vpanic+0xc9d
[ 336.0047220] panic() at netbsd:panic+0x1b3 sys/kern/subr_prf.c:209
[ 336.0747179] __msan_warning() at netbsd:__msan_warning+0x11e kmsan_report_inline sys/kern/subr_msan.c:250 [inline]
[ 336.0747179] __msan_warning() at netbsd:__msan_warning+0x11e sys/kern/subr_msan.c:631
[ 336.1447245] ip6_hopopts_input() at netbsd:ip6_hopopts_input+0xd70 ip6_process_hopopts sys/netinet6/ip6_input.c:985 [inline]
[ 336.1447245] ip6_hopopts_input() at netbsd:ip6_hopopts_input+0xd70 sys/netinet6/ip6_input.c:882
[ 336.2147175] ip6_output() at netbsd:ip6_output+0x875a sys/netinet6/ip6_output.c:761
[ 336.2847184] rip6_output() at netbsd:rip6_output+0x1e26 sys/netinet6/raw_ip6.c:508
[ 336.3647330] rip6_send_wrapper() at netbsd:rip6_send_wrapper+0x413 rip6_send sys/netinet6/raw_ip6.c:907 [inline]
[ 336.3647330] rip6_send_wrapper() at netbsd:rip6_send_wrapper+0x413 sys/netinet6/raw_ip6.c:986
[ 336.4447239] sosend() at netbsd:sosend+0x426c
[ 336.5147172] soo_write() at netbsd:soo_write+0x105 sys/kern/sys_socket.c:126
[ 336.5847177] dofilewrite() at netbsd:dofilewrite+0x360 sys/kern/sys_generic.c:352
[ 336.6547166] sys_write() at netbsd:sys_write+0x259 sys/kern/sys_generic.c:320
[ 336.7247226] sys___syscall() at netbsd:sys___syscall+0x2ae sy_call sys/sys/syscallvar.h:65 [inline]
[ 336.7247226] sys___syscall() at netbsd:sys___syscall+0x2ae sys/kern/sys_syscall.c:90
[ 336.8047160] syscall() at netbsd:syscall+0x576 sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 336.8047160] syscall() at netbsd:syscall+0x576 sys/arch/x86/x86/syscall.c:137
[ 336.8247161] --- syscall (number 4 via SYS_syscall) ---
[ 336.8447240] netbsd:syscall+0x576:
[ 336.8447240] cpu1: End traceback...
[ 336.8547151] fatal breakpoint trap in supervisor mode
[ 336.8547151] trap type 1 code 0 rip 0xffffffff8023687d cs 0x8 rflags 0x286 cr2 0x20011000 ilevel 0x4 rsp 0xffffaf80d0becdf0
[ 336.8647253] curlwp 0xffffaf80138a56c0 pid 8370.7970 lowest kstack 0xffffaf80d0be62c0
Stopped in pid 8370.7970 (syz-executor.3) at netbsd:breakpoint+0x5: leave
?
breakpoint() at netbsd:breakpoint+0x5
vpanic() at netbsd:vpanic+0xc9d
panic() at netbsd:panic+0x1b3 sys/kern/subr_prf.c:209
__msan_warning() at netbsd:__msan_warning+0x11e kmsan_report_inline sys/kern/subr_msan.c:250 [inline]
__msan_warning() at netbsd:__msan_warning+0x11e sys/kern/subr_msan.c:631
ip6_hopopts_input() at netbsd:ip6_hopopts_input+0xd70 ip6_process_hopopts sys/netinet6/ip6_input.c:985 [inline]
ip6_hopopts_input() at netbsd:ip6_hopopts_input+0xd70 sys/netinet6/ip6_input.c:882
ip6_output() at netbsd:ip6_output+0x875a sys/netinet6/ip6_output.c:761
rip6_output() at netbsd:rip6_output+0x1e26 sys/netinet6/raw_ip6.c:508
rip6_send_wrapper() at netbsd:rip6_send_wrapper+0x413 rip6_send sys/netinet6/raw_ip6.c:907 [inline]
rip6_send_wrapper() at netbsd:rip6_send_wrapper+0x413 sys/netinet6/raw_ip6.c:986
sosend() at netbsd:sosend+0x426c
soo_write() at netbsd:soo_write+0x105 sys/kern/sys_socket.c:126
dofilewrite() at netbsd:dofilewrite+0x360 sys/kern/sys_generic.c:352
sys_write() at netbsd:sys_write+0x259 sys/kern/sys_generic.c:320
sys___syscall() at netbsd:sys___syscall+0x2ae sy_call sys/sys/syscallvar.h:65 [inline]
sys___syscall() at netbsd:sys___syscall+0x2ae sys/kern/sys_syscall.c:90
syscall() at netbsd:syscall+0x576 sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x576 sys/arch/x86/x86/syscall.c:137
--- syscall (number 4 via SYS_syscall) ---
netbsd:syscall+0x576:
Panic string: MSan: Uninitialized Variable 'dummy1' From ip6_output()

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
7206 7206 2 0 0 ffffaf80138a5280 syz-executor.2
8368 8368 2 0 0 ffffaf8013553140 syz-executor.4
7587 27841 2 0 0 ffffaf801353d100 syz-executor.5
7587 7587 2 0 10000000 ffffaf80137e6240 syz-executor.5
8370 > 7970 7 1 0 ffffaf80138a56c0 syz-executor.3
8370 8370 2 1 10000000 ffffaf80137cba80 syz-executor.3
7137 7310 2 0 100100 ffffaf80135539c0 syz-executor.1
7137 5326 3 1 40180 ffffaf80138a5b00 syz-executor.1 fiford
7137 7137 2 0 10000140 ffffaf80138c42c0 syz-executor.1
5778 5778 2 0 140 ffffaf8012c38940 syz-executor.1
26556 26556 2 1 0 ffffaf80137cb640 syz-executor.0
22588 22588 3 1 180 ffffaf80137cb200 syz-executor.2 nanoslp
16084 16084 3 1 180 ffffaf8013a61780 syz-executor.4 nanoslp
8042 8042 3 1 180 ffffaf8013553580 syz-executor.3 nanoslp
1072 > 1072 7 0 140 ffffaf801361a180 syz-executor.5
1195 17868 3 1 180 ffffaf80138c4b40 syz-fuzzer kqueue
1195 1894 3 1 180 ffffaf801374d600 syz-fuzzer parked
1195 1069 3 0 180 ffffaf801374d1c0 syz-fuzzer parked
1195 942 3 0 180 ffffaf801361aa00 syz-fuzzer wait
1195 1079 3 1 180 ffffaf801361a5c0 syz-fuzzer wait
1195 1074 3 1 180 ffffaf801353d980 syz-fuzzer wait
1195 1242 3 0 180 ffffaf801353d540 syz-fuzzer parked
1195 929 3 1 180 ffffaf8012c38500 syz-fuzzer wait
1195 930 3 1 180 ffffaf8012c380c0 syz-fuzzer wait
1195 1106 3 0 180 ffffaf8012c1c900 syz-fuzzer parked
1195 943 3 1 180 ffffaf8012c1c4c0 syz-fuzzer wait
1195 1235 3 1 180 ffffaf8012c1c080 syz-fuzzer parked
1195 1239 3 0 180 ffffaf801234d2c0 syz-fuzzer parked
1195 1233 3 1 180 ffffaf8012320b00 syz-fuzzer parked
1195 1195 3 1 180 ffffaf80123206c0 syz-fuzzer parked
1238 1238 3 0 180 ffffaf8012535300 sshd select
1083 1083 3 1 180 ffffaf8012b7f8c0 getty nanoslp
1223 1223 3 1 180 ffffaf8012320280 getty nanoslp
1224 1224 3 0 180 ffffaf8012284ac0 getty nanoslp
1216 1216 3 0 180 ffffaf80121e6200 getty ttyraw
1116 1116 3 0 180 ffffaf8012b7f480 sshd select
1098 1098 3 0 180 ffffaf8012b7f040 powerd kqueue
800 800 3 0 180 ffffaf8012564bc0 syslogd kqueue
606 606 3 0 180 ffffaf801234d700 dhcpcd poll
744 744 3 0 180 ffffaf8012535b80 dhcpcd poll
748 748 3 0 180 ffffaf8012564780 dhcpcd poll
487 487 3 0 180 ffffaf8012564340 dhcpcd poll
292 292 3 0 180 ffffaf801234db40 dhcpcd poll
485 485 3 0 180 ffffaf8012535740 dhcpcd poll
1 1 3 0 180 ffffaf8011e61100 init wait
0 5626 5 0 200 ffffaf80137e6ac0 (zombie)
0 21069 3 0 200 ffffaf801374da40 ktrace ktrwait
0 3664 3 1 200 ffffaf80137e6680 acctwatch actwat
0 875 3 0 200 ffffaf80121e6640 physiod physiod
0 196 3 1 200 ffffaf8012284680 pooldrain pooldrain
0 195 3 1 200 ffffaf8012284240 ioflush syncer
0 194 3 0 200 ffffaf80121e6a80 pgdaemon pgdaemon
0 169 3 1 200 ffffaf80121b6a40 usb7 usbevt
0 172 3 1 200 ffffaf80121b6600 usb6 usbevt
0 170 3 1 200 ffffaf80121b61c0 usb5 usbevt
0 168 3 0 200 ffffaf801212aa00 usb4 usbevt
0 166 3 1 200 ffffaf801212a5c0 usb3 usbevt
0 165 3 0 200 ffffaf801212a180 usb2 usbevt
0 31 3 0 200 ffffaf801207a9c0 usb1 usbevt
0 63 3 1 200 ffffaf801207a580 usb0 usbevt
0 126 3 0 200 ffffaf801207a140 usbtask-dr usbtsk
0 125 3 1 200 ffffaf8011e61980 usbtask-hc usbtsk
0 124 3 0 200 ffffaf80103e2b00 swwreboot swwreboot
0 123 3 0 200 ffffaf8011e61540 npfgc0 npfgcw
0 122 3 0 200 ffffaf8011e56940 rt_free rt_free
0 121 3 1 200 ffffaf8011e56500 unpgc unpgc
0 120 3 0 200 ffffaf8011e560c0 key_timehandler key_timehandler
0 119 3 1 200 ffffaf8011e50900 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 ffffaf8011e504c0 icmp6_wqinput/0 icmp6_wqinput
0 117 3 1 200 ffffaf8011e50080 nd6_timer nd6_timer
0 116 3 1 200 ffffaf8011cdbbc0 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 ffffaf8011cdb780 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 ffffaf8011cdb340 carp_wqinput/1 carp_wqinput
0 113 3 0 200 ffffaf8011cdc8c0 carp_wqinput/0 carp_wqinput
0 112 3 1 200 ffffaf8011cdc480 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 ffffaf8011cdc040 icmp_wqinput/0 icmp_wqinput
0 110 3 1 200 ffffaf8011cd8740 rt_timer rt_timer
0 109 3 0 200 ffffaf8011cd8b80 vmem_rehash vmem_rehash
0 100 3 1 200 ffffaf8011cd8300 entbutler entropy
0 99 3 0 200 ffffaf80117cfb40 viomb balloon
0 98 3 1 200 ffffaf80117cf700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 ffffaf80117cf2c0 vioif0_txrx/0 vioif0_txrx
0 30 3 0 200 ffffaf80103e26c0 scsibus0 sccomp
0 29 3 0 200 ffffaf80103e2280 pms0 pmsreset
0 28 3 1 200 ffffaf80103c9ac0 xcall/1 xcall
0 27 1 1 200 ffffaf80103c9680 softser/1
0 26 1 1 200 ffffaf80103c9240 softclk/1
0 25 1 1 200 ffffaf80103c5a80 softbio/1
0 24 1 1 200 ffffaf80103c5640 softnet/1
0 23 1 1 201 ffffaf80103c5200 idle/1
0 22 3 0 200 ffffaf800f1e1a40 lnxsyswq lnxsyswq
0 21 3 0 200 ffffaf800f1e1600 lnxubdwq lnxubdwq
0 20 3 0 200 ffffaf800f1e11c0 lnxpwrwq lnxpwrwq
0 19 3 0 200 ffffaf800f1dfa00 lnxlngwq lnxlngwq
0 18 3 0 200 ffffaf800f1df5c0 lnxhipwq lnxhipwq
0 17 3 0 200 ffffaf800f1df180 lnxrcugc lnxrcugc
0 16 3 0 200 ffffaf800f1d99c0 sysmon smtaskq
0 15 3 0 200 ffffaf800f1d9580 pmfsuspend pmfsuspend
0 14 3 1 200 ffffaf800f1d9140 pmfevent pmfevent
0 13 3 0 200 ffffaf800f1d7980 sopendfree sopendfr
0 12 3 0 200 ffffaf800f1d7540 ifwdog ifwdog
0 11 3 1 200 ffffaf800f1d7100 iflnkst iflnkst
0 10 3 0 200 ffffaf800f1cc940 nfssilly nfssilly
0 9 3 0 200 ffffaf800f1cc500 pooldisp pooldisp
0 8 3 1 200 ffffaf800f1cc0c0 modunload mod_unld
0 7 3 0 200 ffffaf800ebd8900 xcall/0 xcall
0 6 1 0 200 ffffaf800ebd84c0 softser/0
0 > 5 7 0 200 ffffaf800ebd8080 softclk/0
0 4 1 0 200 ffffaf800ebd78c0 softbio/0
0 3 1 0 200 ffffaf800ebd7480 softnet/0
0 2 1 0 201 ffffaf800ebd7040 idle/0
0 0 3 0 200 ffffffff8686e280 swapper uvm
[Locks tracked through LWPs]

****** LWP 7206.7206 (syz-executor.2) @ 0xffffaf80138a5280, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:pmap_ctor+0xc0 sys/arch/x86/x86/pmap.c:2872)
lock address : ffffaf80125328c0
type : sleep/adaptive
initialized : netbsd:pmap_ctor+0xc0
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffaf80138a5280 last held: 0xffffaf80138a5280
last locked* : netbsd:pmap_enter_ma+0x11ce
unlocked : netbsd:pmap_extract+0x72d
owner field : 0xffffaf80138a5280 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 8368.8368 (syz-executor.4) @ 0xffffaf8013553140, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:pmap_ctor+0xc0 sys/arch/x86/x86/pmap.c:2872)
lock address : ffffaf8011e5fa80
type : sleep/adaptive
initialized : netbsd:pmap_ctor+0xc0
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1
relevant cpu : 0 last held: 0
relevant lwp : 0xffffaf8013553140 last held: 000000000000000000
last locked : netbsd:pmap_enter_ma+0x11ce
unlocked* : netbsd:pmap_enter_ma+0x6f3f
owner field : 0xffffaf8013553140 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 7587.7587 (syz-executor.5) @ 0xffffaf80137e6240, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:amap_ctor+0xdf sys/uvm/uvm_amap.c:265)
lock address : ffffaf8013634340
type : sleep/adaptive
initialized : netbsd:amap_ctor+0xdf
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffaf80137e6240 last held: 0xffffaf80137e6240
last locked* : netbsd:uvm_fault_internal+0x1d08
unlocked : netbsd:uvm_fault_upper_enter+0x12e9
owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:pmap_ctor+0xc0 sys/arch/x86/x86/pmap.c:2872)
lock address : ffffaf8012c24540
type : sleep/adaptive
initialized : netbsd:pmap_ctor+0xc0
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffaf80137e6240 last held: 0xffffaf80137e6240
last locked* : netbsd:pmap_enter_ma+0x11ce
unlocked : netbsd:uvmfault_promote+0xcbe
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

* Lock 2 (initialized at netbsd:pmap_ctor+0xd6 sys/arch/x86/x86/pmap.c:2873)
lock address : ffffaf8012c24548
type : sleep/adaptive
initialized : netbsd:pmap_ctor+0xd6
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffaf80137e6240 last held: 0xffffaf80137e6240
last locked* : netbsd:pmap_enter_ma+0x1580
unlocked : netbsd:pmap_enter_ma+0x19f2
owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

*** Locks wanted:

* Lock 0 (initialized at netbsd:uvm_page_init+0x114 sys/uvm/uvm_page.c:350)
lock address : netbsd:uvm_freelist_locks
type : spin
initialized : netbsd:uvm_page_init+0x114
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1
relevant cpu : 0 last held: 0
relevant lwp : 0xffffaf80137e6240 last held: 000000000000000000
last locked : netbsd:uvm_pagealloc_pgb+0x173
unlocked* : netbsd:uvm_pagealloc_pgb+0x80d
owner field : 0x0000000000000600 wait/spin: 0/1

****** LWP 8370.7970 (syz-executor.3) @ 0xffffaf80138a56c0, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:soinit+0x4c2 sys/kern/uipc_socket.c:460)
lock address : ffffaf800ebc7780
type : sleep/adaptive
initialized : netbsd:soinit+0x4c2
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffaf80138a56c0 last held: 0xffffaf80138a56c0
last locked* : netbsd:sosend+0x2c67
unlocked : netbsd:sosend+0x1a31
owner field : 0xffffaf80138a56c0 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 26556.26556 (syz-executor.0) @ 0xffffaf80137cb640, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:vcache_alloc+0xc6 sys/kern/vfs_vnode.c:1438)
lock address : ffffaf8013555b00
type : sleep/adaptive
initialized : netbsd:vcache_alloc+0xc6
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffaf80137cb640 last held: 0xffffaf80137cb640
last locked* : netbsd:genfs_lock+0x1d6
unlocked : netbsd:genfs_unlock+0x55
owner/count : 0xffffaf80137cb640 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:vcache_alloc+0xc6 sys/kern/vfs_vnode.c:1438)
lock address : ffffaf80138b1680
type : sleep/adaptive
initialized : netbsd:vcache_alloc+0xc6
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffaf80137cb640 last held: 0xffffaf80137cb640
last locked* : netbsd:genfs_lock+0x1d6
unlocked : 0
owner/count : 0xffffaf80137cb640 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

* Lock 2 (initialized at netbsd:vcache_alloc+0xea)
lock address : ffffaf801361ec40
type : sleep/adaptive
initialized : netbsd:vcache_alloc+0xea
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffaf80137cb640 last held: 0xffffaf80137cb640
last locked* : netbsd:biowait+0x42f
unlocked : netbsd:dkiodone+0x364
owner field : 0xffffaf80137cb640 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 744.744 (dhcpcd) @ 0xffffaf8012535b80, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffaf8012535b80 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 748.748 (dhcpcd) @ 0xffffaf8012564780, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffaf8012564780 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 292.292 (dhcpcd) @ 0xffffaf801234db40, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffaf801234db40 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 485.485 (dhcpcd) @ 0xffffaf8012535740, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffaf8012535740 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffffaf800f1d7100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffaf800f1d7100 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffffaf800ebd8080, l_stat=7

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffaf800ebd8080 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff8686e280, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffffff8686e280 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu1:

* Lock 0 (initialized at netbsd:main+0x362 sys/kern/init_main.c:304)
lock address : netbsd:kernel_lock
type : spin
initialized : netbsd:main+0x362
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffaf80138a56c0 last held: 0xffffaf80138a56c0
last locked* : netbsd:rip6_send_wrapper+0x94
unlocked : netbsd:icmp6_ctloutput_wrapper+0xca
curcpu holds : 1 wanted by: 000000000000000000

* Lock 1 (initialized at netbsd:kprintf_init+0xcb sys/kern/subr_prf.c:156)
lock address : netbsd:kprintf_mtx
type : spin
initialized : netbsd:kprintf_init+0xcb
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffaf80138a56c0 last held: 0xffffaf80138a56c0
last locked* : netbsd:vpanic+0x624
unlocked : netbsd:printf+0x2ce
owner field : 0x0000000000000800 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON
0xffffaf8000017180 0001 00000000 0x0 0x0
0xffffaf8000017200 0041 00000000 0x0 0x0
0xffffaf8000017280 0041 00000000 0x0 0x0
0xffffaf8000017300 0041 00000000 0x0 0x0
0xffffaf8000017380 0041 00000000 0x0 0x0
0xffffaf8000017400 0041 00000000 0x0 0x0
0xffffaf8000017480 0041 00000000 0x0 0x0
0xffffaf8000017500 0041 00000000 0x0 0x0
0xffffaf8000017580 0041 00000000 0x0 0x0
0xffffaf8000017600 0041 00000000 0x0 0x0
0xffffaf8000017680 0041 00000000 0x0 0x0
0xffffaf8000017700 0041 00000000 0x0 0x0
0xffffaf8000017780 0041 00000000 0x0 0x0
0xffffaf8000017800 0041 00000000 0x0 0x0
0xffffaf8000017880 0041 00000000 0x0 0x0
0xffffaf8000017900 0041 00000000 0x0 0x0
0xffffaf8000017980 0041 00000000 0x0 0x0
0xffffaf8000017a00 0041 00000000 0x0 0x0
0xffffaf8000017a80 0041 00000000 0x0 0x0
0xffffaf8000017b00 0041 00000000 0x0 0x0
0xffffaf8000017b80 0041 00000000 0x0 0x0
0xffffaf8000017c00 0041 00000000 0x0 0x0
0xffffaf8000017c80 0041 00000000 0x0 0x0
0xffffaf8000017d00 0041 00000000 0x0 0x0
0xffffaf8000017d80 0041 00000000 0x0 0x0
0xffffaf8000017e00 0041 00000000 0x0 0x0
0xffffaf8000017e80 0041 00000000 0x0 0x0
0xffffaf8000017f00 0041 00000000 0x0 0x0
0xffffaf8000017f80 0041 00000000 0x0 0x0
0xffffaf8000018000 0041 00000000 0x0 0x0
0xffffaf8000018080 0041 00000000 0x0 0x0
0xffffaf8000018100 0041 00000000 0x0 0x0
0xffffaf8000018180 0041 00000000 0x0 0x0
0xffffaf8000018200 0041 00000000 0x0 0x0
0xffffaf8000018280 0041 00000000 0x0 0x0
0xffffaf8000018300 0041 00000000 0x0 0x0
0xffffaf8000018380 0041 00000000 0x0 0x0
0xffffaf8000018400 0041 00000000 0x0 0x0
0xffffaf8000018480 0041 00000000 0x0 0x0
0xffffaf8000018500 0041 00000000 0x0 0x0
0xffffaf8000018580 0041 00000000 0x0 0x0
0xffffaf8000018600 0041 00000000 0x0 0x0
0xffffaf8000018680 0041 00000000 0x0 0x0
0xffffaf8000018700 0041 00000000 0x0 0x0
0xffffaf8000018780 0041 00000000 0x0 0x0
0xffffaf8000018800 0041 00000000 0x0 0x0
0xffffaf8000018880 0041 00000000 0x0 0x0
0xffffaf8000018900 0041 00000000 0x0 0x0
0xffffaf8000018980 0041 00000000 0x0 0x0
0xffffaf8000018a00 0041 00000000 0x0 0x0
0xffffaf8000018a80 0041 00000000 0x0 0x0
0xffffaf8000018b00 0041 00000000 0x0 0x0
0xffffaf8000018b80 0041 00000000 0x0 0x0
0xffffaf8000018c00 0041 00000000 0x0 0x0
0xffffaf8000018c80 0041 00000000 0x0 0x0
0xffffaf8000018d00 0041 00000000 0x0 0x0
0xffffaf8000018d80 0041 00000000 0x0 0x0
0xffffaf8000018e00 0041 00000000 0x0 0x0
0xffffaf8000018e80 0041 00000000 0x0 0x0
0xffffaf8000018f00 0041 00000000 0x0 0x0
0xffffaf8000018f80 0041 00000000 0x0 0x0
0xffffaf8000019000 0041 00000000 0x0 0x0
0xffffaf8000019080 0041 00000000 0x0 0x0
0xffffaf8000019100 0041 00000000 0x0 0x0
0xffffaf8000019180 0041 00000000 0x0 0x0
0xffffaf8000019200 0041 00000000 0x0 0x0
0xffffaf8000019280 0041 00000000 0x0 0x0
0xffffaf8000019300 0041 00000000 0x0 0x0
0xffffaf8000019380 0041 00000000 0x0 0x0
0xffffaf8000019400 0041 00000000 0x0 0x0
0xffffaf8000019480 0041 00000000 0x0 0x0
0xffffaf8000019500 0041 00000000 0x0 0x0
0xffffaf8000019580 0041 00000000 0x0 0x0
0xffffaf8000019600 0041 00000000 0x0 0x0
0xffffaf8000019680 0041 00000000 0x0 0x0
0xffffaf8000019700 0041 00000000 0x0 0x0
0xffffaf8000019780 0041 00000000 0x0 0x0
0xffffaf8000019800 0041 00000000 0x0 0x0
0xffffaf8000019880 0041 00000000 0x0 0x0
0xffffaf8000019900 0041 00000000 0x0 0x0
0xffffaf8000019980 0041 00000000 0x0 0x0
0xffffaf8000019a00 0041 00000000 0x0 0x0
0xffffaf8000019a80 0041 00000000 0x0 0x0
0xffffaf8000019b00 0041 00000000 0x0 0x0
0xffffaf8000019b80 0041 00000000 0x0 0x0
0xffffaf8000019c00 0041 00000000 0x0 0x0
0xffffaf8000019c80 0041 00000000 0x0 0x0
0xffffaf8000019d00 0041 00000000 0x0 0x0
0xffffaf8000019d80 0041 00000000 0x0 0x0
0xffffaf8000019e00 0041 00000000 0x0 0x0
0xffffaf8000019e80 0041 00000000 0x0 0x0
0xffffaf8000019f00 0041 00000000 0x0 0x0
0xffffaf8000019f80 0041 00000000 0x0 0x0
0xffffaf800001a000 0041 00000000 0x0 0x0
0xffffaf800001a080 0041 00000000 0x0 0x0
0xffffaf800001a100 0041 00000000 0x0 0x0
0xffffaf800001a180 0041 00000000 0x0 0x0
0xffffaf800001a200 0041 00000000 0x0 0x0
0xffffaf800001a280 0041 00000000 0x0 0x0
0xffffaf800001a300 0041 00000000 0x0 0x0
0xffffaf800001a380 0041 00000000 0x0 0x0
0xffffaf800001a400 0041 00000000 0x0 0x0
0xffffaf800001a480 0041 00000000 0x0 0x0
0xffffaf800001a500 0041 00000000 0x0 0x0
0xffffaf800001a580 0041 00000000 0x0 0x0
0xffffaf800001a600 0041 00000000 0x0 0x0
0xffffaf800001a680 0041 00000000 0x0 0x0
0xffffaf800001a700 0041 00000000 0x0 0x0
0xffffaf800001a780 0041 00000000 0x0 0x0
0xffffaf800001a800 0041 00000000 0x0 0x0
0xffffaf800001a880 0041 00000000 0x0 0x0
0xffffaf800001a900 0041 00000000 0x0 0x0
0xffffaf800001a980 0041 00000000 0x0 0x0
0xffffaf800001aa00 0041 00000000 0x0 0x0
0xffffaf800001aa80 0041 00000000 0x0 0x0
0xffffaf800001ab00 0041 00000000 0x0 0x0
0xffffaf800001ab80 0041 00000000 0x0 0x0
0xffffaf800001ac00 0041 00000000 0x0 0x0
0xffffaf800001ac80 0041 00000000 0x0 0x0
0xffffaf800001ad00 0041 00000000 0x0 0x0
0xffffaf800001ad80 0041 00000000 0x0 0x0
0xffffaf800001ae00 0041 00000000 0x0 0x0
0xffffaf800001ae80 0041 00000000 0x0 0x0
0xffffaf800001af00 0041 00000000 0x0 0x0
0xffffaf800001af80 0041 00000000 0x0 0x0
0xffffaf800001b000 0041 00000000 0x0 0x0
0xffffaf800001b080 0041 00000000 0x0 0x0
0xffffaf800001b100 0041 00000000 0x0 0x0
0xffffaf800001b180 0041 00000000 0x0 0x0
0xffffaf800001b200 0041 00000000 0x0 0x0
0xffffaf800001b280 0041 00000000 0x0 0x0
0xffffaf800001b300 0041 00000000 0x0 0x0
0xffffaf800001b380 0041 00000000 0x0 0x0
0xffffaf800001b400 0041 00000000 0x0 0x0
0xffffaf800001b480 0041 00000000 0x0 0x0
0xffffaf800001b500 0041 00000000 0x0 0x0
0xffffaf800001b580 0041 00000000 0x0 0x0
0xffffaf800001b600 0041 00000000 0x0 0x0
0xffffaf800001b680 0041 00000000 0x0 0x0
0xffffaf800001b700 0041 00000000 0x0 0x0
0xffffaf800001b780 0041 00000000 0x0 0x0
0xffffaf800001b800 0041 00000000 0x0 0x0
0xffffaf800001b880 0041 00000000 0x0 0x0
0xffffaf800001b900 0041 00000000 0x0 0x0
0xffffaf800001b980 0041 00000000 0x0 0x0
0xffffaf800001ba00 0041 00000000 0x0 0x0
0xffffaf800001ba80 0041 00000000 0x0 0x0
0xffffaf800001bb00 0041 00000000 0x0 0x0
0xffffaf800001bb80 0041 00000000 0x0 0x0
0xffffaf800001bc00 0041 00000000 0x0 0x0
0xffffaf800001bc80 0041 00000000 0x0 0x0
0xffffaf800001bd00 0041 00000000 0x0 0x0
0xffffaf800001bd80 0041 00000000 0x0 0x0
0xffffaf800001be00 0041 00000000 0x0 0x0
0xffffaf800001be80 0041 00000000 0x0 0x0
0xffffaf800001bf00 0041 00000000 0x0 0x0
0xffffaf800001bf80 0041 00000000 0x0 0x0
0xffffaf800001c000 0041 00000000 0x0 0x0
0xffffaf800001c080 0041 00000000 0x0 0x0
0xffffaf800001c100 0041 00000000 0x0 0x0
0xffffaf800001c180 0041 00000000 0x0 0x0
0xffffaf800001c200 0041 00000000 0x0 0x0
0xffffaf800001c280 0041 00000000 0x0 0x0
0xffffaf800001c300 0041 00000000 0x0 0x0
0xffffaf800001c380 0041 00000000 0x0 0x0
0xffffaf800001c400 0041 00000000 0x0 0x0
0xffffaf800001c480 0041 00000000 0x0 0x0
0xffffaf800001c500 0041 00000000 0x0 0x0
0xffffaf800001c580 0041 00000000 0x0 0x0
0xffffaf800001c600 0041 00000000 0x0 0x0
0xffffaf800001c680 0041 00000000 0x0 0x0
0xffffaf800001c700 0041 00000000 0x0 0x0
0xffffaf800001c780 0041 00000000 0x0 0x0
0xffffaf800001c800 0001 00000000 0x0 0x0
0xffffaf800001c880 0001 00000000 0x0 0x0
0xffffaf800001c900 0001 00000000 0x0 0x0
0xffffaf800001c980 0001 00000000 0x0 0x0
0xffffaf800001ca00 0001 00000000 0x0 0x0
0xffffaf800001ca80 0001 00000000 0x0 0x0
0xffffaf800001cb00 0001 00000000 0x0 0x0
0xffffaf800001cb80 0001 00000000 0x0 0x0
0xffffaf800001cc00 0001 00000000 0x0 0x0
0xffffaf800001cc80 0001 00000000 0x0 0x0
0xffffaf800001cd00 0001 00000000 0x0 0x0
0xffffaf800001cd80 0001 00000000 0x0 0x0
0xffffaf800001ce00 0001 00000000 0x0 0x0
0xffffaf800001ce80 0001 00000000 0x0 0x0
0xffffaf800001cf00 0001 00000000 0x0 0x0
0xffffaf800001cf80 0001 00000000 0x0 0x0
0xffffaf800001d000 0001 00000000 0x0 0x0
0xffffaf800001d080 0001 00000000 0x0 0x0
0xffffaf800001d100 0001 00000000 0x0 0x0
0xffffaf800001d180 0001 00000000 0x0 0x0
0xffffaf800001d200 0001 00000000 0x0 0x0
0xffffaf800001d280 0001 00000000 0x0 0x0
0xffffaf800001d300 0001 00000000 0x0 0x0
0xffffaf800001d380 0001 00000000 0x0 0x0
0xffffaf800001d400 0001 00000000 0x0 0x0
0xffffaf800001d480 0001 00000000 0x0 0x0
0xffffaf800001d500 0001 00000000 0x0 0x0
0xffffaf800001d580 0001 00000000 0x0 0x0
0xffffaf800001d600 0001 00000000 0x0 0x0
0xffffaf800001d680 0001 00000000 0x0 0x0
0xffffaf800001d700 0001 00000000 0x0 0x0
0xffffaf800001d780 0001 00000000 0x0 0x0
0xffffaf800001d800 0001 00000000 0x0 0x0
0xffffaf800001d880 0001 00000000 0x0 0x0
0xffffaf800001d900 0001 00000000 0x0 0x0
0xffffaf800001d980 0001 00000000 0x0 0x0
0xffffaf800001da00 0001 00000000 0x0 0x0
0xffffaf800001da80 0001 00000000 0x0 0x0
0xffffaf800001db00 0001 00000000 0x0 0x0
0xffffaf800001db80 0001 00000000 0x0 0x0
0xffffaf800001dc00 0001 00000000 0x0 0x0
0xffffaf800001dc80 0001 00000000 0x0 0x0
0xffffaf800001dd00 0001 00000000 0x0 0x0
0xffffaf800001dd80 0001 00000000 0x0 0x0
0xffffaf800001de00 0001 00000000 0x0 0x0
0xffffaf800001de80 0001 00000000 0x0 0x0
0xffffaf800001df00 0001 00000000 0x0 0x0
0xffffaf800001df80 0001 00000000 0x0 0x0
0xffffaf800001e000 0001 00000000 0x0 0x0
0xffffaf800001e080 0001 00000000 0x0 0x0
0xffffaf800001e100 0001 00000000 0x0 0x0
0xffffaf800001e180 0001 00000000 0x0 0x0
0xffffaf800001e200 0001 00000000 0x0 0x0
0xffffaf800001e280 0001 00000000 0x0 0x0
0xffffaf800001e300 0001 00000000 0x0 0x0
0xffffaf800001e380 0001 00000000 0x0 0x0
0xffffaf800001e400 0001 00000000 0x0 0x0
0xffffaf800001e480 0001 00000000 0x0 0x0
0xffffaf800001e500 0001 00000000 0x0 0x0
0xffffaf800001e580 0001 00000000 0x0 0x0
0xffffaf800001e600 0001 00000000 0x0 0x0
0xffffaf800001e680 0001 00000000 0x0 0x0
0xffffaf800001e700 0001 00000000 0x0 0x0
0xffffaf800001e780 0001 00000000 0x0 0x0
0xffffaf800001e800 0001 00000000 0x0 0x0
0xffffaf800001e880 0001 00000000 0x0 0x0
0xffffaf800001e900 0001 00000000 0x0 0x0
0xffffaf800001e980 0001 00000000 0x0 0x0
0xffffaf800001ea00 0001 00000000 0x0 0x0
0xffffaf800001ea80 0001 00000000 0x0 0x0
0xffffaf800001eb00 0001 00000000 0x0 0x0
0xffffaf800001eb80 0001 00000000 0x0 0x0
0xffffaf800001ec00 0001 00000000 0x0 0x0
0xffffaf800001ec80 0001 00000000 0x0 0x0
0xffffaf800001ed00 0001 00000000 0x0 0x0
0xffffaf800001ed80 0001 00000000 0x0 0x0
0xffffaf800001ee00 0001 00000000 0x0 0x0
0xffffaf800001ee80 0001 00000000 0x0 0x0
0xffffaf800001ef00 0001 00000000 0x0 0x0
0xffffaf800001ef80 0001 00000000 0x0 0x0
0xffffaf800001f000 0001 00000000 0x0 0x0
0xffffaf800001f080 0001 00000000 0x0 0x0
0xffffaf800001f100 0001 00000000 0x0 0x0
0xffffaf800001f180 0001 00000000 0x0 0x0
0xffffaf800001f200 0001 00000000 0x0 0x0
0xffffaf800001f280 0001 00000000 0x0 0x0
0xffffaf800001f300 0001 00000000 0x0 0x0
0xffffaf800001f380 0001 00000000 0x0 0x0
0xffffaf800001f400 0001 00000000 0x0 0x0
0xffffaf800001f480 0001 00000000 0x0 0x0
0xffffaf800001f500 0001 00000000 0x0 0x0
0xffffaf800001f580 0001 00000000 0x0 0x0
0xffffaf800001f600 0001 00000000 0x0 0x0
0xffffaf800001f680 0001 00000000 0x0 0x0
0xffffaf800001f700 0001 00000000 0x0 0x0
0xffffaf800001f780 0001 00000000 0x0 0x0
0xffffaf800001f800 0001 00000000 0x0 0x0
0xffffaf800001f880 0001 00000000 0x0 0x0
0xffffaf800001f900 0001 00000000 0x0 0x0
0xffffaf800001f980 0001 00000000 0x0 0x0
0xffffaf800001fa00 0001 00000000 0x0 0x0
0xffffaf800001fa80 0001 00000000 0x0 0x0
0xffffaf800001fb00 0001 00000000 0x0 0x0
0xffffaf800001fb80 0001 00000000 0x0 0x0
0xffffaf800001fc00 0001 00000000 0x0 0x0
0xffffaf800001fc80 0001 00000000 0x0 0x0
0xffffaf800001fd00 0001 00000000 0x0 0x0
0xffffaf800001fd80 0001 00000000 0x0 0x0
0xffffaf800001fe00 0001 00000000 0x0 0x0
0xffffaf800001fe80 0001 00000000 0x0 0x0
0xffffaf800001ff00 0001 00000000 0x0 0x0
0xffffaf800001ff80 0001 00000000 0x0 0x0
0xffffaf8000020000 0001 00000000 0x0 0x0
0xffffaf8000020080 0001 00000000 0x0 0x0
0xffffaf8000020100 0001 00000000 0x0 0x0
0xffffaf8000020180 0001 00000000 0x0 0x0
0xffffaf8000020200 0001 00000000 0x0 0x0
0xffffaf8000020280 0001 00000000 0x0 0x0
0xffffaf8000020300 0001 00000000 0x0 0x0
0xffffaf8000020380 0001 00000000 0x0 0x0
0xffffaf8000020400 0001 00000000 0x0 0x0
0xffffaf8000020480 0001 00000000 0x0 0x0
0xffffaf8000020500 0001 00000000 0x0 0x0
0xffffaf8000020580 0001 00000000 0x0 0x0
0xffffaf8000020600 0001 00000000 0x0 0x0
0xffffaf8000020680 0001 00000000 0x0 0x0
0xffffaf8000020700 0001 00000000 0x0 0x0
0xffffaf8000020780 0001 00000000 0x0 0x0
0xffffaf8000020800 0001 00000000 0x0 0x0
0xffffaf8000020880 0001 00000000 0x0 0x0
0xffffaf8000020900 0001 00000000 0x0 0x0
0xffffaf8000020980 0001 00000000 0x0 0x0
0xffffaf8000020a00 0001 00000000 0x0 0x0
0xffffaf8000020a80 0001 00000000 0x0 0x0
0xffffaf8000020b00 0001 00000000 0x0 0x0
0xffffaf8000020b80 0001 00000000 0x0 0x0
0xffffaf8000020c00 0001 00000000 0x0 0x0
0xffffaf8000020c80 0001 00000000 0x0 0x0
0xffffaf8000020d00 0001 00000000 0x0 0x0
0xffffaf8000020d80 0001 00000000 0x0 0x0
0xffffaf8000020e00 0001 00000000 0x0 0x0
0xffffaf8000020e80 0001 00000000 0x0 0x0
0xffffaf8000020f00 0001 00000000 0x0 0x0
0xffffaf8000020f80 0001 00000000 0x0 0x0
0xffffaf8000021000 0001 00000000 0x0 0x0
0xffffaf8000021080 0001 00000000 0x0 0x0
0xffffaf8000021100 0001 00000000 0x0 0x0
0xffffaf8000021180 0001 00000000 0x0 0x0
0xffffaf8000021200 0001 00000000 0x0 0x0
0xffffaf8000021280 0001 00000000 0x0 0x0
0xffffaf8000021300 0001 00000000 0x0 0x0
0xffffaf8000021380 0001 00000000 0x0 0x0
0xffffaf8000021400 0001 00000000 0x0 0x0
0xffffaf8000021480 0001 00000000 0x0 0x0
0xffffaf8000021500 0001 00000000 0x0 0x0
0xffffaf8000021580 0001 00000000 0x0 0x0
0xffffaf8000021600 0001 00000000 0x0 0x0
0xffffaf8000021680 0001 00000000 0x0 0x0
0xffffaf8000021700 0001 00000000 0x0 0x0
0xffffaf8000021780 0001 00000000 0x0 0x0
0xffffaf8000021800 0001 00000000 0x0 0x0
0xffffaf8000021880 0001 00000000 0x0 0x0
0xffffaf8000021900 0001 00000000 0x0 0x0
0xffffaf8000021980 0001 00000000 0x0 0x0
0xffffaf8000021a00 0001 00000000 0x0 0x0
0xffffaf8000021a80 0001 00000000 0x0 0x0
0xffffaf8000021b00 0001 00000000 0x0 0x0
0xffffaf8000021b80 0001 00000000 0x0 0x0
0xffffaf8000021c00 0001 00000000 0x0 0x0
0xffffaf8000021c80 0001 00000000 0x0 0x0
0xffffaf8000021d00 0001 00000000 0x0 0x0
0xffffaf8000021d80 0001 00000000 0x0 0x0
0xffffaf8000021e00 0001 00000000 0x0 0x0
0xffffaf8000021e80 0001 00000000 0x0 0x0
0xffffaf8000021f00 0001 00000000 0x0 0x0
0xffffaf8000021f80 0001 00000000 0x0 0x0
0xffffaf8000022000 0001 00000000 0x0 0x0
0xffffaf8000022080 0001 00000000 0x0 0x0
0xffffaf8000022100 0001 00000000 0x0 0x0
0xffffaf8000022180 0001 00000000 0x0 0x0
0xffffaf8000022200 0001 00000000 0x0 0x0
0xffffaf8000022280 0001 00000000 0x0 0x0
0xffffaf8000022300 0001 00000000 0x0 0x0
0xffffaf8000022380 0001 00000000 0x0 0x0
0xffffaf8000022400 0001 00000000 0x0 0x0
0xffffaf8000022480 0001 00000000 0x0 0x0
0xffffaf8000022500 0001 00000000 0x0 0x0
0xffffaf8000022580 0001 00000000 0x0 0x0
0xffffaf8000022600 0001 00000000 0x0 0x0
0xffffaf8000022680 0001 00000000 0x0 0x0
0xffffaf8000022700 0001 00000000 0x0 0x0
0xffffaf8000022780 0001 00000000 0x0 0x0
0xffffaf8000022800 0001 00000000 0x0 0x0
0xffffaf8000022880 0001 00000000 0x0 0x0
0xffffaf8000022900 0001 00000000 0x0 0x0
0xffffaf8000022980 0001 00000000 0x0 0x0
0xffffaf8000022a00 0001 00000000 0x0 0x0
0xffffaf8000022a80 0001 00000000 0x0 0x0
0xffffaf8000022b00 0001 00000000 0x0 0x0
0xffffaf8000022b80 0001 00000000 0x0 0x0
0xffffaf8000022c00 0001 00000000 0x0 0x0
0xffffaf8000022c80 0001 00000000 0x0 0x0
0xffffaf8000022d00 0001 00000000 0x0 0x0
0xffffaf8000022d80 0001 00000000 0x0 0x0
0xffffaf8000022e00 0001 00000000 0x0 0x0
0xffffaf8000022e80 0001 00000000 0x0 0x0
0xffffaf8000022f00 0001 00000000 0x0 0x0
0xffffaf8000022f80 0001 00000000 0x0 0x0
0xffffaf8000023000 0001 00000000 0x0 0x0
0xffffaf8000023080 0001 00000000 0x0 0x0
0xffffaf8000023100 0001 00000000 0x0 0x0
0xffffaf8000023180 0001 00000000 0x0 0x0
0xffffaf8000023200 0001 00000000 0x0 0x0
0xffffaf8000023280 0001 00000000 0x0 0x0
0xffffaf8000023300 0001 00000000 0x0 0x0
0xffffaf8000023380 0001 00000000 0x0 0x0
0xffffaf8000023400 0001 00000000 0x0 0x0
0xffffaf8000023480 0001 00000000 0x0 0x0
0xffffaf8000023500 0001 00000000 0x0 0x0
0xffffaf8000023580 0001 00000000 0x0 0x0
0xffffaf8000023600 0001 00000000 0x0 0x0
0xffffaf8000023680 0001 00000000 0x0 0x0
0xffffaf8000023700 0001 00000000 0x0 0x0
0xffffaf8000023780 0001 00000000 0x0 0x0
0xffffaf8000023800 0001 00000000 0x0 0x0
0xffffaf8000023880 0001 00000000 0x0 0x0
0xffffaf8000023900 0001 00000000 0x0 0x0
0xffffaf8000023980 0001 00000000 0x0 0x0
0xffffaf8000023a00 0001 00000000 0x0 0x0
0xffffaf8000023a80 0001 00000000 0x0 0x0
0xffffaf8000023b00 0001 00000000 0x0 0x0
0xffffaf8000023b80 0001 00000000 0x0 0x0
0xffffaf8000023c00 0001 00000000 0x0 0x0
0xffffaf8000023c80 0001 00000000 0x0 0x0
0xffffaf8000023d00 0001 00000000 0x0 0x0
0xffffaf8000023d80 0001 00000000 0x0 0x0
0xffffaf8000023e00 0001 00000000 0x0 0x0
0xffffaf8000023e80 0001 00000000 0x0 0x0
0xffffaf8000023f00 0001 00000000 0x0 0x0
0xffffaf8000023f80 0001 00000000 0x0 0x0
0xffffaf8000024000 0001 00000000 0x0 0x0
0xffffaf8000024080 0001 00000000 0x0 0x0
0xffffaf8000024100 0001 00000000 0x0 0x0
0xffffaf8000024180 0001 00000000 0x0 0x0
0xffffaf8000024200 0001 00000000 0x0 0x0
0xffffaf8000024280 0001 00000000 0x0 0x0
0xffffaf8000024300 0001 00000000 0x0 0x0
0xffffaf8000024380 0001 00000000 0x0 0x0
0xffffaf8000024400 0001 00000000 0x0 0x0
0xffffaf8000024480 0001 00000000 0x0 0x0
0xffffaf8000024500 0001 00000000 0x0 0x0
0xffffaf8000024580 0001 00000000 0x0 0x0
0xffffaf8000024600 0001 00000000 0x0 0x0
0xffffaf8000024680 0001 00000000 0x0 0x0
0xffffaf8000024700 0001 00000000 0x0 0x0
0xffffaf8000024780 0001 00000000 0x0 0x0
0xffffaf8000024800 0001 00000000 0x0 0x0
0xffffaf8000024880 0001 00000000 0x0 0x0
0xffffaf8000024900 0001 00000000 0x0 0x0
0xffffaf8000024980 0001 00000000 0x0 0x0
0xffffaf8000024a00 0001 00000000 0x0 0x0
0xffffaf8000024a80 0001 00000000 0x0 0x0
0xffffaf8000024b00 0001 00000000 0x0 0x0
0xffffaf8000024b80 0001 00000000 0x0 0x0
0xffffaf8000024c00 0001 00000000 0x0 0x0
0xffffaf8000024c80 0001 00000000 0x0 0x0
0xffffaf8000024d00 0001 00000000 0x0 0x0
0xffffaf8000024d80 0001 00000000 0x0 0x0
0xffffaf8000024e00 0001 00000000 0x0 0x0
0xffffaf8000024e80 0001 00000000 0x0 0x0
0xffffaf8000024f00 0001 00000000 0x0 0x0
0xffffaf8000024f80 0001 00000000 0x0 0x0
0xffffaf8000025000 0001 00000000 0x0 0x0
0xffffaf8000025080 0001 00000000 0x0 0x0
0xffffaf8000025100 0001 00000000 0x0 0x0
0xffffaf8000025180 0001 00000000 0x0 0x0
0xffffaf8000025200 0001 00000000 0x0 0x0
0xffffaf8000025280 0001 00000000 0x0 0x0
0xffffaf8000025300 0001 00000000 0x0 0x0
0xffffaf8000025380 0001 00000000 0x0 0x0
0xffffaf8000025400 0001 00000000 0x0 0x0
0xffffaf8000025480 0001 00000000 0x0 0x0
0xffffaf8000025500 0001 00000000 0x0 0x0
0xffffaf8000025580 0001 00000000 0x0 0x0
0xffffaf8000025600 0001 00000000 0x0 0x0
0xffffaf8000025680 0001 00000000 0x0 0x0
0xffffaf8000025700 0001 00000000 0x0 0x0
0xffffaf8000025780 0001 00000000 0x0 0x0
0xffffaf8000025800 0001 00000000 0x0 0x0
0xffffaf8000025880 0001 00000000 0x0 0x0
0xffffaf8000025900 0001 00000000 0x0 0x0
0xffffaf8000025980 0001 00000000 0x0 0x0
0xffffaf8000025a00 0001 00000000 0x0 0x0
0xffffaf8000025a80 0001 00000000 0x0 0x0
0xffffaf8000025b00 0001 00000000 0x0 0x0
0xffffaf8000025b80 0001 00000000 0x0 0x0
0xffffaf8000025c00 0001 00000000 0x0 0x0
0xffffaf8000025c80 0001 00000000 0x0 0x0
0xffffaf8000025d00 0001 00000000 0x0 0x0
0xffffaf8000025d80 0001 00000000 0x0 0x0
0xffffaf8000025e00 0001 00000000 0x0 0x0
0xffffaf8000025e80 0001 00000000 0x0 0x0
0xffffaf8000025f00 0001 00000000 0x0 0x0
0xffffaf8000025f80 0001 00000000 0x0 0x0
0xffffaf8000026000 0001 00000000 0x0 0x0
0xffffaf8000026080 0001 00000000 0x0 0x0
0xffffaf8000026100 0001 00000000 0x0 0x0
0xffffaf8000026180 0001 00000000 0x0 0x0
0xffffaf8000026200 0001 00000000 0x0 0x0
0xffffaf8000026280 0001 00000000 0x0 0x0
0xffffaf8000026300 0001 00000000 0x0 0x0
0xffffaf8000026380 0001 00000000 0x0 0x0
0xffffaf8000026400 0001 00000000 0x0 0x0
0xffffaf8000026480 0001 00000000 0x0 0x0
0xffffaf8000026500 0001 00000000 0x0 0x0
0xffffaf8000026580 0001 00000000 0x0 0x0
0xffffaf8000026600 0001 00000000 0x0 0x0
0xffffaf8000026680 0001 00000000 0x0 0x0
0xffffaf8000026700 0001 00000000 0x0 0x0
0xffffaf8000026780 0001 00000000 0x0 0x0
0xffffaf8000026800 0001 00000000 0x0 0x0
0xffffaf8000026880 0001 00000000 0x0 0x0
0xffffaf8000026900 0001 00000000 0x0 0x0
0xffffaf8000026980 0001 00000000 0x0 0x0
0xffffaf8000026a00 0001 00000000 0x0 0x0
0xffffaf8000026a80 0001 00000000 0x0 0x0
0xffffaf8000026b00 0001 00000000 0x0 0x0
0xffffaf8000026b80 0001 00000000 0x0 0x0
0xffffaf8000026c00 0001 00000000 0x0 0x0
0xffffaf8000026c80 0001 00000000 0x0 0x0
0xffffaf8000026d00 0001 00000000 0x0 0x0
0xffffaf8000026d80 0001 00000000 0x0 0x0
0xffffaf8000026e00 0001 00000000 0x0 0x0
0xffffaf8000026e80 0001 00000000 0x0 0x0
0xffffaf8000026f00 0001 00000000 0x0 0x0
0xffffaf8000026f80 0001 00000000 0x0 0x0
0xffffaf8000027000 0001 00000000 0x0 0x0
0xffffaf8000027080 0001 00000000 0x0 0x0
0xffffaf8000027100 0001 00000000 0x0 0x0
0xffffaf8000027180 0001 00000000 0x0 0x0
0xffffaf8000027200 0001 00000000 0x0 0x0
0xffffaf8000027280 0001 00000000 0x0 0x0
0xffffaf8000027300 0001 00000000 0x0 0x0
0xffffaf8000027380 0001 00000000 0x0 0x0
0xffffaf8000027400 0001 00000000 0x0 0x0
0xffffaf8000027480 0001 00000000 0x0 0x0
0xffffaf8000027500 0001 00000000 0x0 0x0
0xffffaf8000027580 0001 00000000 0x0 0x0
0xffffaf8000027600 0001 00000000 0x0 0x0
0xffffaf8000027680 0001 00000000 0x0 0x0
0xffffaf8000027700 0001 00000000 0x0 0x0
0xffffaf8000027780 0001 00000000 0x0 0x0
0xffffaf8000027800 0001 00000000 0x0 0x0
0xffffaf8000027880 0001 00000000 0x0 0x0
0xffffaf8000027900 0001 00000000 0x0 0x0
0xffffaf8000027980 0001 00000000 0x0 0x0
0xffffaf8000027a00 0001 00000000 0x0 0x0
0xffffaf8000027a80 0001 00000000 0x0 0x0
0xffffaf8000027b00 0001 00000000 0x0 0x0
0xffffaf8000027b80 0001 00000000 0x0 0x0
0xffffaf8000027c00 0001 00000000 0x0 0x0
0xffffaf8000027c80 0001 00000000 0x0 0x0
0xffffaf8000027d00 0001 00000000 0x0 0x0
0xffffaf8000027d80 0001 00000000 0x0 0x0
0xffffaf8000027e00 0001 00000000 0x0 0x0
0xffffaf8000027e80 0001 00000000 0x0 0x0
0xffffaf8000027f00 0001 00000000 0x0 0x0
0xffffaf8000027f80 0001 00000000 0x0 0x0
0xffffaf8000028000 0001 00000000 0x0 0x0
0xffffaf8000028080 0001 00000000 0x0 0x0
0xffffaf8000028100 0001 00000000 0x0 0x0
0xffffaf8000028180 0001 00000000 0x0 0x0
0xffffaf8000028200 0001 00000000 0x0 0x0
0xffffaf8000028280 0001 00000000 0x0 0x0
0xffffaf8000028300 0001 00000000 0x0 0x0
0xffffaf8000028380 0001 00000000 0x0 0x0
0xffffaf8000028400 0001 00000000 0x0 0x0
0xffffaf8000028480 0001 00000000 0x0 0x0
0xffffaf8000028500 0001 00000000 0x0 0x0
0xffffaf8000028580 0001 00000000 0x0 0x0
0xffffaf8000028600 0001 00000000 0x0 0x0
0xffffaf8000028680 0001 00000000 0x0 0x0
0xffffaf8000028700 0001 00000000 0x0 0x0
0xffffaf8000028780 0001 00000000 0x0 0x0
0xffffaf8000028800 0001 00000000 0x0 0x0
0xffffaf8000028880 0001 00000000 0x0 0x0
0xffffaf8000028900 0001 00000000 0x0 0x0
0xffffaf8000028980 0001 00000000 0x0 0x0
0xffffaf8000028a00 0001 00000000 0x0 0x0
0xffffaf8000028a80 0001 00000000 0x0 0x0
0xffffaf8000028b00 0001 00000000 0x0 0x0
0xffffaf8000028b80 0001 00000000 0x0 0x0
0xffffaf8000028c00 0001 00000000 0x0 0x0
0xffffaf8000028c80 0001 00000000 0x0 0x0
0xffffaf8000028d00 0001 00000000 0x0 0x0
0xffffaf8000028d80 0001 00000000 0x0 0x0
0xffffaf8000028e00 0001 00000000 0x0 0x0
0xffffaf8000028e80 0001 00000000 0x0 0x0
0xffffaf8000028f00 0001 00000000 0x0 0x0
0xffffaf8000028f80 0001 00000000 0x0 0x0
0xffffaf8000029000 0001 00000000 0x0 0x0
0xffffaf8000029080 0001 00000000

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title

If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)

If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report

If you want to undo deduplication, reply with:
#syz undup

syzbot

unread,

Apr 18, 2024, 6:53:20 AMApr 18

to syzkaller-...@googlegroups.com

syzbot has found a reproducer for the following issue on:

HEAD commit: 124fe5e84c3f Mipsn64* has no 64bit compat, its userland is..
git tree: netbsd

console output: https://syzkaller.appspot.com/x/log.txt?x=10b6b2c3180000

kernel config: https://syzkaller.appspot.com/x/.config?x=739e57438eb9ed9e
dashboard link: https://syzkaller.appspot.com/bug?extid=587e3b707bdfe533283f
compiler: Debian clang version 15.0.6

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=155ada4f180000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=104ff935180000

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/1d58370f534a/disk-124fe5e8.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/e2a7ff09b5a0/netbsd-124fe5e8.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+587e3b...@syzkaller.appspotmail.com

[ 54.4446306] panic: MSan: Uninitialized Variable 'dummy1' From ip6_output()

[ 54.4546301] cpu1: Begin traceback...
[ 54.4846153] vpanic() at netbsd:vpanic+0xc9d
[ 54.5546142] panic() at netbsd:panic+0x1b3 sys/kern/subr_prf.c:209
[ 54.6246144] __msan_warning() at netbsd:__msan_warning+0x11e kmsan_report_inline sys/kern/subr_msan.c:250 [inline]
[ 54.6246144] __msan_warning() at netbsd:__msan_warning+0x11e sys/kern/subr_msan.c:631
[ 54.6946140] ip6_hopopts_input() at netbsd:ip6_hopopts_input+0xd70 ip6_process_hopopts sys/netinet6/ip6_input.c:985 [inline]
[ 54.6946140] ip6_hopopts_input() at netbsd:ip6_hopopts_input+0xd70 sys/netinet6/ip6_input.c:882
[ 54.7646174] ip6_output() at netbsd:ip6_output+0x875a sys/netinet6/ip6_output.c:761
[ 54.8346193] rip6_output() at netbsd:rip6_output+0x1e26 sys/netinet6/raw_ip6.c:508
[ 54.9046192] rip6_send_wrapper() at netbsd:rip6_send_wrapper+0x413 rip6_send sys/netinet6/raw_ip6.c:907 [inline]
[ 54.9046192] rip6_send_wrapper() at netbsd:rip6_send_wrapper+0x413 sys/netinet6/raw_ip6.c:986
[ 54.9746228] sosend() at netbsd:sosend+0x426c
[ 55.0346191] soo_write() at netbsd:soo_write+0x105 sys/kern/sys_socket.c:126
[ 55.1046181] dofilewrite() at netbsd:dofilewrite+0x360 sys/kern/sys_generic.c:352
[ 55.1746236] sys_write() at netbsd:sys_write+0x259 sys/kern/sys_generic.c:320
[ 55.2346184] sys_syscall() at netbsd:sys_syscall+0x2ac sy_call sys/sys/syscallvar.h:65 [inline]
[ 55.2346184] sys_syscall() at netbsd:sys_syscall+0x2ac sys/kern/sys_syscall.c:90
[ 55.3146193] syscall() at netbsd:syscall+0x576 sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 55.3146193] syscall() at netbsd:syscall+0x576 sys/arch/x86/x86/syscall.c:137
[ 55.3246176] --- syscall (number 4 via SYS_syscall) ---
[ 55.3446184] netbsd:syscall+0x576:
[ 55.3546199] cpu1: End traceback...
[ 55.3546199] fatal breakpoint trap in supervisor mode
[ 55.3646140] trap type 1 code 0 rip 0xffffffff8023687d cs 0x8 rflags 0x286 cr2 0x20011000 ilevel 0x4 rsp 0xffff9380c7819df0
[ 55.3746172] curlwp 0xffff938012bf7900 pid 930.930 lowest kstack 0xffff9380c78132c0
Stopped in pid 930.930 (syz-executor3231) at netbsd:breakpoint+0x5: leave

?
breakpoint() at netbsd:breakpoint+0x5
vpanic() at netbsd:vpanic+0xc9d
panic() at netbsd:panic+0x1b3 sys/kern/subr_prf.c:209
__msan_warning() at netbsd:__msan_warning+0x11e kmsan_report_inline sys/kern/subr_msan.c:250 [inline]
__msan_warning() at netbsd:__msan_warning+0x11e sys/kern/subr_msan.c:631
ip6_hopopts_input() at netbsd:ip6_hopopts_input+0xd70 ip6_process_hopopts sys/netinet6/ip6_input.c:985 [inline]
ip6_hopopts_input() at netbsd:ip6_hopopts_input+0xd70 sys/netinet6/ip6_input.c:882
ip6_output() at netbsd:ip6_output+0x875a sys/netinet6/ip6_output.c:761
rip6_output() at netbsd:rip6_output+0x1e26 sys/netinet6/raw_ip6.c:508
rip6_send_wrapper() at netbsd:rip6_send_wrapper+0x413 rip6_send sys/netinet6/raw_ip6.c:907 [inline]
rip6_send_wrapper() at netbsd:rip6_send_wrapper+0x413 sys/netinet6/raw_ip6.c:986
sosend() at netbsd:sosend+0x426c
soo_write() at netbsd:soo_write+0x105 sys/kern/sys_socket.c:126
dofilewrite() at netbsd:dofilewrite+0x360 sys/kern/sys_generic.c:352
sys_write() at netbsd:sys_write+0x259 sys/kern/sys_generic.c:320

sys_syscall() at netbsd:sys_syscall+0x2ac sy_call sys/sys/syscallvar.h:65 [inline]
sys_syscall() at netbsd:sys_syscall+0x2ac sys/kern/sys_syscall.c:90

syscall() at netbsd:syscall+0x576 sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x576 sys/arch/x86/x86/syscall.c:137
--- syscall (number 4 via SYS_syscall) ---
netbsd:syscall+0x576:
Panic string: MSan: Uninitialized Variable 'dummy1' From ip6_output()

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT

829 829 2 0 0 ffff938013528140 syz-executor3231
1244 1244 2 0 0 ffff938013455980 syz-executor3231
1243 1243 2 0 0 ffff938013455540 syz-executor3231
1240 1240 2 0 0 ffff938013455100 syz-executor3231
1078 1078 2 0 0 ffff938012cb9940 syz-executor3231
1241 1241 2 0 0 ffff938012cb9500 syz-executor3231
1222 1222 2 0 0 ffff938012cb90c0 syz-executor3231
930 > 930 7 1 0 ffff938012bf7900 syz-executor3231
991 991 3 1 180 ffff938012bf74c0 syz-executor3231 nanoslp
1248 1248 2 0 0 ffff938012bf7080 syz-executor3231
1105 1105 3 1 180 ffff93801234c2c0 syz-executor3231 nanoslp
1229 1229 3 0 180 ffff93801231fb00 syz-executor3231 nanoslp
1114 1114 3 0 40180 ffff93801231f6c0 sshd select
1106 1106 3 1 180 ffff93801231f280 getty nanoslp
941 941 3 1 180 ffff93801252f300 getty nanoslp
1223 1223 3 1 180 ffff938012284ac0 getty nanoslp
1196 1196 3 1 180 ffff9380121e6200 getty ttyraw
1111 1111 3 0 180 ffff938012bc68c0 sshd select
958 958 3 0 180 ffff938012bc6480 powerd kqueue
810 810 3 0 180 ffff93801255e780 syslogd kqueue
747 747 3 0 180 ffff93801234c700 dhcpcd poll
748 748 3 0 180 ffff93801252fb80 dhcpcd poll
745 745 3 1 180 ffff93801255ebc0 dhcpcd poll
487 487 3 0 180 ffff93801234cb40 dhcpcd poll
292 292 3 1 180 ffff93801255e340 dhcpcd poll
485 485 3 0 180 ffff93801252f740 dhcpcd poll
1 1 3 0 180 ffff938011e61100 init wait
0 687 3 0 200 ffff938012bc6040 physiod physiod
0 851 3 1 200 ffff9380121e6640 poolthread pooljob
0 195 3 0 200 ffff938012284680 pooldrain pooldrain
0 196 3 0 200 ffff938012284240 ioflush syncer
0 194 3 1 200 ffff9380121e6a80 pgdaemon pgdaemon
0 167 3 0 200 ffff9380121b6a40 usb7 usbevt
0 171 3 0 200 ffff9380121b6600 usb6 usbevt
0 169 3 0 200 ffff9380121b61c0 usb5 usbevt
0 168 3 0 200 ffff93801212aa00 usb4 usbevt
0 166 3 0 200 ffff93801212a5c0 usb3 usbevt
0 165 3 0 200 ffff93801212a180 usb2 usbevt
0 31 3 0 200 ffff93801207a9c0 usb1 usbevt
0 63 3 0 200 ffff93801207a580 usb0 usbevt
0 126 3 0 200 ffff93801207a140 usbtask-dr usbtsk
0 125 3 1 200 ffff938011e61980 usbtask-hc usbtsk
0 124 3 0 200 ffff9380103e2b00 swwreboot swwreboot
0 123 3 0 200 ffff938011e61540 npfgc0 npfgcw
0 122 3 0 200 ffff938011e56940 rt_free rt_free
0 121 3 0 200 ffff938011e56500 unpgc unpgc
0 120 3 0 200 ffff938011e560c0 key_timehandler key_timehandler
0 119 3 1 200 ffff938011e50900 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 ffff938011e504c0 icmp6_wqinput/0 icmp6_wqinput
0 > 117 7 0 200 ffff938011e50080 nd6_timer
0 116 3 1 200 ffff938011cdc8c0 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 ffff938011cdc480 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 ffff938011cdc040 carp_wqinput/1 carp_wqinput
0 113 3 0 200 ffff938011cd8b80 carp_wqinput/0 carp_wqinput
0 112 3 1 200 ffff938011cd8740 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 ffff938011cdbbc0 icmp_wqinput/0 icmp_wqinput
0 110 3 0 200 ffff938011cdb340 rt_timer rt_timer
0 109 3 0 200 ffff938011cdb780 vmem_rehash vmem_rehash
0 100 3 0 200 ffff938011cd8300 entbutler entropy
0 99 3 0 200 ffff9380117cfb40 viomb balloon
0 98 3 1 200 ffff9380117cf700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 ffff9380117cf2c0 vioif0_txrx/0 vioif0_txrx
0 30 3 0 200 ffff9380103e26c0 scsibus0 sccomp
0 29 3 0 200 ffff9380103e2280 pms0 pmsreset
0 28 3 1 200 ffff9380103c9ac0 xcall/1 xcall
0 27 1 1 200 ffff9380103c9680 softser/1
0 26 1 1 200 ffff9380103c9240 softclk/1
0 25 1 1 200 ffff9380103c5a80 softbio/1
0 24 1 1 200 ffff9380103c5640 softnet/1
0 23 1 1 201 ffff9380103c5200 idle/1
0 22 3 0 200 ffff93800f1e1a40 lnxsyswq lnxsyswq
0 21 3 1 200 ffff93800f1e1600 lnxubdwq lnxubdwq
0 20 3 1 200 ffff93800f1e11c0 lnxpwrwq lnxpwrwq
0 19 3 0 200 ffff93800f1dfa00 lnxlngwq lnxlngwq
0 18 3 1 200 ffff93800f1df5c0 lnxhipwq lnxhipwq
0 17 3 1 200 ffff93800f1df180 lnxrcugc lnxrcugc
0 16 3 0 200 ffff93800f1d99c0 sysmon smtaskq
0 15 3 1 200 ffff93800f1d9580 pmfsuspend pmfsuspend
0 14 3 0 200 ffff93800f1d9140 pmfevent pmfevent
0 13 3 0 200 ffff93800f1d7980 sopendfree sopendfr
0 12 3 0 200 ffff93800f1d7540 ifwdog ifwdog
0 11 3 1 200 ffff93800f1d7100 iflnkst iflnkst
0 10 3 0 200 ffff93800f1cc940 nfssilly nfssilly
0 9 3 0 200 ffff93800f1cc500 pooldisp pooldisp
0 8 3 0 200 ffff93800f1cc0c0 modunload mod_unld
0 7 3 0 200 ffff93800ebd8900 xcall/0 xcall
0 6 1 0 200 ffff93800ebd84c0 softser/0
0 > 5 7 0 200 ffff93800ebd8080 softclk/0
0 4 1 0 200 ffff93800ebd78c0 softbio/0
0 3 1 0 200 ffff93800ebd7480 softnet/0
0 2 1 0 201 ffff93800ebd7040 idle/0

0 0 3 0 200 ffffffff8686e280 swapper uvm
[Locks tracked through LWPs]

****** LWP 1241.1241 (syz-executor3231) @ 0xffff938012cb9500, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:pmap_ctor+0xc0 sys/arch/x86/x86/pmap.c:2872)

lock address : ffff938012bf2700

type : sleep/adaptive
initialized : netbsd:pmap_ctor+0xc0
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffff938012cb9500 last held: 0xffff938012cb9500
last locked* : netbsd:pmap_enter_ma+0x11ce
unlocked : netbsd:pmap_enter_ma+0x6f3f

owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 1222.1222 (syz-executor3231) @ 0xffff938012cb90c0, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:pmap_ctor+0xc0 sys/arch/x86/x86/pmap.c:2872)

lock address : ffff938012bf2540

type : sleep/adaptive
initialized : netbsd:pmap_ctor+0xc0
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffff938012cb90c0 last held: 0xffff938012cb90c0

last locked* : netbsd:pmap_enter_ma+0x11ce
unlocked : netbsd:pmap_extract+0x72d

owner field : 0xffff938012cb90c0 wait/spin: 0/0

Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:pmap_ctor+0xd6 sys/arch/x86/x86/pmap.c:2873)
lock address : ffff938012bf2548

type : sleep/adaptive
initialized : netbsd:pmap_ctor+0xd6
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffff938012cb90c0 last held: 0xffff938012cb90c0

last locked* : netbsd:pmap_enter_ma+0x1580
unlocked : netbsd:pmap_enter_ma+0x19f2

owner/count : 0xffff938012cb90c0 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 930.930 (syz-executor3231) @ 0xffff938012bf7900, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:soinit+0x4c2 sys/kern/uipc_socket.c:460)

lock address : ffff93800ebc7780

type : sleep/adaptive
initialized : netbsd:soinit+0x4c2
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1

relevant lwp : 0xffff938012bf7900 last held: 0xffff938012bf7900

last locked* : netbsd:sosend+0x2c67
unlocked : netbsd:sosend+0x1a31

owner field : 0xffff938012bf7900 wait/spin: 0/0

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 1248.1248 (syz-executor3231) @ 0xffff938012bf7080, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:pmap_ctor+0xc0 sys/arch/x86/x86/pmap.c:2872)

lock address : ffff938011e5fe00

type : sleep/adaptive
initialized : netbsd:pmap_ctor+0xc0
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffff938012bf7080 last held: 0xffff938012bf7080

last locked* : netbsd:pmap_enter_ma+0x11ce
unlocked : netbsd:pmap_extract+0x72d

owner field : 0xffff938012bf7080 wait/spin: 0/0

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 748.748 (dhcpcd) @ 0xffff93801252fb80, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffff93801252fb80 last held: 000000000000000000